# Top

**URL:** https://discuss.elastic.co/top.md?page=1127&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1128

---

## [Security\_exception: current license is non-compliant for \[searchable-snapshots\]](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-searchable-snapshots/321925)

<div class="topic-metadata">

**Author:** [@Frobeniusnorm](https://discuss.elastic.co/u/Frobeniusnorm)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 3:16pm UTC](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-searchable-snapshots/321925 "2022-12-23T15:16:41Z")

</div>

In my Index Management i get the warning: Index lifecycle error security\_exception: current license is non-compliant for \[searchable-snapshots\] But when i go to the policies, searchable snapshots are not activated. H…

---

## [How to visualize division of two sum aggregations per time bucket](https://discuss.elastic.co/t/how-to-visualize-division-of-two-sum-aggregations-per-time-bucket/205281)

<div class="topic-metadata">

**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\
**Replies:** 3\
**Last updated:** [December 5, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-visualize-division-of-two-sum-aggregations-per-time-bucket/205281 "2019-12-05T07:46:51Z")

</div>

Hello, We want to create a visualizations in which we can compare the average prices per week for different years. Normally we would just get the mean prices per week. But, the problem in our case is that each document …

---

## [Removing annoying characters before a Json formated string](https://discuss.elastic.co/t/removing-annoying-characters-before-a-json-formated-string/157522)

<div class="topic-metadata">

**Author:** [@Josef](https://discuss.elastic.co/u/Josef)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 9:24am UTC](https://discuss.elastic.co/t/removing-annoying-characters-before-a-json-formated-string/157522 "2018-11-21T09:24:57Z")

</div>

Hello, I'm just a beginner in ELK, so please forgive me in advance. Here is the kind of input I have in logstash : E...(.@.@..b......................=...B.{"rxpk":\[{"tmst":297436019,"time":"2018-11-20T10:54:01.237397Z…

---

## [Define custom ID to a document with saveJsonToES()](https://discuss.elastic.co/t/define-custom-id-to-a-document-with-savejsontoes/112490)

<div class="topic-metadata">

**Author:** [@lonlylocly](https://discuss.elastic.co/u/lonlylocly)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 6:07pm UTC](https://discuss.elastic.co/t/define-custom-id-to-a-document-with-savejsontoes/112490 "2017-12-19T18:07:31Z")

</div>

I am trying to write a collection of objects in Elasticsearch from Spark. I have to meet two requirements: Document is already serialized in JSON and should be written as is Elasticsearch document \_id should be provide…

---

## [Date filter usage to avoid \_dateparsefailure](https://discuss.elastic.co/t/date-filter-usage-to-avoid--dateparsefailure/52831)

<div class="topic-metadata">

**Author:** [@sumeshms](https://discuss.elastic.co/u/sumeshms)\
**Replies:** 3\
**Last updated:** [June 15, 2016, 10:03am UTC](https://discuss.elastic.co/t/date-filter-usage-to-avoid--dateparsefailure/52831 "2016-06-15T10:03:48Z")

</div>

Hello I am getting \_dateparsefailure This is my actual log: "message": "protocol=6, source-ip=192.168.1.81, source-port=64737, destination-ip=1.1.1.1, destination-port=443, time=2016/06/15 10:34:17, interzone-trust…

---

## [Indexing hangs via REST API](https://discuss.elastic.co/t/indexing-hangs-via-rest-api/3187)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 6\
**Last updated:** [August 5, 2010, 7:43am UTC](https://discuss.elastic.co/t/indexing-hangs-via-rest-api/3187 "2010-08-05T07:43:24Z")

</div>

Hello, I seem to be getting some hanging when indexing documents. I'm still playing around to see if I can pin down exactly what is causing the issue. Also, I am not sure if this is an ES issue, an issue with the H…

---

## [Usage of Winlogbeat on Linux / Parse plaintext windows events files](https://discuss.elastic.co/t/usage-of-winlogbeat-on-linux-parse-plaintext-windows-events-files/270113)

<div class="topic-metadata">

**Author:** [@GeorgeGkinis](https://discuss.elastic.co/u/GeorgeGkinis)\
**Replies:** 1\
**Last updated:** [April 14, 2021, 2:52pm UTC](https://discuss.elastic.co/t/usage-of-winlogbeat-on-linux-parse-plaintext-windows-events-files/270113 "2021-04-14T14:52:13Z")

</div>

We have the need to run winlogbeat on Linux. I see that there are no precompiled binaries for Linux which is somewhat understandable. In our usecase winlog events are transported via syslog to a linux VM. There parsin…

---

## [Remove specific fields from index pattern](https://discuss.elastic.co/t/remove-specific-fields-from-index-pattern/242165)

<div class="topic-metadata">

**Author:** [@sfenman](https://discuss.elastic.co/u/sfenman)\
**Replies:** 1\
**Last updated:** [July 22, 2020, 11:20am UTC](https://discuss.elastic.co/t/remove-specific-fields-from-index-pattern/242165 "2020-07-22T11:20:32Z")

</div>

Hello, I am using filebeat to parse my logs to Elasticsearch and after some testing with the dissect processor on ingest pipelines, I created too many random fields by mistake as I have noticed from my index patterns on…

---

## [Java Client or Spring Boot for ElasticSearch 7.3.1](https://discuss.elastic.co/t/java-client-or-spring-boot-for-elasticsearch-7-3-1/199778)

<div class="topic-metadata">

**Author:** [@mark\_sirus](https://discuss.elastic.co/u/mark_sirus)\
**Replies:** 1\
**Last updated:** [September 17, 2019, 2:49pm UTC](https://discuss.elastic.co/t/java-client-or-spring-boot-for-elasticsearch-7-3-1/199778 "2019-09-17T14:49:17Z")

</div>

Hi, I am not able to find a solution to access the elasticsearch 7.3.1 via Java Client. I tried Spring Boot, TransportClient but I always get the version error: java.lang.IllegalStateException: Received message from un…

---

## [Kibana did not load properly /bundles folder items wont load - FIXED](https://discuss.elastic.co/t/kibana-did-not-load-properly-bundles-folder-items-wont-load-fixed/92683)

<div class="topic-metadata">

**Author:** [@DShuman27](https://discuss.elastic.co/u/DShuman27)\
**Replies:** 1\
**Last updated:** [July 12, 2017, 8:27pm UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-bundles-folder-items-wont-load-fixed/92683 "2017-07-12T20:27:31Z")

</div>

I'm very new to Kibana setup other than being a light user at work. Trying to setup and learn it as a hobby more or less and expand my knowledge. I've installed elastic search per the install page instruction, insta…

---

## [Elasticsearch Escape WhiteSpace Character](https://discuss.elastic.co/t/elasticsearch-escape-whitespace-character/29190)

<div class="topic-metadata">

**Author:** [@stormcloak](https://discuss.elastic.co/u/stormcloak)\
**Replies:** 1\
**Last updated:** [September 13, 2015, 9:39pm UTC](https://discuss.elastic.co/t/elasticsearch-escape-whitespace-character/29190 "2015-09-13T21:39:54Z")

</div>

I have two records in my index. This records; \> var person = new Person \> { \> Id = "1", \> Firstname = "john smith", \> Lastname = "hendrick" \> }; \> var person2 = new Person \> { \> …

---

## [Logstash with the cloud version / "Could not connect to a compatible version of Elasticsearch\>, "](https://discuss.elastic.co/t/logstash-with-the-cloud-version-could-not-connect-to-a-compatible-version-of-elasticsearch/316363)

<div class="topic-metadata">

**Author:** [@LeoCP](https://discuss.elastic.co/u/LeoCP)\
**Replies:** 2\
**Last updated:** [October 11, 2022, 9:18pm UTC](https://discuss.elastic.co/t/logstash-with-the-cloud-version-could-not-connect-to-a-compatible-version-of-elasticsearch/316363 "2022-10-11T21:18:19Z")

</div>

Greeting, I am evaluating the cloud version of Elasticsearch, and I want to mount some test data, using logstash (version 8.4.3), but I get an error telling me the following: "Could not connect to a compatible version…

---

## [kibanaでエラー「Monitoring: Error 429」が出る件](https://discuss.elastic.co/t/kibana-monitoring-error-429/195132)

<div class="topic-metadata">

**Author:** [@yn2018](https://discuss.elastic.co/u/yn2018)\
**Replies:** 2\
**Last updated:** [August 15, 2019, 10:31am UTC](https://discuss.elastic.co/t/kibana-monitoring-error-429/195132 "2019-08-15T10:31:25Z")

</div>

kibanaのmonitoringを触っていると以下のようにエラーが出ます。 エラーメッセージは以下のような感じです。 Monitoring: Error 429 : \[es\_rejected\_execution\_exception\] rejected execution of org.elasticsearch.transport.TransportService$7@c2f8810 on EsThreadPoolExec…

---

## [How are numeric data types indexed?](https://discuss.elastic.co/t/how-are-numeric-data-types-indexed/187418)

<div class="topic-metadata">

**Author:** [@shekharshan](https://discuss.elastic.co/u/shekharshan)\
**Replies:** 2\
**Last updated:** [June 25, 2019, 8:23pm UTC](https://discuss.elastic.co/t/how-are-numeric-data-types-indexed/187418 "2019-06-25T20:23:55Z")

</div>

I wanted to understand how numeric data types such as integer and long are indexed. I think it should get indexed like keywords, without any analysis. Is there any need or benefit to also mapping a numeric type with a 'k…

---

## [DNS slower with cache enabled?](https://discuss.elastic.co/t/dns-slower-with-cache-enabled/96744)

<div class="topic-metadata">

**Author:** [@Tom\_Mortimer](https://discuss.elastic.co/u/Tom_Mortimer)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 3:50pm UTC](https://discuss.elastic.co/t/dns-slower-with-cache-enabled/96744 "2017-08-17T15:50:46Z")

</div>

Hi, I’m working on a logstash installation which feeds log messages from various sources (syslog, Windows, Checkpoint firewalls etc.) into Elasticsearch for analysis and monitoring. Everything was working nicely until I…

---

## [How to serialize/deserialize action requests to/from json?](https://discuss.elastic.co/t/how-to-serialize-deserialize-action-requests-to-from-json/7940)

<div class="topic-metadata">

**Author:** [@benny\_sadeh](https://discuss.elastic.co/u/benny_sadeh)\
**Replies:** 2\
**Last updated:** [January 7, 2015, 9:36pm UTC](https://discuss.elastic.co/t/how-to-serialize-deserialize-action-requests-to-from-json/7940 "2015-01-07T21:36:22Z")

</div>

hi group, I was hunting through the java api for a way to serialize/deserialize any action request to/from json (IndexRequest / DeleteRequest / etc.) and could not find any, which I find surprising as the rest api d…

---

## [Machine Learning functions](https://discuss.elastic.co/t/machine-learning-functions/129990)

<div class="topic-metadata">

**Author:** [@mkemalm](https://discuss.elastic.co/u/mkemalm)\
**Replies:** 1\
**Last updated:** [April 30, 2018, 4:22pm UTC](https://discuss.elastic.co/t/machine-learning-functions/129990 "2018-04-30T16:22:04Z")

</div>

Hi, in ML jobs functions are categorized in three groups; function itself, low function and high function. For example sum, low sum, high sum. ELK documents explain those functions as; function itself detects anomalies…

---

## [7.7 ILM Best Compression](https://discuss.elastic.co/t/7-7-ilm-best-compression/233279)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 4\
**Last updated:** [May 21, 2020, 1:55pm UTC](https://discuss.elastic.co/t/7-7-ilm-best-compression/233279 "2020-05-21T13:55:00Z")

</div>

From the release notes of 7.7 there is Adding best\_compression #49974 I have upgraded to 7.7 and cannot find best compression under ILM and cannot find anything in the guides. Has thise been implemented yet? Thanks …

---

## [How to open file from Kibana using path.real (or any other data) from Fscrawler](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435)

<div class="topic-metadata">

**Author:** [@ymorayko](https://discuss.elastic.co/u/ymorayko)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 6:25pm UTC](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435 "2019-08-23T18:25:21Z")

</div>

Hello everyone. I am new to Elasticsearch. I am indexing some pdf, word files using Fscrawler (which works great!) and using Kibana to filter, search. I am wandering if there is a way to open file from Kibana using the…

---

## [Elasticsearch grok processor error](https://discuss.elastic.co/t/elasticsearch-grok-processor-error/121510)

<div class="topic-metadata">

**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\
**Replies:** 4\
**Last updated:** [February 28, 2018, 2:09am UTC](https://discuss.elastic.co/t/elasticsearch-grok-processor-error/121510 "2018-02-28T02:09:57Z")

</div>

hi, can anybody tell me why this is error: POST /\_ingest/pipeline/\_simulate { "pipeline": { "description": "filebeat pipeline", "processors": \[ { "grok": { "field": "message", "patterns": \["%{TIMESTAMP\_ISO8601}:…

---

## [Possible effects of not closing scroll](https://discuss.elastic.co/t/possible-effects-of-not-closing-scroll/112321)

<div class="topic-metadata">

**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\
**Replies:** 4\
**Last updated:** [December 19, 2017, 12:13pm UTC](https://discuss.elastic.co/t/possible-effects-of-not-closing-scroll/112321 "2017-12-19T12:13:04Z")

</div>

Hi, I have the following setup. A java program, using ES6.0 high/low level libraries, it: queries an ES2.2 cluster, using scrolling creates new docs out of the 2.2 ones indexes them into a ES6.0 cluster Of course, wr…

---

## [How to integrate Kibana Dashboard in Kibana Plugin](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboard-in-kibana-plugin/46407)

<div class="topic-metadata">

**Author:** [@vganjare](https://discuss.elastic.co/u/vganjare)\
**Replies:** 4\
**Last updated:** [April 6, 2016, 6:08am UTC](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboard-in-kibana-plugin/46407 "2016-04-06T06:08:57Z")

</div>

Hi, I am having few dashboards created in Kibana. I want to export these dashboards to a custom plugin. How can this be done? Thanks!!

---

## [Cost of ElasticSearch on Google Cloud Platform](https://discuss.elastic.co/t/cost-of-elasticsearch-on-google-cloud-platform/335799)

<div class="topic-metadata">

**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\
**Replies:** 5\
**Last updated:** [June 12, 2023, 6:16pm UTC](https://discuss.elastic.co/t/cost-of-elasticsearch-on-google-cloud-platform/335799 "2023-06-12T18:16:18Z")

</div>

In our company, we chose to use Elasticsearch Cloud on Google Cloud Platform (GCP) due to the ease of updating and scaling our application. However, GCP has a charge for every HTTP access on our VM. Since our other VMs…

---

## [Kibana Anonymous access - how do you prevent listing all dashboards?](https://discuss.elastic.co/t/kibana-anonymous-access-how-do-you-prevent-listing-all-dashboards/296214)

<div class="topic-metadata">

**Author:** [@maverick1](https://discuss.elastic.co/u/maverick1)\
**Replies:** 5\
**Last updated:** [February 8, 2022, 9:23pm UTC](https://discuss.elastic.co/t/kibana-anonymous-access-how-do-you-prevent-listing-all-dashboards/296214 "2022-02-08T21:23:13Z")

</div>

We are using Elastic cloud, and have setup Kibana for Anonymous access so that users can share dashboard links publicly. The anonymous role is configured to only allow Kibana -\> Dashboard Read permissions. This set…

---

## [Elastic Java Client Async APM Transaction](https://discuss.elastic.co/t/elastic-java-client-async-apm-transaction/322986)

<div class="topic-metadata">

**Author:** [@elastic\_rookie](https://discuss.elastic.co/u/elastic_rookie)\
**Replies:** 7\
**Last updated:** [February 14, 2023, 9:01am UTC](https://discuss.elastic.co/t/elastic-java-client-async-apm-transaction/322986 "2023-02-14T09:01:45Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Can't delete index by "curl -XDELETE" with Xpack security enabled "failed to authenticate user \[elastic\]"](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902)

<div class="topic-metadata">

**Author:** [@zav](https://discuss.elastic.co/u/zav)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 8:48am UTC](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902 "2020-06-02T08:48:37Z")

</div>

Hi! I'm new in Elastic, and can miss something. Can anyone help me? I have single node cluster with Xpack security enabled. I can get cluster health # curl --user elastic:passwd http://127.0.0.1:9200/\_cluster/health?p…

---

## [How to generate last login report in kibana](https://discuss.elastic.co/t/how-to-generate-last-login-report-in-kibana/218136)

<div class="topic-metadata">

**Author:** [@mkanukur](https://discuss.elastic.co/u/mkanukur)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 3:05pm UTC](https://discuss.elastic.co/t/how-to-generate-last-login-report-in-kibana/218136 "2020-02-07T15:05:25Z")

</div>

Hi All, I'm trying to generate a report for last logon activity for all users. Entire cluster is on 7.2.1(BLEK). Any suggestions ? Thanks in advance

---

## [Signing requests of Java High Level REST Client](https://discuss.elastic.co/t/signing-requests-of-java-high-level-rest-client/127435)

<div class="topic-metadata">

**Author:** [@Prakhar\_Mishra](https://discuss.elastic.co/u/Prakhar_Mishra)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 8:23am UTC](https://discuss.elastic.co/t/signing-requests-of-java-high-level-rest-client/127435 "2018-04-10T08:23:26Z")

</div>

I am using AWS Elasticsearch service. To implement proper security policies, we need to sign requests sent to elasticsearch. We are using Java High Level REST Client to query elasticsearch. Is it possible to sign (by si…

---

## [Kibana Web Server](https://discuss.elastic.co/t/kibana-web-server/42141)

<div class="topic-metadata">

**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\
**Replies:** 1\
**Last updated:** [February 18, 2016, 2:16pm UTC](https://discuss.elastic.co/t/kibana-web-server/42141 "2016-02-18T14:16:02Z")

</div>

Hi , Which web server Kibana uses ? Can I configure the web server or it is embedded inside Kibana ? BR, Chen

---

## [Kibana/Elasticsearch do not pop up dialog for Username and Password when using Custom Realm with Shield](https://discuss.elastic.co/t/kibana-elasticsearch-do-not-pop-up-dialog-for-username-and-password-when-using-custom-realm-with-shield/37887)

<div class="topic-metadata">

**Author:** [@rbommineni](https://discuss.elastic.co/u/rbommineni)\
**Replies:** 1\
**Last updated:** [January 4, 2016, 1:11pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-do-not-pop-up-dialog-for-username-and-password-when-using-custom-realm-with-shield/37887 "2016-01-04T13:11:04Z")

</div>

Hi, I'm trying to create a custom realm to authenticate users for Kibana and Elasticsearch using https://github.com/elastic/shield-custom-realm-example and I've setup the configuration for my custom realm in elasticse…

---

## [Logstash 1.5.4 - lumberjack-output SSL verification error](https://discuss.elastic.co/t/logstash-1-5-4-lumberjack-output-ssl-verification-error/28397)

<div class="topic-metadata">

**Author:** [@utilitynerd](https://discuss.elastic.co/u/utilitynerd)\
**Replies:** 1\
**Last updated:** [September 2, 2015, 1:20am UTC](https://discuss.elastic.co/t/logstash-1-5-4-lumberjack-output-ssl-verification-error/28397 "2015-09-02T01:20:39Z")

</div>

I'm stuck on the following issue and could use some help. I'm attempting to send messages from one logstash instance to another via lumberjack. This worked perfectly in the past, but after updating logstash and its pl…

---

## [Short URL redirect problem Internet Explorer](https://discuss.elastic.co/t/short-url-redirect-problem-internet-explorer/176916)

<div class="topic-metadata">

**Author:** [@Stancho](https://discuss.elastic.co/u/Stancho)\
**Replies:** 3\
**Last updated:** [April 15, 2019, 4:35pm UTC](https://discuss.elastic.co/t/short-url-redirect-problem-internet-explorer/176916 "2019-04-15T16:35:22Z")

</div>

Hi guys, I have a Dashboard in Kibana (6.5.0) which has a pretty long URL (more than 2000 characters). That's why I cannot open the dashboard in Internet Explorer. Generating a short URL ( https://www.elastic.co/guide/…

---

## [Best practice for storing my queries](https://discuss.elastic.co/t/best-practice-for-storing-my-queries/42118)

<div class="topic-metadata">

**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\
**Replies:** 3\
**Last updated:** [February 18, 2016, 11:40am UTC](https://discuss.elastic.co/t/best-practice-for-storing-my-queries/42118 "2016-02-18T11:40:19Z")

</div>

I have a web application, in which users can define a little complex search queries. I want to be able to store those queries for them, so those queries will be available any time. So If a user login to my system , he…

---

## ['\_all' vs 'copy\_to' space variation](https://discuss.elastic.co/t/-all-vs-copy-to-space-variation/40192)

<div class="topic-metadata">

**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\
**Replies:** 3\
**Last updated:** [January 27, 2016, 7:10am UTC](https://discuss.elastic.co/t/-all-vs-copy-to-space-variation/40192 "2016-01-27T07:10:59Z")

</div>

Hello Team, I am using 'all' for to group different fields data together, in which when I load data it is occupying disk space 3 times i.e., without using 'all' to hold different field data init it my index took 5mb spac…

---

## [Shards locating on one node](https://discuss.elastic.co/t/shards-locating-on-one-node/28772)

<div class="topic-metadata">

**Author:** [@it2](https://discuss.elastic.co/u/it2)\
**Replies:** 3\
**Last updated:** [September 8, 2015, 9:51am UTC](https://discuss.elastic.co/t/shards-locating-on-one-node/28772 "2015-09-08T09:51:52Z")

</div>

Hi guys. Few days ago I added a new node to my ES Cluster. And after that all my shards start to locate only on this new node! http://prntscr.com/8dklad Please gyus, give me some advice where I need to look? New node h…

---

## [Shield drawback, Please correct me if I am wrong](https://discuss.elastic.co/t/shield-drawback-please-correct-me-if-i-am-wrong/25282)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [July 10, 2015, 7:38am UTC](https://discuss.elastic.co/t/shield-drawback-please-correct-me-if-i-am-wrong/25282 "2015-07-10T07:38:01Z")

</div>

Hi Shield Experts I have created 2 users , admin and abc and assign roles to these users . Admin can access all the indices , but user abc can oly access one index . Now admin user has created dashboard which has many …

---

## [Importing Large Amounts of Data to Production Indices](https://discuss.elastic.co/t/importing-large-amounts-of-data-to-production-indices/21864)

<div class="topic-metadata">

**Author:** [@webish](https://discuss.elastic.co/u/webish)\
**Replies:** 3\
**Last updated:** [January 29, 2015, 10:34am UTC](https://discuss.elastic.co/t/importing-large-amounts-of-data-to-production-indices/21864 "2015-01-29T10:34:48Z")

</div>

I have some production indices that needs to a large amount of data imported into them fairly frequently. Each time we import data the ES nodes become a huge bottleneck. I honestly expected a lot better performan…

---

## [Using the same APM Server for Multiple Environments](https://discuss.elastic.co/t/using-the-same-apm-server-for-multiple-environments/280920)

<div class="topic-metadata">

**Author:** [@happyinteger](https://discuss.elastic.co/u/happyinteger)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 9:53am UTC](https://discuss.elastic.co/t/using-the-same-apm-server-for-multiple-environments/280920 "2021-08-11T09:53:35Z")

</div>

Hello, I'm just wondering that is it possible to use one APM server for multiple environments like dev, test, staging. I'm not sure that it's the best practice but for non-prod environments I want to use one common APM …

---

## [Logstash Comparing Field Values Using an If Statement not working](https://discuss.elastic.co/t/logstash-comparing-field-values-using-an-if-statement-not-working/251452)

<div class="topic-metadata">

**Author:** [@bardie](https://discuss.elastic.co/u/bardie)\
**Replies:** 2\
**Last updated:** [October 9, 2020, 6:12am UTC](https://discuss.elastic.co/t/logstash-comparing-field-values-using-an-if-statement-not-working/251452 "2020-10-09T06:12:48Z")

</div>

Hi, I am trying to compare two fields using the following method but it is not working. I have used it before using an older version of logstash and it worked but it is not working on logstash 7.9.2. Logstash cannot be…

---

## [Method threw 'java.lang.NoSuchFieldError' exception. Cannot evaluate org.elasticsearch.action.index.IndexRequest.toString()](https://discuss.elastic.co/t/method-threw-java-lang-nosuchfielderror-exception-cannot-evaluate-org-elasticsearch-action-index-indexrequest-tostring/205328)

<div class="topic-metadata">

**Author:** [@Tadija\_Malic](https://discuss.elastic.co/u/Tadija_Malic)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 4:31pm UTC](https://discuss.elastic.co/t/method-threw-java-lang-nosuchfielderror-exception-cannot-evaluate-org-elasticsearch-action-index-indexrequest-tostring/205328 "2019-10-29T16:31:53Z")

</div>

Describe the feature : Comparison between Elasticsearch, Solr and OOTB Lucene in Adobe Experience Manager Elasticsearch version : Tried 7.0.1 and 7.4.1 JVM version: 1.8.0\_191 OS version macOs - Darwin Kernel Version…

---

## [Update\_by\_query crashing w/large scroll\_size](https://discuss.elastic.co/t/update-by-query-crashing-w-large-scroll-size/182291)

<div class="topic-metadata">

**Author:** [@Bobby\_Buten](https://discuss.elastic.co/u/Bobby_Buten)\
**Replies:** 2\
**Last updated:** [June 7, 2019, 1:11pm UTC](https://discuss.elastic.co/t/update-by-query-crashing-w-large-scroll-size/182291 "2019-06-07T13:11:26Z")

</div>

I have the following issue with update\_by\_query, it crashes when my scroll\_size is large Using Elasticsearch 5.5.3 My index has 1 shard I use this \_update\_by\_query, I'm trying to add a username to \_licensed\_byPOST /my\_…

---

## [Encrypting Elasticsearch Data in Transit and at Rest](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039)

<div class="topic-metadata">

**Author:** [@shatabdi](https://discuss.elastic.co/u/shatabdi)\
**Replies:** 2\
**Last updated:** [March 13, 2019, 3:54am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039 "2019-03-13T03:54:05Z")

</div>

Is there a node to node and client to ES in-transit data encryption available for elasticsearch . We are using AWS ec2 IaaS for our elasticsearch instance . The version that we are using is 5.6 but we plan to upgrade it …

---

## [Creating cluster with the API](https://discuss.elastic.co/t/creating-cluster-with-the-api/151063)

<div class="topic-metadata">

**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\
**Replies:** 2\
**Last updated:** [October 5, 2018, 9:53am UTC](https://discuss.elastic.co/t/creating-cluster-with-the-api/151063 "2018-10-05T09:53:51Z")

</div>

Hi, When I create a new cluster using the API, passing the json below, I get 201 status that it's been accepted but in ECE the deployment crashes with the error 'Cannot read property 'plan' of null'. 'kibana': {'clust…

---

## [Elasticsearch REST integration test setup](https://discuss.elastic.co/t/elasticsearch-rest-integration-test-setup/147133)

<div class="topic-metadata">

**Author:** [@jmnarloch](https://discuss.elastic.co/u/jmnarloch)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 3:36am UTC](https://discuss.elastic.co/t/elasticsearch-rest-integration-test-setup/147133 "2018-09-08T03:36:55Z")

</div>

I had noticed that in many other questions people are trying to use Elasticsearch test framework to setup integration tests with REST client (either high or low level). I had manage to configure it without any external …

---

## [Filtering based on whether array passed into search query is empty](https://discuss.elastic.co/t/filtering-based-on-whether-array-passed-into-search-query-is-empty/132275)

<div class="topic-metadata">

**Author:** [@yckoh](https://discuss.elastic.co/u/yckoh)\
**Replies:** 2\
**Last updated:** [May 19, 2018, 6:37am UTC](https://discuss.elastic.co/t/filtering-based-on-whether-array-passed-into-search-query-is-empty/132275 "2018-05-19T06:37:35Z")

</div>

Hi. I would like to perform a search query based on passing in an array of values to the search function in php. This array may or may not be an empty array. I would like to set the filter in such a way that it compares …

---

## [Showing a gauge for an empty result set](https://discuss.elastic.co/t/showing-a-gauge-for-an-empty-result-set/95338)

<div class="topic-metadata">

**Author:** [@Mark\_O\_Brien](https://discuss.elastic.co/u/Mark_O_Brien)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 12:24pm UTC](https://discuss.elastic.co/t/showing-a-gauge-for-an-empty-result-set/95338 "2017-08-03T12:24:23Z")

</div>

Hi, I'm new to the ELK stack but have been getting along pretty well with it until I hit this problem. I'm trying to create a dashboard which will show gauges to display rates of different kinds of errors that have occ…

---

## [Removing parent fields and keeping nested fields of JSON](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624)

<div class="topic-metadata">

**Author:** [@sachiiit](https://discuss.elastic.co/u/sachiiit)\
**Replies:** 2\
**Last updated:** [July 5, 2017, 12:47am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624 "2017-07-05T00:47:57Z")

</div>

I am getting the following event in my filter section { "@timestamp" =\> 2017-06-23T06:16:05.000Z, "@version" =\> "1", "event" =\> { "logLevel" =\> "INFO…

---

## [ES 2 Courier Fetch: N of N shards failed](https://discuss.elastic.co/t/es-2-courier-fetch-n-of-n-shards-failed/108888)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 6\
**Last updated:** [November 30, 2017, 11:36am UTC](https://discuss.elastic.co/t/es-2-courier-fetch-n-of-n-shards-failed/108888 "2017-11-30T11:36:39Z")

</div>

Hi, I get that message when i search in dashboard. Mi config for threadpool is: threadpool.search.queue\_size: 11000 In kibana with google developer tools i get this response: { "responses": \[ { "\_shards": { "fai…

---

## [How to install a plugin before writing a test case on it?](https://discuss.elastic.co/t/how-to-install-a-plugin-before-writing-a-test-case-on-it/41095)

<div class="topic-metadata">

**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\
**Replies:** 6\
**Last updated:** [February 8, 2016, 9:09pm UTC](https://discuss.elastic.co/t/how-to-install-a-plugin-before-writing-a-test-case-on-it/41095 "2016-02-08T21:09:13Z")

</div>

I have created a plugin for custom default scoring in elastic search. I created a Json template that uses that plugin but as soon as I create an index that uses that template I get an error: java.lang.IllegalArgumentEx…

---

## [Logstash plugin](https://discuss.elastic.co/t/logstash-plugin/31606)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 6\
**Last updated:** [October 6, 2015, 11:22am UTC](https://discuss.elastic.co/t/logstash-plugin/31606 "2015-10-06T11:22:06Z")

</div>

If i want to have data from different nodes or cluster index it into ES , which plugin i should use? My use case is i want to analyse logs from different cluster on kibana .

[Previous page](https://discuss.elastic.co/top.md?page=1126&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1128&per_page=50&period=all)
