# Top **URL:** https://discuss.elastic.co/top.md?page=1145&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1146 --- ## [ECE AWS automation help](https://discuss.elastic.co/t/ece-aws-automation-help/89417)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 4\ **Last updated:** [June 15, 2017, 3:40pm UTC](https://discuss.elastic.co/t/ece-aws-automation-help/89417 "2017-06-15T15:40:21Z")
Hi, With the latest 1.01 version of ECE, the installation tokens have been introduced. I have been reading, https://www.elastic.co/guide/en/cloud-enterprise/current/ece-installation-script.html But I think there are s… --- ## [What would be the easiest way to hook into filebeat?](https://discuss.elastic.co/t/what-would-be-the-easiest-way-to-hook-into-filebeat/70834)
**Author:** [@blacktop](https://discuss.elastic.co/u/blacktop)\ **Replies:** 4\ **Last updated:** [January 17, 2017, 9:05am UTC](https://discuss.elastic.co/t/what-would-be-the-easiest-way-to-hook-into-filebeat/70834 "2017-01-17T09:05:59Z")
I would like to hook into Filebeat once it has a handle on a new file. I think what I need is to create my own reader that is tsv.go (tab separated value) and implement the Reader interface? The reason I want to do th… --- ## [How to combine Terms and Match query](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591 "2020-07-02T09:22:53Z")
Hi, is there a way to combine a term and a match query? I have data with categorys A,B,C,D... which contains extra field which can vary. \_source: category: A value: 3 \_source: category: A value:2 \_source: category: A… --- ## [Updated data from jdbc(mysql) to elasticsearch by using logstash](https://discuss.elastic.co/t/updated-data-from-jdbc-mysql-to-elasticsearch-by-using-logstash/124058)
**Author:** [@songhee](https://discuss.elastic.co/u/songhee)\ **Replies:** 1\ **Last updated:** [March 17, 2018, 8:27am UTC](https://discuss.elastic.co/t/updated-data-from-jdbc-mysql-to-elasticsearch-by-using-logstash/124058 "2018-03-17T08:27:16Z")
Hello, I am also newbie in elk stack. I just connected mysql(DBMS) and elasticsearch by using logstash and successed to send bulk data from mysql server. I want to manage data on mysql. like create, update, delete pr… --- ## [Best practice for indexing a daily log](https://discuss.elastic.co/t/best-practice-for-indexing-a-daily-log/118333)
**Author:** [@David\_Gidony](https://discuss.elastic.co/u/David_Gidony)\ **Replies:** 1\ **Last updated:** [February 4, 2018, 9:13am UTC](https://discuss.elastic.co/t/best-practice-for-indexing-a-daily-log/118333 "2018-02-04T09:13:56Z")
hi, i have a few log files that are created daily, i wanted to know what is the best way to ingest them, should i create a new index with the current date for each log file, or just add them all to one big index. for… --- ## [Log4Net](https://discuss.elastic.co/t/log4net/86476)
**Author:** [@snakpak](https://discuss.elastic.co/u/snakpak)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 9:23am UTC](https://discuss.elastic.co/t/log4net/86476 "2017-05-24T09:23:04Z")
Hi, I just installed LogStash using these steps (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7) Now, I need to parse my log4net's logs. I want… --- ## [Http.cors.allow-origin regex?](https://discuss.elastic.co/t/http-cors-allow-origin-regex/21461)
**Author:** [@Chris\_Liles](https://discuss.elastic.co/u/Chris_Liles)\ **Replies:** 1\ **Last updated:** [January 2, 2015, 10:33pm UTC](https://discuss.elastic.co/t/http-cors-allow-origin-regex/21461 "2015-01-02T22:33:12Z")
I'm been scratching my head a bit trying to get the elasticsearch security plugin working with kibana. I have the security portion working, but when trying to access through kibana I am hitting some issues with the c… --- ## [How to run two Elasticsearch Service on Window Server 2019?](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 4:21pm UTC](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477 "2022-11-24T16:21:59Z")
Hello, I have two instance of Elastic installed and configured to run on a different port on Windows server. I am required to run both the instance simultaneously. However when I try to run the second Elasticsearch ser… --- ## [Filebeat 7.3 Timezone Issues with System Module](https://discuss.elastic.co/t/filebeat-7-3-timezone-issues-with-system-module/195971)
**Author:** [@DavidJohnson](https://discuss.elastic.co/u/DavidJohnson)\ **Replies:** 5\ **Last updated:** [August 21, 2019, 1:40pm UTC](https://discuss.elastic.co/t/filebeat-7-3-timezone-issues-with-system-module/195971 "2019-08-21T13:40:25Z")
I have installed a new instance of Elasticsearch 7.3 and configured one host to send Filebeat data with Auditd and System modules. The auditd logs look correct. The System module collected data will not stop converting t… --- ## [Creating Multiple Pipelines Arcsight, Netflow, filebeat, packet beat etc](https://discuss.elastic.co/t/creating-multiple-pipelines-arcsight-netflow-filebeat-packet-beat-etc/175100)
**Author:** [@vidurmittal](https://discuss.elastic.co/u/vidurmittal)\ **Replies:** 5\ **Last updated:** [April 4, 2019, 3:09pm UTC](https://discuss.elastic.co/t/creating-multiple-pipelines-arcsight-netflow-filebeat-packet-beat-etc/175100 "2019-04-04T15:09:56Z")
Hi, I am trying to install module Arcsight, netflow etc with currently running services like filebeat, packetbeat, suricata, wazuh but when I am installing Arcsight or netflow module, I am not to insert indexes, dashboa… --- ## [Json Parser failure when the message contains emoji unicodes](https://discuss.elastic.co/t/json-parser-failure-when-the-message-contains-emoji-unicodes/175224)
**Author:** [@Denis\_Galvao](https://discuss.elastic.co/u/Denis_Galvao)\ **Replies:** 5\ **Last updated:** [April 3, 2019, 8:42pm UTC](https://discuss.elastic.co/t/json-parser-failure-when-the-message-contains-emoji-unicodes/175224 "2019-04-03T20:42:56Z")
Hi there. Logstash log a \_jasonparsefailure when the message contains some emojis.. { "@timestamp" =\> 2019-04-03T14:22:08.147Z, "@version" =\> "1", "message" =\> "{\\\\\\"event\\\\\\":\\\\\\"WhatsAppMessagesLog\\\\… --- ## [Cross data center Replication support](https://discuss.elastic.co/t/cross-data-center-replication-support/107326)
**Author:** [@Anushke\_Hewawaithara](https://discuss.elastic.co/u/Anushke_Hewawaithara)\ **Replies:** 5\ **Last updated:** [November 14, 2017, 5:03am UTC](https://discuss.elastic.co/t/cross-data-center-replication-support/107326 "2017-11-14T05:03:20Z")
Kindly let me know whether elastic search supports Cross data center Replication. EX:- We need to keep one replica on our DR site --- ## [Illegal Argument Exception in Watcher Email Service](https://discuss.elastic.co/t/illegal-argument-exception-in-watcher-email-service/91288)
**Author:** [@infamous](https://discuss.elastic.co/u/infamous)\ **Replies:** 5\ **Last updated:** [June 30, 2017, 4:43pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-in-watcher-email-service/91288 "2017-06-30T16:43:19Z")
Hi all, I am having a bit of trouble with the email action. Here's my .yml config xpack.notification.email.account: outlook\_account: profile: outlook smtp: auth: true starttls.enable: true host: smtp… --- ## [ElasticSearch 2.3.3 Cluster Disk High/Low Watermark Net Effect is Ambiguous](https://discuss.elastic.co/t/elasticsearch-2-3-3-cluster-disk-high-low-watermark-net-effect-is-ambiguous/76105)
**Author:** [@Troy\_Heanssgen](https://discuss.elastic.co/u/Troy_Heanssgen)\ **Replies:** 5\ **Last updated:** [February 27, 2017, 10:53pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-3-cluster-disk-high-low-watermark-net-effect-is-ambiguous/76105 "2017-02-27T22:53:19Z")
We are running into some problems with autoconfiguration of ElasticSearch. Mainly, the low disk watermark never gets logged and the high disk watermark seems to be ignored! This only seems to be a problem when we are usi… --- ## [How to Import a Kibana Dashboard with Ansible?](https://discuss.elastic.co/t/how-to-import-a-kibana-dashboard-with-ansible/324487)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 2\ **Last updated:** [February 2, 2023, 5:56pm UTC](https://discuss.elastic.co/t/how-to-import-a-kibana-dashboard-with-ansible/324487 "2023-02-02T17:56:33Z")
We are upgrading from 7.9.3 to 7.17.8. I see that the method to import Kibana dashboards has changed. I can successfully import a dashboard using curl and using Postman. curl -k -u \:\ -X POST https:… --- ## [How to create a text box in a visualization in kibana vega](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256 "2021-07-21T14:10:07Z")
Hello, I have a visualization in kibana - vega, I already made a graph, but now I want to add a text below the "Estado" bar, I do not know if there is the possibility of putting some text there already having a graph, I … --- ## [コンテナ上のfilebeatのlogging.to\_syslog設定について](https://discuss.elastic.co/t/filebeat-logging-to-syslog/200409)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [September 25, 2019, 1:40am UTC](https://discuss.elastic.co/t/filebeat-logging-to-syslog/200409 "2019-09-25T01:40:31Z")
コンテナ上のfilebeatのアプリログをsyslogに出力させたいです。 コンテナ上のfilebeatのため、「logging.to\_syslog: true」で設定すると、 下記syslog系のエラーが出てアプリログが出力されません。 対処方法を教えていただけないでしょうか？ filebeatの設定 logging.to\_syslog: true エラー出力 Exiting: error initializing lo… --- ## [Kibana plugins "chrome" api changed in 7.2.0](https://discuss.elastic.co/t/kibana-plugins-chrome-api-changed-in-7-2-0/188304)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 2\ **Last updated:** [July 1, 2019, 4:46pm UTC](https://discuss.elastic.co/t/kibana-plugins-chrome-api-changed-in-7-2-0/188304 "2019-07-01T16:46:01Z")
Hi, in 7.2.0 this code from a "hack" javascript file in my plugin stopped working: import chrome from "ui/chrome" chrome.getNavLinkById("xyz").hide ... So I found that this breaking change might be due to the introduct… --- ## [Marvel license expired, new license is already expired](https://discuss.elastic.co/t/marvel-license-expired-new-license-is-already-expired/54873)
**Author:** [@styfle](https://discuss.elastic.co/u/styfle)\ **Replies:** 2\ **Last updated:** [July 7, 2016, 1:52pm UTC](https://discuss.elastic.co/t/marvel-license-expired-new-license-is-already-expired/54873 "2016-07-07T13:52:47Z")
I noticed that my marvel license was expired. So I registered for a new Basic license, got an email, downloaded it, and ran the command curl -XPUT 'http://es01:9200/\_license' -d @license.json Looks good http://es01:920… --- ## [Basic stemming problem - what am I missing?](https://discuss.elastic.co/t/basic-stemming-problem-what-am-i-missing/53842)
**Author:** [@midget2000x](https://discuss.elastic.co/u/midget2000x)\ **Replies:** 2\ **Last updated:** [June 24, 2016, 2:54am UTC](https://discuss.elastic.co/t/basic-stemming-problem-what-am-i-missing/53842 "2016-06-24T02:54:07Z")
I am having a problem where "shirts" is not matching anything, even though there are many docs with the word "shirt" in the name field (and other fields). I know I am missing something really simple but I can't figure o… --- ## [Logstash Error with Twitter COnfig](https://discuss.elastic.co/t/logstash-error-with-twitter-config/26631)
**Author:** [@perkinsl](https://discuss.elastic.co/u/perkinsl)\ **Replies:** 2\ **Last updated:** [August 4, 2015, 3:30pm UTC](https://discuss.elastic.co/t/logstash-error-with-twitter-config/26631 "2015-08-04T15:30:23Z")
I've looked everywhere to find an answer to the below error but can only find a firewall issue (so tried outside the firewall) and the time stamp being different between the twitter server and my machine (machine timing … --- ## [How to show percentage drop (change) in funnel chart using vega lite?](https://discuss.elastic.co/t/how-to-show-percentage-drop-change-in-funnel-chart-using-vega-lite/318504)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 3\ **Last updated:** [December 19, 2022, 9:19am UTC](https://discuss.elastic.co/t/how-to-show-percentage-drop-change-in-funnel-chart-using-vega-lite/318504 "2022-12-19T09:19:11Z")
Hi, I have created a similar funnel chart like the below example -- Now I want to show % drop (change) between each step. How to do that? Below is the script for the chart -- { "data": { "values": \[ {"… --- ## [How to recreate shard failure](https://discuss.elastic.co/t/how-to-recreate-shard-failure/310114)
**Author:** [@vel](https://discuss.elastic.co/u/vel)\ **Replies:** 3\ **Last updated:** [July 22, 2022, 6:03am UTC](https://discuss.elastic.co/t/how-to-recreate-shard-failure/310114 "2022-07-22T06:03:50Z")
I am trying to find a way for recreating the shard failure in Elasticsearch When querying ES can return a 200 response , even if one of the shards had failed to respond. how do I recreate error, for testing. { "too… --- ## [Postgresql tcp check is not working](https://discuss.elastic.co/t/postgresql-tcp-check-is-not-working/174767)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 8:10am UTC](https://discuss.elastic.co/t/postgresql-tcp-check-is-not-working/174767 "2019-04-10T08:10:24Z")
Hello, I have setup in heartbeat a tcp check for postgresql but I don't seam to manage to have it working. The config looks like the following: - type: tcp schedule: '@every 5s' hosts: \["172.168.17.2"\] ports: \[5… --- ## [ElasticSearch6.4 compatible web crawler](https://discuss.elastic.co/t/elasticsearch6-4-compatible-web-crawler/154619)
**Author:** [@Subasini](https://discuss.elastic.co/u/Subasini)\ **Replies:** 3\ **Last updated:** [October 31, 2018, 4:49am UTC](https://discuss.elastic.co/t/elasticsearch6-4-compatible-web-crawler/154619 "2018-10-31T04:49:56Z")
Hi All, I want to use ElasticSearch 6.4 as I am going to replace GSA in my application. ElasticSearch will crawl around 60+ websites including child links. Since we are not going to use Cloud based solution - Can I u… --- ## [Parsing Akamai logs](https://discuss.elastic.co/t/parsing-akamai-logs/148311)
**Author:** [@Fabs](https://discuss.elastic.co/u/Fabs)\ **Replies:** 3\ **Last updated:** [September 13, 2018, 9:34am UTC](https://discuss.elastic.co/t/parsing-akamai-logs/148311 "2018-09-13T09:34:40Z")
Hi all, good morning I'm new about the ELK world. I have a problem on parsing Akamai logs. I report you a log as example: \< 2018-08-01 15:12:33 126.237.114.223 GET \[request\] 200 1270 0 "\[url\]" "Mozilla/5.0 (iPhone;… --- ## [Access Denied First Start Kibana](https://discuss.elastic.co/t/access-denied-first-start-kibana/106736)
**Author:** [@sergliss](https://discuss.elastic.co/u/sergliss)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 7:57pm UTC](https://discuss.elastic.co/t/access-denied-first-start-kibana/106736 "2017-11-07T19:57:21Z")
Just installed Elasticsearch and Kibana on Windows 2012 server. Started both from command prompt as admin. Getting Access is denied. (http://localhost:5601/bundles/kibana.bundle.js?v=15554:275). I did not install XPack. … --- ## [Logstash Create and Access Array](https://discuss.elastic.co/t/logstash-create-and-access-array/47607)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 3\ **Last updated:** [April 19, 2016, 8:29am UTC](https://discuss.elastic.co/t/logstash-create-and-access-array/47607 "2016-04-19T08:29:00Z")
hi logstash, Is it possible to spilt the log as below based on ',' to array ? "message" =\> "....", "host" =\> "10.10.11.12", "@version" =\> "1", "@timestamp" =\> "2016-04-13T01:52:43.535Z", "DISMAN-EVENT-MIB::sysUpTim… --- ## [Calling esRDD in a transformation method causes Task not serializable](https://discuss.elastic.co/t/calling-esrdd-in-a-transformation-method-causes-task-not-serializable/40078)
**Author:** [@kyunam](https://discuss.elastic.co/u/kyunam)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 9:12pm UTC](https://discuss.elastic.co/t/calling-esrdd-in-a-transformation-method-causes-task-not-serializable/40078 "2016-01-29T21:12:12Z")
Is the following not allowed because nested RDD is prohibited? val computedRDD = anRDD.map { ... val anotherRDD = sc.esRDD(...) ... } Thanks, Q --- ## [How to upload textfile to ESdatabase and make it searchable?](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855 "2022-03-28T15:13:51Z")
i try to upload textfile to ES database, i try convert textfile to String formate and then store. i dont know is it proper way? or any other way is available in ES for store textfiles and make it searchable? --- ## [Configure SSL on Heartbeat with certificates in the system store](https://discuss.elastic.co/t/configure-ssl-on-heartbeat-with-certificates-in-the-system-store/289499)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 6\ **Last updated:** [January 5, 2022, 10:22pm UTC](https://discuss.elastic.co/t/configure-ssl-on-heartbeat-with-certificates-in-the-system-store/289499 "2022-01-05T22:22:14Z")
I deploy heartbeats on some Windows servers management by an external service provider. The beats collect the staus of service end points exposed by applications on several other hosts. The beats are configured with SSL. … --- ## [Es 5.6.x force merege question about max\_num\_segments/max\_merge\_count/max\_thread\_count](https://discuss.elastic.co/t/es-5-6-x-force-merege-question-about-max-num-segments-max-merge-count-max-thread-count/138298)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 6\ **Last updated:** [July 5, 2018, 8:15am UTC](https://discuss.elastic.co/t/es-5-6-x-force-merege-question-about-max-num-segments-max-merge-count-max-thread-count/138298 "2018-07-05T08:15:53Z")
i see the doc have setting with the indices about force merege index.merge.scheduler.max\_merge\_count index.merge.scheduler.max\_thread\_count with not ssd the docs give index.merge.scheduler.max\_thread\_count to "1" … --- ## [Le filtre "Alter" existe toujours?](https://discuss.elastic.co/t/le-filtre-alter-existe-toujours/113780)
**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\ **Replies:** 6\ **Last updated:** [January 3, 2018, 1:44pm UTC](https://discuss.elastic.co/t/le-filtre-alter-existe-toujours/113780 "2018-01-03T13:44:16Z")
Bonjour, Je cherche à faire un split d'un document Json sur le premier champ. J'essaie d'utiliser le filtre "alter" mais j'obtiens l'erreur suivante: Cannot create pipeline {:reason=\>"Couldn't find any filter plugin n… --- ## [Filebeat - Error connecting to publish events](https://discuss.elastic.co/t/filebeat-error-connecting-to-publish-events/105120)
**Author:** [@Speedman](https://discuss.elastic.co/u/Speedman)\ **Replies:** 6\ **Last updated:** [October 25, 2017, 7:51pm UTC](https://discuss.elastic.co/t/filebeat-error-connecting-to-publish-events/105120 "2017-10-25T19:51:40Z")
Hi all. Trying to get a new ELK stack set up. I have two servers, one Linux with Filebeat running on it, and one Windows with Elasticsearch, Kibana, and X-Pack running on it. The servers are sitting on the same network s… --- ## [Filebeat read file from beginning always when restart](https://discuss.elastic.co/t/filebeat-read-file-from-beginning-always-when-restart/293325)
**Author:** [@sc.lai](https://discuss.elastic.co/u/sc.lai)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 11:38am UTC](https://discuss.elastic.co/t/filebeat-read-file-from-beginning-always-when-restart/293325 "2022-01-04T11:38:23Z")
I have a problem with filebeat running on Linux, every time I stop the filebeat and then start it, it always read file from the beginning. The log file uploaded by windows batch every 5 minutes, steps as below: put t… --- ## [Error while update using script for array kind of field](https://discuss.elastic.co/t/error-while-update-using-script-for-array-kind-of-field/91372)
**Author:** [@Gautam\_Vanani](https://discuss.elastic.co/u/Gautam_Vanani)\ **Replies:** 1\ **Last updated:** [July 10, 2017, 4:31pm UTC](https://discuss.elastic.co/t/error-while-update-using-script-for-array-kind-of-field/91372 "2017-07-10T16:31:38Z")
I have tags field in document, but while indxing I may not have values for tags field and when tries to add value in it, giving me null pointer error. mapping for tags { "type": "text", "fields": { "ke… --- ## [Log visualizing in kibana](https://discuss.elastic.co/t/log-visualizing-in-kibana/80470)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 7\ **Last updated:** [March 29, 2017, 2:06pm UTC](https://discuss.elastic.co/t/log-visualizing-in-kibana/80470 "2017-03-29T14:06:30Z")
Dear all, I need your advice regarding to log visualizing in kibana. Which kind of visualizing of logs in time-based index should be useful and nice? Thank you in advance --- ## [/\_nodes/stats is failing with \[WARN \]\[rest.suppressed \] /\_nodes/stats Params: {all=true} java.lang.ClassCastException](https://discuss.elastic.co/t/-nodes-stats-is-failing-with-warn-rest-suppressed--nodes-stats-params-all-true-java-lang-classcastexception/50330)
**Author:** [@Kuckkuck](https://discuss.elastic.co/u/Kuckkuck)\ **Replies:** 1\ **Last updated:** [May 18, 2016, 11:47am UTC](https://discuss.elastic.co/t/-nodes-stats-is-failing-with-warn-rest-suppressed--nodes-stats-params-all-true-java-lang-classcastexception/50330 "2016-05-18T11:47:45Z")
Hi, running an elasticsearch cluster version 2.3.1 with one master, three data nodes and one client node on kubernetes, the last node is exposing the 9200 rest port. All other nodes just have the 9300 cluster port expo… --- ## [Counting the frequency of a term](https://discuss.elastic.co/t/counting-the-frequency-of-a-term/22660)
**Author:** [@reza\_sadoddin](https://discuss.elastic.co/u/reza_sadoddin)\ **Replies:** 1\ **Last updated:** [March 14, 2015, 9:41am UTC](https://discuss.elastic.co/t/counting-the-frequency-of-a-term/22660 "2015-03-14T09:41:06Z")
I am almost new to ElasticSearch, and need to do a simple task. I want to count the frequency of a word in a single document (not the number of documents containing a term). Assume that my index consists of a single… --- ## [SearchPhaseController - NullPointerException](https://discuss.elastic.co/t/searchphasecontroller-nullpointerexception/5594)
**Author:** [@Sebastian\_Gavarini](https://discuss.elastic.co/u/Sebastian_Gavarini)\ **Replies:** 7\ **Last updated:** [October 18, 2011, 4:06am UTC](https://discuss.elastic.co/t/searchphasecontroller-nullpointerexception/5594 "2011-10-18T04:06:46Z")
Hi, I am seeing this Exception in ES 0.17.8: org.elasticsearch.action.search.ReduceSearchPhaseException: Failed to execute phase \[query\_fetch\], \[reduce\] at org.elasticsearch.action.search.type.TransportSear… --- ## [Kibana scripted fields](https://discuss.elastic.co/t/kibana-scripted-fields/262739)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 8\ **Last updated:** [February 2, 2021, 6:04am UTC](https://discuss.elastic.co/t/kibana-scripted-fields/262739 "2021-02-02T06:04:51Z")
def dayOfWeek = \["", "Mon", "Tue", "Wed", "Thu", "fri", "Sat", "Sunday"\] doc\['@timestamp'\].value.dayOfWeek; the above code will return sunday and the value will be stored in a variable called dayOfWeek in my data i ha… --- ## [How to set a lowercase analyzer](https://discuss.elastic.co/t/how-to-set-a-lowercase-analyzer/69957)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 8\ **Last updated:** [January 2, 2017, 12:54pm UTC](https://discuss.elastic.co/t/how-to-set-a-lowercase-analyzer/69957 "2017-01-02T12:54:24Z")
HI i have an index that containes a field with the value test. somtimes the field containes : "Test" or "TEST" or "test" i need to do a bool query that matches all three ocations. i read that i can do it with lowercase… --- ## [Bin/plugin is lying about plugin installation status](https://discuss.elastic.co/t/bin-plugin-is-lying-about-plugin-installation-status/13916)
**Author:** [@benmccann](https://discuss.elastic.co/u/benmccann)\ **Replies:** 8\ **Last updated:** [October 11, 2013, 7:15am UTC](https://discuss.elastic.co/t/bin-plugin-is-lying-about-plugin-installation-status/13916 "2013-10-11T07:15:56Z")
When I try to install a plugin, elasticsearch tells me that it is successful, but it actually is not. $ sudo /usr/share/elasticsearch/bin/plugin --install richardwilly98/elasticsearch-river-mongodb/1.7.1 -\> Insta… --- ## [Optimizing Elastic-Agent Performance](https://discuss.elastic.co/t/optimizing-elastic-agent-performance/359322)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 4\ **Last updated:** [May 12, 2024, 3:07pm UTC](https://discuss.elastic.co/t/optimizing-elastic-agent-performance/359322 "2024-05-12T15:07:05Z")
I am currently evaluating the use of ELK to collect Checkpoint data. On a VM, I have a QRadar Event Collector and an Elastic-Agent, both configured with 8 cores, 8GB RAM, and HDD. Checkpoint logs are being sent at a rat… --- ## [Disabling controls in dashboard](https://discuss.elastic.co/t/disabling-controls-in-dashboard/273027)
**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\ **Replies:** 4\ **Last updated:** [May 18, 2021, 5:15pm UTC](https://discuss.elastic.co/t/disabling-controls-in-dashboard/273027 "2021-05-18T17:15:23Z")
Hello there, I'm running the stack 7.10 and I would like to know if there is a way to disable a control in a dashboard? Since we can't pre-filter a control (issue #17301) to display a single value or exclude differents… --- ## [Extract value from Nested message field - LogStash Kibana Grok Mutate](https://discuss.elastic.co/t/extract-value-from-nested-message-field-logstash-kibana-grok-mutate/269368)
**Author:** [@Sandun\_Akalanka](https://discuss.elastic.co/u/Sandun_Akalanka)\ **Replies:** 4\ **Last updated:** [April 15, 2021, 11:39am UTC](https://discuss.elastic.co/t/extract-value-from-nested-message-field-logstash-kibana-grok-mutate/269368 "2021-04-15T11:39:58Z")
I've configured a FileBeat service to send logs to Kibana via LogStash. FileBeat and LogStash are in different servers while Kibana is inside an AWS ElasticSearch domain. The logs are visible in the Kibana dashboard. In … --- ## [Create Dashboard for 15 failed logon from AD in 10 Min](https://discuss.elastic.co/t/create-dashboard-for-15-failed-logon-from-ad-in-10-min/245877)
**Author:** [@Majid\_Att](https://discuss.elastic.co/u/Majid_Att)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 12:51pm UTC](https://discuss.elastic.co/t/create-dashboard-for-15-failed-logon-from-ad-in-10-min/245877 "2020-08-25T12:51:07Z")
Hi Guys, we would like to enable Account Lockout in Active Directory with this policy: 15 failed logon in 10 Min will be lockout. Upfront we would like to simulate which user will be hit by this policy . we use Winlog… --- ## [Iterate over array in Kibana](https://discuss.elastic.co/t/iterate-over-array-in-kibana/224638)
**Author:** [@SBH](https://discuss.elastic.co/u/SBH)\ **Replies:** 4\ **Last updated:** [March 24, 2020, 9:13am UTC](https://discuss.elastic.co/t/iterate-over-array-in-kibana/224638 "2020-03-24T09:13:43Z")
Hi I have 3 docs as shown below. It contains the tasks array. I want to have a hit fx in a count for each time the status for the task i fx started. When i search for this in Discover: tasks.status.keyword : "Started" … --- ## [Any way to get original size for images in Canvas?](https://discuss.elastic.co/t/any-way-to-get-original-size-for-images-in-canvas/145914)
**Author:** [@GGorast](https://discuss.elastic.co/u/GGorast)\ **Replies:** 4\ **Last updated:** [August 24, 2018, 8:47pm UTC](https://discuss.elastic.co/t/any-way-to-get-original-size-for-images-in-canvas/145914 "2018-08-24T20:47:41Z")
When image is imported it gets the dimensions of the placeholder. Any chance I can reset its dimensions to the original image? --- ## [Numeric fields not searchable and aggregatable](https://discuss.elastic.co/t/numeric-fields-not-searchable-and-aggregatable/134622)
**Author:** [@kottapar](https://discuss.elastic.co/u/kottapar)\ **Replies:** 4\ **Last updated:** [June 18, 2018, 6:28am UTC](https://discuss.elastic.co/t/numeric-fields-not-searchable-and-aggregatable/134622 "2018-06-18T06:28:56Z")
hey guys, Two numeric fields that were working fine till yesterday suddenly started causing issues with visualizations with "field" errors. I checked and found that the fields were listed as not searchable and aggregat… [Previous page](https://discuss.elastic.co/top.md?page=1144&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1146&per_page=50&period=all)