# Top

**URL:** https://discuss.elastic.co/top.md?page=1008&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1009

---

## [Problem finding duplicate documents via kibana? Issue with unique count!](https://discuss.elastic.co/t/problem-finding-duplicate-documents-via-kibana-issue-with-unique-count/128132)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [April 17, 2018, 12:41pm UTC](https://discuss.elastic.co/t/problem-finding-duplicate-documents-via-kibana-issue-with-unique-count/128132 "2018-04-17T12:41:17Z")

</div>

Hi, I am a bit confused: All our documents are shipped via filebeat. Filebeat allways adds the meta information field offset (position in logfile) - so far my understanding. If I filter for a single logfile, then the …

---

## [Oracle jdbc driver](https://discuss.elastic.co/t/oracle-jdbc-driver/140829)

<div class="topic-metadata">

**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 1:11pm UTC](https://discuss.elastic.co/t/oracle-jdbc-driver/140829 "2018-07-23T13:11:27Z")

</div>

Hello. I have an issue about jdbc filter for oracle. Who knows about this issue? filter{ jdbc\_streaming { jdbc\_driver\_library =\> "/usr/share/logstash/vendor/jar/jdbc/ojdbc6.jar" jdbc\_driver\_class =\> "java::ora…

---

## [Completion suggester across multiple indices](https://discuss.elastic.co/t/completion-suggester-across-multiple-indices/122403)

<div class="topic-metadata">

**Author:** [@neshta](https://discuss.elastic.co/u/neshta)\
**Replies:** 1\
**Last updated:** [March 5, 2018, 5:57pm UTC](https://discuss.elastic.co/t/completion-suggester-across-multiple-indices/122403 "2018-03-05T17:57:24Z")

</div>

ElasticSearch 6.x does not support multiple type mappings in a single index. So I have for example 2 indices: location postcode I want to have autocomplete functionality (I use completion suggester) using both indices…

---

## [Substring Search on log message in kibana 4](https://discuss.elastic.co/t/substring-search-on-log-message-in-kibana-4/81145)

<div class="topic-metadata">

**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\
**Replies:** 1\
**Last updated:** [April 4, 2017, 3:54pm UTC](https://discuss.elastic.co/t/substring-search-on-log-message-in-kibana-4/81145 "2017-04-04T15:54:49Z")

</div>

Hi I want to display only logs which i search substring for example in my logs have message type as ERROR if i search error, i want to display only logs which have error not entire log how to filter in kibana 4 n…

---

## [Declaring Variables in Logstash Config File](https://discuss.elastic.co/t/declaring-variables-in-logstash-config-file/305826)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 8:59am UTC](https://discuss.elastic.co/t/declaring-variables-in-logstash-config-file/305826 "2022-05-30T08:59:46Z")

</div>

I am repeating a string (let's "abc-123") in my Logstash config file multiple times. I want to declare it as a variable at the start of config file and call this variable where required. Something like: var my\_str = "ab…

---

## [Installation of plugins using initContainers stuck](https://discuss.elastic.co/t/installation-of-plugins-using-initcontainers-stuck/240811)

<div class="topic-metadata">

**Author:** [@bartversluijs](https://discuss.elastic.co/u/bartversluijs)\
**Replies:** 3\
**Last updated:** [July 14, 2020, 4:46pm UTC](https://discuss.elastic.co/t/installation-of-plugins-using-initcontainers-stuck/240811 "2020-07-14T16:46:21Z")

</div>

Hi, I was trying to install the repository-s3 plugin on my Kubernetes cluster using initContainers. However, the pod seems to get stuck when trying to install the plugin. So I removed the initContainer and went inside t…

---

## [What to be used instead of "type"](https://discuss.elastic.co/t/what-to-be-used-instead-of-type/204930)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 6:22pm UTC](https://discuss.elastic.co/t/what-to-be-used-instead-of-type/204930 "2019-10-23T18:22:32Z")

</div>

Hi Team, I'm using type for separating the logs category, but in the logs file I am getting error (warning) message like below. \[2019-10-22T14:48:01,104\]\[WARN \]\[logstash.outputs.elasticsearch\] Detected a 6.x and above…

---

## [How to make sum(field)-sum(field2) and get a single result for all documents](https://discuss.elastic.co/t/how-to-make-sum-field-sum-field2-and-get-a-single-result-for-all-documents/184979)

<div class="topic-metadata">

**Author:** [@Aymen\_Ben\_Moussa](https://discuss.elastic.co/u/Aymen_Ben_Moussa)\
**Replies:** 3\
**Last updated:** [June 11, 2019, 9:57am UTC](https://discuss.elastic.co/t/how-to-make-sum-field-sum-field2-and-get-a-single-result-for-all-documents/184979 "2019-06-11T09:57:24Z")

</div>

I have a mongodb collection that contains two fields, amount and type, in type i have either cash-in , cash-out or transfer. I want to add an index to elasticsearch with a new field which contains (the sum of all cash-in…

---

## [Grok filter. How do I break up the message information?](https://discuss.elastic.co/t/grok-filter-how-do-i-break-up-the-message-information/110566)

<div class="topic-metadata">

**Author:** [@E\_Marshall](https://discuss.elastic.co/u/E_Marshall)\
**Replies:** 3\
**Last updated:** [December 21, 2017, 6:35am UTC](https://discuss.elastic.co/t/grok-filter-how-do-i-break-up-the-message-information/110566 "2017-12-21T06:35:29Z")

</div>

I created a filter to break apart our log files and am having the following issue. I'm not able to figure out how to save the parts of the "message" to their own field or tag or whatever you call it. I'm 3 days new to lo…

---

## [Got ActorSystem error when run Esrally](https://discuss.elastic.co/t/got-actorsystem-error-when-run-esrally/76768)

<div class="topic-metadata">

**Author:** [@cold](https://discuss.elastic.co/u/cold)\
**Replies:** 3\
**Last updated:** [March 1, 2017, 6:01am UTC](https://discuss.elastic.co/t/got-actorsystem-error-when-run-esrally/76768 "2017-03-01T06:01:34Z")

</div>

2017-02-28 10:54:52,28 rally.main INFO OS \[posix.uname\_result(sysname='Darwin', nodename='xxxxdeMacBook-Pro.local', release='15.5.0', version='Darwin Kernel Version 15.5.0: Tue Apr 19 18:36:36 PDT 2016; root:xnu-3248.50.…

---

## [Dealing with duplicate documents](https://discuss.elastic.co/t/dealing-with-duplicate-documents/51534)

<div class="topic-metadata">

**Author:** [@cblackburn](https://discuss.elastic.co/u/cblackburn)\
**Replies:** 3\
**Last updated:** [June 1, 2016, 6:57pm UTC](https://discuss.elastic.co/t/dealing-with-duplicate-documents/51534 "2016-06-01T18:57:59Z")

</div>

Hi All, I'm trying to develop a database solution for some event data coming off of an embedded industrial system. Unfortunately, because of the way it is designed it generates a lot of duplicate events. Some are genui…

---

## [Xgo not found when running the make step in a beat-generator generated beat](https://discuss.elastic.co/t/xgo-not-found-when-running-the-make-step-in-a-beat-generator-generated-beat/45052)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 3\
**Last updated:** [March 22, 2016, 8:07pm UTC](https://discuss.elastic.co/t/xgo-not-found-when-running-the-make-step-in-a-beat-generator-generated-beat/45052 "2016-03-22T20:07:20Z")

</div>

After making a test beat with beat-generator, I tried building it with the dev-tools/packer scripts. The readme has this section: Package To cross-compile and package Davidbeat for all supported platforms, run the f…

---

## [Beats are not vulnerable to Log4j2 RCE](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992)

<div class="topic-metadata">

**Author:** [@dave101](https://discuss.elastic.co/u/dave101)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992 "2021-12-15T14:27:46Z")

</div>

Hi there, maybe some can confirm the follow for us. A few days ago we read this article concerning the log4j vulnerability. Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 Here it …

---

## [Setting up a map visualization with a custom WMS server](https://discuss.elastic.co/t/setting-up-a-map-visualization-with-a-custom-wms-server/194904)

<div class="topic-metadata">

**Author:** [@Lmaheo](https://discuss.elastic.co/u/Lmaheo)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 9:54pm UTC](https://discuss.elastic.co/t/setting-up-a-map-visualization-with-a-custom-wms-server/194904 "2019-08-12T21:54:31Z")

</div>

I have been trying to setup a Coordinate Map visualization on Kibana OSS with a custom WMS server. The problem is that the settings in kibana.yml only allow to use a fully qualified tile URL with placeholders in {x} {y}…

---

## [ERR Connecting error publishing events](https://discuss.elastic.co/t/err-connecting-error-publishing-events/79419)

<div class="topic-metadata">

**Author:** [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\
**Replies:** 2\
**Last updated:** [March 21, 2017, 3:09pm UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events/79419 "2017-03-21T15:09:16Z")

</div>

Hello: I am brand new to this and I have installed the ELK server based on this - https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04 It appears…

---

## [Finding the min and max value for a float/double field](https://discuss.elastic.co/t/finding-the-min-and-max-value-for-a-float-double-field/3926)

<div class="topic-metadata">

**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\
**Replies:** 2\
**Last updated:** [February 14, 2011, 3:36pm UTC](https://discuss.elastic.co/t/finding-the-min-and-max-value-for-a-float-double-field/3926 "2011-02-14T15:36:04Z")

</div>

Hi, What would the best way to get the MAX/MIN values for a specific field in a search? For instance, I'm indexing products, and they have an amount field, and when I search for anything, I want to get the MAX/MI…

---

## [Schedule option with exec module](https://discuss.elastic.co/t/schedule-option-with-exec-module/146821)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 4\
**Last updated:** [September 1, 2018, 6:31am UTC](https://discuss.elastic.co/t/schedule-option-with-exec-module/146821 "2018-09-01T06:31:13Z")

</div>

\[niraj@farmdev02 ~\]$ sudo /usr/share/logstash/bin/logstash -f /tmp/cloud-cost.conf -t netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"} \[WARN \] 2018-08-31 00:27:30.366 \[LogStash::Runner\] multil…

---

## [Filtering, sorting and paginate nested object list](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078)

<div class="topic-metadata">

**Author:** [@nickcigna](https://discuss.elastic.co/u/nickcigna)\
**Replies:** 1\
**Last updated:** [July 21, 2021, 2:20pm UTC](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078 "2021-07-21T14:20:02Z")

</div>

Hello everybody, I have an index that contains documents with the following structure. ///SHOWS INDEX { "\_id", "artists":\[ -----\> NESTED OBJECT LIST { "id": "1", "name": "text" }, { "id": "2", "…

---

## [Script caching](https://discuss.elastic.co/t/script-caching/212622)

<div class="topic-metadata">

**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\
**Replies:** 8\
**Last updated:** [December 20, 2019, 2:16pm UTC](https://discuss.elastic.co/t/script-caching/212622 "2019-12-20T14:16:15Z")

</div>

Im having script like if (doc\['type'\].value == 'pwp') { if (doc\['rodzaj\_pwp'\].value == 1) {if (\_score \< params.pwp\['1'\]) {return 0;} else {return \_score;}} if (doc\['rodzaj\_pwp'\].value == 2) {if (…

---

## [AggConfig object not found](https://discuss.elastic.co/t/aggconfig-object-not-found/157005)

<div class="topic-metadata">

**Author:** [@MishMick](https://discuss.elastic.co/u/MishMick)\
**Replies:** 8\
**Last updated:** [November 22, 2018, 4:59pm UTC](https://discuss.elastic.co/t/aggconfig-object-not-found/157005 "2018-11-22T16:59:29Z")

</div>

Getting this error after upgrading ELK stack from 6.3.2 to 6.5.0. My custom Kibana plugin has stopped rendering. Are there some necessary changes need to be made as part of the upgrade?

---

## [Performances degradation when using type field in inputs](https://discuss.elastic.co/t/performances-degradation-when-using-type-field-in-inputs/27111)

<div class="topic-metadata">

**Author:** [@Alessio\_Martorelli](https://discuss.elastic.co/u/Alessio_Martorelli)\
**Replies:** 8\
**Last updated:** [August 12, 2015, 1:36pm UTC](https://discuss.elastic.co/t/performances-degradation-when-using-type-field-in-inputs/27111 "2015-08-12T13:36:45Z")

</div>

Hi all, I've been trying to troubleshoot few latency issues that I have with Logstash. I'm using Redis as input source and for each input file I decided to specify a type. What I've found is that when rotating the index,…

---

## [Convert\_datatype with dissect filter \> error: "data conversion uncoercible"](https://discuss.elastic.co/t/convert-datatype-with-dissect-filter-error-data-conversion-uncoercible/185633)

<div class="topic-metadata">

**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\
**Replies:** 1\
**Last updated:** [June 13, 2019, 3:39pm UTC](https://discuss.elastic.co/t/convert-datatype-with-dissect-filter-error-data-conversion-uncoercible/185633 "2019-06-13T15:39:50Z")

</div>

Hello, I have some squid access-log that I want to integrate in my Elastic indexes. I am using the dissect filter to filter the different fields and then I use "convert\_datatype" to convert the needed fields into integ…

---

## [Service shutdown with unexpected error while indexing monitoring document](https://discuss.elastic.co/t/service-shutdown-with-unexpected-error-while-indexing-monitoring-document/138005)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 1\
**Last updated:** [July 3, 2018, 8:22am UTC](https://discuss.elastic.co/t/service-shutdown-with-unexpected-error-while-indexing-monitoring-document/138005 "2018-07-03T08:22:30Z")

</div>

We upgraded our instances to 6.3 last week, and today our elastic instances took a dive. Here are the output from the logs on 1 of the nodes. We have disabled monitoring and restarted and things are starting to collect…

---

## [Iterate over payload fields in Slack action](https://discuss.elastic.co/t/iterate-over-payload-fields-in-slack-action/51804)

<div class="topic-metadata">

**Author:** [@poznachowski](https://discuss.elastic.co/u/poznachowski)\
**Replies:** 1\
**Last updated:** [June 6, 2016, 11:24am UTC](https://discuss.elastic.co/t/iterate-over-payload-fields-in-slack-action/51804 "2016-06-06T11:24:45Z")

</div>

Hi, Can I iterate over ctx.payload.hits in Slack action text field for a specific field? I can use index to get specific one (with ctx.payload.hits.hits.0.\_id), but if there are more hits, is it possible to show all ids …

---

## [Logstash nssm service error](https://discuss.elastic.co/t/logstash-nssm-service-error/190857)

<div class="topic-metadata">

**Author:** [@bmovva61](https://discuss.elastic.co/u/bmovva61)\
**Replies:** 6\
**Last updated:** [July 17, 2019, 3:40pm UTC](https://discuss.elastic.co/t/logstash-nssm-service-error/190857 "2019-07-17T15:40:21Z")

</div>

hi guys need some help new to elk . my logstash works fine when i run in cmd but when i start it from windows service i get errors . Ignoring the 'pipelines.yml' file because modules or command line options are specifie…

---

## [Metricbeat - Limit of total fields \[1000\] has been exceeded-urgent](https://discuss.elastic.co/t/metricbeat-limit-of-total-fields-1000-has-been-exceeded-urgent/341824)

<div class="topic-metadata">

**Author:** [@EL\_MALKI\_MOHAMED](https://discuss.elastic.co/u/EL_MALKI_MOHAMED)\
**Replies:** 5\
**Last updated:** [August 29, 2023, 12:50am UTC](https://discuss.elastic.co/t/metricbeat-limit-of-total-fields-1000-has-been-exceeded-urgent/341824 "2023-08-29T00:50:03Z")

</div>

Hello, Can u help me I have problem. I am having errors trying to ingest system metrics (system module) .The logs are ingested via a common beats pipeline running having the following configuration: logstashPipeline: …

---

## [X of x shards failed](https://discuss.elastic.co/t/x-of-x-shards-failed/185863)

<div class="topic-metadata">

**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\
**Replies:** 5\
**Last updated:** [June 19, 2019, 10:22am UTC](https://discuss.elastic.co/t/x-of-x-shards-failed/185863 "2019-06-19T10:22:38Z")

</div>

Hi I have a single node setup. It looks like each index has 5 primary shards and when loading data on the kibana dashboard, we keep getting x of x shards failed error messages. Can anyone advise how to solve this?

---

## [Historical trend chart (project related)](https://discuss.elastic.co/t/historical-trend-chart-project-related/141309)

<div class="topic-metadata">

**Author:** [@delly.fofie](https://discuss.elastic.co/u/delly.fofie)\
**Replies:** 5\
**Last updated:** [July 24, 2018, 8:11am UTC](https://discuss.elastic.co/t/historical-trend-chart-project-related/141309 "2018-07-24T08:11:29Z")

</div>

Hello! We are using Kibana to display the evolution of the projects. A project in our case is a set of requirements with different States for e.g (In preparation, Approved, Implemented). This image show an example: T…

---

## [Kibana discover does not appear to list empty documents](https://discuss.elastic.co/t/kibana-discover-does-not-appear-to-list-empty-documents/106835)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 5\
**Last updated:** [November 9, 2017, 10:35am UTC](https://discuss.elastic.co/t/kibana-discover-does-not-appear-to-list-empty-documents/106835 "2017-11-09T10:35:58Z")

</div>

Is that correct? - I'm (experimenting with) creating empty documents just as flags that the IDs exist: I can see these documents with a search, so my software will work OK, but they don't seem to appear in Kibana's "disc…

---

## [Ingest pipeline, "remove" nested fields](https://discuss.elastic.co/t/ingest-pipeline-remove-nested-fields/283989)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 7:50pm UTC](https://discuss.elastic.co/t/ingest-pipeline-remove-nested-fields/283989 "2021-09-13T19:50:54Z")

</div>

Version 7.14 I am attempting to filter a winlogbeats stream in an ingest pipeline. One thing I want to do is strip out the whole agent tree as this is repeated in every record. Is there a way to remove "agent.\*" in one…

---

## [Find Out empty field](https://discuss.elastic.co/t/find-out-empty-field/280576)

<div class="topic-metadata">

**Author:** [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\
**Replies:** 2\
**Last updated:** [August 5, 2021, 7:09pm UTC](https://discuss.elastic.co/t/find-out-empty-field/280576 "2021-08-05T19:09:09Z")

</div>

I have a data set of 4-5 fields.I want to check if any data field is empty , Iogstash add a field name incomplete data and add value of field name in that.Sample data and code is attached below. As shown in image,ser…

---

## [Use Ruby to get field string length](https://discuss.elastic.co/t/use-ruby-to-get-field-string-length/241460)

<div class="topic-metadata">

**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 1:13pm UTC](https://discuss.elastic.co/t/use-ruby-to-get-field-string-length/241460 "2020-07-16T13:13:43Z")

</div>

I am trying to get the string length of a dns domain name and place into a new field. I've seen several posts to use ruby to achieve this but I can't seem to get it to work. This code is placed inside the filter {} brack…

---

## [Facing error while i am trying to connect my JAVA connection class to ElasticSearch](https://discuss.elastic.co/t/facing-error-while-i-am-trying-to-connect-my-java-connection-class-to-elasticsearch/229792)

<div class="topic-metadata">

**Author:** [@Rahul\_layall](https://discuss.elastic.co/u/Rahul_layall)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 9:09am UTC](https://discuss.elastic.co/t/facing-error-while-i-am-trying-to-connect-my-java-connection-class-to-elasticsearch/229792 "2020-04-29T09:09:56Z")

</div>

Hello Sir, I have created a class in my JAVA project so that i can run SQL queries and fetch the result from Elastic Search Here is my code: package javaConn; import java.sql.Connection; import java.sql.Driver; imp…

---

## [Hitting error getting heartbeat from Elasticsearch with SSL](https://discuss.elastic.co/t/hitting-error-getting-heartbeat-from-elasticsearch-with-ssl/184245)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 2\
**Last updated:** [June 6, 2019, 5:55pm UTC](https://discuss.elastic.co/t/hitting-error-getting-heartbeat-from-elasticsearch-with-ssl/184245 "2019-06-06T17:55:05Z")

</div>

This as working fine vefore converting to https. I have tried a number of modifications but still stuck on getting this to work. Below is my error and heartbeat configuration \[2019-06-04T19:21:17,067\]\[WARN \]\[o.e.h.Abs…

---

## [Add mapping on elastic search index field](https://discuss.elastic.co/t/add-mapping-on-elastic-search-index-field/123859)

<div class="topic-metadata">

**Author:** [@Ali\_Ahmed](https://discuss.elastic.co/u/Ali_Ahmed)\
**Replies:** 2\
**Last updated:** [March 14, 2018, 3:12pm UTC](https://discuss.elastic.co/t/add-mapping-on-elastic-search-index-field/123859 "2018-03-14T15:12:06Z")

</div>

{ "user": { "aliases": {}, "mappings": { "user": { "properties": { "created": { "type": "date" }, "email": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } } } } …

---

## [Java error in installing Elasticserach 5 beta verion](https://discuss.elastic.co/t/java-error-in-installing-elasticserach-5-beta-verion/62151)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 7:16am UTC](https://discuss.elastic.co/t/java-error-in-installing-elasticserach-5-beta-verion/62151 "2017-03-15T07:16:37Z")

</div>

Hi, I am trying to install Elasticsearch 5.0.0-beta1 but I am getting the following error: root@ip-x-x-x-x:/opt/elasticsearch-5.0.0-beta1/bin# ./elasticsearch \[2016-10-04T16:37:31,891\]\[WARN \]\[o.e.b.ElasticsearchUnc…

---

## [Date histogram + global time filter](https://discuss.elastic.co/t/date-histogram-global-time-filter/51026)

<div class="topic-metadata">

**Author:** [@akhilkumars](https://discuss.elastic.co/u/akhilkumars)\
**Replies:** 2\
**Last updated:** [May 30, 2016, 7:59am UTC](https://discuss.elastic.co/t/date-histogram-global-time-filter/51026 "2016-05-30T07:59:36Z")

</div>

Hello, I am new to Kibana. I have elastic search index having 3 timestamp fields as below. { "current\_timestap": "2015-10-01 06:10:10", "order\_timestamp": "2015-09-01 06:10:10", "invoice\_timestamp": "2015-09-07 06:1…

---

## [Index template for multi-level field](https://discuss.elastic.co/t/index-template-for-multi-level-field/40171)

<div class="topic-metadata">

**Author:** [@Florin\_Andrei](https://discuss.elastic.co/u/Florin_Andrei)\
**Replies:** 2\
**Last updated:** [January 27, 2016, 9:40am UTC](https://discuss.elastic.co/t/index-template-for-multi-level-field/40171 "2016-01-27T09:40:49Z")

</div>

A while ago, I made a Logstash filter that extracts geolocation information from the client IP in Nginx logs, like this: geoip { source =\> "clientip" target =\> "geoip" database =\> "/etc/logstash/GeoLiteCity.dat" …

---

## [Exiting: error connecting to Kibana: fail to get the Kibana version: fail to parse kibana version (): passed version is not semver:](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/347263)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 3\
**Last updated:** [December 2, 2023, 12:08am UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/347263 "2023-12-02T00:08:27Z")

</div>

Hello, I'm trying to follow: yet running into following error: Exiting: error connecting to Kibana: fail to get the Kibana version: fail to parse kibana version (): passed version is not semver: alexus@mbp kalei …

---

## [error":"Content-Type header \[application/x-www-form-urlencoded\] is not supported"](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/221569)

<div class="topic-metadata">

**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 10:02am UTC](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/221569 "2020-03-05T10:02:19Z")

</div>

Hi I am running a 7.6.0 version of ELK on CentOS Linux release 7.7.1908 (Core). I have downloaded beats-dashboards-1.3.1.zip using wget https://download.elastic.co/beats/dashboards/beats-dashboards-1.3.1.zip cd /root/…

---

## [LogsUI in kibana 7.4.0 getting error when trying to look at the logs with date\_nanos](https://discuss.elastic.co/t/logsui-in-kibana-7-4-0-getting-error-when-trying-to-look-at-the-logs-with-date-nanos/204335)

<div class="topic-metadata">

**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 9:55pm UTC](https://discuss.elastic.co/t/logsui-in-kibana-7-4-0-getting-error-when-trying-to-look-at-the-logs-with-date-nanos/204335 "2019-10-23T21:55:25Z")

</div>

open logs UI - configure to use SourceTime which is in date\_nanos instead of @timestamp field, logsUI tries to load data for several seconds, then displays graphics on the left side (timeline), and briefly shows the logs…

---

## [ECE Disaster Recovery how it works](https://discuss.elastic.co/t/ece-disaster-recovery-how-it-works/141659)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 3\
**Last updated:** [July 27, 2018, 1:52pm UTC](https://discuss.elastic.co/t/ece-disaster-recovery-how-it-works/141659 "2018-07-27T13:52:06Z")

</div>

Hi, I'm working on creating the infrastructure for ECE at AWS on EC2. I have 3 different Autoscale Groups (Coordinators, Allocators, Proxies). EC2 instances come and go and I think I got this case handled. In my cur…

---

## [Error in cluster deployment: failed to send join request to master](https://discuss.elastic.co/t/error-in-cluster-deployment-failed-to-send-join-request-to-master/90015)

<div class="topic-metadata">

**Author:** [@xiaoxing598](https://discuss.elastic.co/u/xiaoxing598)\
**Replies:** 0\
**Last updated:** [June 20, 2017, 2:22am UTC](https://discuss.elastic.co/t/error-in-cluster-deployment-failed-to-send-join-request-to-master/90015 "2017-06-20T02:22:21Z")

</div>

I have three virtual machines(192.168.245.128, 192.168.245.129, 192.168.245.130), respectively, in the above installed ES5.1.2, in the configuration of the cluster environment is encountered errors, the error in the thre…

---

## [Updating indices.store.throttle.max\_bytes\_per\_sec from \[10gb\]?](https://discuss.elastic.co/t/updating-indices-store-throttle-max-bytes-per-sec-from-10gb/50154)

<div class="topic-metadata">

**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Replies:** 3\
**Last updated:** [May 17, 2016, 2:41pm UTC](https://discuss.elastic.co/t/updating-indices-store-throttle-max-bytes-per-sec-from-10gb/50154 "2016-05-17T14:41:50Z")

</div>

Hi All, I got this log message when started a new ES 2.2.0 instance updating indices.store.throttle.max\_bytes\_per\_sec from \[10gb\] to \[512mb\], note, type is \[NONE\] Is the default value really 10gb? Should I just leav…

---

## [How to use Port 443 for Logstash and Filebeat? ELK Stack 7.1](https://discuss.elastic.co/t/how-to-use-port-443-for-logstash-and-filebeat-elk-stack-7-1/186801)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 1\
**Last updated:** [June 23, 2019, 11:22am UTC](https://discuss.elastic.co/t/how-to-use-port-443-for-logstash-and-filebeat-elk-stack-7-1/186801 "2019-06-23T11:22:39Z")

</div>

Hi, I want to send my filebeat data using port 443 to logstash. However, I didn't receive any data to my elasticsearch. Any help please? Below is my configuration. Filebeat: output.logstash: # The Logstash hosts host…

---

## [Parsing JSON along with double Quotes](https://discuss.elastic.co/t/parsing-json-along-with-double-quotes/105645)

<div class="topic-metadata">

**Author:** [@ranjith](https://discuss.elastic.co/u/ranjith)\
**Replies:** 1\
**Last updated:** [October 29, 2017, 8:37pm UTC](https://discuss.elastic.co/t/parsing-json-along-with-double-quotes/105645 "2017-10-29T20:37:59Z")

</div>

Hi all, I am trying to parse the following json which contains spec field. {"multiplier":1,"name":"bullet","spec":"Deluxe Sink, two compartment, 87"W x 30"D x 41"H, 16/300 stainless steel, 24" x 24" x 11-1/2" deep com…

---

## [Logstash v.6 error after x-pack installation](https://discuss.elastic.co/t/logstash-v-6-error-after-x-pack-installation/102712)

<div class="topic-metadata">

**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\
**Replies:** 7\
**Last updated:** [October 9, 2017, 1:12pm UTC](https://discuss.elastic.co/t/logstash-v-6-error-after-x-pack-installation/102712 "2017-10-09T13:12:20Z")

</div>

Hello, I have installed x-pack for Logstash. When I try to run configuration file, I get the following error: \[FATAL\] 2017-10-04 15:41:55.607 \[LogStash::Runner\] runner - An unexpected error occurred! {:error=\>#\<NoMetho…

---

## [Validation Failed: 1: mapping source is empty;](https://discuss.elastic.co/t/validation-failed-1-mapping-source-is-empty/72883)

<div class="topic-metadata">

**Author:** [@sdli907](https://discuss.elastic.co/u/sdli907)\
**Replies:** 1\
**Last updated:** [January 26, 2017, 10:56am UTC](https://discuss.elastic.co/t/validation-failed-1-mapping-source-is-empty/72883 "2017-01-26T10:56:56Z")

</div>

Hello, I just want to create a new and simple index/mapping (I follow the docs) in ES 5.0, but I am always getting "Validation Failed: 1: mapping source is empty;" What am I doing wrong ? These are the commands : $ cu…

---

## [Is it possible to join queries](https://discuss.elastic.co/t/is-it-possible-to-join-queries/37008)

<div class="topic-metadata">

**Author:** [@revathiP](https://discuss.elastic.co/u/revathiP)\
**Replies:** 1\
**Last updated:** [December 11, 2015, 10:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-join-queries/37008 "2015-12-11T22:01:35Z")

</div>

I am new to Kibana. Is it possible to write relationship query using another node value. So far I have seen relationship query using hard coded values. Example: Query document where the userid belongs to another documen…

---

## [\_id is not unique. is repeated in indexes addressed by a single alias](https://discuss.elastic.co/t/id-is-not-unique-is-repeated-in-indexes-addressed-by-a-single-alias/321386)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 4\
**Last updated:** [December 16, 2022, 10:55am UTC](https://discuss.elastic.co/t/id-is-not-unique-is-repeated-in-indexes-addressed-by-a-single-alias/321386 "2022-12-16T10:55:12Z")

</div>

I experience the situation that index is having multiple same \_id within the same index I have version 7.17.0 the data are ingested by python requests lib via API this way the uniqueness is broken among multiple inde…

[Previous page](https://discuss.elastic.co/top.md?page=1007&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1009&per_page=50&period=all)
