# Top **URL:** https://discuss.elastic.co/top.md?page=1047&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1048 --- ## [Delete default index](https://discuss.elastic.co/t/delete-default-index/308549)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 7:20am UTC](https://discuss.elastic.co/t/delete-default-index/308549 "2022-07-06T07:20:42Z")
Hi all, we have some indexes created by default in elasticsearch, managed by theese ILM: For example, .alerts-ilm-policy have this index: All in hot status: When try to delete older index of these ilm, index … --- ## [An unexpected error occurred! SocketError: initialize: name or service not known](https://discuss.elastic.co/t/an-unexpected-error-occurred-socketerror-initialize-name-or-service-not-known/256981)
**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\ **Replies:** 2\ **Last updated:** [November 29, 2020, 3:23pm UTC](https://discuss.elastic.co/t/an-unexpected-error-occurred-socketerror-initialize-name-or-service-not-known/256981 "2020-11-29T15:23:52Z")
I am using a basic logstash config that used to work: input { s3 { "bucket" =\> "logs-alb-api" "prefix" =\> "AWSLogs/934###" "type" =\> "ELB\_logs" } } filter { m… --- ## [Understanding Index creation!](https://discuss.elastic.co/t/understanding-index-creation/134985)
**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\ **Replies:** 2\ **Last updated:** [June 15, 2018, 12:45pm UTC](https://discuss.elastic.co/t/understanding-index-creation/134985 "2018-06-15T12:45:37Z")
While creating an index on a single node using the following - date; curl -X PUT "localhost:9200/test" -H 'Content-Type: application/json' -d' { "settings" : { "number\_of\_shards" : "4", "number\_of\_replicas" : "0" }, "m… --- ## [5.2.2 OpenJDK 8 UnmodifiableCollection StackOverFlowError](https://discuss.elastic.co/t/5-2-2-openjdk-8-unmodifiablecollection-stackoverflowerror/77895)
**Author:** [@jkcoz](https://discuss.elastic.co/u/jkcoz)\ **Replies:** 2\ **Last updated:** [March 16, 2017, 3:18am UTC](https://discuss.elastic.co/t/5-2-2-openjdk-8-unmodifiablecollection-stackoverflowerror/77895 "2017-03-16T03:18:59Z")
We'd been running a new stable 3-node cluster using ES 5.1.1 for about 3 weeks but upgraded to 5.2.2 after coming across a documented bug in 5.1.1. Twice in the 2 days since we upgraded we've encountered the following st… --- ## [Enable/Disable watches](https://discuss.elastic.co/t/enable-disable-watches/27160)
**Author:** [@aochsner](https://discuss.elastic.co/u/aochsner)\ **Replies:** 2\ **Last updated:** [August 11, 2015, 2:35am UTC](https://discuss.elastic.co/t/enable-disable-watches/27160 "2015-08-11T02:35:44Z")
Is there a way to enable/disable watches? Was hoping there might be a special trigger or some way to trick the trigger to not fire but not finding anything. Any thoughts? --- ## [Add single filter ratio column to data table lens](https://discuss.elastic.co/t/add-single-filter-ratio-column-to-data-table-lens/306895)
**Author:** [@redfox](https://discuss.elastic.co/u/redfox)\ **Replies:** 4\ **Last updated:** [June 14, 2022, 9:16am UTC](https://discuss.elastic.co/t/add-single-filter-ratio-column-to-data-table-lens/306895 "2022-06-14T09:16:07Z")
Hoping for some help here... I have created a lens data table visualisation where I have a number of filters defining the rows in the table and a number of filters summing various criteria for the columns. I want to ad… --- ## [How to delete apm entries per service](https://discuss.elastic.co/t/how-to-delete-apm-entries-per-service/246550)
**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\ **Replies:** 4\ **Last updated:** [August 31, 2020, 7:28am UTC](https://discuss.elastic.co/t/how-to-delete-apm-entries-per-service/246550 "2020-08-31T07:28:33Z")
Hi, I have a requirement where I don't want to delete all the entires of APM after certain date, rather I want to delete apm index entries per service level based on dates. Is there lever from curator etc which helps m… --- ## [Unable to start elasticsearch after add keystore on RHEL7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-add-keystore-on-rhel7/236091)
**Author:** [@Bikash\_Swain](https://discuss.elastic.co/u/Bikash_Swain)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 3:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-add-keystore-on-rhel7/236091 "2020-06-09T15:09:42Z")
I freshly installed elasticsearch 7.6 in RHEL7 and started it successfully. When I add "test" keystore with command "./elasticsearch-keystore add test" and restarted elasticsearch service, its not starting up and showin… --- ## [Filebeat/Metricbeat logs rotation](https://discuss.elastic.co/t/filebeat-metricbeat-logs-rotation/144744)
**Author:** [@BiNaP](https://discuss.elastic.co/u/BiNaP)\ **Replies:** 4\ **Last updated:** [August 17, 2018, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-metricbeat-logs-rotation/144744 "2018-08-17T13:53:17Z")
Hello everyone, On my server, I've Filebeat and Metricbeat installed by RPM. So I have folders in /etc for each product : /etc/metricbeat & /etc/filebeat. My question is about the log rotation : I have searched in the… --- ## [Elasticsearch 6.2 - How to specify bucket\_path with Composite Aggregations - How to specify Key?](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-specify-bucket-path-with-composite-aggregations-how-to-specify-key/142876)
**Author:** [@BrobaFett](https://discuss.elastic.co/u/BrobaFett)\ **Replies:** 4\ **Last updated:** [August 5, 2018, 7:36pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-specify-bucket-path-with-composite-aggregations-how-to-specify-key/142876 "2018-08-05T19:36:08Z")
Hi, I've run into an issue with using Composite Aggregations and Pipeline Aggregations. Currently, I create buckets according to my sources using the Composite Bucket Aggregation, but I am only using one source field (… --- ## [Filebeat to analyze xml logs](https://discuss.elastic.co/t/filebeat-to-analyze-xml-logs/342305)
**Author:** [@Ted0011](https://discuss.elastic.co/u/Ted0011)\ **Replies:** 8\ **Last updated:** [September 6, 2023, 3:53am UTC](https://discuss.elastic.co/t/filebeat-to-analyze-xml-logs/342305 "2023-09-06T03:53:56Z")
Hello Its Suman Ghorashine I am new to wazuh and ELK stack. And I wanted to know some certain things. I have a xml log format set to wazuh server for analysis from agent configuration file. But when filtering the logs … --- ## [How to remove date and time in message](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 2:59pm UTC](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280 "2022-01-13T14:59:56Z")
Hi, how can i remove the date and time from the message field? and above all is it possible? example screen shot: --- ## [How to find whether the field in elasticSearch is sortable and analysed](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 8\ **Last updated:** [March 5, 2021, 4:00am UTC](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106 "2021-03-05T04:00:16Z")
How to find whether the field in elasticSearch is sortable and analysed --- ## [7.7: broken filebeat pipeline for Nginx access logs](https://discuss.elastic.co/t/7-7-broken-filebeat-pipeline-for-nginx-access-logs/232519)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 3\ **Last updated:** [May 28, 2020, 1:45pm UTC](https://discuss.elastic.co/t/7-7-broken-filebeat-pipeline-for-nginx-access-logs/232519 "2020-05-28T13:45:01Z")
I just upgraded my stack to 7.7 Now, I see that I have 2 pipelines for nginx access logs: filebeat-7.7.0-nginx-access-default description: "Pipeline for parsing Nginx access logs. Requires the geoip and user\_agent p… --- ## [Histogram in Kibana](https://discuss.elastic.co/t/histogram-in-kibana/213097)
**Author:** [@Aravinda\_Kolla](https://discuss.elastic.co/u/Aravinda_Kolla)\ **Replies:** 8\ **Last updated:** [January 7, 2020, 3:04pm UTC](https://discuss.elastic.co/t/histogram-in-kibana/213097 "2020-01-07T15:04:57Z")
I am trying to replicate the histogram visualization type in kibana using the plugin new visualization type functionality. I used VisFactory's createVislibVisualization. The visualization is not rendered. I encounter th… --- ## [\[internal:discovery/zen/unicast\] is unauthorized for user \[anonymous\_user\]](https://discuss.elastic.co/t/internal-discovery-zen-unicast-is-unauthorized-for-user-anonymous-user/148321)
**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 12:06pm UTC](https://discuss.elastic.co/t/internal-discovery-zen-unicast-is-unauthorized-for-user-anonymous-user/148321 "2018-09-27T12:06:42Z")
I have configured X-Pack in my ES Cluster and enabled anonymous\_user with the following privileges, '{"cluster":\["monitor","monitor\_ml","monitor\_watcher","cluster:admin/xpack/monitoring/bulk","internal:discovery/zen/uni… --- ## [Time based index and Routing](https://discuss.elastic.co/t/time-based-index-and-routing/761)
**Author:** [@jeromec](https://discuss.elastic.co/u/jeromec)\ **Replies:** 3\ **Last updated:** [May 18, 2015, 8:47pm UTC](https://discuss.elastic.co/t/time-based-index-and-routing/761 "2015-05-18T20:47:29Z")
hi, We've got very big dataset to index. Our idea was to make a single index and to use routing based on user\_id (something like 200 users growing every month). The thing is that some user\_id have many hundred millions… --- ## [Rules and connectors examples?](https://discuss.elastic.co/t/rules-and-connectors-examples/286061)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 3:51pm UTC](https://discuss.elastic.co/t/rules-and-connectors-examples/286061 "2021-10-07T15:51:26Z")
This seems pretty simple but I haven't found a way to get it accomplished. For rules and alerts I'm looking to send an email triggered from a windows event id. For example EventID 4740. The elastic query works it trigge… --- ## [Kibana4 でTile Maps を使う際のライセンスについて](https://discuss.elastic.co/t/kibana4-tile-maps/35736)
**Author:** [@t\_kuramitsu](https://discuss.elastic.co/u/t_kuramitsu)\ **Replies:** 1\ **Last updated:** [January 8, 2016, 7:31am UTC](https://discuss.elastic.co/t/kibana4-tile-maps/35736 "2016-01-08T07:31:50Z")
お世話になります。 位置情報を含む業務データの可視化にKibana4を使えないか検討しております。 OpenStreetMapにおけるタイルサーバーは自前で用意しない限り、 無料で商用利用できるものはなかったように思いますが、 Kibana4がデフォルトで参照しているタイルサーバーは特に断りなく使用しても良いものなのでしょうか？ Kibanaのドキュメント（ https://www.elastic.co/guide/en/k… --- ## [Kibana not starting due to an error](https://discuss.elastic.co/t/kibana-not-starting-due-to-an-error/34257)
**Author:** [@dpcrown](https://discuss.elastic.co/u/dpcrown)\ **Replies:** 1\ **Last updated:** [November 10, 2015, 10:00pm UTC](https://discuss.elastic.co/t/kibana-not-starting-due-to-an-error/34257 "2015-11-10T22:00:12Z")
Hey everyone, we're having some trouble with Kibana at the moment. We had Kibana running fine a week ago or so, but an unrelated issue on the server forced us to reboot it. After the server came back up, Kibana refused t… --- ## [Trying to create geo\_point index: Root type mapping not empty after parsing! Remaining field](https://discuss.elastic.co/t/trying-to-create-geo-point-index-root-type-mapping-not-empty-after-parsing-remaining-field/20090)
**Author:** [@Ryan\_Bergman](https://discuss.elastic.co/u/Ryan_Bergman)\ **Replies:** 1\ **Last updated:** [October 7, 2014, 7:54am UTC](https://discuss.elastic.co/t/trying-to-create-geo-point-index-root-type-mapping-not-empty-after-parsing-remaining-field/20090 "2014-10-07T07:54:30Z")
Hi, I have an index with data that looks like this: { "id":"52534", "name":"foo", "location":{ "lat":39.18552295869955, … --- ## [Elastic-agents goes offline and get back online status frequently](https://discuss.elastic.co/t/elastic-agents-goes-offline-and-get-back-online-status-frequently/347195)
**Author:** [@cLaYYs](https://discuss.elastic.co/u/cLaYYs)\ **Replies:** 5\ **Last updated:** [November 21, 2023, 7:46am UTC](https://discuss.elastic.co/t/elastic-agents-goes-offline-and-get-back-online-status-frequently/347195 "2023-11-21T07:46:48Z")
Hi All, Version:8.9 OS:Windows Server I have encountered with this problem so recently. And it is not occurs for all elastic-agents. it happens for 4 elastic-agents. The problem is the agent status seems offline whe… --- ## [Lot of queuing files on logstash](https://discuss.elastic.co/t/lot-of-queuing-files-on-logstash/185427)
**Author:** [@Nishant\_Hurnekar](https://discuss.elastic.co/u/Nishant_Hurnekar)\ **Replies:** 5\ **Last updated:** [June 19, 2019, 11:16am UTC](https://discuss.elastic.co/t/lot-of-queuing-files-on-logstash/185427 "2019-06-19T11:16:41Z")
Hi, We are running with ELK cluster 5.6.16. Our system as below Filebeat --\> Logstash --\> Elasticsearch (3 server in cluster) --\> KIbana We are observing very high queuing on out logstash servers since quite some tim… --- ## [Unable to limit records using process.include\_top\_n](https://discuss.elastic.co/t/unable-to-limit-records-using-process-include-top-n/105558)
**Author:** [@safehouse](https://discuss.elastic.co/u/safehouse)\ **Replies:** 5\ **Last updated:** [October 27, 2017, 7:18pm UTC](https://discuss.elastic.co/t/unable-to-limit-records-using-process-include-top-n/105558 "2017-10-27T19:18:40Z")
I want to limit the records sent from metricbeat using the process.include\_top\_n set of options. However, wither I can't figure out the correct setup (likely) or it's not working as expected on my systems. Any help or gu… --- ## [Shards got deleted after adding/removing index.number\_of\_replicas : 2](https://discuss.elastic.co/t/shards-got-deleted-after-adding-removing-index-number-of-replicas-2/80875)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 5\ **Last updated:** [April 3, 2017, 5:28pm UTC](https://discuss.elastic.co/t/shards-got-deleted-after-adding-removing-index-number-of-replicas-2/80875 "2017-04-03T17:28:33Z")
Hi All I had ES cluster with 3 (data+master) & 1 co-ordinator node. I wanted set the default replication to 2, hence i following the below steps. The ES cluster was fine and there were more than 100 shards and workin… --- ## [Performance issue while indexing lot of documents](https://discuss.elastic.co/t/performance-issue-while-indexing-lot-of-documents/20600)
**Author:** [@moshere](https://discuss.elastic.co/u/moshere)\ **Replies:** 5\ **Last updated:** [November 6, 2014, 11:58pm UTC](https://discuss.elastic.co/t/performance-issue-while-indexing-lot-of-documents/20600 "2014-11-06T23:58:05Z")
Hi, I'm new to ElasticSearch and I tried using Java API with bulk indexing. I wrote simple Java program that tries to enter 1000000 documents. However at the beginning I'm able to enter 1000 documents at less than 0.5… --- ## [Huge number of 'elasticsearch\[cached\]-pool-1-thread-NNN' threads](https://discuss.elastic.co/t/huge-number-of-elasticsearch-cached-pool-1-thread-nnn-threads/4362)
**Author:** [@jordansissel](https://discuss.elastic.co/u/jordansissel)\ **Replies:** 5\ **Last updated:** [May 10, 2011, 9:11pm UTC](https://discuss.elastic.co/t/huge-number-of-elasticsearch-cached-pool-1-thread-nnn-threads/4362 "2011-05-10T21:11:25Z")
While helping someone debug a logstash issue tonight, we noticed that for an elasticsearch native java client had 1700 elasticsearch threads. After further digging, I concluded that the high thread count for elasticsea… --- ## [TSVB - Sum of value for unique records](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967)
**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 12:29am UTC](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967 "2021-09-01T00:29:39Z")
Is there anyway I can filter unique records and then find the sum of value for those unique records? Data example: Order# - TotalMRC O101 - $120 O101 - $120(duplicate record) O102 - $130 O103 - $120 Expected resul… --- ## [Make Json flattening more dynamic to process nested json arrays/objects](https://discuss.elastic.co/t/make-json-flattening-more-dynamic-to-process-nested-json-arrays-objects/200760)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 11:09pm UTC](https://discuss.elastic.co/t/make-json-flattening-more-dynamic-to-process-nested-json-arrays-objects/200760 "2019-09-23T23:09:17Z")
Hi, I'm trying to flatten a complex json file, that contains a nested - multilevel - arrays/objects, something like this: { "body":{ "reg\_dicts":\[ { "sectionsA":\[ … --- ## [How to hide data from search hits based on some criteria](https://discuss.elastic.co/t/how-to-hide-data-from-search-hits-based-on-some-criteria/112847)
**Author:** [@gaurhari\_dass](https://discuss.elastic.co/u/gaurhari_dass)\ **Replies:** 2\ **Last updated:** [December 26, 2017, 7:30am UTC](https://discuss.elastic.co/t/how-to-hide-data-from-search-hits-based-on-some-criteria/112847 "2017-12-26T07:30:15Z")
Hi I want to hide some of data returned by search results like hiding values of arrays fields based on some conditions not filtering records based on that condition. Is it possible in elasticsearch? Thanks Gaurhari --- ## [Unit Testing Grok Patterns / Logstash Configs](https://discuss.elastic.co/t/unit-testing-grok-patterns-logstash-configs/87605)
**Author:** [@hahe](https://discuss.elastic.co/u/hahe)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 9:28pm UTC](https://discuss.elastic.co/t/unit-testing-grok-patterns-logstash-configs/87605 "2017-05-30T21:28:30Z")
I'm wondering how others are managing evolving Grok patterns / logstash configurations. Are there any best practices / approaches to make sure that after making changes in a logstash configuration messages that have b… --- ## [Curator Connection aborted](https://discuss.elastic.co/t/curator-connection-aborted/81367)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 8:26pm UTC](https://discuss.elastic.co/t/curator-connection-aborted/81367 "2017-04-05T20:26:23Z")
Hi, I am trying to take snapshots for indices using curator-4.2 but while executing any action, it is always throwing error 'Connection aborted.'. I have almost 850 indices and i believe while initializing meta data, cur… --- ## [How to forward logs from an activeMQ queue to logstash server?](https://discuss.elastic.co/t/how-to-forward-logs-from-an-activemq-queue-to-logstash-server/57987)
**Author:** [@Vinay\_Reddy](https://discuss.elastic.co/u/Vinay_Reddy)\ **Replies:** 2\ **Last updated:** [August 14, 2016, 3:11pm UTC](https://discuss.elastic.co/t/how-to-forward-logs-from-an-activemq-queue-to-logstash-server/57987 "2016-08-14T15:11:39Z")
I'm new to ELK stack and have the following use case to achieve.. I have an existing environment where some 100 odd servers sends an application log to a ActiveMQ queue on a Central Server. I need to send data from t… --- ## [Multiple scripts within script\_score](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698)
**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 2:33am UTC](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698 "2019-10-16T02:33:31Z")
How can I use multiple scripts within script\_score query in 7.4? I need to apply a filter on the result set and then define corresponding scripts. The function\_score query currently being used has the following format: … --- ## [How to query parent with no children](https://discuss.elastic.co/t/how-to-query-parent-with-no-children/56988)
**Author:** [@Keith\_Garrod](https://discuss.elastic.co/u/Keith_Garrod)\ **Replies:** 1\ **Last updated:** [June 10, 2017, 3:18pm UTC](https://discuss.elastic.co/t/how-to-query-parent-with-no-children/56988 "2017-06-10T15:18:43Z")
I have a parent document with optional children. I want to find all parents with NO (0) children. It seems the only way to query children is the 'has\_child' filter. I have tried setting min\_children and max\_children… --- ## [Logstash into another different cluster?](https://discuss.elastic.co/t/logstash-into-another-different-cluster/60975)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 7\ **Last updated:** [September 25, 2016, 7:13pm UTC](https://discuss.elastic.co/t/logstash-into-another-different-cluster/60975 "2016-09-25T19:13:56Z")
Hi How could i export data from logstash to another ES cluster, which i never used before? It is just i need to logstash the data from my local logstash to my team's ES Cluster, rather than my own test ES cluster... I … --- ## [Transpose data table in Kibana](https://discuss.elastic.co/t/transpose-data-table-in-kibana/60188)
**Author:** [@sandeeptengli](https://discuss.elastic.co/u/sandeeptengli)\ **Replies:** 1\ **Last updated:** [September 12, 2016, 5:19pm UTC](https://discuss.elastic.co/t/transpose-data-table-in-kibana/60188 "2016-09-12T17:19:13Z")
Hi all, I have a data table with 170+ columns. Is there a way I can transpose the table. I am not sure how to split the rows by 170+ terms. --- ## [Alternative api for filterbuilder in Elastic search 2.3.1](https://discuss.elastic.co/t/alternative-api-for-filterbuilder-in-elastic-search-2-3-1/47995)
**Author:** [@gopin4hat7ash](https://discuss.elastic.co/u/gopin4hat7ash)\ **Replies:** 1\ **Last updated:** [April 21, 2016, 7:59am UTC](https://discuss.elastic.co/t/alternative-api-for-filterbuilder-in-elastic-search-2-3-1/47995 "2016-04-21T07:59:21Z")
Below are not supported in Elastic search 2.3.1 import org.elasticsearch.index.query.BoolFilterBuilder; import org.elasticsearch.index.query.FilterBuilder; import org.elasticsearch.index.query.FilterBuilders; import or… --- ## [Updating non-file synonyms](https://discuss.elastic.co/t/updating-non-file-synonyms/262364)
**Author:** [@Henr1k](https://discuss.elastic.co/u/Henr1k)\ **Replies:** 6\ **Last updated:** [February 1, 2021, 2:17pm UTC](https://discuss.elastic.co/t/updating-non-file-synonyms/262364 "2021-02-01T14:17:52Z")
Hi, I was trying to do updates on non-file synonyms, but it fails. Do I have to use a file or am I doing it wrong? Files isn't that well supported in Elasticsearch Cloud. It is only via Cloud UI or have I missed an AP… --- ## [フィルタリングの指定方法について](https://discuss.elastic.co/t/topic/307593)
**Author:** [@Tash](https://discuss.elastic.co/u/Tash)\ **Replies:** 3\ **Last updated:** [June 21, 2022, 6:00am UTC](https://discuss.elastic.co/t/topic/307593 "2022-06-21T06:00:33Z")
Kibanaで多少複雑な条件に合致したドキュメントをフィルタリングしたいです。 例えば、下記内容において、フィールドA（ID）とB（色）に着目して、 Bに「Red」が含まれている場合、そのA（ID）のドキュメントを全てフィルタリングしたいです。 下例の場合、対象となるドキュメント\_idは1,2,3,6,7,8,9,10,12,13となる。 ダッシュボード全体、もしくはビジュアリゼーション単体で上記フィルタリングを実現するにはどう… --- ## [Extract fields from kibana logs](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511)
**Author:** [@aagarwal3](https://discuss.elastic.co/u/aagarwal3)\ **Replies:** 3\ **Last updated:** [March 8, 2021, 5:59pm UTC](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511 "2021-03-08T17:59:10Z")
I have the Status Code in log field only on kibana logs which I want to extract. Is there any way in which we can parse the log field from Kibana itself? "2021-03-08 06:16:16.631 INFO ; Status\_Code=200; Response\_Body=… --- ## [Create search request from available json unit test](https://discuss.elastic.co/t/create-search-request-from-available-json-unit-test/264952)
**Author:** [@Rohit\_Sharma](https://discuss.elastic.co/u/Rohit_Sharma)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 6:58am UTC](https://discuss.elastic.co/t/create-search-request-from-available-json-unit-test/264952 "2021-02-22T06:58:27Z")
Hi, I'm new to elastic search. I need to write unit test where I need to create search request object and search response object. I have search response and search request available in JSON. My search request contain… --- ## [KIBANA Can't Download GeoJSON Map Even After Enabling CORS](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-even-after-enabling-cors/166897)
**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\ **Replies:** 3\ **Last updated:** [February 6, 2019, 7:11pm UTC](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-even-after-enabling-cors/166897 "2019-02-06T19:11:45Z")
Hello all, I am trying to create a custom regional map in Kibana. I have imported the necessary GeoJSON map into Kibana. I have also joined the proper field in the GeoJSON file to match the appropriate field in the co… --- ## [Reference "numbered" fields in sprintf format](https://discuss.elastic.co/t/reference-numbered-fields-in-sprintf-format/59064)
**Author:** [@kaung](https://discuss.elastic.co/u/kaung)\ **Replies:** 3\ **Last updated:** [August 29, 2016, 3:13am UTC](https://discuss.elastic.co/t/reference-numbered-fields-in-sprintf-format/59064 "2016-08-29T03:13:01Z")
I want to read the following json object in logstash. "aggregations": { "\_percentile": { "values": { "5.0": 10, "95.0": 10 } The following doesn't work: mutate { add\_field =\> { "target" =\> "%{\[aggregations\]\[\_… --- ## [Using Watcher to check if Web service API is up](https://discuss.elastic.co/t/using-watcher-to-check-if-web-service-api-is-up/55549)
**Author:** [@vinayakravi](https://discuss.elastic.co/u/vinayakravi)\ **Replies:** 3\ **Last updated:** [July 21, 2016, 12:15pm UTC](https://discuss.elastic.co/t/using-watcher-to-check-if-web-service-api-is-up/55549 "2016-07-21T12:15:31Z")
Hi, My application has a ping url that returns a HTTP status of 200 if the application is working correctly. I'd like to add a watcher action usinghttp input that monitors this url and alerts me via email if anything … --- ## [Logstash 2.3.1 and Kafka offset issue](https://discuss.elastic.co/t/logstash-2-3-1-and-kafka-offset-issue/48331)
**Author:** [@crazyphil](https://discuss.elastic.co/u/crazyphil)\ **Replies:** 3\ **Last updated:** [May 2, 2016, 6:14pm UTC](https://discuss.elastic.co/t/logstash-2-3-1-and-kafka-offset-issue/48331 "2016-05-02T18:14:55Z")
I have finally built a proper pipeline for logstash to pull data from Kafka, and insert into elasticsearch. However I seem to be having an issue, or possibly self induced configuration problem: I need to pull from 8… --- ## [High CPU & Memory Usage](https://discuss.elastic.co/t/high-cpu-memory-usage/36358)
**Author:** [@Astro-es](https://discuss.elastic.co/u/Astro-es)\ **Replies:** 3\ **Last updated:** [December 5, 2015, 10:02pm UTC](https://discuss.elastic.co/t/high-cpu-memory-usage/36358 "2015-12-05T22:02:56Z")
Hi, We have been facing high CPU and memory usage in ES cluster which fails to send logs to the dashboard. Setup: ES cluster 2 nodes ES Version: 2.0.0 No of total indices:13 No of open indices: 3 Total size of open … --- ## [Is it necessary to change the field data type?](https://discuss.elastic.co/t/is-it-necessary-to-change-the-field-data-type/27440)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [August 15, 2015, 9:39am UTC](https://discuss.elastic.co/t/is-it-necessary-to-change-the-field-data-type/27440 "2015-08-15T09:39:44Z")
Hi Experts, I have a very basic question , I am using ELK stack to show syslog data in Kibana. My plan is not to mutate or modified any field at the logstash level. Here I have a question, can i treat ES as a traditi… --- ## [Kibana - Error including scripted fields in aggregation](https://discuss.elastic.co/t/kibana-error-including-scripted-fields-in-aggregation/23161)
**Author:** [@Akudva](https://discuss.elastic.co/u/Akudva)\ **Replies:** 3\ **Last updated:** [April 19, 2015, 11:25pm UTC](https://discuss.elastic.co/t/kibana-error-including-scripted-fields-in-aggregation/23161 "2015-04-19T23:25:53Z")
Hello, I am trying to add a manually created scripted field using the dropdown box withing Aggregation: Any pointers on how to resolve this error would be very helpful. Scriped field: Name: @hourOfDay Script… --- ## [Appsearch giving 10000 total\_results for every query i did](https://discuss.elastic.co/t/appsearch-giving-10000-total-results-for-every-query-i-did/306656)
**Author:** [@haris.sheikh](https://discuss.elastic.co/u/haris.sheikh)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 7:47pm UTC](https://discuss.elastic.co/t/appsearch-giving-10000-total-results-for-every-query-i-did/306656 "2022-06-09T19:47:24Z")
Hi, I am facing a problem in the 8.2 release, when I search for something it gives me total\_results always 10,000 as if some sort of max limit is set there. My Query Result Thanks. [Previous page](https://discuss.elastic.co/top.md?page=1046&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1048&per_page=50&period=all)