# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=731 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 732 --- ## [Analyze two-words phrase as one token](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305)
**Author:** [@Talya](https://discuss.elastic.co/u/Talya)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 8:59am UTC](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305 "2022-01-16T08:59:04Z")
When dealing with phrases consisting with two words, I want to index them as one token and not retrieve them when the search matching one of those words. For ex. I have document with "French Toast", when someone is searc… --- ## [Partial matching against dates](https://discuss.elastic.co/t/partial-matching-against-dates/294190)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 7:45pm UTC](https://discuss.elastic.co/t/partial-matching-against-dates/294190 "2022-01-15T19:45:03Z")
I'm sure this is is easy but couldn't find a simple answer. If I have 'XXXX2000' in an index and I search '01022000' how can I accept that as a partial match, whereby the more of the word that matches the higher the sco… --- ## [Kibana Does Not Load from mobile network](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 6\ **Last updated:** [January 15, 2022, 7:06pm UTC](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968 "2022-01-15T19:06:47Z")
Kibana version 7.14 Elastic version 7.14 Kibana loads properly and fully using WIFI networks. However, when using mobile networks, Kibana does not load. The loading appears to stop at the log-in screen. The log-in scre… --- ## [How to check if a field has any subfields](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482)
**Author:** [@dantamsdb](https://discuss.elastic.co/u/dantamsdb)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482 "2022-01-15T17:03:08Z")
I get input that sometimes looks like this: { "baz": { "foo": "bar", "data": {} } } sometimes it looks like this: { "baz": { "foo": "bar", "data": { "fizz": "buzz", "fizzy": "buzzy" … --- ## [org.elasticsearch.action.get.MultiGetShardResponse extremly high "\[took\]" value](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434)
**Author:** [@trocade](https://discuss.elastic.co/u/trocade)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 4:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434 "2022-01-15T16:45:44Z")
So we have some problems that something in our environment is causing our nodes to run out of HEAP memory (30GB per node) While looking at this I found these messages: server es\_server\[1635\]: {"type": "server", "timest… --- ## [How to transform data through ruby code](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 12\ **Last updated:** [January 15, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913 "2022-01-15T13:10:07Z")
Hi I need a help for extract data from one of filed from CSV. the header for these data presents like below: EPS\_BEARER\_ID-BEARER\_QCI-ARP\_PL-ARP\_PCI-ARP\_PVI-GBR\_UL-GBR\_DL-BEARER\_CAUSE-DEFAULT\_BEARER\_ID 5-7-undefin… --- ## [Service wont run with "Environment Variable"](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 11:49am UTC](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124 "2022-01-15T11:49:26Z")
Hi dears, I have a secure cluster with some services such as Kibana, Metricbeat, APM-server, Elastic Agent and... In their config.yml I have user/pass for Elasticsearch: output: elasticsearch hosts: "\[my\_hosts\]" usern… --- ## [Elasticsearch cluster UUID is not available after version upgrade](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441)
**Author:** [@learning\_fun](https://discuss.elastic.co/u/learning_fun)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441 "2022-01-15T10:27:13Z")
Hi There, we use only Elasticsearch and upgraded it from 6.7.0 to 7.16.2 . we run the Elasticsearch in kubernetes and after version upgrade, cluster UUID is not available. We have one master node , 3 data nodes, 1 coord… --- ## [Why Elasticsearch Mapping Explosion can causes OOM？](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371 "2022-01-15T10:25:45Z")
I think index Mapping is a large JSON object. Even if each node sends a copy, the memory usage is limited. Why does it cause OOM? --- ## [Inconsistent node role display for the same configuration](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449)
**Author:** [@co88liwan](https://discuss.elastic.co/u/co88liwan)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449 "2022-01-15T10:24:26Z")
Elasticsearch version: 7.16.2 In our case, all data nodes in elasticsearch.yml file are configured as node.roles: \[data\_hot, data\_content, \] But running cat node in dev tool we see inconsistent node role display, some… --- ## [Strict terms query (exclusive)](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 7:51am UTC](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471 "2022-01-15T07:51:50Z")
Hi, I am looking to make a terms query but strictly containing specified terms and excluding all docs that do not contain only those terms (eg. docs matches if I have strictly and only A and B =\> no doc matches if I have… --- ## [FSCrawler : Retry connection, when it gets failure](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 15\ **Last updated:** [January 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488 "2022-01-15T05:41:26Z")
Hi David, Please share your suggestions. We are using fscrawler-2.4.. When we startup.. getting below connection error.. is there way to look (or) wait for connection success, then continue the process within the \_sett… --- ## [No email activation message](https://discuss.elastic.co/t/no-email-activation-message/294454)
**Author:** [@noactivation](https://discuss.elastic.co/u/noactivation)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 4:24am UTC](https://discuss.elastic.co/t/no-email-activation-message/294454 "2022-01-15T04:24:39Z")
Signing up with my work address, no email activation message after ten minutes, clicked the 'resend' link, still no activation message. $WORK email is handled through gmail. Signed up with a personal account at a tiny I… --- ## [Logstash config change suggestion](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 4:08am UTC](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466 "2022-01-15T04:08:40Z")
Currently, if you run multiple pipelines, you have to list them in pipelines.yml. In some cases, it would be easier to have a pipelines.d directory with individual files for each pipeline instead of the single pipelines… --- ## [Show multiple values in same table cell / any other field](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291)
**Author:** [@McCasian](https://discuss.elastic.co/u/McCasian)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 10:16pm UTC](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291 "2022-01-14T22:16:48Z")
Hello everyone, I have to show Total RAM Capacity and Total Ram Capacity WS(Without Spare), and I have this for all other resources (Storage, CPU, etc.). Considering this, I would avoid making a very large table, but ra… --- ## [Histogram Visualization from Prometheus data?](https://discuss.elastic.co/t/histogram-visualization-from-prometheus-data/294457)
**Author:** [@DarkMagus](https://discuss.elastic.co/u/DarkMagus)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 9:39pm UTC](https://discuss.elastic.co/t/histogram-visualization-from-prometheus-data/294457 "2022-01-14T21:39:14Z")
I have some data that's being exported from Prometheus as a histogram object. The data itself is how long a particular job takes to process, so the buckets are in 30 second intervals. I'm getting data from my containe… --- ## [Logstash CSV output opening/closing file bottleneck](https://discuss.elastic.co/t/logstash-csv-output-opening-closing-file-bottleneck/294446)
**Author:** [@tkirui](https://discuss.elastic.co/u/tkirui)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 8:41pm UTC](https://discuss.elastic.co/t/logstash-csv-output-opening-closing-file-bottleneck/294446 "2022-01-14T20:41:48Z")
I am running logstash to parse many files with output to a single CSV file. This is working ok but is taking long with the bottleneck being the opening file/closing file. Im i missing something? Any faster way of doin th… --- ## [Help with Generating PDF Reports](https://discuss.elastic.co/t/help-with-generating-pdf-reports/294407)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:36pm UTC](https://discuss.elastic.co/t/help-with-generating-pdf-reports/294407 "2022-01-14T17:36:18Z")
Hi I have tried to print a PDF report of one of my dashboards but all I keep getting is an error. Max Attempts Reached (3). Queue Timeout. Sometimes, it also pops up \*\*Error Protocol (Page.captureScreenshot: Target clos… --- ## [Read timed out when using Elasticsearch filter in pipeline](https://discuss.elastic.co/t/read-timed-out-when-using-elasticsearch-filter-in-pipeline/294438)
**Author:** [@SamW](https://discuss.elastic.co/u/SamW)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 5:29pm UTC](https://discuss.elastic.co/t/read-timed-out-when-using-elasticsearch-filter-in-pipeline/294438 "2022-01-14T17:29:28Z")
As part of my project's workflow, we have a pipeline which uses the Elasticsearch filter plugin a few times in order to find a set of items which need to be deleted from several indices. This always works perfectly when … --- ## [Logstash Issue: Got response code '401' contacting Elasticsearch at URL 'http://localhost:9200/'](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395)
**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:08pm UTC](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395 "2022-01-14T17:08:34Z")
while trying to run logstash 7.16.3 with this current version of Elasticsearch 8.1.0 . I get the following error. {:url=\>"http://localhost:9200/", :exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResp… --- ## [Best method to get 5 fields from inputs and duplicate in index2](https://discuss.elastic.co/t/best-method-to-get-5-fields-from-inputs-and-duplicate-in-index2/294429)
**Author:** [@aaleman](https://discuss.elastic.co/u/aaleman)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:06pm UTC](https://discuss.elastic.co/t/best-method-to-get-5-fields-from-inputs-and-duplicate-in-index2/294429 "2022-01-14T17:06:32Z")
Hello, I was reading a lot because I want to now: What is the best way that masters recommend to next case?: I have index1 with a lot of fields I need this data into another index to have history, but this index2 jus… --- ## [Using kibana to display apache tomcat log and fetch it continously](https://discuss.elastic.co/t/using-kibana-to-display-apache-tomcat-log-and-fetch-it-continously/294436)
**Author:** [@olisanweze](https://discuss.elastic.co/u/olisanweze)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 4:16pm UTC](https://discuss.elastic.co/t/using-kibana-to-display-apache-tomcat-log-and-fetch-it-continously/294436 "2022-01-14T16:16:22Z")
Hey please can anyone walk me through a process of using kibana to display and organize it's logs (catalina.out file) to be displayed continually without having to fetch the logs myself(automated). --- ## [How to read logs from a Checkpoint Firewall from IPS / IDS Blade](https://discuss.elastic.co/t/how-to-read-logs-from-a-checkpoint-firewall-from-ips-ids-blade/294430)
**Author:** [@duvids](https://discuss.elastic.co/u/duvids)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 4:02pm UTC](https://discuss.elastic.co/t/how-to-read-logs-from-a-checkpoint-firewall-from-ips-ids-blade/294430 "2022-01-14T16:02:57Z")
Hello there, i'm new to Elastic. I'm trying to understand how can i retrieve logs from a Checkpoint firewall more specifically from the Blade IDS/IPS has anyone achieved this or could give some guidance? thank you in adv… --- ## [Failed to add match 'elasticsearch': Invalid argument](https://discuss.elastic.co/t/failed-to-add-match-elasticsearch-invalid-argument/294388)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:17pm UTC](https://discuss.elastic.co/t/failed-to-add-match-elasticsearch-invalid-argument/294388 "2022-01-14T15:17:20Z")
Hi, I have the following issue after upgrading ELasticsearch from 6.8.22 to 7.14.2. When trying to start the service: Job for elasticsearch.service failed because the control process exited with error code. See "syste… --- ## [Search by word order](https://discuss.elastic.co/t/search-by-word-order/294188)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:11pm UTC](https://discuss.elastic.co/t/search-by-word-order/294188 "2022-01-14T15:11:38Z")
Hello I have a product search system. Now I want the system to be such that if the user searches for the word "washing machine", priority will be given to products whose name starts with "washing machine" and displays t… --- ## [Logstash sql\_last\_value not compare correctly](https://discuss.elastic.co/t/logstash-sql-last-value-not-compare-correctly/294398)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-sql-last-value-not-compare-correctly/294398 "2022-01-14T15:02:29Z")
Hi, I am using logstash to insert data from sql to index. I am using a date column compare\_date to compare for sql\_last\_value field. When I am running, logstash automatically reduce 1 day from compare\_date. Suppose … --- ## [Filebeat module dashboard](https://discuss.elastic.co/t/filebeat-module-dashboard/294309)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:23pm UTC](https://discuss.elastic.co/t/filebeat-module-dashboard/294309 "2022-01-13T18:23:53Z")
I have created a dashboard for filebeat nginx module. I'm not able to change the index pattern for the dahboard. It defaults to filebeat-\*. As i'm shipping the logs for other application in the same server i have already… --- ## [Organize search by priority with/without spaces](https://discuss.elastic.co/t/organize-search-by-priority-with-without-spaces/294276)
**Author:** [@gagasusrock](https://discuss.elastic.co/u/gagasusrock)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 2:05pm UTC](https://discuss.elastic.co/t/organize-search-by-priority-with-without-spaces/294276 "2022-01-14T14:05:42Z")
Hello. I am using elastic 7.15.0. I want to organize search by priority with/without spaces. What does it mean? query - "surf coff" I want to see records contains or startswith "surf coff" - (SURF COFFEE, SURF CAFFE… --- ## [Need help on setting up OpenId with Elasticsearch](https://discuss.elastic.co/t/need-help-on-setting-up-openid-with-elasticsearch/294418)
**Author:** [@Prav](https://discuss.elastic.co/u/Prav)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:59pm UTC](https://discuss.elastic.co/t/need-help-on-setting-up-openid-with-elasticsearch/294418 "2022-01-14T13:59:00Z")
Getting below error while setting up SSO using OPenId in OKTA application for Elasticsearch Error: https://infracloudpothuspraveen.okta.com/oauth2/v1/authorize?idp=0oac6n0h5JCMaNxnU696&client\_id=0oac6mbg7UwfM5VFZ696&re… --- ## [Remove fields - plugin http\_poller\_plugin with json](https://discuss.elastic.co/t/remove-fields-plugin-http-poller-plugin-with-json/294415)
**Author:** [@guilhermealano](https://discuss.elastic.co/u/guilhermealano)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:28pm UTC](https://discuss.elastic.co/t/remove-fields-plugin-http-poller-plugin-with-json/294415 "2022-01-14T13:28:09Z")
Hi, I'm making a request in logstash through http\_poller\_plugin and the data that return in full in json. I'm trying to make a filter to display in the json only the necessary fields. What would be the correct way to c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=730) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=732)