# Top

**URL:** https://discuss.elastic.co/top.md?page=1238&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1239

---

## [Not receiving correct results when searching for a phrase](https://discuss.elastic.co/t/not-receiving-correct-results-when-searching-for-a-phrase/63508)

<div class="topic-metadata">

**Author:** [@dkarnecki](https://discuss.elastic.co/u/dkarnecki)\
**Replies:** 5\
**Last updated:** [October 20, 2016, 4:28pm UTC](https://discuss.elastic.co/t/not-receiving-correct-results-when-searching-for-a-phrase/63508 "2016-10-20T16:28:36Z")

</div>

Can anyone see what is incorrect about the following command? http://192.168.1.162:9200/fborep/\_search?{ "query":{"bool": {"must": {"wildcard": {"DESC":"post traumatic stress disorder"}}}}}&size=100&pretty&explain Th…

---

## [Terms minimum\_match is not allowed in filter](https://discuss.elastic.co/t/terms-minimum-match-is-not-allowed-in-filter/10463)

<div class="topic-metadata">

**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\
**Replies:** 5\
**Last updated:** [January 22, 2013, 11:05pm UTC](https://discuss.elastic.co/t/terms-minimum-match-is-not-allowed-in-filter/10463 "2013-01-22T23:05:36Z")

</div>

Might worth while mentioning it in Terms documentation that minimum\_match should not be used in filter. I assume 1 value is used If i try it I get QueryParsingException\[\[award\] \[terms\] filter does not support \[mi…

---

## [Optimize max\_num\_segments](https://discuss.elastic.co/t/optimize-max-num-segments/6800)

<div class="topic-metadata">

**Author:** [@Onilton\_Maciel](https://discuss.elastic.co/u/Onilton_Maciel)\
**Replies:** 5\
**Last updated:** [September 6, 2012, 7:29pm UTC](https://discuss.elastic.co/t/optimize-max-num-segments/6800 "2012-09-06T19:29:00Z")

</div>

Is there any situation where optimize won't reduce the number of segments to the specified one? When I run something like curl -XPOST 'http://localhost:9200/index/\_optimize?max\_num\_segments=1' Shouldn't the tot…

---

## [Is it possible to obtain User-Centric Metrics with Custom Transactions?](https://discuss.elastic.co/t/is-it-possible-to-obtain-user-centric-metrics-with-custom-transactions/267707)

<div class="topic-metadata">

**Author:** [@randy\_a](https://discuss.elastic.co/u/randy_a)\
**Replies:** 6\
**Last updated:** [March 25, 2021, 2:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-obtain-user-centric-metrics-with-custom-transactions/267707 "2021-03-25T14:56:39Z")

</div>

Hi there, I'm a front-end developer with limited experience, therefore I'm a bit stuck at the moment. I've applied Elastic RUM for the front-end (Angular) part of our single-page application. Our use case is to obtain p…

---

## [Azure OpenID Login doesn't work](https://discuss.elastic.co/t/azure-openid-login-doesnt-work/255593)

<div class="topic-metadata">

**Author:** [@thetell75](https://discuss.elastic.co/u/thetell75)\
**Replies:** 6\
**Last updated:** [November 17, 2020, 7:14am UTC](https://discuss.elastic.co/t/azure-openid-login-doesnt-work/255593 "2020-11-17T07:14:29Z")

</div>

Hi everyone..... Unfortunately my azure openid configuration seems not to work. I've verified the openid Authentication with OpenID Connect Playground and everything seems to be ok. Also if I set only Realm check in R…

---

## [Kibana Visualisation Help needed - pie chart to detailed table view](https://discuss.elastic.co/t/kibana-visualisation-help-needed-pie-chart-to-detailed-table-view/138318)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 6\
**Last updated:** [July 3, 2018, 11:22am UTC](https://discuss.elastic.co/t/kibana-visualisation-help-needed-pie-chart-to-detailed-table-view/138318 "2018-07-03T11:22:33Z")

</div>

Can anyone help me : Very new to ELK. Can we make a visualisation which shows status of jobs like completed, failed, killed etc \[like a pie chart\] and then when we click on the status on the pie chart it should show c…

---

## [Nested Filter Problem](https://discuss.elastic.co/t/nested-filter-problem/116351)

<div class="topic-metadata">

**Author:** [@awakevzla](https://discuss.elastic.co/u/awakevzla)\
**Replies:** 6\
**Last updated:** [January 24, 2018, 2:54pm UTC](https://discuss.elastic.co/t/nested-filter-problem/116351 "2018-01-24T14:54:49Z")

</div>

Hi everyone, i am facing a problem implementing nested query on my elasticsearch 5.6 cluster. I've this mapping: { "my\_test": { "mappings": { "co\_product": { "properties": { …

---

## [VersionConflictEngineException in 0.19.1 when updating via mapper attachments plugin](https://discuss.elastic.co/t/versionconflictengineexception-in-0-19-1-when-updating-via-mapper-attachments-plugin/7132)

<div class="topic-metadata">

**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\
**Replies:** 6\
**Last updated:** [March 27, 2012, 7:00pm UTC](https://discuss.elastic.co/t/versionconflictengineexception-in-0-19-1-when-updating-via-mapper-attachments-plugin/7132 "2012-03-27T19:00:23Z")

</div>

I'm using a couple of workers to update existing documents with one or more attachment/files using a worker pattern. 99% of the time this works but once in a while I'm getting the following exception: https://gist…

---

## [Cannot cast def \[java.lang.String\] to boolean](https://discuss.elastic.co/t/cannot-cast-def-java-lang-string-to-boolean/311824)

<div class="topic-metadata">

**Author:** [@Sourabh\_Korde](https://discuss.elastic.co/u/Sourabh_Korde)\
**Replies:** 2\
**Last updated:** [August 10, 2022, 1:12pm UTC](https://discuss.elastic.co/t/cannot-cast-def-java-lang-string-to-boolean/311824 "2022-08-10T13:12:18Z")

</div>

Dear All, I am simply trying to update documents using ingest pipeline with below script. But facing subjected error. Please suggest.... { "script": { "lang": "painless", "source": """ if(ctx.customer\_gender = "MAL…

---

## [Metricbeat Docker Autodiscover Not Working - ELK](https://discuss.elastic.co/t/metricbeat-docker-autodiscover-not-working-elk/219477)

<div class="topic-metadata">

**Author:** [@daz1761](https://discuss.elastic.co/u/daz1761)\
**Replies:** 2\
**Last updated:** [February 25, 2020, 8:52am UTC](https://discuss.elastic.co/t/metricbeat-docker-autodiscover-not-working-elk/219477 "2020-02-25T08:52:25Z")

</div>

I have followed the autodiscover docs and my docker container is not being discovered by the service. In order for a container to be discovered, it needs to be labeled, so in order to check docker-compose labels were wo…

---

## [Logstash is not pick up updated logs in newly created Log file with a same name after backup](https://discuss.elastic.co/t/logstash-is-not-pick-up-updated-logs-in-newly-created-log-file-with-a-same-name-after-backup/199620)

<div class="topic-metadata">

**Author:** [@ldeepak](https://discuss.elastic.co/u/ldeepak)\
**Replies:** 2\
**Last updated:** [September 19, 2019, 5:14am UTC](https://discuss.elastic.co/t/logstash-is-not-pick-up-updated-logs-in-newly-created-log-file-with-a-same-name-after-backup/199620 "2019-09-19T05:14:06Z")

</div>

Hi Team, Please help me on below topic. Logstash is not able to read updated logs after creating a new log file with the same and putting old log file as a backup file, this issue i had faced in windows. please find b…

---

## [Curator started reporting error in delete\_indices 'An HTTP line is larger than 4096 bytes.'](https://discuss.elastic.co/t/curator-started-reporting-error-in-delete-indices-an-http-line-is-larger-than-4096-bytes/132740)

<div class="topic-metadata">

**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\
**Replies:** 2\
**Last updated:** [May 22, 2018, 1:05pm UTC](https://discuss.elastic.co/t/curator-started-reporting-error-in-delete-indices-an-http-line-is-larger-than-4096-bytes/132740 "2018-05-22T13:05:35Z")

</div>

Hello Friends, I have ELK stack with curator installed to delete logs older than 365 days. a script created is used to make this process under crontab job that used to delete these older than 365 days logs. everything…

---

## [Grok Filter Logstash Multiple Lines](https://discuss.elastic.co/t/grok-filter-logstash-multiple-lines/94237)

<div class="topic-metadata">

**Author:** [@lavolpem](https://discuss.elastic.co/u/lavolpem)\
**Replies:** 2\
**Last updated:** [July 24, 2017, 7:11pm UTC](https://discuss.elastic.co/t/grok-filter-logstash-multiple-lines/94237 "2017-07-24T19:11:02Z")

</div>

I have some problem about the log's format that I had to parse. My logs have a format like this: ================================================================== Report : WARNING Date : Thu Jun 18 16:5…

---

## [ElasticSearch query to identify relationships between Hive table fields using search for keywords](https://discuss.elastic.co/t/elasticsearch-query-to-identify-relationships-between-hive-table-fields-using-search-for-keywords/73528)

<div class="topic-metadata">

**Author:** [@annanyan](https://discuss.elastic.co/u/annanyan)\
**Replies:** 2\
**Last updated:** [February 6, 2017, 8:18am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-identify-relationships-between-hive-table-fields-using-search-for-keywords/73528 "2017-02-06T08:18:06Z")

</div>

We are new to Elasticsearch and Kibana. We are using Elasticsearch 5.0.0 to identify relationships between Hive table fields in a database by searching across all columns for specific keywords. We are open to use querie…

---

## [Options to compress topbeat index](https://discuss.elastic.co/t/options-to-compress-topbeat-index/61894)

<div class="topic-metadata">

**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\
**Replies:** 2\
**Last updated:** [October 3, 2016, 8:23am UTC](https://discuss.elastic.co/t/options-to-compress-topbeat-index/61894 "2016-10-03T08:23:58Z")

</div>

Hi Team, We have topbeat agent running on 10 systems and 10 second pulse. It is further configured for process, CPU and system logs. the average payload per 10s is 150KB ~300KB resulting in 300 MB per server per day re…

---

## [OpenSSL::SSL::SSLError: Received fatal alert: handshake\_failure](https://discuss.elastic.co/t/openssl-ssl-sslerror-received-fatal-alert-handshake-failure/56831)

<div class="topic-metadata">

**Author:** [@HUANG](https://discuss.elastic.co/u/HUANG)\
**Replies:** 2\
**Last updated:** [August 2, 2016, 10:26am UTC](https://discuss.elastic.co/t/openssl-ssl-sslerror-received-fatal-alert-handshake-failure/56831 "2016-08-02T10:26:43Z")

</div>

I used Logstash to send alert email when application exception via smtp with ssl.But Logstash reported ':exception=\>#\<OpenSSL::SSL::SSLError: Received fatal alert: handshake\_failure' When deliver mail.What Happened? At …

---

## [Using Logstash to ingest Topbeat data that is output in file mode](https://discuss.elastic.co/t/using-logstash-to-ingest-topbeat-data-that-is-output-in-file-mode/40278)

<div class="topic-metadata">

**Author:** [@redrise](https://discuss.elastic.co/u/redrise)\
**Replies:** 2\
**Last updated:** [January 27, 2016, 8:29pm UTC](https://discuss.elastic.co/t/using-logstash-to-ingest-topbeat-data-that-is-output-in-file-mode/40278 "2016-01-27T20:29:47Z")

</div>

I've setup Topbeat in a mixed environment where some nodes are configured to talk to Logstash directly using the logstash output mode, however I have some nodes that don't have direct connectivity and I am outputting the…

---

## [Roles N/A in stack monitoring](https://discuss.elastic.co/t/roles-n-a-in-stack-monitoring/337251)

<div class="topic-metadata">

**Author:** [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\
**Replies:** 7\
**Last updated:** [June 30, 2023, 1:15pm UTC](https://discuss.elastic.co/t/roles-n-a-in-stack-monitoring/337251 "2023-06-30T13:15:38Z")

</div>

Hi team, how can i resolve this problem the roles is showing N/A in stack monitoring i'm alreay specified the node.roles in elasticsearch.yml Thanks in advance

---

## [Nested query to find with multiple nested documents associate with the parent](https://discuss.elastic.co/t/nested-query-to-find-with-multiple-nested-documents-associate-with-the-parent/14608)

<div class="topic-metadata">

**Author:** [@Corey\_Nolet](https://discuss.elastic.co/u/Corey_Nolet)\
**Replies:** 7\
**Last updated:** [November 29, 2013, 1:09am UTC](https://discuss.elastic.co/t/nested-query-to-find-with-multiple-nested-documents-associate-with-the-parent/14608 "2013-11-29T01:09:53Z")

</div>

My data has the following format: { "id": "entityId", "type": "entityType", "tuples": \[ { "key": "name", "value": "myentityName", "type": "string" }, { …

---

## [How to convert date fields coming from MongoDB to an Elasticsearch date field?](https://discuss.elastic.co/t/how-to-convert-date-fields-coming-from-mongodb-to-an-elasticsearch-date-field/165429)

<div class="topic-metadata">

**Author:** [@topgun743](https://discuss.elastic.co/u/topgun743)\
**Replies:** 1\
**Last updated:** [January 23, 2019, 4:49pm UTC](https://discuss.elastic.co/t/how-to-convert-date-fields-coming-from-mongodb-to-an-elasticsearch-date-field/165429 "2019-01-23T16:49:17Z")

</div>

I am using logstash-file-mongodb plugin for indexing data to Elasticsearch coming from MongoDB. Here in my input file: input { mongodb { uri =\> 'mongodb://myuser:mypwd@myhost/TestDB' placeholder\_db\_dir =\> 'E:/logs…

---

## [Sincedb write error despite proper permissions](https://discuss.elastic.co/t/sincedb-write-error-despite-proper-permissions/112259)

<div class="topic-metadata">

**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Replies:** 1\
**Last updated:** [December 21, 2017, 2:47pm UTC](https://discuss.elastic.co/t/sincedb-write-error-despite-proper-permissions/112259 "2017-12-21T14:47:28Z")

</div>

Hi, I installed LS 6.0 on Linux (2.6.18, centos). I have an error logged whenever LS attempts to write to a sincedb (not in the default folder), could you please help me finding out what is wrong ? All kind of help is …

---

## [Aggregation based on hour of day and timezone](https://discuss.elastic.co/t/aggregation-based-on-hour-of-day-and-timezone/110445)

<div class="topic-metadata">

**Author:** [@beng](https://discuss.elastic.co/u/beng)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 2:21pm UTC](https://discuss.elastic.co/t/aggregation-based-on-hour-of-day-and-timezone/110445 "2017-12-06T14:21:51Z")

</div>

We currently have a stat known as "Peak Hours" and this shows total counts based on a field called "created\_at\_hour" (this field is stored as the UTC hour). We did it this way to avoid using a script to calculate the hou…

---

## [Auto summarization of elasticsearch text content](https://discuss.elastic.co/t/auto-summarization-of-elasticsearch-text-content/98791)

<div class="topic-metadata">

**Author:** [@Narmatha](https://discuss.elastic.co/u/Narmatha)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 9:16am UTC](https://discuss.elastic.co/t/auto-summarization-of-elasticsearch-text-content/98791 "2017-09-01T09:16:27Z")

</div>

Need help in summarizing the media content in elasticsearch and store in different field during data ingestion. Is there an option in elasticsearch directly to perform summarizing larger contents into readable text and …

---

## [Shard movement speed](https://discuss.elastic.co/t/shard-movement-speed/29294)

<div class="topic-metadata">

**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\
**Replies:** 1\
**Last updated:** [September 15, 2015, 5:03am UTC](https://discuss.elastic.co/t/shard-movement-speed/29294 "2015-09-15T05:03:39Z")

</div>

I have an Elasticsearch cluster with three data nodes. For some experiment, I want to move all the shards to a single data node. So I used the shard allocation filter feature to achieve that. From Marvel, I see that that…

---

## [Is there any way to change the precision\_threshold when use es-sql?](https://discuss.elastic.co/t/is-there-any-way-to-change-the-precision-threshold-when-use-es-sql/288729)

<div class="topic-metadata">

**Author:** [@danielduan](https://discuss.elastic.co/u/danielduan)\
**Replies:** 0\
**Last updated:** [November 9, 2021, 9:08am UTC](https://discuss.elastic.co/t/is-there-any-way-to-change-the-precision-threshold-when-use-es-sql/288729 "2021-11-09T09:08:09Z")

</div>

We know that when use es api we can setting the value of precision\_threshold , is there any way to overwrite the default value when use es-sql? if the answer is no , could you please tell us how to modify the default v…

---

## [Generate alerts using Elastalert for logs & write the alerts to a New Index name "abc" in elasticsearch](https://discuss.elastic.co/t/generate-alerts-using-elastalert-for-logs-write-the-alerts-to-a-new-index-name-abc-in-elasticsearch/236176)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 0\
**Last updated:** [June 8, 2020, 12:51pm UTC](https://discuss.elastic.co/t/generate-alerts-using-elastalert-for-logs-write-the-alerts-to-a-new-index-name-abc-in-elasticsearch/236176 "2020-06-08T12:51:01Z")

</div>

my usecase is to send alerts in email and also write the alerts in elasticsearch index.

---

## [How to build a span near query with nested objects?](https://discuss.elastic.co/t/how-to-build-a-span-near-query-with-nested-objects/31883)

<div class="topic-metadata">

**Author:** [@Manuel\_Islas](https://discuss.elastic.co/u/Manuel_Islas)\
**Replies:** 0\
**Last updated:** [October 8, 2015, 9:08pm UTC](https://discuss.elastic.co/t/how-to-build-a-span-near-query-with-nested-objects/31883 "2015-10-08T21:08:14Z")

</div>

I have a document like: Document: { documentId, name, content, SubDocuments:\[{ name, displayName, content }\] } and want to run a span\_near query over the nested SubDocument properties. Any idea…

---

## [Heartbeat Monitor for Oracle DB Connection?](https://discuss.elastic.co/t/heartbeat-monitor-for-oracle-db-connection/174847)

<div class="topic-metadata">

**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\
**Replies:** 1\
**Last updated:** [April 2, 2019, 6:44pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-for-oracle-db-connection/174847 "2019-04-02T18:44:46Z")

</div>

Does anyone know how to setup a Heartbeat monitor for a Oracle Database Connection? This is what I have setup which is not working: heartbeat.monitors: - type: tcp schedule: "@Every 10 sec" hosts: \["192.168.1.101:…

---

## [Kibana 7.8 won't start](https://discuss.elastic.co/t/kibana-7-8-wont-start/241336)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 4\
**Last updated:** [July 19, 2020, 11:49am UTC](https://discuss.elastic.co/t/kibana-7-8-wont-start/241336 "2020-07-19T11:49:43Z")

</div>

Hello, I seen similar issues to mine on this forum and other sites (i.e. stack overflow), but no concrete solution. I thought I would post it again and see if someone has a solution now. I am unable to start Kibana: A…

---

## [Passing Run time parameters](https://discuss.elastic.co/t/passing-run-time-parameters/76750)

<div class="topic-metadata">

**Author:** [@yogen](https://discuss.elastic.co/u/yogen)\
**Replies:** 4\
**Last updated:** [February 28, 2017, 3:39pm UTC](https://discuss.elastic.co/t/passing-run-time-parameters/76750 "2017-02-28T15:39:56Z")

</div>

Hi, I am 2 weeks into Kibana, and I am trying to get a grip on some of the visualizations. I have the input data as follows, --\> country\_id, auditor\_id, Store\_id, date\_id I want to draw a Vertical bar chart, by passing…

---

## [Elasticsearch e-commerce: specify first docs (products) for specific keywords](https://discuss.elastic.co/t/elasticsearch-e-commerce-specify-first-docs-products-for-specific-keywords/54336)

<div class="topic-metadata">

**Author:** [@midget2000x](https://discuss.elastic.co/u/midget2000x)\
**Replies:** 4\
**Last updated:** [July 3, 2016, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-e-commerce-specify-first-docs-products-for-specific-keywords/54336 "2016-07-03T09:20:43Z")

</div>

What is the best way to weight or boost specific documents (in this case my documents are products) so that they appear first for specific keyword searches? In other words: if search term is "widget doodad" the…

---

## [Indexation simultanée](https://discuss.elastic.co/t/indexation-simultanee/47515)

<div class="topic-metadata">

**Author:** [@Deve\_java](https://discuss.elastic.co/u/Deve_java)\
**Replies:** 4\
**Last updated:** [April 15, 2016, 7:28pm UTC](https://discuss.elastic.co/t/indexation-simultanee/47515 "2016-04-15T19:28:38Z")

</div>

Je souhaite indexer une grande quantité de documents HTML environ 4 million le processus demande bcp de temps car je dois parser le contenu HTML sauver dans des fichier text puis lire le contenu du fichier. pour 4 milli…

---

## ["received shard failed for... \[RemoteTransportException\]" for the node on the same machine](https://discuss.elastic.co/t/received-shard-failed-for-remotetransportexception-for-the-node-on-the-same-machine/13323)

<div class="topic-metadata">

**Author:** [@slimsuperhero](https://discuss.elastic.co/u/slimsuperhero)\
**Replies:** 4\
**Last updated:** [September 17, 2013, 1:03pm UTC](https://discuss.elastic.co/t/received-shard-failed-for-remotetransportexception-for-the-node-on-the-same-machine/13323 "2013-09-17T13:03:53Z")

</div>

Hello! I have develop setup of elasticsearch with every node running on the single server. It has elasticsearch master instance, which balances the load between two elasticsearch data instances (6 shards and 1 re…

---

## [Error when configure email account elasticseach.yml - Elastic Cloud](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560)

<div class="topic-metadata">

**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\
**Replies:** 3\
**Last updated:** [January 8, 2021, 7:49pm UTC](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560 "2021-01-08T19:49:50Z")

</div>

Hello guys, We have the problem when configuring SMTP more in ELastic Cloud SaaS Error when configure email account elasticseach.ymlfor sending alerts. When saving the configuration we get the following error: Your cha…

---

## [H3 aggregation in elastic](https://discuss.elastic.co/t/h3-aggregation-in-elastic/218355)

<div class="topic-metadata">

**Author:** [@Prabhakar\_Rajagopal](https://discuss.elastic.co/u/Prabhakar_Rajagopal)\
**Replies:** 3\
**Last updated:** [February 12, 2020, 4:06pm UTC](https://discuss.elastic.co/t/h3-aggregation-in-elastic/218355 "2020-02-12T16:06:06Z")

</div>

Hi, Is there a H3 aggregation that Uber has open sourced in ES? That will be a useful thing to have. geohash works beautifully, but nice to leverage hexagonal grids. Any suggestions? Thanks Prabhakar

---

## [Unnecessary hits from logstash to elastic index](https://discuss.elastic.co/t/unnecessary-hits-from-logstash-to-elastic-index/197034)

<div class="topic-metadata">

**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\
**Replies:** 8\
**Last updated:** [August 30, 2019, 12:22pm UTC](https://discuss.elastic.co/t/unnecessary-hits-from-logstash-to-elastic-index/197034 "2019-08-30T12:22:55Z")

</div>

When using JDBC paging for input plugin instead of using top and order by , the SQL Last value is not getting changed after every fetch which results in the last value to be updated after all records are pushed from the…

---

## [\[Kibana 7.0.1\] Missing Index Patterns as Datasouce options in Maps](https://discuss.elastic.co/t/kibana-7-0-1-missing-index-patterns-as-datasouce-options-in-maps/181305)

<div class="topic-metadata">

**Author:** [@luizvaz](https://discuss.elastic.co/u/luizvaz)\
**Replies:** 3\
**Last updated:** [May 17, 2019, 6:52am UTC](https://discuss.elastic.co/t/kibana-7-0-1-missing-index-patterns-as-datasouce-options-in-maps/181305 "2019-05-17T06:52:20Z")

</div>

Hi, What is the condition for an index to be listed as an option, either in Documents or Grid Aggregation? My index have a field named "location" with geo\_point type. But it is filtered someway and only sample kiban…

---

## [Try to parse different log formats in one file?](https://discuss.elastic.co/t/try-to-parse-different-log-formats-in-one-file/143385)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 3:57pm UTC](https://discuss.elastic.co/t/try-to-parse-different-log-formats-in-one-file/143385 "2018-08-10T15:57:03Z")

</div>

Hi, I have situation where two different formats end up in the same log file. I have the standard log4j format and that parses fine. But I also get google glog format. The glog looks like: I0807 19:07:40.477815 13465…

---

## [Json Codec dealing with NaN, Inf](https://discuss.elastic.co/t/json-codec-dealing-with-nan-inf/138611)

<div class="topic-metadata">

**Author:** [@alex3](https://discuss.elastic.co/u/alex3)\
**Replies:** 3\
**Last updated:** [July 21, 2018, 5:12am UTC](https://discuss.elastic.co/t/json-codec-dealing-with-nan-inf/138611 "2018-07-21T05:12:05Z")

</div>

Hello, I am trying to use the json codec to parse json files that have NaN and Inf as values; however, it doesn't work. I am getting the following error message: \[2018-07-04T17:03:36,005\]\[ERROR\]\[logstash.codecs.json …

---

## [How to fix elasticsearch error failed service](https://discuss.elastic.co/t/how-to-fix-elasticsearch-error-failed-service/94605)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 0\
**Last updated:** [July 26, 2017, 9:32am UTC](https://discuss.elastic.co/t/how-to-fix-elasticsearch-error-failed-service/94605 "2017-07-26T09:32:46Z")

</div>

my elk and filebeat ver = 5.5.1 installation steps with = https://goo.gl/EP2WD4 but, elasticsearch service = Failed ... ERROR = root@elk:~# systemctl status elasticsearch.service\_ ● elasticsearch.service - Elastic…

---

## [Logstash 1.4.0 debian package init script not working](https://discuss.elastic.co/t/logstash-1-4-0-debian-package-init-script-not-working/17070)

<div class="topic-metadata">

**Author:** [@OJ\_LaBoeuf](https://discuss.elastic.co/u/OJ_LaBoeuf)\
**Replies:** 3\
**Last updated:** [April 29, 2014, 1:33pm UTC](https://discuss.elastic.co/t/logstash-1-4-0-debian-package-init-script-not-working/17070 "2014-04-29T13:33:35Z")

</div>

Running Ubuntu 12.04 64bit, the logstash init script does not work. here's the script that came with logstash deb In particular I don't understand how the script is trying to parse something from the logstash pid…

---

## [Elastic 8.4 / PFSense Agent](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238)

<div class="topic-metadata">

**Author:** [@010101](https://discuss.elastic.co/u/010101)\
**Replies:** 2\
**Last updated:** [November 11, 2022, 1:39am UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238 "2022-11-11T01:39:11Z")

</div>

So... I setup according to this pfSense | Elastic docs Pointed my firewall at ELK stack But 0 data Are there any instructions on how to get this going?

---

## [Is it possible to specify date range on Elastic snapshots?](https://discuss.elastic.co/t/is-it-possible-to-specify-date-range-on-elastic-snapshots/263881)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 2:06pm UTC](https://discuss.elastic.co/t/is-it-possible-to-specify-date-range-on-elastic-snapshots/263881 "2021-02-10T14:06:41Z")

</div>

With reference to the following documentation: Is it possible to specify a time range for a snapshot? I can't see what the period for the snapshot is. Is it the last day/week/month?

---

## [Display dashboard based on logged in user](https://discuss.elastic.co/t/display-dashboard-based-on-logged-in-user/225578)

<div class="topic-metadata">

**Author:** [@sunitha.eswaraiah](https://discuss.elastic.co/u/sunitha.eswaraiah)\
**Replies:** 2\
**Last updated:** [April 2, 2020, 1:50pm UTC](https://discuss.elastic.co/t/display-dashboard-based-on-logged-in-user/225578 "2020-04-02T13:50:17Z")

</div>

Hi, Is there a way to auto filter the dashboard based on the user logged in ? When a user 'A' logged in, the dashboard should be updated based on the filter -\> User='A'. /Sunitha

---

## [File updates in read mode](https://discuss.elastic.co/t/file-updates-in-read-mode/202730)

<div class="topic-metadata">

**Author:** [@kurbar](https://discuss.elastic.co/u/kurbar)\
**Replies:** 2\
**Last updated:** [October 8, 2019, 9:19pm UTC](https://discuss.elastic.co/t/file-updates-in-read-mode/202730 "2019-10-08T21:19:29Z")

</div>

I have input file plugin configured in read mode where I read the entire file and use multiline to concat it into a single event. input { file { path =\> "/absolute/path/to/xmls/\*\*/\*.xml" start\_position =\> "beg…

---

## [File beat on windows](https://discuss.elastic.co/t/file-beat-on-windows/143695)

<div class="topic-metadata">

**Author:** [@raph](https://discuss.elastic.co/u/raph)\
**Replies:** 2\
**Last updated:** [August 9, 2018, 7:02pm UTC](https://discuss.elastic.co/t/file-beat-on-windows/143695 "2018-08-09T19:02:20Z")

</div>

Hi, I'm having an issue with filebeat on windows, why this error ? thanks, and my yml file:

---

## [Elastic.co new cluster: set reindex.remote.whitelist](https://discuss.elastic.co/t/elastic-co-new-cluster-set-reindex-remote-whitelist/121947)

<div class="topic-metadata">

**Author:** [@ar21](https://discuss.elastic.co/u/ar21)\
**Replies:** 2\
**Last updated:** [March 2, 2018, 1:16am UTC](https://discuss.elastic.co/t/elastic-co-new-cluster-set-reindex-remote-whitelist/121947 "2018-03-02T01:16:16Z")

</div>

I am trying to upgrade from ES 2.4 to 6.2 using the "reindex from remote" approach. I am using elastic.co hosted service for the existing 2.4 cluster. I am trying to create a new 6.2 cluster, also on elastic.co. If I set…

---

## [How to add custom functions to kibana timelion?](https://discuss.elastic.co/t/how-to-add-custom-functions-to-kibana-timelion/113332)

<div class="topic-metadata">

**Author:** [@saii](https://discuss.elastic.co/u/saii)\
**Replies:** 2\
**Last updated:** [December 28, 2017, 2:19pm UTC](https://discuss.elastic.co/t/how-to-add-custom-functions-to-kibana-timelion/113332 "2017-12-28T14:19:39Z")

</div>

i have read the following article The footnotes in the article gives steps to add a custom function to Timelion..it says to add the function in a specified path and then remove the timelion bundle file. After doing t…

---

## [【解決済】親のプロパティ値を子検索時に付与する方法について](https://discuss.elastic.co/t/topic/92083)

<div class="topic-metadata">

**Author:** [@hum2](https://discuss.elastic.co/u/hum2)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 4:13am UTC](https://discuss.elastic.co/t/topic/92083 "2017-07-07T04:13:23Z")

</div>

下記のような親子関係にあるタイプで、子(articles)一覧を検索時に親(blog)の category 情報を一緒に取得する方法はありますでしょうか？ # 親 { "blog": { "properties": { "blog\_id": { "type": "long", "index": "not\_analyzed" }, "category": …

---

## [Configure slowlog](https://discuss.elastic.co/t/configure-slowlog/55502)

<div class="topic-metadata">

**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\
**Replies:** 2\
**Last updated:** [July 14, 2016, 10:22am UTC](https://discuss.elastic.co/t/configure-slowlog/55502 "2016-07-14T10:22:46Z")

</div>

Hi, my purpose is to configure this settings on my ES: index.search.slowlog.threshold.query.warn: 10s index.search.slowlog.threshold.query.info: 5s index.search.slowlog.threshold.query.debug: 2s index.s…

[Previous page](https://discuss.elastic.co/top.md?page=1237&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1239&per_page=50&period=all)
