# Top **URL:** https://discuss.elastic.co/top.md?page=1033&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1034 --- ## [Courier Fetch Error when using document level filtering](https://discuss.elastic.co/t/courier-fetch-error-when-using-document-level-filtering/40847)
**Author:** [@thomasno](https://discuss.elastic.co/u/thomasno)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 9:53pm UTC](https://discuss.elastic.co/t/courier-fetch-error-when-using-document-level-filtering/40847 "2016-02-09T21:53:33Z")
I'm having a issue when trying to use the document level filtering feature in the roles.yml file. When I try to enable it I am presented with the following error Courier Fetch Error: unhandled courier request error: \[s… --- ## [Elastic Agent - Windows logs + Tagging](https://discuss.elastic.co/t/elastic-agent-windows-logs-tagging/247032)
**Author:** [@danielsnelling](https://discuss.elastic.co/u/danielsnelling)\ **Replies:** 4\ **Last updated:** [September 1, 2020, 7:21am UTC](https://discuss.elastic.co/t/elastic-agent-windows-logs-tagging/247032 "2020-09-01T07:21:39Z")
Hi, does anyone know if the Elastic Agent/Ingest Manager will be getting a Winlogbeat integration module? Currently we are deploying Auditbeat/Filebeat/Metricbeat/Winlogbeat + Sysmon in a MSI bundle, as well as a separa… --- ## [Unable to see the Json data as fields in kibana](https://discuss.elastic.co/t/unable-to-see-the-json-data-as-fields-in-kibana/137554)
**Author:** [@Chandana](https://discuss.elastic.co/u/Chandana)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 10:56am UTC](https://discuss.elastic.co/t/unable-to-see-the-json-data-as-fields-in-kibana/137554 "2018-06-27T10:56:27Z")
I have a sample log file with json content { LoanCode:99356, LoanDate:3/2/2018, LoanStatus:OPN} Here is my logstash conf file input{ file{ path =\> "D:/elkstack/\*.log" start\_position =\> beginning } } filter{ gr… --- ## [Elasticsearch Active Directory Authorization only support](https://discuss.elastic.co/t/elasticsearch-active-directory-authorization-only-support/87080)
**Author:** [@him117](https://discuss.elastic.co/u/him117)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-active-directory-authorization-only-support/87080 "2017-05-30T10:43:51Z")
I wanted to know, is there any way I can configure x-pack with authorization only access. Means I should send the username only, and it will authenticate it according to the roles. --- ## [Combining date and time fields in csv](https://discuss.elastic.co/t/combining-date-and-time-fields-in-csv/290624)
**Author:** [@Pba\_In](https://discuss.elastic.co/u/Pba_In)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 12:15pm UTC](https://discuss.elastic.co/t/combining-date-and-time-fields-in-csv/290624 "2021-12-13T12:15:08Z")
I have a csv file that I'm looking to import into Kibana. There is a date field and a time field. I would like to combine them to be used as a timestamp, so that I can then search for specific time ranges. However, the… --- ## [Not able to create index after first index uisng imap input plugin](https://discuss.elastic.co/t/not-able-to-create-index-after-first-index-uisng-imap-input-plugin/58810)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [August 25, 2016, 3:56pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-after-first-index-uisng-imap-input-plugin/58810 "2016-08-25T15:56:38Z")
Hi All I created a index using imap plugin. It went through successfully first time Then i realized i should change some fields type using template and i deleted the index I re ran the logstash using same config file… --- ## [2 Errors with Elasticsearch](https://discuss.elastic.co/t/2-errors-with-elasticsearch/23112)
**Author:** [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\ **Replies:** 5\ **Last updated:** [April 8, 2015, 7:19am UTC](https://discuss.elastic.co/t/2-errors-with-elasticsearch/23112 "2015-04-08T07:19:19Z")
When I open Kibana by searching for my IP in my browser, I get the following 2 errors. Would anyone happen to have any advice on how to fix these errors? I already updated Elasticsearch to its latest version (elast… --- ## [Docker swarm - create a single service elasticsearch 3 node cluster](https://discuss.elastic.co/t/docker-swarm-create-a-single-service-elasticsearch-3-node-cluster/286027)
**Author:** [@Bieniek](https://discuss.elastic.co/u/Bieniek)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 6:12pm UTC](https://discuss.elastic.co/t/docker-swarm-create-a-single-service-elasticsearch-3-node-cluster/286027 "2021-10-06T18:12:40Z")
I’m trying to create a single service Elasticsearch 3 node cluster. I cannot set the cluster.initial\_master\_nodes environment variable appropriately. I’m using: redhat 7 server docker Version: 17.09.0-ce The below EFK… --- ## [Kibana keeps showing old logs on the discover tab after applying a lifecycle policy with index template](https://discuss.elastic.co/t/kibana-keeps-showing-old-logs-on-the-discover-tab-after-applying-a-lifecycle-policy-with-index-template/265791)
**Author:** [@K\_Shayeb](https://discuss.elastic.co/u/K_Shayeb)\ **Replies:** 7\ **Last updated:** [March 10, 2021, 8:38am UTC](https://discuss.elastic.co/t/kibana-keeps-showing-old-logs-on-the-discover-tab-after-applying-a-lifecycle-policy-with-index-template/265791 "2021-03-10T08:38:33Z")
Description I'm using fluentd to send logs to Elasticsearch 7.10.0 / Kibana 7.10.0 Now without applying any IndexTemplate and LifecyclePolicy I face no issues. However, After applying an IndexTemplate and LifecyclePolic… --- ## [After upgrading Logstash to 6.4.1 It could not be started there is already another instance using the configured data directory](https://discuss.elastic.co/t/after-upgrading-logstash-to-6-4-1-it-could-not-be-started-there-is-already-another-instance-using-the-configured-data-directory/150013)
**Author:** [@emna](https://discuss.elastic.co/u/emna)\ **Replies:** 7\ **Last updated:** [October 1, 2018, 12:12pm UTC](https://discuss.elastic.co/t/after-upgrading-logstash-to-6-4-1-it-could-not-be-started-there-is-already-another-instance-using-the-configured-data-directory/150013 "2018-10-01T12:12:57Z")
Hi, After upgrading Logstash to version 6.4.1 using the package managers procedure bellow : https://www.elastic.co/guide/en/logstash/current/upgrading-using-package-managers.html Logstash version has changed successf… --- ## [Indexing 5GB file](https://discuss.elastic.co/t/indexing-5gb-file/129875)
**Author:** [@Parul-Kudtarkar](https://discuss.elastic.co/u/Parul-Kudtarkar)\ **Replies:** 7\ **Last updated:** [May 1, 2018, 3:14pm UTC](https://discuss.elastic.co/t/indexing-5gb-file/129875 "2018-05-01T15:14:30Z")
Hi, What is the max size to index file? What are options to index a large file ~5GB other than breaking it into chuncks. Thanks, Parul --- ## [Error parsing json using jdbc input](https://discuss.elastic.co/t/error-parsing-json-using-jdbc-input/48954)
**Author:** [@JvonRudno](https://discuss.elastic.co/u/JvonRudno)\ **Replies:** 1\ **Last updated:** [May 16, 2017, 1:29pm UTC](https://discuss.elastic.co/t/error-parsing-json-using-jdbc-input/48954 "2017-05-16T13:29:25Z")
Hi everybody, I am trying to parse a json in order to have a nested field in my docu but I get the following message: Error parsing json {:source=\>"catejories\_json", :raw=\>#, :exception=\>java.lang.ClassCastException: o… --- ## [Courier Fetch Error: unhandled courier request error: Request Timeout after 30000ms](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-request-timeout-after-30000ms/64543)
**Author:** [@RobinW2](https://discuss.elastic.co/u/RobinW2)\ **Replies:** 1\ **Last updated:** [November 1, 2016, 11:12am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-request-timeout-after-30000ms/64543 "2016-11-01T11:12:29Z")
Hi all, I hope you're well. I have the following error every time I run a query in Kibana since about two weeks. The query returns with a fatal error described as: Courier Fetch Error: unhandled courier request erro… --- ## [Log event correlation with timestamp](https://discuss.elastic.co/t/log-event-correlation-with-timestamp/55006)
**Author:** [@fjiang212](https://discuss.elastic.co/u/fjiang212)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 2:32am UTC](https://discuss.elastic.co/t/log-event-correlation-with-timestamp/55006 "2016-07-08T02:32:26Z")
I have two log files and the transaction will cross two log files. The following are fields in the elasticsearch and there is no correlation field in these two Logs. \* LogFile A: timestamp, customerID, result \* LogFile… --- ## [Issue with number formatting, displaying integer values as floating point](https://discuss.elastic.co/t/issue-with-number-formatting-displaying-integer-values-as-floating-point/26588)
**Author:** [@jmcdaniel](https://discuss.elastic.co/u/jmcdaniel)\ **Replies:** 1\ **Last updated:** [August 5, 2015, 5:34am UTC](https://discuss.elastic.co/t/issue-with-number-formatting-displaying-integer-values-as-floating-point/26588 "2015-08-05T05:34:29Z")
Hello! I'm just getting used to using Kibana, so forgive me if I'm missing something. However, I did hit an issue that I wanted to place here to get some feedback to see how I can tackle it correctly. This started wit… --- ## [Delete by query?](https://discuss.elastic.co/t/delete-by-query/289472)
**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 4:27pm UTC](https://discuss.elastic.co/t/delete-by-query/289472 "2021-11-17T16:27:25Z")
Hello. :slight\_smile: I'm using delete\_by\_query to remove old data from all index. Looks like that: POST \*/\_delete\_by\_query { "query": { "bool": { "filter": \[ { "range": { "@t… --- ## [Filebeat autodiscover missing field accessing](https://discuss.elastic.co/t/filebeat-autodiscover-missing-field-accessing/274256)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 4:40pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-missing-field-accessing/274256 "2021-06-14T16:40:08Z")
I am trying to setup filebeat with autodiscover, but container is failing with this error 2021-05-27T19:25:03.029Z ERROR instance/beat.go:971 Exiting: error in autodiscover provider settings: error setting up kubernetes… --- ## [Csv filter plugin: how to deal with masked quotations?](https://discuss.elastic.co/t/csv-filter-plugin-how-to-deal-with-masked-quotations/196488)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 2:05pm UTC](https://discuss.elastic.co/t/csv-filter-plugin-how-to-deal-with-masked-quotations/196488 "2019-08-23T14:05:03Z")
Hi, I have following csv file. "@timestamp";"col\_a";"col\_b";"col\_c";"col\_d" "2019-08-23 04:43:16.821";"\";b;c;d I am trying to parse it in logstash with following filter: filt… --- ## [Aggregation in Watcher](https://discuss.elastic.co/t/aggregation-in-watcher/44670)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 2\ **Last updated:** [July 21, 2016, 7:36pm UTC](https://discuss.elastic.co/t/aggregation-in-watcher/44670 "2016-07-21T19:36:24Z")
How do I cater for scenario in which an alert will be sent out when a source IP has appeared within a period of time for more than X number of time. --- ## [Failed action with response of 500, dropping action Logstash1.5.4](https://discuss.elastic.co/t/failed-action-with-response-of-500-dropping-action-logstash1-5-4/33502)
**Author:** [@NgocPham](https://discuss.elastic.co/u/NgocPham)\ **Replies:** 2\ **Last updated:** [November 3, 2015, 2:00am UTC](https://discuss.elastic.co/t/failed-action-with-response-of-500-dropping-action-logstash1-5-4/33502 "2015-11-03T02:00:10Z")
Hi everybody, im newbie and i try use logstash, elasticsearch to Search in my Web. One error appear and i dont know how to fix it. Pls help me , thanks you! i tried config file .conf look like this ,it work normal , my… --- ## [Scripting field in Kibana and use it in loop](https://discuss.elastic.co/t/scripting-field-in-kibana-and-use-it-in-loop/148043)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 8\ **Last updated:** [September 11, 2018, 7:11am UTC](https://discuss.elastic.co/t/scripting-field-in-kibana-and-use-it-in-loop/148043 "2018-09-11T07:11:40Z")
can anyone help me over the scripting field. I am getting an error on running this def x = doc\['index\_total'\].value; def y = doc\['index\_time\_in\_millis'\].value; { if ( x \> 0) { def z = y / x; return z } else { de… --- ## [Error in Elasticsearch NullPointerException at org.elasticsearch.plugins.PluginsService.loadSitePlugins](https://discuss.elastic.co/t/error-in-elasticsearch-nullpointerexception-at-org-elasticsearch-plugins-pluginsservice-loadsiteplugins/16452)
**Author:** [@Preeti\_Jain](https://discuss.elastic.co/u/Preeti_Jain)\ **Replies:** 8\ **Last updated:** [March 24, 2014, 4:48am UTC](https://discuss.elastic.co/t/error-in-elasticsearch-nullpointerexception-at-org-elasticsearch-plugins-pluginsservice-loadsiteplugins/16452 "2014-03-24T04:48:33Z")
Hi , We suddenly started getting this error in Elasticsearch log \[2014-03-19 09:40:57,419\]\[DEBUG\]\[action.admin.cluster.node.info\] \[North\] failed to execute on node \[B5a2wTMvQpGHOpO5oIjnug\] java.lang.NullPointerE… --- ## [Use elasticsearch with syslog](https://discuss.elastic.co/t/use-elasticsearch-with-syslog/11751)
**Author:** [@olivier\_morel](https://discuss.elastic.co/u/olivier_morel)\ **Replies:** 8\ **Last updated:** [May 2, 2013, 3:41pm UTC](https://discuss.elastic.co/t/use-elasticsearch-with-syslog/11751 "2013-05-02T15:41:02Z")
hy I try to use elasticsearch with my syslog server for that i creat a facility with syslog. I have a multiple question 1) my configuration in logging.yml is good ? or i make a mistake 2) if you have already im… --- ## [Rollover\_alias errors on logstash daily indices from client application (fluentd)](https://discuss.elastic.co/t/rollover-alias-errors-on-logstash-daily-indices-from-client-application-fluentd/267519)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 4:51pm UTC](https://discuss.elastic.co/t/rollover-alias-errors-on-logstash-daily-indices-from-client-application-fluentd/267519 "2021-04-07T16:51:29Z")
This is the error I am getting on the indices that fluentd is sending directly to Elasticsearch: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[logstash\] does not point to index \[logstash-2021.02.09\] The i… --- ## [Logstash fails to run: ES\_TEMPDIR does not get translated properly?](https://discuss.elastic.co/t/logstash-fails-to-run-es-tempdir-does-not-get-translated-properly/260441)
**Author:** [@tarkhil](https://discuss.elastic.co/u/tarkhil)\ **Replies:** 3\ **Last updated:** [January 7, 2021, 4:18pm UTC](https://discuss.elastic.co/t/logstash-fails-to-run-es-tempdir-does-not-get-translated-properly/260441 "2021-01-07T16:18:31Z")
logstash7-7.10.0 openjdk15-15.0.1 Attempt to run logstash fails with # su -m logstash -c 'sh -c "env JAVA\_HOME=/usr/local/openjdk15 /usr/local/logstash/bin/logstash --path.settings /usr/local/etc/logstash -l /var… --- ## [Error while sniffing nodes using ES 5.6 high level Client](https://discuss.elastic.co/t/error-while-sniffing-nodes-using-es-5-6-high-level-client/107481)
**Author:** [@varun\_kumar](https://discuss.elastic.co/u/varun_kumar)\ **Replies:** 0\ **Last updated:** [November 14, 2017, 2:52am UTC](https://discuss.elastic.co/t/error-while-sniffing-nodes-using-es-5-6-high-level-client/107481 "2017-11-14T02:52:11Z")
We have deployed ES 5.6.3 on an AWS auto Scaling Group across AZ, this group has a load balancer and that is what we use as ES host. Using new high level elastic client as follows: val sniffOnFailureListener = new Snif… --- ## [Problem with jdbc\_streaming](https://discuss.elastic.co/t/problem-with-jdbc-streaming/86622)
**Author:** [@nano](https://discuss.elastic.co/u/nano)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 2:59pm UTC](https://discuss.elastic.co/t/problem-with-jdbc-streaming/86622 "2017-05-22T14:59:27Z")
Good morning, please i have some quetions about jdbc\_streaming , i made such a configuration to extract some data using jdbc\_streaming but i didn't acheive to my goal . there is my configuration file jdbc\_streami… --- ## [Different output per prospector](https://discuss.elastic.co/t/different-output-per-prospector/64619)
**Author:** [@danm](https://discuss.elastic.co/u/danm)\ **Replies:** 3\ **Last updated:** [November 1, 2016, 8:17pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619 "2016-11-01T20:17:29Z")
Apologies if this has already been established. We are using Filebeat in association with our Graylog cluster. We're shipping multiple files across to Graylog, however one problem we're having is using different 'inp… --- ## [Need help creating a status panel using Heartbeat data](https://discuss.elastic.co/t/need-help-creating-a-status-panel-using-heartbeat-data/306170)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 6\ **Last updated:** [June 28, 2022, 6:51pm UTC](https://discuss.elastic.co/t/need-help-creating-a-status-panel-using-heartbeat-data/306170 "2022-06-28T18:51:32Z")
I am trying to partially recreate the example dashboard shown here: In particular, I want to create a panel that uses a table, and I want the first column to be an up/down status column. This is the desired look: W… --- ## [Wrong date format when reading from elasticsearch index](https://discuss.elastic.co/t/wrong-date-format-when-reading-from-elasticsearch-index/238135)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 1:43pm UTC](https://discuss.elastic.co/t/wrong-date-format-when-reading-from-elasticsearch-index/238135 "2020-06-25T13:43:57Z")
i'm reading data from elactisearch index , i have date format issue 1501545600000 wich supposed to be in yyyy/mm/dd format from pyspark import SparkConf from pyspark.sql import SQLContext q ="""{ "query": { "ma… --- ## [Kibana Visualization for netflow.application\_name](https://discuss.elastic.co/t/kibana-visualization-for-netflow-application-name/195642)
**Author:** [@Elena\_Kaidrikov](https://discuss.elastic.co/u/Elena_Kaidrikov)\ **Replies:** 6\ **Last updated:** [August 21, 2019, 5:33am UTC](https://discuss.elastic.co/t/kibana-visualization-for-netflow-application-name/195642 "2019-08-21T05:33:45Z")
Hello , Please help me to understand how to create a Visualization for netflow.application\_name . I don't see this field in the list on adding a new Visualization Thanks you for your help and support Elena --- ## [How much does index size effect search speed?](https://discuss.elastic.co/t/how-much-does-index-size-effect-search-speed/76513)
**Author:** [@brandont](https://discuss.elastic.co/u/brandont)\ **Replies:** 6\ **Last updated:** [March 13, 2017, 5:08pm UTC](https://discuss.elastic.co/t/how-much-does-index-size-effect-search-speed/76513 "2017-03-13T17:08:59Z")
I set up Elasticsearch to create a new index on a daily interval but when I started the stack up, I "synchronized" a lot of log data from the past right away resulting in the first index being a LOT larger than the other… --- ## [E-mail plugin conditional expression](https://discuss.elastic.co/t/e-mail-plugin-conditional-expression/47120)
**Author:** [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)\ **Replies:** 6\ **Last updated:** [June 28, 2016, 12:11pm UTC](https://discuss.elastic.co/t/e-mail-plugin-conditional-expression/47120 "2016-06-28T12:11:15Z")
Hello, I'm trying to configure the e-mail plugin for Topbeat. I would like to receive an e-mail when the variable fs.used\_p is greather than 70%. However the sintax is not working for the conditional: if \[fs\]\[used\_p\]… --- ## [Filebeat + cloud.id defaulting to port 443 rather than 9243](https://discuss.elastic.co/t/filebeat-cloud-id-defaulting-to-port-443-rather-than-9243/202194)
**Author:** [@CloudIO](https://discuss.elastic.co/u/CloudIO)\ **Replies:** 0\ **Last updated:** [October 3, 2019, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-cloud-id-defaulting-to-port-443-rather-than-9243/202194 "2019-10-03T14:40:39Z")
I'm trying to setup ELK and running into problem. As an aside, I'm finding the documentation and steps very, very confusing - they tend to switch between setting filebeat \> logstash, filebeat \> elasticsearch and also di… --- ## [Downgrade beat version from v8 to v7](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 4\ **Last updated:** [June 15, 2022, 9:53am UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045 "2022-06-15T09:53:23Z")
Hi, can I know is it possible to downgrade from version 8 to v 7.14. Earlier what I did was just backup existing filebeat at /etc/filebeat and install new filebeat v8 via rpm. After installing noticed something cause my … --- ## [Nginx Module Dashboards "No data to display"](https://discuss.elastic.co/t/nginx-module-dashboards-no-data-to-display/180402)
**Author:** [@tpurcell](https://discuss.elastic.co/u/tpurcell)\ **Replies:** 4\ **Last updated:** [May 17, 2019, 4:18am UTC](https://discuss.elastic.co/t/nginx-module-dashboards-no-data-to-display/180402 "2019-05-17T04:18:31Z")
Hello Newbie here. I'm running the ELK stack with all components at version 7.0.1 in an Ubuntu 18.04 environment. My environment has nginx running in a docker container. my filebeat process is running on the docker hos… --- ## [Automatically delete old indexes on ElasticCloud](https://discuss.elastic.co/t/automatically-delete-old-indexes-on-elasticcloud/155570)
**Author:** [@kungfu](https://discuss.elastic.co/u/kungfu)\ **Replies:** 4\ **Last updated:** [November 6, 2018, 5:15pm UTC](https://discuss.elastic.co/t/automatically-delete-old-indexes-on-elasticcloud/155570 "2018-11-06T17:15:28Z")
Hello, people. I'm using an ElasticCloud instance. I was searching for a way to automatically delete old indexes in ES. But the only tool I found is a script called Curator. Since I'm using an ElasticCloud instance I'… --- ## [Kibana Dashboards (System Overview)](https://discuss.elastic.co/t/kibana-dashboards-system-overview/116936)
**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\ **Replies:** 4\ **Last updated:** [January 25, 2018, 4:32pm UTC](https://discuss.elastic.co/t/kibana-dashboards-system-overview/116936 "2018-01-25T16:32:02Z")
Hello, Sorry to both you guys, I have used Kibana before in another company and I remember being able to import dashboards and everything looked like the picture in the https://www.elastic.co/solutions/metrics where it … --- ## [Genre Expansion in Elasticsearch 6.1](https://discuss.elastic.co/t/genre-expansion-in-elasticsearch-6-1/115710)
**Author:** [@acorned](https://discuss.elastic.co/u/acorned)\ **Replies:** 4\ **Last updated:** [January 22, 2018, 2:38pm UTC](https://discuss.elastic.co/t/genre-expansion-in-elasticsearch-6-1/115710 "2018-01-22T14:38:17Z")
Hello All! I need some hierarchical structure of synonyms to search, as it described here: https://www.elastic.co/guide/en/elasticsearch/guide/current/synonyms-expand-or-contract.html When I search for "pet" I want to… --- ## [Pure boolean query - just return true or false, no result set](https://discuss.elastic.co/t/pure-boolean-query-just-return-true-or-false-no-result-set/12352)
**Author:** [@Allan\_Johns](https://discuss.elastic.co/u/Allan_Johns)\ **Replies:** 4\ **Last updated:** [June 12, 2013, 5:49pm UTC](https://discuss.elastic.co/t/pure-boolean-query-just-return-true-or-false-no-result-set/12352 "2013-06-12T17:49:37Z")
I have a case where I need to find out if any documents match a given query, but I don't need the result set, or even a count of the result. What is the most efficient way to do this, and is there room for a new fea… --- ## [Filebeat "TCP connection refused" error on DCOS cluster](https://discuss.elastic.co/t/filebeat-tcp-connection-refused-error-on-dcos-cluster/121137)
**Author:** [@aysala](https://discuss.elastic.co/u/aysala)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 3:57pm UTC](https://discuss.elastic.co/t/filebeat-tcp-connection-refused-error-on-dcos-cluster/121137 "2018-02-23T15:57:02Z")
Hello, I am trying to run Filebeat on all the nodes(Master, Agent) in my DCOS cluster. Filebeat works fine with ES as output in the configuration. But I get the 'dial tcp : getsockopt connection refused' error when log… --- ## [Point Kibana 'Dev Tools' to remote ES cluster](https://discuss.elastic.co/t/point-kibana-dev-tools-to-remote-es-cluster/100768)
**Author:** [@szemlyanoy](https://discuss.elastic.co/u/szemlyanoy)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 7:09pm UTC](https://discuss.elastic.co/t/point-kibana-dev-tools-to-remote-es-cluster/100768 "2017-09-18T19:09:08Z")
Hi all, I have 2 clusters: compute and monitoring running on v5.5.2 Kibana is installed on monitoring cluster and point to localhost. On compute I have x-pack exporters pointed to monitoring cluster, so from this pers… --- ## [Logstash 2.3.1 elasticsearch config not working](https://discuss.elastic.co/t/logstash-2-3-1-elasticsearch-config-not-working/47942)
**Author:** [@mnhan](https://discuss.elastic.co/u/mnhan)\ **Replies:** 1\ **Last updated:** [April 21, 2016, 1:29pm UTC](https://discuss.elastic.co/t/logstash-2-3-1-elasticsearch-config-not-working/47942 "2016-04-21T13:29:53Z")
using logstash 2.2.0-1, the config works output { elasticsearch { hosts =\> \["test-es.corp.com/elasticsearch/"\] ssl =\> true cacert =\> "" index =\> "system-%{YYYY.MM.dd}" } stdout { codec =\> rubydebug } } i… --- ## [Display more than 10k records in sense plugin and elasticsearch-sql plugin](https://discuss.elastic.co/t/display-more-than-10k-records-in-sense-plugin-and-elasticsearch-sql-plugin/140670)
**Author:** [@sistla](https://discuss.elastic.co/u/sistla)\ **Replies:** 5\ **Last updated:** [July 20, 2018, 6:48am UTC](https://discuss.elastic.co/t/display-more-than-10k-records-in-sense-plugin-and-elasticsearch-sql-plugin/140670 "2018-07-20T06:48:06Z")
Hi, We are using Elasticsearch 2.4.6 , logstash 2.2 and kibana 4.1.6 and installed two plugins to query in the elastic search . But we are able to display only 10,000 records among the existing 1 million records . Her… --- ## [Setting up a custom analyzer](https://discuss.elastic.co/t/setting-up-a-custom-analyzer/101480)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 5\ **Last updated:** [September 25, 2017, 2:50pm UTC](https://discuss.elastic.co/t/setting-up-a-custom-analyzer/101480 "2017-09-25T14:50:49Z")
Hi! I am creating a custom analyzer for one of my indexes, and I have some questions about the lowercase and standard token filters. In the documentation it says this about the lowecase tokenizer The lowercase tokeni… --- ## [Reporting not able to use multiple kibana environments](https://discuss.elastic.co/t/reporting-not-able-to-use-multiple-kibana-environments/61766)
**Author:** [@Nubber](https://discuss.elastic.co/u/Nubber)\ **Replies:** 5\ **Last updated:** [December 28, 2016, 11:30pm UTC](https://discuss.elastic.co/t/reporting-not-able-to-use-multiple-kibana-environments/61766 "2016-12-28T23:30:12Z")
In Plugin Package we found under path reporting/server/lib/constants.js that index of reporting is fixed. For our environment we would need that this is customizable. Please be aware that this would be needed for our env… --- ## [How to query with GROUP BY and COUNT(\*)](https://discuss.elastic.co/t/how-to-query-with-group-by-and-count/318936)
**Author:** [@Remon\_Andrew](https://discuss.elastic.co/u/Remon_Andrew)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 8:20am UTC](https://discuss.elastic.co/t/how-to-query-with-group-by-and-count/318936 "2022-11-15T08:20:29Z")
Hi all, I have this query that I used to run on MySQL: SELECT from\_mobile\_number, event\_name, COUNT(\*) AS count FROM analytics\_events WHERE date \>= '2022-10-01 00:00:00' AND date \<= '2022-09-30 23:59:59' AND from\_mobil… --- ## [How can make sub aggregation code in elasticsearch-java:7.17.1](https://discuss.elastic.co/t/how-can-make-sub-aggregation-code-in-elasticsearch-java-7-17-1/300001)
**Author:** [@mzinboy](https://discuss.elastic.co/u/mzinboy)\ **Replies:** 2\ **Last updated:** [March 20, 2022, 8:57am UTC](https://discuss.elastic.co/t/how-can-make-sub-aggregation-code-in-elasticsearch-java-7-17-1/300001 "2022-03-20T08:57:54Z")
Hi, I can't make code to aggregation with sub aggregation using "Elasticsearch-java:7.17.1" Java library. There is no subAggregation method in TermsAggregation.Builder class. How to complete the code that has with su… --- ## [Kibana not able to load Map tiles from maptiler](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865)
**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 11:48am UTC](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865 "2021-03-02T11:48:30Z")
I've set up a Maptiler server with a world map as my environment is airgapped. In my Kibana.yml config i have: map.includeElasticMapsService: false map.tilemap.url: "localhost:3650/api/maps/streets/{z}/{x}/{y}.png" map… --- ## [Search in multiple fields with highlighting](https://discuss.elastic.co/t/search-in-multiple-fields-with-highlighting/204507)
**Author:** [@sandeepv](https://discuss.elastic.co/u/sandeepv)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 3:41pm UTC](https://discuss.elastic.co/t/search-in-multiple-fields-with-highlighting/204507 "2019-10-21T15:41:33Z")
Can we search in multipe fields with hightlighs. GET /index\_name/\_doc/\_search { "\_source": false, "query": { "bool": { "should": \[ { "match": { "call\_data.source\_id": { … [Previous page](https://discuss.elastic.co/top.md?page=1032&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1034&per_page=50&period=all)