# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=795 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 796 --- ## [How To make my elasticsearch index smaller by field values?](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471)
**Author:** [@dfang](https://discuss.elastic.co/u/dfang)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 3:30am UTC](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471 "2021-10-25T03:30:34Z")
I have setup ELK running fine. I have filebeat feeding log data via logstash then into Elasticsearch indice. This setup create one logstash index per-day . The challenge now is to find ways to break down the indices into… --- ## [Elasticsearch DSL written in Rust](https://discuss.elastic.co/t/elasticsearch-dsl-written-in-rust/287448)
**Author:** [@buinauskas\_evaldas](https://discuss.elastic.co/u/buinauskas_evaldas)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 3:29am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-written-in-rust/287448 "2021-10-25T03:29:07Z")
Good day, I'd like to shamelessly promote GitHub - vinted/elasticsearch-dsl-rs: Strongly typed Elasticsearch DSL written in Rust, it's Elasticsearch DSL written in Rust. It supports most of the queries, a couple of aggre… --- ## [Multi words synonyms with tokens between the synonym's parts](https://discuss.elastic.co/t/multi-words-synonyms-with-tokens-between-the-synonyms-parts/287518)
**Author:** [@Olaph](https://discuss.elastic.co/u/Olaph)\ **Replies:** 1\ **Last updated:** [October 24, 2021, 10:41pm UTC](https://discuss.elastic.co/t/multi-words-synonyms-with-tokens-between-the-synonyms-parts/287518 "2021-10-24T22:41:03Z")
Hi, given, that I have following synonyms configuration: "želvárium,aquaterrarium for turtles" (želvárium is czech short-term for aquarium for turtles) Is there a way that allowes me to match a document with followin… --- ## [The words in the document field are included in the query text with fuzzy logic](https://discuss.elastic.co/t/the-words-in-the-document-field-are-included-in-the-query-text-with-fuzzy-logic/287370)
**Author:** [@aleksander.zwd](https://discuss.elastic.co/u/aleksander.zwd)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 9:18pm UTC](https://discuss.elastic.co/t/the-words-in-the-document-field-are-included-in-the-query-text-with-fuzzy-logic/287370 "2021-10-21T21:18:01Z")
In Elasticsearch I have an index with documents containing a text type field "name" containing first name(s) and surname, e.g .: Rebecca Donovan Julian Fred Drake Miley Angela Saunders ... and a query with a text fi… --- ## [Inputting XML from File (Windows)](https://discuss.elastic.co/t/inputting-xml-from-file-windows/287513)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [October 24, 2021, 6:39pm UTC](https://discuss.elastic.co/t/inputting-xml-from-file-windows/287513 "2021-10-24T18:39:33Z")
I am attempting to use the File input plugin to ingest XML into Logstash running on a Windows host. At this point, I just want to verify that the input section of the pipeline is working. Here is the input section of my … --- ## [Tag Cloud - Split Words](https://discuss.elastic.co/t/tag-cloud-split-words/287493)
**Author:** [@mazenrb](https://discuss.elastic.co/u/mazenrb)\ **Replies:** 3\ **Last updated:** [October 24, 2021, 1:48pm UTC](https://discuss.elastic.co/t/tag-cloud-split-words/287493 "2021-10-24T13:48:31Z")
Hello all, i am trying to analyze spotify data. Therefore i would like to create a Tag Cloud for analyzing the most used words in song names. When i set up a Word/Tag Cloud and choose my field. The hole song name is co… --- ## [Can't replace character with Backslash with gsub](https://discuss.elastic.co/t/cant-replace-character-with-backslash-with-gsub/287501)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 2\ **Last updated:** [October 24, 2021, 10:35am UTC](https://discuss.elastic.co/t/cant-replace-character-with-backslash-with-gsub/287501 "2021-10-24T10:35:09Z")
Hi all. I am trying to replace the pound character in a field value with the backslash but am truggling to get it to work. The field looks like this: PoundedUNC =\> "##Network#Share#Name$" and I would like to turn it int… --- ## [Filebeat index not created](https://discuss.elastic.co/t/filebeat-index-not-created/287506)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 13\ **Last updated:** [October 24, 2021, 5:59am UTC](https://discuss.elastic.co/t/filebeat-index-not-created/287506 "2021-10-24T05:59:44Z")
Hi Guys, I spent hours trying to get filebeat to index a custom log file but I am not having any luck in seeing any of the data ingest. I provided all of my setup details on stack overflow (formatting of yaml here is o… --- ## [After using pipeline to pipeline comunication in pipelines.yml, the other pipelines are not working](https://discuss.elastic.co/t/after-using-pipeline-to-pipeline-comunication-in-pipelines-yml-the-other-pipelines-are-not-working/287455)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 6\ **Last updated:** [October 23, 2021, 10:02pm UTC](https://discuss.elastic.co/t/after-using-pipeline-to-pipeline-comunication-in-pipelines-yml-the-other-pipelines-are-not-working/287455 "2021-10-23T22:02:56Z")
Hi, when I use pipeline to pipeline comunication in pipelines.yml the other pipelines in the file stop working. if I comment those lines the other pipelines start to work. this is my pipelines.yml, the first pipeline … --- ## [Kibana is not able to visit with error code 503 and 000](https://discuss.elastic.co/t/kibana-is-not-able-to-visit-with-error-code-503-and-000/287434)
**Author:** [@KypMon](https://discuss.elastic.co/u/KypMon)\ **Replies:** 1\ **Last updated:** [October 23, 2021, 5:29pm UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-visit-with-error-code-503-and-000/287434 "2021-10-23T17:29:29Z")
I just follow along the tutorial helm-charts/elasticsearch/examples/security at main · elastic/helm-charts · GitHub and helm-charts/kibana/examples/security at main · elastic/helm-charts · GitHub Elasticsearch all works… --- ## [Finding unique dates](https://discuss.elastic.co/t/finding-unique-dates/287489)
**Author:** [@cassebas](https://discuss.elastic.co/u/cassebas)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 12:54pm UTC](https://discuss.elastic.co/t/finding-unique-dates/287489 "2021-10-23T12:54:10Z")
I have a dataset about deliveries, with a datetime in the format yyyy-mm-dd hh:mm:ss (for example: "29-2-2020 13:31:00"). Now I wan't to count the number of unique days in the set. I tried using cardinality in combinati… --- ## [Logstash pass through Index Templates](https://discuss.elastic.co/t/logstash-pass-through-index-templates/287487)
**Author:** [@gose](https://discuss.elastic.co/u/gose)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 12:21pm UTC](https://discuss.elastic.co/t/logstash-pass-through-index-templates/287487 "2021-10-23T12:21:08Z")
I send all my data through Logstash. Each time there's a new Elastic release, I have to export the Index Templates for each Beat I'm using (Filebeat, Metricbeat, Heartbeat, & APM Server) and then hand-load them into Ela… --- ## [Importing prebuilt kibana dashboards: "0 objects imported"](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 7:35am UTC](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008 "2021-10-23T07:35:04Z")
Hey there :slight\_smile: I am experiencing issues importing prebuilt dashboards in kibana from https://elastic-content-share.eu/ , i follow the installation procedure but i dont get new dashboards available in "saved ob… --- ## [Dealing with changes in field datatype](https://discuss.elastic.co/t/dealing-with-changes-in-field-datatype/286952)
**Author:** [@raonic](https://discuss.elastic.co/u/raonic)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 6:41pm UTC](https://discuss.elastic.co/t/dealing-with-changes-in-field-datatype/286952 "2021-10-18T18:41:08Z")
Hello, I have an Elasticsearch index where fields are configured by clients (indirectly) i.e., the clients configure the datatype for these fields through an interface and then I have a workflow which creates the actual… --- ## [Get Current Top 5 Over Time with Date Histogram](https://discuss.elastic.co/t/get-current-top-5-over-time-with-date-histogram/287473)
**Author:** [@dmer](https://discuss.elastic.co/u/dmer)\ **Replies:** 0\ **Last updated:** [October 22, 2021, 10:47pm UTC](https://discuss.elastic.co/t/get-current-top-5-over-time-with-date-histogram/287473 "2021-10-22T22:47:57Z")
Suppose I have an index filled with Person records, and I want to get the doc counts for the top 5 names (based on today) over the past week. To clarify, I don't want the top 5 names each day, instead I want to show the … --- ## [Jvm.options with 7.15.0](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 9\ **Last updated:** [October 22, 2021, 7:29pm UTC](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254 "2021-10-22T19:29:33Z")
I know the newer version handles ram automatically and that's great. But I'm seeing the java option sets Xms and Xmx both to 1024m even though I have 96GB of ram on my machine. Should I just ignore this? 51108 ? SLsl … --- ## [Possibility to use single index template for all application indices](https://discuss.elastic.co/t/possibility-to-use-single-index-template-for-all-application-indices/285741)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 14\ **Last updated:** [October 22, 2021, 5:19pm UTC](https://discuss.elastic.co/t/possibility-to-use-single-index-template-for-all-application-indices/285741 "2021-10-22T17:19:16Z")
Hi Team, I have multiple applications running and each has their application logs captured by filebeat and it sends to logstash. Below is the logstash configuration /etc/logstash/conf.d/logstash.conf file. ( showing o… --- ## [Elasticsearch cluster performance](https://discuss.elastic.co/t/elasticsearch-cluster-performance/287214)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 3\ **Last updated:** [October 22, 2021, 5:13pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance/287214 "2021-10-22T17:13:36Z")
Hi everyone, I am using Elasticsearch 7.10.2 version on EKS and I have some questions about the Elasticsearch cluster performance. Assuming that the total amount of cluster resources is the same in both cases, which is… --- ## [Should I use Simple Query or Match Query?](https://discuss.elastic.co/t/should-i-use-simple-query-or-match-query/287438)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 7\ **Last updated:** [October 22, 2021, 4:48pm UTC](https://discuss.elastic.co/t/should-i-use-simple-query-or-match-query/287438 "2021-10-22T16:48:15Z")
Dear all =) If I want to search for the following host:"10.250.11.11" and custom4:"errors occurred" then match-query and simple-query-string both looks like possible candidates. I will end up creating Kibana Rules, a… --- ## [How get 1million documents from elasticsearch?](https://discuss.elastic.co/t/how-get-1million-documents-from-elasticsearch/287446)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 1\ **Last updated:** [October 22, 2021, 3:54pm UTC](https://discuss.elastic.co/t/how-get-1million-documents-from-elasticsearch/287446 "2021-10-22T15:54:56Z")
Hi all! Help me please. I have index and i want by api get all documents (~1million) from index for my report. I've seen the scroll, but I don't understand how to apply it to my case... How i can do? Thank for advanc… --- ## [Geoip filter in logstash with Index Template not creating geo\_point object as expected](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768)
**Author:** [@ehfdub](https://discuss.elastic.co/u/ehfdub)\ **Replies:** 5\ **Last updated:** [October 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768 "2021-10-22T15:34:40Z")
Hello, I have a geoip in my logstash filter: geoip { source =\> "src\_ip" } and I created an index template via the Kibana DevTools for ALL new indexes: PUT /\_template/my\_template { "order": 0, "template": "\*", … --- ## [Pass access token received from http\_poller call to http filter](https://discuss.elastic.co/t/pass-access-token-received-from-http-poller-call-to-http-filter/287225)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 2\ **Last updated:** [October 22, 2021, 1:25pm UTC](https://discuss.elastic.co/t/pass-access-token-received-from-http-poller-call-to-http-filter/287225 "2021-10-22T13:25:48Z")
I am able to successfully get an access token from the http\_poller plugin but now I need to pass that token on to the http filter in order to make my REST call. I'm assuming that I need to do this through the headers fi… --- ## [How to parase xml in logstash](https://discuss.elastic.co/t/how-to-parase-xml-in-logstash/285214)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 16\ **Last updated:** [October 14, 2021, 4:33pm UTC](https://discuss.elastic.co/t/how-to-parase-xml-in-logstash/285214 "2021-10-14T16:33:08Z")
Hi I'm wondering how can I can parse below structure of XML in logstash as XML in the single event. Maybe in that case would be use fluentd.??? This logs will be upload by filebeat. here it is worth mentioning that the… --- ## [How to find largest size document?](https://discuss.elastic.co/t/how-to-find-largest-size-document/287405)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [October 22, 2021, 11:11am UTC](https://discuss.elastic.co/t/how-to-find-largest-size-document/287405 "2021-10-22T11:11:47Z")
Hello dear friends, you have helped me in many ways before, thank you very much for this. Again I am facing a problem. The problem is that I want to find the largest size document in my index. Is it possible for me to do… --- ## [Increasing the heap size](https://discuss.elastic.co/t/increasing-the-heap-size/287410)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 1\ **Last updated:** [October 22, 2021, 11:50am UTC](https://discuss.elastic.co/t/increasing-the-heap-size/287410 "2021-10-22T11:50:22Z")
Hi, We are getting this error. \[2021-10-01 08:11:12\] local.ERROR: ReportDataProcess Job Exception: {“error”:{“root\_cause”:\[{“type”:“circuit\_breaking\_exception”,“reason”:“\[in\_flight\_requests\] Data too large, data for \[\ **Author:** [@jpllana](https://discuss.elastic.co/u/jpllana)\ **Replies:** 3\ **Last updated:** [October 22, 2021, 11:41am UTC](https://discuss.elastic.co/t/using-wildcard-and-fuzziness-in-elasticsearch/286822 "2021-10-22T11:41:42Z") I have a query to search for an address where I am using also the wildcard. So if I am searching for Kennedy using the query below, I have these addresses: Query: GET my\_index/\_search { "query": { "query\_string":… --- ## [A question regarding querying only the index's latest documents](https://discuss.elastic.co/t/a-question-regarding-querying-only-the-indexs-latest-documents/286295)
**Author:** [@nivo](https://discuss.elastic.co/u/nivo)\ **Replies:** 7\ **Last updated:** [October 21, 2021, 10:35pm UTC](https://discuss.elastic.co/t/a-question-regarding-querying-only-the-indexs-latest-documents/286295 "2021-10-21T22:35:06Z")
Hi everyone, I'm doing a POC on a rolling indexes alternative approach in order to avoid deleting documents. I encounter some difficulties querying the data I need and I'm not sure if that's just me looking at the quer… --- ## [How to add field "id"](https://discuss.elastic.co/t/how-to-add-field-id/287336)
**Author:** [@khouloud](https://discuss.elastic.co/u/khouloud)\ **Replies:** 2\ **Last updated:** [October 22, 2021, 10:29am UTC](https://discuss.elastic.co/t/how-to-add-field-id/287336 "2021-10-22T10:29:16Z")
Hello, I wanna add a unique id identifier per file log in logstash. Thank you --- ## [Highlight subset of characters](https://discuss.elastic.co/t/highlight-subset-of-characters/285370)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 10:56am UTC](https://discuss.elastic.co/t/highlight-subset-of-characters/285370 "2021-10-18T10:56:26Z")
Hello, how to highlight subset of characters in word(s) within sentence? For sentence: It makes website content ingestion easier than ever, so you can add search to your websites and apps in record time. if chars arr… --- ## [Heartbeat Down Counter](https://discuss.elastic.co/t/heartbeat-down-counter/285817)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 3\ **Last updated:** [October 22, 2021, 7:59am UTC](https://discuss.elastic.co/t/heartbeat-down-counter/285817 "2021-10-22T07:59:18Z")
How do I make a simple counter, that show how many of my hosts are down? We are running heartbeat. I'd think it was simple to make this, but I can't figure it out. How do I make a simple counter that show how many of … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=794) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=796)