# Top **URL:** https://discuss.elastic.co/top.md?page=1259&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1260 --- ## [Sort Alphabetically but Ignore Articles](https://discuss.elastic.co/t/sort-alphabetically-but-ignore-articles/46220)
**Author:** [@Donglecow](https://discuss.elastic.co/u/Donglecow)\ **Replies:** 2\ **Last updated:** [April 5, 2016, 3:04pm UTC](https://discuss.elastic.co/t/sort-alphabetically-but-ignore-articles/46220 "2016-04-05T15:04:38Z")
Hi all, I have looked around online for a solution to this, but so far have not found anything. I have a system running with Elasticsearch which uses an analyser to sort alphabetically, however when doing this, artic… --- ## [Kibana 4.2 RPM / yum repo](https://discuss.elastic.co/t/kibana-4-2-rpm-yum-repo/34468)
**Author:** [@wby](https://discuss.elastic.co/u/wby)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 10:29pm UTC](https://discuss.elastic.co/t/kibana-4-2-rpm-yum-repo/34468 "2015-11-12T22:29:57Z")
The yum repos for logstash and elasticsearch seem to be up to date (though ES 2.0.0 is beta2 vs. release). However, I'm getting an error trying to use http://packages.elasticsearch.org/kibana/4.2/centos/ and don't see it… --- ## [Not able to create visualization in Kibana](https://discuss.elastic.co/t/not-able-to-create-visualization-in-kibana/33236)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [October 30, 2015, 8:20am UTC](https://discuss.elastic.co/t/not-able-to-create-visualization-in-kibana/33236 "2015-10-30T08:20:35Z")
Whenever I am trying to create a visualization from a Saved Search I am getting the below error:- On ElasticSearch logs I am seeing the below error:- \[2015-10-29 06:42:46,776\]\[DEBUG\]\[action.admin.indices.mapping.put\]… --- ## [Copying Incremental Data](https://discuss.elastic.co/t/copying-incremental-data/232356)
**Author:** [@alajangi](https://discuss.elastic.co/u/alajangi)\ **Replies:** 6\ **Last updated:** [May 21, 2020, 12:41am UTC](https://discuss.elastic.co/t/copying-incremental-data/232356 "2020-05-21T00:41:55Z")
Hi, I am using elasticsearch version 6.5.1 I have 2 indexes, say index1 and index2, index2 is reindexed from index1 with same mapping, new data will keep come to index1, i want to copy incremental data to index2 from … --- ## [On ES 6.2.4+ (v6.2.4,v6.3.0) file descriptors continue to grow as index grows](https://discuss.elastic.co/t/on-es-6-2-4-v6-2-4-v6-3-0-file-descriptors-continue-to-grow-as-index-grows/136392)
**Author:** [@gnilchee](https://discuss.elastic.co/u/gnilchee)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 2:03pm UTC](https://discuss.elastic.co/t/on-es-6-2-4-v6-2-4-v6-3-0-file-descriptors-continue-to-grow-as-index-grows/136392 "2018-06-19T14:03:42Z")
We are moving from a very old version of ES 1.4.5 to a more modern version. For a majority of the effort we focused on ES 5.5.0 when rewriting the settings and mapping for our 4 indices. About a month ago we decided to m… --- ## [Tiering storage / Curator](https://discuss.elastic.co/t/tiering-storage-curator/18668)
**Author:** [@Patrick\_Proniewski](https://discuss.elastic.co/u/Patrick_Proniewski)\ **Replies:** 6\ **Last updated:** [July 19, 2014, 5:18am UTC](https://discuss.elastic.co/t/tiering-storage-curator/18668 "2014-07-19T05:18:59Z")
Hello, Curator makes is possible to migrate an index to another storage programmatically, and that's very nice to keep old indices on cheap storage. But if I understand correctly, a unique ES cluster cannot handle two… --- ## [Do you still need curator when using Elasticsearch 7.5](https://discuss.elastic.co/t/do-you-still-need-curator-when-using-elasticsearch-7-5/212726)
**Author:** [@gurdipe](https://discuss.elastic.co/u/gurdipe)\ **Replies:** 3\ **Last updated:** [December 22, 2019, 2:10pm UTC](https://discuss.elastic.co/t/do-you-still-need-curator-when-using-elasticsearch-7-5/212726 "2019-12-22T14:10:17Z")
Hi All, Sorry for the simple question I have just started looking at Elasticsearch 7.5 and was wondering do you still need to use curator 5.8 to curate, or manage, your Elasticsearch indices and snapshots or can this no… --- ## [What causes high node Heap Memory more than 75%?](https://discuss.elastic.co/t/what-causes-high-node-heap-memory-more-than-75/179741)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 8\ **Last updated:** [May 20, 2019, 9:26am UTC](https://discuss.elastic.co/t/what-causes-high-node-heap-memory-more-than-75/179741 "2019-05-20T09:26:57Z")
Hi Team, I am receiving high memory alerts on our cluster, we are hosted on "cloud.elastic.co". 3 Nodes - 2 (data/master eligible node) + 1 tie breaker node. Total 28 GB of data on a single index which has 5 shards an… --- ## [How i can upgrade elasticsearch 5x to 6x?](https://discuss.elastic.co/t/how-i-can-upgrade-elasticsearch-5x-to-6x/170112)
**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\ **Replies:** 8\ **Last updated:** [March 5, 2019, 11:39am UTC](https://discuss.elastic.co/t/how-i-can-upgrade-elasticsearch-5x-to-6x/170112 "2019-03-05T11:39:36Z")
Hi all, I have a graylog server with 1.5 billion records. How can I upgrade elasticsearch from version 5 to version 6 without losing all the data that I have now? The instructions on the site are not clear to me. I dont … --- ## [Email action fails with property message null](https://discuss.elastic.co/t/email-action-fails-with-property-message-null/114045)
**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\ **Replies:** 3\ **Last updated:** [January 8, 2018, 8:52pm UTC](https://discuss.elastic.co/t/email-action-fails-with-property-message-null/114045 "2018-01-08T20:52:01Z")
Hello, I configured an e-mail action in Watcher in Kibana/Elasticsearch 6.1.1 and tried to send an e-mail. The error I get is: TypeError: Cannot read property 'message' of null at http://localhost:5601/bundles/kiba… --- ## [How to Backup cluster elasticsearch to another server](https://discuss.elastic.co/t/how-to-backup-cluster-elasticsearch-to-another-server/79345)
**Author:** [@gramadhan313](https://discuss.elastic.co/u/gramadhan313)\ **Replies:** 3\ **Last updated:** [March 21, 2017, 6:13am UTC](https://discuss.elastic.co/t/how-to-backup-cluster-elasticsearch-to-another-server/79345 "2017-03-21T06:13:58Z")
i have big size data on elasticsearch, so i want to do rotation backup to another server. how can i do that backup strategy? thanks --- ## [Ranking of a field among the sums of an other field in Kibana](https://discuss.elastic.co/t/ranking-of-a-field-among-the-sums-of-an-other-field-in-kibana/75420)
**Author:** [@Deltaus](https://discuss.elastic.co/u/Deltaus)\ **Replies:** 3\ **Last updated:** [February 26, 2017, 1:58pm UTC](https://discuss.elastic.co/t/ranking-of-a-field-among-the-sums-of-an-other-field-in-kibana/75420 "2017-02-26T13:58:52Z")
Hello everyone, I have a very specific problem. Let me simplify it. We have an index on exam papers, where each row has fields "student-id","exam-date" and "exam-score". What i want is to show each student their ra… --- ## [Count values of one field based on uniqueness with another field](https://discuss.elastic.co/t/count-values-of-one-field-based-on-uniqueness-with-another-field/64025)
**Author:** [@piquadrat](https://discuss.elastic.co/u/piquadrat)\ **Replies:** 3\ **Last updated:** [October 28, 2016, 10:49pm UTC](https://discuss.elastic.co/t/count-values-of-one-field-based-on-uniqueness-with-another-field/64025 "2016-10-28T22:49:43Z")
Sorry if the title doesn't make much sense, I'll try to explain. I have an API service that logs the version of the client as well as the customer ID on every API request. Now I want to know which client versions are use… --- ## [How are multiple types handled at ingestion?](https://discuss.elastic.co/t/how-are-multiple-types-handled-at-ingestion/58643)
**Author:** [@streamn](https://discuss.elastic.co/u/streamn)\ **Replies:** 3\ **Last updated:** [August 23, 2016, 9:09am UTC](https://discuss.elastic.co/t/how-are-multiple-types-handled-at-ingestion/58643 "2016-08-23T09:09:53Z")
Hello, I see that a field can have multiple types, but the documentation examples focus on string vs. not analyzed type of situation I wonder if it's possible to have multiple types like: - numbers as strings and num… --- ## [How many shards should I put in a physical node?(continue)](https://discuss.elastic.co/t/how-many-shards-should-i-put-in-a-physical-node-continue/27562)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 3\ **Last updated:** [August 18, 2015, 10:27pm UTC](https://discuss.elastic.co/t/how-many-shards-should-i-put-in-a-physical-node-continue/27562 "2015-08-18T22:27:08Z")
从 How many shards should I put in a node？ 继续讨论： Thanks for your answer! There also some viewpoints show that we should keep shards number per node small. Like this answer : Redirecting to Google Groups and this exp… --- ## [Slow cluster startup with zen discovery and large number of nodes](https://discuss.elastic.co/t/slow-cluster-startup-with-zen-discovery-and-large-number-of-nodes/15953)
**Author:** [@Michel\_Conrad](https://discuss.elastic.co/u/Michel_Conrad)\ **Replies:** 3\ **Last updated:** [February 24, 2014, 8:54am UTC](https://discuss.elastic.co/t/slow-cluster-startup-with-zen-discovery-and-large-number-of-nodes/15953 "2014-02-24T08:54:39Z")
Hi, Starting a cluster with 100 nodes takes half an hour just for the nodes to join in elasticsearch version 1.0. In version 0.19.8 nodes were very quick to join the cluster. The issue seems to come from the master… --- ## [Logstash Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054)
**Author:** [@Yuy\_Heero](https://discuss.elastic.co/u/Yuy_Heero)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054 "2020-11-02T17:56:16Z")
I want to use winlogbeat to monitor win10. Logs transfer via logstash to elasticsearch. winlogbeat(7.9.3)-\>logstash(7.9.3)-\>elasticsearch(7.8.0) After I started winlogbeat and logstash, I got no error from winlogbe… --- ## [How to remove duplicate values in logstash](https://discuss.elastic.co/t/how-to-remove-duplicate-values-in-logstash/193769)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 3:45pm UTC](https://discuss.elastic.co/t/how-to-remove-duplicate-values-in-logstash/193769 "2019-08-06T15:45:24Z")
Hi . Unable to remove duplicate values from logstash . "src" =\> \[ \[0\] "10.207.73.1", \[1\] "10.207.73.1" \], "agentName" =\> \[ \[0\] "sl73tdsdb1q01 ", \[1\] "sl73tdsdb1q01 " \], "StoredProc" =\> \[ \[0\] "False", \[1\] "Fal… --- ## [Kibana 7 - Docker - permission denied - RESOLVED](https://discuss.elastic.co/t/kibana-7-docker-permission-denied-resolved/177051)
**Author:** [@DieMal](https://discuss.elastic.co/u/DieMal)\ **Replies:** 1\ **Last updated:** [April 16, 2019, 12:11pm UTC](https://discuss.elastic.co/t/kibana-7-docker-permission-denied-resolved/177051 "2019-04-16T12:11:14Z")
Hi all, after upgrading from 6.7.0 to 7 i have a problem when run container. This is the logs from docker service logs: Error: EACCES: permission denied, open '/usr/share/kibana/optimize/.babelcache.json' ^ ^ at Ob… --- ## [Kibana stopped working - all shards failed error](https://discuss.elastic.co/t/kibana-stopped-working-all-shards-failed-error/172639)
**Author:** [@misha\_mehra](https://discuss.elastic.co/u/misha_mehra)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 5:13pm UTC](https://discuss.elastic.co/t/kibana-stopped-working-all-shards-failed-error/172639 "2019-03-20T17:13:35Z")
Hello Guys, My kibana stopped working, even though my elastic serach is running fine. It had deleted some records using delete\_query, is that the issue?? The error logs are error \[12:00:09.801\] \[warning\]\[stats-colle… --- ## [Multi-statement scripts in elasticsearch](https://discuss.elastic.co/t/multi-statement-scripts-in-elasticsearch/151448)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 1\ **Last updated:** [October 14, 2018, 10:15pm UTC](https://discuss.elastic.co/t/multi-statement-scripts-in-elasticsearch/151448 "2018-10-14T22:15:08Z")
Hi all, I have indexed a document PUT test/\_doc/1 { "counter" : 1, "tags" : \["red"\] } I am using script to update my content of the documents POST test/\_doc/1/\_update { "script" : { "source": "ctx.\_source.tags… --- ## [Kibana, reverseproxy nginx and CORS enabled](https://discuss.elastic.co/t/kibana-reverseproxy-nginx-and-cors-enabled/55525)
**Author:** [@danito](https://discuss.elastic.co/u/danito)\ **Replies:** 1\ **Last updated:** [July 14, 2016, 3:52pm UTC](https://discuss.elastic.co/t/kibana-reverseproxy-nginx-and-cors-enabled/55525 "2016-07-14T15:52:38Z")
Hi guys, all good? I'm enabling CORS for my web frontend but seems that I'm missing something on Kibana as I observe the following error: Courier Fetch Error: unhandled courier request error: Authorization Exception … --- ## [Share Dashboard url](https://discuss.elastic.co/t/share-dashboard-url/28956)
**Author:** [@Markus\_Pulch](https://discuss.elastic.co/u/Markus_Pulch)\ **Replies:** 1\ **Last updated:** [September 11, 2015, 11:36am UTC](https://discuss.elastic.co/t/share-dashboard-url/28956 "2015-09-11T11:36:30Z")
Hi, If you'd like to share a dashboard in K4 you get a quite long cryptic url which is quite ugly to paste into Web pages, tickets, chats & Co. I really like the solution in K3 where you get a short url based on a ge… --- ## [Mapping question](https://discuss.elastic.co/t/mapping-question/21170)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 1\ **Last updated:** [December 9, 2014, 8:39pm UTC](https://discuss.elastic.co/t/mapping-question/21170 "2014-12-09T20:39:42Z")
I am trying to change the mapping but I think I am not doing it right. Documents are not clear either: My document looks like this: {"key":"87aef147-3560-4859-a2 64-fd7a9522002f","entityType":"Preferrence","keyValueI… --- ## [Performance issue with script scoring with fields having a large array](https://discuss.elastic.co/t/performance-issue-with-script-scoring-with-fields-having-a-large-array/17275)
**Author:** [@nicom](https://discuss.elastic.co/u/nicom)\ **Replies:** 1\ **Last updated:** [April 30, 2014, 10:00am UTC](https://discuss.elastic.co/t/performance-issue-with-script-scoring-with-fields-having-a-large-array/17275 "2014-04-30T10:00:08Z")
I have document having fields containing large array. I would like to score according to the value of a nth element of such array, but got very slow answer (5s) for only 10K document indexed. my mapping: docume… --- ## [Kibana unable to use elastic-http-public cert](https://discuss.elastic.co/t/kibana-unable-to-use-elastic-http-public-cert/233805)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 5\ **Last updated:** [May 30, 2020, 7:17am UTC](https://discuss.elastic.co/t/kibana-unable-to-use-elastic-http-public-cert/233805 "2020-05-30T07:17:53Z")
hi team, I would like to enable HTTPS communication between kibana and elasticsearch , but i am not able to do that kibana config --\> count: 1 config: elasticsearch.ssl.certificateAuthorities: /mnt/usr/c… --- ## ["http" "total\_opened" connection count is huge on data nodes](https://discuss.elastic.co/t/http-total-opened-connection-count-is-huge-on-data-nodes/150821)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 5\ **Last updated:** [October 3, 2018, 5:33pm UTC](https://discuss.elastic.co/t/http-total-opened-connection-count-is-huge-on-data-nodes/150821 "2018-10-03T17:33:14Z")
Hi, I have observed that "http" "total\_opened" connection count is huge on data nodes. Please help. Thanks --- ## [Import Yara to elastic instance in cloud](https://discuss.elastic.co/t/import-yara-to-elastic-instance-in-cloud/319050)
**Author:** [@Idan\_Abramovich](https://discuss.elastic.co/u/Idan_Abramovich)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 10:05pm UTC](https://discuss.elastic.co/t/import-yara-to-elastic-instance-in-cloud/319050 "2022-11-16T22:05:54Z")
Hello all , How do I import Yara rules into our instance ? any direction or clue? thank you --- ## [Logstash Pipeline Fails (LF/CR)](https://discuss.elastic.co/t/logstash-pipeline-fails-lf-cr/49056)
**Author:** [@pg13](https://discuss.elastic.co/u/pg13)\ **Replies:** 1\ **Last updated:** [May 3, 2016, 12:52pm UTC](https://discuss.elastic.co/t/logstash-pipeline-fails-lf-cr/49056 "2016-05-03T12:52:47Z")
When processing log files that end with a line feed/carriage return, the pipeline is unable to process the file. The work around is to open the file in some sort of text editor (Notepad++) and manually backspace the res… --- ## [How to install specific older version of elasticsearch in Mac OS](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683 "2021-07-14T14:43:38Z")
Hi all, I'm trying to install Elasticsearch using Homebrew version. I'm trying to install Elasticsearch 7.13.2 version. But when the use the below command, brew install elastic/tap/elasticsearch-full The latest vers… --- ## [What value adds Data Streams vs Index Alias for time series data](https://discuss.elastic.co/t/what-value-adds-data-streams-vs-index-alias-for-time-series-data/260948)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 7:51am UTC](https://discuss.elastic.co/t/what-value-adds-data-streams-vs-index-alias-for-time-series-data/260948 "2021-01-13T07:51:50Z")
I'm struggling to understand what benefits Data Streams brings to the table, compared with Index Alias for time series data? Are there any performance (i.e indexing and querying) benefits? --- ## [Breaking changes to plugin API in 5.2.0: elasticsearch clusters](https://discuss.elastic.co/t/breaking-changes-to-plugin-api-in-5-2-0-elasticsearch-clusters/73293)
**Author:** [@Court](https://discuss.elastic.co/u/Court)\ **Replies:** 0\ **Last updated:** [January 30, 2017, 10:02pm UTC](https://discuss.elastic.co/t/breaking-changes-to-plugin-api-in-5-2-0-elasticsearch-clusters/73293 "2017-01-30T22:02:53Z")
If you write plugins that have server-side code that interacts with the Elasticsearch client and/or core plugin, we've made some changes to the internal plugin API that will require some modifications to your plugin to w… --- ## [Do we need to add ECS Logger to our Filebeat just to get log.level as a field in the JSON?](https://discuss.elastic.co/t/do-we-need-to-add-ecs-logger-to-our-filebeat-just-to-get-log-level-as-a-field-in-the-json/329779)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 7\ **Last updated:** [April 20, 2023, 9:00pm UTC](https://discuss.elastic.co/t/do-we-need-to-add-ecs-logger-to-our-filebeat-just-to-get-log-level-as-a-field-in-the-json/329779 "2023-04-20T21:00:38Z")
I've been rereading the Filebeat documentation to try to deepen my understanding of how it works. We have been configuring Filebeat manually with inputs like this: - type: filestream id: my-api fields: app\_id: … --- ## [Use JSON in Watcher webhook body](https://discuss.elastic.co/t/use-json-in-watcher-webhook-body/295349)
**Author:** [@rosaLux161](https://discuss.elastic.co/u/rosaLux161)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 1:35pm UTC](https://discuss.elastic.co/t/use-json-in-watcher-webhook-body/295349 "2022-02-08T13:35:03Z")
How is it possible to use plain JSON in Watcher webhook body? Just putting the plain JSON in the body { \[...\] "actions":{ "opsgenie":{ "webhook":{ "method":"POST", "ho… --- ## [Add column to Kibana dashboard that count the number of row](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420)
**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 11:37pm UTC](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420 "2020-02-28T23:37:50Z")
I'm using Kibana 6.8.2 and I want to add a column that will show the number of the row displayed, something like: Row Country Some data 1 Greece 100 2 Italy 50 3 G… --- ## [Markdown Handlebar in Kibana](https://discuss.elastic.co/t/markdown-handlebar-in-kibana/207928)
**Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 4:19am UTC](https://discuss.elastic.co/t/markdown-handlebar-in-kibana/207928 "2019-11-19T04:19:15Z")
Hey! Im trying to understand Handlebar when using Visual Builder in Kibana. I have a few data sources named cars, cities ect. How do I access a specific array within the \_all because I want to do something different wit… --- ## ["Limits to the number of shards which are searched in parallel"](https://discuss.elastic.co/t/limits-to-the-number-of-shards-which-are-searched-in-parallel/120700)
**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\ **Replies:** 1\ **Last updated:** [February 22, 2018, 8:19pm UTC](https://discuss.elastic.co/t/limits-to-the-number-of-shards-which-are-searched-in-parallel/120700 "2018-02-22T20:19:33Z")
The release notes for ES 6 mention: Limits to the number of shards which are searched in parallel, so that a single query cannot dominate the cluster. I haven't found documentation of how this feature works. I am won… --- ## [Searched for single item =\> ES return near whole index](https://discuss.elastic.co/t/searched-for-single-item-es-return-near-whole-index/115094)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 7\ **Last updated:** [January 22, 2018, 6:31am UTC](https://discuss.elastic.co/t/searched-for-single-item-es-return-near-whole-index/115094 "2018-01-22T06:31:24Z")
I'm using ES 6.1.1. I want to select single item by message. My query in Kibana is: GET MY\_INDEX/\_search { "query": { "constant\_score": { "filter": { "bool": { "must": \[ { … --- ## [Write to hdfs from elasticsearch](https://discuss.elastic.co/t/write-to-hdfs-from-elasticsearch/71238)
**Author:** [@sbone](https://discuss.elastic.co/u/sbone)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 10:20pm UTC](https://discuss.elastic.co/t/write-to-hdfs-from-elasticsearch/71238 "2017-01-16T22:20:53Z")
Is it possible to write from elasticsearch to hdfs? the current pipeline is: fluentd -\> elasticsearch fluentd -\> flume -\> hdfs elastic is used for realtime analysis and hive (on top of hdfs) is used for longer. i w… --- ## [Rolling Restarts: node\_left.delayed\_timeout vs allocation.enable](https://discuss.elastic.co/t/rolling-restarts-node-left-delayed-timeout-vs-allocation-enable/56944)
**Author:** [@cheruvian](https://discuss.elastic.co/u/cheruvian)\ **Replies:** 1\ **Last updated:** [August 2, 2016, 10:36am UTC](https://discuss.elastic.co/t/rolling-restarts-node-left-delayed-timeout-vs-allocation-enable/56944 "2016-08-02T10:36:32Z")
What are the benefits/drawbacks to using index.unassigned.node\_left.delayed\_timeout vs cluster.routing.allocation.enable when doing a rolling restart? From what I understand: index.unassigned.node\_left.delayed\_tim… --- ## [LDAP Authentication Case Sensitive](https://discuss.elastic.co/t/ldap-authentication-case-sensitive/305224)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 6:50am UTC](https://discuss.elastic.co/t/ldap-authentication-case-sensitive/305224 "2022-05-20T06:50:35Z")
I've recently enabled LDAP authentication and used the Kibana GUI to configure role mappings. Unfortunately, it appears usernames are case sensitive. So if I enter a role mapping for user example123, and the user enter… --- ## [Y-Axis Using Decimal Numbers When Data Is Always Whole Numbers](https://discuss.elastic.co/t/y-axis-using-decimal-numbers-when-data-is-always-whole-numbers/206859)
**Author:** [@Belai\_Lencho](https://discuss.elastic.co/u/Belai_Lencho)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 9:06pm UTC](https://discuss.elastic.co/t/y-axis-using-decimal-numbers-when-data-is-always-whole-numbers/206859 "2019-11-19T21:06:41Z")
Hello, I have seen some previous discussion regarding this issue, but for our use case, we are using one Kibana graph, and then applying a filter programmatically to further limit the data set. The Y Axis is just a count… --- ## [Get Data from XML WebService](https://discuss.elastic.co/t/get-data-from-xml-webservice/149830)
**Author:** [@Android\_Games](https://discuss.elastic.co/u/Android_Games)\ **Replies:** 2\ **Last updated:** [September 26, 2018, 5:29am UTC](https://discuss.elastic.co/t/get-data-from-xml-webservice/149830 "2018-09-26T05:29:03Z")
I'm new to Logstash and trying to build a dashboard,which will consume data webservice . I've installed elastic,Kibana and trying to configure logstash using http poller for pulling data from webservice I'm trying to a… --- ## [Logstash exception while parsing Java Log file](https://discuss.elastic.co/t/logstash-exception-while-parsing-java-log-file/138369)
**Author:** [@satendr](https://discuss.elastic.co/u/satendr)\ **Replies:** 2\ **Last updated:** [July 4, 2018, 5:13am UTC](https://discuss.elastic.co/t/logstash-exception-while-parsing-java-log-file/138369 "2018-07-04T05:13:17Z")
HI , I am new to ELK and trying to implement parsing for our Log file , but when i run config file , its giving Parsing Exception. My logstash config file is: input { beats { port =\> "5044" } } filter { grok { … --- ## [Elasticsearch maintenance with cluster.routing.allocation.enable=none](https://discuss.elastic.co/t/elasticsearch-maintenance-with-cluster-routing-allocation-enable-none/126298)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 2\ **Last updated:** [April 11, 2018, 2:47pm UTC](https://discuss.elastic.co/t/elasticsearch-maintenance-with-cluster-routing-allocation-enable-none/126298 "2018-04-11T14:47:21Z")
When doing a rolling upgrade, it says to set "cluster.routing.allocation.enable=none" and then flush. Is the documentation for 6.2 wrong in that it disables using persistent and then does transient? Should it not be … --- ## [PUT watcher API call using CURL](https://discuss.elastic.co/t/put-watcher-api-call-using-curl/114188)
**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 1:49am UTC](https://discuss.elastic.co/t/put-watcher-api-call-using-curl/114188 "2018-01-05T01:49:27Z")
Hi All, I have watcher with id fuse-file-management While trying to execute GET watcher API I get error "No route to host ". Is the URL correct? curl -H "Content-Type: application/json" -X GET http://localhost:5601/\_… --- ## [Cpu load high ，cpu usage by thread 'elasticsearch\[node-1\]\[management\]](https://discuss.elastic.co/t/cpu-load-high-cpu-usage-by-thread-elasticsearch-node-1-management/64968)
**Author:** [@changxy](https://discuss.elastic.co/u/changxy)\ **Replies:** 2\ **Last updated:** [November 4, 2016, 9:06am UTC](https://discuss.elastic.co/t/cpu-load-high-cpu-usage-by-thread-elasticsearch-node-1-management/64968 "2016-11-04T09:06:21Z")
what is meaning of management thread ？ and possible reasons \_nodes/hot\_threads 85.2% (426ms out of 500ms) cpu usage by thread 'elasticsearch\[node-2\]\[management\]\[T#5\]' 6/10 snapshots sharing following 38 elements … --- ## [Elasticsearch Schema incompatibility with Hive Parquet](https://discuss.elastic.co/t/elasticsearch-schema-incompatibility-with-hive-parquet/63244)
**Author:** [@Jae](https://discuss.elastic.co/u/Jae)\ **Replies:** 2\ **Last updated:** [October 18, 2016, 10:41pm UTC](https://discuss.elastic.co/t/elasticsearch-schema-incompatibility-with-hive-parquet/63244 "2016-10-18T22:41:34Z")
Hello Elasticsearch-Hadoop user I got a little bit complicated situation. I am trying to back up Elasticsearch data to Hive through parquet file format with schema. Writing to parquet file was ok but while registering … --- ## [Size of visualizations on pdf](https://discuss.elastic.co/t/size-of-visualizations-on-pdf/60687)
**Author:** [@Marten](https://discuss.elastic.co/u/Marten)\ **Replies:** 2\ **Last updated:** [September 17, 2016, 8:04am UTC](https://discuss.elastic.co/t/size-of-visualizations-on-pdf/60687 "2016-09-17T08:04:28Z")
Hi, Is there a possibility to adjust the size of the visualizations on the generated pdf? At the moment all visualizations take half a page, even when it's a Markdown widget with just 2 words. Also: How to remove gener… --- ## [Influxdb coerce\_values is causing exception](https://discuss.elastic.co/t/influxdb-coerce-values-is-causing-exception/50748)
**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\ **Replies:** 2\ **Last updated:** [May 24, 2016, 11:15am UTC](https://discuss.elastic.co/t/influxdb-coerce-values-is-causing-exception/50748 "2016-05-24T11:15:10Z")
I have logstash working fine with influxDB, but it is sending numeric values as strings so I can't use the influxDB aggregation functions like mean(). The solution to this seems to be coerce\_values in the influxdb outpu… [Previous page](https://discuss.elastic.co/top.md?page=1258&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1260&per_page=50&period=all)