# Top

**URL:** https://discuss.elastic.co/top.md?page=1052&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1053

---

## [Searching nested objects in kibana 6.1.1](https://discuss.elastic.co/t/searching-nested-objects-in-kibana-6-1-1/253197)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:53pm UTC](https://discuss.elastic.co/t/searching-nested-objects-in-kibana-6-1-1/253197 "2020-10-29T19:53:31Z")

</div>

logs : { "fields": \[{ "value": "exception", "type": "string", "key": "message" }, { "value": "Access denied to perform this action", "type": "string", "key": "exception.messag…

---

## [APM Integration Issue: Failed to Index traces](https://discuss.elastic.co/t/apm-integration-issue-failed-to-index-traces/354461)

<div class="topic-metadata">

**Author:** [@ramdas](https://discuss.elastic.co/u/ramdas)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 3:40pm UTC](https://discuss.elastic.co/t/apm-integration-issue-failed-to-index-traces/354461 "2024-02-29T15:40:11Z")

</div>

Hi All, i am using apm server standalone to ingest traces from my application to Elasticsearch via opentelemetry collecor. i configured APM integration inside Kibana to point to my apm server and it works fine.i recentl…

---

## [Average Query Latency Per Index?](https://discuss.elastic.co/t/average-query-latency-per-index/182283)

<div class="topic-metadata">

**Author:** [@Atri\_Sharma](https://discuss.elastic.co/u/Atri_Sharma)\
**Replies:** 0\
**Last updated:** [May 22, 2019, 4:33pm UTC](https://discuss.elastic.co/t/average-query-latency-per-index/182283 "2019-05-22T16:33:20Z")

</div>

Is there a metric to see the average total latency of a query for an index? Search latency metrics available today are per node, so do not give a general idea of how queries are performing on an index especially when mul…

---

## [Support JSON "\_comment" name/value?](https://discuss.elastic.co/t/support-json-comment-name-value/164831)

<div class="topic-metadata">

**Author:** [@m9aertner](https://discuss.elastic.co/u/m9aertner)\
**Replies:** 2\
**Last updated:** [January 21, 2019, 8:44am UTC](https://discuss.elastic.co/t/support-json-comment-name-value/164831 "2019-01-21T08:44:19Z")

</div>

We all know that JSON syntax does not support comments, for good and bad reasons. Also, we know that in many cases, comments are really, really useful, and that it's mostly up to the receiver to not do anything bad with…

---

## [Lock held by this virtual machine on lock path](https://discuss.elastic.co/t/lock-held-by-this-virtual-machine-on-lock-path/145804)

<div class="topic-metadata">

**Author:** [@hixian](https://discuss.elastic.co/u/hixian)\
**Replies:** 1\
**Last updated:** [September 18, 2018, 8:59pm UTC](https://discuss.elastic.co/t/lock-held-by-this-virtual-machine-on-lock-path/145804 "2018-09-18T20:59:49Z")

</div>

Hi. I have the following error on Logstash: \[2018-08-23T20:07:28,324\]\[DEBUG\]\[logstash.agent \] Executing action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:heartbeat-infinite-analytics} \[2018-08-23T…

---

## [Logstash data pipeline from Elastic to SQL Server](https://discuss.elastic.co/t/logstash-data-pipeline-from-elastic-to-sql-server/123589)

<div class="topic-metadata">

**Author:** [@jruzicka](https://discuss.elastic.co/u/jruzicka)\
**Replies:** 1\
**Last updated:** [March 12, 2018, 4:37pm UTC](https://discuss.elastic.co/t/logstash-data-pipeline-from-elastic-to-sql-server/123589 "2018-03-12T16:37:30Z")

</div>

We have a series of reports running in SSRS. There is data we are only sending to Elastic that I'd like to reference in SSRS. What I'd like to do is create a pipeline that can query elastic and output specific fields t…

---

## [Visualization in Kibana for exceptions](https://discuss.elastic.co/t/visualization-in-kibana-for-exceptions/95511)

<div class="topic-metadata">

**Author:** [@Vineeth604](https://discuss.elastic.co/u/Vineeth604)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 4:49pm UTC](https://discuss.elastic.co/t/visualization-in-kibana-for-exceptions/95511 "2017-08-02T16:49:17Z")

</div>

Created elastic stack configuration for our application and we need to visualize top 5 exceptions(in terms of count) occurred by reading our logs. We created a new field named ‘exception’ by configuring it in logstash.…

---

## [Logstash multiple pipeline Openshift/kubernetes no traffic](https://discuss.elastic.co/t/logstash-multiple-pipeline-openshift-kubernetes-no-traffic/327776)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 3\
**Last updated:** [March 20, 2023, 10:52am UTC](https://discuss.elastic.co/t/logstash-multiple-pipeline-openshift-kubernetes-no-traffic/327776 "2023-03-20T10:52:59Z")

</div>

EDIT I finally get traffic into the cluster, but I only receive logs that have the string "FMC\_AUDIT\_LOG", nothing else get past. If I receive a syslog message with the string "test", it gets dropped. I want the message…

---

## [How to split array json into multiple fields](https://discuss.elastic.co/t/how-to-split-array-json-into-multiple-fields/267112)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 3\
**Last updated:** [March 13, 2021, 2:39pm UTC](https://discuss.elastic.co/t/how-to-split-array-json-into-multiple-fields/267112 "2021-03-13T14:39:27Z")

</div>

Hi All, I have a array json which am getting from http end point "summary": { "result": \[ { "status": { "offlineCount": 0, "warningCount": 0, "onlineCount": 1…

---

## [How to parse an array of multi-line json objects as separate documents in ES?](https://discuss.elastic.co/t/how-to-parse-an-array-of-multi-line-json-objects-as-separate-documents-in-es/255230)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 10:22pm UTC](https://discuss.elastic.co/t/how-to-parse-an-array-of-multi-line-json-objects-as-separate-documents-in-es/255230 "2020-12-07T22:22:41Z")

</div>

I have a use case where I am going to be receiving a new file every hour that is picked up by filebeat and then sent to logstash. The file will look like this: \[ { "Results": { "StartWeekSec": \[ 2000, 1980…

---

## [How to show difference (increase/decrease) between today and yesterday for each host](https://discuss.elastic.co/t/how-to-show-difference-increase-decrease-between-today-and-yesterday-for-each-host/76262)

<div class="topic-metadata">

**Author:** [@inouk](https://discuss.elastic.co/u/inouk)\
**Replies:** 3\
**Last updated:** [February 27, 2017, 6:04pm UTC](https://discuss.elastic.co/t/how-to-show-difference-increase-decrease-between-today-and-yesterday-for-each-host/76262 "2017-02-27T18:04:13Z")

</div>

Hi, I'm tring to show hard drive space usage increase for each host, I mean, the top 5 hosts that has the highest increase of space usage. Here's what I did: .es(index='collectd-', metric='sum:lunused', q='server:?…

---

## [How to delete revoked Fleet enrolment tokens](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026)

<div class="topic-metadata">

**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\
**Replies:** 4\
**Last updated:** [January 30, 2023, 11:11am UTC](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026 "2023-01-30T11:11:39Z")

</div>

Hi, Is there a way to delete revoked Fleet enrolment tokens? Thank you

---

## [Filebeat cannot assign requested address](https://discuss.elastic.co/t/filebeat-cannot-assign-requested-address/296137)

<div class="topic-metadata">

**Author:** [@sulfred](https://discuss.elastic.co/u/sulfred)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 9:25am UTC](https://discuss.elastic.co/t/filebeat-cannot-assign-requested-address/296137 "2022-02-03T09:25:08Z")

</div>

I am trying to read the syslog information by filebeat. I have my filebeat installed in docker. I get error message ERROR \[syslog\] syslog/input.go:150 Error starting the servererrorlisten tcp 192.168.1.142:…

---

## [Kibana is on a remote server](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 4\
**Last updated:** [September 20, 2021, 9:46pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497 "2021-09-20T21:46:46Z")

</div>

I built an Elasticsearch cluster on server1(master) and server2(second), and a Kibana on server3. After I set up basic security for HTTP to encrypt communication between Kibana and Elasticsearch, I cannot restart Kibana.…

---

## [Autocomplete for terms aggregations](https://discuss.elastic.co/t/autocomplete-for-terms-aggregations/244914)

<div class="topic-metadata">

**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\
**Replies:** 4\
**Last updated:** [August 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/autocomplete-for-terms-aggregations/244914 "2020-08-16T10:02:28Z")

</div>

Hi, There is a search-as-you-type fields since 7.x but is it possible to get similar results for filtered aggregations for autocomplete? Example you have documents with categories on it: holiday vacation images Ther…

---

## [Kibana 6.1.1 Authentication Exceptions](https://discuss.elastic.co/t/kibana-6-1-1-authentication-exceptions/115490)

<div class="topic-metadata">

**Author:** [@sonfrau](https://discuss.elastic.co/u/sonfrau)\
**Replies:** 4\
**Last updated:** [February 21, 2018, 7:19am UTC](https://discuss.elastic.co/t/kibana-6-1-1-authentication-exceptions/115490 "2018-02-21T07:19:50Z")

</div>

We have completed an upgrade procedure from 5.3.1 to 5.6.5 and then 6.1.1 (we have followed your https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-upgrade.html procedure) Kibana previous versions: 5…

---

## [Using Top Hits aggregation for calculating time duration in each grouped field](https://discuss.elastic.co/t/using-top-hits-aggregation-for-calculating-time-duration-in-each-grouped-field/95166)

<div class="topic-metadata">

**Author:** [@Jenny\_Hsiao](https://discuss.elastic.co/u/Jenny_Hsiao)\
**Replies:** 4\
**Last updated:** [August 1, 2017, 5:42am UTC](https://discuss.elastic.co/t/using-top-hits-aggregation-for-calculating-time-duration-in-each-grouped-field/95166 "2017-08-01T05:42:34Z")

</div>

I am trying to get time duration between each grouped field. Example: My document is shown below: { "timestamp":"2017-07-31T15:05:04.563Z", "session\_id":"1", "user\_id":"jenny" } I want to get time duration in each se…

---

## [Grok filter - space not working](https://discuss.elastic.co/t/grok-filter-space-not-working/80141)

<div class="topic-metadata">

**Author:** [@August\_rush](https://discuss.elastic.co/u/August_rush)\
**Replies:** 4\
**Last updated:** [March 27, 2017, 5:28pm UTC](https://discuss.elastic.co/t/grok-filter-space-not-working/80141 "2017-03-27T17:28:06Z")

</div>

Hi , I am trying to use grok filter on this log , There is a space after WARN I have tried using %s\* \\s\* and also %{SPACE} but it is not triggering an email. can some one please help me. \[2017-03-25T00:00:07,137\]\[WARN …

---

## [Lucene Wildcard Search taking too much time](https://discuss.elastic.co/t/lucene-wildcard-search-taking-too-much-time/79721)

<div class="topic-metadata">

**Author:** [@sampathkore4444](https://discuss.elastic.co/u/sampathkore4444)\
**Replies:** 4\
**Last updated:** [March 23, 2017, 11:04am UTC](https://discuss.elastic.co/t/lucene-wildcard-search-taking-too-much-time/79721 "2017-03-23T11:04:53Z")

</div>

Hi Team, Lucene Wildcard Search is taking around 1 minute to give the results. Number of hits : 13000 Lucene Version : 5.5.2 Kindly let me know the problem or at least few suggestions. Please find the attached l…

---

## [Bleeding of separate log files into single event when using codec multiline](https://discuss.elastic.co/t/bleeding-of-separate-log-files-into-single-event-when-using-codec-multiline/67576)

<div class="topic-metadata">

**Author:** [@mitter1989](https://discuss.elastic.co/u/mitter1989)\
**Replies:** 4\
**Last updated:** [November 30, 2016, 2:47pm UTC](https://discuss.elastic.co/t/bleeding-of-separate-log-files-into-single-event-when-using-codec-multiline/67576 "2016-11-30T14:47:34Z")

</div>

Please bear with me as I am new to this. I am using ELK 5.0.1 I am trying to ship my app logs(stack traces multiple lines as well as single line) and syslogs(mostly single line), I am using codec multiline in input of …

---

## [Combine indices into new index](https://discuss.elastic.co/t/combine-indices-into-new-index/58940)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 4\
**Last updated:** [September 2, 2016, 9:58pm UTC](https://discuss.elastic.co/t/combine-indices-into-new-index/58940 "2016-09-02T21:58:15Z")

</div>

Hey, all. The subject of my post probably isn't clear; here's what I'd like to at least try: I have a logstash-\* and filebeat-\* index. In Kibana, depending on which I choose to view, of course, I'll set either logs …

---

## [Logstash Filters and Geoip database option](https://discuss.elastic.co/t/logstash-filters-and-geoip-database-option/46090)

<div class="topic-metadata">

**Author:** [@tlv324](https://discuss.elastic.co/u/tlv324)\
**Replies:** 4\
**Last updated:** [April 15, 2016, 4:48pm UTC](https://discuss.elastic.co/t/logstash-filters-and-geoip-database-option/46090 "2016-04-15T16:48:57Z")

</div>

I want to be able to use a more updated version of the GeoLiteCity Database. However, when running Logstash with this configuration I get what seems to be a permissions error and I'm not sure how to fix that because I'm …

---

## [Easiest way to get the IDF of a term from an ES cluster](https://discuss.elastic.co/t/easiest-way-to-get-the-idf-of-a-term-from-an-es-cluster/8920)

<div class="topic-metadata">

**Author:** [@Matt\_Luongo](https://discuss.elastic.co/u/Matt_Luongo)\
**Replies:** 4\
**Last updated:** [September 7, 2012, 12:44am UTC](https://discuss.elastic.co/t/easiest-way-to-get-the-idf-of-a-term-from-an-es-cluster/8920 "2012-09-07T00:44:16Z")

</div>

Hi folks, I'm trying to retrieve the IDF of a few particular terms from an elasticsearch cluster. Though I have plenty of Java experience, I'm only somewhat familiar with Lucene and know nothing about ES internals…

---

## [External access to ElasticSearch cluster](https://discuss.elastic.co/t/external-access-to-elasticsearch-cluster/305833)

<div class="topic-metadata">

**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 10:04am UTC](https://discuss.elastic.co/t/external-access-to-elasticsearch-cluster/305833 "2022-05-30T10:04:00Z")

</div>

Using Install Elasticsearch with Docker | Elasticsearch Guide \[8.11\] | Elastic I can easily setup a 3-node cluster on a single host, with docker-compose. This is all fine if I just use ES via the included Kibana contai…

---

## [Kibana pie chart not showing all the labels](https://discuss.elastic.co/t/kibana-pie-chart-not-showing-all-the-labels/263192)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 5:15am UTC](https://discuss.elastic.co/t/kibana-pie-chart-not-showing-all-the-labels/263192 "2021-02-04T05:15:20Z")

</div>

I m using Elasticsearch and Kibana - 7.10.1 Have created Pie-Chart visualization but currently it is not showing labels for all the slices. Below is my Chart and Label settings image. Currently i have totally five sli…

---

## [400 for “/api/console/proxy” after upgrading kibana from 6.4.0 to 6.7.1](https://discuss.elastic.co/t/400-for-api-console-proxy-after-upgrading-kibana-from-6-4-0-to-6-7-1/178576)

<div class="topic-metadata">

**Author:** [@c81b4c93b1f70af5398f](https://discuss.elastic.co/u/c81b4c93b1f70af5398f)\
**Replies:** 2\
**Last updated:** [April 26, 2019, 3:22pm UTC](https://discuss.elastic.co/t/400-for-api-console-proxy-after-upgrading-kibana-from-6-4-0-to-6-7-1/178576 "2019-04-26T15:22:55Z")

</div>

After upgrading kibana from 6.4.0 to 6.7.1, some error logs repeatably occur below. {"type":"response","@timestamp":"2019-04-26T14:32:27+09:00","tags":,"pid":19036,"method":"post","statusCode":400,"req":{"url":"/api/co…

---

## [Failed While running elasticsearch](https://discuss.elastic.co/t/failed-while-running-elasticsearch/76974)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 2\
**Last updated:** [March 1, 2017, 12:19pm UTC](https://discuss.elastic.co/t/failed-while-running-elasticsearch/76974 "2017-03-01T12:19:09Z")

</div>

I am trying to run elasticsearch after installation and getting the following error: Mar 1 12:17:29 hbdchv016 elasticsearch: Exception in thread "main" java.lang.UnsupportedClassVersionError: org/elasticsearch/bootstr…

---

## [Unable to bypass restriction with synonym token filter](https://discuss.elastic.co/t/unable-to-bypass-restriction-with-synonym-token-filter/195334)

<div class="topic-metadata">

**Author:** [@radoslav.sholev](https://discuss.elastic.co/u/radoslav.sholev)\
**Replies:** 6\
**Last updated:** [September 5, 2019, 8:12pm UTC](https://discuss.elastic.co/t/unable-to-bypass-restriction-with-synonym-token-filter/195334 "2019-09-05T20:12:00Z")

</div>

Greetings, I am trying to migrate from ES 5.5 to 7.3, but I got stuck at an issue with the synonym filter. The reference states "This filter tokenize synonyms with whatever tokenizer and token filters appear before it i…

---

## [INdex not rolling over correctly](https://discuss.elastic.co/t/index-not-rolling-over-correctly/230072)

<div class="topic-metadata">

**Author:** [@asrinivasan](https://discuss.elastic.co/u/asrinivasan)\
**Replies:** 5\
**Last updated:** [April 29, 2020, 3:46pm UTC](https://discuss.elastic.co/t/index-not-rolling-over-correctly/230072 "2020-04-29T15:46:04Z")

</div>

I have a ILM policy template, policy, alias { "prod3\_template" : { "order" : 1, "index\_patterns" : \[ "prod3-cloudwatch\*" \], "settings" : { "index" : { "lifecycle" : { "na…

---

## [Auditbeat not starting on Startup - Mac](https://discuss.elastic.co/t/auditbeat-not-starting-on-startup-mac/218802)

<div class="topic-metadata">

**Author:** [@Bill.S.Preston](https://discuss.elastic.co/u/Bill.S.Preston)\
**Replies:** 5\
**Last updated:** [February 16, 2020, 2:39am UTC](https://discuss.elastic.co/t/auditbeat-not-starting-on-startup-mac/218802 "2020-02-16T02:39:59Z")

</div>

I can't seem to get my auditbeat to start sending data to my ElastaCloud from my Mac. Every time I start it I need to execute the following commands and it won't log until that point ./auditbeat setup ./auditbeat -e A…

---

## [Regarding illegal\_argument\_exception and empty value](https://discuss.elastic.co/t/regarding-illegal-argument-exception-and-empty-value/186922)

<div class="topic-metadata">

**Author:** [@leeyu](https://discuss.elastic.co/u/leeyu)\
**Replies:** 5\
**Last updated:** [June 21, 2019, 8:01pm UTC](https://discuss.elastic.co/t/regarding-illegal-argument-exception-and-empty-value/186922 "2019-06-21T20:01:24Z")

</div>

Hi all, I got many warning messages like this \[2019-06-21T10:34:01,663\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"cv\_threat\_…

---

## [ThreadContext API](https://discuss.elastic.co/t/threadcontext-api/173694)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 5\
**Last updated:** [March 25, 2019, 7:11pm UTC](https://discuss.elastic.co/t/threadcontext-api/173694 "2019-03-25T19:11:12Z")

</div>

Hi, this is a follow up question from https://github.com/elastic/elasticsearch/issues/40391. I'm struggling to understand how to properly use the org.elasticsearch.common.util.concurrent.ThreadContext API. The javadoc …

---

## [org.elasticsearch.join.ParentJoinPlugin giving error](https://discuss.elastic.co/t/org-elasticsearch-join-parentjoinplugin-giving-error/149274)

<div class="topic-metadata">

**Author:** [@ritwik1994](https://discuss.elastic.co/u/ritwik1994)\
**Replies:** 5\
**Last updated:** [September 21, 2018, 6:27am UTC](https://discuss.elastic.co/t/org-elasticsearch-join-parentjoinplugin-giving-error/149274 "2018-09-21T06:27:10Z")

</div>

Hi, I am creating the connection of elastic search 6.4.1 with my spring boot application with help of transportclient but there are stack of exception coming :- Failed to instantiate \[org.elasticsearch.client.Client\]: …

---

## [Elastic too many open files](https://discuss.elastic.co/t/elastic-too-many-open-files/148549)

<div class="topic-metadata">

**Author:** [@Ilyas\_Ahsan](https://discuss.elastic.co/u/Ilyas_Ahsan)\
**Replies:** 5\
**Last updated:** [September 14, 2018, 6:33am UTC](https://discuss.elastic.co/t/elastic-too-many-open-files/148549 "2018-09-14T06:33:21Z")

</div>

Hai, I have several problem after upgrading to elasticsearch, kibana, logstash v 5.6.0. and one of issue cannot assign unassign shard because to many open files. i have incresea open files limit to 20480 and set vm.max…

---

## [\[Node-107\] disconnected from Loadbalancer due to explicit disconnect call](https://discuss.elastic.co/t/node-107-disconnected-from-loadbalancer-due-to-explicit-disconnect-call/101849)

<div class="topic-metadata">

**Author:** [@Ersoy\_Vatansever](https://discuss.elastic.co/u/Ersoy_Vatansever)\
**Replies:** 5\
**Last updated:** [September 27, 2017, 9:24am UTC](https://discuss.elastic.co/t/node-107-disconnected-from-loadbalancer-due-to-explicit-disconnect-call/101849 "2017-09-27T09:24:46Z")

</div>

Using v1.7.4 on 1 cluster 3 data node, 1 master and 1 loadbalancer. This issue fires from a week. I dont know what happend and start to fire this issue. Can any one help me ? LOG1 : \[2017-09-26 15:24:06,545\]\[DEBUG\]\[t…

---

## [Meaning of some log lines of filebeat](https://discuss.elastic.co/t/meaning-of-some-log-lines-of-filebeat/67057)

<div class="topic-metadata">

**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\
**Replies:** 5\
**Last updated:** [November 29, 2016, 8:21pm UTC](https://discuss.elastic.co/t/meaning-of-some-log-lines-of-filebeat/67057 "2016-11-29T20:21:32Z")

</div>

What exactly these lines meant for? "2016-11-23T21:50:43-08:00 INFO Loading Prospectors completed. Number of prospectors: 1 2016-11-23T21:50:43-08:00 INFO All prospectors are initialised and running with 0 states to p…

---

## [Query with Nested, Location and script](https://discuss.elastic.co/t/query-with-nested-location-and-script/38057)

<div class="topic-metadata">

**Author:** [@jordans](https://discuss.elastic.co/u/jordans)\
**Replies:** 5\
**Last updated:** [December 30, 2015, 12:13am UTC](https://discuss.elastic.co/t/query-with-nested-location-and-script/38057 "2015-12-30T00:13:18Z")

</div>

Hi all, I'm Jordan and i work on a search engine. I need some help writting a script... This is a part of my query : And the error is: "failed to run inline script \[doc\['services.distance'\].value \<= doc\['location'\].…

---

## [Hung node, cluster state green](https://discuss.elastic.co/t/hung-node-cluster-state-green/8076)

<div class="topic-metadata">

**Author:** [@davie](https://discuss.elastic.co/u/davie)\
**Replies:** 5\
**Last updated:** [June 26, 2012, 12:39pm UTC](https://discuss.elastic.co/t/hung-node-cluster-state-green/8076 "2012-06-26T12:39:46Z")

</div>

Hi, We recently had a situation where one of our nodes was hanging, http requests to 9200 did not return, and indexing/search requests were timing out. I'm still looking into the cause of this, but I'm slightly sur…

---

## [Kibana not working in Dev mode in Windows 10](https://discuss.elastic.co/t/kibana-not-working-in-dev-mode-in-windows-10/135082)

<div class="topic-metadata">

**Author:** [@Hamdullah](https://discuss.elastic.co/u/Hamdullah)\
**Replies:** 8\
**Last updated:** [June 27, 2018, 5:31pm UTC](https://discuss.elastic.co/t/kibana-not-working-in-dev-mode-in-windows-10/135082 "2018-06-27T17:31:10Z")

</div>

Hello, I want to start kibana 6.1 in dev mode but getting error of missing commons.bundle.js (404) , commons.style.css(404) and kibana.bundle.js files. Steps to reproduce: Clone 6.1 branch from github Run command n…

---

## [Data Table - Compare two periods from different years](https://discuss.elastic.co/t/data-table-compare-two-periods-from-different-years/207534)

<div class="topic-metadata">

**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:50pm UTC](https://discuss.elastic.co/t/data-table-compare-two-periods-from-different-years/207534 "2019-11-15T21:50:33Z")

</div>

Hello, I know Timelion enables one to compare two different periods easily with Offset feature, however, do we have a workaround to mimic Offset for Data Table component? For example, I would have a table like so (consi…

---

## [Inner join and config of Logstash and JDBC](https://discuss.elastic.co/t/inner-join-and-config-of-logstash-and-jdbc/204406)

<div class="topic-metadata">

**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\
**Replies:** 1\
**Last updated:** [October 21, 2019, 1:32pm UTC](https://discuss.elastic.co/t/inner-join-and-config-of-logstash-and-jdbc/204406 "2019-10-21T13:32:17Z")

</div>

Hello, Currently, we are updating our data in Elasticsearch by uploading a lot of data once in a while from a relational database which uses quite some data. We want this this to be synchronized by uploading only new an…

---

## [Error:(44, 45) java: cannot find symbol symbol: method settingsBuilder() location: class org.elasticsearch.common.settings.Settings](https://discuss.elastic.co/t/error-44-45-java-cannot-find-symbol-symbol-method-settingsbuilder-location-class-org-elasticsearch-common-settings-settings/193364)

<div class="topic-metadata">

**Author:** [@patri](https://discuss.elastic.co/u/patri)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 4:48pm UTC](https://discuss.elastic.co/t/error-44-45-java-cannot-find-symbol-symbol-method-settingsbuilder-location-class-org-elasticsearch-common-settings-settings/193364 "2019-08-09T16:48:45Z")

</div>

\< public boolean initEStransportClinet() { try { // Build the settings for our client. String clusterId = "cd494a44d4d946ae9d84ee858cfb6cae"; // Your cluster ID here String region = "us-east-1"; // Your region here …

---

## [Grok pattern to match different log formats in same log file](https://discuss.elastic.co/t/grok-pattern-to-match-different-log-formats-in-same-log-file/140155)

<div class="topic-metadata">

**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\
**Replies:** 1\
**Last updated:** [July 16, 2018, 2:31pm UTC](https://discuss.elastic.co/t/grok-pattern-to-match-different-log-formats-in-same-log-file/140155 "2018-07-16T14:31:14Z")

</div>

Hi Everyone, I am trying to apply filter in logstash conf file by giving grok pattern . But the challenge here is that my log file thats the input for logstash , has different formats. Ex: 1.) 27.06.2018 00:00:00.009 I…

---

## [Filebeat not reading logs from log files .Non-zero metrics in the last 30s](https://discuss.elastic.co/t/filebeat-not-reading-logs-from-log-files-non-zero-metrics-in-the-last-30s/139323)

<div class="topic-metadata">

**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\
**Replies:** 7\
**Last updated:** [July 11, 2018, 5:02pm UTC](https://discuss.elastic.co/t/filebeat-not-reading-logs-from-log-files-non-zero-metrics-in-the-last-30s/139323 "2018-07-11T17:02:54Z")

</div>

Hi Team, I am running filebeat in linux server , i have logstash 2.3 , Es 2.3 version and filebeat 6.2.0 version . Is this the issue with compatibility . Filebeat config gives the log info as "Non-zero metrics in the l…

---

## [Nested integer\_range mappings/query?](https://discuss.elastic.co/t/nested-integer-range-mappings-query/133085)

<div class="topic-metadata">

**Author:** [@panthersquirrel](https://discuss.elastic.co/u/panthersquirrel)\
**Replies:** 7\
**Last updated:** [May 26, 2018, 5:40am UTC](https://discuss.elastic.co/t/nested-integer-range-mappings-query/133085 "2018-05-26T05:40:37Z")

</div>

Suppose i want this structure for a user document: /users/\_doc/1 { hours: { open: \[ { gte: 10, lt: 20 }, { gte: 30, lt: 40 } ... \], closed: \[ …

---

## [An existing connection had to be closed by the remote host](https://discuss.elastic.co/t/an-existing-connection-had-to-be-closed-by-the-remote-host/126347)

<div class="topic-metadata">

**Author:** [@Ibti\_Ssem](https://discuss.elastic.co/u/Ibti_Ssem)\
**Replies:** 1\
**Last updated:** [April 1, 2018, 11:14am UTC](https://discuss.elastic.co/t/an-existing-connection-had-to-be-closed-by-the-remote-host/126347 "2018-04-01T11:14:00Z")

</div>

We have this exception in the logs but no impact for the moment at the level of the indexes and results, I would like to know if it is normal? otherwise what can we do to avoid it! We use elasticsearch 6 Java 8 java.i…

---

## [Null scores on sorted query?](https://discuss.elastic.co/t/null-scores-on-sorted-query/12923)

<div class="topic-metadata">

**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\
**Replies:** 1\
**Last updated:** [July 25, 2013, 10:07am UTC](https://discuss.elastic.co/t/null-scores-on-sorted-query/12923 "2013-07-25T10:07:10Z")

</div>

I'm receiving null scores on sort queries (0.90.0). After reading a previous post ( https://groups.google.com/forum/#!topic/elasticsearch/637bVXh6GMI), it seems this is by design? This doesn't make sense to me, a…

---

## [Elasticsearch-java - BulkOperation and IndexRequest have different behaviour with same custom JsonpSerializer](https://discuss.elastic.co/t/elasticsearch-java-bulkoperation-and-indexrequest-have-different-behaviour-with-same-custom-jsonpserializer/298496)

<div class="topic-metadata">

**Author:** [@fmarazita](https://discuss.elastic.co/u/fmarazita)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-java-bulkoperation-and-indexrequest-have-different-behaviour-with-same-custom-jsonpserializer/298496 "2022-03-17T11:10:20Z")

</div>

Hi, It seems that BulkOperation and IndexRequest with same tDocumentSerialization have different behaviour. Elastic version: 7.16.3 I created a test with the same upsert operation, with and without using bulk operatio…

---

## [Link chart to another visualization](https://discuss.elastic.co/t/link-chart-to-another-visualization/172976)

<div class="topic-metadata">

**Author:** [@Welton\_Leao\_Machado](https://discuss.elastic.co/u/Welton_Leao_Machado)\
**Replies:** 2\
**Last updated:** [March 20, 2019, 5:29pm UTC](https://discuss.elastic.co/t/link-chart-to-another-visualization/172976 "2019-03-20T17:29:49Z")

</div>

Hi guys, There a way to linked a visualization to another visualization or a dashboard to another dashboard or visualization? I found some topics with this question and i see answers to kibana past versions 6

---

## [Global variables in an external file](https://discuss.elastic.co/t/global-variables-in-an-external-file/109378)

<div class="topic-metadata">

**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 1:29pm UTC](https://discuss.elastic.co/t/global-variables-in-an-external-file/109378 "2017-12-05T13:29:33Z")

</div>

Hi guys, I would like logstash to use global variables defined in an external file and use them in each event elaboration for doing something like this: external file: field1 = \[value1,value2\] meta logstash Language: …

[Previous page](https://discuss.elastic.co/top.md?page=1051&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1053&per_page=50&period=all)
