# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1423 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1424 --- ## [Counting users that returned to the website](https://discuss.elastic.co/t/counting-users-that-returned-to-the-website/234454)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 6:00pm UTC](https://discuss.elastic.co/t/counting-users-that-returned-to-the-website/234454 "2020-05-27T18:00:52Z")
The following is a simplified look at our mappings in Elastic search { "mappings" : { "properties": { "userid": { "type": "keyword" }, "yyyy\_mm\_dd": { "type": "date", … --- ## [Java process hangs during BulkRequestProcessor add - Waiting for Semaphore](https://discuss.elastic.co/t/java-process-hangs-during-bulkrequestprocessor-add-waiting-for-semaphore/233798)
**Author:** [@Thales\_Valias](https://discuss.elastic.co/u/Thales_Valias)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 5:54pm UTC](https://discuss.elastic.co/t/java-process-hangs-during-bulkrequestprocessor-add-waiting-for-semaphore/233798 "2020-05-27T17:54:48Z")
Context We have a Java application with embedded Elasticsearch 6.0.0. We make use of ES Bulk Request Processor to get tons of documents loaded into our (single) index. The Problem So far so good, except in cases where… --- ## [Shards keep re-initializing](https://discuss.elastic.co/t/shards-keep-re-initializing/233968)
**Author:** [@reshippie](https://discuss.elastic.co/u/reshippie)\ **Replies:** 7\ **Last updated:** [May 27, 2020, 5:39pm UTC](https://discuss.elastic.co/t/shards-keep-re-initializing/233968 "2020-05-27T17:39:39Z")
I've got a 7 node cluster, each node has 64GB of RAM, 2x XEON E5-2623v4 CPUs(16 Threads) and 12TB of SSD in RAID6. It's hosting 56.63TB of data across 187 Indices and 2,346 shards. Elasticsearch v6.8.3 behind Graylog. … --- ## [Using multi\_match in kibana filters](https://discuss.elastic.co/t/using-multi-match-in-kibana-filters/234152)
**Author:** [@Anna\_R](https://discuss.elastic.co/u/Anna_R)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 5:21pm UTC](https://discuss.elastic.co/t/using-multi-match-in-kibana-filters/234152 "2020-05-27T17:21:40Z")
Hello, I have the following search query that I can run from my kibana dev tools (ver 7.6.2): GET \_search { "query": { "multi\_match": { "query": "my-product-name", "fields": \[ … --- ## [Must\_not boolean query in 7.7](https://discuss.elastic.co/t/must-not-boolean-query-in-7-7/233269)
**Author:** [@marspy](https://discuss.elastic.co/u/marspy)\ **Replies:** 6\ **Last updated:** [May 27, 2020, 5:13pm UTC](https://discuss.elastic.co/t/must-not-boolean-query-in-7-7/233269 "2020-05-27T17:13:56Z")
After upgrading elasticsearch to 7.7 there is problem with parsing must\_not query: {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Failed to parse","line":1,"col":104}\],"type":"parsing\_exception","reason":… --- ## [Max enquiries made in second and minute yesterday/last week/last month](https://discuss.elastic.co/t/max-enquiries-made-in-second-and-minute-yesterday-last-week-last-month/234405)
**Author:** [@edwardj3](https://discuss.elastic.co/u/edwardj3)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 4:56pm UTC](https://discuss.elastic.co/t/max-enquiries-made-in-second-and-minute-yesterday-last-week-last-month/234405 "2020-05-27T16:56:05Z")
Hi community, Using v7.6 Is it possible to identify and display the max enquiries made in a second and the time this occurred yesterday. Result should be like below if possible Time … --- ## [Can't view fields In Discovery or via query even though they're available in Kibana visualizations](https://discuss.elastic.co/t/cant-view-fields-in-discovery-or-via-query-even-though-theyre-available-in-kibana-visualizations/234582)
**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\ **Replies:** 8\ **Last updated:** [May 27, 2020, 4:49pm UTC](https://discuss.elastic.co/t/cant-view-fields-in-discovery-or-via-query-even-though-theyre-available-in-kibana-visualizations/234582 "2020-05-27T16:49:31Z")
I have a few indexes, defined by a template, and each index is distinguished by year. When querying the current years index (previous years are fine), I get no fields to return any values. When looking at visualizations … --- ## [How to aggregate on bitwise operator individual flag values?](https://discuss.elastic.co/t/how-to-aggregate-on-bitwise-operator-individual-flag-values/234588)
**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 4:36pm UTC](https://discuss.elastic.co/t/how-to-aggregate-on-bitwise-operator-individual-flag-values/234588 "2020-05-27T16:36:10Z")
We have cities where each has some sporting places, and some places are present in multiple cities: London: Multiplex, Fivestar Berlin: Multiplex, Bestgym Paris: Multiplex, Bestgym, Fivestar We have places where ea… --- ## [How to write a multi-line SQL in logstash pipelines](https://discuss.elastic.co/t/how-to-write-a-multi-line-sql-in-logstash-pipelines/234182)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 8\ **Last updated:** [May 27, 2020, 4:28pm UTC](https://discuss.elastic.co/t/how-to-write-a-multi-line-sql-in-logstash-pipelines/234182 "2020-05-27T16:28:07Z")
Hello, So far, I am able to write a single line SQL in logstash pipelines and it's working fine. However, How do I write multiline SQL with single-quotes (') in the SQL? I tried with a backslash for continuation, but t… --- ## [Looking for a Kibana contractor for a project](https://discuss.elastic.co/t/looking-for-a-kibana-contractor-for-a-project/234353)
**Author:** [@dreamspy](https://discuss.elastic.co/u/dreamspy)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 4:15pm UTC](https://discuss.elastic.co/t/looking-for-a-kibana-contractor-for-a-project/234353 "2020-05-27T16:15:59Z")
Hi My company wants to outsource a part of a project which involves custom creating a Kibana dashboard. What would be the best place to source for some to take on this project? If there is anyone on this forum that is… --- ## [SNMP input plugin - SNMP V3 still Not Working](https://discuss.elastic.co/t/snmp-input-plugin-snmp-v3-still-not-working/234539)
**Author:** [@Thelmo\_Henrique\_Sant](https://discuss.elastic.co/u/Thelmo_Henrique_Sant)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 3:17pm UTC](https://discuss.elastic.co/t/snmp-input-plugin-snmp-v3-still-not-working/234539 "2020-05-27T15:17:58Z")
Hi , I am new with ELK and I'm trying to configure my logstash to get SNMP V3 information from my devices, but unfortunately, I don't know what I am doing wrong. I followed the procedures from the SNMP input plugin pag… --- ## [Grok part of message](https://discuss.elastic.co/t/grok-part-of-message/234534)
**Author:** [@GedeoN](https://discuss.elastic.co/u/GedeoN)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 2:59pm UTC](https://discuss.elastic.co/t/grok-part-of-message/234534 "2020-05-27T14:59:52Z")
Hi, I'm trying to parse a part of message. My general grok is working, but this one doesn't. I have message like that: Login failed for user 'USR\_DELTA'. Reason: The account is disabled. \[CLIENT: xxx.xxx.xxx.xxx\] In… --- ## [Markdown Visualization: changing the position of an image](https://discuss.elastic.co/t/markdown-visualization-changing-the-position-of-an-image/233545)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 2:43pm UTC](https://discuss.elastic.co/t/markdown-visualization-changing-the-position-of-an-image/233545 "2020-05-27T14:43:17Z")
Hello elastic community! I am facing a problem with the markdown visualization. I have an image to display but I want to display it in the centre of the panel or on the upper right corner of the panel. Below the two scr… --- ## [Logstash Offline Plugin SocketError](https://discuss.elastic.co/t/logstash-offline-plugin-socketerror/234562)
**Author:** [@sonnenteich](https://discuss.elastic.co/u/sonnenteich)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 2:21pm UTC](https://discuss.elastic.co/t/logstash-offline-plugin-socketerror/234562 "2020-05-27T14:21:44Z")
I try to build and install a logstash plugin, so I run bin/logstash-plugin prepare-offline-pack logstash-filter-http . When I run bin/logstash-plugin install logstash-offline-plugins-7.7.0.zip in an offline in environme… --- ## [Aggregate query similar to kibana Discover](https://discuss.elastic.co/t/aggregate-query-similar-to-kibana-discover/234518)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 10:14am UTC](https://discuss.elastic.co/t/aggregate-query-similar-to-kibana-discover/234518 "2020-05-27T10:14:41Z")
Good morning everyone. How can I make an aggregated query that has the same Kibana Discovery behavior? Even without searching, all fields in my index are aggregated. GET /amazoninf.teste.analisador/\_search { "size":… --- ## [Is it possible to control which field to index in Logstash?](https://discuss.elastic.co/t/is-it-possible-to-control-which-field-to-index-in-logstash/234546)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 2:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-control-which-field-to-index-in-logstash/234546 "2020-05-27T14:16:21Z")
Hi, I'm trying to apply some naming validation to each field that passes through Logstash, to match some predefined naming convention using regex. Assuming that I can distinguish within Logstash which field is eligible… --- ## [Possible values for 'discovery-type'](https://discuss.elastic.co/t/possible-values-for-discovery-type/234532)
**Author:** [@tmporary](https://discuss.elastic.co/u/tmporary)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 1:05pm UTC](https://discuss.elastic.co/t/possible-values-for-discovery-type/234532 "2020-05-27T13:05:35Z")
I'm looking through the docs and I can't find it. What are possible values for 'discovery\_type' config property? Why I can only find references to single-node value? --- ## [How comparing an UTC datetime to a CET 'YYYY-mm-dd' date using jdbc\_static?](https://discuss.elastic.co/t/how-comparing-an-utc-datetime-to-a-cet-yyyy-mm-dd-date-using-jdbc-static/234173)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 2:01pm UTC](https://discuss.elastic.co/t/how-comparing-an-utc-datetime-to-a-cet-yyyy-mm-dd-date-using-jdbc-static/234173 "2020-05-27T14:01:58Z")
Hi all, I'm trying to explain my problem here and hope you'll provide a solution to me... I've a jdbc input that reads occurrences in a database, especially a datetime field in UTC: evtUtcDate I need to enrich the ev… --- ## [Migrating to Elasticsearch 5](https://discuss.elastic.co/t/migrating-to-elasticsearch-5/234339)
**Author:** [@Raj\_Techie](https://discuss.elastic.co/u/Raj_Techie)\ **Replies:** 7\ **Last updated:** [May 27, 2020, 1:31pm UTC](https://discuss.elastic.co/t/migrating-to-elasticsearch-5/234339 "2020-05-27T13:31:42Z")
I am using Elasticsearch version 5 and logstash 6.0. Changed logstash.conf file with hostname and id paswd. I could see I am able to log in but getting error like "Couldn't index Event to Elasticsearch" . Error Status-\>4… --- ## [ICU transform filters slowing down indexing: how avoid duplicate transliterations?](https://discuss.elastic.co/t/icu-transform-filters-slowing-down-indexing-how-avoid-duplicate-transliterations/234547)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 1:28pm UTC](https://discuss.elastic.co/t/icu-transform-filters-slowing-down-indexing-how-avoid-duplicate-transliterations/234547 "2020-05-27T13:28:24Z")
I was investigating slow Bulk API indexing as discussed in https://discuss.elastic.co/t/bulk-index-slowing-down-as-index-size-increases/234288. It turns out the root cause seems to be slow ICU transform filters, when we… --- ## [Multiple Http\_poller inputs with basic authentication](https://discuss.elastic.co/t/multiple-http-poller-inputs-with-basic-authentication/234542)
**Author:** [@ferdinandb](https://discuss.elastic.co/u/ferdinandb)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 1:08pm UTC](https://discuss.elastic.co/t/multiple-http-poller-inputs-with-basic-authentication/234542 "2020-05-27T13:08:42Z")
Hi, I am trying to pull API data from several endpoints all using the same Username and Password. Example: input { http\_poller { schedule =\> { every =\> "20s" } request\_timeout =\> 60 urls =\> { "Path1" =\> … --- ## [Encountered a retryable error. Will Retry with exponential backoff code=\>413](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/234331)
**Author:** [@avneshkumar98](https://discuss.elastic.co/u/avneshkumar98)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 12:41pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/234331 "2020-05-27T12:41:25Z")
please help, How to solve this error, \[2020-05-26T17:59:29,435\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[6286b14da4febadbf6b521991fe9dc9d011c6f3bdb1ee16e9be4527536d2d765\] Encountered a retryable error. Will Retry wi… --- ## [Computing session durations from timestamps scattered over two documents](https://discuss.elastic.co/t/computing-session-durations-from-timestamps-scattered-over-two-documents/234127)
**Author:** [@seanowl](https://discuss.elastic.co/u/seanowl)\ **Replies:** 2\ **Last updated:** [May 27, 2020, 12:40pm UTC](https://discuss.elastic.co/t/computing-session-durations-from-timestamps-scattered-over-two-documents/234127 "2020-05-27T12:40:31Z")
Background Clients connect to my Websocket-Server. I have logs for both join & disconnect events in the following format (logs redacted): { "\_index": "filebeat-7.7.0-2020.05.22-000001", "\_type": "\_doc", "\_id": "5C… --- ## [Prevail must\_not over filter condition](https://discuss.elastic.co/t/prevail-must-not-over-filter-condition/234537)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 12:15pm UTC](https://discuss.elastic.co/t/prevail-must-not-over-filter-condition/234537 "2020-05-27T12:15:31Z")
Given following document { "colours": \["red", "yellow", "blue"\] } I want to perfom a query that filters by "red" but I don't want document that has "yellow" even if it has "red". This is the following query I'm pe… --- ## [Logstash HTTP Output Failure](https://discuss.elastic.co/t/logstash-http-output-failure/234533)
**Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 11:21am UTC](https://discuss.elastic.co/t/logstash-http-output-failure/234533 "2020-05-27T11:21:00Z")
I'm using logstash 6.5.4 in centos7 for collecting the information from system and sending it to node server through http output plugin. following is my code. input { stdin{} } output{ http { url =\> "${URL\_SET\_CL… --- ## [Elasticsearch SLM policy Error](https://discuss.elastic.co/t/elasticsearch-slm-policy-error/234516)
**Author:** [@zil2020](https://discuss.elastic.co/u/zil2020)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 10:51am UTC](https://discuss.elastic.co/t/elasticsearch-slm-policy-error/234516 "2020-05-27T10:51:53Z")
Hello everyone. Elasticsearch 7.3.0 I need help with setup SLM for automate backups. In terminal elastic@elastic: curl -X PUT "localhost:9200/\_slm/policy/nightly-snapshots?pretty" -H 'Content-Type: application/json' … --- ## [Disable automatic creation of daily indexes](https://discuss.elastic.co/t/disable-automatic-creation-of-daily-indexes/234293)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 10:11am UTC](https://discuss.elastic.co/t/disable-automatic-creation-of-daily-indexes/234293 "2020-05-27T10:11:06Z")
Hey all, I recently created custom index names because I needed spaces for customers, and each customer needed an index to link to the space. So that's what I did. I have these indexes now. auditbeat-customer1-01/01… --- ## [Dynamic template in very dynamic document](https://discuss.elastic.co/t/dynamic-template-in-very-dynamic-document/234392)
**Author:** [@psteh](https://discuss.elastic.co/u/psteh)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 10:03am UTC](https://discuss.elastic.co/t/dynamic-template-in-very-dynamic-document/234392 "2020-05-27T10:03:54Z")
I have SQL queries that would be indexed into ElasticSearch. The problem I encounter is that the fields in documents are very dynamic, it could be text, object, integer, etc. Sample of body (Note that this is not the s… --- ## [\[UpdateRequest\] failed to parse field \[doc\] while trying to update some fields](https://discuss.elastic.co/t/updaterequest-failed-to-parse-field-doc-while-trying-to-update-some-fields/234509)
**Author:** [@Moreno17](https://discuss.elastic.co/u/Moreno17)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 9:53am UTC](https://discuss.elastic.co/t/updaterequest-failed-to-parse-field-doc-while-trying-to-update-some-fields/234509 "2020-05-27T09:53:06Z")
Hi all, I am new with elasticsearch and I am trying to update a document that I have inserted before. The problem is that I had this error and I don't know what I am doing wrong: {'error': {'root\_cause': \[{'type': 'x\_co… --- ## [Old plugin migration](https://discuss.elastic.co/t/old-plugin-migration/234508)
**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 9:52am UTC](https://discuss.elastic.co/t/old-plugin-migration/234508 "2020-05-27T09:52:17Z")
Hi all, I have an old plugin running in 2.x version I want to migrate to actual versions. Unfortunately, the whole API is now moved and I did not follow the evols. Anyone can point me to the right directions to start t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1422) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1424)