# Top

**URL:** https://discuss.elastic.co/top.md?page=1147&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1148

---

## [Receiving 404 with Django hitting https://{host}:{port}/intake/v2/events](https://discuss.elastic.co/t/receiving-404-with-django-hitting-https-host-port-intake-v2-events/236001)

<div class="topic-metadata">

**Author:** [@jamesdivdot](https://discuss.elastic.co/u/jamesdivdot)\
**Replies:** 3\
**Last updated:** [June 9, 2020, 11:58pm UTC](https://discuss.elastic.co/t/receiving-404-with-django-hitting-https-host-port-intake-v2-events/236001 "2020-06-09T23:58:49Z")

</div>

I signed up for Elasticsearch (hosted) a week ago. I have installed the latest python clients and am using a supported Django version (2.2). I cannot for the life of me get an error to propagate to the dashboard. What's …

---

## [How to load historical data to kibana](https://discuss.elastic.co/t/how-to-load-historical-data-to-kibana/125743)

<div class="topic-metadata">

**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 5:06pm UTC](https://discuss.elastic.co/t/how-to-load-historical-data-to-kibana/125743 "2018-03-29T17:06:05Z")

</div>

We started generating reports with kibana but kibana is showing reports starting from today using newly generated logs. I would like to see reports for older data also. How can I import previous weeks data manually to el…

---

## [ElasticSearch Setup on EC2](https://discuss.elastic.co/t/elasticsearch-setup-on-ec2/60315)

<div class="topic-metadata">

**Author:** [@Satendrakumar](https://discuss.elastic.co/u/Satendrakumar)\
**Replies:** 8\
**Last updated:** [September 13, 2016, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-setup-on-ec2/60315 "2016-09-13T10:13:41Z")

</div>

I am trying to setup ES cluster( 3 node) on EC2. I have tried lot of configs but ended with this config: \> cluster.name: ES-CLUSTER \> node.name: ES-NODE-01 \> node.max\_local\_storage\_nodes: 1 \> node.rack\_id: rack\_us\_e…

---

## [JAVA API: get the oldest document within a time range](https://discuss.elastic.co/t/java-api-get-the-oldest-document-within-a-time-range/53311)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 3\
**Last updated:** [June 21, 2016, 1:30pm UTC](https://discuss.elastic.co/t/java-api-get-the-oldest-document-within-a-time-range/53311 "2016-06-21T13:30:43Z")

</div>

Hello everyone, I can't manage to query with the java api while I can do it with logstash for instance. Here is the context: I have an index where documents have fields called 'size' and 'time'. What I would like to do…

---

## [Making Dashboard read only](https://discuss.elastic.co/t/making-dashboard-read-only/213853)

<div class="topic-metadata">

**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\
**Replies:** 5\
**Last updated:** [January 8, 2020, 12:28pm UTC](https://discuss.elastic.co/t/making-dashboard-read-only/213853 "2020-01-08T12:28:34Z")

</div>

Hi, I have created a kibana Dashboard which our team will be using. As of now, everyone is able to view and edit the dashboards. Only I should be able to edit and rest of the team members should have read only access. …

---

## [Finding time difference between two events with in a single batch of logstash](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 5\
**Last updated:** [September 9, 2019, 8:14am UTC](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813 "2019-09-09T08:14:24Z")

</div>

Hi all... Here I am trying to calculate the time difference between two events with the help of input plugin file, filter plugin ruby and elasticsearch here is my configuration input { file{ path =\> "/root/message\_…

---

## [Scripted fields - curl command?](https://discuss.elastic.co/t/scripted-fields-curl-command/127871)

<div class="topic-metadata">

**Author:** [@Robert\_Bardo](https://discuss.elastic.co/u/Robert_Bardo)\
**Replies:** 5\
**Last updated:** [April 16, 2018, 2:22pm UTC](https://discuss.elastic.co/t/scripted-fields-curl-command/127871 "2018-04-16T14:22:44Z")

</div>

hello, Is it possible to embed a curl command somehow to a numeric field - by way of scripted fields setting? Thanks!

---

## [Elasticsearch 1.7.5 and Greek language](https://discuss.elastic.co/t/elasticsearch-1-7-5-and-greek-language/51167)

<div class="topic-metadata">

**Author:** [@111120](https://discuss.elastic.co/u/111120)\
**Replies:** 5\
**Last updated:** [February 28, 2017, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-5-and-greek-language/51167 "2017-02-28T08:49:59Z")

</div>

Hello Does anyone know how to adjust the elasticsearch to work well as search and Greek language; Thanks

---

## [Password set up is deprecated](https://discuss.elastic.co/t/password-set-up-is-deprecated/141219)

<div class="topic-metadata">

**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 9:52pm UTC](https://discuss.elastic.co/t/password-set-up-is-deprecated/141219 "2018-07-23T21:52:22Z")

</div>

i have subscribed to platinum trail version,,even though i am unable to access xpack pack security feature.. error shows like this: \\setup-passwords.bat is deprecated, use C:\\elasticsearch-6.3.0\\bin\\elasticsearch-setup…

---

## [Can we combine query\_string and multi\_match queries?](https://discuss.elastic.co/t/can-we-combine-query-string-and-multi-match-queries/118192)

<div class="topic-metadata">

**Author:** [@sps2018](https://discuss.elastic.co/u/sps2018)\
**Replies:** 1\
**Last updated:** [February 15, 2018, 6:34pm UTC](https://discuss.elastic.co/t/can-we-combine-query-string-and-multi-match-queries/118192 "2018-02-15T18:34:34Z")

</div>

Hi, I want to create a query for fetching data from elasticsearch which can search for both single and multi-word queries. For eg, If I search for the keyword : "run" ; it should search for run like Bruno, run, Rune, …

---

## [Aggregation fails silently when ran on huge data, instead of error returns the default response of 10 docs and hits](https://discuss.elastic.co/t/aggregation-fails-silently-when-ran-on-huge-data-instead-of-error-returns-the-default-response-of-10-docs-and-hits/273412)

<div class="topic-metadata">

**Author:** [@rohit.shisode](https://discuss.elastic.co/u/rohit.shisode)\
**Replies:** 5\
**Last updated:** [June 3, 2021, 9:38am UTC](https://discuss.elastic.co/t/aggregation-fails-silently-when-ran-on-huge-data-instead-of-error-returns-the-default-response-of-10-docs-and-hits/273412 "2021-06-03T09:38:22Z")

</div>

Stack details - ES version - 7.10.1 Kibana version - 7.10.1 Java high level client version - 7.2.0 I have a production cluster of 4 nodes where huge amounts of data is stored in one of the index (approx 30M+ docs, ea…

---

## [Appending data to existing index](https://discuss.elastic.co/t/appending-data-to-existing-index/306533)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 2\
**Last updated:** [June 9, 2022, 6:23am UTC](https://discuss.elastic.co/t/appending-data-to-existing-index/306533 "2022-06-09T06:23:40Z")

</div>

I have an index that already has data. One of the lines in the CSV that was uploaded, had location field which reflects the co-ordinates for Vietname, showing null values due to which that particular line from the CSV d…

---

## [Transform Retention Policy](https://discuss.elastic.co/t/transform-retention-policy/293683)

<div class="topic-metadata">

**Author:** [@KentHHarris](https://discuss.elastic.co/u/KentHHarris)\
**Replies:** 2\
**Last updated:** [January 10, 2022, 7:49am UTC](https://discuss.elastic.co/t/transform-retention-policy/293683 "2022-01-10T07:49:57Z")

</div>

Hello, I was hoping for some clarity around transforms' retention policy. My understanding is that any documents in the destination index would be "ignored" from the pivot computations, when the retention policy dateti…

---

## [Failed to cleanup /run/elastic-agent.sock](https://discuss.elastic.co/t/failed-to-cleanup-run-elastic-agent-sock/259809)

<div class="topic-metadata">

**Author:** [@mostlyjason](https://discuss.elastic.co/u/mostlyjason)\
**Replies:** 2\
**Last updated:** [January 13, 2021, 2:19pm UTC](https://discuss.elastic.co/t/failed-to-cleanup-run-elastic-agent-sock/259809 "2021-01-13T14:19:15Z")

</div>

I'm getting an error after installing Elastic Agent that says: 2020-12-29T15:16:12.945Z INFO application/application.go:58 Detecting execution mode 2020-12-29T15:16:12.945Z INFO application/applica…

---

## [Filebeat Autodiscovery: Different configurations for different Docker containers](https://discuss.elastic.co/t/filebeat-autodiscovery-different-configurations-for-different-docker-containers/232210)

<div class="topic-metadata">

**Author:** [@tomson21](https://discuss.elastic.co/u/tomson21)\
**Replies:** 2\
**Last updated:** [May 19, 2020, 9:02am UTC](https://discuss.elastic.co/t/filebeat-autodiscovery-different-configurations-for-different-docker-containers/232210 "2020-05-19T09:02:37Z")

</div>

Hello , I'm currently drawing logs from around 30 Docker containers with a single input and it works perfectly. However, I have recently discovered that one of these containers exports XML which will need a separate con…

---

## [Set vertical bars in Kibana Timelion of static height](https://discuss.elastic.co/t/set-vertical-bars-in-kibana-timelion-of-static-height/208690)

<div class="topic-metadata">

**Author:** [@Aditya\_Saxena](https://discuss.elastic.co/u/Aditya_Saxena)\
**Replies:** 2\
**Last updated:** [November 26, 2019, 9:17am UTC](https://discuss.elastic.co/t/set-vertical-bars-in-kibana-timelion-of-static-height/208690 "2019-11-26T09:17:30Z")

</div>

Hi there, I want to place vertical bars on my timelion. These bars can have static heights or may cover the Y-axis. I know we can place horizontal lines but is the same possible for vertical lines?

---

## [Downgrade from 6.8 to 5.6](https://discuss.elastic.co/t/downgrade-from-6-8-to-5-6/193808)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 2:07pm UTC](https://discuss.elastic.co/t/downgrade-from-6-8-to-5-6/193808 "2019-08-05T14:07:47Z")

</div>

Hello, Elastic 6.8 works great, but because of 3rd party software we have to downgrade to version 5.6, so l wonder how can l downgrade to 5.6 version. Thank you very much

---

## [Config Error : configuration is invalid. Reason: Expected one of #, =\>](https://discuss.elastic.co/t/config-error-configuration-is-invalid-reason-expected-one-of/183866)

<div class="topic-metadata">

**Author:** [@Markandayan\_P](https://discuss.elastic.co/u/Markandayan_P)\
**Replies:** 3\
**Last updated:** [June 3, 2019, 7:12am UTC](https://discuss.elastic.co/t/config-error-configuration-is-invalid-reason-expected-one-of/183866 "2019-06-03T07:12:24Z")

</div>

Here is my logstash configuration filter { grok { match =\> { "message" =\> { '%{DATA:req\_id} %{IPV4:host} %{DATA:machine\_name} %{DATA:location} %{DATA:zuid} %{DATA:zoid} %{DATA:thread\_id} %{DATA:class\_name} %{DATA:met…

---

## [Maps, Geoshapes, Geopoints](https://discuss.elastic.co/t/maps-geoshapes-geopoints/293906)

<div class="topic-metadata">

**Author:** [@androsteve](https://discuss.elastic.co/u/androsteve)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 3:36pm UTC](https://discuss.elastic.co/t/maps-geoshapes-geopoints/293906 "2022-01-11T15:36:46Z")

</div>

I'm new to Elasticsearch and Kibana. I've created 2 indexes. 1 - Customers containing geo\_point and name of location they purchased from 2 - Locations containing geo\_point and name of location I'm able to plot 2 laye…

---

## [Kibana Maps Tooltip Date format](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810)

<div class="topic-metadata">

**Author:** [@travisvyas](https://discuss.elastic.co/u/travisvyas)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:47pm UTC](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810 "2021-12-02T20:47:56Z")

</div>

After our kibana was updated to 7.12 we have noticed that our date/time fields are showing as epoch in the kibana maps when we hover over our data points. When the same date/fields are seen in discover tab they are fine…

---

## [Sending APM logs without using APM server](https://discuss.elastic.co/t/sending-apm-logs-without-using-apm-server/202110)

<div class="topic-metadata">

**Author:** [@Rajat\_Panwar](https://discuss.elastic.co/u/Rajat_Panwar)\
**Replies:** 4\
**Last updated:** [October 7, 2019, 3:54am UTC](https://discuss.elastic.co/t/sending-apm-logs-without-using-apm-server/202110 "2019-10-07T03:54:21Z")

</div>

Hi, We already have an inhouse developed APM tool which works on the same lines as aws X-Ray works. It has same structure of transaction, span etc. There are many cases for us where the log size of APM can go beyond 4 …

---

## [How can we store large scale data with 32GB RAM / 30TB disk on machine](https://discuss.elastic.co/t/how-can-we-store-large-scale-data-with-32gb-ram-30tb-disk-on-machine/84501)

<div class="topic-metadata">

**Author:** [@hellokitty](https://discuss.elastic.co/u/hellokitty)\
**Replies:** 4\
**Last updated:** [May 8, 2017, 4:51pm UTC](https://discuss.elastic.co/t/how-can-we-store-large-scale-data-with-32gb-ram-30tb-disk-on-machine/84501 "2017-05-08T16:51:55Z")

</div>

My problem is that： I have some machine which has about 32GB RAM and 30 TB disk storage. Once the disk usage reach 10%，the memory used may reach up to 90%. Although I have 30TB but I can not use so much disk storage, …

---

## [Geo\_point not found](https://discuss.elastic.co/t/geo-point-not-found/81525)

<div class="topic-metadata">

**Author:** [@ipl2004](https://discuss.elastic.co/u/ipl2004)\
**Replies:** 4\
**Last updated:** [April 10, 2017, 3:17pm UTC](https://discuss.elastic.co/t/geo-point-not-found/81525 "2017-04-10T15:17:56Z")

</div>

Hi, i have found some threads on this topic on Kibana 4.x version nothing on 5.3. Is there a fix for this? { "template": "flight-track-\*", "settings": { "number\_of\_shards": 1, "number\_of\_replicas" : 0…

---

## [Best practices to handle jdbc (Postgresql) contents?](https://discuss.elastic.co/t/best-practices-to-handle-jdbc-postgresql-contents/286506)

<div class="topic-metadata">

**Author:** [@lucien.guillermin](https://discuss.elastic.co/u/lucien.guillermin)\
**Replies:** 6\
**Last updated:** [October 18, 2021, 2:24pm UTC](https://discuss.elastic.co/t/best-practices-to-handle-jdbc-postgresql-contents/286506 "2021-10-18T14:24:46Z")

</div>

Hello Everyone, I have a beginner question regarding a context in which we have to index a PostgreSQL database with Elastic. Is it required to use an intermediary solution between PostgreSQL and Elastic ? If so what ar…

---

## [Kibana dashboard shows different values](https://discuss.elastic.co/t/kibana-dashboard-shows-different-values/219506)

<div class="topic-metadata">

**Author:** [@Vicky\_S](https://discuss.elastic.co/u/Vicky_S)\
**Replies:** 6\
**Last updated:** [February 17, 2020, 2:25pm UTC](https://discuss.elastic.co/t/kibana-dashboard-shows-different-values/219506 "2020-02-17T14:25:36Z")

</div>

Hi, I have created dashboards to monitor customer care details. I have visualizations to show the incoming and outgoing calls. In my computer kibana shows 71 incoming calls and 23 outgoing calls.I accessed the same dashb…

---

## [Compare 2 indices and find missing documents](https://discuss.elastic.co/t/compare-2-indices-and-find-missing-documents/341434)

<div class="topic-metadata">

**Author:** [@arks1](https://discuss.elastic.co/u/arks1)\
**Replies:** 3\
**Last updated:** [August 24, 2023, 4:57pm UTC](https://discuss.elastic.co/t/compare-2-indices-and-find-missing-documents/341434 "2023-08-24T16:57:29Z")

</div>

I have 2 indices, index\_a and index\_b. The 2 indices have documents with the almost the exact same template. index\_b has some extra fields which was introduced as part of a new feature, but it also has all the fields al…

---

## [Packet Beat not sending any data](https://discuss.elastic.co/t/packet-beat-not-sending-any-data/206868)

<div class="topic-metadata">

**Author:** [@Mhodge13](https://discuss.elastic.co/u/Mhodge13)\
**Replies:** 3\
**Last updated:** [November 19, 2019, 11:39am UTC](https://discuss.elastic.co/t/packet-beat-not-sending-any-data/206868 "2019-11-19T11:39:59Z")

</div>

Hi, Started noticing issues today with packet beat not sending any data to our elasticsearch SIEM. I started debug logging and found this constantly happening. 2019-11-06T16:15:10.000-0600 DEBUG \[flows\] flows/work…

---

## [Error "Cannot resolve module 'fs'"](https://discuss.elastic.co/t/error-cannot-resolve-module-fs/77003)

<div class="topic-metadata">

**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\
**Replies:** 3\
**Last updated:** [March 3, 2017, 8:07pm UTC](https://discuss.elastic.co/t/error-cannot-resolve-module-fs/77003 "2017-03-03T20:07:43Z")

</div>

Hi all, I'm trying to include canvg library by require command inside my plugin controller but on kibana startup log shows me an error like the one in the title and application do not start. Which is the suggested way to…

---

## [Log4j Vulnerability Elasticsearch 7.8.0](https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035)

<div class="topic-metadata">

**Author:** [@Faisal\_Umer](https://discuss.elastic.co/u/Faisal_Umer)\
**Replies:** 7\
**Last updated:** [June 6, 2023, 8:08am UTC](https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035 "2023-06-06T08:08:01Z")

</div>

We have Elasticsearch 7.8.0 cluster which has CVE-2021-44228. Can we somehow patch it without upgrading the Elasticsearch version? If yes, can you please share any relevant thread or documentation?

---

## [Inserting a list of values into a filter](https://discuss.elastic.co/t/inserting-a-list-of-values-into-a-filter/179832)

<div class="topic-metadata">

**Author:** [@anbary](https://discuss.elastic.co/u/anbary)\
**Replies:** 1\
**Last updated:** [May 9, 2019, 3:14am UTC](https://discuss.elastic.co/t/inserting-a-list-of-values-into-a-filter/179832 "2019-05-09T03:14:20Z")

</div>

Hello, When building a filter for a large number of values, the current approach requires us to save values individually one by one. Is there a way to upload or copy/paste the whole list instead?

---

## [Elastic 6.3.2 failing to install custom plugin with java.nio.file.NoSuchFileException Ask](https://discuss.elastic.co/t/elastic-6-3-2-failing-to-install-custom-plugin-with-java-nio-file-nosuchfileexception-ask/142417)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 7:15pm UTC](https://discuss.elastic.co/t/elastic-6-3-2-failing-to-install-custom-plugin-with-java-nio-file-nosuchfileexception-ask/142417 "2018-07-31T19:15:22Z")

</div>

I have a simple custom realm jar which I zipped and the plugin-descriptor.properties file as mentioned in https://www.elastic.co/guide/en/elasticsearch/plugins/current/plugin-authors.html When I try to do the install wi…

---

## [Filter instead of query for improved performance?](https://discuss.elastic.co/t/filter-instead-of-query-for-improved-performance/106751)

<div class="topic-metadata">

**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\
**Replies:** 1\
**Last updated:** [November 8, 2017, 6:00am UTC](https://discuss.elastic.co/t/filter-instead-of-query-for-improved-performance/106751 "2017-11-08T06:00:12Z")

</div>

Upon reading this thread here https://stackoverflow.com/questions/14595988/queries-vs-filters , I took away from it that it's possible to submit a filter 'query' instead of a query 'query' for improved performance. My u…

---

## [How to use Filebeats for collecting Windows events and Microsoft Exchange Logs](https://discuss.elastic.co/t/how-to-use-filebeats-for-collecting-windows-events-and-microsoft-exchange-logs/43338)

<div class="topic-metadata">

**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Replies:** 1\
**Last updated:** [March 3, 2016, 6:33am UTC](https://discuss.elastic.co/t/how-to-use-filebeats-for-collecting-windows-events-and-microsoft-exchange-logs/43338 "2016-03-03T06:33:51Z")

</div>

Hi, Currently, we are using NXLOG to ship Windows events and Exchange logs in a Windows environment. How can we replace NXLOG with Filebeats. Is it matured enough?

---

## [Disable cluster rebalancing for replicas](https://discuss.elastic.co/t/disable-cluster-rebalancing-for-replicas/21434)

<div class="topic-metadata">

**Author:** [@Arun\_2](https://discuss.elastic.co/u/Arun_2)\
**Replies:** 1\
**Last updated:** [January 1, 2015, 3:06am UTC](https://discuss.elastic.co/t/disable-cluster-rebalancing-for-replicas/21434 "2015-01-01T03:06:14Z")

</div>

Hello, I have a 3-node ES (v1.2.1) cluster with 1 replica. When there is a node failure, the cluster rebalances and allocates primary shards(6 per index) and replicas among the remaining 2 nodes which is fine. …

---

## [Anyway to force event to logstash which logs only includes line with no line terminator?](https://discuss.elastic.co/t/anyway-to-force-event-to-logstash-which-logs-only-includes-line-with-no-line-terminator/75135)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 1\
**Last updated:** [February 15, 2017, 5:55am UTC](https://discuss.elastic.co/t/anyway-to-force-event-to-logstash-which-logs-only-includes-line-with-no-line-terminator/75135 "2017-02-15T05:55:45Z")

</div>

filebeat version : 5.2.0 logstash version : 5.2.0 Hello . I have logs conjunction with a logthat has only one line with no line terminators. I am using multiline to send the whole file to logstash but only log th…

---

## [Kibana 7.8 ZIP for Windows - extraction fail](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657)

<div class="topic-metadata">

**Author:** [@Gnintz](https://discuss.elastic.co/u/Gnintz)\
**Replies:** 5\
**Last updated:** [July 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657 "2020-07-28T14:36:14Z")

</div>

On my W 10 1903 system, even the attempt to view the downloaded Kibana 7.8 zipped package does crash the explorer - unzipping it kills the whole system. There are 2 options - something is severely wrong with my machine,…

---

## [Search is against all indexes and not just the single configured index](https://discuss.elastic.co/t/search-is-against-all-indexes-and-not-just-the-single-configured-index/111977)

<div class="topic-metadata">

**Author:** [@AndyDev2017](https://discuss.elastic.co/u/AndyDev2017)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 6:38am UTC](https://discuss.elastic.co/t/search-is-against-all-indexes-and-not-just-the-single-configured-index/111977 "2017-12-18T06:38:30Z")

</div>

Currently I have a search with a match\_all query failing due to the logs stating the operation is being conducted against all indexes. The track has been configured to use a single index i.e. not '\_all' My assumption was…

---

## [Canvas line-chart with multiple lines](https://discuss.elastic.co/t/canvas-line-chart-with-multiple-lines/285924)

<div class="topic-metadata">

**Author:** [@marcw](https://discuss.elastic.co/u/marcw)\
**Replies:** 2\
**Last updated:** [October 6, 2021, 8:24am UTC](https://discuss.elastic.co/t/canvas-line-chart-with-multiple-lines/285924 "2021-10-06T08:24:51Z")

</div>

I'm new to Kibana. I have the following data: DateTime Temperature1 Temperature2 Temparature3 2021-10-05 09:00:00 5 2 9 2021-10-05 10:00:00 6 1 7 I want to create on a canvas a line-chart, x-axis is the Dat…

---

## [AWS Cognito integration with Kibana](https://discuss.elastic.co/t/aws-cognito-integration-with-kibana/268604)

<div class="topic-metadata">

**Author:** [@diwakar\_singh](https://discuss.elastic.co/u/diwakar_singh)\
**Replies:** 2\
**Last updated:** [March 29, 2021, 12:54pm UTC](https://discuss.elastic.co/t/aws-cognito-integration-with-kibana/268604 "2021-03-29T12:54:38Z")

</div>

Hi, I'm using AWS Cognito as SSO authentication service for Kibana and my other web application. Everything seems to be working fine but there is one issue. After log in through Cognito, Kibana remains logged in as long…

---

## [Kibana7.5.1 yarn kbn bootstrap failed](https://discuss.elastic.co/t/kibana7-5-1-yarn-kbn-bootstrap-failed/213662)

<div class="topic-metadata">

**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 4:31am UTC](https://discuss.elastic.co/t/kibana7-5-1-yarn-kbn-bootstrap-failed/213662 "2020-01-06T04:31:00Z")

</div>

hi, when I try to build kibana-7.5.1 source code, it failed my yarn and node version is: the error message is: Installs completed, linking package executables: \[kbn\_tp\_embeddable\_explorer\] plugin-helpers -\> ../../…

---

## [Watcherのscriptにおける記述作法](https://discuss.elastic.co/t/watcher-script/207610)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 4:46am UTC](https://discuss.elastic.co/t/watcher-script/207610 "2019-11-13T04:46:34Z")

</div>

お世話になります。 基礎的な質問で大変恐縮なのですが、 Watcher の advanced watch に設定するconditionで、scriptを記述したいのですが、 下記URLのような書き方（scriptのプログラムを「"""」で囲む）をすると、エラーが発生します。 エラーメッセージ Watch JSON（抜粋） "condition": { "script": { "source": "…

---

## [Send html email using watcher](https://discuss.elastic.co/t/send-html-email-using-watcher/148296)

<div class="topic-metadata">

**Author:** [@mdavi](https://discuss.elastic.co/u/mdavi)\
**Replies:** 2\
**Last updated:** [September 13, 2018, 4:08pm UTC](https://discuss.elastic.co/t/send-html-email-using-watcher/148296 "2018-09-13T16:08:56Z")

</div>

Dears all, I'm using logstash + elasticsearch + kibana to monitor my logfiles. I'm trying to send html- email using a watcher but I receive always the plain text. Here below the configuration of my action: "actions":…

---

## [Snapshot Error 404](https://discuss.elastic.co/t/snapshot-error-404/66776)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 2\
**Last updated:** [November 22, 2016, 12:30pm UTC](https://discuss.elastic.co/t/snapshot-error-404/66776 "2016-11-22T12:30:12Z")

</div>

Hello Guys, I decidied replace my current ELK version from 2.3.5 to 5, so I'm preparing my cluster for the migration. My first step was take some snapshot and try restore in the same version 2.3.5, just fo…

---

## [Elasticsearch Cluster Health watch Watcher](https://discuss.elastic.co/t/elasticsearch-cluster-health-watch-watcher/338321)

<div class="topic-metadata">

**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Replies:** 8\
**Last updated:** [July 13, 2023, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-health-watch-watcher/338321 "2023-07-13T13:36:55Z")

</div>

Hi Team, I am trying to create a watcher for cluster health check (Clluster is 3 master and 5 data node ) as per Elastic documentation In the input section it is referred to provide host as host:localhost "input" :…

---

## [Shards getting unassigned Randomly](https://discuss.elastic.co/t/shards-getting-unassigned-randomly/217699)

<div class="topic-metadata">

**Author:** [@rokarajan](https://discuss.elastic.co/u/rokarajan)\
**Replies:** 8\
**Last updated:** [February 5, 2020, 10:46pm UTC](https://discuss.elastic.co/t/shards-getting-unassigned-randomly/217699 "2020-02-05T22:46:18Z")

</div>

Hello ELK forum members, I'm new on this forum and would like to share a problem we are currently facing with ELK. We have been running ELK in our Kubernetes(EKS) for few months with version 7.2.0. We have 12 nodes in …

---

## [Incomplete course video](https://discuss.elastic.co/t/incomplete-course-video/188149)

<div class="topic-metadata">

**Author:** [@Juanma](https://discuss.elastic.co/u/Juanma)\
**Replies:** 8\
**Last updated:** [July 4, 2019, 6:50pm UTC](https://discuss.elastic.co/t/incomplete-course-video/188149 "2019-07-04T18:50:46Z")

</div>

Hi! I was doing today " Elastic Machine Learning for Cybersecurity" course and I have found that in chapter 3 "Detecting DNS Data Exfiltration" the video suddenly ends just in middle of the json editor description. At…

---

## [Abolishing types - a disaster from my point of view](https://discuss.elastic.co/t/abolishing-types-a-disaster-from-my-point-of-view/86952)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 8\
**Last updated:** [May 24, 2017, 2:48pm UTC](https://discuss.elastic.co/t/abolishing-types-a-disaster-from-my-point-of-view/86952 "2017-05-24T14:48:51Z")

</div>

So, I've just read https://www.elastic.co/blog/index-type-parent-child-join-now-future-in-elasticsearch and related articles. While this may seem like a logical change to you from the inside, from my app's point of view,…

---

## [Error: Your CLT does not support macOS 11](https://discuss.elastic.co/t/error-your-clt-does-not-support-macos-11/259680)

<div class="topic-metadata">

**Author:** [@yhoiseth](https://discuss.elastic.co/u/yhoiseth)\
**Replies:** 1\
**Last updated:** [December 27, 2020, 10:17pm UTC](https://discuss.elastic.co/t/error-your-clt-does-not-support-macos-11/259680 "2020-12-27T22:17:22Z")

</div>

After upgrading to macOS Big Sur 11.1 (20C69), I can’t upgrade Elasticsearch to 7.10.1. For background, I previously installed Elasticsearch using these instructions. I have since upgraded the Elasticsearch version many…

---

## [Ruby filter - detect null values inside structure](https://discuss.elastic.co/t/ruby-filter-detect-null-values-inside-structure/205509)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 4:48pm UTC](https://discuss.elastic.co/t/ruby-filter-detect-null-values-inside-structure/205509 "2019-10-28T16:48:27Z")

</div>

In my Logstash pipeline, I am loading JSON messages and later use a ruby filter to detect and apply special logic to fields with null values. ruby { code =\> " event.to\_hash.each { |key,value| if value ==…

---

## [Unable to install logstash-filter-elapsed plugin on Logstash 5.5.1](https://discuss.elastic.co/t/unable-to-install-logstash-filter-elapsed-plugin-on-logstash-5-5-1/99260)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 10:41am UTC](https://discuss.elastic.co/t/unable-to-install-logstash-filter-elapsed-plugin-on-logstash-5-5-1/99260 "2017-09-04T10:41:38Z")

</div>

Hi All, I’m trying to add the logstash-filter-elapsed plugin to my Logstash 5.5.1 installation and am seeing the following error during the installation process. This was running on a Windows server without any interven…

[Previous page](https://discuss.elastic.co/top.md?page=1146&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1148&per_page=50&period=all)
