# Top **URL:** https://discuss.elastic.co/top.md?page=1039&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1040 --- ## [Yet another "FORBIDDEN/12/index read-only" message](https://discuss.elastic.co/t/yet-another-forbidden-12-index-read-only-message/115772)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 4\ **Last updated:** [January 23, 2018, 7:13pm UTC](https://discuss.elastic.co/t/yet-another-forbidden-12-index-read-only-message/115772 "2018-01-23T19:13:54Z")
Yet another message of this type. I read past similar messages but none really help me. This alert pops up in Kibana when I try to create any new index. The hard drive has enough space, this is not the reason. My thou… --- ## [Comparing query aggregation values](https://discuss.elastic.co/t/comparing-query-aggregation-values/82313)
**Author:** [@korsdecaying](https://discuss.elastic.co/u/korsdecaying)\ **Replies:** 4\ **Last updated:** [April 18, 2017, 8:11pm UTC](https://discuss.elastic.co/t/comparing-query-aggregation-values/82313 "2017-04-18T20:11:51Z")
Is it possible using elasticsearch to compare the results in the columns of the aggregated query. That is, the aggregation values ​​5 and 6. Using the alert compare condition. Using the alert compare condition. If possi… --- ## [Newbie question, ES "sizing"?](https://discuss.elastic.co/t/newbie-question-es-sizing/26256)
**Author:** [@aarong\_es](https://discuss.elastic.co/u/aarong_es)\ **Replies:** 4\ **Last updated:** [July 27, 2015, 12:36pm UTC](https://discuss.elastic.co/t/newbie-question-es-sizing/26256 "2015-07-27T12:36:44Z")
So, we have 26 node cluster (3 masters, 3 clients behind an HAProxy, and 20 "data" nodes). The HAProxy and 3 clients are the only ones with HTTP turned on..the masters and data nodes do not. The data nodes are beefy ba… --- ## [Rally 2.10.0](https://discuss.elastic.co/t/rally-2-10-0/346632)
**Author:** [@gbanasiak](https://discuss.elastic.co/u/gbanasiak)\ **Replies:** 0\ **Last updated:** [November 7, 2023, 3:12pm UTC](https://discuss.elastic.co/t/rally-2-10-0/346632 "2023-11-07T15:12:32Z")
Rally 2.10.0 has just been released. This version brings support for Elastic Serverless. Highlights #1797: Document Rally use with Elastic Serverless Enhancements #1791: Add ESQL operator #1789: Add serverless-aware … --- ## [Checking if a static file is parsed](https://discuss.elastic.co/t/checking-if-a-static-file-is-parsed/50081)
**Author:** [@Miloni\_Mehta](https://discuss.elastic.co/u/Miloni_Mehta)\ **Replies:** 0\ **Last updated:** [May 15, 2016, 5:57pm UTC](https://discuss.elastic.co/t/checking-if-a-static-file-is-parsed/50081 "2016-05-15T17:57:49Z")
I have a use case of parsing static log files. I need a way to determine if a file is completely parsed in order to delete it and download next file from the server. I am currently using the sincedb file to track this, … --- ## [Hamming Distance on Binary Strings - Latest](https://discuss.elastic.co/t/hamming-distance-on-binary-strings-latest/330292)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 5\ **Last updated:** [April 21, 2023, 2:27pm UTC](https://discuss.elastic.co/t/hamming-distance-on-binary-strings-latest/330292 "2023-04-21T14:27:14Z")
Hello, I want to do hamming distance on binary strings in elasticsearch, and I want to control the distance. In my case, the binary strings have a length of 256 and I want everything with a hamming distance of 32 or be… --- ## [Es 5.5 cluster unsearcable, node stats time-outs](https://discuss.elastic.co/t/es-5-5-cluster-unsearcable-node-stats-time-outs/99204)
**Author:** [@martinrm77](https://discuss.elastic.co/u/martinrm77)\ **Replies:** 5\ **Last updated:** [September 3, 2017, 9:06am UTC](https://discuss.elastic.co/t/es-5-5-cluster-unsearcable-node-stats-time-outs/99204 "2017-09-03T09:06:14Z")
Lately our logging elasticsearch cluster started acting up, crashing a node once in a while because of heap out of memory issues. I started putting more resources into our 6 nodes, continued upgrading from 2.4 to 5.5 and… --- ## [Elastic Search Aggregation with bool query](https://discuss.elastic.co/t/elastic-search-aggregation-with-bool-query/237768)
**Author:** [@Vaibhav\_Sharma](https://discuss.elastic.co/u/Vaibhav_Sharma)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 5:10am UTC](https://discuss.elastic.co/t/elastic-search-aggregation-with-bool-query/237768 "2020-06-20T05:10:34Z")
This is my elastic bool query. this works fine : { "query": { "bool": { "filter": \[ { "terms": { "parent\_uuid.\_raw": \[ … --- ## [Spark-ES saveToES without type](https://discuss.elastic.co/t/spark-es-savetoes-without-type/123622)
**Author:** [@skylerl](https://discuss.elastic.co/u/skylerl)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 4:35pm UTC](https://discuss.elastic.co/t/spark-es-savetoes-without-type/123622 "2018-03-16T16:35:51Z")
Hi everyone, We're trying to ingest a DataFrame to Elasticsearch using the Elasticsearch Spark library. In Elasticsearch 6.x, types are now gone. So, to make our data ingestion more compliant, we've been trying to inges… --- ## [How to Use aggs in kibana 4 for Metrics Visualization](https://discuss.elastic.co/t/how-to-use-aggs-in-kibana-4-for-metrics-visualization/42558)
**Author:** [@naiktej13](https://discuss.elastic.co/u/naiktej13)\ **Replies:** 1\ **Last updated:** [February 24, 2016, 2:47pm UTC](https://discuss.elastic.co/t/how-to-use-aggs-in-kibana-4-for-metrics-visualization/42558 "2016-02-24T14:47:29Z")
I have created sense query that's work fine for me but I want it to apply in Metrics Visualization. query I wrote is : { "query": { "bool": { "must": { "match": {"stats.key":"node.disk.type.\*" … --- ## [How to scale up and down nodes automatically?](https://discuss.elastic.co/t/how-to-scale-up-and-down-nodes-automatically/224089)
**Author:** [@doctor](https://discuss.elastic.co/u/doctor)\ **Replies:** 2\ **Last updated:** [March 18, 2020, 1:33pm UTC](https://discuss.elastic.co/t/how-to-scale-up-and-down-nodes-automatically/224089 "2020-03-18T13:33:35Z")
Hey, I am searching for a way to scale up and down ES nodes automatically at runtime. I know I can update the "kind: Elasticsearch" yaml to change the number of nodes in the cluster but can this be done by itself? Is … --- ## [Logstash elasticsearch to kafka stops after being started](https://discuss.elastic.co/t/logstash-elasticsearch-to-kafka-stops-after-being-started/112481)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 2\ **Last updated:** [December 19, 2017, 5:32pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-to-kafka-stops-after-being-started/112481 "2017-12-19T17:32:15Z")
Dear all, I'am trying to export documents from an Elasticsearch index to a Kafka topic using Logstash. However, when I start Logstash with only the elk-to-kafka configuration file it starts and quickly stops right after… --- ## [\_rubyexception when accessing 'event' array in ruby code](https://discuss.elastic.co/t/-rubyexception-when-accessing-event-array-in-ruby-code/57071)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [August 9, 2016, 1:02am UTC](https://discuss.elastic.co/t/-rubyexception-when-accessing-event-array-in-ruby-code/57071 "2016-08-09T01:02:50Z")
Hi! I would like to get help with the code in ruby filter. logstash version is 5.0.0 alpha4. I am testing the code in ruby filter as below but I am getting \_rubyexception. ruby { code =\> " event\['new… --- ## [Need VHOST field with COMBINEDAPACHELOG](https://discuss.elastic.co/t/need-vhost-field-with-combinedapachelog/54675)
**Author:** [@infinitetutts](https://discuss.elastic.co/u/infinitetutts)\ **Replies:** 2\ **Last updated:** [July 5, 2016, 10:49am UTC](https://discuss.elastic.co/t/need-vhost-field-with-combinedapachelog/54675 "2016-07-05T10:49:39Z")
How do I add 'site.com' as a new field ? Logstash Config: filter { if \[type\] == "apache" { grok { match =\> \[ "message", "%{URIHOST} %{COMBINEDAPACHELOG}" \] } } } Apache Log: … --- ## [ML watcher error](https://discuss.elastic.co/t/ml-watcher-error/202994)
**Author:** [@sonnydoza](https://discuss.elastic.co/u/sonnydoza)\ **Replies:** 6\ **Last updated:** [October 11, 2019, 11:39am UTC](https://discuss.elastic.co/t/ml-watcher-error/202994 "2019-10-11T11:39:30Z")
Hiya, I created a watcher for alerting when anomalies happens in a machine learning job, I also changed the action to alert through slack instead of mail. But when trying to simulate I get an error, I am still a noobie … --- ## [Filebeat harvest only currently running docker containers](https://discuss.elastic.co/t/filebeat-harvest-only-currently-running-docker-containers/106924)
**Author:** [@kwojcicki](https://discuss.elastic.co/u/kwojcicki)\ **Replies:** 6\ **Last updated:** [November 15, 2017, 4:50pm UTC](https://discuss.elastic.co/t/filebeat-harvest-only-currently-running-docker-containers/106924 "2017-11-15T16:50:09Z")
I am currently running filebeat to harvest all logs in /var/lib/docker/containers//-json.log however this harvests all logs even if a container isn't running anymore. Is there a way to get around this or perhaps a differ… --- ## [Filebeat + docker swarm ошибка парсинга](https://discuss.elastic.co/t/filebeat-docker-swarm/274056)
**Author:** [@Alexandr\_Tarnogradsc](https://discuss.elastic.co/u/Alexandr_Tarnogradsc)\ **Replies:** 8\ **Last updated:** [June 24, 2021, 1:18pm UTC](https://discuss.elastic.co/t/filebeat-docker-swarm/274056 "2021-06-24T13:18:53Z")
Добрый день. Во время парсина логов контейнерв docker swarm возникает ошибка: ERROR \[reader\_json\] readjson/json.go:65 Error decoding JSON: invalid character '\\x06' looking for beginning of value настройки file… --- ## [Converting hexadecimal input into timestamp](https://discuss.elastic.co/t/converting-hexadecimal-input-into-timestamp/179065)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 8\ **Last updated:** [May 2, 2019, 8:50am UTC](https://discuss.elastic.co/t/converting-hexadecimal-input-into-timestamp/179065 "2019-05-02T08:50:18Z")
I have a qmail server logs where the timestamp is given in different hexadecimal format how can i concert this again in timestamp???? @400000005cc363f11d3becc4 sslserver: pid 4983 from 209.85.210.174 --- ## [Dashboard layout](https://discuss.elastic.co/t/dashboard-layout/223887)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 3\ **Last updated:** [March 17, 2020, 12:00pm UTC](https://discuss.elastic.co/t/dashboard-layout/223887 "2020-03-17T12:00:41Z")
hello, is there any option to change a layout of a dashboard that I missed? maybe a Kibana plugin? I would like to rearrange the dashboard: putting 3 visualization in a row, setting a visualization height etc (without … --- ## [Weighted Average in Kibana](https://discuss.elastic.co/t/weighted-average-in-kibana/175580)
**Author:** [@Javier\_de\_la\_Rosa\_Fe](https://discuss.elastic.co/u/Javier_de_la_Rosa_Fe)\ **Replies:** 3\ **Last updated:** [April 6, 2019, 4:05pm UTC](https://discuss.elastic.co/t/weighted-average-in-kibana/175580 "2019-04-06T16:05:35Z")
Hi, I know there are some topics talking about this, but I still don't understand. I want to create a metric in Kibana to contain the following calculation: (sum(a) + sum(b)) / sum(c), where a, b and c are another metr… --- ## [How to setup Login to Kibana?](https://discuss.elastic.co/t/how-to-setup-login-to-kibana/110067)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 3\ **Last updated:** [December 8, 2017, 4:19am UTC](https://discuss.elastic.co/t/how-to-setup-login-to-kibana/110067 "2017-12-08T04:19:59Z")
Hi, I am trying to setup basic authentication to Kibana URL. I have come across Shield which is not an open source. Is there any way where I can setup username and password to Kibana?(without using shield) Thanks --- ## [Custom UI in kibana and visualization suggestion](https://discuss.elastic.co/t/custom-ui-in-kibana-and-visualization-suggestion/108396)
**Author:** [@ashish\_yetre](https://discuss.elastic.co/u/ashish_yetre)\ **Replies:** 3\ **Last updated:** [November 21, 2017, 4:33pm UTC](https://discuss.elastic.co/t/custom-ui-in-kibana-and-visualization-suggestion/108396 "2017-11-21T16:33:05Z")
Hello Everyone , I'm facing problem in visualization of data in proper way. Now what data i have ? There are TWO tables contains basic information of an organization. 2.contains multiple records which are linked wit… --- ## [How to setup synonym using ES 5.6.2](https://discuss.elastic.co/t/how-to-setup-synonym-using-es-5-6-2/104909)
**Author:** [@Shahrul\_Azhar](https://discuss.elastic.co/u/Shahrul_Azhar)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 5:23am UTC](https://discuss.elastic.co/t/how-to-setup-synonym-using-es-5-6-2/104909 "2017-10-25T05:23:54Z")
hi, Can someone assiSt me how to setup synonym using ES 5.6.2? I have to import data from oracle into index in ES Currently, what i'm doing is: step 1: // file logstash-ora-01.conf input { jdbc { jdbc\_validate\_c… --- ## [Elasticsearch 5.x Kibana](https://discuss.elastic.co/t/elasticsearch-5-x-kibana/74521)
**Author:** [@sina309](https://discuss.elastic.co/u/sina309)\ **Replies:** 3\ **Last updated:** [February 10, 2017, 2:28pm UTC](https://discuss.elastic.co/t/elasticsearch-5-x-kibana/74521 "2017-02-10T14:28:25Z")
somehow can't access the Elasticsearch 5.X with Kibana or Cerebro. There is an Authentification error message in different forms: Kibana: You are not authorized to access Monitoring. To use Monitoring, you need the pri… --- ## [Java API binary type example](https://discuss.elastic.co/t/java-api-binary-type-example/8034)
**Author:** [@Shimi](https://discuss.elastic.co/u/Shimi)\ **Replies:** 3\ **Last updated:** [June 13, 2012, 6:55pm UTC](https://discuss.elastic.co/t/java-api-binary-type-example/8034 "2012-06-13T18:55:59Z")
Is there an example/unit-test on how to use the Binary type in the Java client API? --- ## [Handling tag "weights"](https://discuss.elastic.co/t/handling-tag-weights/3283)
**Author:** [@brandonlee](https://discuss.elastic.co/u/brandonlee)\ **Replies:** 3\ **Last updated:** [August 31, 2010, 8:31pm UTC](https://discuss.elastic.co/t/handling-tag-weights/3283 "2010-08-31T20:31:55Z")
Some of my documents have the following: "tag: \[dog, animal, pets\]". Is it possible to: 1) influence index scoring based on score for each tag with something along "tag: {dog: 0.5, animal: 0.3, pets: 0.4}" 2) inf… --- ## [Elasticsearch template not working](https://discuss.elastic.co/t/elasticsearch-template-not-working/330574)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 7\ **Last updated:** [April 24, 2023, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-template-not-working/330574 "2023-04-24T06:13:59Z")
I first write data directly to the specified index, and then create an index template, After the index template is created, I continue to write data into the specified index. At this time, I write the new properties of … --- ## [Expanded Rows in Data Table Visualization](https://discuss.elastic.co/t/expanded-rows-in-data-table-visualization/197623)
**Author:** [@Saqib\_Saleem](https://discuss.elastic.co/u/Saqib_Saleem)\ **Replies:** 1\ **Last updated:** [September 6, 2019, 10:37am UTC](https://discuss.elastic.co/t/expanded-rows-in-data-table-visualization/197623 "2019-09-06T10:37:46Z")
Hello. I would like to ask question which is similar to the one below but since there was no answer to it, I'd like ask whether its possible to build these type of expanded rows in kibana data table visualization. Any h… --- ## [What's the Max Connection Numbers of TCP Transport Client](https://discuss.elastic.co/t/whats-the-max-connection-numbers-of-tcp-transport-client/46325)
**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\ **Replies:** 1\ **Last updated:** [May 16, 2017, 7:53am UTC](https://discuss.elastic.co/t/whats-the-max-connection-numbers-of-tcp-transport-client/46325 "2017-05-16T07:53:39Z")
I am using the Java TransportClient to connect to ElasticSearch. The code is just like the following demo: Settings settings; TransportClient transportClient = new TransportClient(settings); transportClient.addTranspo… --- ## [Can't parse simple xml](https://discuss.elastic.co/t/cant-parse-simple-xml/29179)
**Author:** [@gogators](https://discuss.elastic.co/u/gogators)\ **Replies:** 1\ **Last updated:** [September 12, 2015, 8:16pm UTC](https://discuss.elastic.co/t/cant-parse-simple-xml/29179 "2015-09-12T20:16:01Z")
Why is this simple test failing? I really don't understand the error message: # echo "\123\" | logstash -e "input { stdin {} } filter { xml { source =\> "message" } } output { stdout {} }" … --- ## [When searching for 'Boss' with fuzziness, get higher score for 'Bose' than 'Boss'. ? How Comes !?!?](https://discuss.elastic.co/t/when-searching-for-boss-with-fuzziness-get-higher-score-for-bose-than-boss-how-comes/21662)
**Author:** [@Eylon\_Steiner](https://discuss.elastic.co/u/Eylon_Steiner)\ **Replies:** 7\ **Last updated:** [January 20, 2015, 9:20am UTC](https://discuss.elastic.co/t/when-searching-for-boss-with-fuzziness-get-higher-score-for-bose-than-boss-how-comes/21662 "2015-01-20T09:20:58Z")
Any ideas? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsu… --- ## [Logstash multiple output blocking: output blocking with multiple output using the isolation pattern](https://discuss.elastic.co/t/logstash-multiple-output-blocking-output-blocking-with-multiple-output-using-the-isolation-pattern/303078)
**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\ **Replies:** 4\ **Last updated:** [April 23, 2022, 9:37pm UTC](https://discuss.elastic.co/t/logstash-multiple-output-blocking-output-blocking-with-multiple-output-using-the-isolation-pattern/303078 "2022-04-23T21:37:49Z")
Hello everyone, we have a trouble with a pipeline in logstash (7.17), with multiple output and isolator pattern. We have adopted the solution suggested in: In our case, input is Winlogbeat and the two outputs are: El… --- ## [Sum operator in stacked bar vega](https://discuss.elastic.co/t/sum-operator-in-stacked-bar-vega/263722)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 4\ **Last updated:** [February 10, 2021, 3:26pm UTC](https://discuss.elastic.co/t/sum-operator-in-stacked-bar-vega/263722 "2021-02-10T15:26:17Z")
Hi, I have aggregated StatusOpen field using sum operator, grouped by text\_sentiment and subject\_line fields. It's giving correct results in kibana. I tried it in vega using below spec : { "$schema": "https://veg… --- ## [Composite Aggregation with After functionality example](https://discuss.elastic.co/t/composite-aggregation-with-after-functionality-example/174013)
**Author:** [@andrei-galkin](https://discuss.elastic.co/u/andrei-galkin)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 4:37am UTC](https://discuss.elastic.co/t/composite-aggregation-with-after-functionality-example/174013 "2019-03-27T04:37:00Z")
I am looking for a code snippet of After functionality usage with NEST lib. https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-composite-aggregation.html#\_after. Thanks in advanc… --- ## [How visualize location on map with Vega Plugin](https://discuss.elastic.co/t/how-visualize-location-on-map-with-vega-plugin/124763)
**Author:** [@fifilanthrope](https://discuss.elastic.co/u/fifilanthrope)\ **Replies:** 4\ **Last updated:** [March 22, 2018, 3:38pm UTC](https://discuss.elastic.co/t/how-visualize-location-on-map-with-vega-plugin/124763 "2018-03-22T15:38:36Z")
Hi, I am new to kibana and vega, I am trying to create a map visualization like this exemple. I have a index called geoloc with document containing "location" as a geo\_point type and a "pop" field as a number type. I w… --- ## [Possible bug in Kibana 6 - data table not showing all partial rows](https://discuss.elastic.co/t/possible-bug-in-kibana-6-data-table-not-showing-all-partial-rows/105387)
**Author:** [@Conall\_Prendergast](https://discuss.elastic.co/u/Conall_Prendergast)\ **Replies:** 4\ **Last updated:** [October 27, 2017, 8:26am UTC](https://discuss.elastic.co/t/possible-bug-in-kibana-6-data-table-not-showing-all-partial-rows/105387 "2017-10-27T08:26:54Z")
I am making a Data table in Kibana 6, and I think I might have spotted something that is a bug. It appears that there is a bug with the "show partial rows" feature in the "Data Table" visualisation. I have attached thre… --- ## [Perofrmance problem on es-hadoop + spark](https://discuss.elastic.co/t/perofrmance-problem-on-es-hadoop-spark/39675)
**Author:** [@ven2286](https://discuss.elastic.co/u/ven2286)\ **Replies:** 4\ **Last updated:** [January 21, 2016, 6:14am UTC](https://discuss.elastic.co/t/perofrmance-problem-on-es-hadoop-spark/39675 "2016-01-21T06:14:19Z")
I am new to elastic search. I have 1 crore documents in elastic search. So for better performance i thought to use es-hadoop. I ran one simple query which return 4000 documents directly on elastic search and as well as w… --- ## [How to safely update Elasticsearch offline?](https://discuss.elastic.co/t/how-to-safely-update-elasticsearch-offline/25781)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 4\ **Last updated:** [July 17, 2015, 1:10pm UTC](https://discuss.elastic.co/t/how-to-safely-update-elasticsearch-offline/25781 "2015-07-17T13:10:59Z")
Hi, I've a server without Internet access (due to security rules) and I would like to know how to safely update elasticsearch. Greetings, Carlos Vega --- ## [Problem with Java API callbacks](https://discuss.elastic.co/t/problem-with-java-api-callbacks/3009)
**Author:** [@Lenak](https://discuss.elastic.co/u/Lenak)\ **Replies:** 4\ **Last updated:** [June 13, 2010, 6:26am UTC](https://discuss.elastic.co/t/problem-with-java-api-callbacks/3009 "2010-06-13T06:26:25Z")
Hi, I found out that when using the Java API on index, i.e: client.index(..., new ActionListener()...) then my callback's onSuccess() method is called BEFORE the document is accessible in the index. I search … --- ## [Logstash adding unwanted \\ \\ to field name](https://discuss.elastic.co/t/logstash-adding-unwanted-to-field-name/125877)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 11:35am UTC](https://discuss.elastic.co/t/logstash-adding-unwanted-to-field-name/125877 "2018-03-28T11:35:52Z")
Hi, I'm using the http\_poller to poll for some data and this is working fine except for one site. The site provides data in JSON and it displays fine in a browser and doesn't show the \\ in rawdata view but for some reas… --- ## [Watcher results returning similar terms instead of specific one](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one/91462)
**Author:** [@prodrg](https://discuss.elastic.co/u/prodrg)\ **Replies:** 5\ **Last updated:** [July 2, 2017, 1:39pm UTC](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one/91462 "2017-07-02T13:39:34Z")
I have the following watch { "trigger" : { "schedule" : { "interval" : "5m" } }, "input" : { "search" : { "request" : { "search\_type": "query\_then\_fetch", "indices" : \[ "\ **Author:** [@adi.b](https://discuss.elastic.co/u/adi.b)\ **Replies:** 5\ **Last updated:** [April 20, 2016, 8:53am UTC](https://discuss.elastic.co/t/how-do-i-build-a-beat-to-work-as-a-service-on-linux/47682 "2016-04-20T08:53:51Z") Hi, I'm writing a new beat (will be posted when done) and I was wondering how do I build the beat as a service on Linux system? In windows I just used the PS script to create a service - easy. But for Linux I see that … --- ## [Date Histogram Aggregation with Empty Days](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [April 27, 2021, 8:10pm UTC](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436 "2021-04-27T20:10:12Z")
With the Date Histogram Aggregation is it possible to return a complete list of days, even if none of them have found results? I am using a query to look for sales that occurred in a range of days, but in some cases the… --- ## [Disk Full problem winlogbeat](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749)
**Author:** [@pablo1816](https://discuss.elastic.co/u/pablo1816)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 6:04pm UTC](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749 "2020-10-21T18:04:50Z")
I was running out of space on node and deleted multiple indexes, now there is space but in winlogbeat I have the following error. 2020-10-20T21:51:15.360-0300 ERROR \[elasticsearch\] elasticsearch/client.go:213 Failed to … --- ## [Docker-compose ELK](https://discuss.elastic.co/t/docker-compose-elk/101858)
**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 6:17pm UTC](https://discuss.elastic.co/t/docker-compose-elk/101858 "2017-09-26T18:17:44Z")
Hi, When running ELK in docker-compose environment I'm curious why Kibana url refers to "http://elasticsearch:9200"? instead of just "http://localhost:9200"? For example: https://github.com/d3rwan/docker\_elk\_stack/blob… --- ## [Filebeat stops processing and does not retry](https://discuss.elastic.co/t/filebeat-stops-processing-and-does-not-retry/95935)
**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\ **Replies:** 2\ **Last updated:** [August 7, 2017, 2:43pm UTC](https://discuss.elastic.co/t/filebeat-stops-processing-and-does-not-retry/95935 "2017-08-07T14:43:49Z")
Hello, Using Filebeat 5.5.1 on RHEL 6.9, directly pushing logs to ES 5.5.0, I’m having this strange behavior during Filbeat execution which is configured to harvest one single test log file of ~100 Gb: \[... runs succes… --- ## [CDN Deliverability in Russia?](https://discuss.elastic.co/t/cdn-deliverability-in-russia/80151)
**Author:** [@tylerjl](https://discuss.elastic.co/u/tylerjl)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 4:39pm UTC](https://discuss.elastic.co/t/cdn-deliverability-in-russia/80151 "2017-03-27T16:39:35Z")
Heya Discourse team: We've heard from some users in Russia that certain javascript assets aren't being delivered - some example assets that don't get fetched include those screenshotted below: The user informed us th… --- ## [Script\_score with field that does not exist filters out all documents](https://discuss.elastic.co/t/script-score-with-field-that-does-not-exist-filters-out-all-documents/26332)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 2\ **Last updated:** [July 27, 2015, 11:51am UTC](https://discuss.elastic.co/t/script-score-with-field-that-does-not-exist-filters-out-all-documents/26332 "2015-07-27T11:51:25Z")
I ran into an issue where script\_score was dropping documents from my results. In the end I narrowed it down to the field not yet existing in my mapping and I solved it by explictly adding the priority field to my mappin… --- ## [Shield Install failing?](https://discuss.elastic.co/t/shield-install-failing/1921)
**Author:** [@qubika](https://discuss.elastic.co/u/qubika)\ **Replies:** 2\ **Last updated:** [June 4, 2015, 1:07pm UTC](https://discuss.elastic.co/t/shield-install-failing/1921 "2015-06-04T13:07:08Z")
Hi, I've just tried to install shield on a new ES instance. Running the Step 1 plugin install from https://www.elastic.co/downloads/shield fails and it looks as if it's because the github repo no longer exists. bin/p… --- ## [Using mattermost webhook for watcher](https://discuss.elastic.co/t/using-mattermost-webhook-for-watcher/202415)
**Author:** [@Khanh\_Le](https://discuss.elastic.co/u/Khanh_Le)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 12:52pm UTC](https://discuss.elastic.co/t/using-mattermost-webhook-for-watcher/202415 "2019-10-07T12:52:00Z")
Hi all, Currently, i want to use the watcher to alerting through mattermost webhook. But i know that it only support slack,mail, HipChat and PagerDuty. I still not find out the way using on mattermost alerting. Can anyb… [Previous page](https://discuss.elastic.co/top.md?page=1038&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1040&per_page=50&period=all)