# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=867 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 868 --- ## [Getting false hits on queries (boolean, match, term, and filters)](https://discuss.elastic.co/t/getting-false-hits-on-queries-boolean-match-term-and-filters/280100)
**Author:** [@encompassJeff](https://discuss.elastic.co/u/encompassJeff)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 6:53am UTC](https://discuss.elastic.co/t/getting-false-hits-on-queries-boolean-match-term-and-filters/280100 "2021-08-03T06:53:09Z")
I use Elastic to host an index used for managing list filters, which returns IDs matching a query, that I then use in Seek call on a SQL database to retrieve large sets of data with decent efficiency. Lately I've seen a … --- ## [Couldn't find any input plugin named 'google\_pubsub'. Are you sure this is correct?](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218 "2021-08-03T06:51:50Z")
Hello, I noticed Kibana is no longer having Google cloud Stackdriver logs. So I started my troubleshooting with logstash and debug the .conf file, here's what I got: \[2021-08-02T20:08:44,540\]\[DEBUG\]\[logstash.plugins.re… --- ## [Embedd kibana in customer's own elasticsearch](https://discuss.elastic.co/t/embedd-kibana-in-customers-own-elasticsearch/280215)
**Author:** [@mogi](https://discuss.elastic.co/u/mogi)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 6:49am UTC](https://discuss.elastic.co/t/embedd-kibana-in-customers-own-elasticsearch/280215 "2021-08-03T06:49:47Z")
We are planning to create dashboard for customers, that use elasticseach as part of our product. By that, we try to build default dashboards, that analyze the same data for each customer, but specified on their on index.… --- ## [Cannot access elasticsearch or kibana on browser but able to access within the server using curl](https://discuss.elastic.co/t/cannot-access-elasticsearch-or-kibana-on-browser-but-able-to-access-within-the-server-using-curl/280270)
**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\ **Replies:** 2\ **Last updated:** [August 3, 2021, 4:29am UTC](https://discuss.elastic.co/t/cannot-access-elasticsearch-or-kibana-on-browser-but-able-to-access-within-the-server-using-curl/280270 "2021-08-03T04:29:48Z")
Hi, I am facing a problem while connecting to elastic search urls on browser. I have an elastic search with one master node and 2 datanodes configured and running on the respective servers. When I curl on the respecti… --- ## [Logstash "Rejected mapping update", not sure how to rectify the situation](https://discuss.elastic.co/t/logstash-rejected-mapping-update-not-sure-how-to-rectify-the-situation/280269)
**Author:** [@CameronCenic](https://discuss.elastic.co/u/CameronCenic)\ **Replies:** 5\ **Last updated:** [August 3, 2021, 4:22am UTC](https://discuss.elastic.co/t/logstash-rejected-mapping-update-not-sure-how-to-rectify-the-situation/280269 "2021-08-03T04:22:36Z")
I am seeing an error: Rejecting mapping update to \[logstash-INDEXNAME-2021.08.03\] as the final mapping would have more than 1 type: \[\_doc, doc\] I suspect this is due to me switching my template from using doc to usin… --- ## [Logstash Config Error-JAVA](https://discuss.elastic.co/t/logstash-config-error-java/125546)
**Author:** [@Nagu\_R\_Pujari](https://discuss.elastic.co/u/Nagu_R_Pujari)\ **Replies:** 10\ **Last updated:** [August 3, 2021, 3:24am UTC](https://discuss.elastic.co/t/logstash-config-error-java/125546 "2021-08-03T03:24:15Z")
i have performing basic setup of logstash getting JAVA error. not able to complete the config test. Error: ERROR: Failed to load settings file from "path.settings". Aborting... path.setting=/etc/logstash/logstash.yml, … --- ## [Treating Logs as Milk, not Wine (the art of playing catchup)](https://discuss.elastic.co/t/treating-logs-as-milk-not-wine-the-art-of-playing-catchup/280257)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 9\ **Last updated:** [August 3, 2021, 3:04am UTC](https://discuss.elastic.co/t/treating-logs-as-milk-not-wine-the-art-of-playing-catchup/280257 "2021-08-03T03:04:29Z")
I'm have a logging pipeline that looks something like the following: Logstash/Rsyslog/etc (submission) -\> Kafka -\> Logstash (enrichment) -\> Elasticsearch Metrics tells me that the by-far slowest part of my pipeline in … --- ## [Elasticsearch Index Shards](https://discuss.elastic.co/t/elasticsearch-index-shards/280206)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 1:47am UTC](https://discuss.elastic.co/t/elasticsearch-index-shards/280206 "2021-08-03T01:47:24Z")
Hi Im creating an elasticsearch index with 3 shards. But as of today I have single node elasticsearch. I have future plan to have 3 nodes cluster and hence created 3 shards now. Will it be a right approach --- ## [Issues with viewing index data in kibana](https://discuss.elastic.co/t/issues-with-viewing-index-data-in-kibana/279452)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 1:14am UTC](https://discuss.elastic.co/t/issues-with-viewing-index-data-in-kibana/279452 "2021-08-03T01:14:23Z")
We currently have a pipeline setup in our environment to fetch nginx logs to kibana. In the web server, we have a filebeat configuration to push the nginx logs to logstash server for processing. In logstash server, there… --- ## [ECK: Added nodes and now queries are unable to find stored scripts](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 12\ **Last updated:** [August 2, 2021, 11:28pm UTC](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301 "2021-08-02T23:28:18Z")
ES: 6.8.13 We're in the process of moving from manually maintained ES clusters to Elastic Cloud on Kubernetes (ECK). In our first test environment (a single node cluster), we added 3 ECK nodes. Afterward, all our sear… --- ## [Elasticsearch timeout error on operations](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239)
**Author:** [@iuryfukuda](https://discuss.elastic.co/u/iuryfukuda)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 11:22pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239 "2021-08-02T23:22:46Z")
We have timeout error on worker clients who use ES go client: time="2021-08-02T16:04:45Z" level=error msg="error handling connection with queue: error saving bulk: error making bulk request dial tcp 20.96.122.135:9200:… --- ## [Update documents based on other updates](https://discuss.elastic.co/t/update-documents-based-on-other-updates/280237)
**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 10:44pm UTC](https://discuss.elastic.co/t/update-documents-based-on-other-updates/280237 "2021-08-02T22:44:56Z")
Hi :wave: I have two indices where one of them potentially contains several million documents (let us say index "installation") and the other one only a few hundreds (index "product" for now). Now, I want to update some… --- ## [Elasticsearch client memory is not getting utilized](https://discuss.elastic.co/t/elasticsearch-client-memory-is-not-getting-utilized/279966)
**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 9:28pm UTC](https://discuss.elastic.co/t/elasticsearch-client-memory-is-not-getting-utilized/279966 "2021-08-02T21:28:18Z")
Hi Team, We have deployed elasticsearch in kubernetes environment with the below memory and cpu configuration. Data has been pushed to elasticsearch from multiple clients\[7 clients\], elasticsearch data memory is get… --- ## [Is it possible to run a shell script from Kibana?](https://discuss.elastic.co/t/is-it-possible-to-run-a-shell-script-from-kibana/280230)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 9:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-a-shell-script-from-kibana/280230 "2021-08-02T21:24:44Z")
Is it possible to customize one of the Kibana web pages to have a link/button that runs a shell script (in the server that hosts Kibana) upon clicking it? If so, where do I find documentation or tutorial that explains h… --- ## [SAML Authentication: Forbidden access to deployment](https://discuss.elastic.co/t/saml-authentication-forbidden-access-to-deployment/280096)
**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\ **Replies:** 7\ **Last updated:** [August 2, 2021, 8:39pm UTC](https://discuss.elastic.co/t/saml-authentication-forbidden-access-to-deployment/280096 "2021-08-02T20:39:46Z")
Hi, I have installed Elastic Cloud Enterprise on an AWS virtual machine, and have a ELK stack deployment configured. I have configured an authentication provider (SAML) to login to ECE. It is working correctly and prope… --- ## [Error connecting to package registry](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:33pm UTC](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721 "2021-08-02T19:33:00Z")
Since Zscaler proxy is enabled, My Kibana started giving an error So I simply added Zscaler RootCA.crt to ubuntu server (where ELK is running) in /usr/share/ca-certificates and reconfigured ca-certficates dpkg. Now c… --- ## [Counting faults per region given there are no repeats](https://discuss.elastic.co/t/counting-faults-per-region-given-there-are-no-repeats/279747)
**Author:** [@ammaars](https://discuss.elastic.co/u/ammaars)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:18pm UTC](https://discuss.elastic.co/t/counting-faults-per-region-given-there-are-no-repeats/279747 "2021-08-02T19:18:45Z")
I'm planning on having live data streaming to kibana on elasticsearch. The fields of concern will be "failure" (0 or 1), region (e.g. region 1-12) and a unique endpoint identifier. What I'd like to do is have a query whi… --- ## [Logstash strip string from field](https://discuss.elastic.co/t/logstash-strip-string-from-field/280233)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 8\ **Last updated:** [August 2, 2021, 5:24pm UTC](https://discuss.elastic.co/t/logstash-strip-string-from-field/280233 "2021-08-02T17:24:16Z")
Hi guys. In my logstash stream, I have a some filter to add a fields which is the merging of other fields. as follow: if \[destinationUserName\] and \[sourceUserName\] { mutate { add\_field =\> { "userID" =\> "%{ad.login… --- ## [Drop incoming messages](https://discuss.elastic.co/t/drop-incoming-messages/280236)
**Author:** [@rosboc](https://discuss.elastic.co/u/rosboc)\ **Replies:** 6\ **Last updated:** [August 2, 2021, 5:22pm UTC](https://discuss.elastic.co/t/drop-incoming-messages/280236 "2021-08-02T17:22:44Z")
Hi, i am using logstash 6.1.1 with following configuration and need to drop messages containing "type= traffic" string and i am not able to get it working. input { udp { port =\> 2514 type =\> "syslog… --- ## [Find documents containing not more terms than in the query with fuzzines](https://discuss.elastic.co/t/find-documents-containing-not-more-terms-than-in-the-query-with-fuzzines/280043)
**Author:** [@karolix1279](https://discuss.elastic.co/u/karolix1279)\ **Replies:** 6\ **Last updated:** [August 2, 2021, 5:19pm UTC](https://discuss.elastic.co/t/find-documents-containing-not-more-terms-than-in-the-query-with-fuzzines/280043 "2021-08-02T17:19:10Z")
Let's assume there are three documents in database: {name: "John"} {name: "John Brown"} {name: "Brown"} I would like to search documents in the following way: Search: "John". Result: document 1 Search: "John Brown".… --- ## [Urgent help: How to feed live data from Kibana or from Grafana into Excel?](https://discuss.elastic.co/t/urgent-help-how-to-feed-live-data-from-kibana-or-from-grafana-into-excel/280228)
**Author:** [@BIIntern1](https://discuss.elastic.co/u/BIIntern1)\ **Replies:** 2\ **Last updated:** [August 2, 2021, 4:13pm UTC](https://discuss.elastic.co/t/urgent-help-how-to-feed-live-data-from-kibana-or-from-grafana-into-excel/280228 "2021-08-02T16:13:36Z")
Hi all, I have been trying to create Grafana dashboard for visualization and I have been using Excel for data analysis. I figured out it would be best for me to use “What-if-analysis” in Excel to answer my project quest… --- ## [Sorting fragments returned by hit highlighting](https://discuss.elastic.co/t/sorting-fragments-returned-by-hit-highlighting/278707)
**Author:** [@timforr](https://discuss.elastic.co/u/timforr)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 4:04pm UTC](https://discuss.elastic.co/t/sorting-fragments-returned-by-hit-highlighting/278707 "2021-08-02T16:04:45Z")
I have documents with multiple content fields which I am getting highlighted fragments from. The fragments from within the same field are sorted according to score, but the order the fields are returned in is random. I… --- ## [Как правильно работать с полями flattened в Kibana?](https://discuss.elastic.co/t/flattened-kibana/280232)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 3:38pm UTC](https://discuss.elastic.co/t/flattened-kibana/280232 "2021-08-02T15:38:37Z")
Приветствую! Подскажите, как правильно работать с полями flattened в Kibana? Есть ли какая-то возможность подсветки при поиске - как сейчас делается для других полей? Может еще есть какие-то практики, как удобно с ними р… --- ## [Elasticsearch: Apply index templates at start-up](https://discuss.elastic.co/t/elasticsearch-apply-index-templates-at-start-up/279701)
**Author:** [@raoulvdberge](https://discuss.elastic.co/u/raoulvdberge)\ **Replies:** 3\ **Last updated:** [August 2, 2021, 2:26pm UTC](https://discuss.elastic.co/t/elasticsearch-apply-index-templates-at-start-up/279701 "2021-08-02T14:26:24Z")
Hi, I was wondering if it's possible to start up Elasticsearch with index templates applied (for example by being defined in a config). We currently have a pod that has Elastic and Logstash containers, and the Logstash… --- ## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/280225)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 1:31pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception/280225 "2021-08-02T13:31:30Z")
I have an elasticsearch cluster with 2 nodes. When I stop elasticsearch instance on master node the other one is not becoming master automatically. It gives the master not discovered exception elasticsearch.yml on node-… --- ## [How to create : Stacked bar chart with negative values](https://discuss.elastic.co/t/how-to-create-stacked-bar-chart-with-negative-values/280169)
**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\ **Replies:** 2\ **Last updated:** [August 2, 2021, 1:14pm UTC](https://discuss.elastic.co/t/how-to-create-stacked-bar-chart-with-negative-values/280169 "2021-08-02T13:14:40Z")
I want to create a visualization : Stacked bar chart with negative values. Let me know if kibana supports this chart. Thanks --- ## [Elasticsearch index not matching stdout test](https://discuss.elastic.co/t/elasticsearch-index-not-matching-stdout-test/280221)
**Author:** [@kgeil](https://discuss.elastic.co/u/kgeil)\ **Replies:** 0\ **Last updated:** [August 2, 2021, 12:56pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-matching-stdout-test/280221 "2021-08-02T12:56:20Z")
Good morning. I'm currently vexed by a situation with my elastic stack (7.13) and how things are parsing. I am parsing some exported IIS logs, and if I test my config with stdout, things look smashing. When I change m… --- ## [How to display other \_source fields in a metric aggregation result?](https://discuss.elastic.co/t/how-to-display-other-source-fields-in-a-metric-aggregation-result/280209)
**Author:** [@StephaneB](https://discuss.elastic.co/u/StephaneB)\ **Replies:** 2\ **Last updated:** [August 2, 2021, 12:43pm UTC](https://discuss.elastic.co/t/how-to-display-other-source-fields-in-a-metric-aggregation-result/280209 "2021-08-02T12:43:06Z")
Hello, I'm working on ML job documents with the following fields: { "\_index" : ".ml-anomalies-custom-job\_device1", "\_type" : "\_doc", "\_id" : "job\_device1\_model\_forecast\_Gwn4wnoB0F2uUBpmgO6… --- ## [How add custom additinal facet in search ui in frontend](https://discuss.elastic.co/t/how-add-custom-additinal-facet-in-search-ui-in-frontend/280053)
**Author:** [@pradeep14](https://discuss.elastic.co/u/pradeep14)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 11:27am UTC](https://discuss.elastic.co/t/how-add-custom-additinal-facet-in-search-ui-in-frontend/280053 "2021-08-02T11:27:18Z")
I'm trying to create a new facet but I don't know how to create a new facet. I create a component and assign it to view but I want to add an additional filter in that facet so how can I add an additional filter in facet … --- ## [Sort and limit with aggregation](https://discuss.elastic.co/t/sort-and-limit-with-aggregation/280007)
**Author:** [@raviverel](https://discuss.elastic.co/u/raviverel)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:52am UTC](https://discuss.elastic.co/t/sort-and-limit-with-aggregation/280007 "2021-08-02T07:52:57Z")
hey, i am want to do aggregation only on the first X items sort by some attributes, is it possible ? didn't find a way ( elastic 7.13 ) thanks [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=866) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=868)