# Top **URL:** https://discuss.elastic.co/top.md?page=1319&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1320 --- ## [Completion suggest question](https://discuss.elastic.co/t/completion-suggest-question/13283)
**Author:** [@wrongmind](https://discuss.elastic.co/u/wrongmind)\ **Replies:** 8\ **Last updated:** [August 23, 2013, 10:06am UTC](https://discuss.elastic.co/t/completion-suggest-question/13283 "2013-08-23T10:06:18Z")
Hello Everyone, I'm new to elasticsearch and I'm doing some experiments with the completion suggest feature. I was wondering if using a string array as 'input' parameter when indexing, as in the example on the gu… --- ## [Elastic App Search login fails even after correct credentials](https://discuss.elastic.co/t/elastic-app-search-login-fails-even-after-correct-credentials/314616)
**Author:** [@murlidhar\_fichadia](https://discuss.elastic.co/u/murlidhar_fichadia)\ **Replies:** 1\ **Last updated:** [September 17, 2022, 11:09am UTC](https://discuss.elastic.co/t/elastic-app-search-login-fails-even-after-correct-credentials/314616 "2022-09-17T11:09:38Z")
I am unable to login to the Elastic App Search (7.6.0) I see the Request URL in the header is set to localhost:3002. The request to localhost:3002 would fail on the browser as localhost refers to 127.0.0.1 You can see … --- ## [Disable adding match\_field when enriching data in ingest pipeline?](https://discuss.elastic.co/t/disable-adding-match-field-when-enriching-data-in-ingest-pipeline/314132)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 1\ **Last updated:** [September 11, 2022, 3:06pm UTC](https://discuss.elastic.co/t/disable-adding-match-field-when-enriching-data-in-ingest-pipeline/314132 "2022-09-11T15:06:50Z")
I'm trying to use reindex with help of ingest pipeline to enrich my data. I have problem with enrich processor. I have created this policy PUT /\_enrich/policy/ingest-policy { "match": { "indices": "ingest\_two", … --- ## [Lens filling](https://discuss.elastic.co/t/lens-filling/256383)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 6:58pm UTC](https://discuss.elastic.co/t/lens-filling/256383 "2020-11-23T18:58:36Z")
What does this peak mean at current settings? --- ## [Aggregations Percentiles ES 6.2.4 VS ES 6.3.2](https://discuss.elastic.co/t/aggregations-percentiles-es-6-2-4-vs-es-6-3-2/155134)
**Author:** [@p365labs](https://discuss.elastic.co/u/p365labs)\ **Replies:** 1\ **Last updated:** [November 5, 2018, 3:24pm UTC](https://discuss.elastic.co/t/aggregations-percentiles-es-6-2-4-vs-es-6-3-2/155134 "2018-11-05T15:24:02Z")
Hi I have a problems with Percentiles aggregations or better I would like to understand a different behaviour between two different minor versions of Elasticsearch : Problems : find percentiles of this series (10 elemen… --- ## [Populate a dense vector field for only a subset of the documents](https://discuss.elastic.co/t/populate-a-dense-vector-field-for-only-a-subset-of-the-documents/340326)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 4\ **Last updated:** [August 9, 2023, 12:56pm UTC](https://discuss.elastic.co/t/populate-a-dense-vector-field-for-only-a-subset-of-the-documents/340326 "2023-08-09T12:56:58Z")
I have an index of over 10 million documents. On those documents, I want to store an openai (or similar) embedding vector using an indexed dense vector field. I will be using cosine similarity to search through those vec… --- ## [Collect logs from external deployments exposing a domain](https://discuss.elastic.co/t/collect-logs-from-external-deployments-exposing-a-domain/309746)
**Author:** [@thahgr](https://discuss.elastic.co/u/thahgr)\ **Replies:** 4\ **Last updated:** [July 19, 2022, 7:33am UTC](https://discuss.elastic.co/t/collect-logs-from-external-deployments-exposing-a-domain/309746 "2022-07-19T07:33:48Z")
TL;DR I want to ship logs from remote deployments via filebeat or logstash to a central Elastic/Elastic stack via HTTP exposing just domains I have considered two solutions, cant get any to work The setup is as follow… --- ## [Filebeat Elastic Kibana - Json based Log Processing](https://discuss.elastic.co/t/filebeat-elastic-kibana-json-based-log-processing/295224)
**Author:** [@RashidKhan](https://discuss.elastic.co/u/RashidKhan)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 1:25pm UTC](https://discuss.elastic.co/t/filebeat-elastic-kibana-json-based-log-processing/295224 "2022-01-24T13:25:51Z")
Hi Team, I have a log file that has mixed structure, some are multiple line json, some are single line json and some are plain text. My goal is to Parse Json and send to elastic, and ignore the plain text. I read thro… --- ## [Search template](https://discuss.elastic.co/t/search-template/183698)
**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\ **Replies:** 4\ **Last updated:** [June 7, 2019, 4:32am UTC](https://discuss.elastic.co/t/search-template/183698 "2019-06-07T04:32:27Z")
Why is this working GET \_search/template { "source": "{ \\"query\\": { \\"terms\\": {{#toJson}}statuses{{/toJson}} }}", "params": { "statuses" : { "status": \[ "pending", "published" \] } } } but this i… --- ## [Kibana keeps popping new messages on console](https://discuss.elastic.co/t/kibana-keeps-popping-new-messages-on-console/166175)
**Author:** [@nitish\_upadhyay1](https://discuss.elastic.co/u/nitish_upadhyay1)\ **Replies:** 4\ **Last updated:** [January 30, 2019, 2:35pm UTC](https://discuss.elastic.co/t/kibana-keeps-popping-new-messages-on-console/166175 "2019-01-30T14:35:36Z")
Hi Everyone, Greetings. Actually, i have been trying to use latest kibana in a 3 machine cluster. But after configuration, when i try to start kibana and access it from browser, some messages keeps popping on my termin… --- ## [ElasticSearch 5.4.3 and Java 7](https://discuss.elastic.co/t/elasticsearch-5-4-3-and-java-7/165458)
**Author:** [@YohanTaton](https://discuss.elastic.co/u/YohanTaton)\ **Replies:** 4\ **Last updated:** [January 25, 2019, 12:26pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-3-and-java-7/165458 "2019-01-25T12:26:18Z")
Hi guys, We have been using an old version of ELK and our customer has decided to migrate to ELK 5.4.3 but keeping Java 7 for the moment. (Migration to Java 8 is indeed planned, but Java 7 is going to be used for few ye… --- ## [Can't upgrade x-pack and ingest-geoip to 6.2](https://discuss.elastic.co/t/cant-upgrade-x-pack-and-ingest-geoip-to-6-2/119090)
**Author:** [@coda](https://discuss.elastic.co/u/coda)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 5:23pm UTC](https://discuss.elastic.co/t/cant-upgrade-x-pack-and-ingest-geoip-to-6-2/119090 "2018-02-08T17:23:34Z")
If I try to install x-pack it fails saying that it's incompatible. If I try to remove x-pack to install 6.2 and it says it's incompatible also: /usr/share/elasticsearch# ES\_PATH\_CONF=/etc/elasticsearch bin/elasticsearch… --- ## [プラグインへのVisualize表示方法について](https://discuss.elastic.co/t/visualize/103643)
**Author:** [@drumn](https://discuss.elastic.co/u/drumn)\ **Replies:** 4\ **Last updated:** [October 18, 2017, 5:26am UTC](https://discuss.elastic.co/t/visualize/103643 "2017-10-18T05:26:05Z")
ElasticSearch6.0 + kibana6.0でのプラグイン開発について調査しています。 Visualize画面で作成した任意のVisualizeを、プラグイン画面で"id"と"type=visualization"をパラメータに指定して 表示することは可能でしょうか？ kibana/src/core\_plugins/kibana 内のコードを、作成したプラグインフォルダ kibana/plugins/my-plugin… --- ## [My Old, Bad, Data Came Back](https://discuss.elastic.co/t/my-old-bad-data-came-back/24116)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 4\ **Last updated:** [June 23, 2015, 10:33pm UTC](https://discuss.elastic.co/t/my-old-bad-data-came-back/24116 "2015-06-23T22:33:38Z")
Installed ES, the logstash and Kibana bits. Ran some data into it, looked good. Deleted the indices because: did not want the old, bad, data in there. Deleted ES because of an issue with upgrading that may have caus… --- ## [Debugging elasticsearch](https://discuss.elastic.co/t/debugging-elasticsearch/17355)
**Author:** [@HungryHorace](https://discuss.elastic.co/u/HungryHorace)\ **Replies:** 4\ **Last updated:** [May 6, 2014, 7:56pm UTC](https://discuss.elastic.co/t/debugging-elasticsearch/17355 "2014-05-06T19:56:06Z")
I've been following a tuturial here: http://blog.qbox.io/multi-field-partial-word-autocomplete-in-elasticsearch-using-ngrams but when I query for results I only get matches if i use the entire word. Partial word se… --- ## [Configuring multiple metricbeats host instances with one elasticsearch and Kibana system dashboard](https://discuss.elastic.co/t/configuring-multiple-metricbeats-host-instances-with-one-elasticsearch-and-kibana-system-dashboard/290846)
**Author:** [@Brendon\_Fernandes](https://discuss.elastic.co/u/Brendon_Fernandes)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 4:33am UTC](https://discuss.elastic.co/t/configuring-multiple-metricbeats-host-instances-with-one-elasticsearch-and-kibana-system-dashboard/290846 "2021-12-06T04:33:12Z")
Hi, I'm trying to configure system metrics from multiple (3) systems via metricbeats + Elasticsearch \_Kibana (ver 7.15.1 ). However, the index in which it gets into is the default index metricbeat-\* My requirement is to… --- ## [ElasticAPM Unknown Field Mapping](https://discuss.elastic.co/t/elasticapm-unknown-field-mapping/270580)
**Author:** [@happyinteger](https://discuss.elastic.co/u/happyinteger)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 8:18am UTC](https://discuss.elastic.co/t/elasticapm-unknown-field-mapping/270580 "2021-04-22T08:18:20Z")
Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: 7.9.1 APM Agent language and version: rum-js 5.6.3 Browser version: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)… --- ## [Multiple logs to different index - Filebeat](https://discuss.elastic.co/t/multiple-logs-to-different-index-filebeat/256003)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 9:09am UTC](https://discuss.elastic.co/t/multiple-logs-to-different-index-filebeat/256003 "2020-11-20T09:09:38Z")
Hello, I have in one filebeat.yml two paths for two different logs and it works fine but I need to divide to two index. I tried as below: filebeat.inputs: - type: log enabled: true paths: - /var/log/nginx/\*.lo… --- ## [Elastic APM agent break Hybris Backoffice application](https://discuss.elastic.co/t/elastic-apm-agent-break-hybris-backoffice-application/227216)
**Author:** [@Stephan\_Beutel1](https://discuss.elastic.co/u/Stephan_Beutel1)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 11:20am UTC](https://discuss.elastic.co/t/elastic-apm-agent-break-hybris-backoffice-application/227216 "2020-04-09T11:20:21Z")
Elastic APM agent breaks SAP Commerce (Hybris) application. Most of the application works fine after adding the agent, but the Hybris backoffice application is broken. The Hybris backoffice application uses the ZK Frame… --- ## [Date histogram query; count values](https://discuss.elastic.co/t/date-histogram-query-count-values/131279)
**Author:** [@jfdsa](https://discuss.elastic.co/u/jfdsa)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 6:44am UTC](https://discuss.elastic.co/t/date-histogram-query-count-values/131279 "2018-05-11T06:44:25Z")
Hello, I am new to elastic, I am having some problems with queries. I would like to do a date-histogram aggregation like query, where I can specify a time interval and get count values, but for specific values of a fie… --- ## [Minimum\_should\_match appears to default to 0 when not explicitly set](https://discuss.elastic.co/t/minimum-should-match-appears-to-default-to-0-when-not-explicitly-set/130255)
**Author:** [@elavigne](https://discuss.elastic.co/u/elavigne)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 2:08pm UTC](https://discuss.elastic.co/t/minimum-should-match-appears-to-default-to-0-when-not-explicitly-set/130255 "2018-05-02T14:08:29Z")
I'm confused about the behaviour of a query with shoulds. I have the following query on a 6.2.3 cluster: GET reporting\_tags/\_search { "query": { "bool": { "must": \[ {"term": {"source": "analytics"}}… --- ## [How to force a Field to be displayed in several lines](https://discuss.elastic.co/t/how-to-force-a-field-to-be-displayed-in-several-lines/74464)
**Author:** [@khalik](https://discuss.elastic.co/u/khalik)\ **Replies:** 2\ **Last updated:** [February 13, 2017, 8:10am UTC](https://discuss.elastic.co/t/how-to-force-a-field-to-be-displayed-in-several-lines/74464 "2017-02-13T08:10:46Z")
Hello, I am new in Kibana and I would like to display some step / results table in my dashboard. Is it possible to force a field to be displayed in several lines? Or ultimately is it possible to display recursively … --- ## [Running Logstash as a service spawns different processes](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641)
**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\ **Replies:** 2\ **Last updated:** [December 12, 2016, 2:17pm UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641 "2016-12-12T14:17:06Z")
When running logstash as a service on Ubuntu 14.04 using following command:- sudo initctl start logstash Observing that a new logstash process is spawned after every 15 seconds. If logstash has started with process… --- ## [Error watcher input thought the Apache Reverse proxy](https://discuss.elastic.co/t/error-watcher-input-thought-the-apache-reverse-proxy/36347)
**Author:** [@dfr0](https://discuss.elastic.co/u/dfr0)\ **Replies:** 2\ **Last updated:** [December 4, 2015, 5:02am UTC](https://discuss.elastic.co/t/error-watcher-input-thought-the-apache-reverse-proxy/36347 "2015-12-04T05:02:54Z")
Hi all, I try to configure a simple alert witch watcher about my cluster state PUT /\_watcher/watch/cluster\_health\_watch { "trigger" : { "schedule" : { "interval" : "60s" } }, "input" : { "http" : { … --- ## [How can I change my default data from /var/lib/elasticsearch/ to /opt/elasticsearch?](https://discuss.elastic.co/t/how-can-i-change-my-default-data-from-var-lib-elasticsearch-to-opt-elasticsearch/15252)
**Author:** [@asrozar](https://discuss.elastic.co/u/asrozar)\ **Replies:** 2\ **Last updated:** [January 15, 2014, 8:51pm UTC](https://discuss.elastic.co/t/how-can-i-change-my-default-data-from-var-lib-elasticsearch-to-opt-elasticsearch/15252 "2014-01-15T20:51:14Z")
I just upgraded from 90.3 (using tar.gz file) to 90.10 using the rpm. My 90.3 was stored in /opt/elasticsearch, and the /opt is my largest partition, so I need to change this back if I can. Also, now Kibana is not … --- ## [Error: fail to enroll: fail to execute request to fleet-server: status code: 400, fleet-server returned an error: BadRequest](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-status-code-400-fleet-server-returned-an-error-badrequest/302402)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 1:04pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-status-code-400-fleet-server-returned-an-error-badrequest/302402 "2022-04-19T13:04:11Z")
Hello, I am not able to run Fleet on Kubernetes. Here is my config: apiVersion: agent.k8s.elastic.co/v1alpha1 kind: Agent metadata: name: $FLEETSERVERNAME namespace: $NAMESPACE spec: version: 8.1.2 mode: fleet… --- ## [Error parsing timestamp](https://discuss.elastic.co/t/error-parsing-timestamp/275795)
**Author:** [@lani](https://discuss.elastic.co/u/lani)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:31pm UTC](https://discuss.elastic.co/t/error-parsing-timestamp/275795 "2021-06-14T13:31:01Z")
Hi everyone, i have a weird log parsing error I failed to solve, maybe someone here can assist me. I have a docker container shipping logs in this (simple?) format: 2021-06-14 08:30:14 ERROR Some message I am shippin… --- ## [Receiving java.lang.IllegalArgumentException: Failed to derive xcontent while using @Query annotiation](https://discuss.elastic.co/t/receiving-java-lang-illegalargumentexception-failed-to-derive-xcontent-while-using-query-annotiation/194965)
**Author:** [@kbsivacse](https://discuss.elastic.co/u/kbsivacse)\ **Replies:** 1\ **Last updated:** [August 13, 2019, 7:12am UTC](https://discuss.elastic.co/t/receiving-java-lang-illegalargumentexception-failed-to-derive-xcontent-while-using-query-annotiation/194965 "2019-08-13T07:12:00Z")
I'm using below library for my spring-boot app and I'm getting below error while running the query in my Spring repository, @Query(""\_source": {"includes": \["Id","appOwner","empId","status","salary","indicator","created… --- ## [How to retrieve kibana indexes from backup](https://discuss.elastic.co/t/how-to-retrieve-kibana-indexes-from-backup/179137)
**Author:** [@ashnav\_msit](https://discuss.elastic.co/u/ashnav_msit)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 9:55pm UTC](https://discuss.elastic.co/t/how-to-retrieve-kibana-indexes-from-backup/179137 "2019-04-30T21:55:51Z")
I deleted Kibana idexes by following this thread. https://discuss.elastic.co/t/first-time-elk-installation-and-kibana-dashboard-is-red/76810?u=ashnav\_msit isdue How can I retrieve Kibana Dashboards, visualization from b… --- ## [Multiple Thread for ingesting a single file filebeat](https://discuss.elastic.co/t/multiple-thread-for-ingesting-a-single-file-filebeat/174915)
**Author:** [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Replies:** 1\ **Last updated:** [April 2, 2019, 11:49am UTC](https://discuss.elastic.co/t/multiple-thread-for-ingesting-a-single-file-filebeat/174915 "2019-04-02T11:49:09Z")
File size which i am ingesting through filebeat to Elasticsearch is about 70 GB per day but it takes whole day to upload data to elasticsearch is there is any possibility to increase the threads to read a single file or… --- ## [com.google.common.util.concurrent.ExecutionError: java.lang.NoClassDefFoundError: com/carrotsearch/hppc/IntSet](https://discuss.elastic.co/t/com-google-common-util-concurrent-executionerror-java-lang-noclassdeffounderror-com-carrotsearch-hppc-intset/164238)
**Author:** [@Dale](https://discuss.elastic.co/u/Dale)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 7:41am UTC](https://discuss.elastic.co/t/com-google-common-util-concurrent-executionerror-java-lang-noclassdeffounderror-com-carrotsearch-hppc-intset/164238 "2019-01-15T07:41:09Z")
Hi.Recently i try to use ES 2.4.4.But i am getting an Exception when i try to connect java client.I have no idea to solve this.Maven dependencies? I need your help.Thanks. Exception: com.google.common.util.concurrent.… --- ## [Using "Math" aggregation and "Group by filter" together in Visual Builder](https://discuss.elastic.co/t/using-math-aggregation-and-group-by-filter-together-in-visual-builder/161127)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 1\ **Last updated:** [December 20, 2018, 7:28pm UTC](https://discuss.elastic.co/t/using-math-aggregation-and-group-by-filter-together-in-visual-builder/161127 "2018-12-20T19:28:29Z")
I have the data coming in the format (simplified for clarity): { "@timestamp": date, "order": { "status": string, "price": float } } Now, I want to make a time series plot that sums up the order.p… --- ## [Formatting scripted field values](https://discuss.elastic.co/t/formatting-scripted-field-values/702)
**Author:** [@spalger](https://discuss.elastic.co/u/spalger)\ **Replies:** 1\ **Last updated:** [May 19, 2015, 9:05am UTC](https://discuss.elastic.co/t/formatting-scripted-field-values/702 "2015-05-19T09:05:10Z")
Continuing the discussion from Kibana 4 transfer rate line chart: In the nightly builds and in the upcoming 4.1 release of Kibana you can configure formating per field. This includes scripted fields. --- ## [How to update a document using the Elasticsearch Update API when "\_source" is disabled?](https://discuss.elastic.co/t/how-to-update-a-document-using-the-elasticsearch-update-api-when--source-is-disabled/18457)
**Author:** [@Veerapuram\_Varadhan](https://discuss.elastic.co/u/Veerapuram_Varadhan)\ **Replies:** 1\ **Last updated:** [July 3, 2014, 8:50pm UTC](https://discuss.elastic.co/t/how-to-update-a-document-using-the-elasticsearch-update-api-when--source-is-disabled/18457 "2014-07-03T20:50:07Z")
Hi, In my setup, ES is used for only indexing and searching and thus have disabled "\_source" to reduce storage costs and overheads. Our application does a lot of updates and when trying to partially update docume… --- ## [Ansible-elasticsearch - ES 6 compatible?](https://discuss.elastic.co/t/ansible-elasticsearch-es-6-compatible/110540)
**Author:** [@KurtB](https://discuss.elastic.co/u/KurtB)\ **Replies:** 1\ **Last updated:** [December 15, 2017, 3:37pm UTC](https://discuss.elastic.co/t/ansible-elasticsearch-es-6-compatible/110540 "2017-12-15T15:37:50Z")
Hi, I've been using the https://github.com/elastic/ansible-elasticsearch playbook to do deploys and it has been working well for ES-5x. Does anyone know if that project is going to support Elasticsearch 6.x ? I'd be d … --- ## [If-in statement does not work if array has one object \[SOLVED\]](https://discuss.elastic.co/t/if-in-statement-does-not-work-if-array-has-one-object-solved/262818)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [February 1, 2021, 10:30am UTC](https://discuss.elastic.co/t/if-in-statement-does-not-work-if-array-has-one-object-solved/262818 "2021-02-01T10:30:16Z")
Hi, I prepare this question and also find solution after few hours, so I decide to upload question and answer, maybe it will help somebody: QUESTION: I have Filebeat in k8s that sends logs to Logstash. I have namespace… --- ## [Want to set ssl.verification\_mode as none for default fleet output in kibana.yml](https://discuss.elastic.co/t/want-to-set-ssl-verification-mode-as-none-for-default-fleet-output-in-kibana-yml/315098)
**Author:** [@Naveen\_Kumar\_Reddy\_S](https://discuss.elastic.co/u/Naveen_Kumar_Reddy_S)\ **Replies:** 0\ **Last updated:** [September 25, 2022, 11:30am UTC](https://discuss.elastic.co/t/want-to-set-ssl-verification-mode-as-none-for-default-fleet-output-in-kibana-yml/315098 "2022-09-25T11:30:51Z")
HI I am trying to send data from fleet managed Elastic agent to elastic master node with self-signed certificate. The auto generated self signed certificate doesnot have the publicip of the node. So to send data i want … --- ## [Watch with action webhook status struck in "Firing" state](https://discuss.elastic.co/t/watch-with-action-webhook-status-struck-in-firing-state/297485)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 3\ **Last updated:** [February 17, 2022, 2:21pm UTC](https://discuss.elastic.co/t/watch-with-action-webhook-status-struck-in-firing-state/297485 "2022-02-17T14:21:41Z")
I Created a watcher with webhook action in it. When the input section matches it should execute the action which is a webook(Sending logs to ScienceLogic). The action state is showing Firing but we didn't see any logs at… --- ## [Unassigned\_shards":1](https://discuss.elastic.co/t/unassigned-shards-1/273083)
**Author:** [@jeyasingh\_t](https://discuss.elastic.co/u/jeyasingh_t)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 1:40pm UTC](https://discuss.elastic.co/t/unassigned-shards-1/273083 "2021-05-18T13:40:01Z")
Hi, We use 6.8.1 with 3 cluster and got into this situation due to one of the hosts ran out of storage. I used the below command to address the read-only index. curl -X PUT 'http://xxxxxxxxxxxxx:9200/\_all/\_settings -H … --- ## [How to disconnect runner before deleting it?](https://discuss.elastic.co/t/how-to-disconnect-runner-before-deleting-it/194065)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 5:33pm UTC](https://discuss.elastic.co/t/how-to-disconnect-runner-before-deleting-it/194065 "2019-08-06T17:33:58Z")
I'm trying to delete a runner, but the delete button in the platform is grayed out, and it shows the following message: "Disconnect this runner before deleting it." I can't find how to disconnect a runner in the ECE doc… --- ## [Changing file and directory permission for /usr/share/logstash?](https://discuss.elastic.co/t/changing-file-and-directory-permission-for-usr-share-logstash/82819)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 0\ **Last updated:** [April 19, 2017, 5:24am UTC](https://discuss.elastic.co/t/changing-file-and-directory-permission-for-usr-share-logstash/82819 "2017-04-19T05:24:34Z")
Hello. Logstash version : 5.3.0 I am trying to startup logstash with customer user via systemd on RHEL 7. I am doing this due to customer's security compliance. I was able to startup logstash by fixing below env… --- ## [Upgraded to ELK 5.0 - can no longer create Visualizations with Aggregations](https://discuss.elastic.co/t/upgraded-to-elk-5-0-can-no-longer-create-visualizations-with-aggregations/64725)
**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\ **Replies:** 3\ **Last updated:** [December 16, 2016, 1:27pm UTC](https://discuss.elastic.co/t/upgraded-to-elk-5-0-can-no-longer-create-visualizations-with-aggregations/64725 "2016-12-16T13:27:56Z")
I upgraded from ES 2.4 to 5.0 this week. When I try to create Visualizations with Aggregations in Kibana, the only numeric fields that are available to me are the scripted fields and none of the string fields are availa… --- ## [Getting the delta from count](https://discuss.elastic.co/t/getting-the-delta-from-count/50729)
**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\ **Replies:** 3\ **Last updated:** [May 23, 2016, 9:12pm UTC](https://discuss.elastic.co/t/getting-the-delta-from-count/50729 "2016-05-23T21:12:15Z")
I'm not sure if this is possible or not, but I would like to get the delta from the number of items each day. Take for example, day1 had 20 entries. day2 had 30 entries. Is method to get the delta in this situation? … --- ## [What is the meaning of time\_in\_millis in \_node stats](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 6:40pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616 "2020-10-21T18:40:03Z")
sample output GET \_nodes/dev-iad-cluster-data-4/stats/ingest "ingest" : { "total" : { "count" : 0, "time\_in\_millis" : 0, "current" : 0, "failed" : 0 }, what… --- ## [GPO to start Beats not working](https://discuss.elastic.co/t/gpo-to-start-beats-not-working/248626)
**Author:** [@Thelmo\_Henrique\_Sant](https://discuss.elastic.co/u/Thelmo_Henrique_Sant)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 10:18am UTC](https://discuss.elastic.co/t/gpo-to-start-beats-not-working/248626 "2020-09-15T10:18:58Z")
Hi buddies, I am trying to start beat services (filebeat, metricbeat, heartbeat, winlogbeat, auditbeat) using a GPO but I don't know why,it's not working. In Group Policy Management, under "Computer Configuration" I di… --- ## [Elastic node crashes after kibana query - with java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/elastic-node-crashes-after-kibana-query-with-java-lang-outofmemoryerror-java-heap-space/207134)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 5\ **Last updated:** [November 11, 2019, 7:32am UTC](https://discuss.elastic.co/t/elastic-node-crashes-after-kibana-query-with-java-lang-outofmemoryerror-java-heap-space/207134 "2019-11-11T07:32:48Z")
the Query in Kibana is this simple: Metrics: unique count(device\_id.keyword) Buckets: subscription\_code.keyword My cluster is 8 nodes 8core/64G RAM, 31G Heap, Elastic version 6.4.2 \[2019-11-08T15:19:22,118\]… --- ## [Math in watch email](https://discuss.elastic.co/t/math-in-watch-email/198699)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 5\ **Last updated:** [October 7, 2019, 12:33pm UTC](https://discuss.elastic.co/t/math-in-watch-email/198699 "2019-10-07T12:33:08Z")
Hello, I want to do math in my watcher, but i am not able to do it. I have already configured a watcher, that works as it should but the output in the email (ctx.payload.result) looks like this: 16.236 Is it possible… --- ## [Shipping logs from Elasticsearch nodes to Elasticsearch cluster](https://discuss.elastic.co/t/shipping-logs-from-elasticsearch-nodes-to-elasticsearch-cluster/171873)
**Author:** [@sterago](https://discuss.elastic.co/u/sterago)\ **Replies:** 5\ **Last updated:** [March 12, 2019, 2:33pm UTC](https://discuss.elastic.co/t/shipping-logs-from-elasticsearch-nodes-to-elasticsearch-cluster/171873 "2019-03-12T14:33:25Z")
Is there a recommended way to ship the logs produced by Elasticsearch nodes over to the Elasticsearch cluster itself for centralized logging purposes? Thanks in advance for any input --- ## [Regarding executing https elastic search queries](https://discuss.elastic.co/t/regarding-executing-https-elastic-search-queries/53008)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 5\ **Last updated:** [July 28, 2016, 3:55pm UTC](https://discuss.elastic.co/t/regarding-executing-https-elastic-search-queries/53008 "2016-07-28T15:55:13Z")
The elastic search queries are not getting executed using curl command. It's throwing error. Whether https is supported for elastic search. \[2016-06-16 07:45:24,412\]\[WARN \]\[http.netty \] \[Helio\] Caught ex… --- ## [Puppet-elasticsearch module not deploying elasticsearch.yml](https://discuss.elastic.co/t/puppet-elasticsearch-module-not-deploying-elasticsearch-yml/174015)
**Author:** [@Alex\_L](https://discuss.elastic.co/u/Alex_L)\ **Replies:** 6\ **Last updated:** [March 27, 2019, 10:55pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-module-not-deploying-elasticsearch-yml/174015 "2019-03-27T22:55:15Z")
I am trying to manage the elasticsearch.yml file at the default location of /etc/elasticsearch/elasticsearch.yml The following works fine, but isn't what I want: class { 'elasticsearch': version =\> '6.2.4', sta… [Previous page](https://discuss.elastic.co/top.md?page=1318&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1320&per_page=50&period=all)