# Top

**URL:** https://discuss.elastic.co/top.md?page=1088&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1089

---

## [Not able to output two or multiple aggregations in a loop](https://discuss.elastic.co/t/not-able-to-output-two-or-multiple-aggregations-in-a-loop/133693)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 7\
**Last updated:** [June 27, 2018, 11:49am UTC](https://discuss.elastic.co/t/not-able-to-output-two-or-multiple-aggregations-in-a-loop/133693 "2018-06-27T11:49:43Z")

</div>

Hi all, i am able to print values in loop but i am stuck in one condition, i have a chain query where i am able to print values from first chain using its aggregations but "I am not able to print values from Second chai…

---

## [Error between filebeat and logstash](https://discuss.elastic.co/t/error-between-filebeat-and-logstash/110311)

<div class="topic-metadata">

**Author:** [@kevin.didier](https://discuss.elastic.co/u/kevin.didier)\
**Replies:** 7\
**Last updated:** [December 7, 2017, 12:51pm UTC](https://discuss.elastic.co/t/error-between-filebeat-and-logstash/110311 "2017-12-07T12:51:12Z")

</div>

Hello, I have a problem to parse log from a windows sevrer 2012 with filebeat. The logstash is in a ubuntu server. The stack work fine beacause log from other linux server arrived correctly. I'm using ELK v6. I think…

---

## [LS 5.4.3 w/ lumberjack input plugin - very slow processing of events](https://discuss.elastic.co/t/ls-5-4-3-w-lumberjack-input-plugin-very-slow-processing-of-events/91696)

<div class="topic-metadata">

**Author:** [@\_ale](https://discuss.elastic.co/u/_ale)\
**Replies:** 7\
**Last updated:** [July 5, 2017, 5:55am UTC](https://discuss.elastic.co/t/ls-5-4-3-w-lumberjack-input-plugin-very-slow-processing-of-events/91696 "2017-07-05T05:55:25Z")

</div>

Hi, we're upgrading to using the latest logstash with lumberjack input plugin, but it seems to be processing events extremely slow compared to the old LS version (1.5.x) - the setup is quite simple: logstash-shipp…

---

## [Fluent-bit microservice getting restart frequently](https://discuss.elastic.co/t/fluent-bit-microservice-getting-restart-frequently/301496)

<div class="topic-metadata">

**Author:** [@muralikri](https://discuss.elastic.co/u/muralikri)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 10:39pm UTC](https://discuss.elastic.co/t/fluent-bit-microservice-getting-restart-frequently/301496 "2022-04-04T22:39:53Z")

</div>

Hi Team, We have created configmap as below, fluent-bit MS is getting terminate and startup frequently and i could see that it is throwing below error in the logs. After restart it indexing fine and also no buffer \*.flb…

---

## [Elastic APM server http://localhost:8220/ is not available (Server returned status 400)](https://discuss.elastic.co/t/elastic-apm-server-http-localhost-8220-is-not-available-server-returned-status-400/327639)

<div class="topic-metadata">

**Author:** [@Jean-Rene\_Robin](https://discuss.elastic.co/u/Jean-Rene_Robin)\
**Replies:** 4\
**Last updated:** [March 16, 2023, 12:33pm UTC](https://discuss.elastic.co/t/elastic-apm-server-http-localhost-8220-is-not-available-server-returned-status-400/327639 "2023-03-16T12:33:11Z")

</div>

I cannot connect to APM server using SpringBoot and Tomcat : I run the docker-compose file from GitHub - elastic/apm-server: APM Server , and added the following configuration to my run configuration in Inteliij IDEA : -…

---

## [Logstash-to-logstash communication in 2020 - with load balancing](https://discuss.elastic.co/t/logstash-to-logstash-communication-in-2020-with-load-balancing/232602)

<div class="topic-metadata">

**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\
**Replies:** 4\
**Last updated:** [May 15, 2020, 7:55am UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-in-2020-with-load-balancing/232602 "2020-05-15T07:55:11Z")

</div>

Hello, My problem is pretty similar to this one: https://discuss.elastic.co/t/logstash-to-logstash-cluster-with-or-without-load-balancer/178694 I contacted the author, who told me he hadn't found a good solution yet. I…

---

## [Elastic SIEM + snort](https://discuss.elastic.co/t/elastic-siem-snort/199078)

<div class="topic-metadata">

**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 2:16pm UTC](https://discuss.elastic.co/t/elastic-siem-snort/199078 "2019-09-12T14:16:27Z")

</div>

Добрый день. Можно ли добавить в SIEM данные Snort? Как это сделать?

---

## [elasticsearch.exceptions.TransportError: \<unprintable TransportError object\>](https://discuss.elastic.co/t/elasticsearch-exceptions-transporterror-unprintable-transporterror-object/139109)

<div class="topic-metadata">

**Author:** [@Vishnu\_P\_S](https://discuss.elastic.co/u/Vishnu_P_S)\
**Replies:** 4\
**Last updated:** [July 9, 2018, 9:33am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-transporterror-unprintable-transporterror-object/139109 "2018-07-09T09:33:08Z")

</div>

I have developed a flask Api to read records from elasticsearch. This was working correctly earlier, but now its throwing an error elasticsearch.exceptions.TransportError: Please help me to solve this issue. Thanks in …

---

## [Numbers with commas and time field problem!](https://discuss.elastic.co/t/numbers-with-commas-and-time-field-problem/138755)

<div class="topic-metadata">

**Author:** [@Marko\_Kevin\_Grilc](https://discuss.elastic.co/u/Marko_Kevin_Grilc)\
**Replies:** 4\
**Last updated:** [July 7, 2018, 7:08am UTC](https://discuss.elastic.co/t/numbers-with-commas-and-time-field-problem/138755 "2018-07-07T07:08:53Z")

</div>

Hi there, Is it possible to use, or better to say, parse numbers that are float numbers but with comma. Elastic wont allow me to parse average scores that contain , insted of . I tried to adjust it in Advanced settings,…

---

## [Watcher email messages are not UTF-8 encoded](https://discuss.elastic.co/t/watcher-email-messages-are-not-utf-8-encoded/61905)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [November 7, 2016, 11:00am UTC](https://discuss.elastic.co/t/watcher-email-messages-are-not-utf-8-encoded/61905 "2016-11-07T11:00:33Z")

</div>

I have a environment as below . \[root@Test-Env mail\]# rpm -qa | grep elasticsearch elasticsearch-5.0.0\_beta1-1.noarch \[root@Test-Env mail\]# /usr/share/elasticsearch/bin/elasticsearch-plugin list x-pack@5.0.0-beta1 How…

---

## [Multiline and blank lines](https://discuss.elastic.co/t/multiline-and-blank-lines/140060)

<div class="topic-metadata">

**Author:** [@mv\_unige](https://discuss.elastic.co/u/mv_unige)\
**Replies:** 2\
**Last updated:** [July 17, 2018, 7:31am UTC](https://discuss.elastic.co/t/multiline-and-blank-lines/140060 "2018-07-17T07:31:57Z")

</div>

I've the following multiline pattern multiline.pattern: '^\\d{4}-\\d{2}-\\d{2}\\s\\d{2}:\\d{2}:\\d{2}.\\d{3}' multiline.negate: true multiline.match: before Using the Go playground https://play.golang.org/p/uAd5XHxscu, I can s…

---

## [Search by digits doesn't work with edge\_ngram](https://discuss.elastic.co/t/search-by-digits-doesnt-work-with-edge-ngram/134433)

<div class="topic-metadata">

**Author:** [@mikhail.tin](https://discuss.elastic.co/u/mikhail.tin)\
**Replies:** 2\
**Last updated:** [June 5, 2018, 7:00am UTC](https://discuss.elastic.co/t/search-by-digits-doesnt-work-with-edge-ngram/134433 "2018-06-05T07:00:52Z")

</div>

Hi there, I am using a edge ngram tokenizer in order to provide partial matching . My scripts: PUT docs { "settings": { "analysis": { "analyzer": { "autocomplete": { "tokenizer": "autocom…

---

## [Java Rest Client](https://discuss.elastic.co/t/java-rest-client/67695)

<div class="topic-metadata">

**Author:** [@szaharici](https://discuss.elastic.co/u/szaharici)\
**Replies:** 2\
**Last updated:** [December 1, 2016, 1:07pm UTC](https://discuss.elastic.co/t/java-rest-client/67695 "2016-12-01T13:07:28Z")

</div>

Hi guys, I have been trying unsuccessfully to do a bulk insert with the new Java rest client... Does anyone have a working example of a bulk insert using the rest client ? I can do searches and index single documents w…

---

## [Rename Field with \[\]](https://discuss.elastic.co/t/rename-field-with/305117)

<div class="topic-metadata">

**Author:** [@cris](https://discuss.elastic.co/u/cris)\
**Replies:** 8\
**Last updated:** [May 20, 2022, 6:04pm UTC](https://discuss.elastic.co/t/rename-field-with/305117 "2022-05-20T18:04:37Z")

</div>

Hello I want to rename some field without affect the other data. I tried with. input { elasticsearch { hosts =\> "localhost:9200" index =\> "services" size =\> 1 docinfo =\> true } } filter { …

---

## [Windows Elastic Agent System Integration not pulling Security or Application events](https://discuss.elastic.co/t/windows-elastic-agent-system-integration-not-pulling-security-or-application-events/296507)

<div class="topic-metadata">

**Author:** [@n2x4](https://discuss.elastic.co/u/n2x4)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 10:45pm UTC](https://discuss.elastic.co/t/windows-elastic-agent-system-integration-not-pulling-security-or-application-events/296507 "2022-02-23T22:45:42Z")

</div>

I have an Elastic Agent installed on a Windows Server and I've configured the system integration to pull Application, System, and Security logs. Only System logs are being collected and I can't find anything that indica…

---

## [Troubleshooting logstash configs](https://discuss.elastic.co/t/troubleshooting-logstash-configs/282842)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 8\
**Last updated:** [September 1, 2021, 6:14pm UTC](https://discuss.elastic.co/t/troubleshooting-logstash-configs/282842 "2021-09-01T18:14:11Z")

</div>

Hi all.. I've been working on ELK for about a couple of months now and I've been really liking it apart from the troubelshooting steps. I've just integrated a syslog for trial before going heavily onto production phase. …

---

## [Unable to start elasticsearch on centos 7 server](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos-7-server/254276)

<div class="topic-metadata">

**Author:** [@valsaraj\_pv](https://discuss.elastic.co/u/valsaraj_pv)\
**Replies:** 3\
**Last updated:** [November 5, 2020, 9:41pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos-7-server/254276 "2020-11-05T21:41:58Z")

</div>

After installation, we got following error when started the service: \[2020-11-04T07:20:12,233\]\[WARN \]\[o.e.b.Natives \] \[test\] unable to load JNA native support library, native methods will be disabled. java.lang.Unsati…

---

## [Configuring SSL Elasticsearch 3 node cluster](https://discuss.elastic.co/t/configuring-ssl-elasticsearch-3-node-cluster/231988)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 3\
**Last updated:** [May 13, 2020, 3:08pm UTC](https://discuss.elastic.co/t/configuring-ssl-elasticsearch-3-node-cluster/231988 "2020-05-13T15:08:32Z")

</div>

Hello Team, We have 3 node cluster as followes 3 Master-eligible nodes - node1,node2,node3 3 Data nodes - node1,node2,node3 Kibana is running on node3 We have to configure SSL in to make the communication secure. …

---

## [HA Elastic Stack, should I use a load balancer?](https://discuss.elastic.co/t/ha-elastic-stack-should-i-use-a-load-balancer/93236)

<div class="topic-metadata">

**Author:** [@stuffandthings](https://discuss.elastic.co/u/stuffandthings)\
**Replies:** 3\
**Last updated:** [July 15, 2017, 8:58pm UTC](https://discuss.elastic.co/t/ha-elastic-stack-should-i-use-a-load-balancer/93236 "2017-07-15T20:58:58Z")

</div>

I'm building up the architecture for our Elastic Stack. We'll be ingesting tons of log data, so I'm opting for 3 dedicated master nodes and 6 dedicated data nodes. I'm going to be using Logstash for the log ingestion a…

---

## [Unauthorized for user \[\_system\] error during bulk index](https://discuss.elastic.co/t/unauthorized-for-user--system-error-during-bulk-index/75853)

<div class="topic-metadata">

**Author:** [@CharlesZ](https://discuss.elastic.co/u/CharlesZ)\
**Replies:** 3\
**Last updated:** [February 28, 2017, 6:29pm UTC](https://discuss.elastic.co/t/unauthorized-for-user--system-error-during-bulk-index/75853 "2017-02-28T18:29:12Z")

</div>

After I upgraded ES stack to 5.2.1-1, I'm getting a lot of bulk index errors around 1 minute into the indexing process. Logs: 2017-02-21 09:37:56,293 Push failed with error (u'3 document(s) failed to index.', \[{u'ind…

---

## [Products using elasticsearch](https://discuss.elastic.co/t/products-using-elasticsearch/27927)

<div class="topic-metadata">

**Author:** [@puneetm](https://discuss.elastic.co/u/puneetm)\
**Replies:** 3\
**Last updated:** [August 24, 2015, 4:03pm UTC](https://discuss.elastic.co/t/products-using-elasticsearch/27927 "2015-08-24T16:03:19Z")

</div>

Hi, I am aware of few renowned deployments of elasticsearch like Wikipedia, Stack Overflow, Github etc. Is there any product which is also using elasticsearch as a bundled DB Thanks Puneet

---

## [Is now ElasticSearch supporting OAuth?](https://discuss.elastic.co/t/is-now-elasticsearch-supporting-oauth/8279)

<div class="topic-metadata">

**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\
**Replies:** 3\
**Last updated:** [July 3, 2012, 10:03pm UTC](https://discuss.elastic.co/t/is-now-elasticsearch-supporting-oauth/8279 "2012-07-03T22:03:00Z")

</div>

I have not got some plugins for oAuth support for ES. Do we really have some or some guides to integrate OAuth to ES?

---

## [Cannot access kibana](https://discuss.elastic.co/t/cannot-access-kibana/163936)

<div class="topic-metadata">

**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\
**Replies:** 1\
**Last updated:** [January 25, 2019, 5:26pm UTC](https://discuss.elastic.co/t/cannot-access-kibana/163936 "2019-01-25T17:26:49Z")

</div>

I'm using Bitnami ELK stack on Windows, and I'm unable to access kibana elastic search is running, but when I open "http://127.0.0.1:5601/elk/app/kibana" i'm getting this {"statusCode":404,"error":"Not Found","message":…

---

## [Spring data elasticsearch not connecting to elasticsearch 5 in elastic cloud - jar hell](https://discuss.elastic.co/t/spring-data-elasticsearch-not-connecting-to-elasticsearch-5-in-elastic-cloud-jar-hell/79487)

<div class="topic-metadata">

**Author:** [@Saravanan\_sathyamoo1](https://discuss.elastic.co/u/Saravanan_sathyamoo1)\
**Replies:** 1\
**Last updated:** [March 22, 2017, 8:51pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-not-connecting-to-elasticsearch-5-in-elastic-cloud-jar-hell/79487 "2017-03-22T20:51:26Z")

</div>

Hi, My cluster ID "003f13" I have created a cluster with elasticsearch 5.1.2 I am trying to connect to this cluster from spring data and im facing jar hell with lots of class not found exceptions. Can you please give me …

---

## [Compare a value from current index against the previous day](https://discuss.elastic.co/t/compare-a-value-from-current-index-against-the-previous-day/43918)

<div class="topic-metadata">

**Author:** [@mick66](https://discuss.elastic.co/u/mick66)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 4:21pm UTC](https://discuss.elastic.co/t/compare-a-value-from-current-index-against-the-previous-day/43918 "2016-03-09T16:21:37Z")

</div>

I have an overnight process that creates a daily index at 02:00 : myindex-YYYY-MM-DD This index has eight fields, but I am interested in three: server\_name id\_no result The value of result will be either PASS or FA…

---

## [ES 1.0 update - why are fields returns an array when fields parameter is used?](https://discuss.elastic.co/t/es-1-0-update-why-are-fields-returns-an-array-when-fields-parameter-is-used/15862)

<div class="topic-metadata">

**Author:** [@Jay\_Hilden](https://discuss.elastic.co/u/Jay_Hilden)\
**Replies:** 6\
**Last updated:** [April 25, 2014, 6:25pm UTC](https://discuss.elastic.co/t/es-1-0-update-why-are-fields-returns-an-array-when-fields-parameter-is-used/15862 "2014-04-25T18:25:23Z")

</div>

I was reading the documentation on the updated 1.0 release and saw the following: "Field values, in response to the fields parameter, are now always returned as arrays. A field could have single or multiple valu…

---

## [Secure between Logstash and Filebeat - File does not contain valid private key](https://discuss.elastic.co/t/secure-between-logstash-and-filebeat-file-does-not-contain-valid-private-key/305806)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 1:20pm UTC](https://discuss.elastic.co/t/secure-between-logstash-and-filebeat-file-does-not-contain-valid-private-key/305806 "2022-05-30T13:20:59Z")

</div>

I am trying to secure between Filebeat and Logstash. However, I do encounter some difficulties. Without SSL the connection does work. First I created with the Elasticsearch-certuitil a CA. C:\\PATH\\elasticsearch-8.0.1\>b…

---

## [Elasticsearch can't setup password](https://discuss.elastic.co/t/elasticsearch-cant-setup-password/197814)

<div class="topic-metadata">

**Author:** [@111202](https://discuss.elastic.co/u/111202)\
**Replies:** 2\
**Last updated:** [September 20, 2019, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-cant-setup-password/197814 "2019-09-20T06:22:53Z")

</div>

Hello, I'm newbie for elasticsearch7.3 I got a problem , when I setting xpack SSL for my es service it is running ok, I can connect with my browser then show account/password alert, But when I wanna use elasticsearc…

---

## [Split "event\_data" to only show the original data field](https://discuss.elastic.co/t/split-event-data-to-only-show-the-original-data-field/78561)

<div class="topic-metadata">

**Author:** [@peanut](https://discuss.elastic.co/u/peanut)\
**Replies:** 2\
**Last updated:** [March 16, 2017, 10:43pm UTC](https://discuss.elastic.co/t/split-event-data-to-only-show-the-original-data-field/78561 "2017-03-16T22:43:24Z")

</div>

Good afternoon elastic community, Is it best practice to mutate all the fields with the "event\_data" attached to it to its original data field name? If so, what is the easiest way to do it in a filter? I am forwarding …

---

## [Issue with app search (download) release -- not quite a connection issue](https://discuss.elastic.co/t/issue-with-app-search-download-release-not-quite-a-connection-issue/191249)

<div class="topic-metadata">

**Author:** [@dhrp](https://discuss.elastic.co/u/dhrp)\
**Replies:** 5\
**Last updated:** [July 19, 2019, 9:28pm UTC](https://discuss.elastic.co/t/issue-with-app-search-download-release-not-quite-a-connection-issue/191249 "2019-07-19T21:28:06Z")

</div>

I'm interested in trying out app-search self hosted, but I'm having trouble getting started. I can submit an object using past JSON or upload. In the logs this is all well received. But then App search keeps returning …

---

## [Login to kibana with security enabled bypassing login form](https://discuss.elastic.co/t/login-to-kibana-with-security-enabled-bypassing-login-form/204248)

<div class="topic-metadata">

**Author:** [@boubakr](https://discuss.elastic.co/u/boubakr)\
**Replies:** 5\
**Last updated:** [October 21, 2019, 2:20pm UTC](https://discuss.elastic.co/t/login-to-kibana-with-security-enabled-bypassing-login-form/204248 "2019-10-21T14:20:36Z")

</div>

Is there a way to use something like digest access authentication (or base authentication, I know, it is an horrible way, but I said "like") to login to kibana bypassing the login form? I've a web application with authe…

---

## [Filebeat is not sending logs to Elasticsearch](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elasticsearch/358322)

<div class="topic-metadata">

**Author:** [@TflGustavo](https://discuss.elastic.co/u/TflGustavo)\
**Replies:** 4\
**Last updated:** [April 28, 2024, 7:29pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elasticsearch/358322 "2024-04-28T19:29:52Z")

</div>

Hello! I created a Spring application and now I'm trying to use Filebeat to send this application's logs to Elasticsearch, so that I can view the information in Kibana. The problem is that even though I configure the f…

---

## [Gsub processor in ingest pipeline cannot substitute a pattern into newline](https://discuss.elastic.co/t/gsub-processor-in-ingest-pipeline-cannot-substitute-a-pattern-into-newline/323151)

<div class="topic-metadata">

**Author:** [@andreatera](https://discuss.elastic.co/u/andreatera)\
**Replies:** 4\
**Last updated:** [January 16, 2023, 9:39am UTC](https://discuss.elastic.co/t/gsub-processor-in-ingest-pipeline-cannot-substitute-a-pattern-into-newline/323151 "2023-01-16T09:39:17Z")

</div>

Hello there, since we are moving from logstash pipeline into ingest pipeline we had to rewrite our gsub pattern from logstash into ingest processors. Our use case is simple, replace the unicode \\u2028 into a newline ch…

---

## [Using a single Life Cycle Policy for many Index Templates](https://discuss.elastic.co/t/using-a-single-life-cycle-policy-for-many-index-templates/311236)

<div class="topic-metadata">

**Author:** [@dturner](https://discuss.elastic.co/u/dturner)\
**Replies:** 4\
**Last updated:** [August 31, 2022, 8:03pm UTC](https://discuss.elastic.co/t/using-a-single-life-cycle-policy-for-many-index-templates/311236 "2022-08-31T20:03:55Z")

</div>

Hello, We are using Elastic agent with different policies for different integrations. This has created many index templates for these different data sources. Each one of these index templates is using a different index …

---

## [Questions related to transforms limitations](https://discuss.elastic.co/t/questions-related-to-transforms-limitations/277158)

<div class="topic-metadata">

**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 7:35am UTC](https://discuss.elastic.co/t/questions-related-to-transforms-limitations/277158 "2021-06-28T07:35:01Z")

</div>

Hello, I am experimenting Transforms and I would to confirm that the limitations below are true: Doc removal detection in source and reflection upon next sync. If a doc is removed at source the value remains in the de…

---

## [Visualize: Gateway Timeout](https://discuss.elastic.co/t/visualize-gateway-timeout/117385)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [February 7, 2018, 10:55pm UTC](https://discuss.elastic.co/t/visualize-gateway-timeout/117385 "2018-02-07T22:55:27Z")

</div>

I followed Using Kibana in a Production Environment | Kibana User Guide \[6.1\] | Elastic, yet still experiencing: Visualize: Gateway Timeout Please advise.

---

## [How can you search two fields? / How can you search multiple fields?](https://discuss.elastic.co/t/how-can-you-search-two-fields-how-can-you-search-multiple-fields/59596)

<div class="topic-metadata">

**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\
**Replies:** 4\
**Last updated:** [September 2, 2016, 6:21pm UTC](https://discuss.elastic.co/t/how-can-you-search-two-fields-how-can-you-search-multiple-fields/59596 "2016-09-02T18:21:12Z")

</div>

Let's say that we have the following CSV file : id,first\_name,last\_name,age 1,Lillian,Ross,20 2,Lillian,Perkins,23 3,Carl,Black,25 4,Raymond,Cruz,55 5,Jonathan,Kim,32 6,Judy,Berry,14 7,James,Matthews,24 8,Elizabeth,We…

---

## [Custom analyzer is Not effecting to the data of the mapping field,even though i added it to the mapping field](https://discuss.elastic.co/t/custom-analyzer-is-not-effecting-to-the-data-of-the-mapping-field-even-though-i-added-it-to-the-mapping-field/39052)

<div class="topic-metadata">

**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\
**Replies:** 4\
**Last updated:** [January 14, 2016, 7:09am UTC](https://discuss.elastic.co/t/custom-analyzer-is-not-effecting-to-the-data-of-the-mapping-field-even-though-i-added-it-to-the-mapping-field/39052 "2016-01-14T07:09:46Z")

</div>

Hi Everyone I am implementing custom analyzer using follwing example and adding that analyzer to the mapping filed. But that analyzer is not effecting to the mapping field. EXAMPLE: \*first creating analyzer in settin…

---

## [Logstash Plugin 1.5.3 offline installation](https://discuss.elastic.co/t/logstash-plugin-1-5-3-offline-installation/32899)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 4\
**Last updated:** [October 31, 2015, 12:30am UTC](https://discuss.elastic.co/t/logstash-plugin-1-5-3-offline-installation/32899 "2015-10-31T00:30:17Z")

</div>

As far i am aware that pre logstash 2.0 , none of the version supports offline installation of logstash plugins . Is it possible if i install the logstash plugin using plugin manager in a machine having internet connecti…

---

## [Unable to create scripted filed](https://discuss.elastic.co/t/unable-to-create-scripted-filed/269101)

<div class="topic-metadata">

**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\
**Replies:** 7\
**Last updated:** [April 2, 2021, 2:12pm UTC](https://discuss.elastic.co/t/unable-to-create-scripted-filed/269101 "2021-04-02T14:12:46Z")

</div>

Hi, I was trying to create an scripted field. Where I was implementing the following logic which is return true if IP is equal to Pi\_IP. ''' if (doc\['IP.kayword'\].value == doc\['Pi\_IP.keyword'\].value) { retrun "true"; …

---

## [SSLHandshakeException: No available authentication scheme](https://discuss.elastic.co/t/sslhandshakeexception-no-available-authentication-scheme/203961)

<div class="topic-metadata">

**Author:** [@Vikas\_Yadav](https://discuss.elastic.co/u/Vikas_Yadav)\
**Replies:** 1\
**Last updated:** [October 17, 2019, 4:59am UTC](https://discuss.elastic.co/t/sslhandshakeexception-no-available-authentication-scheme/203961 "2019-10-17T04:59:46Z")

</div>

\[SSLHandshakeException: No available authentication scheme\] tried to form a cluster of 2 nodes with basic security enabled getting this error on the master node

---

## [Grok filter cant split error message and java stacktrace into fields](https://discuss.elastic.co/t/grok-filter-cant-split-error-message-and-java-stacktrace-into-fields/88824)

<div class="topic-metadata">

**Author:** [@trousse](https://discuss.elastic.co/u/trousse)\
**Replies:** 1\
**Last updated:** [June 12, 2017, 7:33am UTC](https://discuss.elastic.co/t/grok-filter-cant-split-error-message-and-java-stacktrace-into-fields/88824 "2017-06-12T07:33:09Z")

</div>

i'm tryning that parse logs from a tomcat server which write javastacktrace after error like : "\[ERROR - 18:02:00.028, org.springframework.scheduling.support.TaskUtils$LoggingErrorHandler-95\] Unexpected error occurred…

---

## [Log4j2 syslog appender exception](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817)

<div class="topic-metadata">

**Author:** [@Raid\_Rohana](https://discuss.elastic.co/u/Raid_Rohana)\
**Replies:** 1\
**Last updated:** [May 23, 2017, 8:49am UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817 "2017-05-23T08:49:12Z")

</div>

HI Tried configuring elasticsearch 5x with syslog.appender using properties format. appender.syslog.type = syslog appender.syslog.name = syslog appender.syslog.format = RFC5424 appender.syslog.exceptionPattern = %throwab…

---

## [Mutate decimal to long with implied decimal places](https://discuss.elastic.co/t/mutate-decimal-to-long-with-implied-decimal-places/53694)

<div class="topic-metadata">

**Author:** [@mwilicap](https://discuss.elastic.co/u/mwilicap)\
**Replies:** 1\
**Last updated:** [July 4, 2016, 6:27pm UTC](https://discuss.elastic.co/t/mutate-decimal-to-long-with-implied-decimal-places/53694 "2016-07-04T18:27:08Z")

</div>

Hello. Is there a way in logstash to mutate an input field which is a string representation of a decimal (eg. "2387.74") to a long representation of the number with implied decimal places? Ie. We'd like to store that s…

---

## [Not able to install plugin. \<java.lang.classcastException\>](https://discuss.elastic.co/t/not-able-to-install-plugin-java-lang-classcastexception/54396)

<div class="topic-metadata">

**Author:** [@vinay992002](https://discuss.elastic.co/u/vinay992002)\
**Replies:** 7\
**Last updated:** [July 1, 2016, 6:37am UTC](https://discuss.elastic.co/t/not-able-to-install-plugin-java-lang-classcastexception/54396 "2016-07-01T06:37:05Z")

</div>

I am trying to install plugin (which is just a custom Analyzer) its giving this error com.analyzer.AnalyzerPlugin cannot be cast to org.elasticsearch.plugins.Plugin at org.elasticsearch.plugins.PluginsService.loadPlugi…

---

## [ElasticSearch RAM requirement](https://discuss.elastic.co/t/elasticsearch-ram-requirement/28657)

<div class="topic-metadata">

**Author:** [@Hayder\_Abbass](https://discuss.elastic.co/u/Hayder_Abbass)\
**Replies:** 1\
**Last updated:** [September 4, 2015, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-ram-requirement/28657 "2015-09-04T08:20:19Z")

</div>

Hello, We are thinking of using ElasticSearch to store log data with the following simple schema: { "data" : { "properties" : { "date": { "type" : "date", "format" …

---

## [How to get the one document's field and update with another document's fields\[transfer the field's value from one event to another event\]](https://discuss.elastic.co/t/how-to-get-the-one-documents-field-and-update-with-another-documents-fields-transfer-the-fields-value-from-one-event-to-another-event/183498)

<div class="topic-metadata">

**Author:** [@Md\_Iburahimsha\_S](https://discuss.elastic.co/u/Md_Iburahimsha_S)\
**Replies:** 3\
**Last updated:** [May 31, 2019, 11:09am UTC](https://discuss.elastic.co/t/how-to-get-the-one-documents-field-and-update-with-another-documents-fields-transfer-the-fields-value-from-one-event-to-another-event/183498 "2019-05-31T11:09:38Z")

</div>

I have a requirement to update the one document field based on the another document example \_id : 5 doesn't has any field like "risk", but another \_id : 4 has a field risk =\> high . \_id=\> 4 is the 1st event and followed…

---

## [Distinct multi search result](https://discuss.elastic.co/t/distinct-multi-search-result/46862)

<div class="topic-metadata">

**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\
**Replies:** 3\
**Last updated:** [March 29, 2017, 9:39am UTC](https://discuss.elastic.co/t/distinct-multi-search-result/46862 "2017-03-29T09:39:57Z")

</div>

Hi Guys, I use Elasticsearch 2.2 and when using Multi Search API, it's possible to distinct the result between the first search and the second search?? I have multi search query dsl like this {} {"query": {"filtered"…

---

## [\[v1.5.1\] Replica shard stuck initializing and can't read stats for primary shard](https://discuss.elastic.co/t/v1-5-1-replica-shard-stuck-initializing-and-cant-read-stats-for-primary-shard/29456)

<div class="topic-metadata">

**Author:** [@Nick\_Pentreath](https://discuss.elastic.co/u/Nick_Pentreath)\
**Replies:** 3\
**Last updated:** [September 20, 2015, 8:32am UTC](https://discuss.elastic.co/t/v1-5-1-replica-shard-stuck-initializing-and-cant-read-stats-for-primary-shard/29456 "2015-09-20T08:32:41Z")

</div>

Hi, \[Using Elasticsearch 1.5.1\] I currently have an issue where one of 5 primary shards in an index is stuck in INITIALIZING state (for well over 24 hrs now). The primary shard is marked as STARTED but I cannot retri…

---

## [Is there a limit to the number of indexes an ElasticSearch alias can point to?](https://discuss.elastic.co/t/is-there-a-limit-to-the-number-of-indexes-an-elasticsearch-alias-can-point-to/9817)

<div class="topic-metadata">

**Author:** [@jieren](https://discuss.elastic.co/u/jieren)\
**Replies:** 3\
**Last updated:** [November 27, 2012, 4:24am UTC](https://discuss.elastic.co/t/is-there-a-limit-to-the-number-of-indexes-an-elasticsearch-alias-can-point-to/9817 "2012-11-27T04:24:32Z")

</div>

I have this alias that I want to point to 60 indexes. At 21 indexes, I start getting Execution Rejected exceptions. Is this because of a 20 index limit in the alias API? Any help would be much appreciated, Ji…

[Previous page](https://discuss.elastic.co/top.md?page=1087&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1089&per_page=50&period=all)
