# Top

**URL:** https://discuss.elastic.co/top.md?page=1247&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1248

---

## [Elasticsearch index without template?](https://discuss.elastic.co/t/elasticsearch-index-without-template/61957)

<div class="topic-metadata">

**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\
**Replies:** 1\
**Last updated:** [October 1, 2016, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-index-without-template/61957 "2016-10-01T11:26:14Z")

</div>

Hello fellow loggers, I guess I was unaware, but does Elasticsearch still create indexes and save data to string field types by default to an Index that does not have a template defined at all?

---

## [What configuration is available to control MemoryMapDirectory](https://discuss.elastic.co/t/what-configuration-is-available-to-control-memorymapdirectory/22665)

<div class="topic-metadata">

**Author:** [@lpoole](https://discuss.elastic.co/u/lpoole)\
**Replies:** 7\
**Last updated:** [March 15, 2015, 9:48pm UTC](https://discuss.elastic.co/t/what-configuration-is-available-to-control-memorymapdirectory/22665 "2015-03-15T21:48:29Z")

</div>

Hey guys, We're running into some problems under heavy write, nominal read volume when the Lucene memory mapped files have exhausted available physical memory, and segments from disk must be paged into memory. A…

---

## [Shard failed recovery upon rolling upgrade due to storeTermVector error](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260)

<div class="topic-metadata">

**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 9:01pm UTC](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260 "2022-03-09T21:01:40Z")

</div>

Hi there, I am testing the rolling upgrade from 7.5 to 8.0 on a single node cluster. According to the documentations, I did 7.5-\>7.17, then 7.17-\>8.0. The 7.5 to 7.17 rolling upgrade went smoothly, but when I did 7.17-\>8…

---

## [Elastic search query behind appsearch query](https://discuss.elastic.co/t/elastic-search-query-behind-appsearch-query/292468)

<div class="topic-metadata">

**Author:** [@ammarhaider](https://discuss.elastic.co/u/ammarhaider)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 1:51pm UTC](https://discuss.elastic.co/t/elastic-search-query-behind-appsearch-query/292468 "2021-12-20T13:51:17Z")

</div>

I am using Appsearch/Enterprise search at the frontend, but I need some heavy processing / complex queries to be made at the backend for which I need more control. And as per my understanding appsearch is basically a wra…

---

## [Percolator Performance (ES 5.6)](https://discuss.elastic.co/t/percolator-performance-es-5-6/224173)

<div class="topic-metadata">

**Author:** [@dolphorama](https://discuss.elastic.co/u/dolphorama)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 6:44pm UTC](https://discuss.elastic.co/t/percolator-performance-es-5-6/224173 "2020-03-18T18:44:13Z")

</div>

Hi, Since moving from 2.x to 5.6 we have seen a drastic increase in overall query time, and one the biggest culprits is percolation. After some research, I've been looking at the "query.extraction\_result" : "failed" co…

---

## [The CPU is not scaling with high search load in Elasticsearch7.3.0](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 3:27pm UTC](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873 "2019-08-12T15:27:22Z")

</div>

Hi We have numa enabled server with 2 sockets, each socket with 28 cores and its one node cluster with 10 indies , 5 shards each. Under the same workload(with high search operation load): Scenario 1 when we run ES7.3…

---

## [Kibana not loading completely](https://discuss.elastic.co/t/kibana-not-loading-completely/271923)

<div class="topic-metadata">

**Author:** [@soberCoder](https://discuss.elastic.co/u/soberCoder)\
**Replies:** 3\
**Last updated:** [May 3, 2021, 5:03pm UTC](https://discuss.elastic.co/t/kibana-not-loading-completely/271923 "2021-05-03T17:03:26Z")

</div>

Hi, Kibana is loading half of the calls and only a blank screen is visible to the user(after the loading logo, nothing loads). I am working with ELK Stack version = 7.10.2 I am trying to share dashboards with reverse…

---

## [\[Metricbeat\]\[Prometheus\] Metricbeat 7.7 rate not stored when use\_types and rate\_counters option is set to true](https://discuss.elastic.co/t/metricbeat-prometheus-metricbeat-7-7-rate-not-stored-when-use-types-and-rate-counters-option-is-set-to-true/236251)

<div class="topic-metadata">

**Author:** [@Jose\_Vargas](https://discuss.elastic.co/u/Jose_Vargas)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 7:49am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-metricbeat-7-7-rate-not-stored-when-use-types-and-rate-counters-option-is-set-to-true/236251 "2020-06-17T07:49:15Z")

</div>

Hi all, I am trying out the Metricbeat Prometheus collector module with the two new options in 7.7; use\_types and rate\_counters; https://www.elastic.co/guide/en/beats/metricbeat/7.7/metricbeat-metricset-prometheus-colle…

---

## [Http output error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target](https://discuss.elastic.co/t/http-output-error-pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/179709)

<div class="topic-metadata">

**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\
**Replies:** 0\
**Last updated:** [May 6, 2019, 6:40am UTC](https://discuss.elastic.co/t/http-output-error-pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/179709 "2019-05-06T06:40:08Z")

</div>

I have downloaded and installed Logstash 7.0.1 and using nssm.exe I have setup Logstash in windows machine. I have two questions. Why am I not able to access the logstash http host url using https, but only as http:/…

---

## [How Can I parse logs that are already indexed in elasticsearch with logstash?](https://discuss.elastic.co/t/how-can-i-parse-logs-that-are-already-indexed-in-elasticsearch-with-logstash/166578)

<div class="topic-metadata">

**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\
**Replies:** 3\
**Last updated:** [January 31, 2019, 3:24pm UTC](https://discuss.elastic.co/t/how-can-i-parse-logs-that-are-already-indexed-in-elasticsearch-with-logstash/166578 "2019-01-31T15:24:53Z")

</div>

Hello! How can I parse logs that are already indexed? For example one of my log files has a lot of info and all the time shows up new ideas to extract the info in many different ways for many different use cases. My qu…

---

## [Configuring filebeat 6.1 modules in windows](https://discuss.elastic.co/t/configuring-filebeat-6-1-modules-in-windows/113921)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 8:50am UTC](https://discuss.elastic.co/t/configuring-filebeat-6-1-modules-in-windows/113921 "2018-01-04T08:50:50Z")

</div>

Hi, I installed filebeat 6.1 on my PC to ship Apache2, and Mysql logs to my Elasticsearch server. Do we have any documentation on how to enable and configure modules in windows 10? I tried to enable apache2 and mysql m…

---

## [Unable to Visualise Metricbeat system.process.CPU data](https://discuss.elastic.co/t/unable-to-visualise-metricbeat-system-process-cpu-data/105103)

<div class="topic-metadata">

**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\
**Replies:** 0\
**Last updated:** [October 24, 2017, 4:42pm UTC](https://discuss.elastic.co/t/unable-to-visualise-metricbeat-system-process-cpu-data/105103 "2017-10-24T16:42:19Z")

</div>

Running Metricbeat v6 RC1 (trialling the perfmon counter functionality), but have Metricbeat reporting metrics at a process level also, note I have "top n" selected as well as specifiying a few processes the idea was tha…

---

## [INDEX\_NAME can not be imported as a dangling index, as index with same name already exists in cluster metadata](https://discuss.elastic.co/t/index-name-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/72162)

<div class="topic-metadata">

**Author:** [@NMFR](https://discuss.elastic.co/u/NMFR)\
**Replies:** 0\
**Last updated:** [January 19, 2017, 11:42am UTC](https://discuss.elastic.co/t/index-name-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/72162 "2017-01-19T11:42:09Z")

</div>

I have the following warnings in the log every day on a specific node: (this repeats 285 times for the same 2 indexes) \[2017-01-19T00:53:30,171\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[LXS2jYx\] \[\[card-views-and-searches-20…

---

## [TIlemap zoomin come's short](https://discuss.elastic.co/t/tilemap-zoomin-comes-short/59146)

<div class="topic-metadata">

**Author:** [@yaacovki](https://discuss.elastic.co/u/yaacovki)\
**Replies:** 3\
**Last updated:** [August 31, 2016, 6:05pm UTC](https://discuss.elastic.co/t/tilemap-zoomin-comes-short/59146 "2016-08-31T18:05:55Z")

</div>

Having trouble with Tilemap. Using the WMS compliant maps on http://ows-tile.terrestris.de/osm-basemap/service? i got that the map is going zoomin till certain level and after that, the + button is going gray and i ca…

---

## [Dealing with log messages about source \_and\_ target](https://discuss.elastic.co/t/dealing-with-log-messages-about-source-and-target/313895)

<div class="topic-metadata">

**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\
**Replies:** 6\
**Last updated:** [September 21, 2022, 4:26am UTC](https://discuss.elastic.co/t/dealing-with-log-messages-about-source-and-target/313895 "2022-09-21T04:26:31Z")

</div>

Okay, so… We’ve got a field that could be used to indicate whether a whole message is related to client or server activity, whether communication is inbound or outbound: network.direction But in some situations we’re l…

---

## [Errors are not logged to APM](https://discuss.elastic.co/t/errors-are-not-logged-to-apm/237101)

<div class="topic-metadata">

**Author:** [@akosanovic](https://discuss.elastic.co/u/akosanovic)\
**Replies:** 6\
**Last updated:** [June 22, 2020, 7:14am UTC](https://discuss.elastic.co/t/errors-are-not-logged-to-apm/237101 "2020-06-22T07:14:43Z")

</div>

APM Agent language and version: javascript; '@elastic/apm-rum: 4.9.1' Browser version: Any Original install method (e.g. download page, yum, deb, from source, etc.) and version: Elastic Cloud 7.1.1 Is there anything…

---

## [How to make TLS and authorization configurable by environment variables?](https://discuss.elastic.co/t/how-to-make-tls-and-authorization-configurable-by-environment-variables/197318)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 6\
**Last updated:** [August 30, 2019, 6:46am UTC](https://discuss.elastic.co/t/how-to-make-tls-and-authorization-configurable-by-environment-variables/197318 "2019-08-30T06:46:17Z")

</div>

Hi, I use security module to encrypt and authorization in public dev system in kubernetes - as it will be on production later. In local developement environment I have not set up TLS. Is there any way how I can config…

---

## [Auto\_import\_dangled for ES 6.3.X](https://discuss.elastic.co/t/auto-import-dangled-for-es-6-3-x/155789)

<div class="topic-metadata">

**Author:** [@fassisrosa](https://discuss.elastic.co/u/fassisrosa)\
**Replies:** 6\
**Last updated:** [November 8, 2018, 4:03pm UTC](https://discuss.elastic.co/t/auto-import-dangled-for-es-6-3-x/155789 "2018-11-08T16:03:36Z")

</div>

Hi there, I am having some issues with dangled indexes. Scenario seems to be: \*) Data node went down, was down for a while. \*) Life went on, some indexes were deleted from cluster. \*) Data node came back, saw indices…

---

## [Upgrade the Elasticsearch to 7.10 version warning](https://discuss.elastic.co/t/upgrade-the-elasticsearch-to-7-10-version-warning/269756)

<div class="topic-metadata">

**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\
**Replies:** 4\
**Last updated:** [April 10, 2021, 7:06am UTC](https://discuss.elastic.co/t/upgrade-the-elasticsearch-to-7-10-version-warning/269756 "2021-04-10T07:06:35Z")

</div>

I have a elasticsearch cluster about 6 node(3 masters , 3 data,the version is 6.6, running through the docker), and then, I want to upgrade it from 6.6 to 7.10 , accronding to the Official document ， I must upgrade my c…

---

## [APM dashboard is not getting loaded](https://discuss.elastic.co/t/apm-dashboard-is-not-getting-loaded/216390)

<div class="topic-metadata">

**Author:** [@Karthik\_Medam](https://discuss.elastic.co/u/Karthik_Medam)\
**Replies:** 4\
**Last updated:** [January 30, 2020, 8:43am UTC](https://discuss.elastic.co/t/apm-dashboard-is-not-getting-loaded/216390 "2020-01-30T08:43:54Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.6…

---

## [How to build a kibana pluggin](https://discuss.elastic.co/t/how-to-build-a-kibana-pluggin/205035)

<div class="topic-metadata">

**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\
**Replies:** 4\
**Last updated:** [October 28, 2019, 3:10am UTC](https://discuss.elastic.co/t/how-to-build-a-kibana-pluggin/205035 "2019-10-28T03:10:51Z")

</div>

hi all, I'm a new one with kinaba, I want to build a pluggin that collect data from ES and show result as a report on kibana pluggin. Please tell me know steps need to do? I tried to create "helloworld" kibana plugin f…

---

## [How to filter data using two indexes](https://discuss.elastic.co/t/how-to-filter-data-using-two-indexes/191193)

<div class="topic-metadata">

**Author:** [@lakmina\_chathurya](https://discuss.elastic.co/u/lakmina_chathurya)\
**Replies:** 4\
**Last updated:** [July 18, 2019, 1:51pm UTC](https://discuss.elastic.co/t/how-to-filter-data-using-two-indexes/191193 "2019-07-18T13:51:37Z")

</div>

hi team, I want to select all the users from user index and filter software engineers from user\_job index and result should display in bucket aggregation

---

## [SQL statement too large](https://discuss.elastic.co/t/sql-statement-too-large/160719)

<div class="topic-metadata">

**Author:** [@Amr\_Abdeldayem](https://discuss.elastic.co/u/Amr_Abdeldayem)\
**Replies:** 4\
**Last updated:** [December 15, 2018, 9:00am UTC](https://discuss.elastic.co/t/sql-statement-too-large/160719 "2018-12-15T09:00:12Z")

</div>

Caused by: java.sql.SQLSyntaxErrorException: line 7:51: SQL statement too large; halt parsing to prevent memory errors (stopped at depth 200) Method is JDBC driver and Sql query request: select count(\*) as count,mainBu…

---

## [Watcher Metadata Error for Date Calculations](https://discuss.elastic.co/t/watcher-metadata-error-for-date-calculations/156773)

<div class="topic-metadata">

**Author:** [@droberts](https://discuss.elastic.co/u/droberts)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 8:51am UTC](https://discuss.elastic.co/t/watcher-metadata-error-for-date-calculations/156773 "2018-11-27T08:51:47Z")

</div>

I'm working on a team that has set up an Elastic cluster (6.3.2) and we've ingested a group of files containing old Bro data. We've previously tested Watcher with this data by using the following metadata block to simula…

---

## [Failed to build Kibana 6.2.4 from source code](https://discuss.elastic.co/t/failed-to-build-kibana-6-2-4-from-source-code/130605)

<div class="topic-metadata">

**Author:** [@tony0918](https://discuss.elastic.co/u/tony0918)\
**Replies:** 4\
**Last updated:** [May 8, 2018, 2:24pm UTC](https://discuss.elastic.co/t/failed-to-build-kibana-6-2-4-from-source-code/130605 "2018-05-08T14:24:25Z")

</div>

Kibana version: 6.2.4 Elasticsearch version: 6.2.4 Server OS version: Window 10 Browser version: Chrome Browser OS version: Windows 10 Original install method (e.g. download page, yum, from source, etc.): Descripti…

---

## [Export to file](https://discuss.elastic.co/t/export-to-file/9113)

<div class="topic-metadata">

**Author:** [@Adam\_Estrada](https://discuss.elastic.co/u/Adam_Estrada)\
**Replies:** 4\
**Last updated:** [September 26, 2012, 7:46am UTC](https://discuss.elastic.co/t/export-to-file/9113 "2012-09-26T07:46:11Z")

</div>

I have read a lot of posts in this group about what the best method of getting data back out of ES is but no one method seems to be definitive. Scan seems that fastest way but I have not tried it. I have been using …

---

## [Trying to setup Kibana behind a proxy](https://discuss.elastic.co/t/trying-to-setup-kibana-behind-a-proxy/362825)

<div class="topic-metadata">

**Author:** [@moondc](https://discuss.elastic.co/u/moondc)\
**Replies:** 5\
**Last updated:** [July 17, 2024, 3:06pm UTC](https://discuss.elastic.co/t/trying-to-setup-kibana-behind-a-proxy/362825 "2024-07-17T15:06:25Z")

</div>

I'm trying to setup Kibana through a reverse proxy but am running into security\_exception Root causes: security\_exception: missing authentication credentials for REST request \[/\_security/user/\_has\_privileges\] I have a …

---

## [Vulnerabilities in docker image elasticsearch/elasticsearch:7.17.8](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377)

<div class="topic-metadata">

**Author:** [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\
**Replies:** 5\
**Last updated:** [January 18, 2023, 2:55pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377 "2023-01-18T14:55:48Z")

</div>

Hi, we are using elasticsearch/elasticsearch:7.17.8 docker image. We are getting few CVEs reported as high with the vulnerabilities scanning report. CVE-2021-31684 -- nimbus-jose-jwt and json-smart CVE-2020-36518 -- …

---

## [Index \[ilm-history -3-0001\] blocked by :\[TOO\_MANY\_REQUESTS/12/disk usage exceeded, index has read-only-allow-delete block\]](https://discuss.elastic.co/t/index-ilm-history-3-0001-blocked-by-too-many-requests-12-disk-usage-exceeded-index-has-read-only-allow-delete-block/278051)

<div class="topic-metadata">

**Author:** [@mba](https://discuss.elastic.co/u/mba)\
**Replies:** 5\
**Last updated:** [July 9, 2021, 8:27am UTC](https://discuss.elastic.co/t/index-ilm-history-3-0001-blocked-by-too-many-requests-12-disk-usage-exceeded-index-has-read-only-allow-delete-block/278051 "2021-07-09T08:27:41Z")

</div>

index \[ilm-history -3-0001\] blocked by :\[TOO\_MANY\_REQUESTS/12/disk usage exceeded, index has read-only-allow-delete block\]

---

## [/usr/share/elasticsearch/bin/elasticsearch](https://discuss.elastic.co/t/usr-share-elasticsearch-bin-elasticsearch/320640)

<div class="topic-metadata">

**Author:** [@Alejandro\_Abeijon](https://discuss.elastic.co/u/Alejandro_Abeijon)\
**Replies:** 2\
**Last updated:** [December 7, 2022, 11:27am UTC](https://discuss.elastic.co/t/usr-share-elasticsearch-bin-elasticsearch/320640 "2022-12-07T11:27:58Z")

</div>

Hi, thanks in advance for the help. I installed Elasticsearch in a thousand ways and I always get the same error. Can someone guide me where to start exploring? Thank you very much! elasticsearch@test:~$ /usr/share/el…

---

## [Elasticsearch default credentials](https://discuss.elastic.co/t/elasticsearch-default-credentials/221384)

<div class="topic-metadata">

**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\
**Replies:** 2\
**Last updated:** [February 28, 2020, 9:55am UTC](https://discuss.elastic.co/t/elasticsearch-default-credentials/221384 "2020-02-28T09:55:10Z")

</div>

Hello guys, i've found that the default credentials for ES are elastic:changeme but it's not working for me! am i missing something? the error : { "error": { "root\_cause": \[ { "t…

---

## [Timefieldが一つ前のドキュメントとの差分を取得したい](https://discuss.elastic.co/t/timefield/214542)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [February 18, 2020, 4:42am UTC](https://discuss.elastic.co/t/timefield/214542 "2020-02-18T04:42:22Z")

</div>

お世話になります。 あるフィールドにおいて、同一index内のtimefieldが一つ前のドキュメントとの差分を計算して取得したいのですが、そのようなことは可能でしょうか。 scripted field を使用して計算することなどを模索してみたのですが、同一ドキュメント内で異なるフィールドの差分などは取れそうでしたが、別ドキュメントの同じフィールドの差分は取れそうにありませんでした。 やりたいことのイメージ たとえば下記のようなデ…

---

## [Define custom field on launch](https://discuss.elastic.co/t/define-custom-field-on-launch/211085)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 2\
**Last updated:** [December 9, 2019, 1:53pm UTC](https://discuss.elastic.co/t/define-custom-field-on-launch/211085 "2019-12-09T13:53:43Z")

</div>

Added two metadata fields under 'host' to our index template and preloaded this into our elastic cluster like this: "metadata": { "properties": { "id1": { "type": "long" }, "i…

---

## [Load table with jdbc\_static filter with NULL integers](https://discuss.elastic.co/t/load-table-with-jdbc-static-filter-with-null-integers/159391)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 2\
**Last updated:** [December 4, 2018, 4:29pm UTC](https://discuss.elastic.co/t/load-table-with-jdbc-static-filter-with-null-integers/159391 "2018-12-04T16:29:56Z")

</div>

I'm trying to use the jdbc\_static filter in my logstash pipeline, but I am getting the following error: \[2018-12-04T10:07:38,952\]\[ERROR\]\[logstash.filters.jdbc.readwritedatabase\] Exception when filling lookup db from loa…

---

## [Elastic Search: all shards failed - search phase executionexception](https://discuss.elastic.co/t/elastic-search-all-shards-failed-search-phase-executionexception/117862)

<div class="topic-metadata">

**Author:** [@CW\_USER](https://discuss.elastic.co/u/CW_USER)\
**Replies:** 2\
**Last updated:** [February 2, 2018, 4:40am UTC](https://discuss.elastic.co/t/elastic-search-all-shards-failed-search-phase-executionexception/117862 "2018-02-02T04:40:26Z")

</div>

In our elastic cloud, we created a cluster with one node and three indices. suddenly, query to one of the index gives error:all shards failed - search\_phase\_execution\_exception. when we check for cluster health status, I…

---

## [Logstash filter for multiple log files parsing](https://discuss.elastic.co/t/logstash-filter-for-multiple-log-files-parsing/76310)

<div class="topic-metadata">

**Author:** [@sam281](https://discuss.elastic.co/u/sam281)\
**Replies:** 2\
**Last updated:** [February 24, 2017, 1:50am UTC](https://discuss.elastic.co/t/logstash-filter-for-multiple-log-files-parsing/76310 "2017-02-24T01:50:16Z")

</div>

Hi, I have file beats sending data to logstash. I am trying to filter and parse the log records based on the source file. On kibana I see a field called "source" which has the source log file name for each record, …

---

## [FIX messages](https://discuss.elastic.co/t/fix-messages/29154)

<div class="topic-metadata">

**Author:** [@dhan](https://discuss.elastic.co/u/dhan)\
**Replies:** 2\
**Last updated:** [September 22, 2015, 1:28pm UTC](https://discuss.elastic.co/t/fix-messages/29154 "2015-09-22T13:28:16Z")

</div>

Is it possible to search for FIX messages, like 35=i? Because it handles the = sign not a character and find every 35 and i, even if put it into commas?

---

## [Groovy script throwing script compilation error](https://discuss.elastic.co/t/groovy-script-throwing-script-compilation-error/43156)

<div class="topic-metadata">

**Author:** [@andrew\_kh](https://discuss.elastic.co/u/andrew_kh)\
**Replies:** 0\
**Last updated:** [March 1, 2016, 8:12pm UTC](https://discuss.elastic.co/t/groovy-script-throwing-script-compilation-error/43156 "2016-03-01T20:12:21Z")

</div>

I have a groovy script I'm trying to use to update the value of a property on a document. I took my old inline script and moved it into a script file in config/scripts called tag\_updater.groovy. It contains: ctx.\_sou…

---

## [Anonymous user config](https://discuss.elastic.co/t/anonymous-user-config/284037)

<div class="topic-metadata">

**Author:** [@imarkvisser](https://discuss.elastic.co/u/imarkvisser)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037 "2021-09-13T11:22:22Z")

</div>

Hi there, We are currently running ECK with an anonymous user for users to log in with, which looks like; kibana: enabled: true name: foo version: 7.11.2 http: image: count: 1 config: xpack.security.a…

---

## [Pie chart's slice size supports only a few aggregations, but why?](https://discuss.elastic.co/t/pie-charts-slice-size-supports-only-a-few-aggregations-but-why/57085)

<div class="topic-metadata">

**Author:** [@cero-t](https://discuss.elastic.co/u/cero-t)\
**Replies:** 1\
**Last updated:** [August 3, 2016, 1:41pm UTC](https://discuss.elastic.co/t/pie-charts-slice-size-supports-only-a-few-aggregations-but-why/57085 "2016-08-03T13:41:08Z")

</div>

Hello, I'm using kibana4 & 5alpha. I found that I can select the pie chart's slice size only from "Count", "Sum" and "Unique count". I would like to use other aggregations such as Average or Percentiles and so on. Is …

---

## [Ingest Manager - Custom Files not being uploaded](https://discuss.elastic.co/t/ingest-manager-custom-files-not-being-uploaded/253397)

<div class="topic-metadata">

**Author:** [@\_Meir](https://discuss.elastic.co/u/_Meir)\
**Replies:** 8\
**Last updated:** [November 5, 2020, 3:31pm UTC](https://discuss.elastic.co/t/ingest-manager-custom-files-not-being-uploaded/253397 "2020-11-05T15:31:00Z")

</div>

I'm trying to get custom logs uploaded from my server to my elastic cloud . I'm using the Ingest Manager via fleet deployment. I've added Windows, System and Custom Logs integrations. I'm only seeing logs from MetricB…

---

## [How to configure logstash-output-nagios, getting error Unknown setting 'nagios\_host' for nagios](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776)

<div class="topic-metadata">

**Author:** [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\
**Replies:** 8\
**Last updated:** [February 4, 2019, 1:48pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776 "2019-02-04T13:48:53Z")

</div>

Hi All. I am trying to setup a Logstash Nagios plugin which can direct send logstash file errors to Nagios server. Here is what I have done so far. Its failing on logstash test config. Any help is appreciated on this. $…

---

## [ElasticSearch Dockercompose with plugin not starting up](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523)

<div class="topic-metadata">

**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\
**Replies:** 3\
**Last updated:** [January 18, 2023, 8:48am UTC](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523 "2023-01-18T08:48:40Z")

</div>

Hi, I followed the article here to start a multi node cluster using docker compose. i also installed mapper-size plugin for each node, manually using command - docker exec es02 elasticsearch-plugin install mapper-size…

---

## [Unknown key for a START\_OBJECT in \[3\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777)

<div class="topic-metadata">

**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 6:31am UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777 "2022-09-21T06:31:24Z")

</div>

Hi all, im getting this error on aggs query and i want to do multiple aggregation can you pls help here. { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", "reason" : "Unknown ke…

---

## [Endpoint Security Not Showing Host Events](https://discuss.elastic.co/t/endpoint-security-not-showing-host-events/274918)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 3\
**Last updated:** [June 4, 2021, 12:18pm UTC](https://discuss.elastic.co/t/endpoint-security-not-showing-host-events/274918 "2021-06-04T12:18:36Z")

</div>

Hello there, I need to understand why the endpoint security is not showing even after enroll the fleet agents. Follow my screens: Endpoint log: {"@timestamp":"2021-06-03T20:11:54.0871431Z","agent":{"id":"7991…

---

## [Embedded es test server hangs on startup](https://discuss.elastic.co/t/embedded-es-test-server-hangs-on-startup/17408)

<div class="topic-metadata">

**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\
**Replies:** 3\
**Last updated:** [May 8, 2014, 3:46pm UTC](https://discuss.elastic.co/t/embedded-es-test-server-hangs-on-startup/17408 "2014-05-08T15:46:57Z")

</div>

I'm trying run elasticsearch as part of my jruby tests. Here's some of the code I use to do that: Settings settings = ImmutableSettings.settingsBuilder() .put("name", nodeName) …

---

## [Display a current hour metric on a Today time range dashboard](https://discuss.elastic.co/t/display-a-current-hour-metric-on-a-today-time-range-dashboard/249919)

<div class="topic-metadata">

**Author:** [@edwardj3](https://discuss.elastic.co/u/edwardj3)\
**Replies:** 2\
**Last updated:** [October 1, 2020, 5:51am UTC](https://discuss.elastic.co/t/display-a-current-hour-metric-on-a-today-time-range-dashboard/249919 "2020-10-01T05:51:57Z")

</div>

Hello all, I have a dashboard with multiple panes that are using the Today date range. Is it possible to show a metric of average response time for the current hour of today e.g. if current time was 08:15, it would sho…

---

## [V7.6.0 kibana port 5601 connection refused](https://discuss.elastic.co/t/v7-6-0-kibana-port-5601-connection-refused/221587)

<div class="topic-metadata">

**Author:** [@AaronYe](https://discuss.elastic.co/u/AaronYe)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 3:51pm UTC](https://discuss.elastic.co/t/v7-6-0-kibana-port-5601-connection-refused/221587 "2020-03-03T15:51:43Z")

</div>

Hello，I install elasticsearch,kibana with docker by using official documentation. My OS is centos 7.7 and elastisearch and kibana is v7.6.0. The docker-compose.yml configuration is shown below: version: '2.2' servic…

---

## [Kibana 6.3: Connecting data points in TimeSeries in 'Visual Builder'](https://discuss.elastic.co/t/kibana-6-3-connecting-data-points-in-timeseries-in-visual-builder/138934)

<div class="topic-metadata">

**Author:** [@Shafique](https://discuss.elastic.co/u/Shafique)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 2:44pm UTC](https://discuss.elastic.co/t/kibana-6-3-connecting-data-points-in-timeseries-in-visual-builder/138934 "2018-07-09T14:44:15Z")

</div>

Hi, I am creating some time series plots in Visual Builder. The data points are connected when the x-axis time unit is large; but as I zoom in (finer resolution in x-axis), I only see the dots. Is there a way to …

---

## [Logstash Error: Beats input: the pipeline is blocked, temporary refusing new connection](https://discuss.elastic.co/t/logstash-error-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/52929)

<div class="topic-metadata">

**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\
**Replies:** 2\
**Last updated:** [May 11, 2017, 2:37pm UTC](https://discuss.elastic.co/t/logstash-error-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/52929 "2017-05-11T14:37:48Z")

</div>

After pointing 8 or so filebeat agents to my logstash server, I'm getting this message in the logstash log: Beats input: the pipeline is blocked, temporary refusing new connection. What is the cause of this error? A…

[Previous page](https://discuss.elastic.co/top.md?page=1246&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1248&per_page=50&period=all)
