# Top

**URL:** https://discuss.elastic.co/top.md?page=1163&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1164

---

## [How can we use "filter" settings in logstash-input-journald plugin?](https://discuss.elastic.co/t/how-can-we-use-filter-settings-in-logstash-input-journald-plugin/217374)

<div class="topic-metadata">

**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\
**Replies:** 8\
**Last updated:** [February 12, 2020, 6:28am UTC](https://discuss.elastic.co/t/how-can-we-use-filter-settings-in-logstash-input-journald-plugin/217374 "2020-02-12T06:28:51Z")

</div>

Hi, Please let me know in detail how to use filter keyword in logstash input configuration of logstash input jouranld plugin? my aim to parse only some logs not all so how to do that. use of this ..... Filter on even…

---

## [Replica shard unassigned while performing shrink action through ILM policy](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 8\
**Last updated:** [October 14, 2019, 1:16pm UTC](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432 "2019-10-14T13:16:08Z")

</div>

Hi The Health of my Index has turned yellow, seemingly because a replica shard cannot be allocated. This index has been created as part of the "shrink" action as defined in my ILM policy. The desired result is that the …

---

## [Enabled JAVAAPM agent to my app in docker but i cant see it in kibana under apm services](https://discuss.elastic.co/t/enabled-javaapm-agent-to-my-app-in-docker-but-i-cant-see-it-in-kibana-under-apm-services/168560)

<div class="topic-metadata">

**Author:** [@shailesh\_thakur](https://discuss.elastic.co/u/shailesh_thakur)\
**Replies:** 8\
**Last updated:** [February 18, 2019, 1:47pm UTC](https://discuss.elastic.co/t/enabled-javaapm-agent-to-my-app-in-docker-but-i-cant-see-it-in-kibana-under-apm-services/168560 "2019-02-18T13:47:25Z")

</div>

Hi I enabled APM AGENT to my apps in docker on agent side Elastic APM server is available: {"ok":{"build\_date":"2019-01-24T10:23:10Z","build\_sha":"7357ed8334b76d54c5b9a75f1e7c4cb7b308880e","version":"6.6.0"}} but not …

---

## [One phenomenon I can't explain](https://discuss.elastic.co/t/one-phenomenon-i-cant-explain/35702)

<div class="topic-metadata">

**Author:** [@t7s](https://discuss.elastic.co/u/t7s)\
**Replies:** 8\
**Last updated:** [November 27, 2015, 5:42am UTC](https://discuss.elastic.co/t/one-phenomenon-i-cant-explain/35702 "2015-11-27T05:42:38Z")

</div>

After inserting data into es mmap index, I guess the first batch query without any warming query is completed on jvm memory cache? These query are very fast, and if you restart es cluster, jvm memory fall down and query …

---

## [Corrupted all indices after a failure](https://discuss.elastic.co/t/corrupted-all-indices-after-a-failure/3113)

<div class="topic-metadata">

**Author:** [@Franz\_Allan\_Valencia](https://discuss.elastic.co/u/Franz_Allan_Valencia)\
**Replies:** 8\
**Last updated:** [July 20, 2010, 9:51am UTC](https://discuss.elastic.co/t/corrupted-all-indices-after-a-failure/3113 "2010-07-20T09:51:50Z")

</div>

I've been playing with ElasticSearch for about 3 weeks now. So far, everything has been great. But lately, I started trying to index all the data in the tables in my targeting (instead of just partially as what I've b…

---

## [Circuit Breaker Exception, Data too large (12gb)](https://discuss.elastic.co/t/circuit-breaker-exception-data-too-large-12gb/116450)

<div class="topic-metadata">

**Author:** [@Abhilash\_Bolla](https://discuss.elastic.co/u/Abhilash_Bolla)\
**Replies:** 3\
**Last updated:** [January 22, 2018, 11:39am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-data-too-large-12gb/116450 "2018-01-22T11:39:01Z")

</div>

Hi, I find this exception in my logs. Please help in debugging the same. ES version: 2.4.1 Java version: 1.8 Heap allocated: 30gb \[2018-01-22 06:59:51,212\]\[DEBUG\]\[action.search \] \[cls-es-master\] \[publicat…

---

## [Logstash 5.1.1 plugin install not working](https://discuss.elastic.co/t/logstash-5-1-1-plugin-install-not-working/69200)

<div class="topic-metadata">

**Author:** [@B200](https://discuss.elastic.co/u/B200)\
**Replies:** 3\
**Last updated:** [January 7, 2017, 5:24am UTC](https://discuss.elastic.co/t/logstash-5-1-1-plugin-install-not-working/69200 "2017-01-07T05:24:20Z")

</div>

I am new to elastic and doing a PoC project for logstash , elastic search and kibana with JVM monitoring with JMX. I am trying to install logstash-input-jmx and getting the below error. I tried with another plugin logsta…

---

## [Missing field in querytring syntax](https://discuss.elastic.co/t/missing-field-in-querytring-syntax/68143)

<div class="topic-metadata">

**Author:** [@Trynar](https://discuss.elastic.co/u/Trynar)\
**Replies:** 3\
**Last updated:** [December 6, 2016, 12:03pm UTC](https://discuss.elastic.co/t/missing-field-in-querytring-syntax/68143 "2016-12-06T12:03:18Z")

</div>

Hi, First, sorry for my poor english, not my primary langage. Then, this is my problem. I used the missing syntx in 2.4.1 and it works well, but now i cant make it work for 5.0.1 For exemple, i have 100 document…

---

## [.NET NEST https error: The handshake failed due to an unexpected packet format](https://discuss.elastic.co/t/net-nest-https-error-the-handshake-failed-due-to-an-unexpected-packet-format/62982)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 0\
**Last updated:** [October 13, 2016, 6:38pm UTC](https://discuss.elastic.co/t/net-nest-https-error-the-handshake-failed-due-to-an-unexpected-packet-format/62982 "2016-10-13T18:38:05Z")

</div>

NEST 5.0-beta1 If I use https:// instead of http:// I get this error while indexing a doc. var uri = new Uri("https://192.168.11.223:9200"); var settings = new ConnectionSettings(uri); settings.BasicAuthentication("ela…

---

## [Différence entre les deux chemins d'injection des données dans ES](https://discuss.elastic.co/t/difference-entre-les-deux-chemins-dinjection-des-donnees-dans-es/57347)

<div class="topic-metadata">

**Author:** [@ghandrisaleh](https://discuss.elastic.co/u/ghandrisaleh)\
**Replies:** 3\
**Last updated:** [August 9, 2016, 7:27am UTC](https://discuss.elastic.co/t/difference-entre-les-deux-chemins-dinjection-des-donnees-dans-es/57347 "2016-08-09T07:27:29Z")

</div>

Bonjour, Dans la présentation pour "Filebeat Référence \[1.2\]" j'ai trouvé que Filebeat transmet les données soit à Logstash pour l' analyse ou directement à ElasticSearch pour l' indexation. Je veux savoir quand j'uti…

---

## [Is reindexing to a new index necessary after updating settings and mappings to support a multi-field in elasticsearch?](https://discuss.elastic.co/t/is-reindexing-to-a-new-index-necessary-after-updating-settings-and-mappings-to-support-a-multi-field-in-elasticsearch/319260)

<div class="topic-metadata">

**Author:** [@Karthik\_Amar](https://discuss.elastic.co/u/Karthik_Amar)\
**Replies:** 4\
**Last updated:** [November 20, 2022, 12:57am UTC](https://discuss.elastic.co/t/is-reindexing-to-a-new-index-necessary-after-updating-settings-and-mappings-to-support-a-multi-field-in-elasticsearch/319260 "2022-11-20T00:57:21Z")

</div>

Please consider the scenario. Existing System I have an index named contacts\_index with 100 documents. Each document has property named city with some text value in it. Index has settings as the following { …

---

## [Transform - List the unique values](https://discuss.elastic.co/t/transform-list-the-unique-values/311132)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 4\
**Last updated:** [August 2, 2022, 1:30pm UTC](https://discuss.elastic.co/t/transform-list-the-unique-values/311132 "2022-08-02T13:30:50Z")

</div>

Hi, I'm using a Transform to group logs related to the same event. An event can have multiple IP. A simple aggregation like this: "test\_agg": { "terms": { "field": "vm\_ip" } }, Will list all the possible IP …

---

## [Importing file to an existing index](https://discuss.elastic.co/t/importing-file-to-an-existing-index/293932)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 3:11pm UTC](https://discuss.elastic.co/t/importing-file-to-an-existing-index/293932 "2022-01-11T15:11:09Z")

</div>

I wanted to update my index by importing a file via Logstash. I used the same logstash file (the input file was updated with new records) cause I thought it's gonna overwrite the existing index. I tested this on a differ…

---

## [ES watcher Transform: formatting the script source](https://discuss.elastic.co/t/es-watcher-transform-formatting-the-script-source/219660)

<div class="topic-metadata">

**Author:** [@abdelhedi\_yassine](https://discuss.elastic.co/u/abdelhedi_yassine)\
**Replies:** 4\
**Last updated:** [February 18, 2020, 10:50am UTC](https://discuss.elastic.co/t/es-watcher-transform-formatting-the-script-source/219660 "2020-02-18T10:50:22Z")

</div>

Hi team, I'm really getting a hard time working with transform scripts cause it's only allowing me to write on 1 line: example: "transform": { "script": { "source": " String k; int i; int s; int a; float sar; for(i=0…

---

## [Elasticsearch APM with nodejs agent failing with error](https://discuss.elastic.co/t/elasticsearch-apm-with-nodejs-agent-failing-with-error/166118)

<div class="topic-metadata">

**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\
**Replies:** 4\
**Last updated:** [January 30, 2019, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-apm-with-nodejs-agent-failing-with-error/166118 "2019-01-30T10:00:05Z")

</div>

Hi, Problem: I am using nodejs agent for APM server with the reference link: "https://www.elastic.co/guide/en/apm/agent/js-base/current/getting-started.html" Problem description: From the above reference link, it wa…

---

## [Logstash jdbc input timestamp parse issue](https://discuss.elastic.co/t/logstash-jdbc-input-timestamp-parse-issue/91002)

<div class="topic-metadata">

**Author:** [@Hoffin\_Ag](https://discuss.elastic.co/u/Hoffin_Ag)\
**Replies:** 4\
**Last updated:** [June 27, 2017, 6:07pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-timestamp-parse-issue/91002 "2017-06-27T18:07:36Z")

</div>

Previous version of logstash2.3.4. when we updated to 5.4.1 facing issue. please resolve ASAP. Provide fix. this is major issue in production. Logstash Version : 5.4.1 Date Field : format (dd:mm:yy hh:mm:ss:sssss) exce…

---

## [Possible bug with beats 5.3 and glide?](https://discuss.elastic.co/t/possible-bug-with-beats-5-3-and-glide/77896)

<div class="topic-metadata">

**Author:** [@rzrelyea](https://discuss.elastic.co/u/rzrelyea)\
**Replies:** 4\
**Last updated:** [March 11, 2017, 5:55pm UTC](https://discuss.elastic.co/t/possible-bug-with-beats-5-3-and-glide/77896 "2017-03-11T17:55:04Z")

</div>

I am developing a custom beat and was testing the build on a clean directory when I hit a problem with glide. Note that I only have this problem with glide when using version 5.3 of beats. If I use version 5.2 glide do…

---

## [Watcher Pricing to Monitor 1 Elasticsearch server](https://discuss.elastic.co/t/watcher-pricing-to-monitor-1-elasticsearch-server/50291)

<div class="topic-metadata">

**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\
**Replies:** 4\
**Last updated:** [May 25, 2016, 4:08am UTC](https://discuss.elastic.co/t/watcher-pricing-to-monitor-1-elasticsearch-server/50291 "2016-05-25T04:08:04Z")

</div>

Dear Team, I had raised a query on subscription for pricing information but I am not getting the required information quickly. May I request team to get in touch with me and also feel free to call and close. It would…

---

## [Heartbeat 8.5.0 mapper error workaround](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318133)

<div class="topic-metadata">

**Author:** [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)\
**Replies:** 0\
**Last updated:** [November 3, 2022, 7:00pm UTC](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318133 "2022-11-03T19:00:11Z")

</div>

Hi all, Andrew from Elastic here, Tech Lead for Heartbeat. We're sorry to report that Heartbeat 8.5.0 has a severe bug that will break indexing in most installs after ~30m of runtime. The good news is there's an easy wor…

---

## [Can't get index.max\_result\_window for Elasticsearch 7 working](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189)

<div class="topic-metadata">

**Author:** [@Alexey\_Pshenichnov](https://discuss.elastic.co/u/Alexey_Pshenichnov)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 8:43am UTC](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189 "2020-06-11T08:43:13Z")

</div>

For some reason I cannot set index.max\_result\_window from https://www.elastic.co/guide/en/elasticsearch/reference/current/index-modules.html#dynamic-index-settings I have tried different options like PUT /articles/\_set…

---

## [Multiple index search java](https://discuss.elastic.co/t/multiple-index-search-java/225643)

<div class="topic-metadata">

**Author:** [@rohit.singh3](https://discuss.elastic.co/u/rohit.singh3)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 10:15am UTC](https://discuss.elastic.co/t/multiple-index-search-java/225643 "2020-03-30T10:15:53Z")

</div>

i want a searchstring to searched in multiple indices. i have written below code: SearchRequest searchRequest = new SearchRequest("indexA","indexB"); SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder(); …

---

## [How to send alert between specific time range in Kibana?](https://discuss.elastic.co/t/how-to-send-alert-between-specific-time-range-in-kibana/220691)

<div class="topic-metadata">

**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 6:20am UTC](https://discuss.elastic.co/t/how-to-send-alert-between-specific-time-range-in-kibana/220691 "2020-03-13T06:20:14Z")

</div>

I have Kibana alert which has following condition. Now I want to this to be triggered only between certain time frame, i.e. between 9 AM to 6 PM. How/Where can I add that range? { "range": { "data.timestamp"…

---

## [Elastic search start service is failing](https://discuss.elastic.co/t/elastic-search-start-service-is-failing/206388)

<div class="topic-metadata">

**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\
**Replies:** 1\
**Last updated:** [November 27, 2019, 12:13am UTC](https://discuss.elastic.co/t/elastic-search-start-service-is-failing/206388 "2019-11-27T00:13:02Z")

</div>

Hi I am trying to install the elastic search 7.3.0 version in my centos server when i m checking the status with systemctl status elasticsearch -l command I am getting the below error elasticsearch.service - Elasti…

---

## [Merge Multiline json into single line json using codec multiline plugin](https://discuss.elastic.co/t/merge-multiline-json-into-single-line-json-using-codec-multiline-plugin/143175)

<div class="topic-metadata">

**Author:** [@vinit](https://discuss.elastic.co/u/vinit)\
**Replies:** 1\
**Last updated:** [August 6, 2018, 2:08pm UTC](https://discuss.elastic.co/t/merge-multiline-json-into-single-line-json-using-codec-multiline-plugin/143175 "2018-08-06T14:08:58Z")

</div>

What pattern I need to apply in input plugin to merge multiline json? I am using below multiline json: { "end-time": "2018-07-18T07:43:01", "start-time": "2018-07-17T15:36:39", "status": "SUCCESS", "steps": \[ { "…

---

## [Analyzer \[suggester\] not found for field \[mark\_text\]](https://discuss.elastic.co/t/analyzer-suggester-not-found-for-field-mark-text/134207)

<div class="topic-metadata">

**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\
**Replies:** 1\
**Last updated:** [June 1, 2018, 12:41pm UTC](https://discuss.elastic.co/t/analyzer-suggester-not-found-for-field-mark-text/134207 "2018-06-01T12:41:28Z")

</div>

I have this index settings : { "phrase\_suggester" : { "aliases" : { }, "mappings" : { }, "settings" : { "index" : { "number\_of\_shards" : "5", "provided\_name" : "phrase\_suggester", "creation\_date" : "152785198777…

---

## [Results per Page limit](https://discuss.elastic.co/t/results-per-page-limit/217643)

<div class="topic-metadata">

**Author:** [@uklft](https://discuss.elastic.co/u/uklft)\
**Replies:** 5\
**Last updated:** [February 14, 2020, 9:13am UTC](https://discuss.elastic.co/t/results-per-page-limit/217643 "2020-02-14T09:13:25Z")

</div>

Hey there, When i try to list documents with a page size of 1000, the server always returns only 100 documents. Tested with curl and python client: curl -s -X GET 'http://server/api/as/v1/engines/gap/documents/list' \\…

---

## [Filebeat CheckPoint Module](https://discuss.elastic.co/t/filebeat-checkpoint-module/265922)

<div class="topic-metadata">

**Author:** [@Kaarthick](https://discuss.elastic.co/u/Kaarthick)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 5:17am UTC](https://discuss.elastic.co/t/filebeat-checkpoint-module/265922 "2021-03-08T05:17:54Z")

</div>

Hi Team, I'm using filebeat 7.10.0 and am new to filebeat. I have enabled the checkpoint module for parsing the checkpoint logs of different event types. So in checkpoint.yml i have configured input as - module: ch…

---

## [Embed visualization via iframe without menus, options, editor, etc](https://discuss.elastic.co/t/embed-visualization-via-iframe-without-menus-options-editor-etc/253712)

<div class="topic-metadata">

**Author:** [@nate.goodwin](https://discuss.elastic.co/u/nate.goodwin)\
**Replies:** 6\
**Last updated:** [October 30, 2020, 12:11pm UTC](https://discuss.elastic.co/t/embed-visualization-via-iframe-without-menus-options-editor-etc/253712 "2020-10-30T12:11:59Z")

</div>

I want to embed a visualization in an iframe, but I want just the part inside the red rectangle, how can I do this?

---

## [Queries on has\_parent / has\_child don't return any hits](https://discuss.elastic.co/t/queries-on-has-parent-has-child-dont-return-any-hits/210587)

<div class="topic-metadata">

**Author:** [@chari](https://discuss.elastic.co/u/chari)\
**Replies:** 6\
**Last updated:** [December 9, 2019, 4:03pm UTC](https://discuss.elastic.co/t/queries-on-has-parent-has-child-dont-return-any-hits/210587 "2019-12-09T16:03:45Z")

</div>

I have a very simple join relationship that has been defined as : es.indices.create( index= "docpage", body= { "mappings": { "properties": { "my\_document": { "type…

---

## [Elasticsearch deprecation issues](https://discuss.elastic.co/t/elasticsearch-deprecation-issues/325543)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 5\
**Last updated:** [March 6, 2023, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-deprecation-issues/325543 "2023-03-06T11:20:40Z")

</div>

I can't upgrade to 8.6.1 due to a deprecation issue. I can't update the elasticsearch.yml, because I have a cloud solution. Problem: setting \[cluster.routing.allocation.disk.watermark.enable\_for\_single\_data\_node\] is dep…

---

## [Logstash output influxdb configure problem](https://discuss.elastic.co/t/logstash-output-influxdb-configure-problem/159516)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 5\
**Last updated:** [December 9, 2018, 2:12pm UTC](https://discuss.elastic.co/t/logstash-output-influxdb-configure-problem/159516 "2018-12-09T14:12:08Z")

</div>

Influxdb server ip = 192.168.30.2 logstash server ip = 192.168.30.3 logstash.version"=\>"6.5.1 InfluxDB shell version: 1.6.4 cat /etc/logstash/conf.d/02-beats-input.conf input { beats { port =\> 5044 ssl =\> true t…

---

## [Networking](https://discuss.elastic.co/t/networking/86950)

<div class="topic-metadata">

**Author:** [@thosfelt](https://discuss.elastic.co/u/thosfelt)\
**Replies:** 5\
**Last updated:** [May 24, 2017, 11:42am UTC](https://discuss.elastic.co/t/networking/86950 "2017-05-24T11:42:21Z")

</div>

I have a 26 node cluster where 3 nodes have a public facing interface. My thought was to set up those 3 nodes as master/ingest nodes and the remaining nodes as data nodes. I have a 100Gb InfiniBand network that I would…

---

## [Canvas dropdown filter not showing all the values for the chosen column](https://discuss.elastic.co/t/canvas-dropdown-filter-not-showing-all-the-values-for-the-chosen-column/283464)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 10:39am UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-not-showing-all-the-values-for-the-chosen-column/283464 "2021-09-13T10:39:23Z")

</div>

Hi, I am using the dropdown filter on my canvas board right now and I have managed to get it working however depending on the time range i set it will not pick up all the values for the column i have filtered for. We ar…

---

## [Querystring search on special characters](https://discuss.elastic.co/t/querystring-search-on-special-characters/192305)

<div class="topic-metadata">

**Author:** [@diliprajamani1](https://discuss.elastic.co/u/diliprajamani1)\
**Replies:** 2\
**Last updated:** [July 26, 2019, 2:45pm UTC](https://discuss.elastic.co/t/querystring-search-on-special-characters/192305 "2019-07-26T14:45:08Z")

</div>

Hello there, I am looking a weird behavior on one of my query, see if you can help. I am indexing the following 2 documents PUT ramptestindex/\_doc/360238 { "OriginRamp" : { "RampID" : 360238, "RampCode" : "D!", "R…

---

## [Date filter ISO 8601](https://discuss.elastic.co/t/date-filter-iso-8601/144365)

<div class="topic-metadata">

**Author:** [@Ken\_Leoni](https://discuss.elastic.co/u/Ken_Leoni)\
**Replies:** 2\
**Last updated:** [August 14, 2018, 5:47pm UTC](https://discuss.elastic.co/t/date-filter-iso-8601/144365 "2018-08-14T17:47:38Z")

</div>

I'm doing something which I thought should be simple.. but can't get it to work for the life of me.. I'm doing a jdbc query.. and my data has a sampletime in the record that I want to use the the timestamp.. this is wha…

---

## [Kibana 6.2. - Authentication Exception](https://discuss.elastic.co/t/kibana-6-2-authentication-exception/123772)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 2\
**Last updated:** [March 14, 2018, 7:16am UTC](https://discuss.elastic.co/t/kibana-6-2-authentication-exception/123772 "2018-03-14T07:16:03Z")

</div>

I installed ELK 6.2. I created some index in ES and i would like to connect Kibana to ES. I do not use x-pack. When I connect to my kibana server on http://10.206.81.224:5601 i am prompted for user and password. Its user…

---

## [TranslogException \[Failed to write operation \]](https://discuss.elastic.co/t/translogexception-failed-to-write-operation/87840)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [June 1, 2017, 5:37am UTC](https://discuss.elastic.co/t/translogexception-failed-to-write-operation/87840 "2017-06-01T05:37:35Z")

</div>

Hi All, I see below error logs in ES, can you please guide why one might get the below exception I am using ES 2.3.3 Heap size is 6G \[ep\_fo\_people\_search\_e92pbg01\]\[\[ep\_fo\_people\_search\_e92pbg01\]\[1\]\] TranslogExcepti…

---

## [ElasticSearch client without lucene dependencies](https://discuss.elastic.co/t/elasticsearch-client-without-lucene-dependencies/960)

<div class="topic-metadata">

**Author:** [@paul\_nibin](https://discuss.elastic.co/u/paul_nibin)\
**Replies:** 2\
**Last updated:** [December 11, 2015, 11:06am UTC](https://discuss.elastic.co/t/elasticsearch-client-without-lucene-dependencies/960 "2015-12-11T11:06:55Z")

</div>

I want to use ElasticSearch transport client. But when I add the maven dependency for elasticsearch, \<dependency\> \<groupId\>org.elasticsearch\</groupId\> \<artifactId\>elasticsearch\</artifactId\> \<version\>1.5.1\</versi…

---

## [Can we have Multiple Parent - Single Child Relation in elastic search](https://discuss.elastic.co/t/can-we-have-multiple-parent-single-child-relation-in-elastic-search/172768)

<div class="topic-metadata">

**Author:** [@sharoncek](https://discuss.elastic.co/u/sharoncek)\
**Replies:** 3\
**Last updated:** [March 19, 2019, 6:23am UTC](https://discuss.elastic.co/t/can-we-have-multiple-parent-single-child-relation-in-elastic-search/172768 "2019-03-19T06:23:20Z")

</div>

Hi @dadoonet and All, Please help me on below. On a long search, I have found in elastic search(I am using V6.5.4) we have the option for Single Parent - Multiple Children mapping. //Code Start PUT my\_index124 { "…

---

## [6.2.4 to 6.3 upgrade broke kibana monitoring](https://discuss.elastic.co/t/6-2-4-to-6-3-upgrade-broke-kibana-monitoring/135964)

<div class="topic-metadata">

**Author:** [@avboivin](https://discuss.elastic.co/u/avboivin)\
**Replies:** 3\
**Last updated:** [June 14, 2018, 5:31pm UTC](https://discuss.elastic.co/t/6-2-4-to-6-3-upgrade-broke-kibana-monitoring/135964 "2018-06-14T17:31:14Z")

</div>

After upgrading my 3-nodes cluster from 6.2.4 to 6.3 using the rolling update documentation page, the kibana monitoring graphs no longer get filled with data. I had X-pack free version prior to the upgrade. \[image\] Al…

---

## [Logstash snmptrap dynamic fields with ruby](https://discuss.elastic.co/t/logstash-snmptrap-dynamic-fields-with-ruby/71336)

<div class="topic-metadata">

**Author:** [@aydinnmu](https://discuss.elastic.co/u/aydinnmu)\
**Replies:** 3\
**Last updated:** [January 17, 2017, 7:45am UTC](https://discuss.elastic.co/t/logstash-snmptrap-dynamic-fields-with-ruby/71336 "2017-01-17T07:45:11Z")

</div>

Hi everyone, i have a problem with dynamic fields. i saw a few topics but they are not useful for me. when you use logstash as snmptrap receiver, you will see that datas are not a static values. They will change wh…

---

## [Kibana 4 specific Dashboard access control by user](https://discuss.elastic.co/t/kibana-4-specific-dashboard-access-control-by-user/60479)

<div class="topic-metadata">

**Author:** [@Fernando\_Romano](https://discuss.elastic.co/u/Fernando_Romano)\
**Replies:** 3\
**Last updated:** [September 16, 2016, 5:51pm UTC](https://discuss.elastic.co/t/kibana-4-specific-dashboard-access-control-by-user/60479 "2016-09-16T17:51:48Z")

</div>

Hi there, We're using Elastic and Kibana in the Cloud environment. We have a Dashboards for each client. Is there any way to restrict access to a client user to a specific Dashboard with Search and Time period withou…

---

## [What's the best way of creating a keystore with Dockerized Logstash?](https://discuss.elastic.co/t/whats-the-best-way-of-creating-a-keystore-with-dockerized-logstash/313810)

<div class="topic-metadata">

**Author:** [@rcorfield](https://discuss.elastic.co/u/rcorfield)\
**Replies:** 1\
**Last updated:** [September 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/whats-the-best-way-of-creating-a-keystore-with-dockerized-logstash/313810 "2022-09-13T13:18:57Z")

</div>

Hi, we are currently wrestling with the problem of how to create a keystore for use with dockerized logstash. I have seen one solution in the forum already: How to use keystore in Dockerized logstash?, however we do not…

---

## [After kubernetes node restart, data pods couldn't join the cluster again](https://discuss.elastic.co/t/after-kubernetes-node-restart-data-pods-couldnt-join-the-cluster-again/242959)

<div class="topic-metadata">

**Author:** [@igoragueme](https://discuss.elastic.co/u/igoragueme)\
**Replies:** 1\
**Last updated:** [July 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/after-kubernetes-node-restart-data-pods-couldnt-join-the-cluster-again/242959 "2020-07-29T08:52:08Z")

</div>

Hello, I'm facing an issue with my elasticsearch cluster. I have 9 pods running in 3 nodes on my kubernetes cluster. 3 elasticsearch-client pod, 3 elasticsearch-data pod, 3 elasticsearch-master pod. Here my YAML's …

---

## [Visualisation Painless script between two characters](https://discuss.elastic.co/t/visualisation-painless-script-between-two-characters/271296)

<div class="topic-metadata">

**Author:** [@georgejolliffe](https://discuss.elastic.co/u/georgejolliffe)\
**Replies:** 7\
**Last updated:** [April 27, 2021, 11:50am UTC](https://discuss.elastic.co/t/visualisation-painless-script-between-two-characters/271296 "2021-04-27T11:50:03Z")

</div>

Hi guys, I have this example string in a field called querystring: utm\_medium=inapp&utm\_source=crm&utm\_campaign=newsl&utm\_term=fishandchips I am trying to visualise occurrences of all the possible "utm\_source". I can'…

---

## [Script\_score with multiline code](https://discuss.elastic.co/t/script-score-with-multiline-code/241468)

<div class="topic-metadata">

**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 2:42pm UTC](https://discuss.elastic.co/t/script-score-with-multiline-code/241468 "2020-07-16T14:42:41Z")

</div>

Hi, I have a query, this one compute a score with painless. I try to use multiline painless, using """, but the parser seems to unlike this. From what I understand, it should work, right ? Here is my query for review. …

---

## [Stuck at Successfully started Logstash API endpoint {:port=\>9600} (can’t load data in Kibana/ElasticSearch)](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9600-can-t-load-data-in-kibana-elasticsearch/189830)

<div class="topic-metadata">

**Author:** [@LL22](https://discuss.elastic.co/u/LL22)\
**Replies:** 1\
**Last updated:** [July 11, 2019, 1:36am UTC](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9600-can-t-load-data-in-kibana-elasticsearch/189830 "2019-07-11T01:36:58Z")

</div>

Hello, I'm new to ELK and I'm having an issue to load my data Here is my imput file (it's just to test, it won't remain that empty) input { file { codec =\> json path =\> "/home/Json\_Data/\*.json" start\_position =\> "…

---

## [How to reduce the font size of text in kibana dashboard version 6.6.0](https://discuss.elastic.co/t/how-to-reduce-the-font-size-of-text-in-kibana-dashboard-version-6-6-0/168068)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 1\
**Last updated:** [February 12, 2019, 7:50pm UTC](https://discuss.elastic.co/t/how-to-reduce-the-font-size-of-text-in-kibana-dashboard-version-6-6-0/168068 "2019-02-12T19:50:48Z")

</div>

0 I'm currently working with kibana version 6.6.0 and creating dashboard with a visualization(like datatable,Region Map,Gauge,...).How do I change the font size of text in datatable that is being displayed in kibana das…

---

## [Invoke JAVA high level rest client Analyzer API issue](https://discuss.elastic.co/t/invoke-java-high-level-rest-client-analyzer-api-issue/161276)

<div class="topic-metadata">

**Author:** [@hxwhou](https://discuss.elastic.co/u/hxwhou)\
**Replies:** 1\
**Last updated:** [December 18, 2018, 4:07pm UTC](https://discuss.elastic.co/t/invoke-java-high-level-rest-client-analyzer-api-issue/161276 "2018-12-18T16:07:52Z")

</div>

Refer to the document of Java REST Client \[6.4\] » Java High Level REST Client » Indices APIs » Analyze API 2018-12-18 15:39:20,122 INFO (SLF4JLogger.java:71)- Opened connection \[connectionId{localValue:2, serverValu…

---

## [Vega: Use values from "data" for a signal definition](https://discuss.elastic.co/t/vega-use-values-from-data-for-a-signal-definition/140869)

<div class="topic-metadata">

**Author:** [@vega\_user](https://discuss.elastic.co/u/vega_user)\
**Replies:** 1\
**Last updated:** [August 6, 2018, 4:08pm UTC](https://discuss.elastic.co/t/vega-use-values-from-data-for-a-signal-definition/140869 "2018-08-06T16:08:31Z")

</div>

Hello everyone, I was wondering whether it is possible to use a specific value from "data" within a signal - for instance, to define the initial value of a slider. I tried this: "data": \[ { "name": "testval…

[Previous page](https://discuss.elastic.co/top.md?page=1162&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1164&per_page=50&period=all)
