# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=643

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 644

---

## [Function\_score queryでのスコアリング時に単語が分割されてしまう事象について](https://discuss.elastic.co/t/function-score-query/302662)

<div class="topic-metadata">

**Author:** [@Totsuka](https://discuss.elastic.co/u/Totsuka)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 9:02am UTC](https://discuss.elastic.co/t/function-score-query/302662 "2022-05-02T09:02:57Z")

</div>

＜実現したいこと＞ titleフィールドに「消費税」という単語が含まれていれば、5ポイント、 questionフィールドに「消費税」という単語が含まれていれば、4ポイント、 answerフィールドに「消費税」という単語が含まれていれば、3ポイントを付与し、 その合計をスコアリングの値とし("score\_mode": "sum")、スコアの降順で表示したいです。 ※Elasticsearchのデフォルトのスコアリングは無視する設…

---

## [Need help in file.conf for Logstash - Salesforce pipeline](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720)

<div class="topic-metadata">

**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 8:21am UTC](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720 "2022-05-02T08:21:57Z")

</div>

I'm trying to configure a pipeline to send Salesforce's data to Elasticsearch using Logstash. I created the a Connected App and flagged the OAuth 2.0 and i've put the callback url. Now, i have the client secret and the…

---

## [How do I setup a cluster with secure enabled? (Version 8)](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 7:49am UTC](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579 "2022-05-02T07:49:48Z")

</div>

Hello! When I try to connect a new to the cluster, I am only getting this message: \[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[node-1\] client did not trust this server's certificate, closing connection Netty4TcpCh…

---

## [Upgrade ELK from 6.8.9 to latest stable version](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 6:41am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703 "2022-05-02T06:41:02Z")

</div>

What to consider when upgrading ELK from 6.8.9 to latest stable version? I understand that I should be doing a rolling upgrade from 6.8.9 to 7.16.3 and from 7.16.3 to 8.x How can I reindex the existing indices? I also…

---

## [Kibana dashboard](https://discuss.elastic.co/t/kibana-dashboard/303704)

<div class="topic-metadata">

**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 6:35am UTC](https://discuss.elastic.co/t/kibana-dashboard/303704 "2022-05-02T06:35:15Z")

</div>

How to create a replica of stack monitoring in dashboard? like current counts, memory & cpu usage?

---

## [Explore elastic observability](https://discuss.elastic.co/t/explore-elastic-observability/303702)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 5:28am UTC](https://discuss.elastic.co/t/explore-elastic-observability/303702 "2022-05-02T05:28:28Z")

</div>

We ELK cluster running on 6.8.9 and planning to upgrade soon to latest stable version. Does the latest stable version have elastic observability features? How is it different than ELK stack I have? ELK stack I have - …

---

## [Problem to connect kibana with elasticsearch](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 1:55am UTC](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581 "2022-05-02T01:55:11Z")

</div>

Hello , i have two virtuel machines in vmware ESXI , I installed Elasticsearch in the first machine and kibana without Elasticsearch in the second machine and i try to cennect them this is my Elasticsearch.yml and kiban…

---

## [Alert 설정 관련 문의 드립니다](https://discuss.elastic.co/t/alert/303693)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 1:14am UTC](https://discuss.elastic.co/t/alert/303693 "2022-05-02T01:14:29Z")

</div>

안녕하세요 늘 많은 도움을 받고 있습니다. 몇가지 궁금한게 있는데 답변 부탁드립니다. Watcher 사용 종료된다고 들었는데, 아예 기능 자체를 못쓰게 되는건가요? 아니면 사용은 가능한데 기술지원 같은게 안되는 것인가요? filter에서 host.name 한개를 지정하면 해당 호스트의 수치가 적용 (여기서는 87.5%)되어서, 그 수치 기준으로 알람 설정을 할 수 있는데, …

---

## [ESM tool migration](https://discuss.elastic.co/t/esm-tool-migration/303521)

<div class="topic-metadata">

**Author:** [@iliyab09](https://discuss.elastic.co/u/iliyab09)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/esm-tool-migration/303521 "2022-05-02T00:12:22Z")

</div>

Hello I have couple questions about migration, can't find the information nowhere. When the migration is in progress do I need to stop read write to my old cluster? When the migration is done I can just connect to…

---

## [Pod metrics Error in Metricbeat Kubernetes Overview ECS](https://discuss.elastic.co/t/pod-metrics-error-in-metricbeat-kubernetes-overview-ecs/303626)

<div class="topic-metadata">

**Author:** [@ktony](https://discuss.elastic.co/u/ktony)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 5:44pm UTC](https://discuss.elastic.co/t/pod-metrics-error-in-metricbeat-kubernetes-overview-ecs/303626 "2022-04-29T17:44:07Z")

</div>

Hello, I am currently trying to get our Kubernetes metrics using metricbeat deployed on ECK. We are getting the metrics for the Kubernetes cluster, however, the metrics we are getting is incorrect. We are seeing the iss…

---

## [How to get IP address of collectd client](https://discuss.elastic.co/t/how-to-get-ip-address-of-collectd-client/303674)

<div class="topic-metadata">

**Author:** [@Rostam](https://discuss.elastic.co/u/Rostam)\
**Replies:** 4\
**Last updated:** [May 1, 2022, 5:25pm UTC](https://discuss.elastic.co/t/how-to-get-ip-address-of-collectd-client/303674 "2022-05-01T17:25:36Z")

</div>

Hello I have configured collectd on all my devices (running Linux). The configuration is: /etc/collectd.conf LoadPlugin cpu LoadPlugin interface LoadPlugin df \<Plugin network\> server "10.2.9.35" "5555" /Plugin My l…

---

## [Grokparsefailure ... but it's all working and logs are being parsed...?](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614)

<div class="topic-metadata">

**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\
**Replies:** 7\
**Last updated:** [May 1, 2022, 4:54pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614 "2022-05-01T16:54:29Z")

</div>

I'm seeing pretty much all of my logs in Elastic/Kibana tagged with the following tags: \_grokparsefailure\_sysloginput, \_grokparsefailure, \_geoip\_lookup\_failure Which is odd, as they are being processed just fine. Exam…

---

## [DNS issues with the Lab and Strigo](https://discuss.elastic.co/t/dns-issues-with-the-lab-and-strigo/303541)

<div class="topic-metadata">

**Author:** [@Silverquick](https://discuss.elastic.co/u/Silverquick)\
**Replies:** 2\
**Last updated:** [May 1, 2022, 7:00am UTC](https://discuss.elastic.co/t/dns-issues-with-the-lab-and-strigo/303541 "2022-05-01T07:00:59Z")

</div>

When going into the Labs it initiates Strigo. Then you are supposed to take the DNS address and paste it into another web browser to go there. It works the first time you do it but after that if you stop and go back in…

---

## [Number of vCPUS vs Number of Shards](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [April 30, 2022, 11:11pm UTC](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651 "2022-04-30T23:11:32Z")

</div>

I have an on-premise server with Elasticsearch 6.8 that was created years ago, and at the time I only had one vCPU and now I have 4 vCPU on that server. It happens that when I mapped the indexes I defined the code below…

---

## [Please translate this aggregation into elasticsearch](https://discuss.elastic.co/t/please-translate-this-aggregation-into-elasticsearch/303611)

<div class="topic-metadata">

**Author:** [@UchihaYuki](https://discuss.elastic.co/u/UchihaYuki)\
**Replies:** 1\
**Last updated:** [April 30, 2022, 1:55am UTC](https://discuss.elastic.co/t/please-translate-this-aggregation-into-elasticsearch/303611 "2022-04-30T01:55:52Z")

</div>

I just can't understand what does this aggregation in TSVB do exactly. I think if anybody can translate it into Elasticsearch query DSL, then I can understand it. Thank you so much in advance.

---

## [Combine different fields for percentile](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634)

<div class="topic-metadata">

**Author:** [@sweeper42](https://discuss.elastic.co/u/sweeper42)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 9:50pm UTC](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634 "2022-04-29T21:50:03Z")

</div>

I have a situation where I have documents with multiple histogram fields. I would sometimes like to get the percentile of combined fields. Here is a sample mapping PUT /t1 { "settings": { "index": { "number…

---

## [Kibana error](https://discuss.elastic.co/t/kibana-error/303570)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 8:17pm UTC](https://discuss.elastic.co/t/kibana-error/303570 "2022-04-29T20:17:29Z")

</div>

anyone know this error?? getting it again and again. kibana starts working for a while and goes back to this error

---

## [Logstash to elastic search TCP connection error](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624)

<div class="topic-metadata">

**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\
**Replies:** 5\
**Last updated:** [April 29, 2022, 7:33pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624 "2022-04-29T19:33:52Z")

</div>

Hi, I'm trying to connect to Elasticsearch using logstash and running into an TCP connection error. Below is my input plugin for logstash input { elasticsearch { hosts =\> \["https://esipAddress:9200"\] index =\> "tes…

---

## [Change path cluster](https://discuss.elastic.co/t/change-path-cluster/303610)

<div class="topic-metadata">

**Author:** [@bekk777](https://discuss.elastic.co/u/bekk777)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 3:39pm UTC](https://discuss.elastic.co/t/change-path-cluster/303610 "2022-04-29T15:39:14Z")

</div>

Hi everyone. Just one question about editing disk usage on Elasticsearch. On the existing server ELK, we added a newly attached disk and want to change disk usage, is it possible to use this new attached disk path or n…

---

## [Update by query, values from another index](https://discuss.elastic.co/t/update-by-query-values-from-another-index/303608)

<div class="topic-metadata">

**Author:** [@save4elastic](https://discuss.elastic.co/u/save4elastic)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 3:34pm UTC](https://discuss.elastic.co/t/update-by-query-values-from-another-index/303608 "2022-04-29T15:34:45Z")

</div>

I have an index with values like FIRST\_INDEX (10 billion entries) { id: 123, car: "Volvo" }, { id: 124, car: "Vaneo" } The goal is to fill the above FIRST\_INDEX with values from the SECOND\_INDEX. SECOND\_INDEX (1 milli…

---

## [Logstash-filter-http Post Body error](https://discuss.elastic.co/t/logstash-filter-http-post-body-error/303532)

<div class="topic-metadata">

**Author:** [@zurb3](https://discuss.elastic.co/u/zurb3)\
**Replies:** 9\
**Last updated:** [April 29, 2022, 3:24pm UTC](https://discuss.elastic.co/t/logstash-filter-http-post-body-error/303532 "2022-04-29T15:24:49Z")

</div>

I'm trying to get some kind of data enrichment using an API call to Abuse.ch as documents come into the pipeline. The logstash-filter-http plugin seems like the right answer, however it isn't working for what I need it t…

---

## [Grok Filter..so close... yet so far](https://discuss.elastic.co/t/grok-filter-so-close-yet-so-far/303592)

<div class="topic-metadata">

**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\
**Replies:** 2\
**Last updated:** [April 29, 2022, 2:13pm UTC](https://discuss.elastic.co/t/grok-filter-so-close-yet-so-far/303592 "2022-04-29T14:13:16Z")

</div>

I'm using this website to debug my Grok code: https://grokdebug.herokuapp.com/ Two different logs I'm trying to ingest: 1: \<134\>1 1651225979.448642514 EMEA\_ISP ip\_flow\_end src=192.168.15.6 dst=8.8.4.4 protocol=udp spo…

---

## [Can I add document data in aggregated group?](https://discuss.elastic.co/t/can-i-add-document-data-in-aggregated-group/303571)

<div class="topic-metadata">

**Author:** [@marauderbro](https://discuss.elastic.co/u/marauderbro)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 12:08pm UTC](https://discuss.elastic.co/t/can-i-add-document-data-in-aggregated-group/303571 "2022-04-29T12:08:00Z")

</div>

I'm totally new to Elasticsearch, And I'm now logging our product view log to serve "popular product" to client side. Our logic is below.... User clicks product Client request product data to server When serving produ…

---

## [I want Message values as feild using logstash](https://discuss.elastic.co/t/i-want-message-values-as-feild-using-logstash/303519)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 9\
**Last updated:** [April 29, 2022, 11:59am UTC](https://discuss.elastic.co/t/i-want-message-values-as-feild-using-logstash/303519 "2022-04-29T11:59:32Z")

</div>

Hello Every One Following is my message I want to split message value and add as field for filter and visulize how can I achive that please help any one message url=&type=click&date\_time=2013-01-01+12:00:00&initiated…

---

## [Rename added agents from fleet](https://discuss.elastic.co/t/rename-added-agents-from-fleet/303268)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 2\
**Last updated:** [April 29, 2022, 11:35am UTC](https://discuss.elastic.co/t/rename-added-agents-from-fleet/303268 "2022-04-29T11:35:03Z")

</div>

how can I rename this agent host (aarsh-isg-virtualbox) to something else?

---

## [Discover, missing Date Filter and Process Chart](https://discuss.elastic.co/t/discover-missing-date-filter-and-process-chart/303589)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 11:13am UTC](https://discuss.elastic.co/t/discover-missing-date-filter-and-process-chart/303589 "2022-04-29T11:13:37Z")

</div>

Hey, I created a new index with alias, to be able to add ILM Policy. In my Data View in discover, I am not able to see the Show dates Filter and the Process chart. (highligthed red) I am getting data in. How can I get…

---

## [Confused on LS outputs and data not going to right index](https://discuss.elastic.co/t/confused-on-ls-outputs-and-data-not-going-to-right-index/303498)

<div class="topic-metadata">

**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\
**Replies:** 4\
**Last updated:** [April 29, 2022, 10:26am UTC](https://discuss.elastic.co/t/confused-on-ls-outputs-and-data-not-going-to-right-index/303498 "2022-04-29T10:26:51Z")

</div>

Hey there, I'm not understanding the "output" section of my config for Logstash \> Elasticsearch. I've been following this guide: How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 22.04 | Digi…

---

## [Splitting json file](https://discuss.elastic.co/t/splitting-json-file/303488)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 10\
**Last updated:** [April 29, 2022, 8:35am UTC](https://discuss.elastic.co/t/splitting-json-file/303488 "2022-04-29T08:35:43Z")

</div>

Hi I am totally new in logstash, and i am having some issues when splitting a json file. My file is super easy { "data": \[ { "name": "name1" }, { "name": "name2" …

---

## [Analysis with Lens Table return statusCode: 413](https://discuss.elastic.co/t/analysis-with-lens-table-return-statuscode-413/302926)

<div class="topic-metadata">

**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\
**Replies:** 4\
**Last updated:** [April 29, 2022, 7:18am UTC](https://discuss.elastic.co/t/analysis-with-lens-table-return-statuscode-413/302926 "2022-04-29T07:18:33Z")

</div>

I have an enviroment with Kibana v7.14.1 e I created an analysis with lens component that return the error {statusCode: 413, error: "Request Entity Too Large",…} error: "Request Entity Too Large" message: "Payload co…

---

## [List of users and roles](https://discuss.elastic.co/t/list-of-users-and-roles/303036)

<div class="topic-metadata">

**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\
**Replies:** 2\
**Last updated:** [April 29, 2022, 7:17am UTC](https://discuss.elastic.co/t/list-of-users-and-roles/303036 "2022-04-29T07:17:54Z")

</div>

Hi, I would like to know if there is a way to view/export the list of users and their roles. I use an environment with Kibana v 7.14.1

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=642)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=644)
