# Top

**URL:** https://discuss.elastic.co/top.md?page=1218&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1219

---

## [How to sort based on sum of multiple field value counts](https://discuss.elastic.co/t/how-to-sort-based-on-sum-of-multiple-field-value-counts/145602)

<div class="topic-metadata">

**Author:** [@elpaisa](https://discuss.elastic.co/u/elpaisa)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 7:03pm UTC](https://discuss.elastic.co/t/how-to-sort-based-on-sum-of-multiple-field-value-counts/145602 "2018-08-22T19:03:01Z")

</div>

Hi, I have a use case for sorting documents based on the sum of counts of values for an specific field, lets say i have a field rating, and the search query gives 20 docs with rating:High, and 30 with rating:Critical, f…

---

## [Visualizing boolean values associated with timestamps](https://discuss.elastic.co/t/visualizing-boolean-values-associated-with-timestamps/133132)

<div class="topic-metadata">

**Author:** [@magida](https://discuss.elastic.co/u/magida)\
**Replies:** 1\
**Last updated:** [May 24, 2018, 2:20pm UTC](https://discuss.elastic.co/t/visualizing-boolean-values-associated-with-timestamps/133132 "2018-05-24T14:20:29Z")

</div>

Hello, I've indexed some data into elasticsearch and want to try and display some of it through kibana, now i've read a bunch of materials and tried tutorials etc. however none of them seem to be able to help me display…

---

## [How to customize Kibana dashboard menu in 5.2.1](https://discuss.elastic.co/t/how-to-customize-kibana-dashboard-menu-in-5-2-1/88771)

<div class="topic-metadata">

**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\
**Replies:** 1\
**Last updated:** [June 9, 2017, 4:41am UTC](https://discuss.elastic.co/t/how-to-customize-kibana-dashboard-menu-in-5-2-1/88771 "2017-06-09T04:41:29Z")

</div>

Hi, I am using Kibana 5.2.1 in my server and I am looking to add one more menu item in the dashboard named "Logout" and when I click that my dashboard should navigate to my customized logout page. How it can be imple…

---

## [Filebeat multiple index rollover problem](https://discuss.elastic.co/t/filebeat-multiple-index-rollover-problem/264833)

<div class="topic-metadata">

**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\
**Replies:** 5\
**Last updated:** [February 26, 2021, 11:32am UTC](https://discuss.elastic.co/t/filebeat-multiple-index-rollover-problem/264833 "2021-02-26T11:32:25Z")

</div>

Dear all I'm sending log data to elastic using filebeat. I have multiple files to read, actually I'm sending all log files (eg. \*.log) and it works correctly, I have index and rollover works. Now I need to have differe…

---

## [Missing Elasticsearch menu in Kibana](https://discuss.elastic.co/t/missing-elasticsearch-menu-in-kibana/254799)

<div class="topic-metadata">

**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\
**Replies:** 5\
**Last updated:** [November 10, 2020, 10:29am UTC](https://discuss.elastic.co/t/missing-elasticsearch-menu-in-kibana/254799 "2020-11-10T10:29:58Z")

</div>

Hello I created a new installation from docker using: elasticsearch:7.8.0 kibana:7.8.0 these two docker images. But when i use kibana I cannot see the Elasticsearch menu (access to index patterns etc.=). Is it possi…

---

## [Read Custom Label from plugin](https://discuss.elastic.co/t/read-custom-label-from-plugin/108286)

<div class="topic-metadata">

**Author:** [@wkpv68](https://discuss.elastic.co/u/wkpv68)\
**Replies:** 5\
**Last updated:** [November 21, 2017, 4:35pm UTC](https://discuss.elastic.co/t/read-custom-label-from-plugin/108286 "2017-11-21T16:35:05Z")

</div>

Hi I use webinar\_plugins to create my own plugin (it is working great) I have one parameters that I need to enter manually and to received it when I press on the value. I thought to add it to Buckets to Custom Label …

---

## [Can I configure logstash to run a refresh in elasticsearch?](https://discuss.elastic.co/t/can-i-configure-logstash-to-run-a-refresh-in-elasticsearch/51121)

<div class="topic-metadata">

**Author:** [@LaszloHont](https://discuss.elastic.co/u/LaszloHont)\
**Replies:** 5\
**Last updated:** [May 30, 2016, 4:44am UTC](https://discuss.elastic.co/t/can-i-configure-logstash-to-run-a-refresh-in-elasticsearch/51121 "2016-05-30T04:44:58Z")

</div>

I'm (mis)using logstash to load a days worth of data into elasticsearch, and then exit. Is there a way for logstash to trigger an elasticsearch refresh on the index logstash is writing to after that has happened? Even …

---

## [Build "Google Trends" style dataset from ES](https://discuss.elastic.co/t/build-google-trends-style-dataset-from-es/9565)

<div class="topic-metadata">

**Author:** [@jesse\_heaslip](https://discuss.elastic.co/u/jesse_heaslip)\
**Replies:** 5\
**Last updated:** [November 5, 2012, 10:43pm UTC](https://discuss.elastic.co/t/build-google-trends-style-dataset-from-es/9565 "2012-11-05T22:43:47Z")

</div>

Hi All, Total noob here. I have a set of tweets in elastic search and I want to be able to look up a group of words (word1, word2, word3 etc.) on each tweet for a group of twitter handles and extract a csv or JSO…

---

## [How to convert miliseconds into hh:mm:ss using plainless](https://discuss.elastic.co/t/how-to-convert-miliseconds-into-hhss-using-plainless/263006)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 3\
**Last updated:** [February 4, 2021, 7:50am UTC](https://discuss.elastic.co/t/how-to-convert-miliseconds-into-hhss-using-plainless/263006 "2021-02-04T07:50:44Z")

</div>

With ELK - 7.10.1 i am trying to visualize kibana using painless script, Currently i have logstash output data in the below format. "build\_end\_time" =\> "2021-01-13 01:29:49", "build\_duration" =\> "6409651", "build\_start…

---

## [Can't load dashboards from Windows version of packetbeat to Kibana on Security Onion](https://discuss.elastic.co/t/cant-load-dashboards-from-windows-version-of-packetbeat-to-kibana-on-security-onion/220886)

<div class="topic-metadata">

**Author:** [@tedfs](https://discuss.elastic.co/u/tedfs)\
**Replies:** 3\
**Last updated:** [February 27, 2020, 3:44pm UTC](https://discuss.elastic.co/t/cant-load-dashboards-from-windows-version-of-packetbeat-to-kibana-on-security-onion/220886 "2020-02-27T15:44:03Z")

</div>

Seems like problems loading dashboards is a common theme with beats. I've looked over all the forum posts I can find and I feel like I've just gone down deeper and deeper rabbit holes and not found any solution to my pro…

---

## [How is coordinating node decided?](https://discuss.elastic.co/t/how-is-coordinating-node-decided/146455)

<div class="topic-metadata">

**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\
**Replies:** 3\
**Last updated:** [August 29, 2018, 5:32am UTC](https://discuss.elastic.co/t/how-is-coordinating-node-decided/146455 "2018-08-29T05:32:18Z")

</div>

We have a 6 node ES cluster where the 5 nodes are of the same specs while the 6th one is almost half the specs of other nodes. I initiate a Transport client to which I add any one of the 5 nodes but never the 6th node. S…

---

## [Passing varied parameters to BMI25 instead of 1 set](https://discuss.elastic.co/t/passing-varied-parameters-to-bmi25-instead-of-1-set/105626)

<div class="topic-metadata">

**Author:** [@ESlearner](https://discuss.elastic.co/u/ESlearner)\
**Replies:** 3\
**Last updated:** [October 31, 2017, 3:05am UTC](https://discuss.elastic.co/t/passing-varied-parameters-to-bmi25-instead-of-1-set/105626 "2017-10-31T03:05:24Z")

</div>

Continuing the discussion from Tweaking BM25 parameters efficiently: I was wondering if its possible to pass multiple k1 and b values to BMI25 in order to determine the ideal parameters , instead of going through the pa…

---

## [How to add clusters or monitor logs from other servers in ELK stack 5.2.2](https://discuss.elastic.co/t/how-to-add-clusters-or-monitor-logs-from-other-servers-in-elk-stack-5-2-2/74762)

<div class="topic-metadata">

**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\
**Replies:** 3\
**Last updated:** [February 13, 2017, 10:30pm UTC](https://discuss.elastic.co/t/how-to-add-clusters-or-monitor-logs-from-other-servers-in-elk-stack-5-2-2/74762 "2017-02-13T22:30:56Z")

</div>

I have installed ELK Stack version 5.2.2 in base server and i need to monitor logs from all other servers in my base server or add clusters to base server. How do i do that? Can we do this without enabling below lines …

---

## [Can not access kibana\_ip:5601, but kibana service seems to be running?](https://discuss.elastic.co/t/can-not-access-kibana-ip-5601-but-kibana-service-seems-to-be-running/64204)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 3\
**Last updated:** [October 28, 2016, 3:42pm UTC](https://discuss.elastic.co/t/can-not-access-kibana-ip-5601-but-kibana-service-seems-to-be-running/64204 "2016-10-28T15:42:18Z")

</div>

kibana v4.5.4 ES v2.4.1 I have Kibana hooked up to one of my ES servers on my ES cluster, and I see these logs when I start the service {"type":"log","@timestamp":"2016-10-27T20:19:12+00:00","tags":\["listening","info…

---

## [Bar chart coloring](https://discuss.elastic.co/t/bar-chart-coloring/42632)

<div class="topic-metadata">

**Author:** [@Praveen\_Shilavantar](https://discuss.elastic.co/u/Praveen_Shilavantar)\
**Replies:** 3\
**Last updated:** [February 25, 2016, 4:46pm UTC](https://discuss.elastic.co/t/bar-chart-coloring/42632 "2016-02-25T16:46:35Z")

</div>

Kibana 3 shows different colors per bar: Is there a way to achieve it in Kibana 4? is it not default behavior? However I am able to do it using sub aggregations. But it does not work for a single aggregation.

---

## [Couldn't find any output plugin named 'elasticsearch'](https://discuss.elastic.co/t/couldnt-find-any-output-plugin-named-elasticsearch/35041)

<div class="topic-metadata">

**Author:** [@narendra\_reddy](https://discuss.elastic.co/u/narendra_reddy)\
**Replies:** 0\
**Last updated:** [November 19, 2015, 11:14am UTC](https://discuss.elastic.co/t/couldnt-find-any-output-plugin-named-elasticsearch/35041 "2015-11-19T11:14:26Z")

</div>

Hi Team, I get logs from scribe on 1463 port to log stash, and I have installed logstash-output-elasticsearch as well, when I try run log stash with both the paths its not detecting the output path; below is the comma…

---

## [Exception occurred java.lang.RuntimeException: Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/exception-occurred-java-lang-runtimeexception-request-cannot-be-executed-i-o-reactor-status-stopped/244479)

<div class="topic-metadata">

**Author:** [@reddroid](https://discuss.elastic.co/u/reddroid)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 5:07pm UTC](https://discuss.elastic.co/t/exception-occurred-java-lang-runtimeexception-request-cannot-be-executed-i-o-reactor-status-stopped/244479 "2020-09-17T17:07:43Z")

</div>

Exception occurred java.lang.RuntimeException: Request cannot be executed; I/O reactor status: STOPPED at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:831) at org.elasticsearch…

---

## [Count field value by date range](https://discuss.elastic.co/t/count-field-value-by-date-range/234659)

<div class="topic-metadata">

**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\
**Replies:** 1\
**Last updated:** [May 28, 2020, 12:01pm UTC](https://discuss.elastic.co/t/count-field-value-by-date-range/234659 "2020-05-28T12:01:16Z")

</div>

Hi, Is it possible to have a count of data of a specific field for the past 7 days? Query: GET /my-index/\_count?q=my-field:\* Results: { "count" : 438, "\_shards" : { "total" : 1, "successful" : 1, "skipped" :…

---

## [Index name that Uptime look for](https://discuss.elastic.co/t/index-name-that-uptime-look-for/221198)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 7\
**Last updated:** [March 2, 2020, 8:46pm UTC](https://discuss.elastic.co/t/index-name-that-uptime-look-for/221198 "2020-03-02T20:46:48Z")

</div>

Hi, I want to have different users not to be able to see all uptime data in the Uptime app. My approach would be to have different heartbeat instances creating indices with different names and set the permissions for th…

---

## [Scroll API nest for large datasets](https://discuss.elastic.co/t/scroll-api-nest-for-large-datasets/130062)

<div class="topic-metadata">

**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\
**Replies:** 1\
**Last updated:** [May 1, 2018, 12:33pm UTC](https://discuss.elastic.co/t/scroll-api-nest-for-large-datasets/130062 "2018-05-01T12:33:51Z")

</div>

Hello guys, I am using scan and scroll api for ES nest 5.5 to retrieve documents over 1.3 million in size(6 fields/document) my scroll api works fine if I retrieve less number of documents(around 800000) but when I want…

---

## [Failed to load Pipelines.yml file in windows enviromment!](https://discuss.elastic.co/t/failed-to-load-pipelines-yml-file-in-windows-enviromment/124508)

<div class="topic-metadata">

**Author:** [@naveen\_K.N](https://discuss.elastic.co/u/naveen_K.N)\
**Replies:** 1\
**Last updated:** [March 21, 2018, 8:37am UTC](https://discuss.elastic.co/t/failed-to-load-pipelines-yml-file-in-windows-enviromment/124508 "2018-03-21T08:37:34Z")

</div>

Hi Elastic Team, im trying to create multiple pipelines using configuration in pipelines.yml file and hence running logstash in command prompt as " bin/logstash " so why am i getting error: Failed to read pipelines y…

---

## [X-pack Kibana Logout redirection](https://discuss.elastic.co/t/x-pack-kibana-logout-redirection/108081)

<div class="topic-metadata">

**Author:** [@keshore](https://discuss.elastic.co/u/keshore)\
**Replies:** 1\
**Last updated:** [November 24, 2017, 12:11pm UTC](https://discuss.elastic.co/t/x-pack-kibana-logout-redirection/108081 "2017-11-24T12:11:59Z")

</div>

I'm using reverse proxy to configure Kibana. Right now after successful logout, it redirecting to x\_pack login page. Is there any way to redirect Kibana logout to some other link (say, http://xxx.yyyy.com)

---

## [Delay for elasticsearch connection](https://discuss.elastic.co/t/delay-for-elasticsearch-connection/71675)

<div class="topic-metadata">

**Author:** [@sonia](https://discuss.elastic.co/u/sonia)\
**Replies:** 7\
**Last updated:** [January 16, 2017, 1:08pm UTC](https://discuss.elastic.co/t/delay-for-elasticsearch-connection/71675 "2017-01-16T13:08:34Z")

</div>

Hi. I have a java class that includes many methods. each method first connect to elasticsearch and does operations on indices and finally close the connection. When the program is running i have a long delay for connecti…

---

## [Runuser: unrecognized option '--pidfile'](https://discuss.elastic.co/t/runuser-unrecognized-option-pidfile/21218)

<div class="topic-metadata">

**Author:** [@Joey\_Nooner](https://discuss.elastic.co/u/Joey_Nooner)\
**Replies:** 1\
**Last updated:** [December 11, 2014, 7:18pm UTC](https://discuss.elastic.co/t/runuser-unrecognized-option-pidfile/21218 "2014-12-11T19:18:04Z")

</div>

I keep getting this error when using the init script. The error i receive is: Starting elasticsearch: runuser: unrecognized option '--pidfile' Try \`runuser --help' for more information. …

---

## [MultiPhraseQuery in Elastic using NEST](https://discuss.elastic.co/t/multiphrasequery-in-elastic-using-nest/157218)

<div class="topic-metadata">

**Author:** [@omri.suissa](https://discuss.elastic.co/u/omri.suissa)\
**Replies:** 6\
**Last updated:** [November 28, 2018, 6:48am UTC](https://discuss.elastic.co/t/multiphrasequery-in-elastic-using-nest/157218 "2018-11-28T06:48:49Z")

</div>

Hi, I'm migrating from Lucene to Elastic (6.2.4). Today we use Lucene's MultiPhraseQuery to set phrase queries in the same position. Elastic (and NEST) comes with a "MatchPhrase" query that can get only one phrase (str…

---

## [400 bad request in UI when trying to save a watch in Kibana](https://discuss.elastic.co/t/400-bad-request-in-ui-when-trying-to-save-a-watch-in-kibana/133711)

<div class="topic-metadata">

**Author:** [@maryjomcguinness](https://discuss.elastic.co/u/maryjomcguinness)\
**Replies:** 6\
**Last updated:** [May 31, 2018, 5:40pm UTC](https://discuss.elastic.co/t/400-bad-request-in-ui-when-trying-to-save-a-watch-in-kibana/133711 "2018-05-31T17:40:37Z")

</div>

Can someone please help. Why am I getting a 400 bad request when trying to save a watch. I am using version 5.5.1 and I have checked the json is valid.

---

## [Sincedb\_path is not working in CentOs](https://discuss.elastic.co/t/sincedb-path-is-not-working-in-centos/126725)

<div class="topic-metadata">

**Author:** [@Sunil\_Villuri](https://discuss.elastic.co/u/Sunil_Villuri)\
**Replies:** 6\
**Last updated:** [April 5, 2018, 12:08pm UTC](https://discuss.elastic.co/t/sincedb-path-is-not-working-in-centos/126725 "2018-04-05T12:08:09Z")

</div>

Hi All, I want to re-read the same file again from beginning in CentOs which was installed by YUM. I used the below input configuration in windows (it's working Fine ) Where as in CentOs (its not working ). i was not ab…

---

## [Reindexing in Kibana or other ELK stack product](https://discuss.elastic.co/t/reindexing-in-kibana-or-other-elk-stack-product/116477)

<div class="topic-metadata">

**Author:** [@Fatalityap](https://discuss.elastic.co/u/Fatalityap)\
**Replies:** 6\
**Last updated:** [January 25, 2018, 8:12am UTC](https://discuss.elastic.co/t/reindexing-in-kibana-or-other-elk-stack-product/116477 "2018-01-25T08:12:51Z")

</div>

Hi. I know that there is Reindex ( https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html ) feature in Elasticsearch and for zero downtime Elasticsearch team recommends to use index alias. But…

---

## [Logstash 5.x fail to install logstash-output-zabbix](https://discuss.elastic.co/t/logstash-5-x-fail-to-install-logstash-output-zabbix/78080)

<div class="topic-metadata">

**Author:** [@focus\_zheng](https://discuss.elastic.co/u/focus_zheng)\
**Replies:** 6\
**Last updated:** [March 14, 2017, 9:52am UTC](https://discuss.elastic.co/t/logstash-5-x-fail-to-install-logstash-output-zabbix/78080 "2017-03-14T09:52:09Z")

</div>

Hi, Yesterday I had a problem when I tried to install logstash-output-zabbix on my logstash 5.2. I used the recommended command "logstash-plugin install logstash-output-zabbix".But it failed with the error messgae "…

---

## [WinlogBeat stuck @ "Stopping" / Windows-Service](https://discuss.elastic.co/t/winlogbeat-stuck-stopping-windows-service/332879)

<div class="topic-metadata">

**Author:** [@florianmulatz](https://discuss.elastic.co/u/florianmulatz)\
**Replies:** 2\
**Last updated:** [May 15, 2023, 11:38pm UTC](https://discuss.elastic.co/t/winlogbeat-stuck-stopping-windows-service/332879 "2023-05-15T23:38:44Z")

</div>

Good Morning guys - please don't blame me if this topic is already covered somewhere - at least I was not able to find it. I've the problem that my winlogbeat Service (as well as the manually spawned process) never stop…

---

## [Nested Group-by in data table](https://discuss.elastic.co/t/nested-group-by-in-data-table/225072)

<div class="topic-metadata">

**Author:** [@srehorn](https://discuss.elastic.co/u/srehorn)\
**Replies:** 2\
**Last updated:** [March 26, 2020, 2:50pm UTC](https://discuss.elastic.co/t/nested-group-by-in-data-table/225072 "2020-03-26T14:50:18Z")

</div>

Hello, I am trying to build a report layout that has more than one level of group nesting. This is a familiar report style with a top-level group label, then the next level grouping label, and then items listed under th…

---

## [Unexpected character '\<'](https://discuss.elastic.co/t/unexpected-character/170366)

<div class="topic-metadata">

**Author:** [@colix](https://discuss.elastic.co/u/colix)\
**Replies:** 2\
**Last updated:** [February 28, 2019, 8:00pm UTC](https://discuss.elastic.co/t/unexpected-character/170366 "2019-02-28T20:00:15Z")

</div>

Hi, i sent json log to logstash. Logstash config: input { udp { port =\> 5001 codec =\> "json" } } filter { json { source =\> "message" } } output { if \[type\] == "rsyslog" { elasticsearch { hosts =\> \[ "elastic…

---

## [Hide management page from Kibana by editing source code](https://discuss.elastic.co/t/hide-management-page-from-kibana-by-editing-source-code/170148)

<div class="topic-metadata">

**Author:** [@satyaban](https://discuss.elastic.co/u/satyaban)\
**Replies:** 2\
**Last updated:** [February 28, 2019, 7:27am UTC](https://discuss.elastic.co/t/hide-management-page-from-kibana-by-editing-source-code/170148 "2019-02-28T07:27:59Z")

</div>

Dear All, I want to disable/hide management page from left side menu of Kibana portal . Though Xpack security is not part of Basic License so is there any way to achieve same by any other means ? Can we achieve same b…

---

## [ES nodes should talk on TCP or HTTP?](https://discuss.elastic.co/t/es-nodes-should-talk-on-tcp-or-http/150172)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 11:46am UTC](https://discuss.elastic.co/t/es-nodes-should-talk-on-tcp-or-http/150172 "2018-09-27T11:46:53Z")

</div>

Setup is 3 master nodes 2 coordinating nodes 2 data nodes Currently i have below property set on all nodes and i assume my nodes talk on HTTP: http.cors.allow-origin: "\*" http.cors.enabled: true Query: Is it wort…

---

## [Nest problem to select data out of database](https://discuss.elastic.co/t/nest-problem-to-select-data-out-of-database/145518)

<div class="topic-metadata">

**Author:** [@PDAxh](https://discuss.elastic.co/u/PDAxh)\
**Replies:** 2\
**Last updated:** [August 30, 2018, 8:16am UTC](https://discuss.elastic.co/t/nest-problem-to-select-data-out-of-database/145518 "2018-08-30T08:16:49Z")

</div>

Hi! Im pretty new to ES and got a little problem, This one works as it should. public void testCreateIndexBasedOnSelectedOrderId() { var pool = new SingleNodeConnectionPool(new Uri(uri)); var settings = new Connect…

---

## [Filebeat grok processor with pipe delimiter not working](https://discuss.elastic.co/t/filebeat-grok-processor-with-pipe-delimiter-not-working/139913)

<div class="topic-metadata">

**Author:** [@blutswende](https://discuss.elastic.co/u/blutswende)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 9:10am UTC](https://discuss.elastic.co/t/filebeat-grok-processor-with-pipe-delimiter-not-working/139913 "2018-07-23T09:10:50Z")

</div>

Hi all, i'm writing a new module to parse our own logfiles. Now i'm stuck at a problem. With parsing the pipeline.json My pipeline.json looks like: { "processors": \[ { "grok": { "field": "…

---

## [Error No mapping found for \[DBANAME\] in order to sort on](https://discuss.elastic.co/t/error-no-mapping-found-for-dbaname-in-order-to-sort-on/65673)

<div class="topic-metadata">

**Author:** [@JackOfAllDevs](https://discuss.elastic.co/u/JackOfAllDevs)\
**Replies:** 2\
**Last updated:** [November 10, 2016, 3:02pm UTC](https://discuss.elastic.co/t/error-no-mapping-found-for-dbaname-in-order-to-sort-on/65673 "2016-11-10T15:02:51Z")

</div>

I have a mapping that includes "DBAName" and I can search/query based on that field. It shows up in all my results. But, when I try to sort by that field, I get: "No mapping found for \[DBANAME\] in order to sort on" T…

---

## [Email plugin - logstas output](https://discuss.elastic.co/t/email-plugin-logstas-output/43116)

<div class="topic-metadata">

**Author:** [@cooldharma06](https://discuss.elastic.co/u/cooldharma06)\
**Replies:** 2\
**Last updated:** [March 2, 2016, 6:23am UTC](https://discuss.elastic.co/t/email-plugin-logstas-output/43116 "2016-03-02T06:23:01Z")

</div>

hi all, i am using elasticsearch + logstash + kibana ( all are updated version). i enabled the email plugin in output section but i am facing following error: output { elasticsearch { hosts =\> \["localhost:9200"…

---

## [Unable to configuring HeartBeat autodiscovery with hints in ECK setup](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309)

<div class="topic-metadata">

**Author:** [@diadoom](https://discuss.elastic.co/u/diadoom)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309 "2022-10-25T17:39:21Z")

</div>

hello! I'm trying to configure heartbeat in ECK using the autodiscovery configuration with hints, however using the config in ECK does not seem to work. It used to work when I had a self managed elastic setup running i…

---

## [DataNodeの稼働中にレプリカ数の設定を変更した際の挙動について](https://discuss.elastic.co/t/datanode/305761)

<div class="topic-metadata">

**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\
**Replies:** 4\
**Last updated:** [May 30, 2022, 8:28am UTC](https://discuss.elastic.co/t/datanode/305761 "2022-05-30T08:28:33Z")

</div>

Elasticsearch のDataNodeが稼働中にレプリカ数の設定を変更した際の挙動についてご教授いただけないでしょうか ＜実現したいこと＞ AWS上に以下の構成でDataNodeを作成した際に、レプリカ数を2個に設定しています。 Elasticsearch のバージョンは7.10です。 AZ：3つ Node：6台 3つの各AZにはNodeの数が均等になるように2台ずつ配置されています。 また、３つの各AZには「プラ…

---

## [Stemmer for keyword-fields before index](https://discuss.elastic.co/t/stemmer-for-keyword-fields-before-index/243231)

<div class="topic-metadata">

**Author:** [@Arol](https://discuss.elastic.co/u/Arol)\
**Replies:** 4\
**Last updated:** [July 30, 2020, 5:28pm UTC](https://discuss.elastic.co/t/stemmer-for-keyword-fields-before-index/243231 "2020-07-30T17:28:48Z")

</div>

Salut. I have field "Title". I use this field for aggregations, including building in the Kibana Tags Cloud, so the field is declared as a keyword. In this field, I write the title text, where each word is an array ele…

---

## [Geckodriver error while installing dependency for Kibana](https://discuss.elastic.co/t/geckodriver-error-while-installing-dependency-for-kibana/212134)

<div class="topic-metadata">

**Author:** [@Saroj\_Shrestha1](https://discuss.elastic.co/u/Saroj_Shrestha1)\
**Replies:** 4\
**Last updated:** [December 25, 2019, 9:15am UTC](https://discuss.elastic.co/t/geckodriver-error-while-installing-dependency-for-kibana/212134 "2019-12-25T09:15:24Z")

</div>

Hey guys, I'm having problem where geckodriver throws an error while installing dependency for Kibana. My current environment is as follows: Kibana Version : 7.2.0 Node version: 10.15.2 npm version: 5.8.2 yarn ver…

---

## [Kibana scripted field used in interactive control shows no data](https://discuss.elastic.co/t/kibana-scripted-field-used-in-interactive-control-shows-no-data/208934)

<div class="topic-metadata">

**Author:** [@jmcclure](https://discuss.elastic.co/u/jmcclure)\
**Replies:** 4\
**Last updated:** [November 21, 2019, 5:21pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-used-in-interactive-control-shows-no-data/208934 "2019-11-21T17:21:23Z")

</div>

Hi, (Elastic stack version 6.7.1 on Centos 7.6 OS) I have a dashboard that utilizes a control visualization, which specifies a field that is defined in Kibana as a scripted field. I have document data going into Elast…

---

## [Filebeat syslog fields are missing in Kibana](https://discuss.elastic.co/t/filebeat-syslog-fields-are-missing-in-kibana/128923)

<div class="topic-metadata">

**Author:** [@yan](https://discuss.elastic.co/u/yan)\
**Replies:** 4\
**Last updated:** [May 1, 2018, 11:50am UTC](https://discuss.elastic.co/t/filebeat-syslog-fields-are-missing-in-kibana/128923 "2018-05-01T11:50:27Z")

</div>

Hi, I am running ELK 6.2.4 (Elasticsearch, Kibana and Filebeat) on Centos 7. I see all the logs from /var/log/messages in Kibana "Discover" window, BUT for some reason the syslog fields are missing in the "available fie…

---

## [Unable to use the generate\_plugin.js script in Kibana](https://discuss.elastic.co/t/unable-to-use-the-generate-plugin-js-script-in-kibana/128026)

<div class="topic-metadata">

**Author:** [@JustInTime](https://discuss.elastic.co/u/JustInTime)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 6:47pm UTC](https://discuss.elastic.co/t/unable-to-use-the-generate-plugin-js-script-in-kibana/128026 "2018-04-18T18:47:11Z")

</div>

I tried to run the plugin generator included in Kibana 7.0.0-alpha, but generate\_plugin.js script doesn't exist after upgrading Kibana by running the .deb installation file for Kibana 7.0.0-alpha. I know I successfully i…

---

## [Grok's strange data conversions](https://discuss.elastic.co/t/groks-strange-data-conversions/98582)

<div class="topic-metadata">

**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Replies:** 4\
**Last updated:** [August 29, 2017, 12:04pm UTC](https://discuss.elastic.co/t/groks-strange-data-conversions/98582 "2017-08-29T12:04:38Z")

</div>

Hi, I have really weird conversions when using grok. I really don’t get why the final values are so different from the originals: \[grok\] I use the DATA grok pattern because I sometimes have numbers with exponents (eg:…

---

## [Unable to see indices,Loaded too much data in elasticsearch,](https://discuss.elastic.co/t/unable-to-see-indices-loaded-too-much-data-in-elasticsearch/93073)

<div class="topic-metadata">

**Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\
**Replies:** 4\
**Last updated:** [July 17, 2017, 3:03pm UTC](https://discuss.elastic.co/t/unable-to-see-indices-loaded-too-much-data-in-elasticsearch/93073 "2017-07-17T15:03:46Z")

</div>

Hi there! I was trying something and loaded 10 log files of 100 MB each. Now I 'm not able to see the indices in the elastic search (using postman and no data displaying in kibana). Can please some one help? Thank…

---

## [Add data nodes to an existing cluster](https://discuss.elastic.co/t/add-data-nodes-to-an-existing-cluster/118202)

<div class="topic-metadata">

**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\
**Replies:** 0\
**Last updated:** [February 2, 2018, 9:58am UTC](https://discuss.elastic.co/t/add-data-nodes-to-an-existing-cluster/118202 "2018-02-02T09:58:00Z")

</div>

I have an ES (5.6) Cluster with 3 data nodes. "number\_of\_shards": "5" "number\_of\_replicas": "1" I would like to add 2 more data nodes to this cluster. Is there any documentation for adding additional data nodes ? Af…

---

## [Filter cache and field data caches](https://discuss.elastic.co/t/filter-cache-and-field-data-caches/22857)

<div class="topic-metadata">

**Author:** [@Vladi\_Feigin](https://discuss.elastic.co/u/Vladi_Feigin)\
**Replies:** 0\
**Last updated:** [March 24, 2015, 2:17pm UTC](https://discuss.elastic.co/t/filter-cache-and-field-data-caches/22857 "2015-03-24T14:17:12Z")

</div>

Hi All, We observe the relatively high heap usage : 70-75% per node. Our heap size is 32G. Each node has 2 shards (one primary , one replica). Each shard size is approximately 43G The size of the field data cache…

---

## [Hive ES issue](https://discuss.elastic.co/t/hive-es-issue/183659)

<div class="topic-metadata">

**Author:** [@manoj\_kumar3](https://discuss.elastic.co/u/manoj_kumar3)\
**Replies:** 1\
**Last updated:** [June 24, 2019, 2:55am UTC](https://discuss.elastic.co/t/hive-es-issue/183659 "2019-06-24T02:55:08Z")

</div>

Anyone of you please help me in solving this problem. I'm trying to create a hive table on elasticsearch 6.2 where ssl is enabled.but not able to create the table, getting "Execution Error, return code 1 from org.apache.…

[Previous page](https://discuss.elastic.co/top.md?page=1217&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1219&per_page=50&period=all)
