# Top

**URL:** https://discuss.elastic.co/top.md?page=1036&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1037

---

## [VisualizeとDashboardの一括置換コピー](https://discuss.elastic.co/t/visualize-dashboard/221995)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [March 6, 2020, 1:33am UTC](https://discuss.elastic.co/t/visualize-dashboard/221995 "2020-03-06T01:33:59Z")

</div>

お世話になります。 あるindex（src\_indexとします）で作成したVisualizationと、それらを配置したDashboardを、 データソースを別のindex（dst\_indexとします）に置き換えて、マルッとコピーしたいのですが、 いい方法がありますでしょうか？ Management --\> Kibana \[Saved Objects\] から、対象の Visualization と Dashboard をエクスポ…

---

## [Mapping in ELK 6.1 with the Ruby Rest Client](https://discuss.elastic.co/t/mapping-in-elk-6-1-with-the-ruby-rest-client/114733)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 1:13pm UTC](https://discuss.elastic.co/t/mapping-in-elk-6-1-with-the-ruby-rest-client/114733 "2018-01-10T13:13:13Z")

</div>

Hi, With the latest changes from the ELK 6.1.1 on the Removal of Mapping types, my ruby code doesn't work to create the mapping. Could you please let me know if I am doing anything wrong the mapping created in json file…

---

## [\[UpdateRequest\] failed to parse field \[doc\] while trying to update some fields](https://discuss.elastic.co/t/updaterequest-failed-to-parse-field-doc-while-trying-to-update-some-fields/234509)

<div class="topic-metadata">

**Author:** [@Moreno17](https://discuss.elastic.co/u/Moreno17)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 9:53am UTC](https://discuss.elastic.co/t/updaterequest-failed-to-parse-field-doc-while-trying-to-update-some-fields/234509 "2020-05-27T09:53:06Z")

</div>

Hi all, I am new with elasticsearch and I am trying to update a document that I have inserted before. The problem is that I had this error and I don't know what I am doing wrong: {'error': {'root\_cause': \[{'type': 'x\_co…

---

## [Validation in logstash input section](https://discuss.elastic.co/t/validation-in-logstash-input-section/81815)

<div class="topic-metadata">

**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\
**Replies:** 3\
**Last updated:** [April 14, 2017, 9:36am UTC](https://discuss.elastic.co/t/validation-in-logstash-input-section/81815 "2017-04-14T09:36:26Z")

</div>

I have tried by running the following script in the input section providing a wrong input file path but it did not show any error message after running the script: input { file { path =\> "C:\\DataSet\\EXP\_DATA.csv" …

---

## [Raw field not showed in kibana for term aggregation](https://discuss.elastic.co/t/raw-field-not-showed-in-kibana-for-term-aggregation/40656)

<div class="topic-metadata">

**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\
**Replies:** 3\
**Last updated:** [February 1, 2016, 6:01pm UTC](https://discuss.elastic.co/t/raw-field-not-showed-in-kibana-for-term-aggregation/40656 "2016-02-01T18:01:03Z")

</div>

I have indexed a pathname field as follows: "file\_name" : { "type": "string", "analyzer": "pathname\_analyzer", "search\_analyzer": "keyword", "fields": { "raw…

---

## [ES is taking significant time to start](https://discuss.elastic.co/t/es-is-taking-significant-time-to-start/124993)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 7\
**Last updated:** [March 29, 2018, 2:22pm UTC](https://discuss.elastic.co/t/es-is-taking-significant-time-to-start/124993 "2018-03-29T14:22:49Z")

</div>

We are starting the ES process using the bat file in version 5.4 \[2018-03-21T15:40:42,295\]\[INFO \]\[o.e.n.Node \] \[hxa\_pUV\] starting ... \[2018-03-21T15:46:20,944\]\[INFO \]\[o.e.t.TransportService \] \[hxa\_pUV\] …

---

## [Exiting: more than one namespace configured accessing config](https://discuss.elastic.co/t/exiting-more-than-one-namespace-configured-accessing-config/164365)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 1\
**Last updated:** [January 16, 2019, 4:41pm UTC](https://discuss.elastic.co/t/exiting-more-than-one-namespace-configured-accessing-config/164365 "2019-01-16T16:41:11Z")

</div>

Hi I am using Filebeat to send logs to Logstash for filtering and then to Elasticsearch. Here I am trying to add new beats monitoring feature in the stack and I am getting the following error while starting Filebeat. 2…

---

## [Inter index operation](https://discuss.elastic.co/t/inter-index-operation/121845)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 7\
**Last updated:** [March 10, 2018, 5:06pm UTC](https://discuss.elastic.co/t/inter-index-operation/121845 "2018-03-10T17:06:59Z")

</div>

Lets say, I have 2 indices. IndexA and IndexB. IndexA has: name and id. IndexB has: id and salary I need to have name and corresponding salary to the same ID.

---

## [Why is my timestamp in Logstash output appear different from value in Oracle column?](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 7\
**Last updated:** [November 9, 2017, 8:14am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869 "2017-11-09T08:14:23Z")

</div>

Hi, I am using Logstash 5.6.3. I am fetching some rows from oracle db. In SQL Developer, my timestamp is displayed like 07-11-17 01:35:35.461000000 PM . When I stdout{ codec =\> json } in Logstash, it is displayed like 2…

---

## [Advice on building a query dynamically](https://discuss.elastic.co/t/advice-on-building-a-query-dynamically/5666)

<div class="topic-metadata">

**Author:** [@Jondow](https://discuss.elastic.co/u/Jondow)\
**Replies:** 1\
**Last updated:** [October 25, 2011, 6:39pm UTC](https://discuss.elastic.co/t/advice-on-building-a-query-dynamically/5666 "2011-10-25T18:39:12Z")

</div>

Hi all, I'm looking for some advice on how to build a query dynamically. So what I mean by that is that our web application interface allows the user to create a filter of the information in our database, which is e…

---

## [Terms API for Spellchecker](https://discuss.elastic.co/t/terms-api-for-spellchecker/3436)

<div class="topic-metadata">

**Author:** [@Sebastian\_Gavarini](https://discuss.elastic.co/u/Sebastian_Gavarini)\
**Replies:** 7\
**Last updated:** [October 14, 2010, 10:58am UTC](https://discuss.elastic.co/t/terms-api-for-spellchecker/3436 "2010-10-14T10:58:13Z")

</div>

Hi, I am planning to implement a port of Lucene's Spellchecker with ElasticSearch, for that I need to adapt a couple of things, implement a token filter for the variable length ngram generation (short words get sho…

---

## [Deadlock with Java apm agent](https://discuss.elastic.co/t/deadlock-with-java-apm-agent/241547)

<div class="topic-metadata">

**Author:** [@mvaradan](https://discuss.elastic.co/u/mvaradan)\
**Replies:** 5\
**Last updated:** [July 18, 2020, 4:55pm UTC](https://discuss.elastic.co/t/deadlock-with-java-apm-agent/241547 "2020-07-18T16:55:16Z")

</div>

Kibana version: 7.8.0 Elasticsearch version: 7.8.0 APM Server version: 7.8.0 APM Agent language and version: Java 1.17.0 Fresh install or upgraded from other version?: Fresh Description of the problem including e…

---

## [Initializing a SearchResponse object to null with the high level REST client](https://discuss.elastic.co/t/initializing-a-searchresponse-object-to-null-with-the-high-level-rest-client/227705)

<div class="topic-metadata">

**Author:** [@gideongrossman](https://discuss.elastic.co/u/gideongrossman)\
**Replies:** 5\
**Last updated:** [April 13, 2020, 8:08pm UTC](https://discuss.elastic.co/t/initializing-a-searchresponse-object-to-null-with-the-high-level-rest-client/227705 "2020-04-13T20:08:10Z")

</div>

Can anyone shed light on how to achieve this initialization or a workaround? I am trying to initialize the SearchResponse object before a conditional loop and populate the object inside the loop. The motivation is to mak…

---

## [Issue With reading file containing \\r or ^M as line terminator](https://discuss.elastic.co/t/issue-with-reading-file-containing-r-or-m-as-line-terminator/181155)

<div class="topic-metadata">

**Author:** [@Linoj\_Wilson](https://discuss.elastic.co/u/Linoj_Wilson)\
**Replies:** 5\
**Last updated:** [May 17, 2019, 2:35am UTC](https://discuss.elastic.co/t/issue-with-reading-file-containing-r-or-m-as-line-terminator/181155 "2019-05-17T02:35:11Z")

</div>

Dear All, I am trying to read some custom logs. I am using multi pattern as well. The file is containing only \\r or ^M as line terminator. I tried with line terminator configuration auto and carriage\_return as well. But…

---

## [Reindex Elasticsearch using new mapping](https://discuss.elastic.co/t/reindex-elasticsearch-using-new-mapping/106534)

<div class="topic-metadata">

**Author:** [@sreejithps303](https://discuss.elastic.co/u/sreejithps303)\
**Replies:** 6\
**Last updated:** [November 12, 2017, 4:46am UTC](https://discuss.elastic.co/t/reindex-elasticsearch-using-new-mapping/106534 "2017-11-12T04:46:27Z")

</div>

Hi , I have 2 new fields added to the index and i want to renidex the old indices to include these two fields. I have a mapping csv file where i have an existing field and corresponding value for two new fields. I wan…

---

## [Combining timeseries](https://discuss.elastic.co/t/combining-timeseries/204894)

<div class="topic-metadata">

**Author:** [@olt](https://discuss.elastic.co/u/olt)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 2:44pm UTC](https://discuss.elastic.co/t/combining-timeseries/204894 "2019-10-23T14:44:59Z")

</div>

Hi there! I'm new to Elasticsearch, and I'm trying to combine two time-series from two IoT devices. Each of my two devices upload measurements from a single sensor, to an index as 'data-point's, meaning that each data-…

---

## [Higher CPU usage in cluster than a single node](https://discuss.elastic.co/t/higher-cpu-usage-in-cluster-than-a-single-node/195439)

<div class="topic-metadata">

**Author:** [@shinmaeng](https://discuss.elastic.co/u/shinmaeng)\
**Replies:** 0\
**Last updated:** [August 16, 2019, 6:40am UTC](https://discuss.elastic.co/t/higher-cpu-usage-in-cluster-than-a-single-node/195439 "2019-08-16T06:40:11Z")

</div>

I am operating an Elasticsearch single node and Kibana in a prod to monitor access log and WAS log. But some queries of Kibana dashboard were too late ( about over 7 sec ) to get information into the dashboard. So we ar…

---

## [~105 Cisco Grok pattern key/field names](https://discuss.elastic.co/t/105-cisco-grok-pattern-key-field-names/50397)

<div class="topic-metadata">

**Author:** [@dm0000](https://discuss.elastic.co/u/dm0000)\
**Replies:** 0\
**Last updated:** [May 19, 2016, 4:44am UTC](https://discuss.elastic.co/t/105-cisco-grok-pattern-key-field-names/50397 "2016-05-19T04:44:41Z")

</div>

There are ~105 distinct Cisco types extracted from the log messages (+/- a few generics). I'm asking this question because I ran into this issue with some custom fields. Is there a functional difference between inter…

---

## [Elasticsearch license renewal](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222 "2022-03-09T21:29:26Z")

</div>

HI Team, I have few question regarding my license renewal, Our platinum license is about to expire on next week and we are working on renewal process. If we face any difficulties on renewal before the dew date will it…

---

## [Mapper parsing exception even after installed ingest attachment 5.0.1](https://discuss.elastic.co/t/mapper-parsing-exception-even-after-installed-ingest-attachment-5-0-1/66335)

<div class="topic-metadata">

**Author:** [@radsan84](https://discuss.elastic.co/u/radsan84)\
**Replies:** 4\
**Last updated:** [November 17, 2016, 10:18am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-even-after-installed-ingest-attachment-5-0-1/66335 "2016-11-17T10:18:43Z")

</div>

Hi, I installed elastic search 5.0.1 in Unix and installed 'ingest\_Attachment\_5.0.1' (Also restarted after ingest attachment installation). I created an index using command : curl -X PUT 10.242.104.46:9200/test1. The…

---

## [FileBeat Optimization](https://discuss.elastic.co/t/filebeat-optimization/63711)

<div class="topic-metadata">

**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\
**Replies:** 4\
**Last updated:** [October 25, 2016, 7:14am UTC](https://discuss.elastic.co/t/filebeat-optimization/63711 "2016-10-25T07:14:19Z")

</div>

Dear All, I have Installed Filebeat on my application server and ELK stack on another server. I have configured filebeat output to Elasticsearch and I started seeing logs on Kibana. But in few minutes logs stopped ship…

---

## [Sorting and Pagination](https://discuss.elastic.co/t/sorting-and-pagination/19825)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 1\
**Last updated:** [September 22, 2014, 2:12pm UTC](https://discuss.elastic.co/t/sorting-and-pagination/19825 "2014-09-22T14:12:07Z")

</div>

I have logstash indicies that go back thirty days. I have logs in those indices from today. If I do a search with: "size": 500, "sort": \[ { "@timestamp": { "order": "desc", "igno…

---

## [Error in Kibana while creating Visualization](https://discuss.elastic.co/t/error-in-kibana-while-creating-visualization/144393)

<div class="topic-metadata">

**Author:** [@Satish\_Chhatpar](https://discuss.elastic.co/u/Satish_Chhatpar)\
**Replies:** 2\
**Last updated:** [August 15, 2018, 7:44am UTC](https://discuss.elastic.co/t/error-in-kibana-while-creating-visualization/144393 "2018-08-15T07:44:42Z")

</div>

I get Below error in Kibana while creating visualization. My elastic search index has 2 fields. One is timestamp and other one is client IP address. Any help is appreciated. Error: Request to Elasticsearch failed: {"er…

---

## [Problems to deploy Metricbeat in Kubernetes](https://discuss.elastic.co/t/problems-to-deploy-metricbeat-in-kubernetes/156247)

<div class="topic-metadata">

**Author:** [@Artur\_Becker](https://discuss.elastic.co/u/Artur_Becker)\
**Replies:** 8\
**Last updated:** [November 16, 2018, 7:42am UTC](https://discuss.elastic.co/t/problems-to-deploy-metricbeat-in-kubernetes/156247 "2018-11-16T07:42:35Z")

</div>

Hello, there, I have a problem deploying a Metricbeat in Kubernetes. I use the following documentation: https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-kubernetes.html But when I deploy a Metricbeat…

---

## [Logstash works for a few minutes then stops](https://discuss.elastic.co/t/logstash-works-for-a-few-minutes-then-stops/120268)

<div class="topic-metadata">

**Author:** [@gorizon](https://discuss.elastic.co/u/gorizon)\
**Replies:** 8\
**Last updated:** [February 20, 2018, 5:33pm UTC](https://discuss.elastic.co/t/logstash-works-for-a-few-minutes-then-stops/120268 "2018-02-20T17:33:08Z")

</div>

This is a new instance for testing purposes in a personal lab. After setting up logstash and adding configuration I start the service. Logstash proceeds to run for a minute or two and just completely stops either recei…

---

## [MoreLikeThis can't identify that 2 documents with exactly same attachments are duplicates](https://discuss.elastic.co/t/morelikethis-cant-identify-that-2-documents-with-exactly-same-attachments-are-duplicates/17341)

<div class="topic-metadata">

**Author:** [@Zoran\_Jeremic](https://discuss.elastic.co/u/Zoran_Jeremic)\
**Replies:** 8\
**Last updated:** [May 10, 2014, 3:35am UTC](https://discuss.elastic.co/t/morelikethis-cant-identify-that-2-documents-with-exactly-same-attachments-are-duplicates/17341 "2014-05-10T03:35:02Z")

</div>

Hi guys, I have a document that stores a content of html file, pdf, doc or other textual document in one of it's fields as byte array using attachment plugin. Mapping is as follows: { "document":{ "pr…

---

## [Flatten nested dictionaries in index](https://discuss.elastic.co/t/flatten-nested-dictionaries-in-index/216711)

<div class="topic-metadata">

**Author:** [@ellisvalentiner](https://discuss.elastic.co/u/ellisvalentiner)\
**Replies:** 3\
**Last updated:** [January 28, 2020, 7:54pm UTC](https://discuss.elastic.co/t/flatten-nested-dictionaries-in-index/216711 "2020-01-28T19:54:21Z")

</div>

I'm new to these forums so please let me know if I've posted this in the wrong place. I have an index that contains a key-value tags consisting of an array of values, which are dictionaries. The dictionaries always have…

---

## [Harvester.go infinitely loops on decoding JSON, fails to provide error context](https://discuss.elastic.co/t/harvester-go-infinitely-loops-on-decoding-json-fails-to-provide-error-context/183628)

<div class="topic-metadata">

**Author:** [@mdaniel](https://discuss.elastic.co/u/mdaniel)\
**Replies:** 3\
**Last updated:** [June 3, 2019, 9:02am UTC](https://discuss.elastic.co/t/harvester-go-infinitely-loops-on-decoding-json-fails-to-provide-error-context/183628 "2019-06-03T09:02:16Z")

</div>

The GitHub new bug report template said I should come here first, so I'm following the process. There are two bad things happening with filebeat-oss:7.1.0: it appears to be ignoring json.ignore\_decoding\_error: true an…

---

## [How to do a 'between' @timestamp filter in a Vega Visualization for a constantly updating index?](https://discuss.elastic.co/t/how-to-do-a-between-timestamp-filter-in-a-vega-visualization-for-a-constantly-updating-index/174420)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 3\
**Last updated:** [April 2, 2019, 5:38pm UTC](https://discuss.elastic.co/t/how-to-do-a-between-timestamp-filter-in-a-vega-visualization-for-a-constantly-updating-index/174420 "2019-04-02T17:38:56Z")

</div>

I can easily do a 'between' @timestamp filter for either a saved search or Kibana Visualization in order to display data from a constantly updating index (via Logstash) for a time period within the past (say) 34 seconds. …

---

## [Field conversion to integer](https://discuss.elastic.co/t/field-conversion-to-integer/89739)

<div class="topic-metadata">

**Author:** [@pmohan](https://discuss.elastic.co/u/pmohan)\
**Replies:** 3\
**Last updated:** [June 20, 2017, 12:10pm UTC](https://discuss.elastic.co/t/field-conversion-to-integer/89739 "2017-06-20T12:10:37Z")

</div>

Hi, I'm new to this elastic serach\\logstash world ! This is one filed(extra\_fields) that i'm working on at the mint | /PublishingServices/\*\*/events/\*\*: 6| /PublishingServices/\*\*/sport: 1| /PublishingServices/\*\*/event…

---

## [ES 5.1 Server Nodes - SSD vs CEPH](https://discuss.elastic.co/t/es-5-1-server-nodes-ssd-vs-ceph/70008)

<div class="topic-metadata">

**Author:** [@evert](https://discuss.elastic.co/u/evert)\
**Replies:** 3\
**Last updated:** [December 27, 2016, 10:17am UTC](https://discuss.elastic.co/t/es-5-1-server-nodes-ssd-vs-ceph/70008 "2016-12-27T10:17:43Z")

</div>

I have read the latest post reagaring this subject, but stil got a question about it, because here is the offers I got for a new server: Server 1: 2 vCores 2,4 GHz 8 GB de RAM SSD 40 GB RAID 10 local and Serve…

---

## [Is it possible to modify the default watch history mapping?](https://discuss.elastic.co/t/is-it-possible-to-modify-the-default-watch-history-mapping/29431)

<div class="topic-metadata">

**Author:** [@jyeh](https://discuss.elastic.co/u/jyeh)\
**Replies:** 3\
**Last updated:** [September 16, 2015, 6:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-modify-the-default-watch-history-mapping/29431 "2015-09-16T18:45:38Z")

</div>

Would it be viable to modify watch history mapping? (primarily to enable payload logging to allow for search. I am really just looking for hits.total property). Would the best approach be to use logging action and log t…

---

## [Indexes in ES in red status when I kill logstash](https://discuss.elastic.co/t/indexes-in-es-in-red-status-when-i-kill-logstash/2288)

<div class="topic-metadata">

**Author:** [@rodrigomerino](https://discuss.elastic.co/u/rodrigomerino)\
**Replies:** 3\
**Last updated:** [June 10, 2015, 1:33pm UTC](https://discuss.elastic.co/t/indexes-in-es-in-red-status-when-i-kill-logstash/2288 "2015-06-10T13:33:10Z")

</div>

Hi all, I have a problem when using ElasticSearch to index tweets received from Logstash. When I stop logstash, via Ctrl+C or Kill (logstash stop doesn’t do anything) makes the indexes where the tweets are being stored…

---

## [Elasticsearch/Kibana Service Startup Failure Due to Unsupported CPU Instruction Set](https://discuss.elastic.co/t/elasticsearch-kibana-service-startup-failure-due-to-unsupported-cpu-instruction-set/386231)

<div class="topic-metadata">

**Author:** [@yogesh119905](https://discuss.elastic.co/u/yogesh119905)\
**Replies:** 8\
**Last updated:** [June 2, 2026, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-service-startup-failure-due-to-unsupported-cpu-instruction-set/386231 "2026-06-02T16:33:42Z")

</div>

Description: We are facing an issue while starting the Elasticsearch/Kibana service on the current virtual machine. The application fails during startup because the host CPU does not support the instruction sets require…

---

## [Dec 22nd, 2024: \[EN\] How to access Elastic knowledge inside Support Hub](https://discuss.elastic.co/t/dec-22nd-2024-en-how-to-access-elastic-knowledge-inside-support-hub/371965)

<div class="topic-metadata">

**Author:** [@adoerrES](https://discuss.elastic.co/u/adoerrES)\
**Replies:** 0\
**Last updated:** [December 22, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2024-en-how-to-access-elastic-knowledge-inside-support-hub/371965 "2024-12-22T08:00:00Z")

</div>

Today’s post is a slight break from the technical, and about describing resources at your disposal to find the technical knowledge you’re after. We’ll take a quick tour of the Support Hub knowledge base, what it offers, …

---

## [How to upgrade vega lite to v3](https://discuss.elastic.co/t/how-to-upgrade-vega-lite-to-v3/163088)

<div class="topic-metadata">

**Author:** [@joseph-joe-jj](https://discuss.elastic.co/u/joseph-joe-jj)\
**Replies:** 1\
**Last updated:** [January 10, 2019, 2:24pm UTC](https://discuss.elastic.co/t/how-to-upgrade-vega-lite-to-v3/163088 "2019-01-10T14:24:56Z")

</div>

I could not find any link to update vega lite version2 to version 3 in kibana. I am using kibana 6.3.2 and my vega version is 2. I want to upgrade to v3 for creating interactive graphs and Selection Predicate My ELK …

---

## [Only default time filter field name appears](https://discuss.elastic.co/t/only-default-time-filter-field-name-appears/94200)

<div class="topic-metadata">

**Author:** [@ICG](https://discuss.elastic.co/u/ICG)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 6:43pm UTC](https://discuss.elastic.co/t/only-default-time-filter-field-name-appears/94200 "2017-08-03T18:43:06Z")

</div>

I run this Logstash code in Elasticstack 5.0.0 and when I open Kibana, I can see two Time Filter field names: @timestam and CapturedOn. However if I run the same code in Elasticstack 5.5.0, then I see only one Time Filte…

---

## [検索のドキュメントとそのサジェストのドキュメントについて。](https://discuss.elastic.co/t/topic/165742)

<div class="topic-metadata">

**Author:** [@MarketVS](https://discuss.elastic.co/u/MarketVS)\
**Replies:** 5\
**Last updated:** [January 29, 2019, 10:03am UTC](https://discuss.elastic.co/t/topic/165742 "2019-01-29T10:03:58Z")

</div>

Elasticsearch を使ってメインの検索とそのサジェストを作るときは同じindex以下にメインの検索のtypeとそのサジェストのtypeの２つtypeを作るか、あるいはメインの検索のindexとそのサジェストのindex、合わせて２つindexを作ることが考えられるのですが、ユースケースによるでしょうが、多くの場合どちらの方が一般的かつ、最適でしょうか。 宜しくお願い致します。

---

## [Understand and using relationships without mapping types (6.0)](https://discuss.elastic.co/t/understand-and-using-relationships-without-mapping-types-6-0/109863)

<div class="topic-metadata">

**Author:** [@Malik\_Rumi](https://discuss.elastic.co/u/Malik_Rumi)\
**Replies:** 5\
**Last updated:** [December 7, 2017, 5:26pm UTC](https://discuss.elastic.co/t/understand-and-using-relationships-without-mapping-types-6-0/109863 "2017-12-07T17:26:34Z")

</div>

RE: Removal of mapping types https://www.elastic.co/guide/en/elasticsearch/reference/current/removal-of-types.html It looks like the proposed solution is to use a "common key" - my term. Such a common key can tie a use…

---

## [Date parsing exception](https://discuss.elastic.co/t/date-parsing-exception/7716)

<div class="topic-metadata">

**Author:** [@mkleen](https://discuss.elastic.co/u/mkleen)\
**Replies:** 5\
**Last updated:** [May 21, 2012, 8:35am UTC](https://discuss.elastic.co/t/date-parsing-exception/7716 "2012-05-21T08:35:58Z")

</div>

Hello, When I create an object with a date using the default dynamic mapping and query this field afterwards with a non-date value, I get a SearchParseException. Would it be possible to change the behavior that th…

---

## [How do I get find which parts of an Elasticsearch query match](https://discuss.elastic.co/t/how-do-i-get-find-which-parts-of-an-elasticsearch-query-match/322761)

<div class="topic-metadata">

**Author:** [@amirs5](https://discuss.elastic.co/u/amirs5)\
**Replies:** 7\
**Last updated:** [January 10, 2023, 2:37am UTC](https://discuss.elastic.co/t/how-do-i-get-find-which-parts-of-an-elasticsearch-query-match/322761 "2023-01-10T02:37:33Z")

</div>

I have a list of Key-word-sets, for example: set\_1: \["movie", "cinema", "theater"\], set\_2: \["beach", "ocean", "dock"\], set\_3: \["office", "downtown", "center"\] and I want to build up a single query that tells us which o…

---

## [Elastic Search not getting installed in CentOS](https://discuss.elastic.co/t/elastic-search-not-getting-installed-in-centos/96609)

<div class="topic-metadata">

**Author:** [@Vineeth604](https://discuss.elastic.co/u/Vineeth604)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 1:12pm UTC](https://discuss.elastic.co/t/elastic-search-not-getting-installed-in-centos/96609 "2017-08-10T13:12:06Z")

</div>

While installing elastic search, we are facing issue related to the logging and following error message is getting displayed: Unable to create file /var/log/elasticsearch/elasticsearch.log java.io.IOException: Could not…

---

## [Nested match must\_not filter doesnot work](https://discuss.elastic.co/t/nested-match-must-not-filter-doesnot-work/13206)

<div class="topic-metadata">

**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\
**Replies:** 1\
**Last updated:** [August 16, 2013, 9:19pm UTC](https://discuss.elastic.co/t/nested-match-must-not-filter-doesnot-work/13206 "2013-08-16T21:19:59Z")

</div>

All, I'm trying to run a must\_not filter wrapped in bool My Mappings { "response": { "properties": { "rtext": { "type": "nested", "properties": { "textmapid": { …

---

## [Why is my index not growing past 4GB when using fscrawler?](https://discuss.elastic.co/t/why-is-my-index-not-growing-past-4gb-when-using-fscrawler/232838)

<div class="topic-metadata">

**Author:** [@Denn](https://discuss.elastic.co/u/Denn)\
**Replies:** 6\
**Last updated:** [May 18, 2020, 5:43pm UTC](https://discuss.elastic.co/t/why-is-my-index-not-growing-past-4gb-when-using-fscrawler/232838 "2020-05-18T17:43:59Z")

</div>

So I am trying to index about 2.5TB of data using fscrawler that is about 3 million files.. I have 40GB of ram of which I have set aside 20GB heap for fscrawler for maximum throughput. C:\\Elastic\\fscrawler-MAR15\\bin\>fsc…

---

## [Heartbeat 7 rpm package is missing the Kibana/7 folder with dashboards](https://discuss.elastic.co/t/heartbeat-7-rpm-package-is-missing-the-kibana-7-folder-with-dashboards/169690)

<div class="topic-metadata">

**Author:** [@wazari](https://discuss.elastic.co/u/wazari)\
**Replies:** 6\
**Last updated:** [February 28, 2019, 2:07pm UTC](https://discuss.elastic.co/t/heartbeat-7-rpm-package-is-missing-the-kibana-7-folder-with-dashboards/169690 "2019-02-28T14:07:49Z")

</div>

When installing the Heartbeat package (rpm on CentOS) and configuring the Kibana config file and doing a # sudo heartbeat setup --dashboards the /usr/share/heartbeat/kibana/7 dir is missing so nothing gets configured - d…

---

## [Parsing nested json logs iin logstash](https://discuss.elastic.co/t/parsing-nested-json-logs-iin-logstash/88718)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 6\
**Last updated:** [June 9, 2017, 12:28pm UTC](https://discuss.elastic.co/t/parsing-nested-json-logs-iin-logstash/88718 "2017-06-09T12:28:17Z")

</div>

I have a json which I need to store in elasticsearch, Suppose this is the json, {"name":"luvpreet","tasks":{"task1":"logstash","task2":"elastic"},"time":{"time1":"1week","time2":"2week"}} And I want fields, name …

---

## [Lifecycle action \[migrate\] waiting for \[1\] shards to be moved to the \[data\_warm\] tier (tier migration preference configuration is \[data\_warm, data\_hot\])](https://discuss.elastic.co/t/lifecycle-action-migrate-waiting-for-1-shards-to-be-moved-to-the-data-warm-tier-tier-migration-preference-configuration-is-data-warm-data-hot/323915)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 2\
**Last updated:** [January 31, 2023, 5:40am UTC](https://discuss.elastic.co/t/lifecycle-action-migrate-waiting-for-1-shards-to-be-moved-to-the-data-warm-tier-tier-migration-preference-configuration-is-data-warm-data-hot/323915 "2023-01-31T05:40:25Z")

</div>

I have set ILM policy as { "aggregations-lifecycle-policy":{ "version":2, "modified\_date":"2023-01-25T08:51:42.054Z", "policy":{ "phases":{ "warm":{ …

---

## [Unexpected file read error while reading index](https://discuss.elastic.co/t/unexpected-file-read-error-while-reading-index/288795)

<div class="topic-metadata">

**Author:** [@tropically](https://discuss.elastic.co/u/tropically)\
**Replies:** 2\
**Last updated:** [November 9, 2021, 7:23pm UTC](https://discuss.elastic.co/t/unexpected-file-read-error-while-reading-index/288795 "2021-11-09T19:23:58Z")

</div>

Hi We are running elastisearch on Openshift. Currently there are 3 nodes configured. We received the below error on one of the 3 nodes that we have : ElasticsearchException\[failed to load metadata\]; nested: CorruptI…

---

## [Auditbeat auditd module vs. elastic agent auditd integration](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983)

<div class="topic-metadata">

**Author:** [@lepepa9493](https://discuss.elastic.co/u/lepepa9493)\
**Replies:** 2\
**Last updated:** [May 26, 2021, 8:07am UTC](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983 "2021-05-26T08:07:47Z")

</div>

What is the difference between using the auditbeat auditd module and using the elastic agent auditd integration? How can I use the elastic agent auditd integration with a custom auditd rules file or any other configurat…

---

## [Elastic Search integration with Magneto 2.3.3](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3/232636)

<div class="topic-metadata">

**Author:** [@parthipan\_p](https://discuss.elastic.co/u/parthipan_p)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3/232636 "2020-05-14T12:19:23Z")

</div>

I have tried to use and configure the Elastic search feature. I have installed the below packages and respective versions, Java - 11.0.7 Magento 2.3.3 Elastic search: 6.8.8 Module installed from git branch is: 2.8.x …

[Previous page](https://discuss.elastic.co/top.md?page=1035&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1037&per_page=50&period=all)
