# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1901 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1902 --- ## [Сортировка по началу запроса](https://discuss.elastic.co/t/topic/198575)
**Author:** [@111206](https://discuss.elastic.co/u/111206)\ **Replies:** 19\ **Last updated:** [September 12, 2019, 7:22pm UTC](https://discuss.elastic.co/t/topic/198575 "2019-09-12T19:22:46Z")
Использую эластик как поиск вместо БД. Не могу добиться правильной релевантности результатов и не очень понимаю в какую сторону копать. Нужна помошь в этом понимании. Есть поле "наименование" и хочется видеть по нему р… --- ## [Filtering Specific Events from Logstash to a SIEM](https://discuss.elastic.co/t/filtering-specific-events-from-logstash-to-a-siem/199312)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 0\ **Last updated:** [September 12, 2019, 6:29pm UTC](https://discuss.elastic.co/t/filtering-specific-events-from-logstash-to-a-siem/199312 "2019-09-12T18:29:33Z")
HI, Right now we have logstash up and running and sending a large volume of logs to elasticsearch which are searchable using kibana. Can a filter be built to send just specific use cases to another location such as Ar… --- ## [Upsert is throwing DocumentMissingException](https://discuss.elastic.co/t/upsert-is-throwing-documentmissingexception/199307)
**Author:** [@ygoel](https://discuss.elastic.co/u/ygoel)\ **Replies:** 0\ **Last updated:** [September 12, 2019, 6:17pm UTC](https://discuss.elastic.co/t/upsert-is-throwing-documentmissingexception/199307 "2019-09-12T18:17:17Z")
I am using Spring Boot and ElasticSearch. When I am trying to upsert using Spring, it is throwing DocumentMissingException when there is no document present in the ElasticSearch. The same code works fine when there is a … --- ## [Update strategy for SQL server into elastic search](https://discuss.elastic.co/t/update-strategy-for-sql-server-into-elastic-search/199309)
**Author:** [@jonakirke94](https://discuss.elastic.co/u/jonakirke94)\ **Replies:** 0\ **Last updated:** [September 12, 2019, 6:23pm UTC](https://discuss.elastic.co/t/update-strategy-for-sql-server-into-elastic-search/199309 "2019-09-12T18:23:42Z")
Hi everyone. I'm trying to code along this \[guide\]( guide https://www.elastic.co/blog/how-to-keep-elasticsearch-synchronized-with-a-relational-database-using-logstash) but doing it in MSSQL First off there is no UNIX\_T… --- ## [Send message failed from dedicated ingest nodes to masters 7.3.1](https://discuss.elastic.co/t/send-message-failed-from-dedicated-ingest-nodes-to-masters-7-3-1/198454)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 6:03pm UTC](https://discuss.elastic.co/t/send-message-failed-from-dedicated-ingest-nodes-to-masters-7-3-1/198454 "2019-09-12T18:03:18Z")
We have 3 dedicated ingest nodes in a cluster. They are functioning and data is coming into ES, but they are logging constantly "send messsage failed". No idea why ... logs about every few seconds from each ingest node a… --- ## [Index has exceeded \[1000000\] - maximum allowed to be analyzed for highlighting](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273)
**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\ **Replies:** 2\ **Last updated:** [September 12, 2019, 6:01pm UTC](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273 "2019-09-12T18:01:22Z")
Hello, I've came across strange problem when trying to get postgresql logs using Filebeats to elasticsearch and displaying it using kibana. I have configured elasticsearch with kibana and logstash on one of my server a… --- ## [Index has exceeded \[xxx\] - maximum allowed to be analyzed for highlighting](https://discuss.elastic.co/t/index-has-exceeded-xxx-maximum-allowed-to-be-analyzed-for-highlighting/199303)
**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\ **Replies:** 0\ **Last updated:** [September 12, 2019, 5:59pm UTC](https://discuss.elastic.co/t/index-has-exceeded-xxx-maximum-allowed-to-be-analyzed-for-highlighting/199303 "2019-09-12T17:59:48Z")
Hello, I've came across strange problem when trying to get postgresql logs using Filebeats to elasticsearch and displaying it using kibana. I've previously asked about it on kibana forum but I've been told to ask here. … --- ## [Multiple language analyzers for one field](https://discuss.elastic.co/t/multiple-language-analyzers-for-one-field/199271)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 5:30pm UTC](https://discuss.elastic.co/t/multiple-language-analyzers-for-one-field/199271 "2019-09-12T17:30:50Z")
Hi there, I am logstashing a table with a column that contains multiple languages into Elasticsearch. There is another column that can be used to indicate the language. So how can I use different language analyzers for o… --- ## [Creating a custom visualization with if/switch statement](https://discuss.elastic.co/t/creating-a-custom-visualization-with-if-switch-statement/198738)
**Author:** [@druffner](https://discuss.elastic.co/u/druffner)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 5:28pm UTC](https://discuss.elastic.co/t/creating-a-custom-visualization-with-if-switch-statement/198738 "2019-09-12T17:28:59Z")
Hey Forum, I am working on creating a dashboard based on connections that are made to a particular node. One of the things that I have visualized is the top 5 destination port numbers as an aggregate of all of the conne… --- ## [Quickstart "health" and "phase" are empty](https://discuss.elastic.co/t/quickstart-health-and-phase-are-empty/198164)
**Author:** [@shirishatideal](https://discuss.elastic.co/u/shirishatideal)\ **Replies:** 8\ **Last updated:** [September 12, 2019, 5:23pm UTC](https://discuss.elastic.co/t/quickstart-health-and-phase-are-empty/198164 "2019-09-12T17:23:44Z")
I am trying ECK but got stuck right at start, $ kubectl get elasticsearch quickstart NAME HEALTH NODES VERSION PHASE AGE quickstart 7.2.0 24m Kubernetes - v1.15.3 Cent… --- ## [Calculate number of occurrences of an event and then get total percentage out of whole](https://discuss.elastic.co/t/calculate-number-of-occurrences-of-an-event-and-then-get-total-percentage-out-of-whole/198903)
**Author:** [@parmeet\_devops](https://discuss.elastic.co/u/parmeet_devops)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 5:04pm UTC](https://discuss.elastic.co/t/calculate-number-of-occurrences-of-an-event-and-then-get-total-percentage-out-of-whole/198903 "2019-09-12T17:04:46Z")
I am trying to calculate the total number of occurrence of an metric (Which I am able to visualize) and then I want to calculate the percentage of occurrence out of total requests. For example: I have a metric ABC\_Code… --- ## [How to plot months on the x axis, count on the y axis and have terms displayed](https://discuss.elastic.co/t/how-to-plot-months-on-the-x-axis-count-on-the-y-axis-and-have-terms-displayed/198951)
**Author:** [@nizztizz](https://discuss.elastic.co/u/nizztizz)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 4:57pm UTC](https://discuss.elastic.co/t/how-to-plot-months-on-the-x-axis-count-on-the-y-axis-and-have-terms-displayed/198951 "2019-09-12T16:57:23Z")
I want to plot a vertical bar graph where months would be at the bottom (x axis) and count would be on the y axis and I am graphing a term for each month. So i get total hits for each month for that term. --- ## [I'm so CONFUSE with the UNIQUE COUNT](https://discuss.elastic.co/t/im-so-confuse-with-the-unique-count/199005)
**Author:** [@Iceph](https://discuss.elastic.co/u/Iceph)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 4:53pm UTC](https://discuss.elastic.co/t/im-so-confuse-with-the-unique-count/199005 "2019-09-12T16:53:27Z")
on my work i used the Unique count metric and suppose the value is 6 \<\< remember this value and then i would make a metric visualization i used unique count and i play value is 6 still ok but then I Filters this on … --- ## [Error attempting to use absolute date time ranges for Date Histogram](https://discuss.elastic.co/t/error-attempting-to-use-absolute-date-time-ranges-for-date-histogram/199098)
**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 4:51pm UTC](https://discuss.elastic.co/t/error-attempting-to-use-absolute-date-time-ranges-for-date-histogram/199098 "2019-09-12T16:51:55Z")
Using Kibana 7.1.1 I am attempting to create a Date Histogram Visualization from log data from an older log file that was parsed using Logstash. I want the histogram X-Axis to only show an absolute time frame like 20190… --- ## [readFromDocValues attribute from Kibana saved objects API](https://discuss.elastic.co/t/readfromdocvalues-attribute-from-kibana-saved-objects-api/199118)
**Author:** [@Ailurus](https://discuss.elastic.co/u/Ailurus)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 4:46pm UTC](https://discuss.elastic.co/t/readfromdocvalues-attribute-from-kibana-saved-objects-api/199118 "2019-09-12T16:46:50Z")
Hello, I recently upgraded my ELK stack from 5.6 to 6.8. I noticed there is now a Kibana REST API to perform CRUD operations on saved objects such as index pattern. After using it to retrieve some index pattern I saw … --- ## [Failed to connect to server\_name:9200 connection refused](https://discuss.elastic.co/t/failed-to-connect-to-server-name-9200-connection-refused/199211)
**Author:** [@prakashdev](https://discuss.elastic.co/u/prakashdev)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 3:11pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-server-name-9200-connection-refused/199211 "2019-09-12T15:11:48Z")
Hi, I am using elastic search 7.3.1 in windows server 2012. I am able to use all functionalities in the localhost, but I want to access es outside of the server. I am having the IP and port configuration in the elastics… --- ## [Bound or publishing to a non-loopback address, enforcing bootstrap checks](https://discuss.elastic.co/t/bound-or-publishing-to-a-non-loopback-address-enforcing-bootstrap-checks/199276)
**Author:** [@Ersoy\_Vatansever](https://discuss.elastic.co/u/Ersoy_Vatansever)\ **Replies:** 6\ **Last updated:** [September 12, 2019, 2:59pm UTC](https://discuss.elastic.co/t/bound-or-publishing-to-a-non-loopback-address-enforcing-bootstrap-checks/199276 "2019-09-12T14:59:14Z")
Hi , i decied to use elastic on linux centos but i cant resolved below issue. I have two servers with same configurations. Elastic works separately but cannot be cluster and i see log below. Elasticsearch version is 7.… --- ## [Is it possible to get basic license for Elasticsearch 1.x?](https://discuss.elastic.co/t/is-it-possible-to-get-basic-license-for-elasticsearch-1-x/199263)
**Author:** [@Domas\_Stockus](https://discuss.elastic.co/u/Domas_Stockus)\ **Replies:** 5\ **Last updated:** [September 12, 2019, 2:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-basic-license-for-elasticsearch-1-x/199263 "2019-09-12T14:56:16Z")
Basically, the main question is in the title. I registered here https://license.elastic.co/registration/ and got the email with the link to download the license. Only there is no 1.x version. In the Email next to the 1.x… --- ## [Подскажите по разделению на два типа лога в разные индексы через filebeat -\> logstash -\> elastic](https://discuss.elastic.co/t/filebeat-logstash-elastic/198834)
**Author:** [@Jhonny-2005](https://discuss.elastic.co/u/Jhonny-2005)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-logstash-elastic/198834 "2019-09-12T14:40:23Z")
Добрый день. Я только начинающий в настройке. Есть два типа логов. Собственно лог1 и лог2. Мне нужно, чтобы по ним было создано два типа индекса. И обрабатывались они по разным фильтрам. В Filebeat сделал такие настрой… --- ## [Error while trying to connect elastic search with curator](https://discuss.elastic.co/t/error-while-trying-to-connect-elastic-search-with-curator/199269)
**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 2:35pm UTC](https://discuss.elastic.co/t/error-while-trying-to-connect-elastic-search-with-curator/199269 "2019-09-12T14:35:44Z")
Hi , "I have installed curator using sudo apt-get update && sudo apt-get install elasticsearch-curator" When i am trying to run the following command curator --dry-run snapshot.yml --config curator.yml. Getting belo… --- ## [Pin search results in a specific order](https://discuss.elastic.co/t/pin-search-results-in-a-specific-order/199267)
**Author:** [@pocguy](https://discuss.elastic.co/u/pocguy)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 2:20pm UTC](https://discuss.elastic.co/t/pin-search-results-in-a-specific-order/199267 "2019-09-12T14:20:09Z")
Suppose a search for a query "test" return results based on the relevancy , e.g : Page 1, Page 3, Page 2, Page 4. Is it possible that we could within a single Elasticsearch query API order the results as Page 1, Page 2… --- ## [Filebeat modules + Elastic Cloud](https://discuss.elastic.co/t/filebeat-modules-elastic-cloud/197906)
**Author:** [@gerard1](https://discuss.elastic.co/u/gerard1)\ **Replies:** 2\ **Last updated:** [September 12, 2019, 2:18pm UTC](https://discuss.elastic.co/t/filebeat-modules-elastic-cloud/197906 "2019-09-12T14:18:18Z")
I'm following the official documentation to try out Filebeat modules, together with Elastic Cloud, but I'm getting this error when generating some log files. filebeat | 2019-09-03T16:18:31.368Z ERROR elasticsearch/clien… --- ## [Elastic SIEM + snort](https://discuss.elastic.co/t/elastic-siem-snort/199078)
**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\ **Replies:** 4\ **Last updated:** [September 12, 2019, 2:16pm UTC](https://discuss.elastic.co/t/elastic-siem-snort/199078 "2019-09-12T14:16:27Z")
Добрый день. Можно ли добавить в SIEM данные Snort? Как это сделать? --- ## [Send file with logstash output plugin](https://discuss.elastic.co/t/send-file-with-logstash-output-plugin/199265)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 0\ **Last updated:** [September 12, 2019, 2:00pm UTC](https://discuss.elastic.co/t/send-file-with-logstash-output-plugin/199265 "2019-09-12T14:00:26Z")
I'm trying to send a .json file from a pc to another with logstash. This is the configuration of sender: input { file { path =\> "/var/log/event.json" sincedb\_path =\> "/var/log/sincedb/.sincedb\_test" start\_… --- ## [How do I combine 2 index data in elasticsearch?](https://discuss.elastic.co/t/how-do-i-combine-2-index-data-in-elasticsearch/199044)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 21\ **Last updated:** [September 12, 2019, 1:53pm UTC](https://discuss.elastic.co/t/how-do-i-combine-2-index-data-in-elasticsearch/199044 "2019-09-12T13:53:23Z")
How do I combine 2 index data in elasticsearch? Example; 1.index data = {appId,name,clasId} 2.index data={clasId,name,description} 1.index via clasId 2.index class name how do I pull ? --- ## [Elasticsearch exceptions while trying to update geoshape field](https://discuss.elastic.co/t/elasticsearch-exceptions-while-trying-to-update-geoshape-field/199176)
**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-while-trying-to-update-geoshape-field/199176 "2019-09-12T13:47:16Z")
Hi I have been getting the following elasticsearch exception when i try to update a geo\_shape field from circle to polygon using java high level rest client. Can someone please help? {"error":{"root\_cause":\[{"type":"pa… --- ## [7.2.0 spend more time on query \`next\_doc\` and aggregation \`collect\` than 6.8.0](https://discuss.elastic.co/t/7-2-0-spend-more-time-on-query-next-doc-and-aggregation-collect-than-6-8-0/196489)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 13\ **Last updated:** [September 12, 2019, 1:46pm UTC](https://discuss.elastic.co/t/7-2-0-spend-more-time-on-query-next-doc-and-aggregation-collect-than-6-8-0/196489 "2019-09-12T13:46:55Z")
Recently，we upgrade our es cluster to 7.2.0 and find the same search took time is longer than 6.8.0 . so we prepare for two cluster (7.2 and 6.8) with same index data set , same mapping, and execute same search. we fou… --- ## [X-Pack watcher permissions](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234)
**Author:** [@bhaniel](https://discuss.elastic.co/u/bhaniel)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 1:39pm UTC](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234 "2019-09-12T13:39:11Z")
Hello, I wanted to understand how the watcher permissions is working . for example i am a user with permission to index x but i don't have a permission to index y . currently i have permission watcher/admin , does t… --- ## [Embedding kibana visualisation](https://discuss.elastic.co/t/embedding-kibana-visualisation/198918)
**Author:** [@whitediver](https://discuss.elastic.co/u/whitediver)\ **Replies:** 4\ **Last updated:** [September 12, 2019, 1:29pm UTC](https://discuss.elastic.co/t/embedding-kibana-visualisation/198918 "2019-09-12T13:29:54Z")
Then I try to embed visualization into my Kibana app I receive an error. webpack://%5Bname%5D/./node\_modules/angular/angular.js?:14928 SearchError: Couldn't find a search strategy for the search request at \_callee$ (htt… --- ## [Missing left menu](https://discuss.elastic.co/t/missing-left-menu/198410)
**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\ **Replies:** 2\ **Last updated:** [September 12, 2019, 1:29pm UTC](https://discuss.elastic.co/t/missing-left-menu/198410 "2019-09-12T13:29:22Z")
Hello, "Suddenly", the left menu disappeared on my browser when playing with Kibana from Firefox. When using private mode, I have no problems (see image below). I guess it's a cookie/cache/browser related stuff, any i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1900) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1902)