# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1600 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1601 --- ## [Obtaining individual scores from each query inside of a bool query](https://discuss.elastic.co/t/obtaining-individual-scores-from-each-query-inside-of-a-bool-query/221545)
**Author:** [@mhnamaki](https://discuss.elastic.co/u/mhnamaki)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 11:12pm UTC](https://discuss.elastic.co/t/obtaining-individual-scores-from-each-query-inside-of-a-bool-query/221545 "2020-02-29T23:12:01Z")
Assume I have a compound bool query with various "must" and "should" statements that each may include different leaf queries including "multi-match" and "match\_phrase" queries such as below. How can I get the score from… --- ## [Datamodeling question about having a single index vs multiple](https://discuss.elastic.co/t/datamodeling-question-about-having-a-single-index-vs-multiple/221538)
**Author:** [@ottoo](https://discuss.elastic.co/u/ottoo)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 8:35pm UTC](https://discuss.elastic.co/t/datamodeling-question-about-having-a-single-index-vs-multiple/221538 "2020-02-29T20:35:31Z")
We are building a chat application and indexing different types of chat messages for searching purposes to ElasticSearch. I'm wondering, would it be better to have a single index with different type field for each messa… --- ## [Logstash filter to match jdbc identifier with yaml file](https://discuss.elastic.co/t/logstash-filter-to-match-jdbc-identifier-with-yaml-file/220921)
**Author:** [@ads](https://discuss.elastic.co/u/ads)\ **Replies:** 4\ **Last updated:** [February 29, 2020, 6:14pm UTC](https://discuss.elastic.co/t/logstash-filter-to-match-jdbc-identifier-with-yaml-file/220921 "2020-02-29T18:14:59Z")
Hi, I am using ES and logstash version 7.6.0. I am trying to plot a set of UK postcodes into maps but am not having much success. I have a set of dates and postcodes from a jdbc call. This works using the following quer… --- ## [Visual Builder - True 24hr intervals instead of starting at midnight](https://discuss.elastic.co/t/visual-builder-true-24hr-intervals-instead-of-starting-at-midnight/221293)
**Author:** [@adahn](https://discuss.elastic.co/u/adahn)\ **Replies:** 1\ **Last updated:** [February 29, 2020, 5:45pm UTC](https://discuss.elastic.co/t/visual-builder-true-24hr-intervals-instead-of-starting-at-midnight/221293 "2020-02-29T17:45:28Z")
I'm working on a Visual Builder that ultimately displays a ratio between the count of documents submitted in the current 24 hour bucket and the moving average of the previous thirty 24-hour buckets. My interval on 'Panel… --- ## [Indice documents count goes up after update](https://discuss.elastic.co/t/indice-documents-count-goes-up-after-update/221325)
**Author:** [@Goran](https://discuss.elastic.co/u/Goran)\ **Replies:** 3\ **Last updated:** [February 29, 2020, 5:22pm UTC](https://discuss.elastic.co/t/indice-documents-count-goes-up-after-update/221325 "2020-02-29T17:22:43Z")
After documents update, documents count is doubled but I still have the same number of docs when I query indice. Deleted docs show the number before update and that's expected, but I didn't expects documents count to be … --- ## [Nested Aggregation filter seems not working](https://discuss.elastic.co/t/nested-aggregation-filter-seems-not-working/221529)
**Author:** [@Indy](https://discuss.elastic.co/u/Indy)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 3:56pm UTC](https://discuss.elastic.co/t/nested-aggregation-filter-seems-not-working/221529 "2020-02-29T15:56:53Z")
Hello I try to make a movies / actor / tag aggregation for filter a list of movies. For exemple, I want to see all movie's tag for Robert Deni Jr with filter like this : taf (nbMovie) ex : action (10) blockbuster (4) … --- ## [Pipeline was Ignoring Logstash](https://discuss.elastic.co/t/pipeline-was-ignoring-logstash/221343)
**Author:** [@muhjaury](https://discuss.elastic.co/u/muhjaury)\ **Replies:** 5\ **Last updated:** [February 29, 2020, 3:38pm UTC](https://discuss.elastic.co/t/pipeline-was-ignoring-logstash/221343 "2020-02-29T15:38:43Z")
I'm newbie for using Logstash and Elasticsearch. I wanted to sync my MongoDB data into Elasticsearch using Logstash Plugin (logstash-input-mongodb). In my mongodata.conf is input { uri =\> 'mongodb://127.0.0.1:27017/f… --- ## [Java error when too many conditions in Logstash](https://discuss.elastic.co/t/java-error-when-too-many-conditions-in-logstash/221466)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 3\ **Last updated:** [February 29, 2020, 3:25pm UTC](https://discuss.elastic.co/t/java-error-when-too-many-conditions-in-logstash/221466 "2020-02-29T15:25:35Z")
I have a source (CSV) that has one field called EVENTNO. In that field are numbers (INT). In another document I have what EVENTNO number means (e.g. "1" = "The machine is off", "2" = "The machine is on", and so on). Tha… --- ## [SOS! How it is possible to implement filtering of nested objects depending on the values of the parent nested object](https://discuss.elastic.co/t/sos-how-it-is-possible-to-implement-filtering-of-nested-objects-depending-on-the-values-of-the-parent-nested-object/220247)
**Author:** [@iva3682](https://discuss.elastic.co/u/iva3682)\ **Replies:** 2\ **Last updated:** [February 29, 2020, 12:45pm UTC](https://discuss.elastic.co/t/sos-how-it-is-possible-to-implement-filtering-of-nested-objects-depending-on-the-values-of-the-parent-nested-object/220247 "2020-02-29T12:45:44Z")
Good afternoon! Thanks for such a wonderful product! There is the following question: how it is possible to implement filtering of nested objects depending on the values ​​of the parent nested object. For example, ther… --- ## [Field with \`enabled: false\` in nested](https://discuss.elastic.co/t/field-with-enabled-false-in-nested/221520)
**Author:** [@iva3682](https://discuss.elastic.co/u/iva3682)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 12:38pm UTC](https://discuss.elastic.co/t/field-with-enabled-false-in-nested/221520 "2020-02-29T12:38:57Z")
Good afternoon! Such a question: if you set the enabled: false flag to the field located in the nested object, when updating with painless, will the whole document be reindexed? There is a scheme: 'mappings' =\> \[ … --- ## [How to use phonetic analyzer using AWS Elasticsearch?](https://discuss.elastic.co/t/how-to-use-phonetic-analyzer-using-aws-elasticsearch/218008)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 8\ **Last updated:** [February 29, 2020, 10:46am UTC](https://discuss.elastic.co/t/how-to-use-phonetic-analyzer-using-aws-elasticsearch/218008 "2020-02-29T10:46:46Z")
I am currently using AWS Elasticsearch. Currently making the following query to search for the data: { "query": { "multi\_match" : { "query" : "murder", "fields" : \["content", "title^1… --- ## [Leap year problem on Logstash date filter](https://discuss.elastic.co/t/leap-year-problem-on-logstash-date-filter/221512)
**Author:** [@taro\_x](https://discuss.elastic.co/u/taro_x)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 8:27am UTC](https://discuss.elastic.co/t/leap-year-problem-on-logstash-date-filter/221512 "2020-02-29T08:27:54Z")
Logs in the following formats are now failing: "timestamp\_str": "Feb 29 00:00:00" filter config: filter { date { match =\> \["timestamp\_str", "MMM dd HH:mm:ss", "MMM d HH:mm:ss"\] timezone =\> "Asia/Tokyo… --- ## [Elasticsearch multi nested query](https://discuss.elastic.co/t/elasticsearch-multi-nested-query/221505)
**Author:** [@Onkar\_Kore](https://discuss.elastic.co/u/Onkar_Kore)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 4:57am UTC](https://discuss.elastic.co/t/elasticsearch-multi-nested-query/221505 "2020-02-29T04:57:36Z")
I have an elastic index with the below mapping. It has an array of vehicle and each array element contains array of info elements. PUT test\_nested\_query { "mappings": { "\_doc": { "properties": { "veh… --- ## [Logstash with TCP Input but Error](https://discuss.elastic.co/t/logstash-with-tcp-input-but-error/221504)
**Author:** [@kopilim96](https://discuss.elastic.co/u/kopilim96)\ **Replies:** 0\ **Last updated:** [February 29, 2020, 3:43am UTC](https://discuss.elastic.co/t/logstash-with-tcp-input-but-error/221504 "2020-02-29T03:43:21Z")
I am using Logstash version 7.5.2 and below is my conf file for tcp input test input { tcp { port =\> "5666" host =\> "localhost" type =\> "syslog" } } filter { grok { patterns\_dir =\> \["/master\_pattern"\] match =\> … --- ## [Detection Custom Rule not working](https://discuss.elastic.co/t/detection-custom-rule-not-working/220856)
**Author:** [@Or\_Biran](https://discuss.elastic.co/u/Or_Biran)\ **Replies:** 17\ **Last updated:** [February 29, 2020, 2:25am UTC](https://discuss.elastic.co/t/detection-custom-rule-not-working/220856 "2020-02-29T02:25:14Z")
Hi, I'm trying to create a basic custom rule on a custom index that contains logs that originated from filebeat. creating a basic rule on that index just not working, no Signals created. Using the same query showing r… --- ## [Add column to Kibana dashboard that count the number of row](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420)
**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 11:37pm UTC](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420 "2020-02-28T23:37:50Z")
I'm using Kibana 6.8.2 and I want to add a column that will show the number of the row displayed, something like: Row Country Some data 1 Greece 100 2 Italy 50 3 G… --- ## [How to make Kibana Filters use Filter Context instead of Query Context?](https://discuss.elastic.co/t/how-to-make-kibana-filters-use-filter-context-instead-of-query-context/221430)
**Author:** [@Rajiv](https://discuss.elastic.co/u/Rajiv)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 9:11pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-filters-use-filter-context-instead-of-query-context/221430 "2020-02-28T21:11:51Z")
We are using Kibana v6.8.1 to search log messages When we try to filter messages using the "Filter for value" icon like so: we notice Kibana generates search query with a match\_phrase clause in Query Context, like so… --- ## [Es7: Can the seed\_hosts value be dynamically updated?](https://discuss.elastic.co/t/es7-can-the-seed-hosts-value-be-dynamically-updated/221482)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 3\ **Last updated:** [February 28, 2020, 8:57pm UTC](https://discuss.elastic.co/t/es7-can-the-seed-hosts-value-be-dynamically-updated/221482 "2020-02-28T20:57:47Z")
During scaledowns, I want to update the seed\_hosts value (to remove the deprovisoing nodes). I want to apply this new value to all the nodes which are still remaining in the cluster. Is it required to update the seed\_… --- ## [Use match keyword with sort](https://discuss.elastic.co/t/use-match-keyword-with-sort/221388)
**Author:** [@nhattaihuynh](https://discuss.elastic.co/u/nhattaihuynh)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 8:56pm UTC](https://discuss.elastic.co/t/use-match-keyword-with-sort/221388 "2020-02-28T20:56:11Z")
Hi everyone, Right now I'm stuck with keeping old logic sort from MySQL to Elastic. In MySQL, I have a project table with field 'projectName'. When user search project using keyword, I use Match function with Boolean … --- ## [Output: specify document id \*or\* allow elasticsearch to pick](https://discuss.elastic.co/t/output-specify-document-id-or-allow-elasticsearch-to-pick/221486)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 8:26pm UTC](https://discuss.elastic.co/t/output-specify-document-id-or-allow-elasticsearch-to-pick/221486 "2020-02-28T20:26:29Z")
Sometimes on injest we have an id we want to keep as the document id: if \[trace\_id\] { mutate { copy =\> { "trace\_id" =\> "\[@metadata\]\[document\_id\]" } remove\_field =\> "trace\_id" } } so … --- ## [Auto Index and auto deletion of index](https://discuss.elastic.co/t/auto-index-and-auto-deletion-of-index/221484)
**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 8:05pm UTC](https://discuss.elastic.co/t/auto-index-and-auto-deletion-of-index/221484 "2020-02-28T20:05:07Z")
Hi, We have the following requirement: Every month a new index(collection) have to be created: comany\_details-\ in ES cluster. We need to delete older index which is greater than 2 Months. Example: compa… --- ## [Logstash date to datetime format](https://discuss.elastic.co/t/logstash-date-to-datetime-format/221446)
**Author:** [@michal\_mastro](https://discuss.elastic.co/u/michal_mastro)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 7:55pm UTC](https://discuss.elastic.co/t/logstash-date-to-datetime-format/221446 "2020-02-28T19:55:44Z")
Hi, Im using logstash to get data from mysql and pass them to elasticsearch. Unfortunately date format is default parsed to zulu time. In need get data in datetime format like yyyy-mm-dd H:i:s without t and z. Below … --- ## [Sorting by specific nested object](https://discuss.elastic.co/t/sorting-by-specific-nested-object/221481)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 7:49pm UTC](https://discuss.elastic.co/t/sorting-by-specific-nested-object/221481 "2020-02-28T19:49:35Z")
Hi everyone, I'm trying to sort by a nested object without any results. This is the mapping of the object: { "settings" : { "number\_of\_shards" : 5, "number\_of\_replicas": 1 }, "mappings" : { … --- ## [Term aggregation that return documents matching two different nested value on the same field](https://discuss.elastic.co/t/term-aggregation-that-return-documents-matching-two-different-nested-value-on-the-same-field/221347)
**Author:** [@Charles\_Drolet](https://discuss.elastic.co/u/Charles_Drolet)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 1:36pm UTC](https://discuss.elastic.co/t/term-aggregation-that-return-documents-matching-two-different-nested-value-on-the-same-field/221347 "2020-02-28T13:36:03Z")
Hello, I’m running on 6.8 and I’m unable to build a working term aggregation that can return a document matching two different specific value on the same nested field. My filtering needs to occur on the aggregation its… --- ## [Cluster found only one node](https://discuss.elastic.co/t/cluster-found-only-one-node/221339)
**Author:** [@darkangel](https://discuss.elastic.co/u/darkangel)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 7:38pm UTC](https://discuss.elastic.co/t/cluster-found-only-one-node/221339 "2020-02-28T19:38:47Z")
Hi, Where is my bad? I try to configure a cluster of 2 nodes on my computer. I have used 7.5.0 version Below my config files : elasticsearch.yml I have tried discovery.seed\_hosts and discovery.zen.ping.unicast.hos… --- ## [CancelTasksRequest](https://discuss.elastic.co/t/canceltasksrequest/221480)
**Author:** [@waallee](https://discuss.elastic.co/u/waallee)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 7:22pm UTC](https://discuss.elastic.co/t/canceltasksrequest/221480 "2020-02-28T19:22:58Z")
Hi guys, Recently I'm trying to try the task management API. I have some places confused a little bit, so hope I can get some ideas from you. What's the difference between .setTaskId() and .setParentTaskId()? I'm as… --- ## [Adding label-type metadata to indices for monitoring agregation](https://discuss.elastic.co/t/adding-label-type-metadata-to-indices-for-monitoring-agregation/221474)
**Author:** [@vbr](https://discuss.elastic.co/u/vbr)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 6:37pm UTC](https://discuss.elastic.co/t/adding-label-type-metadata-to-indices-for-monitoring-agregation/221474 "2020-02-28T18:37:08Z")
Hi. I have daily indices, named on the patern \-\-\. I have monitoring enabled, and I am trying to create dashboards to figure out how much disk space is used by my indices. The raw data is avai… --- ## [Ctx.results in Kibana Alerting](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473)
**Author:** [@Priyan\_Murugan](https://discuss.elastic.co/u/Priyan_Murugan)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 5:56pm UTC](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473 "2020-02-28T17:56:51Z")
Hi I have created the below mustache template to send alert notification to slack. Mustache Template: Total hits: {{#ctx.results}}{{#hits}}{{total}}{{/hits}}{{/ctx.results}} Period start: {{ctx.periodStart}} Period e… --- ## [One user can delete other users dashboard, visualizations, graphs and index patterns. I want to avoid this, so that one user can only delete its own created stuff](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434)
**Author:** [@owais](https://discuss.elastic.co/u/owais)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 5:48pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434 "2020-02-28T17:48:28Z")
We have created multiple users for Kibana and we have given access of ALL for our dashboards, graphs, index patterns and visualizations. The problem is that one user can also delete other users created dashboards, graphs… --- ## [Data Dropped by Logstash](https://discuss.elastic.co/t/data-dropped-by-logstash/221465)
**Author:** [@kunal.1709](https://discuss.elastic.co/u/kunal.1709)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 5:02pm UTC](https://discuss.elastic.co/t/data-dropped-by-logstash/221465 "2020-02-28T17:02:34Z")
Hello Everyone, While debugging the issue with TCP input with logstash, I have introduced Rsyslog as an intermediate between SIEM and Logstash as a temporary workaround. Please refer to below link - SIEM -\> Rsyslog (… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1599) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1601)