# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1595 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1596 --- ## [Different response of match and term query using synonyms](https://discuss.elastic.co/t/different-response-of-match-and-term-query-using-synonyms/221827)
**Author:** [@Syed\_Saeed\_Ul\_Hassan](https://discuss.elastic.co/u/Syed_Saeed_Ul_Hassan)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 8:28pm UTC](https://discuss.elastic.co/t/different-response-of-match-and-term-query-using-synonyms/221827 "2020-03-03T20:28:14Z")
Hi all, I have recently started working with elastic search. I read about synonyms and how expansion and replacement works in synonyms but when I perform a match query, resultant response seems like synonyms worked as e… --- ## [How to apply json filter to every field that ends with "json"?](https://discuss.elastic.co/t/how-to-apply-json-filter-to-every-field-that-ends-with-json/221652)
**Author:** [@sahar](https://discuss.elastic.co/u/sahar)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 8:16pm UTC](https://discuss.elastic.co/t/how-to-apply-json-filter-to-every-field-that-ends-with-json/221652 "2020-03-03T20:16:52Z")
Hello, I'm extracting fields from the message using KV filter, some of these fields might be holding a json value - I would like to iterate all fields and check if the field key ends with "json", to apply json filter on… --- ## [KV how to extract data between square brackets](https://discuss.elastic.co/t/kv-how-to-extract-data-between-square-brackets/221678)
**Author:** [@sahar](https://discuss.elastic.co/u/sahar)\ **Replies:** 7\ **Last updated:** [March 3, 2020, 8:14pm UTC](https://discuss.elastic.co/t/kv-how-to-extract-data-between-square-brackets/221678 "2020-03-03T20:14:29Z")
Hello, Assume I have the following message: "Some message \[key1=val1\] more text \[key2=some \[special\] value\], more text." From the above message I would like to extract key1 and key2 as follows: key1 = val1 key2 = so… --- ## [How to connect Liferay client (using Transport Protocol) to Elastic Cluster through Nginx](https://discuss.elastic.co/t/how-to-connect-liferay-client-using-transport-protocol-to-elastic-cluster-through-nginx/221938)
**Author:** [@galew](https://discuss.elastic.co/u/galew)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 7:11pm UTC](https://discuss.elastic.co/t/how-to-connect-liferay-client-using-transport-protocol-to-elastic-cluster-through-nginx/221938 "2020-03-03T19:11:09Z")
Hi! I have Elasticsearch clusters behind NGiNX. Everything has worked great until I try to connect my Elasticsearch clusters with Liferay Client. Liferay client is using Elasticsearch Native Binary Protocol to connect… --- ## [Planning a new cluster installation](https://discuss.elastic.co/t/planning-a-new-cluster-installation/221924)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 6:39pm UTC](https://discuss.elastic.co/t/planning-a-new-cluster-installation/221924 "2020-03-03T18:39:19Z")
Hi , I'm planning a new Elasticsearch cluster installation I want to build 3 master nodes (4 cpu , 8g ) 3 data nodes (4 cpu, 16g) 2 logstash nodes(4 cpu , 8g) 2 Ingest nodes --\> (do I need it ?) Is this a correc… --- ## [Date, change day and month position](https://discuss.elastic.co/t/date-change-day-and-month-position/221606)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 10\ **Last updated:** [March 3, 2020, 6:28pm UTC](https://discuss.elastic.co/t/date-change-day-and-month-position/221606 "2020-03-03T18:28:39Z")
I have a field called "timeanddate" and I use it as timestamp. date { match =\> \["timeanddate", "HH:mm:ss MM/dd/yyyy"\] target =\> "@timestamp" } But I want to change the order of the date and put the day f… --- ## [Shards still started for closed indexes](https://discuss.elastic.co/t/shards-still-started-for-closed-indexes/221930)
**Author:** [@16318a22907f3cbfa04b](https://discuss.elastic.co/u/16318a22907f3cbfa04b)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 6:15pm UTC](https://discuss.elastic.co/t/shards-still-started-for-closed-indexes/221930 "2020-03-03T18:15:19Z")
Elasticsearch 7.3.2 OSS. When I close some indexes (POST pattern-\*/\_close) shards still displayed as started in GET \_cat/shards. I made sure that the indexes are really closed (GET \_cat/indices/pattern-\*?h=s,i) I exp… --- ## [Clarification about recommended memory-disk ratio of 1:30](https://discuss.elastic.co/t/clarification-about-recommended-memory-disk-ratio-of-1-30/221547)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 5:40pm UTC](https://discuss.elastic.co/t/clarification-about-recommended-memory-disk-ratio-of-1-30/221547 "2020-03-03T17:40:19Z")
I've seen some confusing (seemingly contradicting) official guidelines about sizing an ElasticSearch cluster, so I'd like to know if somebody can shed some light on this. These are the guidelines in question: As per … --- ## [Existing mapping for \[user\] must be of type object but found \[text\]](https://discuss.elastic.co/t/existing-mapping-for-user-must-be-of-type-object-but-found-text/221929)
**Author:** [@boyhittscar](https://discuss.elastic.co/u/boyhittscar)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 5:36pm UTC](https://discuss.elastic.co/t/existing-mapping-for-user-must-be-of-type-object-but-found-text/221929 "2020-03-03T17:36:57Z")
Hello! I'm getting the following error out of logstash: "reason"=\>"Could not dynamically add mapping for field \[user.name\]. Existing mapping for \[user\] must be of type object but found \[text\]."}}}} I've found another … --- ## [Install script failing with python error (new)](https://discuss.elastic.co/t/install-script-failing-with-python-error-new/221082)
**Author:** [@andrew.luke](https://discuss.elastic.co/u/andrew.luke)\ **Replies:** 11\ **Last updated:** [March 3, 2020, 5:27pm UTC](https://discuss.elastic.co/t/install-script-failing-with-python-error-new/221082 "2020-03-03T17:27:00Z")
This morning we had two different groups setting up a new ECE lab on prem and in Azure. Both are hitting the same error with the install script. We are both installing on RHEL 7.7 that has been prepared according to th… --- ## [ILM rollsover the index but it stays in hot phase](https://discuss.elastic.co/t/ilm-rollsover-the-index-but-it-stays-in-hot-phase/219378)
**Author:** [@TomaszKlosinski](https://discuss.elastic.co/u/TomaszKlosinski)\ **Replies:** 9\ **Last updated:** [March 3, 2020, 5:04pm UTC](https://discuss.elastic.co/t/ilm-rollsover-the-index-but-it-stays-in-hot-phase/219378 "2020-03-03T17:04:22Z")
I have ILM like this: PUT \_ilm/policy/logs { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_size"… --- ## [Linking from Metric Visualization to Another Dashboard](https://discuss.elastic.co/t/linking-from-metric-visualization-to-another-dashboard/221634)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 4:53pm UTC](https://discuss.elastic.co/t/linking-from-metric-visualization-to-another-dashboard/221634 "2020-03-03T16:53:37Z")
Can we link from Metric which is displayed in one of the Dashboard to another dashboard. I have searched thru forum and couldn't find anything apart from Issue which was raised for it. But that doesn't cover my requirem… --- ## [Self-signed certificate expiration date and the ES cluster transport layer](https://discuss.elastic.co/t/self-signed-certificate-expiration-date-and-the-es-cluster-transport-layer/221784)
**Author:** [@Darrell\_Lowrance](https://discuss.elastic.co/u/Darrell_Lowrance)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 4:38pm UTC](https://discuss.elastic.co/t/self-signed-certificate-expiration-date-and-the-es-cluster-transport-layer/221784 "2020-03-03T16:38:15Z")
Current ELK cluster version: v7.3 I'm currently using a self-signed cert generated using the elasticsearch-certutil tool. By default, the CA and Certificate expire in 3 years. I plan to use the self-signed certs in P… --- ## [Issue with date field loaded in Kibana through elasticsearch](https://discuss.elastic.co/t/issue-with-date-field-loaded-in-kibana-through-elasticsearch/221724)
**Author:** [@Rainfall](https://discuss.elastic.co/u/Rainfall)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 4:27pm UTC](https://discuss.elastic.co/t/issue-with-date-field-loaded-in-kibana-through-elasticsearch/221724 "2020-03-03T16:27:29Z")
Hi, I have used logstash and loaded data through elasticsearch. I created indexpattern to the loaded index and trying to create visualization. I'm unable to create Date Histogram, since the date fields (closed\_at, work… --- ## [Cant able to see Infrastructure section in kibana](https://discuss.elastic.co/t/cant-able-to-see-infrastructure-section-in-kibana/221017)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [March 3, 2020, 4:13pm UTC](https://discuss.elastic.co/t/cant-able-to-see-infrastructure-section-in-kibana/221017 "2020-03-03T16:13:34Z")
Hi, i am using Elastic stack of version 7.1.1 with x-pack enabled, i am using a user elastic which has super\_user role but still cant able to see the infrastructure section in kibana. I'm getting the below error : F… --- ## [Not able to pass value from filebeat to logstash](https://discuss.elastic.co/t/not-able-to-pass-value-from-filebeat-to-logstash/221916)
**Author:** [@punit11in](https://discuss.elastic.co/u/punit11in)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 3:25pm UTC](https://discuss.elastic.co/t/not-able-to-pass-value-from-filebeat-to-logstash/221916 "2020-03-03T15:25:03Z")
Hi experts, Im new to elk and need your help here. I m trying to pass a value from filebeat to logstash but been unsuccessful. This is what I have mentioned in filebeat.yml ########filebeat.yml######### output.logst… --- ## [Display custom message when no data in visualization](https://discuss.elastic.co/t/display-custom-message-when-no-data-in-visualization/220622)
**Author:** [@philippeE](https://discuss.elastic.co/u/philippeE)\ **Replies:** 5\ **Last updated:** [March 3, 2020, 3:22pm UTC](https://discuss.elastic.co/t/display-custom-message-when-no-data-in-visualization/220622 "2020-03-03T15:22:33Z")
Hello, I work on a project where I don't have data for a specific visualization during half the month. I would like my visualization to show a custom message that I put in more than "no data". Is it possible? --- ## [Change color of polygon marker in coordinate map](https://discuss.elastic.co/t/change-color-of-polygon-marker-in-coordinate-map/221883)
**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 3:16pm UTC](https://discuss.elastic.co/t/change-color-of-polygon-marker-in-coordinate-map/221883 "2020-03-03T15:16:43Z")
Hi, When I'm using coordinate map in dark mode and tried to draw a polygon on it, then I able to see the points only but not the marker line. So is there any possible way to change the color of marker line or any other … --- ## [Invalid date 'February 29' as '1970' is not a leap year](https://discuss.elastic.co/t/invalid-date-february-29-as-1970-is-not-a-leap-year/221693)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 5\ **Last updated:** [March 3, 2020, 3:03pm UTC](https://discuss.elastic.co/t/invalid-date-february-29-as-1970-is-not-a-leap-year/221693 "2020-03-03T15:03:04Z")
Posting here again as this has caused some real pain trying to figure out how to get this data into Elastic. Ultimately we will reconfigure this log file for the 1 day of the year to be a different date format that inclu… --- ## [Can i use Histogram field and Boxplot with XPack Basic license?](https://discuss.elastic.co/t/can-i-use-histogram-field-and-boxplot-with-xpack-basic-license/221905)
**Author:** [@AtyNewman](https://discuss.elastic.co/u/AtyNewman)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 2:48pm UTC](https://discuss.elastic.co/t/can-i-use-histogram-field-and-boxplot-with-xpack-basic-license/221905 "2020-03-03T14:48:47Z")
I read the documentation here: Histogram Datatype BoxPlot I saw the Histogram datatype and Boxplot both connected to XPack, but in the subsciption page, i see that i can use Histogram data type with basic license: Su… --- ## [Filebeat index exists but Dashboard says no](https://discuss.elastic.co/t/filebeat-index-exists-but-dashboard-says-no/221468)
**Author:** [@gungazoo](https://discuss.elastic.co/u/gungazoo)\ **Replies:** 3\ **Last updated:** [March 3, 2020, 2:39pm UTC](https://discuss.elastic.co/t/filebeat-index-exists-but-dashboard-says-no/221468 "2020-03-03T14:39:09Z")
I have a fresh install of Elasticsearch and Kibana on the same box. They are version 7.5.2. I have a filebeat-\* index and when I go to that index I see my logs. However, when I go to any of the default filebeat dashbo… --- ## [Bad request when refreshing index pattern fields](https://discuss.elastic.co/t/bad-request-when-refreshing-index-pattern-fields/220202)
**Author:** [@ridago](https://discuss.elastic.co/u/ridago)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 2:35pm UTC](https://discuss.elastic.co/t/bad-request-when-refreshing-index-pattern-fields/220202 "2020-03-03T14:35:17Z")
After trying to setup ILM on my elasticsearch index i was suddenly no longer able to refresh index patterns. I just get Error fetching fields for index pattern... and the error is always Bad request, but it refers to dif… --- ## [ELK architucture](https://discuss.elastic.co/t/elk-architucture/221762)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/elk-architucture/221762 "2020-03-03T14:18:37Z")
I ask few time about Architecture but no input from community. well after while now asking different questions but same topic Can I setup multiple coordinating only server? will it help? this is what I was thinking. I… --- ## [Version stable](https://discuss.elastic.co/t/version-stable/221888)
**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/version-stable/221888 "2020-03-03T14:18:24Z")
buenas a todos, Cual es la version mas estable de elasticsearch en un entorno de big-data ? --- ## [Compatibilidad con java](https://discuss.elastic.co/t/compatibilidad-con-java/221890)
**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 2:13pm UTC](https://discuss.elastic.co/t/compatibilidad-con-java/221890 "2020-03-03T14:13:14Z")
Buenas a todos soy nuevo en elasticsearch, y quisiera saber que version de java es compatible con elasticsearch 7 o superior ?? --- ## [GET \_nodes/\_local/stats times out when executed by metricbeat](https://discuss.elastic.co/t/get-nodes-local-stats-times-out-when-executed-by-metricbeat/221839)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 9:05am UTC](https://discuss.elastic.co/t/get-nodes-local-stats-times-out-when-executed-by-metricbeat/221839 "2020-03-03T09:05:02Z")
Hi, I want to activate the selfmonitoring of my elasticsearch cluster using metricbeat. The problem is, that the request of GET \_node/\_local\_stats times out: Feb 28 11:19:25 WUM96178 metricbeat\[18611\]: 2020-02-28T11:1… --- ## [Kibana not showing all indices](https://discuss.elastic.co/t/kibana-not-showing-all-indices/221626)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 2:07pm UTC](https://discuss.elastic.co/t/kibana-not-showing-all-indices/221626 "2020-03-03T14:07:27Z")
I have been trying to add visualizations on kibana for the beats. Unfortunately, the kibana isn't showing me any index pattern for the same All the indices Not showing even though i know the index names But indice… --- ## [Multiple pipelines - logstash cannot start](https://discuss.elastic.co/t/multiple-pipelines-logstash-cannot-start/221892)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 1:56pm UTC](https://discuss.elastic.co/t/multiple-pipelines-logstash-cannot-start/221892 "2020-03-03T13:56:12Z")
Hello, I have logstash 7.6.0 and I am trying to have multiple pipelines the configuration is the below \[root@elastic1 logstash\]# vi pipelines.yml # This file is where you define your pipelines. You can def… --- ## [Leap Year Issue: Performance issue](https://discuss.elastic.co/t/leap-year-issue-performance-issue/221897)
**Author:** [@Nitin\_K](https://discuss.elastic.co/u/Nitin_K)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 1:52pm UTC](https://discuss.elastic.co/t/leap-year-issue-performance-issue/221897 "2020-03-03T13:52:02Z")
Hi, We are using ElasticSearch 6.2 in production. We noticed a spike in search latency on the recent leap day (02/29/2020). We use lot of date\_range and date fields in our index. We noticed that our search latency almos… --- ## [Unable to configure dead\_letter\_queue input for logstash](https://discuss.elastic.co/t/unable-to-configure-dead-letter-queue-input-for-logstash/221837)
**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 1:51pm UTC](https://discuss.elastic.co/t/unable-to-configure-dead-letter-queue-input-for-logstash/221837 "2020-03-03T13:51:39Z")
I have configure a path to dead\_letter\_queue in logstash.yml like this path.dead\_letter\_queue: "/var/log/logstash/dead\_letter\_queue" And below is the input configuration to read DLQ. input { dead\_letter\_queue { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1594) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1596)