# Top **URL:** https://discuss.elastic.co/top.md?page=1110&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1111 --- ## [Run filebeat, enable module as non-root user](https://discuss.elastic.co/t/run-filebeat-enable-module-as-non-root-user/241407)
**Author:** [@J\_P](https://discuss.elastic.co/u/J_P)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 7:47am UTC](https://discuss.elastic.co/t/run-filebeat-enable-module-as-non-root-user/241407 "2020-07-16T07:47:35Z")
Hey, I would like to edit configuration files, enable modules, run filebeat as a non-root user. Do you have any template what permissions are required? --- ## [Run Auditbeat with non-root user](https://discuss.elastic.co/t/run-auditbeat-with-non-root-user/193707)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:30am UTC](https://discuss.elastic.co/t/run-auditbeat-with-non-root-user/193707 "2019-08-23T02:30:06Z")
Hi Elastic Team, I run ELK on Linux(CentOS7). Because of security issue, I need to run Auditbeat with non-root user. When runing Auditbeat with non-root user, it shows: 2019-08 WARN \[cfgwarn\] host/host.go… --- ## [Field count limit](https://discuss.elastic.co/t/field-count-limit/230831)
**Author:** [@Antony\_Ukken](https://discuss.elastic.co/u/Antony_Ukken)\ **Replies:** 3\ **Last updated:** [May 2, 2020, 10:53pm UTC](https://discuss.elastic.co/t/field-count-limit/230831 "2020-05-02T22:53:42Z")
There is limit on the number of fields that a index can have. i guess by default the limit is around 1000. In my case, the fields are generated dynamically and there could be a lot of fields actually. Is there any way t… --- ## [Deprecated field \[inline\] used, expected \[source\] instead & Deprecated field \[all\_fields\] used, replaced by \[Set \[fields\] to \`\*\` instead\]](https://discuss.elastic.co/t/deprecated-field-inline-used-expected-source-instead-deprecated-field-all-fields-used-replaced-by-set-fields-to-instead/164396)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [January 16, 2019, 1:19am UTC](https://discuss.elastic.co/t/deprecated-field-inline-used-expected-source-instead-deprecated-field-all-fields-used-replaced-by-set-fields-to-instead/164396 "2019-01-16T01:19:11Z")
Hi, Elasticsearch 6.5.4 I was going over the Elastic cloud logs today and found these two warnings reoccurring. I did some googling but couldn't find a root case. Deprecated field \[inline\] used, expected \[source\] inst… --- ## [Aggregation document count issue](https://discuss.elastic.co/t/aggregation-document-count-issue/141031)
**Author:** [@Kushal\_Goyal](https://discuss.elastic.co/u/Kushal_Goyal)\ **Replies:** 3\ **Last updated:** [July 22, 2018, 7:41pm UTC](https://discuss.elastic.co/t/aggregation-document-count-issue/141031 "2018-07-22T19:41:18Z")
Hi I am new in ELK stack, need your advice. I am using nested aggregation. GET account\_credit/person/\_search { "aggs": { "count\_by\_gender": { "terms": { "field": "creditcard\_number.keyword" }, "aggs": { … --- ## [java.net.SocketException: Connection reset by peer: socket write error【已解决】](https://discuss.elastic.co/t/java-net-socketexception-connection-reset-by-peer-socket-write-error/122837)
**Author:** [@Faustine\_Fan](https://discuss.elastic.co/u/Faustine_Fan)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 7:09am UTC](https://discuss.elastic.co/t/java-net-socketexception-connection-reset-by-peer-socket-write-error/122837 "2018-03-07T07:09:14Z")
我用Jest的Bulk批量添加数据报了java.net.SocketException: Connection reset by peer: socket write error这个错，每批次5w条，执行20个批次。 奇怪的是执行2个批次的时候就不会出现这个错。 log如下： 126084 \[main\] DEBUG org.apache.http.wire - http-outgoing-9 \>\> "\[write\] I/O err… --- ## [No Machine Learning Tab in Kibana](https://discuss.elastic.co/t/no-machine-learning-tab-in-kibana/85164)
**Author:** [@Ryan\_Groten](https://discuss.elastic.co/u/Ryan_Groten)\ **Replies:** 3\ **Last updated:** [May 11, 2017, 11:46am UTC](https://discuss.elastic.co/t/no-machine-learning-tab-in-kibana/85164 "2017-05-11T11:46:55Z")
I upgraded my cluster to 5.4 and updated the x-pack plugin but I don't see the Machine Learning tab, do I need a specific license type? --- ## [Command 'npm run build' fails at "\_build:pleaseRun" task](https://discuss.elastic.co/t/command-npm-run-build-fails-at--build-pleaserun-task/72875)
**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\ **Replies:** 3\ **Last updated:** [January 26, 2017, 3:22pm UTC](https://discuss.elastic.co/t/command-npm-run-build-fails-at--build-pleaserun-task/72875 "2017-01-26T15:22:52Z")
Hi all, I'm trying to run "build" command but it fails at pleaseRun task, this is error log: Running "\_build:pleaseRun" task pleaserun --install --no-install-actions --install-prefix /home/vrossi/Scrivania/Workspace/… --- ## [How to rotate and compress logs using Logstash](https://discuss.elastic.co/t/how-to-rotate-and-compress-logs-using-logstash/58583)
**Author:** [@daiyue](https://discuss.elastic.co/u/daiyue)\ **Replies:** 3\ **Last updated:** [August 22, 2016, 4:41pm UTC](https://discuss.elastic.co/t/how-to-rotate-and-compress-logs-using-logstash/58583 "2016-08-22T16:41:28Z")
Hi, I am wondering is it able to set log file rotation in terms of time in logstash, e.g. fetching and storing logs in the past 30 days, and then compressing the logs that exceed the time period and put them in some dire… --- ## [Filebeat Inserts \\t in place of tabs](https://discuss.elastic.co/t/filebeat-inserts-t-in-place-of-tabs/49242)
**Author:** [@sghosh](https://discuss.elastic.co/u/sghosh)\ **Replies:** 3\ **Last updated:** [May 9, 2016, 5:55am UTC](https://discuss.elastic.co/t/filebeat-inserts-t-in-place-of-tabs/49242 "2016-05-09T05:55:57Z")
Hi All, I am trying to ship logs from servers via filebeat. I faced an issue like this: Whenever FB forwards log events to remote LS it inserts the literal string \\t in place of tab characters. This messes up the l… --- ## [Custom beat - re-use Filebeat log readers?](https://discuss.elastic.co/t/custom-beat-re-use-filebeat-log-readers/48868)
**Author:** [@jason26](https://discuss.elastic.co/u/jason26)\ **Replies:** 3\ **Last updated:** [April 30, 2016, 9:18pm UTC](https://discuss.elastic.co/t/custom-beat-re-use-filebeat-log-readers/48868 "2016-04-30T21:18:52Z")
I'm creating a new beat application, primarily to remove the logstash requirements for getting this data into Elastic Search. The file being read is new line delimited JSON, and gets rotated by logrotate. Anyone reusi… --- ## [Postgresql with elasticsearch](https://discuss.elastic.co/t/postgresql-with-elasticsearch/25700)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 3\ **Last updated:** [July 21, 2015, 6:55am UTC](https://discuss.elastic.co/t/postgresql-with-elasticsearch/25700 "2015-07-21T06:55:48Z")
i want to feed elasticsearch with relational database postgresql (that is from tables) and want to see its result on kibana.how can i do that?? waiting for answer from team elastic as soon as possible.. please reply --- ## [Update synonym.txt file and no server restart](https://discuss.elastic.co/t/update-synonym-txt-file-and-no-server-restart/12851)
**Author:** [@Boaz\_Trindade](https://discuss.elastic.co/u/Boaz_Trindade)\ **Replies:** 3\ **Last updated:** [July 23, 2013, 4:39pm UTC](https://discuss.elastic.co/t/update-synonym-txt-file-and-no-server-restart/12851 "2013-07-23T16:39:06Z")
Hi, Is it possible to update synonym.txt and don't restart the server? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop … --- ## [Reuse Dashboards accross different indexes in Kibana](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513)
**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 2:33pm UTC](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513 "2021-12-02T14:33:21Z")
Hi Everyone, I work in Cybersecurity and every week I have different sets of data to ingest that require separated indexes. The data sets are ingested using the exactly same mappings, and everytime I have to draw new d… --- ## [Is xpack part of the ELK stack](https://discuss.elastic.co/t/is-xpack-part-of-the-elk-stack/93312)
**Author:** [@Bitdog](https://discuss.elastic.co/u/Bitdog)\ **Replies:** 6\ **Last updated:** [July 18, 2017, 5:57pm UTC](https://discuss.elastic.co/t/is-xpack-part-of-the-elk-stack/93312 "2017-07-18T17:57:20Z")
We have begun exploring ELK as means to provide a method for operators to analyze logs. We are required to provide a user access control function and as I understand xpack is the way accomplish it. After installing the… --- ## [ILM policy not working](https://discuss.elastic.co/t/ilm-policy-not-working/302604)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 5\ **Last updated:** [May 27, 2022, 11:22am UTC](https://discuss.elastic.co/t/ilm-policy-not-working/302604 "2022-05-27T11:22:42Z")
Hi, I am using elk version 8.0.0 in windows OS. There is totally 3 elk nodes 2 logstash and 1 kibana nodes . The ILM is not working based on the duration i set (ex:5mints,the data is not getting deleted).I have create… --- ## [Azureblob input plugin - error](https://discuss.elastic.co/t/azureblob-input-plugin-error/229088)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 5\ **Last updated:** [April 28, 2020, 1:35pm UTC](https://discuss.elastic.co/t/azureblob-input-plugin-error/229088 "2020-04-28T13:35:15Z")
Hello, Hoping that someone within the community has come across this issue we are facing and may have managed to resolve it or have any idea? Basically we have installed the azureblob plugin (0.9.13) to ingest logs fro… --- ## [What about a min\_docs parameter for rollover action in Index lifecycle management?](https://discuss.elastic.co/t/what-about-a-min-docs-parameter-for-rollover-action-in-index-lifecycle-management/195242)
**Author:** [@rflores](https://discuss.elastic.co/u/rflores)\ **Replies:** 5\ **Last updated:** [August 23, 2019, 11:15am UTC](https://discuss.elastic.co/t/what-about-a-min-docs-parameter-for-rollover-action-in-index-lifecycle-management/195242 "2019-08-23T11:15:08Z")
Hi all, I've played with the Index Lifecycle Management aka ILM for indices not being time series, but more in a classical datastore fashion (ie, need to reindex data from scratch on a regular basis, with few changes ea… --- ## [LogStash Stack Decsision](https://discuss.elastic.co/t/logstash-stack-decsision/40029)
**Author:** [@NekoNova](https://discuss.elastic.co/u/NekoNova)\ **Replies:** 5\ **Last updated:** [January 27, 2016, 12:18pm UTC](https://discuss.elastic.co/t/logstash-stack-decsision/40029 "2016-01-27T12:18:30Z")
Hello, I'm currently in the middle of setting up a LogStash stack for our company. We have multiple Ruby on Rails applications running, representing various environments such as our Production, staging etc. At the mo… --- ## [What is the grok pattern that can match variable length documents from a single log file?](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 8\ **Last updated:** [October 13, 2021, 7:41pm UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338 "2021-10-13T19:41:38Z")
I am having records/documents of variable lengths, say 3 types of logs coming in a single log fie. What is the grok pattern that can match variable length documents from a single log file? This grok pattern can be used… --- ## [Error while xpack.security.enabled:true on ES 6.8](https://discuss.elastic.co/t/error-while-xpack-security-enabled-true-on-es-6-8/248296)
**Author:** [@analysteng](https://discuss.elastic.co/u/analysteng)\ **Replies:** 8\ **Last updated:** [September 15, 2020, 11:03am UTC](https://discuss.elastic.co/t/error-while-xpack-security-enabled-true-on-es-6-8/248296 "2020-09-15T11:03:43Z")
Hello, When I modify the file 'elasticsearch.yml' by adding the line 'xpack.security.enabled: true', then Kibana does not work. I have already read all the doc on the web but still did not get to solve it. Please, cou… --- ## [Пересечение по тэгам](https://discuss.elastic.co/t/topic/239008)
**Author:** [@Nasty](https://discuss.elastic.co/u/Nasty)\ **Replies:** 8\ **Last updated:** [July 1, 2020, 3:13am UTC](https://discuss.elastic.co/t/topic/239008 "2020-07-01T03:13:24Z")
Здравствуйте! Дано: в каждой аккаунт-карточке которую я храню в ЭС, есть поле "тэги", в котором лежит набор ключевых слов для каждого аккаунта. Это string. Мне нужно пробежаться по всей бд и найти процент совпадения эт… --- ## [How can I increase number of values of visualize](https://discuss.elastic.co/t/how-can-i-increase-number-of-values-of-visualize/319289)
**Author:** [@yts85205107](https://discuss.elastic.co/u/yts85205107)\ **Replies:** 4\ **Last updated:** [November 20, 2022, 6:49am UTC](https://discuss.elastic.co/t/how-can-i-increase-number-of-values-of-visualize/319289 "2022-11-20T06:49:08Z")
Hi, I want to increase number of values of visualize, but I can't found the setting to increase. now, the number of values is 1000, I want to increase to 3000, how can I increase? Thanks. --- ## [CircuitBreakingException on my ES cluster](https://discuss.elastic.co/t/circuitbreakingexception-on-my-es-cluster/205114)
**Author:** [@SJH](https://discuss.elastic.co/u/SJH)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 1:31pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-on-my-es-cluster/205114 "2019-11-04T13:31:15Z")
Hello all, I keep encountering a CircuitBreakingException on my ES cluster The following stack trace seems to suggest that the CircuitBreakingException is taking place during a seemingly lightweight call (cluster:monit… --- ## [Filebeat Amazon ECS log rotation issue](https://discuss.elastic.co/t/filebeat-amazon-ecs-log-rotation-issue/191872)
**Author:** [@justkind](https://discuss.elastic.co/u/justkind)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 2:59pm UTC](https://discuss.elastic.co/t/filebeat-amazon-ecs-log-rotation-issue/191872 "2019-08-06T14:59:20Z")
Hi Elastic Team, Sorry to bother y'all, but I've been running into an issue using Filebeat on Amazon ECS and would appreciate any help. Summary: Filebeat 6.8.1 deployed on each individual ECS host instance and forward… --- ## [Calculate Duration in JSON input](https://discuss.elastic.co/t/calculate-duration-in-json-input/191691)
**Author:** [@scttwoods](https://discuss.elastic.co/u/scttwoods)\ **Replies:** 4\ **Last updated:** [July 25, 2019, 7:24pm UTC](https://discuss.elastic.co/t/calculate-duration-in-json-input/191691 "2019-07-25T19:24:08Z")
I have a data table of individual events with rows split by an event id. I am able to find the min and max of my timestamp field. What I want to do is have a column whose values are the difference between the max and mix… --- ## [Too many open files with many concurrent index requests](https://discuss.elastic.co/t/too-many-open-files-with-many-concurrent-index-requests/4899)
**Author:** [@Andreas\_Bauer](https://discuss.elastic.co/u/Andreas_Bauer)\ **Replies:** 4\ **Last updated:** [July 20, 2011, 4:58pm UTC](https://discuss.elastic.co/t/too-many-open-files-with-many-concurrent-index-requests/4899 "2011-07-20T16:58:04Z")
Hello. we're using elasticsearch 0.16.3. While reindexing our data (currently around 200k small documents), we're having the 'Too many open files' problem. We're issuing a large number of single index requests in… --- ## [Entity Centric Architecture](https://discuss.elastic.co/t/entity-centric-architecture/93282)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 2\ **Last updated:** [July 18, 2017, 8:35pm UTC](https://discuss.elastic.co/t/entity-centric-architecture/93282 "2017-07-18T20:35:50Z")
Hello guys, I have lately watched @Mark\_Harwood's lecture about entity-centric indices. It's very recommended, especially for people who use ElasticSearch for aggregation purposes! I figured out that this architectur… --- ## [Logstash to Elasticsearch Bulk Request , SSL peer shut down incorrectly- Manticore::ClientProtocolException logstash](https://discuss.elastic.co/t/logstash-to-elasticsearch-bulk-request-ssl-peer-shut-down-incorrectly-manticore-clientprotocolexception-logstash/73558)
**Author:** [@Bhavana](https://discuss.elastic.co/u/Bhavana)\ **Replies:** 2\ **Last updated:** [February 2, 2017, 2:52am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-bulk-request-ssl-peer-shut-down-incorrectly-manticore-clientprotocolexception-logstash/73558 "2017-02-02T02:52:36Z")
ES version - 2.3.5 , Logstash - 2.4 'Attempted to send bulk request to Elasticsearch, configured at \["xxxx.com:9200"\] , An error occurred and it failed! Are you sure you can reach elasticsearch from this machine using … --- ## [How to do multiple aggregations in kibana?](https://discuss.elastic.co/t/how-to-do-multiple-aggregations-in-kibana/68343)
**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\ **Replies:** 2\ **Last updated:** [December 8, 2016, 6:37am UTC](https://discuss.elastic.co/t/how-to-do-multiple-aggregations-in-kibana/68343 "2016-12-08T06:37:03Z")
I have multiple date fileds in my kibana index. of which i want to plot my data over two date histogram fields independently to show a trend . i want to do it in a single graph. But kibana does not have option to do more… --- ## [Match query returns different number of partial results each time it is run](https://discuss.elastic.co/t/match-query-returns-different-number-of-partial-results-each-time-it-is-run/58183)
**Author:** [@mashbourne](https://discuss.elastic.co/u/mashbourne)\ **Replies:** 2\ **Last updated:** [August 17, 2016, 1:57am UTC](https://discuss.elastic.co/t/match-query-returns-different-number-of-partial-results-each-time-it-is-run/58183 "2016-08-17T01:57:33Z")
One property with mapping "type": "string" and value "ReadingWonders2.0" is causing inconsistent query results. It seems to be analyzed inconsistently. When I query using match, I get a different number of hits each time… --- ## [Tons of warning message "no index mapper found for field" in the log (one every seconds)](https://discuss.elastic.co/t/tons-of-warning-message-no-index-mapper-found-for-field-in-the-log-one-every-seconds/41310)
**Author:** [@s0mb00n](https://discuss.elastic.co/u/s0mb00n)\ **Replies:** 2\ **Last updated:** [February 10, 2016, 1:31am UTC](https://discuss.elastic.co/t/tons-of-warning-message-no-index-mapper-found-for-field-in-the-log-one-every-seconds/41310 "2016-02-10T01:31:18Z")
After upgrading to Elasticsearch 2.1.1 from 1.5 version, the following warning message started to fill up elasticsearch log: Feb 9 18:25:17 logstash elasticsearch\[30011\]: \[2016-02-09 18:25:17,523\]\[WARN \]\[index.codec … --- ## [Filtering sub-documents](https://discuss.elastic.co/t/filtering-sub-documents/6917)
**Author:** [@Hugo](https://discuss.elastic.co/u/Hugo)\ **Replies:** 2\ **Last updated:** [March 7, 2012, 12:46pm UTC](https://discuss.elastic.co/t/filtering-sub-documents/6917 "2012-03-07T12:46:25Z")
Hi all, I have a document structure like this: { "\_index": "building", "\_type": "info", "\_source": { "name": "First building", "security\_level": 1, "state": 1, "descript… --- ## [Sorting on date field issue](https://discuss.elastic.co/t/sorting-on-date-field-issue/3949)
**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\ **Replies:** 2\ **Last updated:** [February 19, 2011, 12:12am UTC](https://discuss.elastic.co/t/sorting-on-date-field-issue/3949 "2011-02-19T00:12:27Z")
I'm having an issue with sorting on a date field. The field is defined in my mapping as: "created\_on" : {"type" : "date", "format" : "YYYY-MM-DD HH:mm:ss"}, When I do a simple matchAll + sort query, t… --- ## [Search-ui Scoped search blocks](https://discuss.elastic.co/t/search-ui-scoped-search-blocks/279496)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 7\ **Last updated:** [July 25, 2021, 9:18am UTC](https://discuss.elastic.co/t/search-ui-scoped-search-blocks/279496 "2021-07-25T09:18:17Z")
Hello, first a huge thank you for how do you help the community! , I have a question I hope you can help me with. I need to create the following experience with the search-ui library. I will use "books" to keep it simpl… --- ## [Dropdown control panel Kibana does not recognize and autocomplete search filter](https://discuss.elastic.co/t/dropdown-control-panel-kibana-does-not-recognize-and-autocomplete-search-filter/210510)
**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 1:02pm UTC](https://discuss.elastic.co/t/dropdown-control-panel-kibana-does-not-recognize-and-autocomplete-search-filter/210510 "2019-12-06T13:02:34Z")
Hi, In the control panel I use in Kibana, the dropdown list does not recognize all keywords that are available in the data. The dropdown list also does not change while typing in the required filters, so the autocomplet… --- ## [.StartupException: java.lang.RuntimeException: can not run elasticsearch as root](https://discuss.elastic.co/t/startupexception-java-lang-runtimeexception-can-not-run-elasticsearch-as-root/204547)
**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\ **Replies:** 7\ **Last updated:** [October 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/startupexception-java-lang-runtimeexception-can-not-run-elasticsearch-as-root/204547 "2019-10-23T16:04:11Z")
I wanted to enable SSL on the elastic search , after adding the certificates , i need to restart the elasticsearch where it is throwing error. I have tried this by creating a user but it is showing error .i have attache… --- ## [Aggregating Averages Across Nodes to only Displaying the Aggregate](https://discuss.elastic.co/t/aggregating-averages-across-nodes-to-only-displaying-the-aggregate/79784)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 7\ **Last updated:** [April 14, 2017, 2:30pm UTC](https://discuss.elastic.co/t/aggregating-averages-across-nodes-to-only-displaying-the-aggregate/79784 "2017-04-14T14:30:25Z")
I'm using Kibana 4.2 and have an issue where I need to aggregate data regarding how many cpus were used by a framework. The job runs on multiple nodes, and the data is currently reported on a per-node basis. The only wa… --- ## [Kibana 5.0 alpha 4 - where is color code for dark theme dashboard background please?](https://discuss.elastic.co/t/kibana-5-0-alpha-4-where-is-color-code-for-dark-theme-dashboard-background-please/55705)
**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\ **Replies:** 1\ **Last updated:** [July 18, 2016, 7:26pm UTC](https://discuss.elastic.co/t/kibana-5-0-alpha-4-where-is-color-code-for-dark-theme-dashboard-background-please/55705 "2016-07-18T19:26:12Z")
Anyone know where I can find the color for dark theme dashboard background in Kibana 5 please ? I want to make some of a bar graph invisible by setting its color to the same as the background. Many Thanks, Mick --- ## [How to achieve fault tolerance](https://discuss.elastic.co/t/how-to-achieve-fault-tolerance/220720)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 9:49pm UTC](https://discuss.elastic.co/t/how-to-achieve-fault-tolerance/220720 "2020-02-24T21:49:49Z")
I have a 8 node elk cluster, 3 data dedicated nodes, 3 master dedicated node and 2 http(kibana) nodes. Currently the indexes are daily created with date stamp. It contains around 21293408 docs on daily average. The inde… --- ## [Does Elastic APM support Spring Cloud Stream?](https://discuss.elastic.co/t/does-elastic-apm-support-spring-cloud-stream/173620)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 3\ **Last updated:** [March 27, 2019, 7:14am UTC](https://discuss.elastic.co/t/does-elastic-apm-support-spring-cloud-stream/173620 "2019-03-27T07:14:06Z")
Hi, I am very new to Elastic APM and not sure how it can support different frameworks. I can see that from the documentation APM supports Spring Boot. I was wondering if it supports Spring Cloud Stream as well. Spring C… --- ## [A question about aggregation of ElasticSearch 5.x](https://discuss.elastic.co/t/a-question-about-aggregation-of-elasticsearch-5-x/68802)
**Author:** [@jintianlao](https://discuss.elastic.co/u/jintianlao)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 7:17am UTC](https://discuss.elastic.co/t/a-question-about-aggregation-of-elasticsearch-5-x/68802 "2016-12-13T07:17:10Z")
Dear friends I have a question about ElasticSearch 5.x while I am studying.Now I had sucessfully inserted some data into my ElasticSearch server like this " PUT /megacorp/employee/3 { "first\_name" : "Douglas", … --- ## [Watcher and Shield](https://discuss.elastic.co/t/watcher-and-shield/1115)
**Author:** [@Tommy\_Bollhofer](https://discuss.elastic.co/u/Tommy_Bollhofer)\ **Replies:** 3\ **Last updated:** [May 21, 2015, 7:50pm UTC](https://discuss.elastic.co/t/watcher-and-shield/1115 "2015-05-21T19:50:33Z")
Is the beta version of Watcher supported with Shield? Are there configuration changes in the elasticsearch.yml file in order for this to function correctly? Didn't take note of any in the getting started documentation. R… --- ## [Failed to start Elasticsearch(/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled)](https://discuss.elastic.co/t/failed-to-start-elasticsearch-usr-lib-systemd-system-elasticsearch-service-disabled-vendor-preset-disabled/309514)
**Author:** [@sagar\_hukre](https://discuss.elastic.co/u/sagar_hukre)\ **Replies:** 1\ **Last updated:** [July 13, 2022, 8:43am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-usr-lib-systemd-system-elasticsearch-service-disabled-vendor-preset-disabled/309514 "2022-07-13T08:43:08Z")
● elasticsearch.service - Elasticsearch Loaded: loaded \`(/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled)\` Active: failed (Result: exit-code) since Wed 2022-07-13 14:05:42 IST; 1min… --- ## [Sending filebeat data to AWS es](https://discuss.elastic.co/t/sending-filebeat-data-to-aws-es/124363)
**Author:** [@hobakill](https://discuss.elastic.co/u/hobakill)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 8:59pm UTC](https://discuss.elastic.co/t/sending-filebeat-data-to-aws-es/124363 "2018-03-20T20:59:41Z")
I am trying to use AWS ES with very little success. I'm trying a very basic test by using Filebeat to send data to it and so far as I can tell nothing is going over. I have DEBUG log level on and I'm getting nothing back… --- ## [Sort on missing field](https://discuss.elastic.co/t/sort-on-missing-field/4934)
**Author:** [@erik\_seilnacht](https://discuss.elastic.co/u/erik_seilnacht)\ **Replies:** 1\ **Last updated:** [July 26, 2011, 9:05am UTC](https://discuss.elastic.co/t/sort-on-missing-field/4934 "2011-07-26T09:05:04Z")
Hi. I have an index where I need to sort on a sequence number field that was recently added. The problem is that I must use the missing option to allow for sorting since only new entries in the index will have a va… --- ## [Kibana server is not ready yet with 503 status but the service is running](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-503-status-but-the-service-is-running/245897)
**Author:** [@BTH.S3](https://discuss.elastic.co/u/BTH.S3)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 4:46am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-503-status-but-the-service-is-running/245897 "2020-08-24T04:46:18Z")
I've installed the products version 6.8.4 both Kibana and Elasticsearch on Ubuntu 18.04 on two nodes (Kibana only installed on 1 node). However when I start the Kibana server, the errors are produce as log below {"type"… --- ## [ES node disk sizing](https://discuss.elastic.co/t/es-node-disk-sizing/176151)
**Author:** [@Benjen](https://discuss.elastic.co/u/Benjen)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 9:27am UTC](https://discuss.elastic.co/t/es-node-disk-sizing/176151 "2019-04-10T09:27:12Z")
I am studying on ES node storage and would like to have an idea on what is the best practice/recommendation hardware config for a ES node, and what is the capability of it. Yet, got confused on that. Based on my underst… --- ## [Logstash-input-mongodb update and delete doc](https://discuss.elastic.co/t/logstash-input-mongodb-update-and-delete-doc/143360)
**Author:** [@abilio-cs](https://discuss.elastic.co/u/abilio-cs)\ **Replies:** 2\ **Last updated:** [August 8, 2018, 1:47pm UTC](https://discuss.elastic.co/t/logstash-input-mongodb-update-and-delete-doc/143360 "2018-08-08T13:47:45Z")
Hello! I am using logstash in order to replace mongo-connector, so I need to update and delete docs that were changed in MongoDB. I set upsert and I also tried to set the action, however it seems that the input is not … --- ## [How to query document to return parent and child result](https://discuss.elastic.co/t/how-to-query-document-to-return-parent-and-child-result/13223)
**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\ **Replies:** 2\ **Last updated:** [March 2, 2017, 1:17pm UTC](https://discuss.elastic.co/t/how-to-query-document-to-return-parent-and-child-result/13223 "2017-03-02T13:17:00Z")
Hi All, I have created some parent and child documents : curl -XPUT 'http://localhost:9200/twitter/author/1 -d' curl -XPUT 'http://localhost:9200/twitter/author/2 -d' curl -XPUT 'http://localhost:9200/twitter/… [Previous page](https://discuss.elastic.co/top.md?page=1109&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1111&per_page=50&period=all)