# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=645 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 646 --- ## [Is there a solution to get a sum equal to value of multiple field from elasticsearch data](https://discuss.elastic.co/t/is-there-a-solution-to-get-a-sum-equal-to-value-of-multiple-field-from-elasticsearch-data/303490)
**Author:** [@abderrahmen\_fekih](https://discuss.elastic.co/u/abderrahmen_fekih)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 12:10pm UTC](https://discuss.elastic.co/t/is-there-a-solution-to-get-a-sum-equal-to-value-of-multiple-field-from-elasticsearch-data/303490 "2022-04-28T12:10:56Z")
I have an Elasticsearch data (ingredients list). I want to get exactly 4 ingredients where the sum of protein equal to 70 { "\_index" : "sample\_ingredients", "\_id" : "C\_cH-X8BaYOrJWCswgP-", "\_score" : 1.0, … --- ## [Indices stats store values seem not coherent](https://discuss.elastic.co/t/indices-stats-store-values-seem-not-coherent/303507)
**Author:** [@juliana\_cg](https://discuss.elastic.co/u/juliana_cg)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 11:56am UTC](https://discuss.elastic.co/t/indices-stats-store-values-seem-not-coherent/303507 "2022-04-28T11:56:34Z")
Hello, i've been using the /\_stats endpoint to recover the size of my indices, however it seems that the values are not the same between GET /\_stats/store?expand\_wildcards=all and GET /\_stats?expand\_wildcards=all, i'm o… --- ## [Kibana - DIscover - Issue "indexing is not supported on a read-only engine"](https://discuss.elastic.co/t/kibana-discover-issue-indexing-is-not-supported-on-a-read-only-engine/303389)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 6\ **Last updated:** [April 28, 2022, 10:51am UTC](https://discuss.elastic.co/t/kibana-discover-issue-indexing-is-not-supported-on-a-read-only-engine/303389 "2022-04-28T10:51:34Z")
Hi, I have an issue with KIbana Disocver module. I cannot search in my indices. The error I see is : "indexing is not supported on a read-only engine". All my indices are with status green. I tried running the followin… --- ## [Importing and querying against a list](https://discuss.elastic.co/t/importing-and-querying-against-a-list/301896)
**Author:** [@chin1](https://discuss.elastic.co/u/chin1)\ **Replies:** 1\ **Last updated:** [April 28, 2022, 10:35am UTC](https://discuss.elastic.co/t/importing-and-querying-against-a-list/301896 "2022-04-28T10:35:09Z")
Hey, i'm trying to query against a large list, so apposed to copying and pasting data in KQL, and running something user: ("name","name2","name3") Is there away of importing that list and making it into a variable? the… --- ## [How to compare two aggregations (Apr 2022)](https://discuss.elastic.co/t/how-to-compare-two-aggregations-apr-2022/303480)
**Author:** [@jurisn](https://discuss.elastic.co/u/jurisn)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/how-to-compare-two-aggregations-apr-2022/303480 "2022-04-28T08:39:24Z")
Three years ago I asked the question: How to compare two aggregations Hi, I have list for 24 hour period: PC1 PC2 PC3 PC4 I have list for 1 hour period: PC3 PC4 as result I will receive such list: PC1 PC2 Do… --- ## [Kibana dashboard with "message" filter as a user input](https://discuss.elastic.co/t/kibana-dashboard-with-message-filter-as-a-user-input/303408)
**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/kibana-dashboard-with-message-filter-as-a-user-input/303408 "2022-04-28T08:39:32Z")
Hi! I am in the process of setting up Filebeat-based monitoring of our Kubernetes workloads' logs. For starters, I want to have a simple page where devs and PMs can go to to view the logs ingested from our deployments. I… --- ## [Ruby Script to rename fields base on a dictionary](https://discuss.elastic.co/t/ruby-script-to-rename-fields-base-on-a-dictionary/303413)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 4\ **Last updated:** [April 28, 2022, 8:23am UTC](https://discuss.elastic.co/t/ruby-script-to-rename-fields-base-on-a-dictionary/303413 "2022-04-28T08:23:27Z")
Hello, we use in a logstash pipeline an external ruby script which contains several methods to process logfiles. now we want to add a new method to rename all top level fields of a document based on a hashtable. I hav… --- ## [Access to elasticsearch host from kibana in other host](https://discuss.elastic.co/t/access-to-elasticsearch-host-from-kibana-in-other-host/303353)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 8\ **Last updated:** [April 28, 2022, 7:43am UTC](https://discuss.elastic.co/t/access-to-elasticsearch-host-from-kibana-in-other-host/303353 "2022-04-28T07:43:09Z")
hi I can't access to Elasticsearch host from kibana host , i tested this command and it not work this cmd : curl -XGET es-ip-or-hostname:9200/ , the response of the command : kibana@kibana:~$ curl -XGET 172.19.14.67:9… --- ## [Issue with multiple instances of the same token](https://discuss.elastic.co/t/issue-with-multiple-instances-of-the-same-token/303467)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 6:43am UTC](https://discuss.elastic.co/t/issue-with-multiple-instances-of-the-same-token/303467 "2022-04-28T06:43:34Z")
I am getting a token multiple times after the analysis process. I am using the pattern token filter and using different regexes with different instances of token filter on the same input string. In some cases, I'm gettin… --- ## [Term Aggregation on sorted data](https://discuss.elastic.co/t/term-aggregation-on-sorted-data/303361)
**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 6:36am UTC](https://discuss.elastic.co/t/term-aggregation-on-sorted-data/303361 "2022-04-28T06:36:58Z")
Hi, i want to run some term aggregations on sorted data and i want these changes to be reflected inside the buckets. Suppose i have an order\_id field inside my document. I query over the index with size 0, while sort m… --- ## [High CPU, search intensive indices, course of action?](https://discuss.elastic.co/t/high-cpu-search-intensive-indices-course-of-action/303431)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 6:15am UTC](https://discuss.elastic.co/t/high-cpu-search-intensive-indices-course-of-action/303431 "2022-04-28T06:15:22Z")
I have a 7.17 cluster with 6 data nodes. There's a website using this ES cluster with a dashboard that customers are constantly querying... It has data for the last 2 months exceeding 300 GB in only 2 indices (2 pri, 1 … --- ## [Match two tags in same time (not one at the time)](https://discuss.elastic.co/t/match-two-tags-in-same-time-not-one-at-the-time/303438)
**Author:** [@eugenci](https://discuss.elastic.co/u/eugenci)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 4:05am UTC](https://discuss.elastic.co/t/match-two-tags-in-same-time-not-one-at-the-time/303438 "2022-04-28T04:05:20Z")
I folders index with following mapping: { "mappings": { "\_doc": { "properties": { "tags": { "type": "nested", "properties": { "bg\_color": { "type": "keyw… --- ## [如何将data节点中的node目录（包含源数据）恢复至新的es集群中。](https://discuss.elastic.co/t/data-node-es/303455)
**Author:** [@joh-zhang](https://discuss.elastic.co/u/joh-zhang)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 3:02am UTC](https://discuss.elastic.co/t/data-node-es/303455 "2022-04-28T03:02:27Z")
我用ECK（Elasticsearch7.7.0）部署了3个master节点，3个data节点。由于特殊原因，现在我只有3个data节点的node目录中的数据，我应该如何恢复至新的集群中？ 我尝试使用将3个node目录分别存储在新建的3个master节点的data目录中，但是master节点启动时报错如图 我应该如何操作？ --- ## [Kibana HeatMap Layer not displaying](https://discuss.elastic.co/t/kibana-heatmap-layer-not-displaying/303288)
**Author:** [@Alessandro\_Agnello](https://discuss.elastic.co/u/Alessandro_Agnello)\ **Replies:** 4\ **Last updated:** [April 27, 2022, 10:55pm UTC](https://discuss.elastic.co/t/kibana-heatmap-layer-not-displaying/303288 "2022-04-27T22:55:49Z")
I have tried with version 8.1.2 and upgraded to 8.1.3, I cannot get any heat maps to work. I do have it working for Documents Layer type without any problems. Thanks --- ## [How to send data Weblogic exporter data to logstash](https://discuss.elastic.co/t/how-to-send-data-weblogic-exporter-data-to-logstash/303399)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 10:28pm UTC](https://discuss.elastic.co/t/how-to-send-data-weblogic-exporter-data-to-logstash/303399 "2022-04-27T22:28:43Z")
Hello team, We need to send data from Weblogic exporter to logstash is there any wat to send data to logstash. We don't want to send data directly to Elasticsearch. --- ## [Elastic Search v7.17.1 Alias Filtering Performance Issues](https://discuss.elastic.co/t/elastic-search-v7-17-1-alias-filtering-performance-issues/303443)
**Author:** [@mma1](https://discuss.elastic.co/u/mma1)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 9:53pm UTC](https://discuss.elastic.co/t/elastic-search-v7-17-1-alias-filtering-performance-issues/303443 "2022-04-27T21:53:28Z")
Hello, I have recently started using alias filtering with our application and have seen some performance issues. I am using elastic v7.17.1 on a 12 node cluster. The alias looks like the following (the array in terms c… --- ## [Multiple clusters in elastic search](https://discuss.elastic.co/t/multiple-clusters-in-elastic-search/303383)
**Author:** [@sairaj\_dessai](https://discuss.elastic.co/u/sairaj_dessai)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 9:43pm UTC](https://discuss.elastic.co/t/multiple-clusters-in-elastic-search/303383 "2022-04-27T21:43:01Z")
How to create multiple clusters in a single windows machine. Also how to insert , select , update , delete records from multiple clusters. As of now I tried to run 2 Elasticsearch on single server and changed yaml file s… --- ## [Getting permission denied error after changing data directory for logstash](https://discuss.elastic.co/t/getting-permission-denied-error-after-changing-data-directory-for-logstash/303426)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 8\ **Last updated:** [April 27, 2022, 6:43pm UTC](https://discuss.elastic.co/t/getting-permission-denied-error-after-changing-data-directory-for-logstash/303426 "2022-04-27T18:43:29Z")
Hi Team, I am getting permission denied error after changing path.data and path.logs in logstash to new path. Same issue is happening for kibana. However for Elasticsearch it is working, i can see elasticsearch folder… --- ## [Parse xml entry with logstash and create a new field with the data](https://discuss.elastic.co/t/parse-xml-entry-with-logstash-and-create-a-new-field-with-the-data/302262)
**Author:** [@Rohit\_Goel1](https://discuss.elastic.co/u/Rohit_Goel1)\ **Replies:** 32\ **Last updated:** [April 27, 2022, 5:52pm UTC](https://discuss.elastic.co/t/parse-xml-entry-with-logstash-and-create-a-new-field-with-the-data/302262 "2022-04-27T17:52:13Z")
I need to parse below xml file with logstash and filter out status and create a new field with its value. below is the sample xml file: \ \ \SUCCESS\ \ I… --- ## [Ngram behavior vs wildcard field type](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762)
**Author:** [@maratusa](https://discuss.elastic.co/u/maratusa)\ **Replies:** 7\ **Last updated:** [April 27, 2022, 4:45pm UTC](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762 "2022-04-27T16:45:33Z")
Hi, Please help me understand n-gram and wildcard field type behaviors. I am working on an application that offers a search by phone number. It will be a contain search. e.g. search for phone number containing "234890"… --- ## [Logstash Deprecation log JSON Format](https://discuss.elastic.co/t/logstash-deprecation-log-json-format/303155)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 4:14pm UTC](https://discuss.elastic.co/t/logstash-deprecation-log-json-format/303155 "2022-04-27T16:14:08Z")
Is it possible to configure the deprecation logs of Logstash as JSON entries? log.format: json works fine for the 'normal' logs, but not for deprecation ones. I've checked log4j2.properties and it seems that some kind … --- ## [Split document into multiple documents](https://discuss.elastic.co/t/split-document-into-multiple-documents/303305)
**Author:** [@ciavam](https://discuss.elastic.co/u/ciavam)\ **Replies:** 12\ **Last updated:** [April 27, 2022, 3:47pm UTC](https://discuss.elastic.co/t/split-document-into-multiple-documents/303305 "2022-04-27T15:47:16Z")
Hello, Through the logstash code I was able to get a result like: {field0 = value field1 = \[value1\_field1; value1\_field1\] field2 = \[value1\_field2; value2\_field2\] } Is it possible through logstash to go to what is w… --- ## [Logstash split filter does not work with match\_only\_text type](https://discuss.elastic.co/t/logstash-split-filter-does-not-work-with-match-only-text-type/303357)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 2:56pm UTC](https://discuss.elastic.co/t/logstash-split-filter-does-not-work-with-match-only-text-type/303357 "2022-04-27T14:56:18Z")
Dear Community, We use heartbeat to collect http response from some services. The response format is a JSON array and the array is returned in the http.request.body.content field and http.request.body.content.text field… --- ## [Best practices on generating queries with SDK vs storing queries as files](https://discuss.elastic.co/t/best-practices-on-generating-queries-with-sdk-vs-storing-queries-as-files/303328)
**Author:** [@darrenoc3](https://discuss.elastic.co/u/darrenoc3)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 2:05pm UTC](https://discuss.elastic.co/t/best-practices-on-generating-queries-with-sdk-vs-storing-queries-as-files/303328 "2022-04-27T14:05:24Z")
Hi there, I was wondering what the communities opinion was on best practices for generating queries in a complex application. For our date histogram queries we have tried both: Store DSL queries as text files, use str… --- ## [Default values for missing fields](https://discuss.elastic.co/t/default-values-for-missing-fields/303333)
**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\ **Replies:** 6\ **Last updated:** [April 27, 2022, 1:47pm UTC](https://discuss.elastic.co/t/default-values-for-missing-fields/303333 "2022-04-27T13:47:00Z")
Can I create a field in a mapping that will be indexed with some default value if that field is not present in the document being indexed? In other words, if I have a mapping with the field {"Rating": "integer"}, and th… --- ## [Parse Mcafee audit log file with Logstash](https://discuss.elastic.co/t/parse-mcafee-audit-log-file-with-logstash/302946)
**Author:** [@Xor44](https://discuss.elastic.co/u/Xor44)\ **Replies:** 4\ **Last updated:** [April 27, 2022, 12:46pm UTC](https://discuss.elastic.co/t/parse-mcafee-audit-log-file-with-logstash/302946 "2022-04-27T12:46:59Z")
Hi Folks , I need your help to find a right way to parse this non-structured file \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ Timestamp : 19/Apr/2022:05:50:02.771 +0200 User … --- ## [Flattened fields with query\_string and wildcards](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400)
**Author:** [@dor](https://discuss.elastic.co/u/dor)\ **Replies:** 0\ **Last updated:** [April 27, 2022, 12:29pm UTC](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400 "2022-04-27T12:29:46Z")
Hi, I'm using Elasticsearch 8, and I'm having weird behaviors with flattened fields and query strings with wildcards. Let's have this test index: PUT test\_index { "mappings": { "properties": { "flattened\_f… --- ## [Performance issue in record insertion in elastic search on upgrading to ElasticSearch version from 7.1.1 to 7.16.3 in linux](https://discuss.elastic.co/t/performance-issue-in-record-insertion-in-elastic-search-on-upgrading-to-elasticsearch-version-from-7-1-1-to-7-16-3-in-linux/303394)
**Author:** [@rahul.kushwah](https://discuss.elastic.co/u/rahul.kushwah)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 11:11am UTC](https://discuss.elastic.co/t/performance-issue-in-record-insertion-in-elastic-search-on-upgrading-to-elasticsearch-version-from-7-1-1-to-7-16-3-in-linux/303394 "2022-04-27T11:11:49Z")
We are using default transport client (i.e transport client 7.16.3) for communication with Elasticsearch. Previously on Elasticsearch 7.1.1 it takes around 3 sec to insert 5000 records but after upgrading it to Elasticse… --- ## [Can I transform rows into columns or vice versa with the help of pivot transformation](https://discuss.elastic.co/t/can-i-transform-rows-into-columns-or-vice-versa-with-the-help-of-pivot-transformation/302617)
**Author:** [@sukhwinder\_kumar](https://discuss.elastic.co/u/sukhwinder_kumar)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 10:46am UTC](https://discuss.elastic.co/t/can-i-transform-rows-into-columns-or-vice-versa-with-the-help-of-pivot-transformation/302617 "2022-04-27T10:46:40Z")
Can I transform rows into columns or vice versa with the help of pivot transformations or with the help of any other visualization. Attached image is my requirement: --- ## [Uniqueness in filter aggregations](https://discuss.elastic.co/t/uniqueness-in-filter-aggregations/303272)
**Author:** [@Lucass](https://discuss.elastic.co/u/Lucass)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 10:12am UTC](https://discuss.elastic.co/t/uniqueness-in-filter-aggregations/303272 "2022-04-27T10:12:41Z")
Hi, kindly ask you ideas to solve following: imagine having users filling personal surveys, eg. filling what they usually smoke. Each user can decide one or more possibilities from the checklist survey. On results, I am… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=644) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=646)