# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1275 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1276 --- ## [Query connected and seperated words (ie: everybody - every body)](https://discuss.elastic.co/t/query-connected-and-seperated-words-ie-everybody-every-body/245403)
**Author:** [@ziv](https://discuss.elastic.co/u/ziv)\ **Replies:** 5\ **Last updated:** [August 19, 2020, 11:32am UTC](https://discuss.elastic.co/t/query-connected-and-seperated-words-ie-everybody-every-body/245403 "2020-08-19T11:32:04Z")
I have a document with the following description: "we have a lot of skin care products". and when I'm trying to query with the word "skincare" I get score 0. is there a tokenizer for this case? to treat words like ski… --- ## [Elastic Search Remove Elements From Nested Object](https://discuss.elastic.co/t/elastic-search-remove-elements-from-nested-object/245587)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 11:25am UTC](https://discuss.elastic.co/t/elastic-search-remove-elements-from-nested-object/245587 "2020-08-19T11:25:04Z")
I have created an index in elastic search with a nested type field. and added documents into the index. Now I want to remove some elements from nested objects who match the condition using UpdateByQuery. I have tried the… --- ## [How to fix heap size problem against big data (CircuitBreakingException)](https://discuss.elastic.co/t/how-to-fix-heap-size-problem-against-big-data-circuitbreakingexception/245554)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 3\ **Last updated:** [August 19, 2020, 10:55am UTC](https://discuss.elastic.co/t/how-to-fix-heap-size-problem-against-big-data-circuitbreakingexception/245554 "2020-08-19T10:55:45Z")
Hi I have an issue with my cluster. I want to know how can I fix the heap memory against big data? Consider that I can\`t increase the size or another memory... What is the solution? --- ## [Ways to run es on arm/alpha architecture with lower es-versions](https://discuss.elastic.co/t/ways-to-run-es-on-arm-alpha-architecture-with-lower-es-versions/245561)
**Author:** [@duanyongvictory](https://discuss.elastic.co/u/duanyongvictory)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 10:43am UTC](https://discuss.elastic.co/t/ways-to-run-es-on-arm-alpha-architecture-with-lower-es-versions/245561 "2020-08-19T10:43:30Z")
Hi all: Does anyone know how to run es on arm/alpha architecture with lower es-version? my es version is 5.4.2 and with lots of application running on it. I can only found es version 7.8.0 which is suitable for arm, … --- ## [How to filter a field with entries of different version number formats in Elasticsearch documents](https://discuss.elastic.co/t/how-to-filter-a-field-with-entries-of-different-version-number-formats-in-elasticsearch-documents/245427)
**Author:** [@siiman](https://discuss.elastic.co/u/siiman)\ **Replies:** 3\ **Last updated:** [August 19, 2020, 10:28am UTC](https://discuss.elastic.co/t/how-to-filter-a-field-with-entries-of-different-version-number-formats-in-elasticsearch-documents/245427 "2020-08-19T10:28:23Z")
Hello, everyone, how to filter and sort a field with entries of different version numbers in Elasticsearch documents? For example different documents contain the field version with entries like "10.0", "10.1.5", "9" or… --- ## [Help needed in refactoring Elasticsearch Query](https://discuss.elastic.co/t/help-needed-in-refactoring-elasticsearch-query/245581)
**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 10:23am UTC](https://discuss.elastic.co/t/help-needed-in-refactoring-elasticsearch-query/245581 "2020-08-19T10:23:41Z")
I am trying to refactor a elasticsearch query from written for 2.4 (it's a very old one) and want to make it compatible for elasticsearch 7.5 Here is my structured query: { 'query': { 'filtered': { 'filter'… --- ## [Color in a field in the dashboard](https://discuss.elastic.co/t/color-in-a-field-in-the-dashboard/245218)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 10\ **Last updated:** [August 19, 2020, 10:16am UTC](https://discuss.elastic.co/t/color-in-a-field-in-the-dashboard/245218 "2020-08-19T10:16:05Z")
Hello, I would like to know if its possible to display colored fields based on the message. For ex : If a server down is down, I would get the status as UP or DOWN on the dashboard. I would like to modify it as If th… --- ## [Elasticsearch query timeout](https://discuss.elastic.co/t/elasticsearch-query-timeout/245579)
**Author:** [@ubazu](https://discuss.elastic.co/u/ubazu)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-query-timeout/245579 "2020-08-19T10:05:17Z")
I am running an ES node on a 8 cores/16G RAM Qbox server. I am doing some indexing and search operations. indexing(max 5/second), search(max 14/second). My index has around 2M records and 1.2G of data. Search query take… --- ## [ADD FIELD OVERWRITES DATA](https://discuss.elastic.co/t/add-field-overwrites-data/244008)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 3\ **Last updated:** [August 19, 2020, 9:57am UTC](https://discuss.elastic.co/t/add-field-overwrites-data/244008 "2020-08-19T09:57:46Z")
Hi guys, I'm trying to add data in a field like an array, but my grok or mutate overwrites it, could someone take a look? This is my code: \`filter { if \[message\] =~ "TargetID:" { drop{} } grok { patterns\_dir =\> \[… --- ## [GET query replacing "+" sign from document id](https://discuss.elastic.co/t/get-query-replacing-sign-from-document-id/245574)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 9:50am UTC](https://discuss.elastic.co/t/get-query-replacing-sign-from-document-id/245574 "2020-08-19T09:50:17Z")
when I am searching for a document using "\_id" ,GET query is replacing "+" sign in the id with empty space. below is my id and query. id: 2FDC1B4CF35B1A29A5F1FA232410B08887B40E46EMD5DOHcKn5R+q6Wiipsx8Hkg==202008180133… --- ## [Get the total number of fields of a given index](https://discuss.elastic.co/t/get-the-total-number-of-fields-of-a-given-index/245566)
**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 9:28am UTC](https://discuss.elastic.co/t/get-the-total-number-of-fields-of-a-given-index/245566 "2020-08-19T09:28:10Z")
I am facing update mapping errors on an ES (6.1) index because it seems we reached the limit index.mapping.total\_fields.limit. The error is: Limit of total fields \[1200\] in index \[coin\] has been exceeded However, if I … --- ## [Getting GC overhead on Elasticsearch](https://discuss.elastic.co/t/getting-gc-overhead-on-elasticsearch/245526)
**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\ **Replies:** 6\ **Last updated:** [August 19, 2020, 9:15am UTC](https://discuss.elastic.co/t/getting-gc-overhead-on-elasticsearch/245526 "2020-08-19T09:15:40Z")
Hi, We were getting more GC on elasticsearch. Please help me, due to this issue, ES node crashing suddenly { "\_nodes": { "total": 9, "successful": 9, "failed": 0 }, "cluster\_name": "AWS-Pre-Productio… --- ## [Does IDF count documents that don't have a field](https://discuss.elastic.co/t/does-idf-count-documents-that-dont-have-a-field/245562)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 9:10am UTC](https://discuss.elastic.co/t/does-idf-count-documents-that-dont-have-a-field/245562 "2020-08-19T09:10:11Z")
First let me check my assumption is correct . As i understand ES calculates IDF across specific fields. So when I read things like "It is a ratio of all documents to documents containing the searched term." it really mea… --- ## [ダッシュボード表示時間のパフォーマンス向上について](https://discuss.elastic.co/t/topic/242682)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 8:31am UTC](https://discuss.elastic.co/t/topic/242682 "2020-08-19T08:31:35Z")
以下のように、月毎にローテートするインデックスがあります。 XXXXXX-YYYY.MM このインデックスが全てマッチするように、「XXXXXX-\*」というインデックスパターンを作成し、そのインデックスパターンうぃインプットとしたDiscover及びダッシュボードを作成しています。 このような方式とした場合、蓄積した全てのデータを参照することになるので、時間が経ってデータ量が増えてくると、Discover及びダッシュボードのレスポ… --- ## [Warmノードの仕様について](https://discuss.elastic.co/t/warm/242679)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 8:13am UTC](https://discuss.elastic.co/t/warm/242679 "2020-08-19T08:13:15Z")
以下のように、一定時間経過するとWarmノードに移項するインデックスがあります。以下の例だと、172.20.209.6と172.30.40.128がwarmノードです。 ilm-test-001 0 p STARTED 2 4.2kb 172.20.210.97 instance-0000000022 ilm-test-001 … --- ## [All nodes green, cluster yellow (or green?)](https://discuss.elastic.co/t/all-nodes-green-cluster-yellow-or-green/245485)
**Author:** [@tarkhil](https://discuss.elastic.co/u/tarkhil)\ **Replies:** 4\ **Last updated:** [August 19, 2020, 8:09am UTC](https://discuss.elastic.co/t/all-nodes-green-cluster-yellow-or-green/245485 "2020-08-19T08:09:02Z")
Hello I'm running ElasticSearch 6.8.(mix of 8 and 10). Kibana shows that all nodes are green, but cluster is yellow. Graylog disagrees with Kibana - "Elasticsearch cluster is green". What's happening, what should I f… --- ## [Tail mode in logstash file input is not reading the recently uploaded files](https://discuss.elastic.co/t/tail-mode-in-logstash-file-input-is-not-reading-the-recently-uploaded-files/245538)
**Author:** [@akshatha](https://discuss.elastic.co/u/akshatha)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 7:40am UTC](https://discuss.elastic.co/t/tail-mode-in-logstash-file-input-is-not-reading-the-recently-uploaded-files/245538 "2020-08-19T07:40:18Z")
Hi , I am providing csv file as input to logstash and defined tail mode, but tail mode is not working. the modified files are not getting appended and logstash is reading all the files, but i want it to read the recent… --- ## [How to stop elastic search if number of data nodes are less than minimum?](https://discuss.elastic.co/t/how-to-stop-elastic-search-if-number-of-data-nodes-are-less-than-minimum/245535)
**Author:** [@Pavan\_Rajan](https://discuss.elastic.co/u/Pavan_Rajan)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 7:14am UTC](https://discuss.elastic.co/t/how-to-stop-elastic-search-if-number-of-data-nodes-are-less-than-minimum/245535 "2020-08-19T07:14:38Z")
Say I have deployed 2 data nodes with number of replicas as default 1. If the second node goes down, the cluster health will turn yellow, but will still continue to function. Is there any configuration to stop this beha… --- ## [\_reindex call - Access current object in destination](https://discuss.elastic.co/t/reindex-call-access-current-object-in-destination/245527)
**Author:** [@anitabee](https://discuss.elastic.co/u/anitabee)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 6:19am UTC](https://discuss.elastic.co/t/reindex-call-access-current-object-in-destination/245527 "2020-08-19T06:19:44Z")
Hi, During reindex call is it possible to access current object in destination that is going to be overridden? What I'm trying to achieve is this: POST \_reindex { "source": { "remote": { "host": "https://e… --- ## [Logstash + Elasticsearch Architecture Tips](https://discuss.elastic.co/t/logstash-elasticsearch-architecture-tips/245490)
**Author:** [@sergle](https://discuss.elastic.co/u/sergle)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 5:13am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-architecture-tips/245490 "2020-08-19T05:13:18Z")
Hey, very new to LS and ES, and ELK in general so while I am setting up my system I have a few questions regarding the advised architecture and looking for recommendations and tips for best implementation/use. The plan … --- ## [What is the use of advanced settings of previous kibana versions under saved objects of kibana 7.8.0?](https://discuss.elastic.co/t/what-is-the-use-of-advanced-settings-of-previous-kibana-versions-under-saved-objects-of-kibana-7-8-0/245154)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 4:41am UTC](https://discuss.elastic.co/t/what-is-the-use-of-advanced-settings-of-previous-kibana-versions-under-saved-objects-of-kibana-7-8-0/245154 "2020-08-19T04:41:56Z")
Hi, I was using ELK 6.6.1 stack in k8s environment (having some index patterns saved in kibana index - .kibana\_1) and then upgraded to 7.0.1 (oss) stack. Due to this, the saved objects got migrated to .kibana\_2. Some n… --- ## [Logstash Add Extra Space on a particular field based on the config](https://discuss.elastic.co/t/logstash-add-extra-space-on-a-particular-field-based-on-the-config/245520)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 4:29am UTC](https://discuss.elastic.co/t/logstash-add-extra-space-on-a-particular-field-based-on-the-config/245520 "2020-08-19T04:29:01Z")
I have a particular requirement where I have extracted out a field based on the GROK patterns. And based on the length of the attribute, i have to add space at the end of the string. For example: Attribute: PartA: tes… --- ## [Slow Indexing speed / Bottleneck](https://discuss.elastic.co/t/slow-indexing-speed-bottleneck/245378)
**Author:** [@Anirbaan\_Chowdhury](https://discuss.elastic.co/u/Anirbaan_Chowdhury)\ **Replies:** 5\ **Last updated:** [August 19, 2020, 3:49am UTC](https://discuss.elastic.co/t/slow-indexing-speed-bottleneck/245378 "2020-08-19T03:49:23Z")
Hi Experts, I know there are many threads opened for this but I haven't been able to fix my issue with them. I am new to this. In our ES cluster, there are 4 data, 1 master and 1 ingest nodes. The index rate is curre… --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/245461)
**Author:** [@Ben\_said](https://discuss.elastic.co/u/Ben_said)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 3:47am UTC](https://discuss.elastic.co/t/elasticsearch/245461 "2020-08-19T03:47:35Z")
can someone help me please ? i try to set fileddata to true but its failed. { "took": 26, "timed\_out": false, "\_shards": { "total": 2, "successful": 1, "skipped": 1, "failed": 1, "failures": \[ { "shard": 0, … --- ## [How retain certain index for more time than the other?](https://discuss.elastic.co/t/how-retain-certain-index-for-more-time-than-the-other/245469)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 7\ **Last updated:** [August 19, 2020, 3:22am UTC](https://discuss.elastic.co/t/how-retain-certain-index-for-more-time-than-the-other/245469 "2020-08-19T03:22:44Z")
I'm on Elasticsearch 6.4, I have 4 indexes out of which for 2 I need to set the retention period to be 60 days, how do I set that? --- ## [Do we have a light weight Kibana?](https://discuss.elastic.co/t/do-we-have-a-light-weight-kibana/245070)
**Author:** [@Charele](https://discuss.elastic.co/u/Charele)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 2:45am UTC](https://discuss.elastic.co/t/do-we-have-a-light-weight-kibana/245070 "2020-08-19T02:45:15Z")
When I run Kibana,it will create many indeces on my cluster, ilm-history-2-000001 .kibana\_task\_manager\_1 .kibana\_1 .kibana-event-log-7.8.1-000001 .apm-custom-link .apm-agent-configuration... These indices are unne… --- ## [Need to do sum aggregation with probable null values of field](https://discuss.elastic.co/t/need-to-do-sum-aggregation-with-probable-null-values-of-field/245373)
**Author:** [@\_ite\_iew](https://discuss.elastic.co/u/_ite_iew)\ **Replies:** 0\ **Last updated:** [August 18, 2020, 8:21am UTC](https://discuss.elastic.co/t/need-to-do-sum-aggregation-with-probable-null-values-of-field/245373 "2020-08-18T08:21:26Z")
Hi, I have a field in my elastic index with a probable null value for that field. But when I do sum aggregation on that field, even with all the values as null it returns 0 as the value from elasticsearch. I need to h… --- ## [Unable to complete the url kibana](https://discuss.elastic.co/t/unable-to-complete-the-url-kibana/245513)
**Author:** [@z018782](https://discuss.elastic.co/u/z018782)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 2:09am UTC](https://discuss.elastic.co/t/unable-to-complete-the-url-kibana/245513 "2020-08-19T02:09:10Z")
When reloading the same URL, i am getting this error. Kibana Version : 6.8.1 --- ## [How not to output a matching field in grok pattern?](https://discuss.elastic.co/t/how-not-to-output-a-matching-field-in-grok-pattern/245435)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 1:25am UTC](https://discuss.elastic.co/t/how-not-to-output-a-matching-field-in-grok-pattern/245435 "2020-08-19T01:25:28Z")
I don't want the mathed http\_version field in the output. How should I to do avoid it? I can't remove it with the non-caputering group symbol. This is my nginx log 10.102.136.44 - - \[26/Nov/2019:19:49:36 +0800\] "POST … --- ## [Time based rollover vs Time based routing](https://discuss.elastic.co/t/time-based-rollover-vs-time-based-routing/245509)
**Author:** [@joropito](https://discuss.elastic.co/u/joropito)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 12:20am UTC](https://discuss.elastic.co/t/time-based-rollover-vs-time-based-routing/245509 "2020-08-19T00:20:10Z")
Hi everyone I wonder what's better in my use case. A single large index, a time based rollover (monthly maybe) or a time based (monthly) shard routing? The case 10million documents each month (daily ingestion). Some of… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1274) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1276)