# Top **URL:** https://discuss.elastic.co/top.md?page=1246&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1247 --- ## [Custom Token Filter: selectively remove .(dot) at end of word or catenate letter around .(dot)](https://discuss.elastic.co/t/custom-token-filter-selectively-remove-dot-at-end-of-word-or-catenate-letter-around-dot/21061)
**Author:** [@Jade\_Tremblay](https://discuss.elastic.co/u/Jade_Tremblay)\ **Replies:** 1\ **Last updated:** [December 3, 2014, 3:41pm UTC](https://discuss.elastic.co/t/custom-token-filter-selectively-remove-dot-at-end-of-word-or-catenate-letter-around-dot/21061 "2014-12-03T15:41:04Z")
Hello, I have created a custom analyzer with (tokenizer: whitespace). I would like to remove dot only at the end of words AND catenate letter/words if dot are between letters (ex: a.b.c =\> abc). What is the way … --- ## [Logstash systemd service restarts itself](https://discuss.elastic.co/t/logstash-systemd-service-restarts-itself/279941)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 8:53am UTC](https://discuss.elastic.co/t/logstash-systemd-service-restarts-itself/279941 "2021-08-19T08:53:15Z")
Hello community, I'm running a logstash instance with the following config via a systemd service for minute-wise updates of an ES index: input { jdbc { jdbc\_driver\_class =\> "Java::oracle.jdbc.dr… --- ## [ECK compatibility with Docker for Windows (Kubernetes)](https://discuss.elastic.co/t/eck-compatibility-with-docker-for-windows-kubernetes/209873)
**Author:** [@olc-olivier](https://discuss.elastic.co/u/olc-olivier)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 2:43pm UTC](https://discuss.elastic.co/t/eck-compatibility-with-docker-for-windows-kubernetes/209873 "2019-11-29T14:43:06Z")
Hi, Someone could tell me if I can install ECK with Docker for Windows (compliance) ? Thx. PS: I have this error. "logger":"transport","message":"Skipping pod because it has no IP yet","ver":"1.0.0-beta1-84792e30","n… --- ## [Can't load metricbeat data: Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/cant-load-metricbeat-data-fielddata-is-disabled-on-text-fields-by-default/193178)
**Author:** [@carson](https://discuss.elastic.co/u/carson)\ **Replies:** 2\ **Last updated:** [August 1, 2019, 1:58pm UTC](https://discuss.elastic.co/t/cant-load-metricbeat-data-fielddata-is-disabled-on-text-fields-by-default/193178 "2019-08-01T13:58:15Z")
I'm not sure what caused this, possibly my previous attempt to use logstash, or an index I once tried on metricbeat. I now send beats directly to elasticsearch. I'm using 7.1 for all parts of the ELK stack. From the Inf… --- ## [JDBC input Value tracking, "Can't dup Fixnum"](https://discuss.elastic.co/t/jdbc-input-value-tracking-cant-dup-fixnum/150473)
**Author:** [@muyuqj](https://discuss.elastic.co/u/muyuqj)\ **Replies:** 2\ **Last updated:** [October 17, 2018, 11:42am UTC](https://discuss.elastic.co/t/jdbc-input-value-tracking-cant-dup-fixnum/150473 "2018-10-17T11:42:53Z")
rufus-scheduler intercepted an error: 2030 job: 2030 Rufus::Scheduler::CronJob "\*/1 \* \* \* \*" {} 2030 error: 2030 2030 2030 TypeError 2030 can't dup Fixnum 2030 org/jruby/RubyKernel.java:1… --- ## [Unknown Fields in Index Patterns](https://discuss.elastic.co/t/unknown-fields-in-index-patterns/103766)
**Author:** [@swagner](https://discuss.elastic.co/u/swagner)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 4:11pm UTC](https://discuss.elastic.co/t/unknown-fields-in-index-patterns/103766 "2017-10-13T16:11:09Z")
We have removed documents from our index containing certain fields. These fields are no longer present in any remaining document. After refreshing and even deleting and recreating the index pattern in Kibana these field… --- ## [Shards query and merging time](https://discuss.elastic.co/t/shards-query-and-merging-time/89528)
**Author:** [@Yashpal\_Singh](https://discuss.elastic.co/u/Yashpal_Singh)\ **Replies:** 2\ **Last updated:** [June 16, 2017, 5:27am UTC](https://discuss.elastic.co/t/shards-query-and-merging-time/89528 "2017-06-16T05:27:59Z")
Hi, I want to know if there is anyway, by which we can find the following 1)Query execution time on a shard. 2)Merging time to merge the result of every shard. I have gone through the Profile API, But didn't underst… --- ## [Highlight слова в nested поле используя словоформы](https://discuss.elastic.co/t/highlight-nested/85675)
**Author:** [@symbios-zi](https://discuss.elastic.co/u/symbios-zi)\ **Replies:** 2\ **Last updated:** [May 14, 2017, 12:24pm UTC](https://discuss.elastic.co/t/highlight-nested/85675 "2017-05-14T12:24:46Z")
Здравствуйте. У меня есть индекс товаров (products) где используется поле описание (descriptions) в виде массива объектов, так как один товар имеет несколько описаний для разных сайтов. Есть задача поиска по описаниям, … --- ## [Custom filter plugin creation error: logstash](https://discuss.elastic.co/t/custom-filter-plugin-creation-error-logstash/80128)
**Author:** [@vaishnavi](https://discuss.elastic.co/u/vaishnavi)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 1:44pm UTC](https://discuss.elastic.co/t/custom-filter-plugin-creation-error-logstash/80128 "2017-04-04T13:44:57Z")
Hi I need to create a custom filter plugin in logstash to create new ruby events... bundle install was success but while running bundle exec rspec, I get the following errors you might need to reinstall the gem which … --- ## [Msearch/mpercolate Is there a limit on queries?](https://discuss.elastic.co/t/msearch-mpercolate-is-there-a-limit-on-queries/41219)
**Author:** [@KiranbPatil](https://discuss.elastic.co/u/KiranbPatil)\ **Replies:** 2\ **Last updated:** [February 8, 2016, 9:14pm UTC](https://discuss.elastic.co/t/msearch-mpercolate-is-there-a-limit-on-queries/41219 "2016-02-08T21:14:53Z")
Hi, msearch and mpercolate allow querying multiple documents in one API call. Is there a limit on the number of queries which can passed to these APIs? And has any one noticed any performance issues on using these AP… --- ## [Is it intended to log errors to stdout while calling the option in the code stderr?](https://discuss.elastic.co/t/is-it-intended-to-log-errors-to-stdout-while-calling-the-option-in-the-code-stderr/33082)
**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\ **Replies:** 2\ **Last updated:** [October 27, 2015, 5:00pm UTC](https://discuss.elastic.co/t/is-it-intended-to-log-errors-to-stdout-while-calling-the-option-in-the-code-stderr/33082 "2015-10-27T17:00:55Z")
As far as I know, errors and logging outputs are typically sent to stderr instead of stdout and stdout is "reserved" for program output (golang stdlib "log" package sends log line to stderr as well). At https://github.… --- ## [Restored indices in red](https://discuss.elastic.co/t/restored-indices-in-red/317099)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 8:59pm UTC](https://discuss.elastic.co/t/restored-indices-in-red/317099 "2022-10-20T20:59:12Z")
Hi, I just restored the ES snapshot, but however I get all the restored indices in red status. When I call GET \_cluster/allocation/explain , I get the following: { "index" : "componentinformation", "shard" : 0, … --- ## [Split and group documents by two conditions in Kibana visualizations or Elasticsearch queries](https://discuss.elastic.co/t/split-and-group-documents-by-two-conditions-in-kibana-visualizations-or-elasticsearch-queries/288227)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 3:55pm UTC](https://discuss.elastic.co/t/split-and-group-documents-by-two-conditions-in-kibana-visualizations-or-elasticsearch-queries/288227 "2021-11-02T15:55:49Z")
Let's say I have the following data in Elasticsearch: id : id of the document date : date of inserting the document changed : refers that the field 'working' has changed its status from last document inserted. work… --- ## [Automatic IP reputation check](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 8:45pm UTC](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215 "2021-03-16T20:45:12Z")
Hi All, Is there any way to do ip reputation check automatically with logstash or elasticsearch without manually effort for checking reputation against each ip? --- ## [Ошибка "obtaining shard lock timed out after 5000ms"](https://discuss.elastic.co/t/obtaining-shard-lock-timed-out-after-5000ms/252175)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 7:50pm UTC](https://discuss.elastic.co/t/obtaining-shard-lock-timed-out-after-5000ms/252175 "2020-10-16T19:50:00Z")
Добрый день! Сегодня обнаружил кластер в состоянии "yellow", один шард у системного .kibana\_task\_manager\_1 индекса был Unassigned. посмотрев через GET /\_cluster/allocation/explain обнаружил ошибку: obtaining shard l… --- ## [Unable to view Security option under Management option in Kibana](https://discuss.elastic.co/t/unable-to-view-security-option-under-management-option-in-kibana/243017)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 11:48am UTC](https://discuss.elastic.co/t/unable-to-view-security-option-under-management-option-in-kibana/243017 "2020-08-05T11:48:02Z")
Hi, I want to restrict user using Role Based Access Control(RBAC) I have a Kibana Basic license version on 7.3.0, when I checked the Management Option there is no Security option available. But as per https://www.elast… --- ## [Not able to execute rally track as many process running already](https://discuss.elastic.co/t/not-able-to-execute-rally-track-as-many-process-running-already/222899)
**Author:** [@jbaskaran\_123](https://discuss.elastic.co/u/jbaskaran_123)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 5:17pm UTC](https://discuss.elastic.co/t/not-able-to-execute-rally-track-as-many-process-running-already/222899 "2020-03-12T17:17:24Z")
Hi, I have a single node elasticsearch cluster in a kubernetes cluster. Also Rally installed in a separate docker container in same namespace where ES is running. I am able to run default track "geonames" and test com… --- ## [一部のDashboardでPDF Reportが失敗する](https://discuss.elastic.co/t/dashboard-pdf-report/205972)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 2:04am UTC](https://discuss.elastic.co/t/dashboard-pdf-report/205972 "2019-11-06T02:04:16Z")
お世話になります。 一部のDashboardでPDF Reportが失敗します。 成功するDashboardもあるので基本的な設定ができていないわけではないと思っています。 エラーメッセージとして、ERR\_CONNECTION\_TIMED\_OUT が表示されていました。 この解決策として、xpack.reporting.queue.timeout の設定を600000に設定してみたのですが、 設定が効いていないように見えます。 … --- ## [Logstash-http-input having unrecoverable error when logstash is used in systemd](https://discuss.elastic.co/t/logstash-http-input-having-unrecoverable-error-when-logstash-is-used-in-systemd/199161)
**Author:** [@De\_Lin\_Hoo](https://discuss.elastic.co/u/De_Lin_Hoo)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 2:21am UTC](https://discuss.elastic.co/t/logstash-http-input-having-unrecoverable-error-when-logstash-is-used-in-systemd/199161 "2019-09-12T02:21:05Z")
Hi, I am using logstash version 7.3 and I have an unrecoverable error using logstash-http-input plugin. My host operating system is Ubuntu 18 and I installed logstash following the instructions of https://www.elastic.co/… --- ## [How to install watcher in elasticsearch 6.7.0](https://discuss.elastic.co/t/how-to-install-watcher-in-elasticsearch-6-7-0/187257)
**Author:** [@quangvublog](https://discuss.elastic.co/u/quangvublog)\ **Replies:** 3\ **Last updated:** [June 25, 2019, 8:46am UTC](https://discuss.elastic.co/t/how-to-install-watcher-in-elasticsearch-6-7-0/187257 "2019-06-25T08:46:37Z")
Hello everyone! I want to install watcher in elasticsearch 6.7.0 following this url: Download Watcher | Alerting for Elasticsearch Firstly: I move to /usr/share/elasticsearch The second: I use this command to install … --- ## [Can't add txt files to elastic search](https://discuss.elastic.co/t/cant-add-txt-files-to-elastic-search/102699)
**Author:** [@OsymandiasII](https://discuss.elastic.co/u/OsymandiasII)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 8:24pm UTC](https://discuss.elastic.co/t/cant-add-txt-files-to-elastic-search/102699 "2017-10-06T20:24:31Z")
hi I want to index txt in elastic search with Logstash. the problem is that logstash do not recognise the index i'm using. I m quite new to ELK so maybe the solution is simple. this is my config file : input { file… --- ## [Losing authentication on license BASIC install](https://discuss.elastic.co/t/losing-authentication-on-license-basic-install/89426)
**Author:** [@monjerry](https://discuss.elastic.co/u/monjerry)\ **Replies:** 3\ **Last updated:** [June 15, 2017, 2:55pm UTC](https://discuss.elastic.co/t/losing-authentication-on-license-basic-install/89426 "2017-06-15T14:55:52Z")
Hello there, Right now i have elastic running with an expired license. When i set up my elastic search for the first time i set up authentication along with SSL. My understanding is that when your license expires you los… --- ## [Logstash refuses to start when 3 or more rabbitmq outputs are used. (message=\>"The error reported is: \\n)](https://discuss.elastic.co/t/logstash-refuses-to-start-when-3-or-more-rabbitmq-outputs-are-used-message-the-error-reported-is-n/42415)
**Author:** [@utilitynerd](https://discuss.elastic.co/u/utilitynerd)\ **Replies:** 3\ **Last updated:** [February 29, 2016, 5:39pm UTC](https://discuss.elastic.co/t/logstash-refuses-to-start-when-3-or-more-rabbitmq-outputs-are-used-message-the-error-reported-is-n/42415 "2016-02-29T17:39:46Z")
logstash 2.2.2 logstash-output-rabbitmq (3.0.7) After upgrading to logstash 2.2.0 and updating all plugins, my instance of logstash is refusing to start. The logstash log only contains: {:timestamp=\>"2016-02-22T09:39… --- ## [Cannot convert date to string by mutate](https://discuss.elastic.co/t/cannot-convert-date-to-string-by-mutate/298022)
**Author:** [@ivanhoe-dev](https://discuss.elastic.co/u/ivanhoe-dev)\ **Replies:** 4\ **Last updated:** [February 23, 2022, 3:25pm UTC](https://discuss.elastic.co/t/cannot-convert-date-to-string-by-mutate/298022 "2022-02-23T15:25:15Z")
I want to force my search\_varchar\_1 data type as string, but it always auto detect my data and parse as date type. Is there something I missed? My config filter { split {} csv { separator =\> "," skip\_header =\> "t… --- ## [Default OR Search- do you override?](https://discuss.elastic.co/t/default-or-search-do-you-override/194057)
**Author:** [@Christie\_Morin](https://discuss.elastic.co/u/Christie_Morin)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 7:08pm UTC](https://discuss.elastic.co/t/default-or-search-do-you-override/194057 "2019-08-07T19:08:27Z")
Elastic Search uses OR by default and other search engines, like Google and MS, use AND for default. Training uses to reverse their logic for ES is challenging. Does anyone override the OR and use AND? I'm not a searc… --- ## [Exporting aggregated data out of ES](https://discuss.elastic.co/t/exporting-aggregated-data-out-of-es/85856)
**Author:** [@pavant](https://discuss.elastic.co/u/pavant)\ **Replies:** 4\ **Last updated:** [May 16, 2017, 7:24pm UTC](https://discuss.elastic.co/t/exporting-aggregated-data-out-of-es/85856 "2017-05-16T19:24:43Z")
I am trying to export aggregared data out of Elasticsearch using log stash input. Below is my code. But I am getting a error. Can anyone help me? My code in Logstash.conf input { elasticsearch { hosts =\> "… --- ## [Xpack security roles](https://discuss.elastic.co/t/xpack-security-roles/83811)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 4\ **Last updated:** [May 1, 2017, 9:45am UTC](https://discuss.elastic.co/t/xpack-security-roles/83811 "2017-05-01T09:45:39Z")
I went through the security training course at Xpack security- elearning Am using Elastic 5.3.1 and we have xpack package for our nodes. I created a role with name "Test\_Role" I gave index privelige to indice logs… --- ## [APM Agent not work](https://discuss.elastic.co/t/apm-agent-not-work/145632)
**Author:** [@Terry\_Xia](https://discuss.elastic.co/u/Terry_Xia)\ **Replies:** 5\ **Last updated:** [August 23, 2018, 7:15am UTC](https://discuss.elastic.co/t/apm-agent-not-work/145632 "2018-08-23T07:15:00Z")
Hello Elastic Team: We have implemented Java Agent with our springboot applicatiions Springboot : 1.5.10 Java: 1.8.0\_161 APM Server : 6.3 APM Agent : 0.6 I place my envset.sh in this path : /home/pengx/APM/apm-age… --- ## [Got internal error in transform script](https://discuss.elastic.co/t/got-internal-error-in-transform-script/103843)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 5\ **Last updated:** [October 16, 2017, 9:14am UTC](https://discuss.elastic.co/t/got-internal-error-in-transform-script/103843 "2017-10-16T09:14:20Z")
Hi, all I am a newbie for painless. I wrote a watcher, snippet of the transform bellow: "transform":{ "script": "string hosts=''; for (item in ctx.payload.aggregations.whichHost.buckets.entrySet()) {hosts = hosts … --- ## [Elasticsearch cluster going down , whenever trying to run query for more than 2 days](https://discuss.elastic.co/t/elasticsearch-cluster-going-down-whenever-trying-to-run-query-for-more-than-2-days/249309)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 6\ **Last updated:** [September 21, 2020, 1:52pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-going-down-whenever-trying-to-run-query-for-more-than-2-days/249309 "2020-09-21T13:52:20Z")
Hi All, I am new to elasticsearch, so don't much idea about it's performance, but whenever I am trying to run a visualization report for more than 2 days then it is resulting in cluster going down. We have some huge loa… --- ## [How to update preconfigured fleet agent policies](https://discuss.elastic.co/t/how-to-update-preconfigured-fleet-agent-policies/337801)
**Author:** [@GeorgeGkinis](https://discuss.elastic.co/u/GeorgeGkinis)\ **Replies:** 2\ **Last updated:** [July 7, 2023, 7:10am UTC](https://discuss.elastic.co/t/how-to-update-preconfigured-fleet-agent-policies/337801 "2023-07-07T07:10:15Z")
Hi, I have a question regarding on how to update preconfigured agent policies residing in kibana.yml. We deploy on ECK and our stack is version 8.8.1. The first time we deploy kibana the preconfigured policies residin… --- ## [Logging only kubelet logs](https://discuss.elastic.co/t/logging-only-kubelet-logs/226694)
**Author:** [@Mario\_Albo\_Soria](https://discuss.elastic.co/u/Mario_Albo_Soria)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 6:42am UTC](https://discuss.elastic.co/t/logging-only-kubelet-logs/226694 "2020-04-07T06:42:19Z")
Hi everybody! I have a Kubernets cluster deployed with RKE. When you deploy using RKE, the kubelet is not deployed as a pod, but it is deployed as a Docker container. I want to collect logs from kubelet container and i… --- ## [Rollups and ILM](https://discuss.elastic.co/t/rollups-and-ilm/214555)
**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:51pm UTC](https://discuss.elastic.co/t/rollups-and-ilm/214555 "2020-01-23T16:51:28Z")
Hi All, A bit of a newbie question. Am I correct in my understanding that Rollups do not delete any data. They just create new aggregate/summary indexes. I would need to set up ILM to delete old granular data from the … --- ## [Date data type null value indexing from csv import](https://discuss.elastic.co/t/date-data-type-null-value-indexing-from-csv-import/212585)
**Author:** [@sadeshdrj](https://discuss.elastic.co/u/sadeshdrj)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 1:32am UTC](https://discuss.elastic.co/t/date-data-type-null-value-indexing-from-csv-import/212585 "2020-01-08T01:32:08Z")
Hi There, Following, im trying to figure out, is there anyway that we can index null values for "Date" data type ? or is there anyway i can index values of NULL values without skipping the data row of CSV file, in thi… --- ## [Problem configuring repository-s3 plugin](https://discuss.elastic.co/t/problem-configuring-repository-s3-plugin/185607)
**Author:** [@haitham00n](https://discuss.elastic.co/u/haitham00n)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 11:33am UTC](https://discuss.elastic.co/t/problem-configuring-repository-s3-plugin/185607 "2019-06-13T11:33:42Z")
Hello, I have installed Elasticsearch 7.1.1 and also installed repository-s3 plugin. I'm trying to define the bucket in elasticsearch.yml as below: s3.client.default.bucket: mybucket Then after restarting Elasticsear… --- ## [Kibana dashboard like date filter in canvas](https://discuss.elastic.co/t/kibana-dashboard-like-date-filter-in-canvas/178523)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 2\ **Last updated:** [April 26, 2019, 9:49am UTC](https://discuss.elastic.co/t/kibana-dashboard-like-date-filter-in-canvas/178523 "2019-04-26T09:49:41Z")
Is it possible to get kibana like date filter in canvas, which shows quick time such as Today, Tomorrow, Yesterday. Because in current canvas, date filter is like something But checking if we can get something like: … --- ## [Translate v3.2.3 on LS 6.5.0: does not work anymore with .csv file](https://discuss.elastic.co/t/translate-v3-2-3-on-ls-6-5-0-does-not-work-anymore-with-csv-file/159161)
**Author:** [@Michel99\_7](https://discuss.elastic.co/u/Michel99_7)\ **Replies:** 2\ **Last updated:** [December 14, 2018, 9:07am UTC](https://discuss.elastic.co/t/translate-v3-2-3-on-ls-6-5-0-does-not-work-anymore-with-csv-file/159161 "2018-12-14T09:07:42Z")
Dear all, I'm trying to migrate a pipeline from LS 6.3.2 to 6.5.0 but there's a problem during its execution due to an error on the translate filter (used with a .csv file): "Unquoted fields do not allow \\r or \\n". \[20… --- ## [Curator: Error with forcemerge](https://discuss.elastic.co/t/curator-error-with-forcemerge/136476)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [June 19, 2018, 12:30pm UTC](https://discuss.elastic.co/t/curator-error-with-forcemerge/136476 "2018-06-19T12:30:33Z")
Hi, I'm seeing the following error with running forcemerge from curator: { "@timestamp": "2018-06-19T07:14:14.643Z", "function": "run", "linenum": 184, "loglevel": "ERROR", "message": "Failed to complete action: f… --- ## [Show metric values in kibana visualization](https://discuss.elastic.co/t/show-metric-values-in-kibana-visualization/119700)
**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\ **Replies:** 2\ **Last updated:** [February 15, 2018, 10:25am UTC](https://discuss.elastic.co/t/show-metric-values-in-kibana-visualization/119700 "2018-02-15T10:25:21Z")
Hello, Is it possible to show metric values in pie or bar chart visualizations. I can show numbers in heatmap but want to show them in other charts also. Could anyone please guide on this. Regards, Shailesh --- ## [I am attempting to pull information from a Watcher query payload to place in an email and I am getting a "index out of bounds exception"](https://discuss.elastic.co/t/i-am-attempting-to-pull-information-from-a-watcher-query-payload-to-place-in-an-email-and-i-am-getting-a-index-out-of-bounds-exception/116540)
**Author:** [@Abshier\_c](https://discuss.elastic.co/u/Abshier_c)\ **Replies:** 2\ **Last updated:** [January 22, 2018, 10:03pm UTC](https://discuss.elastic.co/t/i-am-attempting-to-pull-information-from-a-watcher-query-payload-to-place-in-an-email-and-i-am-getting-a-index-out-of-bounds-exception/116540 "2018-01-22T22:03:51Z")
Here is my query and action: { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "winlogbeat-\*" \], "types": \[\], "body": { … --- ## [Cannot push to elasticsearch since migration of ES from 5.6 to 6.1](https://discuss.elastic.co/t/cannot-push-to-elasticsearch-since-migration-of-es-from-5-6-to-6-1/112446)
**Author:** [@jdefaver](https://discuss.elastic.co/u/jdefaver)\ **Replies:** 2\ **Last updated:** [December 20, 2017, 8:52am UTC](https://discuss.elastic.co/t/cannot-push-to-elasticsearch-since-migration-of-es-from-5-6-to-6-1/112446 "2017-12-20T08:52:29Z")
Hi, I have done a rolling migration from ES 5.6 to 6.1. I realized logstash could not push my events to ES anymore. I first updated logstash, then I realized I had the "\[include\_in\_all\] is not allowed for indices creat… --- ## [Return the query terms when total hits = 0](https://discuss.elastic.co/t/return-the-query-terms-when-total-hits-0/67931)
**Author:** [@dcwdeveloper](https://discuss.elastic.co/u/dcwdeveloper)\ **Replies:** 2\ **Last updated:** [December 4, 2016, 11:08pm UTC](https://discuss.elastic.co/t/return-the-query-terms-when-total-hits-0/67931 "2016-12-04T23:08:11Z")
I have the following document structure: { "date" : 1400500, "idc" : 1001, "name": "somebody", } I am performing an \_msearch query on a bunch of documents based on different values (the "idc" and a "date" ra… --- ## [Kibana custom dashboard does not show Filebeat metrics values](https://discuss.elastic.co/t/kibana-custom-dashboard-does-not-show-filebeat-metrics-values/317656)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 8\ **Last updated:** [October 31, 2022, 3:24pm UTC](https://discuss.elastic.co/t/kibana-custom-dashboard-does-not-show-filebeat-metrics-values/317656 "2022-10-31T15:24:54Z")
Hi, Summary of the Issue I'm having: Custom Kibana dashboard I have created to show a few internal Filebeat metrics - does not show their values (just shows zeros for all fields I selected), even though I can see that … --- ## [The filter on apm ui did not work](https://discuss.elastic.co/t/the-filter-on-apm-ui-did-not-work/243183)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 8\ **Last updated:** [August 6, 2020, 6:18am UTC](https://discuss.elastic.co/t/the-filter-on-apm-ui-did-not-work/243183 "2020-08-06T06:18:52Z")
ELK version: 7.8.0 I have 2 questions 1.the filter on apm ui did not work See gif picture for details https://drive.google.com/file/d/15kZ7qVO4rKI29kUXJSsnLLs4FZUvFhTP/view?usp=sharing 2.How is transaction interface… --- ## [Parse XML file question](https://discuss.elastic.co/t/parse-xml-file-question/125527)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 8\ **Last updated:** [March 27, 2018, 3:23am UTC](https://discuss.elastic.co/t/parse-xml-file-question/125527 "2018-03-27T03:23:48Z")
Hi experts, I have parsed a XML file by using Xpath, but some field can't be detect, would you please help me check it? Thank you. The input file: \ \ \ **Author:** [@Shaun\_Stuart](https://discuss.elastic.co/u/Shaun_Stuart)\ **Replies:** 7\ **Last updated:** [July 19, 2024, 12:52pm UTC](https://discuss.elastic.co/t/question-about-knn-query-on-nested-field-and-similarity-parameter/363294 "2024-07-19T12:52:54Z") Hello According to the documentation (Knn query | Elasticsearch Guide \[8.14\] | Elastic), the similarity parameter can be used as a filter to only include documents that are greater than the raw similarity calculated. I'… --- ## [Serilog and Filebeat Compatibility](https://discuss.elastic.co/t/serilog-and-filebeat-compatibility/280678)
**Author:** [@christamlyn](https://discuss.elastic.co/u/christamlyn)\ **Replies:** 1\ **Last updated:** [August 8, 2021, 11:14pm UTC](https://discuss.elastic.co/t/serilog-and-filebeat-compatibility/280678 "2021-08-08T23:14:48Z")
Quite specific to our setup but: we are currently using Filebeat to ship logs to Elasticsearch we want to slowly migrate to using Serilog sinks to ship to Elasticsearch we have a number of dashboards setup for the exis… --- ## [Kibana Lucene time query](https://discuss.elastic.co/t/kibana-lucene-time-query/233159)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 1\ **Last updated:** [May 18, 2020, 7:13pm UTC](https://discuss.elastic.co/t/kibana-lucene-time-query/233159 "2020-05-18T19:13:05Z")
Hi, I only want to do a query about the data from the last minute. What is the query syntax for time if you use Canvas --\> Elasticsearch Raw documents --\> Lucene queries? --- ## [Logstash 7.2 can not match date on JSON data from Cisco telemetry](https://discuss.elastic.co/t/logstash-7-2-can-not-match-date-on-json-data-from-cisco-telemetry/191557)
**Author:** [@tlittirut](https://discuss.elastic.co/u/tlittirut)\ **Replies:** 7\ **Last updated:** [July 23, 2019, 11:59pm UTC](https://discuss.elastic.co/t/logstash-7-2-can-not-match-date-on-json-data-from-cisco-telemetry/191557 "2019-07-23T23:59:55Z")
Hello ! I'm a newbie on logstash and trying to decode cisco telemetry data in json format. My code in logstash are the following: filter { if \[type\] == "xjson" { json { source =\> "message" } mutate { remove\_field… --- ## [Bulk Payload Sizes](https://discuss.elastic.co/t/bulk-payload-sizes/134762)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 7\ **Last updated:** [June 11, 2018, 3:16pm UTC](https://discuss.elastic.co/t/bulk-payload-sizes/134762 "2018-06-11T15:16:47Z")
Hi, Is there a way that I can track the size of the bulk ingestion payloads hitting elasticsearch? Regards, D [Previous page](https://discuss.elastic.co/top.md?page=1245&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1247&per_page=50&period=all)