# Top **URL:** https://discuss.elastic.co/top.md?page=1005&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1006 --- ## [Organizing data for Elasticsearch and Kibana](https://discuss.elastic.co/t/organizing-data-for-elasticsearch-and-kibana/22750)
**Author:** [@Karthik\_Sharma](https://discuss.elastic.co/u/Karthik_Sharma)\ **Replies:** 6\ **Last updated:** [March 26, 2015, 3:49am UTC](https://discuss.elastic.co/t/organizing-data-for-elasticsearch-and-kibana/22750 "2015-03-26T03:49:32Z")
I have inserted some data into elastic search using REST interface.An example is shown below. curl -XPOST "http://xxx.xx.xx.xx:9200/bits/metrics/" -d @$file curl -XPOST "http://xxx.xx.xx.xx:9200/bits/aaaaaa… --- ## [Data table with nested Fields](https://discuss.elastic.co/t/data-table-with-nested-fields/165026)
**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\ **Replies:** 1\ **Last updated:** [January 21, 2019, 5:56pm UTC](https://discuss.elastic.co/t/data-table-with-nested-fields/165026 "2019-01-21T17:56:57Z")
I have this field in my documents "DAList" : \[ { "DA\_Change" : 50195, "DA\_ID" : 8, "DA\_Before" : 325468, "DA\_After" : 275273, "DA\_ExpDate" : "2018-12-08T22:00:00.000Z" }, { "DA\_Change" : 0, "DA\_ID" : 23, "DA\_… --- ## [General confusion with Kibna's search bar](https://discuss.elastic.co/t/general-confusion-with-kibnas-search-bar/63665)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 7\ **Last updated:** [October 23, 2016, 3:42pm UTC](https://discuss.elastic.co/t/general-confusion-with-kibnas-search-bar/63665 "2016-10-23T15:42:23Z")
So here's the filter: type:connlog AND NOT (history:.\*D.\*) I'm attempting to filter out anything that contains a "D" or "d". Why does Kibana actually give me contents with a D? Thank you. --- ## [Kibana configuration and cookie based authentication](https://discuss.elastic.co/t/kibana-configuration-and-cookie-based-authentication/17208)
**Author:** [@Booker\_Bense](https://discuss.elastic.co/u/Booker_Bense)\ **Replies:** 1\ **Last updated:** [April 25, 2014, 9:00pm UTC](https://discuss.elastic.co/t/kibana-configuration-and-cookie-based-authentication/17208 "2014-04-25T21:00:43Z")
I'm attempting to share a dashboard with the rest of my group and I'm running into problems where kibana can not access the es proxy. The proxy is behind a cookie based authentication system. Kibana complains … --- ## [Sending custom documents from AWS Kinesis Firehose to Elastic Cloud](https://discuss.elastic.co/t/sending-custom-documents-from-aws-kinesis-firehose-to-elastic-cloud/335619)
**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\ **Replies:** 5\ **Last updated:** [June 13, 2023, 11:57am UTC](https://discuss.elastic.co/t/sending-custom-documents-from-aws-kinesis-firehose-to-elastic-cloud/335619 "2023-06-13T11:57:50Z")
Hi, As part of a migration away from OpenSearch, we have been wanting to send data from AWS Kinesis Firehose to Elastic Cloud. This has historically required workarounds using either a transformation Lambda or a custom … --- ## [X-Pack Anomaly Detection: multi-metric equals multivariate?](https://discuss.elastic.co/t/x-pack-anomaly-detection-multi-metric-equals-multivariate/245451)
**Author:** [@boxplot](https://discuss.elastic.co/u/boxplot)\ **Replies:** 8\ **Last updated:** [August 21, 2020, 12:12pm UTC](https://discuss.elastic.co/t/x-pack-anomaly-detection-multi-metric-equals-multivariate/245451 "2020-08-21T12:12:57Z")
Hi. I would like to detect anomalies using X-Pack. I have the following data: location user event (1 event is stored in 1 document) user behaviour per event (various features/fields) I would like to detect anomalous … --- ## [Using ES as a cache layer](https://discuss.elastic.co/t/using-es-as-a-cache-layer/4194)
**Author:** [@Alexandre\_Heimburger](https://discuss.elastic.co/u/Alexandre_Heimburger)\ **Replies:** 8\ **Last updated:** [April 6, 2011, 3:06pm UTC](https://discuss.elastic.co/t/using-es-as-a-cache-layer/4194 "2011-04-06T15:06:58Z")
Hi, Do you think that an ES cluster can act as a cache layer ? More words : Data are stored in a SQL database, cached in a memcache cluster and indexed in a ES cluster. When an update occurs on an object, the 3… --- ## [How to disable "Open in new tab" "open in new window" in Kibana](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 4\ **Last updated:** [September 5, 2020, 1:57am UTC](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186 "2020-09-05T01:57:32Z")
How do I disable open in new tab or new window from a Kibana Dashboard report that has "URL TEMPLATE" links. --- ## [Unable to start ES 7.3.1 after configuring internode communication encryption](https://discuss.elastic.co/t/unable-to-start-es-7-3-1-after-configuring-internode-communication-encryption/199150)
**Author:** [@gdamico](https://discuss.elastic.co/u/gdamico)\ **Replies:** 4\ **Last updated:** [September 12, 2019, 3:35pm UTC](https://discuss.elastic.co/t/unable-to-start-es-7-3-1-after-configuring-internode-communication-encryption/199150 "2019-09-12T15:35:16Z")
Hi, After completing "Getting started with the Elastic Stack" and "Securing the Elastic Stack" tutorials, I'm trying to complete "Encrypting Communications". After CA and certificate creation, Keystore and Truststore pa… --- ## [5.3.0 breaks \_reindex](https://discuss.elastic.co/t/5-3-0-breaks--reindex/80388)
**Author:** [@Sebastian\_Unger](https://discuss.elastic.co/u/Sebastian_Unger)\ **Replies:** 4\ **Last updated:** [March 29, 2017, 8:45pm UTC](https://discuss.elastic.co/t/5-3-0-breaks--reindex/80388 "2017-03-29T20:45:56Z")
Hi There, I am in the process of slowly migrating our systems from an ancient (and now un-maintained) ES 1.4.1 install to a new 5.x installation. Since I'm doing this in stages, I have currently got 3 ES clusters (each… --- ## [Unable to use drop\_event to filter json](https://discuss.elastic.co/t/unable-to-use-drop-event-to-filter-json/72171)
**Author:** [@cabecada](https://discuss.elastic.co/u/cabecada)\ **Replies:** 4\ **Last updated:** [January 19, 2017, 6:11pm UTC](https://discuss.elastic.co/t/unable-to-use-drop-event-to-filter-json/72171 "2017-01-19T18:11:01Z")
i am unable to filter lines (json) based on json key value. wrt https://www.elastic.co/guide/en/beats/filebeat/current/configuration-processors.html i have the below file content that grows. root@ubuntu1404-4:… --- ## [Is allowed to do a upsert with 'script\_upsert' from Cascading](https://discuss.elastic.co/t/is-allowed-to-do-a-upsert-with-script-upsert-from-cascading/44052)
**Author:** [@sebaas](https://discuss.elastic.co/u/sebaas)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 12:33pm UTC](https://discuss.elastic.co/t/is-allowed-to-do-a-upsert-with-script-upsert-from-cascading/44052 "2016-03-21T12:33:09Z")
I'm trying to upsert a document from Cascading, and then I expect that the script will executed, but It doesn't happens at initial time, but when I try again (the document already exist) the script is executed. //Setu… --- ## [CentOS5でのLogStash動作について](https://discuss.elastic.co/t/centos5-logstash/43365)
**Author:** [@Fokuda](https://discuss.elastic.co/u/Fokuda)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 7:33am UTC](https://discuss.elastic.co/t/centos5-logstash/43365 "2016-03-07T07:33:55Z")
初歩的な質問で申し訳ありません。 Logstashのサポートプラットフォームはどこかに一覧で有りますでしょうか？ CentOS5系で動作させたいのですが。 また、ElasticsearchやKibanaの方も確認したいのですが。 よろしくお願いします。 --- ## [Default analyzer when the given analyzer not found?](https://discuss.elastic.co/t/default-analyzer-when-the-given-analyzer-not-found/11300)
**Author:** [@Han\_2](https://discuss.elastic.co/u/Han_2)\ **Replies:** 4\ **Last updated:** [February 25, 2014, 4:19pm UTC](https://discuss.elastic.co/t/default-analyzer-when-the-given-analyzer-not-found/11300 "2014-02-25T16:19:31Z")
I have an index with analyzer settings as shown below.. { "settings": { "analysis": { "analyzer": { "default": { "type": "english" }, "ar": { "type": "arab… --- ## [How to get the equvalent of GET indexName using Nest .NET Library?](https://discuss.elastic.co/t/how-to-get-the-equvalent-of-get-indexname-using-nest-net-library/149571)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 5\ **Last updated:** [September 25, 2018, 11:22pm UTC](https://discuss.elastic.co/t/how-to-get-the-equvalent-of-get-indexname-using-nest-net-library/149571 "2018-09-25T23:22:52Z")
When I run GET indexName against ES, i get a definition of the index. How does one do that with the Nest library? I've tried client.GetIndex but that doesn't seem to do the trick. And I don't see any metadata specific… --- ## [Dynamic date log file input to Filebeat](https://discuss.elastic.co/t/dynamic-date-log-file-input-to-filebeat/188124)
**Author:** [@Dibyakanta](https://discuss.elastic.co/u/Dibyakanta)\ **Replies:** 2\ **Last updated:** [July 1, 2019, 5:49am UTC](https://discuss.elastic.co/t/dynamic-date-log-file-input-to-filebeat/188124 "2019-07-01T05:49:22Z")
Hi, I have a requirement to add log files to my filebeat server which will create an index in Elasticsearch. The location from where Filebeat would be taking the log file contains log file of different dates. Suppose f… --- ## [ES return different result when execute the same query](https://discuss.elastic.co/t/es-return-different-result-when-execute-the-same-query/28733)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 2\ **Last updated:** [September 6, 2015, 6:07am UTC](https://discuss.elastic.co/t/es-return-different-result-when-execute-the-same-query/28733 "2015-09-06T06:07:11Z")
That's a misuse by my teamate, he rebuilded the index and did not create mapping correctly. Please close this Post. --- ## [Logstash sending /var/log/messages to Elastic](https://discuss.elastic.co/t/logstash-sending-var-log-messages-to-elastic/161727)
**Author:** [@Robert\_Fyffe](https://discuss.elastic.co/u/Robert_Fyffe)\ **Replies:** 1\ **Last updated:** [January 3, 2019, 3:41pm UTC](https://discuss.elastic.co/t/logstash-sending-var-log-messages-to-elastic/161727 "2019-01-03T15:41:48Z")
Hi Everyone, I am using the following 6.x stack: Filebeat -\> Logstash -\> Elastic -\> Kibana I am trying to configure filebeat/logstash to send a specific logfile only to Elastic. Right now it appears to be sending ever… --- ## [HyperV Support](https://discuss.elastic.co/t/hyperv-support/75317)
**Author:** [@etelci](https://discuss.elastic.co/u/etelci)\ **Replies:** 1\ **Last updated:** [February 17, 2017, 9:23am UTC](https://discuss.elastic.co/t/hyperv-support/75317 "2017-02-17T09:23:27Z")
hello, i want to ask a question about virtualization. we are using HyperV (Windows Server 2012 R2) , but we are not sure this platfrom officially supported for es. does anyone know that HV is included in the supported… --- ## [Mapping using Logstash](https://discuss.elastic.co/t/mapping-using-logstash/227269)
**Author:** [@Antonio\_Antovski](https://discuss.elastic.co/u/Antonio_Antovski)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 1:08pm UTC](https://discuss.elastic.co/t/mapping-using-logstash/227269 "2020-04-14T13:08:11Z")
Hello, I'm new to logstash, and while experimenting with it I faced some problems for which I need some help to solve them. I'm reading the data I want to put into ES, from MySQL db. I have created a template (with temp… --- ## [Analyzer for XML](https://discuss.elastic.co/t/analyzer-for-xml/3946)
**Author:** [@srrin](https://discuss.elastic.co/u/srrin)\ **Replies:** 3\ **Last updated:** [February 25, 2011, 1:29pm UTC](https://discuss.elastic.co/t/analyzer-for-xml/3946 "2011-02-25T13:29:24Z")
Hi all, Is there any analyzer available for indexing XML data. For e.g. If I index a XML data, I need to eliminate the tags and I need to search using the keyword Tove. Jani/ Reminder and retrieve this document for t… --- ## [\[Attention\] Logstash 5.5.0 - Known Issue with Dissect Filter and Dead Letter Queue Input](https://discuss.elastic.co/t/attention-logstash-5-5-0-known-issue-with-dissect-filter-and-dead-letter-queue-input/92337)
**Author:** [@alvin](https://discuss.elastic.co/u/alvin)\ **Replies:** 1\ **Last updated:** [July 25, 2017, 4:06pm UTC](https://discuss.elastic.co/t/attention-logstash-5-5-0-known-issue-with-dissect-filter-and-dead-letter-queue-input/92337 "2017-07-25T16:06:51Z")
This notice addresses a known issue with the default bundled versions of the dissect filter and dead letter queue input plugins in the Logstash 5.5.0 release. The Problem When using the dissect filter or dead letter q… --- ## [How to logstash patterns/regex/co](https://discuss.elastic.co/t/how-to-logstash-patterns-regex-co/232819)
**Author:** [@ELK212](https://discuss.elastic.co/u/ELK212)\ **Replies:** 6\ **Last updated:** [May 19, 2020, 3:28pm UTC](https://discuss.elastic.co/t/how-to-logstash-patterns-regex-co/232819 "2020-05-19T15:28:29Z")
Hello, I'm just playing around with logstash and hope to get help with a few topics. I'm trying to log some HP Procurve Switch syslog messages into elasticsearch. I used the example filter from the website. Which looks… --- ## [How to write match query on array data type object](https://discuss.elastic.co/t/how-to-write-match-query-on-array-data-type-object/179354)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 6\ **Last updated:** [May 7, 2019, 6:59am UTC](https://discuss.elastic.co/t/how-to-write-match-query-on-array-data-type-object/179354 "2019-05-07T06:59:15Z")
i have created a index and indexed data in array data type.Index and data details are as follows: { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 5, "succe… --- ## [BulkProcessor API not indexing data to ES](https://discuss.elastic.co/t/bulkprocessor-api-not-indexing-data-to-es/88679)
**Author:** [@jshraddha](https://discuss.elastic.co/u/jshraddha)\ **Replies:** 6\ **Last updated:** [June 30, 2017, 2:20pm UTC](https://discuss.elastic.co/t/bulkprocessor-api-not-indexing-data-to-es/88679 "2017-06-30T14:20:12Z")
Hi, I am using BulkProcessor to ingest data to elasticsearch. My index is getting created but I could not see any data ingested to that index. I added logs into beforeBulk and afterBulk listeners logs are getting pri… --- ## [Can we filter multiple values using kibanaAddFilter in Vega](https://discuss.elastic.co/t/can-we-filter-multiple-values-using-kibanaaddfilter-in-vega/332398)
**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\ **Replies:** 7\ **Last updated:** [May 11, 2023, 6:05am UTC](https://discuss.elastic.co/t/can-we-filter-multiple-values-using-kibanaaddfilter-in-vega/332398 "2023-05-11T06:05:27Z")
Hello @everyone, I am using Vega to create my Visualization. I want to put kibanaAddFilter so that on click it filter out a field's multiple selected values. Like a field XYZ contains values( a,b,c,d,e,f,g). The filter… --- ## [Failed to parse date field](https://discuss.elastic.co/t/failed-to-parse-date-field/302248)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 3:01pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/302248 "2022-04-12T15:01:16Z")
I want to send Logs from Winlogbeat, via Logstash into Elasticsearch. From Winlogbeat directly to Elasticsearch is it working. However if I put the output to Logstash, I am getting this warning, that the date field cou… --- ## [KIbana filter error](https://discuss.elastic.co/t/kibana-filter-error/212991)
**Author:** [@tanthiamhuat](https://discuss.elastic.co/u/tanthiamhuat)\ **Replies:** 1\ **Last updated:** [December 26, 2019, 5:02pm UTC](https://discuss.elastic.co/t/kibana-filter-error/212991 "2019-12-26T17:02:42Z")
how do I filter such strings as: Load key "/home/xee/.ssh/id\_rsa": bad permissions or cannot coerce type 'closure' to vector of type 'character' I always got this error below for string with double or single quotes … --- ## [Event start date + duration visualization](https://discuss.elastic.co/t/event-start-date-duration-visualization/121297)
**Author:** [@Cyril\_zarakailloux](https://discuss.elastic.co/u/Cyril_zarakailloux)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 11:50pm UTC](https://discuss.elastic.co/t/event-start-date-duration-visualization/121297 "2018-02-23T23:50:29Z")
Hi ! I'm currently dealing with documents having a start date, an end date and a duration (in seconds) for events. What I'm trying to do in Kibana, is to display the number of ongoing event (y-axis) based on time (x-axi… --- ## [Nand and xor operators not working](https://discuss.elastic.co/t/nand-and-xor-operators-not-working/31972)
**Author:** [@RajkumarV](https://discuss.elastic.co/u/RajkumarV)\ **Replies:** 1\ **Last updated:** [October 11, 2015, 7:34pm UTC](https://discuss.elastic.co/t/nand-and-xor-operators-not-working/31972 "2015-10-11T19:34:49Z")
Hi I am using logstash 1.5.4 version on Ubuntu 14.04. I am unable to make use of nand, xor operator in conditionals. The error resulted and the configuration used for xor operator example is given below: (similar e… --- ## [哪位兄弟知道，怎么在 filebeat 的 json 模板里使用自定义的 analyzer](https://discuss.elastic.co/t/filebeat-json-analyzer/304444)
**Author:** [@fanybook](https://discuss.elastic.co/u/fanybook)\ **Replies:** 4\ **Last updated:** [May 12, 2022, 7:31am UTC](https://discuss.elastic.co/t/filebeat-json-analyzer/304444 "2022-05-12T07:31:35Z")
filebeat version: 7.17.3 json 模板是这样的 { "index\_patterns": \["test\_logs\*"\], "template": { "settings": { "number\_of\_shards": 1 }, "mappings": { "properties": { "message123": { … --- ## [Time field conversion](https://discuss.elastic.co/t/time-field-conversion/144542)
**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\ **Replies:** 4\ **Last updated:** [August 15, 2018, 5:06pm UTC](https://discuss.elastic.co/t/time-field-conversion/144542 "2018-08-15T17:06:10Z")
Hi, I have following line with timestamp and I am using grok filter, Could you please advise how to convert date into timestamp format? Line: time=2018-08-15-09-33-57 grok filter expression { %{DATA:time}=%{YEAR}-%… --- ## [Aggregate fields in a single field](https://discuss.elastic.co/t/aggregate-fields-in-a-single-field/109542)
**Author:** [@gius78](https://discuss.elastic.co/u/gius78)\ **Replies:** 4\ **Last updated:** [December 1, 2017, 4:17pm UTC](https://discuss.elastic.co/t/aggregate-fields-in-a-single-field/109542 "2017-12-01T16:17:28Z")
Hi all the forum from an elastic newbie. I have different applications sending logs to logstash-kibana, each application has different fields in logs obviously, I'd like to aggregate fields containing same informations … --- ## [Help with LS stoping 30 seconds after start](https://discuss.elastic.co/t/help-with-ls-stoping-30-seconds-after-start/56513)
**Author:** [@dustin.liddick](https://discuss.elastic.co/u/dustin.liddick)\ **Replies:** 4\ **Last updated:** [July 29, 2016, 12:08am UTC](https://discuss.elastic.co/t/help-with-ls-stoping-30-seconds-after-start/56513 "2016-07-29T00:08:42Z")
Hello: My LS instance starts up just fine, and ~30-120 seconds into the initialization, logstash then stops. I will paste the error below. The settings that I have for my LS indexing node is VM - Red Hat 6.5 x64 2xvC… --- ## [Elasticsearch Load Test goes OutOfMemory](https://discuss.elastic.co/t/elasticsearch-load-test-goes-outofmemory/22371)
**Author:** [@Malaka\_Gallage](https://discuss.elastic.co/u/Malaka_Gallage)\ **Replies:** 4\ **Last updated:** [February 26, 2015, 4:23am UTC](https://discuss.elastic.co/t/elasticsearch-load-test-goes-outofmemory/22371 "2015-02-26T04:23:48Z")
Hi all, I need some help here. I started a load test for Elasticsearch before using that in production environment. I have three EC2 instances that are configured in following manner which creates a Elasticsearch … --- ## [IP reputation ELK integration](https://discuss.elastic.co/t/ip-reputation-elk-integration/265959)
**Author:** [@tarekilani](https://discuss.elastic.co/u/tarekilani)\ **Replies:** 2\ **Last updated:** [March 15, 2021, 11:57am UTC](https://discuss.elastic.co/t/ip-reputation-elk-integration/265959 "2021-03-15T11:57:21Z")
Hello, Please i'm trying to integrate abuseipdb API to elasticsearch so i can have a reputation score of the IP adressess. When i searched on the internet i only found tutorials talking about integrating abuseipdb with … --- ## [Repository-s3 plugin install fails](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 4:06pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415 "2019-12-19T16:06:07Z")
I am getting a connection time out when trying to install the repository-s3 plugin using the repository for CentOS 7 I have tried several ways all using the proxy and I'm still getting a time out are there any proxy set… --- ## [Reindexing stuck at some batch and fails with 'search context missing exception'](https://discuss.elastic.co/t/reindexing-stuck-at-some-batch-and-fails-with-search-context-missing-exception/181450)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 2\ **Last updated:** [May 16, 2019, 5:32pm UTC](https://discuss.elastic.co/t/reindexing-stuck-at-some-batch-and-fails-with-search-context-missing-exception/181450 "2019-05-16T17:32:30Z")
I'm reindexing all my indexes from old cluster(5.x.x) to new cluster (7.0.0). I have some big indexes of size around 3GB. (For which i had to specify 'size' as low as 10 to reindex) (The number of documents in those ind… --- ## [Case In-Senstive Sort](https://discuss.elastic.co/t/case-in-senstive-sort/112984)
**Author:** [@Ahmad\_Bukhari](https://discuss.elastic.co/u/Ahmad_Bukhari)\ **Replies:** 2\ **Last updated:** [December 27, 2017, 6:01am UTC](https://discuss.elastic.co/t/case-in-senstive-sort/112984 "2017-12-27T06:01:53Z")
I've been using elastic searh 5.5.0. And I've noticed that my sorting is not working properly. The results i get from search were not sorted as expected, they were being sorted on the basis of ascii value's. Example: A… --- ## [About manage user/group in kibana and the mapping to roles-mapping.yml](https://discuss.elastic.co/t/about-manage-user-group-in-kibana-and-the-mapping-to-roles-mapping-yml/67523)
**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\ **Replies:** 2\ **Last updated:** [December 7, 2016, 12:33pm UTC](https://discuss.elastic.co/t/about-manage-user-group-in-kibana-and-the-mapping-to-roles-mapping-yml/67523 "2016-12-07T12:33:16Z")
Hi, Recently i installed an X-pah over Elasticsearch and Kibana and I tried to configure security. Searching into kibana, with "elastic" user, I could see, inside "Management" section, the possibility to create user… --- ## [条件に一致する子要素を持っている親要素だけを取得したい](https://discuss.elastic.co/t/topic/45420)
**Author:** [@stk](https://discuss.elastic.co/u/stk)\ **Replies:** 2\ **Last updated:** [April 6, 2016, 1:41am UTC](https://discuss.elastic.co/t/topic/45420 "2016-04-06T01:41:41Z")
"properties":{ "title":{ "type":"string" }, "pages":{ "properties":{ "text":{ "type":"string" }, "number":{ "type":"integer" }, … --- ## [Highlights in email HTML body](https://discuss.elastic.co/t/highlights-in-email-html-body/1996)
**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\ **Replies:** 2\ **Last updated:** [June 12, 2015, 3:00pm UTC](https://discuss.elastic.co/t/highlights-in-email-html-body/1996 "2015-06-12T15:00:47Z")
I tried to include highlighted fragments into HTML email but highlighting tags were lost somewhere \[frowning\] In ctx.payload.hits.hits\[\].text there is text correctly highlighted by \ tags but finally in e-mail body … --- ## [Range Filter Aggregation on array](https://discuss.elastic.co/t/range-filter-aggregation-on-array/20105)
**Author:** [@Remi\_Nonnon](https://discuss.elastic.co/u/Remi_Nonnon)\ **Replies:** 2\ **Last updated:** [October 8, 2014, 2:30pm UTC](https://discuss.elastic.co/t/range-filter-aggregation-on-array/20105 "2014-10-08T14:30:39Z")
Hi all, I have some troubles when I try to use Range Filter aggregation on an array. Example of 1 document : { "\_index": "test", "\_type": "values", "\_id": "1", "\_version": 1, "found": true… --- ## [ERROR Unable to delete file](https://discuss.elastic.co/t/error-unable-to-delete-file/237948)
**Author:** [@rezekiel](https://discuss.elastic.co/u/rezekiel)\ **Replies:** 5\ **Last updated:** [June 22, 2020, 3:13pm UTC](https://discuss.elastic.co/t/error-unable-to-delete-file/237948 "2020-06-22T15:13:28Z")
Hi , I use elasticsearch for windows amd getting --- ## [Office 365 Filebeat Module Error](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158)
**Author:** [@khaag](https://discuss.elastic.co/u/khaag)\ **Replies:** 5\ **Last updated:** [June 17, 2020, 8:44am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158 "2020-06-17T08:44:40Z")
Hello We're trying to setup the office 365 module in filebeat. After editing the o365.yml file we are getting the following error: ERROR instance/beat.go:932 Exiting: Error while initializing input: o365audit: reading… --- ## [11:07:17.097 \[Thread-4\] INFO nia.activedata.repository.ActiveDataRepository - listener timeout after waiting for \[30000\] ms](https://discuss.elastic.co/t/1117-097-thread-4-info-nia-activedata-repository-activedatarepository-listener-timeout-after-waiting-for-30000-ms/171567)
**Author:** [@nikuland](https://discuss.elastic.co/u/nikuland)\ **Replies:** 5\ **Last updated:** [March 11, 2019, 7:26am UTC](https://discuss.elastic.co/t/1117-097-thread-4-info-nia-activedata-repository-activedatarepository-listener-timeout-after-waiting-for-30000-ms/171567 "2019-03-11T07:26:26Z")
11:07:17.097 \[Thread-4\] INFO nia.activedata.repository.ActiveDataRepository - listener timeout after waiting for \[30000\] ms Get this problem even when i try to read data from elasicsearch --- ## [Elasticsearch Dynamic template not working as required](https://discuss.elastic.co/t/elasticsearch-dynamic-template-not-working-as-required/126476)
**Author:** [@silent\_phantom](https://discuss.elastic.co/u/silent_phantom)\ **Replies:** 5\ **Last updated:** [April 4, 2018, 8:53pm UTC](https://discuss.elastic.co/t/elasticsearch-dynamic-template-not-working-as-required/126476 "2018-04-04T20:53:16Z")
I want to have an elasticsearch schema that has some pre defined fields including an object type field. I want to have all the fields inside that object type field to be string by default. I have the following mappings … --- ## [Cannot install Logstash plugin from offline pack](https://discuss.elastic.co/t/cannot-install-logstash-plugin-from-offline-pack/83407)
**Author:** [@franhoeyemac](https://discuss.elastic.co/u/franhoeyemac)\ **Replies:** 5\ **Last updated:** [May 12, 2017, 7:06am UTC](https://discuss.elastic.co/t/cannot-install-logstash-plugin-from-offline-pack/83407 "2017-05-12T07:06:32Z")
Hello, I've prepared an offline pack on my computer by running the following command: bin\\logstash-plugin prepare-offline-pack --output syslog-output.zip logstash-output-syslog When I move the zip to the server with… --- ## [Logstash multiline help](https://discuss.elastic.co/t/logstash-multiline-help/42852)
**Author:** [@Roy\_K](https://discuss.elastic.co/u/Roy_K)\ **Replies:** 5\ **Last updated:** [February 29, 2016, 7:46am UTC](https://discuss.elastic.co/t/logstash-multiline-help/42852 "2016-02-29T07:46:42Z")
I am having an issue cobining this log into a multiline. Any suggestions on how I can use a specific timestamp is the identified to combine the line? Log Example (notice the timestamp is the same): \[Thr 47613344799040… --- ## [Error with Elasticsearch River SQL Server integration](https://discuss.elastic.co/t/error-with-elasticsearch-river-sql-server-integration/33045)
**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\ **Replies:** 5\ **Last updated:** [October 27, 2015, 10:33am UTC](https://discuss.elastic.co/t/error-with-elasticsearch-river-sql-server-integration/33045 "2015-10-27T10:33:11Z")
I am getting the below error SQLException: Connection is read-only. Queries leading to data modification are not allowed. at org.xbib.elasticsearch.river.jdbc.strategy.simple.SimpleRiverSource.fetch(SimpleRiver… [Previous page](https://discuss.elastic.co/top.md?page=1004&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1006&per_page=50&period=all)