# Top

**URL:** https://discuss.elastic.co/top.md?page=1017&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1018

---

## [Dec 19th, 2024: \[EN\] Elastic observability and search in .NET Aspire](https://discuss.elastic.co/t/dec-19th-2024-en-elastic-observability-and-search-in-net-aspire/369417)

<div class="topic-metadata">

**Author:** [@Rossall](https://discuss.elastic.co/u/Rossall)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2024-en-elastic-observability-and-search-in-net-aspire/369417 "2024-12-19T08:00:22Z")

</div>

Intro .NET Aspire is an opinionated, cloud ready stack for building observable, production ready, distributed applications. In this post we'll look at working with Elasticsearch in .NET Aspire, but firstly - on the obse…

---

## [Metricbeat & Mongo 5](https://discuss.elastic.co/t/metricbeat-mongo-5/288037)

<div class="topic-metadata">

**Author:** [@Ziemowit](https://discuss.elastic.co/u/Ziemowit)\
**Replies:** 0\
**Last updated:** [October 29, 2021, 9:18pm UTC](https://discuss.elastic.co/t/metricbeat-mongo-5/288037 "2021-10-29T21:18:08Z")

</div>

Hey I have a pretty simple config of Metric Beat metricbeat.modules: - module: mongodb enabled: true hosts: \[ "mongodb://root:secret@mongo" \] I run it in docker (also mongo itself runs in docker). And it work…

---

## [Filebeat apache module: Provided Grok expressions do not match field value](https://discuss.elastic.co/t/filebeat-apache-module-provided-grok-expressions-do-not-match-field-value/248214)

<div class="topic-metadata">

**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 5:43pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-provided-grok-expressions-do-not-match-field-value/248214 "2020-09-10T17:43:43Z")

</div>

Hello. Filebeat is unable to parse any entry from the Apache access log. Here is a complete document which demonstrates the error: { "\_index": "filebeat-7.7.1-2020.08.29-000002", "\_type": "\_doc", "\_id": "ZV4cdHQB…

---

## [How to add surround query parser](https://discuss.elastic.co/t/how-to-add-surround-query-parser/171994)

<div class="topic-metadata">

**Author:** [@Ryu\_Jea-tek](https://discuss.elastic.co/u/Ryu_Jea-tek)\
**Replies:** 0\
**Last updated:** [March 12, 2019, 3:52pm UTC](https://discuss.elastic.co/t/how-to-add-surround-query-parser/171994 "2019-03-12T15:52:43Z")

</div>

In my application, I want to apply surround query parser to my elasticsearch. I think there was something about this before However, I don't know how to add surround query parser in my elasticsearch. is it possible…

---

## [Clustering Across Multiple Data Centers](https://discuss.elastic.co/t/clustering-across-multiple-data-centers/278367)

<div class="topic-metadata">

**Author:** [@otoce](https://discuss.elastic.co/u/otoce)\
**Replies:** 2\
**Last updated:** [July 12, 2021, 8:54am UTC](https://discuss.elastic.co/t/clustering-across-multiple-data-centers/278367 "2021-07-12T08:54:47Z")

</div>

Hi, thanks again for helping us on Warm nodes on spinning disks not stable, falling out of cluster during recovery. Cluster is working fine since than (8 months). For last 5 months there are three more servers. Total: 3…

---

## [Logstash doesn't take changes from log4j2.properties after restart service](https://discuss.elastic.co/t/logstash-doesnt-take-changes-from-log4j2-properties-after-restart-service/266751)

<div class="topic-metadata">

**Author:** [@krato](https://discuss.elastic.co/u/krato)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 10:37am UTC](https://discuss.elastic.co/t/logstash-doesnt-take-changes-from-log4j2-properties-after-restart-service/266751 "2021-03-17T10:37:10Z")

</div>

I've noticed that after service restart logstash doesn't apply rules modified in log4j2.properties i.e appender.rolling.policies.size.size = 10MB (I've checked and the file has 12MB so it should work) Generally speaking…

---

## [Forward logs to SIEM](https://discuss.elastic.co/t/forward-logs-to-siem/162826)

<div class="topic-metadata">

**Author:** [@romanski15](https://discuss.elastic.co/u/romanski15)\
**Replies:** 2\
**Last updated:** [January 17, 2019, 9:10am UTC](https://discuss.elastic.co/t/forward-logs-to-siem/162826 "2019-01-17T09:10:30Z")

</div>

Hi Team, I would like to know if anybody has used ELK to centralise device logs (Windows, Linux, firewall, etc), before forwarding them on to a SIEM? I have a requirement to have a central log storage at each of my geo…

---

## [Function\_score, gaussian decay, handling multiple by zero](https://discuss.elastic.co/t/function-score-gaussian-decay-handling-multiple-by-zero/117086)

<div class="topic-metadata">

**Author:** [@Chris\_Hunt](https://discuss.elastic.co/u/Chris_Hunt)\
**Replies:** 2\
**Last updated:** [February 10, 2018, 8:38am UTC](https://discuss.elastic.co/t/function-score-gaussian-decay-handling-multiple-by-zero/117086 "2018-02-10T08:38:42Z")

</div>

Hi I have a function score using a gaussian decay. I would like the scores to never be zero after the multiplier so that when the gaussian function gets to zero, the documents still retained some relevance score. Ideal…

---

## [Elasticsearch dns resolution](https://discuss.elastic.co/t/elasticsearch-dns-resolution/39078)

<div class="topic-metadata">

**Author:** [@wgreen](https://discuss.elastic.co/u/wgreen)\
**Replies:** 2\
**Last updated:** [January 13, 2016, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-dns-resolution/39078 "2016-01-13T11:19:15Z")

</div>

I am successfully using elasticsearch, kibana and ntopng to collect, monitor and display network traffic patterns. I need information on how to get elasticsearch to perform a dns lookup of source and destination network …

---

## [Kibana multi tenancy](https://discuss.elastic.co/t/kibana-multi-tenancy/38037)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 2\
**Last updated:** [December 29, 2015, 5:44am UTC](https://discuss.elastic.co/t/kibana-multi-tenancy/38037 "2015-12-29T05:44:15Z")

</div>

I have Kibana 4.1.1 installed. Created a Dashboard with 10 of visualizations. How can I achieve multi tenancy in Kibana? I have two users and want them to see their relevant data rather than entire. How can I achieve th…

---

## [Elastic 2.0 beta 'best\_compresion' vs default 1.6 compression](https://discuss.elastic.co/t/elastic-2-0-beta-best-compresion-vs-default-1-6-compression/26092)

<div class="topic-metadata">

**Author:** [@ziv2081](https://discuss.elastic.co/u/ziv2081)\
**Replies:** 2\
**Last updated:** [July 23, 2015, 9:04am UTC](https://discuss.elastic.co/t/elastic-2-0-beta-best-compresion-vs-default-1-6-compression/26092 "2015-07-23T09:04:57Z")

</div>

Hey, I've downloaded the master branch from git and installed the beta in order to compare 'best\_compression' VS the current platform's compression with our data set. What I did was indexing 1840000 documents and the…

---

## [Metricbeat stops logstash monitoring](https://discuss.elastic.co/t/metricbeat-stops-logstash-monitoring/219146)

<div class="topic-metadata">

**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\
**Replies:** 6\
**Last updated:** [February 23, 2020, 4:08am UTC](https://discuss.elastic.co/t/metricbeat-stops-logstash-monitoring/219146 "2020-02-23T04:08:15Z")

</div>

I have running metricbeat, to monitor my ELK. It works great for Kibana and Elasticsearch, but when it comes to Logstash, it stops showing status. Starts working only after metricbeat restart. Logstash version: 7.5.2 M…

---

## [Utilisation de ELK pour stocker des fichiers csv contenant des flows](https://discuss.elastic.co/t/utilisation-de-elk-pour-stocker-des-fichiers-csv-contenant-des-flows/183982)

<div class="topic-metadata">

**Author:** [@Codhax](https://discuss.elastic.co/u/Codhax)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 12:52am UTC](https://discuss.elastic.co/t/utilisation-de-elk-pour-stocker-des-fichiers-csv-contenant-des-flows/183982 "2019-06-05T00:52:01Z")

</div>

Bonjour à tous et à toutes Je suis débutant avec la suite elk et je voudrais faire une chose : J'ai des fichiers CSV qui contiennent des flux de données obtenues avec argus + ra, voici un exemple de fichier : …

---

## [Map Tooltip covered in dashboard](https://discuss.elastic.co/t/map-tooltip-covered-in-dashboard/103635)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 6\
**Last updated:** [October 24, 2017, 6:37pm UTC](https://discuss.elastic.co/t/map-tooltip-covered-in-dashboard/103635 "2017-10-24T18:37:22Z")

</div>

\[38\] The tooltip of the map is covered in a dashboard. How show it completely, without zoom or move the map :smile:

---

## [Logstash error - "status"= 404](https://discuss.elastic.co/t/logstash-error-status-404/162076)

<div class="topic-metadata">

**Author:** [@Ram18](https://discuss.elastic.co/u/Ram18)\
**Replies:** 1\
**Last updated:** [December 26, 2018, 8:47am UTC](https://discuss.elastic.co/t/logstash-error-status-404/162076 "2018-12-26T08:47:37Z")

</div>

Hi, I am loading a csv file data into elasticsearch using Logstash. I have installed and configured all the necessary details in the Linux server. when I tried to run the config file to load the data, I am receiving the…

---

## [2.1 mapping \_ID error?](https://discuss.elastic.co/t/2-1-mapping--id-error/39717)

<div class="topic-metadata">

**Author:** [@ksecrist](https://discuss.elastic.co/u/ksecrist)\
**Replies:** 1\
**Last updated:** [January 21, 2016, 5:52am UTC](https://discuss.elastic.co/t/2-1-mapping--id-error/39717 "2016-01-21T05:52:05Z")

</div>

Hi everyone, I'm exploring 2.1.1 after having a working "in dev" solution on 1.7. I'm trying to define the following mapping: "searchdocument" : { "\_id" : { "path" : "Id" }, …

---

## [Need help to how to customize the theme color of the kibana dashboard](https://discuss.elastic.co/t/need-help-to-how-to-customize-the-theme-color-of-the-kibana-dashboard/335824)

<div class="topic-metadata">

**Author:** [@Ashigha\_JR](https://discuss.elastic.co/u/Ashigha_JR)\
**Replies:** 5\
**Last updated:** [June 27, 2023, 6:20am UTC](https://discuss.elastic.co/t/need-help-to-how-to-customize-the-theme-color-of-the-kibana-dashboard/335824 "2023-06-27T06:20:50Z")

</div>

Is it possible to customize the theme color of the kibana dashboard apart from default light and dark theme. I need to change the kibana dashboard theme color into purple , also need to change the color of the time filt…

---

## [SDK cannot reach AWS S3 repository after upgrading to ES 6.3.0](https://discuss.elastic.co/t/sdk-cannot-reach-aws-s3-repository-after-upgrading-to-es-6-3-0/135895)

<div class="topic-metadata">

**Author:** [@Mr.King](https://discuss.elastic.co/u/Mr.King)\
**Replies:** 5\
**Last updated:** [July 3, 2018, 6:00pm UTC](https://discuss.elastic.co/t/sdk-cannot-reach-aws-s3-repository-after-upgrading-to-es-6-3-0/135895 "2018-07-03T18:00:21Z")

</div>

I upgraded from ES 6.2.3 to 6.3.0 and my whole cluster cannot reach my AWS S3 bucket anymore. Notice that I use the ES docker build. GET \_snapshot/elk-repo/\* { "error": { "root\_cause": \[ { "type": "repository\_mis…

---

## [Logstash is running on only starts on 127.0.0.1:9600](https://discuss.elastic.co/t/logstash-is-running-on-only-starts-on-127-0-0-1-9600/307710)

<div class="topic-metadata">

**Author:** [@sugriv\_1605](https://discuss.elastic.co/u/sugriv_1605)\
**Replies:** 4\
**Last updated:** [June 21, 2022, 4:38pm UTC](https://discuss.elastic.co/t/logstash-is-running-on-only-starts-on-127-0-0-1-9600/307710 "2022-06-21T16:38:18Z")

</div>

Hi, My Logstash is running but the Port 9600 is not Listening.

---

## [Error installing Fleet Server](https://discuss.elastic.co/t/error-installing-fleet-server/306216)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 6:54pm UTC](https://discuss.elastic.co/t/error-installing-fleet-server/306216 "2022-06-06T18:54:47Z")

</div>

Hi, My setup: Elasticsearch 8.1.0, Kibana 8.1.0, Elastic Agent 8.1.0 Downloaded elastic agent on my windows machine. Ran the following command: elastic-agent.exe install --fleet-server-es=https://localhost:9200 --fl…

---

## [What permissions are needed to manage Fleet/Agent Policies/Integrations](https://discuss.elastic.co/t/what-permissions-are-needed-to-manage-fleet-agent-policies-integrations/286650)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 4\
**Last updated:** [October 14, 2021, 4:59pm UTC](https://discuss.elastic.co/t/what-permissions-are-needed-to-manage-fleet-agent-policies-integrations/286650 "2021-10-14T16:59:48Z")

</div>

Hi All, I'm trying to setup RBAC for managing Fleet/Agent Policies/Integrations, but I'm having a hard time finding a list of permissions (Index level and Kibana Space level). Would anyone know where I could find docs f…

---

## [Collecting docker logs using Filebeats](https://discuss.elastic.co/t/collecting-docker-logs-using-filebeats/272512)

<div class="topic-metadata">

**Author:** [@sfigueroa](https://discuss.elastic.co/u/sfigueroa)\
**Replies:** 4\
**Last updated:** [May 15, 2021, 6:30am UTC](https://discuss.elastic.co/t/collecting-docker-logs-using-filebeats/272512 "2021-05-15T06:30:24Z")

</div>

Hi, I am trying to collect this kind of logs from a docker container: \[1620579277\]\[642e7adc-74e1-4b89-a705-d271846f7ebc\]\[channel1\]\[afca2a976fa482f429fff4a38e2ea49f337a8af1b5dca0de90410ecc792fd5a4\]\[usecase\_cc\]\[set\] ex02 …

---

## [Getting total sum of all buckets in Kibana](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380)

<div class="topic-metadata">

**Author:** [@schwalbe](https://discuss.elastic.co/u/schwalbe)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 8:03pm UTC](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380 "2021-01-06T20:03:55Z")

</div>

Hi there, I am very new and unexperienced in ELK. What I am searching for is a way to get the total sum of values (rows) in a table. With the result of this I want to calculate e.g. the ratio of the total average and a s…

---

## [Kibana primeiros passos](https://discuss.elastic.co/t/kibana-primeiros-passos/239860)

<div class="topic-metadata">

**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\
**Replies:** 4\
**Last updated:** [October 30, 2020, 7:48pm UTC](https://discuss.elastic.co/t/kibana-primeiros-passos/239860 "2020-10-30T19:48:48Z")

</div>

Olá pessoal! Consegui finalmente carregar dados em meu Elasticsearch cloud. Porém preciso agora executar os primeiros passos para visualizar estes dados no Kibana. Existe algum material resumido para estes primeiros p…

---

## [Metaphone analyzer being too ambigous](https://discuss.elastic.co/t/metaphone-analyzer-being-too-ambigous/221516)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 4\
**Last updated:** [March 2, 2020, 1:52pm UTC](https://discuss.elastic.co/t/metaphone-analyzer-being-too-ambigous/221516 "2020-03-02T13:52:55Z")

</div>

Hi, I am currently using the Metaphone analyzer and it is acting too ambiguous. For example, here is the result for Murder using the \_analyze API. { "tokens": \[ { "token": "MRTR", "s…

---

## [Want to replace hostname as identhostname in logstash log output](https://discuss.elastic.co/t/want-to-replace-hostname-as-identhostname-in-logstash-log-output/199148)

<div class="topic-metadata">

**Author:** [@ridhima](https://discuss.elastic.co/u/ridhima)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 4:12pm UTC](https://discuss.elastic.co/t/want-to-replace-hostname-as-identhostname-in-logstash-log-output/199148 "2019-09-12T16:12:15Z")

</div>

Currently Our config file 000-grok.conf file has below content: filter { mutate { # squash multiple whitespace gsub =\> \[ "message", "{2,}"," " \] # ditch the dashes gsub =\> \[ "message", "{5}.\*{50,}\\n","" \] # r…

---

## [Metricbeat \> Logstash errors: client is not connected](https://discuss.elastic.co/t/metricbeat-logstash-errors-client-is-not-connected/182271)

<div class="topic-metadata">

**Author:** [@Jacko-ski](https://discuss.elastic.co/u/Jacko-ski)\
**Replies:** 4\
**Last updated:** [May 24, 2019, 5:41pm UTC](https://discuss.elastic.co/t/metricbeat-logstash-errors-client-is-not-connected/182271 "2019-05-24T17:41:54Z")

</div>

I'm observing these errors in Metricbeat logs on the sender machine. Looks like every Publish event fails initially, then reconnects after a re-try. Why is that happening? The Logstash consumer targets are deployed…

---

## [Opencart(2.3.0.2) Elasticsearch(6.7.0) have problem](https://discuss.elastic.co/t/opencart-2-3-0-2-elasticsearch-6-7-0-have-problem/175169)

<div class="topic-metadata">

**Author:** [@junhyuk](https://discuss.elastic.co/u/junhyuk)\
**Replies:** 4\
**Last updated:** [April 5, 2019, 9:28am UTC](https://discuss.elastic.co/t/opencart-2-3-0-2-elasticsearch-6-7-0-have-problem/175169 "2019-04-05T09:28:10Z")

</div>

I want to use Opencart Elasticsearch. So first, setting elasticsearch 6.7.0 by yum, java 1.8 on centos6.9 And I bought Opencart Elasticsearch, Setting is almost finished. On Opencart extensions page, I have installed …

---

## [Hot/Warm Architecture - Two nodes on the same server](https://discuss.elastic.co/t/hot-warm-architecture-two-nodes-on-the-same-server/170506)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 1:42pm UTC](https://discuss.elastic.co/t/hot-warm-architecture-two-nodes-on-the-same-server/170506 "2019-03-01T13:42:56Z")

</div>

Hi there, Is it technically possible to run multiple elasticsearch nodes on the same physical server? For example in a Hot/Warm architecture could we fill a chassis with half SSD's and half HDD's and run a Hot node and …

---

## [Marvel broke Elastic search?](https://discuss.elastic.co/t/marvel-broke-elastic-search/53877)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 4\
**Last updated:** [June 24, 2016, 2:34pm UTC](https://discuss.elastic.co/t/marvel-broke-elastic-search/53877 "2016-06-24T14:34:07Z")

</div>

I just installed Marvel and it completely broke ES, the service for ES just died. It says "Unable to connect to Elasticsearch at "IP:9200". How do i fix this?

---

## [Elasticsearch aggregation performance issue -- index allocation](https://discuss.elastic.co/t/elasticsearch-aggregation-performance-issue-index-allocation/52927)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 4\
**Last updated:** [June 21, 2016, 9:48pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-performance-issue-index-allocation/52927 "2016-06-21T21:48:05Z")

</div>

My company is using elasticsearch to transaction log indexing and aggregation. The data stream in elasticsearch from logstash at the speed of 1000-1500 messages per second. We currently have two data nodes to do both in…

---

## [Ingest Node Problems](https://discuss.elastic.co/t/ingest-node-problems/155395)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [November 9, 2018, 2:09pm UTC](https://discuss.elastic.co/t/ingest-node-problems/155395 "2018-11-09T14:09:43Z")

</div>

Hi, I've just enabled an ingest node pipeline for a subset of logs ingesting to one of our 5.6.3 clusters. The pipeline looks like this: { "test" : { "description" : "Test Logging Pipeline", "processors" : \[ …

---

## [Index pattern test\* is not time based](https://discuss.elastic.co/t/index-pattern-test-is-not-time-based/113751)

<div class="topic-metadata">

**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\
**Replies:** 3\
**Last updated:** [January 9, 2018, 10:54pm UTC](https://discuss.elastic.co/t/index-pattern-test-is-not-time-based/113751 "2018-01-09T22:54:03Z")

</div>

Hi. I tried to create a machine learning. But I got this error. So Please help to resolve this.

---

## [Logstash Capacity planning](https://discuss.elastic.co/t/logstash-capacity-planning/95807)

<div class="topic-metadata">

**Author:** [@sesaravanan](https://discuss.elastic.co/u/sesaravanan)\
**Replies:** 3\
**Last updated:** [August 4, 2017, 7:32am UTC](https://discuss.elastic.co/t/logstash-capacity-planning/95807 "2017-08-04T07:32:03Z")

</div>

I have an requirement to pull and process 1 TB of data per data using logstash and push it to elastic search. how to calculate the network bandwidth for input data to logstash. how to calculate the network bandwidt…

---

## [ES-2.3.4 Cluster in AWS - Transport Client not able to connect](https://discuss.elastic.co/t/es-2-3-4-cluster-in-aws-transport-client-not-able-to-connect/57131)

<div class="topic-metadata">

**Author:** [@Sree](https://discuss.elastic.co/u/Sree)\
**Replies:** 3\
**Last updated:** [August 4, 2016, 10:03am UTC](https://discuss.elastic.co/t/es-2-3-4-cluster-in-aws-transport-client-not-able-to-connect/57131 "2016-08-04T10:03:07Z")

</div>

I have a 3 node ES cluster setup in AWS. Cluster discovery and REST endpoints are working fine. But when i try with a TransportClient , its unable to connect to the cluster. i am getting No Node available exception. Ple…

---

## [ElasticSearch space Requirement for productions](https://discuss.elastic.co/t/elasticsearch-space-requirement-for-productions/32553)

<div class="topic-metadata">

**Author:** [@Anurag\_Kumar](https://discuss.elastic.co/u/Anurag_Kumar)\
**Replies:** 3\
**Last updated:** [October 20, 2015, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-space-requirement-for-productions/32553 "2015-10-20T08:56:41Z")

</div>

i am trying my best to get the most suitable configuration for my production server to deploy ElasticSearch. But after googling a lot of documents i did not figure out the exact hardware requirements for my purpose. Be…

---

## [Boosting certain conditions](https://discuss.elastic.co/t/boosting-certain-conditions/9580)

<div class="topic-metadata">

**Author:** [@Brandon\_Hilkert](https://discuss.elastic.co/u/Brandon_Hilkert)\
**Replies:** 3\
**Last updated:** [November 6, 2012, 11:16pm UTC](https://discuss.elastic.co/t/boosting-certain-conditions/9580 "2012-11-06T23:16:31Z")

</div>

I have the following filtered query right now: { "query": { "filtered": { "query": { "query\_string": { "query": "MySQL Apple" } }, "filter": { "and": …

---

## [How to get counts / stats for different periods of time?](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799)

<div class="topic-metadata">

**Author:** [@ashwinbhaskar](https://discuss.elastic.co/u/ashwinbhaskar)\
**Replies:** 2\
**Last updated:** [May 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799 "2021-05-24T10:46:22Z")

</div>

I am trying to get the count of documents that were created for the last 10 weeks grouped by week. To get the count for the last week, I would do something like this GET my\_index/\_count { "query": { "range": { …

---

## [Waterfall chart with kibana](https://discuss.elastic.co/t/waterfall-chart-with-kibana/260928)

<div class="topic-metadata">

**Author:** [@chamiduz](https://discuss.elastic.co/u/chamiduz)\
**Replies:** 2\
**Last updated:** [January 13, 2021, 4:12pm UTC](https://discuss.elastic.co/t/waterfall-chart-with-kibana/260928 "2021-01-13T16:12:52Z")

</div>

Hi, I would like to know how to create a waterfall chart in kibana. is there a visualizer for that?

---

## [Enable inline scripting (painless) to use scripted fields in kibana](https://discuss.elastic.co/t/enable-inline-scripting-painless-to-use-scripted-fields-in-kibana/114475)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 3:10pm UTC](https://discuss.elastic.co/t/enable-inline-scripting-painless-to-use-scripted-fields-in-kibana/114475 "2018-01-08T15:10:59Z")

</div>

Hi when trying to write scripted field in kibana i've got an error that says : Scripting disabled: All inline scripting has been disabled in Elasticsearch. You must enable inline scripting for at least one language in o…

---

## [Logstash service started but not working, command line is working perfectly](https://discuss.elastic.co/t/logstash-service-started-but-not-working-command-line-is-working-perfectly/38957)

<div class="topic-metadata">

**Author:** [@karelstriegel](https://discuss.elastic.co/u/karelstriegel)\
**Replies:** 1\
**Last updated:** [January 12, 2016, 10:15am UTC](https://discuss.elastic.co/t/logstash-service-started-but-not-working-command-line-is-working-perfectly/38957 "2016-01-12T10:15:21Z")

</div>

Dear, I have a logstash configuration that is working when I run logstash manually : sudo -u logstash /opt/logstash/bin/logstash agent -f /etc/logstash/conf.d But doesn't work when I'm running at as a service serv…

---

## [How to search dynamically in the indexex from java web application](https://discuss.elastic.co/t/how-to-search-dynamically-in-the-indexex-from-java-web-application/29604)

<div class="topic-metadata">

**Author:** [@shaikkhaleel](https://discuss.elastic.co/u/shaikkhaleel)\
**Replies:** 1\
**Last updated:** [September 18, 2015, 10:30pm UTC](https://discuss.elastic.co/t/how-to-search-dynamically-in-the-indexex-from-java-web-application/29604 "2015-09-18T22:30:10Z")

</div>

Hi, I have created a Spring MVC based web application. I have added the spring-data-integration libraries to that application to work with elasticsearch indices. The architecture of the application is: I want to …

---

## [How can i search data from two indexes in Elastic search](https://discuss.elastic.co/t/how-can-i-search-data-from-two-indexes-in-elastic-search/353438)

<div class="topic-metadata">

**Author:** [@Sudipta\_Bhowmick](https://discuss.elastic.co/u/Sudipta_Bhowmick)\
**Replies:** 6\
**Last updated:** [February 16, 2024, 10:18am UTC](https://discuss.elastic.co/t/how-can-i-search-data-from-two-indexes-in-elastic-search/353438 "2024-02-16T10:18:05Z")

</div>

I have been stucked in a scenario and not getting any proper solution. Here is the problem i am facing with Elasticsearch. Any help would be appriciated. I have two indexes one is video and another is subtitles. A vid…

---

## [Those wildcard searches... or is it me?](https://discuss.elastic.co/t/those-wildcard-searches-or-is-it-me/152055)

<div class="topic-metadata">

**Author:** [@waltus](https://discuss.elastic.co/u/waltus)\
**Replies:** 6\
**Last updated:** [October 29, 2018, 9:50am UTC](https://discuss.elastic.co/t/those-wildcard-searches-or-is-it-me/152055 "2018-10-29T09:50:33Z")

</div>

Hi, guys my third time setting up all the good things: Elasticsearch, Logstash, Kibana... Logs coming from Filebeat. Kibana is showing me all the relevant Logs. I also fixed the timestamp situation. .. Everything look…

---

## [Unable to loop through array field ES 6.1](https://discuss.elastic.co/t/unable-to-loop-through-array-field-es-6-1/116669)

<div class="topic-metadata">

**Author:** [@Hudson\_Dunice](https://discuss.elastic.co/u/Hudson_Dunice)\
**Replies:** 6\
**Last updated:** [January 24, 2018, 1:23pm UTC](https://discuss.elastic.co/t/unable-to-loop-through-array-field-es-6-1/116669 "2018-01-24T13:23:29Z")

</div>

Hey guys, I'm facing a problem in ElasticSearch 6.1 that I cannot solve and I don't know why. I have read the docs several times and maybe I'm missing something. I have a scripted query that needs to do some calculatio…

---

## [Custom plugin error](https://discuss.elastic.co/t/custom-plugin-error/79298)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 6\
**Last updated:** [March 27, 2017, 3:30pm UTC](https://discuss.elastic.co/t/custom-plugin-error/79298 "2017-03-27T15:30:56Z")

</div>

Hello, I'm a beginner programmer and I don't quite understand whyb I'm getting a certain error. I wanted to be able to input html/javascript on my dashboard for a custom application and so the easiest way I found was by…

---

## [Unable to apply indextemplate settings for ingest attachment plugin](https://discuss.elastic.co/t/unable-to-apply-indextemplate-settings-for-ingest-attachment-plugin/74522)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 6\
**Last updated:** [February 18, 2017, 7:27am UTC](https://discuss.elastic.co/t/unable-to-apply-indextemplate-settings-for-ingest-attachment-plugin/74522 "2017-02-18T07:27:21Z")

</div>

Hello, I am attempting to integrate the ingest attachment plugin along with ES v 5.2.0, based on the discussion mentioned in https://github.com/elastic/elasticsearch/issues/18073 we no longer support index level settin…

---

## [Java Client for Spring Boot Reactive Application](https://discuss.elastic.co/t/java-client-for-spring-boot-reactive-application/289540)

<div class="topic-metadata">

**Author:** [@yash\_mahajan](https://discuss.elastic.co/u/yash_mahajan)\
**Replies:** 3\
**Last updated:** [November 18, 2021, 10:05am UTC](https://discuss.elastic.co/t/java-client-for-spring-boot-reactive-application/289540 "2021-11-18T10:05:09Z")

</div>

Hi team! Which client do you recommend for Elasticsearch for spring boot reactive app? The documentation says 7.15 high level rest client is deprecated in favour of Java API. 7.16 Java API documentation mentions that i…

---

## [Logstash log output config and location](https://discuss.elastic.co/t/logstash-log-output-config-and-location/48902)

<div class="topic-metadata">

**Author:** [@gregoryo](https://discuss.elastic.co/u/gregoryo)\
**Replies:** 3\
**Last updated:** [May 3, 2016, 6:09am UTC](https://discuss.elastic.co/t/logstash-log-output-config-and-location/48902 "2016-05-03T06:09:30Z")

</div>

Continuing the discussion from \`service logstash start\` doesn't work: I can't find where logstash writes its own logs. I created /var/log/logstash with temporary 0777 permissions, and restarted logstash. Nothing is wri…

---

## [Logstash always output input event type as log](https://discuss.elastic.co/t/logstash-always-output-input-event-type-as-log/46554)

<div class="topic-metadata">

**Author:** [@blnprasad](https://discuss.elastic.co/u/blnprasad)\
**Replies:** 3\
**Last updated:** [April 7, 2016, 9:00am UTC](https://discuss.elastic.co/t/logstash-always-output-input-event-type-as-log/46554 "2016-04-07T09:00:06Z")

</div>

Hi, I've configured logstash input for different type. but when it ouputs elastic search, value of type filed is coming as "log". No matter what i configure type value in input section, it's being outputted as "log". my…

[Previous page](https://discuss.elastic.co/top.md?page=1016&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1018&per_page=50&period=all)
