# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=833 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 834 --- ## [Fuzzy search](https://discuss.elastic.co/t/fuzzy-search/283603)
**Author:** [@Danzo](https://discuss.elastic.co/u/Danzo)\ **Replies:** 13\ **Last updated:** [September 8, 2021, 12:35pm UTC](https://discuss.elastic.co/t/fuzzy-search/283603 "2021-09-08T12:35:32Z")
Hello, I am trying to do a fuzzy search for my data. But my query returns null Create index PUT /test\_index { "mappings": { "properties": { "testt": { "type": "text" } } … --- ## [No valid shards](https://discuss.elastic.co/t/no-valid-shards/282344)
**Author:** [@\_bugc4t](https://discuss.elastic.co/u/_bugc4t)\ **Replies:** 9\ **Last updated:** [September 8, 2021, 12:05pm UTC](https://discuss.elastic.co/t/no-valid-shards/282344 "2021-09-08T12:05:20Z")
I'm having some issues with my index where it won't allocate any shards so I can't create an Index Pattern. I've looked into the Stats on the Index Management page, which gets: "\_shards": { "total": 2, "succes… --- ## [Use Synthetic/Browser monitor zip source (repo) with private/self-signed cert](https://discuss.elastic.co/t/use-synthetic-browser-monitor-zip-source-repo-with-private-self-signed-cert/282521)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [September 8, 2021, 11:39am UTC](https://discuss.elastic.co/t/use-synthetic-browser-monitor-zip-source-repo-with-private-self-signed-cert/282521 "2021-09-08T11:39:57Z")
Hi All, I'm looking at setting up a test with the new synthetics/browser module in Heartbeat. I would like to use the Zip URL source for this. However, the repo I want to use has a cert signed by a private CA. Looking … --- ## [Ranking Evaluation API Inquiry](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648)
**Author:** [@Ahmed\_Elsheikh](https://discuss.elastic.co/u/Ahmed_Elsheikh)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648 "2021-09-08T11:24:26Z")
After reading about Ranking Evaluation API, and I am planning to use it in my search engine project, however, the following points were not clear to me Does it enhance search results as per query per user (set of users… --- ## [Connecting React to elasticsearch API without using AppSearch (Enterprise Search)](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472)
**Author:** [@juslin03](https://discuss.elastic.co/u/juslin03)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 11:06am UTC](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472 "2021-09-08T11:06:19Z")
Hello everyone. I'm working on a feature that my boss asked me to do but I'm having some trouble. The goal is to connect our React application (generated with Search UI) directly with ElasticSearch without going throug… --- ## [How can i stop a cluster on ECK](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974)
**Author:** [@w\_Aaron](https://discuss.elastic.co/u/w_Aaron)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 10:12am UTC](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974 "2021-09-08T10:12:02Z")
I changed the cluster yaml file nodeSet.config.count value to 0 In my cluster,When i kubectl describe es xxxx\_es\_id ,the logs info is:"es26f861-fa5d-410a-acb1-b9281f6814ae" is invalid: spec.nodeSets: Required value: Elas… --- ## [Yum Repo not working?](https://discuss.elastic.co/t/yum-repo-not-working/283639)
**Author:** [@Marco\_Lazzarotto](https://discuss.elastic.co/u/Marco_Lazzarotto)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 9:38am UTC](https://discuss.elastic.co/t/yum-repo-not-working/283639 "2021-09-08T09:38:22Z")
I have a Spacewalk running on CentOS which I have to replace with Katello. I've added https://artifacts.elastic.co/packages/7.x/yum as a repo to Katello (exactly as on Spacewalk), but when I try to sync with that reposi… --- ## [Sending logs to ElasticSearch directly](https://discuss.elastic.co/t/sending-logs-to-elasticsearch-directly/283640)
**Author:** [@adm3](https://discuss.elastic.co/u/adm3)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 9:42am UTC](https://discuss.elastic.co/t/sending-logs-to-elasticsearch-directly/283640 "2021-09-08T09:42:38Z")
I'm trying to send logs directly to elasticsearch from Velocirpator, but I'm getting the below error when enabled xpack security features. below is my elastic config file ---------------------------------- Security -----… --- ## [ES and KIBANA not keeping up with Suricata logs](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 9:29am UTC](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636 "2021-09-08T09:29:31Z")
Hi. I implemented a Suricata server with Filebeat to send logs to elasticsearch. The logs are then displayed in Kibana via the Filebeat Suricata module. My problem is when I enable flow logging in the meericata log fil… --- ## [Updation and deletion of fields from ingest attachment arrays](https://discuss.elastic.co/t/updation-and-deletion-of-fields-from-ingest-attachment-arrays/283619)
**Author:** [@Reghu\_Shanker](https://discuss.elastic.co/u/Reghu_Shanker)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 8:06am UTC](https://discuss.elastic.co/t/updation-and-deletion-of-fields-from-ingest-attachment-arrays/283619 "2021-09-08T08:06:01Z")
Hi, I have documents with multiple attachments in each of them. I am using ingest attachment processor to extract data and store it in elastic search document. These attachments are stored in ingest attachment arrays.… --- ## [Pie Chart with Filters Aggregation ..what is my path (Sorry, I really haven't got a clue)?](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246)
**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\ **Replies:** 9\ **Last updated:** [September 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246 "2021-09-08T07:35:43Z")
The Test area within my organisation has implemented ELK. The main purpose is to capture, analyse and visualise logs produced by an in-house load tool. There are also other 'applications' which feed logs. I have mainl… --- ## [Help with complex DSL query/filter/grouping](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 7:31am UTC](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608 "2021-09-08T07:31:47Z")
Hi all, I have 2 seperate queries and am trying to find a way to filter and only return documents matching both queries. Query01 = event.provider : "Microsoft-Windows-Sysmon" and event.code:"3" and destination.port:(… --- ## [How to load apm metrics data in Observability Metrics UI?](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 7:16am UTC](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617 "2021-09-08T07:16:39Z")
I saw that kibana provides metrics, but it only loads metricsbeat index by default. I am a little curious. Since the apm server also collects metrics, how can I generate graphics from this part of the data? --- ## [Wrong result in tsvb](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 6:29am UTC](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552 "2021-09-08T06:29:02Z")
i am trying to get uptime . i have created Gauge TSVB aggregation and it shows - days but i can see data , if i have same in data table attached is the screen shot --- ## [Updating Logstash Keystore Key-Values Externally](https://discuss.elastic.co/t/updating-logstash-keystore-key-values-externally/283611)
**Author:** [@nitvakhare](https://discuss.elastic.co/u/nitvakhare)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 5:52am UTC](https://discuss.elastic.co/t/updating-logstash-keystore-key-values-externally/283611 "2021-09-08T05:52:43Z")
Hi, I wanted to know that if there is any option to update the existing key-value pair in the Logstash keystore externally. I am storing 'username' and 'password' fields in this keystore manually for now. But, I want to… --- ## [Filter to change the field name to be more user friendly](https://discuss.elastic.co/t/filter-to-change-the-field-name-to-be-more-user-friendly/283543)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 4:38am UTC](https://discuss.elastic.co/t/filter-to-change-the-field-name-to-be-more-user-friendly/283543 "2021-09-08T04:38:16Z")
Hello, I have a log line for diskusage such as disk-usage: \[1\]=76% \[2\]=26% \[3\]=26% \[4\]=24% \[5\]=24% \[6\]=28% i used dissect and kv to get the values as needed . { "@timestamp" =\> 2021-09-06T08:22:46.944Z, … --- ## [Clarify behavior of FunctionScoreQuery when there are more than \`size\` matches to the \`query\`](https://discuss.elastic.co/t/clarify-behavior-of-functionscorequery-when-there-are-more-than-size-matches-to-the-query/283596)
**Author:** [@alexklibisz](https://discuss.elastic.co/u/alexklibisz)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 2:25am UTC](https://discuss.elastic.co/t/clarify-behavior-of-functionscorequery-when-there-are-more-than-size-matches-to-the-query/283596 "2021-09-08T02:25:21Z")
I'm running into an issue with the FunctionScoreQuery and would appreciate some clarification of the query behavior. Say I'm running a function\_score query with size=100. The actual query matches 101 documents. How many… --- ## [How to seed a dashboard png via webhook weekly?](https://discuss.elastic.co/t/how-to-seed-a-dashboard-png-via-webhook-weekly/283557)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 1:27am UTC](https://discuss.elastic.co/t/how-to-seed-a-dashboard-png-via-webhook-weekly/283557 "2021-09-08T01:27:21Z")
Here we want to use watcher to send a weekly png report into a group such Wechat etc, which is produced from dashboard periodically. Email report is able to use attachment, while webhook doesn't have this parameter. I u… --- ## [Best way to index human names?](https://discuss.elastic.co/t/best-way-to-index-human-names/283591)
**Author:** [@rdate](https://discuss.elastic.co/u/rdate)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 12:30am UTC](https://discuss.elastic.co/t/best-way-to-index-human-names/283591 "2021-09-08T00:30:07Z")
Hello! I am building an index that includes personal names and after a bunch of searching around I haven't been able to find the best way to index these names to allow for the large amount of variation in name constructi… --- ## [JSON形式のドキュメントを分割する方法](https://discuss.elastic.co/t/json/283391)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 12:03am UTC](https://discuss.elastic.co/t/json/283391 "2021-09-08T00:03:44Z")
以下のようなJSONファイルをlogstashのJSONフィルターを用いてElasticsearchに取り込みます { "imageScanFindings": { "findings": \[ { "name": "CVE-2019-3462", "description": "Incorrect sanitation of… --- ## [How to filter data while migrating from SQL to Elasticsearch using Logstash to obtain a nested strings array in a JSON object](https://discuss.elastic.co/t/how-to-filter-data-while-migrating-from-sql-to-elasticsearch-using-logstash-to-obtain-a-nested-strings-array-in-a-json-object/283585)
**Author:** [@maklil](https://discuss.elastic.co/u/maklil)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 10:25pm UTC](https://discuss.elastic.co/t/how-to-filter-data-while-migrating-from-sql-to-elasticsearch-using-logstash-to-obtain-a-nested-strings-array-in-a-json-object/283585 "2021-09-07T22:25:59Z")
Hi, I'm trying to migrate data from SQL Server to Elasticsearch using Logstash into a certain format. My data is normalized and essentially involves a central table which is linked to other tables by a foreign key, and m… --- ## [Kibana External Search Link](https://discuss.elastic.co/t/kibana-external-search-link/283579)
**Author:** [@mikemitchell](https://discuss.elastic.co/u/mikemitchell)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 9:58pm UTC](https://discuss.elastic.co/t/kibana-external-search-link/283579 "2021-09-07T21:58:46Z")
We would like to manually create a get request to Kibana. All we need from the user currently is the root URL, something like https://elastic.cyborglab.local/, and we're able to create the link that would take them direc… --- ## [Extraction valeurs champ message](https://discuss.elastic.co/t/extraction-valeurs-champ-message/281303)
**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\ **Replies:** 5\ **Last updated:** [September 7, 2021, 8:28pm UTC](https://discuss.elastic.co/t/extraction-valeurs-champ-message/281303 "2021-09-07T20:28:58Z")
Bonjour, Je souhaite indexer des paquets réseau et en extraire certaines informations mais logstash envoi tout dans un champ unique. Voici le code logstash : input { kafka { bootstrap\_servers =\> "172.16.238.204:… --- ## [ECK clusters and client sniffing](https://discuss.elastic.co/t/eck-clusters-and-client-sniffing/244972)
**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 8:00pm UTC](https://discuss.elastic.co/t/eck-clusters-and-client-sniffing/244972 "2021-09-07T20:00:31Z")
It seems difficult to set up an ECK ElasticSearch cluster where client sniffing works. Does anybody have any suggestions on best approaches here? Our clusters are currently on AWS EKS in 3 availability zones behind a sin… --- ## [Elasticsearch query](https://discuss.elastic.co/t/elasticsearch-query/283575)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 7:24pm UTC](https://discuss.elastic.co/t/elasticsearch-query/283575 "2021-09-07T19:24:19Z")
My siem only allows any querys inside query{} I need to do a sort by date like this but the sort needs to be inside the query , any ideas GET /index-\*/\_search { "sort" : \[ { "@timestamp" : {"order": "desc"}} \]… --- ## [How to get percentage of failed tests from all results](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 5\ **Last updated:** [September 7, 2021, 6:59pm UTC](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818 "2021-09-07T18:59:21Z")
Hi All, I'm using v 7.11.1 I have this data structure in elastic: { "\_index" : "stamshay", "\_type" : "\_doc", "\_id" : "ub0ll3sB2oqJ9931yhZw", "\_score" : 1.0, "\_source" : { "buildVersion" : "1.1.1.1", "testcase" … --- ## [Logastash Exec plugin Cannot allocate memory](https://discuss.elastic.co/t/logastash-exec-plugin-cannot-allocate-memory/283561)
**Author:** [@vikasgurlinka](https://discuss.elastic.co/u/vikasgurlinka)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 6:28pm UTC](https://discuss.elastic.co/t/logastash-exec-plugin-cannot-allocate-memory/283561 "2021-09-07T18:28:31Z")
I am running Logstash 7.9.1 with 24 GB of maximum heap size configured in a Linux machine with 30 GB Memory and configured a pipeline to run a python program with Logstash exec plugin I see the below error message in log… --- ## [How to delete a task in Elasticsearch v7.14](https://discuss.elastic.co/t/how-to-delete-a-task-in-elasticsearch-v7-14/283321)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 7\ **Last updated:** [September 7, 2021, 5:49pm UTC](https://discuss.elastic.co/t/how-to-delete-a-task-in-elasticsearch-v7-14/283321 "2021-09-07T17:49:45Z")
I'm currently running a delete\_by\_query job and setting the wait\_for\_completion argument to false. In the documentation, it says: Running delete by query asynchronously If the request contains wait\_for\_completion=fals… --- ## [Search DSL Query value with '(single quote) and space in elastic 6.8](https://discuss.elastic.co/t/search-dsl-query-value-with-single-quote-and-space-in-elastic-6-8/281091)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 6\ **Last updated:** [September 7, 2021, 5:02pm UTC](https://discuss.elastic.co/t/search-dsl-query-value-with-single-quote-and-space-in-elastic-6-8/281091 "2021-09-07T17:02:10Z")
Hi, Actually, i am trying to do Search DSL Query value with '(single quote) like below query (1) and some times with single space Query (2) below, i am not getting expected results, Could you please suggest me for that.… --- ## [Умножить два поля](https://discuss.elastic.co/t/topic/283133)
**Author:** [@zhsv](https://discuss.elastic.co/u/zhsv)\ **Replies:** 7\ **Last updated:** [September 7, 2021, 3:57pm UTC](https://discuss.elastic.co/t/topic/283133 "2021-09-07T15:57:18Z")
В ELK отправляются события печати windows (код 307 и 805) в одном количество распечатанных страниц во втором количество копий. Необходимо умножить эти значения, чтобы получить сумму распечатанных страниц. winlog.user\_d… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=832) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=834)