# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1598 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1599 --- ## [Comparing number in conditionnal event treatement](https://discuss.elastic.co/t/comparing-number-in-conditionnal-event-treatement/217043)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 5\ **Last updated:** [March 2, 2020, 3:43pm UTC](https://discuss.elastic.co/t/comparing-number-in-conditionnal-event-treatement/217043 "2020-03-02T15:43:03Z")
Hi there, I have a problem with conditionnals events, when I use some of equalities (\< ; \> ; \<= ; \>= ) on a number field, I got a java error and logstash stop Tried this : input { beats { port =\> 5045 } } … --- ## [Newbie Elastic Kibana filebeat 7.6 not working](https://discuss.elastic.co/t/newbie-elastic-kibana-filebeat-7-6-not-working/221488)
**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 3:36pm UTC](https://discuss.elastic.co/t/newbie-elastic-kibana-filebeat-7-6-not-working/221488 "2020-03-02T15:36:52Z")
I have tried over and over and I followed these steps each in a separate window of powershell Elastic .\\bin\\elasticsearch.bat Kibana .\\bin\\kibana.bat filebeat .\\install-service-filebeat.ps1 Status Name … --- ## [Updating from ES 6.4.3 to ES 6.8 with the analysis-phonetic plug-in installed](https://discuss.elastic.co/t/updating-from-es-6-4-3-to-es-6-8-with-the-analysis-phonetic-plug-in-installed/221707)
**Author:** [@creynolds34](https://discuss.elastic.co/u/creynolds34)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/updating-from-es-6-4-3-to-es-6-8-with-the-analysis-phonetic-plug-in-installed/221707 "2020-03-02T14:53:56Z")
I'm trying to update from ES 6.4 to ES 6.8 and I have the analysis-phonetic plug-in installed. From what I can tell in the documentation I need to uninstall the analysis-phonetic plug-in from ES 6.4, update to ES 6.8 an… --- ## [Kibana Discovery UI Slow](https://discuss.elastic.co/t/kibana-discovery-ui-slow/221706)
**Author:** [@Cody\_Bennett](https://discuss.elastic.co/u/Cody_Bennett)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/kibana-discovery-ui-slow/221706 "2020-03-02T14:53:49Z")
Prefacing this with: There are numerous long code blocks in this post. The default Discovery tab in Kibana takes between 120000ms and 150000ms to return the last 15 minutes of logs. We are using monthly indices in a hot… --- ## [Logstash 7.6.0 regression](https://discuss.elastic.co/t/logstash-7-6-0-regression/221593)
**Author:** [@toog](https://discuss.elastic.co/u/toog)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 1:59pm UTC](https://discuss.elastic.co/t/logstash-7-6-0-regression/221593 "2020-03-02T13:59:00Z")
With the same filter, logstash 7.6 have not the same result than previous version of logstash 6.5.4. I have include on the filter part some ruby counter and for one log in the 6.5.4 version all the counters have the sam… --- ## [Metaphone analyzer being too ambigous](https://discuss.elastic.co/t/metaphone-analyzer-being-too-ambigous/221516)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 1:52pm UTC](https://discuss.elastic.co/t/metaphone-analyzer-being-too-ambigous/221516 "2020-03-02T13:52:55Z")
Hi, I am currently using the Metaphone analyzer and it is acting too ambiguous. For example, here is the result for Murder using the \_analyze API. { "tokens": \[ { "token": "MRTR", "s… --- ## [ElasticSearch Hot-warm-Cold](https://discuss.elastic.co/t/elasticsearch-hot-warm-cold/221575)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-hot-warm-cold/221575 "2020-03-02T13:47:41Z")
I have plan to rebuild ElasticStack with 7 node (3 master + 4 Data), verison 7.6.x. Total data per month ~ 2TB. I have question, with Hot-warm-cold architecture, what is the compression ratio of each type? Can i use H… --- ## [Is there any APIs to fetch query history?](https://discuss.elastic.co/t/is-there-any-apis-to-fetch-query-history/220131)
**Author:** [@wendy](https://discuss.elastic.co/u/wendy)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 1:08pm UTC](https://discuss.elastic.co/t/is-there-any-apis-to-fetch-query-history/220131 "2020-03-02T13:08:12Z")
Hi all, I'd like to access the query history of users by invoking API for analyzing the user behavior. Does Elastic Search provide such an API for fetching query history? Any comment is greatly appreciated. Best Reg… --- ## [Grok filter on logstash](https://discuss.elastic.co/t/grok-filter-on-logstash/221410)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 1:05pm UTC](https://discuss.elastic.co/t/grok-filter-on-logstash/221410 "2020-03-02T13:05:39Z")
Hi there, I am trying to create some filter on logstash based on fields name example filebeat.yml filebeat.inputs: type: log paths: /var/log/httpd/\*log fields: app\_id: apache\_httpd fields\_under\_root: true enab… --- ## [Scripted Fields in Kibana cannot be used for filtering purpose in control visualization](https://discuss.elastic.co/t/scripted-fields-in-kibana-cannot-be-used-for-filtering-purpose-in-control-visualization/221674)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 12:26pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-cannot-be-used-for-filtering-purpose-in-control-visualization/221674 "2020-03-02T12:26:53Z")
I have a scripted field (TotalTime) which is of number type which gives me the difference to two timestamps. When i create controls visualization and select range slider option , i choose the above scripted field TotalTi… --- ## [Jdbc connection to mariadb connection issue](https://discuss.elastic.co/t/jdbc-connection-to-mariadb-connection-issue/221404)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 11:57am UTC](https://discuss.elastic.co/t/jdbc-connection-to-mariadb-connection-issue/221404 "2020-03-02T11:57:13Z")
Hi, I am using jdbc\_streaming filter plugin to connect to mariadb and pull data . I am getting the below error in logstash logs \[WARN \]\[logstash.filters.jdbcstreaming\] Exception when executing JDBC query {:exception=\>#\<… --- ## [Error while posting data on ElasticSearch Index using RestyClient](https://discuss.elastic.co/t/error-while-posting-data-on-elasticsearch-index-using-restyclient/221668)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 11:50am UTC](https://discuss.elastic.co/t/error-while-posting-data-on-elasticsearch-index-using-restyclient/221668 "2020-03-02T11:50:36Z")
I'm posting data to my elasticsearch index using RestClient (see code below) JSONObject obj3 = new JSONObject(); obj3.put("name","question"); obj3.put("parent",Integer.toString(id+2)); JSONObject jsonObject3 = new J… --- ## [6.7.0 ELK Connectivity using ODBC](https://discuss.elastic.co/t/6-7-0-elk-connectivity-using-odbc/221573)
**Author:** [@Baksh](https://discuss.elastic.co/u/Baksh)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 11:42am UTC](https://discuss.elastic.co/t/6-7-0-elk-connectivity-using-odbc/221573 "2020-03-02T11:42:49Z")
I am trying to connect to Elastic 6.7.0 Index using Dot Net ODBC driver and getting below exception Need help on likely cause of this exception. System.Data.Odbc.OdbcException (0x80131937): ERROR \[HY000\] \[Elastic\]\[EsOD… --- ## [How can I search a time series backward in time efficiently](https://discuss.elastic.co/t/how-can-i-search-a-time-series-backward-in-time-efficiently/221665)
**Author:** [@Nick\_Walton](https://discuss.elastic.co/u/Nick_Walton)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 11:18am UTC](https://discuss.elastic.co/t/how-can-i-search-a-time-series-backward-in-time-efficiently/221665 "2020-03-02T11:18:35Z")
I have a number of time series, each indexed by a numeric field sampleindex and each series has a unique identifier. Each entry in a time series is a sequence of words. I now need for each time series to count for each … --- ## [Data too large, data for \[\\]](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/221661)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 10:34am UTC](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/221661 "2020-03-02T10:34:00Z")
Hello, I have such error like this and I don't understand what does this mean. Can you help me how to fix it? { "error": { "root\_cause": \[ { "type": "circuit\_breaking\_exception", "reason": "\[… --- ## [Limit of total fields \[1000\] exceeded for index with 699 fields](https://discuss.elastic.co/t/limit-of-total-fields-1000-exceeded-for-index-with-699-fields/221605)
**Author:** [@JohanP](https://discuss.elastic.co/u/JohanP)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 10:23am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-exceeded-for-index-with-699-fields/221605 "2020-03-02T10:23:27Z")
Elasticsearch 7.2.1 Ingesting an XLSX sheet with 1x title and 1x data row using the excellent tool @GitHub - codingchili/excelastic: Vert.x web and commandline application to import CSV/XLS/XLSX files into ElasticSearch… --- ## [What is the equivalent datatype for clob column in elastic search?](https://discuss.elastic.co/t/what-is-the-equivalent-datatype-for-clob-column-in-elastic-search/221658)
**Author:** [@dgurusam](https://discuss.elastic.co/u/dgurusam)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 10:23am UTC](https://discuss.elastic.co/t/what-is-the-equivalent-datatype-for-clob-column-in-elastic-search/221658 "2020-03-02T10:23:16Z")
A CLOB (character large object) value can be up to 2,147,483,647 characters long. A CLOB is used to store unicode character-based data, such as large documents in any character set. What is the equivalent datatype for c… --- ## [How to do currency conversion in elastic search?](https://discuss.elastic.co/t/how-to-do-currency-conversion-in-elastic-search/221656)
**Author:** [@dgurusam](https://discuss.elastic.co/u/dgurusam)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 10:14am UTC](https://discuss.elastic.co/t/how-to-do-currency-conversion-in-elastic-search/221656 "2020-03-02T10:14:57Z")
Hi All, There is an index in which each document contains ItemNumber,Price and TransactionalCurrencyCode(It might vary for each document). Eg: Doc1: Item1,100,USD Doc2: Item2,100,EUR Usecase : Sorting has to be done… --- ## [Unassigned shards on elasticloud system indexes with 0 replica settings](https://discuss.elastic.co/t/unassigned-shards-on-elasticloud-system-indexes-with-0-replica-settings/221612)
**Author:** [@MagicNotElastic](https://discuss.elastic.co/u/MagicNotElastic)\ **Replies:** 5\ **Last updated:** [March 2, 2020, 10:07am UTC](https://discuss.elastic.co/t/unassigned-shards-on-elasticloud-system-indexes-with-0-replica-settings/221612 "2020-03-02T10:07:39Z")
Using 1 node with number\_of\_replicas": "0", all beats indexes working properly, except system: .monitoring-kibana .watcher-history .watches It seem, that all system indexes have unassigned replicas, but all my settin… --- ## [Get the most recent record which matches a field](https://discuss.elastic.co/t/get-the-most-recent-record-which-matches-a-field/221635)
**Author:** [@mbozic00](https://discuss.elastic.co/u/mbozic00)\ **Replies:** 5\ **Last updated:** [March 2, 2020, 10:04am UTC](https://discuss.elastic.co/t/get-the-most-recent-record-which-matches-a-field/221635 "2020-03-02T10:04:41Z")
Hi, When I perform this query: { "query": { "match": { "service\_id": "foo" } }, "size": 1 } I get one entry (the earliest by timestamp) that matches the desired service\_id. However, I would like to retrieve … --- ## [What can be used to fetch files from one location and store it in elasticsearch](https://discuss.elastic.co/t/what-can-be-used-to-fetch-files-from-one-location-and-store-it-in-elasticsearch/221379)
**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\ **Replies:** 6\ **Last updated:** [March 2, 2020, 9:57am UTC](https://discuss.elastic.co/t/what-can-be-used-to-fetch-files-from-one-location-and-store-it-in-elasticsearch/221379 "2020-03-02T09:57:25Z")
I would like to know which techinque can be used to fetch the files from certain location and store it in elastic seach --- ## [Fixing yellow health of cluster due to permission error](https://discuss.elastic.co/t/fixing-yellow-health-of-cluster-due-to-permission-error/221548)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 9:48am UTC](https://discuss.elastic.co/t/fixing-yellow-health-of-cluster-due-to-permission-error/221548 "2020-03-02T09:48:53Z")
In my elastic search cluster, some nodes are red while some of them are yellow. The point is only beats indices are affected. So i executed curl localhost:9200/\_cluster/allocation/explain The output { "index": "filebe… --- ## [Error migrating elastic search from 7.5.0 to 7.6.0](https://discuss.elastic.co/t/error-migrating-elastic-search-from-7-5-0-to-7-6-0/219841)
**Author:** [@Benoit\_V](https://discuss.elastic.co/u/Benoit_V)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 9:45am UTC](https://discuss.elastic.co/t/error-migrating-elastic-search-from-7-5-0-to-7-6-0/219841 "2020-03-02T09:45:47Z")
Hello, when updating my elasticsearch cluster from 7.5.0 to 7.6.0, the new pods do not start due to a file permission issue: ERROR: File ..data/elastic-internal-probe (target of symlink /mnt/elastic-internal/probe-user… --- ## [Read Writes Per Second](https://discuss.elastic.co/t/read-writes-per-second/220900)
**Author:** [@neuronring](https://discuss.elastic.co/u/neuronring)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 9:31am UTC](https://discuss.elastic.co/t/read-writes-per-second/220900 "2020-03-02T09:31:15Z")
Hi Team, I am trying to get hardware estimates for the elastic cluster based on document growth and Read/Writes per second. To get Read/Writes per second on a cluster, is there are an API or tool ( other than marvel ) … --- ## [Field names starting with \`\_\`(underscore) are not matched with \* wildcard](https://discuss.elastic.co/t/field-names-starting-with-underscore-are-not-matched-with-wildcard/221254)
**Author:** [@hexer338](https://discuss.elastic.co/u/hexer338)\ **Replies:** 6\ **Last updated:** [March 2, 2020, 9:30am UTC](https://discuss.elastic.co/t/field-names-starting-with-underscore-are-not-matched-with-wildcard/221254 "2020-03-02T09:30:49Z")
Hi, \* wildcard does not match fields starting with \_ in the query\_string query. Example: Create Index with simple mapping: { "mappings": { "properties": { "\_a": { "type": "keyw… --- ## [ECK with NFS shared persistent volume](https://discuss.elastic.co/t/eck-with-nfs-shared-persistent-volume/221073)
**Author:** [@SergeyK](https://discuss.elastic.co/u/SergeyK)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 9:29am UTC](https://discuss.elastic.co/t/eck-with-nfs-shared-persistent-volume/221073 "2020-03-02T09:29:45Z")
Hi, Did somebody manage to deploy Elasticserach with shared NFS volume (one volume for all pods)? All my nodes are in VMs (above private lab bare metal servers). There is dedicated NFS server created and all k8s nodes h… --- ## [Kibana 7.6.0 not starting because cannot install APM plugin](https://discuss.elastic.co/t/kibana-7-6-0-not-starting-because-cannot-install-apm-plugin/219807)
**Author:** [@josejfb](https://discuss.elastic.co/u/josejfb)\ **Replies:** 12\ **Last updated:** [March 2, 2020, 9:26am UTC](https://discuss.elastic.co/t/kibana-7-6-0-not-starting-because-cannot-install-apm-plugin/219807 "2020-03-02T09:26:04Z")
Hello. I'm working on upgrading our Elastic setup to version 7.6.0 and I'm having issues with Kibana startup. What I see in the logs is that Kibana is not able to install the "apm" plugin within the default 30 seconds (s… --- ## [How to define multiple path.data pointing to separate volumes or PVC using ECK?](https://discuss.elastic.co/t/how-to-define-multiple-path-data-pointing-to-separate-volumes-or-pvc-using-eck/218644)
**Author:** [@ykozlov](https://discuss.elastic.co/u/ykozlov)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 9:23am UTC](https://discuss.elastic.co/t/how-to-define-multiple-path-data-pointing-to-separate-volumes-or-pvc-using-eck/218644 "2020-03-02T09:23:35Z")
Hi! elasticsearch.yml supports configuration setting where I can specify multiple data path for the ES data node as follows: path.data: - "/mnt/data1', - "/mnt/data2" - "/mnt/data3" I can define additional volumes an… --- ## [Kibana 7.6 : Reported number of Kibana instance is false](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 8\ **Last updated:** [March 2, 2020, 8:55am UTC](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946 "2020-03-02T08:55:15Z")
Hello there, After 7.6 upgrade, I noticed that the number of Kibana instance in Monitoring tab is not the good one. I checked that my 2 Kibana instance can join the cluster : it's OK. Monitoring still show only one Ki… --- ## [How to create ILM policy for all indices except for one](https://discuss.elastic.co/t/how-to-create-ilm-policy-for-all-indices-except-for-one/221643)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 8:15am UTC](https://discuss.elastic.co/t/how-to-create-ilm-policy-for-all-indices-except-for-one/221643 "2020-03-02T08:15:16Z")
Hi everyone, i think the question is self explanatory, do i create the policy for the pattern "\*" and then use the new policy for that particular index pattern or is there another way? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1597) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1599)