# Top **URL:** https://discuss.elastic.co/top.md?page=1229&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1230 --- ## [Elasticsearch on server with ssd and hdd disks](https://discuss.elastic.co/t/elasticsearch-on-server-with-ssd-and-hdd-disks/144632)
**Author:** [@srf\_68](https://discuss.elastic.co/u/srf_68)\ **Replies:** 1\ **Last updated:** [August 16, 2018, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-on-server-with-ssd-and-hdd-disks/144632 "2018-08-16T06:56:40Z")
I have server with two SSD and two HDD disks. What is the best way to install and run Elasticsearch on this server to get the lowest index and search time. Is it possible to index documents on SSD disks first and move th… --- ## [How can I get child aggregations to respect a query applied to parents?](https://discuss.elastic.co/t/how-can-i-get-child-aggregations-to-respect-a-query-applied-to-parents/118045)
**Author:** [@RayRenteria](https://discuss.elastic.co/u/RayRenteria)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 5:38pm UTC](https://discuss.elastic.co/t/how-can-i-get-child-aggregations-to-respect-a-query-applied-to-parents/118045 "2018-02-03T17:38:33Z")
Greetings, I've successfully created parent and child aggregations matching a query that includes child document match criteria. The aggregations are correct for the "parent" document counts, but the counts for the chi… --- ## [How to calculate random no](https://discuss.elastic.co/t/how-to-calculate-random-no/113884)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 1\ **Last updated:** [January 3, 2018, 9:06am UTC](https://discuss.elastic.co/t/how-to-calculate-random-no/113884 "2018-01-03T09:06:46Z")
hello.. Anybody know how to generate random numbers between 0 to .5 using logstash. I use the following code but not working.. ruby { code =\> 'event.set("randomNumber", rand(100).to\_i())' } Thanks --- ## [Text Wrap on Vertical Bar or Line Chart](https://discuss.elastic.co/t/text-wrap-on-vertical-bar-or-line-chart/90957)
**Author:** [@adamoldham](https://discuss.elastic.co/u/adamoldham)\ **Replies:** 1\ **Last updated:** [June 27, 2017, 3:33pm UTC](https://discuss.elastic.co/t/text-wrap-on-vertical-bar-or-line-chart/90957 "2017-06-27T15:33:40Z")
Using Kibana 4.6.1. I have made a ton of custom visualizations (customer facing) for a bunch of metrics. I am using filter matches with labels to make it more understandable to the user. So it looks like the label o… --- ## [Bitwise operations in elasticsearch without script?](https://discuss.elastic.co/t/bitwise-operations-in-elasticsearch-without-script/40320)
**Author:** [@ArivazhaganJ](https://discuss.elastic.co/u/ArivazhaganJ)\ **Replies:** 1\ **Last updated:** [January 28, 2016, 4:29pm UTC](https://discuss.elastic.co/t/bitwise-operations-in-elasticsearch-without-script/40320 "2016-01-28T16:29:25Z")
I am using elasticsearch 1.5.1. I want to perform bit wise operations on my documents in elasticsearch. Bitwise equivalent in elasticsearch as in SQL: https://msdn.microsoft.com/en-us/library/ms176122.aspx I do not w… --- ## [Which memory is ECE actually assigning for node capacity?](https://discuss.elastic.co/t/which-memory-is-ece-actually-assigning-for-node-capacity/75535)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [February 18, 2017, 4:19am UTC](https://discuss.elastic.co/t/which-memory-is-ece-actually-assigning-for-node-capacity/75535 "2017-02-18T04:19:36Z")
When creating cluster , you set memory in Node capacity . However, I would like to be sure what this memory stands for. Does this memory refer to available memory in the document? Which my understanding of available… --- ## [Custom document processing during indexing](https://discuss.elastic.co/t/custom-document-processing-during-indexing/34620)
**Author:** [@ashoka\_klt](https://discuss.elastic.co/u/ashoka_klt)\ **Replies:** 4\ **Last updated:** [November 16, 2015, 3:12am UTC](https://discuss.elastic.co/t/custom-document-processing-during-indexing/34620 "2015-11-16T03:12:08Z")
I am new to elasticsearch. I want to do some custom processing while indexing a document and store the processed output to different set of fields. Is there any option available in elasticsearch to do custom document pro… --- ## [KNN Search super slow](https://discuss.elastic.co/t/knn-search-super-slow/321631)
**Author:** [@TopTea1](https://discuss.elastic.co/u/TopTea1)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 5:57pm UTC](https://discuss.elastic.co/t/knn-search-super-slow/321631 "2022-12-20T17:57:03Z")
Hi, I'm using ES v8.1.3 in a dockerized env with 4 shards. In my database I have around ~90M documents, and for each I have a dense vector with a dim of 768. But when I'm trying to perform a search using ANN (with cosine… --- ## [Logstash pipeline running but not loading the data](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427)
**Author:** [@acozme](https://discuss.elastic.co/u/acozme)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427 "2022-04-03T15:02:27Z")
Hello! I'm starting to learn Elastick Stack. Right now I'm trying to load some data from a csv file from a tutorial. I think everything is ok, the pipeline is running but no data is loaded to Elastic. This is the conf f… --- ## [Can't get text on a START\_OBJECT at 1:159\]\]](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-159/236543)
**Author:** [@Keener](https://discuss.elastic.co/u/Keener)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 1:51pm UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-159/236543 "2020-06-19T13:51:57Z")
HI, I am a first time user of this forum, I hope this is the place to post this question/issue. I have a customer that upgraded to ES 6.8.9 and now gets the following messages, what does this mean? Preformatted text'El… --- ## [Canvas: How to show average hourly data only on x axis from last 24 hours?](https://discuss.elastic.co/t/canvas-how-to-show-average-hourly-data-only-on-x-axis-from-last-24-hours/189290)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 1:03am UTC](https://discuss.elastic.co/t/canvas-how-to-show-average-hourly-data-only-on-x-axis-from-last-24-hours/189290 "2019-07-09T01:03:58Z")
How can i show the average hourly data from last 24 hours? Do i handle this on the essql query side or should take a set of raw data from elasticsearch and utilize the coded expression on canvas to show last few hourly… --- ## [Problem with Index lifecycle management](https://discuss.elastic.co/t/problem-with-index-lifecycle-management/189143)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 2\ **Last updated:** [July 5, 2019, 5:44pm UTC](https://discuss.elastic.co/t/problem-with-index-lifecycle-management/189143 "2019-07-05T17:44:49Z")
Hi All... Here I am trying to create an Index LifeCycle management policy which Initially store the index in the hot node for maximum 10 minutes. Next, that index should move to warm node, forcemerge and Shrink operat… --- ## [Question on \`index\_phrases\` behavior](https://discuss.elastic.co/t/question-on-index-phrases-behavior/180439)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 1:24pm UTC](https://discuss.elastic.co/t/question-on-index-phrases-behavior/180439 "2019-05-10T13:24:24Z")
I'm looking at using \[index\_phrases\](https://www.elastic.co/guide/en/elasticsearch/reference/master/index-phrases.html) instead of explicitly creating a subfield with shingles, but I'm a little confused on the behavior. … --- ## [Tree structure and using them in cross document queries](https://discuss.elastic.co/t/tree-structure-and-using-them-in-cross-document-queries/119373)
**Author:** [@ftaran](https://discuss.elastic.co/u/ftaran)\ **Replies:** 2\ **Last updated:** [February 11, 2018, 11:19am UTC](https://discuss.elastic.co/t/tree-structure-and-using-them-in-cross-document-queries/119373 "2018-02-11T11:19:04Z")
I am trying to model cities and regions in elasticsearch, these would naturally be stored as a tree, whether they would be nested documents or parent child indexes would be dependent on how often we would have to update … --- ## [Log files that dont exist](https://discuss.elastic.co/t/log-files-that-dont-exist/62202)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 2\ **Last updated:** [October 4, 2016, 9:32pm UTC](https://discuss.elastic.co/t/log-files-that-dont-exist/62202 "2016-10-04T21:32:01Z")
Lets say I want to maintain a single filebeat.yml file for all of our servers. Obviously all of the servers server different applications. What what would happen if a filebeat.yml had 50 input log files, but only one or … --- ## [Mathemathical Operation on Date or Timestamp](https://discuss.elastic.co/t/mathemathical-operation-on-date-or-timestamp/51334)
**Author:** [@sombilat](https://discuss.elastic.co/u/sombilat)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 11:57am UTC](https://discuss.elastic.co/t/mathemathical-operation-on-date-or-timestamp/51334 "2016-05-31T11:57:28Z")
Hello, I want to perform a Mathemathical operation on a date field. I am getting a timestamp field like so: add\_field =\> \[ "received\_at", "%{@timestamp}" \] Now, I will create a seperate field with a Date before… --- ## [Nest Client Raw String](https://discuss.elastic.co/t/nest-client-raw-string/46459)
**Author:** [@David\_Greenwell](https://discuss.elastic.co/u/David_Greenwell)\ **Replies:** 2\ **Last updated:** [April 18, 2016, 2:46pm UTC](https://discuss.elastic.co/t/nest-client-raw-string/46459 "2016-04-18T14:46:15Z")
While upgrading to elastic 2.0 I am running into a snag. In Nest 1.0, I could read an index's settings from a file and configure the index on creation using the raw string. Is there a way to the something similar in N… --- ## [Storing large amount of data in ES](https://discuss.elastic.co/t/storing-large-amount-of-data-in-es/11399)
**Author:** [@Anand\_Nalya](https://discuss.elastic.co/u/Anand_Nalya)\ **Replies:** 2\ **Last updated:** [April 2, 2013, 3:30am UTC](https://discuss.elastic.co/t/storing-large-amount-of-data-in-es/11399 "2013-04-02T03:30:34Z")
Hi, We have a use-case in which we need to index petabytes of data into ES. I was assuming that all the indices will be stored in HDFS using the HDFS gateway. But from the guide, I understand that each ES node wil… --- ## [Log4j Vulnerability: JVM Options not picked from location mentioned in %ES\_PATH\_CONF%](https://discuss.elastic.co/t/log4j-vulnerability-jvm-options-not-picked-from-location-mentioned-in-es-path-conf/292516)
**Author:** [@nikhilagrawaldotnet](https://discuss.elastic.co/u/nikhilagrawaldotnet)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 9:52am UTC](https://discuss.elastic.co/t/log4j-vulnerability-jvm-options-not-picked-from-location-mentioned-in-es-path-conf/292516 "2021-12-22T09:52:47Z")
Does anyone know why setting option -Dlog4j2.formatMsgNoLookups=true in jvm.options file does not work? Elasticsearch version (bin/elasticsearch --version): 7.5.1 Plugins installed: None JVM version (java -version): … --- ## [Logstash pipline optimization](https://discuss.elastic.co/t/logstash-pipline-optimization/236280)
**Author:** [@abhisheksimion](https://discuss.elastic.co/u/abhisheksimion)\ **Replies:** 3\ **Last updated:** [June 28, 2020, 6:20am UTC](https://discuss.elastic.co/t/logstash-pipline-optimization/236280 "2020-06-28T06:20:37Z")
I have multiple configurations defined in the pipelines.yml. All the configurations are responsible for pushing data from a jDBC source to Elasticsearch. I want to know what is the optimal settings required to do so. As … --- ## [Fielddata error preventing Authentications tab populating](https://discuss.elastic.co/t/fielddata-error-preventing-authentications-tab-populating/197337)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 3\ **Last updated:** [September 4, 2019, 3:41am UTC](https://discuss.elastic.co/t/fielddata-error-preventing-authentications-tab-populating/197337 "2019-09-04T03:41:04Z")
Hi all, I'm using Filebeat 7.3.1 with Elastic Cloud 7.3.0 and the Authentications pane (in SIEM app) is empty (despite being able to view them in Discover / filebeat index. When I inspect the response in the SIEM app I… --- ## [Infrastructure not fully working for users with limited xpack privileges](https://discuss.elastic.co/t/infrastructure-not-fully-working-for-users-with-limited-xpack-privileges/181761)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 4:28pm UTC](https://discuss.elastic.co/t/infrastructure-not-fully-working-for-users-with-limited-xpack-privileges/181761 "2019-05-20T16:28:32Z")
Hello, We have multiple Kibana Spaces and each Space has a number of users with limited privileges. All users of a Kibana Space have access to hosts where a certain field is set, for example: Read and view\_index\_metad… --- ## [ES version and phonetic version](https://discuss.elastic.co/t/es-version-and-phonetic-version/23047)
**Author:** [@Mark\_Bramer](https://discuss.elastic.co/u/Mark_Bramer)\ **Replies:** 8\ **Last updated:** [April 1, 2015, 11:07pm UTC](https://discuss.elastic.co/t/es-version-and-phonetic-version/23047 "2015-04-01T23:07:37Z")
Hello, In general, how important is it that plugin versions match the Elasticsearch version? Or are (can) plugins be versioned with no correlation to Elasticsearch's version at all? Specific case: I have ES 1… --- ## [I'm getting this error on bulk](https://discuss.elastic.co/t/im-getting-this-error-on-bulk/22312)
**Author:** [@Raz\_Lachyani](https://discuss.elastic.co/u/Raz_Lachyani)\ **Replies:** 3\ **Last updated:** [February 22, 2015, 3:07pm UTC](https://discuss.elastic.co/t/im-getting-this-error-on-bulk/22312 "2015-02-22T15:07:28Z")
I'm getting this error while sending bulks from php client: Elasticsearch Bulk failed ! cause : {"error":"ElasticsearchParseException\[Failed to derive xcontent from org.elasticsearch.common.bytes.BytesArray@1\]","s… --- ## [Is coordinate node useful in a cluster with 9 nodes?](https://discuss.elastic.co/t/is-coordinate-node-useful-in-a-cluster-with-9-nodes/271848)
**Author:** [@Arab.Soheyl](https://discuss.elastic.co/u/Arab.Soheyl)\ **Replies:** 5\ **Last updated:** [May 2, 2021, 6:59am UTC](https://discuss.elastic.co/t/is-coordinate-node-useful-in-a-cluster-with-9-nodes/271848 "2021-05-02T06:59:06Z")
I have an Elasticsearch cluster as below: 6 data node(hot/warm) 3 data(cold)/master node Does adding 2 coordinate nodes increase performance? or reduce? --- ## [Highlight entire row in kibana dashboard](https://discuss.elastic.co/t/highlight-entire-row-in-kibana-dashboard/243056)
**Author:** [@raj\_elk](https://discuss.elastic.co/u/raj_elk)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 4:30pm UTC](https://discuss.elastic.co/t/highlight-entire-row-in-kibana-dashboard/243056 "2020-07-29T16:30:01Z")
Hi, I have extracted error\_type(INFO,ERROR) from logs so want to highlight each row with different color based on type. i have tried but it is highlighting only that field not entire row. how this can be implemented. --- ## [Representing ratio between two indexes or visualization](https://discuss.elastic.co/t/representing-ratio-between-two-indexes-or-visualization/199422)
**Author:** [@Juan\_Francisco\_Verho](https://discuss.elastic.co/u/Juan_Francisco_Verho)\ **Replies:** 5\ **Last updated:** [September 20, 2019, 4:57pm UTC](https://discuss.elastic.co/t/representing-ratio-between-two-indexes-or-visualization/199422 "2019-09-20T16:57:53Z")
Let's suppose I have two indexes and one visualization for each one: IndexA with unique count of views per week IndexB with unique count of likes per week I would like to create a third visualization that is the ratio… --- ## [Custom Dashboard in kibana](https://discuss.elastic.co/t/custom-dashboard-in-kibana/176070)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 5\ **Last updated:** [April 19, 2019, 10:21am UTC](https://discuss.elastic.co/t/custom-dashboard-in-kibana/176070 "2019-04-19T10:21:57Z")
Hi I am trying to create a dashboard to monitor different components of our software, migrating from one environment to another. Package A Dev --\> test --\> QA --\> UAT --\> Prod Package B Dev --\> test --\> QA --\> UAT -… --- ## [What's the cause of the error and how to fix it?](https://discuss.elastic.co/t/whats-the-cause-of-the-error-and-how-to-fix-it/310480)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [July 24, 2022, 3:46pm UTC](https://discuss.elastic.co/t/whats-the-cause-of-the-error-and-how-to-fix-it/310480 "2022-07-24T15:46:14Z")
when i try to create a token for kibana ::: elkfiras@elkfiras:/usr/share/elasticsearch/bin$ sudo ./elasticsearch-create-enrollment-token -s kibana \[sudo\] password for elkfiras: 12:57:33.755 \[main\] WARN org.elasticsearc… --- ## [Appending Random number in csv file name](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 8:19am UTC](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575 "2021-02-11T08:19:59Z")
Hi, I want to append random number after the file name. output { stdout { codec =\> rubydebug } csv { # elastic field name fields =\> \["@timestamp","requestid","ngnix.responsebytes","ngnix.cpu.usage"\] #… --- ## [Writing the Filebeat Registry](https://discuss.elastic.co/t/writing-the-filebeat-registry/144289)
**Author:** [@Christian\_Wohrle](https://discuss.elastic.co/u/Christian_Wohrle)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 7:27am UTC](https://discuss.elastic.co/t/writing-the-filebeat-registry/144289 "2018-08-14T07:27:51Z")
Hi, I´m using filebeat 6.3.2 in a docker container. Shipping Logs works, and it looks the registry /usr/share/filebeat/data/registry is updated (timestamp increases, length changes). But I´m getting these errors every… --- ## [Iterate Over all Documents for a specific index and type](https://discuss.elastic.co/t/iterate-over-all-documents-for-a-specific-index-and-type/119335)
**Author:** [@Tameem\_Ahmed](https://discuss.elastic.co/u/Tameem_Ahmed)\ **Replies:** 1\ **Last updated:** [February 13, 2018, 4:15pm UTC](https://discuss.elastic.co/t/iterate-over-all-documents-for-a-specific-index-and-type/119335 "2018-02-13T16:15:02Z")
I am newbie and this is my first attempt. I have few documents with this json { "\_index": "msm", "\_type": "bat", "\_id": "AWBP0tthO9VGNRQOwYSB", "\_version": 1, "\_score": 1, "\_source": { "testMethodsSummary": { "… --- ## [Analyze case sensitive/insensitive](https://discuss.elastic.co/t/analyze-case-sensitive-insensitive/108946)
**Author:** [@Anthonio\_Martinez](https://discuss.elastic.co/u/Anthonio_Martinez)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 6:19am UTC](https://discuss.elastic.co/t/analyze-case-sensitive-insensitive/108946 "2017-11-24T06:19:05Z")
Hello, I'm new to the forum, I have to ask for help to solve a problem, I have an "analyzer" created in the following way that will leave you lines below, however, I need it to work as follows: 1.- Perform the search o… --- ## [Find last login for all or selected users](https://discuss.elastic.co/t/find-last-login-for-all-or-selected-users/49642)
**Author:** [@elucca](https://discuss.elastic.co/u/elucca)\ **Replies:** 1\ **Last updated:** [May 10, 2016, 3:11pm UTC](https://discuss.elastic.co/t/find-last-login-for-all-or-selected-users/49642 "2016-05-10T15:11:44Z")
I would return only the last @timestamp of all users and not just a user from script return last @timestamp from one user. "from" : 0, "size" : 1, "query" : { "bool" : { "must" : \[ { "match" : { … --- ## [Copy analyzed text into another field](https://discuss.elastic.co/t/copy-analyzed-text-into-another-field/152488)
**Author:** [@das\_boot](https://discuss.elastic.co/u/das_boot)\ **Replies:** 0\ **Last updated:** [October 15, 2018, 11:59am UTC](https://discuss.elastic.co/t/copy-analyzed-text-into-another-field/152488 "2018-10-15T11:59:03Z")
We are trying to build a WordCloud over four Text-Fields. Each field has its own Stop Analyzer. For example TextFr with a French Stop Analyzer, TextDe with a German Stop Analyzer. The analyzed result should be copied in… --- ## [Best strategy to handle dot in field names](https://discuss.elastic.co/t/best-strategy-to-handle-dot-in-field-names/135293)
**Author:** [@gauravbhatt13](https://discuss.elastic.co/u/gauravbhatt13)\ **Replies:** 0\ **Last updated:** [June 11, 2018, 6:15am UTC](https://discuss.elastic.co/t/best-strategy-to-handle-dot-in-field-names/135293 "2018-06-11T06:15:18Z")
We are migrating from ES 2.4 to ES 6.x. In our initial tests we found that we have suppressed 'dot in field name' error in 2.4 by allowing them. Now we have indices with dot in field names and also the scenario where we … --- ## [ERROR: metricset jolokia.jmx: mbean properties must be in the form key=value](https://discuss.elastic.co/t/error-metricset-jolokia-jmx-mbean-properties-must-be-in-the-form-key-value/215778)
**Author:** [@vmoragar](https://discuss.elastic.co/u/vmoragar)\ **Replies:** 6\ **Last updated:** [January 22, 2020, 3:55pm UTC](https://discuss.elastic.co/t/error-metricset-jolokia-jmx-mbean-properties-must-be-in-the-form-key-value/215778 "2020-01-22T15:55:28Z")
Hi, I use metricbeat (jolokia) to get jmx information in Websphere. jmx.mappings: mbean: 'WebSphere:type=ThreadPool,name=WebContainer,\*' attributes: attr: maximumSize field: threadpool.maximumSize The error is: … --- ## [Error when mapping coordinates](https://discuss.elastic.co/t/error-when-mapping-coordinates/136586)
**Author:** [@aeissa](https://discuss.elastic.co/u/aeissa)\ **Replies:** 6\ **Last updated:** [June 21, 2018, 12:43am UTC](https://discuss.elastic.co/t/error-when-mapping-coordinates/136586 "2018-06-21T00:43:06Z")
Been stuck on this for a while. In Python, I'm using the Tweepy and Elasticsearch libraries to stream tweets to an Elasticsearch index. In my Python script, my index is created as: settings = { 'settings': { 'number\_o… --- ## [Anomaly detection Statuscode 404](https://discuss.elastic.co/t/anomaly-detection-statuscode-404/211142)
**Author:** [@MisterLamp](https://discuss.elastic.co/u/MisterLamp)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 9:20am UTC](https://discuss.elastic.co/t/anomaly-detection-statuscode-404/211142 "2019-12-12T09:20:41Z")
Hi, we are running our elastic stack in version 7.3.2. A handful of clients has auditbeat installend and configured and I can see the data at SIEM. We have activated the trial license to use features like anomaly detec… --- ## [Kibana. данные из двух индексов](https://discuss.elastic.co/t/kibana/174065)
**Author:** [@pr0b3l](https://discuss.elastic.co/u/pr0b3l)\ **Replies:** 4\ **Last updated:** [March 28, 2019, 2:40pm UTC](https://discuss.elastic.co/t/kibana/174065 "2019-03-28T14:40:55Z")
Добрый день! Подскажите, в какую сторону копать. Есть инструменты, каждый из которых складывает данные в свой индекс. Я хочу объединить их по определенному полю и вывести информацию на дашборде в Кибане. Куда копать, п… --- ## [How to write a search query to find values of multiple fields](https://discuss.elastic.co/t/how-to-write-a-search-query-to-find-values-of-multiple-fields/72314)
**Author:** [@ja\_chan](https://discuss.elastic.co/u/ja_chan)\ **Replies:** 4\ **Last updated:** [January 27, 2017, 4:00pm UTC](https://discuss.elastic.co/t/how-to-write-a-search-query-to-find-values-of-multiple-fields/72314 "2017-01-27T16:00:59Z")
I have 10 id's and I want particular field value from all id's to be displayed .I wrote the following query.It is displaying all the fields in the id's and when i try to sort out with fields names,it's showing error.Plea… --- ## [Missing some docs when using bulkprocessor! Is it a bug?](https://discuss.elastic.co/t/missing-some-docs-when-using-bulkprocessor-is-it-a-bug/51257)
**Author:** [@Yongyao\_Jiang](https://discuss.elastic.co/u/Yongyao_Jiang)\ **Replies:** 4\ **Last updated:** [May 30, 2016, 2:08am UTC](https://discuss.elastic.co/t/missing-some-docs-when-using-bulkprocessor-is-it-a-bug/51257 "2016-05-30T02:08:11Z")
I was using Bulkprocessor to index some documents (1005), but I only ended up with 1003 in ES. Also, this value could change when I change the settings of bulkprocessor (setConcurrentRequests to 10). Can someone help me … --- ## [Grab value from message field and add it to a new field](https://discuss.elastic.co/t/grab-value-from-message-field-and-add-it-to-a-new-field/49358)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 4\ **Last updated:** [May 6, 2016, 9:37pm UTC](https://discuss.elastic.co/t/grab-value-from-message-field-and-add-it-to-a-new-field/49358 "2016-05-06T21:37:59Z")
Hi, How do i grab a particular value from my initial message field and use to configure it in a new field. My message field looks like this: 2016-05-05 23:47:30,939 INFO \[qtp796460995-1114\] \[puppet-server\] Puppe… --- ## [Sum of all values in table visual kibana](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522 "2022-03-24T12:33:24Z")
Hi all, I need to add a table view in my kibana dashboard with a sum for all columns like Excel. (see the picture. Is there any idea. --- ## [Painless Script with name contain dot](https://discuss.elastic.co/t/painless-script-with-name-contain-dot/249231)
**Author:** [@Narendra\_Jain](https://discuss.elastic.co/u/Narendra_Jain)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 2:21am UTC](https://discuss.elastic.co/t/painless-script-with-name-contain-dot/249231 "2020-10-03T02:21:15Z")
Hi, I have field name with dot. like param.request\_id, this is actual field name and not Actual: { "param.request\_id": 12343 } Not like { "param" : { "request\_id": 12343 } } . when i try scripted filed i… --- ## [APM NodeJS default code is resulting in error](https://discuss.elastic.co/t/apm-nodejs-default-code-is-resulting-in-error/213886)
**Author:** [@moscha](https://discuss.elastic.co/u/moscha)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 12:33pm UTC](https://discuss.elastic.co/t/apm-nodejs-default-code-is-resulting-in-error/213886 "2020-01-06T12:33:31Z")
Hello all. I installed the newest version of APM Server on a machine and I am trying to test an apm agent on another machine. The code is very simple, and I took it straight from Elastic's example: var apm = require('e… --- ## [Is this support site backed by (running) Elasticsearch?](https://discuss.elastic.co/t/is-this-support-site-backed-by-running-elasticsearch/185727)
**Author:** [@AFShin](https://discuss.elastic.co/u/AFShin)\ **Replies:** 2\ **Last updated:** [June 19, 2019, 11:10pm UTC](https://discuss.elastic.co/t/is-this-support-site-backed-by-running-elasticsearch/185727 "2019-06-19T23:10:59Z")
Personally liked the way this site works, and the rankings, visitors and other metrics. Just curious to see if that is ok to share, is elastic search powering all of this? --- ## [Negative longs unsupported, use writeLong or writeZLong for negative numbers](https://discuss.elastic.co/t/negative-longs-unsupported-use-writelong-or-writezlong-for-negative-numbers/162201)
**Author:** [@jmkim](https://discuss.elastic.co/u/jmkim)\ **Replies:** 2\ **Last updated:** [December 27, 2018, 8:52am UTC](https://discuss.elastic.co/t/negative-longs-unsupported-use-writelong-or-writezlong-for-negative-numbers/162201 "2018-12-27T08:52:06Z")
Hi everyone! I am getting a "failed to execute on node". In elasticsearch log file its showing below error.... \[2018-12-27T14:33:00,348\]\[DEBUG\]\[o.e.a.a.i.s.TransportIndicesStatsAction\] \[node-1\] failed to execute \[indic… --- ## [How to save search filter automatically using CURL command](https://discuss.elastic.co/t/how-to-save-search-filter-automatically-using-curl-command/115591)
**Author:** [@ashokkrishna99\_Vemur](https://discuss.elastic.co/u/ashokkrishna99_Vemur)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 2:05am UTC](https://discuss.elastic.co/t/how-to-save-search-filter-automatically-using-curl-command/115591 "2018-01-18T02:05:53Z")
Hi, When i'm trying to save a search filter i'm getting the error. Please find the below output. \[root@example ~\]# curl -XPUT http://localhost:9200/.kibana/search/http-response-200 -d '{"\_id": "523c22b0-fa06-11e7-9220-… --- ## [Need help to index data from MongoDB (3.2.7) into Elastic Search (5.6.3)](https://discuss.elastic.co/t/need-help-to-index-data-from-mongodb-3-2-7-into-elastic-search-5-6-3/105712)
**Author:** [@rahmathullatssr](https://discuss.elastic.co/u/rahmathullatssr)\ **Replies:** 2\ **Last updated:** [November 1, 2017, 1:44pm UTC](https://discuss.elastic.co/t/need-help-to-index-data-from-mongodb-3-2-7-into-elastic-search-5-6-3/105712 "2017-11-01T13:44:19Z")
Hi All, I need help to index MongoDB (3.2.7) data into Elastic Search (5.6.3) In a real-time manner. After some research, I found that river plugin is deprecated. But I could read that MongoConnector can be used. Is Mon… [Previous page](https://discuss.elastic.co/top.md?page=1228&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1230&per_page=50&period=all)