# Top

**URL:** https://discuss.elastic.co/top.md?page=1175&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1176

---

## [Discover: Null keys are not supported](https://discuss.elastic.co/t/discover-null-keys-are-not-supported/53979)

<div class="topic-metadata">

**Author:** [@jhaynie](https://discuss.elastic.co/u/jhaynie)\
**Replies:** 2\
**Last updated:** [June 28, 2016, 6:27am UTC](https://discuss.elastic.co/t/discover-null-keys-are-not-supported/53979 "2016-06-28T06:27:24Z")

</div>

I have a time based index for Elastic which is putting time records into the DB. When i setup a time based mapping in Kibana, I get an exception displayed at the top of Kibana "Discover: Null keys are not supported". H…

---

## [\[Filebeat\] AWS module & ELB fileset, not parsing message](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-not-parsing-message/250690)

<div class="topic-metadata">

**Author:** [@Salim\_B](https://discuss.elastic.co/u/Salim_B)\
**Replies:** 8\
**Last updated:** [October 5, 2020, 2:05pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-not-parsing-message/250690 "2020-10-05T14:05:34Z")

</div>

Hi there ! I've been setting the aws module and the ELB fileset with it, and got it mostly working. It reads the SQS Queue, then get the matching log on S3 side, but it doesn't parse the Access Log message at all. Im …

---

## [Правильно ли я использую script?](https://discuss.elastic.co/t/script/213313)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 8\
**Last updated:** [December 30, 2019, 6:34pm UTC](https://discuss.elastic.co/t/script/213313 "2019-12-30T18:34:09Z")

</div>

Добрый день! У меня есть порядка 45 тыс. поисковых запросов (это шаблоны поиска сохраненные нашими пользователями) Я хотел загрузить их в es и использовать search template для выполнения, однако, вставив порядка 13 тыс.…

---

## [\[8.1\] Fleet server not registered using ECK configuration from docs](https://discuss.elastic.co/t/8-1-fleet-server-not-registered-using-eck-configuration-from-docs/300493)

<div class="topic-metadata">

**Author:** [@Piotr\_Nowacki](https://discuss.elastic.co/u/Piotr_Nowacki)\
**Replies:** 6\
**Last updated:** [March 28, 2022, 9:45am UTC](https://discuss.elastic.co/t/8-1-fleet-server-not-registered-using-eck-configuration-from-docs/300493 "2022-03-28T09:45:44Z")

</div>

Starting a new fleet-managed instance as described in the documentation: configuration: cat \<\<EOF | kubectl apply -f - apiVersion: agent.k8s.elastic.co/v1alpha1 kind: Agent metadata: name: fleet-server-quickstart …

---

## [Extracting substring from a field](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656)

<div class="topic-metadata">

**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\
**Replies:** 5\
**Last updated:** [July 7, 2024, 9:22pm UTC](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656 "2024-07-07T21:22:42Z")

</div>

A field called message contains a lot of information as below. message: xxxxxxxx /app/rest/abc 200 500ms xxxxxxxx. -\> is there a way to extract the api names and the response time only and put them in a table (without…

---

## [ELK workflow with Filebeat - could you explain in detail?](https://discuss.elastic.co/t/elk-workflow-with-filebeat-could-you-explain-in-detail/201538)

<div class="topic-metadata">

**Author:** [@Nguy\_n\_T\_t\_Dung](https://discuss.elastic.co/u/Nguy_n_T_t_Dung)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 12:09pm UTC](https://discuss.elastic.co/t/elk-workflow-with-filebeat-could-you-explain-in-detail/201538 "2019-09-30T12:09:56Z")

</div>

Hi buddy, I'm very very confused and try to clear the flow of Elasticsearch - Logstash - Kibana . Now , this is my situation : I wanna monitoring my Kafka server by ELK and i found the way ; use ELK . And this is my t…

---

## [Composable templates- how to convert Legacy?](https://discuss.elastic.co/t/composable-templates-how-to-convert-legacy/276934)

<div class="topic-metadata">

**Author:** [@P\_Larsen](https://discuss.elastic.co/u/P_Larsen)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 2:56pm UTC](https://discuss.elastic.co/t/composable-templates-how-to-convert-legacy/276934 "2021-06-24T14:56:20Z")

</div>

How do I convert this to the new composable templates without breaking my ILM config? PUT \_template/99999-test\_deleteme\_policy { "index\_patterns": \[ "99999-test\_deleteme-\*" \], "settings": { "index": { "number\_of\_shards"…

---

## [Make kibana image element as hyperlink in kibana canvas](https://discuss.elastic.co/t/make-kibana-image-element-as-hyperlink-in-kibana-canvas/181589)

<div class="topic-metadata">

**Author:** [@Malini\_Sahoo](https://discuss.elastic.co/u/Malini_Sahoo)\
**Replies:** 1\
**Last updated:** [May 17, 2019, 3:59pm UTC](https://discuss.elastic.co/t/make-kibana-image-element-as-hyperlink-in-kibana-canvas/181589 "2019-05-17T15:59:34Z")

</div>

Hi, can we make image element in kibana canvas workpad as hyperlink?

---

## [Lancer un script python depuis une config Logstash](https://discuss.elastic.co/t/lancer-un-script-python-depuis-une-config-logstash/172119)

<div class="topic-metadata">

**Author:** [@Radic4l](https://discuss.elastic.co/u/Radic4l)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 1:36am UTC](https://discuss.elastic.co/t/lancer-un-script-python-depuis-une-config-logstash/172119 "2019-03-17T01:36:20Z")

</div>

Salut la communauté ! Voilà j'ai un petit problème ... Encore :smiley: J'ai créer un script python pour supprimer les doublons de mon index, dans le but de comparer des IP (par doublons) si l'IP existe dans deux bases …

---

## [Combine aggregated fields on Kibana visualization](https://discuss.elastic.co/t/combine-aggregated-fields-on-kibana-visualization/130409)

<div class="topic-metadata">

**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\
**Replies:** 1\
**Last updated:** [May 3, 2018, 1:47pm UTC](https://discuss.elastic.co/t/combine-aggregated-fields-on-kibana-visualization/130409 "2018-05-03T13:47:24Z")

</div>

Hi all, I'm creating a line visualization in Kibana with a data histogram aggregation based on a timestamp field and I'm using a term sub-aggregation on a field called "failure" to split series. The problem is that I ha…

---

## [Read log from local file](https://discuss.elastic.co/t/read-log-from-local-file/117628)

<div class="topic-metadata">

**Author:** [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\
**Replies:** 1\
**Last updated:** [January 30, 2018, 2:12pm UTC](https://discuss.elastic.co/t/read-log-from-local-file/117628 "2018-01-30T14:12:07Z")

</div>

Im trying to read logs from a local folder in my system. I get the following error D:\\Personal\\logstash-6.1.2\\bin\>logstash.bat -f ..\\config\\logstash.confSending Logstash's logs to D:/Personal/logstash-6.1.2/logs which i…

---

## [Date Histogram for dynamic Date Ranges](https://discuss.elastic.co/t/date-histogram-for-dynamic-date-ranges/75091)

<div class="topic-metadata">

**Author:** [@Irina](https://discuss.elastic.co/u/Irina)\
**Replies:** 1\
**Last updated:** [February 15, 2017, 11:00am UTC](https://discuss.elastic.co/t/date-histogram-for-dynamic-date-ranges/75091 "2017-02-15T11:00:21Z")

</div>

My documents’ structure is in the following form: { "id" : 1, "item" : "A", "state" : "new", "created" : "2017-01-02" , "changed" : "2017-01-04"} { "id" : 2, "item" : "B", "state" : "active", "created" : "2017-01-05…

---

## [Jdbc sql\_last\_value](https://discuss.elastic.co/t/jdbc-sql-last-value/69156)

<div class="topic-metadata">

**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\
**Replies:** 1\
**Last updated:** [December 18, 2016, 9:04pm UTC](https://discuss.elastic.co/t/jdbc-sql-last-value/69156 "2016-12-18T21:04:53Z")

</div>

Hi i have a few tables in MSSQL and ORACLE DB that i want to insert to elasticsearch i am using logstash for that with the jdbc input i want the statement to run every 3 minutes now i dont know how to "tell" logstash to…

---

## [Can the "field" property be used to extract a value from the message body, and why not?](https://discuss.elastic.co/t/can-the-field-property-be-used-to-extract-a-value-from-the-message-body-and-why-not/45510)

<div class="topic-metadata">

**Author:** [@discuss03](https://discuss.elastic.co/u/discuss03)\
**Replies:** 1\
**Last updated:** [March 26, 2016, 12:26pm UTC](https://discuss.elastic.co/t/can-the-field-property-be-used-to-extract-a-value-from-the-message-body-and-why-not/45510 "2016-03-26T12:26:20Z")

</div>

I have been trying to figure out how to extract from an apache/nginx log with combined format the fields for: client IP, agent-type, HTTP error code, etc. I have noticed that Filebeat has regex support for multiline re…

---

## [Matching multiple topics (sets of keywords)](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618)

<div class="topic-metadata">

**Author:** [@aartur](https://discuss.elastic.co/u/aartur)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 4:56pm UTC](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618 "2021-04-30T16:56:30Z")

</div>

Hello, I'm investigating whether ES is able to order documents wrt. a relevance score for two or more keywords sets, assigning a high score only to documents related strongly to all the keyword sets. Lets say I have in…

---

## [Logstash - Startup - Template, Exception in start](https://discuss.elastic.co/t/logstash-startup-template-exception-in-start/130688)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 3\
**Last updated:** [May 10, 2018, 8:13am UTC](https://discuss.elastic.co/t/logstash-startup-template-exception-in-start/130688 "2018-05-10T08:13:55Z")

</div>

ES Version 6.2.1 Logstash Version (6.0.1 and 6.2.4). I'm observing multiple logstash templates being created, and was not clear on these. Environment: 2 Clusters Cluster 1 Core Logging Cluster for keeping business …

---

## [Kibana UI advanced settings](https://discuss.elastic.co/t/kibana-ui-advanced-settings/99697)

<div class="topic-metadata">

**Author:** [@nivo33](https://discuss.elastic.co/u/nivo33)\
**Replies:** 3\
**Last updated:** [September 8, 2017, 1:07am UTC](https://discuss.elastic.co/t/kibana-ui-advanced-settings/99697 "2017-09-08T01:07:18Z")

</div>

When the kibana advanced settings are changed, as refrenced here: Which file is changed? Where are these settings located? Thank you

---

## [How to make hash sum from string?](https://discuss.elastic.co/t/how-to-make-hash-sum-from-string/60897)

<div class="topic-metadata">

**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\
**Replies:** 3\
**Last updated:** [September 19, 2016, 9:01pm UTC](https://discuss.elastic.co/t/how-to-make-hash-sum-from-string/60897 "2016-09-19T21:01:54Z")

</div>

Hello. If I have some string field, how I can make a hash sum from that in the Logstash configuration? Md5 or something else?

---

## [SQL Aggregations and Translate](https://discuss.elastic.co/t/sql-aggregations-and-translate/201550)

<div class="topic-metadata">

**Author:** [@aklys](https://discuss.elastic.co/u/aklys)\
**Replies:** 1\
**Last updated:** [October 1, 2019, 2:38pm UTC](https://discuss.elastic.co/t/sql-aggregations-and-translate/201550 "2019-10-01T14:38:00Z")

</div>

When I run an SQL query such as this via the Elasticsearch API: { "query": "SELECT SUM(field1) \\/ COUNT(field2) as ratio FROM \\"test\*\\"" } It will return a nice clean ratio. But when I do a \_sql\\translate on it I get …

---

## [Searching for a few fields from Set Collection](https://discuss.elastic.co/t/searching-for-a-few-fields-from-set-collection/117189)

<div class="topic-metadata">

**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\
**Replies:** 4\
**Last updated:** [January 29, 2018, 2:09pm UTC](https://discuss.elastic.co/t/searching-for-a-few-fields-from-set-collection/117189 "2018-01-29T14:09:10Z")

</div>

I have logs with different levels. For example: "DEBUG" and "INFO". What if I want to search for "DEBUG" and "INFO" simultaniously? for example, in json request should be set(Java collection) of levels: { "level": \["…

---

## [Sorting \_geo\_distance does not work for filter term](https://discuss.elastic.co/t/sorting-geo-distance-does-not-work-for-filter-term/110124)

<div class="topic-metadata">

**Author:** [@mate01988](https://discuss.elastic.co/u/mate01988)\
**Replies:** 4\
**Last updated:** [December 4, 2017, 5:48pm UTC](https://discuss.elastic.co/t/sorting-geo-distance-does-not-work-for-filter-term/110124 "2017-12-04T17:48:24Z")

</div>

Hello, I have a problem. Sorting by \_geo\_distance works for: \[query\] =\> Array( \[bool\] =\> Array ( \[must\] =\> Array …

---

## [Using graphs in java : cient creation error](https://discuss.elastic.co/t/using-graphs-in-java-cient-creation-error/105422)

<div class="topic-metadata">

**Author:** [@knights](https://discuss.elastic.co/u/knights)\
**Replies:** 4\
**Last updated:** [November 2, 2017, 1:18pm UTC](https://discuss.elastic.co/t/using-graphs-in-java-cient-creation-error/105422 "2017-11-02T13:18:35Z")

</div>

Hello, I'm currently testing the graph api offered by X-pack. I could toy a bit with it using kibana, and wanted to test using it in my java application However, I'm stuck at the creation of the PreBuiltXPackTransport…

---

## [Existing document not being found by match\_phrase\_prefix](https://discuss.elastic.co/t/existing-document-not-being-found-by-match-phrase-prefix/28941)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\
**Replies:** 4\
**Last updated:** [September 11, 2015, 8:14am UTC](https://discuss.elastic.co/t/existing-document-not-being-found-by-match-phrase-prefix/28941 "2015-09-11T08:14:55Z")

</div>

Hi all, I've encountered some unexpected search behaviour. We have an index of documents with fields last\_name, first\_name. There is a document with first\_name Peter and last\_name Westphal. When running the following…

---

## [Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/286987)

<div class="topic-metadata">

**Author:** [@armughan](https://discuss.elastic.co/u/armughan)\
**Replies:** 2\
**Last updated:** [October 19, 2021, 6:54pm UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/286987 "2021-10-19T18:54:24Z")

</div>

I'm configuring a single node Elasticsearch & Kibana (7.15.1) set up with FQDN behind Nginx Proxy on a single EC2 instance. Everything is correctly set up when I tried to turn on Alerts in heartbeat (Observability) it s…

---

## [Alert rule for standard cluster alerts: search\_phase\_execution\_exception \[illegal\_argument\_exception\]](https://discuss.elastic.co/t/alert-rule-for-standard-cluster-alerts-search-phase-execution-exception-illegal-argument-exception/284668)

<div class="topic-metadata">

**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\
**Replies:** 2\
**Last updated:** [September 28, 2021, 9:03pm UTC](https://discuss.elastic.co/t/alert-rule-for-standard-cluster-alerts-search-phase-execution-exception-illegal-argument-exception/284668 "2021-09-28T21:03:10Z")

</div>

7.14.1 Platinum license Setting up brand new cluster, and have configured metricbeat style monitoring of cluster (separate elasticsearch for monitoring). Entered setup mode and did the add of standard alerts. Looks l…

---

## [Curator & AWS ElasticSearch 6.0.0 - Timeout Issue?](https://discuss.elastic.co/t/curator-aws-elasticsearch-6-0-0-timeout-issue/115592)

<div class="topic-metadata">

**Author:** [@Hush077](https://discuss.elastic.co/u/Hush077)\
**Replies:** 2\
**Last updated:** [January 15, 2018, 9:50pm UTC](https://discuss.elastic.co/t/curator-aws-elasticsearch-6-0-0-timeout-issue/115592 "2018-01-15T21:50:05Z")

</div>

Issue: Curator seems to get stuck or times out with no information running against ElasticSearch 6.0.0. Curator Version: 5.4.1 Have setup the AWS Cluster using VPC Security (accessible by anything within the VPC). Can…

---

## [GELF Logs from Graylog to Logstash](https://discuss.elastic.co/t/gelf-logs-from-graylog-to-logstash/111730)

<div class="topic-metadata">

**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 9:35am UTC](https://discuss.elastic.co/t/gelf-logs-from-graylog-to-logstash/111730 "2017-12-18T09:35:03Z")

</div>

INFO: I am running version 6.1 on all of my Elastic Stack components, these are Ubuntu VM's hosted in Azure. I have listed the contents of the Gralyog logs below and the Logstash logs show nothing (Even when set to debug…

---

## [Why system.diskio doesn't produce I/O statistics fields like "iostat"](https://discuss.elastic.co/t/why-system-diskio-doesnt-produce-i-o-statistics-fields-like-iostat/91354)

<div class="topic-metadata">

**Author:** [@PChou](https://discuss.elastic.co/u/PChou)\
**Replies:** 2\
**Last updated:** [July 4, 2017, 6:43pm UTC](https://discuss.elastic.co/t/why-system-diskio-doesnt-produce-i-o-statistics-fields-like-iostat/91354 "2017-07-04T18:43:36Z")

</div>

The system.diskio just outputs metrics below: { "io": { "time": 4130 }, "name": "vda1", "read": { "bytes": 204800, "count": 36, "time": 960 }, "write": { …

---

## [How to skip kibana discover and directly go to dashboard, and use the index pattern I created by directly using elasticsearch APIs](https://discuss.elastic.co/t/how-to-skip-kibana-discover-and-directly-go-to-dashboard-and-use-the-index-pattern-i-created-by-directly-using-elasticsearch-apis/89822)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 2\
**Last updated:** [June 20, 2017, 5:14pm UTC](https://discuss.elastic.co/t/how-to-skip-kibana-discover-and-directly-go-to-dashboard-and-use-the-index-pattern-i-created-by-directly-using-elasticsearch-apis/89822 "2017-06-20T17:14:56Z")

</div>

I am trying to import the index-pattern as well as visualization object, dashboard etc not going through kibana GUI but elasticsearch API. After I have the data ready(The .kibana index is fully populated). It keep asking…

---

## [Is logstash-output-influxdb plugin InfluxDB V2 support?](https://discuss.elastic.co/t/is-logstash-output-influxdb-plugin-influxdb-v2-support/323985)

<div class="topic-metadata">

**Author:** [@AlanChan](https://discuss.elastic.co/u/AlanChan)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 2:22am UTC](https://discuss.elastic.co/t/is-logstash-output-influxdb-plugin-influxdb-v2-support/323985 "2023-01-26T02:22:00Z")

</div>

Hi guys I notice that it seems no available output plugin for InfluxDB V2. Is logstash-output-influxdb plugin really being maintained? If the plugin isn't maintained actively, who can I contact to request to update th…

---

## [Sort both hits and inner hits](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493)

<div class="topic-metadata">

**Author:** [@BrunoSkoon](https://discuss.elastic.co/u/BrunoSkoon)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 11:00am UTC](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493 "2022-10-26T11:00:26Z")

</div>

Hello. I'm using Elasticsearch 8.4.3 and I need help to sort both the hits and inner hits. My data set is a list of product types, each containing a list of products. Each product then contains a price object with field…

---

## [Dynamically creating a Kibana dashboard](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903)

<div class="topic-metadata">

**Author:** [@blackberrySherbet](https://discuss.elastic.co/u/blackberrySherbet)\
**Replies:** 1\
**Last updated:** [June 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903 "2021-06-03T18:00:00Z")

</div>

I want my users to run a script (bash or python or anything) with some data as input and that script should create a new Kibana dashboard for the user to visualize the data they gave the script as input. How can I do thi…

---

## [Data stream index Rollover exception "..names need to be unique.."](https://discuss.elastic.co/t/data-stream-index-rollover-exception-names-need-to-be-unique/272239)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 9:38am UTC](https://discuss.elastic.co/t/data-stream-index-rollover-exception-names-need-to-be-unique/272239 "2021-05-06T09:38:57Z")

</div>

Hi, We have an index .ds-logs-network.azure-default-000001 that is returning: illegal\_state\_exception: index, alias, and data stream names need to be unique, but the following duplicates were found \[logs-network.azure-…

---

## [Key value pair](https://discuss.elastic.co/t/key-value-pair/163260)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 8:31pm UTC](https://discuss.elastic.co/t/key-value-pair/163260 "2019-01-07T20:31:09Z")

</div>

Good afternoon. I am trying to use KVP to separate the key value pair in my "Message" field. "{"EventTime":"2019-01-07 18:20:42.826361Z","Hostname":"186590cbd0f7","Message":"EPS: 99","EventReceivedTime":"2019-01-07 18:…

---

## [Using global variables or reading values from a file](https://discuss.elastic.co/t/using-global-variables-or-reading-values-from-a-file/142618)

<div class="topic-metadata">

**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\
**Replies:** 1\
**Last updated:** [August 1, 2018, 5:56pm UTC](https://discuss.elastic.co/t/using-global-variables-or-reading-values-from-a-file/142618 "2018-08-01T17:56:29Z")

</div>

Hello everybody!. I was wondering if there's a way to either define global variables that I can use from the output.conf file or read them from a given file. My scenario is the following, in 201-output.conf file I have …

---

## [How to change the timeout about process published state default 30s](https://discuss.elastic.co/t/how-to-change-the-timeout-about-process-published-state-default-30s/98463)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 1\
**Last updated:** [August 27, 2017, 2:50pm UTC](https://discuss.elastic.co/t/how-to-change-the-timeout-about-process-published-state-default-30s/98463 "2017-08-27T14:50:55Z")

</div>

timed out waiting for all nodes to process published state timed out waiting for all nodes to process published state \[43\] (timeout \[30s\], pending nodes:

---

## [Get Previous and Next document id's with a filtered query](https://discuss.elastic.co/t/get-previous-and-next-document-ids-with-a-filtered-query/31877)

<div class="topic-metadata">

**Author:** [@niemyjski](https://discuss.elastic.co/u/niemyjski)\
**Replies:** 0\
**Last updated:** [October 8, 2015, 7:55pm UTC](https://discuss.elastic.co/t/get-previous-and-next-document-ids-with-a-filtered-query/31877 "2015-10-08T19:55:54Z")

</div>

In my app I return the document (retrieved by id) and also return the previous and next document ids (based on some criteria) in the header like so: Link:\<http://localhost:50000/api/v2/events/5601464ea4abbd49f431fe86\>;…

---

## [Disable inner\_hit fields from search api response](https://discuss.elastic.co/t/disable-inner-hit-fields-from-search-api-response/239814)

<div class="topic-metadata">

**Author:** [@shusson](https://discuss.elastic.co/u/shusson)\
**Replies:** 2\
**Last updated:** [July 3, 2020, 2:29pm UTC](https://discuss.elastic.co/t/disable-inner-hit-fields-from-search-api-response/239814 "2020-07-03T14:29:29Z")

</div>

Is it possible to disable certain inner\_hit fields in the response from the Search API. We have many hits and it is taking up unnecessary memory. e.g we would like to ES to remove the commented out fields from the respo…

---

## [Elastic 5.6.4 allocated primary and replica shard to same data node causing ES health check issue](https://discuss.elastic.co/t/elastic-5-6-4-allocated-primary-and-replica-shard-to-same-data-node-causing-es-health-check-issue/130068)

<div class="topic-metadata">

**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\
**Replies:** 5\
**Last updated:** [May 25, 2018, 6:31am UTC](https://discuss.elastic.co/t/elastic-5-6-4-allocated-primary-and-replica-shard-to-same-data-node-causing-es-health-check-issue/130068 "2018-05-25T06:31:49Z")

</div>

Recently for the first time we hit the scenario where ES health was yellow because of shards allocated to same data node Summary: ES Version: 5.6.4 Cluster has 14 nodes, 2 gw and 11 data and 1 utility node New indexe…

---

## [Blank Management Page Kibana](https://discuss.elastic.co/t/blank-management-page-kibana/78956)

<div class="topic-metadata">

**Author:** [@Antwan\_Van\_Der\_Stap](https://discuss.elastic.co/u/Antwan_Van_Der_Stap)\
**Replies:** 5\
**Last updated:** [March 18, 2017, 10:10am UTC](https://discuss.elastic.co/t/blank-management-page-kibana/78956 "2017-03-18T10:10:11Z")

</div>

banging my head against the wall ... All services seem to work - seeing this in multiple browsers

---

## [ES 6.4 s3 feature with endpoint as hostname](https://discuss.elastic.co/t/es-6-4-s3-feature-with-endpoint-as-hostname/194372)

<div class="topic-metadata">

**Author:** [@sai\_bharanisrikanth](https://discuss.elastic.co/u/sai_bharanisrikanth)\
**Replies:** 6\
**Last updated:** [August 14, 2019, 11:58am UTC](https://discuss.elastic.co/t/es-6-4-s3-feature-with-endpoint-as-hostname/194372 "2019-08-14T11:58:20Z")

</div>

Hello Team, I am using ES 6.4 version along with S3 plugin v 6.4.3 installed in the cluster, and have configured end point to be minio service host name which is internal to the cluster. Configuration: s3.client.defa…

---

## [Adobe Acrobat Reader could not open 'dashboard.pdf'](https://discuss.elastic.co/t/adobe-acrobat-reader-could-not-open-dashboard-pdf/105234)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 6\
**Last updated:** [October 26, 2017, 5:41am UTC](https://discuss.elastic.co/t/adobe-acrobat-reader-could-not-open-dashboard-pdf/105234 "2017-10-26T05:41:29Z")

</div>

Hi All, I created a watcher with an email action to generate a dashboard pdf and send that out to an email address. In principal this works however the pdf cannot be opened with the error: Adobe Acrobat Reader could n…

---

## [What are the best practices around increasing the replica count drastically](https://discuss.elastic.co/t/what-are-the-best-practices-around-increasing-the-replica-count-drastically/220936)

<div class="topic-metadata">

**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\
**Replies:** 8\
**Last updated:** [February 26, 2020, 8:04pm UTC](https://discuss.elastic.co/t/what-are-the-best-practices-around-increasing-the-replica-count-drastically/220936 "2020-02-26T20:04:03Z")

</div>

I want to understand the implications of drastically increasing ReplicaCount eg:0-\>5 on Indexing requests. Since we have only 1 available copy, and the quorum has suddenly changed to 4 (n/2+1) the indexing requests are…

---

## [Gauge Visualization - Exclude docs where field is empty](https://discuss.elastic.co/t/gauge-visualization-exclude-docs-where-field-is-empty/154491)

<div class="topic-metadata">

**Author:** [@Speedman](https://discuss.elastic.co/u/Speedman)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 11:30am UTC](https://discuss.elastic.co/t/gauge-visualization-exclude-docs-where-field-is-empty/154491 "2018-10-31T11:30:03Z")

</div>

Updated Question We've been able to identify the correct Painless script for our scripted fields and the correct metric type (average) to display the data the way we want to see it. The problem we're still having is tha…

---

## [@timestamp is not getting updated through date filter. getting \_dateparsefailure](https://discuss.elastic.co/t/timestamp-is-not-getting-updated-through-date-filter-getting-dateparsefailure/137784)

<div class="topic-metadata">

**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\
**Replies:** 3\
**Last updated:** [July 9, 2018, 3:14pm UTC](https://discuss.elastic.co/t/timestamp-is-not-getting-updated-through-date-filter-getting-dateparsefailure/137784 "2018-07-09T15:14:09Z")

</div>

I have following logstash configuration for Websphere App server SystemErr logs. As per the grok pattern, I do see the logs are getting parsed, but Overriding @timestamp is not working. I'm getting \_dateparsefailure. h…

---

## [Transport response handler not found of id](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id/129290)

<div class="topic-metadata">

**Author:** [@Sakalya](https://discuss.elastic.co/u/Sakalya)\
**Replies:** 3\
**Last updated:** [April 24, 2018, 12:02pm UTC](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id/129290 "2018-04-24T12:02:14Z")

</div>

Hello, I am trying to connect to ElasticSearch 5.1.1 and my code is working intermittently to isnert records into ElasticSearch.It is a single node default settings cluster.I am continuously getting Transport response …

---

## [Missing Data - no warnings in logs - where is the bottleneck?](https://discuss.elastic.co/t/missing-data-no-warnings-in-logs-where-is-the-bottleneck/81961)

<div class="topic-metadata">

**Author:** [@ChrisJacobs](https://discuss.elastic.co/u/ChrisJacobs)\
**Replies:** 3\
**Last updated:** [May 23, 2017, 12:57pm UTC](https://discuss.elastic.co/t/missing-data-no-warnings-in-logs-where-is-the-bottleneck/81961 "2017-05-23T12:57:34Z")

</div>

Hello everyone, I tried to set up a netflow analytic platform for my network but I think some data is missing. I searched in my logs and haven't found any warnings or errors. I use a Cent OS 6.8 Server with 32 GB Ram …

---

## [Throttle Elasticsearch warmer threads](https://discuss.elastic.co/t/throttle-elasticsearch-warmer-threads/81333)

<div class="topic-metadata">

**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 5:48pm UTC](https://discuss.elastic.co/t/throttle-elasticsearch-warmer-threads/81333 "2017-04-11T17:48:18Z")

</div>

Hi, I am evaluating my cluster performance after migrating to 5.2. Everything looks fine from indexing to search to updates in terms of thread pools. whenever I run the thread\_pool cat API all the queues are empty or h…

---

## [Elastic search not ingesting data](https://discuss.elastic.co/t/elastic-search-not-ingesting-data/57197)

<div class="topic-metadata">

**Author:** [@James\_Kazie](https://discuss.elastic.co/u/James_Kazie)\
**Replies:** 3\
**Last updated:** [August 5, 2016, 10:36pm UTC](https://discuss.elastic.co/t/elastic-search-not-ingesting-data/57197 "2016-08-05T22:36:08Z")

</div>

I suspect i am doing something blatantly wrong. Logstash appears to be going through my data properly and showing the 5000 data points being sent to elastic search. However when i look up the index in elastic search it s…

---

## [Dynamically add keyword field to text field](https://discuss.elastic.co/t/dynamically-add-keyword-field-to-text-field/272427)

<div class="topic-metadata">

**Author:** [@peterol](https://discuss.elastic.co/u/peterol)\
**Replies:** 1\
**Last updated:** [May 8, 2021, 6:47pm UTC](https://discuss.elastic.co/t/dynamically-add-keyword-field-to-text-field/272427 "2021-05-08T18:47:47Z")

</div>

Hello everyone, I have various fields i want to index as text and keyword from Logstash. I'm using an index template with static mappings to define data types and analyzers for my fields that look like these: "field.n…

[Previous page](https://discuss.elastic.co/top.md?page=1174&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1176&per_page=50&period=all)
