# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1287

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1288

---

## [How to solve kibana5.4.0 Loophole](https://discuss.elastic.co/t/how-to-solve-kibana5-4-0-loophole/241955)

<div class="topic-metadata">

**Author:** [@111351](https://discuss.elastic.co/u/111351)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 12:21pm UTC](https://discuss.elastic.co/t/how-to-solve-kibana5-4-0-loophole/241955 "2020-08-12T12:21:15Z")

</div>

i need to user es5.4.0 , who can help me solve kibana5.4.0 XSS loophole thanks for you advice

---

## [Index Epoch to date time in elasticserarch](https://discuss.elastic.co/t/index-epoch-to-date-time-in-elasticserarch/244709)

<div class="topic-metadata">

**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\
**Replies:** 0\
**Last updated:** [August 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/index-epoch-to-date-time-in-elasticserarch/244709 "2020-08-12T12:05:18Z")

</div>

I have a filed in my index with epoch time value as "1,596,041,843.199" when ever I try to re-index is using date mapping it gives me error "ailed to parse field \[field\_name\] of type \[date\] in document with id 'xxxxxxxx…

---

## [Is kibana supports dynamic filters to a URL?](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613)

<div class="topic-metadata">

**Author:** [@kibana\_anil](https://discuss.elastic.co/u/kibana_anil)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 11:58am UTC](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613 "2020-08-12T11:58:58Z")

</div>

Is kibana supports dynamic filters to a URL ? Example - create a filter on an index and saved this search. copy the URL This search URL is associated to the one of the field in Index Pattern. But, I couldn't add diff…

---

## [Field has been missed in aggregate](https://discuss.elastic.co/t/field-has-been-missed-in-aggregate/244595)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 7\
**Last updated:** [August 12, 2020, 11:52am UTC](https://discuss.elastic.co/t/field-has-been-missed-in-aggregate/244595 "2020-08-12T11:52:36Z")

</div>

Hi all, I am trying to build a data table visualize so that show sum of my field named as "amount". for this purpose, i am trying to use sum aggregation in the metric part but i cannot find my field in the "field" part…

---

## [Cannot search for events based on scripted fields](https://discuss.elastic.co/t/cannot-search-for-events-based-on-scripted-fields/244659)

<div class="topic-metadata">

**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\
**Replies:** 4\
**Last updated:** [August 12, 2020, 11:52am UTC](https://discuss.elastic.co/t/cannot-search-for-events-based-on-scripted-fields/244659 "2020-08-12T11:52:09Z")

</div>

Hi, When i search using scripted fields in kibana, i either get no matching hits or I get a shards failed error. Can anyone please help me to look into this. Entire ELK stack is 7.4.2. s\_query body: if(doc\['qu…

---

## [Collect first document from each bucket](https://discuss.elastic.co/t/collect-first-document-from-each-bucket/244152)

<div class="topic-metadata">

**Author:** [@stwrt](https://discuss.elastic.co/u/stwrt)\
**Replies:** 2\
**Last updated:** [August 12, 2020, 11:14am UTC](https://discuss.elastic.co/t/collect-first-document-from-each-bucket/244152 "2020-08-12T11:14:59Z")

</div>

Hi, I need some help with a query: I have a "students" index, and each student has a "classroomId" and a "grade" fields. I need to get the best student in each class. I'm using "aggs", but what I get is the list of a…

---

## [Elastic kibana explain method into percentage](https://discuss.elastic.co/t/elastic-kibana-explain-method-into-percentage/241462)

<div class="topic-metadata">

**Author:** [@aretai](https://discuss.elastic.co/u/aretai)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 10:28am UTC](https://discuss.elastic.co/t/elastic-kibana-explain-method-into-percentage/241462 "2020-08-12T10:28:22Z")

</div>

Hi there, I currently have a search system that displays percentage of found words in the database. I'm thinking of moving to elastic search, but I still want the results to be displayed as percentage. Is it possible?…

---

## [How to add values of a specific fields from 2 different version in Index?](https://discuss.elastic.co/t/how-to-add-values-of-a-specific-fields-from-2-different-version-in-index/244696)

<div class="topic-metadata">

**Author:** [@NirmitJain](https://discuss.elastic.co/u/NirmitJain)\
**Replies:** 0\
**Last updated:** [August 12, 2020, 10:21am UTC](https://discuss.elastic.co/t/how-to-add-values-of-a-specific-fields-from-2-different-version-in-index/244696 "2020-08-12T10:21:04Z")

</div>

Hi , I am looking for a way by which we can add value of a field already indexed with value of same field from new updated document to be indexed. for e.g. version 1 document: { "\_index" : "test\_index", "\_type" : "…

---

## [Date displays in inspect panel](https://discuss.elastic.co/t/date-displays-in-inspect-panel/241844)

<div class="topic-metadata">

**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 10:22am UTC](https://discuss.elastic.co/t/date-displays-in-inspect-panel/241844 "2020-08-12T10:22:16Z")

</div>

If I've got data that covers a few days displayed, when I go to the inspect view, it shows the date and time for each row. This is good. The problem comes if I've only got data from a particular day displayed. In this…

---

## [ElasticSearch nodes create a lot of logs](https://discuss.elastic.co/t/elasticsearch-nodes-create-a-lot-of-logs/244514)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 6\
**Last updated:** [August 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-create-a-lot-of-logs/244514 "2020-08-12T10:10:43Z")

</div>

Hi guys, I have seen that the elasticsearch nodes are creating a very huge amount of logs in my ECK cluster. Is there a way to reduce the amount of logs? Right now I am seeing the index being flooded by entries like t…

---

## [Identifying what terms were matched in a match query](https://discuss.elastic.co/t/identifying-what-terms-were-matched-in-a-match-query/244202)

<div class="topic-metadata">

**Author:** [@Daymon\_Schroeder](https://discuss.elastic.co/u/Daymon_Schroeder)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:58am UTC](https://discuss.elastic.co/t/identifying-what-terms-were-matched-in-a-match-query/244202 "2020-08-12T09:58:13Z")

</div>

Consider the following example query where we match a percentage of terms GET /\_search { "query": { "bool": { "should": \[ { "match" : { "body": {…

---

## [Search latest events and unique by field](https://discuss.elastic.co/t/search-latest-events-and-unique-by-field/244199)

<div class="topic-metadata">

**Author:** [@dikkini](https://discuss.elastic.co/u/dikkini)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:56am UTC](https://discuss.elastic.co/t/search-latest-events-and-unique-by-field/244199 "2020-08-12T09:56:44Z")

</div>

Hello. I got the following data in my indice: {"username": "michael", "is\_vac": true, "created\_date": 1596647898006} {"username": "kate", "is\_vac": true, "created\_date": 1596647898007} {"username": "michael", "is\_vac":…

---

## [Using Exact Prefix/MatchPhrase Prefix Queries with Ngram Filter](https://discuss.elastic.co/t/using-exact-prefix-matchphrase-prefix-queries-with-ngram-filter/244207)

<div class="topic-metadata">

**Author:** [@k3np4ch1](https://discuss.elastic.co/u/k3np4ch1)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:55am UTC](https://discuss.elastic.co/t/using-exact-prefix-matchphrase-prefix-queries-with-ngram-filter/244207 "2020-08-12T09:55:55Z")

</div>

Hi, My goal is to search query text having length one or two character long. This is my setting for the index. "settings" : { "index" : { "number\_of\_shards" : "5", "provided\_name" : "my\_user", …

---

## [How to grant permission in ESClientYamlSuiteTestCase integTest?](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975)

<div class="topic-metadata">

**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\
**Replies:** 2\
**Last updated:** [August 12, 2020, 9:51am UTC](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975 "2020-08-12T09:51:17Z")

</div>

Hello, I wrote a plugin which provide support for Datasketches aggregation, I think it is easy to use and I want to contribute it. I added it to the plugins folder with code, unit tests and all license for dependencies…

---

## [How to merge Array while reindexing data?](https://discuss.elastic.co/t/how-to-merge-array-while-reindexing-data/244388)

<div class="topic-metadata">

**Author:** [@darshan\_ambre](https://discuss.elastic.co/u/darshan_ambre)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:47am UTC](https://discuss.elastic.co/t/how-to-merge-array-while-reindexing-data/244388 "2020-08-12T09:47:07Z")

</div>

I have an index in which i have duplication document information which i wish to transform and to create one document with array of information. I've the following data in the index: \</\> { "took" : 0, …

---

## [ElasticSearch 7.8 date and time format issue: unable to store date in MMM-dd-yyyy HH:mm:ss format . Was woking in 6.7.1](https://discuss.elastic.co/t/elasticsearch-7-8-date-and-time-format-issue-unable-to-store-date-in-mmm-dd-yyyy-hhss-format-was-woking-in-6-7-1/244450)

<div class="topic-metadata">

**Author:** [@naresh\_sharma](https://discuss.elastic.co/u/naresh_sharma)\
**Replies:** 3\
**Last updated:** [August 12, 2020, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-date-and-time-format-issue-unable-to-store-date-in-mmm-dd-yyyy-hhss-format-was-woking-in-6-7-1/244450 "2020-08-12T09:41:51Z")

</div>

\[2020-08-10T14:30:58,866\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"metrics", :routing=\>nil, :\_type=\>"\_doc"}, #LogStash::…

---

## [Kibana check if field is equal to 1 for every document during the selected time period](https://discuss.elastic.co/t/kibana-check-if-field-is-equal-to-1-for-every-document-during-the-selected-time-period/241754)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 4\
**Last updated:** [August 12, 2020, 9:36am UTC](https://discuss.elastic.co/t/kibana-check-if-field-is-equal-to-1-for-every-document-during-the-selected-time-period/241754 "2020-08-12T09:36:16Z")

</div>

Hi guys , i'm working on a project where i need to check absence and presence of employees , my index has 5 fields(MAT,NAME,DATE,PRESENCE(1or 0),ABSENCE(1 or 0)) it contains the data of the presence and absence of emplo…

---

## [Aggregation using something similar to First when data is grouped](https://discuss.elastic.co/t/aggregation-using-something-similar-to-first-when-data-is-grouped/244587)

<div class="topic-metadata">

**Author:** [@Raster](https://discuss.elastic.co/u/Raster)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:29am UTC](https://discuss.elastic.co/t/aggregation-using-something-similar-to-first-when-data-is-grouped/244587 "2020-08-12T09:29:45Z")

</div>

Lets say I have data like this. Every unique "key" has a unique "long key" - totally 1 to 1. Because key is numeric will prefer using it for agrregating (using) using terms-\> field. Field "somedata" is subject to aggre…

---

## [Heap usage is More.. Need to understand more details where the heap is being used and how to optimize it](https://discuss.elastic.co/t/heap-usage-is-more-need-to-understand-more-details-where-the-heap-is-being-used-and-how-to-optimize-it/244588)

<div class="topic-metadata">

**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:28am UTC](https://discuss.elastic.co/t/heap-usage-is-more-need-to-understand-more-details-where-the-heap-is-being-used-and-how-to-optimize-it/244588 "2020-08-12T09:28:32Z")

</div>

Hi , Below are my ES cluster node Stats.. ElasticSearch version - 5.6. It is occupying more space in "old" gen space. Why heap usage is more here ? what all are occupying more heap here. And how can i optimize here? T…

---

## [Can aggregations values be used in script score calculations?](https://discuss.elastic.co/t/can-aggregations-values-be-used-in-script-score-calculations/244590)

<div class="topic-metadata">

**Author:** [@iajpl](https://discuss.elastic.co/u/iajpl)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:26am UTC](https://discuss.elastic.co/t/can-aggregations-values-be-used-in-script-score-calculations/244590 "2020-08-12T09:26:18Z")

</div>

Each one of my documents within my index contains values associated with sales data and I calculate a score for each document based on those values. Currently, the values are bucketed globally, meaning that before indexi…

---

## [Remove 2 nodes from a 4 nodes cluster](https://discuss.elastic.co/t/remove-2-nodes-from-a-4-nodes-cluster/244690)

<div class="topic-metadata">

**Author:** [@claud81](https://discuss.elastic.co/u/claud81)\
**Replies:** 0\
**Last updated:** [August 12, 2020, 9:24am UTC](https://discuss.elastic.co/t/remove-2-nodes-from-a-4-nodes-cluster/244690 "2020-08-12T09:24:48Z")

</div>

Hi everyone, I would like to reduce the number of my 4 Ubuntu master-eligible nodes cluster (version 6.8) to a 3 master-eligible nodes cluster. In order to do this I have to temporarily remove 2 nodes from the cluster …

---

## [Ingest nodes persistent queue](https://discuss.elastic.co/t/ingest-nodes-persistent-queue/244591)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/ingest-nodes-persistent-queue/244591 "2020-08-12T09:20:41Z")

</div>

Hello, Imho it would be an awesome feature if ingest nodes could have a persistent queue. Is this something worthy of a feature request? Or technically undoable? Grtz Willem

---

## [Nested terms](https://discuss.elastic.co/t/nested-terms/244593)

<div class="topic-metadata">

**Author:** [@krathore](https://discuss.elastic.co/u/krathore)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/nested-terms/244593 "2020-08-12T09:20:19Z")

</div>

Can some one pls help me to write a query , i cannot get result back body: { query: { bool: { must: \[ { …

---

## [Using KV processors when field names have space](https://discuss.elastic.co/t/using-kv-processors-when-field-names-have-space/244631)

<div class="topic-metadata">

**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 9:02am UTC](https://discuss.elastic.co/t/using-kv-processors-when-field-names-have-space/244631 "2020-08-12T09:02:09Z")

</div>

Hello, I'm trying to parse a log in which elements are separated by ; and keys/values by =. My problem is that some keys have spaces in their name. Though KV will process it correctly, having spaces in name causes lot…

---

## [Index size Reduced in Elasticsearch even When Number of Documents Increased](https://discuss.elastic.co/t/index-size-reduced-in-elasticsearch-even-when-number-of-documents-increased/244664)

<div class="topic-metadata">

**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 8:55am UTC](https://discuss.elastic.co/t/index-size-reduced-in-elasticsearch-even-when-number-of-documents-increased/244664 "2020-08-12T08:55:48Z")

</div>

Hi There, I am storing incremental data (Everyday 0.7 - 1 GB of data gets added) in Elasticsearch. The interesting observation I found is that : The index size in the elasticsearch decreased with time while the number …

---

## [Are there any benefits of running elasticsearch in linux and not windows?](https://discuss.elastic.co/t/are-there-any-benefits-of-running-elasticsearch-in-linux-and-not-windows/244675)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/are-there-any-benefits-of-running-elasticsearch-in-linux-and-not-windows/244675 "2020-08-12T08:46:36Z")

</div>

I was wondering if there are any significant performance differences between Linux, Windows and Docker. Thanks for your answers.

---

## [Cannot get desired query results with filter](https://discuss.elastic.co/t/cannot-get-desired-query-results-with-filter/244680)

<div class="topic-metadata">

**Author:** [@vinodkrishnanr](https://discuss.elastic.co/u/vinodkrishnanr)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/cannot-get-desired-query-results-with-filter/244680 "2020-08-12T08:46:35Z")

</div>

Hi Im trying to understand why the below query does not produce the results. { "query": { "bool": { "filter": { "terms": { "classifica…

---

## [Alias with multiple filters](https://discuss.elastic.co/t/alias-with-multiple-filters/243095)

<div class="topic-metadata">

**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Replies:** 4\
**Last updated:** [August 12, 2020, 8:45am UTC](https://discuss.elastic.co/t/alias-with-multiple-filters/243095 "2020-08-12T08:45:29Z")

</div>

Hi guys, In order to filter data to be displayed in a drop down list of the control visualization in Kibana, I decided to create an alias on my index by filtering some data but I'm facing like an issue. Here is the pa…

---

## [Create user in Elastic Cloud Enterprise](https://discuss.elastic.co/t/create-user-in-elastic-cloud-enterprise/244666)

<div class="topic-metadata">

**Author:** [@Vishal\_Sharna](https://discuss.elastic.co/u/Vishal_Sharna)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 8:32am UTC](https://discuss.elastic.co/t/create-user-in-elastic-cloud-enterprise/244666 "2020-08-12T08:32:14Z")

</div>

Hi There, I have created a trial account of elastic cloud enterprise and now I want to add more user to cloud portal to manage the deployment. I know how to create user in kibana but just couldn't figure out the way to…

---

## [Restored data to fresh cluster incorrectly and receiving "master not discovered or elected yet"](https://discuss.elastic.co/t/restored-data-to-fresh-cluster-incorrectly-and-receiving-master-not-discovered-or-elected-yet/244617)

<div class="topic-metadata">

**Author:** [@ronenf](https://discuss.elastic.co/u/ronenf)\
**Replies:** 6\
**Last updated:** [August 12, 2020, 8:28am UTC](https://discuss.elastic.co/t/restored-data-to-fresh-cluster-incorrectly-and-receiving-master-not-discovered-or-elected-yet/244617 "2020-08-12T08:28:36Z")

</div>

Hi I had a 3 nodes cluster running on on Kubernetes. There were space issues with the volumes so I was forced to provision new volumes. Before I read this article I decided to make a copy of the data directory, I create…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1286)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1288)
