# Top **URL:** https://discuss.elastic.co/top.md?page=1059&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1060 --- ## [Elasticsearch percolator and Logstash ... How to?](https://discuss.elastic.co/t/elasticsearch-percolator-and-logstash-how-to/21107)
**Author:** [@Thorsten\_Nickel](https://discuss.elastic.co/u/Thorsten_Nickel)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-percolator-and-logstash-how-to/21107 "2016-11-25T14:38:07Z")
Dear all, this is my first post to this group, since any more googling does not result in any more results, this looks like my last hope. Regarding my problem, I have an ELK Stack up and running. My logstasher s… --- ## [Packetbeat/MySQL Reliability](https://discuss.elastic.co/t/packetbeat-mysql-reliability/49924)
**Author:** [@nizz](https://discuss.elastic.co/u/nizz)\ **Replies:** 3\ **Last updated:** [May 17, 2016, 12:13pm UTC](https://discuss.elastic.co/t/packetbeat-mysql-reliability/49924 "2016-05-17T12:13:32Z")
Hi, I've setup Packetbeat to sniff MySQL traffic. My problem is that for most queries, I get a response of 0 and for some an extremely large value of a few thousands. I've cross checked the lengthy queries with the API… --- ## [Jackson error parsing JSON](https://discuss.elastic.co/t/jackson-error-parsing-json/6029)
**Author:** [@James\_Cook\_3](https://discuss.elastic.co/u/James_Cook_3)\ **Replies:** 3\ **Last updated:** [November 30, 2011, 6:00pm UTC](https://discuss.elastic.co/t/jackson-error-parsing-json/6029 "2011-11-30T18:00:14Z")
I've just encountered a regression bug, and I'm not sure if it is related to a recent change in elasticsearch. I am attempting to index the following JSON document. \[ { "dataType": "posts", … --- ## [Apply multiple pipelines on logs by configuring filebeat config file (.yml)](https://discuss.elastic.co/t/apply-multiple-pipelines-on-logs-by-configuring-filebeat-config-file-yml/223944)
**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\ **Replies:** 2\ **Last updated:** [March 17, 2020, 11:18pm UTC](https://discuss.elastic.co/t/apply-multiple-pipelines-on-logs-by-configuring-filebeat-config-file-yml/223944 "2020-03-17T23:18:01Z")
Hello world, I'm trying to apply ingest pipelines simultaneously on my logs before they get into Elasticsearch. My logs must go through a specific pipeline (A or B, configured in 'inputs' area) depending on where they … --- ## [How do index rollover and tier transition work when they overlap](https://discuss.elastic.co/t/how-do-index-rollover-and-tier-transition-work-when-they-overlap/329240)
**Author:** [@EyadArafat](https://discuss.elastic.co/u/EyadArafat)\ **Replies:** 4\ **Last updated:** [April 4, 2023, 9:51pm UTC](https://discuss.elastic.co/t/how-do-index-rollover-and-tier-transition-work-when-they-overlap/329240 "2023-04-04T21:51:07Z")
Hi, I'm a little confused on how transitioning a data stream's write index to the warm phase would work if it's still not supposed to be rolled-over yet. Here's an example. Let's say I have an ILM to rollover the data … --- ## [Used wait\_for\_completion=false but get 404 when trying to query task id](https://discuss.elastic.co/t/used-wait-for-completion-false-but-get-404-when-trying-to-query-task-id/310355)
**Author:** [@mdo1](https://discuss.elastic.co/u/mdo1)\ **Replies:** 4\ **Last updated:** [July 28, 2022, 11:31pm UTC](https://discuss.elastic.co/t/used-wait-for-completion-false-but-get-404-when-trying-to-query-task-id/310355 "2022-07-28T23:31:14Z")
I’m doing a reindex and have waitForCompletion: false (using Node.js Elasticsearch client). The response gives me a task id, but when I query the task id manually ( /\_tasks/\) I get a 404: “type”: “resource\_not\_… --- ## [Export raw data(that is displayed in Kibana dashboard) to csv](https://discuss.elastic.co/t/export-raw-data-that-is-displayed-in-kibana-dashboard-to-csv/244034)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 4\ **Last updated:** [August 24, 2020, 3:47pm UTC](https://discuss.elastic.co/t/export-raw-data-that-is-displayed-in-kibana-dashboard-to-csv/244034 "2020-08-24T15:47:31Z")
Hi, I want to export all the raw data that is aggregated by all the visualizations and filters in Kibana dashboard (not from Discovery tab) In the following shot you can see that it was supported once but I can't se… --- ## [Data not found when volume mounted](https://discuss.elastic.co/t/data-not-found-when-volume-mounted/220883)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 8:07pm UTC](https://discuss.elastic.co/t/data-not-found-when-volume-mounted/220883 "2020-02-26T20:07:47Z")
Hello, For elasticsearch to persist data i mounted volume to my container. below is the run command i am using. docker run -d --name elasticsearch --network=elastic -v esdata1:/usr/share/elasticsearch/data -p 9200:… --- ## [Dropdown menu (input controls) has stopped to accept filters](https://discuss.elastic.co/t/dropdown-menu-input-controls-has-stopped-to-accept-filters/158601)
**Author:** [@Cyber\_Bobak](https://discuss.elastic.co/u/Cyber_Bobak)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 7:57pm UTC](https://discuss.elastic.co/t/dropdown-menu-input-controls-has-stopped-to-accept-filters/158601 "2018-11-28T19:57:21Z")
Hello all, my drop down menu has stopped to accept filters, I don't know what is wrong . In dashboard I've: metric and drop down menu, both are using same index. I'm using from Index 2 keyword fields: 'expdomain.keywo… --- ## [To give input to ELasticsearch via logstash](https://discuss.elastic.co/t/to-give-input-to-elasticsearch-via-logstash/38240)
**Author:** [@trushad](https://discuss.elastic.co/u/trushad)\ **Replies:** 4\ **Last updated:** [January 4, 2016, 10:33am UTC](https://discuss.elastic.co/t/to-give-input-to-elasticsearch-via-logstash/38240 "2016-01-04T10:33:32Z")
I m having txt file (size 4 GB ) with json string as below , eg: {"index":{"\_id": "178790318"}} {"Id":"178790318","Description":"Kynoch Rd, Durban City, Durban, KwaZulu-Natal, South Africa","Odometer":"578676","Ignitio… --- ## [Dashboards restrictions to users](https://discuss.elastic.co/t/dashboards-restrictions-to-users/172144)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 8:01am UTC](https://discuss.elastic.co/t/dashboards-restrictions-to-users/172144 "2019-03-19T08:01:31Z")
Hi, WE are having multiple customer data flowing into elasticsearch and we do have different dashboards for different customer, i have few questions on this situation, Is there a way to restrict customer1 to view onl… --- ## [Geohash Aggregation min\_doc\_count Usage](https://discuss.elastic.co/t/geohash-aggregation-min-doc-count-usage/145832)
**Author:** [@bpalfaro](https://discuss.elastic.co/u/bpalfaro)\ **Replies:** 5\ **Last updated:** [August 28, 2018, 5:03pm UTC](https://discuss.elastic.co/t/geohash-aggregation-min-doc-count-usage/145832 "2018-08-28T17:03:42Z")
Hello, I want to know how to filter the response records to only show aggregation geohash counts greater than 10 records. I've attempted the json input in Terms such as {"min\_doc\_count": 10}. I've also tried to use a … --- ## [Issue parcing csv file using Input csv plugin - ELK 5.5.0](https://discuss.elastic.co/t/issue-parcing-csv-file-using-input-csv-plugin-elk-5-5-0/101739)
**Author:** [@elkuserh](https://discuss.elastic.co/u/elkuserh)\ **Replies:** 5\ **Last updated:** [September 26, 2017, 1:08pm UTC](https://discuss.elastic.co/t/issue-parcing-csv-file-using-input-csv-plugin-elk-5-5-0/101739 "2017-09-26T13:08:42Z")
I am trying to breakdown a csv file with incident data using the csv input filter and have run into the following error. I had used a multiline codec to combine multiple lines into a single line (multiple lines within a … --- ## [Logstash keep logging into default index](https://discuss.elastic.co/t/logstash-keep-logging-into-default-index/53643)
**Author:** [@siasic](https://discuss.elastic.co/u/siasic)\ **Replies:** 5\ **Last updated:** [July 5, 2016, 6:55am UTC](https://discuss.elastic.co/t/logstash-keep-logging-into-default-index/53643 "2016-07-05T06:55:44Z")
Hello, I have got an issue with logstash when i want to output logs into elasticsearch. In my configuration below i specify an index for my logs from filebeat, but it seems that they are finally store in that index AND… --- ## [Where did the word "Kibana" come from?](https://discuss.elastic.co/t/where-did-the-word-kibana-come-from/49230)
**Author:** [@Mark\_Ingraham](https://discuss.elastic.co/u/Mark_Ingraham)\ **Replies:** 5\ **Last updated:** [May 4, 2016, 9:59pm UTC](https://discuss.elastic.co/t/where-did-the-word-kibana-come-from/49230 "2016-05-04T21:59:30Z")
Is it just a misspelled "Cabana"? --- ## [Low Watermak warning](https://discuss.elastic.co/t/low-watermak-warning/244334)
**Author:** [@ecarmona](https://discuss.elastic.co/u/ecarmona)\ **Replies:** 8\ **Last updated:** [August 10, 2020, 11:17pm UTC](https://discuss.elastic.co/t/low-watermak-warning/244334 "2020-08-10T23:17:41Z")
Dear All, I hope this message finds you all well. I am working in a mechanism that get the Cluster health every now and then to know if elastic is up and running (Green or Yellow) and then trigger an alert in the case … --- ## [Elastic Integration with Zscaler NSS service](https://discuss.elastic.co/t/elastic-integration-with-zscaler-nss-service/211858)
**Author:** [@mountainreef](https://discuss.elastic.co/u/mountainreef)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 4:38am UTC](https://discuss.elastic.co/t/elastic-integration-with-zscaler-nss-service/211858 "2020-01-18T04:38:00Z")
Hi, New here so apologies if this has been asked before? Has anyone integrated their stack with Zscalers Nanolog or NSS service for SIEM? If so is there any beats advice for connectivity, normalisation or community rule… --- ## [Why Completion Suggester with Edge Ngram analyzer takes 15 to 17 times more index size as compared to default](https://discuss.elastic.co/t/why-completion-suggester-with-edge-ngram-analyzer-takes-15-to-17-times-more-index-size-as-compared-to-default/133467)
**Author:** [@sharma.puneet3](https://discuss.elastic.co/u/sharma.puneet3)\ **Replies:** 1\ **Last updated:** [May 29, 2018, 7:02am UTC](https://discuss.elastic.co/t/why-completion-suggester-with-edge-ngram-analyzer-takes-15-to-17-times-more-index-size-as-compared-to-default/133467 "2018-05-29T07:02:00Z")
I am implementing completion suggester on multiple field having alphanumeric and colon(AA:890090:xyz:9090). When I use default analyzer for completion suggester(simple analyzer), I am not able to get suggestions(AA:890)… --- ## [Looks like RabbitMQ output plugin does not support ACK/NACK](https://discuss.elastic.co/t/looks-like-rabbitmq-output-plugin-does-not-support-ack-nack/208484)
**Author:** [@gab.bernasconi](https://discuss.elastic.co/u/gab.bernasconi)\ **Replies:** 3\ **Last updated:** [November 22, 2019, 11:35am UTC](https://discuss.elastic.co/t/looks-like-rabbitmq-output-plugin-does-not-support-ack-nack/208484 "2019-11-22T11:35:55Z")
Our use case is as follows: ELK target version: 6.8.2 Data comes in via Logstash, where it gets parsed and enriched All the data needs to go to Elasticsearch (we use the elasticsearch output plugin) Some of the data ne… --- ## [1.7--\>2.3 migration: nestedFilter "join": false property?](https://discuss.elastic.co/t/1-7-2-3-migration-nestedfilter-join-false-property/57743)
**Author:** [@eebbrr](https://discuss.elastic.co/u/eebbrr)\ **Replies:** 3\ **Last updated:** [August 17, 2016, 7:39am UTC](https://discuss.elastic.co/t/1-7-2-3-migration-nestedfilter-join-false-property/57743 "2016-08-17T07:39:58Z")
Hello all! I'm working on upgrading a project from ES v1.7 to ES 2.3. The project makes heavy use of nested filters, and when used in aggregates, the project sets the "join" property to false so that the matching nest… --- ## [How to fetch only Public or Private IP in ES?](https://discuss.elastic.co/t/how-to-fetch-only-public-or-private-ip-in-es/248717)
**Author:** [@Ramesh\_balasubramani](https://discuss.elastic.co/u/Ramesh_balasubramani)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 9:53am UTC](https://discuss.elastic.co/t/how-to-fetch-only-public-or-private-ip-in-es/248717 "2020-09-16T09:53:15Z")
GET logstash-ramesh-2020.09.16/\_search { "query": { "bool": { "must\_not": \[ { "regexp": { "src\_ip.raw": { "value": "^(?:10|127|172\\\\.(?:1\[6-9\]|2\[0-9\]|3\[… --- ## [Machine Learning - Confused on Typical vs Actual Values](https://discuss.elastic.co/t/machine-learning-confused-on-typical-vs-actual-values/220984)
**Author:** [@Amarbayar\_Amarsanaa](https://discuss.elastic.co/u/Amarbayar_Amarsanaa)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 12:59pm UTC](https://discuss.elastic.co/t/machine-learning-confused-on-typical-vs-actual-values/220984 "2020-02-27T12:59:49Z")
Elasticsearch: 7.5 Kibana: 7.5 This is regarding the Machine Learning feature and specifically around how the "Actual" and "Typical" scores are calculated. Before I posted this topic I read the following: https://www… --- ## [Not able to view saved object after importing via API](https://discuss.elastic.co/t/not-able-to-view-saved-object-after-importing-via-api/209666)
**Author:** [@kibana-rocks](https://discuss.elastic.co/u/kibana-rocks)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 9:18am UTC](https://discuss.elastic.co/t/not-able-to-view-saved-object-after-importing-via-api/209666 "2019-11-28T09:18:34Z")
Hi, I imported multiple saved\_objects (index-pattern, visualization, dashboard) via POST /api/saved\_objects/\_import API. It gives successful response code -200 as response code for all saved objects. But when i check i… --- ## [Failed to connect to backoff(elasticsearch(http://localhost:9200))](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/181995)
**Author:** [@faad021](https://discuss.elastic.co/u/faad021)\ **Replies:** 0\ **Last updated:** [May 21, 2019, 12:19pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/181995 "2019-05-21T12:19:56Z")
Hello everyone, I have been facing a problem here configuring Filebeat. I keep on having failures. below is my configuration and log. #=========================== Filebeat inputs ============================= filebeat.… --- ## [Drop logs on the basis \_jsonparsefailure](https://discuss.elastic.co/t/drop-logs-on-the-basis-jsonparsefailure/151029)
**Author:** [@Bharat\_Gupta](https://discuss.elastic.co/u/Bharat_Gupta)\ **Replies:** 3\ **Last updated:** [October 9, 2018, 6:41pm UTC](https://discuss.elastic.co/t/drop-logs-on-the-basis-jsonparsefailure/151029 "2018-10-09T18:41:40Z")
"tags": \[ "beats\_input\_codec\_json\_applied", "\_jsonparsefailure" \] i want drop the log detail if get \_jsonparsefailure i have applied this inside filter :- if "\_jsonparsefailure" in \[tags\]{ drop { } } but still n… --- ## [ELK 6.x \[beat\] cannot import templates in kibana](https://discuss.elastic.co/t/elk-6-x-beat-cannot-import-templates-in-kibana/99806)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 3\ **Last updated:** [September 8, 2017, 7:50pm UTC](https://discuss.elastic.co/t/elk-6-x-beat-cannot-import-templates-in-kibana/99806 "2017-09-08T19:50:27Z")
Hi all, just testing elk 6. When I try to import the metricbeat dashboards like ./metricbeat setup -c /etc/metricbeat/metricbeat.yml I just get: Loaded index template Exiting: Error importing Kibana dashboards: f… --- ## [Elastic4s get a fields contents from a document using id](https://discuss.elastic.co/t/elastic4s-get-a-fields-contents-from-a-document-using-id/69594)
**Author:** [@RPGambit](https://discuss.elastic.co/u/RPGambit)\ **Replies:** 3\ **Last updated:** [January 6, 2017, 3:35pm UTC](https://discuss.elastic.co/t/elastic4s-get-a-fields-contents-from-a-document-using-id/69594 "2017-01-06T15:35:24Z")
Hi. I am programming in scala and using elastic4s. I have an index that contains many documents each indexed using a specific unique id. How can I get the value of one of my fields: ClientId from the index using th… --- ## [Cannot start Elasticsearch after upgrade from 1.7.3](https://discuss.elastic.co/t/cannot-start-elasticsearch-after-upgrade-from-1-7-3/35825)
**Author:** [@Dang\_Van\_Chuyen](https://discuss.elastic.co/u/Dang_Van_Chuyen)\ **Replies:** 3\ **Last updated:** [November 30, 2015, 4:27am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-after-upgrade-from-1-7-3/35825 "2015-11-30T04:27:10Z")
I checked with migration plugin and everything's ok. I upgraded with yum. This is the message: Process: 7195 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -Des.pidfile=${PID\_DIR}/elasticsearch.pid -Des.default.… --- ## [Adding Image to the dashboard or to canvas from local server](https://discuss.elastic.co/t/adding-image-to-the-dashboard-or-to-canvas-from-local-server/256835)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [November 28, 2020, 6:33am UTC](https://discuss.elastic.co/t/adding-image-to-the-dashboard-or-to-canvas-from-local-server/256835 "2020-11-28T06:33:29Z")
Hello, I would like to present images from the kibana/elastic server in a dashboard or in a canvas workpad. There are a few discussions around this but none worked for me. In this discussion the URL given is /usr/shar… --- ## [The given configuration is invalid. Reason: Expected one of #](https://discuss.elastic.co/t/the-given-configuration-is-invalid-reason-expected-one-of/140407)
**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 10:51pm UTC](https://discuss.elastic.co/t/the-given-configuration-is-invalid-reason-expected-one-of/140407 "2018-07-17T22:51:02Z")
Hi all, I am following this link (Link) to display live weather data on Kibana. I used the logstash configuration explained in the pdf. Here is my logstash configuration input { exec { command =\> "curl --silent… --- ## [Difference between "params.\" and "params.\_all.\.values" in TSVB Math aggregation](https://discuss.elastic.co/t/difference-between-params-name-and-params-all-name-values-in-tsvb-math-aggregation/231884)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 6:17pm UTC](https://discuss.elastic.co/t/difference-between-params-name-and-params-all-name-values-in-tsvb-math-aggregation/231884 "2020-05-11T18:17:33Z")
Hello, Could someone please explain to me the difference between params.\ and params.\_all.\.values in TSVB table visualization when using the Math aggregation? Based on the written definition I thought that pa… --- ## [Libbeat common schema mapstriface](https://discuss.elastic.co/t/libbeat-common-schema-mapstriface/118678)
**Author:** [@dcroonen](https://discuss.elastic.co/u/dcroonen)\ **Replies:** 6\ **Last updated:** [February 7, 2018, 2:47pm UTC](https://discuss.elastic.co/t/libbeat-common-schema-mapstriface/118678 "2018-02-07T14:47:22Z")
Hi all Am I missing something or is there a reason why there is no Float function (anymore) in mapstriface like in mapstrstr when converting events? Kind regards Davy --- ## [Why all the hits are not displayed ... Do I miss a field in the query](https://discuss.elastic.co/t/why-all-the-hits-are-not-displayed-do-i-miss-a-field-in-the-query/13119)
**Author:** [@Charles\_Moulliard](https://discuss.elastic.co/u/Charles_Moulliard)\ **Replies:** 1\ **Last updated:** [August 8, 2013, 6:55am UTC](https://discuss.elastic.co/t/why-all-the-hits-are-not-displayed-do-i-miss-a-field-in-the-query/13119 "2013-08-08T06:55:34Z")
Hi, When I run this query against indexes created in my elasticsearch node (version 1.0.0.Beta1-SNAPSHOT), I just get some results (10) while the number of hits is '105'. Do I miss something (parameter) in the que… --- ## [Function\_score queryでのスコアリング時に単語が分割されてしまう事象について](https://discuss.elastic.co/t/function-score-query/302662)
**Author:** [@Totsuka](https://discuss.elastic.co/u/Totsuka)\ **Replies:** 4\ **Last updated:** [May 2, 2022, 9:02am UTC](https://discuss.elastic.co/t/function-score-query/302662 "2022-05-02T09:02:57Z")
＜実現したいこと＞ titleフィールドに「消費税」という単語が含まれていれば、5ポイント、 questionフィールドに「消費税」という単語が含まれていれば、4ポイント、 answerフィールドに「消費税」という単語が含まれていれば、3ポイントを付与し、 その合計をスコアリングの値とし("score\_mode": "sum")、スコアの降順で表示したいです。 ※Elasticsearchのデフォルトのスコアリングは無視する設… --- ## [Fail to enroll: fail to execute request to Kibana: Status code: 404, Kibana returned an error: Not Found, message: Not Found](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 3:05pm UTC](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720 "2021-07-21T15:05:51Z")
when i execute " .\\elastic-agent.exe install -f --url=https://xx.xx.xxx.xxx:5601 --enrollment-token=Q0REZW9Ib...== --insecure" this message appears 2021-07-14T18:47:12.757-0300 DEBUG kibana/client.go:170 Re… --- ## [Index.lifecycle.rollover\_alias \[filebeat-7.8.0\] does not point to index](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-8-0-does-not-point-to-index/245642)
**Author:** [@thomas7467](https://discuss.elastic.co/u/thomas7467)\ **Replies:** 4\ **Last updated:** [October 1, 2020, 6:23am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-8-0-does-not-point-to-index/245642 "2020-10-01T06:23:56Z")
Hi All, I've the following errors il eleastic log files for the indexes Lifecycle Management for the indexes and don't know how to solve them... Could someone give me some clues? Thanks, \*java.lang.IllegalArgumentEx… --- ## [Indexing failure when using bulk API](https://discuss.elastic.co/t/indexing-failure-when-using-bulk-api/41621)
**Author:** [@fadi](https://discuss.elastic.co/u/fadi)\ **Replies:** 0\ **Last updated:** [February 12, 2016, 2:17pm UTC](https://discuss.elastic.co/t/indexing-failure-when-using-bulk-api/41621 "2016-02-12T14:17:06Z")
Experienced an error while indexing content from drupal to elasticsearch installed on same VM. Noticed two things from elasticsearch logs below: failed to parse, document is empty. 'defaiya\_articles\_alias' alias which … --- ## [Function\_score script\_score query vs sort script performance](https://discuss.elastic.co/t/function-score-script-score-query-vs-sort-script-performance/41377)
**Author:** [@dmitriy\_olshanskiy](https://discuss.elastic.co/u/dmitriy_olshanskiy)\ **Replies:** 0\ **Last updated:** [February 10, 2016, 12:47pm UTC](https://discuss.elastic.co/t/function-score-script-score-query-vs-sort-script-performance/41377 "2016-02-10T12:47:53Z")
I've found an order of magnitude difference in performance of queries that use function\_score with script-based score vs queries that use sort with the same script. What could cause this difference ? Does it make sense t… --- ## [Elastic Stack Architecture and Requirements](https://discuss.elastic.co/t/elastic-stack-architecture-and-requirements/307930)
**Author:** [@Analyst](https://discuss.elastic.co/u/Analyst)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 3:34pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture-and-requirements/307930 "2022-06-23T15:34:23Z")
Hi Guys, I need to create an ELK architecture but I don't know how many servers and requirements (CPU, RAM,Disk space) I will need for large organization deployment. I will need to send syslog and logfiles from 7000 se… --- ## [IBM Compose For Elasticsearch - Same as Elastic Search](https://discuss.elastic.co/t/ibm-compose-for-elasticsearch-same-as-elastic-search/168083)
**Author:** [@clouduser](https://discuss.elastic.co/u/clouduser)\ **Replies:** 2\ **Last updated:** [February 13, 2019, 4:47pm UTC](https://discuss.elastic.co/t/ibm-compose-for-elasticsearch-same-as-elastic-search/168083 "2019-02-13T16:47:23Z")
I came across IBM compose-for-elasticsearch. Just curious is the same Elastic Search 6.6 or its completely different product. Can someone share insights or any differences ? TIA --- ## [Can't restore snapshot](https://discuss.elastic.co/t/cant-restore-snapshot/310437)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 5\ **Last updated:** [July 23, 2022, 2:52pm UTC](https://discuss.elastic.co/t/cant-restore-snapshot/310437 "2022-07-23T14:52:34Z")
Hello Everyone, I am trying to restore my snapshot, and this error appeared: cannot restore index \[.transform-notifications\] because an open index with same name already exists in the cluster. Either close or delete the… --- ## [All values but not only "other" in values / 0% when a possible value not in log](https://discuss.elastic.co/t/all-values-but-not-only-other-in-values-0-when-a-possible-value-not-in-log/283291)
**Author:** [@Emilaye](https://discuss.elastic.co/u/Emilaye)\ **Replies:** 5\ **Last updated:** [September 22, 2021, 3:05pm UTC](https://discuss.elastic.co/t/all-values-but-not-only-other-in-values-0-when-a-possible-value-not-in-log/283291 "2021-09-22T15:05:53Z")
Hi there, 1- I got a table in dashboard with value "Others".In fact i'd like to have all values listed at first, how can i have this result ? 2- In a column i can have many values for example A,B,C, i'd like to have 0… --- ## [Query string needs an excludes option](https://discuss.elastic.co/t/query-string-needs-an-excludes-option/166427)
**Author:** [@maziyar](https://discuss.elastic.co/u/maziyar)\ **Replies:** 5\ **Last updated:** [January 31, 2019, 4:02pm UTC](https://discuss.elastic.co/t/query-string-needs-an-excludes-option/166427 "2019-01-31T16:02:18Z")
Hello, I have been using query\_string in my application which sits behind Swagger APIs and provides rest APIs for our researchers for a few years now. The power of query\_string is undeniable. That is why it's the best c… --- ## [How to set the column label for discovery data to include in dashboard](https://discuss.elastic.co/t/how-to-set-the-column-label-for-discovery-data-to-include-in-dashboard/166022)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 5\ **Last updated:** [January 29, 2019, 8:47pm UTC](https://discuss.elastic.co/t/how-to-set-the-column-label-for-discovery-data-to-include-in-dashboard/166022 "2019-01-29T20:47:03Z")
Hi, I want to include all data from index to a table. As I understand, I can not use visualization data table as that works with metrics only. The best way to include that is save discovery and pull that in dashboard. … --- ## [Filebeat configurations for multiline json input](https://discuss.elastic.co/t/filebeat-configurations-for-multiline-json-input/156992)
**Author:** [@Susmitha\_Devathi](https://discuss.elastic.co/u/Susmitha_Devathi)\ **Replies:** 5\ **Last updated:** [November 21, 2018, 2:49pm UTC](https://discuss.elastic.co/t/filebeat-configurations-for-multiline-json-input/156992 "2018-11-21T14:49:29Z")
Hi Team, could you please let me know how to write json filter and filebeat configurations for below data . { agentId: "TMS", apiVersion: "v2", entities: \[ { agentId: "susmitha", name: "EFGH", cacheManagerName: "Articl… --- ## [Optional Fields Create Mapper Parsing Error](https://discuss.elastic.co/t/optional-fields-create-mapper-parsing-error/114726)
**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\ **Replies:** 5\ **Last updated:** [January 10, 2018, 12:41pm UTC](https://discuss.elastic.co/t/optional-fields-create-mapper-parsing-error/114726 "2018-01-10T12:41:14Z")
I use optional fields in Heartbeat and since the 6.x release I have been getting mapper\_parsing errors that fail to index the event on Elastic Search because of any optional field, once they are removed everything works. … --- ## [Set/get version number of community beats](https://discuss.elastic.co/t/set-get-version-number-of-community-beats/68990)
**Author:** [@cyrilleverrier](https://discuss.elastic.co/u/cyrilleverrier)\ **Replies:** 5\ **Last updated:** [December 16, 2016, 11:02am UTC](https://discuss.elastic.co/t/set-get-version-number-of-community-beats/68990 "2016-12-16T11:02:05Z")
The current implementation of libbeat does not fully support setting a version number for the community beat apps. If you are happy with the following changes, I am going to implement them right away Suggested change… --- ## [How to access children documents for a scripted query](https://discuss.elastic.co/t/how-to-access-children-documents-for-a-scripted-query/39238)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 5\ **Last updated:** [January 14, 2016, 4:58pm UTC](https://discuss.elastic.co/t/how-to-access-children-documents-for-a-scripted-query/39238 "2016-01-14T16:58:36Z")
I have a index that has a "user" document and a child document called "user\_day" which includes the actions the person did on a certain day. Let's say that the user\_day document includes "num\_actions" and "days\_since\_si… --- ## [Kibanaで全体に対する割合を表示する方法について](https://discuss.elastic.co/t/kibana/161107)
**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 12:01am UTC](https://discuss.elastic.co/t/kibana/161107 "2018-12-18T00:01:59Z")
下記のように、Kibana画面で全体の件数に対する各グループの占める割合をテーブル形式で表示することはできますか？ 種類 件数 割合 グループA 80 40% グループB 60 30% グループC 40 20% グループD 20 10% 200 100% 下記のドキュメント中では見つけることができず、期待薄ですが確認させて下さい。 Kibana User Guide \[6.5\] | Elast… --- ## [Multiline Configuration / Java Stack Trace](https://discuss.elastic.co/t/multiline-configuration-java-stack-trace/149107)
**Author:** [@cschlaefcke](https://discuss.elastic.co/u/cschlaefcke)\ **Replies:** 2\ **Last updated:** [September 19, 2018, 1:01pm UTC](https://discuss.elastic.co/t/multiline-configuration-java-stack-trace/149107 "2018-09-19T13:01:29Z")
Hi, I just started working with docker elk and also have filebeat for some docker containers up and running (almost). One of my docker container (JIRA) is creating multiline output (mainly java exceptions / stack traces… [Previous page](https://discuss.elastic.co/top.md?page=1058&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1060&per_page=50&period=all)