# Top **URL:** https://discuss.elastic.co/top.md?page=1243&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1244 --- ## [CorruptIndexException: possibly transient resource issue, or a Lucene or JVM bug](https://discuss.elastic.co/t/corruptindexexception-possibly-transient-resource-issue-or-a-lucene-or-jvm-bug/41510)
**Author:** [@droberts195](https://discuss.elastic.co/u/droberts195)\ **Replies:** 0\ **Last updated:** [February 11, 2016, 4:09pm UTC](https://discuss.elastic.co/t/corruptindexexception-possibly-transient-resource-issue-or-a-lucene-or-jvm-bug/41510 "2016-02-11T16:09:53Z")
We have seen an issue with Elasticsearch 2.1.2 where the .kibana index somehow got into a corrupt state and a sequence of warning messages was repeatedly logged to the Elasticsearch log (see the end of this post). One o… --- ## [Edit IIS Module Pipeline](https://discuss.elastic.co/t/edit-iis-module-pipeline/280083)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 9:55am UTC](https://discuss.elastic.co/t/edit-iis-module-pipeline/280083 "2021-08-02T09:55:58Z")
Hi, I'm i a company where I need to ingest data from IIS. I've enable the module but i'd like to modify a bit the pipeline. I've found that pipeline are stored in filebeat modules folder (on window : filebeat/module/ii… --- ## [How to index documents in elasticsearch in the hierarchical way ( depth of the tree)?](https://discuss.elastic.co/t/how-to-index-documents-in-elasticsearch-in-the-hierarchical-way-depth-of-the-tree/189487)
**Author:** [@princesahu04](https://discuss.elastic.co/u/princesahu04)\ **Replies:** 4\ **Last updated:** [July 12, 2019, 4:36am UTC](https://discuss.elastic.co/t/how-to-index-documents-in-elasticsearch-in-the-hierarchical-way-depth-of-the-tree/189487 "2019-07-12T04:36:21Z")
I have 1 pdf document in which there is a heading then subheading and it's paragraphs ( more than 1 paragraph). I don't know the depth of the tree. For example: \> heading1 \> subheading1 \> old collecting she cons… --- ## [Kibana 6.1.2 coordinate map with unique terms or pie chart](https://discuss.elastic.co/t/kibana-6-1-2-coordinate-map-with-unique-terms-or-pie-chart/116363)
**Author:** [@Marco1](https://discuss.elastic.co/u/Marco1)\ **Replies:** 4\ **Last updated:** [January 26, 2018, 7:30am UTC](https://discuss.elastic.co/t/kibana-6-1-2-coordinate-map-with-unique-terms-or-pie-chart/116363 "2018-01-26T07:30:39Z")
Hi all, In this older post: Kibana 5 coordinate map - unique terms is a topic about maps and unique terms. I am using Kibana 6.1.2 with an offline custom WMS compliant map server (Openmaptile-server). With some geoip f… --- ## [Snapshot process stuck in one last shard](https://discuss.elastic.co/t/snapshot-process-stuck-in-one-last-shard/43670)
**Author:** [@iliasse](https://discuss.elastic.co/u/iliasse)\ **Replies:** 4\ **Last updated:** [May 18, 2016, 12:46pm UTC](https://discuss.elastic.co/t/snapshot-process-stuck-in-one-last-shard/43670 "2016-05-18T12:46:04Z")
Hi, I'm trying to take a snapshot into a repository that i previously created. I want to snapshot 3 indices, for the second time (I've already done the first snapshot which succeeded), but after some new docs injected … --- ## [Nested Span Near Queries Give Results That Make No Sense](https://discuss.elastic.co/t/nested-span-near-queries-give-results-that-make-no-sense/17124)
**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\ **Replies:** 4\ **Last updated:** [April 26, 2014, 2:05am UTC](https://discuss.elastic.co/t/nested-span-near-queries-give-results-that-make-no-sense/17124 "2014-04-26T02:05:09Z")
I am running some complicated span near searches and the results do not make much sense. Take the following toy example: {'span\_near': {'clauses': \[ {'span\_term': {'text': 'foo'}}, … --- ## [Unable to see trace id or transaction info in logs](https://discuss.elastic.co/t/unable-to-see-trace-id-or-transaction-info-in-logs/326375)
**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\ **Replies:** 6\ **Last updated:** [February 24, 2023, 4:01pm UTC](https://discuss.elastic.co/t/unable-to-see-trace-id-or-transaction-info-in-logs/326375 "2023-02-24T16:01:44Z")
I currently have a NodeJS server passing logs to a Logstash server with a TCP tunnel using a Winston transport. Logs make it through all the way to my Elastic Cloud hosted Elasticsearch and pretty much everything looks g… --- ## [Out of mem on during moving data from warm to cold tier](https://discuss.elastic.co/t/out-of-mem-on-during-moving-data-from-warm-to-cold-tier/311769)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 6\ **Last updated:** [August 10, 2022, 9:27am UTC](https://discuss.elastic.co/t/out-of-mem-on-during-moving-data-from-warm-to-cold-tier/311769 "2022-08-10T09:27:54Z")
I'm facing a few times data nodes crash under moving data index from data warm tier to data cold tier. My memory config on data warm tier is 8GB which is implies 4GB of heap size due to Elasticsearch auto config but on… --- ## [Can't load kibana or curl :9200 after apt upgrade](https://discuss.elastic.co/t/cant-load-kibana-or-curl-9200-after-apt-upgrade/174409)
**Author:** [@ricwhitney](https://discuss.elastic.co/u/ricwhitney)\ **Replies:** 6\ **Last updated:** [April 1, 2019, 4:49pm UTC](https://discuss.elastic.co/t/cant-load-kibana-or-curl-9200-after-apt-upgrade/174409 "2019-04-01T16:49:48Z")
yesterday I did an apt upgrade on my system and it seems to have broken everything. I can't load kibana url at least. I only just installed the elastic stack on Monday (March 25, 2019). I have today noticed that the 6… --- ## [Local kibana does not connect to Elastic Cloud trial instance](https://discuss.elastic.co/t/local-kibana-does-not-connect-to-elastic-cloud-trial-instance/158515)
**Author:** [@R4v3n](https://discuss.elastic.co/u/R4v3n)\ **Replies:** 6\ **Last updated:** [November 29, 2018, 9:56am UTC](https://discuss.elastic.co/t/local-kibana-does-not-connect-to-elastic-cloud-trial-instance/158515 "2018-11-29T09:56:44Z")
Hello, I'm having difficulties trying to connect a local kibana to the elastic cloud ES. I'm using: Kibana: 6.5.1 elastic cloud ES 6.5.1 First I have installed Full stack ELK on the local server and it's working fi… --- ## [Can I delete a field of a doc?](https://discuss.elastic.co/t/can-i-delete-a-field-of-a-doc/37553)
**Author:** [@zaza](https://discuss.elastic.co/u/zaza)\ **Replies:** 6\ **Last updated:** [December 24, 2015, 8:18am UTC](https://discuss.elastic.co/t/can-i-delete-a-field-of-a-doc/37553 "2015-12-24T08:18:31Z")
I want to delete a field of a doc, I tried some ways but failed. Is there a query DSL or api I can use? --- ## [Elastic search - exporting index from existing cluster to a different cluster](https://discuss.elastic.co/t/elastic-search-exporting-index-from-existing-cluster-to-a-different-cluster/19908)
**Author:** [@Vijay\_Tiwary](https://discuss.elastic.co/u/Vijay_Tiwary)\ **Replies:** 6\ **Last updated:** [October 14, 2014, 4:36pm UTC](https://discuss.elastic.co/t/elastic-search-exporting-index-from-existing-cluster-to-a-different-cluster/19908 "2014-10-14T16:36:17Z")
Can I use the snapshot and restore module of elastic search to export one index to all together to a new elastic search cluster. For e.g. Can I export all the indices from development cluster to QA cluster? -- … --- ## [Filebeat v7.3 or above for FreeBSD to collect Bro/Zeek Log](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 6:58pm UTC](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226 "2020-05-30T18:58:05Z")
Anyone know how to install the lastest version v7.6.0 on freeBSD? I have a pfsense 2.4.5 with zeek log installed on it and want to ship log to ES Siem I tried the instruction: https://blog.securitybits.io/2019/12/beats… --- ## [Vega animated scatter chart json file url vs elasticsearch index url - (2nd attempt)](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt/171523)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 1\ **Last updated:** [March 8, 2019, 4:24pm UTC](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt/171523 "2019-03-08T16:24:36Z")
I am adapting the Vega animated scatter chart to display test data. When the data is loaded from a json file, the chart looks like this: When the data is loaded from an elasticsearch index, the result is empty data: … --- ## [Failed to publish events caused by EOF](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof/98067)
**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 12:08pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof/98067 "2017-08-23T12:08:45Z")
Hi all, I am trying to send log files from filebeat (5.5.1) to logstash-docker-elk (repo) (5.3.0) but here’s what I am getting in filebeat: 2017-08-23T13:20:57+02:00 INFO Metrics logging every 30s 2017-08-23T13:20:57+02… --- ## [Issue with dates parsing](https://discuss.elastic.co/t/issue-with-dates-parsing/62540)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 1\ **Last updated:** [October 9, 2016, 7:15pm UTC](https://discuss.elastic.co/t/issue-with-dates-parsing/62540 "2016-10-09T19:15:12Z")
Sorry if this has been asked a million times. I am stuck I checked out every post: I have a scheduled logstash configuration from Microsoft SQL Server. Date is in the following example format: 2016-07-30T02:25:06.000Z … --- ## [Elasticsearch-angular js authentication issue](https://discuss.elastic.co/t/elasticsearch-angular-js-authentication-issue/34411)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [November 14, 2015, 6:42pm UTC](https://discuss.elastic.co/t/elasticsearch-angular-js-authentication-issue/34411 "2015-11-14T18:42:40Z")
Hi, I am using elasticsearch-angular.js client to connect to my ES instance which has custom security plugin installed. Below is the code i am using to make connection myServices.service('es', \['esFactory', functio… --- ## [Do I need to open closed indexes when upgrading ES?](https://discuss.elastic.co/t/do-i-need-to-open-closed-indexes-when-upgrading-es/50500)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 1\ **Last updated:** [May 20, 2016, 6:17am UTC](https://discuss.elastic.co/t/do-i-need-to-open-closed-indexes-when-upgrading-es/50500 "2016-05-20T06:17:01Z")
Hi All, For either minor or major ES upgrade (1.7.0 to 2.0.0 or 2.2.0 to 2.3.3), do I need to reopen closed indexes (lots of them) either before or after the upgrade to have those indexes upgraded to newer version? T… --- ## [Correct usage of write indices for rolling over](https://discuss.elastic.co/t/correct-usage-of-write-indices-for-rolling-over/298050)
**Author:** [@whisperingstone](https://discuss.elastic.co/u/whisperingstone)\ **Replies:** 8\ **Last updated:** [March 1, 2022, 3:28pm UTC](https://discuss.elastic.co/t/correct-usage-of-write-indices-for-rolling-over/298050 "2022-03-01T15:28:56Z")
Hello. I collect logs from 10 components on dev, stage & prod envs. I don't write to the same index, the indexes are created every day for every component and environment, like this: componentname\_envYY.MM.DD or backen… --- ## [Building in Eclipse](https://discuss.elastic.co/t/building-in-eclipse/2827)
**Author:** [@vegas\_2](https://discuss.elastic.co/u/vegas_2)\ **Replies:** 8\ **Last updated:** [February 23, 2010, 10:26pm UTC](https://discuss.elastic.co/t/building-in-eclipse/2827 "2010-02-23T22:26:22Z")
Hey, I wanted to build elasticsearch under eclipse. I took a stab at it, and got things down to three errors that seemed inconsequential. What would be the equivalent of bin/elasticsearch -f in an eclipse debugga… --- ## [File based roles for Kibana access](https://discuss.elastic.co/t/file-based-roles-for-kibana-access/313040)
**Author:** [@rivermigue](https://discuss.elastic.co/u/rivermigue)\ **Replies:** 3\ **Last updated:** [September 1, 2022, 4:53pm UTC](https://discuss.elastic.co/t/file-based-roles-for-kibana-access/313040 "2022-09-01T16:53:03Z")
Hello, I am trying to grant access to users by using the File Based security realm (Using puppet to distribute the files) the reason is because I dont want users to be able to change the passwords, however I have not be… --- ## [Curator is not running from crontab](https://discuss.elastic.co/t/curator-is-not-running-from-crontab/175851)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 3\ **Last updated:** [April 11, 2019, 2:56pm UTC](https://discuss.elastic.co/t/curator-is-not-running-from-crontab/175851 "2019-04-11T14:56:01Z")
When I run the curator command in crontab, cron logs show ing job was completed but in curator logs showing old logs, not the time when cronjob ran. Crontab is working for remain all commands. Same command is working f… --- ## [How to run operations in parallel](https://discuss.elastic.co/t/how-to-run-operations-in-parallel/142261)
**Author:** [@username123](https://discuss.elastic.co/u/username123)\ **Replies:** 3\ **Last updated:** [July 31, 2018, 4:41pm UTC](https://discuss.elastic.co/t/how-to-run-operations-in-parallel/142261 "2018-07-31T16:41:23Z")
So I have a simple challenges file: 5 { 6 "schedule": "poisson" 7 }, 8 { 9 "operation": "index-append", 10 "schedule": "poisson" 11 }, 12 … --- ## [Elasticsearch- Certification](https://discuss.elastic.co/t/elasticsearch-certification/134704)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-certification/134704 "2018-06-06T10:25:18Z")
How do I enrol elasticsearch certification ? is there any link for the same? Thanks, Rohan --- ## [Logstash not reading the log data in correct sequence](https://discuss.elastic.co/t/logstash-not-reading-the-log-data-in-correct-sequence/118856)
**Author:** [@shraddha1](https://discuss.elastic.co/u/shraddha1)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 6:23am UTC](https://discuss.elastic.co/t/logstash-not-reading-the-log-data-in-correct-sequence/118856 "2018-02-09T06:23:56Z")
Hi, I have an issue with data parsing through Logstash. It reads a csv file but assigns data incorrectly in the message filed. Below is the overall description: I am parsing a csv file in logstash which outputs file s… --- ## [Search on kibana discover dashboard](https://discuss.elastic.co/t/search-on-kibana-discover-dashboard/109610)
**Author:** [@artec](https://discuss.elastic.co/u/artec)\ **Replies:** 3\ **Last updated:** [November 30, 2017, 7:57pm UTC](https://discuss.elastic.co/t/search-on-kibana-discover-dashboard/109610 "2017-11-30T19:57:57Z")
Hi all, this is my first topic so I would say an "Hello!" at everyone ! I set up an environment with filebeat -\> logstash -\> es -\> kibana to collect our application logs. The events are like (stored in message field) … --- ## [Filebeat docker image build failure](https://discuss.elastic.co/t/filebeat-docker-image-build-failure/104967)
**Author:** [@4xy](https://discuss.elastic.co/u/4xy)\ **Replies:** 3\ **Last updated:** [October 26, 2017, 11:09am UTC](https://discuss.elastic.co/t/filebeat-docker-image-build-failure/104967 "2017-10-26T11:09:27Z")
I tried to build filebeat docker container image from this repo GitHub - elastic/beats-docker: Official Beats Docker images. I ended up with this. Step 4 : RUN curl -Lso - https://artifacts.elastic.co/downloads/beats… --- ## [Is it dangerous to change \`dateFormat:tz\` from the default\`Browser\`?](https://discuss.elastic.co/t/is-it-dangerous-to-change-dateformat-tz-from-the-default-browser/96996)
**Author:** [@vkatsikaros](https://discuss.elastic.co/u/vkatsikaros)\ **Replies:** 3\ **Last updated:** [August 14, 2017, 8:13pm UTC](https://discuss.elastic.co/t/is-it-dangerous-to-change-dateformat-tz-from-the-default-browser/96996 "2017-08-14T20:13:43Z")
I would like to have timestamps displayed in Kibana in UTC. I have seen this post that suggest the dateFormat:tz should be changed from its default Browser value. However, the header of the page is a bit ominous saying: … --- ## [Kibana/Elasticshield Document Level Security](https://discuss.elastic.co/t/kibana-elasticshield-document-level-security/71895)
**Author:** [@gsb](https://discuss.elastic.co/u/gsb)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 10:06am UTC](https://discuss.elastic.co/t/kibana-elasticshield-document-level-security/71895 "2017-01-20T10:06:39Z")
There is a native user configured in elasticshield with document level security configured for associated role with that user. When query data from elasticsearch using curl with this user it returns data and works perf… --- ## [Reading from specific Kafka partitions](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549)
**Author:** [@wkuijsters](https://discuss.elastic.co/u/wkuijsters)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 3:38pm UTC](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549 "2021-05-25T15:38:03Z")
Hi, I'm trying to consume Kafka data hosted on an on-prem Kafka bus using Logstash in a cloud-hosted environment. There is a single massive topic with about 100 partitions, the messages I need are all located in a singl… --- ## [Can we stop logstash from "Attempting to install template..."](https://discuss.elastic.co/t/can-we-stop-logstash-from-attempting-to-install-template/232463)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 8:45pm UTC](https://discuss.elastic.co/t/can-we-stop-logstash-from-attempting-to-install-template/232463 "2020-05-13T20:45:56Z")
I see this in my logstash log every time it starts up and it seems like an redundant and unnecessary step. Can I configure it to not do this? \[2020-05-13T09:51:10,669\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Attemp… --- ## [Date histogram zooming problem](https://discuss.elastic.co/t/date-histogram-zooming-problem/94753)
**Author:** [@Sylfaen](https://discuss.elastic.co/u/Sylfaen)\ **Replies:** 2\ **Last updated:** [July 31, 2017, 2:23pm UTC](https://discuss.elastic.co/t/date-histogram-zooming-problem/94753 "2017-07-31T14:23:08Z")
Hi ! I made a line chart with a Date Histogram aggregation but I've got an issue when I'm trying to select a part of my chart. And when I'm doing this : I've got : But my date field is (imo) well defined : Any… --- ## [Not able to install sense..please help](https://discuss.elastic.co/t/not-able-to-install-sense-please-help/49528)
**Author:** [@venkateswararao.tumm](https://discuss.elastic.co/u/venkateswararao.tumm)\ **Replies:** 2\ **Last updated:** [May 19, 2016, 10:54am UTC](https://discuss.elastic.co/t/not-able-to-install-sense-please-help/49528 "2016-05-19T10:54:28Z")
I am getting the below error... STEP 1 : executed kibana.bat plugin --install elastic/sense (Windows ) ERROR : Installing sense Attempting to transfer from https://download.elastic.co/elastic/sense/sense-latest.t… --- ## [Create Backup of all Kibana Objects](https://discuss.elastic.co/t/create-backup-of-all-kibana-objects/338226)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 5\ **Last updated:** [July 17, 2023, 7:47am UTC](https://discuss.elastic.co/t/create-backup-of-all-kibana-objects/338226 "2023-07-17T07:47:38Z")
I would like to make sure that I'm able to restore all objects maintained by Kibana (Visualisations, Pipelines, Transformjobs, Dashboards, Templates, Fleet Settings and and and) from a snapshot. How can I achive that? I… --- ## [Search error on upgrade to 5.1.2](https://discuss.elastic.co/t/search-error-on-upgrade-to-5-1-2/79095)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 5\ **Last updated:** [March 22, 2017, 4:58pm UTC](https://discuss.elastic.co/t/search-error-on-upgrade-to-5-1-2/79095 "2017-03-22T16:58:47Z")
Upgrading from Kibana from 4.5.4 Upgrade to 5.1.2 I exported the search via Kibana 4.5 and imported the json file through 5.1.2 and now the search does not work. Looking for suggestions on what to fix. I don't see a… --- ## [Dashboard setup fails: Unable to bulk\_create index-pattern](https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 0\ **Last updated:** [October 25, 2021, 3:03am UTC](https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524 "2021-10-25T03:03:02Z")
Hi I have installed winlogbeat on a number of machines, and they are successfully shipping logs to Elasticsearch. However, when attempting to setup the dashboards either by setting the config in the winlogbeat.yml file… --- ## [Parse XML log with xml filter and grok fiter](https://discuss.elastic.co/t/parse-xml-log-with-xml-filter-and-grok-fiter/286712)
**Author:** [@Catalina\_Boteanu](https://discuss.elastic.co/u/Catalina_Boteanu)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 5:34pm UTC](https://discuss.elastic.co/t/parse-xml-log-with-xml-filter-and-grok-fiter/286712 "2021-10-15T17:34:46Z")
Hello. I am currently trying to apply some filters to different logs in Logstash. I have a log that has a string in the beginning and then it is in xml format. I was able to take out the xml from the log with a regex. No… --- ## [Visualize command history](https://discuss.elastic.co/t/visualize-command-history/238892)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/visualize-command-history/238892 "2020-06-27T14:10:12Z")
I'm a complete noob at Elastic Stack. I need to display command history in kibana in an easy to read format, I'm looking for something like this. For that, I've set auditbeat with this rule to log every command someone r… --- ## [Compile packetbeat on Centos6.8](https://discuss.elastic.co/t/compile-packetbeat-on-centos6-8/190639)
**Author:** [@meng\_liu](https://discuss.elastic.co/u/meng_liu)\ **Replies:** 7\ **Last updated:** [August 6, 2019, 5:39pm UTC](https://discuss.elastic.co/t/compile-packetbeat-on-centos6-8/190639 "2019-08-06T17:39:49Z")
I have installed libpcap in Centos6.8, but when i compile packetbeat, it occurs a error, as flows: go build -i -ldflags "-X github.com/elastic/beats/libbeat/version.buildTime=2019-07-16T03:40:29Z -X github.com/elastic/b… --- ## [Uncommon Processes](https://discuss.elastic.co/t/uncommon-processes/190115)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [July 15, 2019, 7:55am UTC](https://discuss.elastic.co/t/uncommon-processes/190115 "2019-07-15T07:55:06Z")
How does SIEM determine what is and is not an uncommon process? --- ## [Return only highest scoring document from a family of documents](https://discuss.elastic.co/t/return-only-highest-scoring-document-from-a-family-of-documents/151541)
**Author:** [@Jon\_Hourany](https://discuss.elastic.co/u/Jon_Hourany)\ **Replies:** 1\ **Last updated:** [October 10, 2018, 2:38pm UTC](https://discuss.elastic.co/t/return-only-highest-scoring-document-from-a-family-of-documents/151541 "2018-10-10T14:38:41Z")
Let's say I have documents mapped such that: PUT test\_documents { "mappings": { "doc": { "properties": { "parent\_id": { "type": "keyword" }, "body": { "type": "text" } } } } } Wh… --- ## [Endpoint inconsistency in different regions of Elastic Cloud](https://discuss.elastic.co/t/endpoint-inconsistency-in-different-regions-of-elastic-cloud/273202)
**Author:** [@Mkian](https://discuss.elastic.co/u/Mkian)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 9:58pm UTC](https://discuss.elastic.co/t/endpoint-inconsistency-in-different-regions-of-elastic-cloud/273202 "2021-05-17T21:58:43Z")
In Elastic Cloud a custom endpoint alias is recently added which is good and it helps in some automations BUT I see an inconsistency in different regions when I get the endpoints which makes the automation unnecessarily … --- ## [Create nested mappings there is still an error](https://discuss.elastic.co/t/create-nested-mappings-there-is-still-an-error/273138)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 10:35am UTC](https://discuss.elastic.co/t/create-nested-mappings-there-is-still-an-error/273138 "2021-05-17T10:35:33Z")
hallo, can you help me with this problem PUT office { "mappings": { "departments" : \[{ "properties":{ "id":{ "type":"integer" }, "deptName":{ "type":"string" }, "employee\_details":{ "type":"nested", "prope… --- ## [How to put condition on a failed watch?](https://discuss.elastic.co/t/how-to-put-condition-on-a-failed-watch/64209)
**Author:** [@coffeeholic](https://discuss.elastic.co/u/coffeeholic)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 3:51pm UTC](https://discuss.elastic.co/t/how-to-put-condition-on-a-failed-watch/64209 "2016-10-28T15:51:35Z")
I have a watch set up on cluster health, where I trigger an action if the status is red. However, it's possible that the node I am watching go down. In this case, the watch history will record a failed attempt and take n… --- ## [Keeping values across events](https://discuss.elastic.co/t/keeping-values-across-events/53901)
**Author:** [@DMJ](https://discuss.elastic.co/u/DMJ)\ **Replies:** 4\ **Last updated:** [June 26, 2016, 5:44am UTC](https://discuss.elastic.co/t/keeping-values-across-events/53901 "2016-06-26T05:44:43Z")
How can I store a date and assign it to upcoming events? Also I want to update the variable to new date when I find a new one. --- ## [Filtering using grok](https://discuss.elastic.co/t/filtering-using-grok/51327)
**Author:** [@GINS007](https://discuss.elastic.co/u/GINS007)\ **Replies:** 4\ **Last updated:** [May 31, 2016, 9:09am UTC](https://discuss.elastic.co/t/filtering-using-grok/51327 "2016-05-31T09:09:06Z")
Hi, I want to perform different operation based on the entry in my log file. 2016-05-12 18:32:11,452 \[http-8080-2\] INFO AwsLifeCycleManager Aws VMProvisioning SUCCESS AssetID IP AssetName If the operat… --- ## [Upgrade from 2.1.1 to 2.2 - Error while creating mapping](https://discuss.elastic.co/t/upgrade-from-2-1-1-to-2-2-error-while-creating-mapping/44225)
**Author:** [@garyg](https://discuss.elastic.co/u/garyg)\ **Replies:** 4\ **Last updated:** [March 12, 2016, 6:23pm UTC](https://discuss.elastic.co/t/upgrade-from-2-1-1-to-2-2-error-while-creating-mapping/44225 "2016-03-12T18:23:47Z")
I got the mapping from an existing elastic search cluster on version 2.1.1 and trying to create the same mapping on an elastic search cluster running version 2.2. I get the following error - { "error": { "root… --- ## [Max File Descriptors](https://discuss.elastic.co/t/max-file-descriptors/2673)
**Author:** [@egrimisu](https://discuss.elastic.co/u/egrimisu)\ **Replies:** 4\ **Last updated:** [June 23, 2015, 11:50am UTC](https://discuss.elastic.co/t/max-file-descriptors/2673 "2015-06-23T11:50:28Z")
Hi again, I was configuring file descriptors limit and when i have executed the curl command below i just saw that there were 2 elasticsearch nodes in my system, wich seems to be false, i have only one, i'm not sure wh… --- ## [Order and paginate by children count](https://discuss.elastic.co/t/order-and-paginate-by-children-count/11642)
**Author:** [@Stalinko](https://discuss.elastic.co/u/Stalinko)\ **Replies:** 4\ **Last updated:** [April 23, 2013, 8:13am UTC](https://discuss.elastic.co/t/order-and-paginate-by-children-count/11642 "2013-04-23T08:13:05Z")
I have been breaking tables with my head for 3 days already. I have that task: "authors" have "books". I need to search authors who has books satisfying some criteria. The problem is that I need to sort authors by… --- ## [Changing Index Mapping & Making Long Texts Keyword For Elasticsearch](https://discuss.elastic.co/t/changing-index-mapping-making-long-texts-keyword-for-elasticsearch/347709)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 3\ **Last updated:** [November 22, 2023, 6:35pm UTC](https://discuss.elastic.co/t/changing-index-mapping-making-long-texts-keyword-for-elasticsearch/347709 "2023-11-22T18:35:03Z")
Moving forward, should I find a need to change my index mapping after the data is ingested, I have this description column which I realised was ingested as Text and not a keyword. PUT /ats-mainline-logs-2023-01,ats-mai… [Previous page](https://discuss.elastic.co/top.md?page=1242&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1244&per_page=50&period=all)