# Top

**URL:** https://discuss.elastic.co/top.md?page=1009&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1010

---

## [Remote Cluster Enterprise feature?](https://discuss.elastic.co/t/remote-cluster-enterprise-feature/247514)

<div class="topic-metadata">

**Author:** [@antex](https://discuss.elastic.co/u/antex)\
**Replies:** 1\
**Last updated:** [September 6, 2020, 6:02pm UTC](https://discuss.elastic.co/t/remote-cluster-enterprise-feature/247514 "2020-09-06T18:02:48Z")

</div>

Hi, I want to setup cross-cluster search in my self-managed cluster on Kubernetes using ECK. According to https://www.elastic.co/subscriptions this should be possible with the OpenSource license. But when I try to setup…

---

## [Dealing with negative spikes when data source maintains metrics that always increment](https://discuss.elastic.co/t/dealing-with-negative-spikes-when-data-source-maintains-metrics-that-always-increment/215494)

<div class="topic-metadata">

**Author:** [@sidhusaab](https://discuss.elastic.co/u/sidhusaab)\
**Replies:** 1\
**Last updated:** [January 28, 2020, 5:08pm UTC](https://discuss.elastic.co/t/dealing-with-negative-spikes-when-data-source-maintains-metrics-that-always-increment/215494 "2020-01-28T17:08:43Z")

</div>

I am building a TSVB visualization. Everything works great up until the point where if the application is restarted/restarts on its own the counters are reset to '0'. Since the visualizations use derivate to calculate di…

---

## [X-Pack Watches not initializing properly](https://discuss.elastic.co/t/x-pack-watches-not-initializing-properly/90116)

<div class="topic-metadata">

**Author:** [@bt\_scotth](https://discuss.elastic.co/u/bt_scotth)\
**Replies:** 4\
**Last updated:** [June 20, 2017, 7:07pm UTC](https://discuss.elastic.co/t/x-pack-watches-not-initializing-properly/90116 "2017-06-20T19:07:28Z")

</div>

I have ES 5.4.1 installed and the X-Pack plugin is also installed. I am trying to use Watcher, but it is not setting itself up properly. When I call 'POST xpack/watcher/start' I get this error in the log files: \[201…

---

## [Puppet module](https://discuss.elastic.co/t/puppet-module/70605)

<div class="topic-metadata">

**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\
**Replies:** 4\
**Last updated:** [January 5, 2017, 10:52pm UTC](https://discuss.elastic.co/t/puppet-module/70605 "2017-01-05T22:52:04Z")

</div>

Looking for a supported puppet module for Puppet Cloud Enterprise. @tylerjl

---

## [Handling Huge Index Cardinality](https://discuss.elastic.co/t/handling-huge-index-cardinality/47729)

<div class="topic-metadata">

**Author:** [@johnpaullarsen](https://discuss.elastic.co/u/johnpaullarsen)\
**Replies:** 4\
**Last updated:** [April 22, 2016, 12:05am UTC](https://discuss.elastic.co/t/handling-huge-index-cardinality/47729 "2016-04-22T00:05:05Z")

</div>

I'm planning for a system that will be indexing a large number (\>100M/day) of telephone records. A new date based index will be created each day. Important fields within each document are the called and calling phone num…

---

## [Elastic Common Schema Fields for Reverse Proxies](https://discuss.elastic.co/t/elastic-common-schema-fields-for-reverse-proxies/267074)

<div class="topic-metadata">

**Author:** [@learnerbyheart](https://discuss.elastic.co/u/learnerbyheart)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 9:10pm UTC](https://discuss.elastic.co/t/elastic-common-schema-fields-for-reverse-proxies/267074 "2021-03-15T21:10:46Z")

</div>

Hello, we are currently migrating our NGINX logging format to the Elastic Common Schema. For some NGINX logging values I cannot find any fitting fields. In our case we use NGINX as a reverse proxy in Kubernetes. Most of…

---

## [Canvas Multiple Math Functions ESSQL](https://discuss.elastic.co/t/canvas-multiple-math-functions-essql/249302)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 2\
**Last updated:** [September 22, 2020, 5:42am UTC](https://discuss.elastic.co/t/canvas-multiple-math-functions-essql/249302 "2020-09-22T05:42:40Z")

</div>

Hi, I have a typical scenario where we need to get a percentage of number of OK devices. Something like Scenario 1 Query Defective Devices count Divide ( Defective Devices / total) There are 2 ESSQL queries which ge…

---

## [Exiting: error initializing processors: the processor add\_id doesn't exist](https://discuss.elastic.co/t/exiting-error-initializing-processors-the-processor-add-id-doesnt-exist/231991)

<div class="topic-metadata">

**Author:** [@XFLaura](https://discuss.elastic.co/u/XFLaura)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 3:34am UTC](https://discuss.elastic.co/t/exiting-error-initializing-processors-the-processor-add-id-doesnt-exist/231991 "2020-05-12T03:34:14Z")

</div>

I get the error "Exiting: error initializing processors: the processor add\_id doesn't exist" when I am trying to add processors: - add\_id: ~

---

## [Double embedded json and escaping quotes](https://discuss.elastic.co/t/double-embedded-json-and-escaping-quotes/174871)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 2\
**Last updated:** [April 3, 2019, 6:52pm UTC](https://discuss.elastic.co/t/double-embedded-json-and-escaping-quotes/174871 "2019-04-03T18:52:22Z")

</div>

I have a watcher that is using a webhook in an action where I have to send a json structure to the web destination. So this is embedded json where each double quote is escaped first like " My problem is that inside that…

---

## [Delete all children from all documents in a parent-child mapping](https://discuss.elastic.co/t/delete-all-children-from-all-documents-in-a-parent-child-mapping/81185)

<div class="topic-metadata">

**Author:** [@francois](https://discuss.elastic.co/u/francois)\
**Replies:** 2\
**Last updated:** [April 6, 2017, 7:35am UTC](https://discuss.elastic.co/t/delete-all-children-from-all-documents-in-a-parent-child-mapping/81185 "2017-04-06T07:35:46Z")

</div>

Hi All, I have a parent / child relationship. Parents are books and Children are user’s comment. book { title, author, xxx, yyy, zzz } usercomment { userid, comment) I need to delete all children created by a spe…

---

## [Http GET without BODY](https://discuss.elastic.co/t/http-get-without-body/12302)

<div class="topic-metadata">

**Author:** [@Igal](https://discuss.elastic.co/u/Igal)\
**Replies:** 2\
**Last updated:** [June 6, 2013, 10:31pm UTC](https://discuss.elastic.co/t/http-get-without-body/12302 "2013-06-06T22:31:35Z")

</div>

hi everyone -- after watching this bonsai-cool project for a while I am finally ready to start using it. my http client does not support BODY in GET requests, so following the comment in http://www.elasticsearc…

---

## [How to track failure or exception?](https://discuss.elastic.co/t/how-to-track-failure-or-exception/185893)

<div class="topic-metadata">

**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\
**Replies:** 1\
**Last updated:** [June 14, 2019, 6:02pm UTC](https://discuss.elastic.co/t/how-to-track-failure-or-exception/185893 "2019-06-14T18:02:51Z")

</div>

Hi, In the logstash configuration file, I use grok, ruby and aggregate multiple times within the filter section. When I check for \_grokparsefailure, \_aggregateexception, \_rubyexception (whatever do I need to check?) at …

---

## [Difference between "Missing Values" and "Unmapped Fields"](https://discuss.elastic.co/t/difference-between-missing-values-and-unmapped-fields/132382)

<div class="topic-metadata">

**Author:** [@magict4](https://discuss.elastic.co/u/magict4)\
**Replies:** 1\
**Last updated:** [May 25, 2018, 1:54pm UTC](https://discuss.elastic.co/t/difference-between-missing-values-and-unmapped-fields/132382 "2018-05-25T13:54:39Z")

</div>

Hi, I need to sort my documents based on an optional field, "completionDate". Some documents will have this attribute while others won't. For documents which don't have "completionDate", I want to put them last in the s…

---

## [Filebeat Regex problem - Escape pipe and colon](https://discuss.elastic.co/t/filebeat-regex-problem-escape-pipe-and-colon/62288)

<div class="topic-metadata">

**Author:** [@neuronring](https://discuss.elastic.co/u/neuronring)\
**Replies:** 1\
**Last updated:** [October 6, 2016, 1:21am UTC](https://discuss.elastic.co/t/filebeat-regex-problem-escape-pipe-and-colon/62288 "2016-10-06T01:21:07Z")

</div>

I have configured filebeat on my windows server where i need to look for the lines matching the below pattern. Since the line itself has a pipe symbol "|" and a colon ":" the filebeat is considering it as OR condition an…

---

## [Logstash doesn't work in Windows correctly Please help!](https://discuss.elastic.co/t/logstash-doesnt-work-in-windows-correctly-please-help/323161)

<div class="topic-metadata">

**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\
**Replies:** 3\
**Last updated:** [January 16, 2023, 4:07pm UTC](https://discuss.elastic.co/t/logstash-doesnt-work-in-windows-correctly-please-help/323161 "2023-01-16T16:07:14Z")

</div>

Hi, I try to run logstash in windows with the command: .\\bin\\logstash.bat -f D:\\Elastic\\logstash-8.6.0\\config\\conf.d\\bo\_firmas\_electronicas.conf But I have this message: \[2023-01-13T16:01:57,544\]\[ERROR\]\[logstash.agent…

---

## [Fail to install Logstash-Forwarder on ubuntu 1804](https://discuss.elastic.co/t/fail-to-install-logstash-forwarder-on-ubuntu-1804/145820)

<div class="topic-metadata">

**Author:** [@cheng1688](https://discuss.elastic.co/u/cheng1688)\
**Replies:** 3\
**Last updated:** [August 24, 2018, 3:01pm UTC](https://discuss.elastic.co/t/fail-to-install-logstash-forwarder-on-ubuntu-1804/145820 "2018-08-24T15:01:44Z")

</div>

I have successfully installed logstash-forwarder on ubuntu 1404, and 1604. Now the same method failed on ubuntu 1804. This is the steps I do: echo 'deb http://packages.elasticsearch.org/logstashforwarder/debian stabl…

---

## [Issue with queries using highlighting and fields \* - hundreds of times slower](https://discuss.elastic.co/t/issue-with-queries-using-highlighting-and-fields-hundreds-of-times-slower/143715)

<div class="topic-metadata">

**Author:** [@commentator8](https://discuss.elastic.co/u/commentator8)\
**Replies:** 3\
**Last updated:** [August 19, 2018, 5:44am UTC](https://discuss.elastic.co/t/issue-with-queries-using-highlighting-and-fields-hundreds-of-times-slower/143715 "2018-08-19T05:44:45Z")

</div>

I am having the exact same issue on 6.3.2 and only by disabling highlighting can i make queries work properly. My mapping is about 150 lines. Can provide other details as needed. GET /filebeat-6.3.2-box201-box\_logs-\*/…

---

## [Nodes silently leaving and returning?](https://discuss.elastic.co/t/nodes-silently-leaving-and-returning/69660)

<div class="topic-metadata">

**Author:** [@maf](https://discuss.elastic.co/u/maf)\
**Replies:** 3\
**Last updated:** [January 16, 2017, 8:39am UTC](https://discuss.elastic.co/t/nodes-silently-leaving-and-returning/69660 "2017-01-16T08:39:13Z")

</div>

We recently upgraded to 2.4.2 and are now seeing nodes mysteriously leaving and coming back. That is the cluster becomes yellow for a while and then goes back to green. In the log on the master node I see this: \[2016-1…

---

## [Failing to Create Mappings Logstash/Elasticsearch](https://discuss.elastic.co/t/failing-to-create-mappings-logstash-elasticsearch/52540)

<div class="topic-metadata">

**Author:** [@fikse](https://discuss.elastic.co/u/fikse)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 4:55pm UTC](https://discuss.elastic.co/t/failing-to-create-mappings-logstash-elasticsearch/52540 "2016-06-14T16:55:30Z")

</div>

I'm experiencing a problem where I'm trying to create new mappings for the indexed data, but I receive an error: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", …

---

## [Elasticsearch ILM bug how to debug?](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 0\
**Last updated:** [March 16, 2020, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693 "2020-03-16T06:19:22Z")

</div>

ILM policy is set: rollover daily / delete after 31days. Index is deleted after 7days (ignoring 31days setup) I tried to change the value 30,31 and no change. This ILM is used by 2 templates and 2 indexes. test\_xxx, a…

---

## [How get Top Search Terms by matching the query text!](https://discuss.elastic.co/t/how-get-top-search-terms-by-matching-the-query-text/58248)

<div class="topic-metadata">

**Author:** [@mizan](https://discuss.elastic.co/u/mizan)\
**Replies:** 0\
**Last updated:** [August 17, 2016, 11:38am UTC](https://discuss.elastic.co/t/how-get-top-search-terms-by-matching-the-query-text/58248 "2016-08-17T11:38:24Z")

</div>

I have been working on an autocomplete function. I can make it work if I am doing an autocomplete on the document itself (display titles that match criteria as person types). However, what I want to do is suggest …

---

## [Multi-Bucket Scoring Machine Learning](https://discuss.elastic.co/t/multi-bucket-scoring-machine-learning/186277)

<div class="topic-metadata">

**Author:** [@Ryan\_Boch](https://discuss.elastic.co/u/Ryan_Boch)\
**Replies:** 6\
**Last updated:** [June 20, 2019, 3:20pm UTC](https://discuss.elastic.co/t/multi-bucket-scoring-machine-learning/186277 "2019-06-20T15:20:06Z")

</div>

Multi-Bucket scoring is a bit confusing. I've read through the blog, but questions remain. How is the multi-bucket score calculated? Does the model go backwards and recalculate multi-bucket scores as more data is process…

---

## [Custom query Parser in Search Api](https://discuss.elastic.co/t/custom-query-parser-in-search-api/66850)

<div class="topic-metadata">

**Author:** [@javid](https://discuss.elastic.co/u/javid)\
**Replies:** 6\
**Last updated:** [November 24, 2016, 7:17pm UTC](https://discuss.elastic.co/t/custom-query-parser-in-search-api/66850 "2016-11-24T19:17:33Z")

</div>

I have a custom query parser and I can query my Index using Sense as follows: GET myIndex/\_search { "query": { "myParser":{ "query" : "blabla" } } } My question is, how can I parse the query with myP…

---

## [SQL average for period of day](https://discuss.elastic.co/t/sql-average-for-period-of-day/195474)

<div class="topic-metadata">

**Author:** [@samgs](https://discuss.elastic.co/u/samgs)\
**Replies:** 5\
**Last updated:** [August 29, 2019, 12:17am UTC](https://discuss.elastic.co/t/sql-average-for-period-of-day/195474 "2019-08-29T00:17:35Z")

</div>

Hello, I have a line graph that shows number of logins today. What I want to do is overlay the average number of logins over the last 30 days. Is that possible? I figure I'll have to use another graph element on canvas …

---

## [Regex based query in elasticsearch 5.6](https://discuss.elastic.co/t/regex-based-query-in-elasticsearch-5-6/178803)

<div class="topic-metadata">

**Author:** [@Umang\_Mishra](https://discuss.elastic.co/u/Umang_Mishra)\
**Replies:** 5\
**Last updated:** [May 3, 2019, 12:55pm UTC](https://discuss.elastic.co/t/regex-based-query-in-elasticsearch-5-6/178803 "2019-05-03T12:55:31Z")

</div>

In elasticsearch 5.6, for getting the data, I am using values as regex in the query. The query is working for only lowercase regex values, even a single uppercase letter disqualifies the query. For Example \_search?q=r…

---

## [How to let kibana show an index metadata like elasticsearch-head does](https://discuss.elastic.co/t/how-to-let-kibana-show-an-index-metadata-like-elasticsearch-head-does/150150)

<div class="topic-metadata">

**Author:** [@qiulang](https://discuss.elastic.co/u/qiulang)\
**Replies:** 5\
**Last updated:** [October 1, 2018, 11:42am UTC](https://discuss.elastic.co/t/how-to-let-kibana-show-an-index-metadata-like-elasticsearch-head-does/150150 "2018-10-01T11:42:48Z")

</div>

Hi, I am new to kibana, so apologize first if this question has been asked before but I just can't find the answer. So how do let kibana show an index's metadata like elasticsearch-head does, e.g. mapping Thanks Qi…

---

## [Importing data to elasticsearch automatically using a folder](https://discuss.elastic.co/t/importing-data-to-elasticsearch-automatically-using-a-folder/128176)

<div class="topic-metadata">

**Author:** [@asmael](https://discuss.elastic.co/u/asmael)\
**Replies:** 4\
**Last updated:** [April 17, 2018, 3:00pm UTC](https://discuss.elastic.co/t/importing-data-to-elasticsearch-automatically-using-a-folder/128176 "2018-04-17T15:00:06Z")

</div>

hello I'm trying to build an application with elasticsearch and I want to add data and index it using a local folder that contains files automatically without using logstash, I don't want to do that manually and the fil…

---

## [Using ES for bag of "visual" words image search?](https://discuss.elastic.co/t/using-es-for-bag-of-visual-words-image-search/81431)

<div class="topic-metadata">

**Author:** [@olalonde](https://discuss.elastic.co/u/olalonde)\
**Replies:** 4\
**Last updated:** [April 10, 2017, 11:34pm UTC](https://discuss.elastic.co/t/using-es-for-bag-of-visual-words-image-search/81431 "2017-04-10T23:34:43Z")

</div>

Disclaimer: Newbie here, forgive me if I'm butchering some terms/concepts. Hi all, I am currently working on a system for doing visual similarity search and am considering using ES to do the search and indexing. A po…

---

## [How to delete type?thanks](https://discuss.elastic.co/t/how-to-delete-type-thanks/65163)

<div class="topic-metadata">

**Author:** [@23233](https://discuss.elastic.co/u/23233)\
**Replies:** 4\
**Last updated:** [November 7, 2016, 8:57am UTC](https://discuss.elastic.co/t/how-to-delete-type-thanks/65163 "2016-11-07T08:57:35Z")

</div>

i don't know es5.0 how detele type please help me thanks~

---

## [Several questions to introduce PacketBeat to commercial system](https://discuss.elastic.co/t/several-questions-to-introduce-packetbeat-to-commercial-system/77474)

<div class="topic-metadata">

**Author:** [@sisquared79](https://discuss.elastic.co/u/sisquared79)\
**Replies:** 3\
**Last updated:** [March 13, 2017, 6:01am UTC](https://discuss.elastic.co/t/several-questions-to-introduce-packetbeat-to-commercial-system/77474 "2017-03-13T06:01:56Z")

</div>

Hello, I am trying to introduce PacketBeat to the enterprise system for the security enhancement purpose. I have several questions. Could you please answer the following questions? What is the maximum bps(supported …

---

## [LDAP Elasticserch without license](https://discuss.elastic.co/t/ldap-elasticserch-without-license/307917)

<div class="topic-metadata">

**Author:** [@diegoneto](https://discuss.elastic.co/u/diegoneto)\
**Replies:** 2\
**Last updated:** [June 23, 2022, 11:56am UTC](https://discuss.elastic.co/t/ldap-elasticserch-without-license/307917 "2022-06-23T11:56:30Z")

</div>

Hello guys. Good evening! Configure an Elasticsearch Cluster with a basic license. However, I would like to authenticate via LDAP. Is doing this setup with the basic license possible? It would also accept login via SSO…

---

## [Can I filter an array in elastic?](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198)

<div class="topic-metadata">

**Author:** [@ShreyaBhat](https://discuss.elastic.co/u/ShreyaBhat)\
**Replies:** 2\
**Last updated:** [January 26, 2021, 8:33am UTC](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198 "2021-01-26T08:33:41Z")

</div>

is there a way to filter an array in elastic ? I have inserted the following data into elastic "\_source":{ "FileName": "fileName.log" "logData": \[ { "LineNumber": 1, …

---

## [Shard rebalancing](https://discuss.elastic.co/t/shard-rebalancing/19057)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 2\
**Last updated:** [August 4, 2014, 1:08pm UTC](https://discuss.elastic.co/t/shard-rebalancing/19057 "2014-08-04T13:08:42Z")

</div>

What is the behavior of ES when it comes to shard sizes? Does it do automatic shard rebalancing at any point of time? If so, is it also controlled through an API? How can I know if the shards are changing in the …

---

## [Logstash UDP input buffer](https://discuss.elastic.co/t/logstash-udp-input-buffer/258480)

<div class="topic-metadata">

**Author:** [@Hendrik1](https://discuss.elastic.co/u/Hendrik1)\
**Replies:** 7\
**Last updated:** [December 12, 2020, 7:29pm UTC](https://discuss.elastic.co/t/logstash-udp-input-buffer/258480 "2020-12-12T19:29:22Z")

</div>

Hi, I am using the logstash UDP input to receive my firewall syslog messages, this seems to work fine. However, I just enabled the reverse dns lookup filter on the ip's, but now I keep wondering what happens when the U…

---

## [LAB UI is not available on strigo](https://discuss.elastic.co/t/lab-ui-is-not-available-on-strigo/239522)

<div class="topic-metadata">

**Author:** [@GDang](https://discuss.elastic.co/u/GDang)\
**Replies:** 7\
**Last updated:** [July 7, 2020, 1:32pm UTC](https://discuss.elastic.co/t/lab-ui-is-not-available-on-strigo/239522 "2020-07-07T13:32:53Z")

</div>

I can able to log into strigo but can not navigate to anywhere as Lab UI is not available to me or would say not showing. It's always the terminal window.

---

## [Get count of top-level deleted documents in Elasticsearch](https://discuss.elastic.co/t/get-count-of-top-level-deleted-documents-in-elasticsearch/238371)

<div class="topic-metadata">

**Author:** [@kailoofi](https://discuss.elastic.co/u/kailoofi)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 5:24am UTC](https://discuss.elastic.co/t/get-count-of-top-level-deleted-documents-in-elasticsearch/238371 "2020-06-24T05:24:35Z")

</div>

I am looking to get an accurate count of deleted Elasticsearch documents excluding the nested documents at Lucene level. I am aware of the following APIs to get document and deleted document counts but none of them retur…

---

## [Hi, I am new to ELK. Trying to parse the date inside the multiline messages as timestamp. Let me know what config file to be used](https://discuss.elastic.co/t/hi-i-am-new-to-elk-trying-to-parse-the-date-inside-the-multiline-messages-as-timestamp-let-me-know-what-config-file-to-be-used/43792)

<div class="topic-metadata">

**Author:** [@nkpaul](https://discuss.elastic.co/u/nkpaul)\
**Replies:** 7\
**Last updated:** [March 15, 2016, 6:33am UTC](https://discuss.elastic.co/t/hi-i-am-new-to-elk-trying-to-parse-the-date-inside-the-multiline-messages-as-timestamp-let-me-know-what-config-file-to-be-used/43792 "2016-03-15T06:33:20Z")

</div>

Message file will look like: I. 2016/03/08 09:22:34. Hi My name is Nil. This is a test message I. 2016/03/08 09:22:35. This is the message 2 I. 2016/03/08 09:22:36. This is multiline message 3 message 3 I. 2016/03/0…

---

## [Metricbeat dashboard setup fails](https://discuss.elastic.co/t/metricbeat-dashboard-setup-fails/296788)

<div class="topic-metadata">

**Author:** [@satherev](https://discuss.elastic.co/u/satherev)\
**Replies:** 3\
**Last updated:** [February 16, 2022, 4:27pm UTC](https://discuss.elastic.co/t/metricbeat-dashboard-setup-fails/296788 "2022-02-16T16:27:30Z")

</div>

Good afternoon, I am unable to set up Metricbeats dashboards. Here is the error I receive: \[root@redacted metricbeat\]# metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: e…

---

## [Failed to execute on node \[YK3h1SM5SZW2K-JloBdVCg\]](https://discuss.elastic.co/t/failed-to-execute-on-node-yk3h1sm5szw2k-jlobdvcg/130252)

<div class="topic-metadata">

**Author:** [@vincentduan](https://discuss.elastic.co/u/vincentduan)\
**Replies:** 3\
**Last updated:** [May 2, 2018, 1:39pm UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-yk3h1sm5szw2k-jlobdvcg/130252 "2018-05-02T13:39:50Z")

</div>

I am using curl -H "Content-Type: application/x-ndjson" -XPOST http://192.168.1.102:9200/myindex/mytype/\_bulk --data-binary @file command to import json file into ES cluster. my master nodes contains : \[192.168.1.101, 1…

---

## [To get end date of week in date histogram](https://discuss.elastic.co/t/to-get-end-date-of-week-in-date-histogram/116591)

<div class="topic-metadata">

**Author:** [@rgopi2win](https://discuss.elastic.co/u/rgopi2win)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 1:25pm UTC](https://discuss.elastic.co/t/to-get-end-date-of-week-in-date-histogram/116591 "2018-02-01T13:25:40Z")

</div>

Hi Team, I am using date\_histogram type of aggregation for aggregating month level data and interval as Week(1w). Now, In the response 'key' value comes as start date of the week. But I would like to get end date of the…

---

## [Suddenly, my SearchRequestBuilder's setSource doesn't work!](https://discuss.elastic.co/t/suddenly-my-searchrequestbuilders-setsource-doesnt-work/22402)

<div class="topic-metadata">

**Author:** [@tonylxc](https://discuss.elastic.co/u/tonylxc)\
**Replies:** 3\
**Last updated:** [February 26, 2015, 10:53pm UTC](https://discuss.elastic.co/t/suddenly-my-searchrequestbuilders-setsource-doesnt-work/22402 "2015-02-26T22:53:50Z")

</div>

I'm using the latest Elasticsearch Java API 1.4.4. And I find this issue annoying me really badly. Normally, if you want to do a query using JSON string, you could do this: Client client = ... String query…

---

## [Watcher alerts not triggered](https://discuss.elastic.co/t/watcher-alerts-not-triggered/137220)

<div class="topic-metadata">

**Author:** [@VietCong](https://discuss.elastic.co/u/VietCong)\
**Replies:** 5\
**Last updated:** [July 3, 2018, 4:17am UTC](https://discuss.elastic.co/t/watcher-alerts-not-triggered/137220 "2018-07-03T04:17:10Z")

</div>

Hi, I have my basic watch to alert of log on failures. When I stimulated the watch it worked and generated a Slack message but the watch never triggered even though the conditions are met. Please find my alert below. {…

---

## [Spark to AWS ElasticSearch Service](https://discuss.elastic.co/t/spark-to-aws-elasticsearch-service/212246)

<div class="topic-metadata">

**Author:** [@yarch](https://discuss.elastic.co/u/yarch)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:43pm UTC](https://discuss.elastic.co/t/spark-to-aws-elasticsearch-service/212246 "2020-01-06T17:43:16Z")

</div>

I am running spark on my local machine. I have Elastic Search up and running in AWS-ElasticSearch service. I am trying to follow the documentation specified here: https://www.elastic.co/guide/en/elasticsearch/hadoop/mast…

---

## [Process same file multiple times](https://discuss.elastic.co/t/process-same-file-multiple-times/155238)

<div class="topic-metadata">

**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\
**Replies:** 1\
**Last updated:** [November 3, 2018, 9:32am UTC](https://discuss.elastic.co/t/process-same-file-multiple-times/155238 "2018-11-03T09:32:53Z")

</div>

Hi there, I am using logsatsh to parse our dataloading logs, which are text files but contains dynamic contents (not syslog nor apache), though for debugging i need to test the config settings i had to read this file (i…

---

## [How to implement multiple keywords in filter in Kibana](https://discuss.elastic.co/t/how-to-implement-multiple-keywords-in-filter-in-kibana/74470)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 6:32pm UTC](https://discuss.elastic.co/t/how-to-implement-multiple-keywords-in-filter-in-kibana/74470 "2017-02-09T18:32:19Z")

</div>

Hi, I have a query in Kibana like; user\_id:user1|user2 This displays entries having either user1 or user2. I made a positive filter for user\_id like; { "query": { "match": { "user\_id": { "query…

---

## [Is it possible to input KML files to display on Kibana's tilemap feature?](https://discuss.elastic.co/t/is-it-possible-to-input-kml-files-to-display-on-kibanas-tilemap-feature/57049)

<div class="topic-metadata">

**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Replies:** 1\
**Last updated:** [August 2, 2016, 8:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-input-kml-files-to-display-on-kibanas-tilemap-feature/57049 "2016-08-02T20:25:08Z")

</div>

I'm looking for a way to visualize geolocation data (KML files) JPEG exif data etc.?

---

## [Evaluating Elasticsearch for document classification with keywords](https://discuss.elastic.co/t/evaluating-elasticsearch-for-document-classification-with-keywords/38969)

<div class="topic-metadata">

**Author:** [@greensheep](https://discuss.elastic.co/u/greensheep)\
**Replies:** 1\
**Last updated:** [January 14, 2016, 6:45am UTC](https://discuss.elastic.co/t/evaluating-elasticsearch-for-document-classification-with-keywords/38969 "2016-01-14T06:45:28Z")

</div>

Hello, I’m new to elasticsearch and evaluating it for use in my project where I need to compare a large set of keywords (currently around 3500) against documents (on average around 500 words long) and highlight any mat…

---

## [Watcher alert email action is not working](https://discuss.elastic.co/t/watcher-alert-email-action-is-not-working/289737)

<div class="topic-metadata">

**Author:** [@George\_Lee](https://discuss.elastic.co/u/George_Lee)\
**Replies:** 6\
**Last updated:** [November 22, 2021, 3:19am UTC](https://discuss.elastic.co/t/watcher-alert-email-action-is-not-working/289737 "2021-11-22T03:19:27Z")

</div>

Deal all, ECK version 1.7.1 Elasticsearch version 7.10.1 My Elasticsearch configuration is apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elastic005 namespace: elastic-system spec…

---

## [Настройка для добавления веса самому первому токену](https://discuss.elastic.co/t/topic/100510)

<div class="topic-metadata">

**Author:** [@Gerr\_Bert](https://discuss.elastic.co/u/Gerr_Bert)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 12:50pm UTC](https://discuss.elastic.co/t/topic/100510 "2017-09-21T12:50:14Z")

</div>

Добрый день. Хотим использовать эластик для поиска товаров по Интернет магазину. Очень интересуют настройки релевантности, кажется что не хватает настройки, чтобы прибавлять релевантности первому токену в поле. 90 % п…

---

## [Link DATE field to another one](https://discuss.elastic.co/t/link-date-field-to-another-one/52221)

<div class="topic-metadata">

**Author:** [@TonyIT](https://discuss.elastic.co/u/TonyIT)\
**Replies:** 6\
**Last updated:** [June 10, 2016, 7:08am UTC](https://discuss.elastic.co/t/link-date-field-to-another-one/52221 "2016-06-10T07:08:18Z")

</div>

Hello! I've a index that contains document with a specific (unchangeable) mapping, and another index that use a data field with name "created\_at" to organize and view data by date. I have created an alias for the seco…

[Previous page](https://discuss.elastic.co/top.md?page=1008&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1010&per_page=50&period=all)
