# Top

**URL:** https://discuss.elastic.co/top.md?page=1086&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1087

---

## [Is it possible to add my own custom field using Winlogbeat?](https://discuss.elastic.co/t/is-it-possible-to-add-my-own-custom-field-using-winlogbeat/116789)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 6\
**Last updated:** [January 30, 2018, 8:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-my-own-custom-field-using-winlogbeat/116789 "2018-01-30T20:38:05Z")

</div>

Hi, I am trying to add my own custom field using winlogbeat. Can someone please say if that's p\[ossible? Thanks

---

## [java.lang.IllegalStateException: Unrecoverable indexation failures: 1 errors among 1 requests](https://discuss.elastic.co/t/java-lang-illegalstateexception-unrecoverable-indexation-failures-1-errors-among-1-requests/228074)

<div class="topic-metadata">

**Author:** [@krishna123](https://discuss.elastic.co/u/krishna123)\
**Replies:** 0\
**Last updated:** [April 15, 2020, 9:44am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unrecoverable-indexation-failures-1-errors-among-1-requests/228074 "2020-04-15T09:44:37Z")

</div>

java.lang.IllegalStateException: Unrecoverable indexation failures: 1 errors among 1 requests at org.sonar.server.es.IndexingListener$1.onFinish(IndexingListener.java:39) at org.sonar.server.es.BulkIndexer.stop(BulkInd…

---

## [반복문을 사용한 csv 데이터 insert 방법](https://discuss.elastic.co/t/csv-insert/277883)

<div class="topic-metadata">

**Author:** [@111488](https://discuss.elastic.co/u/111488)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 1:09am UTC](https://discuss.elastic.co/t/csv-insert/277883 "2021-07-06T01:09:40Z")

</div>

안녕하세요 엘라스틱 서치를 사용해서 대용량 csv 파일을 실시간 데이터인 것처럼 활용하려고 합니다. datetime 형식의 타임 인덱스를 기반으로 100개 미만의 컬럼을 갖은 데이터 셋을 1초(또는 1분)마다 한줄씩 append를 하려고 합니다. 대량의 데이터를 한번에 삽입하는 것이 아닌, 인덱스를 기준으로 특정 주기마다 한 줄씩 삽입하는 방법을 알고 싶습니다.

---

## [Extract folder name as field in logstash](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026)

<div class="topic-metadata">

**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 4:38am UTC](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026 "2022-05-19T04:38:06Z")

</div>

Hi everyone The following is my filebeat input in my yml file- filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below a…

---

## [Elasticsearch Indices showing wrong date](https://discuss.elastic.co/t/elasticsearch-indices-showing-wrong-date/135492)

<div class="topic-metadata">

**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\
**Replies:** 7\
**Last updated:** [June 13, 2018, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-indices-showing-wrong-date/135492 "2018-06-13T04:28:24Z")

</div>

Hi , MY elastic indices showing wrong date why like yellow open syslog-2018.08.08 2ERImxJkQIOGw0qImjMPlw 5 1 37 0 401.8kb 401.8kb and secondly the status of my elastic shows yellow however its running good. its stand…

---

## [Rate in Kibana](https://discuss.elastic.co/t/rate-in-kibana/98830)

<div class="topic-metadata">

**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 2:21pm UTC](https://discuss.elastic.co/t/rate-in-kibana/98830 "2017-08-30T14:21:23Z")

</div>

Currently in Kibana, we are able to get the No. of Orders in a specific time range using Metrics visualization. Our current requirement is to calculate Rate in Kibana. For example, Total Number of Orders received per …

---

## [Greetings!](https://discuss.elastic.co/t/greetings/2802)

<div class="topic-metadata">

**Author:** [@Jake\_Mannix](https://discuss.elastic.co/u/Jake_Mannix)\
**Replies:** 7\
**Last updated:** [February 10, 2010, 10:56pm UTC](https://discuss.elastic.co/t/greetings/2802 "2010-02-10T22:56:23Z")

</div>

Hi Shay et al. Awesome website you've got there - really gets me interested in trying out this project. Your documentation gives a great feel for how ElasticSearch can be used. Many of my questions can be answer…

---

## [How to tokenize html, javascript and css](https://discuss.elastic.co/t/how-to-tokenize-html-javascript-and-css/20639)

<div class="topic-metadata">

**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\
**Replies:** 0\
**Last updated:** [November 7, 2014, 7:19pm UTC](https://discuss.elastic.co/t/how-to-tokenize-html-javascript-and-css/20639 "2014-11-07T19:19:25Z")

</div>

We would like to use elasticsearch internally to search our own work product which is primarily html javascript and css. When we index these today we can not find things like "somefile.js" because of the tokenizer…

---

## [How to clear filters from the Dashboard?](https://discuss.elastic.co/t/how-to-clear-filters-from-the-dashboard/297235)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 10:51pm UTC](https://discuss.elastic.co/t/how-to-clear-filters-from-the-dashboard/297235 "2022-02-15T22:51:46Z")

</div>

We upgraded Elastic Cloud version 7.13.2 to 7.15.2. In our web page, we have a button and embed Dashboard like this. The dashboard URL in iframe is saved object embed code what Kibana provides which is like below. h…

---

## [Elasticsearch Node Running on docker only shows Disk Available 50 GB](https://discuss.elastic.co/t/elasticsearch-node-running-on-docker-only-shows-disk-available-50-gb/290704)

<div class="topic-metadata">

**Author:** [@Mmatos](https://discuss.elastic.co/u/Mmatos)\
**Replies:** 2\
**Last updated:** [December 1, 2021, 8:22pm UTC](https://discuss.elastic.co/t/elasticsearch-node-running-on-docker-only-shows-disk-available-50-gb/290704 "2021-12-01T20:22:25Z")

</div>

Hi, I am running the Docker-Elk Stack 7.14.1 and noticed that in the Stack Monitoring Tab Elastic reports it only has a 50 GB disk. The host running the container has 700 GB free. How can I expand this container so it …

---

## [Geoip location not working - missing nginx.access.geoip.location](https://discuss.elastic.co/t/geoip-location-not-working-missing-nginx-access-geoip-location/161723)

<div class="topic-metadata">

**Author:** [@c257dd0a514ccc788ecc](https://discuss.elastic.co/u/c257dd0a514ccc788ecc)\
**Replies:** 2\
**Last updated:** [December 20, 2018, 7:09pm UTC](https://discuss.elastic.co/t/geoip-location-not-working-missing-nginx-access-geoip-location/161723 "2018-12-20T19:09:28Z")

</div>

Hi. ELK stack version 6.5.4. I deployed a new server with nginx and I use Filebeat to send nginx logs the the elasticsearch cluster. I added the pluggin nginx and imported the dashboard (filebeat setup -e). The problem I…

---

## [Completion Suggestion Java API for ElasticSearch 5.5.1](https://discuss.elastic.co/t/completion-suggestion-java-api-for-elasticsearch-5-5-1/105216)

<div class="topic-metadata">

**Author:** [@xiaobingy](https://discuss.elastic.co/u/xiaobingy)\
**Replies:** 2\
**Last updated:** [October 28, 2017, 4:12am UTC](https://discuss.elastic.co/t/completion-suggestion-java-api-for-elasticsearch-5-5-1/105216 "2017-10-28T04:12:01Z")

</div>

I want to refer the following example to code the suggestions function with java for elasticsearch 5.5.1, but I could not find the prepareSearch , addSuggestion methods like the example. Could you help me to solve the…

---

## [Two-node graylog+elasticsearch failover cluster](https://discuss.elastic.co/t/two-node-graylog-elasticsearch-failover-cluster/271355)

<div class="topic-metadata">

**Author:** [@dunhillers](https://discuss.elastic.co/u/dunhillers)\
**Replies:** 5\
**Last updated:** [April 27, 2021, 11:29am UTC](https://discuss.elastic.co/t/two-node-graylog-elasticsearch-failover-cluster/271355 "2021-04-27T11:29:17Z")

</div>

Hi, I have deployed graylog+elastic on two servers (Centos 7.8). The goal: to create a failover cluster of two nodes with support for index replication. So that if one of the nodes falls, the indexes continue to be writt…

---

## [How can I split kibana dashboard?](https://discuss.elastic.co/t/how-can-i-split-kibana-dashboard/249908)

<div class="topic-metadata">

**Author:** [@ojm](https://discuss.elastic.co/u/ojm)\
**Replies:** 5\
**Last updated:** [September 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/how-can-i-split-kibana-dashboard/249908 "2020-09-25T06:35:38Z")

</div>

I downloaded kibana open source (v7.8.1). I was wondering that how can I share dashboard area. I want the dashboard to be run in half. And the other half would like to have my website run using iframe. however I have …

---

## [How to pass elastic-apm-traceparent and traceparent headers explicitly](https://discuss.elastic.co/t/how-to-pass-elastic-apm-traceparent-and-traceparent-headers-explicitly/242640)

<div class="topic-metadata">

**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\
**Replies:** 5\
**Last updated:** [July 26, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-pass-elastic-apm-traceparent-and-traceparent-headers-explicitly/242640 "2020-07-26T15:21:56Z")

</div>

Hi, I have the following use case, Service 1 calls service 2, but it is not a normal service (sync/async) call, service 1 writes to its outbound MySQL table with all the data (request body, headers, URL, etc), later a …

---

## [Single log entry being divided in ELK stack](https://discuss.elastic.co/t/single-log-entry-being-divided-in-elk-stack/170072)

<div class="topic-metadata">

**Author:** [@BhaveshVasnani](https://discuss.elastic.co/u/BhaveshVasnani)\
**Replies:** 5\
**Last updated:** [February 26, 2019, 10:03pm UTC](https://discuss.elastic.co/t/single-log-entry-being-divided-in-elk-stack/170072 "2019-02-26T22:03:12Z")

</div>

Greetings I have established the pipeline properly and the logs are sent via TCP to Filebeat and then it is being processed and passed further down the pipeline. But the issue is that Elasticsearch and Kibana dashboard …

---

## [Snmp for apc (american power conversion)](https://discuss.elastic.co/t/snmp-for-apc-american-power-conversion/167194)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [February 6, 2019, 2:57pm UTC](https://discuss.elastic.co/t/snmp-for-apc-american-power-conversion/167194 "2019-02-06T14:57:05Z")

</div>

Hi I have never work with snmp and trying to get power information from apc unit. after a day of digging around I found it's OID. ran snmpwalk command to grab ton of information. how do I interprete this? what is all t…

---

## [I can't install basic license](https://discuss.elastic.co/t/i-cant-install-basic-license/70030)

<div class="topic-metadata">

**Author:** [@2010](https://discuss.elastic.co/u/2010)\
**Replies:** 5\
**Last updated:** [January 17, 2017, 7:42am UTC](https://discuss.elastic.co/t/i-cant-install-basic-license/70030 "2017-01-17T07:42:43Z")

</div>

---

## [Multiple dates in log file defining the @timestamp date](https://discuss.elastic.co/t/multiple-dates-in-log-file-defining-the-timestamp-date/44233)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 5\
**Last updated:** [March 13, 2016, 8:35am UTC](https://discuss.elastic.co/t/multiple-dates-in-log-file-defining-the-timestamp-date/44233 "2016-03-13T08:35:56Z")

</div>

Hi, I have a challenge, in the log-file of mine, I have three dates and would like to define the 3rd one as the @timestamp that is reflected in the ES and Kibana searches. What filter can I apply for this as the date one…

---

## [Performance problems when searching in-memory index with 15M documents](https://discuss.elastic.co/t/performance-problems-when-searching-in-memory-index-with-15m-documents/43182)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 5\
**Last updated:** [March 2, 2016, 3:13pm UTC](https://discuss.elastic.co/t/performance-problems-when-searching-in-memory-index-with-15m-documents/43182 "2016-03-02T15:13:00Z")

</div>

I have an index(es 2.2) with 1 shard and 15.6M documents (will go up to 100M in the future) and I'm doing searches on it but they take ~500ms (too much time in my opinion). I don't store the \_source, I don't store fiel…

---

## [Faster sloppy phrase queries](https://discuss.elastic.co/t/faster-sloppy-phrase-queries/19666)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 5\
**Last updated:** [September 9, 2014, 6:12pm UTC](https://discuss.elastic.co/t/faster-sloppy-phrase-queries/19666 "2014-09-09T18:12:16Z")

</div>

In my continuing quest to make my search fast enough I've run into another roadblock: phrase queries. On most user queries I generate a regular boolean query for their terms but I also generate a rescore that checks i…

---

## [Optimal number of Shards per node](https://discuss.elastic.co/t/optimal-number-of-shards-per-node/16508)

<div class="topic-metadata">

**Author:** [@Rajan\_Bhatt](https://discuss.elastic.co/u/Rajan_Bhatt)\
**Replies:** 5\
**Last updated:** [March 25, 2014, 1:49am UTC](https://discuss.elastic.co/t/optimal-number-of-shards-per-node/16508 "2014-03-25T01:49:38Z")

</div>

Hello, I would appreciate if someone can suggest optimal number of shards per ES node for optimal performance or any recommended way to arrive at number of shards given number of core and memory foot print. Tha…

---

## [Unable to load APM Errors due to new error: Fielddata is disabled on \[error.grouping\_key\]](https://discuss.elastic.co/t/unable-to-load-apm-errors-due-to-new-error-fielddata-is-disabled-on-error-grouping-key/329460)

<div class="topic-metadata">

**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\
**Replies:** 3\
**Last updated:** [April 17, 2023, 3:43pm UTC](https://discuss.elastic.co/t/unable-to-load-apm-errors-due-to-new-error-fielddata-is-disabled-on-error-grouping-key/329460 "2023-04-17T15:43:53Z")

</div>

I realize there are a fair number of other topics with a very similar error, but this feels different due to the fact that it's the Observability APM that is triggering this exception. I just went to my APM in Elastic Cl…

---

## [Elastic/fleet-server cannot create/write to index - insufficient permissions](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181)

<div class="topic-metadata">

**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 11:57am UTC](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181 "2022-01-13T11:57:18Z")

</div>

Hi, I am trying to log a variety of custom metrics to Elasticsearch through TCP, each in their own index. Until now I was working with a custom deployment of the ELK stack, and simply sending these metrics in JSON form …

---

## [In logstash, I want to save logs to different outputs for each k8s namespace](https://discuss.elastic.co/t/in-logstash-i-want-to-save-logs-to-different-outputs-for-each-k8s-namespace/282867)

<div class="topic-metadata">

**Author:** [@Suyong](https://discuss.elastic.co/u/Suyong)\
**Replies:** 3\
**Last updated:** [August 31, 2021, 2:57am UTC](https://discuss.elastic.co/t/in-logstash-i-want-to-save-logs-to-different-outputs-for-each-k8s-namespace/282867 "2021-08-31T02:57:08Z")

</div>

Hello everyone!! I'm recently struggling with filebeat and logstash log handling in a kubernetes env. But my problem is that when the log below is left as logstash, I want to save it in a separate ES for each namespace…

---

## [Cannot show ping because icmp.rtt.us no value](https://discuss.elastic.co/t/cannot-show-ping-because-icmp-rtt-us-no-value/226011)

<div class="topic-metadata">

**Author:** [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\
**Replies:** 8\
**Last updated:** [April 28, 2020, 11:45am UTC](https://discuss.elastic.co/t/cannot-show-ping-because-icmp-rtt-us-no-value/226011 "2020-04-28T11:45:57Z")

</div>

Hello everyone I have a project to make some monitoring with ELK stack then for the monitoring i use grafana for user client. But i have a problems when im try to show up Ping visualization. There is no value for icmp.…

---

## [Logstash not working after changing password](https://discuss.elastic.co/t/logstash-not-working-after-changing-password/185788)

<div class="topic-metadata">

**Author:** [@turnip](https://discuss.elastic.co/u/turnip)\
**Replies:** 3\
**Last updated:** [June 17, 2019, 2:27am UTC](https://discuss.elastic.co/t/logstash-not-working-after-changing-password/185788 "2019-06-17T02:27:08Z")

</div>

Hi all i have recently started on elk stack, and i have encounter some problem after changing the default password. Current stack version 7.0.1 based off this link https://github.com/deviantony/docker-elk after settin…

---

## [Read/Write alias for Elastic search indices](https://discuss.elastic.co/t/read-write-alias-for-elastic-search-indices/143542)

<div class="topic-metadata">

**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Replies:** 3\
**Last updated:** [August 8, 2018, 4:46pm UTC](https://discuss.elastic.co/t/read-write-alias-for-elastic-search-indices/143542 "2018-08-08T16:46:47Z")

</div>

Hello i have a logstash configuration which will create the indices on monthly basis, i am creating an alias for each index through template which i am using it for reading the documents. I need another alias which is us…

---

## [Couldn't find any filter plugin named 'multiline'](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline/70349)

<div class="topic-metadata">

**Author:** [@Ajit\_Singh](https://discuss.elastic.co/u/Ajit_Singh)\
**Replies:** 3\
**Last updated:** [January 3, 2017, 6:28am UTC](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline/70349 "2017-01-03T06:28:04Z")

</div>

I am using logstash-5.0.0, whenever I am using multiline plugin It give me "Loaderror".

---

## [As is the data entry logstash?](https://discuss.elastic.co/t/as-is-the-data-entry-logstash/52357)

<div class="topic-metadata">

**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\
**Replies:** 8\
**Last updated:** [June 14, 2016, 1:14pm UTC](https://discuss.elastic.co/t/as-is-the-data-entry-logstash/52357 "2016-06-14T13:14:52Z")

</div>

As is the data entry by logstash with the host and port?

---

## [Monitoring without Security 5.0A2](https://discuss.elastic.co/t/monitoring-without-security-5-0a2/49731)

<div class="topic-metadata">

**Author:** [@gquintana](https://discuss.elastic.co/u/gquintana)\
**Replies:** 3\
**Last updated:** [May 11, 2016, 7:37am UTC](https://discuss.elastic.co/t/monitoring-without-security-5-0a2/49731 "2016-05-11T07:37:43Z")

</div>

In the past for developping and testing I could install Marvel without Shield. Now that they are bundled together, I am forced to setup SSL certificates, user accounts on my development laptop: Error: xpack.security.e…

---

## [Logstash and logstash-output-mongodb](https://discuss.elastic.co/t/logstash-and-logstash-output-mongodb/36777)

<div class="topic-metadata">

**Author:** [@sampasei](https://discuss.elastic.co/u/sampasei)\
**Replies:** 3\
**Last updated:** [December 22, 2015, 5:27am UTC](https://discuss.elastic.co/t/logstash-and-logstash-output-mongodb/36777 "2015-12-22T05:27:11Z")

</div>

Hi, i'm trying to use logstash with mongodb output plugin but i have some problems with floating point numbers. Below an example Failed to send event to MongoDB {:event=\>#\<LogStash::Event:0xcdd2742 @metadata\_accessors=…

---

## [How to implement more then one time stamp in Kibana Dashboard (Panel)?](https://discuss.elastic.co/t/how-to-implement-more-then-one-time-stamp-in-kibana-dashboard-panel/24581)

<div class="topic-metadata">

**Author:** [@ER777](https://discuss.elastic.co/u/ER777)\
**Replies:** 3\
**Last updated:** [June 30, 2015, 12:32pm UTC](https://discuss.elastic.co/t/how-to-implement-more-then-one-time-stamp-in-kibana-dashboard-panel/24581 "2015-06-30T12:32:50Z")

</div>

Hello, I try to emplement more than one timestamp at Kibana Dashboard, the result shuld look like this: But I can not implement the dynamic updates for the second time stamp, after refresh (F5) the date in both time …

---

## [Determine when clone index has completed](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675)

<div class="topic-metadata">

**Author:** [@madshov](https://discuss.elastic.co/u/madshov)\
**Replies:** 4\
**Last updated:** [December 16, 2021, 11:52am UTC](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675 "2021-12-16T11:52:03Z")

</div>

Hi, I'm writing some functionality where step 1 would be to backup the current ES index. For this I'm using the \_cloneIndex request. This seems like the most appropriate choice. But how would I know for sure when that h…

---

## [ElasticSearch Cluster overload , Master removes and adds data node](https://discuss.elastic.co/t/elasticsearch-cluster-overload-master-removes-and-adds-data-node/234153)

<div class="topic-metadata">

**Author:** [@Parviz\_Makari](https://discuss.elastic.co/u/Parviz_Makari)\
**Replies:** 4\
**Last updated:** [May 30, 2020, 11:15pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-overload-master-removes-and-adds-data-node/234153 "2020-05-30T23:15:22Z")

</div>

Hi all, We're facing latency issue with our ES cluster. It started to happen since we rolled out a new service which is sending bulk requests to ES (there are other services which send bulk requests too). On average we …

---

## [Multiple logstash intances](https://discuss.elastic.co/t/multiple-logstash-intances/224673)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 4\
**Last updated:** [March 31, 2020, 7:31pm UTC](https://discuss.elastic.co/t/multiple-logstash-intances/224673 "2020-03-31T19:31:04Z")

</div>

Hi, I am trying to run multiple instances of logstash using multiple pipeline. - pipeline.id: product\_info path.config: "/home/ubuntu/dev/V4QaShop/logstash/products.conf" #pipeline.workers: 3 path.dat…

---

## [Calculate daily total value based on previous day values](https://discuss.elastic.co/t/calculate-daily-total-value-based-on-previous-day-values/217906)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 4\
**Last updated:** [February 7, 2020, 6:00am UTC](https://discuss.elastic.co/t/calculate-daily-total-value-based-on-previous-day-values/217906 "2020-02-07T06:00:51Z")

</div>

Hi everyone, I know this is probably a long shot but I wonder if it somehow is possible to calculate values like this. Example: Every day I'm ingesting a new value that is the total value of X for month to date. 01/02…

---

## [Adding Custom Page](https://discuss.elastic.co/t/adding-custom-page/198732)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 8:36pm UTC](https://discuss.elastic.co/t/adding-custom-page/198732 "2019-09-12T20:36:19Z")

</div>

I have values that currently point to a single link for information lookup. I would like to send this data over to a custom page that has links for multiple sources of information lookup and would like the page to be ho…

---

## [Elasticsearch 6.3 CPU load & Disk I/O increased](https://discuss.elastic.co/t/elasticsearch-6-3-cpu-load-disk-i-o-increased/148318)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 4\
**Last updated:** [September 12, 2018, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-cpu-load-disk-i-o-increased/148318 "2018-09-12T16:46:31Z")

</div>

Hi, I'm working on upgrading our Elasticsearch cluster from 1.4.3 to 6.3.0 Both old & new cluster has 3 master nodes, 4 client (coordinating) nodes and 11 data nodes (total 18 nodes). Cluster runs on AWS. Instance typ…

---

## [Modification of Color field formatter](https://discuss.elastic.co/t/modification-of-color-field-formatter/89751)

<div class="topic-metadata">

**Author:** [@JaimeCr](https://discuss.elastic.co/u/JaimeCr)\
**Replies:** 4\
**Last updated:** [June 20, 2017, 11:03am UTC](https://discuss.elastic.co/t/modification-of-color-field-formatter/89751 "2017-06-20T11:03:46Z")

</div>

Hi, I'm trying to create a new field formatter for Kibana 5.4.1 that somehow mixes the "Color" and "Number" formatters. Specifically, I want to have a Color formatter that also rounds the numbers to three decimal points…

---

## [Accessing data from php file protected by shield](https://discuss.elastic.co/t/accessing-data-from-php-file-protected-by-shield/48386)

<div class="topic-metadata">

**Author:** [@Abhishek\_Chaudhary](https://discuss.elastic.co/u/Abhishek_Chaudhary)\
**Replies:** 4\
**Last updated:** [April 26, 2016, 11:07am UTC](https://discuss.elastic.co/t/accessing-data-from-php-file-protected-by-shield/48386 "2016-04-26T11:07:44Z")

</div>

I have authenticate shield with admin with some password. Now i am unable to search any term in my php file. Earlier it does search using elasticsearch api. Now its display nothing.

---

## [Kibana couldn't find any Elasticsearch data?](https://discuss.elastic.co/t/kibana-couldnt-find-any-elasticsearch-data/125120)

<div class="topic-metadata">

**Author:** [@mak705](https://discuss.elastic.co/u/mak705)\
**Replies:** 1\
**Last updated:** [March 22, 2018, 10:02am UTC](https://discuss.elastic.co/t/kibana-couldnt-find-any-elasticsearch-data/125120 "2018-03-22T10:02:42Z")

</div>

\[Capture3\] dataset \> cars.csv from kaggle data set (all\_anonymized\_2015\_11\_2017\_03.csv) logstash terminal \]$ bin/logstash -f /home/elk/data/logstash.config \[2018-03-22T17:48:18,821\]\[INFO \]\[logstash.outputs.elasti…

---

## [A question setting up logstash with raspberry pi](https://discuss.elastic.co/t/a-question-setting-up-logstash-with-raspberry-pi/97830)

<div class="topic-metadata">

**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\
**Replies:** 1\
**Last updated:** [August 23, 2017, 8:51pm UTC](https://discuss.elastic.co/t/a-question-setting-up-logstash-with-raspberry-pi/97830 "2017-08-23T20:51:42Z")

</div>

Hi all, I am setting up a raspberry pi 3 to send syslogs (rsyslog) to a server running logstash. I have installed filebeat on the raspberry pi in order to ship the logs to the logstash server. For some reason, the logst…

---

## [Hour\_minute date format in range queries](https://discuss.elastic.co/t/hour-minute-date-format-in-range-queries/66299)

<div class="topic-metadata">

**Author:** [@Adam\_M](https://discuss.elastic.co/u/Adam_M)\
**Replies:** 1\
**Last updated:** [November 17, 2016, 8:55am UTC](https://discuss.elastic.co/t/hour-minute-date-format-in-range-queries/66299 "2016-11-17T08:55:06Z")

</div>

Hello, I'm preparing bus timetable and I got a problem with query. My mapping (below) has hour field in hour\_minute format. { "stops": { "properties": { "dayType": { "type": "string" }, …

---

## [Auditbeat 7.7.0 fails to start on Fedora 32 VM: system/socket guess timeout](https://discuss.elastic.co/t/auditbeat-7-7-0-fails-to-start-on-fedora-32-vm-system-socket-guess-timeout/233160)

<div class="topic-metadata">

**Author:** [@roysjosh](https://discuss.elastic.co/u/roysjosh)\
**Replies:** 2\
**Last updated:** [June 1, 2020, 8:29pm UTC](https://discuss.elastic.co/t/auditbeat-7-7-0-fails-to-start-on-fedora-32-vm-system-socket-guess-timeout/233160 "2020-06-01T20:29:16Z")

</div>

Hello, auditbeat 7.7.0 is failing to start on a fresh Fedora 32 VM. Here is a partial debug log: auditbeat\[879\]: 2020-05-18T03:43:54.446Z INFO \[socket\] guess/guess.go:258 Running 17 guesses …

---

## [About Fleet Agents categority](https://discuss.elastic.co/t/about-fleet-agents-categority/321844)

<div class="topic-metadata">

**Author:** [@cybersirp](https://discuss.elastic.co/u/cybersirp)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 9:38am UTC](https://discuss.elastic.co/t/about-fleet-agents-categority/321844 "2023-01-09T09:38:33Z")

</div>

How is the consumption of resources related to the number of agents that we deploy in our organizations calculated? Is there a formula to be able to have an approximate amount of resources needed for each agent that wil…

---

## [Watcher Email output](https://discuss.elastic.co/t/watcher-email-output/318793)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 7:27am UTC](https://discuss.elastic.co/t/watcher-email-output/318793 "2022-11-15T07:27:25Z")

</div>

{ "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "metricbeat-\*" \], …

---

## [Not able to access my elasticsearch url via public IP](https://discuss.elastic.co/t/not-able-to-access-my-elasticsearch-url-via-public-ip/301110)

<div class="topic-metadata">

**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\
**Replies:** 6\
**Last updated:** [March 30, 2022, 4:14pm UTC](https://discuss.elastic.co/t/not-able-to-access-my-elasticsearch-url-via-public-ip/301110 "2022-03-30T16:14:08Z")

</div>

Hi All, I am not able to able to access url via public IP on port 9200. Even when i changed below setting in config file and tried to restart service, getting below error. network.host: \<public\_ip\> http.port: 9200 r…

---

## [Not able to query a wildcard](https://discuss.elastic.co/t/not-able-to-query-a-wildcard/220896)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 6\
**Last updated:** [February 27, 2020, 7:28pm UTC](https://discuss.elastic.co/t/not-able-to-query-a-wildcard/220896 "2020-02-27T19:28:11Z")

</div>

Hi, I'm trying to query a document where it has field mapping\_type and product.categories\[0\].name field which I want to query it using a wildcard. I tried to run the query in this way: GET /products/\_search { "quer…

---

## [Master not discovered or elected yet, an election requires at least 2 nodes with ids - ELK Stack - Docker Swarm](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-elk-stack-docker-swarm/325548)

<div class="topic-metadata">

**Author:** [@vdcharter](https://discuss.elastic.co/u/vdcharter)\
**Replies:** 2\
**Last updated:** [February 15, 2023, 4:19pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-elk-stack-docker-swarm/325548 "2023-02-15T16:19:09Z")

</div>

Hi, I am trying to setup a elastic cluster with 3 masters, 1 kibana node and 1 data node. This is a common topic but would like to understand what I am doing wrong. Below is portainer error log on master1 WARN master n…

[Previous page](https://discuss.elastic.co/top.md?page=1085&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1087&per_page=50&period=all)
