# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1856 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1857 --- ## [Complicated nested aggregation query in period interval](https://discuss.elastic.co/t/complicated-nested-aggregation-query-in-period-interval/202451)
**Author:** [@sevatal](https://discuss.elastic.co/u/sevatal)\ **Replies:** 0\ **Last updated:** [October 6, 2019, 2:12pm UTC](https://discuss.elastic.co/t/complicated-nested-aggregation-query-in-period-interval/202451 "2019-10-06T14:12:40Z")
We want to save historical information on a specific entity-type that our system creates and modify. This data will be used to run analytics and show charts about statistics over time. For simplicity let’s say it’s a Us… --- ## [RestHighLevelClient SocketTimeoutException](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443)
**Author:** [@zharenkov](https://discuss.elastic.co/u/zharenkov)\ **Replies:** 0\ **Last updated:** [October 6, 2019, 10:27am UTC](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443 "2019-10-06T10:27:10Z")
I've got ES cluster on Azure, and communicate with it from Spring Boot app using elasticsearch RestHighLevelClient. The bean in spring is the follow @Bean public RestHighLevelClient elasticsearchRestClient() { Cred… --- ## [Distribution List inside Kibana watcher](https://discuss.elastic.co/t/distribution-list-inside-kibana-watcher/201746)
**Author:** [@heisenburger](https://discuss.elastic.co/u/heisenburger)\ **Replies:** 2\ **Last updated:** [October 6, 2019, 8:57am UTC](https://discuss.elastic.co/t/distribution-list-inside-kibana-watcher/201746 "2019-10-06T08:57:33Z")
I am trying to build a distribution list for email addresses, and want to use it inside the watcher's email action. This is to replace the array of email-ids which are hard coded inside the watcher's metadata or directl… --- ## [Kibana Filtering](https://discuss.elastic.co/t/kibana-filtering/201681)
**Author:** [@paragj2005](https://discuss.elastic.co/u/paragj2005)\ **Replies:** 4\ **Last updated:** [October 6, 2019, 7:38am UTC](https://discuss.elastic.co/t/kibana-filtering/201681 "2019-10-06T07:38:33Z")
I have two fields Fname ( first name) Lname (last name). However there has been issue while data was put into the index and some places the Fname and Lname has been interchanged. Need filter where User can filter based … --- ## [Match Strings Exactly Within A BOOL](https://discuss.elastic.co/t/match-strings-exactly-within-a-bool/202398)
**Author:** [@drabid200](https://discuss.elastic.co/u/drabid200)\ **Replies:** 3\ **Last updated:** [October 6, 2019, 5:42am UTC](https://discuss.elastic.co/t/match-strings-exactly-within-a-bool/202398 "2019-10-06T05:42:34Z")
I very much struggle with the elasticsearch synatx. I have a query that almost works except for exact string matching on the labels.system\_id values in the below example. Specifying "West-1-a" returns records for "Nort… --- ## [Use variables (possibly set by Ruby) in Input](https://discuss.elastic.co/t/use-variables-possibly-set-by-ruby-in-input/202420)
**Author:** [@Mohamad\_Rahim](https://discuss.elastic.co/u/Mohamad_Rahim)\ **Replies:** 4\ **Last updated:** [October 5, 2019, 4:59pm UTC](https://discuss.elastic.co/t/use-variables-possibly-set-by-ruby-in-input/202420 "2019-10-05T16:59:02Z")
Hello all, So I'm using the http\_poller plugin to poll events off one of our SaaS subscriptions. The problem is that I need to specify the "From Date" and "To Date" statically. My question is how can I generate a vari… --- ## [Node config for split-brain avoidance](https://discuss.elastic.co/t/node-config-for-split-brain-avoidance/202386)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [October 5, 2019, 12:53pm UTC](https://discuss.elastic.co/t/node-config-for-split-brain-avoidance/202386 "2019-10-05T12:53:49Z")
We are currently running an ES cluster with 5 nodes in this config, with minimum\_master\_node sets to 2 and having only 3 nodes be master-eligible A: Master + Data B: Master + Data C: Master + Data D: Data E: Data As w… --- ## [Search query on elasticsearch returning different output every time](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818)
**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\ **Replies:** 3\ **Last updated:** [October 5, 2019, 9:28am UTC](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818 "2019-10-05T09:28:34Z")
Hi, I am facing weird issue on Elasticsearch 6.7.0 Our Elasticsearch cluster is a two-node cluster. which is refreshed daily through automation. The ES nodes are created daily and pushed data to ES from java app. Some… --- ## [Kibana Alerts configuration - Using ctx.results\[0\].hits.total](https://discuss.elastic.co/t/kibana-alerts-configuration-using-ctx-results-0-hits-total/199085)
**Author:** [@bharati](https://discuss.elastic.co/u/bharati)\ **Replies:** 2\ **Last updated:** [October 5, 2019, 8:42am UTC](https://discuss.elastic.co/t/kibana-alerts-configuration-using-ctx-results-0-hits-total/199085 "2019-10-05T08:42:35Z")
Hi, Im trying to use the ctx.results\[0\].hits.total variable as a part of the message of the triggered alert. I have added the alert message content as below Hi, An event has occured. Duration: from: {{ctx.periodSt… --- ## [Modify Legend Name](https://discuss.elastic.co/t/modify-legend-name/202079)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [October 5, 2019, 7:32am UTC](https://discuss.elastic.co/t/modify-legend-name/202079 "2019-10-05T07:32:09Z")
Hey All, I want to cut the legend naming. I searched for the topic within the community, but couldn't find an answer. Currently, the legend is created automatically by the buckets I have created. So the format is: \[B… --- ## [(meme) Thought we all needed a laugh on Elk 7.4](https://discuss.elastic.co/t/meme-thought-we-all-needed-a-laugh-on-elk-7-4/202409)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 0\ **Last updated:** [October 5, 2019, 3:01am UTC](https://discuss.elastic.co/t/meme-thought-we-all-needed-a-laugh-on-elk-7-4/202409 "2019-10-05T03:01:00Z")
--- ## [Custom name index kibana](https://discuss.elastic.co/t/custom-name-index-kibana/202262)
**Author:** [@TheSun](https://discuss.elastic.co/u/TheSun)\ **Replies:** 2\ **Last updated:** [October 5, 2019, 2:42am UTC](https://discuss.elastic.co/t/custom-name-index-kibana/202262 "2019-10-05T02:42:41Z")
Hi, I am handling pfsense data with ELK stack. But I have 2 pfsense. How to put data of each pfsense into a different index? I tried with logstash output but it didn't work. This is my configuration. Please!! help m… --- ## [Successfully indexing but not seeing on Kibana](https://discuss.elastic.co/t/successfully-indexing-but-not-seeing-on-kibana/202403)
**Author:** [@dalakada](https://discuss.elastic.co/u/dalakada)\ **Replies:** 1\ **Last updated:** [October 5, 2019, 1:21am UTC](https://discuss.elastic.co/t/successfully-indexing-but-not-seeing-on-kibana/202403 "2019-10-05T01:21:17Z")
I'm using this snipped of code \> from datetime import datetime from elasticsearch import Elasticsearch es = Elasticsearch("#MY ES ENDPOINT") doc = { 'author': 'kimchy', 'text': 'Elasticsearch: cool. bonsai cool.… --- ## [GC for persistent queue and LS clustering](https://discuss.elastic.co/t/gc-for-persistent-queue-and-ls-clustering/202400)
**Author:** [@stefsamm](https://discuss.elastic.co/u/stefsamm)\ **Replies:** 1\ **Last updated:** [October 5, 2019, 12:23am UTC](https://discuss.elastic.co/t/gc-for-persistent-queue-and-ls-clustering/202400 "2019-10-05T00:23:06Z")
I'm workin on switching our log aggregation from Graylog to full ELK setup. While reading on LS clustering found recommendation of adding queue.checkpoint.writes: 1 to the config to increase durability: https://www.elast… --- ## ["child "meta\_fields" fails because \["meta\_fields" must be an array\]" after configuring Kafka logs and metrics](https://discuss.elastic.co/t/child-meta-fields-fails-because-meta-fields-must-be-an-array-after-configuring-kafka-logs-and-metrics/202395)
**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\ **Replies:** 0\ **Last updated:** [October 4, 2019, 9:54pm UTC](https://discuss.elastic.co/t/child-meta-fields-fails-because-meta-fields-must-be-an-array-after-configuring-kafka-logs-and-metrics/202395 "2019-10-04T21:54:29Z")
I am running ES/Kibana 7.4.0 on Elastic Cloud and wanted to try out the "Kafka logs" and "Kafka metrics". I followed the instructions to install filebeat-7.4.0 and metricbeat-7.4.0 on my Kafka nodes (running on AWS EC2 l… --- ## [Is there a docker image for elasticsearch OSS version?](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299)
**Author:** [@cooldude30](https://discuss.elastic.co/u/cooldude30)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 9:43pm UTC](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299 "2019-10-04T21:43:14Z")
Is there a docker image for elasticsearch OSS version? If yes, can someone please provide the link for the same. I was not able to find one after my half an hour search. --- ## [Use Input Controls to filter Saved Search](https://discuss.elastic.co/t/use-input-controls-to-filter-saved-search/201915)
**Author:** [@Martin\_Ostlund](https://discuss.elastic.co/u/Martin_Ostlund)\ **Replies:** 1\ **Last updated:** [October 4, 2019, 9:35pm UTC](https://discuss.elastic.co/t/use-input-controls-to-filter-saved-search/201915 "2019-10-04T21:35:31Z")
Hello! Im using 7.3.2 of Elastic Stack. I have a Saved Search to filter all my Apache logs with a Filter: event.module: "apache" I've added this Saved Search to a Dashboard, where I've also an input control that popul… --- ## [\[Question\] Can you contribute a java logstash plugin to RubyGems.org](https://discuss.elastic.co/t/question-can-you-contribute-a-java-logstash-plugin-to-rubygems-org/202390)
**Author:** [@Xucito](https://discuss.elastic.co/u/Xucito)\ **Replies:** 0\ **Last updated:** [October 4, 2019, 9:14pm UTC](https://discuss.elastic.co/t/question-can-you-contribute-a-java-logstash-plugin-to-rubygems-org/202390 "2019-10-04T21:14:14Z")
I have a plugin to contribute the community, Can you push java plugins to RubyGems.org for easy installation or does that only work for JRuby plugins? Regards, Tony Nguyen --- ## [What tool is used for the "guide"](https://discuss.elastic.co/t/what-tool-is-used-for-the-guide/202378)
**Author:** [@haroutk](https://discuss.elastic.co/u/haroutk)\ **Replies:** 3\ **Last updated:** [October 4, 2019, 9:08pm UTC](https://discuss.elastic.co/t/what-tool-is-used-for-the-guide/202378 "2019-10-04T21:08:47Z")
Elastic has great docs with all the previous versions and the ability to edit an article and make a PR, multi-lang support... ( https://www.elastic.co/guide/en/elastic-stack-get-started/current/index.html ) anyways, ju… --- ## [Kibana 7 Feedback - UI for Creating filter](https://discuss.elastic.co/t/kibana-7-feedback-ui-for-creating-filter/202150)
**Author:** [@Johan\_Martensson](https://discuss.elastic.co/u/Johan_Martensson)\ **Replies:** 1\ **Last updated:** [October 4, 2019, 9:07pm UTC](https://discuss.elastic.co/t/kibana-7-feedback-ui-for-creating-filter/202150 "2019-10-04T21:07:48Z")
One of the features I use the most in Kibana is Filter -\> some indexed field -\> Is | Is one of | Is not | Is not one of -\> value\[,value\]\[,value\] Let's say I want to filter on field "severity" (our field for error leve… --- ## [Changing Kibana Password on Container](https://discuss.elastic.co/t/changing-kibana-password-on-container/201869)
**Author:** [@fjareta](https://discuss.elastic.co/u/fjareta)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 8:33pm UTC](https://discuss.elastic.co/t/changing-kibana-password-on-container/201869 "2019-10-04T20:33:37Z")
Hello guys! I have a problem and I can't solve it. I changed the default Elastic user password to one of my own, however I had some errors. I try to go back with the default password "changeme", but even changing the com… --- ## [Logstash overrides input tcp codec from JSON to JSON\_Lines](https://discuss.elastic.co/t/logstash-overrides-input-tcp-codec-from-json-to-json-lines/202375)
**Author:** [@dmalhan](https://discuss.elastic.co/u/dmalhan)\ **Replies:** 0\ **Last updated:** [October 4, 2019, 6:54pm UTC](https://discuss.elastic.co/t/logstash-overrides-input-tcp-codec-from-json-to-json-lines/202375 "2019-10-04T18:54:57Z")
My config file: input { tcp { port =\> 5044 codec =\> json } } Everytime I run logstash, I get the following in my startup logs: \[INFO \]\[logstash.inputs.tcp \] Automatically switching from j… --- ## [How to create a case-sensitive or an exact-match Filter for a given Index in the Discover screen?](https://discuss.elastic.co/t/how-to-create-a-case-sensitive-or-an-exact-match-filter-for-a-given-index-in-the-discover-screen/202261)
**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\ **Replies:** 1\ **Last updated:** [October 4, 2019, 6:42pm UTC](https://discuss.elastic.co/t/how-to-create-a-case-sensitive-or-an-exact-match-filter-for-a-given-index-in-the-discover-screen/202261 "2019-10-04T18:42:53Z")
Hi I want to create a case-sensitive filter inside the Discover screen for a given index data. So far my research has shown that the text search is only case-insensitive (lowercase). I would like to find out how to setu… --- ## [A kibana query with hot-warm-cold node](https://discuss.elastic.co/t/a-kibana-query-with-hot-warm-cold-node/201919)
**Author:** [@Kaiser\_Cheng](https://discuss.elastic.co/u/Kaiser_Cheng)\ **Replies:** 3\ **Last updated:** [October 4, 2019, 6:16pm UTC](https://discuss.elastic.co/t/a-kibana-query-with-hot-warm-cold-node/201919 "2019-10-04T18:16:30Z")
We have a index with daily-based indexing. For example, hot node for a weak data , warm for a month, then move to cold node. When we do a simple query in Kibana , ex doc count for last 15mins, how do we avoid searching… --- ## [Cannot delete documents with "!" in the \_id](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446)
**Author:** [@milleka2](https://discuss.elastic.co/u/milleka2)\ **Replies:** 4\ **Last updated:** [October 4, 2019, 6:09pm UTC](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446 "2019-10-04T18:09:49Z")
I have some records that I'm trying to either update or delete. All of them have an "!" in the \_id field, something I'd have never done if I were here when it was created :slight\_smile: The \_id looks like this: category… --- ## [How to calculate quantile from histogram bucket metrics](https://discuss.elastic.co/t/how-to-calculate-quantile-from-histogram-bucket-metrics/201333)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 5\ **Last updated:** [October 4, 2019, 5:42pm UTC](https://discuss.elastic.co/t/how-to-calculate-quantile-from-histogram-bucket-metrics/201333 "2019-10-04T17:42:33Z")
Hello! I am using spring boot and micro meter for application metrics. My spring boot application is pushing metrics about the latency to elastic search. I am using micrometers Percentile histograms - Micrometer accumu… --- ## [Simple Address Matching Application](https://discuss.elastic.co/t/simple-address-matching-application/202169)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 6\ **Last updated:** [October 4, 2019, 5:35pm UTC](https://discuss.elastic.co/t/simple-address-matching-application/202169 "2019-10-04T17:35:08Z")
Does anyone know anyone that can help us create an address matching indexing solution i.e. matching partial addresses to full official addresses. We have searched the globe but very few do this in .NET using the NEST A… --- ## [Trouble creating my first cluster with X-pack](https://discuss.elastic.co/t/trouble-creating-my-first-cluster-with-x-pack/202044)
**Author:** [@drtrask](https://discuss.elastic.co/u/drtrask)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 5:16pm UTC](https://discuss.elastic.co/t/trouble-creating-my-first-cluster-with-x-pack/202044 "2019-10-04T17:16:27Z")
Hello All! I am very new to elastic and have been given the job of upgrading our 3 sites from 6.6.1 to 7.4 To start I tried to create a cluster that mimics our sites. Just 3 master/data nodes with Kibana and Logstash. … --- ## [ElasticSearch Dies After 40 Seconds](https://discuss.elastic.co/t/elasticsearch-dies-after-40-seconds/195510)
**Author:** [@jboyes](https://discuss.elastic.co/u/jboyes)\ **Replies:** 19\ **Last updated:** [October 4, 2019, 4:27pm UTC](https://discuss.elastic.co/t/elasticsearch-dies-after-40-seconds/195510 "2019-10-04T16:27:08Z")
I was having issues with an installation of ElasticSearch, so I uninstalled and re-installed the service using yum (v5.6.16). Now, when I start the service, it runs for 40 seconds and then dies. There is nothing in the e… --- ## [Error consuming weblogic server topic using logstash-input-jms](https://discuss.elastic.co/t/error-consuming-weblogic-server-topic-using-logstash-input-jms/202366)
**Author:** [@Luis\_Carvalho](https://discuss.elastic.co/u/Luis_Carvalho)\ **Replies:** 0\ **Last updated:** [October 4, 2019, 4:24pm UTC](https://discuss.elastic.co/t/error-consuming-weblogic-server-topic-using-logstash-input-jms/202366 "2019-10-04T16:24:32Z")
Hi, I'm using logstash-7.3.2 and config the input with jms plugin to consume a Weblogic JMS topic, but i'm getting a "Unable to resolve 'weblogic.jms.backend.jms'. Resolved 'weblogic.jms.backend'". error. I already tes… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1855) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1857)