# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1790 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1791 --- ## [Getting consistent scoring best practices](https://discuss.elastic.co/t/getting-consistent-scoring-best-practices/207359)
**Author:** [@usteidj](https://discuss.elastic.co/u/usteidj)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 1:44pm UTC](https://discuss.elastic.co/t/getting-consistent-scoring-best-practices/207359 "2019-11-11T13:44:50Z")
I've had the case that's described in the "Scores are not reproducible" section of this: Getting consistent scoring. I am using the ElasticSearch Service in AWS. I'm going to have a large index (millions of documents),… --- ## [Lucene query for AND operator is not working](https://discuss.elastic.co/t/lucene-query-for-and-operator-is-not-working/207333)
**Author:** [@debasish283](https://discuss.elastic.co/u/debasish283)\ **Replies:** 3\ **Last updated:** [November 11, 2019, 1:37pm UTC](https://discuss.elastic.co/t/lucene-query-for-and-operator-is-not-working/207333 "2019-11-11T13:37:44Z")
We are trying to use lucene search based on two fields below is the query we tried but we are not getting appropriate results. GET test/message/\_search { "size": 180, "\_source": \[ "host\_name", "value", "… --- ## [Changing field Name](https://discuss.elastic.co/t/changing-field-name/207124)
**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\ **Replies:** 1\ **Last updated:** [November 11, 2019, 1:32pm UTC](https://discuss.elastic.co/t/changing-field-name/207124 "2019-11-11T13:32:27Z")
Hi everybody, I am getting a field name and value like this: How\_to\_configure\_outlook\_SOP\_name:How to configure outlook How\_to\_enable\_macros\_SOP\_name: How to enable macros. e.g. (anything)\_SOP\_name:value I put all t… --- ## [Problem with must\_not query please help](https://discuss.elastic.co/t/problem-with-must-not-query-please-help/207340)
**Author:** [@AndriyImp](https://discuss.elastic.co/u/AndriyImp)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 1:30pm UTC](https://discuss.elastic.co/t/problem-with-must-not-query-please-help/207340 "2019-11-11T13:30:46Z")
Hi All! have bit problem with query - must\_not do not works.. here is query: ( \[bool\] =\> Array ( \[must\] =\> Array ( \[0\] =\> Array ( … --- ## [Complain autho-suggest sort](https://discuss.elastic.co/t/complain-autho-suggest-sort/207351)
**Author:** [@v81](https://discuss.elastic.co/u/v81)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 12:54pm UTC](https://discuss.elastic.co/t/complain-autho-suggest-sort/207351 "2019-11-11T12:54:56Z")
Hello, I am using complain auto-suggest and have the below results: "Custom color Black", "Custom color Orange", "Custom color White", "Custom color" How I can improve my code for sort "custom color" to the first po… --- ## [How to create a custom document](https://discuss.elastic.co/t/how-to-create-a-custom-document/206820)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 4\ **Last updated:** [November 11, 2019, 12:26pm UTC](https://discuss.elastic.co/t/how-to-create-a-custom-document/206820 "2019-11-11T12:26:09Z")
Hello I was able to configure the following: From the json document I have this: "MyValue": "Key value based on a specific field", "host": { "name": "hostname" }, "tags": \[ "beats\_input\_codec\_plain\_applied", \], … --- ## [Unexpected token \[':'\] was expecting one of \[{\, ';'}\]](https://discuss.elastic.co/t/unexpected-token-was-expecting-one-of-eof/207298)
**Author:** [@Java\_Developet](https://discuss.elastic.co/u/Java_Developet)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 8:17am UTC](https://discuss.elastic.co/t/unexpected-token-was-expecting-one-of-eof/207298 "2019-11-11T08:17:01Z")
Hello, in my mappings I have a field with the character ':' in it, specifically "meta\_og:type" : { "type" : "text", "fields" : { "keyword" : { "type" : "keyword", "ignore\_above" : 256 … --- ## [Node will not join cluster](https://discuss.elastic.co/t/node-will-not-join-cluster/206456)
**Author:** [@Terran](https://discuss.elastic.co/u/Terran)\ **Replies:** 11\ **Last updated:** [November 11, 2019, 12:20pm UTC](https://discuss.elastic.co/t/node-will-not-join-cluster/206456 "2019-11-11T12:20:20Z")
Running version 7.3.1. I have a single node cluster and this is operating fine. I want to join two other nodes to this cluster. Each time I try I either get another single node cluster, or elasticsearch will not start… --- ## [Fetch results based on Timezone](https://discuss.elastic.co/t/fetch-results-based-on-timezone/207039)
**Author:** [@anudeep\_k](https://discuss.elastic.co/u/anudeep_k)\ **Replies:** 4\ **Last updated:** [November 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/fetch-results-based-on-timezone/207039 "2019-11-11T12:16:51Z")
Hi, I have a inserted a data in elastic search from my timezone(Asia/Kolkata; +05:30) and converted into UTC.please find the below table for reference. Now I am trying to fetch the data by passing my timezone for whi… --- ## [Pre-processing data for analysis/visualisation - kibana or elsewhere?](https://discuss.elastic.co/t/pre-processing-data-for-analysis-visualisation-kibana-or-elsewhere/206583)
**Author:** [@cpeter](https://discuss.elastic.co/u/cpeter)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 11:50am UTC](https://discuss.elastic.co/t/pre-processing-data-for-analysis-visualisation-kibana-or-elsewhere/206583 "2019-11-11T11:50:12Z")
Hi, I got some indices the data of wich are not optimal for my analysis goals. Where/how can I manipulate them? It's about the type of the fields the names merging fields (e.g. Christmas and X-mas should both become X… --- ## [Elasticsearch dead but subsys locked - amazonlinux](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked-amazonlinux/207341)
**Author:** [@tharani](https://discuss.elastic.co/u/tharani)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked-amazonlinux/207341 "2019-11-11T11:28:03Z")
Hi, am trying to install Elasticsearch 7.x in amazon linux, after installing and changing network.host, port, and path. I tried to start elastic search, it started, but when i check status, I got. "elasticsearch dead b… --- ## [Logstash fails to write in configured Index](https://discuss.elastic.co/t/logstash-fails-to-write-in-configured-index/207332)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 10:45am UTC](https://discuss.elastic.co/t/logstash-fails-to-write-in-configured-index/207332 "2019-11-11T10:45:21Z")
Hello guys, i have the problem, that i want to manage my Index Names by Date. output { if \[type\] == "syslog" { elasticsearch { hosts =\> \["XX.XX.XXX.XXX:ZZZZ", "XX.XX.XXX.XXX:ZZZZ", "XX.XX.XXX.XXX:ZZZZ"\] index… --- ## [Apache/nginx logs wrapped in syslog format](https://discuss.elastic.co/t/apache-nginx-logs-wrapped-in-syslog-format/207211)
**Author:** [@w\_o\_j\_t\_e\_k](https://discuss.elastic.co/u/w_o_j_t_e_k)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 10:40am UTC](https://discuss.elastic.co/t/apache-nginx-logs-wrapped-in-syslog-format/207211 "2019-11-11T10:40:33Z")
Hi, I've got a centralized log server that receives apache + nginx logs. I would like to use filebeat on this box to forward these logs into elastic. The logs are wrapped in the syslog format, e.q: 2019-11-09T11:50:5… --- ## [Logstash - Arcsight integration](https://discuss.elastic.co/t/logstash-arcsight-integration/207323)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 10:08am UTC](https://discuss.elastic.co/t/logstash-arcsight-integration/207323 "2019-11-11T10:08:31Z")
Hi everybody I activated the Arcsight module and created a pipeline for the configurations already active in logstash (in my case I receive data from the Beats). When I activate Arcsight the pipeline with the Beats does… --- ## [502 response for Elasticsearch query](https://discuss.elastic.co/t/502-response-for-elasticsearch-query/207321)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 9:56am UTC](https://discuss.elastic.co/t/502-response-for-elasticsearch-query/207321 "2019-11-11T09:56:18Z")
Hi, My elasticsearch cluster has ingestion rate of 10k docs/sec continuously. My elasticsearch queries are failing and throwing 502 response. Also I reduced ingestion rate to 1K docs/sec and checked the same queries bu… --- ## [Create index dynamically](https://discuss.elastic.co/t/create-index-dynamically/207315)
**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 9:31am UTC](https://discuss.elastic.co/t/create-index-dynamically/207315 "2019-11-11T09:31:36Z")
I want to create ES index in logstash conf file dynamically based on id, if first character of id = 1 i need to create my index as 1\_myindex and if id = 2 create my index as 2\_myindex. Thanks --- ## [Can a Java program operate on multiple versions of elasticsearch?](https://discuss.elastic.co/t/can-a-java-program-operate-on-multiple-versions-of-elasticsearch/207265)
**Author:** [@sanjun1995](https://discuss.elastic.co/u/sanjun1995)\ **Replies:** 7\ **Last updated:** [November 11, 2019, 9:20am UTC](https://discuss.elastic.co/t/can-a-java-program-operate-on-multiple-versions-of-elasticsearch/207265 "2019-11-11T09:20:12Z")
I need to develop an es automation tool. Our company's es cluster has multiple versions. I found that many clients require the corresponding ES version. Currently I can only think of Java indirectly using the curl and… --- ## [Exact Sub-String Match | ElasticSearch](https://discuss.elastic.co/t/exact-sub-string-match-elasticsearch/207279)
**Author:** [@Soberwolf](https://discuss.elastic.co/u/Soberwolf)\ **Replies:** 3\ **Last updated:** [November 11, 2019, 9:05am UTC](https://discuss.elastic.co/t/exact-sub-string-match-elasticsearch/207279 "2019-11-11T09:05:26Z")
We are migrating our search strategy, from database to ElasticSearch. During this we are in need to preserve the existing functionality of partially searching a field similar the SQL query below (including whitespaces): … --- ## [FilebeatのOutputに複数の定義を設定する](https://discuss.elastic.co/t/filebeat-output/207275)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 9:01am UTC](https://discuss.elastic.co/t/filebeat-output/207275 "2019-11-11T09:01:09Z")
Filebeatを使用してElasticseachにデータを登録したいです。その際、FilebeatからLogstash経由で登録したいものと、直接Elasticseachに登録したいファイルが存在します。その場合、一つのFilebeatで実現することは可能でしょうか？ マニュアルを見ると、Filebeatにて指定できるOutputは1つのみとあります。 やはりFilebeatを2台用意し、Outputの設定をそれぞれLogstas… --- ## [Date Range split ---\> concrete date](https://discuss.elastic.co/t/date-range-split-concrete-date/206455)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 8:57am UTC](https://discuss.elastic.co/t/date-range-split-concrete-date/206455 "2019-11-11T08:57:36Z")
Hi there, Can I indicate a concrete date in Split Series ---\> Date Range ? Now I see only a relative date like that And I need to indicate, e.g. the 12th October and 2nd November --- ## [Parasing Custom Logs](https://discuss.elastic.co/t/parasing-custom-logs/207270)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 1\ **Last updated:** [November 11, 2019, 8:55am UTC](https://discuss.elastic.co/t/parasing-custom-logs/207270 "2019-11-11T08:55:28Z")
Hi Team We are trying to parase custom logs. But the pattern of the logs changes with Newline or space sometime a new Is getting. Is there a way to get the logs Irrespective of data changes. Thanks --- ## [Nmap result xml file send to elasticsearch using logstash - read\_to\_eof Error](https://discuss.elastic.co/t/nmap-result-xml-file-send-to-elasticsearch-using-logstash-read-to-eof-error/207308)
**Author:** [@GwakMin](https://discuss.elastic.co/u/GwakMin)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 8:51am UTC](https://discuss.elastic.co/t/nmap-result-xml-file-send-to-elasticsearch-using-logstash-read-to-eof-error/207308 "2019-11-11T08:51:28Z")
I want to send to nmap xml result to elasticsearch using logstash. So i wrote nmap-logstash conf file like below input { file { path =\> "/home/elktest/elk/nmaptoelk/\*.xml" start\_position =\> "beginning" si… --- ## [Logs are not parsing properly](https://discuss.elastic.co/t/logs-are-not-parsing-properly/207307)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 8:48am UTC](https://discuss.elastic.co/t/logs-are-not-parsing-properly/207307 "2019-11-11T08:48:28Z")
My architecture is \*Filebeat A\*(remote) \> Logstash A (2 pipelines) \> Elasticsearch A \> Kibana A \*Filebeat B\*(remote) \> Logstash A (2 pipelines) \> Elasticsearch A \> Kibana A Its for logs analysis. say my logs format i… --- ## [Можно ли использовать Elastic Stack в production, если он является модулем мониторинга в коммерческом ПО ПО?](https://discuss.elastic.co/t/elastic-stack-production/206571)
**Author:** [@111209](https://discuss.elastic.co/u/111209)\ **Replies:** 7\ **Last updated:** [November 11, 2019, 8:17am UTC](https://discuss.elastic.co/t/elastic-stack-production/206571 "2019-11-11T08:17:45Z")
Добрый день ! Собственно имеется некое разрабатываемое ПО в котором присутствует модуль мониторинга - стэк ELK. Можно ли использовать ELK Basic или надо покупать лицензии. вот сама лицензия Elastic : https://github.co… --- ## [Elastic node crashes after kibana query - with java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/elastic-node-crashes-after-kibana-query-with-java-lang-outofmemoryerror-java-heap-space/207134)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 5\ **Last updated:** [November 11, 2019, 7:32am UTC](https://discuss.elastic.co/t/elastic-node-crashes-after-kibana-query-with-java-lang-outofmemoryerror-java-heap-space/207134 "2019-11-11T07:32:48Z")
the Query in Kibana is this simple: Metrics: unique count(device\_id.keyword) Buckets: subscription\_code.keyword My cluster is 8 nodes 8core/64G RAM, 31G Heap, Elastic version 6.4.2 \[2019-11-08T15:19:22,118\]… --- ## [Systemctl logstash.service pipeline problem](https://discuss.elastic.co/t/systemctl-logstash-service-pipeline-problem/206892)
**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\ **Replies:** 7\ **Last updated:** [November 11, 2019, 7:29am UTC](https://discuss.elastic.co/t/systemctl-logstash-service-pipeline-problem/206892 "2019-11-11T07:29:54Z")
Ok, so I've been dealing with this issue for a couple of days and it's becoming really frustrating. I want to start logstash with systemctl start logstash.service to have it in the background sending some metric logs to… --- ## [Highlight issue in text search](https://discuss.elastic.co/t/highlight-issue-in-text-search/207290)
**Author:** [@Harsh\_Sahu](https://discuss.elastic.co/u/Harsh_Sahu)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 7:16am UTC](https://discuss.elastic.co/t/highlight-issue-in-text-search/207290 "2019-11-11T07:16:35Z")
I have created an index which has transcripts of call data and while searching for keyword highlight is not working properly. Elastic-search version: 6.8.1 { "settings": { "index": { "analysis": { "filter": { "min… --- ## [Unable to export to csv from Kibana](https://discuss.elastic.co/t/unable-to-export-to-csv-from-kibana/206467)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 1\ **Last updated:** [November 11, 2019, 6:42am UTC](https://discuss.elastic.co/t/unable-to-export-to-csv-from-kibana/206467 "2019-11-11T06:42:04Z")
We are using Kibana as a tool to create dashboards. One of our use-case is to be able to export filtered data from elasticsearch index as a CSV file. We are using oss version of Kibana 7.2 So is this export to csv fea… --- ## [Conditional update with elastic search when query returns no document](https://discuss.elastic.co/t/conditional-update-with-elastic-search-when-query-returns-no-document/207285)
**Author:** [@FaisalHBTU](https://discuss.elastic.co/u/FaisalHBTU)\ **Replies:** 0\ **Last updated:** [November 11, 2019, 6:31am UTC](https://discuss.elastic.co/t/conditional-update-with-elastic-search-when-query-returns-no-document/207285 "2019-11-11T06:31:58Z")
Hi Team, I am performing conditional update operation on elastic search doc. How i do is: I create a query which has conditions on doc level for filtering I use groovy script to update some of the fields conditionall… --- ## [Cluster join issue](https://discuss.elastic.co/t/cluster-join-issue/207277)
**Author:** [@unni\_cpt](https://discuss.elastic.co/u/unni_cpt)\ **Replies:** 1\ **Last updated:** [November 11, 2019, 6:24am UTC](https://discuss.elastic.co/t/cluster-join-issue/207277 "2019-11-11T06:24:49Z")
Hi , I have a master node running on VM with single cluster and I am trying to add the master eligible node from openshift pod. When I try to join the cluster , getting below error. I can do curl to reach from openshift… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1789) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1791)