# Top

**URL:** https://discuss.elastic.co/top.md?page=1000&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1001

---

## [Problem in Visualizations after using "flattened" datatype](https://discuss.elastic.co/t/problem-in-visualizations-after-using-flattened-datatype/194584)

<div class="topic-metadata">

**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 10:08am UTC](https://discuss.elastic.co/t/problem-in-visualizations-after-using-flattened-datatype/194584 "2019-08-13T10:08:03Z")

</div>

Hi, I just started trying the new "flattened" datatype included in version 7.3 for a field that usually has to many children and I don't usually access them. Here is an example of my documents: order { id: XXX custo…

---

## [Kibana dashboard visualize query](https://discuss.elastic.co/t/kibana-dashboard-visualize-query/73074)

<div class="topic-metadata">

**Author:** [@ViJaY\_S](https://discuss.elastic.co/u/ViJaY_S)\
**Replies:** 2\
**Last updated:** [January 31, 2017, 12:49am UTC](https://discuss.elastic.co/t/kibana-dashboard-visualize-query/73074 "2017-01-31T00:49:09Z")

</div>

Hello, Could you please help me out to create Visualize in Kibana dashboard for the PDF Downloaded Counts from IIS Logs. Using Status code of 200 and only .PDF downloaded counts should display using filters. For E…

---

## [\[Feature\] Filter data by Global Filter (or Quick Filter)](https://discuss.elastic.co/t/feature-filter-data-by-global-filter-or-quick-filter/69779)

<div class="topic-metadata">

**Author:** [@grandanat](https://discuss.elastic.co/u/grandanat)\
**Replies:** 2\
**Last updated:** [January 4, 2017, 8:26am UTC](https://discuss.elastic.co/t/feature-filter-data-by-global-filter-or-quick-filter/69779 "2017-01-04T08:26:05Z")

</div>

In an enterprise environment it's very common to have multiple running instances of same application(that you are develop). For example we use ELK to monitor logs from our application that is deployed in many system envi…

---

## [I can not create a hdfs (hadoop) repository](https://discuss.elastic.co/t/i-can-not-create-a-hdfs-hadoop-repository/62130)

<div class="topic-metadata">

**Author:** [@Jesus](https://discuss.elastic.co/u/Jesus)\
**Replies:** 2\
**Last updated:** [October 4, 2016, 8:46am UTC](https://discuss.elastic.co/t/i-can-not-create-a-hdfs-hadoop-repository/62130 "2016-10-04T08:46:57Z")

</div>

Hello, I want to use hadoop to save snapshot. I configured elasticsearch in this form: 1 - Added security.manager.enabled: false in elasticsearch.yml 2 - Configured the repository propertiesin elasticsearch.yml as: …

---

## [Enhance performance using "rounded" timestamp](https://discuss.elastic.co/t/enhance-performance-using-rounded-timestamp/51416)

<div class="topic-metadata">

**Author:** [@shushu](https://discuss.elastic.co/u/shushu)\
**Replies:** 2\
**Last updated:** [May 31, 2016, 1:12pm UTC](https://discuss.elastic.co/t/enhance-performance-using-rounded-timestamp/51416 "2016-05-31T13:12:30Z")

</div>

Hello, We have an index that get ~15M documents a day, each with a epoch milliseconds timestamp. Date aggregations seems to work fine, but the bigger the index - the longer the query. One action would be to separate th…

---

## [Run Kibana as a Windows service without using nssm tool](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808)

<div class="topic-metadata">

**Author:** [@ARoy](https://discuss.elastic.co/u/ARoy)\
**Replies:** 5\
**Last updated:** [March 3, 2021, 9:35am UTC](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808 "2021-03-03T09:35:01Z")

</div>

Hi, I am using Kibana v 7.10.1, and need to run Kibana without using nssm tool. I tried to install using power shell script as follows : sc.exe create "ElasticSearch Kibana 4.0.1" binPath= "binpath" depend= "elasticsea…

---

## [\[kianba 5.1.1\] How to injectVars in node controller?](https://discuss.elastic.co/t/kianba-5-1-1-how-to-injectvars-in-node-controller/74186)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 5\
**Last updated:** [February 20, 2017, 5:22am UTC](https://discuss.elastic.co/t/kianba-5-1-1-how-to-injectvars-in-node-controller/74186 "2017-02-20T05:22:09Z")

</div>

kibana version: 5.1.1 question: 1. how to injectVars in node controller? or is there some way that I can pass value from node-backend route to chrome ui or any way that i can injectVars from one app to …

---

## [Need to define a role for Filebet and metricbeat for writing to elasticsearch](https://discuss.elastic.co/t/need-to-define-a-role-for-filebet-and-metricbeat-for-writing-to-elasticsearch/272503)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 8\
**Last updated:** [May 10, 2021, 12:28am UTC](https://discuss.elastic.co/t/need-to-define-a-role-for-filebet-and-metricbeat-for-writing-to-elasticsearch/272503 "2021-05-10T00:28:26Z")

</div>

I am running v7.7 of the stack from a ZIP install on Windows. But I have the same issue with v7.12 running as docker container on a Mac. I've searched and searched and either I don't know what to search for, or I don't…

---

## [Journal impossible de récupérer les informations de version à partir des nœuds elasticsearch - Comment résoudre les problèmes connexes](https://discuss.elastic.co/t/journal-impossible-de-recuperer-les-informations-de-version-a-partir-des-noeuds-elasticsearch-comment-resoudre-les-problemes-connexes/254604)

<div class="topic-metadata">

**Author:** [@Ramond](https://discuss.elastic.co/u/Ramond)\
**Replies:** 8\
**Last updated:** [November 8, 2020, 8:50am UTC](https://discuss.elastic.co/t/journal-impossible-de-recuperer-les-informations-de-version-a-partir-des-noeuds-elasticsearch-comment-resoudre-les-problemes-connexes/254604 "2020-11-08T08:50:31Z")

</div>

log \[09:52:49.855\] \[error\]\[savedobjects-service\] Unable to retrieve version information from Elasticsearch nodes. log \[09:52:49.863\] \[warning\]\[licensing\]\[plugins\] License information could not be obtained from Elast…

---

## [Machine Learning on Web server logs](https://discuss.elastic.co/t/machine-learning-on-web-server-logs/184569)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 8\
**Last updated:** [June 13, 2019, 5:56am UTC](https://discuss.elastic.co/t/machine-learning-on-web-server-logs/184569 "2019-06-13T05:56:59Z")

</div>

I am new to this machine learning features. I am having my web access logs. Could you help me with what kind of anomalies or single metric data or how can I use forecasting mechanism

---

## [How to edit elasticsearch.yml file on cloud.elastic](https://discuss.elastic.co/t/how-to-edit-elasticsearch-yml-file-on-cloud-elastic/159695)

<div class="topic-metadata">

**Author:** [@Darshan\_Turakhia](https://discuss.elastic.co/u/Darshan_Turakhia)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 4:33pm UTC](https://discuss.elastic.co/t/how-to-edit-elasticsearch-yml-file-on-cloud-elastic/159695 "2018-12-06T16:33:03Z")

</div>

I am trying to edit elasticsearch.yml file on cloud.elastic but I'm unable to find a way to edit. Please kindly help me how to connect to cloud.elastic via an FTP application.

---

## [Problem with Grok debugger](https://discuss.elastic.co/t/problem-with-grok-debugger/121333)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 3\
**Last updated:** [February 24, 2018, 3:52pm UTC](https://discuss.elastic.co/t/problem-with-grok-debugger/121333 "2018-02-24T15:52:42Z")

</div>

Hello I have the problem with the Grok debugger. I'm reading your post https://www.elastic.co/blog/grokking-the-linux-authorization-logs and I try to parse this sample line Feb 21 21:56:12 localhost sshd\[3430\]: Invali…

---

## [Node types and cluster settings in ES 5.x](https://discuss.elastic.co/t/node-types-and-cluster-settings-in-es-5-x/97914)

<div class="topic-metadata">

**Author:** [@Eduard\_Kubanda](https://discuss.elastic.co/u/Eduard_Kubanda)\
**Replies:** 3\
**Last updated:** [August 23, 2017, 1:22pm UTC](https://discuss.elastic.co/t/node-types-and-cluster-settings-in-es-5-x/97914 "2017-08-23T13:22:08Z")

</div>

Hi there, I am a bit confused about cluster nodes settings. There is a lot of topics and articles about nodes / shards / replicas settings, but I often find inaccuracies between current (or my) version - articles & topi…

---

## [Chinese Analyzer: Simplified and Traditional (stconvert)](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812)

<div class="topic-metadata">

**Author:** [@Karuna](https://discuss.elastic.co/u/Karuna)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 2:20pm UTC](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812 "2022-02-28T14:20:24Z")

</div>

I'm creating a search engine for my non-profit org that uses 21 languages, so I also need to support traditional and simplified Chinese as these are our second largest set of readers. I have read a few articles (你们好 - E…

---

## [Specific Alarm Values : bulding an array of JSON elements in the condition scripts](https://discuss.elastic.co/t/specific-alarm-values-bulding-an-array-of-json-elements-in-the-condition-scripts/105395)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 7\
**Last updated:** [October 26, 2017, 1:38pm UTC](https://discuss.elastic.co/t/specific-alarm-values-bulding-an-array-of-json-elements-in-the-condition-scripts/105395 "2017-10-26T13:38:40Z")

</div>

Hi all, I have a watch with a script condition that loops over the results and if exists one value greater than my threshold the condition return value is set to true. So far, so good. But...because in my action I want…

---

## [Packetbeat service does not start](https://discuss.elastic.co/t/packetbeat-service-does-not-start/104191)

<div class="topic-metadata">

**Author:** [@vijayjadav](https://discuss.elastic.co/u/vijayjadav)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 10:44pm UTC](https://discuss.elastic.co/t/packetbeat-service-does-not-start/104191 "2017-10-17T22:44:37Z")

</div>

hello, I am trying to run packetbeat service but its giving error ..here is details. I am using Windows 10. No error in logs and config files PS C:\\Packetbeat\> PowerShell.exe -ExecutionPolicy UnRestricted -File .\\insta…

---

## [ES 5.0 Alpha 3 error on starting up engine](https://discuss.elastic.co/t/es-5-0-alpha-3-error-on-starting-up-engine/53721)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 1\
**Last updated:** [July 5, 2016, 9:51am UTC](https://discuss.elastic.co/t/es-5-0-alpha-3-error-on-starting-up-engine/53721 "2016-07-05T09:51:32Z")

</div>

I have installed ES 5.0.0 Alpha 3 and try to start it up. However, it gives me the following result. Error: missing \`server' JVM at \`C:\\Program Files (x86)\\Java\\jre1.8.0\_91\\bin\\server\\jvm.dll'. Please install or use th…

---

## [Session expiration](https://discuss.elastic.co/t/session-expiration/270131)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 4\
**Last updated:** [April 15, 2021, 10:21am UTC](https://discuss.elastic.co/t/session-expiration/270131 "2021-04-15T10:21:59Z")

</div>

Hi there, my team is responsible for a few clusters and the users are running into two different errors fairly frequently. At the moment we are focusing on two issues that seem to have similar causes. The first log entr…

---

## [APM timeline for redis,mysql or other application](https://discuss.elastic.co/t/apm-timeline-for-redis-mysql-or-other-application/154960)

<div class="topic-metadata">

**Author:** [@jerrymouse](https://discuss.elastic.co/u/jerrymouse)\
**Replies:** 4\
**Last updated:** [November 1, 2018, 10:09am UTC](https://discuss.elastic.co/t/apm-timeline-for-redis-mysql-or-other-application/154960 "2018-11-01T10:09:15Z")

</div>

How to look at the cache of the requested time-consuming records, I used redis and mysql but only the DB

---

## [Getting EsHadoopNoNodesLeftException](https://discuss.elastic.co/t/getting-eshadoopnonodesleftexception/81840)

<div class="topic-metadata">

**Author:** [@vsdeepthi](https://discuss.elastic.co/u/vsdeepthi)\
**Replies:** 4\
**Last updated:** [April 12, 2017, 8:42pm UTC](https://discuss.elastic.co/t/getting-eshadoopnonodesleftexception/81840 "2017-04-12T20:42:52Z")

</div>

Getting the below exception when I submit a Spark job, org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed; tried I tried setting es.no…

---

## [Rally gets stuck on check-cluster-health](https://discuss.elastic.co/t/rally-gets-stuck-on-check-cluster-health/262480)

<div class="topic-metadata">

**Author:** [@rsarpal](https://discuss.elastic.co/u/rsarpal)\
**Replies:** 6\
**Last updated:** [February 4, 2021, 8:04am UTC](https://discuss.elastic.co/t/rally-gets-stuck-on-check-cluster-health/262480 "2021-02-04T08:04:10Z")

</div>

Hi, We have older version of elastic 2.4 , I am trying to test it with rally. I have tried to test with latest and the older versions of rally (1.3.0, 1.4.1, latest) Rally gets stuck on check-cluster-health Running pu…

---

## [Logstash-filter-elasticsearch plugin fails to look up in amazon es](https://discuss.elastic.co/t/logstash-filter-elasticsearch-plugin-fails-to-look-up-in-amazon-es/116362)

<div class="topic-metadata">

**Author:** [@srama](https://discuss.elastic.co/u/srama)\
**Replies:** 6\
**Last updated:** [January 21, 2018, 4:34pm UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-plugin-fails-to-look-up-in-amazon-es/116362 "2018-01-21T16:34:23Z")

</div>

Hi, New to ELK. I am trying to use logstash-filter-elasticsearch plugin for some look up and computation. It works fine with on prem 5.6.3 version. The same config fails while connection to Amazon ES 6.0. Here is my…

---

## [Search a specific document?](https://discuss.elastic.co/t/search-a-specific-document/9993)

<div class="topic-metadata">

**Author:** [@A\_Zed](https://discuss.elastic.co/u/A_Zed)\
**Replies:** 6\
**Last updated:** [December 23, 2013, 5:15am UTC](https://discuss.elastic.co/t/search-a-specific-document/9993 "2013-12-23T05:15:34Z")

</div>

Is it possible to run a query against a specific document? I have the doc ID and the query; I'd like to just query that document. Thanks! --

---

## [How Elasticsearch snapshot works when segments are merged](https://discuss.elastic.co/t/how-elasticsearch-snapshot-works-when-segments-are-merged/172860)

<div class="topic-metadata">

**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\
**Replies:** 5\
**Last updated:** [March 18, 2019, 10:09pm UTC](https://discuss.elastic.co/t/how-elasticsearch-snapshot-works-when-segments-are-merged/172860 "2019-03-18T22:09:23Z")

</div>

Hi, my current understanding is that snapshot is incremental file/segement by file used by indices. When segments are merged even if no new data are indexed to indices, snapshot will captue the difference due to segment …

---

## [Elastic Stack QRadar Integration](https://discuss.elastic.co/t/elastic-stack-qradar-integration/210247)

<div class="topic-metadata">

**Author:** [@Booooooo](https://discuss.elastic.co/u/Booooooo)\
**Replies:** 1\
**Last updated:** [December 3, 2019, 1:03pm UTC](https://discuss.elastic.co/t/elastic-stack-qradar-integration/210247 "2019-12-03T13:03:25Z")

</div>

Hi, So I have been playing with forwarding events from QRadar to the Elastic Stack. I have configured QRadar to forward events to Logstash via TCP in JSON format. On Logstash I have... Input: input { tcp { …

---

## [TypeError when setting tracking\_column\_type to "timestamp" and use\_column\_value to true](https://discuss.elastic.co/t/typeerror-when-setting-tracking-column-type-to-timestamp-and-use-column-value-to-true/132822)

<div class="topic-metadata">

**Author:** [@Garrick\_Hensberg](https://discuss.elastic.co/u/Garrick_Hensberg)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 1:27pm UTC](https://discuss.elastic.co/t/typeerror-when-setting-tracking-column-type-to-timestamp-and-use-column-value-to-true/132822 "2018-05-31T13:27:16Z")

</div>

I am experiencing an issue when trying to use the tracking\_column\_type="timestamp" and use\_column\_value=true properties with the jdbc input plugin. I keep getting the below error: { 2012 rufus-scheduler intercepted an …

---

## [X-PACK with OAUTH Authentication](https://discuss.elastic.co/t/x-pack-with-oauth-authentication/72015)

<div class="topic-metadata">

**Author:** [@madhu1512](https://discuss.elastic.co/u/madhu1512)\
**Replies:** 1\
**Last updated:** [January 19, 2017, 1:58pm UTC](https://discuss.elastic.co/t/x-pack-with-oauth-authentication/72015 "2017-01-19T13:58:14Z")

</div>

As any worked on integrating x-pack with Oauth systems ( github, Google etc..)? Any help is appreciated.

---

## [Restoring an index from another cluster via rsync](https://discuss.elastic.co/t/restoring-an-index-from-another-cluster-via-rsync/28141)

<div class="topic-metadata">

**Author:** [@Zack](https://discuss.elastic.co/u/Zack)\
**Replies:** 1\
**Last updated:** [August 27, 2015, 4:49pm UTC](https://discuss.elastic.co/t/restoring-an-index-from-another-cluster-via-rsync/28141 "2015-08-27T16:49:11Z")

</div>

So I've two 0.90 clusters, in two datacenters, and I've an rsync script on a single node in the new cluster that scrapes the \_cluster/state of the old cluster, and rsyncs shards from the appropriate nodes. Because of …

---

## [Kibana discover query where two fields are not the same?](https://discuss.elastic.co/t/kibana-discover-query-where-two-fields-are-not-the-same/321431)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 3\
**Last updated:** [December 16, 2022, 10:18pm UTC](https://discuss.elastic.co/t/kibana-discover-query-where-two-fields-are-not-the-same/321431 "2022-12-16T22:18:33Z")

</div>

I tried running a query like NOT client.geo.country\_iso\_code: source.geo.country\_iso\_code, but it returned results where client.geo.country\_iso\_code == source.geo.country\_iso\_code Anyone know what's wrong with my que…

---

## [Combining Painless and Mustache](https://discuss.elastic.co/t/combining-painless-and-mustache/296209)

<div class="topic-metadata">

**Author:** [@Navanit\_dubey](https://discuss.elastic.co/u/Navanit_dubey)\
**Replies:** 3\
**Last updated:** [February 17, 2022, 8:44am UTC](https://discuss.elastic.co/t/combining-painless-and-mustache/296209 "2022-02-17T08:44:08Z")

</div>

Can I make a template using both the painless script and mustache. So as to make a search query where the search is done by mustache template and its done insde the painless language query.

---

## [Cluster/indices/shard health in a dashboard?](https://discuss.elastic.co/t/cluster-indices-shard-health-in-a-dashboard/158812)

<div class="topic-metadata">

**Author:** [@cbarton](https://discuss.elastic.co/u/cbarton)\
**Replies:** 3\
**Last updated:** [November 29, 2018, 9:27pm UTC](https://discuss.elastic.co/t/cluster-indices-shard-health-in-a-dashboard/158812 "2018-11-29T21:27:38Z")

</div>

I frequently need to check \_cat/health, \_cat/nodes, \_cat/indices (usually with a sort for store size descending), \_cat/shards and so on to monitor disk usage and overall health of my elasticsearch cluster. My team would…

---

## [How to stop the process of Delete-by-query plugin](https://discuss.elastic.co/t/how-to-stop-the-process-of-delete-by-query-plugin/44657)

<div class="topic-metadata">

**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 3:57am UTC](https://discuss.elastic.co/t/how-to-stop-the-process-of-delete-by-query-plugin/44657 "2016-03-18T03:57:18Z")

</div>

hi: I use the Delete-by-query plugin to delete the 20 millions records in the 6 billion records. But it rans too slowly and it is only able to delete about 1 million per hour. I don't want to wait the finish of dele…

---

## [\[ERROR\]\[plugins.fleet\] Failed to fetch latest version](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version/335115)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 2\
**Last updated:** [June 16, 2023, 5:11pm UTC](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version/335115 "2023-06-16T17:11:30Z")

</div>

Hello everyone I have the same error that is shown in this closed post: (Fleet server loading slowly) Internet access goes through a proxy, but throwing curl to said URL responds without problems. Also added this info …

---

## [Kibana TimeStamp Offset](https://discuss.elastic.co/t/kibana-timestamp-offset/210556)

<div class="topic-metadata">

**Author:** [@wokmichel](https://discuss.elastic.co/u/wokmichel)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 9:26am UTC](https://discuss.elastic.co/t/kibana-timestamp-offset/210556 "2019-12-05T09:26:58Z")

</div>

Hello, I am wondering how Kibana is handling timestamps' timezones when presenting documents in the discover section. I was under the impression that Kibana would use the browser timezone if none was specified in the fi…

---

## [Parsing nested XML into logstash](https://discuss.elastic.co/t/parsing-nested-xml-into-logstash/125131)

<div class="topic-metadata">

**Author:** [@porkiz](https://discuss.elastic.co/u/porkiz)\
**Replies:** 2\
**Last updated:** [March 22, 2018, 1:18pm UTC](https://discuss.elastic.co/t/parsing-nested-xml-into-logstash/125131 "2018-03-22T13:18:45Z")

</div>

\<eg\> \<suite\> \<some\_data\_1 attr1\>test 1 \<some\_data\_2 attr2\>test 2 \</suite\> \<suite\> \<some\_data\_3 attr3\>test 3 \<some\_data\_4 attr4\>test 4 \</suite\> \</eg\> \<appendix\> \<more info\> \<some\_data\_1 attr1\>Info1 \<some\_…

---

## [Error: Cannot use more than 1 filter worker](https://discuss.elastic.co/t/error-cannot-use-more-than-1-filter-worker/782)

<div class="topic-metadata">

**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\
**Replies:** 2\
**Last updated:** [May 18, 2015, 2:28am UTC](https://discuss.elastic.co/t/error-cannot-use-more-than-1-filter-worker/782 "2015-05-18T02:28:17Z")

</div>

Has anyone seen this error before? First time i saw it on 1.5 GA "Error: Cannot use more than 1 filter worker because the following plugins don't work with more than one worker: multiline, multiline, multiline"

---

## [How Does Elasticsearch Store Data?](https://discuss.elastic.co/t/how-does-elasticsearch-store-data/16276)

<div class="topic-metadata">

**Author:** [@Marcus\_Young](https://discuss.elastic.co/u/Marcus_Young)\
**Replies:** 2\
**Last updated:** [March 11, 2014, 12:01pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-store-data/16276 "2014-03-11T12:01:51Z")

</div>

I'm running Logstash with Redis, Kibana, and Elasticsearch. All is working well. But when I look in the configured location for data, as set in the elasticsearch.yml file I see nothing. The directory is empty. B…

---

## [Wildcard datatype lowercase](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726)

<div class="topic-metadata">

**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 9:00am UTC](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726 "2020-08-20T09:00:45Z")

</div>

I am looking at the Wildcard datatype introduced in 7.9. I would like to normalize it first by lowercasing and removing whitespace. I can't work out the syntax. "normalizer" and "analyzer" don't seem to be supported.

---

## [Add existing fields to my logstash](https://discuss.elastic.co/t/add-existing-fields-to-my-logstash/284626)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 8\
**Last updated:** [September 21, 2021, 12:24pm UTC](https://discuss.elastic.co/t/add-existing-fields-to-my-logstash/284626 "2021-09-21T12:24:49Z")

</div>

hello ! I would like to be able to add existing fields in an already stored index and to be able to work with them in logstash. I understand that there are enrichment policies but I would like not to have to use kibana…

---

## [High risk on elasticsearch 9200/tcp Reported by Nessus](https://discuss.elastic.co/t/high-risk-on-elasticsearch-9200-tcp-reported-by-nessus/105497)

<div class="topic-metadata">

**Author:** [@xiaodong.hu](https://discuss.elastic.co/u/xiaodong.hu)\
**Replies:** 8\
**Last updated:** [October 30, 2017, 5:59am UTC](https://discuss.elastic.co/t/high-risk-on-elasticsearch-9200-tcp-reported-by-nessus/105497 "2017-10-30T05:59:07Z")

</div>

hello, I used Nessus to scan Elaticsearch (5.4.0),and there is one High risk on Elasticsearch: \[image\] How can I fix it? thank you.

---

## [Osquery Manager does not return results from curl table](https://discuss.elastic.co/t/osquery-manager-does-not-return-results-from-curl-table/305019)

<div class="topic-metadata">

**Author:** [@hwang](https://discuss.elastic.co/u/hwang)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 5:28pm UTC](https://discuss.elastic.co/t/osquery-manager-does-not-return-results-from-curl-table/305019 "2022-05-19T17:28:33Z")

</div>

Hi Elastic team, Running a query from the curl table returns an empty result. I've confirmed that other queries work and curl\_certificates work as well. SELECT \* FROM curl WHERE url = 'https://www.google.com' Is there…

---

## [Max value of index with scripted field in visualizasion](https://discuss.elastic.co/t/max-value-of-index-with-scripted-field-in-visualizasion/260688)

<div class="topic-metadata">

**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\
**Replies:** 7\
**Last updated:** [January 14, 2021, 9:21am UTC](https://discuss.elastic.co/t/max-value-of-index-with-scripted-field-in-visualizasion/260688 "2021-01-14T09:21:47Z")

</div>

Hello. I'm trying to make linear visualization with average workTime per document and max workTime throw all index. I have two dates: start and end process. So i created scripted field doc\['end\_time'\].value.toInstant().…

---

## [Repository S3 plugin amazon\_client\_exception](https://discuss.elastic.co/t/repository-s3-plugin-amazon-client-exception/117126)

<div class="topic-metadata">

**Author:** [@mmarinm](https://discuss.elastic.co/u/mmarinm)\
**Replies:** 7\
**Last updated:** [January 31, 2018, 10:24pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-amazon-client-exception/117126 "2018-01-31T22:24:44Z")

</div>

Hi, I need some help with the issue I am getting when I try to take a snapshot with repository s3 plugin. I can't figure out what is the reason for the error. I don't know Java. But as far as I could understand it seems …

---

## [Index not recognized from java API](https://discuss.elastic.co/t/index-not-recognized-from-java-api/11257)

<div class="topic-metadata">

**Author:** [@Chetana](https://discuss.elastic.co/u/Chetana)\
**Replies:** 7\
**Last updated:** [March 22, 2013, 11:15am UTC](https://discuss.elastic.co/t/index-not-recognized-from-java-api/11257 "2013-03-22T11:15:49Z")

</div>

I am new to ElasticSearch. Using Elastic search(version 0.20.5) as Standalone. I have created index using 'curl -XPUT 'http://localhost:9200/test/''. I could also see empty mapping for '''test' when I run curl -XGET …

---

## [Vega histogram does not work in Kibana](https://discuss.elastic.co/t/vega-histogram-does-not-work-in-kibana/151092)

<div class="topic-metadata">

**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\
**Replies:** 3\
**Last updated:** [October 6, 2018, 6:47pm UTC](https://discuss.elastic.co/t/vega-histogram-does-not-work-in-kibana/151092 "2018-10-06T18:47:21Z")

</div>

I tried to create histogram based on the variable "battery\_temp\_mean", but it shows an error "Cannot read property 'origins' of undefined". If I removed the format line, it shows another error "Cannot read property 'batt…

---

## [X-Pack Trail license](https://discuss.elastic.co/t/x-pack-trail-license/65118)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 3\
**Last updated:** [November 7, 2016, 12:31pm UTC](https://discuss.elastic.co/t/x-pack-trail-license/65118 "2016-11-07T12:31:42Z")

</div>

Hi I have upgraded to ELK 5 . Sorry - was posted without finishing write up. I have installed ELK 5.0 and XPack. However I couldn't find the trail license (30 days evaluation) for XPack and hence couldn't even try t…

---

## [Getting MapperParsingException while parsing a string and a number?](https://discuss.elastic.co/t/getting-mapperparsingexception-while-parsing-a-string-and-a-number/7279)

<div class="topic-metadata">

**Author:** [@Jean\_Sebastien\_Delfi](https://discuss.elastic.co/u/Jean_Sebastien_Delfi)\
**Replies:** 3\
**Last updated:** [December 10, 2014, 4:55pm UTC](https://discuss.elastic.co/t/getting-mapperparsingexception-while-parsing-a-string-and-a-number/7279 "2014-12-10T16:55:05Z")

</div>

Hi, I'm trying to put JSON data into Elastic Search like this: curl -XPUT 'http://localhost:9200/test/tweet/1' -d '{ "user": "jane doe", "contentType": "article", "content": { "title": "some news", "text": "blah b…

---

## [Kibana i see Indices and fields but cannot Visualize - Please HELP](https://discuss.elastic.co/t/kibana-i-see-indices-and-fields-but-cannot-visualize-please-help/748)

<div class="topic-metadata">

**Author:** [@gitvegas](https://discuss.elastic.co/u/gitvegas)\
**Replies:** 2\
**Last updated:** [May 15, 2015, 10:36pm UTC](https://discuss.elastic.co/t/kibana-i-see-indices-and-fields-but-cannot-visualize-please-help/748 "2015-05-15T22:36:10Z")

</div>

This is really basic. I curled the sample bank data to elasticsearch. On Kibana i see under Indices bank and on visualize all the fields (example age, balance etc) on LEFT but cannot see charts on RIGHT. Always says No R…

---

## [Closest number query](https://discuss.elastic.co/t/closest-number-query/11275)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 2\
**Last updated:** [March 26, 2013, 1:44am UTC](https://discuss.elastic.co/t/closest-number-query/11275 "2013-03-26T01:44:36Z")

</div>

Hello, I'm working on interesting problem, and I think it could be solved using ES features. I have millions of documents, which have an multi-field of 2 numbers. Here is an example: \_source{ some\_data:{ rela…

---

## [Nginx module - WARN Can not index event (status=400)](https://discuss.elastic.co/t/nginx-module-warn-can-not-index-event-status-400/123700)

<div class="topic-metadata">

**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\
**Replies:** 5\
**Last updated:** [March 16, 2018, 10:20am UTC](https://discuss.elastic.co/t/nginx-module-warn-can-not-index-event-status-400/123700 "2018-03-16T10:20:48Z")

</div>

Hi, I am trying to use NGINX module. Filebeat, elasticsearch and kibana are runing in version 6.1.0. According to here under extract from filebeat logs, I am experiencing index issue due to parsing exception ... Any hel…

[Previous page](https://discuss.elastic.co/top.md?page=999&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1001&per_page=50&period=all)
