# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1958 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1959 --- ## [Libbeat common.Match not work with case insensitive](https://discuss.elastic.co/t/libbeat-common-match-not-work-with-case-insensitive/195315)
**Author:** [@111193](https://discuss.elastic.co/u/111193)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 11:57am UTC](https://discuss.elastic.co/t/libbeat-common-match-not-work-with-case-insensitive/195315 "2019-08-15T11:57:46Z")
beats document said filebeat suppport "(?i)" regexp I read the beats code,found it depend on beats/libbeat/common/match, but I found beats/libbeat/common/match does not work with "(?i)" option version: GitHub - elast… --- ## [How to fetch data from multi indices based on condition](https://discuss.elastic.co/t/how-to-fetch-data-from-multi-indices-based-on-condition/195006)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 5\ **Last updated:** [August 15, 2019, 11:41am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-multi-indices-based-on-condition/195006 "2019-08-15T11:41:22Z")
Dear All. i have two indices Index01 and index02. Condition 01:-1: in index01 have ducument/column id(1211) that is matching with index02. Condition 02:-1: in index02 we have same document/column id(1211) but i wan… --- ## [How to use Filebeat with a custom index and pattern](https://discuss.elastic.co/t/how-to-use-filebeat-with-a-custom-index-and-pattern/194730)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 3\ **Last updated:** [August 15, 2019, 10:37am UTC](https://discuss.elastic.co/t/how-to-use-filebeat-with-a-custom-index-and-pattern/194730 "2019-08-15T10:37:41Z")
I am using Filebeat for supported log formats and using the default index settings and mappings etc.. This is great.. Now i also want to send a custom JSON log file, also using Filebeat, but want to send it into it's o… --- ## [How can i parse the below data and add time stamp for the thread level events](https://discuss.elastic.co/t/how-can-i-parse-the-below-data-and-add-time-stamp-for-the-thread-level-events/195327)
**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\ **Replies:** 0\ **Last updated:** [August 15, 2019, 10:33am UTC](https://discuss.elastic.co/t/how-can-i-parse-the-below-data-and-add-time-stamp-for-the-thread-level-events/195327 "2019-08-15T10:33:15Z")
I want to parse the logs and add the datetime field value to the thread names. Below is my input logs: START the log printing 08/08/19 09:10:06 343 PID|THREAD NAME|CPU UTILIZATION|MEMORY UTILIZATION 7066|DestroyJav… --- ## [kibanaでエラー「Monitoring: Error 429」が出る件](https://discuss.elastic.co/t/kibana-monitoring-error-429/195132)
**Author:** [@yn2018](https://discuss.elastic.co/u/yn2018)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 10:31am UTC](https://discuss.elastic.co/t/kibana-monitoring-error-429/195132 "2019-08-15T10:31:25Z")
kibanaのmonitoringを触っていると以下のようにエラーが出ます。 エラーメッセージは以下のような感じです。 Monitoring: Error 429 : \[es\_rejected\_execution\_exception\] rejected execution of org.elasticsearch.transport.TransportService$7@c2f8810 on EsThreadPoolExec… --- ## [Unable to log in kibana with the created user](https://discuss.elastic.co/t/unable-to-log-in-kibana-with-the-created-user/195322)
**Author:** [@JasonJay](https://discuss.elastic.co/u/JasonJay)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 9:26am UTC](https://discuss.elastic.co/t/unable-to-log-in-kibana-with-the-created-user/195322 "2019-08-15T09:26:59Z")
I followed the doc to create a new user: configuring-security and I performed the following two requests curl -XPOST -u elastic 'localhost:9200/\_security/role/events\_admin' -H "Content-Type: application/json" -d '{ "… --- ## [Action \[indices:admin/create\] is unauthorized for user \[admin\]](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-admin/195175)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 9:23am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-admin/195175 "2019-08-15T09:23:27Z")
Hi team, my custom endpoint makes bulk update request. I have got the error when i send my data to custom endpoint via Postman(admin/password authorized). Admin has superuser power. { "update": { … --- ## [Elasticsearch.net help with mapping - C#](https://discuss.elastic.co/t/elasticsearch-net-help-with-mapping-c/194973)
**Author:** [@Bluesky](https://discuss.elastic.co/u/Bluesky)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-net-help-with-mapping-c/194973 "2019-08-15T08:35:44Z")
Hey there. I've a problem when i'm trying to mapping the following DSL query, in Visual Studio using Elasticsearch.net { "\_source": { "includes": \[ "Vrvirksomhed.cvrNummer", "Vrvirksomhed.virksomhedMetadata.nyesteNavn.… --- ## [Upgrade from 6 to 7](https://discuss.elastic.co/t/upgrade-from-6-to-7/195311)
**Author:** [@garryrobertson](https://discuss.elastic.co/u/garryrobertson)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 8:28am UTC](https://discuss.elastic.co/t/upgrade-from-6-to-7/195311 "2019-08-15T08:28:14Z")
Hi, If we were to upgrade from 6.2 to 7.x do we need to also upgrade all our filebeat/winlogbeat installs as well? Or is 7.x backwards compatible with these beats? --- ## [How to pass JSON request body data to Elasticsearch query for search opeartion?](https://discuss.elastic.co/t/how-to-pass-json-request-body-data-to-elasticsearch-query-for-search-opeartion/195137)
**Author:** [@Ramesh\_Kanakarajan](https://discuss.elastic.co/u/Ramesh_Kanakarajan)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 8:16am UTC](https://discuss.elastic.co/t/how-to-pass-json-request-body-data-to-elasticsearch-query-for-search-opeartion/195137 "2019-08-15T08:16:33Z")
Initially I do by iterate the JSON object get the key and value out, do concatenation with dot between keys and then pass to the matchquery. --- ## [\[Kibana\] \[Bar chart\]There's no 'Split Slice' option any more](https://discuss.elastic.co/t/kibana-bar-chart-theres-no-split-slice-option-any-more/194775)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 8:17am UTC](https://discuss.elastic.co/t/kibana-bar-chart-theres-no-split-slice-option-any-more/194775 "2019-08-15T08:17:28Z")
Hi Team, I am creating a bar chart with trying to adding multi sub-buckets. But when I tried to add second sub-buckets, there's only 'Split Chart' option for me to select, and there's no 'Split Slice' option. Please r… --- ## [\[kibana\] Multi-levle pie chart issue](https://discuss.elastic.co/t/kibana-multi-levle-pie-chart-issue/194774)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 8:15am UTC](https://discuss.elastic.co/t/kibana-multi-levle-pie-chart-issue/194774 "2019-08-15T08:15:23Z")
Hi Team, I have below set of data in elk. Inside the data, the values under ktf4 column describe the elements end user selected for Profile\_Criteria only on UI page. indent preformatted text by 4 spaces \> ktf2,ktf3,… --- ## [Constructing custom analyser for full-text queries](https://discuss.elastic.co/t/constructing-custom-analyser-for-full-text-queries/195304)
**Author:** [@MinHan](https://discuss.elastic.co/u/MinHan)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 7:43am UTC](https://discuss.elastic.co/t/constructing-custom-analyser-for-full-text-queries/195304 "2019-08-15T07:43:10Z")
Hi everyone. I'm having a little confusion with the general flow of constructing custom analyzers and mappings, during document indexing time and at query time. The reason I'm asking all of this is that I'm trying to co… --- ## [Increase the score of the last resource of each type](https://discuss.elastic.co/t/increase-the-score-of-the-last-resource-of-each-type/191846)
**Author:** [@raphael.m](https://discuss.elastic.co/u/raphael.m)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 7:33am UTC](https://discuss.elastic.co/t/increase-the-score-of-the-last-resource-of-each-type/191846 "2019-08-15T07:33:43Z")
Hello friends, I'm facing a problem and i really don't know how handle it. Actually I have a "simple" research on a class called "Resource". These resources have a specific type but are show in a unique list with all t… --- ## [Is it possible to fetch a document by term ID within a search/rescore plugin?](https://discuss.elastic.co/t/is-it-possible-to-fetch-a-document-by-term-id-within-a-search-rescore-plugin/195282)
**Author:** [@zcharli](https://discuss.elastic.co/u/zcharli)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 7:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-fetch-a-document-by-term-id-within-a-search-rescore-plugin/195282 "2019-08-15T07:27:40Z")
Hi, I have a concept that I'm thinking about implementing, but before I get my hands dirty, I would like to ask if this is possible. Advisory: Elasticsearch is new to me. Suppose I have a index cars with document term i… --- ## [How do you configure Elasticsearch on Ubuntu Bash for Windows 10?](https://discuss.elastic.co/t/how-do-you-configure-elasticsearch-on-ubuntu-bash-for-windows-10/194888)
**Author:** [@zachary\_baker](https://discuss.elastic.co/u/zachary_baker)\ **Replies:** 3\ **Last updated:** [August 15, 2019, 7:15am UTC](https://discuss.elastic.co/t/how-do-you-configure-elasticsearch-on-ubuntu-bash-for-windows-10/194888 "2019-08-15T07:15:56Z")
Hi everyone! I am relatively new to Elasticsearch and was wondering about configuring it for the Ubuntu bash app for Windows 10. Is it possible and if so, what would I have to configure. I have seen it run on an Ubuntu … --- ## [Alerting in elastic by filtering a field in it](https://discuss.elastic.co/t/alerting-in-elastic-by-filtering-a-field-in-it/194288)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 3\ **Last updated:** [August 15, 2019, 7:15am UTC](https://discuss.elastic.co/t/alerting-in-elastic-by-filtering-a-field-in-it/194288 "2019-08-15T07:15:48Z")
I have a log with a number of fields. i am trying to alert whenever i see a text and the script is something like this : { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": { "s… --- ## [How to dynamically create scriting parameters based on another query?](https://discuss.elastic.co/t/how-to-dynamically-create-scriting-parameters-based-on-another-query/195126)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 3\ **Last updated:** [August 15, 2019, 7:13am UTC](https://discuss.elastic.co/t/how-to-dynamically-create-scriting-parameters-based-on-another-query/195126 "2019-08-15T07:13:09Z")
I have a query which contains a script for supporting sorting operation on an index, The script requires few parameters, which I'm currently constructing in code These parameters are being fetched from another index … --- ## [Logstash filter for parsing nested json](https://discuss.elastic.co/t/logstash-filter-for-parsing-nested-json/195299)
**Author:** [@binoy\_cg](https://discuss.elastic.co/u/binoy_cg)\ **Replies:** 0\ **Last updated:** [August 15, 2019, 5:59am UTC](https://discuss.elastic.co/t/logstash-filter-for-parsing-nested-json/195299 "2019-08-15T05:59:34Z")
I am trying to ingest a nested json file from couchdb using couchdb\_changes plugin ,since the number of fields are very huge I tried with increasing the maximum number of field parameter for the index but finally Elasti… --- ## [Different filter on multiple indexes](https://discuss.elastic.co/t/different-filter-on-multiple-indexes/195151)
**Author:** [@David\_T](https://discuss.elastic.co/u/David_T)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 5:13am UTC](https://discuss.elastic.co/t/different-filter-on-multiple-indexes/195151 "2019-08-15T05:13:49Z")
Hello everyone, i have a question about multi indexes search. I want search multi indexes and sort by score, now i use \_msearch query, like this get \_msearch {"index" : "user"} {"query" : {"match" : {"global" : "keywo… --- ## [Logstash and doc versioning](https://discuss.elastic.co/t/logstash-and-doc-versioning/195294)
**Author:** [@Vabida](https://discuss.elastic.co/u/Vabida)\ **Replies:** 0\ **Last updated:** [August 15, 2019, 4:16am UTC](https://discuss.elastic.co/t/logstash-and-doc-versioning/195294 "2019-08-15T04:16:40Z")
Hello. I need help i can't understand why my doc versions staying in elastic unupgraded (version 1 and that's all). I have ELK on one node which accepts network logs by logstash and keeps them. In logstash filters i hav… --- ## [Is the new helm chart repository beta or not?](https://discuss.elastic.co/t/is-the-new-helm-chart-repository-beta-or-not/194249)
**Author:** [@Stancho](https://discuss.elastic.co/u/Stancho)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 3:57am UTC](https://discuss.elastic.co/t/is-the-new-helm-chart-repository-beta-or-not/194249 "2019-08-15T03:57:16Z")
Hi, there was already a topic about which helm repository should be used https://discuss.elastic.co/t/which-helm-repo/183188 . It was recommended to use the new one https://github.com/elastic/helm-charts , but in the el… --- ## [Multiline match wrong](https://discuss.elastic.co/t/multiline-match-wrong/195292)
**Author:** [@cevin](https://discuss.elastic.co/u/cevin)\ **Replies:** 0\ **Last updated:** [August 15, 2019, 3:45am UTC](https://discuss.elastic.co/t/multiline-match-wrong/195292 "2019-08-15T03:45:09Z")
log file --------------------------------------------------------------- \[ 2019-08-14T09:16:11+08:00 \] 127.0.0.1 GET localhost:8000/ \[ error \] xxx \[ error \] xxxxx \[ error \] xxxxx ---------------------------------------… --- ## [Multiple Aggregation Query](https://discuss.elastic.co/t/multiple-aggregation-query/195201)
**Author:** [@codeboy](https://discuss.elastic.co/u/codeboy)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 3:32am UTC](https://discuss.elastic.co/t/multiple-aggregation-query/195201 "2019-08-15T03:32:30Z")
We are running a query that looks for the equivalent "select distinct f1,f2,f3 from myindex". The resulting query is implemented with nested aggregations. Since we are returning a LOT of data, the performance with 2 t… --- ## [A few questions about grok](https://discuss.elastic.co/t/a-few-questions-about-grok/195237)
**Author:** [@thedraketaylor](https://discuss.elastic.co/u/thedraketaylor)\ **Replies:** 4\ **Last updated:** [August 15, 2019, 12:26am UTC](https://discuss.elastic.co/t/a-few-questions-about-grok/195237 "2019-08-15T00:26:30Z")
EDIT It looks like my formatting got blown out so all my config changes are now in pastebin in a hopefully easier to read format at https://pastebin.com/DJ0FawPp End Edit I'm trying to use logstash to parse scrapy log… --- ## [How to design output section to receive all logs based on timestamp](https://discuss.elastic.co/t/how-to-design-output-section-to-receive-all-logs-based-on-timestamp/195241)
**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 12:17am UTC](https://discuss.elastic.co/t/how-to-design-output-section-to-receive-all-logs-based-on-timestamp/195241 "2019-08-15T00:17:31Z")
Hi guys Let say from beat i have this below log naming Record(timestamp).log Record(timestamp).log Complete Example for log file name: Record-20190814.log And this log file will be created base on daily basis. Is t… --- ## [Split Module Multiple If Else Statements](https://discuss.elastic.co/t/split-module-multiple-if-else-statements/195275)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 11:22pm UTC](https://discuss.elastic.co/t/split-module-multiple-if-else-statements/195275 "2019-08-14T23:22:30Z")
I've been trying to ingest audit cloud logs, and they contain multiple arrays of objects. It's a mess. I've been trying to use the split module in Logstash, but I'm not sure if this is the best way of doing it. I search… --- ## [Why elasticsearch has separate JNA library](https://discuss.elastic.co/t/why-elasticsearch-has-separate-jna-library/194986)
**Author:** [@Hirik](https://discuss.elastic.co/u/Hirik)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 10:00pm UTC](https://discuss.elastic.co/t/why-elasticsearch-has-separate-jna-library/194986 "2019-08-14T22:00:54Z")
Hi, Why do we maintain separate JNA library for elasticsearch? Found this repo in maven dependency: https://mvnrepository.com/artifact/org.elasticsearch/jna --- ## [Kibana Viz can't filter 1 from 11,12,13; 2 from 21,22, etc](https://discuss.elastic.co/t/kibana-viz-cant-filter-1-from-11-12-13-2-from-21-22-etc/193884)
**Author:** [@dnwobu](https://discuss.elastic.co/u/dnwobu)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 9:44pm UTC](https://discuss.elastic.co/t/kibana-viz-cant-filter-1-from-11-12-13-2-from-21-22-etc/193884 "2019-08-14T21:44:15Z")
I have a vizualization that is a line graph of cpu usage by core. If I select core 38 from the legend, the viz shows values for 38 and 3. Is this a bug, a symptom of metricbeat setting core id as strings, or is there a s… --- ## [Read mode and max\_open\_file](https://discuss.elastic.co/t/read-mode-and-max-open-file/195261)
**Author:** [@leeyu](https://discuss.elastic.co/u/leeyu)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 9:24pm UTC](https://discuss.elastic.co/t/read-mode-and-max-open-file/195261 "2019-08-14T21:24:48Z")
Hi all, Does read mode have any protection against reaching the max open file limit? Thanks. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1957) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1959)