# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1500 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1501 --- ## [Update mapping from text to text.keyword](https://discuss.elastic.co/t/update-mapping-from-text-to-text-keyword/228908)
**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 6:02am UTC](https://discuss.elastic.co/t/update-mapping-from-text-to-text-keyword/228908 "2020-04-21T06:02:04Z")
Hello all, I have my elasticsearch with 100gb of data and now I’m trying to add keyword for one field . So is it possible to update the mapping without reindexing the date if keyword is not there for particular field I… --- ## [Grok filter add\_field](https://discuss.elastic.co/t/grok-filter-add-field/226902)
**Author:** [@Jeffreyshoptrader](https://discuss.elastic.co/u/Jeffreyshoptrader)\ **Replies:** 5\ **Last updated:** [April 21, 2020, 6:01am UTC](https://discuss.elastic.co/t/grok-filter-add-field/226902 "2020-04-21T06:01:52Z")
Hi, I've tried using a add\_field in the grok filter. I want to extract the domain name from the log files I have. I've added those in my Apache logs and see them, but I'm not sure how to extract them. What I have so … --- ## [Writing a regex to find substring in kibana discover search bar](https://discuss.elastic.co/t/writing-a-regex-to-find-substring-in-kibana-discover-search-bar/228956)
**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 5:53am UTC](https://discuss.elastic.co/t/writing-a-regex-to-find-substring-in-kibana-discover-search-bar/228956 "2020-04-21T05:53:30Z")
Hi All, I was just playing with kibana discover page , I wanted to search a string using regex expression but somehow was not able to do. Need some help over this. I only want to use KQL not Lucene. I want to search … --- ## [Winlobeat not able to send cloud.instance.id fields or cloud fields into SIEM Elasticsearch](https://discuss.elastic.co/t/winlobeat-not-able-to-send-cloud-instance-id-fields-or-cloud-fields-into-siem-elasticsearch/228447)
**Author:** [@Gaurav\_Rathi](https://discuss.elastic.co/u/Gaurav_Rathi)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 5:42am UTC](https://discuss.elastic.co/t/winlobeat-not-able-to-send-cloud-instance-id-fields-or-cloud-fields-into-siem-elasticsearch/228447 "2020-04-21T05:42:00Z")
Winlobeat not able to send cloud.instance.id fields or cloud fields into SIEM Elasticsearch Winlogbeat version 7.6.0 No cloud fields are appearing in Elasticsearch but other fields like agent,event,host,winlog are appe… --- ## [Database connection stable](https://discuss.elastic.co/t/database-connection-stable/228959)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 5:11am UTC](https://discuss.elastic.co/t/database-connection-stable/228959 "2020-04-21T05:11:02Z")
Hi mates, Could you guide me, i have a scenario where all the main attributes are comming from kafka & some other attributes are comming from oracle db' directly and they both sync and ingest the attributes together int… --- ## [Managing loss of master quorum from simultaneous restart of nodes](https://discuss.elastic.co/t/managing-loss-of-master-quorum-from-simultaneous-restart-of-nodes/225112)
**Author:** [@Dandy](https://discuss.elastic.co/u/Dandy)\ **Replies:** 6\ **Last updated:** [April 21, 2020, 4:51am UTC](https://discuss.elastic.co/t/managing-loss-of-master-quorum-from-simultaneous-restart-of-nodes/225112 "2020-04-21T04:51:14Z")
Similar in nature to this: In 7.X I have a scenario where the quorum is lost due to a restart of all the nodes at the same time. All the data is still present, so cluster state is OK. What's the solution to working … --- ## [Error repository verification exception](https://discuss.elastic.co/t/error-repository-verification-exception/227238)
**Author:** [@Fourir\_Akbar](https://discuss.elastic.co/u/Fourir_Akbar)\ **Replies:** 7\ **Last updated:** [April 21, 2020, 4:45am UTC](https://discuss.elastic.co/t/error-repository-verification-exception/227238 "2020-04-21T04:45:57Z")
Hi there, I use Elasticsearch 6.x I follow this tutorial: https://badshah.io/backup-and-restore-elasticsearch-cluster-using-gcs/ But I got an error repository\_verification\_exception After I create a repository { "er… --- ## [Mtermvectors API not working properly](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 7\ **Last updated:** [April 21, 2020, 4:24am UTC](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702 "2020-04-21T04:24:19Z")
Hi Team, Currently, I am using Elasticsearch for my journal data in my Research lab. I am trying to retrieve mtermvectors for 25 documents at a time using python. Some times I get the result properly but most of the t… --- ## [Can i write elastic query using KQL or Lucene](https://discuss.elastic.co/t/can-i-write-elastic-query-using-kql-or-lucene/227337)
**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 4:19am UTC](https://discuss.elastic.co/t/can-i-write-elastic-query-using-kql-or-lucene/227337 "2020-04-21T04:19:44Z")
I was trying to replicate watcher functionality using SIEM detection rule. In watcher i can write elastic query, but can i perform that using detection rule ? Please help. --- ## [Elastic Watcher does not execute for a long time](https://discuss.elastic.co/t/elastic-watcher-does-not-execute-for-a-long-time/228950)
**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 3:48am UTC](https://discuss.elastic.co/t/elastic-watcher-does-not-execute-for-a-long-time/228950 "2020-04-21T03:48:08Z")
I have a watcher that executes every 1 minute. Yesterday, I received an alert from the Watcher and checked if anything wrong. Then I figured out that the watcher didn't execute for 12 hours (5pm-5am). And the first exec… --- ## [Can we invoke python script in a filter using log stash file](https://discuss.elastic.co/t/can-we-invoke-python-script-in-a-filter-using-log-stash-file/227010)
**Author:** [@deepikagarre](https://discuss.elastic.co/u/deepikagarre)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 3:27am UTC](https://discuss.elastic.co/t/can-we-invoke-python-script-in-a-filter-using-log-stash-file/227010 "2020-04-21T03:27:07Z")
Can we invoke python script in a filter using log stash file. --- ## [Unexpected behaviour of termvector API in Python](https://discuss.elastic.co/t/unexpected-behaviour-of-termvector-api-in-python/228948)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 2:49am UTC](https://discuss.elastic.co/t/unexpected-behaviour-of-termvector-api-in-python/228948 "2020-04-21T02:49:50Z")
I am currently working on Elasticsearch with a huge number of documents(around 500K) in an index. I want to store n-grams of each document's text data(This is also huge ~ per doc contains 2 pages of text data) in another… --- ## [Custom Analyzer versus Ingest Pipeline](https://discuss.elastic.co/t/custom-analyzer-versus-ingest-pipeline/228941)
**Author:** [@gigabyte87](https://discuss.elastic.co/u/gigabyte87)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 1:32am UTC](https://discuss.elastic.co/t/custom-analyzer-versus-ingest-pipeline/228941 "2020-04-21T01:32:10Z")
Hello, I'm having some trouble playing around with a custom analyzer. I created an index with a custom analyzer to map IT to Italy, and reindexed to the new index. The search features work, I can search "Italy" and it f… --- ## [Getting Started tutorial errors](https://discuss.elastic.co/t/getting-started-tutorial-errors/228883)
**Author:** [@Rodrigo\_Bezerra](https://discuss.elastic.co/u/Rodrigo_Bezerra)\ **Replies:** 4\ **Last updated:** [April 21, 2020, 12:52am UTC](https://discuss.elastic.co/t/getting-started-tutorial-errors/228883 "2020-04-21T00:52:10Z")
Hi, I'm going through (this Elasticsearch's tutorial)\[https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index.html#getting-started-batch-processing\] but when I try to run the command to bul… --- ## [Elasticsearch odbc](https://discuss.elastic.co/t/elasticsearch-odbc/228761)
**Author:** [@youu2020](https://discuss.elastic.co/u/youu2020)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 12:35am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761 "2020-04-21T00:35:19Z")
Hi, trying to configure elasticsearch odbc dsn I get this error --- ## [How to show hostname in watcher text](https://discuss.elastic.co/t/how-to-show-hostname-in-watcher-text/228237)
**Author:** [@sarahpark](https://discuss.elastic.co/u/sarahpark)\ **Replies:** 5\ **Last updated:** [April 21, 2020, 12:32am UTC](https://discuss.elastic.co/t/how-to-show-hostname-in-watcher-text/228237 "2020-04-21T00:32:48Z")
Hi, I want to show hostname in watcher text. I made the threshold alert, Kibana UI. Its purpose is alerting the hostname, that using disk size over 80%. I want to make the text like "Disk Usage Warning !! IS-SC-001 is… --- ## [Visualize data from multiple indexes in one chart](https://discuss.elastic.co/t/visualize-data-from-multiple-indexes-in-one-chart/226262)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 12\ **Last updated:** [April 21, 2020, 12:31am UTC](https://discuss.elastic.co/t/visualize-data-from-multiple-indexes-in-one-chart/226262 "2020-04-21T00:31:15Z")
Hi, I have 5-7 indexes with different names and want to create one chart which will get a field that is existing in all indexes. For example index 1, index 2, index3, have a field called "type" and I want to get the coun… --- ## [Best way to insert denormalized data to ES](https://discuss.elastic.co/t/best-way-to-insert-denormalized-data-to-es/228937)
**Author:** [@ferrari](https://discuss.elastic.co/u/ferrari)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 10:13pm UTC](https://discuss.elastic.co/t/best-way-to-insert-denormalized-data-to-es/228937 "2020-04-20T22:13:13Z")
Hi ElasticTeam, I want to get your expert opinion on what's the most optimal way to solve problem mentioned below: Scenario: App receives data then does some processing writes it to Kafka Topic, which is picked up by K… --- ## [Keep getting dateparsefailures in Nexus logs](https://discuss.elastic.co/t/keep-getting-dateparsefailures-in-nexus-logs/228218)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 4\ **Last updated:** [April 20, 2020, 10:12pm UTC](https://discuss.elastic.co/t/keep-getting-dateparsefailures-in-nexus-logs/228218 "2020-04-20T22:12:14Z")
Hi, I keep getting the dateparsefailure from a Nexus device, could not figure out what's wrong, can someone take a quick look? Thanks a lot! { "\_index": "network-2020.04.14", "\_type": "\_doc", "\_id": "OaQHd3EB-3-fVVn… --- ## [Pipeline in logstash](https://discuss.elastic.co/t/pipeline-in-logstash/228920)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [April 20, 2020, 9:49pm UTC](https://discuss.elastic.co/t/pipeline-in-logstash/228920 "2020-04-20T21:49:06Z")
I have multiple pipeline (23) running on a system half of the job runs only once a day and half runs every hour. does each pipeline reserves memory and lock on cpu? system has 24 logical cpu. plenty of memory (98gig)… --- ## [Logstash could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/228930)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 2\ **Last updated:** [April 20, 2020, 9:05pm UTC](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/228930 "2020-04-20T21:05:03Z")
Good afternoon all, I want to preface this post that I am completely new to Elastic and all its components. I am currently working on getting Logstash to produce an API call to our web proxy server. I have searched the … --- ## [Filtering search hits based on the presence of other search hits](https://discuss.elastic.co/t/filtering-search-hits-based-on-the-presence-of-other-search-hits/228935)
**Author:** [@rrva](https://discuss.elastic.co/u/rrva)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 9:01pm UTC](https://discuss.elastic.co/t/filtering-search-hits-based-on-the-presence-of-other-search-hits/228935 "2020-04-20T21:01:58Z")
If my search in the first round returns search hits of a certain type (having an indexed field called "type" set to a specific value) , how can I make the presence of these search hits exclude other search hits which sha… --- ## [Very bad shard allocation](https://discuss.elastic.co/t/very-bad-shard-allocation/228903)
**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\ **Replies:** 2\ **Last updated:** [April 20, 2020, 8:40pm UTC](https://discuss.elastic.co/t/very-bad-shard-allocation/228903 "2020-04-20T20:40:28Z")
Hi. We have Elasticsearch cluster, which consists from: 3 dedicated servers (A+B+C) 48 threads, 128 GB RAM, 1.8TB SSD 1 instance of master+client node, 10 GB heap size 1 instance of data-node, 30 GB heap size 1 ded… --- ## [How to customize Kibana UI and add content using HTML](https://discuss.elastic.co/t/how-to-customize-kibana-ui-and-add-content-using-html/228059)
**Author:** [@Potter\_Ginny](https://discuss.elastic.co/u/Potter_Ginny)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 8:33pm UTC](https://discuss.elastic.co/t/how-to-customize-kibana-ui-and-add-content-using-html/228059 "2020-04-20T20:33:47Z")
Hello, I would like to add a floating footer at every page of Kibana. This will be our own custom footer and it will contain some text and hyperlinks leading to important sites in our organization. Where could be the ma… --- ## [Selecting documents to search (performance issues)](https://discuss.elastic.co/t/selecting-documents-to-search-performance-issues/228928)
**Author:** [@djmarcus](https://discuss.elastic.co/u/djmarcus)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 7:48pm UTC](https://discuss.elastic.co/t/selecting-documents-to-search-performance-issues/228928 "2020-04-20T19:48:02Z")
I have an elasticsearch document repository with ~15M documents. Each document has an unique 11-char string field (comes from a mongo DB) that is unique to the document. This field is indexed as keyword. I'm using C#. … --- ## [GROK filter is not parsing the windows firewall logs for ICMP traffic](https://discuss.elastic.co/t/grok-filter-is-not-parsing-the-windows-firewall-logs-for-icmp-traffic/228011)
**Author:** [@Prabhu\_Chinnasamy](https://discuss.elastic.co/u/Prabhu_Chinnasamy)\ **Replies:** 6\ **Last updated:** [April 20, 2020, 7:05pm UTC](https://discuss.elastic.co/t/grok-filter-is-not-parsing-the-windows-firewall-logs-for-icmp-traffic/228011 "2020-04-20T19:05:32Z")
All, I am sending the windows firewall logs to logstash and created a GROK filter to parse the log. my GROK filter is: "%{TIMESTAMP\_ISO8601:TimeStamp} %{WORD:Action} %{WORD:Protocol} %{IP:Source\_IP} %{IP:Destination\_I… --- ## [To find Delta difference between bucket aggregations](https://discuss.elastic.co/t/to-find-delta-difference-between-bucket-aggregations/228913)
**Author:** [@anv-ani](https://discuss.elastic.co/u/anv-ani)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 6:11pm UTC](https://discuss.elastic.co/t/to-find-delta-difference-between-bucket-aggregations/228913 "2020-04-20T18:11:16Z")
I have 2 buckets aggregration for different time interval. i get metrics from different data sources and i get the unique count of metrics i get from different data source. Example my individual bucket aggregation looks… --- ## [Enable security by setting \[xpack.security.enabled\] to \[true\] in the elasticsearch.yml file and restart the node](https://discuss.elastic.co/t/enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml-file-and-restart-the-node/228912)
**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 6:06pm UTC](https://discuss.elastic.co/t/enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml-file-and-restart-the-node/228912 "2020-04-20T18:06:38Z")
i am using ES 7.5.2 and the basic license is active. when i am trying to click on the "stack monitoring" tab i see the notification as "Monitoring Request Error" http 503 and want me to enable the xpack security in the c… --- ## [Terms may be incomplete because the request is taking too long](https://discuss.elastic.co/t/terms-may-be-incomplete-because-the-request-is-taking-too-long/228899)
**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 4:24pm UTC](https://discuss.elastic.co/t/terms-may-be-incomplete-because-the-request-is-taking-too-long/228899 "2020-04-20T16:24:15Z")
I am hosted in the Elastic Cloud and a new subscriber. I am using the experimental controls filter option (which is awesome) but receiving this error when the pages are loading."Terms may be incomplete because the reque… --- ## [Getting similarity scores by issuing MLT-queries doesn't work for some documents](https://discuss.elastic.co/t/getting-similarity-scores-by-issuing-mlt-queries-doesnt-work-for-some-documents/228878)
**Author:** [@Moiddes](https://discuss.elastic.co/u/Moiddes)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 4:06pm UTC](https://discuss.elastic.co/t/getting-similarity-scores-by-issuing-mlt-queries-doesnt-work-for-some-documents/228878 "2020-04-20T16:06:46Z")
Hi, I have a very basic ES-Setting. All items have just two fields id and content. I want to find the top 20 (or 100) most similar documents for each document in my index by getting their BM25 Score. My understanding i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1499) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1501)