# Top

**URL:** https://discuss.elastic.co/top.md?page=1232&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1233

---

## [Kibana Uncaught TypeError](https://discuss.elastic.co/t/kibana-uncaught-typeerror/82107)

<div class="topic-metadata">

**Author:** [@banderson](https://discuss.elastic.co/u/banderson)\
**Replies:** 1\
**Last updated:** [April 12, 2017, 8:06am UTC](https://discuss.elastic.co/t/kibana-uncaught-typeerror/82107 "2017-04-12T08:06:11Z")

</div>

We are running Kibana 5.3 on RedHat Enterprise Server version 7. I installed Kibana from the RPM repository and installed the x-pack plugin. Kibana starts and is running on the server. Opening Kibana in a web browser res…

---

## [Java API for filter\_path in elastic search](https://discuss.elastic.co/t/java-api-for-filter-path-in-elastic-search/80586)

<div class="topic-metadata">

**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\
**Replies:** 1\
**Last updated:** [March 31, 2017, 7:55am UTC](https://discuss.elastic.co/t/java-api-for-filter-path-in-elastic-search/80586 "2017-03-31T07:55:12Z")

</div>

Hi, I need to reduce the response size of elastic search query, So I found one way to use Response Filtering through filter\_path parameter in URL. GET testindex-2016.04.14/\_search?filter\_path=aggregations.testAggs.buc…

---

## [Create template is failing - "Could not resolve host:localhost"](https://discuss.elastic.co/t/create-template-is-failing-could-not-resolve-host-localhost/58770)

<div class="topic-metadata">

**Author:** [@Denis\_Wessels](https://discuss.elastic.co/u/Denis_Wessels)\
**Replies:** 1\
**Last updated:** [August 24, 2016, 6:49am UTC](https://discuss.elastic.co/t/create-template-is-failing-could-not-resolve-host-localhost/58770 "2016-08-24T06:49:56Z")

</div>

I use elastic search for logging.Eevery day I have a new log index automatically created, the pattern for the name of the index is "log-\*". I have a property in this index called Message which is being split into multip…

---

## [Multiple instances of Kibana](https://discuss.elastic.co/t/multiple-instances-of-kibana/27991)

<div class="topic-metadata">

**Author:** [@camarasingham](https://discuss.elastic.co/u/camarasingham)\
**Replies:** 1\
**Last updated:** [August 25, 2015, 6:13am UTC](https://discuss.elastic.co/t/multiple-instances-of-kibana/27991 "2015-08-25T06:13:49Z")

</div>

Is is possible to run multiple instances of kibana, as long as the internal kibana index is set to different values in config.js? I have just done some custom modifications to the kibana source and would like to deploy…

---

## [Switching policies for an index](https://discuss.elastic.co/t/switching-policies-for-an-index/296200)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 5\
**Last updated:** [February 16, 2022, 9:51am UTC](https://discuss.elastic.co/t/switching-policies-for-an-index/296200 "2022-02-16T09:51:39Z")

</div>

Hey! Is there any documentation on switching ilm policies for 7.10.0. I could find only for other versions like here: Switching policies for an index | Elasticsearch Guide \[7.4\] | Elastic My question is: Can I switch …

---

## [Can't display tooltip at all in Vega Pie Chart](https://discuss.elastic.co/t/cant-display-tooltip-at-all-in-vega-pie-chart/264056)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 5\
**Last updated:** [February 13, 2021, 6:44pm UTC](https://discuss.elastic.co/t/cant-display-tooltip-at-all-in-vega-pie-chart/264056 "2021-02-13T18:44:11Z")

</div>

My following vega code correctly displays the actual chart and legend. However, I have been trying to get tooltip to display some data but the tooltips are not showing at all. Here is my latest code { "$schema": "http…

---

## [Multiline read 2 times](https://discuss.elastic.co/t/multiline-read-2-times/122684)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 5\
**Last updated:** [March 12, 2018, 12:42pm UTC](https://discuss.elastic.co/t/multiline-read-2-times/122684 "2018-03-12T12:42:41Z")

</div>

I follow this example: https://www.elastic.co/guide/en/beats/filebeat/master/\_examples\_of\_multiline\_configuration.html I read the multiline properly but I read also the same log line by line. \[Sans%20titre\] My config: …

---

## [Does Kafka Module support the metrics here?](https://discuss.elastic.co/t/does-kafka-module-support-the-metrics-here/89979)

<div class="topic-metadata">

**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\
**Replies:** 5\
**Last updated:** [June 27, 2017, 8:21am UTC](https://discuss.elastic.co/t/does-kafka-module-support-the-metrics-here/89979 "2017-06-27T08:21:06Z")

</div>

Hi guys, I'm checking the current Kafka module can support most of the metrics listed here? https://blog.serverdensity.com/how-to-monitor-kafka/ I'm asking this in the elastic web site I cannot see those in the Expor…

---

## [Vector search in Enterprise Search over documents from Confluence Server](https://discuss.elastic.co/t/vector-search-in-enterprise-search-over-documents-from-confluence-server/337448)

<div class="topic-metadata">

**Author:** [@dodiehun](https://discuss.elastic.co/u/dodiehun)\
**Replies:** 3\
**Last updated:** [July 20, 2023, 2:32pm UTC](https://discuss.elastic.co/t/vector-search-in-enterprise-search-over-documents-from-confluence-server/337448 "2023-07-20T14:32:13Z")

</div>

Hi all, I am evaluating vector search functionality over Confluence documents in Elastic Enterprise Search. I'm using the built-in Confluence Server Connector to ingest all documents from Confluence, and also plan to us…

---

## [Logsstash and apache kafka](https://discuss.elastic.co/t/logsstash-and-apache-kafka/307559)

<div class="topic-metadata">

**Author:** [@Henk\_Stobbe](https://discuss.elastic.co/u/Henk_Stobbe)\
**Replies:** 3\
**Last updated:** [June 18, 2022, 3:53pm UTC](https://discuss.elastic.co/t/logsstash-and-apache-kafka/307559 "2022-06-18T15:53:03Z")

</div>

hello, Newbee so maybe strange question. In my enviroments Kafka is used and the main reason for this is the ability to temporaly queue data. This functionality is (now) available in logstash. So simple question, can …

---

## [If else condition with logstash filter](https://discuss.elastic.co/t/if-else-condition-with-logstash-filter/263517)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [February 7, 2021, 3:24pm UTC](https://discuss.elastic.co/t/if-else-condition-with-logstash-filter/263517 "2021-02-07T15:24:13Z")

</div>

Hi Folks, I am trying to achive certain conditions with logstash and wondering \\if - if-else statement or validation is possible in Logstash filter? I have below messages in json and parsing DMARC logs with logstash. I…

---

## [Elasticsearch: transpose and aggregate?](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310)

<div class="topic-metadata">

**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\
**Replies:** 3\
**Last updated:** [September 9, 2019, 4:02pm UTC](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310 "2019-09-09T16:02:13Z")

</div>

I am using the ES 6.5. When I fetch the required messages, I have to transpose and aggregate it. See example for more details. Message retrieved - 2 messages retried for example: { "\_index": "index\_name", "\_typ…

---

## [Swap still reported even though Page file is disabled](https://discuss.elastic.co/t/swap-still-reported-even-though-page-file-is-disabled/102773)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 5:23pm UTC](https://discuss.elastic.co/t/swap-still-reported-even-though-page-file-is-disabled/102773 "2017-10-11T17:23:40Z")

</div>

I originally asked this question a while back: I was never able to get around it. I just set up a new cluster with significantly more resources in the hopes of improving our perf. I still find that there is a ton of …

---

## [Configure logstash input from database values?](https://discuss.elastic.co/t/configure-logstash-input-from-database-values/32763)

<div class="topic-metadata">

**Author:** [@jsps](https://discuss.elastic.co/u/jsps)\
**Replies:** 3\
**Last updated:** [October 22, 2015, 11:28am UTC](https://discuss.elastic.co/t/configure-logstash-input-from-database-values/32763 "2015-10-22T11:28:42Z")

</div>

I've got a dynamic number of sites. There is a RESTful api on each site that is used to consume their logs. The RESTful endpoint for each site is stored in a single DB on server x. I want to create a logstash input plugi…

---

## [MapperParsingException - object mapping for \[patient\] tried to parse field \[address\] as object, but got EOF, has a concrete value been provided to it](https://discuss.elastic.co/t/mapperparsingexception-object-mapping-for-patient-tried-to-parse-field-address-as-object-but-got-eof-has-a-concrete-value-been-provided-to-it/23896)

<div class="topic-metadata">

**Author:** [@mshv](https://discuss.elastic.co/u/mshv)\
**Replies:** 0\
**Last updated:** [June 18, 2015, 9:21am UTC](https://discuss.elastic.co/t/mapperparsingexception-object-mapping-for-patient-tried-to-parse-field-address-as-object-but-got-eof-has-a-concrete-value-been-provided-to-it/23896 "2015-06-18T09:21:57Z")

</div>

INDEX-NAME: patient INDEX-TYPE: patientinfo here is my simple mapping json file : { "patientinfo": { "properties": { "address": { "type": "nested", "properties": { …

---

## [Saved Visualizations from Discover](https://discuss.elastic.co/t/saved-visualizations-from-discover/312795)

<div class="topic-metadata">

**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\
**Replies:** 5\
**Last updated:** [September 13, 2022, 7:28am UTC](https://discuss.elastic.co/t/saved-visualizations-from-discover/312795 "2022-09-13T07:28:48Z")

</div>

Dear Elastic Community, One customer is using Discover to search their logs. Sometimes they create a very specific query by which they obtain some interesting results. They would like to visualize them with one of the e…

---

## [Vega scatterplot with specific color to each value](https://discuss.elastic.co/t/vega-scatterplot-with-specific-color-to-each-value/262268)

<div class="topic-metadata">

**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\
**Replies:** 4\
**Last updated:** [January 28, 2021, 10:59am UTC](https://discuss.elastic.co/t/vega-scatterplot-with-specific-color-to-each-value/262268 "2021-01-28T10:59:06Z")

</div>

I have an index in which each document has ‘X Location’ field, ‘Y Location’ field and ‘rgb’ field. The ‘rgb’ field contains rgb values of string format rgb(x,y,z). I would like to visualize the data, and I tried to m…

---

## [How to disable login page for oss Kibana-7.2.1](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672)

<div class="topic-metadata">

**Author:** [@deadpool](https://discuss.elastic.co/u/deadpool)\
**Replies:** 4\
**Last updated:** [August 19, 2020, 11:24pm UTC](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672 "2020-08-19T23:24:09Z")

</div>

Hi, we are using oss Kibana 7.2.1 (docker.elastic.co/kibana/kibana-oss:7.2.1) docker image for connecting to Elastic search which is having username and password Authentication and it is working by pulling username,passw…

---

## [Elastic APM](https://discuss.elastic.co/t/elastic-apm/120111)

<div class="topic-metadata">

**Author:** [@sunil129](https://discuss.elastic.co/u/sunil129)\
**Replies:** 4\
**Last updated:** [February 16, 2018, 11:46am UTC](https://discuss.elastic.co/t/elastic-apm/120111 "2018-02-16T11:46:16Z")

</div>

I have installed ELK 6.2 in my windows based OS. I am mainly interested on elastic APM. Would want to know whether the performers Matrix can be pulled from Java based application. Meaning can I install an agent on java b…

---

## [Kibana5.3.2 VisualizeのLineChart表示上限について](https://discuss.elastic.co/t/kibana5-3-2-visualize-linechart/106972)

<div class="topic-metadata">

**Author:** [@4a595559cb5befd82a68](https://discuss.elastic.co/u/4a595559cb5befd82a68)\
**Replies:** 4\
**Last updated:** [November 10, 2017, 4:02am UTC](https://discuss.elastic.co/t/kibana5-3-2-visualize-linechart/106972 "2017-11-10T04:02:08Z")

</div>

お世話になっております。 Kibana5.3.2のVisualizeにてLineChartを利用しておりますが、本来表示されるべきポイントが表示されない現象が起きております。 表示されていないログはDiscoverにて確認ができており、表示されない値は0.08や0.3といった1未満のものです。 表示させるポイントについて、上限などはありますでしょうか。 また、上限により表示が除外される条件や優先順位などがあれば教えていただきたく…

---

## [Stop Filbeat service if no LS/ES connection after some time?](https://discuss.elastic.co/t/stop-filbeat-service-if-no-ls-es-connection-after-some-time/85803)

<div class="topic-metadata">

**Author:** [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)\
**Replies:** 4\
**Last updated:** [May 29, 2017, 2:46pm UTC](https://discuss.elastic.co/t/stop-filbeat-service-if-no-ls-es-connection-after-some-time/85803 "2017-05-29T14:46:57Z")

</div>

Hi All, I'm new to this discussion webpage but have been using the ELK stack for a fair amount of time now, and this page been a great help for me. I was recently looking into the full config yml file for Filebeat a…

---

## [2.4.4 java client and 5.2.2 elasticserach cluster](https://discuss.elastic.co/t/2-4-4-java-client-and-5-2-2-elasticserach-cluster/79872)

<div class="topic-metadata">

**Author:** [@hoswey](https://discuss.elastic.co/u/hoswey)\
**Replies:** 4\
**Last updated:** [March 26, 2017, 7:08am UTC](https://discuss.elastic.co/t/2-4-4-java-client-and-5-2-2-elasticserach-cluster/79872 "2017-03-26T07:08:52Z")

</div>

Hi, I have setup the 5.2.2 es with jdk version 1.8. The 5.2.2 java client required jdk1.8, But my application is still use the old jdk 1.7, it is hard to upgrade now. can I use the below client to access the laster e…

---

## [ELK X-pack](https://discuss.elastic.co/t/elk-x-pack/45783)

<div class="topic-metadata">

**Author:** [@udaykirankona](https://discuss.elastic.co/u/udaykirankona)\
**Replies:** 4\
**Last updated:** [March 31, 2016, 6:28am UTC](https://discuss.elastic.co/t/elk-x-pack/45783 "2016-03-31T06:28:02Z")

</div>

Hi , Can I know when you are planning for ELK X-pack release

---

## [Regexp with \* returns no matches while .\* does](https://discuss.elastic.co/t/regexp-with-returns-no-matches-while-does/20394)

<div class="topic-metadata">

**Author:** [@Gargoyle\_2](https://discuss.elastic.co/u/Gargoyle_2)\
**Replies:** 4\
**Last updated:** [October 23, 2014, 8:07am UTC](https://discuss.elastic.co/t/regexp-with-returns-no-matches-while-does/20394 "2014-10-23T08:07:00Z")

</div>

Hi, I have a index of documents, where all string fields are not\_analyzed, and when I try to query by regex filter, I get a weird results: { "size" : 1, "query" : { "filtered" : { "filter" : { "…

---

## [PV not attaching to Elasticsearch pod](https://discuss.elastic.co/t/pv-not-attaching-to-elasticsearch-pod/295919)

<div class="topic-metadata">

**Author:** [@Purushotham\_Reddy](https://discuss.elastic.co/u/Purushotham_Reddy)\
**Replies:** 2\
**Last updated:** [February 22, 2022, 3:13pm UTC](https://discuss.elastic.co/t/pv-not-attaching-to-elasticsearch-pod/295919 "2022-02-22T15:13:45Z")

</div>

Hi All, I am facing an issue i.e PV is not getting attached/mounted to Elasticsearch pod. Background: I have setup Elasticsearch cluster using eck operator. Details are as follows. Cluster is setup in OKE(Oracle kuber…

---

## [Elasticsearch 7.3.2 log4j2 properties changes](https://discuss.elastic.co/t/elasticsearch-7-3-2-log4j2-properties-changes/292242)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 2\
**Last updated:** [December 21, 2021, 10:18am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-log4j2-properties-changes/292242 "2021-12-21T10:18:24Z")

</div>

Hi , we are using the Elasticsearch 7.3.2 it runs on jdk8, for log4j2 properties changes what are the things need to do in JVM file.

---

## [Incorrect Error Grouping](https://discuss.elastic.co/t/incorrect-error-grouping/215939)

<div class="topic-metadata">

**Author:** [@Matthew\_Petrie](https://discuss.elastic.co/u/Matthew_Petrie)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 11:40am UTC](https://discuss.elastic.co/t/incorrect-error-grouping/215939 "2020-01-23T11:40:50Z")

</div>

Kibana version : 7.5.1 Elasticsearch version : 7.5.1 APM Server version : 7.5.1 APM Agent language and version : Node.JS 3.3.0 Original install method : Elastic Cloud Some of our errors being incorrectly grouped tog…

---

## [Logstash is not accepting logs from rsyslog](https://discuss.elastic.co/t/logstash-is-not-accepting-logs-from-rsyslog/191293)

<div class="topic-metadata">

**Author:** [@cschelin](https://discuss.elastic.co/u/cschelin)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 8:42pm UTC](https://discuss.elastic.co/t/logstash-is-not-accepting-logs-from-rsyslog/191293 "2019-07-22T20:42:55Z")

</div>

Environment: 50 CentOS 7.6 servers 192.168.1.145 - Elastic Search master server 192.168.1.146 - Elastic Search master server 192.168.1.147 - Elastic Search master server 192.168.1.148 - Elastic Search data server 192.1…

---

## [Duplicate entries for same data in multiple indices](https://discuss.elastic.co/t/duplicate-entries-for-same-data-in-multiple-indices/121722)

<div class="topic-metadata">

**Author:** [@a\_kasireddy](https://discuss.elastic.co/u/a_kasireddy)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 10:14pm UTC](https://discuss.elastic.co/t/duplicate-entries-for-same-data-in-multiple-indices/121722 "2018-02-28T22:14:42Z")

</div>

Hello All, I'm using logstash (5.3) to parse data and send it to elastic search. I currently have 3 configuration files under config.d which parses 3 different types of data (all data is being collected from a database…

---

## [List json parsing](https://discuss.elastic.co/t/list-json-parsing/78993)

<div class="topic-metadata">

**Author:** [@E.Eric](https://discuss.elastic.co/u/E.Eric)\
**Replies:** 2\
**Last updated:** [March 17, 2017, 1:52pm UTC](https://discuss.elastic.co/t/list-json-parsing/78993 "2017-03-17T13:52:21Z")

</div>

Hello, I have a probleme to create a list of json object. this is my config: input { file {#settings...} } filter { mutate { add\_field =\> {"book\_title" =\> "%{Book\_title}"} add\_field =\> {"book\_price" =\> "%{Book\_pri…

---

## [Logsatsh reading logs but not showing in kibana](https://discuss.elastic.co/t/logsatsh-reading-logs-but-not-showing-in-kibana/75044)

<div class="topic-metadata">

**Author:** [@wolfghost](https://discuss.elastic.co/u/wolfghost)\
**Replies:** 2\
**Last updated:** [February 16, 2017, 2:58pm UTC](https://discuss.elastic.co/t/logsatsh-reading-logs-but-not-showing-in-kibana/75044 "2017-02-16T14:58:13Z")

</div>

Logsash is giving \[root@localhost bin\]# /usr/share/logstash/bin/logstash -f logstash.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path us…

---

## [Security can't be disabled on Elasticseacrh 5.0](https://discuss.elastic.co/t/security-cant-be-disabled-on-elasticseacrh-5-0/65215)

<div class="topic-metadata">

**Author:** [@anasoid](https://discuss.elastic.co/u/anasoid)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 4:41pm UTC](https://discuss.elastic.co/t/security-cant-be-disabled-on-elasticseacrh-5-0/65215 "2016-11-07T16:41:53Z")

</div>

I use last stable version of kibana/elastic search 5.0.0, using docker, and when disabling x-pack security using (xpack.security.enabled : false), on both kibana & elasticsearch. On kibana is OK, but on elasticsearch …

---

## [Analyzer for numeric type of fields](https://discuss.elastic.co/t/analyzer-for-numeric-type-of-fields/8295)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 2\
**Last updated:** [July 3, 2012, 11:55am UTC](https://discuss.elastic.co/t/analyzer-for-numeric-type-of-fields/8295 "2012-07-03T11:55:34Z")

</div>

I need to analyaze and tokenize the numeric fields like zip\_codes, which analyzer should I use??? currently I am using the standard analyzer, with with i can not search the partial zip\_codes, Expected is if i searc…

---

## [5 node cluster setup for elk](https://discuss.elastic.co/t/5-node-cluster-setup-for-elk/178740)

<div class="topic-metadata">

**Author:** [@unmil](https://discuss.elastic.co/u/unmil)\
**Replies:** 1\
**Last updated:** [April 27, 2019, 10:11am UTC](https://discuss.elastic.co/t/5-node-cluster-setup-for-elk/178740 "2019-04-27T10:11:56Z")

</div>

Hello, So, I have 5 nodes available of RHEL, I have to setup ELK as cluster on these nodes, I did this before with 2 masters, 3 data nodes, with each master will have logstash and kibana. What happened was the cluster…

---

## [Snapshot creation failed due to RepositoryMissingException](https://discuss.elastic.co/t/snapshot-creation-failed-due-to-repositorymissingexception/150152)

<div class="topic-metadata">

**Author:** [@Ronshaiko](https://discuss.elastic.co/u/Ronshaiko)\
**Replies:** 1\
**Last updated:** [October 2, 2018, 8:28am UTC](https://discuss.elastic.co/t/snapshot-creation-failed-due-to-repositorymissingexception/150152 "2018-10-02T08:28:36Z")

</div>

Hello, Appreciate your help in the below issue: I'm trying to create a snapshot in s3 bucket. After running request to create the new snapshot, i'm checking the status of the new snapshot and i see that snapshot state …

---

## [Partial match with ngram. How to avoid\\minimize excessive search result](https://discuss.elastic.co/t/partial-match-with-ngram-how-to-avoid-minimize-excessive-search-result/126785)

<div class="topic-metadata">

**Author:** [@Denis\_Zakharchuk](https://discuss.elastic.co/u/Denis_Zakharchuk)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 9:21am UTC](https://discuss.elastic.co/t/partial-match-with-ngram-how-to-avoid-minimize-excessive-search-result/126785 "2018-04-10T09:21:53Z")

</div>

Hi, I have a task to implement search among some records by some different fields. One of them - "Title" and regarding this specific field there are few demands: internal match (e.g. "esti" in search request should m…

---

## [Any way to add a suffix to an index name in an index template?](https://discuss.elastic.co/t/any-way-to-add-a-suffix-to-an-index-name-in-an-index-template/107131)

<div class="topic-metadata">

**Author:** [@troy](https://discuss.elastic.co/u/troy)\
**Replies:** 1\
**Last updated:** [November 10, 2017, 7:10pm UTC](https://discuss.elastic.co/t/any-way-to-add-a-suffix-to-an-index-name-in-an-index-template/107131 "2017-11-10T19:10:27Z")

</div>

Similar to what's described in Index Aliases and Zero Downtime , we are creating our indices in the form "typeprefix-id-v1" and then accessing them through an alias like "typeprefix-id". We are doing that so we can reind…

---

## [Query two indexes and store output into new index](https://discuss.elastic.co/t/query-two-indexes-and-store-output-into-new-index/87566)

<div class="topic-metadata">

**Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\
**Replies:** 1\
**Last updated:** [May 31, 2017, 1:03pm UTC](https://discuss.elastic.co/t/query-two-indexes-and-store-output-into-new-index/87566 "2017-05-31T13:03:37Z")

</div>

Hi, I have two indexes with different data but both indexes has mutual filed Roll Number. Following is example: student\_index has following data Roll Number: 123456 Name: Bob Last Name: Michel Class: 8th finance\_…

---

## [Windows Snare to Logstash](https://discuss.elastic.co/t/windows-snare-to-logstash/67628)

<div class="topic-metadata">

**Author:** [@Zeus](https://discuss.elastic.co/u/Zeus)\
**Replies:** 1\
**Last updated:** [December 5, 2016, 6:31am UTC](https://discuss.elastic.co/t/windows-snare-to-logstash/67628 "2016-12-05T06:31:08Z")

</div>

I am brand new to this software. I have been searching for information on how to correctly get Logstash to see logs from Snare with no success. I currently have about 20 servers half Linux half windows. All Linux machine…

---

## [Term filter with 'special' characters](https://discuss.elastic.co/t/term-filter-with-special-characters/11769)

<div class="topic-metadata">

**Author:** [@Stik\_kos](https://discuss.elastic.co/u/Stik_kos)\
**Replies:** 1\
**Last updated:** [May 1, 2013, 6:56pm UTC](https://discuss.elastic.co/t/term-filter-with-special-characters/11769 "2013-05-01T18:56:59Z")

</div>

Hello, I am trying to use a term filter but i don't receive any results and i think the problem is due to the use of 'special' characters... My search item has a property called "code" with a value "test#b7ee8e…

---

## [HTTP Request details](https://discuss.elastic.co/t/http-request-details/327884)

<div class="topic-metadata">

**Author:** [@Scott\_Chapman1](https://discuss.elastic.co/u/Scott_Chapman1)\
**Replies:** 8\
**Last updated:** [March 22, 2023, 5:05pm UTC](https://discuss.elastic.co/t/http-request-details/327884 "2023-03-22T17:05:54Z")

</div>

I'm doing a new deployment, and playing around with the java APM agent. We are using Apache HTTPClient (supported version), and I can see that I can spans created for requests, but I don't see things like what the URL is…

---

## [Filebeat/Logstash Apache Access Logs timestamp issue](https://discuss.elastic.co/t/filebeat-logstash-apache-access-logs-timestamp-issue/313278)

<div class="topic-metadata">

**Author:** [@SirStephanikus](https://discuss.elastic.co/u/SirStephanikus)\
**Replies:** 8\
**Last updated:** [September 2, 2022, 8:24pm UTC](https://discuss.elastic.co/t/filebeat-logstash-apache-access-logs-timestamp-issue/313278 "2022-09-02T20:24:38Z")

</div>

Hello everyone I'm new to the ELK world and need some help with a basic Apache HTTP filebeat -\> logstash -\> Elasticsearch \<- Kibana filter/pipeline for learning purposes. Version: 8.3.3 Problem: A dummy apache acce…

---

## [How to create fields from nested fields for json data in logstash](https://discuss.elastic.co/t/how-to-create-fields-from-nested-fields-for-json-data-in-logstash/239369)

<div class="topic-metadata">

**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\
**Replies:** 8\
**Last updated:** [July 3, 2020, 4:12pm UTC](https://discuss.elastic.co/t/how-to-create-fields-from-nested-fields-for-json-data-in-logstash/239369 "2020-07-03T16:12:33Z")

</div>

Hi, I am having json data that is parsed into kibana using logstash, in that data I am getting nested fields but I want individual fields.Please tell me how to get those fields. service.action.portProbeAction.portProbe…

---

## [Control Sample Rate or \`recorded\` Flag Per Request](https://discuss.elastic.co/t/control-sample-rate-or-recorded-flag-per-request/177145)

<div class="topic-metadata">

**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\
**Replies:** 8\
**Last updated:** [April 23, 2019, 8:32pm UTC](https://discuss.elastic.co/t/control-sample-rate-or-recorded-flag-per-request/177145 "2019-04-23T20:32:40Z")

</div>

In a production setting, I'd like to be able to control my sample rate, or simply enable recording of a distributed trace, on a per request basis. Is this possible using the existing agents? Thanks :slight\_smile:

---

## [Nested Aggregations](https://discuss.elastic.co/t/nested-aggregations/17337)

<div class="topic-metadata">

**Author:** [@Niv\_Penso](https://discuss.elastic.co/u/Niv_Penso)\
**Replies:** 8\
**Last updated:** [May 5, 2014, 12:55pm UTC](https://discuss.elastic.co/t/nested-aggregations/17337 "2014-05-05T12:55:29Z")

</div>

Hey guys, I have this mappings: { "ckdocuments": { "mappings": { "msv": { "properties": { "MSV": { "type": "nested", "properti…

---

## [How to update a mapping?](https://discuss.elastic.co/t/how-to-update-a-mapping/6567)

<div class="topic-metadata">

**Author:** [@Frank\_LaRosa](https://discuss.elastic.co/u/Frank_LaRosa)\
**Replies:** 8\
**Last updated:** [August 11, 2012, 12:16am UTC](https://discuss.elastic.co/t/how-to-update-a-mapping/6567 "2012-08-11T00:16:29Z")

</div>

Hi, I created an index with a mapping, in Java, using the IndicesAdminClient.create call with a CreateIndexRequest. I added a large amount of data to my index. Now I want to alter the mapping: I wish to add som…

---

## [Security Detection Rules Cause: \`circuit\_breaking\_exception\` on medium-ish deployments](https://discuss.elastic.co/t/security-detection-rules-cause-circuit-breaking-exception-on-medium-ish-deployments/286654)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 6\
**Last updated:** [October 19, 2021, 12:51pm UTC](https://discuss.elastic.co/t/security-detection-rules-cause-circuit-breaking-exception-on-medium-ish-deployments/286654 "2021-10-19T12:51:53Z")

</div>

Hi All, I noticed that a few detection rules consume a lot of memory, and cause circuit\_breaking\_exception often in medium-ish deployments (~265 winlogbeat deployments). Elasticsearch version: 7.14.1 Offending Rules: …

---

## [Elastic APM 8.2, sourcemap not working, "unable to find sourcemap.url"](https://discuss.elastic.co/t/elastic-apm-8-2-sourcemap-not-working-unable-to-find-sourcemap-url/316553)

<div class="topic-metadata">

**Author:** [@mkf1](https://discuss.elastic.co/u/mkf1)\
**Replies:** 5\
**Last updated:** [October 16, 2022, 12:42pm UTC](https://discuss.elastic.co/t/elastic-apm-8-2-sourcemap-not-working-unable-to-find-sourcemap-url/316553 "2022-10-16T12:42:53Z")

</div>

Elastic APM 8.2, sourcemap does not work. Sourcemaps uploaded and saved in Kibana without issues. Service version, service name looks good. But it still always complains about "sourcemap.url not find": Any idea…

---

## [SOLVED - Curator Problem - Workaround working but wanted to understand cause](https://discuss.elastic.co/t/solved-curator-problem-workaround-working-but-wanted-to-understand-cause/89808)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 5\
**Last updated:** [June 17, 2017, 10:35pm UTC](https://discuss.elastic.co/t/solved-curator-problem-workaround-working-but-wanted-to-understand-cause/89808 "2017-06-17T22:35:13Z")

</div>

Hi All, I am new to curator and reindexing some documents from YYYYMMDD indexes into a monthly index and also setting my shard and replica counts when creating the index. I was getting the following error when running …

---

## [Getting version\_conflict\_eng (409) while updating in the existing Index](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543)

<div class="topic-metadata">

**Author:** [@Suraj\_Anand](https://discuss.elastic.co/u/Suraj_Anand)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 6:42pm UTC](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543 "2021-05-25T18:42:31Z")

</div>

I am trying to update some data in an Elastic Search Index, I am trying to update using this method: Update Method: $params = \[ 'index' =\> 'my\_index', 'id' =\> 'my\_id', 'body' =\> \[…

[Previous page](https://discuss.elastic.co/top.md?page=1231&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1233&per_page=50&period=all)
