# Top

**URL:** https://discuss.elastic.co/top.md?page=1091&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1092

---

## [Ignore Error Messages](https://discuss.elastic.co/t/ignore-error-messages/145911)

<div class="topic-metadata">

**Author:** [@pavan1991](https://discuss.elastic.co/u/pavan1991)\
**Replies:** 3\
**Last updated:** [August 27, 2018, 11:02am UTC](https://discuss.elastic.co/t/ignore-error-messages/145911 "2018-08-27T11:02:19Z")

</div>

Team, While analyzing system log files in Linux, I came up with the below entry. How do we ignore such huge blocks in Logstash ?? I believe if we do not ignore this, it will be considered as a log and we will get inco…

---

## [Separate item URL for Visual Builder Table visualization](https://discuss.elastic.co/t/separate-item-url-for-visual-builder-table-visualization/135292)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 3\
**Last updated:** [June 13, 2018, 4:13am UTC](https://discuss.elastic.co/t/separate-item-url-for-visual-builder-table-visualization/135292 "2018-06-13T04:13:07Z")

</div>

Hi, I am using Visual Builder - Table visualization to display the available values AND make them as a hyperlink so that a user can click on them and opening a new dashboard with the filter set to the selected value. \[…

---

## [Filebeat not releasing file after it's been deleted](https://discuss.elastic.co/t/filebeat-not-releasing-file-after-its-been-deleted/125672)

<div class="topic-metadata">

**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 6:34am UTC](https://discuss.elastic.co/t/filebeat-not-releasing-file-after-its-been-deleted/125672 "2018-03-28T06:34:26Z")

</div>

Hello, I have a set of logs that are being rotated and then removed from a directory, but filebeat still has the harvester opened on said file and it is not letting go of it. In my directory you see the number of logs t…

---

## [Building v2.3.5 from source fails](https://discuss.elastic.co/t/building-v2-3-5-from-source-fails/62069)

<div class="topic-metadata">

**Author:** [@lukas\_vlcek](https://discuss.elastic.co/u/lukas_vlcek)\
**Replies:** 3\
**Last updated:** [October 4, 2016, 10:59am UTC](https://discuss.elastic.co/t/building-v2-3-5-from-source-fails/62069 "2016-10-04T10:59:27Z")

</div>

Hi, I am trying to build Elasticsearch v2.3.5 from sources but I am running into build error: The flow is pretty simple: $ git clone https://github.com/elastic/elasticsearch.git $ cd elasticsearch $ git checkout v2.…

---

## ["No mapping found for...in order to sort on" for date field](https://discuss.elastic.co/t/no-mapping-found-for-in-order-to-sort-on-for-date-field/125641)

<div class="topic-metadata">

**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\
**Replies:** 0\
**Last updated:** [March 26, 2018, 4:17pm UTC](https://discuss.elastic.co/t/no-mapping-found-for-in-order-to-sort-on-for-date-field/125641 "2018-03-26T16:17:14Z")

</div>

I am getting a "No mapping found for \<field\_name\> in order to sort on". For this index I have an index template that has a dynamic template for strings to map to a text and a keyword with a lowercase normalizer. I don't…

---

## [Get Percentage of two different SUM](https://discuss.elastic.co/t/get-percentage-of-two-different-sum/160814)

<div class="topic-metadata">

**Author:** [@RaulSan](https://discuss.elastic.co/u/RaulSan)\
**Replies:** 2\
**Last updated:** [December 19, 2018, 2:56am UTC](https://discuss.elastic.co/t/get-percentage-of-two-different-sum/160814 "2018-12-19T02:56:12Z")

</div>

Hi. I have a problem and I do not know how to solve it. I hope you can help me I have an index with thousands of documents. These documents have dozens of fields by which they can be filtered. In addition, one of these…

---

## [Fault tolerance not working when multiple hosts](https://discuss.elastic.co/t/fault-tolerance-not-working-when-multiple-hosts/178619)

<div class="topic-metadata">

**Author:** [@Igorr](https://discuss.elastic.co/u/Igorr)\
**Replies:** 0\
**Last updated:** [April 26, 2019, 10:11am UTC](https://discuss.elastic.co/t/fault-tolerance-not-working-when-multiple-hosts/178619 "2019-04-26T10:11:24Z")

</div>

Another host has been added to the logstash output to provide fault tolerance and load balancing. Output: elasticsearch { hosts =\> \["192.168.1.13:9200","192.168.1.19:9200"\] sniffing =\> "true" index =\> "stat…

---

## [Problema Index ElasticSearch](https://discuss.elastic.co/t/problema-index-elasticsearch/308673)

<div class="topic-metadata">

**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\
**Replies:** 4\
**Last updated:** [July 1, 2022, 7:21pm UTC](https://discuss.elastic.co/t/problema-index-elasticsearch/308673 "2022-07-01T19:21:21Z")

</div>

bom dia galera Estou praticamente com o mesmo problema deste tópico aqui porém a unica diferença no meu caso é que o disco encheu e agora não tenho mais acesso ao kibana, se alguém pudesse me auxiliar em como excluir …

---

## [Kibana Vega-Lite plots do not resize as expected](https://discuss.elastic.co/t/kibana-vega-lite-plots-do-not-resize-as-expected/299940)

<div class="topic-metadata">

**Author:** [@M\_Chiorboli](https://discuss.elastic.co/u/M_Chiorboli)\
**Replies:** 4\
**Last updated:** [March 17, 2022, 6:58pm UTC](https://discuss.elastic.co/t/kibana-vega-lite-plots-do-not-resize-as-expected/299940 "2022-03-17T18:58:21Z")

</div>

Hello, I had to rewrite some visualisations in Kibana with Veg-Lite because they are based on nested fields. I set the automated resize in the script: "autosize": { "type": "fit", "contains": "padding", …

---

## [Api/index\_patterns/\_fields\_for\_wildcard crashes Elasticsearch](https://discuss.elastic.co/t/api-index-patterns-fields-for-wildcard-crashes-elasticsearch/290908)

<div class="topic-metadata">

**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\
**Replies:** 4\
**Last updated:** [December 6, 2021, 11:34am UTC](https://discuss.elastic.co/t/api-index-patterns-fields-for-wildcard-crashes-elasticsearch/290908 "2021-12-06T11:34:13Z")

</div>

Hi everyone, Could not find any post relating the problem i encounter so i here it is: Since a while i am unable to use Discover tab in Kibana ; when i try to, it basically crashes the Elasticsearch coordinating node w…

---

## [How to sort by url's taking maximum response time from apache logs in Kibana](https://discuss.elastic.co/t/how-to-sort-by-urls-taking-maximum-response-time-from-apache-logs-in-kibana/182363)

<div class="topic-metadata">

**Author:** [@arjun\_purushotham](https://discuss.elastic.co/u/arjun_purushotham)\
**Replies:** 4\
**Last updated:** [May 27, 2019, 7:14am UTC](https://discuss.elastic.co/t/how-to-sort-by-urls-taking-maximum-response-time-from-apache-logs-in-kibana/182363 "2019-05-27T07:14:39Z")

</div>

I have taken Apache logs from my clusters and able to view in Kibana. I want to know top 10 Url's or API's which is taking maximum response time which is there in Apache log. Log Format: 106.51.65.169 - - \[23/May/2019:…

---

## [Mutate multiple fields from multiple tables](https://discuss.elastic.co/t/mutate-multiple-fields-from-multiple-tables/122775)

<div class="topic-metadata">

**Author:** [@jurquiza](https://discuss.elastic.co/u/jurquiza)\
**Replies:** 4\
**Last updated:** [April 9, 2018, 1:59pm UTC](https://discuss.elastic.co/t/mutate-multiple-fields-from-multiple-tables/122775 "2018-04-09T13:59:32Z")

</div>

Hi everyone! After some time of fighting with logstash i managed to insert my sql server database to elastic. Im having some trouble when im emitting a field that looks like a phone number(a field with a "-" character) …

---

## [X-pack installation to ELK stack](https://discuss.elastic.co/t/x-pack-installation-to-elk-stack/113944)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 4\
**Last updated:** [January 4, 2018, 12:16pm UTC](https://discuss.elastic.co/t/x-pack-installation-to-elk-stack/113944 "2018-01-04T12:16:43Z")

</div>

Hi All , i have a working ELK stack with Filebeat and kafka . I want to secure it with X-pack . I have gone through the documents but i am facing issue while implementing it . Can someone help on this ? i can share …

---

## [Packet Beat MongoDB and Kibana](https://discuss.elastic.co/t/packet-beat-mongodb-and-kibana/49534)

<div class="topic-metadata">

**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\
**Replies:** 4\
**Last updated:** [May 15, 2016, 12:06pm UTC](https://discuss.elastic.co/t/packet-beat-mongodb-and-kibana/49534 "2016-05-15T12:06:03Z")

</div>

Hello All, I am loaded packetbeat for Mongo DB index patterns to kibana , now how i link mongo db patterns to existing mongo db index ? Tnx in advance

---

## [Detections - Kibana](https://discuss.elastic.co/t/detections-kibana/275716)

<div class="topic-metadata">

**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\
**Replies:** 7\
**Last updated:** [June 13, 2021, 7:04pm UTC](https://discuss.elastic.co/t/detections-kibana/275716 "2021-06-13T19:04:31Z")

</div>

Hi, I am trying to use detection rules in Kibana. I am testing it on predefined rules under Security module. To be exact " User Account Creation" . I am using winlog to send out data to kibana. I see user creation event…

---

## [Logstash as syslog server - TCP is not working](https://discuss.elastic.co/t/logstash-as-syslog-server-tcp-is-not-working/217044)

<div class="topic-metadata">

**Author:** [@ptselios](https://discuss.elastic.co/u/ptselios)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 8:35am UTC](https://discuss.elastic.co/t/logstash-as-syslog-server-tcp-is-not-working/217044 "2020-01-31T08:35:34Z")

</div>

Hello, I am completely new to the ELK stack and I have just installed an ELK all-in-one machine for testing purposes. In our organization we want to send all syslog messages to logstash and then to ES. I have the follo…

---

## [Multi-index query and sorting by range per index](https://discuss.elastic.co/t/multi-index-query-and-sorting-by-range-per-index/108114)

<div class="topic-metadata">

**Author:** [@MaKro](https://discuss.elastic.co/u/MaKro)\
**Replies:** 1\
**Last updated:** [November 22, 2017, 10:54pm UTC](https://discuss.elastic.co/t/multi-index-query-and-sorting-by-range-per-index/108114 "2017-11-22T22:54:49Z")

</div>

Hi. I have multiple indices. I would like to execute search against them, and first of all: Group by index Sort results in the scope of the index by score. I'm wondering if the better idea is to send one query per in…

---

## [Elasticsearch 2.4.3 having issue with .docx file during creating document index](https://discuss.elastic.co/t/elasticsearch-2-4-3-having-issue-with-docx-file-during-creating-document-index/70448)

<div class="topic-metadata">

**Author:** [@Amar\_Srivastava](https://discuss.elastic.co/u/Amar_Srivastava)\
**Replies:** 7\
**Last updated:** [January 4, 2017, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-3-having-issue-with-docx-file-during-creating-document-index/70448 "2017-01-04T11:22:57Z")

</div>

Thanks in advance I am new in elasticsearch and using elasticsearch 2.4.3. When I am indexing documents then .doc, pdf,txt,xls is working fine but when I tried with .docx file then it is creating issue. Below are res…

---

## [Filebeat how to get stats of number of events/s, mb/s, etc send by filebeat?](https://discuss.elastic.co/t/filebeat-how-to-get-stats-of-number-of-events-s-mb-s-etc-send-by-filebeat/61023)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 1\
**Last updated:** [September 21, 2016, 8:46am UTC](https://discuss.elastic.co/t/filebeat-how-to-get-stats-of-number-of-events-s-mb-s-etc-send-by-filebeat/61023 "2016-09-21T08:46:08Z")

</div>

It is possible to get some stats on filebeat about how many events/s, bandwith mb/s, size of logs is send by a server ever day etc ?

---

## [Could not get stored percolator fields searchable (ES 5.0.0.alpha4)](https://discuss.elastic.co/t/could-not-get-stored-percolator-fields-searchable-es-5-0-0-alpha4/55175)

<div class="topic-metadata">

**Author:** [@mumpi](https://discuss.elastic.co/u/mumpi)\
**Replies:** 7\
**Last updated:** [July 13, 2016, 1:45pm UTC](https://discuss.elastic.co/t/could-not-get-stored-percolator-fields-searchable-es-5-0-0-alpha4/55175 "2016-07-13T13:45:40Z")

</div>

Under ES 2 i have an application for maintaining stored percolator documents. The percolator query-field and subfields are indexed to \_all. That's fine because percolator documents to edit should be found by metadata as …

---

## [Java client with minimal dependencies](https://discuss.elastic.co/t/java-client-with-minimal-dependencies/41445)

<div class="topic-metadata">

**Author:** [@Shawn\_Johnson](https://discuss.elastic.co/u/Shawn_Johnson)\
**Replies:** 1\
**Last updated:** [February 11, 2016, 6:28am UTC](https://discuss.elastic.co/t/java-client-with-minimal-dependencies/41445 "2016-02-11T06:28:48Z")

</div>

I'm using Ivy for dependency management (yep, I'm the one) instead of Maven. I just want to see if I can trim my dependencies at all for a simple Node Client? Namely the whole Ivy config to Maven scope thing is a bit c…

---

## [Bug: No Misp event data send to Kibana when Threat intel module used](https://discuss.elastic.co/t/bug-no-misp-event-data-send-to-kibana-when-threat-intel-module-used/327979)

<div class="topic-metadata">

**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\
**Replies:** 5\
**Last updated:** [March 22, 2023, 2:24pm UTC](https://discuss.elastic.co/t/bug-no-misp-event-data-send-to-kibana-when-threat-intel-module-used/327979 "2023-03-22T14:24:03Z")

</div>

Hello, I'm trying to integrate IOCs from MISP to Elastic stack (ELK) using the Filebeat Threat intel module. I'm receiving event in Analytics Discover panel of Kibana with filebeat-\* toggle on: (see below image) B…

---

## [Automatic data ingestion in logstash](https://discuss.elastic.co/t/automatic-data-ingestion-in-logstash/275071)

<div class="topic-metadata">

**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\
**Replies:** 5\
**Last updated:** [June 9, 2021, 8:44am UTC](https://discuss.elastic.co/t/automatic-data-ingestion-in-logstash/275071 "2021-06-09T08:44:00Z")

</div>

Hello community, This thread is regarding the automate of ingestion of data in logstash. I have created a python script in which I have written the command for the logstash data ingestion. The python script is also auto…

---

## [Significant term aggregation on nested query](https://discuss.elastic.co/t/significant-term-aggregation-on-nested-query/85392)

<div class="topic-metadata">

**Author:** [@geppo](https://discuss.elastic.co/u/geppo)\
**Replies:** 5\
**Last updated:** [May 11, 2017, 2:10pm UTC](https://discuss.elastic.co/t/significant-term-aggregation-on-nested-query/85392 "2017-05-11T14:10:20Z")

</div>

In my index I have indicized 2 times a text: the first field, called keywordtext, represents the entire text as keyword datatype, the second one, called sentences, is a nested datatype with the text divided into sentence…

---

## [Config files unable to acess env variable value in Ubuntu](https://discuss.elastic.co/t/config-files-unable-to-acess-env-variable-value-in-ubuntu/69427)

<div class="topic-metadata">

**Author:** [@ezequielo](https://discuss.elastic.co/u/ezequielo)\
**Replies:** 5\
**Last updated:** [December 20, 2016, 9:17am UTC](https://discuss.elastic.co/t/config-files-unable-to-acess-env-variable-value-in-ubuntu/69427 "2016-12-20T09:17:36Z")

</div>

I am trying to use environment variables so I don't need to change my config files for every environment. So far, in my local Windows environment I was able to do it without problems. But it seems like in Linux/ubuntu th…

---

## [Logstash Grok Pattern Watchguard Firewall](https://discuss.elastic.co/t/logstash-grok-pattern-watchguard-firewall/342317)

<div class="topic-metadata">

**Author:** [@Simon7](https://discuss.elastic.co/u/Simon7)\
**Replies:** 6\
**Last updated:** [September 15, 2023, 5:22am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-watchguard-firewall/342317 "2023-09-15T05:22:41Z")

</div>

Hey Guys, this is my first topic here in this forum. I have established an Elasticsearch log management in our company. I'm having a bit of trouble with the grok pattern. If I can't use integrations, I need to create m…

---

## [How can I get filtered unique values?](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 10:12pm UTC](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024 "2021-01-06T22:12:11Z")

</div>

Hi I've been trying to get unique values of node whose utilization is greater than 1, but I cant get it working, below is one of the ways I have tried without success. GET metrics\*/\_search { "size": "0", "aggs": { …

---

## [Python 3.6 and SSL issues](https://discuss.elastic.co/t/python-3-6-and-ssl-issues/183183)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 2\
**Last updated:** [May 29, 2019, 11:18pm UTC](https://discuss.elastic.co/t/python-3-6-and-ssl-issues/183183 "2019-05-29T23:18:18Z")

</div>

Hello, I keep on getting the following error elasticsearch.exceptions.SSLError: ConnectionError(\[SSL: CERTIFICATE\_VERIFY\_FAILED\] certificate verify failed (\_ssl.c:847)) caused by: SSLError(\[SSL: CERTIFICATE\_VERIFY\_FAIL…

---

## [Invalid FieldReference with nested fields](https://discuss.elastic.co/t/invalid-fieldreference-with-nested-fields/183361)

<div class="topic-metadata">

**Author:** [@ocabj](https://discuss.elastic.co/u/ocabj)\
**Replies:** 2\
**Last updated:** [May 29, 2019, 4:28pm UTC](https://discuss.elastic.co/t/invalid-fieldreference-with-nested-fields/183361 "2019-05-29T16:28:13Z")

</div>

So I'm sending a log file to logstash via filebeat where the log file events are written out in json. Logstash is taking them and inserting them into elasticsearch just fine from what I can tell, where various keys are …

---

## [Curator excution error on Elasticstack 6.2.4](https://discuss.elastic.co/t/curator-excution-error-on-elasticstack-6-2-4/130008)

<div class="topic-metadata">

**Author:** [@matsgth](https://discuss.elastic.co/u/matsgth)\
**Replies:** 2\
**Last updated:** [May 1, 2018, 2:34am UTC](https://discuss.elastic.co/t/curator-excution-error-on-elasticstack-6-2-4/130008 "2018-05-01T02:34:28Z")

</div>

Hello I am learning Elasticstack, greate tools! Are there any good way to use “curator” to delete old data on Elasticstack 6.2.4. Whats happens I Install Elasticstack 6.2.4 with apt-get on Debian 9, work well! Then…

---

## [Documentation Java API for Graph](https://discuss.elastic.co/t/documentation-java-api-for-graph/75404)

<div class="topic-metadata">

**Author:** [@David\_she](https://discuss.elastic.co/u/David_she)\
**Replies:** 2\
**Last updated:** [February 17, 2017, 10:23pm UTC](https://discuss.elastic.co/t/documentation-java-api-for-graph/75404 "2017-02-17T22:23:11Z")

</div>

Hi, Is there any documentation for using the Java API with graph. I've managed to do a basic search using the example kindly supplied by Mark - https://discuss.elastic.co/t/java-api-for-graph/48076 However I'd like to,…

---

## [Need Help -- How to Provide Security to "transport.tcp.port \[9300-9400\]"](https://discuss.elastic.co/t/need-help-how-to-provide-security-to-transport-tcp-port-9300-9400/14806)

<div class="topic-metadata">

**Author:** [@mohammad\_rafi\_g](https://discuss.elastic.co/u/mohammad_rafi_g)\
**Replies:** 2\
**Last updated:** [December 11, 2013, 8:49am UTC](https://discuss.elastic.co/t/need-help-how-to-provide-security-to-transport-tcp-port-9300-9400/14806 "2013-12-11T08:49:46Z")

</div>

Hi to All, We are using elasticsearch-0.20.5 Version and it is running on Linux Server. Now, We need to provide Security to our elasticsearch instance so that with out Authentication, no one can Hit Our elasticse…

---

## [I can not use geo\_point latitude longitude from my spring application](https://discuss.elastic.co/t/i-can-not-use-geo-point-latitude-longitude-from-my-spring-application/173995)

<div class="topic-metadata">

**Author:** [@Ulpcan](https://discuss.elastic.co/u/Ulpcan)\
**Replies:** 1\
**Last updated:** [March 29, 2019, 1:58pm UTC](https://discuss.elastic.co/t/i-can-not-use-geo-point-latitude-longitude-from-my-spring-application/173995 "2019-03-29T13:58:49Z")

</div>

I want to create index in ElasticSearch with configuration. I want to use geo distance query in elasticSearch I have a java class and I am using GeoPoint object that ElasticSearch has and which is from: org.elasticsearc…

---

## [Elastic Endpoint: securing elasticsearch (port 9200) server public access from brute force attacks](https://discuss.elastic.co/t/elastic-endpoint-securing-elasticsearch-port-9200-server-public-access-from-brute-force-attacks/306043)

<div class="topic-metadata">

**Author:** [@raymondbagats](https://discuss.elastic.co/u/raymondbagats)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 4:06pm UTC](https://discuss.elastic.co/t/elastic-endpoint-securing-elasticsearch-port-9200-server-public-access-from-brute-force-attacks/306043 "2022-06-02T16:06:30Z")

</div>

Hi team, My elastic stack is currently working and endpoint security is working and is being managed by fleet. I'm planning to expose port 8220 and 9200 so my mobile endpoints can search the server when outside the comp…

---

## [Elasticsearch 7.9.3 - exceptions of data insertions](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 8\
**Last updated:** [December 10, 2020, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052 "2020-12-10T11:22:01Z")

</div>

Hello, Recently I have upgraded our cluster from 7.5.2 to 7.9.3, and I noticed that there are some exceptions which were available in the elasticsearch log before the upgrade but now are gone. Some examples: \[2020-11-…

---

## [How to take JMap dump inside elasticsearch docker container?](https://discuss.elastic.co/t/how-to-take-jmap-dump-inside-elasticsearch-docker-container/171363)

<div class="topic-metadata">

**Author:** [@karthikeayan](https://discuss.elastic.co/u/karthikeayan)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 9:21am UTC](https://discuss.elastic.co/t/how-to-take-jmap-dump-inside-elasticsearch-docker-container/171363 "2019-03-08T09:21:56Z")

</div>

I am running elasticsearch using docker container, and i want to take the heap dump of the elasticsearch. When I exec inside the container, I couldn't find jmap inside it. I tried installing openjdk8 package since the …

---

## [Logstash getting fileds from another event](https://discuss.elastic.co/t/logstash-getting-fileds-from-another-event/146865)

<div class="topic-metadata">

**Author:** [@vasudevan](https://discuss.elastic.co/u/vasudevan)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 1:10pm UTC](https://discuss.elastic.co/t/logstash-getting-fileds-from-another-event/146865 "2018-09-04T13:10:36Z")

</div>

My Logstash config: input { beats { port =\> 5002 } } filter { grok { add\_tag =\> \[ "first" \] match =\> { "message" =\> "". .definitionName": "(?\<build\_DefinitionName\>. ?)"" } } grok { add\_tag =\> \[ "first" \] ma…

---

## [Elasticsearch give me parsing error : 400](https://discuss.elastic.co/t/elasticsearch-give-me-parsing-error-400/106455)

<div class="topic-metadata">

**Author:** [@anandkanabar](https://discuss.elastic.co/u/anandkanabar)\
**Replies:** 3\
**Last updated:** [November 7, 2017, 8:11am UTC](https://discuss.elastic.co/t/elasticsearch-give-me-parsing-error-400/106455 "2017-11-07T08:11:02Z")

</div>

{ "error": "\[400\] {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"no \[query\] registered for \[filtered\]","line":1,"col":35}\],"type":"parsing\_exception","reason":"no \[query\] registered for \[filtered\]","line"…

---

## [Machine Learning - Lab 2 - Section 8](https://discuss.elastic.co/t/machine-learning-lab-2-section-8/101398)

<div class="topic-metadata">

**Author:** [@josh\_jacques](https://discuss.elastic.co/u/josh_jacques)\
**Replies:** 3\
**Last updated:** [September 25, 2017, 5:07pm UTC](https://discuss.elastic.co/t/machine-learning-lab-2-section-8/101398 "2017-09-25T17:07:51Z")

</div>

I've created a "Single Metric Job", but the "Processed records" only reported 240 records instead of the expected 86,275. I realize this is vague, but anything obvious I could be missing here. I do see 86,275 records i…

---

## [How to define metric's @timestamp from Data collection side(which is beat side)?](https://discuss.elastic.co/t/how-to-define-metrics-timestamp-from-data-collection-side-which-is-beat-side/100500)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 3\
**Last updated:** [September 22, 2017, 6:26am UTC](https://discuss.elastic.co/t/how-to-define-metrics-timestamp-from-data-collection-side-which-is-beat-side/100500 "2017-09-22T06:26:11Z")

</div>

Dear folks, Recently I've been working on customizing beat with bash to generate the json data that logstash needed instead of to write own beat with go. Cuz I'm not the go expert. I'm good to implement customizing be…

---

## [Using TransportClient within ingest plugin](https://discuss.elastic.co/t/using-transportclient-within-ingest-plugin/78370)

<div class="topic-metadata">

**Author:** [@mkalakota](https://discuss.elastic.co/u/mkalakota)\
**Replies:** 3\
**Last updated:** [March 14, 2017, 9:03am UTC](https://discuss.elastic.co/t/using-transportclient-within-ingest-plugin/78370 "2017-03-14T09:03:40Z")

</div>

Hi, I have two indices. One index is populated with data. And from other index, when data is injected, I am calling index data (where data is populated) using transport client (via an inject plugin). When I try to use …

---

## [How to decrease url dashboard url response in Kibana 4.\*](https://discuss.elastic.co/t/how-to-decrease-url-dashboard-url-response-in-kibana-4/64159)

<div class="topic-metadata">

**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\
**Replies:** 3\
**Last updated:** [November 1, 2016, 4:22pm UTC](https://discuss.elastic.co/t/how-to-decrease-url-dashboard-url-response-in-kibana-4/64159 "2016-11-01T16:22:07Z")

</div>

We have always this response when we call dashboard : https://127.0.0.1:5601/app/kibana#/dashboard/b945c97278db7c89e9497d4ede70e0fa82ec3ffa?embed&\_g=%28refreshInterval:%28display:Off,pause:!f,value:0%29,time:%28from:n…

---

## [Changing beat.hostname to not\_analyzed](https://discuss.elastic.co/t/changing-beat-hostname-to-not-analyzed/61310)

<div class="topic-metadata">

**Author:** [@tiberiu88](https://discuss.elastic.co/u/tiberiu88)\
**Replies:** 3\
**Last updated:** [September 22, 2016, 9:20pm UTC](https://discuss.elastic.co/t/changing-beat-hostname-to-not-analyzed/61310 "2016-09-22T21:20:34Z")

</div>

Hi, I've been trying to solve this issue all day, no solutions online work for me. When using topbeat (or another beat), the beat.hostname field (string), comes up as analyzed, screwing up the graphs. I saw that …

---

## [Java Out Of Memory error while indexing data into elasticsearch](https://discuss.elastic.co/t/java-out-of-memory-error-while-indexing-data-into-elasticsearch/25062)

<div class="topic-metadata">

**Author:** [@Shishir\_Shikarkhane](https://discuss.elastic.co/u/Shishir_Shikarkhane)\
**Replies:** 3\
**Last updated:** [July 7, 2015, 5:01pm UTC](https://discuss.elastic.co/t/java-out-of-memory-error-while-indexing-data-into-elasticsearch/25062 "2015-07-07T17:01:35Z")

</div>

Hello , We are facing Java OOM issue while indexing data into elasticsearch . We are reading close to 33 million records with 36 columns from Oracle database .We have broken data into 32 threads with every thread load…

---

## [Can I set default sorting for queries?](https://discuss.elastic.co/t/can-i-set-default-sorting-for-queries/280074)

<div class="topic-metadata">

**Author:** [@reka.gay](https://discuss.elastic.co/u/reka.gay)\
**Replies:** 4\
**Last updated:** [August 9, 2021, 6:04am UTC](https://discuss.elastic.co/t/can-i-set-default-sorting-for-queries/280074 "2021-08-09T06:04:34Z")

</div>

I know that sorting is based on relevance if no other sorting is defined - and that's how I would like to have it. However, when my search is facet-only, the score of each result is 1 and I'm not quite sure how the resu…

---

## [Search for terms containing hyphen (-) on AWS elasticsearch](https://discuss.elastic.co/t/search-for-terms-containing-hyphen-on-aws-elasticsearch/142864)

<div class="topic-metadata">

**Author:** [@\_Levi](https://discuss.elastic.co/u/_Levi)\
**Replies:** 4\
**Last updated:** [August 6, 2018, 10:21am UTC](https://discuss.elastic.co/t/search-for-terms-containing-hyphen-on-aws-elasticsearch/142864 "2018-08-06T10:21:48Z")

</div>

I just read the article about : How to search for terms containing hyphen (-) on \_all field?, it is required to do /\_close /\_settings /\_open operations, but when I do in AWS elasticsearch, I can't update the settings of…

---

## [There is no documentation for "Hadoop as repository"](https://discuss.elastic.co/t/there-is-no-documentation-for-hadoop-as-repository/48028)

<div class="topic-metadata">

**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\
**Replies:** 4\
**Last updated:** [May 3, 2017, 2:16pm UTC](https://discuss.elastic.co/t/there-is-no-documentation-for-hadoop-as-repository/48028 "2017-05-03T14:16:23Z")

</div>

Hi Team, I am searching for documentation for "'Hadoop' as repository for Elasticsearch". I am searching in preface page, i.e., http://www.elasticsearch.org/guide/en/elasticsearch/hadoop/current/configuration.html#\_…

---

## [Summarize elasticsearch data over the time](https://discuss.elastic.co/t/summarize-elasticsearch-data-over-the-time/25853)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 4\
**Last updated:** [September 21, 2016, 3:47am UTC](https://discuss.elastic.co/t/summarize-elasticsearch-data-over-the-time/25853 "2016-09-21T03:47:23Z")

</div>

Hi everyone, is there is a way to summarize data in the elasticsearch after some time? My application statistics data collects via the elasticsearch and I want to summarize data which is older than one month. I want dail…

---

## [@timestamp field not reflected after resetting server time!](https://discuss.elastic.co/t/timestamp-field-not-reflected-after-resetting-server-time/56179)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 4\
**Last updated:** [July 28, 2016, 1:24pm UTC](https://discuss.elastic.co/t/timestamp-field-not-reflected-after-resetting-server-time/56179 "2016-07-28T13:24:46Z")

</div>

I'm running both Logstash server and elasticsearch in same machine. After parsing the logs into ELS , I checked it through kibana where the data shown with 5 minutes delay. Then I found that the server time \[ NTP\] is …

---

## [How to chinesizie kibana?](https://discuss.elastic.co/t/how-to-chinesizie-kibana/41740)

<div class="topic-metadata">

**Author:** [@xx1595140265](https://discuss.elastic.co/u/xx1595140265)\
**Replies:** 4\
**Last updated:** [May 2, 2016, 5:05am UTC](https://discuss.elastic.co/t/how-to-chinesizie-kibana/41740 "2016-05-02T05:05:18Z")

</div>

Hello all! How to chinesizie kibana? I want to chinesizie the interface of this software , How should I begin, any good suggests?

[Previous page](https://discuss.elastic.co/top.md?page=1090&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1092&per_page=50&period=all)
