# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=739 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 740 --- ## [Why i can't search my text](https://discuss.elastic.co/t/why-i-cant-search-my-text/293618)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 6:01am UTC](https://discuss.elastic.co/t/why-i-cant-search-my-text/293618 "2022-01-06T06:01:18Z")
PUT my-index-000001 { "settings":{ "number\_of\_replicas": 0, "analysis":{ "analyzer":{ "my\_analyzer":{ "type":"custom", "tokenizer":"keyword", … --- ## [Pie result is based on number of monitors down and up . What i want is to show on basis of monitors downtime and uptime duration not howm many were down and up monitorss . any idea](https://discuss.elastic.co/t/pie-result-is-based-on-number-of-monitors-down-and-up-what-i-want-is-to-show-on-basis-of-monitors-downtime-and-uptime-duration-not-howm-many-were-down-and-up-monitorss-any-idea/293500)
**Author:** [@Rajesh\_Rai](https://discuss.elastic.co/u/Rajesh_Rai)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 3:30am UTC](https://discuss.elastic.co/t/pie-result-is-based-on-number-of-monitors-down-and-up-what-i-want-is-to-show-on-basis-of-monitors-downtime-and-uptime-duration-not-howm-many-were-down-and-up-monitorss-any-idea/293500 "2022-01-06T03:30:11Z")
--- ## [Click API and result ranking](https://discuss.elastic.co/t/click-api-and-result-ranking/292917)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 11:43pm UTC](https://discuss.elastic.co/t/click-api-and-result-ranking/292917 "2022-01-05T23:43:59Z")
I just wondered if Enterprise search is using some ranking system like tf/idf based on user clicks API , how dose analytics API influence the score of the document ? --- ## [Logstash not send data to Elasticsearch](https://discuss.elastic.co/t/logstash-not-send-data-to-elasticsearch/293554)
**Author:** [@mcoa](https://discuss.elastic.co/u/mcoa)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 9:45pm UTC](https://discuss.elastic.co/t/logstash-not-send-data-to-elasticsearch/293554 "2022-01-05T21:45:00Z")
Hi, I've configured Logstash for send data to Elasticsearch but this not receive data and index not found (i dont have firewall/iptables/selinux.). My config logstash: Input input { file { path =\> "/var/log/zim… --- ## [Unable to Add Data Node to Elasticsearch Cluster](https://discuss.elastic.co/t/unable-to-add-data-node-to-elasticsearch-cluster/292232)
**Author:** [@Jeffrey\_Meurer](https://discuss.elastic.co/u/Jeffrey_Meurer)\ **Replies:** 6\ **Last updated:** [January 5, 2022, 8:41pm UTC](https://discuss.elastic.co/t/unable-to-add-data-node-to-elasticsearch-cluster/292232 "2022-01-05T20:41:00Z")
Hi, I'm having trouble adding another data node to my Master Elasticsearch. Running 7.16.1 Here's the Elasticsearch.yml from the Master: # ---------------------------------- Cluster ----------------------------------- … --- ## [Elasticsearch: Custom Index pattern issue](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570)
**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570 "2022-01-05T17:35:56Z")
Hello, I am unable to create kibana index (@timestamp) when a custom Elasticsearch index is being used. logs are being sent through filebeat, but they are not visible in discover page of kibana, Br, E --- ## [Dec 13th, 2021: \[en\] Accessibility in Kibana](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579)
**Author:** [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579 "2021-12-13T08:00:00Z")
Web Accessibility When was the last time you visited a website and got frustrated because you had trouble using it? Maybe the site was using WebGL technology that your browser didn’t support, you couldn’t read its text d… --- ## [Dec 22nd, 2021 \[KO\] Eland: 데이터 분석을 위한 Python client](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954)
**Author:** [@Jihyun\_Jeong](https://discuss.elastic.co/u/Jihyun_Jeong)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954 "2021-12-22T08:00:48Z")
파이썬(python) 은 데이터 분석을 위한 가장 보편적인 프로그래밍 언어로 자리 잡았습니다. 데이터 분석을 위해 NumPy, Pandas, SciPy, scikit-learn 등 파이썬의 주요 패키지를 주로 사용합니다. 특히, 판다스(Pandas) 는 데이터 분석에 있어서 가장 많이 사용하는 피이썬 라이브러리 중 하나 입니다. 데이터를 분석할 때 NumPy(넘파이), Pandas(판다… --- ## [Importing the index profiles from one environment to another(Index name are different)](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 5:56pm UTC](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769 "2022-01-05T17:56:23Z")
If we want to promote the Dashboards created in dev to upper environments what is the best practice? The index names will be different in upper environments and also possibility of sharing the same Elasticsearch cluster,… --- ## [Reloads search analyzers are unsupported for tokenizer user\_dictionary](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 1:26pm UTC](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546 "2022-01-05T13:26:56Z")
Thesaurus is dynamically loaded but the tokenizer doesn't seem to have a related user\_dictionary, so is there a way to do it? --- ## [Replace document vs update document](https://discuss.elastic.co/t/replace-document-vs-update-document/293549)
**Author:** [@AhmadHamouda](https://discuss.elastic.co/u/AhmadHamouda)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/replace-document-vs-update-document/293549 "2022-01-05T14:28:14Z")
Ill have documents which contain json ex: {id:100, usersIds: \[1,2,54\]} Ill need to update userIds adding some new ids and removing some exist ids My question is it better to replace the whole document or do update oper… --- ## [Installing and Scaling ECE 2.17 The supplied plan format is not supported](https://discuss.elastic.co/t/installing-and-scaling-ece-2-17-the-supplied-plan-format-is-not-supported/291883)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 5\ **Last updated:** [January 5, 2022, 2:27pm UTC](https://discuss.elastic.co/t/installing-and-scaling-ece-2-17-the-supplied-plan-format-is-not-supported/291883 "2022-01-05T14:27:09Z")
I installed ECE in the 3 machines but when I try to create the new cluster I'm getting this error The supplied plan format is not supported Tried with the LAB config but also with default configurations but the error p… --- ## [Copy values from one field to another within a nested object](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478)
**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478 "2022-01-05T14:18:45Z")
I have a document that has the structure with an field object with a nested field internally. The nested field is responsible for storing all interactions that occurred in an internal communication. It happens that I ne… --- ## [Python library for Kibana API?](https://discuss.elastic.co/t/python-library-for-kibana-api/293534)
**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 1:53pm UTC](https://discuss.elastic.co/t/python-library-for-kibana-api/293534 "2022-01-05T13:53:48Z")
Hi i would like to create MaaC, so need features like importing/exporting/deleting objects( visualizations, dashboards, index-patterns, watchers). I know that there is experimental kibana API but is there any library to … --- ## [Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index](https://discuss.elastic.co/t/detection-rule-output-of-a-aggregation-bucket-should-match-with-other-types-of-logs-in-the-same-index/292869)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 1:40pm UTC](https://discuss.elastic.co/t/detection-rule-output-of-a-aggregation-bucket-should-match-with-other-types-of-logs-in-the-same-index/292869 "2022-01-05T13:40:33Z")
Continuing the discussion from Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index: --- ## [How to filter out values in tabel](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535)
**Author:** [@ge3k](https://discuss.elastic.co/u/ge3k)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535 "2022-01-05T13:24:56Z")
Hello, I'm trying to create a table, where there would be @timestamp of event, source IP and count of occurrences when someone tried/succeeded to connect to a specific network port. But I only manage to create a tab… --- ## [Fetch .kibana indices that end with integer](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544 "2022-01-05T13:21:46Z")
Hi everyone I want to only fetch those kibana indices that end with integer like this .kibana\_1, .kibana\_2 etc I know how to fetch all indices that start with .kibana text using following curl command that I have typed… --- ## [Shared views in Inventory Observability \[7.15.2\]](https://discuss.elastic.co/t/shared-views-in-inventory-observability-7-15-2/291991)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 10:08am UTC](https://discuss.elastic.co/t/shared-views-in-inventory-observability-7-15-2/291991 "2022-01-05T10:08:17Z")
Hi, everyone I have created a view in Inventory called Infraestructure in Default space. Does this view only can used by my user? I would like to create a global view, is it possible? is there any way to share it? … --- ## [Cloudwatch Metric stream to Elastic search](https://discuss.elastic.co/t/cloudwatch-metric-stream-to-elastic-search/293506)
**Author:** [@akb\_2021](https://discuss.elastic.co/u/akb_2021)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 8:53am UTC](https://discuss.elastic.co/t/cloudwatch-metric-stream-to-elastic-search/293506 "2022-01-05T08:53:00Z")
My Objective is to build a monitoring system for RDS databases. So I am trying to create Cloudwatch metric stream to Elasticsearch(open search AWS) using kinesis firehose & lambda. The RDS metrics are appearing but Datab… --- ## [System load too high](https://discuss.elastic.co/t/system-load-too-high/293436)
**Author:** [@Davide89](https://discuss.elastic.co/u/Davide89)\ **Replies:** 5\ **Last updated:** [January 5, 2022, 8:41am UTC](https://discuss.elastic.co/t/system-load-too-high/293436 "2022-01-05T08:41:19Z")
I'm working on a VM with a single-node instance of Elasticsearch and I registered a lot of alerts about system load for many days. Indeed the overall system load is always higher then 1. Below a Grafana chart that shows… --- ## [Failed to open TCP connection to ES while trying to connect from fluentd](https://discuss.elastic.co/t/failed-to-open-tcp-connection-to-es-while-trying-to-connect-from-fluentd/293502)
**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 6:53am UTC](https://discuss.elastic.co/t/failed-to-open-tcp-connection-to-es-while-trying-to-connect-from-fluentd/293502 "2022-01-05T06:53:35Z")
Failed to open TCP connection to ES while trying to connect from fluentd. In the cluster, there are 5 clients , 5 masters & 5 data pods are running with 155 fluentd daemonsets. some of the fluentd pods are getting res… --- ## [Can we use elasticsearch analyzer for kibana](https://discuss.elastic.co/t/can-we-use-elasticsearch-analyzer-for-kibana/293310)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 5:27am UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-analyzer-for-kibana/293310 "2022-01-05T05:27:00Z")
Hi team, I am learning Elasticsearch analyzer and now i have to test this analyzer for my new index. There is a question strucking in my mind that if made analyzer and we are searching our text in kibana discover. Beca… --- ## [Logstash Exception in posting data to Azure Loganalytics](https://discuss.elastic.co/t/logstash-exception-in-posting-data-to-azure-loganalytics/293497)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 4:53am UTC](https://discuss.elastic.co/t/logstash-exception-in-posting-data-to-azure-loganalytics/293497 "2022-01-05T04:53:17Z")
Hi All, I've a server on which Logstash is installed and sending logs to Azure Sentinel. It works just fine but lately any other week I'd see the below entry in the logstash-plain.log file and it seems that the connect… --- ## [2021: The Year in Review](https://discuss.elastic.co/t/2021-the-year-in-review/293492)
**Author:** [@system](https://discuss.elastic.co/u/system)\ **Replies:** 23\ **Last updated:** [January 5, 2022, 4:53am UTC](https://discuss.elastic.co/t/2021-the-year-in-review/293492 "2022-01-05T04:53:17Z")
2021's Top Users Most Time Reading User Hours Read … --- ## [Elastic Query for alerts Windows](https://discuss.elastic.co/t/elastic-query-for-alerts-windows/293481)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 10:42pm UTC](https://discuss.elastic.co/t/elastic-query-for-alerts-windows/293481 "2022-01-04T22:42:14Z")
I know this is going to be simple but it's just not coming to me at all today. GET /logs-\*/\_eql/search { "query": """ winlog where winlog.event\_id == "4625" and stringContains(message, "The specified account's pas… --- ## [Logstash multiline codec plugin won't keep blank lines](https://discuss.elastic.co/t/logstash-multiline-codec-plugin-wont-keep-blank-lines/293429)
**Author:** [@saprof](https://discuss.elastic.co/u/saprof)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 7:26pm UTC](https://discuss.elastic.co/t/logstash-multiline-codec-plugin-wont-keep-blank-lines/293429 "2022-01-04T19:26:57Z")
Hi, I am working on the correct settings for the multiline codec plugin. I want to join all lines between two \\r\\n into a single event and it works well, except that blank lines are dropped. I'm running Logstash v7.16.… --- ## [Merge different index in function two fields and paste eleement of fields](https://discuss.elastic.co/t/merge-different-index-in-function-two-fields-and-paste-eleement-of-fields/293363)
**Author:** [@Vivian](https://discuss.elastic.co/u/Vivian)\ **Replies:** 8\ **Last updated:** [January 4, 2022, 7:06pm UTC](https://discuss.elastic.co/t/merge-different-index-in-function-two-fields-and-paste-eleement-of-fields/293363 "2022-01-04T19:06:46Z")
Hello, I have an index of this shape : { "\_index": "df\_extrait", "\_type": "\_doc", "\_id": "27685", "\_version": 1, "\_seq\_no": 0, "\_primary\_term": 1, "\_score": 1, "\_source": { "source": "avatar", "… --- ## [Internal Server Error on Kibana Index Management Screen](https://discuss.elastic.co/t/internal-server-error-on-kibana-index-management-screen/293470)
**Author:** [@Mrizzi](https://discuss.elastic.co/u/Mrizzi)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 6:47pm UTC](https://discuss.elastic.co/t/internal-server-error-on-kibana-index-management-screen/293470 "2022-01-04T18:47:48Z")
Hey everyone, I'm suddenly facing this error: Whenever I try to look into the index page on my installation It constantly throws out the following error in the kibana.log file: \[2022-01-04T15:24:05.114-03:00\]\[ERRO… --- ## [ElasticSearch Upgrade to 5.6](https://discuss.elastic.co/t/elasticsearch-upgrade-to-5-6/293469)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 6:20pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-to-5-6/293469 "2022-01-04T18:20:51Z")
We are currently running Elasticsearch version 2.4. We are planning to upgrade to ES 5.6. We ran the upgrade advisor and we took care of the issues. We are planning to upgrade by setting up a new cluster and restoring th… --- ## [Logstash prune blacklist\_values](https://discuss.elastic.co/t/logstash-prune-blacklist-values/293266)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 6\ **Last updated:** [January 4, 2022, 5:38pm UTC](https://discuss.elastic.co/t/logstash-prune-blacklist-values/293266 "2022-01-04T17:38:05Z")
So the json inputs are not always consistent. For example, one field is usually true/false, but the source occasionally tosses in a "not\_supported" just to be fun. So after some digging, I thought that I could just do: … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=738) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=740)