# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1291 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1292 --- ## [How to merge two different data source into single index](https://discuss.elastic.co/t/how-to-merge-two-different-data-source-into-single-index/244442)
**Author:** [@Hassaan\_mustafa](https://discuss.elastic.co/u/Hassaan_mustafa)\ **Replies:** 0\ **Last updated:** [August 10, 2020, 4:39pm UTC](https://discuss.elastic.co/t/how-to-merge-two-different-data-source-into-single-index/244442 "2020-08-10T16:39:44Z")
I want to Update certain field of index data coming for metricbeat but the fields that need to updated its data is in different data source its in radius how to achieve this --- ## [How do I avoid split brain in dual zone on 7.5?](https://discuss.elastic.co/t/how-do-i-avoid-split-brain-in-dual-zone-on-7-5/244297)
**Author:** [@Mill](https://discuss.elastic.co/u/Mill)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 4:01pm UTC](https://discuss.elastic.co/t/how-do-i-avoid-split-brain-in-dual-zone-on-7-5/244297 "2020-08-10T16:01:51Z")
I have five servers in zone A and zone B each. So I can configure 3 master nodes in zone A and 2 master nodes in zone B a cluster. Or I can use a cluster of 3 master nodes in zone A and zone B, and set up a tribe node… --- ## [Prebuilt siem rules for cisco IOS and fortigate](https://discuss.elastic.co/t/prebuilt-siem-rules-for-cisco-ios-and-fortigate/244289)
**Author:** [@emahdij](https://discuss.elastic.co/u/emahdij)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 3:36pm UTC](https://discuss.elastic.co/t/prebuilt-siem-rules-for-cisco-ios-and-fortigate/244289 "2020-08-10T15:36:25Z")
Hi I'm using ELK 7.6 with siem and we have cisco switches and fortigate firewall. Is there prebuilt siem rules for cisco IOS and fortigate? --- ## [Transforms - are cumulative sums a possibility?](https://discuss.elastic.co/t/transforms-are-cumulative-sums-a-possibility/244426)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 3:30pm UTC](https://discuss.elastic.co/t/transforms-are-cumulative-sums-a-possibility/244426 "2020-08-10T15:30:07Z")
I would like to sum a metric over time using Transforms, i.e. a cumulative sum. Is this at all possible? Whilst you can plot a cumulative sum graph using the basic graphs in Kibana, it's cumulative over the date range s… --- ## [Dropping empty buckets in TSVB visualization](https://discuss.elastic.co/t/dropping-empty-buckets-in-tsvb-visualization/244212)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 3:26pm UTC](https://discuss.elastic.co/t/dropping-empty-buckets-in-tsvb-visualization/244212 "2020-08-10T15:26:45Z")
Hi all, I'm trying to plot a variety of metrics I just recently started capturing. These visualizations are using TSVB (and then within it, I'm selecting "Time Series"). Currently, my metrics are displayed using a SUM a… --- ## [WARN in Logs: "cannot compute used memory / swap"](https://discuss.elastic.co/t/warn-in-logs-cannot-compute-used-memory-swap/244417)
**Author:** [@mfloryan](https://discuss.elastic.co/u/mfloryan)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 3:19pm UTC](https://discuss.elastic.co/t/warn-in-logs-cannot-compute-used-memory-swap/244417 "2020-08-10T15:19:59Z")
Elasticsearch 7.8.1 installed on Debian 10 (buster) running on an OpenVZ host. It's a fresh install and the server has 8GB of memory. The logs are getting filled with the following two entires: cannot compute used mem… --- ## [Apply Fuzzy Search and Searching-with-without-spaces](https://discuss.elastic.co/t/apply-fuzzy-search-and-searching-with-without-spaces/242964)
**Author:** [@vinodthebest](https://discuss.elastic.co/u/vinodthebest)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 3:19pm UTC](https://discuss.elastic.co/t/apply-fuzzy-search-and-searching-with-without-spaces/242964 "2020-08-10T15:19:46Z")
I am using Elasticsearch 7.4 and Spring boot 2.3.1 (Spring JPA Elasticsearch) would like to get the same results if the words have space or without space and would like to perform fuzzy search also for the same property. … --- ## [Analytics Queries filters none](https://discuss.elastic.co/t/analytics-queries-filters-none/244424)
**Author:** [@Sam\_S](https://discuss.elastic.co/u/Sam_S)\ **Replies:** 0\ **Last updated:** [August 10, 2020, 3:10pm UTC](https://discuss.elastic.co/t/analytics-queries-filters-none/244424 "2020-08-10T15:10:33Z")
When using the /analytics/queries I cannot use the none filter to exclude certain searches done on the Elastic Search portal itself. \`"filters": {"none": \[{"tag": "swiftype\_dashboard"}, {"tag": "swiftype\_dashboard\_query… --- ## [Whats the difference as well as the preferred way to?](https://discuss.elastic.co/t/whats-the-difference-as-well-as-the-preferred-way-to/244415)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 2:55pm UTC](https://discuss.elastic.co/t/whats-the-difference-as-well-as-the-preferred-way-to/244415 "2020-08-10T14:55:36Z")
I am trying to update my Logstash configs to be the best they can be. If I am looking for a string within a field, which way is the "best" way, in terms of performance? Option #1 if \[message\] =~ /(?i)(QNAME)/ { Optio… --- ## [Different roles on different fields on different documents](https://discuss.elastic.co/t/different-roles-on-different-fields-on-different-documents/244367)
**Author:** [@luj\_ogluszacz](https://discuss.elastic.co/u/luj_ogluszacz)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 2:49pm UTC](https://discuss.elastic.co/t/different-roles-on-different-fields-on-different-documents/244367 "2020-08-10T14:49:44Z")
Hi everyone, I have a question. I get a JSON like this { "took" : 271, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 4, "r… --- ## [Volum Claim Template](https://discuss.elastic.co/t/volum-claim-template/244316)
**Author:** [@mastermind](https://discuss.elastic.co/u/mastermind)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 1:48pm UTC](https://discuss.elastic.co/t/volum-claim-template/244316 "2020-08-10T13:48:54Z")
Hi Guys I am trying to create the cluster with volume claim template locally but I am getting error can someone help me to resolve this apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name:… --- ## [Logstash File input filter, ingest twice same file name](https://discuss.elastic.co/t/logstash-file-input-filter-ingest-twice-same-file-name/244385)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 1:27pm UTC](https://discuss.elastic.co/t/logstash-file-input-filter-ingest-twice-same-file-name/244385 "2020-08-10T13:27:36Z")
Hi! Using Logstash File Input Filter, I will ingest text files (actually they will be .gz files) that are "finished" (I mean, they will not be written anymore) When ingest gets done, file must be automatically deleted … --- ## [Precedence of wildcard field boosts, for simple query string query](https://discuss.elastic.co/t/precedence-of-wildcard-field-boosts-for-simple-query-string-query/243592)
**Author:** [@SamyAteia](https://discuss.elastic.co/u/SamyAteia)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 1:16pm UTC](https://discuss.elastic.co/t/precedence-of-wildcard-field-boosts-for-simple-query-string-query/243592 "2020-08-10T13:16:34Z")
Hi, we are using the simple query string query and want to set different boost depending on the field names. We have a lot of fields that end with e postfix such as "\_txt" and want the boost some fields such as "title\_d… --- ## [Cant see html format in my watcher's mail](https://discuss.elastic.co/t/cant-see-html-format-in-my-watchers-mail/244406)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 0\ **Last updated:** [August 10, 2020, 1:06pm UTC](https://discuss.elastic.co/t/cant-see-html-format-in-my-watchers-mail/244406 "2020-08-10T13:06:08Z")
Hello, I have created an advanced watcher alert that works and has the following email section: "actions": { "send\_email": { "email": { "profile": "standard", "to": \[ "alexandros.ana… --- ## [Stack Monitoring not working properly](https://discuss.elastic.co/t/stack-monitoring-not-working-properly/242516)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 12:38pm UTC](https://discuss.elastic.co/t/stack-monitoring-not-working-properly/242516 "2020-08-10T12:38:58Z")
I am working currently on getting the stack monitoring up and running. According to what I have read so far, all I need to do for that is set the xpack.monitoring.collection.enabled to true. So like that: apiVersion: e… --- ## [A new field with a value from the difference between the two existing fields](https://discuss.elastic.co/t/a-new-field-with-a-value-from-the-difference-between-the-two-existing-fields/243670)
**Author:** [@Alex9](https://discuss.elastic.co/u/Alex9)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 12:31pm UTC](https://discuss.elastic.co/t/a-new-field-with-a-value-from-the-difference-between-the-two-existing-fields/243670 "2020-08-10T12:31:55Z")
Hello. Please tell me the direction to the solution. There is a service that generates records. The values include: fields with a unique object id, a record of the object's action and time. Question: how to get new fi… --- ## [Logstash move subfield to top field](https://discuss.elastic.co/t/logstash-move-subfield-to-top-field/244309)
**Author:** [@gbasic](https://discuss.elastic.co/u/gbasic)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 11:52am UTC](https://discuss.elastic.co/t/logstash-move-subfield-to-top-field/244309 "2020-08-10T11:52:09Z")
"\_score" : 1.0, "\_source" : { "Europe" : { "DateTime" : { "Date" : "08.08.2020", "Time" : "15" }, "City" : \[ { … --- ## [Return documents that match a minimal number of words in the same sentence](https://discuss.elastic.co/t/return-documents-that-match-a-minimal-number-of-words-in-the-same-sentence/243848)
**Author:** [@flm](https://discuss.elastic.co/u/flm)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 11:08am UTC](https://discuss.elastic.co/t/return-documents-that-match-a-minimal-number-of-words-in-the-same-sentence/243848 "2020-08-10T11:08:16Z")
I need to return documents that match at least N words in the same sentence. I split my documents per sentence and index each one as a separate value like so: PUT /test\_index/\_doc/id1 { "texts": \[ "Your first… --- ## [Logstash to elasticsearch](https://discuss.elastic.co/t/logstash-to-elasticsearch/244306)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 9:52am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch/244306 "2020-08-10T09:52:47Z")
I think logstash is having trouble sending data to elasticsearch. To secure beats communications, I've set elasticsearch to use https. I think because of that logstash is having some trouble sending data to elasticsearc… --- ## [ES master nodes CPU usage decrease over time and became red nodes](https://discuss.elastic.co/t/es-master-nodes-cpu-usage-decrease-over-time-and-became-red-nodes/244366)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 9:28am UTC](https://discuss.elastic.co/t/es-master-nodes-cpu-usage-decrease-over-time-and-became-red-nodes/244366 "2020-08-10T09:28:34Z")
Hi People, We have issues with our ElasticSearch cluster. Somehow, the CPU usage of the master nodes decreases over time (couple of days) and then crashes the cluster's state. A screenshot of the CPU usage of Master 1: … --- ## [Errors in kibana messages](https://discuss.elastic.co/t/errors-in-kibana-messages/244312)
**Author:** [@Shivam123](https://discuss.elastic.co/u/Shivam123)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 9:09am UTC](https://discuss.elastic.co/t/errors-in-kibana-messages/244312 "2020-08-10T09:09:49Z")
Hi am getting below message in kibana. Please suggest message: �����\\�0 --- ## [X-Path Wildcard](https://discuss.elastic.co/t/x-path-wildcard/244352)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 8:48am UTC](https://discuss.elastic.co/t/x-path-wildcard/244352 "2020-08-10T08:48:48Z")
Hey, Was wondering whether someone could help me with the following xpaths since I dont have much experience. I am trying to get the value of /eCloud1/CloudMsg/\*/name() but this field can be 16 different values. I don't… --- ## [Delete by query api - \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/delete-by-query-api-forbidden-8-index-write-api/244188)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 8:35am UTC](https://discuss.elastic.co/t/delete-by-query-api-forbidden-8-index-write-api/244188 "2020-08-10T08:35:11Z")
Hello, The version of our Elasticsearch is: 7.8 (Platinum) I tried to delete some indices by using delete\_by\_query and I have the following error. "type" : "cluster\_block\_exception", "reason" : "index \[shrin… --- ## [Indexer failures - ES rejected execution exception](https://discuss.elastic.co/t/indexer-failures-es-rejected-execution-exception/242805)
**Author:** [@Tafsir\_Alam](https://discuss.elastic.co/u/Tafsir_Alam)\ **Replies:** 9\ **Last updated:** [August 10, 2020, 8:25am UTC](https://discuss.elastic.co/t/indexer-failures-es-rejected-execution-exception/242805 "2020-08-10T08:25:21Z")
Hi, I am continuously getting Indexer failures errors on my Graylog web-UI console. This is the error: {"type":"es\_rejected\_execution\_exception","reason":"rejected execution of processing of \[1574940\]\[indices:data/writ… --- ## [Searching ES regex with space/colon/hypen etc](https://discuss.elastic.co/t/searching-es-regex-with-space-colon-hypen-etc/243478)
**Author:** [@Shachar0n](https://discuss.elastic.co/u/Shachar0n)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 7:38am UTC](https://discuss.elastic.co/t/searching-es-regex-with-space-colon-hypen-etc/243478 "2020-08-10T07:38:43Z")
Hi, I am trying to find the way to search in our ES cluster for a substring contained within a doc field's string (where this substring may contain space, for example, as well as may contains a colon, hyphen, etc.). I … --- ## [Wild card query to match the multiple field values](https://discuss.elastic.co/t/wild-card-query-to-match-the-multiple-field-values/244351)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [August 10, 2020, 6:48am UTC](https://discuss.elastic.co/t/wild-card-query-to-match-the-multiple-field-values/244351 "2020-08-10T06:48:02Z")
How to frame the wildcard query which can search for the match in all searchable fields. I have already checked the following. https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-wildcard-query.ht… --- ## [Logstash Error](https://discuss.elastic.co/t/logstash-error/244343)
**Author:** [@Amantha](https://discuss.elastic.co/u/Amantha)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 6:26am UTC](https://discuss.elastic.co/t/logstash-error/244343 "2020-08-10T06:26:54Z")
I run bin/logstash -e 'input { stdin { } } output { stdout {} }' command in linux terminal. But it give the following error. OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and … --- ## [Elasticsearch use case implementation help](https://discuss.elastic.co/t/elasticsearch-use-case-implementation-help/244300)
**Author:** [@ocmvin](https://discuss.elastic.co/u/ocmvin)\ **Replies:** 6\ **Last updated:** [August 10, 2020, 5:18am UTC](https://discuss.elastic.co/t/elasticsearch-use-case-implementation-help/244300 "2020-08-10T05:18:32Z")
I was wondering about elastic search use case where as per current implementation we have to search best wholeseller for a shopkeeper where Currently we are executing individual 3 queries agains relational DB (postgre… --- ## [Upgrading 1.x to 7.x](https://discuss.elastic.co/t/upgrading-1-x-to-7-x/244284)
**Author:** [@Tulasinadh\_V](https://discuss.elastic.co/u/Tulasinadh_V)\ **Replies:** 8\ **Last updated:** [August 10, 2020, 5:18am UTC](https://discuss.elastic.co/t/upgrading-1-x-to-7-x/244284 "2020-08-10T05:18:11Z")
Hi Team, My current organization using the Elastic Search 1.x and there was a plan to upgrade it to the latest stable version(7.x). Please suggest the better way to handle this without any downtime Thanks in advance --- ## [Visualization - field not available for selection - Kibana](https://discuss.elastic.co/t/visualization-field-not-available-for-selection-kibana/244226)
**Author:** [@al-yakubovich](https://discuss.elastic.co/u/al-yakubovich)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 4:57am UTC](https://discuss.elastic.co/t/visualization-field-not-available-for-selection-kibana/244226 "2020-08-10T04:57:26Z")
Hello. I have problem with visualization of a filed. I am trying to import the csv file via Kibana. I am getting the next results: As you can see a filed "Test" in some reason is red. After I've imported it I wanted… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1290) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1292)