# Top **URL:** https://discuss.elastic.co/top.md?page=1224&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1225 --- ## [Elasticsearch url is redirecting after installing X-Pack](https://discuss.elastic.co/t/elasticsearch-url-is-redirecting-after-installing-x-pack/97663)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [August 20, 2017, 2:32am UTC](https://discuss.elastic.co/t/elasticsearch-url-is-redirecting-after-installing-x-pack/97663 "2017-08-20T02:32:40Z")
After installing X-Pack http://elasticserver:9200/ prompts for Basic authentication and after providing elastic/changeme as username and password again it prompts for the credentials. Elasticsearch version: 5.4.3 X-Pa… --- ## [Elasticsearch query for \`SELECT id FROM foo WHERE id NOT IN (SELECT id FROM foo WHERE ...)](https://discuss.elastic.co/t/elasticsearch-query-for-select-id-from-foo-where-id-not-in-select-id-from-foo-where/325302)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 4\ **Last updated:** [February 14, 2023, 7:51pm UTC](https://discuss.elastic.co/t/elasticsearch-query-for-select-id-from-foo-where-id-not-in-select-id-from-foo-where/325302 "2023-02-14T19:51:34Z")
I want to do a "not in present index" type of operation. For example, let's say I have an index called customer\_subscription with just these 4 records: | customer\_id | pay\_date | +-------------+------------+ | … --- ## [Querying and filtering an embed visualization](https://discuss.elastic.co/t/querying-and-filtering-an-embed-visualization/106719)
**Author:** [@havidarou](https://discuss.elastic.co/u/havidarou)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 5:16pm UTC](https://discuss.elastic.co/t/querying-and-filtering-an-embed-visualization/106719 "2017-11-08T17:16:24Z")
Hi @thomasneirynck, @ppisljar I'm building upon the code provided in the Developing Visualizations webinar. I've successfully enabled the timepicker and my visualizations get properly updated. Now I want to query and … --- ## [NRT search with elastic search](https://discuss.elastic.co/t/nrt-search-with-elastic-search/5122)
**Author:** [@rcch](https://discuss.elastic.co/u/rcch)\ **Replies:** 4\ **Last updated:** [August 12, 2011, 7:44pm UTC](https://discuss.elastic.co/t/nrt-search-with-elastic-search/5122 "2011-08-12T19:44:52Z")
Hi all, 1) I'd like to get some feedback/hear experiences from people who've used elastic search for near-real-time search applications. 2) How does elastic search compare to using near-real time search in lucene… --- ## [Define custom unique key](https://discuss.elastic.co/t/define-custom-unique-key/301642)
**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 10:42pm UTC](https://discuss.elastic.co/t/define-custom-unique-key/301642 "2022-04-06T22:42:45Z")
Hi team, Is there a way to define our own custom unique key for the document which is similar to uniqueKey provided in Solr. For e.g I need to define employeeId or a combination of 2 fields as unique id. Any example w… --- ## [Split field into multiple fields](https://discuss.elastic.co/t/split-field-into-multiple-fields/284096)
**Author:** [@mavericknd](https://discuss.elastic.co/u/mavericknd)\ **Replies:** 3\ **Last updated:** [September 17, 2021, 2:14pm UTC](https://discuss.elastic.co/t/split-field-into-multiple-fields/284096 "2021-09-17T14:14:29Z")
Hi, i have the following log and want the key value pairs inside message (ipAddress=1.1.1.1 realmId=some\_realm) to be separate fields. I tried with grok, kv, mutate, nothing works, no change in kibana. If somebody can … --- ## [Kibanaでスペースにvisualizationを追加するときの権限](https://discuss.elastic.co/t/kibana-visualization/272878)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 3\ **Last updated:** [June 6, 2021, 4:55am UTC](https://discuss.elastic.co/t/kibana-visualization/272878 "2021-06-06T04:55:52Z")
Kibana7.8.1 でシステム構築をしています。 Kibanaで、新たに スペース:spc\_a を作成し、そのスペースのみを編集できるユーザ：user\_a を作りたいと思っています。 user\_a には、spc\_a の権限として\[all\] を与えていますが、スペースを選択してVisualizeを選択すると、下記のようなポップアップエラーが出ます。 --------------------------------------… --- ## [Filebeat+CSV](https://discuss.elastic.co/t/filebeat-csv/161192)
**Author:** [@Aralex](https://discuss.elastic.co/u/Aralex)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-csv/161192 "2018-12-19T13:15:45Z")
Hi, I'm quite frustrated as how to handle things. Documentation is quite confusing since there are few ways to do things in detail but no sufficient overview. Alright, so here are my questions. I would highly appreciat… --- ## [Working with fields containing underline in painless scripts](https://discuss.elastic.co/t/working-with-fields-containing-underline-in-painless-scripts/118646)
**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\ **Replies:** 3\ **Last updated:** [February 6, 2018, 12:57pm UTC](https://discuss.elastic.co/t/working-with-fields-containing-underline-in-painless-scripts/118646 "2018-02-06T12:57:51Z")
Hi, I am writing a painless script for removing values from arrays as described in https://discuss.elastic.co/t/removing-elements-from-an-array-in-a-document/10156 and https://stackoverflow.com/questions/45980054/how-to-… --- ## [How to integrate Kibana with different tools api?](https://discuss.elastic.co/t/how-to-integrate-kibana-with-different-tools-api/106372)
**Author:** [@jafferwilson](https://discuss.elastic.co/u/jafferwilson)\ **Replies:** 3\ **Last updated:** [November 4, 2017, 9:03am UTC](https://discuss.elastic.co/t/how-to-integrate-kibana-with-different-tools-api/106372 "2017-11-04T09:03:53Z")
I am trying to find out the best dashboard which is lucrative and insightsful. I found Kibana as an excellent choice. But I do not understand how it can be helpful to me in visualizing the data from the various analytics… --- ## [Mapping filebeat index to geo-point](https://discuss.elastic.co/t/mapping-filebeat-index-to-geo-point/95969)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 3\ **Last updated:** [August 5, 2017, 8:59am UTC](https://discuss.elastic.co/t/mapping-filebeat-index-to-geo-point/95969 "2017-08-05T08:59:42Z")
I used this mapping to my filebeat index template PUT /filebeat-\*/?pretty { “mappings”: { “syslog”: { “properties”: { “geoip.location”: { “type”: “geo\_point” } } } } } and i got this error { “error”: { “r… --- ## [Unable to parse {{ctx.payload}} mustache script from email action](https://discuss.elastic.co/t/unable-to-parse-ctx-payload-mustache-script-from-email-action/89443)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 6:24am UTC](https://discuss.elastic.co/t/unable-to-parse-ctx-payload-mustache-script-from-email-action/89443 "2017-06-16T06:24:57Z")
Below email action: "email\_admin": { "email" : { "to" : "abc@example.com", "subject" : "{{ctx.payload.hits.total}} alert", "body" : "Cannot access {{ctx.payload.hits.total}} val… --- ## [Recovering from a potentially corrupt cluster state: UnavailableShardsException](https://discuss.elastic.co/t/recovering-from-a-potentially-corrupt-cluster-state-unavailableshardsexception/9449)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 3\ **Last updated:** [October 24, 2012, 6:30pm UTC](https://discuss.elastic.co/t/recovering-from-a-potentially-corrupt-cluster-state-unavailableshardsexception/9449 "2012-10-24T18:30:53Z")
Some quick stats: 12 nodes running 0.19.2 All indices have 4 shards. "Live" index has 2 replicas "New" index which is getting re-indexed has 0 replicas Old indices (backup) have 0 replicas Current re-indexing wor… --- ## [Can NEST index multiple documents to a data stream?](https://discuss.elastic.co/t/can-nest-index-multiple-documents-to-a-data-stream/288949)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 10:20am UTC](https://discuss.elastic.co/t/can-nest-index-multiple-documents-to-a-data-stream/288949 "2021-11-17T10:20:46Z")
The IndexMany method has no way to specify the op\_type. And the Bulk method doesn't seem to provide any configuration for op\_type either. --- ## [How do we include the stack trace of the error on the JavaScript client?](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436)
**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 2:34am UTC](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436 "2020-12-24T02:34:42Z")
How do we include the stack trace of the error on the JavaScript client? The API says error\_trace is an accepted common parameter, but I couldn't get the complete stack trace of the error\* I was troubleshooting : var … --- ## [\[indices:data/write/bulk\[s\]\] is unauthorized for user \[loader-user\]"})](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169)
**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 5:55am UTC](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169 "2020-07-07T05:55:46Z")
Hello, I am starting a new pipeline on one of my logstash servers, but when I start the service I get this error. Jun 29 10:50:00 mryt2ls02 logstash: \[2020-06-29T10:50:00,449\]\[INFO \]\[logstash.outputs.elasticsearch\]\[Tre… --- ## [ESの「.monitoring-es-6-yyyymm.dd」の保存期間変更と対象限定について](https://discuss.elastic.co/t/es-monitoring-es-6-yyyymm-dd/217315)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 6:18am UTC](https://discuss.elastic.co/t/es-monitoring-es-6-yyyymm-dd/217315 "2020-02-03T06:18:03Z")
Elasticsearch(6.5.4)にて monitoring機能を有効にしました。 「.monitoring-es-6-yyyymm.dd」のサイズが大きいため保存期間を変更したいです。 デフォルトの7日保存ではなく、3日保存にしたいです。 サイズが大きい「.monitoring-es-6-yyyymm.dd」のindexのみを、 3日保存にすることは可能でしょうか？ 可能でしたら、設定コマンド等をご教示をお願いします… --- ## [Visualization/Authorization Error when using dashboards with many visualizations](https://discuss.elastic.co/t/visualization-authorization-error-when-using-dashboards-with-many-visualizations/94001)
**Author:** [@mark54g](https://discuss.elastic.co/u/mark54g)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 3:25pm UTC](https://discuss.elastic.co/t/visualization-authorization-error-when-using-dashboards-with-many-visualizations/94001 "2017-07-21T15:25:22Z")
Hey, folks Have a weird problem someone in my org uncovered. When trying to create or load an existing dashboard that is visualization heavy, they get an error like this: Error: Authorization Exception at respond… --- ## [Beats for embedded devices?](https://discuss.elastic.co/t/beats-for-embedded-devices/90989)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 8:19am UTC](https://discuss.elastic.co/t/beats-for-embedded-devices/90989 "2017-06-28T08:19:27Z")
It might be nice for us to be able to use some Beats (particularly Metricbeat and Heartbeat but maybe others) on an embedded device with an ARM processor running Linux. However a quick look at the nightly builds for Me… --- ## [Filebeat not working](https://discuss.elastic.co/t/filebeat-not-working/86364)
**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\ **Replies:** 2\ **Last updated:** [May 22, 2017, 6:00am UTC](https://discuss.elastic.co/t/filebeat-not-working/86364 "2017-05-22T06:00:34Z")
I am using filebeat and the data is passed to logstash. My filebeat code is: filebeat.prospectors: - input\_type: log paths: - etc\\access.log fields: {log\_type: access} I want to add multiple input files an… --- ## [JSON Issues](https://discuss.elastic.co/t/json-issues/39769)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [January 25, 2016, 4:08pm UTC](https://discuss.elastic.co/t/json-issues/39769 "2016-01-25T16:08:52Z")
I am using the JSON plugin to parse bro logs I have being printed in JSON format. My current setup is: 1. distributed sensor collecting data recording it in logs in JSON format. 2. logstash picks up the logs with the fo… --- ## [Logstash URL parameter as tags](https://discuss.elastic.co/t/logstash-url-parameter-as-tags/279285)
**Author:** [@juanmav](https://discuss.elastic.co/u/juanmav)\ **Replies:** 7\ **Last updated:** [July 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/logstash-url-parameter-as-tags/279285 "2021-07-23T09:22:28Z")
Hi all, I have this working configuration that receives logs from heroku and process then using grok and add a couple of tags from enviroments vars. input { http { port =\> "${PORT}" tags =\> \["${TAG}… --- ## [Could not create index / connection refused every minute](https://discuss.elastic.co/t/could-not-create-index-connection-refused-every-minute/266723)
**Author:** [@Youssef\_CHTOUROU](https://discuss.elastic.co/u/Youssef_CHTOUROU)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 7:59am UTC](https://discuss.elastic.co/t/could-not-create-index-connection-refused-every-minute/266723 "2021-03-10T07:59:00Z")
Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.1 APM Agent language and version: Language : Java Version : 1.9 Description of the problem including expected versus actual behavior.… --- ## ["Rejecting mapping update to \[megacorp2\] as the final mapping would have more than 1 type: \[Broadcast, Inventory\]"},"status":400}](https://discuss.elastic.co/t/rejecting-mapping-update-to-megacorp2-as-the-final-mapping-would-have-more-than-1-type-broadcast-inventory-status-400/162543)
**Author:** [@Harish\_Kulkarni](https://discuss.elastic.co/u/Harish_Kulkarni)\ **Replies:** 1\ **Last updated:** [January 1, 2019, 2:22am UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-megacorp2-as-the-final-mapping-would-have-more-than-1-type-broadcast-inventory-status-400/162543 "2019-01-01T02:22:42Z")
I am using RestHighLevel Client 6.5.4 I am getting below error on Client Caused by: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://127.0.0.1:9200\], URI \[/megacorp2/Broadcast/Broadcast5?timeout=1… --- ## [Copy \_id to another retrievable field with Query String](https://discuss.elastic.co/t/copy--id-to-another-retrievable-field-with-query-string/23086)
**Author:** [@JZ1](https://discuss.elastic.co/u/JZ1)\ **Replies:** 1\ **Last updated:** [April 6, 2015, 6:55am UTC](https://discuss.elastic.co/t/copy--id-to-another-retrievable-field-with-query-string/23086 "2015-04-06T06:55:25Z")
Hi all, I want to make the \_id searchable/retrievable and copy its value to a field defined as "\_ft". This is my mapping. { "\_default\_": { "dynamic": "true", "\_all": { "enab… --- ## [How to get all document \_id of an elasticsearch index](https://discuss.elastic.co/t/how-to-get-all-document--id-of-an-elasticsearch-index/19518)
**Author:** [@shenwno](https://discuss.elastic.co/u/shenwno)\ **Replies:** 1\ **Last updated:** [August 29, 2014, 1:53am UTC](https://discuss.elastic.co/t/how-to-get-all-document--id-of-an-elasticsearch-index/19518 "2014-08-29T01:53:58Z")
Hi all, I'm trying to figure out a way to retrieve all the document '\_id' (ES internal \_id) from an index, e.g. the index has about 20 million documents. However, by using the get api, ES will do a paging and only … --- ## [INCREASE RAM USAGE FOR KIBANA INSTANCE](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 8\ **Last updated:** [November 14, 2022, 9:27am UTC](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836 "2022-11-14T09:27:22Z")
Kibana instance in the stack monitoring section shows Memory: 1.9/4.0 GB Is that the memory given to the entire kibana instance???? Can I increase this limit as the total RAM server got is 64 GB.... --- ## [Can anyone please offer assistance in relation to Multi-level Sankey diagrams with Kibana](https://discuss.elastic.co/t/can-anyone-please-offer-assistance-in-relation-to-multi-level-sankey-diagrams-with-kibana/288376)
**Author:** [@Buzzaes](https://discuss.elastic.co/u/Buzzaes)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 2:06pm UTC](https://discuss.elastic.co/t/can-anyone-please-offer-assistance-in-relation-to-multi-level-sankey-diagrams-with-kibana/288376 "2021-11-15T14:06:32Z")
Hi Everyone, I'm stuck getting a multi tier Sankey diagram working in Kibana. E.g. one that looks like this: I have a simple one working e.g. one with a single source and destination, as per here but I'm stuck o… --- ## [How to delete specific indexes from snapshot?](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581 "2021-04-08T11:24:43Z")
Hi Team, We use daily indices in elasticsearch and each day we take the snapshot of previous day in our snapshot repository. We want to delete specific indexes matching some pattern from the snapshots. Is it possible … --- ## [Kibana visualization stacked vertical chart bars](https://discuss.elastic.co/t/kibana-visualization-stacked-vertical-chart-bars/204591)
**Author:** [@totochorizo](https://discuss.elastic.co/u/totochorizo)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 1:41pm UTC](https://discuss.elastic.co/t/kibana-visualization-stacked-vertical-chart-bars/204591 "2019-10-25T13:41:16Z")
I'm trying to display data on vertical chart bars using some aggregations. For example, if I have this kind of data: { "username": "toto", "role": "master", "month": "october" }, { "username": "tata", "role": "… --- ## [Custom plugin installed fails to start logstash](https://discuss.elastic.co/t/custom-plugin-installed-fails-to-start-logstash/38505)
**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\ **Replies:** 1\ **Last updated:** [August 9, 2016, 12:36am UTC](https://discuss.elastic.co/t/custom-plugin-installed-fails-to-start-logstash/38505 "2016-08-09T00:36:26Z")
I have developed a custom logstash output plugin for cassandra. Gem gets built successfully and plugin gets installed successfully too. However When I start the logstash, it crashes with the below message: :message=\>"… --- ## [Upgrading ES from 2.1.1 to 2.2.0 - no known master node](https://discuss.elastic.co/t/upgrading-es-from-2-1-1-to-2-2-0-no-known-master-node/40797)
**Author:** [@MikeM](https://discuss.elastic.co/u/MikeM)\ **Replies:** 1\ **Last updated:** [March 3, 2016, 9:11pm UTC](https://discuss.elastic.co/t/upgrading-es-from-2-1-1-to-2-2-0-no-known-master-node/40797 "2016-03-03T21:11:05Z")
I'm running a 3 node cluster with version 2.1.1 running on Windows 2012 R2. Tried to install 2.2.0 which was released today. I'm following the instructions here: https://www.elastic.co/guide/en/elasticsearch/reference… --- ## [Topic Modeling Similarity](https://discuss.elastic.co/t/topic-modeling-similarity/18188)
**Author:** [@Kiran\_Sriharsha](https://discuss.elastic.co/u/Kiran_Sriharsha)\ **Replies:** 1\ **Last updated:** [June 19, 2014, 9:26am UTC](https://discuss.elastic.co/t/topic-modeling-similarity/18188 "2014-06-19T09:26:52Z")
Hi All I have a custom similarity jar for a particular property/field. How would I make use of such a jar. I am new to ES and have gone through basic documentation. Using other similarity metric among availabl… --- ## [Elasticsearch: Encrypting HTTP client communications - AccessControlException](https://discuss.elastic.co/t/elasticsearch-encrypting-http-client-communications-accesscontrolexception/257049)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 12:46pm UTC](https://discuss.elastic.co/t/elasticsearch-encrypting-http-client-communications-accesscontrolexception/257049 "2020-12-07T12:46:18Z")
Good day, I'm trying to set up Encrypting HTTP client communications and followed 'https://www.elastic.co/guide/en/elasticsearch/reference/7.10/configuring-tls.html#tls-http': My Elasticsearch Docker Container failes w… --- ## [ILM and using one index per Filebeat module](https://discuss.elastic.co/t/ilm-and-using-one-index-per-filebeat-module/205752)
**Author:** [@philraj](https://discuss.elastic.co/u/philraj)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 7:42pm UTC](https://discuss.elastic.co/t/ilm-and-using-one-index-per-filebeat-module/205752 "2019-10-31T19:42:29Z")
Hi, Is there any way (without disabling ILM) to have Filebeat use a different index for each enabled module? This was easy before ILM by adding conditions to the output.elasticsearch.indices: setup.template.name: "logs… --- ## [Disable embedded elastic search](https://discuss.elastic.co/t/disable-embedded-elastic-search/121691)
**Author:** [@sana](https://discuss.elastic.co/u/sana)\ **Replies:** 2\ **Last updated:** [March 1, 2018, 8:14am UTC](https://discuss.elastic.co/t/disable-embedded-elastic-search/121691 "2018-03-01T08:14:50Z")
i have all my log data in an external elasticsearch but everytime i configure spring data elasticsearch it create an embadded elastic search and ignore the external one, please how to configure it so connects to my insta… --- ## [Cannot install X-pack plugin](https://discuss.elastic.co/t/cannot-install-x-pack-plugin/91600)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 2\ **Last updated:** [July 3, 2017, 8:26am UTC](https://discuss.elastic.co/t/cannot-install-x-pack-plugin/91600 "2017-07-03T08:26:33Z")
Hi, So slightly higher version of X-pack wont work with ELK ? root@deb0:/opt/sw/elasticsearch-5.4.1# bin/elasticsearch-plugin install file:///opt/downloads/x-pack-5.4.3.zip -\> Downloading file:///opt/downloads/x-pack… --- ## [Using split in Timelion](https://discuss.elastic.co/t/using-split-in-timelion/84743)
**Author:** [@kmike82](https://discuss.elastic.co/u/kmike82)\ **Replies:** 2\ **Last updated:** [May 5, 2017, 6:29pm UTC](https://discuss.elastic.co/t/using-split-in-timelion/84743 "2017-05-05T18:29:32Z")
The "split" argument in the es function of Timelion defaults to aggregating by the top (descending) results. Is there a way to get the bottom (ascending) results? --- ## [Problem running on windows with embedded ES output](https://discuss.elastic.co/t/problem-running-on-windows-with-embedded-es-output/1730)
**Author:** [@nilsga](https://discuss.elastic.co/u/nilsga)\ **Replies:** 2\ **Last updated:** [April 5, 2016, 3:30am UTC](https://discuss.elastic.co/t/problem-running-on-windows-with-embedded-es-output/1730 "2016-04-05T03:30:57Z")
I'm trying to run logstash 1.5 with embedded ES, but I keep getting an error during startup: {:timestamp=\>"2015-06-02T15:55:02.275000+0200", :message=\>"The 'embedded =\> true' setting is enabled. This is not recommended… --- ## [ES 2.2 JavaScript, Highlight not working](https://discuss.elastic.co/t/es-2-2-javascript-highlight-not-working/41389)
**Author:** [@Raffaele\_Garofalo](https://discuss.elastic.co/u/Raffaele_Garofalo)\ **Replies:** 2\ **Last updated:** [February 15, 2016, 8:12am UTC](https://discuss.elastic.co/t/es-2-2-javascript-highlight-not-working/41389 "2016-02-15T08:12:36Z")
Hi guys, recently we upgraded to ElasticSearch 2.2 and we startred to use the Elasticsearch.js library for Angular. Right now I can execute all my old queries but the Highlight is not returned anymore. This is how I ca… --- ## [How do i rename a scripted field in kibana?](https://discuss.elastic.co/t/how-do-i-rename-a-scripted-field-in-kibana/39751)
**Author:** [@KavyaS](https://discuss.elastic.co/u/KavyaS)\ **Replies:** 2\ **Last updated:** [January 22, 2016, 6:02am UTC](https://discuss.elastic.co/t/how-do-i-rename-a-scripted-field-in-kibana/39751 "2016-01-22T06:02:14Z")
Is there a way i can change only the name of a scripted field? I'm using Kibana 4.3.0. For eg. I want to rename Bytes Read(GB) to Bytes Read. When i click on edit field, it doesn't allow name changes. --- ## [How to involve KQL search bar in Kibana Plugin](https://discuss.elastic.co/t/how-to-involve-kql-search-bar-in-kibana-plugin/283153)
**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\ **Replies:** 5\ **Last updated:** [October 1, 2021, 6:55pm UTC](https://discuss.elastic.co/t/how-to-involve-kql-search-bar-in-kibana-plugin/283153 "2021-10-01T18:55:46Z")
Are there any ways I can have this KQL search bar in my own plugin? By default, the plugin only contains the time filter on the right. --- ## [Unable to make any request to elastic cloud](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805)
**Author:** [@portal](https://discuss.elastic.co/u/portal)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 8:28am UTC](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805 "2020-01-14T08:28:57Z")
Hi, I have been working with elasticsearch for about a year now in development using version 7.1 and the high level rest client (java), deployed my application to azure and created a free trial elastic deployment but una… --- ## [Error in sending data from kafka to elasticsearch via logstash](https://discuss.elastic.co/t/error-in-sending-data-from-kafka-to-elasticsearch-via-logstash/189655)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 7:33pm UTC](https://discuss.elastic.co/t/error-in-sending-data-from-kafka-to-elasticsearch-via-logstash/189655 "2019-07-16T19:33:46Z")
Hi All, I am trying to send metricbeat data to beats input via graylog. Data is coming to streams and storing it in Elasticsearch index (metricbeat\_0). From the streams I am trying to send data to kafka via Manage Outp… --- ## [Joint database table and an array](https://discuss.elastic.co/t/joint-database-table-and-an-array/44839)
**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\ **Replies:** 5\ **Last updated:** [March 23, 2016, 8:48am UTC](https://discuss.elastic.co/t/joint-database-table-and-an-array/44839 "2016-03-23T08:48:56Z")
I have a database table and a document array +---------+--------+ | m\_id | state | +---------+--------+ | m1 | s1 | | m2 | s2 | | m3 | s1 | +---------+--------+ state\_array = array(s1=\>'… --- ## [Upgrading to Kibana 4.2](https://discuss.elastic.co/t/upgrading-to-kibana-4-2/33274)
**Author:** [@mgirndt](https://discuss.elastic.co/u/mgirndt)\ **Replies:** 5\ **Last updated:** [November 3, 2015, 12:00am UTC](https://discuss.elastic.co/t/upgrading-to-kibana-4-2/33274 "2015-11-03T00:00:40Z")
What is the easiest way to upgrade to Kibana 4.2? Do I have to download the .tar file and reinstall Kibana completely? Thanks, --- ## [Sorting across nodes](https://discuss.elastic.co/t/sorting-across-nodes/31873)
**Author:** [@adam1](https://discuss.elastic.co/u/adam1)\ **Replies:** 5\ **Last updated:** [October 9, 2015, 3:30pm UTC](https://discuss.elastic.co/t/sorting-across-nodes/31873 "2015-10-09T15:30:45Z")
Hi, I'm querying with a sort clause, and I'm getting unexpected results. I'm using the java client. I'm sorting by a long timestamp field. The generated sort clause looks like this: "sort" : \[ { "timestamp\_ms"… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491)
**Author:** [@MAD\_MIkE](https://discuss.elastic.co/u/MAD_MIkE)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 7:32pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491 "2022-05-16T19:32:11Z")
In order to install ELK in offline mode. I download all three rm package of Elasticsearch, kibana, logstash version 8.1.3 Elasticsearchsearch is installed successefully and service is running. Kibana is installed eithe… --- ## [AWS S3 bucket logs to Elastic search service (AWS) through log stash](https://discuss.elastic.co/t/aws-s3-bucket-logs-to-elastic-search-service-aws-through-log-stash/199737)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 6\ **Last updated:** [September 26, 2019, 6:35pm UTC](https://discuss.elastic.co/t/aws-s3-bucket-logs-to-elastic-search-service-aws-through-log-stash/199737 "2019-09-26T18:35:49Z")
I set up log stash on EC2 Linux (AWS) and Elastic search service on AWS and i have created one separate file (with input and output) under /etc/logstash/conf.d path but I am not getting logs in Kibana and conn… --- ## [Unable to add new node in 3 node cluster](https://discuss.elastic.co/t/unable-to-add-new-node-in-3-node-cluster/197490)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 6\ **Last updated:** [August 30, 2019, 11:52am UTC](https://discuss.elastic.co/t/unable-to-add-new-node-in-3-node-cluster/197490 "2019-08-30T11:52:13Z")
I have elasticsearch 7.3 installed in 4 nodes, i have successfully configured 3 node cluster but the thing that disturbs me is every time i want to add new node i have to delete old data (i.e /var/lib/elasticsearch/) the… [Previous page](https://discuss.elastic.co/top.md?page=1223&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1225&per_page=50&period=all)