# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=718 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 719 --- ## [Query terms with dash in string?](https://discuss.elastic.co/t/query-terms-with-dash-in-string/295780)
**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\ **Replies:** 3\ **Last updated:** [January 30, 2022, 4:01pm UTC](https://discuss.elastic.co/t/query-terms-with-dash-in-string/295780 "2022-01-30T16:01:38Z")
GET /\_search { "query": { "terms": { "user.id": \[ "kimchy", "elkbee-test" \], } } } Result will only include kimchy, because I guess the dash is interpretet as a bool operator. How to fix this? --- ## [Synthetics failing silently?](https://discuss.elastic.co/t/synthetics-failing-silently/295443)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 10\ **Last updated:** [January 30, 2022, 3:43pm UTC](https://discuss.elastic.co/t/synthetics-failing-silently/295443 "2022-01-30T15:43:21Z")
I have a set-up that works perfectly when I run it locally (docker-compose), but is failing without any logs when running on the server. It's a synthetics test/journey. Configuration is as follows: mounted /monitors fo… --- ## [Replacement of CircleBuilder/PolygonBuilder](https://discuss.elastic.co/t/replacement-of-circlebuilder-polygonbuilder/295676)
**Author:** [@UglyBarnacle](https://discuss.elastic.co/u/UglyBarnacle)\ **Replies:** 3\ **Last updated:** [January 30, 2022, 1:31am UTC](https://discuss.elastic.co/t/replacement-of-circlebuilder-polygonbuilder/295676 "2022-01-30T01:31:00Z")
Since the circle was not supported anymore (I think now it is, atleast on query execution), we approximated a circle with the PolygonBuilder from the main Elasticsearch package. Elasticsearch 7.16 did a cleanup, removin… --- ## [Filebeat send json data to Elasticsearch & Use file name as index](https://discuss.elastic.co/t/filebeat-send-json-data-to-elasticsearch-use-file-name-as-index/295763)
**Author:** [@Suat\_Bey](https://discuss.elastic.co/u/Suat_Bey)\ **Replies:** 0\ **Last updated:** [January 29, 2022, 8:51pm UTC](https://discuss.elastic.co/t/filebeat-send-json-data-to-elasticsearch-use-file-name-as-index/295763 "2022-01-29T20:51:51Z")
Is it possible to create a Elasticsearch index using a file name. I have the json file named as daily regex, and want to send this data day by day to elsaticsearch. On the Elasticsearch index I want to use file same as i… --- ## [Issues with apply filters](https://discuss.elastic.co/t/issues-with-apply-filters/295761)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [January 29, 2022, 7:51pm UTC](https://discuss.elastic.co/t/issues-with-apply-filters/295761 "2022-01-29T19:51:11Z")
Hello, I upgraded logstash to the latest version 7.16.3 and I have issues with apply required filters, Maybe this is related with specific ports closed, As output I'm receiving below: ./logstash-plugin install logsta… --- ## [Kibana 7.16.3 issues with connecting to elasticsearch](https://discuss.elastic.co/t/kibana-7-16-3-issues-with-connecting-to-elasticsearch/295715)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 2\ **Last updated:** [January 29, 2022, 6:17pm UTC](https://discuss.elastic.co/t/kibana-7-16-3-issues-with-connecting-to-elasticsearch/295715 "2022-01-29T18:17:11Z")
Hello, today I upgraded ES to the latest version and kibana, I see in logs that ES cannot be detected: "message":"Error \[ProductNotSupportedSecurityError\]: The client is unable to verify that the server is Elasticsea… --- ## [Date histogram aggregation issue for arrays fields](https://discuss.elastic.co/t/date-histogram-aggregation-issue-for-arrays-fields/294965)
**Author:** [@Marek\_Siwiec](https://discuss.elastic.co/u/Marek_Siwiec)\ **Replies:** 1\ **Last updated:** [January 29, 2022, 5:13pm UTC](https://discuss.elastic.co/t/date-histogram-aggregation-issue-for-arrays-fields/294965 "2022-01-29T17:13:57Z")
Hello! I trying to update ES from 7.10.2 to 7.16.3 and I encounter an issue with Date histogram aggregation. When I have a document with a date field as an array with date aggregation by month on that field, then I expe… --- ## [Help on script score query with filter script](https://discuss.elastic.co/t/help-on-script-score-query-with-filter-script/295751)
**Author:** [@scharom16](https://discuss.elastic.co/u/scharom16)\ **Replies:** 7\ **Last updated:** [January 29, 2022, 3:30pm UTC](https://discuss.elastic.co/t/help-on-script-score-query-with-filter-script/295751 "2022-01-29T15:30:57Z")
Hi elastic community, I need some guidance on the following query. I am using the Python Elasticsearch client and when executing the query it returns a 'search\_phase\_execution\_exception' with no further guidance. Can yo… --- ## [Write data that have failed in Logstash filter transforms to file](https://discuss.elastic.co/t/write-data-that-have-failed-in-logstash-filter-transforms-to-file/295649)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 4\ **Last updated:** [January 29, 2022, 12:38pm UTC](https://discuss.elastic.co/t/write-data-that-have-failed-in-logstash-filter-transforms-to-file/295649 "2022-01-29T12:38:33Z")
My logstash config has a filter performing several transformations. But I see many records failing to get processed because of incorrect format/encoding in source data. I want Logstash to write these failed inputs to a … --- ## [Minimum number of replica shard ? (do we need 2 replica for recovery?)](https://discuss.elastic.co/t/minimum-number-of-replica-shard-do-we-need-2-replica-for-recovery/295741)
**Author:** [@dan\_kim](https://discuss.elastic.co/u/dan_kim)\ **Replies:** 2\ **Last updated:** [January 29, 2022, 7:54am UTC](https://discuss.elastic.co/t/minimum-number-of-replica-shard-do-we-need-2-replica-for-recovery/295741 "2022-01-29T07:54:12Z")
Hello ! our company is trying to building a new Elasticsearch for service and We are studying ES for a proper service . And I have a question about replica shard. Should we set our replica shard more than 2? Here is… --- ## [Include Friend relations in user search](https://discuss.elastic.co/t/include-friend-relations-in-user-search/295632)
**Author:** [@JonasLevin](https://discuss.elastic.co/u/JonasLevin)\ **Replies:** 1\ **Last updated:** [January 29, 2022, 3:17am UTC](https://discuss.elastic.co/t/include-friend-relations-in-user-search/295632 "2022-01-29T03:17:45Z")
I'm working on creating a search feature for a social network like Mobile App. Users can follow each other and search by username, lastname or firstname. Currently we are just indexing username, lastname and firstname i… --- ## [Configure Filebeat to input a specific logs of my app pods in AKS](https://discuss.elastic.co/t/configure-filebeat-to-input-a-specific-logs-of-my-app-pods-in-aks/295737)
**Author:** [@amgmdz](https://discuss.elastic.co/u/amgmdz)\ **Replies:** 0\ **Last updated:** [January 29, 2022, 12:37am UTC](https://discuss.elastic.co/t/configure-filebeat-to-input-a-specific-logs-of-my-app-pods-in-aks/295737 "2022-01-29T00:37:52Z")
I have an application in a kubernetes (AKS) this app generates logs in /logs/\*.log, my problem is that I do not know what configuration to do in Filebeat (this is deployed on AKS nodes) to recognize the logs and send the… --- ## [rollupSearch with new Java Api Client](https://discuss.elastic.co/t/rollupsearch-with-new-java-api-client/295736)
**Author:** [@rfox](https://discuss.elastic.co/u/rfox)\ **Replies:** 0\ **Last updated:** [January 29, 2022, 12:32am UTC](https://discuss.elastic.co/t/rollupsearch-with-new-java-api-client/295736 "2022-01-29T00:32:45Z")
I am struggling to use the new rollupSearch API. I am trying to map this query: GET count\_rollup/\_rollup\_search { "size": 0, "aggregations": { "timeline": { "date\_histogram": { "field": "datetime"… --- ## [Master not Discovered yet](https://discuss.elastic.co/t/master-not-discovered-yet/295699)
**Author:** [@auasad](https://discuss.elastic.co/u/auasad)\ **Replies:** 3\ **Last updated:** [January 28, 2022, 11:01pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet/295699 "2022-01-28T23:01:40Z")
Hello community, I am facing an issue, I have a cluster consisting 3 nodes in NZ(Master-Data), one node in PK(Data Node) everything is up and running over the public IPs. Now the issue comes when I try to join my new IR… --- ## [Search in Array Field](https://discuss.elastic.co/t/search-in-array-field/295732)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 8:36pm UTC](https://discuss.elastic.co/t/search-in-array-field/295732 "2022-01-28T20:36:11Z")
Hi Team, I want to enable search on array field but only want to retrieve the value from an array that matches the search query. Example Document 1 - \[A,B\] Document 2 - \[A,C\] Below is the Query { "query": { "… --- ## [Wildcard for source.ip field](https://discuss.elastic.co/t/wildcard-for-source-ip-field/295613)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 7:04pm UTC](https://discuss.elastic.co/t/wildcard-for-source-ip-field/295613 "2022-01-28T19:04:51Z")
Hi there, I would like to know how to fix this search (if is possible of course): (winlog.channel:"Security" AND (winlog.event\_id:"4624" AND winlog.event\_data.LogonType:"10") AND (NOT (source.ip:(10.\* OR 192.168.\* OR 1… --- ## [FS Crawler 2.4 on Apache Log4j2 Remote Code Execution (RCE) Vulnerability](https://discuss.elastic.co/t/fs-crawler-2-4-on-apache-log4j2-remote-code-execution-rce-vulnerability/291649)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 16\ **Last updated:** [January 28, 2022, 6:14pm UTC](https://discuss.elastic.co/t/fs-crawler-2-4-on-apache-log4j2-remote-code-execution-rce-vulnerability/291649 "2022-01-28T18:14:21Z")
Hi David, recently we have received about Apache Log4j2 Remote Code Execution (RCE) Vulnerability. I am using FS Crawler 2.4 version along with ELK 6.8.14, we planned to do remediation plan for log4j in ELK. We would l… --- ## [Unified highlighter snippet fragmenter issues](https://discuss.elastic.co/t/unified-highlighter-snippet-fragmenter-issues/295603)
**Author:** [@fsouptes](https://discuss.elastic.co/u/fsouptes)\ **Replies:** 3\ **Last updated:** [January 28, 2022, 6:12pm UTC](https://discuss.elastic.co/t/unified-highlighter-snippet-fragmenter-issues/295603 "2022-01-28T18:12:52Z")
Hello, We are knowing some issues with how snippets are splitted with unified highlighter. We use Elasticsearch in 7.16 Some snippets are very shorts, sometimes the snippet is inconsistent or is only a repetition of u… --- ## [How to list all index patterns using DevTools](https://discuss.elastic.co/t/how-to-list-all-index-patterns-using-devtools/295725)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 5:15pm UTC](https://discuss.elastic.co/t/how-to-list-all-index-patterns-using-devtools/295725 "2022-01-28T17:15:36Z")
Hi, Is there a GET command that I can run in Kibana's dev tools console that will list all my index patterns and their IDs? I'm trying to delete some index patterns but I believe I need to delete them by ID. I'm trying… --- ## [Create dashboard mixing data from indexes](https://discuss.elastic.co/t/create-dashboard-mixing-data-from-indexes/295716)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 4:19pm UTC](https://discuss.elastic.co/t/create-dashboard-mixing-data-from-indexes/295716 "2022-01-28T16:19:44Z")
Hi I would like to know how i can mix data from different indexes in the same visualisation (if it is even possible). Imagine I have an index with some information, as name, dob, NI number etc, and another index with d… --- ## [LogStash::Json::ParserError: Unexpected end-of-input within/between Object entries for curly brace inside string](https://discuss.elastic.co/t/logstash-unexpected-end-of-input-within-between-object-entries-for-curly-brace-inside-string/295659)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 4:05pm UTC](https://discuss.elastic.co/t/logstash-unexpected-end-of-input-within-between-object-entries-for-curly-brace-inside-string/295659 "2022-01-28T16:05:28Z")
When String contains opening curly braces '{' logstash failed to parse that JSON. As per JSON doc, we don't need to escape curly brace. then how can I parse this type of JSON through logstash? JSON file: { "DESCRIPTIO… --- ## [Save Menu disappears from embedded iframe after create visualization click](https://discuss.elastic.co/t/save-menu-disappears-from-embedded-iframe-after-create-visualization-click/295713)
**Author:** [@Agus\_Roca](https://discuss.elastic.co/u/Agus_Roca)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 2:07pm UTC](https://discuss.elastic.co/t/save-menu-disappears-from-embedded-iframe-after-create-visualization-click/295713 "2022-01-28T14:07:13Z")
Hi fellows! I shared a dashboard with the top menu enabled so that i can create visualizations and save them while embedded in my site.. This works ok on load, but when i hit create visualization, the Save Menu dissappe… --- ## [Filter to send only system shortnames](https://discuss.elastic.co/t/filter-to-send-only-system-shortnames/295704)
**Author:** [@StuWhitby](https://discuss.elastic.co/u/StuWhitby)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 1:17pm UTC](https://discuss.elastic.co/t/filter-to-send-only-system-shortnames/295704 "2022-01-28T13:17:27Z")
Hi, I'm new to Logstash, and attempting to update our company's configuration which currently sends syslog data to Splunk. I've searched on how to standardise the system naming, which may have the shortname or the long… --- ## [Sharing Dashboard via iFrame fails to login](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 1:03pm UTC](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639 "2022-01-28T13:03:35Z")
Hello All, I was looking at trying to share access to my Dashboard via the provided iFrame code, and when I place the iFrame into my html page it its my kibana instance but... it fails to let me log in and see my dashbo… --- ## [Kibana export CSV from discovery - err:Unsupported content-type of false specified by job output](https://discuss.elastic.co/t/kibana-export-csv-from-discovery-err-unsupported-content-type-of-false-specified-by-job-output/295705)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 12:59pm UTC](https://discuss.elastic.co/t/kibana-export-csv-from-discovery-err-unsupported-content-type-of-false-specified-by-job-output/295705 "2022-01-28T12:59:19Z")
Elastic/Kibana version 7.13.3 I am trying to export data from Elasticsearch using discover-\>save as-\>share-\>csv reports -\> generate CSV But I receive messge report generated and when I try to download it it provides … --- ## [Pie Chart - Field name is not Visible](https://discuss.elastic.co/t/pie-chart-field-name-is-not-visible/295691)
**Author:** [@Susendiran](https://discuss.elastic.co/u/Susendiran)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 12:47pm UTC](https://discuss.elastic.co/t/pie-chart-field-name-is-not-visible/295691 "2022-01-28T12:47:14Z")
Hello Team, We are facing one issue in Pie-chart visualization which is not showing a field named - "Hospitality". The amount/quantity is visible in pie-chart view but the field name alone not visible while viewing(not … --- ## [Настройка winlogbeat для контроллеров домена](https://discuss.elastic.co/t/winlogbeat/294112)
**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 12:16pm UTC](https://discuss.elastic.co/t/winlogbeat/294112 "2022-01-28T12:16:55Z")
Привет. Подскажите как правильно настроить. Есть сервер srvlog, он собирает все логи с контроллеров домена (forward event). Как настроить WinLogbeat для отправки логов, полученных этим сервером? Моя конфигурация сейчас… --- ## [Using CoOrdinated nodes in ES cluster](https://discuss.elastic.co/t/using-coordinated-nodes-in-es-cluster/295608)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 11:42am UTC](https://discuss.elastic.co/t/using-coordinated-nodes-in-es-cluster/295608 "2022-01-28T11:42:12Z")
I have 6 nodes cluster where all nodes marked with "mdi". Now I added 3 more Co-Ordinated nodes and configured with master=false, data=false, ingest=false. Now those nodes shows role as "-". As per doc this indicates th… --- ## [About Synonym toke filter](https://discuss.elastic.co/t/about-synonym-toke-filter/294501)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 10:32am UTC](https://discuss.elastic.co/t/about-synonym-toke-filter/294501 "2022-01-28T10:32:49Z")
I am using synonym token filter in my mapping but it has a property called synonyms\_path. PUT /\_template/ise { "index\_patterns" : \["log-ise-\*"\], "settings": { "index.lifecycle.name":"ise\_policy", "ind… --- ## [Automatic heap sizing](https://discuss.elastic.co/t/automatic-heap-sizing/293386)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [January 28, 2022, 10:03am UTC](https://discuss.elastic.co/t/automatic-heap-sizing/293386 "2022-01-28T10:03:46Z")
I'm testing the automatic heap size feature in 7.16.2. In a 12G VM I was specifying a 4G heap, I removed that setting, restarted Elasticsearch and it used 1G for heap. That seams small to me. Does it grow the heap if … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=717) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=719)