# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1807 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1808 --- ## [Query with multiple AND and OR clauses in a filter context?](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678)
**Author:** [@jyridevelopingsw](https://discuss.elastic.co/u/jyridevelopingsw)\ **Replies:** 7\ **Last updated:** [October 31, 2019, 12:28pm UTC](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678 "2019-10-31T12:28:37Z")
Is it possible to perform a complex query in just filter context? In my case scoring does not matter at all. The documentation states that in a bool query filter and must\_not are performed in a filter context. So can I … --- ## [How do I identify and remove words from a search phrase that don't exist in my elasticsearch index using suggetors?](https://discuss.elastic.co/t/how-do-i-identify-and-remove-words-from-a-search-phrase-that-dont-exist-in-my-elasticsearch-index-using-suggetors/205996)
**Author:** [@Richard\_Mann](https://discuss.elastic.co/u/Richard_Mann)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-do-i-identify-and-remove-words-from-a-search-phrase-that-dont-exist-in-my-elasticsearch-index-using-suggetors/205996 "2019-10-31T07:58:04Z")
Hello, I'm trying to get support on the following: In summary, please assume the following for my situation: I am trying to create a 'did you mean' feature using the ES Suggester feature. My goal is to turn this "gr… --- ## [Supply a list to filter in search template](https://discuss.elastic.co/t/supply-a-list-to-filter-in-search-template/206031)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 12:00pm UTC](https://discuss.elastic.co/t/supply-a-list-to-filter-in-search-template/206031 "2019-10-31T12:00:44Z")
can we supply a list of phrases in search template for filtering purposes , if there is any example, can someone point me to it. thanks --- ## [Logstash mutate replace filter fails](https://discuss.elastic.co/t/logstash-mutate-replace-filter-fails/205827)
**Author:** [@LeonZC](https://discuss.elastic.co/u/LeonZC)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 11:57am UTC](https://discuss.elastic.co/t/logstash-mutate-replace-filter-fails/205827 "2019-10-31T11:57:57Z")
I have field called "zone" and i am trying to replace the field value by using mutate to "BlockA" when the field value of "zone" is "Z0". Here is the code that I am using: filter { if \[source\] =~ "file.log" { grok … --- ## [Parsing URL with Logstash (using ECS fields)](https://discuss.elastic.co/t/parsing-url-with-logstash-using-ecs-fields/205814)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 11:57am UTC](https://discuss.elastic.co/t/parsing-url-with-logstash-using-ecs-fields/205814 "2019-10-31T11:57:49Z")
Hi there i've been working on a way to parse url into ecs fields, and it seems to be working well. Hope it helps! # Parser a url filter { grok { match =\> \[ # match https://user:pwd@stuff.domain… --- ## [Axis cameras and server Monitoring](https://discuss.elastic.co/t/axis-cameras-and-server-monitoring/205632)
**Author:** [@walid.z](https://discuss.elastic.co/u/walid.z)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 11:18am UTC](https://discuss.elastic.co/t/axis-cameras-and-server-monitoring/205632 "2019-10-31T11:18:31Z")
Hello all, I'm new in elastic, and i would like to monitor and visualize logs from AXIS server ( camera server). there is any way to track the status of the Axis service if it's up or down.( windows service). Thank yo… --- ## [Create a watch to alert](https://discuss.elastic.co/t/create-a-watch-to-alert/206007)
**Author:** [@NinjaMonkey](https://discuss.elastic.co/u/NinjaMonkey)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 9:31am UTC](https://discuss.elastic.co/t/create-a-watch-to-alert/206007 "2019-10-31T09:31:00Z")
I am trying to find out nodes left or nodes joined in ElasticSearch 6.4 Looks like node\_left and node\_joined events has been removed from marvel indexes in latest versions . Is there any other way to create a watch to a… --- ## [Count values within an element created today](https://discuss.elastic.co/t/count-values-within-an-element-created-today/205901)
**Author:** [@fernrguez](https://discuss.elastic.co/u/fernrguez)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 8:50am UTC](https://discuss.elastic.co/t/count-values-within-an-element-created-today/205901 "2019-10-31T08:50:37Z")
Hi all, I'm trying to create a query to retrieve a list of elements that indicates the number of appearance for current day. For example, I have logs with logLevel that could be ERROR, INFO, WARN, .. So far I have thi… --- ## [Pushing info from fingerprint access point to ElasticSearch, Any case study URL](https://discuss.elastic.co/t/pushing-info-from-fingerprint-access-point-to-elasticsearch-any-case-study-url/206001)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 8:47am UTC](https://discuss.elastic.co/t/pushing-info-from-fingerprint-access-point-to-elasticsearch-any-case-study-url/206001 "2019-10-31T08:47:09Z")
Hi All, Good afternoon I am trying to look for case studies on "Using Elasticsearch for gathering fingerprint access device and doors information to the elastic search Is there any link or docs which I can refer th… --- ## [Environment variable syntax problems for beats monitoring](https://discuss.elastic.co/t/environment-variable-syntax-problems-for-beats-monitoring/205867)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 8:34am UTC](https://discuss.elastic.co/t/environment-variable-syntax-problems-for-beats-monitoring/205867 "2019-10-31T08:34:57Z")
I'm trying to pass through the monitoring elasticsearch cluster hostname as an enterprise variable and set in the metricbeat.yml and filebeat.yml. The variable is: MONITORING\_ELASTICSEARCH=elk-001 Hardcoding the name … --- ## [How to don't save empty fields in elastic search?](https://discuss.elastic.co/t/how-to-dont-save-empty-fields-in-elastic-search/205980)
**Author:** [@Mehrdad.dev](https://discuss.elastic.co/u/Mehrdad.dev)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 8:21am UTC](https://discuss.elastic.co/t/how-to-dont-save-empty-fields-in-elastic-search/205980 "2019-10-31T08:21:31Z")
Hi . i want store data in elastic search with regardless empty data in some fields. if a filed be empty don't store this filed. can you help me ? --- ## [Nested内のオブジェクト数でソートする方法について](https://discuss.elastic.co/t/nested/205971)
**Author:** [@onorioriori](https://discuss.elastic.co/u/onorioriori)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 8:05am UTC](https://discuss.elastic.co/t/nested/205971 "2019-10-31T08:05:14Z")
お世話になっております。 現在、以下のようなnestedフィールドのインデックスを作成し、 PUT my\_index { "mappings": { "properties": { "user": { "type": "nested" } } } } nested内のオブジェクト数が1,2,3となるようにドキュメントを入れた際に、 PUT my\_index/\_do… --- ## [Version 7.1.1 Amazing thing. Director become file After a power failure](https://discuss.elastic.co/t/version-7-1-1-amazing-thing-director-become-file-after-a-power-failure/205990)
**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 7:28am UTC](https://discuss.elastic.co/t/version-7-1-1-amazing-thing-director-become-file-after-a-power-failure/205990 "2019-10-31T07:28:02Z")
After power off system while writing and start elasticsearch Caused by: org.elasticsearch.gateway.WriteStateException: failed to open state directory /disks/data5/elasticsearch/nodes/0/indices/PQDYiAG4SV2bc9Wrt59T8A/\_s… --- ## [Login on SQL Server with domain account (using jdbc plugin)](https://discuss.elastic.co/t/login-on-sql-server-with-domain-account-using-jdbc-plugin/205742)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 7:23am UTC](https://discuss.elastic.co/t/login-on-sql-server-with-domain-account-using-jdbc-plugin/205742 "2019-10-31T07:23:19Z")
Hi all, is there a way to login on MS SQL server using domain credentials? Currently I'm not able to login on it using JDBC Logstash plugin. --- ## [Version 7.1.1 Corrupted translog After a power failure](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968)
**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\ **Replies:** 12\ **Last updated:** [October 31, 2019, 7:10am UTC](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968 "2019-10-31T07:10:11Z")
Translog has become corrupted and why would this happen. Can close system file cache fix the Problem Completely? "unassigned\_info": { "reason": "ALLOCATION\_FAILED", "at": "2019-10-09T07:08:10.690Z", "failed\_attempts"… --- ## [Node障害時、cluster.routing.allocation.excludeした際の挙動](https://discuss.elastic.co/t/node-cluster-routing-allocation-exclude/205987)
**Author:** [@ichirou](https://discuss.elastic.co/u/ichirou)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 6:51am UTC](https://discuss.elastic.co/t/node-cluster-routing-allocation-exclude/205987 "2019-10-31T06:51:03Z")
Data NodeがNodeA、NodeB、NodeCの３つあるClusterがあり、NodeBが障害で使用不可になった場合、NodeA,CにあるReplicaがPrimaryとして振る舞うと認識しております。 その際、クラスタ設定変更のcluster.routing.allocation.exclude.\_name: "NodeB"でNodeBをshardのアロケーションから外した場合はどのようになるのでしょうか？ （前提：ind… --- ## [Logstash JMS Input version 7.4.0](https://discuss.elastic.co/t/logstash-jms-input-version-7-4-0/204776)
**Author:** [@thrishod](https://discuss.elastic.co/u/thrishod)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:38am UTC](https://discuss.elastic.co/t/logstash-jms-input-version-7-4-0/204776 "2019-10-31T06:38:52Z")
Hi All, I am very newbie to ELK and my requirement is to read the messages from IBM WMQ. I have setup the queue manager, Queue, JMS queue, Binding etc.. as needed. In order to read messages from IBM WMQ, I believe log… --- ## [Shards stuck in INITIALIZATION due to mismatch in State on targetnode](https://discuss.elastic.co/t/shards-stuck-in-initialization-due-to-mismatch-in-state-on-targetnode/205939)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:29am UTC](https://discuss.elastic.co/t/shards-stuck-in-initialization-due-to-mismatch-in-state-on-targetnode/205939 "2019-10-31T06:29:43Z")
Multiple Replica shards are stuck in initialisation phase because there seems to be a mismatch in the Shard status. I am seeing multiple messages of this type \[indices.recovery \] \[node-24\] delaying recovery of … --- ## [Renaming nested fields based on some condition](https://discuss.elastic.co/t/renaming-nested-fields-based-on-some-condition/205801)
**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 6:14am UTC](https://discuss.elastic.co/t/renaming-nested-fields-based-on-some-condition/205801 "2019-10-31T06:14:29Z")
In the document, I want to change the fieldName based on conditions below 1.If the value field has JSON type. Change the value field to value-keyword and remove "value-whitespace" and \*\*"value-standard" \*\* if pres… --- ## [Auto resharding capabilities](https://discuss.elastic.co/t/auto-resharding-capabilities/205515)
**Author:** [@marb](https://discuss.elastic.co/u/marb)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 6:10am UTC](https://discuss.elastic.co/t/auto-resharding-capabilities/205515 "2019-10-31T06:10:56Z")
Hi, I had recently some discussions about auto resharding capabilities in Elasticsearch: basically, at some point in time, without any human intervention, the system would "detect" that for a given index resharding is n… --- ## [Restirct users with search filter](https://discuss.elastic.co/t/restirct-users-with-search-filter/205558)
**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 6:10am UTC](https://discuss.elastic.co/t/restirct-users-with-search-filter/205558 "2019-10-31T06:10:17Z")
Hi, Can anyone please assist me on this : I need users not to search huge queries or if they search queries on kibana discover , they must add a filter. The reason behind this is because users queries huge amount of da… --- ## [Kibana not gerating default index pattern i.e logstash-\*](https://discuss.elastic.co/t/kibana-not-gerating-default-index-pattern-i-e-logstash/204761)
**Author:** [@Ekta1234](https://discuss.elastic.co/u/Ekta1234)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 5:59am UTC](https://discuss.elastic.co/t/kibana-not-gerating-default-index-pattern-i-e-logstash/204761 "2019-10-31T05:59:41Z")
Kibana is not taking logstash-\* as index pattern...I'm using 7.4.0 of ELK . However, when I'm using Spring boot for generating logs and running Kibana on localhost:5601 it's not taking the default index pattern configura… --- ## [Logstash node not showing up in Kibana monitoring (Logstash constantly restarting)](https://discuss.elastic.co/t/logstash-node-not-showing-up-in-kibana-monitoring-logstash-constantly-restarting/205808)
**Author:** [@vdere](https://discuss.elastic.co/u/vdere)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 5:29am UTC](https://discuss.elastic.co/t/logstash-node-not-showing-up-in-kibana-monitoring-logstash-constantly-restarting/205808 "2019-10-31T05:29:57Z")
One of our logstash node is not showing in the monitoring tab. So how can I log into specific logstash nodes to verify if x-pack is running? Assuming that is what is causing this problem. Or there might be any other issu… --- ## [Questions about SQL CLI](https://discuss.elastic.co/t/questions-about-sql-cli/205803)
**Author:** [@smash](https://discuss.elastic.co/u/smash)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 5:23am UTC](https://discuss.elastic.co/t/questions-about-sql-cli/205803 "2019-10-31T05:23:51Z")
hello hello! If "-" is included in index, an error occurs. How can I escape? \\ Was added but it was not escaped. #Error Msg Sql\>select Count(\*) from db01-TEST; Bad request \[line 1:25: extraneous input '-' expecting… --- ## [Assistance in Formulating a Query using NEST Api](https://discuss.elastic.co/t/assistance-in-formulating-a-query-using-nest-api/205944)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 0\ **Last updated:** [October 30, 2019, 8:31pm UTC](https://discuss.elastic.co/t/assistance-in-formulating-a-query-using-nest-api/205944 "2019-10-30T20:31:24Z")
We have a requirement that we think is a candidate for a Multi-Search or Named Queries - but we are not sure. Say we are selling clothes. The user can enter a type of clothing such as Shirts and we bring back all the s… --- ## [Unable to update index settings](https://discuss.elastic.co/t/unable-to-update-index-settings/205781)
**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 2:42am UTC](https://discuss.elastic.co/t/unable-to-update-index-settings/205781 "2019-10-31T02:42:14Z")
Try to update "read\_only\_allow\_delete" to False, but not working, it always turns out to be True no matter how many attempts have been made. bash-4.1$ date Tue Oct 29 23:07:01 EDT 2019 bash-4.1$ curl -X PUT "localhost:9… --- ## [ES 5.6.10 default mapping field store Double and BigDecimal into string](https://discuss.elastic.co/t/es-5-6-10-default-mapping-field-store-double-and-bigdecimal-into-string/205966)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 2:39am UTC](https://discuss.elastic.co/t/es-5-6-10-default-mapping-field-store-double-and-bigdecimal-into-string/205966 "2019-10-31T02:39:20Z")
Hi guys , i use XContentBuilder as a source of Index Request to store my biz data, like this jsonBuilder() .startObject() .field("table", Constants.ES\_IDX\_REPAYMENT) .field("nation", repayment.getNation()) .field("a… --- ## [Drawing bar chart by custom timestamp field](https://discuss.elastic.co/t/drawing-bar-chart-by-custom-timestamp-field/205601)
**Author:** [@newkate12](https://discuss.elastic.co/u/newkate12)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 2:19am UTC](https://discuss.elastic.co/t/drawing-bar-chart-by-custom-timestamp-field/205601 "2019-10-31T02:19:11Z")
Hi I'm trying to draw simple bar chart using time series csv data. I've got the csv like this: TXN\_TIME,TAG\_ID,TAG\_VALUE 2019-10-28 09:03:00.532,TAG-001,"\[1,1,1,0,0...(so many boolean elements here)...,0,0\]" 2019-10-… --- ## [複数フィールドをまたいだ検索について](https://discuss.elastic.co/t/topic/205821)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 12:55am UTC](https://discuss.elastic.co/t/topic/205821 "2019-10-31T00:55:13Z")
{ "query": { "multi\_match":{ "query":"マラソン 札幌", "type":"cross\_fields", "operator":"and", "fields":\["competition","city"\] }}, "explain":true } 上記のようにmulti\_matchを使用した複数フィールドをまたいだ検索の場合、 fieldsに設定したfieldに検索文に当ては… --- ## [\[ERROR\]\[logstash.agent\] Failed to execute action "Expected one of #, {, } at line 161, column 185 (byte 16646) after input {\\r\\n\\tjdbc {\\r\\n\\t\\tjdbc\_driver\_library =\> \\](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566)
**Author:** [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 12:55am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566 "2019-10-31T00:55:01Z")
Hi I get this error message while trying to indexing data to elasticsearch. Does anyone have an idea what could cause this error? \[2019-10-04T17:00:02,272\]\[ERROR\]\[logstash.agent\] Failed to execute ac tion {:action=\>L… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1806) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1808)