# Top

**URL:** https://discuss.elastic.co/top.md?page=1152&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1153

---

## [Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/153746)

<div class="topic-metadata">

**Author:** [@blxsud](https://discuss.elastic.co/u/blxsud)\
**Replies:** 0\
**Last updated:** [October 24, 2018, 8:00am UTC](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/153746 "2018-10-24T08:00:06Z")

</div>

Continuing the discussion from \[v6.2.2\]ES often happen Frequently error of timeout question now and then: i am also getting same error. Let me know if any solution for this? java.lang.IllegalStateException: Request can…

---

## [How to setup a logstash cluster of 3 nodes?](https://discuss.elastic.co/t/how-to-setup-a-logstash-cluster-of-3-nodes/67108)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 0\
**Last updated:** [November 24, 2016, 12:42pm UTC](https://discuss.elastic.co/t/how-to-setup-a-logstash-cluster-of-3-nodes/67108 "2016-11-24T12:42:30Z")

</div>

Hi, I have a Logstash configuration like below; input { kafka{ group\_id =\> "mygroup" topics =\> \["mytopic"\] bootstrap\_servers =\> "192.168.0.1:9092,192.168.0.2:9092,192.168.0.3:9092" codec =\> json add\_field …

---

## [Filebeat haproxy module](https://discuss.elastic.co/t/filebeat-haproxy-module/159629)

<div class="topic-metadata">

**Author:** [@Mark\_Bassett](https://discuss.elastic.co/u/Mark_Bassett)\
**Replies:** 5\
**Last updated:** [December 6, 2018, 8:22pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-module/159629 "2018-12-06T20:22:55Z")

</div>

What is the correct method to get logs to the filebeat haproxy module? I see it is running udp syslog on port 9001 so I just added log 127.0.0.1:9001 local0 notice under the global section, but it looks like it is not…

---

## [Data transformation for date field](https://discuss.elastic.co/t/data-transformation-for-date-field/146713)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [September 20, 2018, 9:06am UTC](https://discuss.elastic.co/t/data-transformation-for-date-field/146713 "2018-09-20T09:06:03Z")

</div>

Hi All, We are trying to upload a csv file where it has a date field, so using date filter we are converting the field from string to date, the problme we are facing here is, few fields has "proper date" few fields are…

---

## [Can I use x-pack ldap authentication without SSL?](https://discuss.elastic.co/t/can-i-use-x-pack-ldap-authentication-without-ssl/91364)

<div class="topic-metadata">

**Author:** [@lks21c](https://discuss.elastic.co/u/lks21c)\
**Replies:** 5\
**Last updated:** [June 30, 2017, 8:30am UTC](https://discuss.elastic.co/t/can-i-use-x-pack-ldap-authentication-without-ssl/91364 "2017-06-30T08:30:32Z")

</div>

Hi. I'm curious that I can use x-pack ldap authentication without SSL or not. Thank you in advance for reply.

---

## [Wrong xaxis for horizontal barchart](https://discuss.elastic.co/t/wrong-xaxis-for-horizontal-barchart/206136)

<div class="topic-metadata">

**Author:** [@Olivier\_Bilger](https://discuss.elastic.co/u/Olivier_Bilger)\
**Replies:** 3\
**Last updated:** [November 15, 2019, 5:54pm UTC](https://discuss.elastic.co/t/wrong-xaxis-for-horizontal-barchart/206136 "2019-11-15T17:54:41Z")

</div>

Hi, When converting numeric values to percentage (mapColumn name= "percent" fn={getCell "cpu" | formatnumber "0.0%"}), the horizontal barchart goes wrong and the xaxis is not anymore correctly centered The expression…

---

## [Elasticsearch APM Tab empty after Kibana upgrade to 7.2.1](https://discuss.elastic.co/t/elasticsearch-apm-tab-empty-after-kibana-upgrade-to-7-2-1/194063)

<div class="topic-metadata">

**Author:** [@chakragod](https://discuss.elastic.co/u/chakragod)\
**Replies:** 3\
**Last updated:** [August 12, 2019, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-apm-tab-empty-after-kibana-upgrade-to-7-2-1/194063 "2019-08-12T20:23:35Z")

</div>

I upgraded my ELK stack to 7.2.1 from 7.1.1. The APM tab stopped working after the upgrade. My browser's console throws this error: TypeError: Cannot read property 'is\_available' of undefined On looking at the source …

---

## [Cloudwatch input plugin- No Metrics to Query Error in 6.3.0](https://discuss.elastic.co/t/cloudwatch-input-plugin-no-metrics-to-query-error-in-6-3-0/137032)

<div class="topic-metadata">

**Author:** [@rahulsaini](https://discuss.elastic.co/u/rahulsaini)\
**Replies:** 3\
**Last updated:** [July 25, 2018, 1:25pm UTC](https://discuss.elastic.co/t/cloudwatch-input-plugin-no-metrics-to-query-error-in-6-3-0/137032 "2018-07-25T13:25:34Z")

</div>

I'm new to ELK working on new version 6.3.0 I get this error but everything work fine on 6.2.1 Stack: C:/Elastic/logstash-6.3.0/vendor/bundle/jruby/2.3.0/gems/logstash-input-cloudwatch-2.1.1/lib/logstash/inputs/cloudwat…

---

## [Error Generating Encryption Key - Error: ENOENT: no such file or directory](https://discuss.elastic.co/t/error-generating-encryption-key-error-enoent-no-such-file-or-directory/310814)

<div class="topic-metadata">

**Author:** [@aniketdatir](https://discuss.elastic.co/u/aniketdatir)\
**Replies:** 3\
**Last updated:** [August 2, 2022, 8:05am UTC](https://discuss.elastic.co/t/error-generating-encryption-key-error-enoent-no-such-file-or-directory/310814 "2022-08-02T08:05:15Z")

</div>

Hi Kibana team, I m trying to generate encryption keyusing below command but getting error ubuntu@host:/usr/share/kibana$ bin/kibana-encryption-keys generate Error: ENOENT: no such file or directory, open '/usr/shar…

---

## [No Traces or Transactions showing up in Kibana](https://discuss.elastic.co/t/no-traces-or-transactions-showing-up-in-kibana/203324)

<div class="topic-metadata">

**Author:** [@ntavendale](https://discuss.elastic.co/u/ntavendale)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 9:18am UTC](https://discuss.elastic.co/t/no-traces-or-transactions-showing-up-in-kibana/203324 "2019-10-21T09:18:22Z")

</div>

Posting raw JSON into the APM. Not using an agent as I am trying to work with API. Using latest 7.4 version of ES, Kiban and APM. Browser version: Chrome v77 Original install method: yum, fresh install Posted the fol…

---

## [Kibana Shorten URL](https://discuss.elastic.co/t/kibana-shorten-url/166718)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 3\
**Last updated:** [February 21, 2019, 7:56am UTC](https://discuss.elastic.co/t/kibana-shorten-url/166718 "2019-02-21T07:56:23Z")

</div>

Hi Team , I am trying to generate the shorten url for dashboard , i have used the following curl -vvv -u kibana:kibana -XPOST "http://192.168.50.90:5601/shorten" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' …

---

## [Unique count on a term more than documents? Is that possible?](https://discuss.elastic.co/t/unique-count-on-a-term-more-than-documents-is-that-possible/132497)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 3\
**Last updated:** [May 21, 2018, 8:12am UTC](https://discuss.elastic.co/t/unique-count-on-a-term-more-than-documents-is-that-possible/132497 "2018-05-21T08:12:48Z")

</div>

How is the following possible when searching in an index pattern? How can the unique appearances of a keyword term be more than the documents themselves? \[image\]

---

## [Can Logstash enrich data before send to elasticsearch?](https://discuss.elastic.co/t/can-logstash-enrich-data-before-send-to-elasticsearch/76437)

<div class="topic-metadata">

**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\
**Replies:** 3\
**Last updated:** [February 27, 2017, 3:52am UTC](https://discuss.elastic.co/t/can-logstash-enrich-data-before-send-to-elasticsearch/76437 "2017-02-27T03:52:03Z")

</div>

Hello, I'm completely new and I'm evaluating some tool to implement my solution. I'll use Beats as agent and when a new event come I'll send it to Logstash. Can Logstash, based in the information receveid by Beats,…

---

## [How to do multiple filter query in Elasticsearch using Java?](https://discuss.elastic.co/t/how-to-do-multiple-filter-query-in-elasticsearch-using-java/54075)

<div class="topic-metadata">

**Author:** [@njais2](https://discuss.elastic.co/u/njais2)\
**Replies:** 0\
**Last updated:** [June 27, 2016, 8:37pm UTC](https://discuss.elastic.co/t/how-to-do-multiple-filter-query-in-elasticsearch-using-java/54075 "2016-06-27T20:37:28Z")

</div>

I have build a web app on top of elasticsearch. I would like to do a multiple filter using Java. Elasticsearch Query: { "query": { "bool": { "must": \[ {"match": { "T": "TEXT"}, …

---

## [ELK Architecture Questions](https://discuss.elastic.co/t/elk-architecture-questions/46831)

<div class="topic-metadata">

**Author:** [@fsa317](https://discuss.elastic.co/u/fsa317)\
**Replies:** 3\
**Last updated:** [April 11, 2016, 9:04pm UTC](https://discuss.elastic.co/t/elk-architecture-questions/46831 "2016-04-11T21:04:15Z")

</div>

Hi, I'm relatively new to ELK and have some specific questions about the overall architecture. In a typical ELK stack by the time log data is in ES does it need to be in a specific schema so that it can be read by Kiba…

---

## [How to disable caching in ES?](https://discuss.elastic.co/t/how-to-disable-caching-in-es/344889)

<div class="topic-metadata">

**Author:** [@leslience](https://discuss.elastic.co/u/leslience)\
**Replies:** 1\
**Last updated:** [October 12, 2023, 10:33am UTC](https://discuss.elastic.co/t/how-to-disable-caching-in-es/344889 "2023-10-12T10:33:27Z")

</div>

I am currently facing a challenge where I want to disable the query cache in ES, so that every query request reads data from disk instead of directly accessing ES's JVM memory cache. Query requests include but are not li…

---

## [TLS handhake timeout in Elastic cloud](https://discuss.elastic.co/t/tls-handhake-timeout-in-elastic-cloud/242029)

<div class="topic-metadata">

**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\
**Replies:** 1\
**Last updated:** [July 21, 2020, 2:46pm UTC](https://discuss.elastic.co/t/tls-handhake-timeout-in-elastic-cloud/242029 "2020-07-21T14:46:11Z")

</div>

I am using Elastic cloud with a platinum license, set to be expiring in 2021. I am getting the following error from today, when trying to take the dashboards. It also occurs when I am trying to edit/save watcher …

---

## [Does Elasticsearch have capability to form ES cluster with only one ES docker service running multiple replicas of it in Docker-Swarm](https://discuss.elastic.co/t/does-elasticsearch-have-capability-to-form-es-cluster-with-only-one-es-docker-service-running-multiple-replicas-of-it-in-docker-swarm/224943)

<div class="topic-metadata">

**Author:** [@admin\_labs](https://discuss.elastic.co/u/admin_labs)\
**Replies:** 1\
**Last updated:** [April 11, 2020, 6:29am UTC](https://discuss.elastic.co/t/does-elasticsearch-have-capability-to-form-es-cluster-with-only-one-es-docker-service-running-multiple-replicas-of-it-in-docker-swarm/224943 "2020-04-11T06:29:05Z")

</div>

I wanna run only one elasticsearch service in docker-swarm cluster having multiple replicas or at least one replica of this service in each node of docker-swarm cluster. Does Elasticsearch have capability to form ES cl…

---

## [How to increase elastic pod volume](https://discuss.elastic.co/t/how-to-increase-elastic-pod-volume/222217)

<div class="topic-metadata">

**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 9:29am UTC](https://discuss.elastic.co/t/how-to-increase-elastic-pod-volume/222217 "2020-03-05T09:29:09Z")

</div>

My cluster is in yellow state as it does not have enough space to allow shard. I initially tried to increase EBS volume size, but elastic node does not seem to recognize the added storage by querying /\_cat/allocation?…

---

## [How to add truststore to classpath in Hive](https://discuss.elastic.co/t/how-to-add-truststore-to-classpath-in-hive/212959)

<div class="topic-metadata">

**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:57pm UTC](https://discuss.elastic.co/t/how-to-add-truststore-to-classpath-in-hive/212959 "2020-01-06T17:57:12Z")

</div>

Hi, According to documentation, es.net.ssl.truststore.location is trust store location (typically a URL, without a prefix it is interpreted as a classpath entry) My question is how to add a truststore in a hive cli …

---

## [How to add a character to a particular field value?](https://discuss.elastic.co/t/how-to-add-a-character-to-a-particular-field-value/135173)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 3:03pm UTC](https://discuss.elastic.co/t/how-to-add-a-character-to-a-particular-field-value/135173 "2018-06-08T15:03:36Z")

</div>

Hi, I am using grok to extract fields. Once the field is extracted, I want to add } at the end. Please let me know how it can be done? Thanks

---

## [Type Ahead Suggestions using Elastic Search](https://discuss.elastic.co/t/type-ahead-suggestions-using-elastic-search/84279)

<div class="topic-metadata">

**Author:** [@Madhup\_Narain](https://discuss.elastic.co/u/Madhup_Narain)\
**Replies:** 1\
**Last updated:** [May 4, 2017, 10:57am UTC](https://discuss.elastic.co/t/type-ahead-suggestions-using-elastic-search/84279 "2017-05-04T10:57:20Z")

</div>

Firstly would like to post my requirement 1. I should be able to provide type ahead suggestions to users. 2. The type ahead should be based on a field contains an Array of suggestions 3. The suggestions being returned to…

---

## [The circuit breaker has detected a slowdown or stall in the pipeline](https://discuss.elastic.co/t/the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/41988)

<div class="topic-metadata">

**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Replies:** 1\
**Last updated:** [April 30, 2016, 11:27pm UTC](https://discuss.elastic.co/t/the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/41988 "2016-04-30T23:27:21Z")

</div>

We migrate to filebeat: 1.1.1 + logstash: 2.1.1 + elasticsearch: 2.1.0, I keep seeing the following errors in the logstash logs. {:timestamp=\>"2016-02-17T03:49:58.845000-0500", :message=\>"CircuitBreaker::Close", :name=\>…

---

## [Refresh time/latency](https://discuss.elastic.co/t/refresh-time-latency/37828)

<div class="topic-metadata">

**Author:** [@hof](https://discuss.elastic.co/u/hof)\
**Replies:** 1\
**Last updated:** [December 23, 2015, 2:45pm UTC](https://discuss.elastic.co/t/refresh-time-latency/37828 "2015-12-23T14:45:49Z")

</div>

Hi, I've been reading https://www.elastic.co/guide/en/elasticsearch/guide/current/near-real-time.html and it seems to imply that an index refresh is guaranteed to occur within 1 second. Is this true regardless of the s…

---

## [Help Mapping an Array of ints to Array of Strings to Index on](https://discuss.elastic.co/t/help-mapping-an-array-of-ints-to-array-of-strings-to-index-on/27414)

<div class="topic-metadata">

**Author:** [@sklonaris](https://discuss.elastic.co/u/sklonaris)\
**Replies:** 1\
**Last updated:** [October 10, 2015, 11:22am UTC](https://discuss.elastic.co/t/help-mapping-an-array-of-ints-to-array-of-strings-to-index-on/27414 "2015-10-10T11:22:47Z")

</div>

I am using elastic search in a rails app. I have a model - Posts which and I want to add the tags attribute to my index. The problem is tags are a list of mongoid object id's. So I want to convert them to their string va…

---

## [Filebeat.yml config file permissions owner](https://discuss.elastic.co/t/filebeat-yml-config-file-permissions-owner/333190)

<div class="topic-metadata">

**Author:** [@lmrc](https://discuss.elastic.co/u/lmrc)\
**Replies:** 2\
**Last updated:** [May 11, 2023, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-yml-config-file-permissions-owner/333190 "2023-05-11T13:17:23Z")

</div>

Hello, I get an error when I start Filebeat about the permissions of the filebeat.yml file error loading config file: config file ("/etc/filebeat/filebeat.yml") can only be writable by the owner but the permissions are…

---

## [Problems to start Logstash conf pipelines with SystemCTL](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811)

<div class="topic-metadata">

**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 1:19pm UTC](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811 "2021-08-30T13:19:03Z")

</div>

I have a problem with logstash, when I running like this:/usr/share/logstash/bin/logstash --debug -f /etc/logstash/conf.d/switch.conf Works fine and start this specific configuration file. But I put this conf file in p…

---

## [In how many environments/clusters can I use the non-production license?](https://discuss.elastic.co/t/in-how-many-environments-clusters-can-i-use-the-non-production-license/226593)

<div class="topic-metadata">

**Author:** [@alexmm](https://discuss.elastic.co/u/alexmm)\
**Replies:** 2\
**Last updated:** [April 6, 2020, 6:58pm UTC](https://discuss.elastic.co/t/in-how-many-environments-clusters-can-i-use-the-non-production-license/226593 "2020-04-06T18:58:32Z")

</div>

When I got my Platinum license I got 2 JSON files (a production one and a non-production one). I understand I can only set the production license in 1 cluster. But what about the non-production license? I have 3 non pr…

---

## [Logstash Aggregate Plugin: Unify two different task\_id](https://discuss.elastic.co/t/logstash-aggregate-plugin-unify-two-different-task-id/185712)

<div class="topic-metadata">

**Author:** [@mpappatella](https://discuss.elastic.co/u/mpappatella)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 6:14pm UTC](https://discuss.elastic.co/t/logstash-aggregate-plugin-unify-two-different-task-id/185712 "2019-06-18T18:14:43Z")

</div>

Hello i'm new here, I am looking to unify in a same line, 4 different windows events received by beats. Specifically 4 events that ADFS generates when someone authenticates. I need to unify the Activity ID and the Inst…

---

## [Filebeat service not starting](https://discuss.elastic.co/t/filebeat-service-not-starting/119892)

<div class="topic-metadata">

**Author:** [@jiten](https://discuss.elastic.co/u/jiten)\
**Replies:** 2\
**Last updated:** [February 15, 2018, 4:40pm UTC](https://discuss.elastic.co/t/filebeat-service-not-starting/119892 "2018-02-15T16:40:04Z")

</div>

i am trying to configure and install filebeat using salt on centos7 machine, code is running fine but when i am checking systemctl status filebeat it is showing below error. \[jbansal@stage1-servicenode1 files\]$ sudo sys…

---

## [How to remove empty buckets aggregation multi field](https://discuss.elastic.co/t/how-to-remove-empty-buckets-aggregation-multi-field/59755)

<div class="topic-metadata">

**Author:** [@dannyxu](https://discuss.elastic.co/u/dannyxu)\
**Replies:** 2\
**Last updated:** [September 4, 2016, 1:49pm UTC](https://discuss.elastic.co/t/how-to-remove-empty-buckets-aggregation-multi-field/59755 "2016-09-04T13:49:51Z")

</div>

in es 2.3.3, aggregation multi field using following query string , GET /myindex/mysubtype/\_search { "size": 0, "query": { "range": { "longdate.dateval": { "gte": "20160101000000", "lte": …

---

## [Column alias under Kibana](https://discuss.elastic.co/t/column-alias-under-kibana/45433)

<div class="topic-metadata">

**Author:** [@alainc](https://discuss.elastic.co/u/alainc)\
**Replies:** 2\
**Last updated:** [March 29, 2016, 7:29am UTC](https://discuss.elastic.co/t/column-alias-under-kibana/45433 "2016-03-29T07:29:48Z")

</div>

Hi i tried to get some elasticsearch stats inside kibana extracted by a logstah http\_poller. the name are so huge it's hard to select in drop down list (visualise menu). is there a way to create alias to have shorter n…

---

## [Initializing\_shards - second db start up takes long time](https://discuss.elastic.co/t/initializing-shards-second-db-start-up-takes-long-time/28357)

<div class="topic-metadata">

**Author:** [@marcin\_es](https://discuss.elastic.co/u/marcin_es)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 7:58am UTC](https://discuss.elastic.co/t/initializing-shards-second-db-start-up-takes-long-time/28357 "2015-09-01T07:58:10Z")

</div>

Hello all, I am working on a solution that uses embedded elasticsearch server - on one local machine. The scenario is: 1)create cluster with one node. Import data - 3 million records in ~180 indexes and 911 shards. Data …

---

## [Python bulk insert customize date parser](https://discuss.elastic.co/t/python-bulk-insert-customize-date-parser/294113)

<div class="topic-metadata">

**Author:** [@StevenZL](https://discuss.elastic.co/u/StevenZL)\
**Replies:** 4\
**Last updated:** [January 14, 2022, 12:56pm UTC](https://discuss.elastic.co/t/python-bulk-insert-customize-date-parser/294113 "2022-01-14T12:56:02Z")

</div>

Hi all, I'm new to Elasticsearch and I'm trying to bulk-insert into Elasticsearch using python After I read in the data using pandas, I created an index: es = Elasticsearch() es.indices.create( index="cars", …

---

## [Simple ansible playbook failing](https://discuss.elastic.co/t/simple-ansible-playbook-failing/237938)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 4\
**Last updated:** [June 25, 2020, 8:03pm UTC](https://discuss.elastic.co/t/simple-ansible-playbook-failing/237938 "2020-06-25T20:03:53Z")

</div>

Hi I am trying out the Ansible role simple example to run a 1 node ES cluster on my local machine (Ubuntu 18.04). I read the instructions here: https://github.com/elastic/ansible-elasticsearch I ran: ansible-galaxy i…

---

## [Monitor Mbp/s and MBp/s](https://discuss.elastic.co/t/monitor-mbp-s-and-mbp-s/56288)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 4\
**Last updated:** [July 25, 2016, 1:09pm UTC](https://discuss.elastic.co/t/monitor-mbp-s-and-mbp-s/56288 "2016-07-25T13:09:01Z")

</div>

Hi, I tried the search function but couldn't find anything. Perhaps I overlooked some configuration, but is it possible with Packetbeat to monitor the MegaByte per second and Mbit per second of a network interface? …

---

## [Elastic Search using Message Content Parse with Logstash](https://discuss.elastic.co/t/elastic-search-using-message-content-parse-with-logstash/293111)

<div class="topic-metadata">

**Author:** [@kiran\_tirumalasetti](https://discuss.elastic.co/u/kiran_tirumalasetti)\
**Replies:** 5\
**Last updated:** [December 29, 2021, 4:07pm UTC](https://discuss.elastic.co/t/elastic-search-using-message-content-parse-with-logstash/293111 "2021-12-29T16:07:25Z")

</div>

Hello, I am trying to push some data into Elasticsearch from an application via logstash and is there anyway to search/filter the json message in Elasticsearch for a particular field in the json message. I am using bel…

---

## [Metric beat does not install any module (error: line 101)](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951)

<div class="topic-metadata">

**Author:** [@potap75](https://discuss.elastic.co/u/potap75)\
**Replies:** 5\
**Last updated:** [August 31, 2021, 10:27pm UTC](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951 "2021-08-31T22:27:26Z")

</div>

Prod ELK v 7.11. monitoring cluster 7.11 Installed Metricbeat 7.13 on Logstash node to collect metrics. Have been following the steps in this guide: https://www.elastic.co/guide/en/logstash/7.11/monitoring-with-metricbe…

---

## [String Scripted field conversion to keyword](https://discuss.elastic.co/t/string-scripted-field-conversion-to-keyword/272531)

<div class="topic-metadata">

**Author:** [@SHUBHAM\_SALUNKHE](https://discuss.elastic.co/u/SHUBHAM_SALUNKHE)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 5:35am UTC](https://discuss.elastic.co/t/string-scripted-field-conversion-to-keyword/272531 "2021-05-11T05:35:40Z")

</div>

Hi, I have created one scripted field of string format. Need to convert that in keyword format to perform aggregation operation on that scripted field. How can I convert that string? Thanks in advance.

---

## [Kv filter values is always returned as string](https://discuss.elastic.co/t/kv-filter-values-is-always-returned-as-string/147073)

<div class="topic-metadata">

**Author:** [@kgdi](https://discuss.elastic.co/u/kgdi)\
**Replies:** 5\
**Last updated:** [September 3, 2018, 1:39pm UTC](https://discuss.elastic.co/t/kv-filter-values-is-always-returned-as-string/147073 "2018-09-03T13:39:59Z")

</div>

Hi, I am using the kv filter to get values from extra\_fields and it works fine, except it shows up as string in the index and not number. Is there any limitations in using mutate on kv generated values? One entry of t…

---

## [Installation steps for elastic search 5.6.2 in windows and how to connect that in my .net application?](https://discuss.elastic.co/t/installation-steps-for-elastic-search-5-6-2-in-windows-and-how-to-connect-that-in-my-net-application/103474)

<div class="topic-metadata">

**Author:** [@Ashish\_Christian](https://discuss.elastic.co/u/Ashish_Christian)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 5:50am UTC](https://discuss.elastic.co/t/installation-steps-for-elastic-search-5-6-2-in-windows-and-how-to-connect-that-in-my-net-application/103474 "2017-10-12T05:50:11Z")

</div>

Hello There, Can you please guide me, how to install elastic search 5.6.2 in windows? And also please guide me how can i use that in my .net application. Thanks

---

## [Disable norms for AttachmentPlugin](https://discuss.elastic.co/t/disable-norms-for-attachmentplugin/37021)

<div class="topic-metadata">

**Author:** [@mrnodejs](https://discuss.elastic.co/u/mrnodejs)\
**Replies:** 5\
**Last updated:** [December 12, 2015, 12:18pm UTC](https://discuss.elastic.co/t/disable-norms-for-attachmentplugin/37021 "2015-12-12T12:18:58Z")

</div>

Hi guys, iam using the elasticsearch-mapper-attachments plugin with version 3.1. I just want to know if it is possible to use the norm property with the attachment plugin. i tried this: { "test":{ "…

---

## [How to add a map using GeoServer and kibana 8.10](https://discuss.elastic.co/t/how-to-add-a-map-using-geoserver-and-kibana-8-10/345130)

<div class="topic-metadata">

**Author:** [@Erez\_Danieli](https://discuss.elastic.co/u/Erez_Danieli)\
**Replies:** 6\
**Last updated:** [October 17, 2023, 9:21am UTC](https://discuss.elastic.co/t/how-to-add-a-map-using-geoserver-and-kibana-8-10/345130 "2023-10-17T09:21:19Z")

</div>

Hi there Elastic team, I'm looking for some guidance on how to add a custom map using a geoserver. I have went over the instructions on this blog Kibana and a Custom Tile Server for NHL Data | Elastic Blog and and I ca…

---

## [Nothing showing on Kibana after enabling security features](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234)

<div class="topic-metadata">

**Author:** [@Booooooo](https://discuss.elastic.co/u/Booooooo)\
**Replies:** 6\
**Last updated:** [January 10, 2020, 2:05pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234 "2020-01-10T14:05:12Z")

</div>

Hi, I just followed this tutorial on how to enable security features on the Elastic Stack. After restarting Elasticsearch and Kibana, add the password configured, I am logged in but there is nothing showing appart from …

---

## [Use of grok and regular expressions](https://discuss.elastic.co/t/use-of-grok-and-regular-expressions/184255)

<div class="topic-metadata">

**Author:** [@Camilo\_Franco](https://discuss.elastic.co/u/Camilo_Franco)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 9:55pm UTC](https://discuss.elastic.co/t/use-of-grok-and-regular-expressions/184255 "2019-06-05T21:55:54Z")

</div>

Hello I'm sending an asterisk log from filebeat to logstash, The format of the logs is as follows. \[May 19 14:57:19\] NOTICE \[8583\] chan\_sip.c: Registration from '\<sip: 34541@xx.xx.xx.xx\>' failed for '91.214.44.144: 27…

---

## [Search + Scroll to be saved for later process](https://discuss.elastic.co/t/search-scroll-to-be-saved-for-later-process/179469)

<div class="topic-metadata">

**Author:** [@rikemSen](https://discuss.elastic.co/u/rikemSen)\
**Replies:** 6\
**Last updated:** [May 3, 2019, 12:14pm UTC](https://discuss.elastic.co/t/search-scroll-to-be-saved-for-later-process/179469 "2019-05-03T12:14:25Z")

</div>

Hi there :slight\_smile: , I am creating a system where the user can search for documents to be processed. This won't show to the user the documents, but only the amount of them. As the task on these documents will take …

---

## [Can't do division between two floats](https://discuss.elastic.co/t/cant-do-division-between-two-floats/58224)

<div class="topic-metadata">

**Author:** [@Fred\_Dionisio](https://discuss.elastic.co/u/Fred_Dionisio)\
**Replies:** 6\
**Last updated:** [August 17, 2016, 8:59am UTC](https://discuss.elastic.co/t/cant-do-division-between-two-floats/58224 "2016-08-17T08:59:37Z")

</div>

Hello. This is the code I have. mutate {convert =\> \["Average Time of Execution", "float"\]} mutate {convert =\> \["Average Time of Execution - Last Hour", "float"\]} ruby { code =\> "event\['last Hour Perc'\] = event\['A…

---

## [Sorting by the opposite direction is very slow](https://discuss.elastic.co/t/sorting-by-the-opposite-direction-is-very-slow/152132)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 1\
**Last updated:** [October 15, 2018, 11:41am UTC](https://discuss.elastic.co/t/sorting-by-the-opposite-direction-is-very-slow/152132 "2018-10-15T11:41:50Z")

</div>

I have an index where I used the new Lucene feature of indexing on a specific field. In my mapping, I have the following: "sort.field": "created\_utc", "sort.order": "desc", When I request documents using the same sort…

---

## [Deprecation message: getDate is no longer necessary on date fields](https://discuss.elastic.co/t/deprecation-message-getdate-is-no-longer-necessary-on-date-fields/113611)

<div class="topic-metadata">

**Author:** [@VickyHarp](https://discuss.elastic.co/u/VickyHarp)\
**Replies:** 1\
**Last updated:** [December 29, 2017, 8:24pm UTC](https://discuss.elastic.co/t/deprecation-message-getdate-is-no-longer-necessary-on-date-fields/113611 "2017-12-29T20:24:35Z")

</div>

I am receiving the deprecation message "getDate is no longer necessary on date fields" on the following: POST \_scripts/test-date { "script": { "lang": "painless", "source": "doc\['starttime'\].date.hourOfDay \< p…

---

## [How to index multiple database query data to a single index file in Elastic search](https://discuss.elastic.co/t/how-to-index-multiple-database-query-data-to-a-single-index-file-in-elastic-search/22266)

<div class="topic-metadata">

**Author:** [@Gurunath\_pai](https://discuss.elastic.co/u/Gurunath_pai)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 8:18pm UTC](https://discuss.elastic.co/t/how-to-index-multiple-database-query-data-to-a-single-index-file-in-elastic-search/22266 "2015-08-20T20:18:41Z")

</div>

Hi, Want to index multiple database data to Elastic search, I have done the same in Solr using DataImportHandler and DeltaImportHandler. Is there any way to achieve the same in Elastic Search, also want to index a…

[Previous page](https://discuss.elastic.co/top.md?page=1151&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1153&per_page=50&period=all)
