# Top

**URL:** https://discuss.elastic.co/top.md?page=1310&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1311

---

## [401 error when setting up filebeat google\_workspace integration](https://discuss.elastic.co/t/401-error-when-setting-up-filebeat-google-workspace-integration/338417)

<div class="topic-metadata">

**Author:** [@Nightingale\_John](https://discuss.elastic.co/u/Nightingale_John)\
**Replies:** 7\
**Last updated:** [July 25, 2023, 10:12pm UTC](https://discuss.elastic.co/t/401-error-when-setting-up-filebeat-google-workspace-integration/338417 "2023-07-25T22:12:52Z")

</div>

Hi All, I'm using filebeat (7.17.9) and trying to setup google workspace integration. I've followed all the steps in: I've got a json credential file: { "type": "service\_account", "project\_id": "gwm-168856537013…

---

## [Designing a Kibana Dashboard to Display Only the "Time" Value](https://discuss.elastic.co/t/designing-a-kibana-dashboard-to-display-only-the-time-value/337599)

<div class="topic-metadata">

**Author:** [@abntkpi](https://discuss.elastic.co/u/abntkpi)\
**Replies:** 7\
**Last updated:** [July 24, 2023, 10:09am UTC](https://discuss.elastic.co/t/designing-a-kibana-dashboard-to-display-only-the-time-value/337599 "2023-07-24T10:09:50Z")

</div>

Hello and good time to you all. I receive the following log in Kibana: 64 bytes from 4.2.2.4: icmp\_seq=3 ttl=46 time=116 ms I want to design a dashboard that only displays the value of "time". I was able to easily acco…

---

## [Logstash giving error which is not clear](https://discuss.elastic.co/t/logstash-giving-error-which-is-not-clear/335126)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 7\
**Last updated:** [June 3, 2023, 7:06pm UTC](https://discuss.elastic.co/t/logstash-giving-error-which-is-not-clear/335126 "2023-06-03T19:06:59Z")

</div>

I am getting the following error in logstash-plain.log: \[2023-06-03T01:33:34,256\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2023-06-03T01:33:34,272\]\[INFO \]\[logs…

---

## [Installing elasticsearch 8.6.2 on a windows server with ealsticserach 7.6.1](https://discuss.elastic.co/t/installing-elasticsearch-8-6-2-on-a-windows-server-with-ealsticserach-7-6-1/329281)

<div class="topic-metadata">

**Author:** [@hadi\_farzipour](https://discuss.elastic.co/u/hadi_farzipour)\
**Replies:** 7\
**Last updated:** [April 9, 2023, 5:01am UTC](https://discuss.elastic.co/t/installing-elasticsearch-8-6-2-on-a-windows-server-with-ealsticserach-7-6-1/329281 "2023-04-09T05:01:58Z")

</div>

In our company we have been using Elasticsearch 7.6.1 for two years, right now we need to update it to version 8.6.2, however, we can not move to version 8.6.2 immediately, we need first run Elasticsearch 8.6.2 beside th…

---

## [LDAP Issue](https://discuss.elastic.co/t/ldap-issue/308113)

<div class="topic-metadata">

**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\
**Replies:** 7\
**Last updated:** [July 6, 2022, 6:23am UTC](https://discuss.elastic.co/t/ldap-issue/308113 "2022-07-06T06:23:09Z")

</div>

Hi, We have integrated Active Directory with Elastic and it is working fine and I am able to login to Kibana with my AD user (rb\*\*\*\*). But recently we have seen the issues with elasticsearch , elasticsearch is getting …

---

## [Elastic APM service discovery not working with public API](https://discuss.elastic.co/t/elastic-apm-service-discovery-not-working-with-public-api/305448)

<div class="topic-metadata">

**Author:** [@avinashupadhyaya](https://discuss.elastic.co/u/avinashupadhyaya)\
**Replies:** 7\
**Last updated:** [June 6, 2022, 11:00am UTC](https://discuss.elastic.co/t/elastic-apm-service-discovery-not-working-with-public-api/305448 "2022-06-06T11:00:34Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Logstash crashes out with the following message](https://discuss.elastic.co/t/logstash-crashes-out-with-the-following-message/301215)

<div class="topic-metadata">

**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\
**Replies:** 7\
**Last updated:** [April 11, 2022, 2:25pm UTC](https://discuss.elastic.co/t/logstash-crashes-out-with-the-following-message/301215 "2022-04-11T14:25:26Z")

</div>

Logstash crashes out with the following log message: PS C:\\logstash\\bin\> .\\logstash.bat "Using bundled JDK: ." OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be…

---

## [Lens not showing up fields which are searchable & aggregatable?](https://discuss.elastic.co/t/lens-not-showing-up-fields-which-are-searchable-aggregatable/253551)

<div class="topic-metadata">

**Author:** [@Goodyzain](https://discuss.elastic.co/u/Goodyzain)\
**Replies:** 1\
**Last updated:** [October 28, 2020, 2:57pm UTC](https://discuss.elastic.co/t/lens-not-showing-up-fields-which-are-searchable-aggregatable/253551 "2020-10-28T14:57:57Z")

</div>

Hi i am trying to build a dashboard with lens, i have a index where 1 of the field is both marked as searchable & aggregatable but still it doesn't appear in the lens... Here is the lens, even though the data is the…

---

## [Kibana 7.7 change top left logo](https://discuss.elastic.co/t/kibana-7-7-change-top-left-logo/234449)

<div class="topic-metadata">

**Author:** [@MedAmineLazreg](https://discuss.elastic.co/u/MedAmineLazreg)\
**Replies:** 7\
**Last updated:** [June 19, 2020, 11:37am UTC](https://discuss.elastic.co/t/kibana-7-7-change-top-left-logo/234449 "2020-06-19T11:37:08Z")

</div>

Hello people, is there any solution to replace the kibana logo ? I tried many solutions for kibana 7.X but it didn't work. BTW : I'm using the extracted files to run ELK ( official source ). Thank you !

---

## [Filebeat on docker/kubernetes - delay termination to attempt to clear queue?](https://discuss.elastic.co/t/filebeat-on-docker-kubernetes-delay-termination-to-attempt-to-clear-queue/181944)

<div class="topic-metadata">

**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\
**Replies:** 1\
**Last updated:** [May 21, 2019, 8:50am UTC](https://discuss.elastic.co/t/filebeat-on-docker-kubernetes-delay-termination-to-attempt-to-clear-queue/181944 "2019-05-21T08:50:14Z")

</div>

I have Filebeat running in a sidecar container, alongside my app container, in a Kubernetes pod. They share an attached volume: the app is writing JSON logs and Filebeat is shipping them. I have a daemonset Filebeat ru…

---

## [How to load a json file that contains special characters](https://discuss.elastic.co/t/how-to-load-a-json-file-that-contains-special-characters/67147)

<div class="topic-metadata">

**Author:** [@AussiePete2015](https://discuss.elastic.co/u/AussiePete2015)\
**Replies:** 1\
**Last updated:** [November 30, 2016, 10:25am UTC](https://discuss.elastic.co/t/how-to-load-a-json-file-that-contains-special-characters/67147 "2016-11-30T10:25:36Z")

</div>

Hi all, I have created a json file using Talend to load the text from sas code and transform it into json, I have created an index however, the import fails because the sas code contains many different symbols e.g. {…

---

## [Integrations Page in Kibana is too slow and constantly have timeout erros](https://discuss.elastic.co/t/integrations-page-in-kibana-is-too-slow-and-constantly-have-timeout-erros/336785)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [June 24, 2023, 2:41am UTC](https://discuss.elastic.co/t/integrations-page-in-kibana-is-too-slow-and-constantly-have-timeout-erros/336785 "2023-06-24T02:41:04Z")

</div>

Hello, Almost every time I need to use the Integration pages to add a new Integration to the Elastic Agent or update the current ones I have some issues with being too slow or even timing out. I started using Integrati…

---

## [Filebeat.yml correct configuration on MAC OS - docker autodiscover -- Docker daemon at unix:///var/run/docker.sock](https://discuss.elastic.co/t/filebeat-yml-correct-configuration-on-mac-os-docker-autodiscover-docker-daemon-at-unix-var-run-docker-sock/266923)

<div class="topic-metadata">

**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\
**Replies:** 2\
**Last updated:** [March 28, 2021, 11:38pm UTC](https://discuss.elastic.co/t/filebeat-yml-correct-configuration-on-mac-os-docker-autodiscover-docker-daemon-at-unix-var-run-docker-sock/266923 "2021-03-28T23:38:48Z")

</div>

Guys, I am new to Docker. Am running Docker on my MAC. I've created on my docker-compose file this configuration: filebeat: depends\_on: - kibana - logstash container\_name: fileb…

---

## [Securing users on elasticsearch-oss](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599)

<div class="topic-metadata">

**Author:** [@thegreatpeepee](https://discuss.elastic.co/u/thegreatpeepee)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 9:26am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599 "2020-07-02T09:26:38Z")

</div>

I've combed the docs, but I can't figure out how to secure the default elastic (or any other users) using the elasticsearch-oss install (I'm using 7.6.1) According to https://www.elastic.co/what-is/open-x-pack, x-pack i…

---

## [In Kibana dropdown control is not listing down all the values](https://discuss.elastic.co/t/in-kibana-dropdown-control-is-not-listing-down-all-the-values/182864)

<div class="topic-metadata">

**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\
**Replies:** 2\
**Last updated:** [May 28, 2019, 8:24am UTC](https://discuss.elastic.co/t/in-kibana-dropdown-control-is-not-listing-down-all-the-values/182864 "2019-05-28T08:24:08Z")

</div>

I am using controls -\> Options for having dropdown for a field , for smaller timeframe it's showing the values correctly but, for larger timeframe it's not populating all the values.

---

## [Marvel search latency does not match query time](https://discuss.elastic.co/t/marvel-search-latency-does-not-match-query-time/79597)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 2\
**Last updated:** [March 22, 2017, 2:46pm UTC](https://discuss.elastic.co/t/marvel-search-latency-does-not-match-query-time/79597 "2017-03-22T14:46:36Z")

</div>

I have been testing the length of queries using the linux time command, ex. time curl -s "IPADDRESS:9200/INDEX/\_search?pretty" -d{ES\_QUERY} Some queries appear on the command line end to take anywhere from 1 to 10 se…

---

## [Elasticsearch + Kibana as report tool](https://discuss.elastic.co/t/elasticsearch-kibana-as-report-tool/72519)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 2\
**Last updated:** [January 24, 2017, 2:58pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-as-report-tool/72519 "2017-01-24T14:58:38Z")

</div>

This is a matter of opinion. We currently have reports in BIRT and also in salesforce. Do you think something like Elasticsearch + Kibana could be a replacement? Do I need to go bigger, like Crystal Reports, or somet…

---

## [What is left for 1.6?](https://discuss.elastic.co/t/what-is-left-for-1-6/845)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 2\
**Last updated:** [May 18, 2015, 9:41pm UTC](https://discuss.elastic.co/t/what-is-left-for-1-6/845 "2015-05-18T21:41:45Z")

</div>

I'm waiting with bated breath for index sealing. It looks like there is a bunch of stuff left in 1.6 but I see that you have a habit bumping the release tags sometimes. So what is your sense of a release for 1.6? Weeks? …

---

## [Update api & consistency](https://discuss.elastic.co/t/update-api-consistency/15347)

<div class="topic-metadata">

**Author:** [@revdev\_2](https://discuss.elastic.co/u/revdev_2)\
**Replies:** 2\
**Last updated:** [January 22, 2014, 10:00am UTC](https://discuss.elastic.co/t/update-api-consistency/15347 "2014-01-22T10:00:43Z")

</div>

We have two processes, each running on different machines that operate on an ES cluster. One process indexes a document using write consistency ALL and then makes the document available to the other process right awa…

---

## [Show data in a Dashboard/Visualization only if a condition is met - Anonymization of Data](https://discuss.elastic.co/t/show-data-in-a-dashboard-visualization-only-if-a-condition-is-met-anonymization-of-data/341495)

<div class="topic-metadata">

**Author:** [@JD11](https://discuss.elastic.co/u/JD11)\
**Replies:** 3\
**Last updated:** [August 28, 2023, 7:16am UTC](https://discuss.elastic.co/t/show-data-in-a-dashboard-visualization-only-if-a-condition-is-met-anonymization-of-data/341495 "2023-08-28T07:16:08Z")

</div>

Hi together, I have to create a visualization that MUST only show the data/graphic if a condition is met. More context to this question: In Elasticsearch we have docs containing the stock information of different bicy…

---

## [Display Metric Visualization in Abbrievated Number Format based on condition](https://discuss.elastic.co/t/display-metric-visualization-in-abbrievated-number-format-based-on-condition/246248)

<div class="topic-metadata">

**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\
**Replies:** 3\
**Last updated:** [August 26, 2020, 2:48pm UTC](https://discuss.elastic.co/t/display-metric-visualization-in-abbrievated-number-format-based-on-condition/246248 "2020-08-26T14:48:30Z")

</div>

Hi team, I have a question related to number formatting in kibana. I have created a metric visualization(sum) in Kibana using a number field(Sales). I want to display the metric in abbreviated number format(m or k). I…

---

## [Max Calculation in TSVB over interval](https://discuss.elastic.co/t/max-calculation-in-tsvb-over-interval/214418)

<div class="topic-metadata">

**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\
**Replies:** 3\
**Last updated:** [January 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/max-calculation-in-tsvb-over-interval/214418 "2020-01-10T16:54:47Z")

</div>

Hi, I need to visualize the maximum value of a field during the last 10s. I have to use the TSVB for it (because later I need that value in a bucket script). But I'm having problems with the calculation. I'm using th…

---

## [Elastic-webhook-service not found](https://discuss.elastic.co/t/elastic-webhook-service-not-found/191233)

<div class="topic-metadata">

**Author:** [@t638403](https://discuss.elastic.co/u/t638403)\
**Replies:** 3\
**Last updated:** [July 23, 2019, 5:41pm UTC](https://discuss.elastic.co/t/elastic-webhook-service-not-found/191233 "2019-07-23T17:41:41Z")

</div>

Hi, My elastic web hook service does not seem to work. I followed the guide for installing elk via operator using this guide: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html But I have been so…

---

## [Reverse nested aggregation within nested filter aggregation fails](https://discuss.elastic.co/t/reverse-nested-aggregation-within-nested-filter-aggregation-fails/21748)

<div class="topic-metadata">

**Author:** [@selvinaz\_karahancer8](https://discuss.elastic.co/u/selvinaz_karahancer8)\
**Replies:** 3\
**Last updated:** [January 23, 2015, 9:28am UTC](https://discuss.elastic.co/t/reverse-nested-aggregation-within-nested-filter-aggregation-fails/21748 "2015-01-23T09:28:15Z")

</div>

Hello, I have to realize distinct data queries on data persisted in ElasticSearch. My data model looks like: {"took":15,"timed\_out":false,"\_shards":{"total":1,"successful":1,"failed":0},"hits":{"total":3,"max\_scor…

---

## [Kibana hosts list](https://discuss.elastic.co/t/kibana-hosts-list/272315)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 5\
**Last updated:** [May 10, 2021, 7:53am UTC](https://discuss.elastic.co/t/kibana-hosts-list/272315 "2021-05-10T07:53:01Z")

</div>

Hello, I have several devices that send data to Elastic via HTTP POST. Is it possible to see them on a list somewhere? Maybe in the Security-\> Hosts section? Thank you

---

## [Disk used space is higher than the indices used space](https://discuss.elastic.co/t/disk-used-space-is-higher-than-the-indices-used-space/240025)

<div class="topic-metadata">

**Author:** [@Oxygen\_13](https://discuss.elastic.co/u/Oxygen_13)\
**Replies:** 5\
**Last updated:** [July 6, 2020, 6:34pm UTC](https://discuss.elastic.co/t/disk-used-space-is-higher-than-the-indices-used-space/240025 "2020-07-06T18:34:51Z")

</div>

My elk server is having 1000 GB space. When I check the available space showing 96% utilized. however indices used only 160 GB. Could you please help me how can I clear/delete used space, so that I will have more space. …

---

## [SIEM App does not display Hostnames from Beats Events](https://discuss.elastic.co/t/siem-app-does-not-display-hostnames-from-beats-events/220330)

<div class="topic-metadata">

**Author:** [@cknoell](https://discuss.elastic.co/u/cknoell)\
**Replies:** 5\
**Last updated:** [February 21, 2020, 10:12pm UTC](https://discuss.elastic.co/t/siem-app-does-not-display-hostnames-from-beats-events/220330 "2020-02-21T22:12:36Z")

</div>

Hi, we have some problems using the SIEM App and Displaying Hostnames on the Hosts Page if it comes to a setup where you use: Beats -\> Logstash -\> Logstash -\> Elastic All components are using up to date V7.6.0 Beats…

---

## [Watcher Help](https://discuss.elastic.co/t/watcher-help/122426)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 5\
**Last updated:** [March 6, 2018, 7:28am UTC](https://discuss.elastic.co/t/watcher-help/122426 "2018-03-06T07:28:41Z")

</div>

Hi all, I have been going in circles for hours trying to get a watcher working. I am trying to pick up a payload and send it via webhook to a remote server. The code below gives be an error on the very last curly brace…

---

## [3 nodes cluster](https://discuss.elastic.co/t/3-nodes-cluster/111576)

<div class="topic-metadata">

**Author:** [@Vladislav\_Trayanov](https://discuss.elastic.co/u/Vladislav_Trayanov)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 8:55pm UTC](https://discuss.elastic.co/t/3-nodes-cluster/111576 "2017-12-13T20:55:11Z")

</div>

Hey all, I have a big trouble to understand the best 3 nodes cluster elasticsearch configuration. At the moment I have 3 node cluster with 3 data + master eligible nodes with 4 gigs of JVM and standard HDD. I keep log…

---

## [Filebeat stop writing files(via file output) when the output file gets removed](https://discuss.elastic.co/t/filebeat-stop-writing-files-via-file-output-when-the-output-file-gets-removed/82114)

<div class="topic-metadata">

**Author:** [@sunwl](https://discuss.elastic.co/u/sunwl)\
**Replies:** 5\
**Last updated:** [April 13, 2017, 9:38am UTC](https://discuss.elastic.co/t/filebeat-stop-writing-files-via-file-output-when-the-output-file-gets-removed/82114 "2017-04-13T09:38:41Z")

</div>

The scenario is that I need to read files, make some changes and write the content to another file (say output\_file) via filebeat. Also I had another application(say app2) to do the process-and-remove thing to the output…

---

## [SIREn plugin for nested documents](https://discuss.elastic.co/t/siren-plugin-for-nested-documents/18838)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 5\
**Last updated:** [July 24, 2014, 5:04pm UTC](https://discuss.elastic.co/t/siren-plugin-for-nested-documents/18838 "2014-07-24T17:04:52Z")

</div>

Has anyone else seen this plugin? http://siren.solutions/siren/overview/ There was some discussion between one of the developers and Jorg a while back, so I guess this is the outcome. Have not tried it yet, but I wil…

---

## [TSVB terms visualization](https://discuss.elastic.co/t/tsvb-terms-visualization/269843)

<div class="topic-metadata">

**Author:** [@oshtman](https://discuss.elastic.co/u/oshtman)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 10:25am UTC](https://discuss.elastic.co/t/tsvb-terms-visualization/269843 "2021-04-20T10:25:26Z")

</div>

Hi, I'm fairly new to Kibana and I'm attempting to setup a visualization where I have fields of the form ("my\_field\_name" + "custom\_part"): my\_field\_name\_custom\_part1=true my\_field\_name\_custom\_part1=false ... etc W…

---

## [Create Grok filter date](https://discuss.elastic.co/t/create-grok-filter-date/222285)

<div class="topic-metadata">

**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 3:46pm UTC](https://discuss.elastic.co/t/create-grok-filter-date/222285 "2020-03-06T15:46:17Z")

</div>

Hi everyone, I tried to parse date from this line Wed Nov 27 07:31:40 CET 2019;User123;NEWPORT.WEBSERVICE.EXAMPLE like that in grok filter grok { match =\> {"message" =\> \["%{GREEDYDATA:date};%{USER:user};%{GRE…

---

## [Set default index with curl command](https://discuss.elastic.co/t/set-default-index-with-curl-command/220578)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 4\
**Last updated:** [February 25, 2020, 6:18pm UTC](https://discuss.elastic.co/t/set-default-index-with-curl-command/220578 "2020-02-25T18:18:09Z")

</div>

Hi! I imported some dashboards to a fresh kibana helm deployment (7.0.1 version) but when I am going to open a dashboard, kibana asks to set the default index. How can I set the default index with a curl command? Than…

---

## [Filebeat to Logstash - Error parsing csv](https://discuss.elastic.co/t/filebeat-to-logstash-error-parsing-csv/127665)

<div class="topic-metadata">

**Author:** [@spacepacket](https://discuss.elastic.co/u/spacepacket)\
**Replies:** 4\
**Last updated:** [April 24, 2018, 10:25pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-error-parsing-csv/127665 "2018-04-24T22:25:13Z")

</div>

I have recently added Filebeat to our ELK stack to read logs and send the data to Logstash. Every so often, Logstash prints the following an "Error parsing csv" error. The result is that we get corrupt data in the databa…

---

## [Compare two fields](https://discuss.elastic.co/t/compare-two-fields/110088)

<div class="topic-metadata">

**Author:** [@pope843](https://discuss.elastic.co/u/pope843)\
**Replies:** 4\
**Last updated:** [December 4, 2017, 7:23am UTC](https://discuss.elastic.co/t/compare-two-fields/110088 "2017-12-04T07:23:35Z")

</div>

Hello Guys, Just want to know if below condition will work or possible? filter { ruby { code =\> " event.set('dateko', Time.now.strftime('%Y-%m-%d')) " } if \[dateko\] not in \[message\] { ....... } }

---

## [Range et execution](https://discuss.elastic.co/t/range-et-execution/62144)

<div class="topic-metadata">

**Author:** [@ChristopheBoucaut](https://discuss.elastic.co/u/ChristopheBoucaut)\
**Replies:** 4\
**Last updated:** [October 6, 2016, 7:36am UTC](https://discuss.elastic.co/t/range-et-execution/62144 "2016-10-06T07:36:24Z")

</div>

Bonjour, Dans Elasticsearch 1.7, il était possible de préciser l'exécution pour un filtre de type range (la doc). Passant sous ES2, j'ai eu cette erreur : "reason": "\[range\] query does not support \[execution\]" avec c…

---

## [Strange results in score calculation App Search](https://discuss.elastic.co/t/strange-results-in-score-calculation-app-search/286350)

<div class="topic-metadata">

**Author:** [@sanderunive](https://discuss.elastic.co/u/sanderunive)\
**Replies:** 3\
**Last updated:** [October 15, 2021, 8:58am UTC](https://discuss.elastic.co/t/strange-results-in-score-calculation-app-search/286350 "2021-10-15T08:58:25Z")

</div>

Hi all, thanks for taking the time to read my question. Quite new to the App Search, our Dutch insurance company just went live with the 7.14.1 version. We are checking search terms and desired results and in that proce…

---

## [Scoring tagged documents with custom scores](https://discuss.elastic.co/t/scoring-tagged-documents-with-custom-scores/231224)

<div class="topic-metadata">

**Author:** [@Charles\_Lariviere](https://discuss.elastic.co/u/Charles_Lariviere)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 9:03pm UTC](https://discuss.elastic.co/t/scoring-tagged-documents-with-custom-scores/231224 "2020-05-07T21:03:14Z")

</div>

Hey folks, We're interested in customizing ElasticSearch relevance scoring by using our own relevance values for each tag that was added to a document. We're still early in our exploration process but would appreciate s…

---

## [Adding custom field in fields.yml in APM](https://discuss.elastic.co/t/adding-custom-field-in-fields-yml-in-apm/245961)

<div class="topic-metadata">

**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\
**Replies:** 1\
**Last updated:** [August 24, 2020, 6:04am UTC](https://discuss.elastic.co/t/adding-custom-field-in-fields-yml-in-apm/245961 "2020-08-24T06:04:17Z")

</div>

Kibana version: 7.8 Elasticsearch version: 7.8 APM Server version: 7.7 APM Agent language and version: Java 1.9.0 Browser version: chrome Original install method (e.g. download page, yum, deb, from source, etc.) and…

---

## [Elasticsearch - Snapshot having unassigned shards and Repository verification exception](https://discuss.elastic.co/t/elasticsearch-snapshot-having-unassigned-shards-and-repository-verification-exception/163749)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 1\
**Last updated:** [January 13, 2019, 12:31pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-having-unassigned-shards-and-repository-verification-exception/163749 "2019-01-13T12:31:36Z")

</div>

Hi, I am working on backing up my indexes present in my cluster. I have a dedicated master node and two data nodes. My configuration file in all nodes contains " path.repo: \["/u01/backup"\] ". Firstly, I created a …

---

## [Logstash-input-jms and solace issue](https://discuss.elastic.co/t/logstash-input-jms-and-solace-issue/133899)

<div class="topic-metadata">

**Author:** [@sachin\_frayne](https://discuss.elastic.co/u/sachin_frayne)\
**Replies:** 1\
**Last updated:** [June 4, 2018, 8:58pm UTC](https://discuss.elastic.co/t/logstash-input-jms-and-solace-issue/133899 "2018-06-04T20:58:07Z")

</div>

I am trying to connect the logstash jms input plugin to a Solace PubSub topic with no luck. The resources I have used: Solace PubSub Docker in amazon linux: https://docs.solace.com/Solace-SW-Broker-Set-Up/Docker-Conta…

---

## [NoMethodError: undefined method \`start\_with?' for nil:NilClass](https://discuss.elastic.co/t/nomethoderror-undefined-method-start-with-for-nil-nilclass/35139)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [November 25, 2015, 10:28am UTC](https://discuss.elastic.co/t/nomethoderror-undefined-method-start-with-for-nil-nilclass/35139 "2015-11-25T10:28:57Z")

</div>

Hi, I am trying to send logs to zabbix server using logstash zabbix output. Sample log file contents 2015-11-11 10:27:40.8798 FATAL Some Service Providers are missing data required by FAS: TestServiceProvider-7 2015-1…

---

## [Search "took" time vs NodeStats.indices.search.query\_time\_in\_millis](https://discuss.elastic.co/t/search-took-time-vs-nodestats-indices-search-query-time-in-millis/7128)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 1\
**Last updated:** [March 27, 2012, 1:11pm UTC](https://discuss.elastic.co/t/search-took-time-vs-nodestats-indices-search-query-time-in-millis/7128 "2012-03-27T13:11:07Z")

</div>

Hi, what should be the relation between search response "took" value and incremental change reported by NodeStats.indices.search.query\_time\_in\_millis ? Should they be in sync? I am testing it with 0.19.0 and I can …

---

## [Chart pie count field](https://discuss.elastic.co/t/chart-pie-count-field/112462)

<div class="topic-metadata">

**Author:** [@radi](https://discuss.elastic.co/u/radi)\
**Replies:** 6\
**Last updated:** [December 20, 2017, 3:01pm UTC](https://discuss.elastic.co/t/chart-pie-count-field/112462 "2017-12-20T15:01:25Z")

</div>

hello, I have a pie of count split terms and I want make addition of some fields of this aggregation exemple i have count of (women , men ,child girls, child boy ) but i have to make pie with count of (women+ child gi…

---

## [Could not find gem 'logstash-devutils' in any of the gem sources listed in your Gemfile](https://discuss.elastic.co/t/could-not-find-gem-logstash-devutils-in-any-of-the-gem-sources-listed-in-your-gemfile/94638)

<div class="topic-metadata">

**Author:** [@Shalini\_Goel](https://discuss.elastic.co/u/Shalini_Goel)\
**Replies:** 0\
**Last updated:** [July 26, 2017, 12:23pm UTC](https://discuss.elastic.co/t/could-not-find-gem-logstash-devutils-in-any-of-the-gem-sources-listed-in-your-gemfile/94638 "2017-07-26T12:23:24Z")

</div>

Hi All, I am new to Ruby and I was trying to run "bundle install" for logstash-filter-example plugin(git clone https://github.com/logstash-plugins/logstash-filter-example.git) using logstash 2.3 . I am getting below …

---

## [Install Certificate .PFX](https://discuss.elastic.co/t/install-certificate-pfx/314444)

<div class="topic-metadata">

**Author:** [@ojeffu](https://discuss.elastic.co/u/ojeffu)\
**Replies:** 2\
**Last updated:** [September 19, 2022, 5:16pm UTC](https://discuss.elastic.co/t/install-certificate-pfx/314444 "2022-09-19T17:16:52Z")

</div>

Hi, I'm new here and I have some questions. I need to install a client generated certificate on your linux server. Its format is PFX, how do I convert it to an acceptable format? Another point, should it be installed …

---

## [Elasticsearch and Microsoft Windows Enterprise Certificate Authority](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764)

<div class="topic-metadata">

**Author:** [@Ryan\_Porter](https://discuss.elastic.co/u/Ryan_Porter)\
**Replies:** 2\
**Last updated:** [July 26, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764 "2022-07-26T13:25:30Z")

</div>

I'm at a bit of a loss here. I'm attempting to secure the Elastic Stack with certs generated by our organization’s Microsoft Enterprise Certificate Authority. Elasticsearch will happily start, but when I attempt to gener…

---

## [Create a pie chart from multiple searches](https://discuss.elastic.co/t/create-a-pie-chart-from-multiple-searches/130009)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 2\
**Last updated:** [April 30, 2018, 2:16pm UTC](https://discuss.elastic.co/t/create-a-pie-chart-from-multiple-searches/130009 "2018-04-30T14:16:50Z")

</div>

Hi, I have a few searches saved from discovery, i\`d like to create some pie charts that contain multiple saved searches, how can i accomplish this? Regards,

---

## [Looking for a way to show a "green/yellow/red" type of visual based on range](https://discuss.elastic.co/t/looking-for-a-way-to-show-a-green-yellow-red-type-of-visual-based-on-range/128723)

<div class="topic-metadata">

**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\
**Replies:** 2\
**Last updated:** [April 19, 2018, 9:59pm UTC](https://discuss.elastic.co/t/looking-for-a-way-to-show-a-green-yellow-red-type-of-visual-based-on-range/128723 "2018-04-19T21:59:29Z")

</div>

How did you show green/yellow/red indicators using Kibana or even Vega? seeking ideas. Even better if the range can be dynamic calculated based on average/max of a field. For example: My data is a bunch of numbers. I …

[Previous page](https://discuss.elastic.co/top.md?page=1309&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1311&per_page=50&period=all)
