# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=932 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 933 --- ## [Elastic search wildcard search space issue](https://discuss.elastic.co/t/elastic-search-wildcard-search-space-issue/274263)
**Author:** [@Mithoon](https://discuss.elastic.co/u/Mithoon)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 7:53am UTC](https://discuss.elastic.co/t/elastic-search-wildcard-search-space-issue/274263 "2021-05-31T07:53:26Z")
Consider index field " ProductName " having the value " dove 3.75oz " and when user searches for "dove 3.75oz" text below bool query is working fine to retreive the document: {"bool":{"must":\[{"wildcard":{"ProductName":… --- ## [How to merge two indices in Kibana?](https://discuss.elastic.co/t/how-to-merge-two-indices-in-kibana/274322)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 7:34am UTC](https://discuss.elastic.co/t/how-to-merge-two-indices-in-kibana/274322 "2021-05-31T07:34:55Z")
It is possible to merge to indices in kibana. In two indices some columns are same and some not. I want to merge that indices into one. I have merge two indices but they are appended. Means I get the appended data one ov… --- ## [Export CSV from Vegalite Visualization](https://discuss.elastic.co/t/export-csv-from-vegalite-visualization/274160)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 7:25am UTC](https://discuss.elastic.co/t/export-csv-from-vegalite-visualization/274160 "2021-05-31T07:25:01Z")
I want to export the data in csv format from vegalite visualization. is it possible in kibana? --- ## [Speed Up Query of huge indices](https://discuss.elastic.co/t/speed-up-query-of-huge-indices/274424)
**Author:** [@arkash20](https://discuss.elastic.co/u/arkash20)\ **Replies:** 6\ **Last updated:** [May 31, 2021, 7:24am UTC](https://discuss.elastic.co/t/speed-up-query-of-huge-indices/274424 "2021-05-31T07:24:09Z")
Hi, I would like to have your opinion about the next challenge I face: We have an index with about 200M records. We would like get all the records periodically, and send it to a service for some internal purpose. I t… --- ## [Elasticsearch Ram recommendation](https://discuss.elastic.co/t/elasticsearch-ram-recommendation/274300)
**Author:** [@godisdj007](https://discuss.elastic.co/u/godisdj007)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch-ram-recommendation/274300 "2021-05-31T07:23:50Z")
I'm deploying an Elasticsearch cluster with roughly 40GB a day with a time-to-live of 365 days. Write speed would be around 50 msgs/sec. Reads would be mostly driven by user dashboards, so the read frequency won't be hig… --- ## [Sending data from elasticsearch to mixpanel](https://discuss.elastic.co/t/sending-data-from-elasticsearch-to-mixpanel/274455)
**Author:** [@faizanammar](https://discuss.elastic.co/u/faizanammar)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 7:18am UTC](https://discuss.elastic.co/t/sending-data-from-elasticsearch-to-mixpanel/274455 "2021-05-31T07:18:13Z")
Hello, I wanna know and have guidance on any mechanism to send the data stored in ElasticSearch to MixPanel. Is there any way to accomplish this.? Thanks. F. --- ## [503 Service Unavailable - Master not discovered error in AKS](https://discuss.elastic.co/t/503-service-unavailable-master-not-discovered-error-in-aks/273713)
**Author:** [@pindropviolence](https://discuss.elastic.co/u/pindropviolence)\ **Replies:** 3\ **Last updated:** [May 31, 2021, 7:18am UTC](https://discuss.elastic.co/t/503-service-unavailable-master-not-discovered-error-in-aks/273713 "2021-05-31T07:18:03Z")
HI, I have a AKS cluster (k1) with 3 nodes. I have deployed ECK operator using all\_in\_one.yaml. I have another AKS cluster(k2) which is running my application stack , i have installed filebeats in this cluster (k2) and… --- ## [Mathlion](https://discuss.elastic.co/t/mathlion/274354)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 3\ **Last updated:** [May 31, 2021, 6:45am UTC](https://discuss.elastic.co/t/mathlion/274354 "2021-05-31T06:45:18Z")
Hi I would like to use mathlion for calculation of daily data which is stored in elastic search.... I am using latest version of kibana 7.13 --- ## [Relevant data not coming in elasticsearch](https://discuss.elastic.co/t/relevant-data-not-coming-in-elasticsearch/274456)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 6:40am UTC](https://discuss.elastic.co/t/relevant-data-not-coming-in-elasticsearch/274456 "2021-05-31T06:40:25Z")
Hi, I am building a search with edge ngram. Here is my mapping: PUT xyz { "settings": { "analysis": { "filter": { "autocomplete": { "type": "edge\_ngram", "min\_gram": 2, "max\_g… --- ## [All fields should at least contain one term and all terms should be present](https://discuss.elastic.co/t/all-fields-should-at-least-contain-one-term-and-all-terms-should-be-present/272426)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 6\ **Last updated:** [May 31, 2021, 5:43am UTC](https://discuss.elastic.co/t/all-fields-should-at-least-contain-one-term-and-all-terms-should-be-present/272426 "2021-05-31T05:43:47Z")
Hello, How can I query documents where all fields should at least contain one term and all terms should be present ? Suppose I have this index PUT /test\_query { "mappings": { "properties": { "firstname": { … --- ## [I want to save all \_grokparsefailure entries in a file to review them later, however](https://discuss.elastic.co/t/i-want-to-save-all-grokparsefailure-entries-in-a-file-to-review-them-later-however/273477)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 5\ **Last updated:** [May 31, 2021, 5:22am UTC](https://discuss.elastic.co/t/i-want-to-save-all-grokparsefailure-entries-in-a-file-to-review-them-later-however/273477 "2021-05-31T05:22:17Z")
My output configuration portion: if "\_grokparsefailure" in \[tags\] { file { path =\> "/home/myaccount/testfolder/grokfailures" file\_mode =\> 0600 } } else { file { path =\> "/home/myaccount/testfolder/groksuccess" … --- ## [Kibana is not acessible locally](https://discuss.elastic.co/t/kibana-is-not-acessible-locally/274397)
**Author:** [@hulkbuster](https://discuss.elastic.co/u/hulkbuster)\ **Replies:** 2\ **Last updated:** [May 30, 2021, 11:34pm UTC](https://discuss.elastic.co/t/kibana-is-not-acessible-locally/274397 "2021-05-30T23:34:03Z")
Hello! I'm new to Kibana and trying to setup Elastic Stack locally following this tutorial: https://www.rosehosting.com/blog/how-to-install-elk-stack-on-ubuntu-20-04/ All systemd services are running, but Kibana is not… --- ## [Updating from 7.10 to 7.13](https://discuss.elastic.co/t/updating-from-7-10-to-7-13/274163)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 3\ **Last updated:** [May 30, 2021, 10:11pm UTC](https://discuss.elastic.co/t/updating-from-7-10-to-7-13/274163 "2021-05-30T22:11:18Z")
Hi, I have a single node environment: On Server: Elasticsearch 7.10 Kibana 7.10 logstash 7.10 On Clients: packetbeat and winlogbeat both 7.10 versions. 1- How can I update to the latest version? Is there a single w… --- ## [Is there a way to exclude unwanted lines into one event with logstash](https://discuss.elastic.co/t/is-there-a-way-to-exclude-unwanted-lines-into-one-event-with-logstash/274309)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 3\ **Last updated:** [May 30, 2021, 5:13pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-exclude-unwanted-lines-into-one-event-with-logstash/274309 "2021-05-30T17:13:58Z")
i want to delete certain lines in the messsage field using logstash .I don't want to drop the field just extra lines in the field. is it possible ? --- ## [Aggregation on time series data (metricbeat and TSVB)](https://discuss.elastic.co/t/aggregation-on-time-series-data-metricbeat-and-tsvb/273455)
**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\ **Replies:** 4\ **Last updated:** [May 30, 2021, 2:27pm UTC](https://discuss.elastic.co/t/aggregation-on-time-series-data-metricbeat-and-tsvb/273455 "2021-05-30T14:27:54Z")
Hi all, The scenarios is as follow: We are using metricbeat to capture metrics from multiple Kubernetes clusters into a single Elasticsearch cluster, we have enriched the data by adding a label using the processor, by … --- ## [File structure cannot be determined. illegal\_argument\_exception](https://discuss.elastic.co/t/file-structure-cannot-be-determined-illegal-argument-exception/273858)
**Author:** [@Muhammad\_Uxman](https://discuss.elastic.co/u/Muhammad_Uxman)\ **Replies:** 2\ **Last updated:** [May 30, 2021, 6:01am UTC](https://discuss.elastic.co/t/file-structure-cannot-be-determined-illegal-argument-exception/273858 "2021-05-30T06:01:08Z")
Hi Elastic Community, I am new to Kibana and Elastic. I am following the official Elastic tutorial. In the demonstration, a file was uploaded to Data Visualizer, which was analyzed successfully, but I got the following… --- ## [Qradar Logs to Logstash/Elastic?](https://discuss.elastic.co/t/qradar-logs-to-logstash-elastic/274385)
**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\ **Replies:** 3\ **Last updated:** [May 30, 2021, 12:58am UTC](https://discuss.elastic.co/t/qradar-logs-to-logstash-elastic/274385 "2021-05-30T00:58:02Z")
we have a Qradar SIEM which we plan to extend to Elastic for threat hunting(Log Forwarding from Qradar to Elastic) Has anyone found any success with it. Any known shortcomings/pitfalls from the setup. --- ## [Kibana | FATAL Error: HELP](https://discuss.elastic.co/t/kibana-fatal-error-help/274274)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 6\ **Last updated:** [May 30, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-fatal-error-help/274274 "2021-05-30T00:09:33Z")
Hi all I've obtained this error: I've created some plot through vega lite and when I execute again the script used for kibana I've this error but until some time before everthing works well. I've a node of kibana and a… --- ## [Filebeat not working](https://discuss.elastic.co/t/filebeat-not-working/274316)
**Author:** [@Drupad\_Soni](https://discuss.elastic.co/u/Drupad_Soni)\ **Replies:** 4\ **Last updated:** [May 29, 2021, 8:32pm UTC](https://discuss.elastic.co/t/filebeat-not-working/274316 "2021-05-29T20:32:24Z")
Filebeat not working ● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; disabled; vendor preset: enabled) Active: failed (Resu… --- ## [Slow logs search en ES 7.x](https://discuss.elastic.co/t/slow-logs-search-en-es-7-x/273866)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 2\ **Last updated:** [May 29, 2021, 5:41pm UTC](https://discuss.elastic.co/t/slow-logs-search-en-es-7-x/273866 "2021-05-29T17:41:22Z")
Hola, Tengo un clúster en el cual tengo una media de búsqueda de unos 3seg dependiendo de la búsqueda, para saber en qué fase de la búsqueda y que búsqueda tarda más he activado los slow logs durante un par de horas y h… --- ## [Machine Configuration for elasticsearch as a database](https://discuss.elastic.co/t/machine-configuration-for-elasticsearch-as-a-database/273735)
**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\ **Replies:** 2\ **Last updated:** [May 29, 2021, 11:33am UTC](https://discuss.elastic.co/t/machine-configuration-for-elasticsearch-as-a-database/273735 "2021-05-29T11:33:59Z")
Hi I am trying to move the SQL database into elasticsearch. Successfully flattened the data from SQL into elasticsearch. These is the details of the index which was created from SQL to elastic Doc'sCount : 49201833, S… --- ## [Logstash not starting with the error "error: jvm options parser failed; exiting"](https://discuss.elastic.co/t/logstash-not-starting-with-the-error-error-jvm-options-parser-failed-exiting/274393)
**Author:** [@Swaroop\_S](https://discuss.elastic.co/u/Swaroop_S)\ **Replies:** 1\ **Last updated:** [May 29, 2021, 8:44am UTC](https://discuss.elastic.co/t/logstash-not-starting-with-the-error-error-jvm-options-parser-failed-exiting/274393 "2021-05-29T08:44:51Z")
Hi All, I downloaded the logstash file and created the config file and I am trying to start the logstash with the command "logstash -f simple-config.conf" after navigating to bin folder in logstash. But I am getting err… --- ## [Index rotation](https://discuss.elastic.co/t/index-rotation/274150)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 2\ **Last updated:** [May 29, 2021, 8:41am UTC](https://discuss.elastic.co/t/index-rotation/274150 "2021-05-29T08:41:54Z")
Hello, I would like to know if there is a way to rotate an index for a period of time. I have an app that writes to a fix ES index name and I need to to rotate the index lets say after one day "app-index-0001", the next… --- ## [Update API - Async on server-side](https://discuss.elastic.co/t/update-api-async-on-server-side/274388)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 3\ **Last updated:** [May 29, 2021, 8:03am UTC](https://discuss.elastic.co/t/update-api-async-on-server-side/274388 "2021-05-29T08:03:23Z")
Is it possible to execute the following request asynchronously on the server side? POST test/\_update/1 { "script" : "ctx.\_source.new\_field = 'value\_of\_new\_field'" } By "server side", I mean server should write the re… --- ## [Calculs statistiques en pourcentage (turnover)](https://discuss.elastic.co/t/calculs-statistiques-en-pourcentage-turnover/273289)
**Author:** [@crigastel](https://discuss.elastic.co/u/crigastel)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 10:34pm UTC](https://discuss.elastic.co/t/calculs-statistiques-en-pourcentage-turnover/273289 "2021-05-28T22:34:59Z")
Bonjour, Nous utilisons Kibana avec des données salariés (nom, prénom, date d'entrée, date de sortie, statut actif/inactif...). J'ai réussi à réaliser des indicateurs RH (répartition H/F, effectif par site, service, âg… --- ## [Search by all variants of a value](https://discuss.elastic.co/t/search-by-all-variants-of-a-value/274023)
**Author:** [@Carina\_Sirbu](https://discuss.elastic.co/u/Carina_Sirbu)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:33pm UTC](https://discuss.elastic.co/t/search-by-all-variants-of-a-value/274023 "2021-05-28T21:33:49Z")
Hello, I have an application where the user can search for beauty products. Let's say the user wants to find all products from L'Oréal company. So when he goes to the search, he might type: LOREAL, L'OREAL, L'oreal, L'o… --- ## [Problem with fuction\_score and field\_value\_factor](https://discuss.elastic.co/t/problem-with-fuction-score-and-field-value-factor/274330)
**Author:** [@Biiru](https://discuss.elastic.co/u/Biiru)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:17pm UTC](https://discuss.elastic.co/t/problem-with-fuction-score-and-field-value-factor/274330 "2021-05-28T21:17:49Z")
Hi all, I have a problem with a query GET score-score-score/\_search { "query": { "function\_score": { "query": { "bool": { "must": \[ {"term": { "validity": true }}, … --- ## [Histogram hard\_bounds not working with min\_doc\_count=0 Kibana 7.10.2](https://discuss.elastic.co/t/histogram-hard-bounds-not-working-with-min-doc-count-0-kibana-7-10-2/274375)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/histogram-hard-bounds-not-working-with-min-doc-count-0-kibana-7-10-2/274375 "2021-05-28T20:18:37Z")
I'm creating a histogram and running into issues where extended\_bounds is pulling back a lot more buckets than it should. The upper and low bounds of the histogram can vary dramatically in my plugin and the interval size… --- ## [Logstash filter based on reference set or database](https://discuss.elastic.co/t/logstash-filter-based-on-reference-set-or-database/274302)
**Author:** [@redfish462](https://discuss.elastic.co/u/redfish462)\ **Replies:** 3\ **Last updated:** [May 28, 2021, 8:07pm UTC](https://discuss.elastic.co/t/logstash-filter-based-on-reference-set-or-database/274302 "2021-05-28T20:07:16Z")
Hello, I have to redirect some logs based on their username (the usernames are contains in the logs) to different outputs. This list has 80 entry, so it's a lot to write this in the configuration file. I would like to … --- ## [Calculating fields in logstash on upsert](https://discuss.elastic.co/t/calculating-fields-in-logstash-on-upsert/274371)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 7:59pm UTC](https://discuss.elastic.co/t/calculating-fields-in-logstash-on-upsert/274371 "2021-05-28T19:59:01Z")
Hi I have a pipeline used to enrich some json data from different sources to build up an index for a report. I would like to do a calculation based on 2 fields from the different sources, but since the sources are diffe… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=931) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=933)