# Top

**URL:** https://discuss.elastic.co/top.md?page=1183&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1184

---

## [Change the order of my chart legend](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197)

<div class="topic-metadata">

**Author:** [@yanisyes](https://discuss.elastic.co/u/yanisyes)\
**Replies:** 2\
**Last updated:** [November 4, 2020, 9:56am UTC](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197 "2020-11-04T09:56:59Z")

</div>

Hi, Is there a way to make the legend appear in the order that I want (I'm using Kibana 7.6.1): I want the legend to appear in this order: \[0\] 0 sec \[1\] 1 sec \[2\] 2 sec \[3\] 3-4 sec \[4\] 5-6 sec \[5\] 7-9 sec \[6\]…

---

## [Grok filter succeeds in unit test, in grok debugger, but fails in production](https://discuss.elastic.co/t/grok-filter-succeeds-in-unit-test-in-grok-debugger-but-fails-in-production/51685)

<div class="topic-metadata">

**Author:** [@aadamovich](https://discuss.elastic.co/u/aadamovich)\
**Replies:** 2\
**Last updated:** [June 14, 2016, 6:45pm UTC](https://discuss.elastic.co/t/grok-filter-succeeds-in-unit-test-in-grok-debugger-but-fails-in-production/51685 "2016-06-14T18:45:46Z")

</div>

Hi! I have the following filter in Logstash: filter { if \[type\] == "weblogic" { multiline { pattern =\> "^####" negate =\> true what =\> previous } grok { match …

---

## [Watcher email action: How to include search query in email body or attachment](https://discuss.elastic.co/t/watcher-email-action-how-to-include-search-query-in-email-body-or-attachment/48723)

<div class="topic-metadata">

**Author:** [@eeivin](https://discuss.elastic.co/u/eeivin)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 4:13pm UTC](https://discuss.elastic.co/t/watcher-email-action-how-to-include-search-query-in-email-body-or-attachment/48723 "2016-04-29T16:13:26Z")

</div>

I have the following email action "actions" : { "watcher\_email" : { "email": { "account": "outlook\_account"…

---

## [Marvel-agent plugin doesn't function on elasticsearch 2.1.1](https://discuss.elastic.co/t/marvel-agent-plugin-doesnt-function-on-elasticsearch-2-1-1/40264)

<div class="topic-metadata">

**Author:** [@Geert\_Jan\_Brits](https://discuss.elastic.co/u/Geert_Jan_Brits)\
**Replies:** 2\
**Last updated:** [January 27, 2016, 5:40pm UTC](https://discuss.elastic.co/t/marvel-agent-plugin-doesnt-function-on-elasticsearch-2-1-1/40264 "2016-01-27T17:40:03Z")

</div>

After installing marvel-agent (default settings) and going to \<host\>:9200/\_plugin/marvel-agent/ just gives me a blank page. It's the same response when entering any other made up url, e.g.: \<host\>:9200/\_plugin/something-…

---

## [Perform Group By - Exact String](https://discuss.elastic.co/t/perform-group-by-exact-string/24463)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 2\
**Last updated:** [June 26, 2015, 9:42pm UTC](https://discuss.elastic.co/t/perform-group-by-exact-string/24463 "2015-06-26T21:42:19Z")

</div>

Hi, I am trying to perform group by on a string field. But as I understand, strings are tokenized and hence not able group by on the exact string. I found that it has to do with analyzer. Is there a way I can do that? …

---

## [Need grok pattern for logstash](https://discuss.elastic.co/t/need-grok-pattern-for-logstash/305835)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 6\
**Last updated:** [June 1, 2022, 6:09pm UTC](https://discuss.elastic.co/t/need-grok-pattern-for-logstash/305835 "2022-06-01T18:09:18Z")

</div>

Hi All, I need to use grok filter to parse the following log pattern: \[2022-05-24T02:15:20.979+0000\]\[info\]\[gc \] GC(187) Pause Full (G1 Evacuation Pause) 2559M-\>1698M(2560M) 724.899ms The idea is to capture…

---

## [How to combine multiple conditional query in one query](https://discuss.elastic.co/t/how-to-combine-multiple-conditional-query-in-one-query/354033)

<div class="topic-metadata">

**Author:** [@amrswalha](https://discuss.elastic.co/u/amrswalha)\
**Replies:** 7\
**Last updated:** [March 28, 2024, 7:12pm UTC](https://discuss.elastic.co/t/how-to-combine-multiple-conditional-query-in-one-query/354033 "2024-03-28T19:12:38Z")

</div>

Hello, I'm new to using Elasticsearch. I'm using the .NET client version 8.12, I'm trying to send a query based on parameters. Only add the condition if the parameter value exists. Below is the code for the query: publi…

---

## [How to customize navbar logo in 7.12.1](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170)

<div class="topic-metadata">

**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\
**Replies:** 7\
**Last updated:** [June 22, 2021, 6:47pm UTC](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170 "2021-06-22T18:47:38Z")

</div>

hello community i want to change the navbar logo that is elastic how can I do it in 7.12.1.

---

## [Indexing From MS Excel](https://discuss.elastic.co/t/indexing-from-ms-excel/95649)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 8:12am UTC](https://discuss.elastic.co/t/indexing-from-ms-excel/95649 "2017-08-03T08:12:43Z")

</div>

HI All , I want to indexing data from MS Excel to Elastic search . My project is read data from XL sheet and display it in Kibana . Kibana visualizing the data of Live servers , Users , alerts in an Infra . I know ho…

---

## [Sysctl settings?](https://discuss.elastic.co/t/sysctl-settings/71576)

<div class="topic-metadata">

**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\
**Replies:** 1\
**Last updated:** [January 17, 2017, 11:03pm UTC](https://discuss.elastic.co/t/sysctl-settings/71576 "2017-01-17T23:03:12Z")

</div>

What are some good /etc/sysctl.conf settings to consider when using ES? I don't set recycle or reuse tcp\_fin\_timeout to 15. swappiness to 0 net.core.somaxconn=1024 vm.max\_map\_count=262144 Turn off ipv6 - et.ipv6.conf.…

---

## [Data Table - adding row numbers](https://discuss.elastic.co/t/data-table-adding-row-numbers/66773)

<div class="topic-metadata">

**Author:** [@linuxdev](https://discuss.elastic.co/u/linuxdev)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 10:58pm UTC](https://discuss.elastic.co/t/data-table-adding-row-numbers/66773 "2016-11-22T22:58:24Z")

</div>

Is it at all possible to add row numbers to DataTable? Im doing count aggregation using terms and a row number would then simply represent a rank. Or is there a different way of showing rank?

---

## [Filebeat -\> Exiting: failed reading meta file: unexpected end of JSON input](https://discuss.elastic.co/t/filebeat-exiting-failed-reading-meta-file-unexpected-end-of-json-input/318535)

<div class="topic-metadata">

**Author:** [@Dissonance](https://discuss.elastic.co/u/Dissonance)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 10:21am UTC](https://discuss.elastic.co/t/filebeat-exiting-failed-reading-meta-file-unexpected-end-of-json-input/318535 "2022-11-10T10:21:32Z")

</div>

Good afternoon, OS: Ubuntu 22.04 I tried Filebeat (version 8.5 and 7.17.1). Both versions cannot be started with the error: {"log.level":"error","@timestamp":"2022-11-09T11:28:21.598Z","log.origin":{"file.name":"insta…

---

## [ElasticEndpoint service registration in Windows stuck after uninstall](https://discuss.elastic.co/t/elasticendpoint-service-registration-in-windows-stuck-after-uninstall/301773)

<div class="topic-metadata">

**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 3:17pm UTC](https://discuss.elastic.co/t/elasticendpoint-service-registration-in-windows-stuck-after-uninstall/301773 "2022-04-06T15:17:57Z")

</div>

Hi, after removing the Elastic Agent with Endpoint Security the service registration of ElasticEndpoint is stuck in Windows. In services I can see Elastic Endpoint, with "Failed to read description. Error code 2". Also …

---

## [Web Crawler Failed HTTP request: Unable to request "\< domain \>" because it resolved to only private/invalid addresses](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses/270631)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 3\
**Last updated:** [April 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses/270631 "2021-04-20T15:29:56Z")

</div>

When I try to run the web crawler against a site we host, it fails with this error: Failed HTTP request: Unable to request "\< domain \>" because it resolved to only private/invalid addresses The site in question would…

---

## [Configure GCP bucket for snapshot](https://discuss.elastic.co/t/configure-gcp-bucket-for-snapshot/156150)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 3\
**Last updated:** [November 11, 2018, 8:31am UTC](https://discuss.elastic.co/t/configure-gcp-bucket-for-snapshot/156150 "2018-11-11T08:31:13Z")

</div>

Hi , I have ES cluster running on GCP instances. I am trying to configure GCP bucket for snapshots but unable to add gcp service-account.json (credential file to ES keystore ) can someone advise on this , how to add it …

---

## [Possible to specify start and end time as part of schedule?](https://discuss.elastic.co/t/possible-to-specify-start-and-end-time-as-part-of-schedule/126747)

<div class="topic-metadata">

**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\
**Replies:** 3\
**Last updated:** [April 5, 2018, 6:28am UTC](https://discuss.elastic.co/t/possible-to-specify-start-and-end-time-as-part-of-schedule/126747 "2018-04-05T06:28:07Z")

</div>

I am trying to schedule a job that runs every 5 minutes starting at 1 a.m. and ending at 11 p.m. Here's the expression I am planning to use, 0 0/5 1-23 ? \* \* \* I have minimal knowledge in cron but based on the JDBC inp…

---

## [Clear notifications from watcher](https://discuss.elastic.co/t/clear-notifications-from-watcher/98704)

<div class="topic-metadata">

**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\
**Replies:** 3\
**Last updated:** [August 30, 2017, 7:40am UTC](https://discuss.elastic.co/t/clear-notifications-from-watcher/98704 "2017-08-30T07:40:34Z")

</div>

Is there a way to send clear notifications on watchers that i have setup? i have created an index for watcher history but can’t seem to think up a way to get clears to go out.

---

## [Cluster setup with ELK 5.0.1](https://discuss.elastic.co/t/cluster-setup-with-elk-5-0-1/66491)

<div class="topic-metadata">

**Author:** [@sayalee](https://discuss.elastic.co/u/sayalee)\
**Replies:** 3\
**Last updated:** [December 8, 2016, 12:53am UTC](https://discuss.elastic.co/t/cluster-setup-with-elk-5-0-1/66491 "2016-12-08T00:53:44Z")

</div>

I was trying to create a cluster with 3 nodes having ELK 5.0 on Redhat server The following are the steps which I have followed: • I have used Ansible and Tinc VPN for security purpose. • Binded to my VPN IP (192.…

---

## [Official Python client vs PyES](https://discuss.elastic.co/t/official-python-client-vs-pyes/14086)

<div class="topic-metadata">

**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\
**Replies:** 3\
**Last updated:** [October 27, 2013, 2:04pm UTC](https://discuss.elastic.co/t/official-python-client-vs-pyes/14086 "2013-10-27T14:04:14Z")

</div>

Good day, I've noticed that official Python clientfor Elastic Search was announced some time ago. Till now I was using PyES and was pretty happy with it. Quick looking at the new clients, the API looks very sim…

---

## [95th percentile aggregation for time series like documents](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331)

<div class="topic-metadata">

**Author:** [@nroccolsw](https://discuss.elastic.co/u/nroccolsw)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331 "2020-05-13T14:22:52Z")

</div>

Hi there, I am struggling with elastic search (and finally Grafana) to display the 95th percentile value for a given time period. Consider the following setup: I have an an index called traffic: POST /traffic/\_search…

---

## [One problem of dynamic mapping "parent-child"](https://discuss.elastic.co/t/one-problem-of-dynamic-mapping-parent-child/56972)

<div class="topic-metadata">

**Author:** [@yangfeiran](https://discuss.elastic.co/u/yangfeiran)\
**Replies:** 4\
**Last updated:** [August 2, 2016, 8:06am UTC](https://discuss.elastic.co/t/one-problem-of-dynamic-mapping-parent-child/56972 "2016-08-02T08:06:49Z")

</div>

Hi; The situation here is that I was trying to map some types into "parent-child" relationship. When I use this command below, it works fine::slight\_smile: curl -XPOST 'http://localhost:9200/grandchildren' -d '{ …

---

## [Why can't I see the filters I create in Kibana 4.3.1 ?!](https://discuss.elastic.co/t/why-cant-i-see-the-filters-i-create-in-kibana-4-3-1/40391)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 4\
**Last updated:** [January 29, 2016, 12:48pm UTC](https://discuss.elastic.co/t/why-cant-i-see-the-filters-i-create-in-kibana-4-3-1/40391 "2016-01-29T12:48:25Z")

</div>

Kibana 4.3.1 Build 9517. The filters worked great for me, but now, whenever I add a new Filter in the Discovery pane, the filtering takes place but I can't see the filter widget under the search bar, where it should nor…

---

## [Installing plugin in Kibana 7.8](https://discuss.elastic.co/t/installing-plugin-in-kibana-7-8/260155)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 6\
**Last updated:** [January 11, 2021, 5:08pm UTC](https://discuss.elastic.co/t/installing-plugin-in-kibana-7-8/260155 "2021-01-11T17:08:20Z")

</div>

I've been working on creating a custom plugin in Kibana 7.8. I've got it working but I'm having problems doing a yarn build so I can install the plugin on our dev server. Following the steps lined out here: https://githu…

---

## [SNMP timeout when run from a docker container](https://discuss.elastic.co/t/snmp-timeout-when-run-from-a-docker-container/287805)

<div class="topic-metadata">

**Author:** [@davegreen](https://discuss.elastic.co/u/davegreen)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 2:06pm UTC](https://discuss.elastic.co/t/snmp-timeout-when-run-from-a-docker-container/287805 "2021-10-27T14:06:58Z")

</div>

I'm using Logstash 7.15.1 on both Centos 7.7 and a docker container with the same configuration (below). When running from Centos, everything works as expected, but on a docker container (in Kubernetes), the SNMP plugin…

---

## [Configuration of logstash for forwarding winlogbeats to a syslog server](https://discuss.elastic.co/t/configuration-of-logstash-for-forwarding-winlogbeats-to-a-syslog-server/252195)

<div class="topic-metadata">

**Author:** [@jjoseph8008](https://discuss.elastic.co/u/jjoseph8008)\
**Replies:** 2\
**Last updated:** [October 16, 2020, 2:54am UTC](https://discuss.elastic.co/t/configuration-of-logstash-for-forwarding-winlogbeats-to-a-syslog-server/252195 "2020-10-16T02:54:07Z")

</div>

I am using winlogbeats to send log files from a windows box to logstash. My logstash is collecting Linux syslogs over port 514,forwarding them to a local NGINX service that will then forward it to our SIEM syslog server …

---

## [Calculating new fields using ruby filter](https://discuss.elastic.co/t/calculating-new-fields-using-ruby-filter/237163)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 9:13pm UTC](https://discuss.elastic.co/t/calculating-new-fields-using-ruby-filter/237163 "2020-06-15T21:13:28Z")

</div>

Hi evryone i tried o use ruby filter to calculate 3 new fields: The first is the total number of observation in may table. the second id the number of observations where(Contrainte\>=-78),Contrainte is a field in my cs…

---

## [TreeMap Vega trouble to get data of index-pattern](https://discuss.elastic.co/t/treemap-vega-trouble-to-get-data-of-index-pattern/221271)

<div class="topic-metadata">

**Author:** [@daniel.velasco](https://discuss.elastic.co/u/daniel.velasco)\
**Replies:** 2\
**Last updated:** [March 13, 2020, 8:47am UTC](https://discuss.elastic.co/t/treemap-vega-trouble-to-get-data-of-index-pattern/221271 "2020-03-13T08:47:39Z")

</div>

Hi, i have some problems to extract data from index-pattern in order to create a treemap in vega visualization. I have the next data in the index: { "\_index" : "aml360-vega", "\_type" : "\_doc", "\_id" : "1", "\_score" : 1…

---

## [How to index the logstash filter and filter not showing up in Kibana](https://discuss.elastic.co/t/how-to-index-the-logstash-filter-and-filter-not-showing-up-in-kibana/55277)

<div class="topic-metadata">

**Author:** [@Preeti\_Sharma](https://discuss.elastic.co/u/Preeti_Sharma)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 5:50am UTC](https://discuss.elastic.co/t/how-to-index-the-logstash-filter-and-filter-not-showing-up-in-kibana/55277 "2016-07-13T05:50:04Z")

</div>

Here is my logstash conf input { file { path =\> '/home/logs/corporate\_access.log' } } filter { grok { match =\> { "message" =\> "User id: %{NUMBER:UserId}, Client id:%{NUMBER:ClientId}" } …

---

## [Kibana with HAProxy, problem to see the web](https://discuss.elastic.co/t/kibana-with-haproxy-problem-to-see-the-web/41765)

<div class="topic-metadata">

**Author:** [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\
**Replies:** 2\
**Last updated:** [February 15, 2016, 5:12pm UTC](https://discuss.elastic.co/t/kibana-with-haproxy-problem-to-see-the-web/41765 "2016-02-15T17:12:17Z")

</div>

I have installed Kibana an HAProxy to have two Kibanas with the same ES and have HA. I can access both Kibanas though its URL correctly but when I access though the HAProxy URL I can see the web but it doesn't work corr…

---

## [Logstash Tempalte Definition - Index Creation Fails](https://discuss.elastic.co/t/logstash-tempalte-definition-index-creation-fails/36299)

<div class="topic-metadata">

**Author:** [@inzanez](https://discuss.elastic.co/u/inzanez)\
**Replies:** 2\
**Last updated:** [December 3, 2015, 3:47pm UTC](https://discuss.elastic.co/t/logstash-tempalte-definition-index-creation-fails/36299 "2015-12-03T15:47:02Z")

</div>

Hello I'm currently working with the latest version of ES, and just tried to create a custom template. I'm trying to define a 'standard' log source mapping template for my environment that I can use. So I would like to…

---

## [Is there a way to ignore the aggregation value in metrics like 'min\_doc\_count' in term aggregation?](https://discuss.elastic.co/t/is-there-a-way-to-ignore-the-aggregation-value-in-metrics-like-min-doc-count-in-term-aggregation/116421)

<div class="topic-metadata">

**Author:** [@bglee](https://discuss.elastic.co/u/bglee)\
**Replies:** 0\
**Last updated:** [January 22, 2018, 2:36am UTC](https://discuss.elastic.co/t/is-there-a-way-to-ignore-the-aggregation-value-in-metrics-like-min-doc-count-in-term-aggregation/116421 "2018-01-22T02:36:41Z")

</div>

Hi, I am bglee. GET myIndex/\_search { "size":0, "query":{ ... }, "aggs":{ "only\_values\_​​return\_greater\_than\_10":{ "sum":{ "field":"only\_values\_​​return\_greater\_…

---

## [Transform not updating documents](https://discuss.elastic.co/t/transform-not-updating-documents/318209)

<div class="topic-metadata">

**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\
**Replies:** 8\
**Last updated:** [November 16, 2022, 7:50am UTC](https://discuss.elastic.co/t/transform-not-updating-documents/318209 "2022-11-16T07:50:48Z")

</div>

Hi I have a continious transform running with the following query applied which should only allow documents with the status open or closed in the trasnform destination however when documents in these status are updated …

---

## [SearchUI issues with reverse proxy](https://discuss.elastic.co/t/searchui-issues-with-reverse-proxy/244390)

<div class="topic-metadata">

**Author:** [@turekg](https://discuss.elastic.co/u/turekg)\
**Replies:** 8\
**Last updated:** [August 14, 2020, 4:34pm UTC](https://discuss.elastic.co/t/searchui-issues-with-reverse-proxy/244390 "2020-08-14T16:34:39Z")

</div>

Hello, I am using App Search instance and a user interface based on elastic SearchUi example. I am reverse proxying the node.js app and the connections to the App Search API with Apache2. I cannot get this to work. I g…

---

## [Syslog Input Multiline Fail](https://discuss.elastic.co/t/syslog-input-multiline-fail/119253)

<div class="topic-metadata">

**Author:** [@htechno](https://discuss.elastic.co/u/htechno)\
**Replies:** 8\
**Last updated:** [February 14, 2018, 9:08am UTC](https://discuss.elastic.co/t/syslog-input-multiline-fail/119253 "2018-02-14T09:08:29Z")

</div>

Hi there, The microtik sends syslog messages of one RADIUS event in several rows |26|0.099429|10.147.99.3|10.147.99.9|Syslog|137|DAEMON.DEBUG: Feb 8 18:35:18 X5\_tihvinskaya3 sending Accounting-Request with id 34 to 18…

---

## [Creating a TSVB chart with unique count of ID's across all fields in Kibana](https://discuss.elastic.co/t/creating-a-tsvb-chart-with-unique-count-of-ids-across-all-fields-in-kibana/220155)

<div class="topic-metadata">

**Author:** [@dmomi](https://discuss.elastic.co/u/dmomi)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 10:22am UTC](https://discuss.elastic.co/t/creating-a-tsvb-chart-with-unique-count-of-ids-across-all-fields-in-kibana/220155 "2020-02-20T10:22:28Z")

</div>

Hi I am new to Kibana and TSVB. I am trying to create a filter ratio using unique number of records for transaction\_status = 2 / \*. I am able to find out till unique no of records using cardinality of ID column not the …

---

## [Advice for a beginner](https://discuss.elastic.co/t/advice-for-a-beginner/262749)

<div class="topic-metadata">

**Author:** [@Shivansh\_Mishra](https://discuss.elastic.co/u/Shivansh_Mishra)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 11:59am UTC](https://discuss.elastic.co/t/advice-for-a-beginner/262749 "2021-01-31T11:59:41Z")

</div>

Hi all, I am trying to learn java and want to know about how the enterprise code works so I was thinking of contributing to elastic search so that I can get some mentorship. I am well versed in c# and I wanted to know …

---

## [New to Kibana, not sure how to create a horizontal bar chart](https://discuss.elastic.co/t/new-to-kibana-not-sure-how-to-create-a-horizontal-bar-chart/108443)

<div class="topic-metadata">

**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\
**Replies:** 1\
**Last updated:** [November 20, 2017, 7:42pm UTC](https://discuss.elastic.co/t/new-to-kibana-not-sure-how-to-create-a-horizontal-bar-chart/108443 "2017-11-20T19:42:39Z")

</div>

I'm just getting started with Kibana, I'm analysing log files, and in any given log entry there are 2 pieces of information I'm interested in. One is called a "query name" and the other is "execute time". I've already s…

---

## [Marvel error: ArrayIndexOutOfBoundsException](https://discuss.elastic.co/t/marvel-error-arrayindexoutofboundsexception/54091)

<div class="topic-metadata">

**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 2:12pm UTC](https://discuss.elastic.co/t/marvel-error-arrayindexoutofboundsexception/54091 "2016-06-29T14:12:27Z")

</div>

I saw this in our Elasticsearch logs this morning and was wondering if there is somewhere more appropriate to report the issue (it doesn't seem to have caused anything bad to actually happen) ... \[2016-06-27 09:14:18,9…

---

## [What is the ElasticMachine GitHub Bot?](https://discuss.elastic.co/t/what-is-the-elasticmachine-github-bot/265098)

<div class="topic-metadata">

**Author:** [@alex-treebeard](https://discuss.elastic.co/u/alex-treebeard)\
**Replies:** 2\
**Last updated:** [February 24, 2021, 4:16pm UTC](https://discuss.elastic.co/t/what-is-the-elasticmachine-github-bot/265098 "2021-02-24T16:16:12Z")

</div>

Hey folks, I've been researching tools for monitoring flaky tests and noticed some pretty neat activity with elasticmachine. By the looks of it this bot does a ton of operational work for elastic.co, and is closed sour…

---

## [Filter with aggregate value in Query DSL](https://discuss.elastic.co/t/filter-with-aggregate-value-in-query-dsl/251915)

<div class="topic-metadata">

**Author:** [@coline](https://discuss.elastic.co/u/coline)\
**Replies:** 5\
**Last updated:** [October 15, 2020, 9:07am UTC](https://discuss.elastic.co/t/filter-with-aggregate-value-in-query-dsl/251915 "2020-10-15T09:07:26Z")

</div>

Hi everybody, I'm kind of new on elastic and I'm trying to apply this filter on my index : cpu \> 0.6 x max\_daily\_cpu. I succeed to create a query to get the max daily CPU : POST /\_search { "size": 0, "aggs"…

---

## [How to get rid of new field?](https://discuss.elastic.co/t/how-to-get-rid-of-new-field/47494)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 5\
**Last updated:** [April 19, 2016, 8:11am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-new-field/47494 "2016-04-19T08:11:35Z")

</div>

Hi, I have created eventLogTime field in logstash indexer and assign timestamp form the log. I have provided list of timestamp while doing this. Now the problem is when we are adding applications in centralized logging,…

---

## [Master node hangs when multiple data nodes are shutdown at the same time](https://discuss.elastic.co/t/master-node-hangs-when-multiple-data-nodes-are-shutdown-at-the-same-time/884)

<div class="topic-metadata">

**Author:** [@emptyemail](https://discuss.elastic.co/u/emptyemail)\
**Replies:** 5\
**Last updated:** [May 20, 2015, 10:43pm UTC](https://discuss.elastic.co/t/master-node-hangs-when-multiple-data-nodes-are-shutdown-at-the-same-time/884 "2015-05-20T22:43:09Z")

</div>

When testing the failure of 5 out of 20 nodes, all master nodes became unresponsive, looking at the logs prior to them becoming unresponsive they show many NodeNotConnectedException for nodes that were NOT shutdown. Why …

---

## [Xpack anomaly detect theory](https://discuss.elastic.co/t/xpack-anomaly-detect-theory/138995)

<div class="topic-metadata">

**Author:** [@Eric\_Yin](https://discuss.elastic.co/u/Eric_Yin)\
**Replies:** 3\
**Last updated:** [July 10, 2018, 10:31am UTC](https://discuss.elastic.co/t/xpack-anomaly-detect-theory/138995 "2018-07-10T10:31:47Z")

</div>

Dear X-Pack developers, I have already checked the open source code of Xpack for personal interest, I am not sure which kinds of algorithm is used for machine learning and I also found move average aggregation algorithm…

---

## [Sending log payload to ES](https://discuss.elastic.co/t/sending-log-payload-to-es/98912)

<div class="topic-metadata">

**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\
**Replies:** 3\
**Last updated:** [August 31, 2017, 11:19pm UTC](https://discuss.elastic.co/t/sending-log-payload-to-es/98912 "2017-08-31T23:19:47Z")

</div>

Hello, We have an application that generates logs which contain data payload. The data payload itself can be json, xml, some random CSV or any other format. Is it possible to send the logs with the included payload to …

---

## [Plugin:elasticsearch Unable to connect to Elasticsearch at https://es-logging-poc-eag-cpsprod.int.thomsonreuters.com:9200](https://discuss.elastic.co/t/plugin-elasticsearch-unable-to-connect-to-elasticsearch-at-https-es-logging-poc-eag-cpsprod-int-thomsonreuters-com-9200/91619)

<div class="topic-metadata">

**Author:** [@GJ\_Sham](https://discuss.elastic.co/u/GJ_Sham)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 9:38am UTC](https://discuss.elastic.co/t/plugin-elasticsearch-unable-to-connect-to-elasticsearch-at-https-es-logging-poc-eag-cpsprod-int-thomsonreuters-com-9200/91619 "2017-07-26T09:38:26Z")

</div>

My kibana is not able to connect to elasticsearch. Both have installed in same severs. My Elastic search is up,. I have using selfsigned Certificate for HTTPS. My kibana is also up but not able to connect to elastic sear…

---

## [NEST library. Mapping](https://discuss.elastic.co/t/nest-library-mapping/91329)

<div class="topic-metadata">

**Author:** [@lcokru](https://discuss.elastic.co/u/lcokru)\
**Replies:** 3\
**Last updated:** [July 1, 2017, 12:50am UTC](https://discuss.elastic.co/t/nest-library-mapping/91329 "2017-07-01T00:50:09Z")

</div>

I use NEST functionality to build mapping for my index. I do it in the following way: TypeMappingDescriptor\<object\> typeMappingDescriptor= new TypeMappingDescriptor\<object\>(); typeMappingDescriptor.Map\<object\>(ms …

---

## [ES system CPU spikes to 100% despite of having small amount of data](https://discuss.elastic.co/t/es-system-cpu-spikes-to-100-despite-of-having-small-amount-of-data/79173)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 3\
**Last updated:** [March 20, 2017, 3:04am UTC](https://discuss.elastic.co/t/es-system-cpu-spikes-to-100-despite-of-having-small-amount-of-data/79173 "2017-03-20T03:04:53Z")

</div>

Hello, I am using Elastic Search v5.2.2. I have a single node cluster with 3 primary shards & 0 replica shard. Total documents are around 10 million with 5 GB of data. I have disabled scoring and most of the fields i…

---

## [Unable to instal jdbc-river in command prompt in windows](https://discuss.elastic.co/t/unable-to-instal-jdbc-river-in-command-prompt-in-windows/12793)

<div class="topic-metadata">

**Author:** [@signin\_vasanth](https://discuss.elastic.co/u/signin_vasanth)\
**Replies:** 3\
**Last updated:** [June 9, 2016, 4:16am UTC](https://discuss.elastic.co/t/unable-to-instal-jdbc-river-in-command-prompt-in-windows/12793 "2016-06-09T04:16:30Z")

</div>

Hi All, I was unable to instal the river-jdbc using command prompt in windows OS.Pls find the enclosed bug details, Plugin installation assumed to be site plugin, but contains source code, abortin g installatio…

---

## [Libcurl PUT error not\_x\_content\_exception](https://discuss.elastic.co/t/libcurl-put-error-not-x-content-exception/46313)

<div class="topic-metadata">

**Author:** [@ethicator](https://discuss.elastic.co/u/ethicator)\
**Replies:** 0\
**Last updated:** [April 5, 2016, 1:18am UTC](https://discuss.elastic.co/t/libcurl-put-error-not-x-content-exception/46313 "2016-04-05T01:18:22Z")

</div>

Hi, I'm developing a client in Linux using C++/libcurl/libjsoncpp and am getting the following error message from elasticsearch when sending the following via PUT: From libcurl as verbose debug output enable: PUT /my…

---

## [Советы по организации структуры централизованного сбора логов](https://discuss.elastic.co/t/topic/27772)

<div class="topic-metadata">

**Author:** [@y3g0r](https://discuss.elastic.co/u/y3g0r)\
**Replies:** 0\
**Last updated:** [August 20, 2015, 3:47pm UTC](https://discuss.elastic.co/t/topic/27772 "2015-08-20T15:47:08Z")

</div>

Всем привет. Помогите пожалуйста развернуть ELK стек для сбора логов с продакшена. Я снял некоторые показатели с продакшена и хочу спросить у вас совета, какими должны быть технические требования к logstash-server и …

[Previous page](https://discuss.elastic.co/top.md?page=1182&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1184&per_page=50&period=all)
