# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1120

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1121

---

## [How to use \<\> these brackets for search in kibana](https://discuss.elastic.co/t/how-to-use-these-brackets-for-search-in-kibana/258075)

<div class="topic-metadata">

**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 12:24pm UTC](https://discuss.elastic.co/t/how-to-use-these-brackets-for-search-in-kibana/258075 "2020-12-09T12:24:26Z")

</div>

Enables the \<\> operators. You can use \<\> to match a numeric range. For example: foo\<1-100\> # matches 'foo1', 'foo2' ... 'foo99', 'foo100' foo\<01-100\> # matches 'foo01', 'foo02' ... 'foo99', 'foo100' How to wr…

---

## [Elasticsearch - error while trying to start service on OpenShift](https://discuss.elastic.co/t/elasticsearch-error-while-trying-to-start-service-on-openshift/258088)

<div class="topic-metadata">

**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\
**Replies:** 7\
**Last updated:** [December 9, 2020, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-error-while-trying-to-start-service-on-openshift/258088 "2020-12-09T11:27:38Z")

</div>

Hi, I got following error in Elasticsearch. Elasticsearch is installed on Openshift. Elasticsearch version - 6.4.3. OSS Elasticsearch logs: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated i…

---

## [Nodes constantly turn off and on again](https://discuss.elastic.co/t/nodes-constantly-turn-off-and-on-again/257808)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 6\
**Last updated:** [December 9, 2020, 11:24am UTC](https://discuss.elastic.co/t/nodes-constantly-turn-off-and-on-again/257808 "2020-12-09T11:24:04Z")

</div>

Hi guys, I have a 14 nodes of cluster (11 data, 3 master).I am using Elasticsearch and kibana version 7.4.2. When everything is going well, suddenly the nodes started to shut down and the kibana status turns red or yello…

---

## [London Information Retrieval Meetup December](https://discuss.elastic.co/t/london-information-retrieval-meetup-december/258032)

<div class="topic-metadata">

**Author:** [@lizbiella](https://discuss.elastic.co/u/lizbiella)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 5:49pm UTC](https://discuss.elastic.co/t/london-information-retrieval-meetup-december/258032 "2020-12-08T17:49:57Z")

</div>

The London Information Retrieval Meetup has moved online! It is a free evening meetup aimed at Information Retrieval passionates and professionals who are curious to explore and discuss the latest trends in the field. …

---

## [Scoring plugin, unexpected behavior](https://discuss.elastic.co/t/scoring-plugin-unexpected-behavior/258105)

<div class="topic-metadata">

**Author:** [@iva3682](https://discuss.elastic.co/u/iva3682)\
**Replies:** 0\
**Last updated:** [December 9, 2020, 10:21am UTC](https://discuss.elastic.co/t/scoring-plugin-unexpected-behavior/258105 "2020-12-09T10:21:16Z")

</div>

Hey. I am writing a plugin for calculating the distance of the EMD vector for Elastic 7.10.0. I took the repository as an example https://github.com/elastic/elasticsearch/tree/master/plugins/examples/script-expert-scorin…

---

## [Please help with elapsed plugin and timestap difference](https://discuss.elastic.co/t/please-help-with-elapsed-plugin-and-timestap-difference/257628)

<div class="topic-metadata">

**Author:** [@fabryx87](https://discuss.elastic.co/u/fabryx87)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 10:28am UTC](https://discuss.elastic.co/t/please-help-with-elapsed-plugin-and-timestap-difference/257628 "2020-12-09T10:28:03Z")

</div>

Hello everyone and thanks for this great Forum! I would need a hand with elastic, I have to make a difference between 2 timestamps that have the logonid in common, but different event.action. unfortunately I don't even…

---

## [Elasticsearch mapping ES2.3 -\> ES 7.8](https://discuss.elastic.co/t/elasticsearch-mapping-es2-3-es-7-8/258078)

<div class="topic-metadata">

**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-es2-3-es-7-8/258078 "2020-12-09T10:13:50Z")

</div>

Assume that the defined mapping in ES2.3 has this format. "properties": { "accountId": { "type": "string", "index": "not\_analyzed" } } Is it equivalent to this in ES 7.8 version? "properties": { …

---

## [Timestamp search from file](https://discuss.elastic.co/t/timestamp-search-from-file/257853)

<div class="topic-metadata">

**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\
**Replies:** 4\
**Last updated:** [December 9, 2020, 9:42am UTC](https://discuss.elastic.co/t/timestamp-search-from-file/257853 "2020-12-09T09:42:41Z")

</div>

Hello, I have no experience with Elasticsearch, however I wish to setup an environment to be able to search through some large csv files. The import with logstash works, however I have two issues: timestamp scale is u…

---

## [Algorithmic complexity of bool queries](https://discuss.elastic.co/t/algorithmic-complexity-of-bool-queries/258084)

<div class="topic-metadata">

**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 8:46am UTC](https://discuss.elastic.co/t/algorithmic-complexity-of-bool-queries/258084 "2020-12-09T08:46:15Z")

</div>

I've been searching all over the net to get an understanding of the algorithmic complexity / rough big-O of bool queries for Elasticsearch, but I have come up dry so I'm asking here. (Note: this is not a question about c…

---

## [Unable to get gte and lte from elastic Java API in range query](https://discuss.elastic.co/t/unable-to-get-gte-and-lte-from-elastic-java-api-in-range-query/257781)

<div class="topic-metadata">

**Author:** [@AKASH\_DUBEY1](https://discuss.elastic.co/u/AKASH_DUBEY1)\
**Replies:** 22\
**Last updated:** [December 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/unable-to-get-gte-and-lte-from-elastic-java-api-in-range-query/257781 "2020-12-09T08:47:57Z")

</div>

Hi , I am using RestHighLevelclient to get data from elastic.I am using below query BoolQueryBuilder boolQuery=QueryBuilders.boolQuery(); boolQuery.must(QueryBuilders.rangeQuery("ipFromLong").gte(ipLong)); boolQuery.…

---

## [Resource upper bounds on keyword sorting](https://discuss.elastic.co/t/resource-upper-bounds-on-keyword-sorting/258095)

<div class="topic-metadata">

**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\
**Replies:** 0\
**Last updated:** [December 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/resource-upper-bounds-on-keyword-sorting/258095 "2020-12-09T08:47:26Z")

</div>

I was reading through the docs on fielddata and came about this: It usually doesn’t make sense to enable fielddata on text fields. Field data is stored in the heap with the field data cache because it is expensive to c…

---

## [EdgeGram Search trouble](https://discuss.elastic.co/t/edgegram-search-trouble/258070)

<div class="topic-metadata">

**Author:** [@murilozilli](https://discuss.elastic.co/u/murilozilli)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 8:30am UTC](https://discuss.elastic.co/t/edgegram-search-trouble/258070 "2020-12-09T08:30:15Z")

</div>

I am very new to ES so I am probably getting something wrong but this is my mapping and settings: { "locations":{ "mappings":{ "locations":{ "\_meta":{ …

---

## [Pin filter in a specific dashboard](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199)

<div class="topic-metadata">

**Author:** [@yaelg](https://discuss.elastic.co/u/yaelg)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 8:29am UTC](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199 "2020-12-09T08:29:55Z")

</div>

Hey everyone, I'm quite new to ELK so my question might be trivial. I am working with multiple dashboards. Is there a way to pin a filter only in one dashboards? whenever I pin a filter, it applies it to all dashboards…

---

## [Price sort not working in elasticsearch 7.9.3 version](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970)

<div class="topic-metadata">

**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\
**Replies:** 11\
**Last updated:** [December 9, 2020, 8:27am UTC](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970 "2020-12-09T08:27:12Z")

</div>

Hi everyone, Currently I am using the Elasticsearch 7.9.3 version. the issue is price sort works wrong after upgrading the old version. Price data's are mixed with double , integer. Please let me know what happened in t…

---

## [How to calculate weighted score depending on order of an array field](https://discuss.elastic.co/t/how-to-calculate-weighted-score-depending-on-order-of-an-array-field/258071)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 8:12am UTC](https://discuss.elastic.co/t/how-to-calculate-weighted-score-depending-on-order-of-an-array-field/258071 "2020-12-09T08:12:26Z")

</div>

I would like to search by an array field, and give weight depending on where the value appears in the arrays. For example, I have 3 documents like this: { "foo": \[1, 2, 3\] } { "foo": \[2, 3, 4\] } { "foo": \[3, 4, 5\] } a…

---

## [Data is lost when outputting to file](https://discuss.elastic.co/t/data-is-lost-when-outputting-to-file/258089)

<div class="topic-metadata">

**Author:** [@lon](https://discuss.elastic.co/u/lon)\
**Replies:** 0\
**Last updated:** [December 9, 2020, 8:06am UTC](https://discuss.elastic.co/t/data-is-lost-when-outputting-to-file/258089 "2020-12-09T08:06:00Z")

</div>

\[Please excuse my poor English...\] If output the file to the same file with a line codec of the file output, the data will be lost. my logstash.conf input { beats { port =\> "5044" } } …

---

## [Logs of elastic stack components should go to their respective log file](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 4\
**Last updated:** [December 9, 2020, 7:48am UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732 "2020-12-09T07:48:19Z")

</div>

Hi Team, I am seeing logs of elastic stack components such as Kibana, Logstash, filebeat are going everywhere like in /var/log/message , /var/log/daemon, journal.log and flooding filesystem. how to make sure logs of el…

---

## [Downgrade elasticsearch to previous version](https://discuss.elastic.co/t/downgrade-elasticsearch-to-previous-version/258083)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 7:42am UTC](https://discuss.elastic.co/t/downgrade-elasticsearch-to-previous-version/258083 "2020-12-09T07:42:44Z")

</div>

Hi All, I am planning to upgrade my 6 node elk cluster from 7.7 to 7.10. I am just looking for a scenario when two nodes are upgraded and 3rd node fails. So is there a way to downgrade all the nodes back to v7.7

---

## [In my filebeat enable system module and application logs](https://discuss.elastic.co/t/in-my-filebeat-enable-system-module-and-application-logs/257985)

<div class="topic-metadata">

**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 7:01am UTC](https://discuss.elastic.co/t/in-my-filebeat-enable-system-module-and-application-logs/257985 "2020-12-09T07:01:01Z")

</div>

I am sending these logs to logstash. But here both application, system logs are going to one index. But I want send to two indexes. This is logstash pipeline. input { beats { port =\> 5044 ssl =\> false } } output …

---

## [Elasticsearch muat\_not match on all elemets of array](https://discuss.elastic.co/t/elasticsearch-muat-not-match-on-all-elemets-of-array/257997)

<div class="topic-metadata">

**Author:** [@roy\_einhorn](https://discuss.elastic.co/u/roy_einhorn)\
**Replies:** 6\
**Last updated:** [December 9, 2020, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-muat-not-match-on-all-elemets-of-array/257997 "2020-12-09T06:58:01Z")

</div>

i have multiple documents with a field containing an array : for example: "person1" : \[ { "network" : "A" }, { "network" : "B" }, \] "person2" : \[ { "network" : "A" }, { "network" : "C" } \] i want to look…

---

## [Minimum Elasticsearch Hardware Requirement](https://discuss.elastic.co/t/minimum-elasticsearch-hardware-requirement/258074)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 6:57am UTC](https://discuss.elastic.co/t/minimum-elasticsearch-hardware-requirement/258074 "2020-12-09T06:57:37Z")

</div>

Hi Experts, I want to configure Elasticsearch Cluster from Data Ingested per day and retention period. Is there any formula to calculate Number of Nodes required , Minimum Ram and Processor cores and storage Requiremen…

---

## [General information regarding ELK](https://discuss.elastic.co/t/general-information-regarding-elk/258073)

<div class="topic-metadata">

**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 6:36am UTC](https://discuss.elastic.co/t/general-information-regarding-elk/258073 "2020-12-09T06:36:10Z")

</div>

Hello Team, I wanted to know some of the information regarding elk as I am new to this topic a) Difference between ELK self vs ELk managed b) Approach for pushing logs into ELK to meet near / real-time requirement ki…

---

## [Translated SQL query to SearchRequest](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087)

<div class="topic-metadata">

**Author:** [@yuriy.kasterin](https://discuss.elastic.co/u/yuriy.kasterin)\
**Replies:** 7\
**Last updated:** [November 4, 2020, 11:20am UTC](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087 "2020-11-04T11:20:40Z")

</div>

Hello I want to create a search request from a translated SQL query. Here is the code that i use to translate the SQL query to json ES query: RestClient restClient = RestClient.builder( new HttpHost("local…

---

## [Elasticsearch server could not be reached](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937)

<div class="topic-metadata">

**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\
**Replies:** 5\
**Last updated:** [December 9, 2020, 3:57am UTC](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937 "2020-12-09T03:57:31Z")

</div>

I just want to integrate external https Elasticsearch server URI with Drupal 8 version. I got an external https Elasticsearch server URI and got the credentials for it. When I’m accessing the https Elasticsearch server …

---

## [Kibana interacting with Elasticsearch](https://discuss.elastic.co/t/kibana-interacting-with-elasticsearch/257940)

<div class="topic-metadata">

**Author:** [@anarnold](https://discuss.elastic.co/u/anarnold)\
**Replies:** 5\
**Last updated:** [December 9, 2020, 3:39am UTC](https://discuss.elastic.co/t/kibana-interacting-with-elasticsearch/257940 "2020-12-09T03:39:04Z")

</div>

Hi All, I was exploring the Kibana as one of our solutions for Observability. Had 2 queries: Q: How does Kibana interact with the elasticsearch? Does it internally call the same elasticsearch APIs that are already expo…

---

## [Query seach in elasticsearch](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939)

<div class="topic-metadata">

**Author:** [@111411](https://discuss.elastic.co/u/111411)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 7:24am UTC](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939 "2020-12-08T07:24:24Z")

</div>

I'm trying to search in elasticsearch by query. I'm want to get uuid = 002A13AC-93E6-4141-AA28-0A86F1B5E5C2 of device index. GET device/\_search? { "query": { "match": { "uuid" : "0aaa02A13AC-93E6-4141-AA28-0A86F1B5…

---

## [Elasticsearch 7.9 will spend long time to forcemerge](https://discuss.elastic.co/t/elasticsearch-7-9-will-spend-long-time-to-forcemerge/257983)

<div class="topic-metadata">

**Author:** [@gaocx2000cn](https://discuss.elastic.co/u/gaocx2000cn)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 11:43pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-will-spend-long-time-to-forcemerge/257983 "2020-12-08T23:43:26Z")

</div>

Elasticsearch 7.9 will spend long time to forcemerge. curl -s -XPOST http://:9200/\_forcemerge?max\_num\_segments=1 Elasticsearch 6.2 will spend less time to forcemerge. We have same data source on Elasticsearch 6.2 and …

---

## [What do you think is more critical? To allocate more resources or change architecture?](https://discuss.elastic.co/t/what-do-you-think-is-more-critical-to-allocate-more-resources-or-change-architecture/258003)

<div class="topic-metadata">

**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\
**Replies:** 12\
**Last updated:** [December 8, 2020, 10:29pm UTC](https://discuss.elastic.co/t/what-do-you-think-is-more-critical-to-allocate-more-resources-or-change-architecture/258003 "2020-12-08T22:29:29Z")

</div>

I have multiple issues with Elasticsearch right now. I'm running out of disk I'm running out of memory Architecture may need to change since I have more than 600 shards per node. For sure, I will add a new node to the …

---

## [Cannot connect to elasticsearch server instance on port 9200](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728)

<div class="topic-metadata">

**Author:** [@freshlinx](https://discuss.elastic.co/u/freshlinx)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 9:54pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728 "2020-12-08T21:54:12Z")

</div>

I have installed Elasticsearch and when I run a curl localhost:9200 request on the machine it returns the expected response showing that Elasticsearch is running. I have a Wordpress site on another server and I want to …

---

## [Kibana Clustering](https://discuss.elastic.co/t/kibana-clustering/257961)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 9:48pm UTC](https://discuss.elastic.co/t/kibana-clustering/257961 "2020-12-08T21:48:45Z")

</div>

Hi guys I\`ve using a cluster with 5 nodes (Elasticsearch) The question is, in "Stack Monitoring" I see GREEN health and OK nodes(one of them is master) but my Kibana is like this: How can I have multi-instance of Ki…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1119)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1121)
