# Top **URL:** https://discuss.elastic.co/top.md?page=1249&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1250 --- ## [Insert if not exist or return the existent document](https://discuss.elastic.co/t/insert-if-not-exist-or-return-the-existent-document/144234)
**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\ **Replies:** 1\ **Last updated:** [September 9, 2018, 8:46pm UTC](https://discuss.elastic.co/t/insert-if-not-exist-or-return-the-existent-document/144234 "2018-09-09T20:46:34Z")
unfortunatelly I haven't found the answer after some search and tries... After insert the document below I received the id istiNGUBHVrkxpxfdqML { "person" : { "brid" : "12345", "name" : "Jonh", … --- ## [Problem installing input pcap plugin](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484)
**Author:** [@arque](https://discuss.elastic.co/u/arque)\ **Replies:** 1\ **Last updated:** [October 7, 2016, 5:58pm UTC](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484 "2016-10-07T17:58:35Z")
Hi, I want to install the logstash-input-pcap plugin. However, when I run bin\\logstash-plugin install logstash-input-pcap, I get the error LogStash::GemFileError: duplicate gem logstash-filter-date, and the plugin is … --- ## [Likes and favourite item search and storage](https://discuss.elastic.co/t/likes-and-favourite-item-search-and-storage/19795)
**Author:** [@Michael\_5](https://discuss.elastic.co/u/Michael_5)\ **Replies:** 0\ **Last updated:** [September 15, 2014, 4:51pm UTC](https://discuss.elastic.co/t/likes-and-favourite-item-search-and-storage/19795 "2014-09-15T16:51:15Z")
Hi, I'm looking for the best practise for recording 'likes' of an item. If I have a document { 'name' : 'Dave', 'age' : 40, 'album' : 'foo' } If people decide to 'like' 'Daves' album 'foo'. Where … --- ## [Setting xpack.telemetry.enabled to false prevents access to roles ui](https://discuss.elastic.co/t/setting-xpack-telemetry-enabled-to-false-prevents-access-to-roles-ui/194857)
**Author:** [@Philos](https://discuss.elastic.co/u/Philos)\ **Replies:** 6\ **Last updated:** [August 13, 2019, 5:19pm UTC](https://discuss.elastic.co/t/setting-xpack-telemetry-enabled-to-false-prevents-access-to-roles-ui/194857 "2019-08-13T17:19:34Z")
If I disable the xpack.telemetry.enabled setting I can't create or edit roles in the kibana ui. The /app/kibana#/management/security/roles site is accessable, but /app/kibana#/management/security/roles/edit is not. Te… --- ## [Arithmetic operation on two matrics in kibana visualization](https://discuss.elastic.co/t/arithmetic-operation-on-two-matrics-in-kibana-visualization/123495)
**Author:** [@neel\_patel](https://discuss.elastic.co/u/neel_patel)\ **Replies:** 6\ **Last updated:** [April 9, 2018, 9:22pm UTC](https://discuss.elastic.co/t/arithmetic-operation-on-two-matrics-in-kibana-visualization/123495 "2018-04-09T21:22:38Z")
How can I calculate min start time and max end time and calculate their difference and show all three into kibana visualization? --- ## [Best way to copy very large index](https://discuss.elastic.co/t/best-way-to-copy-very-large-index/108685)
**Author:** [@annaK](https://discuss.elastic.co/u/annaK)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 10:02am UTC](https://discuss.elastic.co/t/best-way-to-copy-very-large-index/108685 "2017-11-22T10:02:15Z")
Hi all, just a short question regarding copying a very large index. The index has ca. 400,000,000 to 500,000,000 documents. I tried it via \_reindex but here it took 30 minutes for 4,000,000 documents. Are there any m… --- ## [Lens visualisation: bar chart breakdown of object values returns wrong count (mapping problem?)](https://discuss.elastic.co/t/lens-visualisation-bar-chart-breakdown-of-object-values-returns-wrong-count-mapping-problem/289013)
**Author:** [@sandbender](https://discuss.elastic.co/u/sandbender)\ **Replies:** 5\ **Last updated:** [November 14, 2021, 10:06pm UTC](https://discuss.elastic.co/t/lens-visualisation-bar-chart-breakdown-of-object-values-returns-wrong-count-mapping-problem/289013 "2021-11-14T22:06:37Z")
Hello, I would like to produce a rather simple bar chart that shows, for elements in a term aggregation, a unique count of one field in the aggregated objects that is then broken down according to a count of a different… --- ## [Failing to restoring from snapshot](https://discuss.elastic.co/t/failing-to-restoring-from-snapshot/212978)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 5\ **Last updated:** [January 2, 2020, 7:05pm UTC](https://discuss.elastic.co/t/failing-to-restoring-from-snapshot/212978 "2020-01-02T19:05:35Z")
So I'm evaluating ECE and testing its abilities to restore from snapshot. So i had a functional ECE install with a number of deployments. All of which were sending snaps to minio regularly without issue. Before uninstall… --- ## [Pre and Prod instances](https://discuss.elastic.co/t/pre-and-prod-instances/91522)
**Author:** [@Xavi\_Montero](https://discuss.elastic.co/u/Xavi_Montero)\ **Replies:** 5\ **Last updated:** [July 2, 2017, 9:23am UTC](https://discuss.elastic.co/t/pre-and-prod-instances/91522 "2017-07-02T09:23:36Z")
Hello, for a very small project, in MySQL I use just two separate DBs in the same server, like for example my-nice-project-prod and my-nice-project-pre. What's up with ElasticSearch supporting several instances of the … --- ## [To modify multiple field names through logstash](https://discuss.elastic.co/t/to-modify-multiple-field-names-through-logstash/279876)
**Author:** [@raju.d](https://discuss.elastic.co/u/raju.d)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 7:38am UTC](https://discuss.elastic.co/t/to-modify-multiple-field-names-through-logstash/279876 "2021-08-05T07:38:36Z")
Hello, I came across an old discussion -\> Rename or Change Available Fields . Unfortunately in that discussion, the final configuration that worked has not been shared! I am working on same and wanted to get rid of jso… --- ## [Data table :hide column Count](https://discuss.elastic.co/t/data-table-hide-column-count/277292)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 4:17pm UTC](https://discuss.elastic.co/t/data-table-hide-column-count/277292 "2021-06-29T16:17:02Z")
Hello Team, In a data table, is it possible to hide column Count ? I have to display response code and its percentage in table. But data table visualization forcing me to enable metric. Thanks --- ## [How to create a baseline chart](https://discuss.elastic.co/t/how-to-create-a-baseline-chart/251288)
**Author:** [@WassimDhib](https://discuss.elastic.co/u/WassimDhib)\ **Replies:** 2\ **Last updated:** [October 7, 2020, 8:11pm UTC](https://discuss.elastic.co/t/how-to-create-a-baseline-chart/251288 "2020-10-07T20:11:41Z")
Hi, I have a time series of application performance monitoring data (response times). I need to create a baseline chart ( it is something like mean value plus and minus standard deviation multiplied by some coefficient… --- ## [Logstash Error: LoadError: no such file to load -- pg](https://discuss.elastic.co/t/logstash-error-loaderror-no-such-file-to-load-pg/237831)
**Author:** [@Arnav\_Parashar](https://discuss.elastic.co/u/Arnav_Parashar)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 4:16pm UTC](https://discuss.elastic.co/t/logstash-error-loaderror-no-such-file-to-load-pg/237831 "2020-06-19T16:16:56Z")
Hi, I am trying to sync a postgres database with elastic search. My file is the following: input { jdbc { jdbc\_driver\_library =\> "~/logstash/postgresql-42.2.14.jar" jdbc\_driver\_class =\> "org.p… --- ## [Service does not start - 1 error: 1 error: failed to create audit client: failed to create audit client: audit not supported by kernel: protocol not supported](https://discuss.elastic.co/t/service-does-not-start-1-error-1-error-failed-to-create-audit-client-failed-to-create-audit-client-audit-not-supported-by-kernel-protocol-not-supported/198045)
**Author:** [@monmac](https://discuss.elastic.co/u/monmac)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 9:27am UTC](https://discuss.elastic.co/t/service-does-not-start-1-error-1-error-failed-to-create-audit-client-failed-to-create-audit-client-audit-not-supported-by-kernel-protocol-not-supported/198045 "2019-09-05T09:27:53Z")
Service does not start, no error information in the log. Please help auditbeat -e -c auditbeat.yml -d "publish" \>\> WARN \[cfgwarn\] host/host.go:167 BETA: The system/host dataset is beta WARN \[cfgwar… --- ## [Events correlation best practice](https://discuss.elastic.co/t/events-correlation-best-practice/156285)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 27, 2018, 2:03pm UTC](https://discuss.elastic.co/t/events-correlation-best-practice/156285 "2018-11-27T14:03:07Z")
How to do a event correlation in Elasticsearch when the logs are from different technology layers. (Gateway, API, Business...etc layers) --- ## [What IDE should I use for develop kibana](https://discuss.elastic.co/t/what-ide-should-i-use-for-develop-kibana/142455)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 2\ **Last updated:** [August 1, 2018, 5:56pm UTC](https://discuss.elastic.co/t/what-ide-should-i-use-for-develop-kibana/142455 "2018-08-01T17:56:47Z")
what IDE should I use for develop kibana, and what IDE plugin should I install. would you provide a official best practice? such as, we declare so many style guide, is that integrate in IDE? --- ## [Is there a limit to scrolling or have i misunderstood size?](https://discuss.elastic.co/t/is-there-a-limit-to-scrolling-or-have-i-misunderstood-size/107945)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 8:17am UTC](https://discuss.elastic.co/t/is-there-a-limit-to-scrolling-or-have-i-misunderstood-size/107945 "2017-11-28T08:17:32Z")
HI All, I've written some code in Classic asp that uses scrolling. On a particular search I know that I should be obtaining 1033 records. When I set my page size to 40 and perform my initial search then loop calling th… --- ## [Creating an array of objects](https://discuss.elastic.co/t/creating-an-array-of-objects/97961)
**Author:** [@AnandDivakaran](https://discuss.elastic.co/u/AnandDivakaran)\ **Replies:** 2\ **Last updated:** [August 25, 2017, 3:52pm UTC](https://discuss.elastic.co/t/creating-an-array-of-objects/97961 "2017-08-25T15:52:11Z")
Lets say in a given event i have 4 fields psn1\_name (holding the value “A”, psn1\_age (holding the value 10, psn2\_name (holding the value “B”, psn2\_age (holding the value 20. I want to create a field person such that… --- ## [Performance degradation for wildcard queries from 1.5.2 to 5.2.2?](https://discuss.elastic.co/t/performance-degradation-for-wildcard-queries-from-1-5-2-to-5-2-2/79145)
**Author:** [@\_markus](https://discuss.elastic.co/u/_markus)\ **Replies:** 2\ **Last updated:** [April 13, 2017, 6:26am UTC](https://discuss.elastic.co/t/performance-degradation-for-wildcard-queries-from-1-5-2-to-5-2-2/79145 "2017-04-13T06:26:03Z")
Summary I'm working upgrading from 1.5.2 to 5.2.2 and I've many performance points which changed and working through them I noticed that wildcard queries especially stand out. FTR: I'm aware how bad wildcard, especial … --- ## [Does the order of filters matter?](https://discuss.elastic.co/t/does-the-order-of-filters-matter/81489)
**Author:** [@cju](https://discuss.elastic.co/u/cju)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 12:00pm UTC](https://discuss.elastic.co/t/does-the-order-of-filters-matter/81489 "2017-04-10T12:00:28Z")
Hello, I have a query like this one : query: filter: bool: must: - range: from date to date - bool: - shou… --- ## [Geo\_point expected error in Elasticsearch 5.0.0-alpha5](https://discuss.elastic.co/t/geo-point-expected-error-in-elasticsearch-5-0-0-alpha5/59938)
**Author:** [@madkoala](https://discuss.elastic.co/u/madkoala)\ **Replies:** 2\ **Last updated:** [September 8, 2016, 3:15am UTC](https://discuss.elastic.co/t/geo-point-expected-error-in-elasticsearch-5-0-0-alpha5/59938 "2016-09-08T03:15:44Z")
When indexing geoip data with logstash 5.0.0-alpha5, some exception occurred. Error message: MapperParsingException\[failed to parse\]; nested: ElasticsearchParseException\[geo\_point expected\]; at org.elasticsearch.inde… --- ## [Logstash-forwarder missing lines after log rotate](https://discuss.elastic.co/t/logstash-forwarder-missing-lines-after-log-rotate/2111)
**Author:** [@Laines](https://discuss.elastic.co/u/Laines)\ **Replies:** 2\ **Last updated:** [June 8, 2015, 3:59am UTC](https://discuss.elastic.co/t/logstash-forwarder-missing-lines-after-log-rotate/2111 "2015-06-08T03:59:56Z")
Hello, We have problems with the logstash-forwarder after the log rotate of massages & secure we are missing the first couple of messages. At least the first one and then sometimes the next 2-5. After that there isn't … --- ## [Kibana pod doesn't come up , Log says Another Kibana instance appears to be migrating the index. Waiting for that migration to complete](https://discuss.elastic.co/t/kibana-pod-doesnt-come-up-log-says-another-kibana-instance-appears-to-be-migrating-the-index-waiting-for-that-migration-to-complete/251850)
**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\ **Replies:** 3\ **Last updated:** [October 15, 2020, 7:52am UTC](https://discuss.elastic.co/t/kibana-pod-doesnt-come-up-log-says-another-kibana-instance-appears-to-be-migrating-the-index-waiting-for-that-migration-to-complete/251850 "2020-10-15T07:52:12Z")
Hi , While upgrading Elasticsearch & kibana from version ELK-7.0.1 to ELK-7.8.0 , Kibana pod doesn't come up , and shows the below message in the Kibana log. we are using helm way to upgrade . {"type":"log","@timesta… --- ## [Need server/system serial number output in kibana dashboard](https://discuss.elastic.co/t/need-server-system-serial-number-output-in-kibana-dashboard/238949)
**Author:** [@D\_ELK](https://discuss.elastic.co/u/D_ELK)\ **Replies:** 3\ **Last updated:** [June 28, 2020, 10:54am UTC](https://discuss.elastic.co/t/need-server-system-serial-number-output-in-kibana-dashboard/238949 "2020-06-28T10:54:07Z")
Hi, I have build my ELK stack on local machine (ELK version- 6.8.10) . In order to get more details like machine/server serial number, I have added few entries in filebeat.yml file. After adding few lines under add\_h… --- ## [Distinct on cumulative sum](https://discuss.elastic.co/t/distinct-on-cumulative-sum/121256)
**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\ **Replies:** 3\ **Last updated:** [March 22, 2018, 9:12pm UTC](https://discuss.elastic.co/t/distinct-on-cumulative-sum/121256 "2018-03-22T21:12:50Z")
Hi, I'm trying to represent my metric vis by a histogram to have a trend, but it doesn't work with cumulative sum because in my case he just sum the unique count do you have a way to do that thanks --- ## [How to whitelist terms in a custom analyzer](https://discuss.elastic.co/t/how-to-whitelist-terms-in-a-custom-analyzer/92734)
**Author:** [@rlvoyer](https://discuss.elastic.co/u/rlvoyer)\ **Replies:** 3\ **Last updated:** [July 13, 2017, 8:24pm UTC](https://discuss.elastic.co/t/how-to-whitelist-terms-in-a-custom-analyzer/92734 "2017-07-13T20:24:11Z")
Hi there, I'm using the edge ngram tokenizer to support search autocomplete. Unlike other tokenizers, the edge\_ngram tokenizer is relatively limited in terms of its configurability. Take for a example the string "AT&T"… --- ## [Spark-es too many request error - 429 error code](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 8:23am UTC](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298 "2019-10-19T08:23:48Z")
Node Hot thread api gives following input ::: {appsec-es-master-0}{AAw21yu1Q1e5ZWMoBe2ZPA}{4IRnxBeST3ODTCHlLq\_FqA}{10.244.3.48}{10.244.3.48:9300}{ml.machine\_memory=2147483648, xpack.installed=true, ml.max\_open\_jobs=20} … --- ## [API CURL Get Document \_id by Query Match](https://discuss.elastic.co/t/api-curl-get-document--id-by-query-match/50504)
**Author:** [@ngmgithub](https://discuss.elastic.co/u/ngmgithub)\ **Replies:** 1\ **Last updated:** [May 20, 2016, 9:14pm UTC](https://discuss.elastic.co/t/api-curl-get-document--id-by-query-match/50504 "2016-05-20T21:14:02Z")
Note: Upon further research, I have reduced this question to a more specific inquiry. Objective is to fetch a document \_id by matching a field in a Javascript / Node.js application that leverages the Get API and CURL. L… --- ## [Bulk + doc\_as\_upsert + script](https://discuss.elastic.co/t/bulk-doc-as-upsert-script/14659)
**Author:** [@briche\_arnaud](https://discuss.elastic.co/u/briche_arnaud)\ **Replies:** 1\ **Last updated:** [December 3, 2013, 11:22am UTC](https://discuss.elastic.co/t/bulk-doc-as-upsert-script/14659 "2013-12-03T11:22:25Z")
Hi, My use case is the following: I have to perform a bulk update where, either the document exists, and I need to execute a script to update a (counter) field of this document, or it doesn't, and I just create th… --- ## [Heap Size in Stack monitoring does not match jvm.options setting](https://discuss.elastic.co/t/heap-size-in-stack-monitoring-does-not-match-jvm-options-setting/251709)
**Author:** [@ratnakarn](https://discuss.elastic.co/u/ratnakarn)\ **Replies:** 4\ **Last updated:** [October 12, 2020, 4:32pm UTC](https://discuss.elastic.co/t/heap-size-in-stack-monitoring-does-not-match-jvm-options-setting/251709 "2020-10-12T16:32:26Z")
Hello, We have Prod/QA/Test identical clusters - 3 nodes (centos / 8core / 64g / 2tb ssd each). Jvm.options Heap size (-Xmx) is not set in prod & qa. Its set to -Xmx32g in test cluster. However, Kibana shows differen… --- ## [Difficulties / Bugs with Canvas](https://discuss.elastic.co/t/difficulties-bugs-with-canvas/220422)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 12:43am UTC](https://discuss.elastic.co/t/difficulties-bugs-with-canvas/220422 "2020-03-06T00:43:56Z")
Good morning, I'm currently experiencing 2 issues with my 7.6.0 ECE install but my issues are specific to Kibana. When I try and print a workpad to pdf. Only a single page is printed to pdf. You can repo this by sim… --- ## [Logstash XML parsing issues - trying to send to Graylog, part 2](https://discuss.elastic.co/t/logstash-xml-parsing-issues-trying-to-send-to-graylog-part-2/193209)
**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\ **Replies:** 4\ **Last updated:** [July 31, 2019, 8:46pm UTC](https://discuss.elastic.co/t/logstash-xml-parsing-issues-trying-to-send-to-graylog-part-2/193209 "2019-07-31T20:46:51Z")
So, in this thread, I was able to get an initial config working, but ran into an issue parsing the data in that there are different events, which results in different data fields. Is there a way to handle these fields dy… --- ## [Parse failure Apache accesslog with empty remote user](https://discuss.elastic.co/t/parse-failure-apache-accesslog-with-empty-remote-user/107886)
**Author:** [@RomainD](https://discuss.elastic.co/u/RomainD)\ **Replies:** 4\ **Last updated:** [November 24, 2017, 5:12pm UTC](https://discuss.elastic.co/t/parse-failure-apache-accesslog-with-empty-remote-user/107886 "2017-11-24T17:12:50Z")
Hello, I have a \_grokparsefailure when the remote user is empty, let's show you the configurations files: Apache v2.4 Logstash v5.6.3 apache2.conf, my custom log format, %u is the remote user : LogFormat "%a %l %u \[… --- ## [Data Table Visualisation - Querying based on one field, but displaying another](https://discuss.elastic.co/t/data-table-visualisation-querying-based-on-one-field-but-displaying-another/107652)
**Author:** [@dstreefkerk](https://discuss.elastic.co/u/dstreefkerk)\ **Replies:** 4\ **Last updated:** [November 16, 2017, 8:50pm UTC](https://discuss.elastic.co/t/data-table-visualisation-querying-based-on-one-field-but-displaying-another/107652 "2017-11-16T20:50:54Z")
I'm testing out a hosted ELK stack, and am forwarding Windows logs there. One of the logs in question is an "AppLocker" log which lists the applications that ran or were blocked on each machine. Each AppLocker log entry… --- ## [Having trouble running elasticsearch](https://discuss.elastic.co/t/having-trouble-running-elasticsearch/326528)
**Author:** [@bawac](https://discuss.elastic.co/u/bawac)\ **Replies:** 2\ **Last updated:** [February 28, 2023, 2:37pm UTC](https://discuss.elastic.co/t/having-trouble-running-elasticsearch/326528 "2023-02-28T14:37:06Z")
I am trying to run elasticsearch from my terminal and I'm getting this error: warning: ignoring JAVA\_HOME=/usr/lib/jvm/java-11-openjdk-arm64; using bundled JDK Dynarec for ARM64, with extension: ASIMD AES CRC32 PMULL AT… --- ## [Create user role with Kibana visualization permissions](https://discuss.elastic.co/t/create-user-role-with-kibana-visualization-permissions/266125)
**Author:** [@Chinmaya\_Panigrahi](https://discuss.elastic.co/u/Chinmaya_Panigrahi)\ **Replies:** 2\ **Last updated:** [March 11, 2021, 7:03am UTC](https://discuss.elastic.co/t/create-user-role-with-kibana-visualization-permissions/266125 "2021-03-11T07:03:09Z")
Hi, I want to create a user with role which will have permission to access certain visualizations of certain dashboards. I want to know what should be the cURL command to achieve this. --- ## [Lucene logging in ElasticSearch logs](https://discuss.elastic.co/t/lucene-logging-in-elasticsearch-logs/226497)
**Author:** [@dextermorgan](https://discuss.elastic.co/u/dextermorgan)\ **Replies:** 2\ **Last updated:** [April 4, 2020, 11:15am UTC](https://discuss.elastic.co/t/lucene-logging-in-elasticsearch-logs/226497 "2020-04-04T11:15:06Z")
I am on Elasticsearch 7.6.1 and to debug some issues, want to enable lucene logging in ES logs. Can anyone help with how can enable that? --- ## [Logstash не отправляет логи в эластик](https://discuss.elastic.co/t/logstash/212490)
**Author:** [@alex.tregub](https://discuss.elastic.co/u/alex.tregub)\ **Replies:** 2\ **Last updated:** [December 24, 2019, 8:09am UTC](https://discuss.elastic.co/t/logstash/212490 "2019-12-24T08:09:51Z")
Здравствуйте! Уже писал вот сюда https://discuss.elastic.co/t/output-path/210727/8, но там сумбур какой-то получился, поэтому решил создать отдельный топик по этому вопросу. Итак, у меня есть пример лога: 2019-06-10T2… --- ## [Modify Legend Name](https://discuss.elastic.co/t/modify-legend-name/202079)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [October 5, 2019, 7:32am UTC](https://discuss.elastic.co/t/modify-legend-name/202079 "2019-10-05T07:32:09Z")
Hey All, I want to cut the legend naming. I searched for the topic within the community, but couldn't find an answer. Currently, the legend is created automatically by the buckets I have created. So the format is: \[B… --- ## [How to dynamic parse fieldname and replace?](https://discuss.elastic.co/t/how-to-dynamic-parse-fieldname-and-replace/179858)
**Author:** [@ck1](https://discuss.elastic.co/u/ck1)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 1:13pm UTC](https://discuss.elastic.co/t/how-to-dynamic-parse-fieldname-and-replace/179858 "2019-05-23T13:13:16Z")
Hello, I am trying data that looks like this unwanted.field1 unwanted.field2 categories.colors.blue.t.type First I need to remove every unwanted field, then I want to change categories.colors to only blue.t.type. I… --- ## [Lambda created but no data in Elastic Cloud](https://discuss.elastic.co/t/lambda-created-but-no-data-in-elastic-cloud/163341)
**Author:** [@Ian\_Morris](https://discuss.elastic.co/u/Ian_Morris)\ **Replies:** 2\ **Last updated:** [January 10, 2019, 8:21am UTC](https://discuss.elastic.co/t/lambda-created-but-no-data-in-elastic-cloud/163341 "2019-01-10T08:21:47Z")
Hi functionbeat version 6.5.4 I have just created an Elastic Cloud trial. I am trying to use Functionbeat to send CloudWatch Logs to the Elastic Cloud trial. In this case, the CloudWatch Log I have selected contains Cl… --- ## [Mapping conflicts between Object and Text](https://discuss.elastic.co/t/mapping-conflicts-between-object-and-text/160591)
**Author:** [@sss](https://discuss.elastic.co/u/sss)\ **Replies:** 2\ **Last updated:** [December 14, 2018, 7:36am UTC](https://discuss.elastic.co/t/mapping-conflicts-between-object-and-text/160591 "2018-12-14T07:36:34Z")
Hello, I have 2 fields with conflicting types text, object and these fields are being indexed into same document and as a result, index request is giving a MapperParserException in ES 5.x..While this works perfectly fin… --- ## [When I install x-pack, filebeat can not connect to Logstash](https://discuss.elastic.co/t/when-i-install-x-pack-filebeat-can-not-connect-to-logstash/93166)
**Author:** [@dog](https://discuss.elastic.co/u/dog)\ **Replies:** 2\ **Last updated:** [July 27, 2017, 1:47am UTC](https://discuss.elastic.co/t/when-i-install-x-pack-filebeat-can-not-connect-to-logstash/93166 "2017-07-27T01:47:56Z")
Before I installed x-pack, everything worked well. When I installed x-pack, I received a 401 error and I configured the user according to the official document. But my filebeat can not connect to logstash. Logstash error… --- ## [ElasticSearch AWS plugin is a must to deploy on AWS?](https://discuss.elastic.co/t/elasticsearch-aws-plugin-is-a-must-to-deploy-on-aws/26241)
**Author:** [@Chiron](https://discuss.elastic.co/u/Chiron)\ **Replies:** 2\ **Last updated:** [July 30, 2015, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-aws-plugin-is-a-must-to-deploy-on-aws/26241 "2015-07-30T10:07:03Z")
We are planning to deploy our ElasticSearch on Amazon Web Services. I noticed that there is a plugin from ElasticSearch that allows ElasticSearch to use AWS API for the unicast discovery mechanism. ElasticSearch Cloud AW… --- ## [Is ES es.index.store.type=memory equivalent to Lucene's RAMDirectory?](https://discuss.elastic.co/t/is-es-es-index-store-type-memory-equivalent-to-lucenes-ramdirectory/18023)
**Author:** [@Mark\_Lu](https://discuss.elastic.co/u/Mark_Lu)\ **Replies:** 2\ **Last updated:** [June 10, 2014, 9:38pm UTC](https://discuss.elastic.co/t/is-es-es-index-store-type-memory-equivalent-to-lucenes-ramdirectory/18023 "2014-06-10T21:38:57Z")
I would like to use MMapDirectory at the data indexing phase (in a batch). And then switch to index to in-memory and read only at time of serving real user queries to optimize the search latency. I used to achieve th… --- ## [Help setting up logging](https://discuss.elastic.co/t/help-setting-up-logging/16510)
**Author:** [@Raphael\_Miranda](https://discuss.elastic.co/u/Raphael_Miranda)\ **Replies:** 2\ **Last updated:** [March 21, 2014, 5:30pm UTC](https://discuss.elastic.co/t/help-setting-up-logging/16510 "2014-03-21T17:30:54Z")
ES is creating the log files upon startup but they are empty? I switched every log level to DEBUG and it started pouring more log into elasticsearch.log still, no query or indexing is logged. -rw-r--r-- 1 elastics… --- ## [Best practices for monitoring curator snapshot (failures)](https://discuss.elastic.co/t/best-practices-for-monitoring-curator-snapshot-failures/158386)
**Author:** [@jonassteinberg1](https://discuss.elastic.co/u/jonassteinberg1)\ **Replies:** 5\ **Last updated:** [November 27, 2018, 6:40pm UTC](https://discuss.elastic.co/t/best-practices-for-monitoring-curator-snapshot-failures/158386 "2018-11-27T18:40:17Z")
@theuntergeek I have a nice curator --\> AWS S3 snapshot pipeline for backing up my clusters, but from time-to-time a snapshot will fail and thus I'm wondering what the best way to monitor snapshot failures is? Right no… --- ## [Watchers: moustache expressions syntax](https://discuss.elastic.co/t/watchers-moustache-expressions-syntax/130839)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 5\ **Last updated:** [May 7, 2018, 2:55pm UTC](https://discuss.elastic.co/t/watchers-moustache-expressions-syntax/130839 "2018-05-07T14:55:48Z")
Hi again! one more question regarding Watchers: I've been using such syntax for long time already: "range": { "modification": { "gte": "{{ctx.trigger.scheduled\_time}}||-60m", "lte": null } } The variable… --- ## [Logstash Filter for XML file](https://discuss.elastic.co/t/logstash-filter-for-xml-file/119956)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 5\ **Last updated:** [February 15, 2018, 2:38pm UTC](https://discuss.elastic.co/t/logstash-filter-for-xml-file/119956 "2018-02-15T14:38:18Z")
Hi, I am looking to parse multiple XML files and can't find a suitable filter in Logstash for the same. I've around 50 XML files in different sub folders but all should have same structure as it is an output of pnp4nagi… --- ## [Kibana markdownwidget,linechart](https://discuss.elastic.co/t/kibana-markdownwidget-linechart/85527)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 5\ **Last updated:** [May 15, 2017, 4:26pm UTC](https://discuss.elastic.co/t/kibana-markdownwidget-linechart/85527 "2017-05-15T16:26:01Z")
i face the following issues in kibana 4 and kibana 5 MarkDown Widget: Its working in kibana 4 but with kibana 5 it throws error dashboard not found when i click on hyperlink LIne chart time in y axis: In kibana 5 Scali… [Previous page](https://discuss.elastic.co/top.md?page=1248&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1250&per_page=50&period=all)