# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=930

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 931

---

## [Count query is returning inaccurate results](https://discuss.elastic.co/t/count-query-is-returning-inaccurate-results/274436)

<div class="topic-metadata">

**Author:** [@kapso](https://discuss.elastic.co/u/kapso)\
**Replies:** 13\
**Last updated:** [June 1, 2021, 9:12am UTC](https://discuss.elastic.co/t/count-query-is-returning-inaccurate-results/274436 "2021-06-01T09:12:47Z")

</div>

Count query (filter term) is returning inaccurate results - \*/\_count We have tried to get the count using a regular search query using this approach - "size":0,"track\_total\_hits":true and the count is still inaccurate. …

---

## [Setting for alerts in elk](https://discuss.elastic.co/t/setting-for-alerts-in-elk/274489)

<div class="topic-metadata">

**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 9:06am UTC](https://discuss.elastic.co/t/setting-for-alerts-in-elk/274489 "2021-06-01T09:06:31Z")

</div>

How to setup kibana and elasticsearch for alerts , involving the certificates and ca?

---

## [Filter and return only specific fields using elasticsearch plugin with logstash](https://discuss.elastic.co/t/filter-and-return-only-specific-fields-using-elasticsearch-plugin-with-logstash/274599)

<div class="topic-metadata">

**Author:** [@Nico3](https://discuss.elastic.co/u/Nico3)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 8:51am UTC](https://discuss.elastic.co/t/filter-and-return-only-specific-fields-using-elasticsearch-plugin-with-logstash/274599 "2021-06-01T08:51:14Z")

</div>

Hello, I'm trying to create a pipeline with logstash in order to "extract" a specific metric from Elasticsearch (window\_cpu\_time\_total). Here is my pipeline: input { elasticsearch { hosts =\> \["http://localhos…

---

## [Index.sort on sequence numbers](https://discuss.elastic.co/t/index-sort-on-sequence-numbers/274485)

<div class="topic-metadata">

**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\
**Replies:** 7\
**Last updated:** [June 1, 2021, 8:42am UTC](https://discuss.elastic.co/t/index-sort-on-sequence-numbers/274485 "2021-06-01T08:42:21Z")

</div>

We have a use case that can greatly benefit from the ability to have an index.sort on \_seq\_no meta field of ES but that's not possible it seems As of now, that's not possible curl -XPUT -H "Content-Type:application/jso…

---

## [Multiple fast consecutive updates on the same document](https://discuss.elastic.co/t/multiple-fast-consecutive-updates-on-the-same-document/274595)

<div class="topic-metadata">

**Author:** [@Niels\_Theen](https://discuss.elastic.co/u/Niels_Theen)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 8:26am UTC](https://discuss.elastic.co/t/multiple-fast-consecutive-updates-on-the-same-document/274595 "2021-06-01T08:26:37Z")

</div>

Hi there, I hope someone can help me with a very specific problem I have. We integrated Elasticsearch in our multi-tenant-system. Based on our system we forced to use update\_by\_query instead of update. This system cr…

---

## [Es\_rejected\_execution\_exception](https://discuss.elastic.co/t/es-rejected-execution-exception/274594)

<div class="topic-metadata">

**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 8:13am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception/274594 "2021-06-01T08:13:47Z")

</div>

All of a sudden, our cluster has started to receive a huge of amount of "es\_rejected\_execution\_exception" errors when upserting. Nothing has really changed on our code side so we are at a complete loss. Our main API is n…

---

## [Logstash stores field as multifield](https://discuss.elastic.co/t/logstash-stores-field-as-multifield/274331)

<div class="topic-metadata">

**Author:** [@nberens](https://discuss.elastic.co/u/nberens)\
**Replies:** 2\
**Last updated:** [May 30, 2021, 2:26am UTC](https://discuss.elastic.co/t/logstash-stores-field-as-multifield/274331 "2021-05-30T02:26:04Z")

</div>

Hello, i am currently migrating from an old elatic 6.8 cluster to a new 7.13. The Logstash pipeline is the same: input { kafka { bootstrap\_servers =\> '{{ logstash\_kafka\_bootstrap }}' …

---

## [Kibana is not ready in 7.12](https://discuss.elastic.co/t/kibana-is-not-ready-in-7-12/274545)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-in-7-12/274545 "2021-06-01T07:34:24Z")

</div>

I obtain this error can someone help me? kibana | {"type":"log","@timestamp":"2021-05-31T19:22:13+00:00","tags":\["info","savedobjects-service"\],"pid":7,"message":"Waiting until all Elasticsearch nodes a…

---

## [Getting Invalid FieldReference error because of non-indexed property name in document](https://discuss.elastic.co/t/getting-invalid-fieldreference-error-because-of-non-indexed-property-name-in-document/274205)

<div class="topic-metadata">

**Author:** [@rs0000](https://discuss.elastic.co/u/rs0000)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 7:33am UTC](https://discuss.elastic.co/t/getting-invalid-fieldreference-error-because-of-non-indexed-property-name-in-document/274205 "2021-06-01T07:33:18Z")

</div>

Hi, My Logstash pipeline keeps failing during scroll because of an error. There are multiple documents causing that issue. Those are referral urls that sometimes look weird. The property itself is not indexed in elastic…

---

## [Disable logstash logger for inputs.jdbc](https://discuss.elastic.co/t/disable-logstash-logger-for-inputs-jdbc/274526)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 4\
**Last updated:** [June 1, 2021, 7:15am UTC](https://discuss.elastic.co/t/disable-logstash-logger-for-inputs-jdbc/274526 "2021-06-01T07:15:08Z")

</div>

Hi all, I am using Logstash 7.12.1 to update an elasticsearch 7.12.1 index from an oracle database. I have no problem establishing communication with the DB using the below input jdbc declaration: input { jdbc { …

---

## [Rolling Upgrade not supported for kibana](https://discuss.elastic.co/t/rolling-upgrade-not-supported-for-kibana/274588)

<div class="topic-metadata">

**Author:** [@Sachin\_kovuru](https://discuss.elastic.co/u/Sachin_kovuru)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 7:11am UTC](https://discuss.elastic.co/t/rolling-upgrade-not-supported-for-kibana/274588 "2021-06-01T07:11:38Z")

</div>

I see that kibana doesn't support rolling upgrades as per the below link. Since the rolling upgrade is one of the basic upgrading strategies of Kubernetes. So, is there any plans of supporting rolling upgrade in future…

---

## [Dynamically append field from an index to same field in other indices](https://discuss.elastic.co/t/dynamically-append-field-from-an-index-to-same-field-in-other-indices/274579)

<div class="topic-metadata">

**Author:** [@CoolCommando\_Sniper](https://discuss.elastic.co/u/CoolCommando_Sniper)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 5:51am UTC](https://discuss.elastic.co/t/dynamically-append-field-from-an-index-to-same-field-in-other-indices/274579 "2021-06-01T05:51:10Z")

</div>

Hi, I would like to achieve the following: Lets say there are 3 indices A, B & C, each having a document with \_id '1'. I would like to append value of a field in A to the same field in indices B & C, where document \_i…

---

## [Sum aggregated values](https://discuss.elastic.co/t/sum-aggregated-values/274554)

<div class="topic-metadata">

**Author:** [@qvers](https://discuss.elastic.co/u/qvers)\
**Replies:** 1\
**Last updated:** [June 1, 2021, 6:41am UTC](https://discuss.elastic.co/t/sum-aggregated-values/274554 "2021-06-01T06:41:44Z")

</div>

Hello. I'm trying to collect some statistics data from my docs, but I'm struggling a bit. My docs looks like this: { "productId": "156" "price": "101.23" "discount": "2.23" "marketplace": "some\_marketplace" "…

---

## [How I can run jdbc\_streaming filter just one time on multiple jdbc plugin row results](https://discuss.elastic.co/t/how-i-can-run-jdbc-streaming-filter-just-one-time-on-multiple-jdbc-plugin-row-results/274477)

<div class="topic-metadata">

**Author:** [@zeraf29](https://discuss.elastic.co/u/zeraf29)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 6:17am UTC](https://discuss.elastic.co/t/how-i-can-run-jdbc-streaming-filter-just-one-time-on-multiple-jdbc-plugin-row-results/274477 "2021-06-01T06:17:27Z")

</div>

Hi. I want to run jdbc\_streaming filter plugin just one time on multiple jdbc plugin row results. For example, I set jdbc input plugin in pipeline, and It return 10 table rows. input{ Jdbc{ #jdbc settings …

---

## [Convert the @timestamp field](https://discuss.elastic.co/t/convert-the-timestamp-field/273902)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 6\
**Last updated:** [June 1, 2021, 5:26am UTC](https://discuss.elastic.co/t/convert-the-timestamp-field/273902 "2021-06-01T05:26:18Z")

</div>

Hello All , I am trying to convert the @timestamp field to the required format. @timestamp shows the field as : 2021-05-25T07:34:08.137Z and I want the value to be converted in to this format : 05/25/2021 07:34:08 . I …

---

## [Is there any way to do batch inference(matrix compute) using cosineSimilarity?](https://discuss.elastic.co/t/is-there-any-way-to-do-batch-inference-matrix-compute-using-cosinesimilarity/274573)

<div class="topic-metadata">

**Author:** [@berry](https://discuss.elastic.co/u/berry)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 5:17am UTC](https://discuss.elastic.co/t/is-there-any-way-to-do-batch-inference-matrix-compute-using-cosinesimilarity/274573 "2021-06-01T05:17:29Z")

</div>

In some scenarios, I want to calculate the cosine similarity between M dense\_vectors and all the stored dense\_vectors. This can be achieved by calling the cosineSimilarity function for M times like this: "script": { …

---

## [Mutate rename issue after upgrade](https://discuss.elastic.co/t/mutate-rename-issue-after-upgrade/274558)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 2:27am UTC](https://discuss.elastic.co/t/mutate-rename-issue-after-upgrade/274558 "2021-06-01T02:27:50Z")

</div>

Hello, I have a pipeline where that receives data from a F5 load balancer and parses it with the cef codec, in the filters I have a series of mutate using rename to change the name of some fields to their ecs correspond…

---

## [Showing newsfeed posts based on friends' list](https://discuss.elastic.co/t/showing-newsfeed-posts-based-on-friends-list/274557)

<div class="topic-metadata">

**Author:** [@m-asfour](https://discuss.elastic.co/u/m-asfour)\
**Replies:** 1\
**Last updated:** [June 1, 2021, 2:01am UTC](https://discuss.elastic.co/t/showing-newsfeed-posts-based-on-friends-list/274557 "2021-06-01T02:01:47Z")

</div>

Hi, I'm trying to build a social network app similar to Facebook which shows each user their friends' posts on their feed. What is the best way to implement this using Elasticsearch?

---

## [Find IP in between two ranges](https://discuss.elastic.co/t/find-ip-in-between-two-ranges/274104)

<div class="topic-metadata">

**Author:** [@Sarthak\_Mishra](https://discuss.elastic.co/u/Sarthak_Mishra)\
**Replies:** 4\
**Last updated:** [June 1, 2021, 1:53am UTC](https://discuss.elastic.co/t/find-ip-in-between-two-ranges/274104 "2021-06-01T01:53:34Z")

</div>

Hello Community, I have two indexes. Index 1 contains a column of IP address. Index 2 contains 2 columns: the start subnet and end IP Address column. I want to find in which subnet range does the particular IP belong to…

---

## [Elasticsearch 2021 License](https://discuss.elastic.co/t/elasticsearch-2021-license/274559)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 1\
**Last updated:** [June 1, 2021, 1:38am UTC](https://discuss.elastic.co/t/elasticsearch-2021-license/274559 "2021-06-01T01:38:21Z")

</div>

Hi. I am asking a question because the elasticsearch license changed in 2021 is not well understood. It cannot be provided as a managed-service to other users. Our company develops a system called “A” and sells “A” …

---

## [Logstash aggregation overwrite](https://discuss.elastic.co/t/logstash-aggregation-overwrite/274556)

<div class="topic-metadata">

**Author:** [@fuzes](https://discuss.elastic.co/u/fuzes)\
**Replies:** 1\
**Last updated:** [June 1, 2021, 1:13am UTC](https://discuss.elastic.co/t/logstash-aggregation-overwrite/274556 "2021-06-01T01:13:42Z")

</div>

I don't know why aggregation is overwritten by last one following is my logstash code filter { aggregate { task\_id =\> "%{code}" code =\> " map\['code'\] = event.get('code') map\[event.get('langu…

---

## [KIbana - How do I point to remote instance of Elasticsearch](https://discuss.elastic.co/t/kibana-how-do-i-point-to-remote-instance-of-elasticsearch/274550)

<div class="topic-metadata">

**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\
**Replies:** 3\
**Last updated:** [June 1, 2021, 12:36am UTC](https://discuss.elastic.co/t/kibana-how-do-i-point-to-remote-instance-of-elasticsearch/274550 "2021-06-01T00:36:42Z")

</div>

Locally I have installed Elasticsearch and KIbana (version 7.8, OS = Windows 10). Using KIbana console and I can type in commands in left-hand-side, click "arrow" to execute command and see results in right-hand side. …

---

## [KQL : query\_string doesn't work](https://discuss.elastic.co/t/kql-query-string-doesnt-work/274451)

<div class="topic-metadata">

**Author:** [@lls](https://discuss.elastic.co/u/lls)\
**Replies:** 2\
**Last updated:** [May 31, 2021, 9:42pm UTC](https://discuss.elastic.co/t/kql-query-string-doesnt-work/274451 "2021-05-31T21:42:07Z")

</div>

Hi there: Interestingly, I'm not sure why the below "query\_string" doesn't returns any hits but it returns hits on 'Discovery UI's Filters section. Please advise, thanks "sql\_string" - This doesn't return any hits GET…

---

## [Text Files received by Logstash from Filebeat is not same as Source Files](https://discuss.elastic.co/t/text-files-received-by-logstash-from-filebeat-is-not-same-as-source-files/274512)

<div class="topic-metadata">

**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\
**Replies:** 2\
**Last updated:** [May 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/text-files-received-by-logstash-from-filebeat-is-not-same-as-source-files/274512 "2021-05-31T19:32:04Z")

</div>

Hi everyone... I am transferring text files from my Application Server to Logstash Server using below logstash config file. The files transmitted are received perfectly, but some of the lines in the received text files …

---

## [Logstash don't execute my two Pipelines file](https://discuss.elastic.co/t/logstash-dont-execute-my-two-pipelines-file/274400)

<div class="topic-metadata">

**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\
**Replies:** 4\
**Last updated:** [May 31, 2021, 5:49pm UTC](https://discuss.elastic.co/t/logstash-dont-execute-my-two-pipelines-file/274400 "2021-05-31T17:49:59Z")

</div>

i thease have two pipeline in the logstash pipeline folder logstash.conf : input { beats { port =\> 5066 } } filter { if \[cloud\]\[account\]\[id\] == "941682856883" { mutate { add\_field =\> { "ambiente" =\> "d…

---

## [Show udp source port](https://discuss.elastic.co/t/show-udp-source-port/274539)

<div class="topic-metadata">

**Author:** [@Alex\_Der](https://discuss.elastic.co/u/Alex_Der)\
**Replies:** 1\
**Last updated:** [May 31, 2021, 5:49pm UTC](https://discuss.elastic.co/t/show-udp-source-port/274539 "2021-05-31T17:49:28Z")

</div>

I'm using Logstash to ingest the logs sent (via udp) by 5 different applications running on another machine. Each aplication sends its log to Logstash from a different port (e.g. application\_1 from port 1760, applicatio…

---

## [Node sync fails and cluster goes to "red"](https://discuss.elastic.co/t/node-sync-fails-and-cluster-goes-to-red/274409)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 21\
**Last updated:** [May 31, 2021, 4:58pm UTC](https://discuss.elastic.co/t/node-sync-fails-and-cluster-goes-to-red/274409 "2021-05-31T16:58:37Z")

</div>

Hello, I hope you and your loved ones are safe and healthy. I have a 3 node cluster with 2 data nodes and 1 voting only node. I accidentally deleted the separate disk that holds data for one of the data node. I separa…

---

## [How to change "type" keyword in clone plugin](https://discuss.elastic.co/t/how-to-change-type-keyword-in-clone-plugin/274499)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 2\
**Last updated:** [May 31, 2021, 3:14pm UTC](https://discuss.elastic.co/t/how-to-change-type-keyword-in-clone-plugin/274499 "2021-05-31T15:14:50Z")

</div>

clone plugin default use "type" keyword. In my logstash configuration I use multiple times "type" keyword and now i need to add clone filter plugin in my logstash configuration. How can i use this plugin without using "…

---

## [Lamar Van Dusen](https://discuss.elastic.co/t/lamar-van-dusen/274467)

<div class="topic-metadata">

**Author:** [@lamarvandusen](https://discuss.elastic.co/u/lamarvandusen)\
**Replies:** 1\
**Last updated:** [May 31, 2021, 2:51pm UTC](https://discuss.elastic.co/t/lamar-van-dusen/274467 "2021-05-31T14:51:51Z")

</div>

i am Lamar Van Dusen from Alberta Canada. i am reading questions and answers from this website and i am learning so much from this website. I am new to this platform and i hope i will learn a lot from this site in the fu…

---

## [Can't log into Elastic (self hosted) "Oops! Error. Try again."](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 4\
**Last updated:** [May 31, 2021, 2:40pm UTC](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433 "2021-05-31T14:40:57Z")

</div>

If I want to log in it just says "Oops! Error. Try again.". The credentials are definitely right (if I change the password to random it says that the login/password is wrong and doesn't give this error). I can't find a…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=929)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=931)
