# Top **URL:** https://discuss.elastic.co/top.md?page=1115&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1116 --- ## [What does 'IllegalStateException \[unexpected byte' error on transport client denotes?](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 9:55am UTC](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396 "2019-09-03T09:55:06Z")
I am trying to upgrade elasticsearch from 2.3.1. I have a custom search plugin which I have rewritten. I have installed the plugin in elasticsearch and all my queries are running fine with the node client (for testing).… --- ## [Painless empty block?](https://discuss.elastic.co/t/painless-empty-block/155213)
**Author:** [@m9aertner](https://discuss.elastic.co/u/m9aertner)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/painless-empty-block/155213 "2018-11-06T10:29:19Z")
I find it odd that Painless appears to not allow brackets-only empty blocks, e.g. for if statements (ES 5.3). The following works OK: "script" : { "script" : { "inline": "if(doc !… --- ## [Logstash grok filter for mailbox.log zimbra](https://discuss.elastic.co/t/logstash-grok-filter-for-mailbox-log-zimbra/81459)
**Author:** [@aziz\_007](https://discuss.elastic.co/u/aziz_007)\ **Replies:** 2\ **Last updated:** [April 6, 2017, 9:10pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-for-mailbox-log-zimbra/81459 "2017-04-06T21:10:37Z")
hi i am triying to build a pattern fro this log line in mailbox.log for zimbra 2017-04-03 20:31:09,256 INFO \[LmtpServer-3\] \[ip=192.168.1.102;\] lmtp - Delivering message: size=1517 bytes, nrcpts=1, sender=admin@server… --- ## [Bug in Creating Topic?](https://discuss.elastic.co/t/bug-in-creating-topic/68487)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 2\ **Last updated:** [December 9, 2016, 3:01am UTC](https://discuss.elastic.co/t/bug-in-creating-topic/68487 "2016-12-09T03:01:39Z")
I just noticed a strange bug when I was trying to create a topic. In one spot in my topic creation, I typed a number 2., but in the actual topic on the forums, it shows a number 1. Thread: https://discuss.elastic.co/t/p… --- ## [Default index per-user?](https://discuss.elastic.co/t/default-index-per-user/51069)
**Author:** [@NathanP](https://discuss.elastic.co/u/NathanP)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 2:42pm UTC](https://discuss.elastic.co/t/default-index-per-user/51069 "2016-06-22T14:42:21Z")
Is it possible to configure Kibana to display a specific index for specified users? We have multiple indices and multiple users. User A needs to only see index A, and user B only needs to see index B. I've got the perm… --- ## [Kibana 5.6.1 - how to disable the horizontal scrollable bar in metric visualization](https://discuss.elastic.co/t/kibana-5-6-1-how-to-disable-the-horizontal-scrollable-bar-in-metric-visualization/101516)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 11:14pm UTC](https://discuss.elastic.co/t/kibana-5-6-1-how-to-disable-the-horizontal-scrollable-bar-in-metric-visualization/101516 "2017-09-22T23:14:16Z")
Appreciate the team's great work. Thank you for putting an awesome product together. After upgrading from Kibana 5.5. to 5.6.1, on each metric visualization the vertical and horizontal scrollable bars showing up at the … --- ## [How to get environment variblae in elasticsearch.yml file in elasticsearch-5.4.0](https://discuss.elastic.co/t/how-to-get-environment-variblae-in-elasticsearch-yml-file-in-elasticsearch-5-4-0/87091)
**Author:** [@rajegworks](https://discuss.elastic.co/u/rajegworks)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 9:27am UTC](https://discuss.elastic.co/t/how-to-get-environment-variblae-in-elasticsearch-yml-file-in-elasticsearch-5-4-0/87091 "2017-05-25T09:27:25Z")
I have installed elasticsearch-5.4.0, its not take my envornoment variable in elasticsearch.yml file its throw "Exception in thread "main" java.lang.IllegalArgumentException: Could not resolve placeholder 'DOCKER\_IP'" … --- ## [ElasticSearch5系での画像検索方法を知りたい](https://discuss.elastic.co/t/elasticsearch5/62120)
**Author:** [@s-hatanaka](https://discuss.elastic.co/u/s-hatanaka)\ **Replies:** 1\ **Last updated:** [October 7, 2016, 3:53am UTC](https://discuss.elastic.co/t/elasticsearch5/62120 "2016-10-07T03:53:15Z")
Elasticsearch5系を利用しています。画像検索のプラグイン（elasticsearch-image plugin）は下記URLに参照がありますが、2年ほど更新されていないようで、Elasticsearchの1.1までしか対応できていないようです。 画像検索にあたり、他に良い方法がありますでしょうか？あればご共有頂きたいです。 □URL https://www.elastic.co/guide/en/elasticsea… --- ## [How to create a link in the markdown to open another dashboard or visulization?](https://discuss.elastic.co/t/how-to-create-a-link-in-the-markdown-to-open-another-dashboard-or-visulization/33310)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 1\ **Last updated:** [October 30, 2015, 5:53am UTC](https://discuss.elastic.co/t/how-to-create-a-link-in-the-markdown-to-open-another-dashboard-or-visulization/33310 "2015-10-30T05:53:16Z")
Hi Kibana Experts, I have 2 requirements 1) In the markdown I want to provide a link to another dashboard, so that when user clicks on the link it will open second dashboard in a new page . 2) Same as above rather das… --- ## [Elastic JSON Processor Error: \`cannot add non-map fields to root of document\`](https://discuss.elastic.co/t/elastic-json-processor-error-cannot-add-non-map-fields-to-root-of-document/340845)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 5\ **Last updated:** [August 16, 2023, 5:39pm UTC](https://discuss.elastic.co/t/elastic-json-processor-error-cannot-add-non-map-fields-to-root-of-document/340845 "2023-08-16T17:39:56Z")
I am ingesting logs in the ECS format from the Elastic Serverless Forwarder into Elasticsearch. These logs are generated by the ECS Python logging library. Because they are being generated by ESF, I need to expand the nd… --- ## [How to index s3 files and transfer that index to my ES server](https://discuss.elastic.co/t/how-to-index-s3-files-and-transfer-that-index-to-my-es-server/220930)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 2:12pm UTC](https://discuss.elastic.co/t/how-to-index-s3-files-and-transfer-that-index-to-my-es-server/220930 "2020-03-10T14:12:14Z")
Hi, I have been indexing files from different servers using FSCrawler and storing them in my Elastic search server. But now I have files in s3 bucket. Could anyone please guide me how to index files that are in S3 and … --- ## [Logstash only adding one document from mongodb to elasticsearch](https://discuss.elastic.co/t/logstash-only-adding-one-document-from-mongodb-to-elasticsearch/218639)
**Author:** [@tahaimt](https://discuss.elastic.co/u/tahaimt)\ **Replies:** 0\ **Last updated:** [February 10, 2020, 4:39pm UTC](https://discuss.elastic.co/t/logstash-only-adding-one-document-from-mongodb-to-elasticsearch/218639 "2020-02-10T16:39:10Z")
I am trying to index my mongodb collections in elasticsearch with logstash and to verify that the data is indexed in elasticsearch I am using kibana. Pasted below are my docker-compose and logstash.conf files. After up-i… --- ## [Not able to create tilemeap](https://discuss.elastic.co/t/not-able-to-create-tilemeap/88261)
**Author:** [@AadarshKumayan](https://discuss.elastic.co/u/AadarshKumayan)\ **Replies:** 3\ **Last updated:** [June 6, 2017, 6:15am UTC](https://discuss.elastic.co/t/not-able-to-create-tilemeap/88261 "2017-06-06T06:15:16Z")
Hey i have loaded json template store geo location but geo co-ordinates show following error No Compatible Fields: The "filebeat-\*" index pattern does not contain any of the following field types: geo\_point my json te… --- ## [How to get data from watcher](https://discuss.elastic.co/t/how-to-get-data-from-watcher/83668)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [April 29, 2017, 2:08pm UTC](https://discuss.elastic.co/t/how-to-get-data-from-watcher/83668 "2017-04-29T14:08:49Z")
I ussing watcher for monitor User login to server. If have new login send email alert to user and admin server ( have already file username, clientip, ssh) I have question. For example, my input in watcher matched wit… --- ## [Logstash service stop after a while](https://discuss.elastic.co/t/logstash-service-stop-after-a-while/44338)
**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\ **Replies:** 3\ **Last updated:** [March 15, 2016, 8:05pm UTC](https://discuss.elastic.co/t/logstash-service-stop-after-a-while/44338 "2016-03-15T20:05:44Z")
Hello, I have been struggling with this for 2 days. I have a logstash instance with ES input and ES output, without filtering anything. I run the logstash service and after a while (20 seconds more or less) the service… --- ## [ES GET Query in C#](https://discuss.elastic.co/t/es-get-query-in-c/9122)
**Author:** [@TheOutlander\_2](https://discuss.elastic.co/u/TheOutlander_2)\ **Replies:** 3\ **Last updated:** [September 24, 2012, 7:03pm UTC](https://discuss.elastic.co/t/es-get-query-in-c/9122 "2012-09-24T19:03:59Z")
I'm not sure how to send a GET request with a JSON payload in C#. The framework will throw an error when I try to get a RequestStream to write to it. Can someone explain how I can emulate the CURL GET command (cur… --- ## [Cannot search /var/log/messages without '\*' wildcard before string](https://discuss.elastic.co/t/cannot-search-var-log-messages-without-wildcard-before-string/123952)
**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\ **Replies:** 7\ **Last updated:** [March 18, 2018, 8:04pm UTC](https://discuss.elastic.co/t/cannot-search-var-log-messages-without-wildcard-before-string/123952 "2018-03-18T20:04:22Z")
Version 6.2.2 System module enabled. When searching in Discover /var/log/messages returns zero results. However, the syslog messages are showing in Discover. If I search for user I get results. If searching for user\* th… --- ## [Elastic Search Add Ingest Timestamp and Calculate Lag](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576)
**Author:** [@divyank.gupta](https://discuss.elastic.co/u/divyank.gupta)\ **Replies:** 1\ **Last updated:** [June 18, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576 "2022-06-18T21:25:35Z")
Elasticsearch Experts, need your help to achieve below mention goal. Goal: Try to find a way to calculate lag between the time, log message was generated at application end (@timestamp field) and the time, it was ingest… --- ## [Vizualization with message.keyword in Kibana 6.7](https://discuss.elastic.co/t/vizualization-with-message-keyword-in-kibana-6-7/179130)
**Author:** [@Carlos\_Bodini](https://discuss.elastic.co/u/Carlos_Bodini)\ **Replies:** 1\ **Last updated:** [May 1, 2019, 5:41pm UTC](https://discuss.elastic.co/t/vizualization-with-message-keyword-in-kibana-6-7/179130 "2019-05-01T17:41:02Z")
hey guys! I had a Table Vizualization in Kibana 6.5, but now I updated the service to 6.7 and the field message.keyword is not present anymore. I was spliting a row using Terms and the field was message.keyword, so in … --- ## [How to customize X-Axis values for data histogram](https://discuss.elastic.co/t/how-to-customize-x-axis-values-for-data-histogram/57902)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 1\ **Last updated:** [August 12, 2016, 4:11pm UTC](https://discuss.elastic.co/t/how-to-customize-x-axis-values-for-data-histogram/57902 "2016-08-12T16:11:45Z")
Hi, I have created one kibana visualization in which I kept @timestamp as my X-axis co-ordinate by default it starts from 2:00 and keep on increasing 3hrs . Is it possible to configure the X-axis to start from 1:00 AM … --- ## [FSCrawler - Ingest pipeline error](https://discuss.elastic.co/t/fscrawler-ingest-pipeline-error/210275)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 8:21pm UTC](https://discuss.elastic.co/t/fscrawler-ingest-pipeline-error/210275 "2019-12-03T20:21:44Z")
Hi, I'm using FSCrawler 2.7 and Elasticsearch and Kibana 7.1.1. I have a single document where I want to extract and add two separate fields from said document. I have the following POST \_ingest/pipeline/\_simulate {… --- ## [Reindexing multiple indexes into a single one](https://discuss.elastic.co/t/reindexing-multiple-indexes-into-a-single-one/176092)
**Author:** [@TheEvilDonut](https://discuss.elastic.co/u/TheEvilDonut)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 12:11pm UTC](https://discuss.elastic.co/t/reindexing-multiple-indexes-into-a-single-one/176092 "2019-04-10T12:11:27Z")
I am currently trying to reduce the number of shards on the cluster by reindexing our indices. We are of course also reviewing the indices so we can adjust the templates so that the daily indices will be created with the… --- ## [Kibana 4.2 - Elasticsearch 2.0 download?](https://discuss.elastic.co/t/kibana-4-2-elasticsearch-2-0-download/26328)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 2\ **Last updated:** [July 28, 2015, 5:08am UTC](https://discuss.elastic.co/t/kibana-4-2-elasticsearch-2-0-download/26328 "2015-07-28T05:08:54Z")
Hi, I just upgraded my Kibana to the 4.2 snapshot - which now states that I need ES 2.0 or greater. I cant find any ES 2.0 downloads though - or am I supposed to build it from source ? --- ## [Lost index metadata and overwriting pre-existing index files](https://discuss.elastic.co/t/lost-index-metadata-and-overwriting-pre-existing-index-files/16022)
**Author:** [@Danny\_Berger](https://discuss.elastic.co/u/Danny_Berger)\ **Replies:** 2\ **Last updated:** [July 10, 2015, 10:15pm UTC](https://discuss.elastic.co/t/lost-index-metadata-and-overwriting-pre-existing-index-files/16022 "2015-07-10T22:15:16Z")
Hi - I recently experienced some surprising elasticsearch behavior and I'd appreciate some verification on the "whys" behind what we saw. Basically, during a cluster restart we lost some index metadata causing those … --- ## [How to use api cluster.putSettings?](https://discuss.elastic.co/t/how-to-use-api-cluster-putsettings/59019)
**Author:** [@wq\_Huang](https://discuss.elastic.co/u/wq_Huang)\ **Replies:** 4\ **Last updated:** [August 26, 2016, 11:03am UTC](https://discuss.elastic.co/t/how-to-use-api-cluster-putsettings/59019 "2016-08-26T11:03:28Z")
Hi guys, does any know how to use the api of cluster.putSettings to put cluster settings?I have referenced the api docs,but it really confused me. How can i summit data? which param should I use? Thx --- ## [Help with logstash and XML](https://discuss.elastic.co/t/help-with-logstash-and-xml/47501)
**Author:** [@funkisjazz](https://discuss.elastic.co/u/funkisjazz)\ **Replies:** 4\ **Last updated:** [April 19, 2016, 10:17am UTC](https://discuss.elastic.co/t/help-with-logstash-and-xml/47501 "2016-04-19T10:17:13Z")
I've been searching the internet for the last 6 hours trying to find a guide, tutorial, hint or any kind of help to upload the content of some .xml files into ES using logstash. For the life of me I haven't been able t… --- ## [Need help to setup filebeat](https://discuss.elastic.co/t/need-help-to-setup-filebeat/120320)
**Author:** [@itzik16](https://discuss.elastic.co/u/itzik16)\ **Replies:** 8\ **Last updated:** [March 14, 2018, 1:47pm UTC](https://discuss.elastic.co/t/need-help-to-setup-filebeat/120320 "2018-03-14T13:47:16Z")
Hello I want to use filebeat to import my logs to elasticsearch. I have a python script which collects data from 30 sensors and stores data from each sensor to his own directory and log (A-B/0-14/YYYY-MM-dd.log) every 1… --- ## [Natural language query for Search UI?](https://discuss.elastic.co/t/natural-language-query-for-search-ui/332555)
**Author:** [@Rich\_Kuzsma2](https://discuss.elastic.co/u/Rich_Kuzsma2)\ **Replies:** 6\ **Last updated:** [June 6, 2023, 2:37pm UTC](https://discuss.elastic.co/t/natural-language-query-for-search-ui/332555 "2023-06-06T14:37:30Z")
Hello Enterprise Search Team :wave:! Do you have any examples for how to use natural language queries with Search UI? For example, I want to search "Show me all movies with Tom Hanks in the last year." I plan to run t… --- ## [Elasticsearch Curator error](https://discuss.elastic.co/t/elasticsearch-curator-error/219767)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 6\ **Last updated:** [February 18, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767 "2020-02-18T16:13:46Z")
Hi all, I am using ELK curator to delete old elasticsearch indices periodically. I am running this as kubernetes cronjob to delete older indices. I am facing the following error- 2020-02-18 15:54:51,628 ERROR … --- ## [ERR SSL client failed to connect (1.x to 5.x upgrade)](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-1-x-to-5-x-upgrade/89603)
**Author:** [@jm\_peterson](https://discuss.elastic.co/u/jm_peterson)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 7:49pm UTC](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-1-x-to-5-x-upgrade/89603 "2017-06-28T19:49:02Z")
I am running into this error. After what appears to be events successfully published to output. 2017/06/15 17:43:43.708785 publish.go:88: INFO Start sending events to output 2017/06/15 17:43:43.708851 log.go:115: INFO … --- ## [Possible race condition causing Elasticsearch output plugin to overwrite supplied index with rollover alias](https://discuss.elastic.co/t/possible-race-condition-causing-elasticsearch-output-plugin-to-overwrite-supplied-index-with-rollover-alias/311174)
**Author:** [@andreastoom](https://discuss.elastic.co/u/andreastoom)\ **Replies:** 2\ **Last updated:** [August 3, 2022, 5:18am UTC](https://discuss.elastic.co/t/possible-race-condition-causing-elasticsearch-output-plugin-to-overwrite-supplied-index-with-rollover-alias/311174 "2022-08-03T05:18:41Z")
Hi, Since migrating to using data streams we have started to see that a subset of our data all of a sudden are being written to an index called "logstash" instead of the data stream. After a bit of digging around it see… --- ## [Docker container receive "master not discovered exception" after authentication](https://discuss.elastic.co/t/docker-container-receive-master-not-discovered-exception-after-authentication/178778)
**Author:** [@abelchun](https://discuss.elastic.co/u/abelchun)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 2:11am UTC](https://discuss.elastic.co/t/docker-container-receive-master-not-discovered-exception-after-authentication/178778 "2019-04-30T02:11:13Z")
I'm setting up elastic search production docker-compose environment, I copied exactly the same as in the official website here. Everything worked fine after deploy. When I add ELASTIC\_PASSWORD env with xpack enable and x… --- ## [Monitoring Not working not sure about the cause](https://discuss.elastic.co/t/monitoring-not-working-not-sure-about-the-cause/166652)
**Author:** [@malaypatel](https://discuss.elastic.co/u/malaypatel)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 3:48pm UTC](https://discuss.elastic.co/t/monitoring-not-working-not-sure-about-the-cause/166652 "2019-02-01T15:48:51Z")
I am not able to see monitoring Data. after I restarted ElasticSearch. I am having Following error. Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-es-6-2019.01.31\]\[0\] primary shard is not a… --- ## [How to completely uninstall ELK?](https://discuss.elastic.co/t/how-to-completely-uninstall-elk/325112)
**Author:** [@usr4](https://discuss.elastic.co/u/usr4)\ **Replies:** 3\ **Last updated:** [February 9, 2023, 2:56pm UTC](https://discuss.elastic.co/t/how-to-completely-uninstall-elk/325112 "2023-02-09T14:56:41Z")
Hi everyone, I hastily installed ELK and x-pack on a Mac many years ago, the version is 5.6.3. I forgot how it was installed in the first place, now I wanted to uninstall them all clean and install a different version … --- ## [Falha na configuração stack security](https://discuss.elastic.co/t/falha-na-configuracao-stack-security/204538)
**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 3:19pm UTC](https://discuss.elastic.co/t/falha-na-configuracao-stack-security/204538 "2020-08-20T15:19:20Z")
Fala pessoal, blz? Então.. estou com dificuldade em configurar um cluster de 3 nós, com o modo security ativo na versão 7.4.0 segue a configuração realizada no cluster: elk\_master: cluster.name: homolog node.name: el… --- ## [Visualize the difference of two groups of aggregation](https://discuss.elastic.co/t/visualize-the-difference-of-two-groups-of-aggregation/165071)
**Author:** [@dillinzser](https://discuss.elastic.co/u/dillinzser)\ **Replies:** 3\ **Last updated:** [January 22, 2019, 10:36am UTC](https://discuss.elastic.co/t/visualize-the-difference-of-two-groups-of-aggregation/165071 "2019-01-22T10:36:34Z")
Hi, I have a sum aggregation with grouping based on terms with two different values. I have the Time Series visualization like this: What I want is to have a graph displaying only the differences per bucket of the cu… --- ## [Websocket input client threw expection- No Method error](https://discuss.elastic.co/t/websocket-input-client-threw-expection-no-method-error/153926)
**Author:** [@Nidhi\_Mishra](https://discuss.elastic.co/u/Nidhi_Mishra)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 12:58am UTC](https://discuss.elastic.co/t/websocket-input-client-threw-expection-no-method-error/153926 "2018-10-26T00:58:24Z")
The Config file of Logstash for the Websocket Client- input { websocket { codec =\> "plain" url =\> "http://localhost:8080/WebsocketHome/" } } output { elasticsearch… --- ## [Using multiple shards causes incorrect results to be generated](https://discuss.elastic.co/t/using-multiple-shards-causes-incorrect-results-to-be-generated/101895)
**Author:** [@pranav0091](https://discuss.elastic.co/u/pranav0091)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 7:43am UTC](https://discuss.elastic.co/t/using-multiple-shards-causes-incorrect-results-to-be-generated/101895 "2017-10-04T07:43:02Z")
Reference: \[BUG?\] Wrong aggregated values shown in visualization Currently the aggregate data returned from ES is un-reliable when plotting a few terms on the X axis and having multiple shards Lee pointed out (and I ve… --- ## [None of the configured nodes are available: \[{#transport#-1](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-transport-1/89487)
**Author:** [@maoli](https://discuss.elastic.co/u/maoli)\ **Replies:** 3\ **Last updated:** [July 12, 2017, 8:29am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-transport-1/89487 "2017-07-12T08:29:44Z")
when i connect remote ES server,the client can run a few minutes,then the server disconnected and the client throws None of the ..nodes ara available. i'm sure the CONF is right,the port ,the ip,the firewall,all CONF is… --- ## [Syslog\_facility always set to kernel](https://discuss.elastic.co/t/syslog-facility-always-set-to-kernel/68955)
**Author:** [@norus](https://discuss.elastic.co/u/norus)\ **Replies:** 3\ **Last updated:** [December 14, 2016, 1:31pm UTC](https://discuss.elastic.co/t/syslog-facility-always-set-to-kernel/68955 "2016-12-14T13:31:56Z")
For some reason facility is always showing kernel (0) but in this test it should show syslog (5). "hits" : \[ { "\_index" : "filebeat-2016.12.14", "\_type" : "fbsyslog", "\_id" : "AVj6wwB4Si\_4urkNEHOu", "\_score" : … --- ## [How do you store a date that represents the end of time?](https://discuss.elastic.co/t/how-do-you-store-a-date-that-represents-the-end-of-time/46746)
**Author:** [@jamilnyc](https://discuss.elastic.co/u/jamilnyc)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 7:49pm UTC](https://discuss.elastic.co/t/how-do-you-store-a-date-that-represents-the-end-of-time/46746 "2016-07-26T19:49:39Z")
I am indexing a document with an expiration date field that I use as a filter when querying for search results. A document can either have a date or not, and I'm looking to filter by documents whose expiration is great… --- ## [IndexExists() with wildcard index name always returns true after upgrading to NEST 5.4.0](https://discuss.elastic.co/t/indexexists-with-wildcard-index-name-always-returns-true-after-upgrading-to-nest-5-4-0/94183)
**Author:** [@jqin](https://discuss.elastic.co/u/jqin)\ **Replies:** 2\ **Last updated:** [July 30, 2017, 5:55am UTC](https://discuss.elastic.co/t/indexexists-with-wildcard-index-name-always-returns-true-after-upgrading-to-nest-5-4-0/94183 "2017-07-30T05:55:30Z")
Hi, I had the following code that used to work in NEST 2.4.1 and Elasticsearch 2.3.1 : var indices = Indices.Index("prefix\*"); while (myClient.IndexExists(indices).Exists) { //code to delete them } I recently up… --- ## [Starting ElasticSearch](https://discuss.elastic.co/t/starting-elasticsearch/80329)
**Author:** [@tias](https://discuss.elastic.co/u/tias)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 8:36am UTC](https://discuss.elastic.co/t/starting-elasticsearch/80329 "2017-03-30T08:36:50Z")
Hello, just installed ElasticSearch 5.2.2 through RPM packages on Redhat 7, VMware VM x64. when starting, ES throws an error: Mar 28 18:36:54 rcsloggen02bp elasticsearch: 2017-03-28 18:36:54,812 main ERROR Could not … --- ## [ERROR license.plugin.core](https://discuss.elastic.co/t/error-license-plugin-core/59516)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [September 1, 2016, 9:45am UTC](https://discuss.elastic.co/t/error-license-plugin-core/59516 "2016-09-01T09:45:56Z")
Hi, I had installed marvel plugin. But later I removed it. However, it continuously gives below error in ES logs. How can I remove it completely? I am using ES 2.3.4. \[2016-09-01 11:34:36,598\]\[ERROR\]\[license.plugin.c… --- ## [Lens or Aggs query to group by having count \> X](https://discuss.elastic.co/t/lens-or-aggs-query-to-group-by-having-count-x/354264)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 5\ **Last updated:** [March 6, 2024, 8:05pm UTC](https://discuss.elastic.co/t/lens-or-aggs-query-to-group-by-having-count-x/354264 "2024-03-06T20:05:23Z")
I'm drawing a blank on how to accomplish this in Kibana or Elastic. Prefer to have this in a Lens visual so I can add to a dashboard, but minimally I can do it with an aggregate API query in Kibana dev tools. I'm dumbi… --- ## [ELK - SNMP 연동 문의](https://discuss.elastic.co/t/elk-snmp/262321)
**Author:** [@KANG](https://discuss.elastic.co/u/KANG)\ **Replies:** 5\ **Last updated:** [February 18, 2021, 5:20am UTC](https://discuss.elastic.co/t/elk-snmp/262321 "2021-02-18T05:20:15Z")
A 솔루션 (Agent) - ELK (manager)로 구성하여 ELK에서 SNMP 정보를 분석하려 합니다. A솔루션은 Root 권한이 주어지지 않는 장비로, SNMP Polling 방식만 가능합니다. 이때 ELK에서 SNMP GetRequest를 발생시켜야하는데, 관련 데몬이나 프로그램등이 있을까요? 구글링해서 찾아본 net-snmp는 ELK가 Agent가 되는 방법이라 사용을 못하는… --- ## [Getting disk space error when rolling upgrades](https://discuss.elastic.co/t/getting-disk-space-error-when-rolling-upgrades/208977)
**Author:** [@araujonelson](https://discuss.elastic.co/u/araujonelson)\ **Replies:** 5\ **Last updated:** [November 22, 2019, 1:51pm UTC](https://discuss.elastic.co/t/getting-disk-space-error-when-rolling-upgrades/208977 "2019-11-22T13:51:29Z")
Hello, I'm currently performing a rolling upgrade from ES 5.6.8 to 6.8.4 following the steps told here Everything is fine but I'm having troubles with certain nodes and disk space. I'll describe the scenario I'm having… --- ## [How do you draw "fit" line in time series builder in kibana (7.1.1)?](https://discuss.elastic.co/t/how-do-you-draw-fit-line-in-time-series-builder-in-kibana-7-1-1/196895)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 5\ **Last updated:** [September 3, 2019, 5:33pm UTC](https://discuss.elastic.co/t/how-do-you-draw-fit-line-in-time-series-builder-in-kibana-7-1-1/196895 "2019-09-03T17:33:34Z")
I am trying to draw "fit" line in time series in below red points. I have referenced the github issue but not quite sure if fitting . Can we do the fit (average) same as timelion in timeseries builder ? Thanks, Yu… --- ## [Logstash file wont run](https://discuss.elastic.co/t/logstash-file-wont-run/55927)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 5\ **Last updated:** [July 21, 2016, 6:24pm UTC](https://discuss.elastic.co/t/logstash-file-wont-run/55927 "2016-07-21T18:24:06Z")
I have the following logstash configuration file. When i try to run it..it won't show up on stdout...what it wrong with it? It worked before...what happened now? PLEASE HELP! input { file { path =\> \[ "/opt/cast/r… --- ## [Filter Cache Expire](https://discuss.elastic.co/t/filter-cache-expire/13852)
**Author:** [@Logan](https://discuss.elastic.co/u/Logan)\ **Replies:** 5\ **Last updated:** [October 11, 2013, 12:26am UTC](https://discuss.elastic.co/t/filter-cache-expire/13852 "2013-10-11T00:26:18Z")
I'm running Elasticsearch 0.90.3 and I've noticed that my filter cache gets dropped after about 30 minutes or so without seeing any actual evictions. I'd like to be able to warm up the cache and have that warm data p… [Previous page](https://discuss.elastic.co/top.md?page=1114&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1116&per_page=50&period=all)