# Top **URL:** https://discuss.elastic.co/top.md?page=1123&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1124 --- ## [To access the parent fields using ES query](https://discuss.elastic.co/t/to-access-the-parent-fields-using-es-query/163391)
**Author:** [@Naveena](https://discuss.elastic.co/u/Naveena)\ **Replies:** 0\ **Last updated:** [January 8, 2019, 3:36pm UTC](https://discuss.elastic.co/t/to-access-the-parent-fields-using-es-query/163391 "2019-01-08T15:36:27Z")
Hi, I have created a parent - child relationship between employee and address. PUT my\_index10 { "mappings": { "doc": { "properties": { "my\_join\_field": { "type": "join", "relations": { "employee": "address" } … --- ## [Indexing document in multiple index](https://discuss.elastic.co/t/indexing-document-in-multiple-index/102984)
**Author:** [@Arian\_Dave\_Mabanag](https://discuss.elastic.co/u/Arian_Dave_Mabanag)\ **Replies:** 0\ **Last updated:** [October 6, 2017, 9:43am UTC](https://discuss.elastic.co/t/indexing-document-in-multiple-index/102984 "2017-10-06T09:43:14Z")
Im currently working on a document which needs to be in a monthly index. This document contains 2 datetime fields which will be used as a reference to where it needs to indexed. The first one being the datetime when it i… --- ## [Ignore NoRouteToHostException with client.transport.sniff=true](https://discuss.elastic.co/t/ignore-noroutetohostexception-with-client-transport-sniff-true/78759)
**Author:** [@Neni](https://discuss.elastic.co/u/Neni)\ **Replies:** 0\ **Last updated:** [March 15, 2017, 7:50pm UTC](https://discuss.elastic.co/t/ignore-noroutetohostexception-with-client-transport-sniff-true/78759 "2017-03-15T19:50:14Z")
Below are my observations with ES cluster 3 nodes/instances with ES 2.1 version . we have some client application (say rest services) establishes ES client connections with ES cluster 3 nodes during server startup . I s… --- ## [Filebeat fills up the disk very quickly and write log repeatedly](https://discuss.elastic.co/t/filebeat-fills-up-the-disk-very-quickly-and-write-log-repeatedly/252404)
**Author:** [@linxianwu](https://discuss.elastic.co/u/linxianwu)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 12:44pm UTC](https://discuss.elastic.co/t/filebeat-fills-up-the-disk-very-quickly-and-write-log-repeatedly/252404 "2020-10-21T12:44:06Z")
In our environment, filebeat has a lot of this error (file name is replaced): DEBUG \[input\] log/input.go:261 State for file not removed because harvester not finished: /var/log/xxx.log DEBUG \[input\] log/input.go:251 Rem… --- ## [Host.id is not unique](https://discuss.elastic.co/t/host-id-is-not-unique/196487)
**Author:** [@navigator182](https://discuss.elastic.co/u/navigator182)\ **Replies:** 4\ **Last updated:** [September 6, 2019, 2:39am UTC](https://discuss.elastic.co/t/host-id-is-not-unique/196487 "2019-09-06T02:39:55Z")
I am running auditbeat with more than 300 hosts, but there is 50 hosts showing at "\[Visualize\]Host Count \[Auditbeat System\] ECS". I find that the host.id is not unique. it's same on filebeat. How is it happened?auditbeat… --- ## [Issue seeing the whole infrastructure page when to many groups using group by](https://discuss.elastic.co/t/issue-seeing-the-whole-infrastructure-page-when-to-many-groups-using-group-by/180869)
**Author:** [@DaveRoss](https://discuss.elastic.co/u/DaveRoss)\ **Replies:** 4\ **Last updated:** [May 14, 2019, 1:22pm UTC](https://discuss.elastic.co/t/issue-seeing-the-whole-infrastructure-page-when-to-many-groups-using-group-by/180869 "2019-05-14T13:22:29Z")
I have a UI issue when trying to see pods by namespace using Kubernetes view in Infrastructure. Some group start before the window and some end after the window end. Anyone has the same issue ? --- ## [Select output plugin based on a field](https://discuss.elastic.co/t/select-output-plugin-based-on-a-field/101210)
**Author:** [@Ram\_Sharan\_Mittal](https://discuss.elastic.co/u/Ram_Sharan_Mittal)\ **Replies:** 4\ **Last updated:** [September 24, 2017, 8:35pm UTC](https://discuss.elastic.co/t/select-output-plugin-based-on-a-field/101210 "2017-09-24T20:35:03Z")
In my requirement, event have to send to different output plugin based on a field in input --- ## [Elasticsearch unavailable during upgrade](https://discuss.elastic.co/t/elasticsearch-unavailable-during-upgrade/39146)
**Author:** [@jzheaux](https://discuss.elastic.co/u/jzheaux)\ **Replies:** 4\ **Last updated:** [January 14, 2016, 9:46pm UTC](https://discuss.elastic.co/t/elasticsearch-unavailable-during-upgrade/39146 "2016-01-14T21:46:49Z")
We are in the process of upgrading from 1.6 to 2.1. The logs show a lot of activity with regard to upgrading each index; however, during that time, connections on 9200 are refused. Is that expected behavior? --- ## [Strange search results](https://discuss.elastic.co/t/strange-search-results/17197)
**Author:** [@Patrick\_Proniewski](https://discuss.elastic.co/u/Patrick_Proniewski)\ **Replies:** 4\ **Last updated:** [April 28, 2014, 7:29pm UTC](https://discuss.elastic.co/t/strange-search-results/17197 "2014-04-28T19:29:32Z")
Hello, Disclaimer: I'm a total newbie with Elasticsearch. I've installed a dedicated ES 1.1.0 server (FreeBSD port), Logstash 1.4.0 (and it's bundled Kibana 3.x). Everything is working fine, except some particular sea… --- ## [Monitor Tags in Uptime not working correctly](https://discuss.elastic.co/t/monitor-tags-in-uptime-not-working-correctly/290742)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 7\ **Last updated:** [December 7, 2021, 9:45am UTC](https://discuss.elastic.co/t/monitor-tags-in-uptime-not-working-correctly/290742 "2021-12-07T09:45:23Z")
Hello, We are on 7.13. and there is an issue with monitor tags in Uptime. Not all tags are shown when we expand the Tag filter (missing like 10-15 tags) If we search (in the Tag's search box) for a tag, missing tags w… --- ## [Kibana cannot read UUID file](https://discuss.elastic.co/t/kibana-cannot-read-uuid-file/252000)
**Author:** [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 9:09am UTC](https://discuss.elastic.co/t/kibana-cannot-read-uuid-file/252000 "2020-10-14T09:09:52Z")
Hi, I'm trying to upgrade the Elastic Stack from 7.6.2 to 7.9.1 but for some reason Kibana is not starting. The error logged during startup is: Kibana cannot read the uuid file, please make sure server.uuid is set in … --- ## [Change background color of a 'controls' visualization component](https://discuss.elastic.co/t/change-background-color-of-a-controls-visualization-component/216332)
**Author:** [@rosamar](https://discuss.elastic.co/u/rosamar)\ **Replies:** 7\ **Last updated:** [January 28, 2020, 5:07pm UTC](https://discuss.elastic.co/t/change-background-color-of-a-controls-visualization-component/216332 "2020-01-28T17:07:11Z")
Is it possible to change the background color of a 'controls' visualization component? Thank you --- ## [Unassigned shards on ES 2.4.4](https://discuss.elastic.co/t/unassigned-shards-on-es-2-4-4/141927)
**Author:** [@Jordi\_Cabre](https://discuss.elastic.co/u/Jordi_Cabre)\ **Replies:** 7\ **Last updated:** [July 30, 2018, 8:15am UTC](https://discuss.elastic.co/t/unassigned-shards-on-es-2-4-4/141927 "2018-07-30T08:15:50Z")
I'm using an ES 2.4.4. Currently, I'm getting this content response at \_cluster/health?level=nodes { "cluster\_name":"logging-es", "status":"red", "timed\_out":false, "number\_of\_nodes":1, "number\_of\_data\_n… --- ## [Palo Alto filter](https://discuss.elastic.co/t/palo-alto-filter/132838)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 1\ **Last updated:** [May 24, 2018, 8:45pm UTC](https://discuss.elastic.co/t/palo-alto-filter/132838 "2018-05-24T20:45:03Z")
Please is this part of config file correcte : else if \[fields\]\[log\_type\] == "paloalto" { csv { "data" =\> "FUTURE\_USE", "Receive Time", "Serial Number", "Type", "Subtype", "FUTURE\_… --- ## [Elastic Runetime Error ScriptException](https://discuss.elastic.co/t/elastic-runetime-error-scriptexception/112880)
**Author:** [@Ricigliano](https://discuss.elastic.co/u/Ricigliano)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 7:24pm UTC](https://discuss.elastic.co/t/elastic-runetime-error-scriptexception/112880 "2017-12-21T19:24:49Z")
I am getting this error in the Elasticsearch logs, does anyone what this is from: \[2017-12-21T10:57:21,040\]\[ERROR\]\[o.e.x.w.t.s.ExecutableScriptTransform\] \[4mjFsbb\] failed to execute \[script\] transform for \[v4VKEfxATo-5d… --- ## [Elasticsearch aggregation and multiple sub aggregation memory issue](https://discuss.elastic.co/t/elasticsearch-aggregation-and-multiple-sub-aggregation-memory-issue/40430)
**Author:** [@PureAwesome](https://discuss.elastic.co/u/PureAwesome)\ **Replies:** 1\ **Last updated:** [August 30, 2016, 2:54pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-and-multiple-sub-aggregation-memory-issue/40430 "2016-08-30T14:54:24Z")
I only have 81,000 docs, 26mb size, 1 index and 2 shards. The index metadata mapping fields are just flat listed, no nested fields. fielddata memory\_size\_in\_bytes: 2179736 The following query keep causing circuit break… --- ## [Metricbeat & zabbix](https://discuss.elastic.co/t/metricbeat-zabbix/237515)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 3:38pm UTC](https://discuss.elastic.co/t/metricbeat-zabbix/237515 "2020-06-18T15:38:43Z")
which one is better for large computer center (10,000+) linux system? we have zabbix running at this time with alerting and few more stuff with it. tested metricbeat with few system, just system level stuff and index b… --- ## [Fetching a reporting dashboard that has been setup on Kibana as an email attachment using a Watch](https://discuss.elastic.co/t/fetching-a-reporting-dashboard-that-has-been-setup-on-kibana-as-an-email-attachment-using-a-watch/113032)
**Author:** [@Indiresh\_Ds](https://discuss.elastic.co/u/Indiresh_Ds)\ **Replies:** 3\ **Last updated:** [January 2, 2018, 6:06pm UTC](https://discuss.elastic.co/t/fetching-a-reporting-dashboard-that-has-been-setup-on-kibana-as-an-email-attachment-using-a-watch/113032 "2018-01-02T18:06:21Z")
Hi there, I am trying to fetch the dashboard that is setup as an email attachment. I followed the instructions mentioned at https://www.elastic.co/guide/en/kibana/current/automating-report-generation.html But somehow, … --- ## [Elasticsearch cluster is not working properly](https://discuss.elastic.co/t/elasticsearch-cluster-is-not-working-properly/52259)
**Author:** [@Praveenj](https://discuss.elastic.co/u/Praveenj)\ **Replies:** 3\ **Last updated:** [June 9, 2016, 9:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-is-not-working-properly/52259 "2016-06-09T21:36:06Z")
We are using clustered elasticsearch setup in our environment. We have a 4 nodes in a cluster. But, sometimes, every nodes acts as a separate cluster. Whenever i tried to run \[elasticsearchnode\]/\_cat/nodes?v. Everytime g… --- ## [Windows Eventlogs are not recieved at Elasticsearch via Filebeat](https://discuss.elastic.co/t/windows-eventlogs-are-not-recieved-at-elasticsearch-via-filebeat/51672)
**Author:** [@HasanJamal](https://discuss.elastic.co/u/HasanJamal)\ **Replies:** 3\ **Last updated:** [June 3, 2016, 6:18am UTC](https://discuss.elastic.co/t/windows-eventlogs-are-not-recieved-at-elasticsearch-via-filebeat/51672 "2016-06-03T06:18:57Z")
I have setup filebeat at my client machine Windows 8.1 to send Windows Event logs to Elasticsearch for analysis in Kibana The configuration of filebeat.yml is seemed to be OK but I an not receiving any logs at elastic… --- ## [Get mapping in "flat" format](https://discuss.elastic.co/t/get-mapping-in-flat-format/39855)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 3\ **Last updated:** [January 25, 2016, 8:55am UTC](https://discuss.elastic.co/t/get-mapping-in-flat-format/39855 "2016-01-25T08:55:15Z")
Is there a possibility to get the leaf field names in the mappings from an ES index in a flat format? E.g.: "message.author.firstname" : { properties... } instead of {"message": { "author" : { "firstname" (very simpl… --- ## [Ngram and score in query](https://discuss.elastic.co/t/ngram-and-score-in-query/93901)
**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\ **Replies:** 2\ **Last updated:** [July 31, 2017, 1:28am UTC](https://discuss.elastic.co/t/ngram-and-score-in-query/93901 "2017-07-31T01:28:03Z")
Hi Elasticsearch. When we do a ngram tokenizer, we will get token with start\_offset. { "token": "vi", "start\_offset": 0, "end\_offset": 2, "type": "word", "position": 0 }, { … --- ## [Kibana 4.2.0/ES2.0 Discover - No results found w/ any Terms bucket](https://discuss.elastic.co/t/kibana-4-2-0-es2-0-discover-no-results-found-w-any-terms-bucket/33775)
**Author:** [@Curtis\_Ruck](https://discuss.elastic.co/u/Curtis_Ruck)\ **Replies:** 2\ **Last updated:** [November 5, 2015, 5:46pm UTC](https://discuss.elastic.co/t/kibana-4-2-0-es2-0-discover-no-results-found-w-any-terms-bucket/33775 "2015-11-05T17:46:09Z")
I'm attempting to migrate from 1.7.x to 2.0 with Kibana 4.2.0. We were using a default mapping file, and i've migrated it to index templates. Now, in Discover, when I try to make a Terms bucket in any visualization typ… --- ## [Elasticsearch Cluster Status red and Incides status red without error and reason](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-incides-status-red-without-error-and-reason/276513)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 12:50am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-incides-status-red-without-error-and-reason/276513 "2021-06-22T00:50:55Z")
Hi everyone, My problem is some indices have red status without reason. ENV: Elasticsearch 7.9.0 Centos 7 Clustering 4 node (3 data-master Node + 1 Coordinator Node) Using logstash to parsing data and using elasticse… --- ## [TypeMissingException](https://discuss.elastic.co/t/typemissingexception/8155)
**Author:** [@Charlie\_Ott](https://discuss.elastic.co/u/Charlie_Ott)\ **Replies:** 5\ **Last updated:** [June 21, 2012, 7:44am UTC](https://discuss.elastic.co/t/typemissingexception/8155 "2012-06-21T07:44:02Z")
Thanks in advance for anyone taking time to read this post and provide feedback. We have been using elasticsearch since version 0.17 for our enterprise web application. As more documents are being indexed, i have i… --- ## [Add a custom field in Kibana](https://discuss.elastic.co/t/add-a-custom-field-in-kibana/322138)
**Author:** [@jessutanto](https://discuss.elastic.co/u/jessutanto)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 5:55pm UTC](https://discuss.elastic.co/t/add-a-custom-field-in-kibana/322138 "2022-12-29T17:55:14Z")
Hi, I wanted to add a field where it calculates the age of a person, thus --\> Birth date - Now I tried to implement this guide. \[see the Datetime Now Example\]. Somehow I got an error said cannot resolve symbol \[zdt\]. … --- ## [Support for environment variables in kibana.yml](https://discuss.elastic.co/t/support-for-environment-variables-in-kibana-yml/113973)
**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\ **Replies:** 1\ **Last updated:** [January 3, 2018, 9:27pm UTC](https://discuss.elastic.co/t/support-for-environment-variables-in-kibana-yml/113973 "2018-01-03T21:27:14Z")
Hi there! Just wondering if in the near future there will be support for using environment variables in Kibana's configuration file. Will definitely come very handy since I have to set up different locations for PID fil… --- ## [eMail Notification via Logstash](https://discuss.elastic.co/t/email-notification-via-logstash/103218)
**Author:** [@baldy2811](https://discuss.elastic.co/u/baldy2811)\ **Replies:** 1\ **Last updated:** [October 9, 2017, 7:06pm UTC](https://discuss.elastic.co/t/email-notification-via-logstash/103218 "2017-10-09T19:06:08Z")
Hi there, i wanted to have email Notifications when some issues appears. I created such Output: output { elasticsearch { hosts =\> \["10.10.5.100:9200"\] manage\_template =\> false index =\> "%{\[@metadata\]\[beat\]}-%{+YYY… --- ## [Use painless script in transform aggregation](https://discuss.elastic.co/t/use-painless-script-in-transform-aggregation/240600)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 12:28pm UTC](https://discuss.elastic.co/t/use-painless-script-in-transform-aggregation/240600 "2020-07-13T12:28:26Z")
Hi i am running 7.6.2 Elastic search and kibana , and i was trying simple painless script in transform aggregation . POST \_transform/\_preview { "source": { "index": "testindex\*" }, "pivot": { "group\_… --- ## [Logstash cannot index to Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch/128708)
**Author:** [@haseebsabir](https://discuss.elastic.co/u/haseebsabir)\ **Replies:** 6\ **Last updated:** [April 19, 2018, 4:22pm UTC](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch/128708 "2018-04-19T16:22:29Z")
I am very new to ELK. I am getting error message that logstash Could not index event to Elasticsearch. \[2018-04-18T16:30:06,128\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>4… --- ## [Configure APM to collect jmx metrics](https://discuss.elastic.co/t/configure-apm-to-collect-jmx-metrics/281646)
**Author:** [@Jalil](https://discuss.elastic.co/u/Jalil)\ **Replies:** 4\ **Last updated:** [August 18, 2021, 9:15am UTC](https://discuss.elastic.co/t/configure-apm-to-collect-jmx-metrics/281646 "2021-08-18T09:15:34Z")
Dear all, Since some days ago, I'm trying to collect jmx metrics from java app and index them to ES in order to visualize them in kibana but without any result. APM is already configured but it don't give me all metric… --- ## [Can I add custom SVGs as symbols on ElasticSearch Kibana Maps?](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309)
**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 11:43pm UTC](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309 "2021-02-09T23:43:17Z")
Hi all, We have a map view taking a GeoJSON feed and plotting points according to long/lat. It works really well, but the out of the box symbols provided don't match our data use-case (weather events etc). I'm capable… --- ## [How to keep syslog header when saving to file?](https://discuss.elastic.co/t/how-to-keep-syslog-header-when-saving-to-file/194130)
**Author:** [@dickens88](https://discuss.elastic.co/u/dickens88)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 11:52am UTC](https://discuss.elastic.co/t/how-to-keep-syslog-header-when-saving-to-file/194130 "2019-08-07T11:52:13Z")
Guys, when I use logstash to input syslog and keep the message to file, I found it seems logstash won't keep syslog header. my configuration looks like this: input{ syslog { port =\> 1522 } } output{ … --- ## [Enable script inline elasticsearch 2.3, unable to restart elasticsearch fails](https://discuss.elastic.co/t/enable-script-inline-elasticsearch-2-3-unable-to-restart-elasticsearch-fails/58805)
**Author:** [@Pradeep\_Sathyaraj](https://discuss.elastic.co/u/Pradeep_Sathyaraj)\ **Replies:** 4\ **Last updated:** [April 8, 2017, 3:46pm UTC](https://discuss.elastic.co/t/enable-script-inline-elasticsearch-2-3-unable-to-restart-elasticsearch-fails/58805 "2017-04-08T15:46:38Z")
POST /customer/external/1/\_update?pretty { "script" : "ctx.\_source.age += 5" } I got this error, "reason": "scripts of type \[inline\], operation \[update\] and lang \[groovy\] are disabled" I update elasticsearch.yml… --- ## [How to change the jvm options config](https://discuss.elastic.co/t/how-to-change-the-jvm-options-config/313085)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 28, 2022, 10:00am UTC](https://discuss.elastic.co/t/how-to-change-the-jvm-options-config/313085 "2022-08-28T10:00:33Z")
I want to decrease the ram of the consummation of elastic in the JVM options config how can I? ################################################################ ## IMPORTANT: JVM heap size ###############################… --- ## [Limits?](https://discuss.elastic.co/t/limits/281505)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 8\ **Last updated:** [August 19, 2021, 4:28pm UTC](https://discuss.elastic.co/t/limits/281505 "2021-08-19T16:28:58Z")
App Search has this handy page describing the limits Do these same limits apply to Workplace Search? If not, is there a document like this explaining the limits for Workplace Search? --- ## [Logstash parsing json](https://discuss.elastic.co/t/logstash-parsing-json/265163)
**Author:** [@ali\_ghorbani](https://discuss.elastic.co/u/ali_ghorbani)\ **Replies:** 8\ **Last updated:** [March 1, 2021, 10:23am UTC](https://discuss.elastic.co/t/logstash-parsing-json/265163 "2021-03-01T10:23:51Z")
I am trying to use log-stash to read input file 1.log in JSON format and write on elasticsearch. This is my log file: {"key":"value00"} {"key":"value01"} {"key1":\[{"key2":"value02"},{"key3":"value03"},{"key4":\[{"key5":"… --- ## [Vega tree graph in Kibana: how to reference the fields from different indices?](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114)
**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 7:01pm UTC](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114 "2020-11-23T19:01:32Z")
Hi I am following this example and I am having an issue linking the fields of the indices. I have two indices one for nodes, and one for the links between them. My indices as follows: nodes: { "\_index" … --- ## [Possible to Highlight Inner Hits in Percolate Query?](https://discuss.elastic.co/t/possible-to-highlight-inner-hits-in-percolate-query/91926)
**Author:** [@a\_l](https://discuss.elastic.co/u/a_l)\ **Replies:** 3\ **Last updated:** [July 10, 2017, 7:28am UTC](https://discuss.elastic.co/t/possible-to-highlight-inner-hits-in-percolate-query/91926 "2017-07-10T07:28:13Z")
In ES 5.4, can the percolate query do highlighting on inner\_hits? The docs used to explicitly say no, but that was removed in the commit that replaced the Percolator with the percolate query so I'm hoping against hope … --- ## [Multiline filter sometimes doesn't work](https://discuss.elastic.co/t/multiline-filter-sometimes-doesnt-work/27568)
**Author:** [@alessandro\_aglietti](https://discuss.elastic.co/u/alessandro_aglietti)\ **Replies:** 3\ **Last updated:** [November 25, 2015, 4:46pm UTC](https://discuss.elastic.co/t/multiline-filter-sometimes-doesnt-work/27568 "2015-11-25T16:46:06Z")
Hi there, I've setup the following configuration to parse a WordPress debug.log file and then send to Google Cloud Logging. input { file { path =\> \["/path/to/wp-content/debug.log"\] type =\> "debug" … --- ## ["Content-Type header \[text/plain; charset=ISO-8859-1\] is not supported","status":406](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309)
**Author:** [@Dan4](https://discuss.elastic.co/u/Dan4)\ **Replies:** 2\ **Last updated:** [March 30, 2021, 7:47am UTC](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309 "2021-03-30T07:47:33Z")
Hello together, I am new to the elastic stack and have no further experience than just google a solution. In my environment I have to use Logstash on a remote server. I have no control and influence over the version whi… --- ## [Filebeat Kubernetes metadata - Add namespace labels to kubernetes metadata](https://discuss.elastic.co/t/filebeat-kubernetes-metadata-add-namespace-labels-to-kubernetes-metadata/201715)
**Author:** [@jeffspahr](https://discuss.elastic.co/u/jeffspahr)\ **Replies:** 2\ **Last updated:** [October 2, 2019, 2:20am UTC](https://discuss.elastic.co/t/filebeat-kubernetes-metadata-add-namespace-labels-to-kubernetes-metadata/201715 "2019-10-02T02:20:20Z")
As operators of a multi tenant Kubernetes cluster and operators of the Elastic Stack we want to be able to drop logs by namespace when log rates exceed a certain number. We'd like to control this by adding labels to a n… --- ## [Incremental backup with Curator](https://discuss.elastic.co/t/incremental-backup-with-curator/156699)
**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\ **Replies:** 2\ **Last updated:** [November 14, 2018, 3:00pm UTC](https://discuss.elastic.co/t/incremental-backup-with-curator/156699 "2018-11-14T15:00:09Z")
Hi , I didn't find a 100% answer regarding incremental backup using Curator. Does Curator makes Incremental backups by default, or I need to config it to make Incremental backups? Thanks! --- ## [Multiple ES-Hadoop versions detected in the classpath](https://discuss.elastic.co/t/multiple-es-hadoop-versions-detected-in-the-classpath/75527)
**Author:** [@G\_Babu\_Prabhakar](https://discuss.elastic.co/u/G_Babu_Prabhakar)\ **Replies:** 2\ **Last updated:** [February 19, 2017, 2:37pm UTC](https://discuss.elastic.co/t/multiple-es-hadoop-versions-detected-in-the-classpath/75527 "2017-02-19T14:37:44Z")
Getting Multiple ES-Hadoop versions issues. Using MapR distribution of Hadoop. Running Spark job in yarn/cluster mode. java.lang.Error: Multiple ES-Hadoop versions detected in the classpath; please use only one jar:fi… --- ## [Is it possible to apply aggrigate function on scripted fields in kibana? e-g Sum of product](https://discuss.elastic.co/t/is-it-possible-to-apply-aggrigate-function-on-scripted-fields-in-kibana-e-g-sum-of-product/43775)
**Author:** [@mrizwan](https://discuss.elastic.co/u/mrizwan)\ **Replies:** 2\ **Last updated:** [March 18, 2016, 1:12pm UTC](https://discuss.elastic.co/t/is-it-possible-to-apply-aggrigate-function-on-scripted-fields-in-kibana-e-g-sum-of-product/43775 "2016-03-18T13:12:45Z")
I want to do this and generate a scripted field SUM(doc\['Field1'\].value) /SUM( doc\['Field2'\].value) is this possible in Kibana or any work around for this ? --- ## [Index Creation Using Nest(C#)](https://discuss.elastic.co/t/index-creation-using-nest-c/28099)
**Author:** [@pavang6](https://discuss.elastic.co/u/pavang6)\ **Replies:** 2\ **Last updated:** [August 28, 2015, 6:51am UTC](https://discuss.elastic.co/t/index-creation-using-nest-c/28099 "2015-08-28T06:51:25Z")
We are Using Nest client in our application . We are trying to modify the code below so that the geo point field count is dynamic not predefined like this. elasticClient.CreateIndex(inputParameter.IndexName, s =\> s.Num… --- ## [Ruby exception occurred: uninitialized constant when i am trying to devide a field value by 100](https://discuss.elastic.co/t/ruby-exception-occurred-uninitialized-constant-when-i-am-trying-to-devide-a-field-value-by-100/312058)
**Author:** [@Faiz\_Shamri](https://discuss.elastic.co/u/Faiz_Shamri)\ **Replies:** 7\ **Last updated:** [August 14, 2022, 6:19pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-uninitialized-constant-when-i-am-trying-to-devide-a-field-value-by-100/312058 "2022-08-14T18:19:08Z")
I am trying to devide filed value by 100 but i am getting Pipelines running {:count=\>1, :running\_pipelines=\>\[:main\], :non\_running\_pipelines=\>\[\]} \[ERROR\] 2022-08-14 00:10:07.738 \[\[main\]\>worker2\] ruby - Ruby exception occu… --- ## [Problem on starting elasticsearch](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 12:27am UTC](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911 "2022-05-05T00:27:30Z")
root@elastic:~# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result:… --- ## [Elastic Clustering - Issuw with Node](https://discuss.elastic.co/t/elastic-clustering-issuw-with-node/189250)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 7\ **Last updated:** [July 8, 2019, 5:20am UTC](https://discuss.elastic.co/t/elastic-clustering-issuw-with-node/189250 "2019-07-08T05:20:52Z")
I followed instructions to connect 2 separate physical machines to the same cluster, however I am getting this error on my data node. Note: My master node (which is also a data node) is up and running. All my Elastic ins… --- ## [Xpack license in 6.41](https://discuss.elastic.co/t/xpack-license-in-6-41/149919)
**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\ **Replies:** 7\ **Last updated:** [September 26, 2018, 7:46am UTC](https://discuss.elastic.co/t/xpack-license-in-6-41/149919 "2018-09-26T07:46:08Z")
x-pack package in ELK version 5.1.2 release is not free.It comes with 30 days trial version. I heard that the x-pack package for the 6.4.1 release is free. Is that correct or we just get 30 days free trial version with … [Previous page](https://discuss.elastic.co/top.md?page=1122&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1124&per_page=50&period=all)