# Top **URL:** https://discuss.elastic.co/top.md?page=1286&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1287 --- ## [Realm discovery with SAML integration](https://discuss.elastic.co/t/realm-discovery-with-saml-integration/189270)
**Author:** [@chamilad](https://discuss.elastic.co/u/chamilad)\ **Replies:** 6\ **Last updated:** [July 11, 2019, 5:33am UTC](https://discuss.elastic.co/t/realm-discovery-with-saml-integration/189270 "2019-07-11T05:33:35Z")
Hi team, I'm researching Elastic's support for SAML for SSO and RBAC. As far as I understand from the documentation, Elasticsearch's SAML auth realm can work with any SAML supported IdP, and along with role mapping base… --- ## [Discover and Dashboard permission to user](https://discuss.elastic.co/t/discover-and-dashboard-permission-to-user/185023)
**Author:** [@Debasish\_Rath](https://discuss.elastic.co/u/Debasish_Rath)\ **Replies:** 6\ **Last updated:** [June 12, 2019, 9:58pm UTC](https://discuss.elastic.co/t/discover-and-dashboard-permission-to-user/185023 "2019-06-12T21:58:26Z")
I want to provide Discover and Dashboard permission to the user. How can I set? Further, what is the step to make XPACK from trial mode to non-trail mode? I am using the 6.0.1 version. --- ## [TLS errors](https://discuss.elastic.co/t/tls-errors/260996)
**Author:** [@PaulRudin](https://discuss.elastic.co/u/PaulRudin)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 5:35pm UTC](https://discuss.elastic.co/t/tls-errors/260996 "2021-01-14T17:35:12Z")
Hi, I've used eck to get ES and Kibana up. This seem to be running OK, but I disabled tls for the communication between kibana and ES: by putting spec.http.tls.selfSignedCertificate.disabled to true and I'm seeing errors… --- ## [Data table missing data compared to Discover Tab](https://discuss.elastic.co/t/data-table-missing-data-compared-to-discover-tab/192527)
**Author:** [@flex567](https://discuss.elastic.co/u/flex567)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 2:16pm UTC](https://discuss.elastic.co/t/data-table-missing-data-compared-to-discover-tab/192527 "2019-08-02T14:16:14Z")
When I create Visualization Data Row I notice that if I aggregate by terms some rows are not displayed compared to what I see in Discover Tab. The rows data are not displayed are messages that are bigger then the others… --- ## [APM span sample fail to collect on child service using 1.30.0 Java agent](https://discuss.elastic.co/t/apm-span-sample-fail-to-collect-on-child-service-using-1-30-0-java-agent/302861)
**Author:** [@gosoly](https://discuss.elastic.co/u/gosoly)\ **Replies:** 7\ **Last updated:** [April 26, 2022, 11:10am UTC](https://discuss.elastic.co/t/apm-span-sample-fail-to-collect-on-child-service-using-1-30-0-java-agent/302861 "2022-04-26T11:10:28Z")
Kibana version: 7.16.1 Elasticsearch version: 7.16.1 APM Server version: 7.16.1 APM Agent language and version: 1.30.0 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and v… --- ## [Confluence connector: non-existant permissions](https://discuss.elastic.co/t/confluence-connector-non-existant-permissions/298656)
**Author:** [@Robin\_Vanderschueren](https://discuss.elastic.co/u/Robin_Vanderschueren)\ **Replies:** 7\ **Last updated:** [March 3, 2022, 11:31pm UTC](https://discuss.elastic.co/t/confluence-connector-non-existant-permissions/298656 "2022-03-03T23:31:20Z")
I'm trying to connect confluence to Workplace search but it seems that the permissions do not match the available permissions for the confluence API. I added "similar" permissions but receive the following error: add t… --- ## [Unable to start Kibana after enabling tls in Elasticsearch](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482)
**Author:** [@mahmoudmaani](https://discuss.elastic.co/u/mahmoudmaani)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 1:15pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482 "2021-12-16T13:15:42Z")
I configured the TLS in Elasticsearch.yml. Everything is working well in Elastic and I can access it via HTTPS like https://192.168.56.108:9200 but when I am trying to access Kibana I get "Kibana server is not ready yet"… --- ## [How to map rows into columns in visualization data table?](https://discuss.elastic.co/t/how-to-map-rows-into-columns-in-visualization-data-table/186664)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [June 21, 2019, 2:17am UTC](https://discuss.elastic.co/t/how-to-map-rows-into-columns-in-visualization-data-table/186664 "2019-06-21T02:17:46Z")
Hello. I would like to ask question which is similar to the one below but since there was no answer to it, I'd like ask again including examples. I have a table as below in kibana (7.1.1). This is created by simple… --- ## [XPACK Custom Realm with SSO integration](https://discuss.elastic.co/t/xpack-custom-realm-with-sso-integration/108185)
**Author:** [@jvemugunta](https://discuss.elastic.co/u/jvemugunta)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 12:26pm UTC](https://discuss.elastic.co/t/xpack-custom-realm-with-sso-integration/108185 "2017-11-24T12:26:55Z")
We have SiteMinder at your company. After user logs through Siteminder, A SSO token called as JSON Web Token (JWT) is injected as "Authorization Bearer " and sent to the downstream application (Kibana). How to make it w… --- ## [Elastic prebuilt rules error](https://discuss.elastic.co/t/elastic-prebuilt-rules-error/334086)
**Author:** [@hasan.idriss](https://discuss.elastic.co/u/hasan.idriss)\ **Replies:** 2\ **Last updated:** [June 19, 2023, 6:56pm UTC](https://discuss.elastic.co/t/elastic-prebuilt-rules-error/334086 "2023-06-19T18:56:32Z")
hi guys am facing an issue with all prebuilt rules in Elasticsearch, when I enable the rules it runs with the following error An error occurred during rule execution: message: "verification\_exception Root causes: veri… --- ## [Metricbeat - system.memory.actual.used.pct](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 11:59pm UTC](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035 "2022-03-30T23:59:07Z")
Hi, When i try to find the root cause of a crash using metricbeat field system.memory.actual.used.pct, my dashboard appears to change the values when i filter by host.name for the machine that crashed. Before I filter b… --- ## [Logstash failed to start after plugin update](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 2\ **Last updated:** [March 30, 2021, 8:00am UTC](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472 "2021-03-30T08:00:42Z")
After updating beats input plugin from 6.0.5 to 6.1.0 on logstash(7.5.2), the service stopped to work & keeps on throwing the following error - \`logstash\[22854\]: \[ERROR\] 2021-03-26 10:35:57.423 \[main\] Logstash - java.la… --- ## [Why i get different result when i use term and match](https://discuss.elastic.co/t/why-i-get-different-result-when-i-use-term-and-match/126520)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 2\ **Last updated:** [April 3, 2018, 9:00am UTC](https://discuss.elastic.co/t/why-i-get-different-result-when-i-use-term-and-match/126520 "2018-04-03T09:00:52Z")
GET /logstash(2018.03.31)/\_search { "query":{ "bool":{ "must":\[ {"match":{"MSG":"PayResult"} } \], "must\_not": \[ { "match": { "PayResult":"Leave"}} \] } },"size":0, "aggs": { "sed\_terms": { "terms": { "fie… --- ## [Function\_score, multi\_match, script\_score, and filter in Elasticsearch](https://discuss.elastic.co/t/function-score-multi-match-script-score-and-filter-in-elasticsearch/120720)
**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 8:56pm UTC](https://discuss.elastic.co/t/function-score-multi-match-script-score-and-filter-in-elasticsearch/120720 "2018-02-20T20:56:26Z")
I'm having trouble adding a filter to my existing multimatch query which is embedded inside of a function\_score. Ideally, I'd like to filter by "term" : { "lang" : "en" }, only get back documents which are in the englis… --- ## [When I'm trying to install logstash 6. 0 .0](https://discuss.elastic.co/t/when-im-trying-to-install-logstash-6-0-0/113142)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 2\ **Last updated:** [December 27, 2017, 10:13am UTC](https://discuss.elastic.co/t/when-im-trying-to-install-logstash-6-0-0/113142 "2017-12-27T10:13:27Z")
When I'm trying to install logstash i.e I have unzipped the directory in c:\\Program Files and I have created sample.conf and I tried to run that sample.conf file using bin/logstash -f sample.conf but it is throwing me fo… --- ## [Logstash nested array parsing](https://discuss.elastic.co/t/logstash-nested-array-parsing/90009)
**Author:** [@Shuxin\_Lin](https://discuss.elastic.co/u/Shuxin_Lin)\ **Replies:** 2\ **Last updated:** [June 20, 2017, 5:37pm UTC](https://discuss.elastic.co/t/logstash-nested-array-parsing/90009 "2017-06-20T17:37:01Z")
Hi, Right now I have an entry like this after applying kv filter: "b/r/n": "1/1/0", I would like this entry to be expanded as: "b/r/n": { # the field name is not strictly to be "b/r/n" "b": 1, "r"… --- ## [Problems getting filebeat to connect to logstash container running in kubernetes](https://discuss.elastic.co/t/problems-getting-filebeat-to-connect-to-logstash-container-running-in-kubernetes/277754)
**Author:** [@RyanCherry](https://discuss.elastic.co/u/RyanCherry)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 12:48am UTC](https://discuss.elastic.co/t/problems-getting-filebeat-to-connect-to-logstash-container-running-in-kubernetes/277754 "2021-07-06T00:48:30Z")
Hi there, I have used the helm chart to install logstash onto my kubernetes cluster, however I am having problems getting filebeat to send logs to logstash. Filebeat is running on a windows server as a service on that s… --- ## [Error on sudo systemctl enable --now elasticsearch](https://discuss.elastic.co/t/error-on-sudo-systemctl-enable-now-elasticsearch/252199)
**Author:** [@robin76](https://discuss.elastic.co/u/robin76)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 9:30am UTC](https://discuss.elastic.co/t/error-on-sudo-systemctl-enable-now-elasticsearch/252199 "2020-10-23T09:30:02Z")
Hi, I am new here. I am trying to install elasticsearch on my Centos 7.8 to support Magento 2.4\] I followed all instruction but on enabling it with command sudo systemctl enable --now elasticsearch I have this error … --- ## [Too many slices lead to bloat of thread pool queue and degradation of performance](https://discuss.elastic.co/t/too-many-slices-lead-to-bloat-of-thread-pool-queue-and-degradation-of-performance/189833)
**Author:** [@lonlylocly](https://discuss.elastic.co/u/lonlylocly)\ **Replies:** 3\ **Last updated:** [August 16, 2019, 1:51pm UTC](https://discuss.elastic.co/t/too-many-slices-lead-to-bloat-of-thread-pool-queue-and-degradation-of-performance/189833 "2019-08-16T13:51:11Z")
Hello dear sirs, We are using .esJsonRDD() to copy an index from an Elasticsearch cluster to Spark cluster, and lately we started to observe that this copy is taking 10-14 hours instead of 2-3. Here's what is going on. … --- ## [Multipe terms and date range](https://discuss.elastic.co/t/multipe-terms-and-date-range/173125)
**Author:** [@Ahmad\_Asyary](https://discuss.elastic.co/u/Ahmad_Asyary)\ **Replies:** 3\ **Last updated:** [March 21, 2019, 10:11am UTC](https://discuss.elastic.co/t/multipe-terms-and-date-range/173125 "2019-03-21T10:11:53Z")
hi, i try to run this query curl -H 'Content-Type: application/json' -XGET 'http://10.42.97.15:9200/project.prod-esb.\*/\_search?q=logLevel:AUDIT&pretty=true' -d @payload.in { "\_source":\["logMessage"\], "query": … --- ## [Filter\_jdbc\_static & Apache Derby](https://discuss.elastic.co/t/filter-jdbc-static-apache-derby/122014)
**Author:** [@c0untzer0](https://discuss.elastic.co/u/c0untzer0)\ **Replies:** 3\ **Last updated:** [March 27, 2018, 9:56pm UTC](https://discuss.elastic.co/t/filter-jdbc-static-apache-derby/122014 "2018-03-27T21:56:29Z")
Hi, I'm having an issue regarding this filter. When I launch the jdbc\_static and throw some data its way, the logs of internal Apache Derby instance says this: java.lang.StackOverflowError at org.apache.derby.impl.sql… --- ## ['fielddata\_fields' to 'docvalue\_fields' in 6.x problems](https://discuss.elastic.co/t/fielddata-fields-to-docvalue-fields-in-6-x-problems/114375)
**Author:** [@iKishanSojitra](https://discuss.elastic.co/u/iKishanSojitra)\ **Replies:** 3\ **Last updated:** [January 8, 2018, 3:45pm UTC](https://discuss.elastic.co/t/fielddata-fields-to-docvalue-fields-in-6-x-problems/114375 "2018-01-08T15:45:27Z")
As per log of breaking changes in elasticsearch 6.x, fielddata\_fields is now deprecated. I'm trying to change my NEST DSL query to run it in newer version but I can not find docvalue\_fields in the place of fielddata\_fie… --- ## [Multiple Paths in nested query](https://discuss.elastic.co/t/multiple-paths-in-nested-query/96851)
**Author:** [@Hunter\_Herman](https://discuss.elastic.co/u/Hunter_Herman)\ **Replies:** 0\ **Last updated:** [August 12, 2017, 4:22pm UTC](https://discuss.elastic.co/t/multiple-paths-in-nested-query/96851 "2017-08-12T16:22:25Z")
Below is an example, but first I’ll tell you about my use case, because I’m not sure if this is a good approach. I’m trying to automatically index a large collection of typed data. What this means is I’m trying to genera… --- ## [Weird error when putting template for index](https://discuss.elastic.co/t/weird-error-when-putting-template-for-index/43296)
**Author:** [@mdessureault](https://discuss.elastic.co/u/mdessureault)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 1:31pm UTC](https://discuss.elastic.co/t/weird-error-when-putting-template-for-index/43296 "2016-03-21T13:31:22Z")
I have a hard time understanding the behavior so maybe someone here has seen it and can shed some light as to what is actually happening. I'm using elasticsearch.js to push templates to indices. I use client.indices.pu… --- ## [Rpm install logstash but while start it error!](https://discuss.elastic.co/t/rpm-install-logstash-but-while-start-it-error/39316)
**Author:** [@clifford](https://discuss.elastic.co/u/clifford)\ **Replies:** 3\ **Last updated:** [January 18, 2016, 3:21am UTC](https://discuss.elastic.co/t/rpm-install-logstash-but-while-start-it-error/39316 "2016-01-18T03:21:56Z")
\[root@ESK01 logstash\]# ./bin/plugin install logstash-input-beats Validating logstash-input-beats ERROR: Installation aborted, verification failed for logstash-input-beats start logstash that log report error: \[root@ESK01… --- ## [Drop\_event when up is false](https://discuss.elastic.co/t/drop-event-when-up-is-false/92046)
**Author:** [@alkuzad](https://discuss.elastic.co/u/alkuzad)\ **Replies:** 5\ **Last updated:** [July 10, 2017, 8:44am UTC](https://discuss.elastic.co/t/drop-event-when-up-is-false/92046 "2017-07-10T08:44:46Z")
I can't get drop\_event to work with up field. I'm using heartbeat version 5.4.3 Up is simple boolean field and it seems equals condition do not support booleans. So neither "false" or "False" or 0, 1 works. Range fi… --- ## [How to define input based on variables from another input](https://discuss.elastic.co/t/how-to-define-input-based-on-variables-from-another-input/57399)
**Author:** [@billzy](https://discuss.elastic.co/u/billzy)\ **Replies:** 5\ **Last updated:** [May 13, 2017, 1:44pm UTC](https://discuss.elastic.co/t/how-to-define-input-based-on-variables-from-another-input/57399 "2017-05-13T13:44:58Z")
here's a case that I need to finish following steps 1. call a rest service end point to fetch a returned id 2. call another rest end point using the returned id in step 1 as parameter for step 1 , I defined a http\_poll… --- ## [Logstash filter - get field?](https://discuss.elastic.co/t/logstash-filter-get-field/46935)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 5\ **Last updated:** [April 11, 2016, 8:24am UTC](https://discuss.elastic.co/t/logstash-filter-get-field/46935 "2016-04-11T08:24:11Z")
I've got log lines in the following format and want to extract fields: { "message" =\> "...", "@version" =\> "1", "@timestamp" =\> "2014-07-07T08:49:28.543Z", "host" =\> "abc", "field1" =\> "content1", "fi… --- ## [How to connect elasticsearch instance of docker VMs from two different machine?](https://discuss.elastic.co/t/how-to-connect-elasticsearch-instance-of-docker-vms-from-two-different-machine/19782)
**Author:** [@Anand\_kumar](https://discuss.elastic.co/u/Anand_kumar)\ **Replies:** 5\ **Last updated:** [February 27, 2015, 5:35pm UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-instance-of-docker-vms-from-two-different-machine/19782 "2015-02-27T17:35:42Z")
Hi all, I'm trying to connect two ES instances using docker VM and both as master nodes, but the instances belong to two different hosts from the same network. My docker commands are as below: host1 :… --- ## [Dissect with a backslash at the end of the log line](https://discuss.elastic.co/t/dissect-with-a-backslash-at-the-end-of-the-log-line/216630)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 4\ **Last updated:** [January 31, 2020, 10:47am UTC](https://discuss.elastic.co/t/dissect-with-a-backslash-at-the-end-of-the-log-line/216630 "2020-01-31T10:47:55Z")
Hi, I'm having a log (from EMC Celerra) that ends with a backslash like this: \:\:\ daemon \\ I'm trying this dissect: dissect { mapping =\> { "message" =\> "%{event\_source}:%{severity}:%{id} d… --- ## [Kibana 7.4.0 embed=true not working as expected](https://discuss.elastic.co/t/kibana-7-4-0-embed-true-not-working-as-expected/206684)
**Author:** [@mmg](https://discuss.elastic.co/u/mmg)\ **Replies:** 4\ **Last updated:** [November 10, 2019, 6:53pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-embed-true-not-working-as-expected/206684 "2019-11-10T18:53:10Z")
I've just upgraded environment from 5.5.2 to 7.4.0, and everything is successful, except the dashboards that we're sharing embedded in an asp.net app via a reverse proxy appear not to be respecting the ?embed=true option… --- ## [\[Rollup Job\] NumberFormatException](https://discuss.elastic.co/t/rollup-job-numberformatexception/178195)
**Author:** [@DustyMeg](https://discuss.elastic.co/u/DustyMeg)\ **Replies:** 4\ **Last updated:** [April 25, 2019, 3:52pm UTC](https://discuss.elastic.co/t/rollup-job-numberformatexception/178195 "2019-04-25T15:52:36Z")
Whenever a new rollup job is created the first 1000 documents are found but all subsequent calls throws the following error in the Elasticsearch logs. shard \[\[DUPkSOQVQAeFTiEJ9DYBgQ\]\[metricbeat-7.0.0-2019-04-21\]\[0\]\], r… --- ## [X-Pack security issue Realm Oauth2](https://discuss.elastic.co/t/x-pack-security-issue-realm-oauth2/121466)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 4\ **Last updated:** [March 12, 2018, 9:25am UTC](https://discuss.elastic.co/t/x-pack-security-issue-realm-oauth2/121466 "2018-03-12T09:25:15Z")
Hi I am using xpack 5.5.0. I am implementing oauth realm security and installed it as an extension inside elasticsearch xpack plugin. Now I have a Java application which uses spring security. I want to access kibana fr… --- ## [How to see/synchronize pcap file "Time" with kibana visualization?](https://discuss.elastic.co/t/how-to-see-synchronize-pcap-file-time-with-kibana-visualization/83430)
**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\ **Replies:** 4\ **Last updated:** [April 26, 2017, 9:19am UTC](https://discuss.elastic.co/t/how-to-see-synchronize-pcap-file-time-with-kibana-visualization/83430 "2017-04-26T09:19:38Z")
How to see pcap data with respect to pcap time events in kibana? Here in kibana, "Index contains time-based events" (if I checked the box then unable to load the "Time-field name"),If I unchecked the box only visualisi… --- ## [Kibana.crt, no such file or directory](https://discuss.elastic.co/t/kibana-crt-no-such-file-or-directory/219913)
**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 4:22pm UTC](https://discuss.elastic.co/t/kibana-crt-no-such-file-or-directory/219913 "2020-02-19T16:22:22Z")
I have existing cert in config/certs/kibana.crt and I have also mentioned it into kibana.yml as server.ssl.certificate : config/certs/kibana.crt. Still I am not able to start my Kibana instance. Getting Error like log … --- ## [Handling TCP disconnect](https://discuss.elastic.co/t/handling-tcp-disconnect/13731)
**Author:** [@Runar\_Myklebust\_2](https://discuss.elastic.co/u/Runar_Myklebust_2)\ **Replies:** 1\ **Last updated:** [September 24, 2013, 9:43am UTC](https://discuss.elastic.co/t/handling-tcp-disconnect/13731 "2013-09-24T09:43:34Z")
Hi all. We have had an issue at a customer where nodes are dropping out of the cluster. Ive managed to recreate a similar scenario in our test-environment, by using tcpkill, killing the tcp-traffic between a node… --- ## [Anomaly detection / ML Setup](https://discuss.elastic.co/t/anomaly-detection-ml-setup/272378)
**Author:** [@tsp](https://discuss.elastic.co/u/tsp)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 7:14am UTC](https://discuss.elastic.co/t/anomaly-detection-ml-setup/272378 "2021-05-11T07:14:12Z")
When setting up the ML within the Anomaly detection (Stack 11.1.2) , it says the following: At least one index matching logs-pattern-\* has a field called event.dataset without the correct type. Here is a sample record: … --- ## [How to export csv when \_source is disabled](https://discuss.elastic.co/t/how-to-export-csv-when-source-is-disabled/243150)
**Author:** [@t98907](https://discuss.elastic.co/u/t98907)\ **Replies:** 2\ **Last updated:** [August 4, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-export-csv-when-source-is-disabled/243150 "2020-08-04T04:38:40Z")
Hi there, I looked into the reason why kibana can't export csv. It was because I had \_source disabled in my index, so I couldn't export csv with kibana. But I'm storing the fields I need, and discover is outputting th… --- ## [Metricbeat Windows Not Finding any file systems to report. "The system cannot find the file specified."](https://discuss.elastic.co/t/metricbeat-windows-not-finding-any-file-systems-to-report-the-system-cannot-find-the-file-specified/206316)
**Author:** [@sdf301](https://discuss.elastic.co/u/sdf301)\ **Replies:** 2\ **Last updated:** [December 2, 2019, 11:06pm UTC](https://discuss.elastic.co/t/metricbeat-windows-not-finding-any-file-systems-to-report-the-system-cannot-find-the-file-specified/206316 "2019-12-02T23:06:39Z")
I am trying to install it on a Windows system (Windows 10 Pro). I got the service to start running and it's even sending output over to Kibana. Unfortunately, it isn't finding any file systems to report on. E, L, K, & M… --- ## [Nginx useragent mapper\_parsing\_exception](https://discuss.elastic.co/t/nginx-useragent-mapper-parsing-exception/205089)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 2:40pm UTC](https://discuss.elastic.co/t/nginx-useragent-mapper-parsing-exception/205089 "2019-10-24T14:40:02Z")
Hi, I'm having a bit of trouble understanding why I'm getting the below errors when trying to Index Nginx access logs. \[2019-10-24T12:52:56,876\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticse… --- ## [Export timelion sheet to pdf / html?](https://discuss.elastic.co/t/export-timelion-sheet-to-pdf-html/86825)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [May 24, 2017, 7:40am UTC](https://discuss.elastic.co/t/export-timelion-sheet-to-pdf-html/86825 "2017-05-24T07:40:14Z")
Hi, is there a free solution to export all panels in timelion sheet to pdf or save the whole dashboard to html? If saving a normal dashboard to html just via the browser, I lose tooltips, but the graphs are shown. If… --- ## [Sorting in template queries](https://discuss.elastic.co/t/sorting-in-template-queries/39296)
**Author:** [@John\_D\_Ament](https://discuss.elastic.co/u/John_D_Ament)\ **Replies:** 2\ **Last updated:** [January 15, 2016, 12:47pm UTC](https://discuss.elastic.co/t/sorting-in-template-queries/39296 "2016-01-15T12:47:23Z")
I have the following query, which works fine in sense against my cluster. { "\_source": \[ "record.opened", "record.type" \], "sort": \[ {"record.type":"desc"}, "record.opened" \], "query": { "… --- ## [Logstash Jdbc-input Field mapping issue](https://discuss.elastic.co/t/logstash-jdbc-input-field-mapping-issue/33358)
**Author:** [@Hoffin](https://discuss.elastic.co/u/Hoffin)\ **Replies:** 2\ **Last updated:** [November 2, 2015, 6:06am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-field-mapping-issue/33358 "2015-11-02T06:06:02Z")
In Lostash JDBC input all fields defaulted to String mapping. Auto field mapping is not available. How achieve the field map exactly match to to mysql table mapping. --- ## [Increasing thread pool / queue size](https://discuss.elastic.co/t/increasing-thread-pool-queue-size/17579)
**Author:** [@jcm112388](https://discuss.elastic.co/u/jcm112388)\ **Replies:** 2\ **Last updated:** [May 19, 2014, 6:30pm UTC](https://discuss.elastic.co/t/increasing-thread-pool-queue-size/17579 "2014-05-19T18:30:48Z")
We're running v1.1.0 in production right now. We have 15 nodes and 15 shards w/ 4 replicas (75 total). Recently we've ran into some problems that seem to be caused by using all of the available threads and complet… --- ## [Custom Filter Score](https://discuss.elastic.co/t/custom-filter-score/12938)
**Author:** [@shanmuthu83](https://discuss.elastic.co/u/shanmuthu83)\ **Replies:** 2\ **Last updated:** [July 26, 2013, 3:10pm UTC](https://discuss.elastic.co/t/custom-filter-score/12938 "2013-07-26T15:10:28Z")
Hello All Good Evening i prepare custom\_filter\_score query script \*sample query\* { "timeout" : 60000, "query" : { "custom\_filters\_score" : { "query" : { "bool" : { "should"… --- ## [Problems with dynamic mapping](https://discuss.elastic.co/t/problems-with-dynamic-mapping/11041)
**Author:** [@Jason\_6](https://discuss.elastic.co/u/Jason_6)\ **Replies:** 2\ **Last updated:** [March 6, 2013, 10:24pm UTC](https://discuss.elastic.co/t/problems-with-dynamic-mapping/11041 "2013-03-06T22:24:27Z")
HI folks, We are using elastic search index a bunch of JSON documents which all have \* roughly\* the same structure, but there are some variations which is causing headaches with dynamic mapping. Specifically field… --- ## [Show first especific documents](https://discuss.elastic.co/t/show-first-especific-documents/156378)
**Author:** [@BlindCode](https://discuss.elastic.co/u/BlindCode)\ **Replies:** 8\ **Last updated:** [November 26, 2018, 3:41am UTC](https://discuss.elastic.co/t/show-first-especific-documents/156378 "2018-11-26T03:41:25Z")
Hello Guys! I'm creating an autocomplete query for hotels and destinations. I want than when i type Can or Canc i see Cancun in the first results of my query. I already have a list of popular "citys and hotels" th… --- ## [Filebeat.inputs journald: Multiline not working](https://discuss.elastic.co/t/filebeat-inputs-journald-multiline-not-working/294422)
**Author:** [@agallardo](https://discuss.elastic.co/u/agallardo)\ **Replies:** 3\ **Last updated:** [January 19, 2022, 9:22am UTC](https://discuss.elastic.co/t/filebeat-inputs-journald-multiline-not-working/294422 "2022-01-19T09:22:06Z")
According to \[Journalbeat\] Still no multiline support after 3 years · Issue #27578 · elastic/beats · GitHub, because filebeat can now read the journal and it should support multiline. In the documentation Journald input … --- ## ["org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed - ES 7.6](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555)
**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 5:07am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555 "2020-07-27T05:07:32Z")
I got below error on ES 7.6 and queries were taking time to execute. Can any one help on this. ? I have deployed our cluster on docker {"log":"\[2020-07-24T12:35:34,270\]\[WARN \]\[r.suppressed \] \[cindex\_name… --- ## [View surrounding documents is losing the filter](https://discuss.elastic.co/t/view-surrounding-documents-is-losing-the-filter/208976)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 3\ **Last updated:** [November 21, 2019, 9:21pm UTC](https://discuss.elastic.co/t/view-surrounding-documents-is-losing-the-filter/208976 "2019-11-21T21:21:46Z")
I have a filter in the Discoverer view that is pinned. When I click the 'view surrounding documents' link i'm taking to the context view but the pinned filters are lost. I'm using Kibana 7.4.2. I had a similar issue w… [Previous page](https://discuss.elastic.co/top.md?page=1285&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1287&per_page=50&period=all)