# Top

**URL:** https://discuss.elastic.co/top.md?page=1687&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1688

---

## [Duplicate data in logstash](https://discuss.elastic.co/t/duplicate-data-in-logstash/59758)

<div class="topic-metadata">

**Author:** [@Mikail\_Land](https://discuss.elastic.co/u/Mikail_Land)\
**Replies:** 1\
**Last updated:** [September 4, 2016, 1:24pm UTC](https://discuss.elastic.co/t/duplicate-data-in-logstash/59758 "2016-09-04T13:24:39Z")

</div>

i have duplicate data in logstash my config file is : input { file { path =\> "/var/log/flask/access\*" type =\> "flask\_access" max\_open\_files =\> 409599 } stdin{} } filter { mutate { replace =\> { "typ…

---

## [Kibana 5.0 Security Setting Meanings](https://discuss.elastic.co/t/kibana-5-0-security-setting-meanings/53767)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 1\
**Last updated:** [June 24, 2016, 7:49pm UTC](https://discuss.elastic.co/t/kibana-5-0-security-setting-meanings/53767 "2016-06-24T19:49:27Z")

</div>

I have gone through the documentation here https://www.elastic.co/guide/en/x-pack/v5.0.0-alpha3-docs/security-privileges.html However, I still do not understand the meaning. Does the indices privileges are all related to…

---

## [ElasticSearch and JSON SparkSQL](https://discuss.elastic.co/t/elasticsearch-and-json-sparksql/38787)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 1\
**Last updated:** [January 9, 2016, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-and-json-sparksql/38787 "2016-01-09T13:42:50Z")

</div>

Hello, Just curious, is this plugin using the JSON support of SparkSQL (I mean http://spark.apache.org/docs/latest/sql-programming-guide.html#json-datasets). Currently I have always a trouble with ES schema, and as a…

---

## [Topbeat with Go 1.3](https://discuss.elastic.co/t/topbeat-with-go-1-3/33036)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 1\
**Last updated:** [October 27, 2015, 7:25am UTC](https://discuss.elastic.co/t/topbeat-with-go-1-3/33036 "2015-10-27T07:25:20Z")

</div>

Hi All, Would it be possible to compile topbeat with Go 1.3 on RedHat 5.10? I tried it and it didn't work. This is the error I got: # github.com/elastic/libbeat/outputs Godeps/\_workspace/src/github.com/elastic/libbea…

---

## [Send message to email from watcher](https://discuss.elastic.co/t/send-message-to-email-from-watcher/29627)

<div class="topic-metadata">

**Author:** [@Asim\_Husanovic](https://discuss.elastic.co/u/Asim_Husanovic)\
**Replies:** 1\
**Last updated:** [September 21, 2015, 1:49pm UTC](https://discuss.elastic.co/t/send-message-to-email-from-watcher/29627 "2015-09-21T13:49:09Z")

</div>

Dear all, I made one watcher for try to find specific sentence from my logs: "query": { "match": { "Message": "Remote Desktop Services: User authentication succeeded" } Now, I want to parse rest of this log messa…

---

## [Facet autocomplete for field with multiple values](https://discuss.elastic.co/t/facet-autocomplete-for-field-with-multiple-values/15063)

<div class="topic-metadata">

**Author:** [@piotrekpmj](https://discuss.elastic.co/u/piotrekpmj)\
**Replies:** 1\
**Last updated:** [January 2, 2014, 10:55am UTC](https://discuss.elastic.co/t/facet-autocomplete-for-field-with-multiple-values/15063 "2014-01-02T10:55:52Z")

</div>

Hi, I have problem finding solution for specific usage scenario where I want to autocomplete facet for field that has array of values. Documents in my index are some objects that can be owned by 0..n people, s…

---

## [Is it possible to set Alert IDs in Kibana Alerting similar to watcher?](https://discuss.elastic.co/t/is-it-possible-to-set-alert-ids-in-kibana-alerting-similar-to-watcher/292665)

<div class="topic-metadata">

**Author:** [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 5:01am UTC](https://discuss.elastic.co/t/is-it-possible-to-set-alert-ids-in-kibana-alerting-similar-to-watcher/292665 "2022-09-07T05:01:33Z")

</div>

Hello Elastic Team, I was super excited about the new Kibana alerting feature. Since I am a fan of automation I created in the past my watcher alerts with ansible calling the watcher api. This was quite easy since you…

---

## [Adding dependency to custom plugin (New Platform)](https://discuss.elastic.co/t/adding-dependency-to-custom-plugin-new-platform/241744)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 9:43am UTC](https://discuss.elastic.co/t/adding-dependency-to-custom-plugin-new-platform/241744 "2020-08-13T09:43:03Z")

</div>

I am using node scripts/generate\_plugin my\_plugin\_name # replace "my\_plugin\_name" with your desired plugin name to create a custom plugin with Kibana 7.8. How i can add a dependency, only to my plugin, like package.jso…

---

## [Failed to close alert(s)](https://discuss.elastic.co/t/failed-to-close-alert-s/343832)

<div class="topic-metadata">

**Author:** [@IsItPossible](https://discuss.elastic.co/u/IsItPossible)\
**Replies:** 4\
**Last updated:** [October 13, 2023, 10:42pm UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832 "2023-10-13T22:42:16Z")

</div>

Hello, Im using version 8.5.1 and since 25.09 around 12pm European time, im not able to close alerts or mark it as acknowledge. It returns an empty error message: The upload feature doesn't work so I cannot put a scree…

---

## [Unpack a list of hashes into new fields](https://discuss.elastic.co/t/unpack-a-list-of-hashes-into-new-fields/290107)

<div class="topic-metadata">

**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\
**Replies:** 4\
**Last updated:** [November 25, 2021, 2:39am UTC](https://discuss.elastic.co/t/unpack-a-list-of-hashes-into-new-fields/290107 "2021-11-25T02:39:02Z")

</div>

Hello, I am having a field data.aws.httpRequest.headers , and it has a list of hashes as seen below. { "name": "host", "value": "testwebsite.com" }, { "name": "authorization", "value": "token hidden" }, { "na…

---

## [SLM: Only one snapshot can be taken at a time. To avoid snapshot failures, edit or delete the policies](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 4\
**Last updated:** [May 20, 2021, 4:02pm UTC](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500 "2021-05-20T16:02:29Z")

</div>

Hi, Does it mean that if you do schedule multiple snapshots on the same time they: Will be queued, meaning that they might start later than scheduled but eventually they will execute and take a snapshot. Or does i…

---

## [How to Sum two or more integer from different logs](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 4\
**Last updated:** [April 10, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767 "2021-04-10T11:56:11Z")

</div>

Hi I have 2logs: { "\_index": "monitoring", "\_type": "\_doc", "\_id": "1", "\_version": 1, "\_score": null, "\_source": { "jobtypedescription": "Monitor", "@version": "1", "jobtypeid": 1, "jobacti…

---

## [APM On Grape API and Sidekiq](https://discuss.elastic.co/t/apm-on-grape-api-and-sidekiq/206016)

<div class="topic-metadata">

**Author:** [@Oded\_Shafran](https://discuss.elastic.co/u/Oded_Shafran)\
**Replies:** 4\
**Last updated:** [October 31, 2019, 11:26am UTC](https://discuss.elastic.co/t/apm-on-grape-api-and-sidekiq/206016 "2019-10-31T11:26:06Z")

</div>

We are unable to see Grape APIs being monitored. Sidekiq is not reporting. How do we enable it?

---

## [Elastic Cluster Went Down](https://discuss.elastic.co/t/elastic-cluster-went-down/196249)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\
**Replies:** 4\
**Last updated:** [August 22, 2019, 7:44am UTC](https://discuss.elastic.co/t/elastic-cluster-went-down/196249 "2019-08-22T07:44:00Z")

</div>

Hi Team, We have cluster on cloud.elastic.co, which went down due to JVM heap memory pressure(My assumptions). Following is my cluster configuration: 2 Data Nodes(8GB for each) 1 Master Node(8GB) Cluster was not abl…

---

## [Sampling Rates Management](https://discuss.elastic.co/t/sampling-rates-management/193813)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 4\
**Last updated:** [August 14, 2019, 2:17pm UTC](https://discuss.elastic.co/t/sampling-rates-management/193813 "2019-08-14T14:17:22Z")

</div>

I've been testing Elastic Stack 7.3.0 with RUM agent 4.4.0 and Java agent 1.8.0. So far, managing the sampling rate in Kibana is straightforward for the Java agent. Great job on this one :slight\_smile: I would like to …

---

## [Logstash ingested CSV file twice](https://discuss.elastic.co/t/logstash-ingested-csv-file-twice/186351)

<div class="topic-metadata">

**Author:** [@victoravr](https://discuss.elastic.co/u/victoravr)\
**Replies:** 4\
**Last updated:** [June 19, 2019, 12:47pm UTC](https://discuss.elastic.co/t/logstash-ingested-csv-file-twice/186351 "2019-06-19T12:47:58Z")

</div>

For some reason Logstash processed CSV file twice. Could you please help to find out why? Running logstash.version 6.5.3. input { file { path =\> "/path/to/\*.csv" start\_position =\> "beginning" mode =\> "read" file\_c…

---

## [Problem Statement](https://discuss.elastic.co/t/problem-statement/137073)

<div class="topic-metadata">

**Author:** [@Rakesh5216](https://discuss.elastic.co/u/Rakesh5216)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 9:35pm UTC](https://discuss.elastic.co/t/problem-statement/137073 "2018-06-22T21:35:06Z")

</div>

I have 3 different files ( 3 diff csv files) - transaction data, card info data and user data. I need to merge all these data into single file (I mean to perform SQL type join based on a key). I am aware that we can’t p…

---

## [Beat devguide typo](https://discuss.elastic.co/t/beat-devguide-typo/129676)

<div class="topic-metadata">

**Author:** [@ripleymj](https://discuss.elastic.co/u/ripleymj)\
**Replies:** 4\
**Last updated:** [April 26, 2018, 8:03pm UTC](https://discuss.elastic.co/t/beat-devguide-typo/129676 "2018-04-26T20:03:49Z")

</div>

I was attempting to follow the New Beat guide, and think there's a small typo. On https://www.elastic.co/guide/en/beats/devguide/current/newbeat-getting-ready.html it says to clone to ${GOPATH}/src/elastic/beats. When y…

---

## [\_dateparsefailure apex logging with a '@' between date and time](https://discuss.elastic.co/t/dateparsefailure-apex-logging-with-a-between-date-and-time/118672)

<div class="topic-metadata">

**Author:** [@DannyM](https://discuss.elastic.co/u/DannyM)\
**Replies:** 4\
**Last updated:** [February 12, 2018, 10:00am UTC](https://discuss.elastic.co/t/dateparsefailure-apex-logging-with-a-between-date-and-time/118672 "2018-02-12T10:00:17Z")

</div>

Hello, I'm working on a logstash config but can't get a working date from the log line to @timestamp the paas\_apex\_access lines are successfully using a date line but the paas\_apex\_oblog won't. also when mutate the @ …

---

## [Upgrade elasticsearch from 1.3.2 to 2.x](https://discuss.elastic.co/t/upgrade-elasticsearch-from-1-3-2-to-2-x/103387)

<div class="topic-metadata">

**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\
**Replies:** 4\
**Last updated:** [October 10, 2017, 2:42pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-1-3-2-to-2-x/103387 "2017-10-10T14:42:04Z")

</div>

Hi When I run the migration tool, I get some warnings, I have fix the biggest issues. But I need some assistants: The fst and compressed fielddata formats are no longer supported and will be ignored Here is the mapp…

---

## [Multiple Output Reliability](https://discuss.elastic.co/t/multiple-output-reliability/94772)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 4\
**Last updated:** [July 29, 2017, 7:25pm UTC](https://discuss.elastic.co/t/multiple-output-reliability/94772 "2017-07-29T19:25:44Z")

</div>

How can I check if the data were successfully transferred to elasticsearch? For example I got this output. output { elasticsearch1 { hosts =\> \["xxx.xxx.xxx.250:9200"\] index =\> "logstash1-%{+YYYY.MM.dd}" } ela…

---

## [Doc values for field data](https://discuss.elastic.co/t/doc-values-for-field-data/18654)

<div class="topic-metadata">

**Author:** [@David\_Smith\_2](https://discuss.elastic.co/u/David_Smith_2)\
**Replies:** 4\
**Last updated:** [July 16, 2014, 2:07pm UTC](https://discuss.elastic.co/t/doc-values-for-field-data/18654 "2014-07-16T14:07:30Z")

</div>

When you map fields to use doc values for field data, does that limit the functionality afforded to those fields to merely sorting and aggregations/faceting? The documentation mentions that filtering is not supported …

---

## [Issues Deploying to Beanstalk](https://discuss.elastic.co/t/issues-deploying-to-beanstalk/4076)

<div class="topic-metadata">

**Author:** [@James\_Cook\_2](https://discuss.elastic.co/u/James_Cook_2)\
**Replies:** 4\
**Last updated:** [March 22, 2011, 9:48pm UTC](https://discuss.elastic.co/t/issues-deploying-to-beanstalk/4076 "2011-03-22T21:48:55Z")

</div>

I have a web application with an embedded Elasticsearch (0.15.0) server. I create a war file and successfully deploy the application to both Tomcat 6.0.29 and Jetty 7 locally. I can also deploy the same web application…

---

## [Filebeat sends no logs to Kafka](https://discuss.elastic.co/t/filebeat-sends-no-logs-to-kafka/320968)

<div class="topic-metadata">

**Author:** [@nota](https://discuss.elastic.co/u/nota)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:41am UTC](https://discuss.elastic.co/t/filebeat-sends-no-logs-to-kafka/320968 "2022-12-13T10:41:44Z")

</div>

Running Filebeat 8.5.3 on Ubuntu 20.04. I am trying to send some logs to Kafka using FIlebeat. This is my filebeat.yml filebeat.inputs: - type: filestream id: jenkinsfilestream enabled: true paths: - "/var/log…

---

## [How snapshots works when using different Storage Class (GCS)?](https://discuss.elastic.co/t/how-snapshots-works-when-using-different-storage-class-gcs/294753)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [January 21, 2022, 8:07pm UTC](https://discuss.elastic.co/t/how-snapshots-works-when-using-different-storage-class-gcs/294753 "2022-01-21T20:07:39Z")

</div>

Hello, Currently I'm using snapshot repositories stored in Google Cloud Storage that was created with the standard storage class. Now I have the need to create new snapshots on another Google Cloud project and I was th…

---

## [Not able to save Visualize or Query](https://discuss.elastic.co/t/not-able-to-save-visualize-or-query/291358)

<div class="topic-metadata">

**Author:** [@Luiz](https://discuss.elastic.co/u/Luiz)\
**Replies:** 2\
**Last updated:** [December 10, 2021, 10:52am UTC](https://discuss.elastic.co/t/not-able-to-save-visualize-or-query/291358 "2021-12-10T10:52:09Z")

</div>

Hi all, I am not able to save new query or visualize in Kibana, I am getting message "An error occurred while saving. Error: Forbidden" I am using version 7.11.0. I have search about the error here and other forums all…

---

## [Slow response times query first couple of times](https://discuss.elastic.co/t/slow-response-times-query-first-couple-of-times/285018)

<div class="topic-metadata">

**Author:** [@Mark\_Schenk](https://discuss.elastic.co/u/Mark_Schenk)\
**Replies:** 2\
**Last updated:** [September 24, 2021, 4:37am UTC](https://discuss.elastic.co/t/slow-response-times-query-first-couple-of-times/285018 "2021-09-24T04:37:59Z")

</div>

We have a service which is using ES sporadically, (once every few hours). We noted that the first couple of times we query ES takes a lot longer than subsequent calls. For example if we perform the following query: { …

---

## [All dashboard visualisations in 'stalled' state for 30s to 1m](https://discuss.elastic.co/t/all-dashboard-visualisations-in-stalled-state-for-30s-to-1m/202627)

<div class="topic-metadata">

**Author:** [@robbav](https://discuss.elastic.co/u/robbav)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 2:00am UTC](https://discuss.elastic.co/t/all-dashboard-visualisations-in-stalled-state-for-30s-to-1m/202627 "2019-10-15T02:00:11Z")

</div>

First post here, hoping to get some assistance with this issue, or tell me if this is normal behavior. Background: We have a cluster of 3 nodes with 32Gb each running on VM / docker. Each node has 16Gb allocated to Ja…

---

## [Group by consecutive values in elastic search](https://discuss.elastic.co/t/group-by-consecutive-values-in-elastic-search/128081)

<div class="topic-metadata">

**Author:** [@rajjangir](https://discuss.elastic.co/u/rajjangir)\
**Replies:** 2\
**Last updated:** [April 21, 2018, 9:08am UTC](https://discuss.elastic.co/t/group-by-consecutive-values-in-elastic-search/128081 "2018-04-21T09:08:38Z")

</div>

I have document structure like below :-1: { "id" : 1, "imei" : "1002786191", "date" : 2018-04-15", "totalData" : \[ { "latitude" : 1.89754, "longitude" : 2.89765, "speed" : 0, "gpsdt" : "2018-04-15T09:18:23" }, …

---

## [Synchronize 2 index continuously](https://discuss.elastic.co/t/synchronize-2-index-continuously/86423)

<div class="topic-metadata">

**Author:** [@raphaelkh2ad](https://discuss.elastic.co/u/raphaelkh2ad)\
**Replies:** 2\
**Last updated:** [May 26, 2017, 1:16pm UTC](https://discuss.elastic.co/t/synchronize-2-index-continuously/86423 "2017-05-26T13:16:31Z")

</div>

Hello guys, I would like to use logstash to read from an index (from cluster 1) and write to another index (in cluster 2), and keep this second index always synced with the input index. Is there a way to achieved this …

---

## [Correlating data from 2 sources](https://discuss.elastic.co/t/correlating-data-from-2-sources/83665)

<div class="topic-metadata">

**Author:** [@10past10](https://discuss.elastic.co/u/10past10)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 5:16pm UTC](https://discuss.elastic.co/t/correlating-data-from-2-sources/83665 "2017-04-26T17:16:00Z")

</div>

Starting with the following; - 1 large data-set of network traffic to be investigated (JSON) - 1 tls-fingerprinting data-set or 1 'bad/blocked' IP data-set or .... Use case; When both the network traffic and fingerprin…

---

## [Service Discovery in ES](https://discuss.elastic.co/t/service-discovery-in-es/53089)

<div class="topic-metadata">

**Author:** [@sukhada369](https://discuss.elastic.co/u/sukhada369)\
**Replies:** 2\
**Last updated:** [June 17, 2016, 8:43am UTC](https://discuss.elastic.co/t/service-discovery-in-es/53089 "2016-06-17T08:43:51Z")

</div>

I am looking for service discovery support for ES nodes cluster like consul or etcd. Please let me know of this kind of integration can be done.

---

## [Increase in CPU usage and indexing time after upgrade from 0.19.2 -\> 0.19.10](https://discuss.elastic.co/t/increase-in-cpu-usage-and-indexing-time-after-upgrade-from-0-19-2-0-19-10/11542)

<div class="topic-metadata">

**Author:** [@Owen\_Butler\_2](https://discuss.elastic.co/u/Owen_Butler_2)\
**Replies:** 2\
**Last updated:** [April 12, 2013, 10:18am UTC](https://discuss.elastic.co/t/increase-in-cpu-usage-and-indexing-time-after-upgrade-from-0-19-2-0-19-10/11542 "2013-04-12T10:18:18Z")

</div>

Hi All, We've seen a jump in CPU usage after upgrading the cluster from 0.19.2 to 0.19.10 Background info: \* 3 node cluster \* 5 shards, 1 replica \* ~33 million documents, ~32gb in size \* ~110k/80k new/delet…

---

## [Scrolling & Resource usage (lack of close()..)](https://discuss.elastic.co/t/scrolling-resource-usage-lack-of-close/8474)

<div class="topic-metadata">

**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\
**Replies:** 2\
**Last updated:** [July 20, 2012, 8:27am UTC](https://discuss.elastic.co/t/scrolling-resource-usage-lack-of-close/8474 "2012-07-20T08:27:17Z")

</div>

Hey all, Scrolling, which keeps resources on the nodes around for a time limit specified in the scroll request, has no ability for the clinte to close(), or 'release' the resources once finished, as I see it from th…

---

## [Able to access Elastic and Kibana in localhost but not outside](https://discuss.elastic.co/t/able-to-access-elastic-and-kibana-in-localhost-but-not-outside/344083)

<div class="topic-metadata">

**Author:** [@Yue\_CHEN](https://discuss.elastic.co/u/Yue_CHEN)\
**Replies:** 3\
**Last updated:** [September 28, 2023, 6:42pm UTC](https://discuss.elastic.co/t/able-to-access-elastic-and-kibana-in-localhost-but-not-outside/344083 "2023-09-28T18:42:49Z")

</div>

New to Elastic search, set up new instance in azure windows vm. Able to access Elastic and Kibana in localhost but not outside for some reason. Here are settings from Elastic.yml network.host: 10.x.x.x is private IP a…

---

## [Dashboard - field Host.hostname not found error](https://discuss.elastic.co/t/dashboard-field-host-hostname-not-found-error/309173)

<div class="topic-metadata">

**Author:** [@Darshana](https://discuss.elastic.co/u/Darshana)\
**Replies:** 3\
**Last updated:** [July 8, 2022, 7:55am UTC](https://discuss.elastic.co/t/dashboard-field-host-hostname-not-found-error/309173 "2022-07-08T07:55:36Z")

</div>

Hi, I'm getting error for Kibana Dashboard : "Field host.hostname was not found Edit in Lens editor to see more errors"

---

## [Match Query Fuzziness](https://discuss.elastic.co/t/match-query-fuzziness/284633)

<div class="topic-metadata">

**Author:** [@emreorucoglu](https://discuss.elastic.co/u/emreorucoglu)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 8:00am UTC](https://discuss.elastic.co/t/match-query-fuzziness/284633 "2021-09-21T08:00:22Z")

</div>

Hi everyone, I'm running into a problem when searching with fuzziness in a match query. The name I want to find is "Şaban Dişli", as seen in the images below, I am querying. But I am not getting results for some queries…

---

## [データ登録時にIPアドレスの範囲をチェックする方法](https://discuss.elastic.co/t/ip/282866)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 3\
**Last updated:** [September 1, 2021, 1:50am UTC](https://discuss.elastic.co/t/ip/282866 "2021-09-01T01:50:39Z")

</div>

logstash→Elasticsearchというルートで、IPアドレスフィールドを保持するドキュメントを登録しています。登録時にIPアドレスをチェックし、指定の範囲内であればフラグを付与したいのですが可能でしょうか？LogstashもしくはIngestノードにて可能ではないかと思うのですが、情報が見当たらず投稿させて頂きました。ご教示いただけますでしょうか。

---

## [Esrally failing with \[ERROR\] Cannot race. Error in race control (NotFoundError(404, 'Not Found', 'Not Found'))](https://discuss.elastic.co/t/esrally-failing-with-error-cannot-race-error-in-race-control-notfounderror-404-not-found-not-found/281731)

<div class="topic-metadata">

**Author:** [@sadhana.durge](https://discuss.elastic.co/u/sadhana.durge)\
**Replies:** 3\
**Last updated:** [August 17, 2021, 5:54pm UTC](https://discuss.elastic.co/t/esrally-failing-with-error-cannot-race-error-in-race-control-notfounderror-404-not-found-not-found/281731 "2021-08-17T17:54:35Z")

</div>

Trying to run esrally race --track=pmc --target-hosts=\*\*\*\*\*\*\*.kb.us-west1.gcp.cloud.es.io:9243 --p ipeline=benchmark-only --client-options="timeout:60,use\_ssl:true,verify\_certs:true,basic\_auth\_user:'elastic',basic \_aut…

---

## [Winlogbeat Filtering Issue](https://discuss.elastic.co/t/winlogbeat-filtering-issue/261695)

<div class="topic-metadata">

**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\
**Replies:** 3\
**Last updated:** [February 2, 2021, 1:51am UTC](https://discuss.elastic.co/t/winlogbeat-filtering-issue/261695 "2021-02-02T01:51:01Z")

</div>

Hi folks, I've run into a weird issue. I have two separate clusters. One is my personal lab and the other is a dev lab. I'm trying to drop a specific winlogevent id as sysmon is very noisey and not required for what I a…

---

## [How to see a dashboard of the logs](https://discuss.elastic.co/t/how-to-see-a-dashboard-of-the-logs/210896)

<div class="topic-metadata">

**Author:** [@Bruno\_Silveira\_UY](https://discuss.elastic.co/u/Bruno_Silveira_UY)\
**Replies:** 3\
**Last updated:** [December 9, 2019, 4:54pm UTC](https://discuss.elastic.co/t/how-to-see-a-dashboard-of-the-logs/210896 "2019-12-09T16:54:59Z")

</div>

Hi, this is my first time building a log control system, i have UiPath's RPA Platform installed and they recommend the use of Elasticsearch to store the logs and kibana to visualize them, so i installed everything (inclu…

---

## [Elasticsearch - Optimising Request Time | Infrastructure | Self Hosted AWS](https://discuss.elastic.co/t/elasticsearch-optimising-request-time-infrastructure-self-hosted-aws/208721)

<div class="topic-metadata">

**Author:** [@somnath.guthula](https://discuss.elastic.co/u/somnath.guthula)\
**Replies:** 3\
**Last updated:** [November 21, 2019, 5:24am UTC](https://discuss.elastic.co/t/elasticsearch-optimising-request-time-infrastructure-self-hosted-aws/208721 "2019-11-21T05:24:57Z")

</div>

Hello Team, I am looking for some help in understanding the current state and optimising the response time of elasticsearch cluster that we are running in production. We are having High CPU utilisation and the search qu…

---

## [Sample installation runs out of disk, indices readonly](https://discuss.elastic.co/t/sample-installation-runs-out-of-disk-indices-readonly/206953)

<div class="topic-metadata">

**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\
**Replies:** 3\
**Last updated:** [November 11, 2019, 7:11pm UTC](https://discuss.elastic.co/t/sample-installation-runs-out-of-disk-indices-readonly/206953 "2019-11-11T19:11:16Z")

</div>

A single host installation is running out of disk well before I would expect given the amount of data stored in clusters. However I am struggling to understand the contact points to use to diagnose this with ECE or event…

---

## [Width and Height of Multi-View Displays in Vega-Lite to Resize Automatically in Dashboard](https://discuss.elastic.co/t/width-and-height-of-multi-view-displays-in-vega-lite-to-resize-automatically-in-dashboard/199046)

<div class="topic-metadata">

**Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\
**Replies:** 3\
**Last updated:** [October 7, 2019, 4:25pm UTC](https://discuss.elastic.co/t/width-and-height-of-multi-view-displays-in-vega-lite-to-resize-automatically-in-dashboard/199046 "2019-10-07T16:25:20Z")

</div>

So I have created my vega-lite visualization (bar chart). It is mutli-view and all is working as should. But when I add the visualization to a dashboard its not longer re-sizable, I went through the code and the line tha…

---

## [It is possible to monitor services like, for example, DNS?](https://discuss.elastic.co/t/it-is-possible-to-monitor-services-like-for-example-dns/178912)

<div class="topic-metadata">

**Author:** [@JoseLuis](https://discuss.elastic.co/u/JoseLuis)\
**Replies:** 3\
**Last updated:** [April 30, 2019, 5:56am UTC](https://discuss.elastic.co/t/it-is-possible-to-monitor-services-like-for-example-dns/178912 "2019-04-30T05:56:05Z")

</div>

I don't know if this is the appropiate category but I'm new using elastic stack and in general any tool of this style (because I'm in practice, just out of studying computer science) and the truth is that I am quite fond…

---

## [Getting only selected column in Spring Data Elastic Search Repository](https://discuss.elastic.co/t/getting-only-selected-column-in-spring-data-elastic-search-repository/172470)

<div class="topic-metadata">

**Author:** [@Aayush\_Pant](https://discuss.elastic.co/u/Aayush_Pant)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 7:16am UTC](https://discuss.elastic.co/t/getting-only-selected-column-in-spring-data-elastic-search-repository/172470 "2019-03-15T07:16:49Z")

</div>

I am using Elasticsearch Respository with my Java High Level Rest Client for connecting with my Elasticsearch. Now, I have managed to write a complex query which uses nested, should and must keywords to get certain data…

---

## [Building queries by Java API but calling ELS by Rest](https://discuss.elastic.co/t/building-queries-by-java-api-but-calling-els-by-rest/112589)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 3\
**Last updated:** [December 20, 2017, 10:21am UTC](https://discuss.elastic.co/t/building-queries-by-java-api-but-calling-els-by-rest/112589 "2017-12-20T10:21:40Z")

</div>

Hi, I've found Java API for building queries very convenient in the java application, on the other hand, I want to use Rest Client to call Elastic cluster. Is this a right approach to use Java API to build my queries a…

---

## [X-pack version](https://discuss.elastic.co/t/x-pack-version/95567)

<div class="topic-metadata">

**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 7:48pm UTC](https://discuss.elastic.co/t/x-pack-version/95567 "2017-08-02T19:48:44Z")

</div>

Plugin installation was unsuccessful due to error “Incorrect Kibana version in p lugin \[x-pack\]. Expected \[5.4.0\]; found \[5.4.3\]” Trying to find correct version in x-pack dowload unsuccessfully.

---

## [Getting sum from elasticsearch query](https://discuss.elastic.co/t/getting-sum-from-elasticsearch-query/88195)

<div class="topic-metadata">

**Author:** [@procipher](https://discuss.elastic.co/u/procipher)\
**Replies:** 3\
**Last updated:** [June 29, 2017, 3:30pm UTC](https://discuss.elastic.co/t/getting-sum-from-elasticsearch-query/88195 "2017-06-29T15:30:48Z")

</div>

I have elasticsearch query output in format like this: { "\_index" : "logstash-2017.06.04", "\_type" : "nginx\_log", "\_id" : "AVxzT8gGkcEbrbfVdHEU", "\_score" : null, "\_source" : { "m…

---

## [Subqueries :(](https://discuss.elastic.co/t/subqueries/74260)

<div class="topic-metadata">

**Author:** [@tlovett1](https://discuss.elastic.co/u/tlovett1)\
**Replies:** 3\
**Last updated:** [February 21, 2017, 8:53am UTC](https://discuss.elastic.co/t/subqueries/74260 "2017-02-21T08:53:08Z")

</div>

I am using the ingest mapper plugin to index PDFs: POST /index-name { "attachment\_ID": 1, "data": "binary-data......", "type": "attachment" } Obviously, the data field is ingested. I am storing only "content". …

[Previous page](https://discuss.elastic.co/top.md?page=1686&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1688&per_page=50&period=all)
