# Top **URL:** https://discuss.elastic.co/top.md?page=1285&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1286 --- ## [Help with a Query DSL](https://discuss.elastic.co/t/help-with-a-query-dsl/14977)
**Author:** [@Bijuv\_V](https://discuss.elastic.co/u/Bijuv_V)\ **Replies:** 6\ **Last updated:** [December 23, 2013, 1:43pm UTC](https://discuss.elastic.co/t/help-with-a-query-dsl/14977 "2013-12-23T13:43:50Z")
I have the data in the following format in Elastic Search (from sense) POST slots/slot/1 { locationid:"1", roomid:"10", starttime: "08:45" } POST slots/slot/2 { locationid:"1", … --- ## [Design guidance for multi-tenant multi-source indexing](https://discuss.elastic.co/t/design-guidance-for-multi-tenant-multi-source-indexing/13494)
**Author:** [@Ashwin\_Sathya](https://discuss.elastic.co/u/Ashwin_Sathya)\ **Replies:** 6\ **Last updated:** [September 6, 2013, 9:19pm UTC](https://discuss.elastic.co/t/design-guidance-for-multi-tenant-multi-source-indexing/13494 "2013-09-06T21:19:44Z")
Hi, I am detailing my scenario here. I need to support a number of users who have data from multiple sources. The nature of the data source is chronological, it is both real-time and timestamp'ed. The search capab… --- ## [Moving license from old cluster nodes to new ones](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592)
**Author:** [@Nick.Evans](https://discuss.elastic.co/u/Nick.Evans)\ **Replies:** 7\ **Last updated:** [January 9, 2023, 6:27am UTC](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592 "2023-01-09T06:27:48Z")
We have a 3 node elasticsearch cluster. (node-1, node-2, node-3) We have a need to introduce 3 new nodes and fail out the original 3. I have built nodes 4, 5 and 6 and successfully added them to cluster. Once the clus… --- ## [Need help with filebeat index pattern - Mapping conflict with host.ip](https://discuss.elastic.co/t/need-help-with-filebeat-index-pattern-mapping-conflict-with-host-ip/279673)
**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\ **Replies:** 7\ **Last updated:** [August 2, 2021, 10:18pm UTC](https://discuss.elastic.co/t/need-help-with-filebeat-index-pattern-mapping-conflict-with-host-ip/279673 "2021-08-02T22:18:45Z")
filebeat index pattern shows warning that host.ip is showing both type ip and text. I believe this is somehow related to IPv6 host.ip is in type text and IPv4 host.ip in type ip how do fix this ? at this point I don't … --- ## [Custom Transaction not showing up in APM](https://discuss.elastic.co/t/custom-transaction-not-showing-up-in-apm/219310)
**Author:** [@baerrach](https://discuss.elastic.co/u/baerrach)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 5:30am UTC](https://discuss.elastic.co/t/custom-transaction-not-showing-up-in-apm/219310 "2020-02-14T05:30:43Z")
Running on cloud.elastic.co Kibana version: v7.5.0 Elasticsearch version: v7.5.0 APM Server version: v7.5.0 APM Agent language and version: Node.js via "elastic-apm-node": "^3.3.0" Browser version: N/A Origina… --- ## [Is it possible to point out to a synonm file outside a docker image](https://discuss.elastic.co/t/is-it-possible-to-point-out-to-a-synonm-file-outside-a-docker-image/161719)
**Author:** [@Bilal](https://discuss.elastic.co/u/Bilal)\ **Replies:** 1\ **Last updated:** [January 2, 2019, 10:24am UTC](https://discuss.elastic.co/t/is-it-possible-to-point-out-to-a-synonm-file-outside-a-docker-image/161719 "2019-01-02T10:24:36Z")
I think my question is composed of two parts: Is there a way for elasticsearch (using synonyms\_path parameter) to point out to an external synonym files ? If yes, how can we do that using an elasticserch installed … --- ## [How to get match results from a single unit from a nested structure, having multiple fields inside?](https://discuss.elastic.co/t/how-to-get-match-results-from-a-single-unit-from-a-nested-structure-having-multiple-fields-inside/92477)
**Author:** [@sid\_1199](https://discuss.elastic.co/u/sid_1199)\ **Replies:** 7\ **Last updated:** [July 10, 2017, 2:47pm UTC](https://discuss.elastic.co/t/how-to-get-match-results-from-a-single-unit-from-a-nested-structure-having-multiple-fields-inside/92477 "2017-07-10T14:47:09Z")
Hello, I have a nested field which can be represented as follows. Documents can have any number of nested fields containing the structure below: Field: { -\>course -\>duration } Suppose I need to find people who have … --- ## [Convert watches elasticsearch output to json with groovy Ask Question](https://discuss.elastic.co/t/convert-watches-elasticsearch-output-to-json-with-groovy-ask-question/82561)
**Author:** [@Hedi\_Chahed](https://discuss.elastic.co/u/Hedi_Chahed)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 5:35pm UTC](https://discuss.elastic.co/t/convert-watches-elasticsearch-output-to-json-with-groovy-ask-question/82561 "2017-04-21T17:35:26Z")
I want to convert payload.hits.hits to json in elasticsearch watcher output. I found as a solution groovy transform script :slight\_smile: PUT \_watcher/watch/error\_alert { "trigger": { "schedule": { "interval": "1m"… --- ## [Java.lang.IllegalArgumentException: Mapper for \[@timestamp\] conflicts with existing mapping in other types:](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapper-for-timestamp-conflicts-with-existing-mapping-in-other-types/49532)
**Author:** [@sdarbha](https://discuss.elastic.co/u/sdarbha)\ **Replies:** 1\ **Last updated:** [May 10, 2016, 7:12am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapper-for-timestamp-conflicts-with-existing-mapping-in-other-types/49532 "2016-05-10T07:12:17Z")
Hello, I am using elasticsearch 2.1.1 version with kibana 4.3.1. I am seeing the below error after the upgrade from 1.x to 2.x. we are currently using logstash to ingest logs into elasticsearch. How to set update\_all\_t… --- ## [When the number of documents exceeds 2 billion, the index status becomes RED](https://discuss.elastic.co/t/when-the-number-of-documents-exceeds-2-billion-the-index-status-becomes-red/341461)
**Author:** [@im.jinxinwang](https://discuss.elastic.co/u/im.jinxinwang)\ **Replies:** 5\ **Last updated:** [August 24, 2023, 3:24am UTC](https://discuss.elastic.co/t/when-the-number-of-documents-exceeds-2-billion-the-index-status-becomes-red/341461 "2023-08-24T03:24:29Z")
Version: 7.8.1 Cause of failure: The number of important index documents in the 7.8.1 open source version of ES has reached the limit of 2147483519 in Lucene. The index status is red, and read and write operations canno… --- ## [Routing one input to diferent indexes](https://discuss.elastic.co/t/routing-one-input-to-diferent-indexes/214423)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 5\ **Last updated:** [January 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/routing-one-input-to-diferent-indexes/214423 "2020-01-10T16:27:05Z")
Hello all, i don't know if this can be achieve with logstah. I am just starting with logstash. This is the structure of each file that comes in the folder every day: DATE: FEB 10, 2020 \*\*\*\*\*\*\* section 1 \*\*\*\*\*\*\*\* COL… --- ## [CPU usage 100% when Elasticsearch is down](https://discuss.elastic.co/t/cpu-usage-100-when-elasticsearch-is-down/185850)
**Author:** [@fredrik.jonsson](https://discuss.elastic.co/u/fredrik.jonsson)\ **Replies:** 5\ **Last updated:** [July 8, 2019, 11:51pm UTC](https://discuss.elastic.co/t/cpu-usage-100-when-elasticsearch-is-down/185850 "2019-07-08T23:51:22Z")
I noticed that when Elasticsearch can't retrieve any more data the beats sending data went up to 100% CPU usage. E.g. if the disc is full on the Elasticsearch server. After clear up some space and "reset" Elasticsearch… --- ## [Cluster sur sites géographiques différents](https://discuss.elastic.co/t/cluster-sur-sites-geographiques-differents/85550)
**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\ **Replies:** 5\ **Last updated:** [May 15, 2017, 12:18pm UTC](https://discuss.elastic.co/t/cluster-sur-sites-geographiques-differents/85550 "2017-05-15T12:18:58Z")
Bonjour à tous, J'ai une petite question à propos des clusters ES basés sur différents sites géographiques. Quelles sont les conséquences réelles de ce type d'architecture ? Uniquement sur les performances d'ElasticSea… --- ## [APM Java Agent getting not all data](https://discuss.elastic.co/t/apm-java-agent-getting-not-all-data/266935)
**Author:** [@Katharina](https://discuss.elastic.co/u/Katharina)\ **Replies:** 3\ **Last updated:** [March 26, 2021, 3:45pm UTC](https://discuss.elastic.co/t/apm-java-agent-getting-not-all-data/266935 "2021-03-26T15:45:16Z")
Hi all, I'm new here and hopefully using the forum right. I set up an ELK stack with beats version 7.11.1 newly in a local environment via Ansible and Vagrant. Everything is working fine. Now I wanted to collect and vi… --- ## [Logstash Exiting: Template loading requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/logstash-exiting-template-loading-requested-but-the-elasticsearch-output-is-not-configured-enabled/157866)
**Author:** [@firewall](https://discuss.elastic.co/u/firewall)\ **Replies:** 0\ **Last updated:** [November 22, 2018, 11:27am UTC](https://discuss.elastic.co/t/logstash-exiting-template-loading-requested-but-the-elasticsearch-output-is-not-configured-enabled/157866 "2018-11-22T11:27:26Z")
Hi! I'm new to ELK.... configured a Elasticsearch and Kibana, but my logstash doesn't work.... I'm get this message from client Exiting: Template loading requested but the Elasticsearch output is not configured/enabled … --- ## [Problemas al ordenar con un campo string](https://discuss.elastic.co/t/problemas-al-ordenar-con-un-campo-string/129624)
**Author:** [@rpc29y](https://discuss.elastic.co/u/rpc29y)\ **Replies:** 3\ **Last updated:** [April 26, 2018, 10:50am UTC](https://discuss.elastic.co/t/problemas-al-ordenar-con-un-campo-string/129624 "2018-04-26T10:50:21Z")
Buenos días: En un índice sencillo que contiene los códigos y descripciones de localidades cuando hago una consulta e intento ordenar por el campo descripcion de tipo string los resultados no son los esperados. Por eje… --- ## [Problem with Bulk API instantiation](https://discuss.elastic.co/t/problem-with-bulk-api-instantiation/123319)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 3\ **Last updated:** [March 9, 2018, 6:55pm UTC](https://discuss.elastic.co/t/problem-with-bulk-api-instantiation/123319 "2018-03-09T18:55:02Z")
This line is not compiling in Eclipse: BulkRequestBuilder bulkRequest = client.prepareBulk(); Error: \` The method prepareBulk() is undefined for the type RestHighLevelClient \` Any ideas what? Am I missing a depen… --- ## [Monitor elapsed time on events for a processing plant](https://discuss.elastic.co/t/monitor-elapsed-time-on-events-for-a-processing-plant/117904)
**Author:** [@jonasdig](https://discuss.elastic.co/u/jonasdig)\ **Replies:** 3\ **Last updated:** [January 31, 2018, 9:48pm UTC](https://discuss.elastic.co/t/monitor-elapsed-time-on-events-for-a-processing-plant/117904 "2018-01-31T21:48:35Z")
Hi I am new to Elasticsearch and is currently evaluating if it is the right system for us. I work for a processing plant and want to get more insight into our data. One of the futures that I want is to process the event… --- ## [Scrolling vs Sizing vs Batching](https://discuss.elastic.co/t/scrolling-vs-sizing-vs-batching/116386)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 3\ **Last updated:** [January 25, 2018, 7:42am UTC](https://discuss.elastic.co/t/scrolling-vs-sizing-vs-batching/116386 "2018-01-25T07:42:51Z")
Hi, I've been reading as much as I can, but I am still lost to a couple of terms and their interaction/difference: Scroll -\> I don't understand this concept and how it interacts with size size (for an ES input for … --- ## [Problem parsing large XML with logstash?](https://discuss.elastic.co/t/problem-parsing-large-xml-with-logstash/90122)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 3\ **Last updated:** [June 21, 2017, 8:30am UTC](https://discuss.elastic.co/t/problem-parsing-large-xml-with-logstash/90122 "2017-06-21T08:30:36Z")
Logstash 2.4.1 I want to parse a XML file : \ \ \ \Empire Burlesque\ \Bob Dylan\ \ **Author:** [@Yasho](https://discuss.elastic.co/u/Yasho)\ **Replies:** 3\ **Last updated:** [December 28, 2016, 1:13pm UTC](https://discuss.elastic.co/t/shield-custom-realm-need-to-extract-the-password/70060 "2016-12-28T13:13:38Z") Hi, I have downloaded the shield-custom-realm-example from git and have been trying modify to suit our requirement, basically i need to use the custom-realm as a bridge to pass on the login credential to another system… --- ## [Indexing while relocating shards / reballance](https://discuss.elastic.co/t/indexing-while-relocating-shards-reballance/36658)
**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\ **Replies:** 3\ **Last updated:** [December 9, 2015, 1:01am UTC](https://discuss.elastic.co/t/indexing-while-relocating-shards-reballance/36658 "2015-12-09T01:01:35Z")
Hello, Basic question: is Elasticsearch able to index while there is some relocating / reballance operation? We have a write heavy cluster for a central log service, using logstash from many sources. As you probably … --- ## [How to make filter when using json format file](https://discuss.elastic.co/t/how-to-make-filter-when-using-json-format-file/35680)
**Author:** [@Young\_Heon\_Kim](https://discuss.elastic.co/u/Young_Heon_Kim)\ **Replies:** 3\ **Last updated:** [November 27, 2015, 5:18am UTC](https://discuss.elastic.co/t/how-to-make-filter-when-using-json-format-file/35680 "2015-11-27T05:18:59Z")
Hi everyone. I would like to parse json format log file which logged on Percona audit plugin. Actually format of log file is following Nov 25 23:25:18 serverHostName percona-audit: {"audit\_record":{"name":"Query", … --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/277048)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 3:42pm UTC](https://discuss.elastic.co/t/logstash-error/277048 "2021-06-25T15:42:44Z")
I have installed logstash and the following is the .conf file input { beat { port =\> 5044 type =\> syslog } } filter { if \[type\] == "syslog" { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:syslog\_timestamp} … --- ## [APM - Custom Dashboard or Inegration with other Dashboards](https://discuss.elastic.co/t/apm-custom-dashboard-or-inegration-with-other-dashboards/230942)
**Author:** [@Darisetty\_Suneel](https://discuss.elastic.co/u/Darisetty_Suneel)\ **Replies:** 2\ **Last updated:** [May 4, 2020, 5:00pm UTC](https://discuss.elastic.co/t/apm-custom-dashboard-or-inegration-with-other-dashboards/230942 "2020-05-04T17:00:36Z")
Dear All, I would like to integrate visualizations present in the default APM dashboard, is it possible to create custom dashboards from APM data? If so how to do it? Thanks & Regards, Suneel Darisetty --- ## [Regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540)
**Author:** [@adrianalfonso](https://discuss.elastic.co/u/adrianalfonso)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 2:56am UTC](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540 "2020-01-06T02:56:54Z")
Can anyone describe what does this error mean? and how to resolve it. thank you. regular expression has redundant nested repeat operator \* /(?:(?:\\\[(?\(?:(?\>\\d\\d){1,2})-… --- ## [Installation problems with Logstash 5.3.0 rpm's](https://discuss.elastic.co/t/installation-problems-with-logstash-5-3-0-rpms/80717)
**Author:** [@nolan.peters](https://discuss.elastic.co/u/nolan.peters)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 7:15pm UTC](https://discuss.elastic.co/t/installation-problems-with-logstash-5-3-0-rpms/80717 "2017-03-30T19:15:09Z")
Is anyone else having issues with installing the latest Kibana download of 5.3.0? I tried twice with two different downloads and both get an unpacking error. Is it just me or is the RPM broke? rpm -Uvh logstash-5.3.… --- ## [Logstash Pipline aborted error](https://discuss.elastic.co/t/logstash-pipline-aborted-error/73946)
**Author:** [@mliu1212](https://discuss.elastic.co/u/mliu1212)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 7:14am UTC](https://discuss.elastic.co/t/logstash-pipline-aborted-error/73946 "2017-02-06T07:14:40Z")
I am trying to run Suricata with the ELK stack - I cannot get my info to visualize on Kibana bc the Logstash pipline keeps breaking down: {:timestamp=\>"2017-02-04T13:50:29.731000+0000", :message=\>"Pipeline aborted due … --- ## [About registry file](https://discuss.elastic.co/t/about-registry-file/58999)
**Author:** [@Elastic3150](https://discuss.elastic.co/u/Elastic3150)\ **Replies:** 2\ **Last updated:** [August 29, 2016, 12:13am UTC](https://discuss.elastic.co/t/about-registry-file/58999 "2016-08-29T00:13:14Z")
I'm using filebeat version 5.0.0-alpha5 (amd64), libbeat 5.0.0-alpha5 in following config: paths: - /pasth/to/access.log.\* clean\_removed: true close\_inactive: 2m (snip) I launch filebeat at '2016/8/26 11:30'. Th… --- ## [Is it possible to do scanning & scrolling over multiple indexes](https://discuss.elastic.co/t/is-it-possible-to-do-scanning-scrolling-over-multiple-indexes/39677)
**Author:** [@Philip\_K\_Adetiloye](https://discuss.elastic.co/u/Philip_K_Adetiloye)\ **Replies:** 2\ **Last updated:** [January 20, 2016, 7:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-do-scanning-scrolling-over-multiple-indexes/39677 "2016-01-20T19:41:47Z")
Seems scrolling and scanning is not supported over multiple indexes...is there any way around this ? Sample query GET sales-rpts3\*/ptt/\_search?scroll=1m { "size": 5 } Response: { "error": { "root\_cause":… --- ## [Not analyzing string data](https://discuss.elastic.co/t/not-analyzing-string-data/27574)
**Author:** [@Tibo](https://discuss.elastic.co/u/Tibo)\ **Replies:** 2\ **Last updated:** [August 19, 2015, 9:30am UTC](https://discuss.elastic.co/t/not-analyzing-string-data/27574 "2015-08-19T09:30:01Z")
Hi, I'm having an issue with elasticsearch splitting words from my "request" field. I have found some clues about analyzed and not\_analyze field that would do what I want : searching my whole sentence. So when I get my… --- ## [Error while sorting on fields which are not present for some of the documents](https://discuss.elastic.co/t/error-while-sorting-on-fields-which-are-not-present-for-some-of-the-documents/13420)
**Author:** [@Alexei\_Petinov](https://discuss.elastic.co/u/Alexei_Petinov)\ **Replies:** 2\ **Last updated:** [September 2, 2013, 12:46pm UTC](https://discuss.elastic.co/t/error-while-sorting-on-fields-which-are-not-present-for-some-of-the-documents/13420 "2013-09-02T12:46:24Z")
This issue is experienced on version 0.90.3 Searching in two indexes with sort on two fields, for one of the indices one of the fields is present, for another - it is not. 'ignore\_unmapped' is set to true for both o… --- ## [No shard exception after logstash tries to index large data](https://discuss.elastic.co/t/no-shard-exception-after-logstash-tries-to-index-large-data/285193)
**Author:** [@yash\_chaudhary](https://discuss.elastic.co/u/yash_chaudhary)\ **Replies:** 4\ **Last updated:** [September 27, 2021, 9:43am UTC](https://discuss.elastic.co/t/no-shard-exception-after-logstash-tries-to-index-large-data/285193 "2021-09-27T09:43:49Z")
My goal is to migrate data from psql db to Elasticsearch. I am using jdbc plugin to achieve it. Issue: ES instance is breaking for larger db ( 700k records ) NOTE: For small db ( say 500 records ), it works perfectly … --- ## [Watcher with dynamic filter](https://discuss.elastic.co/t/watcher-with-dynamic-filter/175833)
**Author:** [@Jesus\_Rodrigo](https://discuss.elastic.co/u/Jesus_Rodrigo)\ **Replies:** 4\ **Last updated:** [April 12, 2019, 9:35am UTC](https://discuss.elastic.co/t/watcher-with-dynamic-filter/175833 "2019-04-12T09:35:34Z")
Hi, I'm trying to make a Watcher that compares if a number field of a document deviates from the average a percentage. The mapping the following: { "Datapoint" : "Taller10#Montaje#Skillets#M111#RODILLOS\_LONG#M111R", … --- ## [Logstash Failing after setting a custom document ID](https://discuss.elastic.co/t/logstash-failing-after-setting-a-custom-document-id/148068)
**Author:** [@ganessen23](https://discuss.elastic.co/u/ganessen23)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 6:35am UTC](https://discuss.elastic.co/t/logstash-failing-after-setting-a-custom-document-id/148068 "2018-09-12T06:35:59Z")
Hello, I am using ELK version 6.4.0 on a Linux machine. My logstash is failing when I'm trying to set a custom document id, but I am able to import data from the database to Elasticsearch if I remove the document\_id pa… --- ## [Ability to stop and start a cluster without shard movement part2](https://discuss.elastic.co/t/ability-to-stop-and-start-a-cluster-without-shard-movement-part2/143767)
**Author:** [@antonpious](https://discuss.elastic.co/u/antonpious)\ **Replies:** 4\ **Last updated:** [August 14, 2018, 11:50pm UTC](https://discuss.elastic.co/t/ability-to-stop-and-start-a-cluster-without-shard-movement-part2/143767 "2018-08-14T23:50:13Z")
Had to park this issue as we had other things, restarting this thread. . We tested ES cluster stop and start again with the equal number of shards (204) in all the 7 nodes. \[root@elasticsearch2 share\]# curl 'elas… --- ## [Error: CorruptIndexException when reading from gateway](https://discuss.elastic.co/t/error-corruptindexexception-when-reading-from-gateway/2987)
**Author:** [@Yatir\_Ben\_Shlomo\_3](https://discuss.elastic.co/u/Yatir_Ben_Shlomo_3)\ **Replies:** 4\ **Last updated:** [June 2, 2010, 9:33am UTC](https://discuss.elastic.co/t/error-corruptindexexception-when-reading-from-gateway/2987 "2010-06-02T09:33:47Z")
see attached files: http://elasticsearch-users.115913.n3.nabble.com/file/n861253/info.zip Hi, I am testing the behavior of elastic search under large scale: in my setup there 2 64-bit nodes with 8 CPUs each. they … --- ## [Cannot get Elasticsearch version](https://discuss.elastic.co/t/cannot-get-elasticsearch-version/302206)
**Author:** [@Pavlo\_Kovalenko](https://discuss.elastic.co/u/Pavlo_Kovalenko)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 1:39pm UTC](https://discuss.elastic.co/t/cannot-get-elasticsearch-version/302206 "2022-04-12T13:39:46Z")
Hi PLease assist, I want to ingest data from GoogleBigQuery into Elastic using Google DataFlow. I created DataFlow from template, Inserted my Elastic cloudID and API key, setted up table name from BigQuery. But when I … --- ## [Kibana logs are not in order 6.7 version](https://discuss.elastic.co/t/kibana-logs-are-not-in-order-6-7-version/181887)
**Author:** [@Rampsrr](https://discuss.elastic.co/u/Rampsrr)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 12:57pm UTC](https://discuss.elastic.co/t/kibana-logs-are-not-in-order-6-7-version/181887 "2019-05-28T12:57:20Z")
Filebeat-- logstash - - elastic search - - kibana Version all 6.7 It is not working both scenario #10005 ticket, since in real time i have more log lines of 10 to 15 have same @timestamp with respective to seconds but… --- ## [Unable to config filebeat with kibana, loaded dashboard Exiting 1 ERROR : error loading config file, invalid config, yaml, did not find expected '-' indicator](https://discuss.elastic.co/t/unable-to-config-filebeat-with-kibana-loaded-dashboard-exiting-1-error-error-loading-config-file-invalid-config-yaml-did-not-find-expected-indicator/146426)
**Author:** [@anwarshahtarn](https://discuss.elastic.co/u/anwarshahtarn)\ **Replies:** 1\ **Last updated:** [August 28, 2018, 10:04pm UTC](https://discuss.elastic.co/t/unable-to-config-filebeat-with-kibana-loaded-dashboard-exiting-1-error-error-loading-config-file-invalid-config-yaml-did-not-find-expected-indicator/146426 "2018-08-28T22:04:46Z")
Here is my filebeat.yaml config file ###################### Filebeat Configuration Example ######################### This file is an example configuration file highlighting only the most common options. The filebea… --- ## [Kibana Windows MSI installer](https://discuss.elastic.co/t/kibana-windows-msi-installer/121279)
**Author:** [@Alex\_McCool](https://discuss.elastic.co/u/Alex_McCool)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 8:13pm UTC](https://discuss.elastic.co/t/kibana-windows-msi-installer/121279 "2018-02-23T20:13:40Z")
Are there any plans for a kibana MSI installer? or perhaps a combined ElasticSearch/Kibana MSI installer for windows systems? --- ## [I meet some problem in kibana](https://discuss.elastic.co/t/i-meet-some-problem-in-kibana/35376)
**Author:** [@Kyaw\_Zin\_Htun](https://discuss.elastic.co/u/Kyaw_Zin_Htun)\ **Replies:** 1\ **Last updated:** [November 24, 2015, 7:05am UTC](https://discuss.elastic.co/t/i-meet-some-problem-in-kibana/35376 "2015-11-24T07:05:28Z")
Currently, I am testing logs analysis with ELK. So, I start elastic search according to documentation. Click and run elasticsearch.bat under bin Config logstash.conf input { file { path =\> "D:\\xampp\\apache\\logs\\… --- ## [Stability maintenance release](https://discuss.elastic.co/t/stability-maintenance-release/201451)
**Author:** [@Ron70](https://discuss.elastic.co/u/Ron70)\ **Replies:** 2\ **Last updated:** [September 28, 2019, 6:53am UTC](https://discuss.elastic.co/t/stability-maintenance-release/201451 "2019-09-28T06:53:41Z")
Hi, following the development of kibana since versions 6.8.x I noticed a quite increasing instability and unreliability of kibana with every new 7.x version. Considering the more than 1000 open issues tagged as bug, I … --- ## [Cluster(s) scale and failure design (ES 5.4)](https://discuss.elastic.co/t/cluster-s-scale-and-failure-design-es-5-4/101443)
**Author:** [@Eduard\_Kubanda](https://discuss.elastic.co/u/Eduard_Kubanda)\ **Replies:** 8\ **Last updated:** [September 24, 2017, 12:13pm UTC](https://discuss.elastic.co/t/cluster-s-scale-and-failure-design-es-5-4/101443 "2017-09-24T12:13:22Z")
Hi guys, I decided to post a question about ES cluster(s) design because I think my actual design sucks a bit. My goal is to set up ES infrastructure which will: be able to index/update 10 000 - 100 000 (and more) da… --- ## [Securing Elasticsearch communication in Docker Swarm](https://discuss.elastic.co/t/securing-elasticsearch-communication-in-docker-swarm/222469)
**Author:** [@areller](https://discuss.elastic.co/u/areller)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 1:53pm UTC](https://discuss.elastic.co/t/securing-elasticsearch-communication-in-docker-swarm/222469 "2020-03-06T13:53:18Z")
I am running an Elastic stack in Docker swarm. I want to setup authentication in Kibana (username + password atleast), but to do that I need to set security in Elasticsearch first. What is the best approach to do it in… --- ## [Push common search results down ('common' being subjective)](https://discuss.elastic.co/t/push-common-search-results-down-common-being-subjective/184884)
**Author:** [@abcarroll](https://discuss.elastic.co/u/abcarroll)\ **Replies:** 0\ **Last updated:** [June 9, 2019, 5:51pm UTC](https://discuss.elastic.co/t/push-common-search-results-down-common-being-subjective/184884 "2019-06-09T17:51:00Z")
We've been trying to improve our search results, which initially started as a simple match\_all, + optional term matches depending on user action, and a sort by geo. I've switched it to use scoring instead, and use a scr… --- ## [The problem about ordering in terms](https://discuss.elastic.co/t/the-problem-about-ordering-in-terms/122840)
**Author:** [@PENG\_ZHANG](https://discuss.elastic.co/u/PENG_ZHANG)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 7:42am UTC](https://discuss.elastic.co/t/the-problem-about-ordering-in-terms/122840 "2018-03-07T07:42:15Z")
1. FunctionDescription Use terms to generate multiple buckets. Sort the buckets using the aggregated result. 2. My Previous Solution At first, I use terms-\>order to sort buckets. Then, part of the aggregate resu… --- ## [Optimizing a single node ES instance for throughput](https://discuss.elastic.co/t/optimizing-a-single-node-es-instance-for-throughput/307808)
**Author:** [@dmh43](https://discuss.elastic.co/u/dmh43)\ **Replies:** 6\ **Last updated:** [June 30, 2022, 9:41am UTC](https://discuss.elastic.co/t/optimizing-a-single-node-es-instance-for-throughput/307808 "2022-06-30T09:41:50Z")
I have a single large (500GB ram and 128 cores) machine that I have indexed a corpus of around 1TB in size. The documents vary in length, from very short (~100 characters) to very long (a single documents that is \> 100 M… --- ## [Elastic agent fleet enrollment with Nginx authentication help](https://discuss.elastic.co/t/elastic-agent-fleet-enrollment-with-nginx-authentication-help/259311)
**Author:** [@jgarcia](https://discuss.elastic.co/u/jgarcia)\ **Replies:** 6\ **Last updated:** [December 22, 2020, 1:13am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-enrollment-with-nginx-authentication-help/259311 "2020-12-22T01:13:17Z")
I setup an ELK stack server along with Nginx. I am trying to make use of the Elastic Agent Fleet enrollment so that I can utilize the endpoint security and do some digging. However, I noticed that if I try to enroll an a… --- ## [SQL Query not executing](https://discuss.elastic.co/t/sql-query-not-executing/191301)
**Author:** [@Khirod\_Panda](https://discuss.elastic.co/u/Khirod_Panda)\ **Replies:** 6\ **Last updated:** [July 22, 2019, 3:29pm UTC](https://discuss.elastic.co/t/sql-query-not-executing/191301 "2019-07-22T15:29:28Z")
Hello, i have index names as alpha-\* and when i try to run SQL query on the index it throws error POST /\_xpack/sql?format=txt { "query": "SELECT \* FROM alpha-\* " } error :-1: "type": "parsing\_exception", "reason":… [Previous page](https://discuss.elastic.co/top.md?page=1284&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1286&per_page=50&period=all)