# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=733 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 734 --- ## [Is it possible to connect Logstash 7.16 with Elasticsearch "8.1.0-SNAPSHOT"](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-7-16-with-elasticsearch-8-1-0-snapshot/294272)
**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-7-16-with-elasticsearch-8-1-0-snapshot/294272 "2022-01-13T13:55:30Z")
is it possible to connect Logstash 7.16 with Elasticsearch "8.1.0-SNAPSHOT" --- ## [How to enable cache in logstash](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126 "2022-01-13T13:29:33Z")
Hello, I currently have an elk cluster composed as follows: Beats= is the agent installed in linux machine and send logs to Logstash Logstash= filter logs and send logs to elk -Beats --\> Logstash --\> Elasticsearch m… --- ## [Script Query - Returning multiple values on aggregation](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 7\ **Last updated:** [January 13, 2022, 1:19pm UTC](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095 "2022-01-13T13:19:49Z")
Aggregation Result "aggregations": { "649": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "ALLOGENE THERAPEUTICS", … --- ## [Search DATE between 2 DATE points in data](https://discuss.elastic.co/t/search-date-between-2-date-points-in-data/294265)
**Author:** [@Dvesters](https://discuss.elastic.co/u/Dvesters)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:14pm UTC](https://discuss.elastic.co/t/search-date-between-2-date-points-in-data/294265 "2022-01-13T13:14:45Z")
Hi all, I have data from an HR system I have the following dates available for absenteeism (also for holidays) SickLeave\_StartDate 01-01-2021 SickLeave\_EndDate 03-03-2021 So this person is sick from January 1 to Marc… --- ## [Execute sql queries in elassandra \[elastic search\]](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260)
**Author:** [@kvaishnavi97](https://discuss.elastic.co/u/kvaishnavi97)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:06pm UTC](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260 "2022-01-13T13:06:12Z")
Hi, I am using Elassandra \[Combination of Elasticsearch + Cassandra\], I want to execute sql queries in Elasticsearch, But I am getting one exception. I gone inside the elassandra pod, tried this cmd \`curl -XPOST http:/… --- ## [How to find empty values in a kibana query](https://discuss.elastic.co/t/how-to-find-empty-values-in-a-kibana-query/293642)
**Author:** [@Nijanthan](https://discuss.elastic.co/u/Nijanthan)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 1:05pm UTC](https://discuss.elastic.co/t/how-to-find-empty-values-in-a-kibana-query/293642 "2022-01-13T13:05:50Z")
I'm getting the logs with statusCode 200 and empty statuscodes , I need to find the logs with empty statuscode I've tried using statusCode:" " but it didn't worked Hint: The statuscode for success can be written as sta… --- ## [FSCrawler 2.9 -supported versions of Elastic](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 11:07am UTC](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256 "2022-01-13T11:07:34Z")
We are using FSCrawler 2.7 with Elastics 7.10.2. Does the new version of FSCrawler 2.9 support Elastics 7.10.2 or do we have to upgrade to 7.16.2? --- ## [Filter single panel using URL parameters](https://discuss.elastic.co/t/filter-single-panel-using-url-parameters/294257)
**Author:** [@vleo](https://discuss.elastic.co/u/vleo)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 10:47am UTC](https://discuss.elastic.co/t/filter-single-panel-using-url-parameters/294257 "2022-01-13T10:47:31Z")
Hi, I'm working on a Kibana dashboard that will be build dynamically based on URL that will depend on some previous user action. The idea is to create the dashboard based on filters. I already know that we can apply fi… --- ## [Elasticsearch - Merge date histogram aggregation](https://discuss.elastic.co/t/elasticsearch-merge-date-histogram-aggregation/294228)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-merge-date-histogram-aggregation/294228 "2022-01-13T10:30:50Z")
Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "date\_histogram" … --- ## [Linux(centos)+Windows Cluster](https://discuss.elastic.co/t/linux-centos-windows-cluster/294025)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 8:13am UTC](https://discuss.elastic.co/t/linux-centos-windows-cluster/294025 "2022-01-13T08:13:47Z")
Hello, Can one have an Cluster with one Windows and one Linux VM Node? I only find information about migrating from one to another. (A yes or no is sufficient, I got the following error which makes me think it may not … --- ## [How do i build spell engine for prefix based search as you type product](https://discuss.elastic.co/t/how-do-i-build-spell-engine-for-prefix-based-search-as-you-type-product/294253)
**Author:** [@Bhagwati\_Malav](https://discuss.elastic.co/u/Bhagwati_Malav)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 9:49am UTC](https://discuss.elastic.co/t/how-do-i-build-spell-engine-for-prefix-based-search-as-you-type-product/294253 "2022-01-13T09:49:07Z")
Hi Need input from community on building spell engine system for search as you type product. Currently running a search as you type product which uses edge ngram approach internally. Have turned off fuzziness setting as… --- ## [Return results with match\_phrase if document count is greater than 1](https://discuss.elastic.co/t/return-results-with-match-phrase-if-document-count-is-greater-than-1/294143)
**Author:** [@liam.gallagher](https://discuss.elastic.co/u/liam.gallagher)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 9:42am UTC](https://discuss.elastic.co/t/return-results-with-match-phrase-if-document-count-is-greater-than-1/294143 "2022-01-13T09:42:58Z")
Good morning, Is it possible to use match\_phrase to count the occurrence of the phrase per document and only return results if the phrase count in the document in greater than 1? { "query": { "bool": { "sho… --- ## [Pull data from another elasticsearch cluster using logstash](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 9:16am UTC](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946 "2022-01-13T09:16:21Z")
Hi folks, I have a use case where I need to pull data from an external Elasticsearch cluster with the following Limitation: It is not allowed to open a conection to my internal elastic cluster (due to compliance regulat… --- ## [Outdated dynamic field mapping](https://discuss.elastic.co/t/outdated-dynamic-field-mapping/294151)
**Author:** [@fede1](https://discuss.elastic.co/u/fede1)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 8:48am UTC](https://discuss.elastic.co/t/outdated-dynamic-field-mapping/294151 "2022-01-13T08:48:41Z")
I have a dynamic field mapping of type X, and when I attempt to index a document with a different type for the same field, I get the following error with a 400 status code, as expected: "type": "mapper\_parsing\_exception… --- ## [How to combine prefix query with synonym filter in Elasticsearch?](https://discuss.elastic.co/t/how-to-combine-prefix-query-with-synonym-filter-in-elasticsearch/294235)
**Author:** [@learningmore](https://discuss.elastic.co/u/learningmore)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 7:26am UTC](https://discuss.elastic.co/t/how-to-combine-prefix-query-with-synonym-filter-in-elasticsearch/294235 "2022-01-13T07:26:18Z")
I'm currently using Elasticsearch 7.16 and came across an issue. Assume that we have the following data: horse mouse chicken rooster duck cow Let's assume the synonym file has the following entries (i.e. rooster and c… --- ## [Can we create a Index life cycle policy with Hot, Warm and Cold phase in a two node cluster(1 data node, 1 master)?](https://discuss.elastic.co/t/can-we-create-a-index-life-cycle-policy-with-hot-warm-and-cold-phase-in-a-two-node-cluster-1-data-node-1-master/294133)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 6:04am UTC](https://discuss.elastic.co/t/can-we-create-a-index-life-cycle-policy-with-hot-warm-and-cold-phase-in-a-two-node-cluster-1-data-node-1-master/294133 "2022-01-13T06:04:58Z")
Can we create an Index life cycle policy with Hot, Warm, and Cold phases in a two-node cluster(1 data node, 1 master)? what can be the architecture of policy and what configurations are required for both Elastic nodes? --- ## [Terrible low performance search despite enough resources](https://discuss.elastic.co/t/terrible-low-performance-search-despite-enough-resources/293992)
**Author:** [@zarmci](https://discuss.elastic.co/u/zarmci)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 5:48am UTC](https://discuss.elastic.co/t/terrible-low-performance-search-despite-enough-resources/293992 "2022-01-13T05:48:18Z")
We have two 3-nodes Elasticsearch cluster. Despite these clusters have approximately similar resources and the indices are quite similar, the speed of search in one of them is tenfold slower than another. We spent a lot … --- ## [I can't ingest time longer than 24 hours](https://discuss.elastic.co/t/i-cant-ingest-time-longer-than-24-hours/294168)
**Author:** [@Eric\_Barreto](https://discuss.elastic.co/u/Eric_Barreto)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 5:44am UTC](https://discuss.elastic.co/t/i-cant-ingest-time-longer-than-24-hours/294168 "2022-01-13T05:44:24Z")
I need to create a dashboard based on a json that will be ingested repeatedly, this json has 2 fields of type time the first field is TA and the second is TT. The value of these fields is represented by HH:mm:ss, but th… --- ## [Missing replica shards](https://discuss.elastic.co/t/missing-replica-shards/294164)
**Author:** [@Latifa\_MASMOUDI](https://discuss.elastic.co/u/Latifa_MASMOUDI)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 5:34am UTC](https://discuss.elastic.co/t/missing-replica-shards/294164 "2022-01-13T05:34:46Z")
hi community i'm a beginner in ELK, so i can't resolve this problem. the Elasticsearch overview show me that are Missing replica shards, also the health is yellow. Also, i uploaded a file to kibana, but it can't vis… --- ## [Percentage in Kibana visualization](https://discuss.elastic.co/t/percentage-in-kibana-visualization/294015)
**Author:** [@Tzlil](https://discuss.elastic.co/u/Tzlil)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:19am UTC](https://discuss.elastic.co/t/percentage-in-kibana-visualization/294015 "2022-01-13T04:19:12Z")
i want to calculate the percentage of "pass" tests i have a scripted filed that return 1 when a test is "pass" at the moment i have a graph that shows the number of tests that ran( pass/fail/warning) how can i change … --- ## [How to calculate the percentage of a metric through JSON?](https://discuss.elastic.co/t/how-to-calculate-the-percentage-of-a-metric-through-json/294157)
**Author:** [@rcmv](https://discuss.elastic.co/u/rcmv)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:09am UTC](https://discuss.elastic.co/t/how-to-calculate-the-percentage-of-a-metric-through-json/294157 "2022-01-13T04:09:47Z")
Hi! I'm new with Elastic so this is most probably an easy question but I would appreciate some help here. I have a dashboard on Kibana where I want to add a vertical bar chart which presents me the results of the tests… --- ## ["Azure Data Explorer" output plugin error](https://discuss.elastic.co/t/azure-data-explorer-output-plugin-error/294197)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 2:45am UTC](https://discuss.elastic.co/t/azure-data-explorer-output-plugin-error/294197 "2022-01-13T02:45:11Z")
Hello All, Using the kusto output plugin for Azure Data explorer I did a successful test with the example as per the documentation below References: Ingest data from Logstash to Azure Data Explorer | Microsoft Docs G… --- ## [How to run script query on logstash](https://discuss.elastic.co/t/how-to-run-script-query-on-logstash/294227)
**Author:** [@mzinboy](https://discuss.elastic.co/u/mzinboy)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 2:24am UTC](https://discuss.elastic.co/t/how-to-run-script-query-on-logstash/294227 "2022-01-13T02:24:13Z")
It doesn't work(logstash 7.15.1). I can't escape single quotes in query field. Elasticsearch input value : input { elasticsearch { hosts =\> \["..."\] index =\> "..." query =\> '{ "query": { "bool": { "… --- ## [Data stream vs index](https://discuss.elastic.co/t/data-stream-vs-index/294202)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 1\ **Last updated:** [January 12, 2022, 10:40pm UTC](https://discuss.elastic.co/t/data-stream-vs-index/294202 "2022-01-12T22:40:45Z")
What are the benefits of using data stream instead of using index for storing data in Elasticsearch. I would like to store continuously generated data. --- ## [Can you manually curl geoip.elastic.co to get geo data?](https://discuss.elastic.co/t/can-you-manually-curl-geoip-elastic-co-to-get-geo-data/294206)
**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 10:07pm UTC](https://discuss.elastic.co/t/can-you-manually-curl-geoip-elastic-co-to-get-geo-data/294206 "2022-01-12T22:07:15Z")
I have an Elasticsearch cluster that does not have internet access for security. According to the documentaiton it is possible to mirror your own geoip endpoint I have a mirror setup, however I'm unable to test if the… --- ## [Create Parent-Child relationship with Logstash](https://discuss.elastic.co/t/create-parent-child-relationship-with-logstash/294198)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 3\ **Last updated:** [January 12, 2022, 8:22pm UTC](https://discuss.elastic.co/t/create-parent-child-relationship-with-logstash/294198 "2022-01-12T20:22:19Z")
Hi Everyone; I need to create a Parent-Chield relationship with Logstash. I created index like this. Here is the mapping I try to create relationship using filter mutate as below picture But I am getting this… --- ## [Auto Refresh Kibana Dashboards](https://discuss.elastic.co/t/auto-refresh-kibana-dashboards/294185)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 7:11pm UTC](https://discuss.elastic.co/t/auto-refresh-kibana-dashboards/294185 "2022-01-12T19:11:17Z")
We have 30-40 Dashboard in Kibana which we use to monitor different applications. The problem is we have to refresh the dashboard frequently to see the latest results. Is there any global settings through which we can au… --- ## [Logstash pipeline filter](https://discuss.elastic.co/t/logstash-pipeline-filter/294018)
**Author:** [@max\_cyril](https://discuss.elastic.co/u/max_cyril)\ **Replies:** 7\ **Last updated:** [January 12, 2022, 6:36pm UTC](https://discuss.elastic.co/t/logstash-pipeline-filter/294018 "2022-01-12T18:36:47Z")
Hi, I am new to ELK and struggling to write my first logstash pipeline. Can anyone help me to write the filter section? Thanks in advance. i want to filter and only output the maximum of completion per users fo… --- ## [I'm seeing too many requests for a write operation on a node when I query it with the thread pool API](https://discuss.elastic.co/t/im-seeing-too-many-requests-for-a-write-operation-on-a-node-when-i-query-it-with-the-thread-pool-api/293208)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 6:18pm UTC](https://discuss.elastic.co/t/im-seeing-too-many-requests-for-a-write-operation-on-a-node-when-i-query-it-with-the-thread-pool-api/293208 "2022-01-12T18:18:42Z")
Hi everyone, I'm seeing too many requests for a write operation on a node when I query it with the thread pool API. On other nodes, this status appears as 0. It seems like write requests come to only one node. How can I… --- ## [Hyphenation decompounder token filter seems to ignore the \`only\_longest\_match\` option](https://discuss.elastic.co/t/hyphenation-decompounder-token-filter-seems-to-ignore-the-only-longest-match-option/294047)
**Author:** [@Jelena\_Malinovic](https://discuss.elastic.co/u/Jelena_Malinovic)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 5:12pm UTC](https://discuss.elastic.co/t/hyphenation-decompounder-token-filter-seems-to-ignore-the-only-longest-match-option/294047 "2022-01-12T17:12:53Z")
Hi everyone, We are trying to improve searches on our website which include compounds words. For that purpose, we are using the token filter hyphenation\_decompounder. During testing, we found out that only\_longest\_match … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=732) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=734)