# Top

**URL:** https://discuss.elastic.co/top.md?page=1150&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1151

---

## [Elasticsearch not responding](https://discuss.elastic.co/t/elasticsearch-not-responding/6817)

<div class="topic-metadata">

**Author:** [@michaelpeters99](https://discuss.elastic.co/u/michaelpeters99)\
**Replies:** 2\
**Last updated:** [February 27, 2012, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-not-responding/6817 "2012-02-27T13:14:27Z")

</div>

I failed to recover from running out of file descriptors, so eventually re-installed 0.17.6. But after days of trying lots of things, :9200 just does not respond. I am installing on Centos 6 and elasticsearch previously …

---

## [Beats to Logstash Connectivity](https://discuss.elastic.co/t/beats-to-logstash-connectivity/240198)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 3\
**Last updated:** [July 7, 2020, 7:50pm UTC](https://discuss.elastic.co/t/beats-to-logstash-connectivity/240198 "2020-07-07T19:50:07Z")

</div>

Hi Team I am facing one weird issue when receiving connection on Logstash from filebeats. Logstash Version : 7.7.0 Beats version: 7.7.0 Connection - Beats -\> Traefik LB -\> Logstash Service -\> Logstash Configuration…

---

## [Trying to open a dashboard: Visualize: Request Timeout after 30000ms](https://discuss.elastic.co/t/trying-to-open-a-dashboard-visualize-request-timeout-after-30000ms/93749)

<div class="topic-metadata">

**Author:** [@Olsen](https://discuss.elastic.co/u/Olsen)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 1:03pm UTC](https://discuss.elastic.co/t/trying-to-open-a-dashboard-visualize-request-timeout-after-30000ms/93749 "2017-08-14T13:03:17Z")

</div>

Hello.. I 'am running Elasticsearch, Kibana and Logstach 5.2.2 in a Docker environment. Comming back from holiday I tried to open a saved dashboard that I know is working. After 30 seconds of loading, Kibana respond wi…

---

## [How to let filebeat process exit when service is stopped?](https://discuss.elastic.co/t/how-to-let-filebeat-process-exit-when-service-is-stopped/86270)

<div class="topic-metadata">

**Author:** [@tang](https://discuss.elastic.co/u/tang)\
**Replies:** 3\
**Last updated:** [May 19, 2017, 11:34am UTC](https://discuss.elastic.co/t/how-to-let-filebeat-process-exit-when-service-is-stopped/86270 "2017-05-19T11:34:51Z")

</div>

my service writes to stdin every some seconds. If I stop service, thus stdin is closed, but filebeat process still works. I hope when stopping my service, filebeat stops its process also. How can I do that? many thanks. …

---

## [Update fail... Marvel from Trial to basic](https://discuss.elastic.co/t/update-fail-marvel-from-trial-to-basic/57363)

<div class="topic-metadata">

**Author:** [@zhangc819](https://discuss.elastic.co/u/zhangc819)\
**Replies:** 3\
**Last updated:** [September 3, 2016, 2:13pm UTC](https://discuss.elastic.co/t/update-fail-marvel-from-trial-to-basic/57363 "2016-09-03T14:13:31Z")

</div>

hi today i want to update my marvel license from Trial to basic. curl -XPUT 'http://localhost/\_license' -d @mylic.json {"statusCode":400,"error":"Bad Request","message":"Missing kbn-version header" then i mod…

---

## [Getting index health](https://discuss.elastic.co/t/getting-index-health/32897)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 3\
**Last updated:** [October 24, 2015, 5:43am UTC](https://discuss.elastic.co/t/getting-index-health/32897 "2015-10-24T05:43:32Z")

</div>

Hi All, How can I get the health status of each index through java API (http://10.0.1.32:9200/\_cat/indices?v) I am able to read all the value except the health for each index through transportclient admin. Thanks …

---

## [Load balance on heterogeneous nodes in a cluster](https://discuss.elastic.co/t/load-balance-on-heterogeneous-nodes-in-a-cluster/15553)

<div class="topic-metadata">

**Author:** [@xzer\_LR](https://discuss.elastic.co/u/xzer_LR)\
**Replies:** 3\
**Last updated:** [February 7, 2014, 9:53am UTC](https://discuss.elastic.co/t/load-balance-on-heterogeneous-nodes-in-a-cluster/15553 "2014-02-07T09:53:22Z")

</div>

I am now evaluating elasticsearch as our text search solution. But the problem is that we cannot guarantee that we can always allocate same hardware for our cluster when new nodes are added, therefor we need a solu…

---

## [fieldNorm value calculation seems to be wrong](https://discuss.elastic.co/t/fieldnorm-value-calculation-seems-to-be-wrong/11524)

<div class="topic-metadata">

**Author:** [@dilshan](https://discuss.elastic.co/u/dilshan)\
**Replies:** 3\
**Last updated:** [April 12, 2013, 10:01am UTC](https://discuss.elastic.co/t/fieldnorm-value-calculation-seems-to-be-wrong/11524 "2013-04-12T10:01:23Z")

</div>

Hi, I indexed the following document in ES. { "content\_id": 1, "options": \["CD14", "CD2", "CD235a", "CD20", "CD11b", "CD19", "CD7", "CD56", "CD10", "CD8", "CD3", "CD4"\] } Then I did a simple search …

---

## [Elastic Engineer I On-Demand Lab files](https://discuss.elastic.co/t/elastic-engineer-i-on-demand-lab-files/220401)

<div class="topic-metadata">

**Author:** [@rhugs](https://discuss.elastic.co/u/rhugs)\
**Replies:** 5\
**Last updated:** [February 25, 2020, 5:14pm UTC](https://discuss.elastic.co/t/elastic-engineer-i-on-demand-lab-files/220401 "2020-02-25T17:14:38Z")

</div>

Hi all. I am taking the Elastic Engineer I on-demand course. I'm looking for the course files for use in my own lab. I've got a lab setup and functioning. The lab guide talks about importing data in several places. …

---

## [ML newbie - where are results stored and for how long](https://discuss.elastic.co/t/ml-newbie-where-are-results-stored-and-for-how-long/210184)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 5\
**Last updated:** [December 6, 2019, 9:44am UTC](https://discuss.elastic.co/t/ml-newbie-where-are-results-stored-and-for-how-long/210184 "2019-12-06T09:44:02Z")

</div>

Are initially playing a bit with ML and wondering about where and for how long ML processing results are stored and how to maintain such data. Eg. got a ML job which seems to indicate anormalities prior to existing data…

---

## [Parsing Geo Data from text documents](https://discuss.elastic.co/t/parsing-geo-data-from-text-documents/93507)

<div class="topic-metadata">

**Author:** [@antman1p](https://discuss.elastic.co/u/antman1p)\
**Replies:** 5\
**Last updated:** [July 19, 2017, 6:29am UTC](https://discuss.elastic.co/t/parsing-geo-data-from-text-documents/93507 "2017-07-19T06:29:27Z")

</div>

I am currently have a python script that watches a directory and every time a new file shows up, it calls Apache Tika to parse the file. I am parsing a WIDE variety of document types and the script posts the parsed data…

---

## [JSON input causes unknown key error](https://discuss.elastic.co/t/json-input-causes-unknown-key-error/93153)

<div class="topic-metadata">

**Author:** [@mle](https://discuss.elastic.co/u/mle)\
**Replies:** 5\
**Last updated:** [July 14, 2017, 1:47pm UTC](https://discuss.elastic.co/t/json-input-causes-unknown-key-error/93153 "2017-07-14T13:47:41Z")

</div>

Hello! I just started working with Kibana some days ago and now I want to explore the json input field. In a histogram I want to count the occurences of the field "test\_id". Therefore I use a filter which works fine. I…

---

## [ES OutOfMemory on a 30GB index](https://discuss.elastic.co/t/es-outofmemory-on-a-30gb-index/17790)

<div class="topic-metadata">

**Author:** [@Paul\_Sanwald\_2](https://discuss.elastic.co/u/Paul_Sanwald_2)\
**Replies:** 5\
**Last updated:** [May 29, 2014, 12:49pm UTC](https://discuss.elastic.co/t/es-outofmemory-on-a-30gb-index/17790 "2014-05-29T12:49:09Z")

</div>

Hi Everyone, We are seeing continual OOM exceptions on one of our 1.1.0 elasticsearch clusters, the index is ~30GB, quite small. I'm trying to work out the root cause via heap dump analysis, but not having a lot …

---

## [App search - how to multi value boost](https://discuss.elastic.co/t/app-search-how-to-multi-value-boost/256693)

<div class="topic-metadata">

**Author:** [@colinw90](https://discuss.elastic.co/u/colinw90)\
**Replies:** 1\
**Last updated:** [November 27, 2020, 12:33pm UTC](https://discuss.elastic.co/t/app-search-how-to-multi-value-boost/256693 "2020-11-27T12:33:37Z")

</div>

When providing an array of terms to 'value boost' on App search it will boost a document if ANY of the terms are present. How do I boost for EVERY term that is present? For example, a document with 3 matching terms sho…

---

## [Issue Resolved: Delting this post](https://discuss.elastic.co/t/issue-resolved-delting-this-post/69937)

<div class="topic-metadata">

**Author:** [@Ronak\_Agrawal](https://discuss.elastic.co/u/Ronak_Agrawal)\
**Replies:** 1\
**Last updated:** [December 24, 2016, 1:03pm UTC](https://discuss.elastic.co/t/issue-resolved-delting-this-post/69937 "2016-12-24T13:03:45Z")

</div>

Kindly delete this post

---

## [Kibana Vega bar chart errors](https://discuss.elastic.co/t/kibana-vega-bar-chart-errors/299440)

<div class="topic-metadata">

**Author:** [@M\_Chiorboli](https://discuss.elastic.co/u/M_Chiorboli)\
**Replies:** 4\
**Last updated:** [March 18, 2022, 2:24pm UTC](https://discuss.elastic.co/t/kibana-vega-bar-chart-errors/299440 "2022-03-18T14:24:54Z")

</div>

Hello, I am trying to produce a bar chart in Kibana using Vega. I use Vega because I have to use nested fields, and it seems there are not other options. This is my script: { "$schema": "https://vega.github.io/sche…

---

## [Master not discovered or elected yet, an election requires a node with id \[eJcn6jOSRw65wy4liDC1VA\]](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-ejcn6josrw65wy4lidc1va/224759)

<div class="topic-metadata">

**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\
**Replies:** 4\
**Last updated:** [March 25, 2020, 4:41am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-ejcn6josrw65wy4lidc1va/224759 "2020-03-25T04:41:29Z")

</div>

Hi, I am using 7.6 version.When I am trying to run elasticsearch bat file,I am facing with following errors \[2020-03-24T08:43:26,869\]\[INFO \]\[o.e.n.Node \] \[10INLPC0SP3TF\] initialized \[2020-03-24T08:43:26,8…

---

## [org.elasticsearch.index.query.QueryShardException: failed to find geo\_point field \[geoip.location\]](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-find-geo-point-field-geoip-location/155815)

<div class="topic-metadata">

**Author:** [@mauriciothomsen](https://discuss.elastic.co/u/mauriciothomsen)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 2:00am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-find-geo-point-field-geoip-location/155815 "2018-12-06T02:00:25Z")

</div>

When creating a new visualization using geohash aggregation, I get the following error: "Courier fetch: 5 of 10 shards failed." Monitoring the elasticsearch log when performing this action, I get the following line: "…

---

## [Guide for nontechnical end users](https://discuss.elastic.co/t/guide-for-nontechnical-end-users/109844)

<div class="topic-metadata">

**Author:** [@Malik\_Rumi](https://discuss.elastic.co/u/Malik_Rumi)\
**Replies:** 4\
**Last updated:** [November 30, 2017, 11:43pm UTC](https://discuss.elastic.co/t/guide-for-nontechnical-end-users/109844 "2017-11-30T23:43:30Z")

</div>

I am just getting started learning and using elasticsearch. I am looking at all these docs and tutorials and it all seems fairly complex. But my use case is the same as Amazon, and no one has ever taught me how to search…

---

## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474)

<div class="topic-metadata">

**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\
**Replies:** 7\
**Last updated:** [March 14, 2022, 2:25pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474 "2022-03-14T14:25:31Z")

</div>

Hi, After instaling/configuring logstash, I get this error: \[2022-03-11T09:22:27,379\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /u02/logstash\_frontend/etc/log4j2.properties \[2022-03-11T09:22:…

---

## [Multiple terms and multiple filter in single query](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926)

<div class="topic-metadata">

**Author:** [@m.fayazahammed](https://discuss.elastic.co/u/m.fayazahammed)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 5:34am UTC](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926 "2020-05-11T05:34:58Z")

</div>

Hi Team, I have basically below documents with multiple collections. {"id" : 1, "stores" :\[1,2,3,4,5\], "items":\[ 55,44,334,155\]} {"id" : 2, "stores" :\[1\], "items":\[ 55\]} {"id" : 3, "stores" :\[1,5\], "items":\[ 155\]} {…

---

## [While using enviroment variable in Curator -crontab.Unable to get required output](https://discuss.elastic.co/t/while-using-enviroment-variable-in-curator-crontab-unable-to-get-required-output/229302)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 7\
**Last updated:** [May 5, 2020, 2:23pm UTC](https://discuss.elastic.co/t/while-using-enviroment-variable-in-curator-crontab-unable-to-get-required-output/229302 "2020-05-05T14:23:11Z")

</div>

i set enviroment variable for elasticsearch-service in curator's config yml. and some env var in action\_file.yml i export variable in bash\_profile file and other solution found in web but it does not work there are two…

---

## [Max timestamp](https://discuss.elastic.co/t/max-timestamp/45973)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [March 31, 2016, 8:14pm UTC](https://discuss.elastic.co/t/max-timestamp/45973 "2016-03-31T20:14:03Z")

</div>

In Kibana 4.5 Visualize \> Data Table I can choose a Metric Max @timestamp But how do I add other fields to the table at that Max timestamp

---

## [Elasticearch reports wrong low disk condition](https://discuss.elastic.co/t/elasticearch-reports-wrong-low-disk-condition/25750)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 1\
**Last updated:** [July 16, 2015, 9:11pm UTC](https://discuss.elastic.co/t/elasticearch-reports-wrong-low-disk-condition/25750 "2015-07-16T21:11:03Z")

</div>

Hi guys. OK I'm having an unusul problem with Elasticsearch. Where it's reporting a low disk condition on one of the nodes. And it keeps reporting low disk conditions even after I've cleared out enough disk space by d…

---

## [MISP Integration with ELK](https://discuss.elastic.co/t/misp-integration-with-elk/110625)

<div class="topic-metadata">

**Author:** [@anji](https://discuss.elastic.co/u/anji)\
**Replies:** 0\
**Last updated:** [December 7, 2017, 7:44am UTC](https://discuss.elastic.co/t/misp-integration-with-elk/110625 "2017-12-07T07:44:17Z")

</div>

Hello , can we integrate MISP (Malware Information Sharing Platform, a Threat Sharing Platform.) with ELK ?? if it's possible then how can we integrate MISP with ELK? Thnks & Regards, Anji

---

## [Exception java.lang.IllegalStateException](https://discuss.elastic.co/t/exception-java-lang-illegalstateexception/203393)

<div class="topic-metadata">

**Author:** [@silen](https://discuss.elastic.co/u/silen)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 8:32am UTC](https://discuss.elastic.co/t/exception-java-lang-illegalstateexception/203393 "2019-10-14T08:32:08Z")

</div>

Start ES 6.8.1 exception, the log is as follows，Please enlighten the gods，thanks: \[2019-10-14T10:45:22,342\]\[ERROR\]\[o.e.b.Bootstrap \] \[my\_frist\_node\] Exception java.lang.IllegalStateException: failed to load pl…

---

## [Jdbc\_static filter with multiple parameters crashes](https://discuss.elastic.co/t/jdbc-static-filter-with-multiple-parameters-crashes/147674)

<div class="topic-metadata">

**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Replies:** 2\
**Last updated:** [September 10, 2018, 8:55am UTC](https://discuss.elastic.co/t/jdbc-static-filter-with-multiple-parameters-crashes/147674 "2018-09-10T08:55:33Z")

</div>

Without the jdbc\_static filter this works fine. input { jdbc { jdbc\_driver\_library =\> "\\trunk\\Installation\\sqljdbc\_6.4\\enu\\mssql-jdbc-6.4.0.jre8.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriv…

---

## [Kibana 6.0.0 and getting "UI Settings requires the elasticsearch plugin"](https://discuss.elastic.co/t/kibana-6-0-0-and-getting-ui-settings-requires-the-elasticsearch-plugin/113966)

<div class="topic-metadata">

**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\
**Replies:** 2\
**Last updated:** [January 3, 2018, 11:24pm UTC](https://discuss.elastic.co/t/kibana-6-0-0-and-getting-ui-settings-requires-the-elasticsearch-plugin/113966 "2018-01-03T23:24:50Z")

</div>

Hi all, I installed Kibana 6.0.0 using .tar.gz option, and I'm getting the following error upon execution: \> \[error\]\[status\]\[ui settings\] Status changed from uninitialized to red - UI Settings requires the elasticsearc…

---

## [Kibana 6 doesn't give me a 'Terms' aggregation option](https://discuss.elastic.co/t/kibana-6-doesnt-give-me-a-terms-aggregation-option/108714)

<div class="topic-metadata">

**Author:** [@dhruv](https://discuss.elastic.co/u/dhruv)\
**Replies:** 2\
**Last updated:** [November 22, 2017, 2:51pm UTC](https://discuss.elastic.co/t/kibana-6-doesnt-give-me-a-terms-aggregation-option/108714 "2017-11-22T14:51:36Z")

</div>

Hi All, I just upgraded to ELK 6.0 and I see to have lost the ability to Aggregate based on terms (It doesn't show in the drop down list of options) \[57 PM\] I can discover my .keyword / non-analyzed fields but it refu…

---

## [Problems getting hdfs gateway configured/started](https://discuss.elastic.co/t/problems-getting-hdfs-gateway-configured-started/5568)

<div class="topic-metadata">

**Author:** [@Dave\_Rawks](https://discuss.elastic.co/u/Dave_Rawks)\
**Replies:** 2\
**Last updated:** [October 12, 2011, 9:11pm UTC](https://discuss.elastic.co/t/problems-getting-hdfs-gateway-configured-started/5568 "2011-10-12T21:11:33Z")

</div>

Hey all, I've been trying to get ES running on top of hdfs and I've run into a few problems. I've got a completely vanilla installation of hadoop 0.20.203.0 which I've confirmed is functioning by creating a directory…

---

## [Same log file contains different format of logs data. How can I parse it?](https://discuss.elastic.co/t/same-log-file-contains-different-format-of-logs-data-how-can-i-parse-it/237742)

<div class="topic-metadata">

**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\
**Replies:** 8\
**Last updated:** [June 19, 2020, 2:49pm UTC](https://discuss.elastic.co/t/same-log-file-contains-different-format-of-logs-data-how-can-i-parse-it/237742 "2020-06-19T14:49:19Z")

</div>

Hi all, I want to parse the logfile which has a different pattern in almost every line. The main difference is actually the length of each line. Suppose my logs have a named variable, in first log it may contain three n…

---

## [How to add pod annotations to filebeat documents?](https://discuss.elastic.co/t/how-to-add-pod-annotations-to-filebeat-documents/330485)

<div class="topic-metadata">

**Author:** [@lucasdacosta](https://discuss.elastic.co/u/lucasdacosta)\
**Replies:** 3\
**Last updated:** [April 21, 2023, 10:01am UTC](https://discuss.elastic.co/t/how-to-add-pod-annotations-to-filebeat-documents/330485 "2023-04-21T10:01:18Z")

</div>

Hi folks :wave: Am running filebeat within my cluster but I can't figure out how to add fields to my log documents which would include the pod's annotations. That's super relevant for search later. Here's my current co…

---

## [\--ca-sha256 not working for Elastic Agent enrollment; error reported: "fail to enroll: fail to execute request to fleet-server: x509: certificate signed by unknown authority"](https://discuss.elastic.co/t/ca-sha256-not-working-for-elastic-agent-enrollment-error-reported-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-certificate-signed-by-unknown-authority/320270)

<div class="topic-metadata">

**Author:** [@username11](https://discuss.elastic.co/u/username11)\
**Replies:** 3\
**Last updated:** [December 15, 2022, 12:54am UTC](https://discuss.elastic.co/t/ca-sha256-not-working-for-elastic-agent-enrollment-error-reported-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-certificate-signed-by-unknown-authority/320270 "2022-12-15T00:54:18Z")

</div>

Hi. I am currently working on deploying Fleet + Elastic Agent in a test-ish environment. I've had success in enrolling the agents into Fleet as follows: sudo ./elastic-agent install --url=https://fleet1.local:8220 --enr…

---

## [Metricbeat 7.7 problem](https://discuss.elastic.co/t/metricbeat-7-7-problem/235704)

<div class="topic-metadata">

**Author:** [@Mario\_Fimiani](https://discuss.elastic.co/u/Mario_Fimiani)\
**Replies:** 3\
**Last updated:** [June 5, 2020, 4:42pm UTC](https://discuss.elastic.co/t/metricbeat-7-7-problem/235704 "2020-06-05T16:42:13Z")

</div>

Hi I have installed metricbeat 7.7 on redhat 6.8 (Red Hat Enterprise Linux Server release 6.8 (Santiago)). After the configuration and restart of the agent, I'm receiving this error : Exiting: 1 error: error finding …

---

## [Create a submenu for the left menu？](https://discuss.elastic.co/t/create-a-submenu-for-the-left-menu/176820)

<div class="topic-metadata">

**Author:** [@wyl](https://discuss.elastic.co/u/wyl)\
**Replies:** 3\
**Last updated:** [April 16, 2019, 2:43am UTC](https://discuss.elastic.co/t/create-a-submenu-for-the-left-menu/176820 "2019-04-16T02:43:28Z")

</div>

Create a submenu for the left menu？like

---

## [How to make a Yes/No Vertical Bar Chart? (Horizontal Population Pyramid)](https://discuss.elastic.co/t/how-to-make-a-yes-no-vertical-bar-chart-horizontal-population-pyramid/143921)

<div class="topic-metadata">

**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 9:15pm UTC](https://discuss.elastic.co/t/how-to-make-a-yes-no-vertical-bar-chart-horizontal-population-pyramid/143921 "2018-08-10T21:15:14Z")

</div>

Does anyone know how to make a Horizontal Population Pyramid like the one in the header image located in this article? I want Yes to go up vertically and No to go down vertically.. https://www.elastic.co/blog/from-tablea…

---

## [Maximum length for highlighting exceeded - What can I do?](https://discuss.elastic.co/t/maximum-length-for-highlighting-exceeded-what-can-i-do/121678)

<div class="topic-metadata">

**Author:** [@T3rm11](https://discuss.elastic.co/u/T3rm11)\
**Replies:** 3\
**Last updated:** [April 3, 2018, 2:32pm UTC](https://discuss.elastic.co/t/maximum-length-for-highlighting-exceeded-what-can-i-do/121678 "2018-04-03T14:32:08Z")

</div>

Logstash sends exception with stacktraces to Elasticsearch and this results sometimes to this warning: The length of text to be analyzed for highlighting \[20567\] exceeded the allowed maximum of \[10000\] set for the next…

---

## [ES 7 join datatype aggregations](https://discuss.elastic.co/t/es-7-join-datatype-aggregations/107965)

<div class="topic-metadata">

**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 2:33pm UTC](https://discuss.elastic.co/t/es-7-join-datatype-aggregations/107965 "2017-12-05T14:33:19Z")

</div>

Hi, I've seen (in this blog post for example : https://www.elastic.co/blog/index-type-parent-child-join-now-future-in-elasticsearch) that has\_parent/has\_child relationships (and types) will be deprecated in favour of th…

---

## [\_csvparsefailure](https://discuss.elastic.co/t/-csvparsefailure/62471)

<div class="topic-metadata">

**Author:** [@setlem](https://discuss.elastic.co/u/setlem)\
**Replies:** 3\
**Last updated:** [October 7, 2016, 11:17am UTC](https://discuss.elastic.co/t/-csvparsefailure/62471 "2016-10-07T11:17:34Z")

</div>

Hi all, \_csvparsefailure error is showing for my config file.the config file is \[quote="setlem, post:1, topic:62471, full:true"\] filter { csv { columns =\> \["ORDER\_ID","SUBMITTED\_DATE","STATE","PROFILE\_ID",…

---

## [Parser for LDAP logs - ECS format](https://discuss.elastic.co/t/parser-for-ldap-logs-ecs-format/262115)

<div class="topic-metadata">

**Author:** [@Logsman](https://discuss.elastic.co/u/Logsman)\
**Replies:** 1\
**Last updated:** [February 2, 2021, 9:22am UTC](https://discuss.elastic.co/t/parser-for-ldap-logs-ecs-format/262115 "2021-02-02T09:22:43Z")

</div>

Hi there ! I'm currently collecting LDAP logs (RHDS) with filebeat. As you know, there isn't any module for these type of logs. However, I would like to be able to create alert on Elastic security based on these logs. …

---

## [Netflow: Unsupported field in template](https://discuss.elastic.co/t/netflow-unsupported-field-in-template/119772)

<div class="topic-metadata">

**Author:** [@sarlacpit](https://discuss.elastic.co/u/sarlacpit)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 11:50am UTC](https://discuss.elastic.co/t/netflow-unsupported-field-in-template/119772 "2018-02-14T11:50:12Z")

</div>

I am using Elastiflow to template my Netflow data... Well trying! I keep getting the following in my Logstash logs: \[2018-02-14T11:23:26,907\]\[WARN \]\[logstash.codecs.netflow \] Unsupported field in template 261 {:type=\>1…

---

## [Ingest-attachment using CBOR examples](https://discuss.elastic.co/t/ingest-attachment-using-cbor-examples/93832)

<div class="topic-metadata">

**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\
**Replies:** 1\
**Last updated:** [July 20, 2017, 3:44am UTC](https://discuss.elastic.co/t/ingest-attachment-using-cbor-examples/93832 "2017-07-20T03:44:55Z")

</div>

Need some clarification regarding the following thread: Alex says: The trick is to just use the cbor builder to create your content, and add a bytearray to the field, you want to process instead of a base64 encoded st…

---

## [Install old beats version from repository](https://discuss.elastic.co/t/install-old-beats-version-from-repository/69073)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 1\
**Last updated:** [December 14, 2016, 9:50pm UTC](https://discuss.elastic.co/t/install-old-beats-version-from-repository/69073 "2016-12-14T21:50:02Z")

</div>

Hi, I wonder if it is possible to install the beats of a specific version from the repository? I have tried: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - echo "deb https://artifact…

---

## [Sincedb file in windows](https://discuss.elastic.co/t/sincedb-file-in-windows/62280)

<div class="topic-metadata">

**Author:** [@Mayank\_Agrawal](https://discuss.elastic.co/u/Mayank_Agrawal)\
**Replies:** 1\
**Last updated:** [October 5, 2016, 10:09pm UTC](https://discuss.elastic.co/t/sincedb-file-in-windows/62280 "2016-10-05T22:09:57Z")

</div>

I am tracking logstash progress by reading since db file. In linux, it is easy to find inode number of a file and then track the corresponding changes in a particular file, but in windows, I am unable to do so. What is…

---

## [Elasticsearch cluster spreading the bulk tasks](https://discuss.elastic.co/t/elasticsearch-cluster-spreading-the-bulk-tasks/19119)

<div class="topic-metadata">

**Author:** [@Pavel\_P](https://discuss.elastic.co/u/Pavel_P)\
**Replies:** 6\
**Last updated:** [August 8, 2014, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-spreading-the-bulk-tasks/19119 "2014-08-08T07:36:37Z")

</div>

Hi, Could someone clarify me the next: When I have the ES cluster, consisting from 2 machines, how should I send the bulk index requests to them. 1. Do I understand right that I can send everything to any node…

---

## [Link Between indices (Geojson + data)](https://discuss.elastic.co/t/link-between-indices-geojson-data/317959)

<div class="topic-metadata">

**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 8:54am UTC](https://discuss.elastic.co/t/link-between-indices-geojson-data/317959 "2022-11-04T08:54:31Z")

</div>

Hello all, I am using ELK in version 7.17.2 and I need some help. I have 1 Geojson document with the location of my switches (around 80 switches). And I have some indices (logstash-DD-MM-YYYY) about these switches. I…

---

## ["bad\_certificate" error on elasticsearch input plugin](https://discuss.elastic.co/t/bad-certificate-error-on-elasticsearch-input-plugin/288812)

<div class="topic-metadata">

**Author:** [@plubbs](https://discuss.elastic.co/u/plubbs)\
**Replies:** 5\
**Last updated:** [November 10, 2021, 2:40pm UTC](https://discuss.elastic.co/t/bad-certificate-error-on-elasticsearch-input-plugin/288812 "2021-11-10T14:40:22Z")

</div>

Hello, TLDR - Our certificate we use with the output-Elasticsearch plugin does not work on the input-Elasticsearch plugin despite being a valid certificate We are currently attempting to connect to an existing index in…

---

## [Initial data load / full reindexing from MySQL to Elasticsearch](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942)

<div class="topic-metadata">

**Author:** [@Priya\_Gupta](https://discuss.elastic.co/u/Priya_Gupta)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 12:20pm UTC](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942 "2019-10-07T12:20:48Z")

</div>

Hello, I am trying to design an initial data load and full reindexing (in the event of document schema change) solution for my Elasticsearch service. Source of truth for all data is MySQL, search related data will be st…

---

## [Kibana not aggregating on large values of a field](https://discuss.elastic.co/t/kibana-not-aggregating-on-large-values-of-a-field/130172)

<div class="topic-metadata">

**Author:** [@Harsh\_Verma](https://discuss.elastic.co/u/Harsh_Verma)\
**Replies:** 5\
**Last updated:** [May 2, 2018, 8:43pm UTC](https://discuss.elastic.co/t/kibana-not-aggregating-on-large-values-of-a-field/130172 "2018-05-02T20:43:54Z")

</div>

I am using Kibana 5.5.2 and Elasticsearch version 5.5 (on AWS) I am trying to generate pie chart and trying to add a sub bucket based on Terms aggregation of a field. I find that if the value of the field is bigger th…

---

## [How to apply filter in kibana dashboard for linux servers?](https://discuss.elastic.co/t/how-to-apply-filter-in-kibana-dashboard-for-linux-servers/113235)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 5\
**Last updated:** [December 28, 2017, 3:01pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-in-kibana-dashboard-for-linux-servers/113235 "2017-12-28T15:01:18Z")

</div>

Hi All, I was working with ELK stack for windows version all this while for developing system monitoring graphs based on different host by applying filter in dashboards. The necessary prototype is working fine with 6.0 …

[Previous page](https://discuss.elastic.co/top.md?page=1149&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1151&per_page=50&period=all)
