# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=882 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 883 --- ## [Multiple search term on multiple field using wild card](https://discuss.elastic.co/t/multiple-search-term-on-multiple-field-using-wild-card/278790)
**Author:** [@kurbhatt](https://discuss.elastic.co/u/kurbhatt)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 1:11pm UTC](https://discuss.elastic.co/t/multiple-search-term-on-multiple-field-using-wild-card/278790 "2021-07-15T13:11:32Z")
I have working search for single search on multiple fields and wildcard(using ngram). Index creation(s-search index): { "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "index.mapping.coerce"… --- ## [How can I append an object in elastic array?](https://discuss.elastic.co/t/how-can-i-append-an-object-in-elastic-array/278845)
**Author:** [@Duong\_Phan](https://discuss.elastic.co/u/Duong_Phan)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 8:41am UTC](https://discuss.elastic.co/t/how-can-i-append-an-object-in-elastic-array/278845 "2021-07-16T08:41:40Z")
Assume I have an index is defined like this: { "settings":{ "number\_of\_shards":1, "number\_of\_replicas":1 }, "mappings":{ "properties":{ "name":{ "type":"te… --- ## [SQL translates to wrong DSL query](https://discuss.elastic.co/t/sql-translates-to-wrong-dsl-query/278211)
**Author:** [@shivmgs](https://discuss.elastic.co/u/shivmgs)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/sql-translates-to-wrong-dsl-query/278211 "2021-07-16T08:39:57Z")
We have a field company\_name of type text. For the same field, we have additional .raw field - company\_name.raw which is a keyword field. For the following SQL query, search on company\_name { "query": "SELECT \\"com… --- ## [Index Pattern to see multiple indices (named differently)](https://discuss.elastic.co/t/index-pattern-to-see-multiple-indices-named-differently/278685)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/index-pattern-to-see-multiple-indices-named-differently/278685 "2021-07-16T08:39:03Z")
We have 3 indices that are not named consistently, and we'd like a new index pattern that will allow queries to all three indices. Without renaming the existing indices, is there a good way to allow 3 index patterns insi… --- ## [Query hints - make some records more important than others](https://discuss.elastic.co/t/query-hints-make-some-records-more-important-than-others/278869)
**Author:** [@prze\_gee](https://discuss.elastic.co/u/prze_gee)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 8:31am UTC](https://discuss.elastic.co/t/query-hints-make-some-records-more-important-than-others/278869 "2021-07-16T08:31:39Z")
Let say I have an index of cities: cities\_ind. I'm querying this data with search\_at\_you\_type to get the best recommendation while typing. Then, I want to make a few of them more important than others. The biggest cities… --- ## [Template not applied](https://discuss.elastic.co/t/template-not-applied/278757)
**Author:** [@anthonyrichir](https://discuss.elastic.co/u/anthonyrichir)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 8:07am UTC](https://discuss.elastic.co/t/template-not-applied/278757 "2021-07-16T08:07:12Z")
Hello, I have several pipelines running in a Logstash, they read messages from queues on a RabbitMQ and output those messages in rolling indices in an Elasticsearch. For those indices, I have templates matching my inde… --- ## [How do I configure line codec to output plain events?](https://discuss.elastic.co/t/how-do-i-configure-line-codec-to-output-plain-events/278791)
**Author:** [@albgus](https://discuss.elastic.co/u/albgus)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 7:08am UTC](https://discuss.elastic.co/t/how-do-i-configure-line-codec-to-output-plain-events/278791 "2021-07-16T07:08:45Z")
Hello, I assumed that the plain and line plugins would output the event message unmodified, but this does not appear to be the case, as a bunch of "garbage" data I don't care about is prepended to the event. 2021-07-15… --- ## [No legend for METRIC color range in Kibana7.10](https://discuss.elastic.co/t/no-legend-for-metric-color-range-in-kibana7-10/278758)
**Author:** [@AneskaFrisbib](https://discuss.elastic.co/u/AneskaFrisbib)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 7:01am UTC](https://discuss.elastic.co/t/no-legend-for-metric-color-range-in-kibana7-10/278758 "2021-07-16T07:01:07Z")
Hello, I noticed that I can't display a legend for color range in Metric in Kibana7.10. I had this possibility in Kibana 5.6. I attached screenshots in order to see better in which part of the METRIC configuration… --- ## [Script-src 'unsafe-eval' 'self' Error](https://discuss.elastic.co/t/script-src-unsafe-eval-self-error/278857)
**Author:** [@iraviguggilam](https://discuss.elastic.co/u/iraviguggilam)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 5:27am UTC](https://discuss.elastic.co/t/script-src-unsafe-eval-self-error/278857 "2021-07-16T05:27:42Z")
I'm using elastic search URL in angular application through iframe and getting below error. "Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval… --- ## [How to write while loops inside Logstash Elasticsearch](https://discuss.elastic.co/t/how-to-write-while-loops-inside-logstash-elasticsearch/278805)
**Author:** [@Hieu\_Luong](https://discuss.elastic.co/u/Hieu_Luong)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 3:59pm UTC](https://discuss.elastic.co/t/how-to-write-while-loops-inside-logstash-elasticsearch/278805 "2021-07-15T15:59:18Z")
Is there any way to write loops inside output of Logstash For a certain message "total:100 name:product 1" I can parse total from this message and want to send 100 times to elasticsearch My code is just pseudocode, … --- ## [Elasticsearch fails to start on Ubuntu nodes, other issues](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-nodes-other-issues/278599)
**Author:** [@bigheadred](https://discuss.elastic.co/u/bigheadred)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-nodes-other-issues/278599 "2021-07-16T01:45:33Z")
Hi, I've got a 3 node Elastic stack (each VM runs Elasticsearch and Logstash, one runs Elasticsearch, Logstash, and Kibana) set up on Microsoft Azure VM's, using Ubuntu 20.04. Recently, my elasticsearch cluster has bee… --- ## [Kibana not using defined colors in legacy visualizations](https://discuss.elastic.co/t/kibana-not-using-defined-colors-in-legacy-visualizations/278559)
**Author:** [@Mrizzi](https://discuss.elastic.co/u/Mrizzi)\ **Replies:** 6\ **Last updated:** [July 16, 2021, 12:26am UTC](https://discuss.elastic.co/t/kibana-not-using-defined-colors-in-legacy-visualizations/278559 "2021-07-16T00:26:15Z")
Hi everyone, I'm having an issue where Kibana continues to use random colors from the assigned palettes in some visualizations despite the fact that I designed specific colors per label on each one of them. I want to be… --- ## [Convert Long to Strings](https://discuss.elastic.co/t/convert-long-to-strings/278831)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 10:28pm UTC](https://discuss.elastic.co/t/convert-long-to-strings/278831 "2021-07-15T22:28:03Z")
Hi There, I have a field of type Long (i.e 4,277,534,720 ) which is a representation of memory heap usage in bytes, of one application. I've created a visualization using this field, but I need to convert that field in… --- ## [Lumberjack with Filebeat pipelines not working](https://discuss.elastic.co/t/lumberjack-with-filebeat-pipelines-not-working/278304)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 9\ **Last updated:** [July 15, 2021, 10:27pm UTC](https://discuss.elastic.co/t/lumberjack-with-filebeat-pipelines-not-working/278304 "2021-07-15T22:27:26Z")
I am testing a setup which is Filebeat --\> Logstash(1) --\> logstash(2) --\> Elasticsearch with custom indices. In logstash-2 i am using below config file (simplified). For logstash to logstash communication i am using Lu… --- ## [Delete document from index based on log type](https://discuss.elastic.co/t/delete-document-from-index-based-on-log-type/278832)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 9:06pm UTC](https://discuss.elastic.co/t/delete-document-from-index-based-on-log-type/278832 "2021-07-15T21:06:32Z")
Hello ES users, I am trying to explore an option to delete certain type of logs from ES index without deleting the whole index. For example, DEBUG type logs doesn't need to be retained for longer period compared to IN… --- ## [Testing Match query to fail, but returns docs, although they do not match](https://discuss.elastic.co/t/testing-match-query-to-fail-but-returns-docs-although-they-do-not-match/278780)
**Author:** [@tesh](https://discuss.elastic.co/u/tesh)\ **Replies:** 3\ **Last updated:** [July 15, 2021, 7:36pm UTC](https://discuss.elastic.co/t/testing-match-query-to-fail-but-returns-docs-although-they-do-not-match/278780 "2021-07-15T19:36:30Z")
Hi Team, first post here and hope you guys can help me stop going round and round! :wink: It's java code using elastic libs/methods I'm trying to look for a string in a field - eg, ":21:test123blah" and expecting it to… --- ## [Is it possible to detect a specific file that enters inside a folder by type with logstash?](https://discuss.elastic.co/t/is-it-possible-to-detect-a-specific-file-that-enters-inside-a-folder-by-type-with-logstash/278829)
**Author:** [@raylight](https://discuss.elastic.co/u/raylight)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 7:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-detect-a-specific-file-that-enters-inside-a-folder-by-type-with-logstash/278829 "2021-07-15T19:09:53Z")
I know I can watch files entering in a folder with logstash using the following syntax: input { file { type =\> "mytype" path =\> "/home/user/watchedFolder" start\_position =\> "beginning" … --- ## [Kibana dashboards disapper after elastic restart and new cert creation](https://discuss.elastic.co/t/kibana-dashboards-disapper-after-elastic-restart-and-new-cert-creation/278644)
**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\ **Replies:** 3\ **Last updated:** [July 15, 2021, 6:01pm UTC](https://discuss.elastic.co/t/kibana-dashboards-disapper-after-elastic-restart-and-new-cert-creation/278644 "2021-07-15T18:01:30Z")
Hello Team, We are using elasticsearch 7.11.2 and Kibana version 7.11.2 Our older self signed certificate expired today. (after 90d) We created again following steps given in - Set up basic security for the Elastic S… --- ## [Data node with high os cpu usage but low process cpu usage in aws kubernetes](https://discuss.elastic.co/t/data-node-with-high-os-cpu-usage-but-low-process-cpu-usage-in-aws-kubernetes/278733)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 6\ **Last updated:** [July 15, 2021, 5:52pm UTC](https://discuss.elastic.co/t/data-node-with-high-os-cpu-usage-but-low-process-cpu-usage-in-aws-kubernetes/278733 "2021-07-15T17:52:48Z")
We are hosting elasticsearch cluster on the aws kubernetes. The cluster has 5 master nodes, 37 data nodes and 10 coordinate nodes. We request/limit \[memory: 64G\]\[cpu: 25\]for the kubernete container and give 30G memory t… --- ## [Yarn es snapshot command fails](https://discuss.elastic.co/t/yarn-es-snapshot-command-fails/278819)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 5:30pm UTC](https://discuss.elastic.co/t/yarn-es-snapshot-command-fails/278819 "2021-07-15T17:30:40Z")
Hello all, I have been struggling with setting up dev environment from a long time. Right now, I am behind corporate proxy. I have set up proxy settings for Yarn, NPM and Git but when I run yarn es snapshot, it gives me… --- ## [Kibana cannot perform migrations due to validation error](https://discuss.elastic.co/t/kibana-cannot-perform-migrations-due-to-validation-error/278678)
**Author:** [@dbernard](https://discuss.elastic.co/u/dbernard)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 3:13pm UTC](https://discuss.elastic.co/t/kibana-cannot-perform-migrations-due-to-validation-error/278678 "2021-07-15T15:13:26Z")
Kibana is unable to perform migrations and then reports it cannot connect to elastic search. elasticsearch is running locally. Upgrading to 7.11.2 elasticsearch and kibana. "type":"log","@timestamp":"2021-07-14T14:02:… --- ## [Kibana not starting](https://discuss.elastic.co/t/kibana-not-starting/278516)
**Author:** [@123451](https://discuss.elastic.co/u/123451)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 3:02pm UTC](https://discuss.elastic.co/t/kibana-not-starting/278516 "2021-07-15T15:02:05Z")
Good morning all, My kibana is not starting, when I run the command systemctl status kibana. this is what I get. I don't know what seems to be the issue --- ## [JDBC Timestamp doesn't refresh, leads to large queues](https://discuss.elastic.co/t/jdbc-timestamp-doesnt-refresh-leads-to-large-queues/278393)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 5\ **Last updated:** [July 15, 2021, 3:00pm UTC](https://discuss.elastic.co/t/jdbc-timestamp-doesnt-refresh-leads-to-large-queues/278393 "2021-07-15T15:00:11Z")
Hi all, I am using the jdbc plugin with LS 7.13.2 to retrieve records from an Oracle DB. When users make changes to their info, I record the timestamp of the change in the dateChanged column of the DB. Through the jdbc … --- ## [ELasticsearch 7.9.1 won't start](https://discuss.elastic.co/t/elasticsearch-7-9-1-wont-start/278808)
**Author:** [@Barry\_Dupont](https://discuss.elastic.co/u/Barry_Dupont)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 2:39pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-1-wont-start/278808 "2021-07-15T14:39:29Z")
My problem is that ELasticsearch won't start, so i checked log /var/log/elasticsearch/elasticsearch.log and I Got an error concerning 'Lucene\_87 missing' Caused by: java.lang.IllegalArgumentException: An SPI class of … --- ## [ECE 2.10.1 released](https://discuss.elastic.co/t/ece-2-10-1-released/278806)
**Author:** [@marclop](https://discuss.elastic.co/u/marclop)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 2:35pm UTC](https://discuss.elastic.co/t/ece-2-10-1-released/278806 "2021-07-15T14:35:17Z")
We are pleased to announce that ECE 2.10.1 has been released today. Release notes: Elastic Cloud Enterprise 2.10.1 | Elastic Cloud Enterprise Reference \[2.10\] | Elastic --- ## [Same level script aggregation](https://discuss.elastic.co/t/same-level-script-aggregation/278631)
**Author:** [@Ivan\_Janev](https://discuss.elastic.co/u/Ivan_Janev)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 1:16pm UTC](https://discuss.elastic.co/t/same-level-script-aggregation/278631 "2021-07-15T13:16:15Z")
I'm wondering if it is possible to do a same level script aggregation in ES. Let's say I have 2 fields in my documents sales and spend. This is the result I want to achieve: { "size": 0, "query": { "match\_all": … --- ## [Error on parsing gzip files "Unexpected end of ZLIB input stream"](https://discuss.elastic.co/t/error-on-parsing-gzip-files-unexpected-end-of-zlib-input-stream/278789)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 1:09pm UTC](https://discuss.elastic.co/t/error-on-parsing-gzip-files-unexpected-end-of-zlib-input-stream/278789 "2021-07-15T13:09:31Z")
I have a gzip file about ~600MB that seems to be running into a plugin error mentioned below . \[2021-07-15T13:00:29,121\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[4ea2794871220248b7ea22dd607e71d79bddbc1bff243a66da02aa3b… --- ## [Issues in performance](https://discuss.elastic.co/t/issues-in-performance/278788)
**Author:** [@Arthi\_Jaiswal](https://discuss.elastic.co/u/Arthi_Jaiswal)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 1:07pm UTC](https://discuss.elastic.co/t/issues-in-performance/278788 "2021-07-15T13:07:18Z")
I have a case where I am ingesting over 5 MN log lines / minute into logstash hosted on an Azure . The performance is really sluggish Any recommendations on how I can improve the performance --- ## [Data redundancy with a single nested level vs multilevel nested document](https://discuss.elastic.co/t/data-redundancy-with-a-single-nested-level-vs-multilevel-nested-document/278471)
**Author:** [@sai\_Yeluri](https://discuss.elastic.co/u/sai_Yeluri)\ **Replies:** 5\ **Last updated:** [July 15, 2021, 1:04pm UTC](https://discuss.elastic.co/t/data-redundancy-with-a-single-nested-level-vs-multilevel-nested-document/278471 "2021-07-15T13:04:10Z")
Is it better to have a data redundancy with single nested object or maintain multilevel nested document? There are performance concerns when nested types are used, as per elasticsearch documentation Nested field type | … --- ## [Kibana service start failed](https://discuss.elastic.co/t/kibana-service-start-failed/278566)
**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 12:55pm UTC](https://discuss.elastic.co/t/kibana-service-start-failed/278566 "2021-07-15T12:55:32Z")
Hi Team, I have standalone server where I downloaded elastic and kibana 7.12.1 in RPM on cent os server After downloading i have install elastic and kibana from below command rpm -i elasticseach-7.12.1-x86\_64.rpm Aft… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=881) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=883)