# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1630 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1631 --- ## [Auto Filter by Brand](https://discuss.elastic.co/t/auto-filter-by-brand/219097)
**Author:** [@Cannon\_Moyer](https://discuss.elastic.co/u/Cannon_Moyer)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 12:07am UTC](https://discuss.elastic.co/t/auto-filter-by-brand/219097 "2020-02-13T00:07:41Z")
I'm running ES 7.3. have a query where a user can search a list of machines by two fields, brand and name . I am using an ngram search on the name fields so that similar matches will be found. I want my query to work… --- ## [Question regarding the name field in references object when Importing Kibana Objects](https://discuss.elastic.co/t/question-regarding-the-name-field-in-references-object-when-importing-kibana-objects/218704)
**Author:** [@ecarmona](https://discuss.elastic.co/u/ecarmona)\ **Replies:** 2\ **Last updated:** [February 12, 2020, 10:37pm UTC](https://discuss.elastic.co/t/question-regarding-the-name-field-in-references-object-when-importing-kibana-objects/218704 "2020-02-12T22:37:31Z")
Dear All, I have been working in a script that replicates all the Kibana objects (index-patterns, searches, visualizations and dashboards) from a source server into others. I am using the Bulk Create Saved Objects API,… --- ## [Adjusting a ISO8601 @timestamp field](https://discuss.elastic.co/t/adjusting-a-iso8601-timestamp-field/218874)
**Author:** [@thethomp](https://discuss.elastic.co/u/thethomp)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 10:16pm UTC](https://discuss.elastic.co/t/adjusting-a-iso8601-timestamp-field/218874 "2020-02-12T22:16:20Z")
Hi all, I'm a bit stuck and confused about how to use the Logstash date plugin for what I'm trying to do. My situation is such that I have incoming data (coming from kafka input) populating the @timestamp field in ISO8… --- ## [Jvm Heap Size & Indexing Perfmance Problem](https://discuss.elastic.co/t/jvm-heap-size-indexing-perfmance-problem/219089)
**Author:** [@Wisem4n](https://discuss.elastic.co/u/Wisem4n)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 10:11pm UTC](https://discuss.elastic.co/t/jvm-heap-size-indexing-perfmance-problem/219089 "2020-02-12T22:11:49Z")
Hi, I use elasticsearch 7.2 on a single node computer. Computer features: 64 gb ram 2 tb hdd (the disk which ES installed is 500 gb) 8 cores cpu Win10 OS My ES configurations&features -106 indices -106 shards -0 … --- ## [Running Elasticsearch using docker-compose Exception in thread "main"](https://discuss.elastic.co/t/running-elasticsearch-using-docker-compose-exception-in-thread-main/219082)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 9:13pm UTC](https://discuss.elastic.co/t/running-elasticsearch-using-docker-compose-exception-in-thread-main/219082 "2020-02-12T21:13:00Z")
Hi guys, I'm trying to spin up an elastic cluster using docker compose according to this documentation: https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-docker.html I created the described … --- ## [Is it wasteful to configure text as keyword with "fields": keyword?](https://discuss.elastic.co/t/is-it-wasteful-to-configure-text-as-keyword-with-fields-keyword/218883)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 9:05pm UTC](https://discuss.elastic.co/t/is-it-wasteful-to-configure-text-as-keyword-with-fields-keyword/218883 "2020-02-12T21:05:50Z")
With a mapping below. "EventType" : { "type" : "keyword", "fields" : { "keyword" : { "type" : "keyword", "ignore\_above" : 256 } } The reason why we are doing thi… --- ## [Date Histogram buckets using top\_hits of terms over last 30 days](https://discuss.elastic.co/t/date-histogram-buckets-using-top-hits-of-terms-over-last-30-days/217679)
**Author:** [@duo\_jc](https://discuss.elastic.co/u/duo_jc)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 8:44pm UTC](https://discuss.elastic.co/t/date-histogram-buckets-using-top-hits-of-terms-over-last-30-days/217679 "2020-02-12T20:44:17Z")
Hello Elasticsearch, I'm having an issue finding the right combination of aggregations to achieve a query I'm looking for. Essentially what I need to do is take the most recent document by ID over the last 30 days and t… --- ## [Terms Aggregation, but over a time period?](https://discuss.elastic.co/t/terms-aggregation-but-over-a-time-period/217275)
**Author:** [@erin\_verbeck](https://discuss.elastic.co/u/erin_verbeck)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 8:33pm UTC](https://discuss.elastic.co/t/terms-aggregation-but-over-a-time-period/217275 "2020-02-12T20:33:11Z")
Hi everyone! I am trying to create a query that searches and identifies when a specific term reaches a threshold over a given period of time. My first thought is to construct a search that will, for example, bring back t… --- ## [Issue with TSVB - no data to display](https://discuss.elastic.co/t/issue-with-tsvb-no-data-to-display/216983)
**Author:** [@vmitri](https://discuss.elastic.co/u/vmitri)\ **Replies:** 6\ **Last updated:** [February 12, 2020, 8:31pm UTC](https://discuss.elastic.co/t/issue-with-tsvb-no-data-to-display/216983 "2020-02-12T20:31:40Z")
Hello, i'm new to ElasticStack and this forum as well and i decided to ask here for help with this strange issue i'm getting while using the visual builder. I'm using Kibana 7.4.1, when i try to sort by ascending/descend… --- ## [Kibana search not returning expected results when wildcard is used in search](https://discuss.elastic.co/t/kibana-search-not-returning-expected-results-when-wildcard-is-used-in-search/217070)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 6\ **Last updated:** [February 12, 2020, 8:26pm UTC](https://discuss.elastic.co/t/kibana-search-not-returning-expected-results-when-wildcard-is-used-in-search/217070 "2020-02-12T20:26:27Z")
I am having a very odd issue and hoping you have seen something like this previously. We have a keyword field application.api.responseText Mapping for that field is: "application": { "properties": { … --- ## [Painless Scripted Field Based on Condition to Subtract Dates to get days](https://discuss.elastic.co/t/painless-scripted-field-based-on-condition-to-subtract-dates-to-get-days/219057)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 7:55pm UTC](https://discuss.elastic.co/t/painless-scripted-field-based-on-condition-to-subtract-dates-to-get-days/219057 "2020-02-12T19:55:53Z")
I want to find the difference between dates in days in a new field. I tried the following script and it's throwing error. What am I doing wrong? def diff = 0; if (doc\['delivery\_date'\].value != null) { diff = (doc\['de… --- ## [Как добавить "is\_write\_index": true в index template?](https://discuss.elastic.co/t/is-write-index-true-index-template/218598)
**Author:** [@11191](https://discuss.elastic.co/u/11191)\ **Replies:** 7\ **Last updated:** [February 12, 2020, 7:32pm UTC](https://discuss.elastic.co/t/is-write-index-true-index-template/218598 "2020-02-12T19:32:41Z")
Если добавляю эту опцию к template который указываю в template\_name в output { elasticsearch { template\_name =\> "haproxy" } }, то она просто пропадает. И в GET /\_template/haproxy вижу: "aliases" : { "haproxy" : { } } … --- ## [Exclude characters](https://discuss.elastic.co/t/exclude-characters/218648)
**Author:** [@Gleison\_Rodrigo](https://discuss.elastic.co/u/Gleison_Rodrigo)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 7:03pm UTC](https://discuss.elastic.co/t/exclude-characters/218648 "2020-02-12T19:03:38Z")
I have the following entry: mail@domain.com, How can I delete the \<\>, characters ? --- ## [Retention of audit logs](https://discuss.elastic.co/t/retention-of-audit-logs/219062)
**Author:** [@szemlyanoy](https://discuss.elastic.co/u/szemlyanoy)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 6:42pm UTC](https://discuss.elastic.co/t/retention-of-audit-logs/219062 "2020-02-12T18:42:22Z")
Hi, The goal is to archive audit logs on daily basis and recycle archives older than n days. So far I haven't found correct property for audit\_rolling appender to get this working. This is what I have appender.audit\_… --- ## [Nest authentication with IAM](https://discuss.elastic.co/t/nest-authentication-with-iam/218866)
**Author:** [@David\_Greenwell](https://discuss.elastic.co/u/David_Greenwell)\ **Replies:** 2\ **Last updated:** [February 12, 2020, 6:36pm UTC](https://discuss.elastic.co/t/nest-authentication-with-iam/218866 "2020-02-12T18:36:19Z")
Is there a way to connect to an AWS elasticsearch pool that is set up with an IAM role/user but still be able to use the NEST api for C#? Are there any other utilites to do this in C#? --- ## [How to reduce multiple conditions in ES](https://discuss.elastic.co/t/how-to-reduce-multiple-conditions-in-es/219052)
**Author:** [@Ramesh\_balasubramani](https://discuss.elastic.co/u/Ramesh_balasubramani)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 5:29pm UTC](https://discuss.elastic.co/t/how-to-reduce-multiple-conditions-in-es/219052 "2020-02-12T17:29:39Z")
GET /logs\*/\_search { "from":0, "query":{ "bool":{ "filter":\[ { "range":{ "@timestamp":{ "gte":"2020-02-10T11:13:19.7684961Z", … --- ## [Unable to parse URL using shorten url](https://discuss.elastic.co/t/unable-to-parse-url-using-shorten-url/218818)
**Author:** [@zivklara](https://discuss.elastic.co/u/zivklara)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 5:28pm UTC](https://discuss.elastic.co/t/unable-to-parse-url-using-shorten-url/218818 "2020-02-12T17:28:32Z")
Hi, I'm trying to use kibana's shorten\_url feature (full url is not treated well when sending it in emails). I do get a urlId, but when I try to use it I get an error in kibana saying it was unable to parse url. First… --- ## [Failed to rpm GPG-KEY-elasticsearch](https://discuss.elastic.co/t/failed-to-rpm-gpg-key-elasticsearch/219050)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 5:24pm UTC](https://discuss.elastic.co/t/failed-to-rpm-gpg-key-elasticsearch/219050 "2020-02-12T17:24:31Z")
I am using centos 7. java 8 installed and I am trying to get the GPG key but failed rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch how can I solve it please \[root@elk01 ~\]# rpm --import https://artifac… --- ## [Elastic Operator on Private Google Kubernetes Engine Cluster](https://discuss.elastic.co/t/elastic-operator-on-private-google-kubernetes-engine-cluster/219032)
**Author:** [@Q\_Platform](https://discuss.elastic.co/u/Q_Platform)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elastic-operator-on-private-google-kubernetes-engine-cluster/219032 "2020-02-12T17:08:26Z")
Can someone walkthrough on using Elastic Operator on Private Google Kubernetes Engine? The pods were not getting created --- ## [TermsAggregation : sort by score to get relavant document on top - Please help](https://discuss.elastic.co/t/termsaggregation-sort-by-score-to-get-relavant-document-on-top-please-help/218782)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 5:04pm UTC](https://discuss.elastic.co/t/termsaggregation-sort-by-score-to-get-relavant-document-on-top-please-help/218782 "2020-02-12T17:04:53Z")
I have an index which contain documents with same employee name and email address but varies with other information such as meetings attended and amount spent. { "emp\_name" : "Raju", "emp\_email" : "raju@abc.com", … --- ## [Failover Mapping](https://discuss.elastic.co/t/failover-mapping/219024)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:58pm UTC](https://discuss.elastic.co/t/failover-mapping/219024 "2020-02-12T16:58:00Z")
Hey, we are using elasticsearch primarily to index our logging data. Unfortunaley due to the many systems we are maintaining, we can't really guarantee that every "device" is logging it's events the same way. For exampl… --- ## [Keeping X-Axis Static](https://discuss.elastic.co/t/keeping-x-axis-static/218972)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 4:55pm UTC](https://discuss.elastic.co/t/keeping-x-axis-static/218972 "2020-02-12T16:55:12Z")
While showing a viz, let's say a vertical graph. If I filter on a particular value by clicking the bar, it shows only that particular bar with respective counts. Is there a way to show other values even though i click o… --- ## [Logstash automatically adding port](https://discuss.elastic.co/t/logstash-automatically-adding-port/219047)
**Author:** [@guctum](https://discuss.elastic.co/u/guctum)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 4:54pm UTC](https://discuss.elastic.co/t/logstash-automatically-adding-port/219047 "2020-02-12T16:54:44Z")
I have logstash running on an AWS EC2 instance and am trying to connect it to an AWS Elasticsearch domain. When starting up Logstash, it won't connect to the ES domain, and appends port 443 to the URL of the domain. I ne… --- ## [Logarithmic operation in Kibana](https://discuss.elastic.co/t/logarithmic-operation-in-kibana/219027)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 4:51pm UTC](https://discuss.elastic.co/t/logarithmic-operation-in-kibana/219027 "2020-02-12T16:51:59Z")
Hello, I have a data set which includes a field for sound level in units of dBm. I am required to calculate the average of all dBm's and display the result on a map based on the locations they were recorded in. The pro… --- ## [How to make control visualization as not case sensitive](https://discuss.elastic.co/t/how-to-make-control-visualization-as-not-case-sensitive/218769)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:49pm UTC](https://discuss.elastic.co/t/how-to-make-control-visualization-as-not-case-sensitive/218769 "2020-02-12T16:49:37Z")
I am using Controls visualization options list in kibana. If we search value in this visualization it is case sensitive... How can I make this as not case sensitive.. I am using below query to get... {"index":"logst… --- ## [How to (pre)filter data used in a visualization?](https://discuss.elastic.co/t/how-to-pre-filter-data-used-in-a-visualization/218325)
**Author:** [@AxelR](https://discuss.elastic.co/u/AxelR)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 4:26pm UTC](https://discuss.elastic.co/t/how-to-pre-filter-data-used-in-a-visualization/218325 "2020-02-12T16:26:10Z")
Hello, I'm trying to build an histogram which must count only the first occurrences (chronologically speaking) of all recorded events for the corresponding period (in my data, a specific event can occur several times wi… --- ## [Cant understand example from documentation](https://discuss.elastic.co/t/cant-understand-example-from-documentation/218937)
**Author:** [@linuxfan84](https://discuss.elastic.co/u/linuxfan84)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:19pm UTC](https://discuss.elastic.co/t/cant-understand-example-from-documentation/218937 "2020-02-12T16:19:21Z")
Hi all. I am studying Elasticsearch and I really like it. But I cant inderstand following example from documentation (From here - https://www.elastic.co/guide/en/elasticsearch/reference/7.2/query-dsl-intervals-query.htm… --- ## [Can only start an input when all related states are finished with lumberjack protocol error](https://discuss.elastic.co/t/can-only-start-an-input-when-all-related-states-are-finished-with-lumberjack-protocol-error/218933)
**Author:** [@Shlok\_Srivastava1](https://discuss.elastic.co/u/Shlok_Srivastava1)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 9:30am UTC](https://discuss.elastic.co/t/can-only-start-an-input-when-all-related-states-are-finished-with-lumberjack-protocol-error/218933 "2020-02-12T09:30:45Z")
I Had ELK installed on our server, which abruptly stopped working. I am getting the following error in filebeat for the same. I am using 6.8.3 versions for all 2020-02-12T08:49:17.950Z INFO pipeline/output.go:95 Con… --- ## [Implementation of a Complex Conditional Query](https://discuss.elastic.co/t/implementation-of-a-complex-conditional-query/218909)
**Author:** [@AkankshaKunwar](https://discuss.elastic.co/u/AkankshaKunwar)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:12pm UTC](https://discuss.elastic.co/t/implementation-of-a-complex-conditional-query/218909 "2020-02-12T16:12:41Z")
Hello Everyone , I am new to the implementation of such complex query and need help, Kindly do the favour. In our Database we have documnets having IP address as a field ( with other additional information), Now I want … --- ## [Watcher aggregrations compare bucket keys](https://discuss.elastic.co/t/watcher-aggregrations-compare-bucket-keys/218854)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:10pm UTC](https://discuss.elastic.co/t/watcher-aggregrations-compare-bucket-keys/218854 "2020-02-12T16:10:45Z")
Hi, I have a watcher with chained input. 2 searches, each searching for a different process that has been executed within the time period. I have an terms aggregation in each search for host.name My aim is to trigger a… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1629) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1631)