# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1848 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1849 --- ## [How to filter out a few inner objects from search query results](https://discuss.elastic.co/t/how-to-filter-out-a-few-inner-objects-from-search-query-results/203080)
**Author:** [@smaheshbhat](https://discuss.elastic.co/u/smaheshbhat)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 5:50pm UTC](https://discuss.elastic.co/t/how-to-filter-out-a-few-inner-objects-from-search-query-results/203080 "2019-10-10T17:50:03Z")
Hi, I have the following schema and two documents and a search query on them. I want to know how can I only display specific language's names and descriptions in each of my search result. For example in the query result… --- ## [Иерархическое применение синонимов](https://discuss.elastic.co/t/topic/202995)
**Author:** [@LLIyMAXEP](https://discuss.elastic.co/u/LLIyMAXEP)\ **Replies:** 9\ **Last updated:** [October 10, 2019, 3:20pm UTC](https://discuss.elastic.co/t/topic/202995 "2019-10-10T15:20:09Z")
Добрый день. Немного запутался с концепцией multiword synonyms. Объясню на примерах. Индекс и документы: PUT test\_index1 { "mappings": { "doc": { "properties": { "full\_text": { "type": "t… --- ## [Using aggregate to add data to previous event](https://discuss.elastic.co/t/using-aggregate-to-add-data-to-previous-event/202904)
**Author:** [@Factor3](https://discuss.elastic.co/u/Factor3)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 5:37pm UTC](https://discuss.elastic.co/t/using-aggregate-to-add-data-to-previous-event/202904 "2019-10-10T17:37:56Z")
Hi, I have a logfile that looks like this: 61f3483e-e7f4-4202-b34a-d85108f0fea9 - some log line 61f3483e-e7f4-4202-b34a-d85108f0fea9 - some other log line ID=123456 61f3483e-e7f4-4202-b34a-d85108f0fea9 - another log lin… --- ## [Parse JSON stringified value of a field of an object in the array of objects](https://discuss.elastic.co/t/parse-json-stringified-value-of-a-field-of-an-object-in-the-array-of-objects/202791)
**Author:** [@xibal](https://discuss.elastic.co/u/xibal)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 4:58pm UTC](https://discuss.elastic.co/t/parse-json-stringified-value-of-a-field-of-an-object-in-the-array-of-objects/202791 "2019-10-10T16:58:41Z")
Hi all, I've been migrating order & order items one-to-many relation from MySQL into ES using Logstash. With the help of filter aggregation for my joined SQL, the items become a nested property under each order and the… --- ## [Logstash sends logs with wrong @timestamp](https://discuss.elastic.co/t/logstash-sends-logs-with-wrong-timestamp/202677)
**Author:** [@kausar](https://discuss.elastic.co/u/kausar)\ **Replies:** 10\ **Last updated:** [October 10, 2019, 4:52pm UTC](https://discuss.elastic.co/t/logstash-sends-logs-with-wrong-timestamp/202677 "2019-10-10T16:52:51Z")
Hi, I have two logstash servers that writes to Elasticsearch. Filebeat reads logs from file and sends them to these logstash servers. I am conducting a test for failover/outage and also what will happen if both the logs… --- ## [ELK Cluster - Role of master node](https://discuss.elastic.co/t/elk-cluster-role-of-master-node/202867)
**Author:** [@Farhan\_Umer](https://discuss.elastic.co/u/Farhan_Umer)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 4:27pm UTC](https://discuss.elastic.co/t/elk-cluster-role-of-master-node/202867 "2019-10-10T16:27:51Z")
In an ELK cluster, does master node and data node keep same copy of shards? In case of failure of master node or data node, will we have a copy of indices on the other node? Like if master is lost, will i be able to use … --- ## [Populating pipeline env variable with array of values](https://discuss.elastic.co/t/populating-pipeline-env-variable-with-array-of-values/203052)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 4:05pm UTC](https://discuss.elastic.co/t/populating-pipeline-env-variable-with-array-of-values/203052 "2019-10-10T16:05:53Z")
Hi All, I´m trying to move from a single note cluster to the following configuration, esentially adding two ES notes for redundancy. es1, es2, es3, Kibana Logstash Multiple filebeats I have successfully configured … --- ## [How to apply json parser for particular grok parsed field and get new json parsed fields](https://discuss.elastic.co/t/how-to-apply-json-parser-for-particular-grok-parsed-field-and-get-new-json-parsed-fields/203064)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 3:46pm UTC](https://discuss.elastic.co/t/how-to-apply-json-parser-for-particular-grok-parsed-field-and-get-new-json-parsed-fields/203064 "2019-10-10T15:46:59Z")
Hi there! I'd like to have already parsed field app\_message additionally parsed with fields like language, companyEmail, country , Please suggest the proper way to do this. \ #@i… --- ## [Advice on parsing a JSON log](https://discuss.elastic.co/t/advice-on-parsing-a-json-log/202968)
**Author:** [@Callum.wyres](https://discuss.elastic.co/u/Callum.wyres)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 3:21pm UTC](https://discuss.elastic.co/t/advice-on-parsing-a-json-log/202968 "2019-10-10T15:21:36Z")
Hi, We are currently experience some issues parsing our JSON logs from filebeat to elasticsearch. An example of a log being sent is: "{"log":"{\\"level\\":30,\\"time\\":1570692192768,\\"msg\\":\\"APP\_STARTED\\",\\"pid\\":1,\\"ho… --- ## [Calculate Average of each category in Array](https://discuss.elastic.co/t/calculate-average-of-each-category-in-array/202503)
**Author:** [@WatsonS](https://discuss.elastic.co/u/WatsonS)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 2:49pm UTC](https://discuss.elastic.co/t/calculate-average-of-each-category-in-array/202503 "2019-10-10T14:49:51Z")
Hello Everyone, I'm building an accommodation rating system where one rating input contain 5 categories with the example structure collected in an array: "submitted\_rating" : \[ { "rating": 4, "title": "Travel" }, {… --- ## [Snapshot lifecycle management in basic version of elastic](https://discuss.elastic.co/t/snapshot-lifecycle-management-in-basic-version-of-elastic/202856)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 2:32pm UTC](https://discuss.elastic.co/t/snapshot-lifecycle-management-in-basic-version-of-elastic/202856 "2019-10-10T14:32:41Z")
Hi Can someone Please provide step by step process for slm in elastic search basic 7.x version. I had tried post /\_slm/my policy name .. It is not recognizing giving error like index name error. Please help me to sol… --- ## [DSL query for "exact" match in fuzzy searches](https://discuss.elastic.co/t/dsl-query-for-exact-match-in-fuzzy-searches/203026)
**Author:** [@Luigi\_Bardelli](https://discuss.elastic.co/u/Luigi_Bardelli)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 2:17pm UTC](https://discuss.elastic.co/t/dsl-query-for-exact-match-in-fuzzy-searches/203026 "2019-10-10T14:17:26Z")
(newbie here, I hope it's the correct forum) Hi all, I am using elastic to do some fuzzy searches on few indexed text fields, so far so good. My question: I would like to limit the results as follows: Let's say that … --- ## [How to create secure connection with elasticsearch in ruby client? help](https://discuss.elastic.co/t/how-to-create-secure-connection-with-elasticsearch-in-ruby-client-help/203041)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 1:57pm UTC](https://discuss.elastic.co/t/how-to-create-secure-connection-with-elasticsearch-in-ruby-client-help/203041 "2019-10-10T13:57:47Z")
How to create secure connection with elasticsearch in ruby client? --- ## [Logstash and multiple configurations](https://discuss.elastic.co/t/logstash-and-multiple-configurations/203029)
**Author:** [@beren](https://discuss.elastic.co/u/beren)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 1:02pm UTC](https://discuss.elastic.co/t/logstash-and-multiple-configurations/203029 "2019-10-10T13:02:57Z")
Hi Theoretical question How does logstash understand which logs to handle ? That is, we have configurations in the postfix folder.conf (for Postfix processing), Nginx (for nginx) they look like this . input { beats { … --- ## [Alias Datatype with multi-fields value](https://discuss.elastic.co/t/alias-datatype-with-multi-fields-value/203028)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 1:00pm UTC](https://discuss.elastic.co/t/alias-datatype-with-multi-fields-value/203028 "2019-10-10T13:00:30Z")
Hi All, I am trying to creating a mapping with aliases that involve mapping to a multifield property. However, I am running into errors. I have read the docs on the alias datatype, however I don't think it is clear enou… --- ## [Parse inner JSON and split by it](https://discuss.elastic.co/t/parse-inner-json-and-split-by-it/202973)
**Author:** [@Prolog](https://discuss.elastic.co/u/Prolog)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 12:55pm UTC](https://discuss.elastic.co/t/parse-inner-json-and-split-by-it/202973 "2019-10-10T12:55:24Z")
Hi, I have a JSON coming from RabbitMQ structured as shown below: { "MessageItemsCount": 8106, "Message": "\[{\\"Id\\":\\"Foo\_123\_456\\",\\"NetworkShopId\\":\\"333\\",\\"Name\\":\\"Some product\\",\\"Descr… --- ## [Logstash - aggregate messages - start with new line](https://discuss.elastic.co/t/logstash-aggregate-messages-start-with-new-line/202920)
**Author:** [@Vincent\_Chen](https://discuss.elastic.co/u/Vincent_Chen)\ **Replies:** 3\ **Last updated:** [October 10, 2019, 12:49pm UTC](https://discuss.elastic.co/t/logstash-aggregate-messages-start-with-new-line/202920 "2019-10-10T12:49:46Z")
Hi everyone, I am trying to aggregate events related to the same transaction. The aggregate part works fine, I am able to merge all related events into the same field. But I want each event to be placed at a newline. S… --- ## [Writing and Reading a text file from Elasticsearch Plugin](https://discuss.elastic.co/t/writing-and-reading-a-text-file-from-elasticsearch-plugin/203022)
**Author:** [@Eeshan](https://discuss.elastic.co/u/Eeshan)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 12:49pm UTC](https://discuss.elastic.co/t/writing-and-reading-a-text-file-from-elasticsearch-plugin/203022 "2019-10-10T12:49:45Z")
Hi, I am working on a plugin, which generates meta-data from indexed documents. During the generation of this meta-data, I want to store some temporary data in a file and again read that file in future. The output of th… --- ## [Export Users/Roles/Dashboards between instances](https://discuss.elastic.co/t/export-users-roles-dashboards-between-instances/202798)
**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\ **Replies:** 1\ **Last updated:** [October 9, 2019, 10:21pm UTC](https://discuss.elastic.co/t/export-users-roles-dashboards-between-instances/202798 "2019-10-09T22:21:33Z")
We are using a dev env to trial user/role/dashboard development and would like to use a CI/CD pipeline to reflect all the changes to another instance of ECE is there any method of exporting the saved objects/users betwee… --- ## [Number format exception for geo\_point field](https://discuss.elastic.co/t/number-format-exception-for-geo-point-field/201759)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 6\ **Last updated:** [October 10, 2019, 12:45pm UTC](https://discuss.elastic.co/t/number-format-exception-for-geo-point-field/201759 "2019-10-10T12:45:11Z")
Hi, in elasticsearch log file, we often see this \[2019-10-01 09:39:10,694\]\[INFO \]\[rest.suppressed \] /my\_index/my\_type/1569915520584.1689070526/\_update Params: {version\_type=force, doc\_as\_upsert=true, index=my\_i… --- ## [Match\_phrase\_prefix in Elasticsearch 7.3.0](https://discuss.elastic.co/t/match-phrase-prefix-in-elasticsearch-7-3-0/202894)
**Author:** [@valentine-dev](https://discuss.elastic.co/u/valentine-dev)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 12:44pm UTC](https://discuss.elastic.co/t/match-phrase-prefix-in-elasticsearch-7-3-0/202894 "2019-10-10T12:44:24Z")
Why I got 7 results for "6531 148 str" but no results for "6531 148 st"? Is it because there are more than 50 terms in the sorted term dictionary between "st" and "str" based on https://www.elastic.co/guide/en/elasticse… --- ## [Whitelist in AWS Elastic Search 6.5.4 host](https://discuss.elastic.co/t/whitelist-in-aws-elastic-search-6-5-4-host/203015)
**Author:** [@Liz\_Miller](https://discuss.elastic.co/u/Liz_Miller)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 12:38pm UTC](https://discuss.elastic.co/t/whitelist-in-aws-elastic-search-6-5-4-host/203015 "2019-10-10T12:38:54Z")
Hello, I'm trying to upgrade a 2.3 cluster to 6.5.4 by creating a new cluster of 6.5.4 and trying to pull the documents from the old 2.3. I'm following this guide: https://www.elastic.co/guide/en/elasticsearch/referen… --- ## [Watcher - Action formating message](https://discuss.elastic.co/t/watcher-action-formating-message/203017)
**Author:** [@cesarlino](https://discuss.elastic.co/u/cesarlino)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 12:34pm UTC](https://discuss.elastic.co/t/watcher-action-formating-message/203017 "2019-10-10T12:34:26Z")
Hi, I am playing with Watcher to setup an alert for certain threshold. If condition is met, then I want to send a message via Slack with the aggregated value. Everything is working perfectly, except the number looks lik… --- ## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/202998)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 12:12pm UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/202998 "2019-10-10T12:12:21Z")
I am using ElasticSearch 6.5, invoking commands by Kibana 6.5. My documents have user field which is an array of user structures. I want to construct a script, that will update some of the structures in this array based… --- ## [How do we add features like did you mean this and suggestion](https://discuss.elastic.co/t/how-do-we-add-features-like-did-you-mean-this-and-suggestion/203013)
**Author:** [@SalmanZahid96](https://discuss.elastic.co/u/SalmanZahid96)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 12:10pm UTC](https://discuss.elastic.co/t/how-do-we-add-features-like-did-you-mean-this-and-suggestion/203013 "2019-10-10T12:10:09Z")
I am making a search engine using elasticsearch in which i want some features like 'Did you mean this' and 'Suggestions' like google does. My index contains a document like this: { "نام" : "قرآنی انسائیکلوپیڈیا", "… --- ## [Kibana Canvas Clock](https://discuss.elastic.co/t/kibana-canvas-clock/202547)
**Author:** [@richard\_hobbs](https://discuss.elastic.co/u/richard_hobbs)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 12:00pm UTC](https://discuss.elastic.co/t/kibana-canvas-clock/202547 "2019-10-10T12:00:07Z")
Hi All, I am sure i have seen this somewhere here but having a long search i cannot seem to find it now, but i am looking to add a simple clock onto my canvas as i say i did find a topic here once but when i used the e… --- ## [CircuitBreakingException: \[parent\] Data too large IN ES 7.x](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-in-es-7-x/192801)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 18\ **Last updated:** [October 10, 2019, 11:26am UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-in-es-7-x/192801 "2019-10-10T11:26:49Z")
Cluster always get CircuitBreakingException after update to ES7.x, especially running recovery tasks or indexing large data: \[internal:index/shard/recovery/start\_recovery\] or \[cluster:monitor/nodes/info\[n\]\], then node le… --- ## [G1GC cause CircuitBreakingException: \[parent\] Data too large on 7.1.1](https://discuss.elastic.co/t/g1gc-cause-circuitbreakingexception-parent-data-too-large-on-7-1-1/187272)
**Author:** [@Wing924](https://discuss.elastic.co/u/Wing924)\ **Replies:** 39\ **Last updated:** [October 10, 2019, 11:26am UTC](https://discuss.elastic.co/t/g1gc-cause-circuitbreakingexception-parent-data-too-large-on-7-1-1/187272 "2019-10-10T11:26:20Z")
Elasticsearch version ( bin/elasticsearch --version ): 7.1.1 Plugins installed : none JVM version ( java -version ): openjdk version "11.0.3" 2019-04-16 LTS OpenJDK Runtime Environment 18.9 (build 11.0.3+7-LTS) … --- ## [Can I access the field values in top hits aggs?](https://discuss.elastic.co/t/can-i-access-the-field-values-in-top-hits-aggs/202983)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 0\ **Last updated:** [October 10, 2019, 8:59am UTC](https://discuss.elastic.co/t/can-i-access-the-field-values-in-top-hits-aggs/202983 "2019-10-10T08:59:45Z")
my data.... {"first\_seq":"aa", "second\_seq":1, "status":"LOADING"} {"first\_seq":"aa", "second\_seq":2, "status":"LOADING"} {"first\_seq":"aa", "second\_seq":3, "status":"LOADING"} {"first\_seq":"aa", "second\_seq":4, "sta… --- ## [Unifying Log4j 2 layouts and EcsLayout](https://discuss.elastic.co/t/unifying-log4j-2-layouts-and-ecslayout/197698)
**Author:** [@vyazici](https://discuss.elastic.co/u/vyazici)\ **Replies:** 8\ **Last updated:** [October 10, 2019, 11:07am UTC](https://discuss.elastic.co/t/unifying-log4j-2-layouts-and-ecslayout/197698 "2019-10-10T11:07:29Z")
Dear fellow Elastic developers, I am the maintainer of the log4j2-logstash-layout project, the fastest and the only fully customizable JSON layout plugin for Log4j 2: LogstashLayout. A couple of days ago (2019-08-30) Fe… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1847) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1849)