# Top **URL:** https://discuss.elastic.co/top.md?page=1275&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1276 --- ## [Kibana filter by sort and uniq value](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659 "2020-11-25T14:44:57Z")
Hello, At the discover navigation page, I would like to do a search (KQL) by creating a filter that will find a pattern for a specific field, sort all values and produce unique values. Is this possible? If yes, how? th… --- ## [License requirements to implement ILM](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 8:44pm UTC](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380 "2020-09-11T20:44:30Z")
In order to evaluate its potential to help on our daily operations, I have deployed Elastic Search and Kibana (7.7.1 with BASIC license) and created an index template for Ntopng (our monitoring platform). So far so good… --- ## [\[SOLVED\] Parsing GeoPoint - Tile map shows - No results found](https://discuss.elastic.co/t/solved-parsing-geopoint-tile-map-shows-no-results-found/52039)
**Author:** [@burnsie](https://discuss.elastic.co/u/burnsie)\ **Replies:** 1\ **Last updated:** [June 7, 2016, 2:51pm UTC](https://discuss.elastic.co/t/solved-parsing-geopoint-tile-map-shows-no-results-found/52039 "2016-06-07T14:51:58Z")
I can't seem to get the parsing of the GeoPoint data correct so that it can be used by Kibana's Tile Map Here is a data sample... 2016-06-06 11:53:59,839 DEBUG longitude:6.079736 latitude:51.131458 count:4 2016-06-06… --- ## [403 @ \_cat/indices when logged in as user in admin role](https://discuss.elastic.co/t/403--cat-indices-when-logged-in-as-user-in-admin-role/47737)
**Author:** [@spacewrangler](https://discuss.elastic.co/u/spacewrangler)\ **Replies:** 1\ **Last updated:** [April 19, 2016, 9:55am UTC](https://discuss.elastic.co/t/403--cat-indices-when-logged-in-as-user-in-admin-role/47737 "2016-04-19T09:55:22Z")
On elasticsearch + xpack 5.0.0 I'm getting a 403 when attempting to access index stats via \_cat/indices when logged in as an admin user. I've repro'd through curl (curl --user elastic:\ http://localhost:9200/\_ca… --- ## [How Recover mistaken delete index？](https://discuss.elastic.co/t/how-recover-mistaken-delete-index/18830)
**Author:** [@11157](https://discuss.elastic.co/u/11157)\ **Replies:** 1\ **Last updated:** [July 23, 2014, 4:12pm UTC](https://discuss.elastic.co/t/how-recover-mistaken-delete-index/18830 "2014-07-23T16:12:09Z")
Dear All！ How can i recover deleted indux? or how to backup the index? Thanks && Best Regard! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsu… --- ## [@timestamp is 4 hours behind when i change timezone in advance setting kibana and database date field is ok](https://discuss.elastic.co/t/timestamp-is-4-hours-behind-when-i-change-timezone-in-advance-setting-kibana-and-database-date-field-is-ok/351107)
**Author:** [@Aslam\_Ansari](https://discuss.elastic.co/u/Aslam_Ansari)\ **Replies:** 6\ **Last updated:** [January 18, 2024, 8:11am UTC](https://discuss.elastic.co/t/timestamp-is-4-hours-behind-when-i-change-timezone-in-advance-setting-kibana-and-database-date-field-is-ok/351107 "2024-01-18T08:11:55Z")
@timestamp is 4 hours behind when I change the timezone as UTC in Kibana's advance settings and the database date field is correct. However, when I set the timezone as browser advance settings in Kibana, @timestamp is co… --- ## [ES not found documents](https://discuss.elastic.co/t/es-not-found-documents/291227)
**Author:** [@xunterix](https://discuss.elastic.co/u/xunterix)\ **Replies:** 6\ **Last updated:** [December 9, 2021, 7:39pm UTC](https://discuss.elastic.co/t/es-not-found-documents/291227 "2021-12-09T19:39:47Z")
Hi, after resetting the index and re-indexing, the search stopped finding any documents. In the logs I see all shards failed. What could be the problem? { "cluster\_name" : "elasticsearch", "status" : "yellow", "ti… --- ## [APM java agent not capturing background process](https://discuss.elastic.co/t/apm-java-agent-not-capturing-background-process/284249)
**Author:** [@Ilham\_Sulaksono](https://discuss.elastic.co/u/Ilham_Sulaksono)\ **Replies:** 6\ **Last updated:** [September 28, 2021, 2:55am UTC](https://discuss.elastic.co/t/apm-java-agent-not-capturing-background-process/284249 "2021-09-28T02:55:27Z")
Kibana version: 7.13.3 Elasticsearch version: 7.13.3 APM Server version: 7.13.3 APM Agent language and version: Java 1.25.0 Browser version: Chrome Version 93.0.4577.63 Original install method (e.g. download page, y… --- ## [Elastic search on VM](https://discuss.elastic.co/t/elastic-search-on-vm/66819)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 6\ **Last updated:** [November 22, 2016, 9:15am UTC](https://discuss.elastic.co/t/elastic-search-on-vm/66819 "2016-11-22T09:15:54Z")
Hi We have built elastic search index which is running nicely on our local servers, but once we move it to Azure (Virtual Machine), the same search is taking too long. Any ideas ? Thanks in advance. --- ## [Node related queries](https://discuss.elastic.co/t/node-related-queries/37823)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 6\ **Last updated:** [December 24, 2015, 5:41am UTC](https://discuss.elastic.co/t/node-related-queries/37823 "2015-12-24T05:41:13Z")
Hi , I have 2 master node , 2 data node and 1 client node I have some queries regrading the node distribution . 1) Does client node help in indexing the data into data node ? 2) Is it a good practice that data shou… --- ## [Unresponsive cluster after too large of a query (OutOfMemoryError: Java heap space)?](https://discuss.elastic.co/t/unresponsive-cluster-after-too-large-of-a-query-outofmemoryerror-java-heap-space/17354)
**Author:** [@natefox](https://discuss.elastic.co/u/natefox)\ **Replies:** 6\ **Last updated:** [May 7, 2014, 4:17pm UTC](https://discuss.elastic.co/t/unresponsive-cluster-after-too-large-of-a-query-outofmemoryerror-java-heap-space/17354 "2014-05-07T16:17:32Z")
We're using ES 1.1.0 for central logging storage/searching. When we use Kibana and search a month's worth of data, our cluster becomes unresponsive. By unresponsive I mean that many nodes will respond immediately t… --- ## [Elasticsearch Super Slow and using low CPU](https://discuss.elastic.co/t/elasticsearch-super-slow-and-using-low-cpu/313922)
**Author:** [@abr4xc](https://discuss.elastic.co/u/abr4xc)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 1:23am UTC](https://discuss.elastic.co/t/elasticsearch-super-slow-and-using-low-cpu/313922 "2022-09-08T01:23:48Z")
After gone offline for a day the elastic cluster started to be too slow, check of possible misconfigurations and could not fine anything to make it faster, the cluster is on green and there is not unassing shards, howeve… --- ## [Logstash not working on selected servers in production](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795)
**Author:** [@xyz\_12](https://discuss.elastic.co/u/xyz_12)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 9:38am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795 "2017-09-14T09:38:42Z")
since the issue is related with PROD in terms of logstash relted and the same issue was occured in lower level environment. . However we have gone through the logs resepect to the server and noticed the below exception… --- ## [Is reindex API works in parallel by shard?](https://discuss.elastic.co/t/is-reindex-api-works-in-parallel-by-shard/68142)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 5\ **Last updated:** [December 7, 2016, 7:02am UTC](https://discuss.elastic.co/t/is-reindex-api-works-in-parallel-by-shard/68142 "2016-12-07T07:02:14Z")
I use Hadoop plugin a lot, it's quite fast because it takes advantage of shards to work in parallel. Is reindex API do the same? (or can) --- ## [How to display and play multiple audio file urls in a document field](https://discuss.elastic.co/t/how-to-display-and-play-multiple-audio-file-urls-in-a-document-field/278587)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 10:30am UTC](https://discuss.elastic.co/t/how-to-display-and-play-multiple-audio-file-urls-in-a-document-field/278587 "2021-07-16T10:30:58Z")
Hi Elastic Team, The url of the audio file for each call is storing in elastic and defined the format as url type as audio. We have a scenario like each call can have multiple audio files and the filenames will be in a… --- ## [Multiline pattern not working for more complex cases](https://discuss.elastic.co/t/multiline-pattern-not-working-for-more-complex-cases/267407)
**Author:** [@RFeiten](https://discuss.elastic.co/u/RFeiten)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 4:37pm UTC](https://discuss.elastic.co/t/multiline-pattern-not-working-for-more-complex-cases/267407 "2021-03-22T16:37:52Z")
Hi all! I'm facing an issue while collecting logs using Filebeat (7.x) in conjunction to a pipeline in Logstash. The multi-line scenario has been overcome by checking elastic documentation, however, there are specific … --- ## [How to use aggregate function in logstash to calculate difference between 'elapsed' time fields?](https://discuss.elastic.co/t/how-to-use-aggregate-function-in-logstash-to-calculate-difference-between-elapsed-time-fields/230004)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 4\ **Last updated:** [April 28, 2020, 7:16pm UTC](https://discuss.elastic.co/t/how-to-use-aggregate-function-in-logstash-to-calculate-difference-between-elapsed-time-fields/230004 "2020-04-28T19:16:03Z")
I am using the latest version of logstash(7.6.2). I am trying to calculate the total time spent in system excluding time spent between Out2 and In2 i.e. \[(Out3-In1) - (Out2-In2)\] for a given ID. Find below my sample da… --- ## [Initialization problem](https://discuss.elastic.co/t/initialization-problem/6478)
**Author:** [@Zsombor](https://discuss.elastic.co/u/Zsombor)\ **Replies:** 4\ **Last updated:** [January 24, 2012, 3:11pm UTC](https://discuss.elastic.co/t/initialization-problem/6478 "2012-01-24T15:11:30Z")
Hi, Probably I missing something really obvious, but I struggling with running elasticsearch in my tests. First I've tried initalizing this way: client = NodeBuilder.nodeBuilder().local(true).client(true).buil… --- ## [Kibana Readiness probe failed: Get https://5601/login: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)](https://discuss.elastic.co/t/kibana-readiness-probe-failed-get-https-5601-login-net-http-request-canceled-while-waiting-for-connection-client-timeout-exceeded-while-awaiting-headers/226877)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 6:14am UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-get-https-5601-login-net-http-request-canceled-while-waiting-for-connection-client-timeout-exceeded-while-awaiting-headers/226877 "2020-04-13T06:14:57Z")
Warning Unhealthy 3m21s kubelet, ip-10-24-196-234.ap-south-1.compute.internal Readiness probe failed: Get http://:5601/login: net/http: request canceled (Client.Timeout exceeded while awaiting headers… --- ## [How to Replace node](https://discuss.elastic.co/t/how-to-replace-node/182074)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 10:30pm UTC](https://discuss.elastic.co/t/how-to-replace-node/182074 "2019-05-23T22:30:05Z")
Hello, How do I replace a node with the same IP? Here is my situation: I was having 2 node cluster node-1 with HOT data(was acting as master before it went down), node-2 with WARM data nodes and because of hardware i… --- ## [Dangling Index Errors](https://discuss.elastic.co/t/dangling-index-errors/117399)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [January 29, 2018, 2:14pm UTC](https://discuss.elastic.co/t/dangling-index-errors/117399 "2018-01-29T14:14:52Z")
I've run the logstash pipeline to index data in my cluster (3 master, data and ingest eligible) and 1 coordinating node. That time, i havent checked that the 2 nodes (not coordinating nodes) are down and this throws an … --- ## [Subsecond precision in Elasticsearch/Opensearch](https://discuss.elastic.co/t/subsecond-precision-in-elasticsearch-opensearch/293215)
**Author:** [@rizvaughan](https://discuss.elastic.co/u/rizvaughan)\ **Replies:** 3\ **Last updated:** [December 31, 2021, 8:08am UTC](https://discuss.elastic.co/t/subsecond-precision-in-elasticsearch-opensearch/293215 "2021-12-31T08:08:38Z")
Hello all, I had opened a similar issue before to get sub second precision in Elasticsearch. I wasn't able to send logs in epoch millseconds to Elasticsearch which now I have figured out how to do. Now I have two issue… --- ## [How to enable the mapper-size plugin within an INDEX TEMPLATE](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646)
**Author:** [@ericjogonzalez](https://discuss.elastic.co/u/ericjogonzalez)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646 "2021-02-18T18:53:07Z")
Hello, I am struggling to enable the mapper-size plugin within an index template in kibana. A bit of background: The mapper-size plugin is installed on all ES hosts on the cluster All hosts have been restarted since t… --- ## [Split field and add new fields](https://discuss.elastic.co/t/split-field-and-add-new-fields/262571)
**Author:** [@jtillman2020](https://discuss.elastic.co/u/jtillman2020)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 5:01pm UTC](https://discuss.elastic.co/t/split-field-and-add-new-fields/262571 "2021-01-29T17:01:51Z")
I have a string field named "One". \<165\>Original Address=1.1.1.1 1 2021-01-28T15:08:03.136-05:00 DeviceName - - - - fpc3 DHCP Packet Drop: Packet src ip/mac 192.168.123.1/54:48:10:db:86:b6 I use mutate { split =\> … --- ## [Nxlog to Logstash problem](https://discuss.elastic.co/t/nxlog-to-logstash-problem/165896)
**Author:** [@Mayaya](https://discuss.elastic.co/u/Mayaya)\ **Replies:** 3\ **Last updated:** [February 5, 2019, 11:03am UTC](https://discuss.elastic.co/t/nxlog-to-logstash-problem/165896 "2019-02-05T11:03:42Z")
Hi, Please I am seeing logs of "No connection could be made because the target machine actively refused it.". The logstash pipeline is running. Any guidance is much appreciated. Thanks. My Logstash pipeline config is… --- ## [Pipeline stats API: in/out/filtered](https://discuss.elastic.co/t/pipeline-stats-api-in-out-filtered/163742)
**Author:** [@jmb](https://discuss.elastic.co/u/jmb)\ **Replies:** 3\ **Last updated:** [January 16, 2019, 1:16pm UTC](https://discuss.elastic.co/t/pipeline-stats-api-in-out-filtered/163742 "2019-01-16T13:16:40Z")
What do the in/out/filtered values in the events section of the pipeline stats API actually represent? I had understood them to mean in: total events entering the pipeline (sum of input plugins production) out: tota… --- ## [Curator rollover new\_index failing](https://discuss.elastic.co/t/curator-rollover-new-index-failing/150214)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 4:16pm UTC](https://discuss.elastic.co/t/curator-rollover-new-index-failing/150214 "2018-09-27T16:16:19Z")
Curator action file: actions: 1: action: rollover options: disable\_action: False name: index\_prod\_active new\_index: "\" # have also tried "\ **Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 10:57am UTC](https://discuss.elastic.co/t/how-to-write-a-filter-in-an-visualization-kibana-5-3-3/93120 "2017-07-14T10:57:19Z") I have the same field in two different indexes I want to show a visualisation for a status field I want to split pie chart when a status field value is Open? --- ## [Logstash trying to parse date to the wrong field](https://discuss.elastic.co/t/logstash-trying-to-parse-date-to-the-wrong-field/92121)
**Author:** [@marcogoldin](https://discuss.elastic.co/u/marcogoldin)\ **Replies:** 3\ **Last updated:** [July 12, 2017, 10:42am UTC](https://discuss.elastic.co/t/logstash-trying-to-parse-date-to-the-wrong-field/92121 "2017-07-12T10:42:10Z")
Hi, logstash suddenly shows a quite strange behaviour, i think it's trying to parse a text field into a date field. But i really don't know how to interpret this message in logstash-plain.log: \[2017-07-06T16:23:43,11… --- ## [JSon Array parsing - Field name](https://discuss.elastic.co/t/json-array-parsing-field-name/32870)
**Author:** [@apoc](https://discuss.elastic.co/u/apoc)\ **Replies:** 3\ **Last updated:** [May 29, 2017, 1:41pm UTC](https://discuss.elastic.co/t/json-array-parsing-field-name/32870 "2017-05-29T13:41:34Z")
Hi, I manage to parse JSON array with logstash (Returns/Row) My configuration is ... filter { split { field =\> "Returns\[Row\]" add\_field =\> \[ "name" , "%{Returns.Row.name}"\] } } output { stdout { codec =\> "rub… --- ## [Cannot download Marvel 2.0 for Kibana 4.2](https://discuss.elastic.co/t/cannot-download-marvel-2-0-for-kibana-4-2/40288)
**Author:** [@kkpatel](https://discuss.elastic.co/u/kkpatel)\ **Replies:** 3\ **Last updated:** [January 27, 2016, 10:55pm UTC](https://discuss.elastic.co/t/cannot-download-marvel-2-0-for-kibana-4-2/40288 "2016-01-27T22:55:56Z")
I want to get a zip file for Marvel that will work with Kibana 4.2. I was able to download Marvel-Agent for ElasticSearch 2.0. It doesn't appear to be on the Marvel download page on elastic.co. Where do I get this zi… --- ## [Amazon Elasticsearch Service](https://discuss.elastic.co/t/amazon-elasticsearch-service/31547)
**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\ **Replies:** 3\ **Last updated:** [January 12, 2016, 10:54am UTC](https://discuss.elastic.co/t/amazon-elasticsearch-service/31547 "2016-01-12T10:54:24Z")
Has anyone seen this new offering from Amazon yet? Thoughts? https://aws.amazon.com/elasticsearch-service/ https://aws.amazon.com/blogs/aws/new-amazon-elasticsearch-service/ --- ## [Knapsack import/export plugin 2.0.0.0 for Elasticsearch 2.0.0](https://discuss.elastic.co/t/knapsack-import-export-plugin-2-0-0-0-for-elasticsearch-2-0-0/34597)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 0\ **Last updated:** [November 14, 2015, 7:35pm UTC](https://discuss.elastic.co/t/knapsack-import-export-plugin-2-0-0-0-for-elasticsearch-2-0-0/34597 "2015-11-14T19:35:04Z")
Hi, I'd like to announce a new release of the knapsack import/export plugin 2.0.0.0 It is compatible with ES 2.0 Note: the default export/import directory is no longer #ES\_HOME but path.logs due to the new security… --- ## [SQL Query with CASE When condition and SUM](https://discuss.elastic.co/t/sql-query-with-case-when-condition-and-sum/217397)
**Author:** [@Zou\_Justin](https://discuss.elastic.co/u/Zou_Justin)\ **Replies:** 1\ **Last updated:** [February 4, 2020, 8:58am UTC](https://discuss.elastic.co/t/sql-query-with-case-when-condition-and-sum/217397 "2020-02-04T08:58:37Z")
Hi Experts, Can we use the case when with SUM in one SQL in Elastic Search7.5.1? Does ES support this in SQL or other way? I tried to do this , while there have following issue: sql\> select sum(case when model\_qi\_categ… --- ## [Search API limiting output](https://discuss.elastic.co/t/search-api-limiting-output/187301)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 7\ **Last updated:** [June 25, 2019, 11:22am UTC](https://discuss.elastic.co/t/search-api-limiting-output/187301 "2019-06-25T11:22:10Z")
How do I use the search API to query over a period of time? (last 15mins) and also to limit the output to a size of 1. I have the below working, but that searches for everything up to 10,000 docs. POST index/\_search?q… --- ## [No such index while adding elaticsearch datasource in grafana](https://discuss.elastic.co/t/no-such-index-while-adding-elaticsearch-datasource-in-grafana/169520)
**Author:** [@Nexio](https://discuss.elastic.co/u/Nexio)\ **Replies:** 1\ **Last updated:** [February 22, 2019, 8:44am UTC](https://discuss.elastic.co/t/no-such-index-while-adding-elaticsearch-datasource-in-grafana/169520 "2019-02-22T08:44:33Z")
Hello Everyone, i am new to elasticsearch and grafana, i have installed grafana and elastic search on the same server but while adding datasource of elasticsearch on grafana using elasticsearch plugin, there is a secti… --- ## [Logstash - Exchange 2013 Message Tracking](https://discuss.elastic.co/t/logstash-exchange-2013-message-tracking/145581)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 1\ **Last updated:** [August 23, 2018, 12:39pm UTC](https://discuss.elastic.co/t/logstash-exchange-2013-message-tracking/145581 "2018-08-23T12:39:19Z")
Hi, I cannot get logstash to output exchange 2013 tracking logs properly. Can anyone help? Logstash Config: input { beats { port =\> 5044 type =\> "ex\_msg\_trk" } } filter { if \[type\] == "ex\_msg\_trk" { grok { m… --- ## [Recovery failed, no activity after 30m, networking seems fine](https://discuss.elastic.co/t/recovery-failed-no-activity-after-30m-networking-seems-fine/106540)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [November 6, 2017, 2:35pm UTC](https://discuss.elastic.co/t/recovery-failed-no-activity-after-30m-networking-seems-fine/106540 "2017-11-06T14:35:22Z")
Last night I started restoring a snapshot of 12 small indices to a 6-node cluster (v.2.3.1) running on m4.2xlarge AWS instance types, each with 2TB disk. The shards won't allocate to any node. Every node has plenty of … --- ## [X-Axis Custom Label for Date Histogram](https://discuss.elastic.co/t/x-axis-custom-label-for-date-histogram/62419)
**Author:** [@daneitz](https://discuss.elastic.co/u/daneitz)\ **Replies:** 1\ **Last updated:** [October 7, 2016, 10:47pm UTC](https://discuss.elastic.co/t/x-axis-custom-label-for-date-histogram/62419 "2016-10-07T22:47:55Z")
When you customize an X-Axis Label for a Date Histogram, you loose the "per \[interval\]" as noted on the generic label. Are there replacement variables or parms that can be put on the custom label to include this informa… --- ## [Elastic errors in logs](https://discuss.elastic.co/t/elastic-errors-in-logs/45967)
**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\ **Replies:** 1\ **Last updated:** [April 1, 2016, 5:10am UTC](https://discuss.elastic.co/t/elastic-errors-in-logs/45967 "2016-04-01T05:10:36Z")
Hi Team , I am seeing the below error in my Elastic cluster logs. \[ WARN\] 2016-03-31 09:53:22,953 org.elasticsearch.discovery.zen.publish - \[node3\] timed out waiting for all nodes to process published state \[5826\] … --- ## [Unable to add remote cluster for CCS](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/264637)
**Author:** [@susindaran](https://discuss.elastic.co/u/susindaran)\ **Replies:** 8\ **Last updated:** [February 18, 2021, 6:06pm UTC](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/264637 "2021-02-18T18:06:17Z")
I am simply spinning up two Elasticsearch instances in the same machine and trying to add one as a remote cluster to the other one. Settings for cluster\_one (only the relevant part): transport.port: 9307 http.p… --- ## [Grouping by non-numeric field](https://discuss.elastic.co/t/grouping-by-non-numeric-field/4117)
**Author:** [@jason](https://discuss.elastic.co/u/jason)\ **Replies:** 8\ **Last updated:** [March 19, 2011, 6:16am UTC](https://discuss.elastic.co/t/grouping-by-non-numeric-field/4117 "2011-03-19T06:16:48Z")
Hi, I would like to write a query in ES that shows counts for each person's name, equivalent to the following SQL query: select name, count() from people group by name; I found a similar request here: http… --- ## [Metricbeat service get stopped after service start](https://discuss.elastic.co/t/metricbeat-service-get-stopped-after-service-start/336567)
**Author:** [@Sathish\_Kumar2](https://discuss.elastic.co/u/Sathish_Kumar2)\ **Replies:** 6\ **Last updated:** [June 22, 2023, 6:47am UTC](https://discuss.elastic.co/t/metricbeat-service-get-stopped-after-service-start/336567 "2023-06-22T06:47:04Z")
Metricbeat version: 7.9.3 Below is error, when i run the metricbeat command in the server. runtime/cgo: pthread\_create failed: Operation not permitted SIGABRT: abort PC=0x7f2f78896a7c m=2 sigcode=18446744073709551610 … --- ## [Is indexing done in Logstash or Elasticsearch?](https://discuss.elastic.co/t/is-indexing-done-in-logstash-or-elasticsearch/194163)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 6\ **Last updated:** [August 9, 2019, 6:47am UTC](https://discuss.elastic.co/t/is-indexing-done-in-logstash-or-elasticsearch/194163 "2019-08-09T06:47:19Z")
Hi All, I am understanding the process of indexing. I have read this question and answer: https://stackoverflow.com/questions/38248757/which-elasticsearch-node-is-better-configured-in-logstash-elasticsearch-output-p W… --- ## [Splitting a huge field into multiple fields](https://discuss.elastic.co/t/splitting-a-huge-field-into-multiple-fields/163433)
**Author:** [@mayanks8](https://discuss.elastic.co/u/mayanks8)\ **Replies:** 6\ **Last updated:** [January 15, 2019, 10:16pm UTC](https://discuss.elastic.co/t/splitting-a-huge-field-into-multiple-fields/163433 "2019-01-15T22:16:00Z")
Hi All, I am getting data in Json format in my eleasticsearch. but one one the fields called "messages" has over 30K lines, I need to split lines into the "message" based on the format. i have a special character where… --- ## [Plugin management setting missing CSS styling](https://discuss.elastic.co/t/plugin-management-setting-missing-css-styling/154230)
**Author:** [@Sam\_Reynolds](https://discuss.elastic.co/u/Sam_Reynolds)\ **Replies:** 6\ **Last updated:** [October 29, 2018, 1:24pm UTC](https://discuss.elastic.co/t/plugin-management-setting-missing-css-styling/154230 "2018-10-29T13:24:50Z")
Hello, I followed this guide to add a plugin specific management section: Adding management plugin The problem I'm having is that the html is displaying without any styling. this is an example of my html: \ **Author:** [@michael8](https://discuss.elastic.co/u/michael8)\ **Replies:** 5\ **Last updated:** [March 11, 2024, 1:26pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-after-upgrade-7-17-to-8-12/355032 "2024-03-11T13:26:02Z") Hi, I've already looked through all the posts about errors and I can't find a solution for myself. After updating Kibana from 7.17 to 8.12, Kibana does not want to start. All errors were previously eliminated. Elastic… --- ## [Match terms with characters in a sequence](https://discuss.elastic.co/t/match-terms-with-characters-in-a-sequence/238768)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 4:33am UTC](https://discuss.elastic.co/t/match-terms-with-characters-in-a-sequence/238768 "2020-07-29T04:33:31Z")
I'm interested in building an autocomplete-style interface where someone can enter characters and the results will be the terms that have those characters in that order, but not necessarily contiguous. This is functiona… --- ## [Logstash filter to extract email and credit card](https://discuss.elastic.co/t/logstash-filter-to-extract-email-and-credit-card/226736)
**Author:** [@AnanthMahadevan](https://discuss.elastic.co/u/AnanthMahadevan)\ **Replies:** 5\ **Last updated:** [May 6, 2020, 11:10am UTC](https://discuss.elastic.co/t/logstash-filter-to-extract-email-and-credit-card/226736 "2020-05-06T11:10:09Z")
I am new to logstash and want to extract email IDs and credit card details from files. I am using filebeat to pass log files to logstash and also have setup a config file with the grok patterns. However, I am not able to… --- ## [The only place to get 5.0 upon release will be Elastic Cloud? Huh?](https://discuss.elastic.co/t/the-only-place-to-get-5-0-upon-release-will-be-elastic-cloud-huh/52093)
**Author:** [@John\_Craig](https://discuss.elastic.co/u/John_Craig)\ **Replies:** 5\ **Last updated:** [October 26, 2016, 8:43pm UTC](https://discuss.elastic.co/t/the-only-place-to-get-5-0-upon-release-will-be-elastic-cloud-huh/52093 "2016-10-26T20:43:44Z")
OK maybe I'm thoroughly confused. Is the ES 5.0.0. Alpha 3 announcement really saying that I won't be able to run ES 5 on my own servers? "the only place to get 5.0 upon release will be Elastic Cloud" If so, I'm now lo… [Previous page](https://discuss.elastic.co/top.md?page=1274&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1276&per_page=50&period=all)