# Top **URL:** https://discuss.elastic.co/top.md?page=1006&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1007 --- ## [Can't move large ES snapshots to different server](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024)
**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\ **Replies:** 3\ **Last updated:** [January 5, 2022, 5:07pm UTC](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024 "2022-01-05T17:07:41Z")
I'm having an issue with moving a Elasticsearch index to a different machine. I'm running Elasticsearch on a single machine inside a docker container (single node cluster). I have 2 indexes that are 28.6gb and 15gb larg… --- ## [How to use injectTraceHeaders?](https://discuss.elastic.co/t/how-to-use-injecttraceheaders/189451)
**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\ **Replies:** 3\ **Last updated:** [July 9, 2019, 5:36am UTC](https://discuss.elastic.co/t/how-to-use-injecttraceheaders/189451 "2019-07-09T05:36:01Z")
Kibana version:6.5.1 Elasticsearch version:6.5.1 APM Server version:6.5.1 APM Agent language and version:java I custom a span and I see can use 'span.injectTraceHeaders((name, value) -\> request.addHeader(name, value)… --- ## [Using Datestamp in log](https://discuss.elastic.co/t/using-datestamp-in-log/132683)
**Author:** [@sm00thindian](https://discuss.elastic.co/u/sm00thindian)\ **Replies:** 3\ **Last updated:** [May 21, 2018, 9:18pm UTC](https://discuss.elastic.co/t/using-datestamp-in-log/132683 "2018-05-21T21:18:32Z")
I have logs that are read after the fact and I need to enter them on my timeline as the events occured not as the logs are read by my shippers. Log entries look like this: 2018-05-18 01:07:03 - Nagios XI \[32\] system:lo… --- ## [Http.enabled with ESIntegTestCase](https://discuss.elastic.co/t/http-enabled-with-esintegtestcase/102032)
**Author:** [@hanisaf](https://discuss.elastic.co/u/hanisaf)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 3:57am UTC](https://discuss.elastic.co/t/http-enabled-with-esintegtestcase/102032 "2017-09-28T03:57:39Z")
I'm new to writing elastic search plugin and I am still getting through the basics. I'd like to be able to test and debug my plugin from IDE. I rely on breakpoints and tracing the code to figure out what is going on. I … --- ## [X-pack licence warning](https://discuss.elastic.co/t/x-pack-licence-warning/89886)
**Author:** [@vinod\_hy](https://discuss.elastic.co/u/vinod_hy)\ **Replies:** 3\ **Last updated:** [June 19, 2017, 7:22am UTC](https://discuss.elastic.co/t/x-pack-licence-warning/89886 "2017-06-19T07:22:01Z")
\# # License \[will expire\] on \[Friday, July 14, 2017\]. If you have a new license, please update it. # Otherwise, please reach out to your support contact. # # Commercial plugins operate with reduced functionality on lic… --- ## [Elasticsearch bool should filter with result limit](https://discuss.elastic.co/t/elasticsearch-bool-should-filter-with-result-limit/28012)
**Author:** [@tushar](https://discuss.elastic.co/u/tushar)\ **Replies:** 3\ **Last updated:** [September 24, 2015, 10:15am UTC](https://discuss.elastic.co/t/elasticsearch-bool-should-filter-with-result-limit/28012 "2015-09-24T10:15:28Z")
in the below query I want only 1 results from department "a" and two from "b" but when I run the query the results are empty. Can anyone please tell me where am I going wrong { "query": { … --- ## [Simple query giving error: Query contains too many nested clauses](https://discuss.elastic.co/t/simple-query-giving-error-query-contains-too-many-nested-clauses/310779)
**Author:** [@gabrsar](https://discuss.elastic.co/u/gabrsar)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 10:24pm UTC](https://discuss.elastic.co/t/simple-query-giving-error-query-contains-too-many-nested-clauses/310779 "2022-08-12T22:24:31Z")
Hi! A few weeks ago I started noticing that any query I made with more than one word give me the error "Query contains too many nested clauses; maxClauseCount is set to 1024". I'm doing something wrong? Example of quer… --- ## [How to fix the cluster health yellow with Elastic Search](https://discuss.elastic.co/t/how-to-fix-the-cluster-health-yellow-with-elastic-search/178320)
**Author:** [@Tanseer](https://discuss.elastic.co/u/Tanseer)\ **Replies:** 1\ **Last updated:** [April 24, 2019, 7:57pm UTC](https://discuss.elastic.co/t/how-to-fix-the-cluster-health-yellow-with-elastic-search/178320 "2019-04-24T19:57:56Z")
I have created a ES instance on aws server. and it's working fine from last 1 Months, today i found that suddenly it's health status goes from green to yellow. and it is also increase the response time. While another in… --- ## [Query to match digit sequence of numeric field?](https://discuss.elastic.co/t/query-to-match-digit-sequence-of-numeric-field/14162)
**Author:** [@Nikita\_Tovstoles](https://discuss.elastic.co/u/Nikita_Tovstoles)\ **Replies:** 1\ **Last updated:** [October 30, 2013, 5:20am UTC](https://discuss.elastic.co/t/query-to-match-digit-sequence-of-numeric-field/14162 "2013-10-30T05:20:24Z")
Hi, New to ES so forgive if answer's obvious. I have a domain object 'widget' with numeric field 'code'. Can I construct a DSL query to return all widgets whose 'code' value contains a given sequence of digits (t… --- ## [How to use parent/sibiling pipeline aggregation in TVSB](https://discuss.elastic.co/t/how-to-use-parent-sibiling-pipeline-aggregation-in-tvsb/244184)
**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\ **Replies:** 1\ **Last updated:** [August 11, 2020, 7:16pm UTC](https://discuss.elastic.co/t/how-to-use-parent-sibiling-pipeline-aggregation-in-tvsb/244184 "2020-08-11T19:16:31Z")
As title said, may I know how to use parent/sibiling pipeline aggregation? They appear gray in the interface: Let say I have two fields called itemCount1 and itemCount2, is there a way to find the ratio of itemCount1 … --- ## [Preprocessor decode\_json\_fields does not include error key when add\_error\_key true](https://discuss.elastic.co/t/preprocessor-decode-json-fields-does-not-include-error-key-when-add-error-key-true/235192)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 3:01pm UTC](https://discuss.elastic.co/t/preprocessor-decode-json-fields-does-not-include-error-key-when-add-error-key-true/235192 "2020-06-01T15:01:56Z")
I have connected filebeat to logstash and process logs from my docker app. Filebeat, logstash, elsticsearch and kibana are dockerized. I would like to harvest docker logs so I implement python app, that generate this log… --- ## [Problem With parsing mikrotik log](https://discuss.elastic.co/t/problem-with-parsing-mikrotik-log/264977)
**Author:** [@asan](https://discuss.elastic.co/u/asan)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 5:17am UTC](https://discuss.elastic.co/t/problem-with-parsing-mikrotik-log/264977 "2021-02-23T05:17:08Z")
Hi i've been trying to normalize mikrotik log with grok in logstash and my sample log is : Feb 20 04:38:02 192.168.202.101 id=firewall sn=C0EAE45CA55 time="2021-02-20 12:54:43" fw=188.126.145.3 pri=6 c=1 m=911 msg="A… --- ## [ES\_JAVA\_OPTS exceding memory usage](https://discuss.elastic.co/t/es-java-opts-exceding-memory-usage/216888)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 5:34pm UTC](https://discuss.elastic.co/t/es-java-opts-exceding-memory-usage/216888 "2020-01-29T17:34:33Z")
Hi, I'm running an ES cluster with 3 nodes using docker compose, my 3 nodes have the same below environment JAVA OPTS configuration. My understanding setting such value it would limit the memory usage, my node1 and 2 ar… --- ## [Auto-update Logstash on Insert on SQL Server](https://discuss.elastic.co/t/auto-update-logstash-on-insert-on-sql-server/204522)
**Author:** [@sam.cook](https://discuss.elastic.co/u/sam.cook)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 7:40am UTC](https://discuss.elastic.co/t/auto-update-logstash-on-insert-on-sql-server/204522 "2019-10-22T07:40:43Z")
Hi, I am working with Logstash and Elasticsearch but I have a problem. In my case I want Elasticsearch to be updated with the new data added into a SQL Database, all done via Logstash. I set the configuration file as b… --- ## [Cross cluster replication link is displayed in basic version](https://discuss.elastic.co/t/cross-cluster-replication-link-is-displayed-in-basic-version/197468)
**Author:** [@abka](https://discuss.elastic.co/u/abka)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/cross-cluster-replication-link-is-displayed-in-basic-version/197468 "2019-09-04T08:10:44Z")
Hello, I created a request in April 26 (https://discuss.elastic.co/t/cross-cluster-replication-is-dispayed-in-kibana-in-basic-version/178593) where warned that a message is displayed in Kibana when using the basic versi… --- ## [Elasticsearch curator not deleting indices](https://discuss.elastic.co/t/elasticsearch-curator-not-deleting-indices/110253)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch-curator-not-deleting-indices/110253 "2017-12-05T07:10:58Z")
Here's our actionfile :slight\_smile: actions: 1: action: delete\_indices description: \>- Delete indices older than 3 days (based on index name), for logstash- prefixed indices. Ignore the error if t… --- ## [Logstash-input-jdbc plugin Error: Unknown setting 'use\_column\_value' for jdbc](https://discuss.elastic.co/t/logstash-input-jdbc-plugin-error-unknown-setting-use-column-value-for-jdbc/49579)
**Author:** [@pandith\_asrar](https://discuss.elastic.co/u/pandith_asrar)\ **Replies:** 2\ **Last updated:** [May 9, 2016, 7:51pm UTC](https://discuss.elastic.co/t/logstash-input-jdbc-plugin-error-unknown-setting-use-column-value-for-jdbc/49579 "2016-05-09T19:51:15Z")
Hi, I am trying to use the option available with the jdbc input plugin and getting the below error: Unknown setting 'use\_column\_value' for jdbc {:level=\>:error} Unknown setting 'tracking\_column' for jdbc {:level=\>:error} … --- ## [E-Commerce Search Demo](https://discuss.elastic.co/t/e-commerce-search-demo/124181)
**Author:** [@proximator](https://discuss.elastic.co/u/proximator)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 12:07am UTC](https://discuss.elastic.co/t/e-commerce-search-demo/124181 "2018-03-16T00:07:45Z")
Hi all, I am looking for this e-commerce search demo: Any idea where I can find it? Link? Thanks --- ## [L32sv2 vs DS5v2 on Azure](https://discuss.elastic.co/t/l32sv2-vs-ds5v2-on-azure/277083)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 6\ **Last updated:** [June 29, 2021, 6:31am UTC](https://discuss.elastic.co/t/l32sv2-vs-ds5v2-on-azure/277083 "2021-06-29T06:31:15Z")
For deploying huge Elasticsearch which Azure VM SKU is better? DS5v2 – Intel Xeon processor RAM: 56 GB vCPU(s): 16 Managed Disk: Premium SSD L32s v2: AMD EPYC 7551 processor RAM: 256 GB vCPU(s): 32 Local NVMe pre… --- ## [License expired](https://discuss.elastic.co/t/license-expired/267400)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 10:45am UTC](https://discuss.elastic.co/t/license-expired/267400 "2021-03-17T10:45:23Z")
We are getting below License expired error from Elastic search logs. We are using the version 5.3.1. Please let us know what we should do to resolve this error? Error: \[2021-03-16T12:24:04,454\]\[WARN \]\[o.e.l.LicenseServi… --- ## [@timestamp in Elasticsearch](https://discuss.elastic.co/t/timestamp-in-elasticsearch/169742)
**Author:** [@sparkjonez](https://discuss.elastic.co/u/sparkjonez)\ **Replies:** 4\ **Last updated:** [February 25, 2019, 4:41am UTC](https://discuss.elastic.co/t/timestamp-in-elasticsearch/169742 "2019-02-25T04:41:20Z")
Hello, My understanding is that the @timestamp field I see in Kibana is set when Logstash receives an event and forwards it to the Elasticsearch cluster. Is @timestamp change or modified under any other circumstances? F… --- ## [Exception in thread "main" BindTransportException\[Failed to bind to \[9300-9400\]\]; nested: ChannelException\[Failed to bind to: /167.99.56.190:9400\]; when running on digital ocean cloud server](https://discuss.elastic.co/t/exception-in-thread-main-bindtransportexception-failed-to-bind-to-9300-9400-nested-channelexception-failed-to-bind-to-167-99-56-190-9400-when-running-on-digital-ocean-cloud-server/124470)
**Author:** [@edwardGunawan](https://discuss.elastic.co/u/edwardGunawan)\ **Replies:** 4\ **Last updated:** [March 19, 2018, 12:48pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-bindtransportexception-failed-to-bind-to-9300-9400-nested-channelexception-failed-to-bind-to-167-99-56-190-9400-when-running-on-digital-ocean-cloud-server/124470 "2018-03-19T12:48:05Z")
I want to host my multi-container docker application and elasticsearch is one of the service in the container. I use docker-compose.yml file to host it in digital ocean cloud server 2GB Memory. I am just trying to host … --- ## [Ad hoc query time fields?](https://discuss.elastic.co/t/ad-hoc-query-time-fields/56338)
**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\ **Replies:** 4\ **Last updated:** [July 26, 2016, 8:16pm UTC](https://discuss.elastic.co/t/ad-hoc-query-time-fields/56338 "2016-07-26T20:16:23Z")
Is it possible to generate fields at query time based on filters? I want query a set of documents and generate at query time fields on those documents that denote if a set of filters match for them. Concrete example.… --- ## [Data table with percentiles: Using multiple fields and having a row for each field](https://discuss.elastic.co/t/data-table-with-percentiles-using-multiple-fields-and-having-a-row-for-each-field/52981)
**Author:** [@PatriciaSauer](https://discuss.elastic.co/u/PatriciaSauer)\ **Replies:** 4\ **Last updated:** [June 22, 2016, 4:43am UTC](https://discuss.elastic.co/t/data-table-with-percentiles-using-multiple-fields-and-having-a-row-for-each-field/52981 "2016-06-22T04:43:00Z")
Hello, is it possible to have a data table containing percentiles for multiple fields where each field gets its own row? Something like this: | 5th percentile | 50th percentile | 95th percentile field 1 … --- ## [Highlighting of irrelevant text between matches](https://discuss.elastic.co/t/highlighting-of-irrelevant-text-between-matches/27525)
**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\ **Replies:** 4\ **Last updated:** [January 25, 2016, 5:11pm UTC](https://discuss.elastic.co/t/highlighting-of-irrelevant-text-between-matches/27525 "2016-01-25T17:11:30Z")
When I index the following text: "\_source":{"\_analyzer":"english\_index","streamId":1,"language":"english","message":"The Doctor to anyone who tries to speak the truth and to reveal how evil he is"} and I run the follo… --- ## [Can data nodes have different size of disk in one cluster?](https://discuss.elastic.co/t/can-data-nodes-have-different-size-of-disk-in-one-cluster/201134)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 4:33am UTC](https://discuss.elastic.co/t/can-data-nodes-have-different-size-of-disk-in-one-cluster/201134 "2019-09-26T04:33:53Z")
does anyone know any concern if I construct a cluster with data nodes with different disk size? e.g. 5 data nodes with 200GB Disk 5 data nodes with 1TB disk and 5 data nodes with 10TB disk. Will this cause any issue… --- ## [Search\_analyzer](https://discuss.elastic.co/t/search-analyzer/130348)
**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\ **Replies:** 7\ **Last updated:** [May 3, 2018, 3:58am UTC](https://discuss.elastic.co/t/search-analyzer/130348 "2018-05-03T03:58:54Z")
Heya, So I am trying to follow the guide on this page in relation to setting a different analyser for index and search time. However I want to set the standard analyser for index and set an edge n-gram analyser for the… --- ## [Shared / Cross-Acccount S3 repository for snapshots - Access Denied](https://discuss.elastic.co/t/shared-cross-acccount-s3-repository-for-snapshots-access-denied/123252)
**Author:** [@baltendo](https://discuss.elastic.co/u/baltendo)\ **Replies:** 1\ **Last updated:** [March 14, 2018, 2:19pm UTC](https://discuss.elastic.co/t/shared-cross-acccount-s3-repository-for-snapshots-access-denied/123252 "2018-03-14T14:19:03Z")
Hi! We want that our test elasticsearch cluster is able to restore snapshots from our live elasticsearch. This worked fine in the past when we had one AWS account but now the clusters are in different AWS accounts for … --- ## [Show only most recent / latest event?](https://discuss.elastic.co/t/show-only-most-recent-latest-event/64410)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [October 31, 2016, 8:42am UTC](https://discuss.elastic.co/t/show-only-most-recent-latest-event/64410 "2016-10-31T08:42:28Z")
Hi, we have some logs which indicates the status of a service (ok, warning, critical). Is it possible to visualize only the most recent event? I would like to build a traffic light dashboard (red, yellow, green) to hav… --- ## [RemoteTransportException](https://discuss.elastic.co/t/remotetransportexception/9927)
**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\ **Replies:** 7\ **Last updated:** [December 6, 2012, 7:39pm UTC](https://discuss.elastic.co/t/remotetransportexception/9927 "2012-12-06T19:39:25Z")
Hi, I am importing data from my MySQL database to ES cluster and sometimes have the following error while updating (already imported) document (Url - called URL, Request: post data, Error: response error, I removed … --- ## [Filebeat's Data not showing in Kibana Dashboard](https://discuss.elastic.co/t/filebeats-data-not-showing-in-kibana-dashboard/263115)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 3\ **Last updated:** [February 4, 2021, 10:47pm UTC](https://discuss.elastic.co/t/filebeats-data-not-showing-in-kibana-dashboard/263115 "2021-02-04T22:47:54Z")
I have install ELK on ubuntu18.04 for monitoring remote server logs. On remote server i have installed Filebeat to send data to logstash. Remote server's logs are showing in Kibana--\>observability--\>logs. But in dashboad… --- ## [Can't enable system module: Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes](https://discuss.elastic.co/t/cant-enable-system-module-compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/156971)
**Author:** [@AlexJ](https://discuss.elastic.co/u/AlexJ)\ **Replies:** 3\ **Last updated:** [November 19, 2018, 2:08pm UTC](https://discuss.elastic.co/t/cant-enable-system-module-compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/156971 "2018-11-19T14:08:48Z")
Hello. I am running Filebeat 6.4 and Elasticsearch 6.3 on Amazon Linux 2018.03 and am receiving the following error in my filebeat log: { "level":"error", "timestamp":"2018-11-16T03:56:40.395Z", "caller":"pipeline/outpu… --- ## [Enforce minimum hit count on all queries by default](https://discuss.elastic.co/t/enforce-minimum-hit-count-on-all-queries-by-default/121754)
**Author:** [@s\_mp](https://discuss.elastic.co/u/s_mp)\ **Replies:** 3\ **Last updated:** [March 6, 2018, 10:49pm UTC](https://discuss.elastic.co/t/enforce-minimum-hit-count-on-all-queries-by-default/121754 "2018-03-06T22:49:45Z")
Hi, Our ES index consists of user records with "Personally identifiable information"(PII). And all the data is supposed to be queried only at the aggregated level. We currently ask all our clients to include min\_doc\_co… --- ## [Error logs for nginx and apache not working](https://discuss.elastic.co/t/error-logs-for-nginx-and-apache-not-working/105494)
**Author:** [@joperr](https://discuss.elastic.co/u/joperr)\ **Replies:** 3\ **Last updated:** [October 27, 2017, 5:23pm UTC](https://discuss.elastic.co/t/error-logs-for-nginx-and-apache-not-working/105494 "2017-10-27T17:23:22Z")
Hi there! I'm adding some conf files to my logstash based on https://www.elastic.co/guide/en/logstash/current/logstash-config-for-filebeat-modules.html So I have two config files working great: file1- input { beats… --- ## [Only want alias field name showing in Kibana visualization aggregation drop down list, and need to hide the actual field name from drop down list](https://discuss.elastic.co/t/only-want-alias-field-name-showing-in-kibana-visualization-aggregation-drop-down-list-and-need-to-hide-the-actual-field-name-from-drop-down-list/251473)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 9:34am UTC](https://discuss.elastic.co/t/only-want-alias-field-name-showing-in-kibana-visualization-aggregation-drop-down-list-and-need-to-hide-the-actual-field-name-from-drop-down-list/251473 "2020-10-13T09:34:44Z")
I have some questions about alias fields in Kibana. I have created a set of aliases on the actual ES field name, like the table below. But in Kibana, I only want to see those alias names ( ES Alias Name column ) appear … --- ## [Using java get document api within a script field](https://discuss.elastic.co/t/using-java-get-document-api-within-a-script-field/16751)
**Author:** [@mat1](https://discuss.elastic.co/u/mat1)\ **Replies:** 5\ **Last updated:** [April 2, 2014, 6:55pm UTC](https://discuss.elastic.co/t/using-java-get-document-api-within-a-script-field/16751 "2014-04-02T18:55:23Z")
Is it possible to query the database from a script field by instantiating a java client and issuing a get request? Are there any examples of this? Thanks Mat -- You received this message because you are subsc… --- ## [Configuring email server in yml file](https://discuss.elastic.co/t/configuring-email-server-in-yml-file/145194)
**Author:** [@mark-otcxn](https://discuss.elastic.co/u/mark-otcxn)\ **Replies:** 2\ **Last updated:** [August 20, 2018, 4:51pm UTC](https://discuss.elastic.co/t/configuring-email-server-in-yml-file/145194 "2018-08-20T16:51:47Z")
Hi Team, I am new to Kibana/ES. I want to configure an e-mail server in elasticsearch.yml file so that I can send alert e-mails based on messages send the logs. How can I do this through the Kibana/ES UI? Thanks, Mark … --- ## [How we can used SCADA system in ELK stack](https://discuss.elastic.co/t/how-we-can-used-scada-system-in-elk-stack/112079)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 2\ **Last updated:** [December 18, 2017, 3:49am UTC](https://discuss.elastic.co/t/how-we-can-used-scada-system-in-elk-stack/112079 "2017-12-18T03:49:33Z")
Hello all, I need some guidelines or information about SCADA mean How we can integrate or how to use SCADA System in ELK stack. Can anyone tell me about this things SCADA with ELK stacks. I want to do SCADA Security w… --- ## [Search phase exception execution\[All shards failed\] while accessing Kibana application](https://discuss.elastic.co/t/search-phase-exception-execution-all-shards-failed-while-accessing-kibana-application/53264)
**Author:** [@Jagadish](https://discuss.elastic.co/u/Jagadish)\ **Replies:** 2\ **Last updated:** [June 21, 2016, 5:05pm UTC](https://discuss.elastic.co/t/search-phase-exception-execution-all-shards-failed-while-accessing-kibana-application/53264 "2016-06-21T17:05:27Z")
We are receiving "Search phase exception execution\[All shards failed\]" while accessing Kibana application. Restarted elastic search service, even rebooted the server atlesbanlpv01 but result the same. Kindly help! Th… --- ## [Marvel with Elastic Search and Kibana](https://discuss.elastic.co/t/marvel-with-elastic-search-and-kibana/52301)
**Author:** [@arjun\_gulyani](https://discuss.elastic.co/u/arjun_gulyani)\ **Replies:** 2\ **Last updated:** [June 9, 2016, 10:47am UTC](https://discuss.elastic.co/t/marvel-with-elastic-search-and-kibana/52301 "2016-06-09T10:47:44Z")
I started with Marvel Installation Process Marvel Installation and then Installed the License, Marvel Agent and Started the ElasticSearch as Shown by Steps by 1 a,b,c and when I move to Step 2 bin/kibana plugin --insta… --- ## [Oauth and ES tokens](https://discuss.elastic.co/t/oauth-and-es-tokens/20128)
**Author:** [@Zachary\_Buckholz](https://discuss.elastic.co/u/Zachary_Buckholz)\ **Replies:** 2\ **Last updated:** [October 8, 2014, 3:48pm UTC](https://discuss.elastic.co/t/oauth-and-es-tokens/20128 "2014-10-08T15:48:57Z")
Is there any work being done to integrating a token lookup service within ES to see if a request is authorized? I'd like to implement an angularjs application that is exposed to the public internet, and at the sam… --- ## [Log file rolling by size](https://discuss.elastic.co/t/log-file-rolling-by-size/9647)
**Author:** [@Ulli](https://discuss.elastic.co/u/Ulli)\ **Replies:** 2\ **Last updated:** [November 12, 2012, 9:01am UTC](https://discuss.elastic.co/t/log-file-rolling-by-size/9647 "2012-11-12T09:01:34Z")
Hi, Is there a possibility to configure the logging.yml that log file a rolled by size (instead of dailyRollingFile)? Is there a documentation of all logging options anywhere? Thanks in advance, Ulli -- --- ## [Es7.16, two indexes have same field cost conflicting type?](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667)
**Author:** [@zhanghaocai](https://discuss.elastic.co/u/zhanghaocai)\ **Replies:** 8\ **Last updated:** [February 8, 2022, 7:37am UTC](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667 "2022-02-08T07:37:44Z")
I have two indexes. PUT /test1 { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0 }, "mappings": { "properties": { "name": { "type": "text" } } } } PUT /test2 { "settings": {… --- ## [Calculations for APM Visualizations](https://discuss.elastic.co/t/calculations-for-apm-visualizations/284386)
**Author:** [@Christina01](https://discuss.elastic.co/u/Christina01)\ **Replies:** 8\ **Last updated:** [September 22, 2021, 9:31pm UTC](https://discuss.elastic.co/t/calculations-for-apm-visualizations/284386 "2021-09-22T21:31:37Z")
How can I calculate the difference between one span start time and child transaction start time and in another way - child transaction end time substract span end time on any chart --- ## [Ingestion de deux fichiers CSV dans elastic](https://discuss.elastic.co/t/ingestion-de-deux-fichiers-csv-dans-elastic/232091)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 8\ **Last updated:** [May 13, 2020, 2:21pm UTC](https://discuss.elastic.co/t/ingestion-de-deux-fichiers-csv-dans-elastic/232091 "2020-05-13T14:21:55Z")
Bonjour, J'utilise Logstash et filebeat pour l'ingestion de deux fichiers csv dans elastic j'ai créer deux config logstash et une config file beat pour la lecture de mes deux fichiers j'ai remarquer quand mes data dan… --- ## [Logstash Grok Parsing Issue](https://discuss.elastic.co/t/logstash-grok-parsing-issue/55010)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 8\ **Last updated:** [July 8, 2016, 6:31am UTC](https://discuss.elastic.co/t/logstash-grok-parsing-issue/55010 "2016-07-08T06:31:03Z")
I am using Logstash to read some log file. Here are some data sources records \<2016-07-07 00:31:01\> Start \<2016-07-07 00:31:59\> Warning - Export\_Sysem 6 (1) =\> No records to be exported \<2016-07-07 00:32:22\> Export2… --- ## [\[elastic\_agent.filebeat\]\[error\] failed to perform any bulk index operations: Post "http://ES:9200/\_bulk": context deadline exceeded (Client.Timeout exceeded while awaiting headers)](https://discuss.elastic.co/t/elastic-agent-filebeat-error-failed-to-perform-any-bulk-index-operations-post-http-es-9200-bulk-context-deadline-exceeded-client-timeout-exceeded-while-awaiting-headers/292298)
**Author:** [@Tony\_B\_Kunnath](https://discuss.elastic.co/u/Tony_B_Kunnath)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 6:33pm UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-error-failed-to-perform-any-bulk-index-operations-post-http-es-9200-bulk-context-deadline-exceeded-client-timeout-exceeded-while-awaiting-headers/292298 "2021-12-20T18:33:50Z")
Getting this error in elastic-agent log: \[elastic\_agent.filebeat\]\[error\] failed to perform any bulk index operations: Post "http://ES:9200/\_bulk": context deadline exceeded (Client.Timeout exceeded while awaiting header… --- ## [Where can I actually set index.allocation.max\_retries](https://discuss.elastic.co/t/where-can-i-actually-set-index-allocation-max-retries/181272)
**Author:** [@preddy75](https://discuss.elastic.co/u/preddy75)\ **Replies:** 1\ **Last updated:** [May 15, 2019, 9:29pm UTC](https://discuss.elastic.co/t/where-can-i-actually-set-index-allocation-max-retries/181272 "2019-05-15T21:29:50Z")
I cannot find a way to set the property cluster wide. The API only allows in on an index, I want to set it for every index and every index created after that. --- ## [Kibana Dashboard Exchnage Message Tracking](https://discuss.elastic.co/t/kibana-dashboard-exchnage-message-tracking/89325)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 1\ **Last updated:** [June 14, 2017, 4:59pm UTC](https://discuss.elastic.co/t/kibana-dashboard-exchnage-message-tracking/89325 "2017-06-14T16:59:40Z")
Hi all, I am trying to create a Windows 2012 R2 ELK server to analyse Exchange Message Tracking logs by following the guide at https://elijahpaul.co.uk/analysing-exchange-2013-message-tracking-logs-using-elk-elasticsea… --- ## [Define one mapping for multiple indices](https://discuss.elastic.co/t/define-one-mapping-for-multiple-indices/46591)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [April 6, 2016, 8:02pm UTC](https://discuss.elastic.co/t/define-one-mapping-for-multiple-indices/46591 "2016-04-06T20:02:00Z")
Hi I have logstash forwarding data to elasticsearch, it generates 1 index each day. How do I define one mapping for the all the indices ? Currently, I am using the following mapping defined in sense script, just for on… [Previous page](https://discuss.elastic.co/top.md?page=1005&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1007&per_page=50&period=all)