# Top

**URL:** https://discuss.elastic.co/top.md?page=1307&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1308

---

## [Using wildcard on mutate for fieldname](https://discuss.elastic.co/t/using-wildcard-on-mutate-for-fieldname/145115)

<div class="topic-metadata">

**Author:** [@oms1226](https://discuss.elastic.co/u/oms1226)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 12:57pm UTC](https://discuss.elastic.co/t/using-wildcard-on-mutate-for-fieldname/145115 "2018-08-21T12:57:22Z")

</div>

I used below in logstash.config mutate { convert =\> { "goog\*" =\> "float" } } But didn't work. I want to convert all the fieldname getting prefix 'goog' TO float type. What will I fix ? I am waiting your help!

---

## [Single Machine Cluster Setup - Are my elasticsearch 5.0.0 configurations proper?](https://discuss.elastic.co/t/single-machine-cluster-setup-are-my-elasticsearch-5-0-0-configurations-proper/69909)

<div class="topic-metadata">

**Author:** [@Chandra\_Kanth\_Nadiku](https://discuss.elastic.co/u/Chandra_Kanth_Nadiku)\
**Replies:** 3\
**Last updated:** [December 26, 2016, 4:56pm UTC](https://discuss.elastic.co/t/single-machine-cluster-setup-are-my-elasticsearch-5-0-0-configurations-proper/69909 "2016-12-26T16:56:13Z")

</div>

I am using elasticsearch 5.0.0 version. And chose to go with single machine cluster setup so that I can scale it by adding more machines later when load increases.. but I get an error - after elasticsearch runs for a few…

---

## [Enabling xpack causes errors](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601)

<div class="topic-metadata">

**Author:** [@jLemmings](https://discuss.elastic.co/u/jLemmings)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 4:35am UTC](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601 "2020-08-05T04:35:32Z")

</div>

Hello I am trying to set up a simple ELK stack using docker. While I disable xpack security it starts fine and I can access the Kibana interface. If xpack security is enabled I get an "Kibana server is not ready yet" er…

---

## [Question about "FileNotFoundException(no segments\* file found)" while allocating replica shard](https://discuss.elastic.co/t/question-about-filenotfoundexception-no-segments-file-found-while-allocating-replica-shard/226296)

<div class="topic-metadata">

**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\
**Replies:** 1\
**Last updated:** [April 3, 2020, 7:49am UTC](https://discuss.elastic.co/t/question-about-filenotfoundexception-no-segments-file-found-while-allocating-replica-shard/226296 "2020-04-03T07:49:55Z")

</div>

Hello, we have got an issue when we have replica allocation after making primary shard. \[System ENV\] ES version : 6.5.2 Cluster has total 6 nodes (one node per one instance) \[Scenario\] At first, we created an index …

---

## [Aggregating even if array is empty](https://discuss.elastic.co/t/aggregating-even-if-array-is-empty/96014)

<div class="topic-metadata">

**Author:** [@Rafi993](https://discuss.elastic.co/u/Rafi993)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 3:32pm UTC](https://discuss.elastic.co/t/aggregating-even-if-array-is-empty/96014 "2017-08-15T15:32:35Z")

</div>

I am trying to do simple aggregation in elastic search using an array my query is as follows { "size":0, "aggs":{ "byTags":{ "terms": { "field": "tags" } …

---

## [Format a country code to the full name](https://discuss.elastic.co/t/format-a-country-code-to-the-full-name/94366)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 6:18pm UTC](https://discuss.elastic.co/t/format-a-country-code-to-the-full-name/94366 "2017-07-24T18:18:10Z")

</div>

I have a field of type String holding the country code of the request (2 letters, ISO 3166-1 alpha-2 format). I'd like Kibana to show the full name of the country rather the two letters. Is there a formatter that does th…

---

## [Kibana Discover field statistics not showing](https://discuss.elastic.co/t/kibana-discover-field-statistics-not-showing/335466)

<div class="topic-metadata">

**Author:** [@joshuachough](https://discuss.elastic.co/u/joshuachough)\
**Replies:** 5\
**Last updated:** [June 22, 2023, 9:03pm UTC](https://discuss.elastic.co/t/kibana-discover-field-statistics-not-showing/335466 "2023-06-22T21:03:09Z")

</div>

I have some data I am trying to get statistics on (e.g. what percentage of documents have a description?). However, the field statistics are not showing, even when I hit refresh... When I click on one of the fields, …

---

## [Merge 2 Clusters with same name](https://discuss.elastic.co/t/merge-2-clusters-with-same-name/328065)

<div class="topic-metadata">

**Author:** [@devarajsit](https://discuss.elastic.co/u/devarajsit)\
**Replies:** 5\
**Last updated:** [March 21, 2023, 12:09pm UTC](https://discuss.elastic.co/t/merge-2-clusters-with-same-name/328065 "2023-03-21T12:09:20Z")

</div>

Hi Team, Is there any way where we can merge 2 clusters with same name to 1. Scenario is... will have an existing cluster with name xyz and have some data. Will create additional cluster in different nodes with same na…

---

## [Grok pattern for this specific log](https://discuss.elastic.co/t/grok-pattern-for-this-specific-log/296010)

<div class="topic-metadata">

**Author:** [@Mihailo\_Stanarevic](https://discuss.elastic.co/u/Mihailo_Stanarevic)\
**Replies:** 5\
**Last updated:** [February 3, 2022, 4:59pm UTC](https://discuss.elastic.co/t/grok-pattern-for-this-specific-log/296010 "2022-02-03T16:59:00Z")

</div>

I want to filter through this log: \[ ERROR\] 02.04.2016. 20:38:19 (FileManagerServlet:handleDownload) Date and time: Sat Apr 02 20:38:19 CEST 2016| miliseconds: 1459622299268| + session id: D4190DFF52C536C500FAF0947DB120…

---

## [Logstash getting 429 error and data processing getting delayed](https://discuss.elastic.co/t/logstash-getting-429-error-and-data-processing-getting-delayed/288325)

<div class="topic-metadata">

**Author:** [@Sarat\_Khilar](https://discuss.elastic.co/u/Sarat_Khilar)\
**Replies:** 5\
**Last updated:** [November 3, 2021, 3:08pm UTC](https://discuss.elastic.co/t/logstash-getting-429-error-and-data-processing-getting-delayed/288325 "2021-11-03T15:08:52Z")

</div>

We are using Elasticsearch 6.8.2 version. We are manging Elasticsearch cluster through kubernetes. We have 3 master nodes and 25 data nodes. Kubernetes cluster is being setup in bare metal AWS EC2 instance. r4.4xlarge(16…

---

## [How to connect to Elastic App Cloud with API endpoint?](https://discuss.elastic.co/t/how-to-connect-to-elastic-app-cloud-with-api-endpoint/267537)

<div class="topic-metadata">

**Author:** [@Ryan\_Lane](https://discuss.elastic.co/u/Ryan_Lane)\
**Replies:** 5\
**Last updated:** [March 18, 2021, 3:40pm UTC](https://discuss.elastic.co/t/how-to-connect-to-elastic-app-cloud-with-api-endpoint/267537 "2021-03-18T15:40:05Z")

</div>

The documentation and demos use hostIdentifier to connect, but Elastic App only has an API Endpoint under Credentials. There is no Host Identifier. When I take one of the demos, such as the Vue demo (using Hearthstone c…

---

## [APM agent for rails 5.0.5 not sending data](https://discuss.elastic.co/t/apm-agent-for-rails-5-0-5-not-sending-data/157894)

<div class="topic-metadata">

**Author:** [@Abhimanyu\_Kaushal](https://discuss.elastic.co/u/Abhimanyu_Kaushal)\
**Replies:** 5\
**Last updated:** [November 27, 2018, 8:45am UTC](https://discuss.elastic.co/t/apm-agent-for-rails-5-0-5-not-sending-data/157894 "2018-11-27T08:45:55Z")

</div>

I followed this link: https://www.elastic.co/guide/en/apm/agent/ruby/current/getting-started-rails.html for setting up my rails app monitoring. But it is not sending data to my apm-server. apm-server is running fine and …

---

## [Kafka metricbeat module -- correct way to access sarama metrics](https://discuss.elastic.co/t/kafka-metricbeat-module-correct-way-to-access-sarama-metrics/128893)

<div class="topic-metadata">

**Author:** [@Filipe\_Oliveira](https://discuss.elastic.co/u/Filipe_Oliveira)\
**Replies:** 5\
**Last updated:** [April 25, 2018, 5:33pm UTC](https://discuss.elastic.co/t/kafka-metricbeat-module-correct-way-to-access-sarama-metrics/128893 "2018-04-25T17:33:03Z")

</div>

Hi there, I wanted to confirm the manner we access metrics via the sarama library and go-metrics. Considering as an example the Broker related metrics we should have two types of metrics ( meter and histogram ). Coul…

---

## [Build Kibana 5.6.4 release packages on Windows 7/Windows Server 2012](https://discuss.elastic.co/t/build-kibana-5-6-4-release-packages-on-windows-7-windows-server-2012/115048)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 5\
**Last updated:** [January 12, 2018, 2:24pm UTC](https://discuss.elastic.co/t/build-kibana-5-6-4-release-packages-on-windows-7-windows-server-2012/115048 "2018-01-12T14:24:27Z")

</div>

Hi All, I am following the instructions found at https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md running Kibana locally and building release packages on Windows. I am able to run kibana locally on window…

---

## [JSON with comma separated string to multiple tags](https://discuss.elastic.co/t/json-with-comma-separated-string-to-multiple-tags/315111)

<div class="topic-metadata">

**Author:** [@Ranger\_Rick](https://discuss.elastic.co/u/Ranger_Rick)\
**Replies:** 2\
**Last updated:** [October 9, 2022, 1:38am UTC](https://discuss.elastic.co/t/json-with-comma-separated-string-to-multiple-tags/315111 "2022-10-09T01:38:22Z")

</div>

Good evening! I really think this should be easy and straightforward but I am having a heck of a time with it so decided to ask the community. My pipeline accepts daily json files and splits it out and further enriches …

---

## [Elastic Search Query to match Only if Specific value is present](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796)

<div class="topic-metadata">

**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\
**Replies:** 2\
**Last updated:** [May 28, 2022, 11:30am UTC](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796 "2022-05-28T11:30:41Z")

</div>

Hi, I have data like below { "instance": { "items": \[ { "name": "name\_1" }, { "name": "name\_2" } \] } } items is an array and it can contains many values. I am looki…

---

## ["unexpected character at line 1 column 1 of the JSON data" trying to load sample data](https://discuss.elastic.co/t/unexpected-character-at-line-1-column-1-of-the-json-data-trying-to-load-sample-data/162040)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 2\
**Last updated:** [December 25, 2018, 6:48pm UTC](https://discuss.elastic.co/t/unexpected-character-at-line-1-column-1-of-the-json-data-trying-to-load-sample-data/162040 "2018-12-25T18:48:16Z")

</div>

No messages in the browser console. I get the same failure for all of the sample data sets. These seem to be the relevant kibana logs: {"type":"log","@timestamp":"2018-12-25T02:24:38Z","tags":\["warning"\],"pid":6566,"mes…

---

## [Index a new filebeat custom field](https://discuss.elastic.co/t/index-a-new-filebeat-custom-field/137277)

<div class="topic-metadata">

**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\
**Replies:** 2\
**Last updated:** [June 26, 2018, 7:45am UTC](https://discuss.elastic.co/t/index-a-new-filebeat-custom-field/137277 "2018-06-26T07:45:44Z")

</div>

Hi everybody I add a new custom field in my logstash configuration file. it appears in the results on Kibana, but if i try to add a filter on it, i don't find it. \[kibana\_add\_filter\] As you see, in the right picture,…

---

## [Setting up a Separate Monitoring Cluster (kibana,xpack,es, 2 clusters)\[SOLVED\]](https://discuss.elastic.co/t/setting-up-a-separate-monitoring-cluster-kibana-xpack-es-2-clusters-solved/108746)

<div class="topic-metadata">

**Author:** [@Oleg.Borisov](https://discuss.elastic.co/u/Oleg.Borisov)\
**Replies:** 2\
**Last updated:** [November 23, 2017, 9:08am UTC](https://discuss.elastic.co/t/setting-up-a-separate-monitoring-cluster-kibana-xpack-es-2-clusters-solved/108746 "2017-11-23T09:08:03Z")

</div>

Hi folks. I install 2 clusters first is 2 hosts cluster named kibana for storing and analize monitoring data from prod cluster: settings a typical: elasticsearch.yml: cluster.name : "kibana" node.name : "kibana-0x-…

---

## [Start kibana server error](https://discuss.elastic.co/t/start-kibana-server-error/65094)

<div class="topic-metadata">

**Author:** [@licong](https://discuss.elastic.co/u/licong)\
**Replies:** 2\
**Last updated:** [November 8, 2016, 9:27am UTC](https://discuss.elastic.co/t/start-kibana-server-error/65094 "2016-11-08T09:27:17Z")

</div>

kibana4.1.0 start error \[root@es bin\]# ./kibana ./kibana: line 20: /home/big/kibana-4.1.0/bin/../node/bin/node: cannot execute binary file ./kibana: line 20: /home/big/kibana-4.1.0/bin/../node/bin/node: Success How…

---

## [Marvel 2.2.1 downloader](https://discuss.elastic.co/t/marvel-2-2-1-downloader/44629)

<div class="topic-metadata">

**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\
**Replies:** 2\
**Last updated:** [March 17, 2016, 6:35pm UTC](https://discuss.elastic.co/t/marvel-2-2-1-downloader/44629 "2016-03-17T18:35:01Z")

</div>

I see that Marvel 2.2.1 has been released. I would like to download it for offline installation. But I do not see a download URL. For example for Marvel 2.2.0, I see a URL: https://download.elasticsearch.org/elasticsea…

---

## [Search UI with GraphQL Server](https://discuss.elastic.co/t/search-ui-with-graphql-server/319661)

<div class="topic-metadata">

**Author:** [@iany](https://discuss.elastic.co/u/iany)\
**Replies:** 6\
**Last updated:** [December 1, 2022, 2:08pm UTC](https://discuss.elastic.co/t/search-ui-with-graphql-server/319661 "2022-12-01T14:08:10Z")

</div>

I see that Search UI is meant to work with "any backend". Does this include a standard GraphQL server? Also, can someone confirm the exact benefits over a search framework such as Search UI vs a UI library such as MUI o…

---

## [How to hide output from es server](https://discuss.elastic.co/t/how-to-hide-output-from-es-server/40344)

<div class="topic-metadata">

**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\
**Replies:** 6\
**Last updated:** [February 1, 2016, 10:25am UTC](https://discuss.elastic.co/t/how-to-hide-output-from-es-server/40344 "2016-02-01T10:25:00Z")

</div>

Hi all, How can I hide output printed in java client when connecting to ES server?

---

## [Weird error while trying to create S3 Repository using elasticsearch-cloud-aws plugin](https://discuss.elastic.co/t/weird-error-while-trying-to-create-s3-repository-using-elasticsearch-cloud-aws-plugin/22202)

<div class="topic-metadata">

**Author:** [@sagarit2](https://discuss.elastic.co/u/sagarit2)\
**Replies:** 6\
**Last updated:** [February 21, 2015, 12:11am UTC](https://discuss.elastic.co/t/weird-error-while-trying-to-create-s3-repository-using-elasticsearch-cloud-aws-plugin/22202 "2015-02-21T00:11:17Z")

</div>

Hi, We are seeing some weird exception while trying to run Snapshot backup using elasticsearch-cloud-aws plugin. We are running following code which was working fine on ES 1.1 and ES 1.4.1 clusters: …

---

## [Sparse vector embeddings](https://discuss.elastic.co/t/sparse-vector-embeddings/353498)

<div class="topic-metadata">

**Author:** [@mwon](https://discuss.elastic.co/u/mwon)\
**Replies:** 4\
**Last updated:** [February 18, 2024, 3:40pm UTC](https://discuss.elastic.co/t/sparse-vector-embeddings/353498 "2024-02-18T15:40:50Z")

</div>

Hi, Is there any plan to re-introduce sparse vector fields? It was depreciated and there is this discussion about it. I would like to use sparse vectors to search by sparse vector embeddings. For example, I would like…

---

## [Implement Hot-Warm-Cold-Frozen-Delete phases with only one node but multiple storage destinations?](https://discuss.elastic.co/t/implement-hot-warm-cold-frozen-delete-phases-with-only-one-node-but-multiple-storage-destinations/272901)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 12:36pm UTC](https://discuss.elastic.co/t/implement-hot-warm-cold-frozen-delete-phases-with-only-one-node-but-multiple-storage-destinations/272901 "2021-05-13T12:36:32Z")

</div>

Hello We are looking to implement Hot-Warm-Cold-Frozen-Delete phases for a client but the idea is to move the indexes to other storage: For example, keep hot on local SSDs but move frozen to offsite HDDs (just a example…

---

## [X-Pack Platinum License Update](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296)

<div class="topic-metadata">

**Author:** [@abhabhishek](https://discuss.elastic.co/u/abhabhishek)\
**Replies:** 1\
**Last updated:** [February 24, 2021, 9:32am UTC](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296 "2021-02-24T09:32:45Z")

</div>

I am having elastic 6.2 on-prem platinum license which was issued to "abc" and now it is about to expire(will expire on 1March 2021) and hence we have purchased same license but for differe uid&issuesto- "xyz" once I go…

---

## [Storage quantity required for an Elastic SIEM solution](https://discuss.elastic.co/t/storage-quantity-required-for-an-elastic-siem-solution/253582)

<div class="topic-metadata">

**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\
**Replies:** 4\
**Last updated:** [October 29, 2020, 6:22pm UTC](https://discuss.elastic.co/t/storage-quantity-required-for-an-elastic-siem-solution/253582 "2020-10-29T18:22:03Z")

</div>

Hi people, we have an ELK stack for a SIEM solution in our company. We need to ingest data from 10 devices aproximately, and we need to maintan the data for 3 months. We have one firewall which is a heavy log sender. C…

---

## [Checking runner ip connectivity... FAILED](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed/215634)

<div class="topic-metadata">

**Author:** [@sasikumar](https://discuss.elastic.co/u/sasikumar)\
**Replies:** 4\
**Last updated:** [January 21, 2020, 4:47pm UTC](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed/215634 "2020-01-21T16:47:54Z")

</div>

We have already ECE setup on environment and we are trying to add another to existing ECE setup. While installing ECE on the new host we are getting the below errors. Can't connect $RUNNER\_HOST\_IP \[xx.xx.xx.xx:22000\]: …

---

## [What is the correct approach to export xx mil of records from elastic using kibana](https://discuss.elastic.co/t/what-is-the-correct-approach-to-export-xx-mil-of-records-from-elastic-using-kibana/208608)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 4\
**Last updated:** [November 21, 2019, 4:26pm UTC](https://discuss.elastic.co/t/what-is-the-correct-approach-to-export-xx-mil-of-records-from-elastic-using-kibana/208608 "2019-11-21T16:26:29Z")

</div>

For exporting huge amount of data it is recommended to use scroll api , but users of Kibana wants to export milions of record using without this coding. Shall I increase the limits or is there a better approach. Desired …

---

## [Options list vizualization: some unique values of a field are missing in the dropdown list](https://discuss.elastic.co/t/options-list-vizualization-some-unique-values-of-a-field-are-missing-in-the-dropdown-list/174529)

<div class="topic-metadata">

**Author:** [@metlovich97](https://discuss.elastic.co/u/metlovich97)\
**Replies:** 4\
**Last updated:** [April 2, 2019, 1:09pm UTC](https://discuss.elastic.co/t/options-list-vizualization-some-unique-values-of-a-field-are-missing-in-the-dropdown-list/174529 "2019-04-02T13:09:30Z")

</div>

In the dashboard I want to get statistics for a particular value of "analytics instance". However, when I finish typing it, I get the error as if I don't have documents with such a value. I know for certain that I do. Is…

---

## [Grok for Scala](https://discuss.elastic.co/t/grok-for-scala/107343)

<div class="topic-metadata">

**Author:** [@sneha\_krishnamurthy](https://discuss.elastic.co/u/sneha_krishnamurthy)\
**Replies:** 4\
**Last updated:** [November 15, 2017, 7:18am UTC](https://discuss.elastic.co/t/grok-for-scala/107343 "2017-11-15T07:18:48Z")

</div>

How do i use the grok plugin in my Scala code to parse data?

---

## [Using percolator causes INTERNAL\_SERVER\_ERROR with NPE](https://discuss.elastic.co/t/using-percolator-causes-internal-server-error-with-npe/57778)

<div class="topic-metadata">

**Author:** [@Aleksander\_Ciepiela](https://discuss.elastic.co/u/Aleksander_Ciepiela)\
**Replies:** 4\
**Last updated:** [September 4, 2017, 3:19pm UTC](https://discuss.elastic.co/t/using-percolator-causes-internal-server-error-with-npe/57778 "2017-09-04T15:19:26Z")

</div>

Hi, We have a problem using percolator with ElasticSearch v2.3.2. Here is a path how to recreate the error: 1.Create document-test index with mapping: { "document-type": { "properties": { "titl…

---

## [HTTP Plugin port numbers](https://discuss.elastic.co/t/http-plugin-port-numbers/79153)

<div class="topic-metadata">

**Author:** [@rpazhyannur](https://discuss.elastic.co/u/rpazhyannur)\
**Replies:** 4\
**Last updated:** [March 20, 2017, 4:28pm UTC](https://discuss.elastic.co/t/http-plugin-port-numbers/79153 "2017-03-20T16:28:03Z")

</div>

I have two scripts using the HTTP plug listening on different ports (log stash is running on centos on an AWS instance) However, when I post something on one port both scripts are getting the HTTP request. script 1 in…

---

## [Hard limiting factors on memory?](https://discuss.elastic.co/t/hard-limiting-factors-on-memory/70085)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 1\
**Last updated:** [December 29, 2016, 9:22am UTC](https://discuss.elastic.co/t/hard-limiting-factors-on-memory/70085 "2016-12-29T09:22:08Z")

</div>

Are there any limiting factors when picking the amount of memory to give to my elasticsearch nodes?? What I mean is, are there any metrics that would impose a minimum "hard limit" on the amount of memory given to machine…

---

## [Indexing Subtitles and Maintaining Timestamps](https://discuss.elastic.co/t/indexing-subtitles-and-maintaining-timestamps/343708)

<div class="topic-metadata">

**Author:** [@ADarkDividedGem](https://discuss.elastic.co/u/ADarkDividedGem)\
**Replies:** 7\
**Last updated:** [September 26, 2023, 5:32pm UTC](https://discuss.elastic.co/t/indexing-subtitles-and-maintaining-timestamps/343708 "2023-09-26T17:32:00Z")

</div>

I am wanting to index subtitles and also maintain the timestamp data. My initial thought was to make each line of text a document with the start and end timestamps stored as fields for that document. For example the fol…

---

## [Kibana 8.4: How do disable ML , APM, or entire observability app?](https://discuss.elastic.co/t/kibana-8-4-how-do-disable-ml-apm-or-entire-observability-app/316447)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 12:54pm UTC](https://discuss.elastic.co/t/kibana-8-4-how-do-disable-ml-apm-or-entire-observability-app/316447 "2022-10-26T12:54:42Z")

</div>

We run elastic 8.4.3, elasticsearch + kibana. We dont run any "ml", but kibana tries to call elasticsearch ML api: \[2022-10-12T01:19:52.716+00:00\]\[ERROR\]\[plugins.taskManager\] Task ML:saved-objects-sync "ML:saved-object…

---

## [Delete old .kibana index](https://discuss.elastic.co/t/delete-old-kibana-index/190508)

<div class="topic-metadata">

**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\
**Replies:** 1\
**Last updated:** [July 15, 2019, 2:47pm UTC](https://discuss.elastic.co/t/delete-old-kibana-index/190508 "2019-07-15T14:47:07Z")

</div>

I've the following indices on my currently v6.8 cluster. GET \_cat/indices?v&index=.kib\*&h=index index .kibana\_8 .kibana\_7 .kibana\_task\_manager .kibana-6 GET /.kibana\_8 { ".kibana\_8" : { "aliases" : { ".ki…

---

## [How does filebeat traverse a path](https://discuss.elastic.co/t/how-does-filebeat-traverse-a-path/99038)

<div class="topic-metadata">

**Author:** [@hburnswell](https://discuss.elastic.co/u/hburnswell)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 8:18pm UTC](https://discuss.elastic.co/t/how-does-filebeat-traverse-a-path/99038 "2017-09-01T20:18:49Z")

</div>

Hi All, I'm curious about how filebeat behaves on a given path. My goal is to ingest IIS logs as filebeat -\> logstash -\> elasticsearch. The IIS log directory has log files going back to Jan 2016 (1 per day). I am usi…

---

## [Query to find sum of string fields](https://discuss.elastic.co/t/query-to-find-sum-of-string-fields/61354)

<div class="topic-metadata">

**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\
**Replies:** 1\
**Last updated:** [September 23, 2016, 1:07pm UTC](https://discuss.elastic.co/t/query-to-find-sum-of-string-fields/61354 "2016-09-23T13:07:17Z")

</div>

Suppose I have records like this {storename:s1, product:p1, status:available} {storename:s1, product:p2, status:not available} {storename:s1, product:p3, status:available} {storename:s2, product:p1, status:not availabl…

---

## [Indexing pages from local](https://discuss.elastic.co/t/indexing-pages-from-local/57461)

<div class="topic-metadata">

**Author:** [@Neetu](https://discuss.elastic.co/u/Neetu)\
**Replies:** 7\
**Last updated:** [August 17, 2016, 11:37am UTC](https://discuss.elastic.co/t/indexing-pages-from-local/57461 "2016-08-17T11:37:47Z")

</div>

Hi , Iam trying to index pages from local folder and the pages are in different format but iam not sure how i can index those pages . Can anyone please help for the same . Iam using java and trying it in windows. elastic…

---

## [Can ES not to store original keyword content but a mapping num value (4 save space)?](https://discuss.elastic.co/t/can-es-not-to-store-original-keyword-content-but-a-mapping-num-value-4-save-space/215664)

<div class="topic-metadata">

**Author:** [@DeeeFOX](https://discuss.elastic.co/u/DeeeFOX)\
**Replies:** 3\
**Last updated:** [January 20, 2020, 9:29am UTC](https://discuss.elastic.co/t/can-es-not-to-store-original-keyword-content-but-a-mapping-num-value-4-save-space/215664 "2020-01-20T09:29:49Z")

</div>

We use es as tsdb described in my other question and data look like: { "metric": "metric\_name", "@timestamp": "2020-01-01T01:01:01", "t": { "key1": "val1", "key2": "val2" }, "f": { "name1": 1.2, "name2": …

---

## [Filtering nested Data](https://discuss.elastic.co/t/filtering-nested-data/122244)

<div class="topic-metadata">

**Author:** [@open7](https://discuss.elastic.co/u/open7)\
**Replies:** 3\
**Last updated:** [March 4, 2018, 7:38pm UTC](https://discuss.elastic.co/t/filtering-nested-data/122244 "2018-03-04T19:38:27Z")

</div>

Given is the following Data Structure: BSEG \[ { "DMBTR": 402.4, "KOART": "D" }, { "DMBTR": 356.46, "KOART": "S" } \] In Kibana we are able to SUM the both DMBTR Fields with SUM BSEG.DMBTR. But i can't figure out,…

---

## [Unable to get Kibana login page after enabling xpack security](https://discuss.elastic.co/t/unable-to-get-kibana-login-page-after-enabling-xpack-security/280115)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 2\
**Last updated:** [August 1, 2021, 10:57am UTC](https://discuss.elastic.co/t/unable-to-get-kibana-login-page-after-enabling-xpack-security/280115 "2021-08-01T10:57:47Z")

</div>

Hello Team, First I installed unsecured version of Elasticsearch and Kibana on kubernetes using helm charts, which was working fine. Then I enabled security in both of them. Somehow I managed to resolve issues with Elas…

---

## [VIsualize 2 array in data table](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017)

<div class="topic-metadata">

**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\
**Replies:** 2\
**Last updated:** [November 4, 2019, 3:47am UTC](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017 "2019-11-04T03:47:24Z")

</div>

Hi, I'm trying to create a data table visualization from a log that contains 2 arrays. For example, the log has 2 fields which are a and b. In the Discover page, it will show field value a aa,bb,c…

---

## [Vega + Sankey Diagram Color Change](https://discuss.elastic.co/t/vega-sankey-diagram-color-change/191106)

<div class="topic-metadata">

**Author:** [@jeremy.smith](https://discuss.elastic.co/u/jeremy.smith)\
**Replies:** 2\
**Last updated:** [July 19, 2019, 11:44pm UTC](https://discuss.elastic.co/t/vega-sankey-diagram-color-change/191106 "2019-07-19T23:44:05Z")

</div>

Hello All, I followed the example for the Sankey Diagram from the Elastic Blog Post \[ Kibana/Vega Sankey Post. \] . We use a dark theme and I can't seem to find where to update the color of the text. I was able to adju…

---

## [What is this error? is it going to affect anything](https://discuss.elastic.co/t/what-is-this-error-is-it-going-to-affect-anything/176824)

<div class="topic-metadata">

**Author:** [@Ridwan\_Syarifudin](https://discuss.elastic.co/u/Ridwan_Syarifudin)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 6:31am UTC](https://discuss.elastic.co/t/what-is-this-error-is-it-going-to-affect-anything/176824 "2019-04-15T06:31:43Z")

</div>

PUT \_template/product\_template { "index\_patterns": \[ "master\_product\*" \], "settings": { "number\_of\_shards": 1 }, "mappings": { "message": { "properties": { "id\_product": { "type": "integer" }, "code\_product…

---

## [Two aggregations on different filter in same query](https://discuss.elastic.co/t/two-aggregations-on-different-filter-in-same-query/122055)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 2\
**Last updated:** [March 10, 2018, 12:06pm UTC](https://discuss.elastic.co/t/two-aggregations-on-different-filter-in-same-query/122055 "2018-03-10T12:06:46Z")

</div>

I perform two separate request for my aggregations as: For sum of payments of bill number = 3 { "query": { "bool": { "must": \[ {"match": {"num\_ra\_bill\_no": 2 }} \] } }, …

---

## [Mapping type name \[\_mapping\] can't start with '\_'](https://discuss.elastic.co/t/mapping-type-name-mapping-cant-start-with/109672)

<div class="topic-metadata">

**Author:** [@Dannick\_Montanede](https://discuss.elastic.co/u/Dannick_Montanede)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 1:31am UTC](https://discuss.elastic.co/t/mapping-type-name-mapping-cant-start-with/109672 "2017-11-30T01:31:12Z")

</div>

I don't understand why I can't update my index. I always have the same error : org.elasticsearch.indices.InvalidTypeNameException: mapping type name \[\_mapping\] can't start with '\_'

---

## [Same field name and mapping but different "index" options?](https://discuss.elastic.co/t/same-field-name-and-mapping-but-different-index-options/88025)

<div class="topic-metadata">

**Author:** [@Olivier-L](https://discuss.elastic.co/u/Olivier-L)\
**Replies:** 2\
**Last updated:** [June 2, 2017, 12:12pm UTC](https://discuss.elastic.co/t/same-field-name-and-mapping-but-different-index-options/88025 "2017-06-02T12:12:05Z")

</div>

Hello, I use ES 2.4.5 In my type mapping, I would need a field named "title", with type always defined as "string", which would be reused several times in different sub-objects or nested sub-objects (i.e. at differen…

[Previous page](https://discuss.elastic.co/top.md?page=1306&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1308&per_page=50&period=all)
