# Top

**URL:** https://discuss.elastic.co/top.md?page=1004&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1005

---

## [Kibana total data ingest and total index data ingest rate visulization](https://discuss.elastic.co/t/kibana-total-data-ingest-and-total-index-data-ingest-rate-visulization/232102)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 12:44pm UTC](https://discuss.elastic.co/t/kibana-total-data-ingest-and-total-index-data-ingest-rate-visulization/232102 "2020-05-12T12:44:07Z")

</div>

Is there a way to track the overall data ingest rate of an ECE deployment? I'd also like to create a visualization that does the same with a specific index so that I can maintain a good idea of what the daily ingest rat…

---

## [Сравнение строк (Посимвольное, Dice coefficient)](https://discuss.elastic.co/t/dice-coefficient/149874)

<div class="topic-metadata">

**Author:** [@ConConovaloff](https://discuss.elastic.co/u/ConConovaloff)\
**Replies:** 5\
**Last updated:** [September 27, 2018, 2:45pm UTC](https://discuss.elastic.co/t/dice-coefficient/149874 "2018-09-27T14:45:40Z")

</div>

В elastic есть 2000 документов, которые содержат название бренда Например: Валио Nesquick Невские берега Невские сыры Невские Задача: использовать elastic для нахождения бренда в передаваемой строке Например:…

---

## [ES return more hits than I expected](https://discuss.elastic.co/t/es-return-more-hits-than-i-expected/71870)

<div class="topic-metadata">

**Author:** [@ji\_luo](https://discuss.elastic.co/u/ji_luo)\
**Replies:** 5\
**Last updated:** [January 18, 2017, 9:49pm UTC](https://discuss.elastic.co/t/es-return-more-hits-than-i-expected/71870 "2017-01-18T21:49:21Z")

</div>

ES version: 2.4.2 I use transport client to sent a search request to an ES index which has 5 shards, request parameter: from=0, size=10. And then, I got 50 hits back (10 hits per shard, I think). But if I changed from …

---

## [Is there a way to freeze Kibana top Panel. Please assist](https://discuss.elastic.co/t/is-there-a-way-to-freeze-kibana-top-panel-please-assist/48025)

<div class="topic-metadata">

**Author:** [@Farhan](https://discuss.elastic.co/u/Farhan)\
**Replies:** 5\
**Last updated:** [April 25, 2016, 3:34pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-freeze-kibana-top-panel-please-assist/48025 "2016-04-25T15:34:39Z")

</div>

---

## [HW recommendations and best practices for a big index rate(3TB/day)](https://discuss.elastic.co/t/hw-recommendations-and-best-practices-for-a-big-index-rate-3tb-day/38064)

<div class="topic-metadata">

**Author:** [@andreynikk](https://discuss.elastic.co/u/andreynikk)\
**Replies:** 5\
**Last updated:** [December 29, 2015, 5:21pm UTC](https://discuss.elastic.co/t/hw-recommendations-and-best-practices-for-a-big-index-rate-3tb-day/38064 "2015-12-29T17:21:10Z")

</div>

Hi All, Elasticsearch site provides a fairly minimal HW recommendations regarding on what to use to best utilize ES ("use SSDs), and provides no estimates on what performance should be expected according to the defined…

---

## [Getting a query into filter context](https://discuss.elastic.co/t/getting-a-query-into-filter-context/33994)

<div class="topic-metadata">

**Author:** [@Brian\_Hudson](https://discuss.elastic.co/u/Brian_Hudson)\
**Replies:** 5\
**Last updated:** [November 11, 2015, 2:57pm UTC](https://discuss.elastic.co/t/getting-a-query-into-filter-context/33994 "2015-11-11T14:57:53Z")

</div>

If I have a simple query like: termQuery("name", "Brian") What is the suggested method of getting that query into filter context in Elasticsearch 2.0? Wrapping it in a boolQuery? boolQuery().filter(termQuery("name…

---

## [FTP repository](https://discuss.elastic.co/t/ftp-repository/274508)

<div class="topic-metadata">

**Author:** [@Chinedum\_Nwuzor](https://discuss.elastic.co/u/Chinedum_Nwuzor)\
**Replies:** 4\
**Last updated:** [June 11, 2021, 11:53am UTC](https://discuss.elastic.co/t/ftp-repository/274508 "2021-06-11T11:53:36Z")

</div>

Hello, I am trying to setup an FTP repository for my snapshots. However, it fails with an access denied error message. Please the ftp url I used ftp://username:password@host/ Kindly assist.

---

## [Year over Year Calculations](https://discuss.elastic.co/t/year-over-year-calculations/227559)

<div class="topic-metadata">

**Author:** [@dmankaruse](https://discuss.elastic.co/u/dmankaruse)\
**Replies:** 4\
**Last updated:** [April 15, 2020, 5:58pm UTC](https://discuss.elastic.co/t/year-over-year-calculations/227559 "2020-04-15T17:58:27Z")

</div>

I am trying to create a report with year over year calculations, I want to show to sum of activity in Jan 2020, and compare that with the sum of Jan 2019, I wish to display this is a numeric value of the difference, and …

---

## [Data Loss or a chance](https://discuss.elastic.co/t/data-loss-or-a-chance/56480)

<div class="topic-metadata">

**Author:** [@graubitz](https://discuss.elastic.co/u/graubitz)\
**Replies:** 4\
**Last updated:** [July 27, 2016, 12:16pm UTC](https://discuss.elastic.co/t/data-loss-or-a-chance/56480 "2016-07-27T12:16:09Z")

</div>

Hi all, my colleague mixed up the mappings in ES 2.1.0 for the same idnex. Since our server crashed a week ago we are not able to restart our server with the old data as ES throws the error: . . . is defined as an …

---

## [I have imported the dashboard](https://discuss.elastic.co/t/i-have-imported-the-dashboard/327144)

<div class="topic-metadata">

**Author:** [@ghorpade84](https://discuss.elastic.co/u/ghorpade84)\
**Replies:** 6\
**Last updated:** [March 8, 2023, 2:20pm UTC](https://discuss.elastic.co/t/i-have-imported-the-dashboard/327144 "2023-03-08T14:20:56Z")

</div>

I have imported the dashboard from git however dashboard shows no data in it , visualization id not found

---

## [Is it possible to specify search analyzer in python elasticsearch dsl?](https://discuss.elastic.co/t/is-it-possible-to-specify-search-analyzer-in-python-elasticsearch-dsl/194302)

<div class="topic-metadata">

**Author:** [@N\_Antech](https://discuss.elastic.co/u/N_Antech)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:07am UTC](https://discuss.elastic.co/t/is-it-possible-to-specify-search-analyzer-in-python-elasticsearch-dsl/194302 "2019-08-09T06:07:35Z")

</div>

I recently found that for a query I'm trying to run I need to specify the analyzer. This is easy enough via the REST api: GET index/\_search { "query": { "match": { "field": { "query": "ZR000041", …

---

## [Unable to process the file input which has Key Value pairs](https://discuss.elastic.co/t/unable-to-process-the-file-input-which-has-key-value-pairs/118370)

<div class="topic-metadata">

**Author:** [@madeti](https://discuss.elastic.co/u/madeti)\
**Replies:** 7\
**Last updated:** [February 26, 2018, 10:51am UTC](https://discuss.elastic.co/t/unable-to-process-the-file-input-which-has-key-value-pairs/118370 "2018-02-26T10:51:07Z")

</div>

Hello, My input file is a single line file which has multiple key Value pairs in it. Of them the field or Key “content” is the only one that is needed. I can drop the rest. The key/field “content” has a lot of events an…

---

## [X-pack watcher: Compare alerts from yesterday](https://discuss.elastic.co/t/x-pack-watcher-compare-alerts-from-yesterday/103406)

<div class="topic-metadata">

**Author:** [@xixo](https://discuss.elastic.co/u/xixo)\
**Replies:** 7\
**Last updated:** [October 24, 2017, 8:14am UTC](https://discuss.elastic.co/t/x-pack-watcher-compare-alerts-from-yesterday/103406 "2017-10-24T08:14:04Z")

</div>

Hi, I want to generate a notification if the current events have decreased a 20% since yesterday. Example: Sunday: 100 Events Monday: 60 Events -\> Notification is it possible to define this query?

---

## [Data mining firewall logs with machine learning](https://discuss.elastic.co/t/data-mining-firewall-logs-with-machine-learning/86751)

<div class="topic-metadata">

**Author:** [@mariofcs](https://discuss.elastic.co/u/mariofcs)\
**Replies:** 1\
**Last updated:** [May 24, 2017, 7:40am UTC](https://discuss.elastic.co/t/data-mining-firewall-logs-with-machine-learning/86751 "2017-05-24T07:40:27Z")

</div>

Can anybody tell if the method described in the following url can be done with Elastic - Machine Learning : Regards Mario

---

## [Operator "and" does not work](https://discuss.elastic.co/t/operator-and-does-not-work/85997)

<div class="topic-metadata">

**Author:** [@hairinwind](https://discuss.elastic.co/u/hairinwind)\
**Replies:** 1\
**Last updated:** [May 16, 2017, 6:21pm UTC](https://discuss.elastic.co/t/operator-and-does-not-work/85997 "2017-05-16T18:21:11Z")

</div>

Here is the query { "query": { "match": { "english": { "query" : "all this", "operator": "and" } } } } I expect the result contains "both" all and "this". But the result can …

---

## [Problems using regionmap on kibana 6.5.1](https://discuss.elastic.co/t/problems-using-regionmap-on-kibana-6-5-1/165308)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 6\
**Last updated:** [February 4, 2019, 8:42am UTC](https://discuss.elastic.co/t/problems-using-regionmap-on-kibana-6-5-1/165308 "2019-02-04T08:42:39Z")

</div>

I'm trying to configurate regionmap in a kibana instance that are running in local. AlWays kibana return the same error: "Cannot download http://localhost:8000/example1.geojson file. Please ensure the CORS configuration…

---

## [Canvas and Dashboard show different values](https://discuss.elastic.co/t/canvas-and-dashboard-show-different-values/288418)

<div class="topic-metadata">

**Author:** [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Replies:** 8\
**Last updated:** [November 5, 2021, 2:38pm UTC](https://discuss.elastic.co/t/canvas-and-dashboard-show-different-values/288418 "2021-11-05T14:38:24Z")

</div>

Hi together, I have created a metric visualization on a dashboard. The metric just counts the number of records (1.436) see picture below. I have created a metric visualization on a canvas (some index) and the metri…

---

## [APM Labels: best practices](https://discuss.elastic.co/t/apm-labels-best-practices/234924)

<div class="topic-metadata">

**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\
**Replies:** 3\
**Last updated:** [June 8, 2020, 8:31am UTC](https://discuss.elastic.co/t/apm-labels-best-practices/234924 "2020-06-08T08:31:14Z")

</div>

Hi! I'm using Elastic Stack for Application Performance Management (APM). Many applications will send metrics and transactions to a centralised solution of APM. I have some doubts about custom "labels", which is a dyn…

---

## [Retryable error when running logstash config](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228)

<div class="topic-metadata">

**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\
**Replies:** 3\
**Last updated:** [November 12, 2018, 5:50am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228 "2018-11-12T05:50:04Z")

</div>

Hello there I'm new to ELk and playing around with diff logstash confg. While running the same, i see below error: \[ERROR\] 2018-11-12 04:44:37.028 \[\[main\]\>worker1\] elasticsearch - Encountered a retryable error. Will Re…

---

## [Kibana Errors](https://discuss.elastic.co/t/kibana-errors/84036)

<div class="topic-metadata">

**Author:** [@urbans](https://discuss.elastic.co/u/urbans)\
**Replies:** 3\
**Last updated:** [May 2, 2017, 10:31pm UTC](https://discuss.elastic.co/t/kibana-errors/84036 "2017-05-02T22:31:46Z")

</div>

Having issues with kibana. I am new to Elastic Search and all. So not sure what to look for and such. Any help would be appreciated. FIRST ISSUE: Status Breakdown ID Status ui settings Elasticsearch plugin is …

---

## [Search Performance of index with large documents (PDF's)](https://discuss.elastic.co/t/search-performance-of-index-with-large-documents-pdfs/42533)

<div class="topic-metadata">

**Author:** [@Petter](https://discuss.elastic.co/u/Petter)\
**Replies:** 3\
**Last updated:** [March 9, 2016, 7:34am UTC](https://discuss.elastic.co/t/search-performance-of-index-with-large-documents-pdfs/42533 "2016-03-09T07:34:13Z")

</div>

Hello! I'm new to Elasticsearch and would like some help with tuning and tips on how to increase the performance of my index. Currently i have around 4500 documents in the index and a size on disc about 34GB that co…

---

## [Painless - cosineSimilarity - How use the static reference](https://discuss.elastic.co/t/painless-cosinesimilarity-how-use-the-static-reference/217928)

<div class="topic-metadata">

**Author:** [@Remy\_Letient](https://discuss.elastic.co/u/Remy_Letient)\
**Replies:** 2\
**Last updated:** [February 5, 2020, 10:13am UTC](https://discuss.elastic.co/t/painless-cosinesimilarity-how-use-the-static-reference/217928 "2020-02-05T10:13:45Z")

</div>

Hello, I'm using painless for a scoring function and I'm encountering a problem like that: "caused\_by": { "type": "illegal\_state\_exception", "reason": "no 'this' pointer within static method" } because my script u…

---

## [Ingest Pipeline data processor adds hours](https://discuss.elastic.co/t/ingest-pipeline-data-processor-adds-hours/215154)

<div class="topic-metadata">

**Author:** [@fabian](https://discuss.elastic.co/u/fabian)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 2:27pm UTC](https://discuss.elastic.co/t/ingest-pipeline-data-processor-adds-hours/215154 "2020-01-16T14:27:49Z")

</div>

Hey there, I have a problem with the data ingest processor for one logfile. It adds the timezone hours to my @timestamp. In my case +1h. I use the pipelines with data processor a lot, so I cannot figure out why this is…

---

## [Elasticsearch index folder contains corrupted file](https://discuss.elastic.co/t/elasticsearch-index-folder-contains-corrupted-file/213309)

<div class="topic-metadata">

**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\
**Replies:** 2\
**Last updated:** [December 30, 2019, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-index-folder-contains-corrupted-file/213309 "2019-12-30T06:20:03Z")

</div>

Recently we found out that some of our indexes are unable to get shards allocated (cluster state remains in Red state as the consequence). When we check the index files, we found a file named "corrupted\_SWN5k349Qx2lZY1f…

---

## [Setting up Winlogbeats with Logstash issues](https://discuss.elastic.co/t/setting-up-winlogbeats-with-logstash-issues/164185)

<div class="topic-metadata">

**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\
**Replies:** 2\
**Last updated:** [June 7, 2019, 1:16am UTC](https://discuss.elastic.co/t/setting-up-winlogbeats-with-logstash-issues/164185 "2019-06-07T01:16:13Z")

</div>

Hi there, I am trying to test out setting up 1 windows host and sending winlogbeat data to logstash. So far I have opened up a pipeline in logstash for beats, then configured the winlogbeat.yml file to point to logstash…

---

## [Unable to communicate between the two elasticsearch clusters of different datacenters](https://discuss.elastic.co/t/unable-to-communicate-between-the-two-elasticsearch-clusters-of-different-datacenters/128627)

<div class="topic-metadata">

**Author:** [@Priyanka\_M](https://discuss.elastic.co/u/Priyanka_M)\
**Replies:** 2\
**Last updated:** [April 24, 2018, 4:53am UTC](https://discuss.elastic.co/t/unable-to-communicate-between-the-two-elasticsearch-clusters-of-different-datacenters/128627 "2018-04-24T04:53:14Z")

</div>

Hi, I have two elasticsearch clusters, each in different datacenter. We maintaining them in kubernetes pods. I am trying to implement cross-cluster search between two clusters. So, when provide node information of one D…

---

## [X-Pack Graph compared to other GraphDB](https://discuss.elastic.co/t/x-pack-graph-compared-to-other-graphdb/121919)

<div class="topic-metadata">

**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\
**Replies:** 2\
**Last updated:** [March 4, 2018, 5:06pm UTC](https://discuss.elastic.co/t/x-pack-graph-compared-to-other-graphdb/121919 "2018-03-04T17:06:26Z")

</div>

I'm trying to understand if x-pack Graph can be compared to a GraphDB like Neo4j, OrientDB, ArangoDB etc? How would x-pack Graph perform and what would be the pros or cons compared to a Graph database? Thanks!

---

## [Logstash can't start afer upgrading VM](https://discuss.elastic.co/t/logstash-cant-start-afer-upgrading-vm/98679)

<div class="topic-metadata">

**Author:** [@yami](https://discuss.elastic.co/u/yami)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 12:12pm UTC](https://discuss.elastic.co/t/logstash-cant-start-afer-upgrading-vm/98679 "2017-09-04T12:12:18Z")

</div>

Before it worked fine, then VM was added a more processors and this occurs \[root@localhost logstash\]# bin/logstash -f centralLogstash.conf --quiet --path.data usr/share/logstash/tmp Invalid file name for use with -Xl…

---

## [Mapper-attachment vs Ingest-attachment with OCR](https://discuss.elastic.co/t/mapper-attachment-vs-ingest-attachment-with-ocr/66135)

<div class="topic-metadata">

**Author:** [@JTaylor](https://discuss.elastic.co/u/JTaylor)\
**Replies:** 2\
**Last updated:** [November 15, 2016, 5:15pm UTC](https://discuss.elastic.co/t/mapper-attachment-vs-ingest-attachment-with-ocr/66135 "2016-11-15T17:15:41Z")

</div>

Hello. I have been looking at using Elastic to read PDF/TIFF files and using OCR to parse them into the text so that we can use Elastic to build the search on top of it with the contents. Research and recommendation …

---

## [Ssl not working in elasticsearch input plugin](https://discuss.elastic.co/t/ssl-not-working-in-elasticsearch-input-plugin/263357)

<div class="topic-metadata">

**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\
**Replies:** 1\
**Last updated:** [February 5, 2021, 10:13am UTC](https://discuss.elastic.co/t/ssl-not-working-in-elasticsearch-input-plugin/263357 "2021-02-05T10:13:59Z")

</div>

Hi, I am fetching logs from elasticsearch via logstash but if I use ssl I get the following error. 2056 error: 2056 2056 2056 Manticore::ClientProtocolException 2056 PKIX path building failed: sun.…

---

## [Painless query - Iterate over map fields](https://discuss.elastic.co/t/painless-query-iterate-over-map-fields/158259)

<div class="topic-metadata">

**Author:** [@ig8230](https://discuss.elastic.co/u/ig8230)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 7:59pm UTC](https://discuss.elastic.co/t/painless-query-iterate-over-map-fields/158259 "2018-11-28T19:59:19Z")

</div>

Data "discovery\_workflow": { "WORKFLOW": { "START": { "process\_name": "WORKFLOW", "state": "START", "event": { "time": 1542060483545 } …

---

## [Does the order of filters matter in a query?](https://discuss.elastic.co/t/does-the-order-of-filters-matter-in-a-query/117702)

<div class="topic-metadata">

**Author:** [@matt.veitas](https://discuss.elastic.co/u/matt.veitas)\
**Replies:** 1\
**Last updated:** [January 31, 2018, 2:51am UTC](https://discuss.elastic.co/t/does-the-order-of-filters-matter-in-a-query/117702 "2018-01-31T02:51:50Z")

</div>

I have seen in various places that the declaration of the filters in a query matters for query performance? Is this true or does ES do optimization under the covers?

---

## [Elasticsearch is still initializing the kibana index. error](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-error/55869)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 1\
**Last updated:** [July 20, 2016, 8:12am UTC](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-error/55869 "2016-07-20T08:12:14Z")

</div>

Hi Team, How to solve this issue? "Elasticsearch is still initializing the kibana index."

---

## [Elastic search : Is there any suffix query/filter](https://discuss.elastic.co/t/elastic-search-is-there-any-suffix-query-filter/10661)

<div class="topic-metadata">

**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\
**Replies:** 1\
**Last updated:** [February 8, 2013, 6:00am UTC](https://discuss.elastic.co/t/elastic-search-is-there-any-suffix-query-filter/10661 "2013-02-08T06:00:08Z")

</div>

Sir, Is there any suffix query in elastic search. I can retrieve data from document by using prefix query. how can I retrieve data from document by using a suffix of any string. for example by using prefix we can se…

---

## [Why logstash-output-jms isn't part of the pluggins in the official documentation?](https://discuss.elastic.co/t/why-logstash-output-jms-isnt-part-of-the-pluggins-in-the-official-documentation/53874)

<div class="topic-metadata">

**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\
**Replies:** 4\
**Last updated:** [November 16, 2016, 7:15pm UTC](https://discuss.elastic.co/t/why-logstash-output-jms-isnt-part-of-the-pluggins-in-the-official-documentation/53874 "2016-11-16T19:15:35Z")

</div>

I need to use JMS as a Logstash output and, after looking for some information, I found there is a plugin called logstash-output-jms. However, I found it in GitHub (https://github.com/logstash-plugins/logstash-output-jms…

---

## [Can't delete/change data in @timestamp field yielded by ingest processor](https://discuss.elastic.co/t/cant-delete-change-data-in-timestamp-field-yielded-by-ingest-processor/294497)

<div class="topic-metadata">

**Author:** [@SomeAkk](https://discuss.elastic.co/u/SomeAkk)\
**Replies:** 5\
**Last updated:** [January 18, 2022, 5:29pm UTC](https://discuss.elastic.co/t/cant-delete-change-data-in-timestamp-field-yielded-by-ingest-processor/294497 "2022-01-18T17:29:35Z")

</div>

Hi! Today i add to my document @timestamp field (before this value was not in the document, and document no any date data.) with date data using ingest set processor: { "processors": \[ { "set": { "de…

---

## [Parallel queries to partitions in Elasticsearch aggregations](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 12:58pm UTC](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122 "2021-02-03T12:58:40Z")

</div>

If I have a partitioned terms aggregation, say with 20 partitions. If I request for all the 20 partitions by sending 20 requests at the same time using the REST API, will the result be fetched faster or would it still ta…

---

## [Logstash json filter not sending to root of event](https://discuss.elastic.co/t/logstash-json-filter-not-sending-to-root-of-event/223332)

<div class="topic-metadata">

**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 4:03pm UTC](https://discuss.elastic.co/t/logstash-json-filter-not-sending-to-root-of-event/223332 "2020-03-12T16:03:03Z")

</div>

I see that my event has a field "message", and that field is a JSON object, with several values, e.g message: {"eventid":"cowrie.login.failed","username":"uno85",...}. I would like all subvalues of message to be put at …

---

## [Setting up kibana dev environnement : error 403 Forbidden](https://discuss.elastic.co/t/setting-up-kibana-dev-environnement-error-403-forbidden/195871)

<div class="topic-metadata">

**Author:** [@TheEternalLearner](https://discuss.elastic.co/u/TheEternalLearner)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 11:22am UTC](https://discuss.elastic.co/t/setting-up-kibana-dev-environnement-error-403-forbidden/195871 "2019-08-21T11:22:27Z")

</div>

Hello, I'm trying to create my custom kibana plugin and I'm having difficulties setting up the dev environnement. I'm working on a debian 9 vm and have followed the kibana contributing guide. after forking and clonning…

---

## [Unable to parse CSV input from Filebeat -\> Logstash](https://discuss.elastic.co/t/unable-to-parse-csv-input-from-filebeat-logstash/174952)

<div class="topic-metadata">

**Author:** [@avj1986](https://discuss.elastic.co/u/avj1986)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 1:37pm UTC](https://discuss.elastic.co/t/unable-to-parse-csv-input-from-filebeat-logstash/174952 "2019-04-02T13:37:06Z")

</div>

Hi, I am trying to read a CSV file using Filebeat and sending the data to Logstash. On Logstash, I need to parse this CSV data and load it into ElasticSearch. I am able to ship the data from Filebeat to Logstash to El…

---

## [Has Elasticsearch started up properly?](https://discuss.elastic.co/t/has-elasticsearch-started-up-properly/98231)

<div class="topic-metadata">

**Author:** [@hrtqls432](https://discuss.elastic.co/u/hrtqls432)\
**Replies:** 2\
**Last updated:** [August 24, 2017, 5:55pm UTC](https://discuss.elastic.co/t/has-elasticsearch-started-up-properly/98231 "2017-08-24T17:55:53Z")

</div>

Hello, I want to use Sense and Kibi with Elasticsearch. With Elasticsearch and Kibi running I get the error ERR\_CONNECTION\_REFUSED when trying to access localhost:9200 through a browser. The log is as follows: \[2017-0…

---

## [Clearing queued watches?](https://discuss.elastic.co/t/clearing-queued-watches/80370)

<div class="topic-metadata">

**Author:** [@RWeiher](https://discuss.elastic.co/u/RWeiher)\
**Replies:** 2\
**Last updated:** [March 30, 2017, 2:45pm UTC](https://discuss.elastic.co/t/clearing-queued-watches/80370 "2017-03-30T14:45:44Z")

</div>

While we were having some cluster issue last week I turned off Watcher using the "PUT watcher/stop" command. After about a week of fighting things, we got the cluster back to a place where I felt comfortable turning Wat…

---

## [Kibana scripted field: doc\['some\_field'\] doesnt work when the field has a lot of data](https://discuss.elastic.co/t/kibana-scripted-field-doc-some-field-doesnt-work-when-the-field-has-a-lot-of-data/285106)

<div class="topic-metadata">

**Author:** [@Felipsz](https://discuss.elastic.co/u/Felipsz)\
**Replies:** 3\
**Last updated:** [September 27, 2021, 5:31pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-doc-some-field-doesnt-work-when-the-field-has-a-lot-of-data/285106 "2021-09-27T17:31:06Z")

</div>

Hi everyone, Im creating some scripted fields to improve the visualization of the data that comes into Kibana 7.5. I have a big field that its a JSON, and it has a lot of data, and i want to separate this data in multi…

---

## [Kibana Bar chart - Replacing alldocs name in x-axis](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076 "2021-07-20T15:07:31Z")

</div>

Hi all, I'm creating a bar chart with split series option instead of x-axis because i want to show all values with different colours. However, I'm unable to change "\_all All docs" name. I want it according to my name …

---

## [Could not locate that index-pattern (id: .\*), \[click here to re-create it\](#/management/kibana/index)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-click-here-to-re-create-it-management-kibana-index/263045)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 3\
**Last updated:** [February 4, 2021, 2:38pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-click-here-to-re-create-it-management-kibana-index/263045 "2021-02-04T14:38:26Z")

</div>

Hi, I need to delete my index, as it was causing a field conflict, but there was a chart created and I'm taking the error below, would there be any way to update this ID?

---

## [Create index at startup](https://discuss.elastic.co/t/create-index-at-startup/152570)

<div class="topic-metadata">

**Author:** [@jiboxiv](https://discuss.elastic.co/u/jiboxiv)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 7:04am UTC](https://discuss.elastic.co/t/create-index-at-startup/152570 "2018-10-17T07:04:19Z")

</div>

Hi, I wish to create an Elasticsearch plugin, this plugin requires some information to be stored. Is there any way to create an index & its mappings at startup time? I found this: Index Creation on Startup? But it doe…

---

## [Possibility to reset circuit breaker counters without restarting the node](https://discuss.elastic.co/t/possibility-to-reset-circuit-breaker-counters-without-restarting-the-node/92149)

<div class="topic-metadata">

**Author:** [@Jan\_Hejl](https://discuss.elastic.co/u/Jan_Hejl)\
**Replies:** 3\
**Last updated:** [July 6, 2017, 7:00pm UTC](https://discuss.elastic.co/t/possibility-to-reset-circuit-breaker-counters-without-restarting-the-node/92149 "2017-07-06T19:00:02Z")

</div>

Hi all, I'm monitoring circuit breaker tripped counters in Icinga and I'm facing a little problem. These counters can't be reset to value 0 without reset of the elasticsearch process. Is there any other option to res…

---

## [Better control over the request cache](https://discuss.elastic.co/t/better-control-over-the-request-cache/54201)

<div class="topic-metadata">

**Author:** [@Jared\_Miller](https://discuss.elastic.co/u/Jared_Miller)\
**Replies:** 3\
**Last updated:** [July 7, 2016, 3:55am UTC](https://discuss.elastic.co/t/better-control-over-the-request-cache/54201 "2016-07-07T03:55:30Z")

</div>

We have a certain set of boolean-filtered term queries with aggregations (using "size": 0) that are slow to run (5-10 seconds over 300M documents in 60 shards) yet are crucial to our app. Some of these queries match all …

---

## [TypeError: "field" is a required parameter](https://discuss.elastic.co/t/typeerror-field-is-a-required-parameter/84255)

<div class="topic-metadata">

**Author:** [@Janek](https://discuss.elastic.co/u/Janek)\
**Replies:** 6\
**Last updated:** [May 4, 2017, 9:36am UTC](https://discuss.elastic.co/t/typeerror-field-is-a-required-parameter/84255 "2017-05-04T09:36:52Z")

</div>

Hi, After discovering fields in my Elasticsearch cloud trial a few days ago I logged in today and saw this, Where do I start figuring this out?

---

## [Wrong file path when file rotation](https://discuss.elastic.co/t/wrong-file-path-when-file-rotation/57298)

<div class="topic-metadata">

**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\
**Replies:** 6\
**Last updated:** [August 8, 2016, 12:36pm UTC](https://discuss.elastic.co/t/wrong-file-path-when-file-rotation/57298 "2016-08-08T12:36:37Z")

</div>

I was testing how fiebeat handles file roration case. I found two problems, and I'm not sure if that's caused by my configuration or the filebeat issues. ###Problem A: filebeat didn't read any update in the renamed file …

[Previous page](https://discuss.elastic.co/top.md?page=1003&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1005&per_page=50&period=all)
