# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1688

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1689

---

## [How to use "nested" properties fields in query script](https://discuss.elastic.co/t/how-to-use-nested-properties-fields-in-query-script/214621)

<div class="topic-metadata">

**Author:** [@astfgl](https://discuss.elastic.co/u/astfgl)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 9:23am UTC](https://discuss.elastic.co/t/how-to-use-nested-properties-fields-in-query-script/214621 "2020-01-13T09:23:59Z")

</div>

Hi, I'm using Elasticsearch v6.5.0. my sample data: PUT index/pim\_catalog\_product/bbb\_2255444 { "id": "2838", "identifier": "bbb\_2255444", "created": "2019-12-05T11:34:36+00:00", "values": { "footwear\_size…

---

## [Single quote json](https://discuss.elastic.co/t/single-quote-json/211837)

<div class="topic-metadata">

**Author:** [@Kod](https://discuss.elastic.co/u/Kod)\
**Replies:** 1\
**Last updated:** [December 16, 2019, 9:02am UTC](https://discuss.elastic.co/t/single-quote-json/211837 "2019-12-16T09:02:26Z")

</div>

I was given a json file to work on. I want to do it elasticsearch and kibana. Problem is that instead of double quotes, it is wrapped with single quotes. How can I post it to elasticsearch?

---

## [Update multiple field values in elasticsearch](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 8:49am UTC](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776 "2020-01-13T08:49:19Z")

</div>

Hi all, I am looking to update just one field value in document, http://host:9200/index/\_update/id { "script" : "ctx.\_source.Surname = 'ag'" } this does the job for updating one field, but how to replace multiple f…

---

## [Usage of Array in a Kibana Data Table : issue with Count behaving as a Unique Count](https://discuss.elastic.co/t/usage-of-array-in-a-kibana-data-table-issue-with-count-behaving-as-a-unique-count/214195)

<div class="topic-metadata">

**Author:** [@DavidDupuy](https://discuss.elastic.co/u/DavidDupuy)\
**Replies:** 7\
**Last updated:** [January 13, 2020, 8:36am UTC](https://discuss.elastic.co/t/usage-of-array-in-a-kibana-data-table-issue-with-count-behaving-as-a-unique-count/214195 "2020-01-13T08:36:49Z")

</div>

Hi, A am facing an issue when trying to visualise data coming from an array. For instance, my array 'Tableau\_test' contains ths below PUT /discuss\_test3/\_doc/1 { "Tableau\_test":\[ "Moto", "Voiture", "Voiture", "V…

---

## [Embedding kibana dashboards in my web app that can be altered by various users](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-my-web-app-that-can-be-altered-by-various-users/214761)

<div class="topic-metadata">

**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 8:24am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-my-web-app-that-can-be-altered-by-various-users/214761 "2020-01-13T08:24:40Z")

</div>

I want to create a web app that would let users upload a json file and index it into elasticsearch and let them create custom kibana dashboards for themselves to visualize their org specific data. Can this be done using …

---

## [Elasticsearch service not starting](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534)

<div class="topic-metadata">

**Author:** [@gsumilhig](https://discuss.elastic.co/u/gsumilhig)\
**Replies:** 14\
**Last updated:** [January 13, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534 "2020-01-13T07:43:02Z")

</div>

Caused by: java.lang.IllegalStateException: jar hell! class: org.elasticsearch.plugins.ExtendedPluginsClassLoader jar1: /usr/share/elasticsearch/lib/plugin-classloader-6.8.0.jar jar2: /usr/share/elasticsearch/lib/plug…

---

## [Logstash split filter throwing \_split\_type\_failure](https://discuss.elastic.co/t/logstash-split-filter-throwing-split-type-failure/213984)

<div class="topic-metadata">

**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 7:36am UTC](https://discuss.elastic.co/t/logstash-split-filter-throwing-split-type-failure/213984 "2020-01-13T07:36:03Z")

</div>

Hi Team, I have a situation to break json using split filter which works fine. But certain scenarios where some subkeys of json are optional. when the split filter is not able to find a specific key to split it is throw…

---

## [Logstash Block in block in converge\_state](https://discuss.elastic.co/t/logstash-block-in-block-in-converge-state/214763)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 6:17am UTC](https://discuss.elastic.co/t/logstash-block-in-block-in-converge-state/214763 "2020-01-13T06:17:12Z")

</div>

Hi Below is my Logstash (7.2.0) conf file: input { http\_poller { urls =\> { snowsr =\> { url =\> "https://now.com/api/now/table/u\_service\_request?sysparm\_display\_value=true&sysparm\_exclude\_reference\_link=tr…

---

## [Kibana - How to customize split Chart](https://discuss.elastic.co/t/kibana-how-to-customize-split-chart/214603)

<div class="topic-metadata">

**Author:** [@steven.l](https://discuss.elastic.co/u/steven.l)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 4:08am UTC](https://discuss.elastic.co/t/kibana-how-to-customize-split-chart/214603 "2020-01-13T04:08:16Z")

</div>

I choose the Line Chart and use split chart function as following: I have four items and each item has its value scale as the y-axis. For example, the value of item\_1 is between 4~10, however, item\_2 is between 40~80. …

---

## [Select into new docs](https://discuss.elastic.co/t/select-into-new-docs/214754)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 5:23am UTC](https://discuss.elastic.co/t/select-into-new-docs/214754 "2020-01-13T05:23:21Z")

</div>

Hi all. Is there a way to create a document(s) from the result of a query? I have a query doing some filtering and a scripted\_metric , returning a large amount of data that I would like to insert as new data set. The …

---

## [Hacks in Kibana 7.5.1](https://discuss.elastic.co/t/hacks-in-kibana-7-5-1/214598)

<div class="topic-metadata">

**Author:** [@Aravinda\_Kolla](https://discuss.elastic.co/u/Aravinda_Kolla)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 3:28am UTC](https://discuss.elastic.co/t/hacks-in-kibana-7-5-1/214598 "2020-01-13T03:28:40Z")

</div>

Can I modify the visData object that a visualization renders using hacks ? How do hacks work? What kind of data objects does a hack handle?

---

## [How to use Enrich with Elasticsearch 7.5](https://discuss.elastic.co/t/how-to-use-enrich-with-elasticsearch-7-5/214748)

<div class="topic-metadata">

**Author:** [@mingus](https://discuss.elastic.co/u/mingus)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 1:25am UTC](https://discuss.elastic.co/t/how-to-use-enrich-with-elasticsearch-7-5/214748 "2020-01-13T01:25:26Z")

</div>

I want to configure an index using the Enrich API. User related index : A JIRA related Index : B New index using Enrich : C Compares the "username" field for all documents in the "B" index with the "username" field in…

---

## [Stop proccesing events/lines after first grok match](https://discuss.elastic.co/t/stop-proccesing-events-lines-after-first-grok-match/214696)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 10\
**Last updated:** [January 12, 2020, 11:41pm UTC](https://discuss.elastic.co/t/stop-proccesing-events-lines-after-first-grok-match/214696 "2020-01-12T23:41:16Z")

</div>

Hello all, i am not be able to avoid logstash continues proccesing events after grok patter matched. I just want to index the first occurence of the entire file. Here is what i have: File content first line content... …

---

## [Parsing json Kinesis stream to S3 bucket - How to add new lines b/n records](https://discuss.elastic.co/t/parsing-json-kinesis-stream-to-s3-bucket-how-to-add-new-lines-b-n-records/214742)

<div class="topic-metadata">

**Author:** [@stefank](https://discuss.elastic.co/u/stefank)\
**Replies:** 0\
**Last updated:** [January 12, 2020, 10:00pm UTC](https://discuss.elastic.co/t/parsing-json-kinesis-stream-to-s3-bucket-how-to-add-new-lines-b-n-records/214742 "2020-01-12T22:00:45Z")

</div>

Hi All, I am trying to parse Kinesis stream and store it into S3 buckets. I managed to do that, but I also need to have a newline between each stream record. Is this something that can be done within logstash config? I …

---

## [Creating metric visualization with sum of top10 hits](https://discuss.elastic.co/t/creating-metric-visualization-with-sum-of-top10-hits/211139)

<div class="topic-metadata">

**Author:** [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\
**Replies:** 2\
**Last updated:** [January 12, 2020, 9:05pm UTC](https://discuss.elastic.co/t/creating-metric-visualization-with-sum-of-top10-hits/211139 "2020-01-12T21:05:51Z")

</div>

Hello all, new user of the ELK platform here. I'm importing results from a Nessus-scanner, which I then present on a dashboard in order for different departments to use as a "How are we doing in securing the environmen…

---

## [Elasticsearch - authorization / certificates and change of IP \[?\]](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [January 12, 2020, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709 "2020-01-12T18:29:10Z")

</div>

If I have generated the certificates and set the specified addressing on the Elasticsearch nodes after the change of IP addressing will the certificates and authorization work without problems? Certificates were generat…

---

## [Cannot start Elasticsearch on Windows 10](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-windows-10/214738)

<div class="topic-metadata">

**Author:** [@LearnElastics](https://discuss.elastic.co/u/LearnElastics)\
**Replies:** 0\
**Last updated:** [January 12, 2020, 6:03pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-windows-10/214738 "2020-01-12T18:03:07Z")

</div>

Hi, I installed elasticsearch 7.5.1 on windows 10 using msi installer and it does not start when i test using localhost:9200. log file has this error: Java HotSpot(TM) 64-Bit Server VM (25.181-b13) for windows-amd64 J…

---

## [How to add a tag based on input data](https://discuss.elastic.co/t/how-to-add-a-tag-based-on-input-data/214713)

<div class="topic-metadata">

**Author:** [@debojyoti\_bandyopadh](https://discuss.elastic.co/u/debojyoti_bandyopadh)\
**Replies:** 4\
**Last updated:** [January 12, 2020, 5:15pm UTC](https://discuss.elastic.co/t/how-to-add-a-tag-based-on-input-data/214713 "2020-01-12T17:15:52Z")

</div>

Hello, I am a beginner in logstash and currently learning the basics. I am stuck while solving a problem. Basically my input(to logstash) can be a series of Alphabets like below: a b a c d I want to add a tag "A" i…

---

## [Dd Geo Point From Twitter geo Field](https://discuss.elastic.co/t/dd-geo-point-from-twitter-geo-field/214716)

<div class="topic-metadata">

**Author:** [@shakesperoo](https://discuss.elastic.co/u/shakesperoo)\
**Replies:** 2\
**Last updated:** [January 12, 2020, 3:09pm UTC](https://discuss.elastic.co/t/dd-geo-point-from-twitter-geo-field/214716 "2020-01-12T15:09:10Z")

</div>

how to add Geo Point From Twitter geo ? i am using twiiter API like this input { twitter { consumer\_key =\> "" consumer\_secret =\> "" oauth\_token =\> "" oauth\_token\_secret =\> "" keywords =\> \["USA"\] full\_tweet =\> tr…

---

## [Logstash Twitter Dyanmic Keywords and Search filter](https://discuss.elastic.co/t/logstash-twitter-dyanmic-keywords-and-search-filter/214697)

<div class="topic-metadata">

**Author:** [@shakesperoo](https://discuss.elastic.co/u/shakesperoo)\
**Replies:** 2\
**Last updated:** [January 12, 2020, 3:00pm UTC](https://discuss.elastic.co/t/logstash-twitter-dyanmic-keywords-and-search-filter/214697 "2020-01-12T15:00:22Z")

</div>

Can i use Can i use logstash http plugin to to feed log twitter keywords search ? input { http { host =\> "http://localhost/WebApplication3/home/Keywords" port =\> 80 } } filter { mutate { add\_field =\> { "token…

---

## [License information could not be obtained from Elasticsearch for the \[data\] cluster](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch-for-the-data-cluster/213454)

<div class="topic-metadata">

**Author:** [@Pushkala](https://discuss.elastic.co/u/Pushkala)\
**Replies:** 4\
**Last updated:** [January 11, 2020, 11:15pm UTC](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch-for-the-data-cluster/213454 "2020-01-11T23:15:20Z")

</div>

I have installed elasticsearch 7.5.1 and the same version of Kibana.. My es cluster seems fine, but Kibana is not able to connect to the elasticsearch.. Kiabana.yml is as below: server.port: 5601 server.host: "" serv…

---

## [Custom field for visualization](https://discuss.elastic.co/t/custom-field-for-visualization/213419)

<div class="topic-metadata">

**Author:** [@Aadarsh\_Mahala](https://discuss.elastic.co/u/Aadarsh_Mahala)\
**Replies:** 4\
**Last updated:** [January 11, 2020, 11:06pm UTC](https://discuss.elastic.co/t/custom-field-for-visualization/213419 "2020-01-11T23:06:33Z")

</div>

Is it possible to create the visualization in the kibana using the custom field like eventcount value from json data? \<{ "eventcount" : 302932229, "file" : "confidential" }/\>

---

## [Change of addressing of the entire Elasticsearch cluster](https://discuss.elastic.co/t/change-of-addressing-of-the-entire-elasticsearch-cluster/214707)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 2\
**Last updated:** [January 11, 2020, 5:02pm UTC](https://discuss.elastic.co/t/change-of-addressing-of-the-entire-elasticsearch-cluster/214707 "2020-01-11T17:02:50Z")

</div>

Can a one-time change of addressing of the entire Elasticsearch cluster cause any problems? Let's assume the scenario: We have a working Elasticserach cluster on addressing (IP\_a, MASK\_a, GATEa). We shutdown Elasticse…

---

## [Getting started with Elastic Search!](https://discuss.elastic.co/t/getting-started-with-elastic-search/214221)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 6\
**Last updated:** [January 11, 2020, 11:28am UTC](https://discuss.elastic.co/t/getting-started-with-elastic-search/214221 "2020-01-11T11:28:44Z")

</div>

Hi, I have a bunch of .json files that contain a ~million judgements. I want to build a search engine on a website that queries these files. I am looking for tutorials or something similar that gets this is detail. Reg…

---

## [Elasticsearch Suggestions using shingle](https://discuss.elastic.co/t/elasticsearch-suggestions-using-shingle/214699)

<div class="topic-metadata">

**Author:** [@Dobra\_Adrian](https://discuss.elastic.co/u/Dobra_Adrian)\
**Replies:** 0\
**Last updated:** [January 11, 2020, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-suggestions-using-shingle/214699 "2020-01-11T09:23:40Z")

</div>

The ideea is to suggest words (search-as-you-type) like Amazon searchbox suggestions I have a working solution but i don't think is the better one. SETTINGS PUT store { "settings": { "max\_shingle\_diff" : 50, …

---

## [Send Daynamic keywords to twitter API in logstash](https://discuss.elastic.co/t/send-daynamic-keywords-to-twitter-api-in-logstash/214693)

<div class="topic-metadata">

**Author:** [@shakesperoo](https://discuss.elastic.co/u/shakesperoo)\
**Replies:** 3\
**Last updated:** [January 11, 2020, 8:11am UTC](https://discuss.elastic.co/t/send-daynamic-keywords-to-twitter-api-in-logstash/214693 "2020-01-11T08:11:30Z")

</div>

I am using Logstash to stream twittter tweets like below input { twitter { consumer\_key =\> "" consumer\_secret =\> "" oauth\_token =\> "" oauth\_token\_secret =\> "" keywords =\> \["USA","Trump"\] full\_tweet =\> true type …

---

## [Remove extra lines from output message](https://discuss.elastic.co/t/remove-extra-lines-from-output-message/214538)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 1\
**Last updated:** [January 11, 2020, 4:45am UTC](https://discuss.elastic.co/t/remove-extra-lines-from-output-message/214538 "2020-01-11T04:45:46Z")

</div>

Hi , I am using multiline pattern to filter my output message from Exec plugin , Now I am able to get the lines separately according to my required pattern ^D122, But i am getting some extra characters in the message lik…

---

## [Elasticsearch's test memod testSniffmode always report issues](https://discuss.elastic.co/t/elasticsearchs-test-memod-testsniffmode-always-report-issues/214690)

<div class="topic-metadata">

**Author:** [@benhairui](https://discuss.elastic.co/u/benhairui)\
**Replies:** 0\
**Last updated:** [January 11, 2020, 4:31am UTC](https://discuss.elastic.co/t/elasticsearchs-test-memod-testsniffmode-always-report-issues/214690 "2020-01-11T04:31:55Z")

</div>

hi all : I read the elasticsearch's source code. Recently I want to run the test method TransportClientBackwardsCompatibilityIT.testSniffnode, but it is always report one issue. First, the version is 2.4.5, jvm is 1.8.…

---

## [ECE 2.4 change deployement name impact](https://discuss.elastic.co/t/ece-2-4-change-deployement-name-impact/214678)

<div class="topic-metadata">

**Author:** [@tazikm](https://discuss.elastic.co/u/tazikm)\
**Replies:** 2\
**Last updated:** [January 11, 2020, 12:56am UTC](https://discuss.elastic.co/t/ece-2-4-change-deployement-name-impact/214678 "2020-01-11T00:56:59Z")

</div>

Hi, is there any impact if i change the deployement name of my clusters in an ECE 2.4 environnement ? Thank you in advance Kamal

---

## [Http\_Poller Trend Micro DeepSecurity](https://discuss.elastic.co/t/http-poller-trend-micro-deepsecurity/214686)

<div class="topic-metadata">

**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\
**Replies:** 0\
**Last updated:** [January 10, 2020, 11:36pm UTC](https://discuss.elastic.co/t/http-poller-trend-micro-deepsecurity/214686 "2020-01-10T23:36:17Z")

</div>

Hello Everyone, I'd like to use the http\_poller plugin to pull events from Trend Micro Deep Security using the REST api they have. I have 2 concerns on this - Has anyone done this with LS and if you have what issues i…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1687)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1689)
