# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1543

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1544

---

## [Query a AND b](https://discuss.elastic.co/t/query-a-and-b/225816)

<div class="topic-metadata">

**Author:** [@sancho](https://discuss.elastic.co/u/sancho)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 8:30am UTC](https://discuss.elastic.co/t/query-a-and-b/225816 "2020-03-31T08:30:20Z")

</div>

Hi everyone, My goal is to make a search engine for my data that look like "ta AND tb OR (tc AND td)" I'm focusing on the part "ta AND tb". { "id": 1, "keywords": \["java", "node", "PHP"\] }, { …

---

## [Not able to download RPM files from download page](https://discuss.elastic.co/t/not-able-to-download-rpm-files-from-download-page/225807)

<div class="topic-metadata">

**Author:** [@Dhara\_Vihol](https://discuss.elastic.co/u/Dhara_Vihol)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 8:12am UTC](https://discuss.elastic.co/t/not-able-to-download-rpm-files-from-download-page/225807 "2020-03-31T08:12:53Z")

</div>

Not able to download any RPM file directly from download links given: https://www.elastic.co/downloads/

---

## [Dashboard error "Unexpected token \< in JSON at position 0"](https://discuss.elastic.co/t/dashboard-error-unexpected-token-in-json-at-position-0/225258)

<div class="topic-metadata">

**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\
**Replies:** 7\
**Last updated:** [March 31, 2020, 8:09am UTC](https://discuss.elastic.co/t/dashboard-error-unexpected-token-in-json-at-position-0/225258 "2020-03-31T08:09:09Z")

</div>

Hi I am having errors seeing the dashboard in kibana, I am getting several frames with the error "unexpected token \<in JSON at position 0" Then I refresh the page and they don't appear anymore so I think it's not a que…

---

## [Logstash is not outputting read files](https://discuss.elastic.co/t/logstash-is-not-outputting-read-files/225636)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 5\
**Last updated:** [March 31, 2020, 8:04am UTC](https://discuss.elastic.co/t/logstash-is-not-outputting-read-files/225636 "2020-03-31T08:04:28Z")

</div>

Hello, I want to use logstash to index some logfiles of mine. My config, with different paths I have tried: input { file { id =\> "my\_files" #path =\> \[ "C:\\Users\\Me\\Desktop\\files\\\*\*\\\*.log" \] #path =\> \[ "C:/User…

---

## [Elasticsearch Engineer 1 - On Demand training material error](https://discuss.elastic.co/t/elasticsearch-engineer-1-on-demand-training-material-error/225812)

<div class="topic-metadata">

**Author:** [@Anton\_H](https://discuss.elastic.co/u/Anton_H)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-engineer-1-on-demand-training-material-error/225812 "2020-03-31T08:02:19Z")

</div>

In the On-Demand training there is an error (I presume) There is a data table about a blog and a reference to a JSON document. There is a wrong association between the table column name and JSON fields.

---

## [How to drop a nested field that has an empty value?](https://discuss.elastic.co/t/how-to-drop-a-nested-field-that-has-an-empty-value/225649)

<div class="topic-metadata">

**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 7:57am UTC](https://discuss.elastic.co/t/how-to-drop-a-nested-field-that-has-an-empty-value/225649 "2020-03-31T07:57:11Z")

</div>

it's possible to drop a nested field in case the value is empty? example: "log":{"business\_information":""} background: this is a workaround to avoid mapping issues, as other application logs are creating fields like…

---

## [Set up Elastic Search on Azure and post data using C# .net core](https://discuss.elastic.co/t/set-up-elastic-search-on-azure-and-post-data-using-c-net-core/225808)

<div class="topic-metadata">

**Author:** [@ManishNarula](https://discuss.elastic.co/u/ManishNarula)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 7:39am UTC](https://discuss.elastic.co/t/set-up-elastic-search-on-azure-and-post-data-using-c-net-core/225808 "2020-03-31T07:39:09Z")

</div>

Hi there, I am trying to set up Elastic Search on Azure. Below are the steps i have taken Transport Security is No , though screen shot is saying yes (old screen shot) var pool = new SingleNodeConnectionPool(ne…

---

## [ELK stack Integrating with Oracle DB](https://discuss.elastic.co/t/elk-stack-integrating-with-oracle-db/225730)

<div class="topic-metadata">

**Author:** [@singh.piyush862](https://discuss.elastic.co/u/singh.piyush862)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 7:13am UTC](https://discuss.elastic.co/t/elk-stack-integrating-with-oracle-db/225730 "2020-03-31T07:13:37Z")

</div>

Hi Team, I have basic ELK use case wherein I am consuming syslog data from client through Logstash, storing in ES & visualize in Kibana. In addition to this, In Syslog incoming data I have IP address field, but I don’t…

---

## [How to get spesific data in Long Date value](https://discuss.elastic.co/t/how-to-get-spesific-data-in-long-date-value/225800)

<div class="topic-metadata">

**Author:** [@muhjaury](https://discuss.elastic.co/u/muhjaury)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 7:04am UTC](https://discuss.elastic.co/t/how-to-get-spesific-data-in-long-date-value/225800 "2020-03-31T07:04:00Z")

</div>

My data in user.created\_at field is like below Tue Mar 10 23:03:00 +0000 2020 Tue Mar 10 04:29:18 +0000 2020 Tue Jan 21 08:45:43 +0000 2020 Tue Mar 10 00:11:45 +0000 2020 Tue Jan 28 04:11:45 +0000 2020 Sun Mar 08 10:19:…

---

## [When to use nested object vs parent child relation](https://discuss.elastic.co/t/when-to-use-nested-object-vs-parent-child-relation/225799)

<div class="topic-metadata">

**Author:** [@Ashish\_Mehta](https://discuss.elastic.co/u/Ashish_Mehta)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 7:02am UTC](https://discuss.elastic.co/t/when-to-use-nested-object-vs-parent-child-relation/225799 "2020-03-31T07:02:08Z")

</div>

Hi Team, I am migrating my relation database table to elastic search. I am stuck in making mapping of the document. I dont figure out which thing i use . Whether i should go to nested object or parent child relation. I…

---

## [Deleting files after file beat processes them](https://discuss.elastic.co/t/deleting-files-after-file-beat-processes-them/225796)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 6:27am UTC](https://discuss.elastic.co/t/deleting-files-after-file-beat-processes-them/225796 "2020-03-31T06:27:41Z")

</div>

Hi, I would like to know if there is a way of deleting log files once filebeat has finished processing. We have files sent to an input folder, file beat then processes them. I would like to clear them down once it is d…

---

## [So How I need to integrate c# .Net framework 4.71. to APM](https://discuss.elastic.co/t/so-how-i-need-to-integrate-c-net-framework-4-71-to-apm/225545)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 6:24am UTC](https://discuss.elastic.co/t/so-how-i-need-to-integrate-c-net-framework-4-71-to-apm/225545 "2020-03-31T06:24:46Z")

</div>

Hi... I have a problem while setting up apm in .Net framework.

---

## [Ruby filter: escaping single quote inside the back quote expression](https://discuss.elastic.co/t/ruby-filter-escaping-single-quote-inside-the-back-quote-expression/225615)

<div class="topic-metadata">

**Author:** [@deostroll](https://discuss.elastic.co/u/deostroll)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 6:24am UTC](https://discuss.elastic.co/t/ruby-filter-escaping-single-quote-inside-the-back-quote-expression/225615 "2020-03-31T06:24:30Z")

</div>

I am trying to run a powershell command to get the system date. In a windows command line you type this: powershell -command (date).ToString('yyyyMMddhhmmss') It outputs the current time in the required format. However…

---

## [Kibana user not able to see the dashboard data](https://discuss.elastic.co/t/kibana-user-not-able-to-see-the-dashboard-data/223878)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 5\
**Last updated:** [March 31, 2020, 6:20am UTC](https://discuss.elastic.co/t/kibana-user-not-able-to-see-the-dashboard-data/223878 "2020-03-31T06:20:18Z")

</div>

Hello, I have a setup of elk 7.6.0v I have created a user with dashboard access. The user which has read privileges to the metricbeat index and dashboard. I am facing issue, there is no data shown to user. Have a …

---

## [The more CPU cores/threads, the better performance?](https://discuss.elastic.co/t/the-more-cpu-cores-threads-the-better-performance/225789)

<div class="topic-metadata">

**Author:** [@kohsmos](https://discuss.elastic.co/u/kohsmos)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 5:52am UTC](https://discuss.elastic.co/t/the-more-cpu-cores-threads-the-better-performance/225789 "2020-03-31T05:52:31Z")

</div>

Hello, I am ES beginer. While studying ES configurations, I got a question. Is there any problem when I have too much RAM memory and too many CPU cores/threads?? The more CPU cores/threads, RAM memory, the better perf…

---

## [SSL/TLS on Logstash syslog input plugin without XPACK/ NGINX or any third party tools](https://discuss.elastic.co/t/ssl-tls-on-logstash-syslog-input-plugin-without-xpack-nginx-or-any-third-party-tools/225151)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 5:37am UTC](https://discuss.elastic.co/t/ssl-tls-on-logstash-syslog-input-plugin-without-xpack-nginx-or-any-third-party-tools/225151 "2020-03-31T05:37:35Z")

</div>

Hi I want to secure the communication to logstash 7.4.2. Im using Syslog Input Plugin listening over specified port. How can I enable SSL/TLS on syslog? Regards Ram

---

## [Logstash muitiple pipeline to pipeline configue](https://discuss.elastic.co/t/logstash-muitiple-pipeline-to-pipeline-configue/225777)

<div class="topic-metadata">

**Author:** [@judragon\_dark](https://discuss.elastic.co/u/judragon_dark)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 5:22am UTC](https://discuss.elastic.co/t/logstash-muitiple-pipeline-to-pipeline-configue/225777 "2020-03-31T05:22:49Z")

</div>

I'd like to do a multi-pipeline. - pipeline.id: beats-server input { beats { port =\> 5044 } } output { if \[type\] == log1 { pipeline { send\_to =\> log1 } } else if \[type\] == log2 { pipeline { send\_t…

---

## [FunctionBeat: incorrect IAM Service Principal for Lambda in AWS China regions](https://discuss.elastic.co/t/functionbeat-incorrect-iam-service-principal-for-lambda-in-aws-china-regions/225775)

<div class="topic-metadata">

**Author:** [@henrysher](https://discuss.elastic.co/u/henrysher)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 2:59am UTC](https://discuss.elastic.co/t/functionbeat-incorrect-iam-service-principal-for-lambda-in-aws-china-regions/225775 "2020-03-31T02:59:39Z")

</div>

Hello, I have tested FunctionBeat in AWS China region with those errors: 2020-03-31T12:13:10.748+0800 INFO \[aws\] aws/op\_cloudformation.go:97 Stack event received, ResourceType: AWS::IAM::Role, LogicalResourceId: fnbclo…

---

## [Term aggregation on frozen index cause field data cache increase continuously](https://discuss.elastic.co/t/term-aggregation-on-frozen-index-cause-field-data-cache-increase-continuously/225770)

<div class="topic-metadata">

**Author:** [@stone\_xy](https://discuss.elastic.co/u/stone_xy)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 3:57am UTC](https://discuss.elastic.co/t/term-aggregation-on-frozen-index-cause-field-data-cache-increase-continuously/225770 "2020-03-31T03:57:39Z")

</div>

ES Version: 7.1.1 JVM Heap: 4GB Repro steps: Create an index with keyword field type and insert serveral docs, freeze that index, than run term query agaist the frozen index, we will see field data cache increase and…

---

## [Access Kibana from internet (Using Public IP)](https://discuss.elastic.co/t/access-kibana-from-internet-using-public-ip/225665)

<div class="topic-metadata">

**Author:** [@Boobeshwaran](https://discuss.elastic.co/u/Boobeshwaran)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 3:44am UTC](https://discuss.elastic.co/t/access-kibana-from-internet-using-public-ip/225665 "2020-03-31T03:44:15Z")

</div>

Hi Team, I am trying to host my personal ELK stack on Azure Cloud. I am using Windows server 2016 OS, Elastic 7.3.0 and Kibana 7.3.0. I wish to host Kibana on Cloud to access from internet. I have configured the server…

---

## [Performance Tuning for related docs](https://discuss.elastic.co/t/performance-tuning-for-related-docs/225774)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 2:55am UTC](https://discuss.elastic.co/t/performance-tuning-for-related-docs/225774 "2020-03-31T02:55:20Z")

</div>

Hey, it's me again =D so, in my quest to crush those damn RRAS logs I've found myself in a pickle. I had read somewhere that if I wanted my registries to be read in a linear stream I had to setup the pipeline to use a si…

---

## [Mapper parsing exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449)

<div class="topic-metadata">

**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\
**Replies:** 5\
**Last updated:** [March 31, 2020, 2:07am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449 "2020-03-31T02:07:55Z")

</div>

PUT /ag2\_vehicle\_stats { "settings": { "number\_of\_shards": 1 }, "mappings": { "doc": { "properties": { "vin": { "type": "keyword" }, "error\_reported": { "type": "integer" }, "num\_records": { "type": "integ…

---

## [JDBC MONGO and objectId type](https://discuss.elastic.co/t/jdbc-mongo-and-objectid-type/225760)

<div class="topic-metadata">

**Author:** [@7cinquante](https://discuss.elastic.co/u/7cinquante)\
**Replies:** 0\
**Last updated:** [March 30, 2020, 10:46pm UTC](https://discuss.elastic.co/t/jdbc-mongo-and-objectid-type/225760 "2020-03-30T22:46:59Z")

</div>

For people who are looking for convert objectId type from mongo to string in logstash statement =\> "db.getCollection('YOUR\_COLLECTION').aggregate(\[ { $project: { '\_id': {$toString: '$\_id'}, …

---

## [Elastic Search Basic concepts documentaton](https://discuss.elastic.co/t/elastic-search-basic-concepts-documentaton/225682)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 9:56pm UTC](https://discuss.elastic.co/t/elastic-search-basic-concepts-documentaton/225682 "2020-03-30T21:56:32Z")

</div>

I am going through the documentation and had seen an article in 5.3 and it never present in 7.x / 6.x version documenation. I am wondering is it still reelvant ( assuming it should as it is related to basic concepts) ht…

---

## [Coordinate map click actions on graphed points](https://discuss.elastic.co/t/coordinate-map-click-actions-on-graphed-points/225017)

<div class="topic-metadata">

**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 9:46pm UTC](https://discuss.elastic.co/t/coordinate-map-click-actions-on-graphed-points/225017 "2020-03-30T21:46:19Z")

</div>

Hi folks, I'm using ELK stack 5.6. I have a working coordinate map visualization using iptables logs for data. I seem to recall when I ran ELK on 1.x or 2.x that you could drill down in a dashboard when clicking a cood…

---

## [Retrieve multifield data in search](https://discuss.elastic.co/t/retrieve-multifield-data-in-search/225737)

<div class="topic-metadata">

**Author:** [@RajaG](https://discuss.elastic.co/u/RajaG)\
**Replies:** 0\
**Last updated:** [March 30, 2020, 7:18pm UTC](https://discuss.elastic.co/t/retrieve-multifield-data-in-search/225737 "2020-03-30T19:18:34Z")

</div>

Here is my mapping for a field: "likes": { "type": "text", "fields": { "length": { "type": "token\_count", "analyzer": "email\_analyzer" …

---

## [Correct analyzer for a field with backslash](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 2\
**Last updated:** [March 30, 2020, 7:56pm UTC](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614 "2020-03-30T19:56:12Z")

</div>

So, I'm trying to setup a new index mapping with the correct analyzer for a Windows credential field, which has the format domain\\username. I want to be able to search for domain, username AND domain\\username. But the d…

---

## [Cannot query nested field](https://discuss.elastic.co/t/cannot-query-nested-field/225597)

<div class="topic-metadata">

**Author:** [@omgeng](https://discuss.elastic.co/u/omgeng)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 7:42pm UTC](https://discuss.elastic.co/t/cannot-query-nested-field/225597 "2020-03-30T19:42:45Z")

</div>

Halo, I am using elastic cloud ELK. I have created an index with a mapping containing several nested fields. I checked on Kibana and it looks fine. However when I try to write a query in KQL for the nested field, it doe…

---

## [Repository-s3 release](https://discuss.elastic.co/t/repository-s3-release/225739)

<div class="topic-metadata">

**Author:** [@asipe](https://discuss.elastic.co/u/asipe)\
**Replies:** 0\
**Last updated:** [March 30, 2020, 7:39pm UTC](https://discuss.elastic.co/t/repository-s3-release/225739 "2020-03-30T19:39:33Z")

</div>

There is a recent commit to the repository-s3 code that would likely solve an issue we have run into (https://github.com/elastic/elasticsearch/commit/754d071c4e52250222382953d165860ea743d7b7). Is there any way to predic…

---

## [Multiply fields from different indices](https://discuss.elastic.co/t/multiply-fields-from-different-indices/225193)

<div class="topic-metadata">

**Author:** [@nottellingyou](https://discuss.elastic.co/u/nottellingyou)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 7:05pm UTC](https://discuss.elastic.co/t/multiply-fields-from-different-indices/225193 "2020-03-30T19:05:00Z")

</div>

Hi, I have two indices; 1st index is a list of staff, location and daily costs, the 2nd index is a list of projects, start/end dates, assigned staff and working days. I would like to calculate the project cost by multi…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1542)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1544)
