# Top

**URL:** https://discuss.elastic.co/top.md?page=1107&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1108

---

## [Display numbers on y-axis without metrics](https://discuss.elastic.co/t/display-numbers-on-y-axis-without-metrics/205057)

<div class="topic-metadata">

**Author:** [@maco](https://discuss.elastic.co/u/maco)\
**Replies:** 3\
**Last updated:** [October 25, 2019, 4:09pm UTC](https://discuss.elastic.co/t/display-numbers-on-y-axis-without-metrics/205057 "2019-10-25T16:09:17Z")

</div>

Hi, I'm new to Kibana and i have a problem that i cant display just number on y-axis. So i want to have on y-axis numbers like state of device \[0 = online,1 = shutdown, 2 = offline\] and on x-axis time. I want to make …

---

## [Multiple-pipelines](https://discuss.elastic.co/t/multiple-pipelines/109274)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 8:46am UTC](https://discuss.elastic.co/t/multiple-pipelines/109274 "2017-11-29T08:46:53Z")

</div>

Hi, Everything worked on 5.6 so I made a snapshot and updated to V.6.0. All services are running fine. I have winlogbeat sending logs to logstash and I have a Pfsense and other stuff comming in directly to logstash. D…

---

## [No data when custom timestamp is used for Time-field while adding new index](https://discuss.elastic.co/t/no-data-when-custom-timestamp-is-used-for-time-field-while-adding-new-index/77801)

<div class="topic-metadata">

**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\
**Replies:** 3\
**Last updated:** [March 9, 2017, 9:37am UTC](https://discuss.elastic.co/t/no-data-when-custom-timestamp-is-used-for-time-field-while-adding-new-index/77801 "2017-03-09T09:37:30Z")

</div>

Hi, In logstash, I am parsing timestamps from the log lines: Jan 30,12:49:56.785 INFO message 1 Jan 30,12:49:56.788 INFO message 2 and storing in the field add\_field =\> {"log\_timestamp" =\> "%{\[@metadata\]\[month\]} …

---

## [How can i configure hdfs repository with kerberos in a security hdfs cluster?](https://discuss.elastic.co/t/how-can-i-configure-hdfs-repository-with-kerberos-in-a-security-hdfs-cluster/74189)

<div class="topic-metadata">

**Author:** [@xy\_xin](https://discuss.elastic.co/u/xy_xin)\
**Replies:** 3\
**Last updated:** [February 15, 2017, 1:04am UTC](https://discuss.elastic.co/t/how-can-i-configure-hdfs-repository-with-kerberos-in-a-security-hdfs-cluster/74189 "2017-02-15T01:04:38Z")

</div>

Here is my settings, but it doesn't work (seems the same with repository-hdfs no work with Kerberos authenticate hdfs · Issue #921 · elastic/elasticsearch-hadoop · GitHub). { "type": "hdfs", "settings": { "path": "/…

---

## [Cluster\_block\_exception blocks all ingestion](https://discuss.elastic.co/t/cluster-block-exception-blocks-all-ingestion/258338)

<div class="topic-metadata">

**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\
**Replies:** 6\
**Last updated:** [December 11, 2020, 5:14pm UTC](https://discuss.elastic.co/t/cluster-block-exception-blocks-all-ingestion/258338 "2020-12-11T17:14:41Z")

</div>

Hello, We have a ELK 7.3.2 cluster with 3 nodes and almost 3 TB disk free. Also have Index lifecycle policy which force merge all indices older than 7 days Free Disk: ILP: We deployed filebeat to ingest some ol…

---

## [Search for substrings in specific order of appearance](https://discuss.elastic.co/t/search-for-substrings-in-specific-order-of-appearance/177841)

<div class="topic-metadata">

**Author:** [@sagilo](https://discuss.elastic.co/u/sagilo)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 3:11pm UTC](https://discuss.elastic.co/t/search-for-substrings-in-specific-order-of-appearance/177841 "2019-05-01T15:11:10Z")

</div>

Hi Is it possible to search for substrings in the same order as they appear in a text? I know I can run something like term:first AND second, but it will also return results where second appearing before first. I've …

---

## [Minimal interval = auto error](https://discuss.elastic.co/t/minimal-interval-auto-error/208074)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 4:29pm UTC](https://discuss.elastic.co/t/minimal-interval-auto-error/208074 "2019-11-15T16:29:35Z")

</div>

Hi, I am ingesting Cisco ASA logs via filebeats to logstash. I am now trying to convert the ASA Dashboard to my index. The format is in ECS and if I have modified the ASA querys to use my Index. Issue is now the visu…

---

## [Missing Metrics in Marvel 2.X compared to 1.X?](https://discuss.elastic.co/t/missing-metrics-in-marvel-2-x-compared-to-1-x/40999)

<div class="topic-metadata">

**Author:** [@bhatch](https://discuss.elastic.co/u/bhatch)\
**Replies:** 2\
**Last updated:** [February 4, 2016, 9:47pm UTC](https://discuss.elastic.co/t/missing-metrics-in-marvel-2-x-compared-to-1-x/40999 "2016-02-04T21:47:44Z")

</div>

Has anyone converted from Marvel 1.X to 2.X? We are currently on 1.X and are looking into upgrading so we spun up a small instance with the newest versions of ElasticSearch and Marvel (2.1.1 at the time). We then put in …

---

## [Apm java agent could not find or load main class](https://discuss.elastic.co/t/apm-java-agent-could-not-find-or-load-main-class/323484)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 5\
**Last updated:** [January 25, 2023, 9:45am UTC](https://discuss.elastic.co/t/apm-java-agent-could-not-find-or-load-main-class/323484 "2023-01-25T09:45:57Z")

</div>

hi, i am trying to mount an application in gke with java apm-agent, with the following dockerfile: FROM adoptopenjdk:11-jre-hotspot RUN export RUN apt-get -qq update \\ && apt-get install --no-install-recommends -y -…

---

## [Filebeat module ingest pipeline](https://discuss.elastic.co/t/filebeat-module-ingest-pipeline/323270)

<div class="topic-metadata">

**Author:** [@Daniel\_B](https://discuss.elastic.co/u/Daniel_B)\
**Replies:** 5\
**Last updated:** [January 24, 2023, 3:36pm UTC](https://discuss.elastic.co/t/filebeat-module-ingest-pipeline/323270 "2023-01-24T15:36:17Z")

</div>

I'm new to elastic. I'm using filebeat v8.5 and I have enabled some modules example: IIS, Checkpoint and few others which are working great. I also would like to create a new filebeat module for a specific device which …

---

## [Significant text aggregation with custom analyzer in Elasticsearch 6](https://discuss.elastic.co/t/significant-text-aggregation-with-custom-analyzer-in-elasticsearch-6/108253)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 5\
**Last updated:** [November 23, 2017, 12:44pm UTC](https://discuss.elastic.co/t/significant-text-aggregation-with-custom-analyzer-in-elasticsearch-6/108253 "2017-11-23T12:44:59Z")

</div>

Should SignificantText aggs work with a text field that has a custom analysis chain ? (Or the other mappings customisations I outline in the mappings segment below) I have a 'text' type field that I can't get buckets f…

---

## [Elasticsearch curator problem](https://discuss.elastic.co/t/elasticsearch-curator-problem/101975)

<div class="topic-metadata">

**Author:** [@Benoit\_Martin](https://discuss.elastic.co/u/Benoit_Martin)\
**Replies:** 5\
**Last updated:** [September 27, 2017, 3:48pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-problem/101975 "2017-09-27T15:48:01Z")

</div>

Hi, I use curator to delete older log. It's working for all index but that index name not working. %{\[@metadata\]\[beat\]}- --- # Remember, leave a key empty if there is no value. None will be a string, # not a Python…

---

## ["failed to check serialization" errors for SearchPlugin](https://discuss.elastic.co/t/failed-to-check-serialization-errors-for-searchplugin/75319)

<div class="topic-metadata">

**Author:** [@Daniel\_Penning](https://discuss.elastic.co/u/Daniel_Penning)\
**Replies:** 5\
**Last updated:** [February 17, 2017, 4:01pm UTC](https://discuss.elastic.co/t/failed-to-check-serialization-errors-for-searchplugin/75319 "2017-02-17T16:01:04Z")

</div>

I am currently working on upgrading an ES Plugin from 2.3 to 5.2. When running my unit tests i randomly get RuntimeExceptions when executing searches that use my own QueryBuilder. It looks like somehow the NamedWriteable…

---

## [Logstash Block in block in converge\_state](https://discuss.elastic.co/t/logstash-block-in-block-in-converge-state/214763)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 6:17am UTC](https://discuss.elastic.co/t/logstash-block-in-block-in-converge-state/214763 "2020-01-13T06:17:12Z")

</div>

Hi Below is my Logstash (7.2.0) conf file: input { http\_poller { urls =\> { snowsr =\> { url =\> "https://now.com/api/now/table/u\_service\_request?sysparm\_display\_value=true&sysparm\_exclude\_reference\_link=tr…

---

## [Remove elements/objects From Array in ElasticSearch Followed by Matching Query](https://discuss.elastic.co/t/remove-elements-objects-from-array-in-elasticsearch-followed-by-matching-query/124747)

<div class="topic-metadata">

**Author:** [@sandip179](https://discuss.elastic.co/u/sandip179)\
**Replies:** 0\
**Last updated:** [March 20, 2018, 11:38am UTC](https://discuss.elastic.co/t/remove-elements-objects-from-array-in-elasticsearch-followed-by-matching-query/124747 "2018-03-20T11:38:42Z")

</div>

I have below types documents. { "\_index": "example1", "\_type": "doc", "\_id": "8036", "\_score": 1, "\_source": { "user": "kimchy8036", "postDate": "2009-11-15T13:12:00", "location…

---

## [Logstashからsyslog転送されるときのフォーマット](https://discuss.elastic.co/t/logstash-syslog/235103)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 1\
**Last updated:** [June 3, 2020, 12:47pm UTC](https://discuss.elastic.co/t/logstash-syslog/235103 "2020-06-03T12:47:16Z")

</div>

logstashでoutputにsyslogを指定した際、転送先のサーバーでログに出力されるフォーマットの変更方法についてご教示ください ■実施内容 ●logstashのconfファイル input { file{ path =\> "/tmp/test.log" start\_position =\> "beginning" } } output{ syslog{ host =\> "XXXXXXXX.com" por…

---

## [Закрепить фильтр в Kibana](https://discuss.elastic.co/t/kibana/105046)

<div class="topic-metadata">

**Author:** [@ZaphordB](https://discuss.elastic.co/u/ZaphordB)\
**Replies:** 1\
**Last updated:** [October 24, 2017, 3:23pm UTC](https://discuss.elastic.co/t/kibana/105046 "2017-10-24T15:23:07Z")

</div>

Добрый день, коллеги. Помогите, пожалуйста, вот с какой задачей. Требуется отсортировывать все сообщения об ошибках (error в теле сообщения). Как это лучше реализовать? В Kibana можно настроить фильтр по содержимому л…

---

## [Snmptrap input sample messages](https://discuss.elastic.co/t/snmptrap-input-sample-messages/103257)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 8:22pm UTC](https://discuss.elastic.co/t/snmptrap-input-sample-messages/103257 "2017-10-11T20:22:39Z")

</div>

Hi, I am trying out Logstash's snmptrap input plugin to send snmptrap messages to Elasticsearch. I don't have SNMP agent installed on my machine. But, I am trying to generate sample SNMP trap messages using Netcat, but …

---

## [Relations Between Indices](https://discuss.elastic.co/t/relations-between-indices/75611)

<div class="topic-metadata">

**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\
**Replies:** 1\
**Last updated:** [February 18, 2017, 10:07pm UTC](https://discuss.elastic.co/t/relations-between-indices/75611 "2017-02-18T22:07:51Z")

</div>

Background Let's say I have 2 indices: Customers Index and Products Index. Each index has it's own responsibility and unique data, however I obviously want to store the relations between the two. Meaning that I want to …

---

## [Logstash log separation per pipeline doesn't work!](https://discuss.elastic.co/t/logstash-log-separation-per-pipeline-doesnt-work/324975)

<div class="topic-metadata">

**Author:** [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\
**Replies:** 8\
**Last updated:** [February 28, 2023, 6:57am UTC](https://discuss.elastic.co/t/logstash-log-separation-per-pipeline-doesnt-work/324975 "2023-02-28T06:57:58Z")

</div>

Hi guys. We use ELK version 8.4.2. on logstash, we have 15 pipelines. Now we need to separate the logs. There is a solution in the elastic document: This document says to insert 2 directives in logstash.yml that aut…

---

## [Part of the indices are created with this name "%{\[kubernetes\]\[namespace\]}"](https://discuss.elastic.co/t/part-of-the-indices-are-created-with-this-name-kubernetes-namespace/267426)

<div class="topic-metadata">

**Author:** [@doronshai](https://discuss.elastic.co/u/doronshai)\
**Replies:** 3\
**Last updated:** [March 18, 2021, 4:52pm UTC](https://discuss.elastic.co/t/part-of-the-indices-are-created-with-this-name-kubernetes-namespace/267426 "2021-03-18T16:52:29Z")

</div>

Hi Team, I am using this configuration for logstash: input { beats {port =\> 6600 type =\> "K4" codec =\> "json" } } filter { if \[type\] == "K4" { json {source =\> "message"} } } output { if \[type\] =…

---

## [Is it possible to make tables like in Excel?](https://discuss.elastic.co/t/is-it-possible-to-make-tables-like-in-excel/229652)

<div class="topic-metadata">

**Author:** [@Oggy](https://discuss.elastic.co/u/Oggy)\
**Replies:** 8\
**Last updated:** [May 18, 2020, 8:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-tables-like-in-excel/229652 "2020-05-18T20:43:22Z")

</div>

What I am interested in is replicating the look and functionality of excel sheets. So I would like a way for me to be able to set some columns do mathematical caculations on other fields, and to be able to simply chose a…

---

## [Drop empty message with character NULL \\x00](https://discuss.elastic.co/t/drop-empty-message-with-character-null-x00/224331)

<div class="topic-metadata">

**Author:** [@quangnguyen](https://discuss.elastic.co/u/quangnguyen)\
**Replies:** 3\
**Last updated:** [March 22, 2020, 9:54pm UTC](https://discuss.elastic.co/t/drop-empty-message-with-character-null-x00/224331 "2020-03-22T21:54:30Z")

</div>

Hello Community, i'm getting following log message what makes no sense to forward it in to output. The message contains only null character inside two qoutes "\\x00". How could i drop it with logstash filter? \[2020-03-2…

---

## [Manual activation of modules](https://discuss.elastic.co/t/manual-activation-of-modules/223382)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 3\
**Last updated:** [March 18, 2020, 2:33pm UTC](https://discuss.elastic.co/t/manual-activation-of-modules/223382 "2020-03-18T14:33:07Z")

</div>

I'm trying to understand howto manually pre-setup ingest pipelines for various wanted filebeat modules and configure modules to use such pipelines. Eg let's look at system module, this has two parts syslog + audit logs,…

---

## [Logstash config issue for a custom log file](https://discuss.elastic.co/t/logstash-config-issue-for-a-custom-log-file/138539)

<div class="topic-metadata">

**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\
**Replies:** 8\
**Last updated:** [July 6, 2018, 9:55am UTC](https://discuss.elastic.co/t/logstash-config-issue-for-a-custom-log-file/138539 "2018-07-06T09:55:14Z")

</div>

Hi There, I am a newbie to logstash and working on a grok pattern as below. I am only able to partially achieve my goal. Please help with my issue as described below; My logs look like; \[2018-06-28 11:49:41.257\] INF…

---

## [Using Embedded version of elastic gives this warning?](https://discuss.elastic.co/t/using-embedded-version-of-elastic-gives-this-warning/84299)

<div class="topic-metadata">

**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\
**Replies:** 8\
**Last updated:** [May 5, 2017, 2:34am UTC](https://discuss.elastic.co/t/using-embedded-version-of-elastic-gives-this-warning/84299 "2017-05-05T02:34:49Z")

</div>

version \[5.3.2-SNAPSHOT\] is a pre-release version of Elasticsearch and is not suitable for production I was not getting this in 5.2.2 Is there a work around?

---

## [Time(y axis) in timelion](https://discuss.elastic.co/t/time-y-axis-in-timelion/81810)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 3\
**Last updated:** [April 12, 2017, 12:00am UTC](https://discuss.elastic.co/t/time-y-axis-in-timelion/81810 "2017-04-12T00:00:11Z")

</div>

I have plotted date along x axis.Is there a way to plot time of format HH:mm in timelion along y axis.

---

## [Query to return documents where the list field in each document contains duplicate item values](https://discuss.elastic.co/t/query-to-return-documents-where-the-list-field-in-each-document-contains-duplicate-item-values/77277)

<div class="topic-metadata">

**Author:** [@agf](https://discuss.elastic.co/u/agf)\
**Replies:** 3\
**Last updated:** [March 8, 2017, 7:08am UTC](https://discuss.elastic.co/t/query-to-return-documents-where-the-list-field-in-each-document-contains-duplicate-item-values/77277 "2017-03-08T07:08:24Z")

</div>

I am wondering how to construct a query that can return documents where each contains a list field, but with duplicate values in that field. Here's an example setup: PUT nestedtest { "mappings": { "type": { …

---

## [Auto-complétion](https://discuss.elastic.co/t/auto-completion/1088)

<div class="topic-metadata">

**Author:** [@Jeje\_Pinot](https://discuss.elastic.co/u/Jeje_Pinot)\
**Replies:** 3\
**Last updated:** [May 26, 2015, 7:29am UTC](https://discuss.elastic.co/t/auto-completion/1088 "2015-05-26T07:29:56Z")

</div>

Bonjour, Je cherche à faire de l’auto-complétion sur des champs de type "attachment". J'ai suivis quelques tutos sur le web et j'en suis arrivé à un résultat de ce type: Requête: curl -X POST $ES\_HOST/$ES\_INDEX/$E…

---

## [Index template requires settings object even if its value is empty](https://discuss.elastic.co/t/index-template-requires-settings-object-even-if-its-value-is-empty/17891)

<div class="topic-metadata">

**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\
**Replies:** 3\
**Last updated:** [June 17, 2014, 12:54pm UTC](https://discuss.elastic.co/t/index-template-requires-settings-object-even-if-its-value-is-empty/17891 "2014-06-17T12:54:00Z")

</div>

I am not sure if this is a problem or if it's OK. Working with the ELK stack I have switched direction, and instead of locking down the Elasticsearch mappings I am now using its automatic mapping functions. And by…

---

## [Path.repo makes ES fail to start](https://discuss.elastic.co/t/path-repo-makes-es-fail-to-start/58482)

<div class="topic-metadata">

**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\
**Replies:** 4\
**Last updated:** [August 20, 2016, 8:11am UTC](https://discuss.elastic.co/t/path-repo-makes-es-fail-to-start/58482 "2016-08-20T08:11:56Z")

</div>

Hi, I'm trying to set the path.repo setting in the the es config. I'm using this line: path.repo: \["/tmp/backups"\] (with a space at the start of the line) But when I use it, ES fails to start. Are there any permissi…

---

## [Unable to decommission nodes from cluster](https://discuss.elastic.co/t/unable-to-decommission-nodes-from-cluster/1490)

<div class="topic-metadata">

**Author:** [@shkrajat](https://discuss.elastic.co/u/shkrajat)\
**Replies:** 4\
**Last updated:** [May 29, 2015, 7:28am UTC](https://discuss.elastic.co/t/unable-to-decommission-nodes-from-cluster/1490 "2015-05-29T07:28:14Z")

</div>

Hi all, I was running a cluster with 3 nodes, then I decided to replace these 3 nodes because they were under utilised. So I added 3 fresh nodes with lower performance (especially disk space). After the cluster stabi…

---

## [Inconsistent results (Preference = Custom (string) UserId)](https://discuss.elastic.co/t/inconsistent-results-preference-custom-string-userid/22823)

<div class="topic-metadata">

**Author:** [@andavar](https://discuss.elastic.co/u/andavar)\
**Replies:** 4\
**Last updated:** [March 31, 2015, 1:36am UTC](https://discuss.elastic.co/t/inconsistent-results-preference-custom-string-userid/22823 "2015-03-31T01:36:10Z")

</div>

Hi Elastic Users, We have 6 shards 2 replicas(3 nodes). While am searching in node1 it gave one result, then pass the query to node2 & 3 it gave different order. I tried preference = \_primary & \_primary\_first I…

---

## [Retrieving top N hits from nested documents across all matching documents](https://discuss.elastic.co/t/retrieving-top-n-hits-from-nested-documents-across-all-matching-documents/333485)

<div class="topic-metadata">

**Author:** [@Raja\_Sekhara\_Reddy\_K](https://discuss.elastic.co/u/Raja_Sekhara_Reddy_K)\
**Replies:** 0\
**Last updated:** [May 15, 2023, 4:06pm UTC](https://discuss.elastic.co/t/retrieving-top-n-hits-from-nested-documents-across-all-matching-documents/333485 "2023-05-15T16:06:32Z")

</div>

Hello, I'm currently working with an Elasticsearch index where each document contains a nested field embedingContent representing "chunks" of the document. Each chunk has its own vector embedding, and I want to perform …

---

## [Filter context strange results on ElasticSearch 6.3.0](https://discuss.elastic.co/t/filter-context-strange-results-on-elasticsearch-6-3-0/140886)

<div class="topic-metadata">

**Author:** [@cluengo](https://discuss.elastic.co/u/cluengo)\
**Replies:** 0\
**Last updated:** [July 20, 2018, 12:05pm UTC](https://discuss.elastic.co/t/filter-context-strange-results-on-elasticsearch-6-3-0/140886 "2018-07-20T12:05:31Z")

</div>

Hi all, I was checking why a terms query inside a nested query was taking so long, and realized that I got some strange results with 'profile'. The way I understand it, the "build\_scorer" field in the breakdown results …

---

## [How do i use external versions when using pipelines?](https://discuss.elastic.co/t/how-do-i-use-external-versions-when-using-pipelines/103981)

<div class="topic-metadata">

**Author:** [@Arian\_Dave\_Mabanag](https://discuss.elastic.co/u/Arian_Dave_Mabanag)\
**Replies:** 0\
**Last updated:** [October 14, 2017, 10:29am UTC](https://discuss.elastic.co/t/how-do-i-use-external-versions-when-using-pipelines/103981 "2017-10-14T10:29:45Z")

</div>

Im currently working on pushing logs to elasticsearch using filebeat. In order to index these docs to the preferred location, i use an ingester node. {"name":"mydoc","myDocId":"myId1","myDocType":"someType","myIndex":"s…

---

## [Async execution of reindex using transport client](https://discuss.elastic.co/t/async-execution-of-reindex-using-transport-client/100959)

<div class="topic-metadata">

**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 5:48am UTC](https://discuss.elastic.co/t/async-execution-of-reindex-using-transport-client/100959 "2017-09-19T05:48:04Z")

</div>

When we call the rest endpoint for reindexing with wait\_for\_completion=false, we get the task id to track the progress on the reindexing task later on. How can we achieve the same using Transport client from the Java co…

---

## [Adding a bootswatch theme to choice of kibana css themes](https://discuss.elastic.co/t/adding-a-bootswatch-theme-to-choice-of-kibana-css-themes/20253)

<div class="topic-metadata">

**Author:** [@Joey\_Nelson](https://discuss.elastic.co/u/Joey_Nelson)\
**Replies:** 0\
**Last updated:** [October 14, 2014, 11:29pm UTC](https://discuss.elastic.co/t/adding-a-bootswatch-theme-to-choice-of-kibana-css-themes/20253 "2014-10-14T23:29:58Z")

</div>

Does anyone have any clear instructions on how to do this or if it's possible. The customization instructions at bootswatch seem to escape me. http://bootswatch.com/help/ -- You received this message because you …

---

## [No data has been received from Heartbeat yet](https://discuss.elastic.co/t/no-data-has-been-received-from-heartbeat-yet/220448)

<div class="topic-metadata">

**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\
**Replies:** 2\
**Last updated:** [February 26, 2020, 5:58am UTC](https://discuss.elastic.co/t/no-data-has-been-received-from-heartbeat-yet/220448 "2020-02-26T05:58:33Z")

</div>

Hello, could you help me. Version 7.6.0, CentOS 7. Doesn't work Uptime Monitor. ~\]$ sudo heartbeat test config Config OK ~\]$ sudo heartbeat test output elasticsearch: http://host\_ip:9200... parse url... OK conne…

---

## [Configure oauth authentication in cerebro](https://discuss.elastic.co/t/configure-oauth-authentication-in-cerebro/210826)

<div class="topic-metadata">

**Author:** [@Veeresh\_Reddy](https://discuss.elastic.co/u/Veeresh_Reddy)\
**Replies:** 2\
**Last updated:** [December 6, 2019, 10:00am UTC](https://discuss.elastic.co/t/configure-oauth-authentication-in-cerebro/210826 "2019-12-06T10:00:47Z")

</div>

I would like to configure/enable oauth authentication for cerebro, can anyone let me know how to do it if that capability is available in cerebro?

---

## [Elasticsearch Service 7.4/7.3 wont start](https://discuss.elastic.co/t/elasticsearch-service-7-4-7-3-wont-start/202842)

<div class="topic-metadata">

**Author:** [@Mike31mSalus](https://discuss.elastic.co/u/Mike31mSalus)\
**Replies:** 2\
**Last updated:** [October 17, 2019, 6:36pm UTC](https://discuss.elastic.co/t/elasticsearch-service-7-4-7-3-wont-start/202842 "2019-10-17T18:36:29Z")

</div>

Fresh install on Windows Server 2016, Java jre-8u211x64. The install completes perfectly fine, but when i attempt to start the "Elasticsearch" service it looks like it is starting then stops. Below are the event logs of…

---

## [Must\_not field exists query returning documents with those fields excluded](https://discuss.elastic.co/t/must-not-field-exists-query-returning-documents-with-those-fields-excluded/132155)

<div class="topic-metadata">

**Author:** [@SergiSolet](https://discuss.elastic.co/u/SergiSolet)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 11:12am UTC](https://discuss.elastic.co/t/must-not-field-exists-query-returning-documents-with-those-fields-excluded/132155 "2018-05-18T11:12:24Z")

</div>

Hi all, I don't know if it is a bug, but it seems to me or I am missing something maybe too. I am performing a search query using the rest API of ES. I am using 5.6.8, the body query is the following (the involved part)…

---

## [Creating new field with logstash](https://discuss.elastic.co/t/creating-new-field-with-logstash/49194)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 2\
**Last updated:** [May 5, 2016, 5:03pm UTC](https://discuss.elastic.co/t/creating-new-field-with-logstash/49194 "2016-05-05T17:03:18Z")

</div>

I have a file named "Job Code.txt" job\_id=0001,description=Ship data from server to elknode1,result=OK job\_id=0002,description=Ship data from server to elknode2,result=Error: Msg... job\_id=0003,description=Ship data …

---

## [Document contains at least one immense term in field="REGIONS" (whose UTF8 e](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-regions-whose-utf8-e/38082)

<div class="topic-metadata">

**Author:** [@LDA-MAN](https://discuss.elastic.co/u/LDA-MAN)\
**Replies:** 2\
**Last updated:** [December 29, 2015, 4:37am UTC](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-regions-whose-utf8-e/38082 "2015-12-29T04:37:28Z")

</div>

when i build index for my data, a field not analyzed got this problem,who's length is too long? i fix it with ignore\_above but not seems better,the issue append again! this is my index mapping: .startObject("REGIONS") …

---

## [Query not returning correct result](https://discuss.elastic.co/t/query-not-returning-correct-result/25068)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 2\
**Last updated:** [July 7, 2015, 6:08pm UTC](https://discuss.elastic.co/t/query-not-returning-correct-result/25068 "2015-07-07T18:08:26Z")

</div>

My query below is returning an incorrect result. You can see that the "params" in the result do not perfectly match the terms params in the query. How do I craft my query so that the params must match perfectly? The qu…

---

## [X-opaque-id not displayed in search slow log](https://discuss.elastic.co/t/x-opaque-id-not-displayed-in-search-slow-log/282067)

<div class="topic-metadata">

**Author:** [@asgs](https://discuss.elastic.co/u/asgs)\
**Replies:** 6\
**Last updated:** [August 24, 2021, 8:19am UTC](https://discuss.elastic.co/t/x-opaque-id-not-displayed-in-search-slow-log/282067 "2021-08-24T08:19:19Z")

</div>

Hello. First of all, I want to mention that I have read the similar posts Cannot see user "id" in slowlogs (X-Opaque-ID) and Elasticsearch X-Opaque-Id Not in application.log Exception but there are no responses there, so…

---

## [Elasticsearch 7.0 recent installed stop after 1min 5s](https://discuss.elastic.co/t/elasticsearch-7-0-recent-installed-stop-after-1min-5s/179118)

<div class="topic-metadata">

**Author:** [@luisjoelqs](https://discuss.elastic.co/u/luisjoelqs)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-recent-installed-stop-after-1min-5s/179118 "2019-05-01T15:17:29Z")

</div>

I have installed elasticsearch 7.0 in a VM dedicated for test of the version and after start the service I have the next status after 1 min 5 sec. test@elasticsearch:~ service elasticsearch status ● elasticsearch.servic…

---

## [Querying analytics exploration](https://discuss.elastic.co/t/querying-analytics-exploration/232977)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 7\
**Last updated:** [June 17, 2020, 7:24pm UTC](https://discuss.elastic.co/t/querying-analytics-exploration/232977 "2020-06-17T19:24:28Z")

</div>

Hello, Elastic 7.6.1 Queries in the analytics explorer does not seem to behave similar to what I'm used to? Tried escaping =\> process.parent.executable : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" …

---

## [No data has been received from agents yet](https://discuss.elastic.co/t/no-data-has-been-received-from-agents-yet/206466)

<div class="topic-metadata">

**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\
**Replies:** 1\
**Last updated:** [November 4, 2019, 10:20pm UTC](https://discuss.elastic.co/t/no-data-has-been-received-from-agents-yet/206466 "2019-11-04T22:20:35Z")

</div>

Hi, I'm having trouble getting the apm agent working. Thank you for any help. If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a diffe…

---

## [Haproxy format changes when sending directly](https://discuss.elastic.co/t/haproxy-format-changes-when-sending-directly/172681)

<div class="topic-metadata">

**Author:** [@10acc](https://discuss.elastic.co/u/10acc)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 5:34pm UTC](https://discuss.elastic.co/t/haproxy-format-changes-when-sending-directly/172681 "2019-03-17T17:34:39Z")

</div>

Hello, I am using logstash to ship haproxy logs to my elk stack. MY haproxy configuration - global log 127.0.0.1:10514 local0 chroot /var/lib/haproxy user haproxy group haproxy maxconn 555…

[Previous page](https://discuss.elastic.co/top.md?page=1106&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1108&per_page=50&period=all)
