# Top **URL:** https://discuss.elastic.co/top.md?page=132&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 133 --- ## [uberAgent Index Rollover - Steps](https://discuss.elastic.co/t/uberagent-index-rollover-steps/151668)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 10\ **Last updated:** [October 19, 2018, 4:30pm UTC](https://discuss.elastic.co/t/uberagent-index-rollover-steps/151668 "2018-10-19T16:30:42Z")
I've been working on rolling over an already established index that we have called uberAgent in our stack and I'm clearly misunderstanding the steps referenced in the Rollover Index docs. I've started out with a basic G… --- ## [Clone cluster with Logstash](https://discuss.elastic.co/t/clone-cluster-with-logstash/320551)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 19\ **Last updated:** [December 9, 2022, 9:44am UTC](https://discuss.elastic.co/t/clone-cluster-with-logstash/320551 "2022-12-09T09:44:25Z")
Hey Everyone, We're trying to figure out the best way to clone a cluster completely, and Logstash seems to be the best option on a large scale as there's no need to use a custom solution. An example configuration of wh… --- ## [Elasticsearch shows points outside boundingbox nest](https://discuss.elastic.co/t/elasticsearch-shows-points-outside-boundingbox-nest/188130)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 28\ **Last updated:** [July 20, 2019, 11:11am UTC](https://discuss.elastic.co/t/elasticsearch-shows-points-outside-boundingbox-nest/188130 "2019-07-20T11:11:36Z")
I use Bounding Box in elasticsearch but, I get points outside of box ,it never shows points inside this box. this my Code: var response = \_elasticClient.Search\( s =\> s.From((mod… --- ## [Unexpected "too many FDs" error on local ES cluster](https://discuss.elastic.co/t/unexpected-too-many-fds-error-on-local-es-cluster/181310)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 12\ **Last updated:** [May 31, 2019, 12:35pm UTC](https://discuss.elastic.co/t/unexpected-too-many-fds-error-on-local-es-cluster/181310 "2019-05-31T12:35:15Z")
I have elasticsearch 6.4.2 running on Mac, inside a container (Docker Desktop). I have about 240 indices and 1100 shards with 0 replicas set. I probably have 100k docs at max (can't say exact count because the cluster is… --- ## [Issue with Parsing multiline log in together with filebeat multiline config and logstash](https://discuss.elastic.co/t/issue-with-parsing-multiline-log-in-together-with-filebeat-multiline-config-and-logstash/234566)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 23\ **Last updated:** [June 3, 2020, 5:57am UTC](https://discuss.elastic.co/t/issue-with-parsing-multiline-log-in-together-with-filebeat-multiline-config-and-logstash/234566 "2020-06-03T05:57:13Z")
I have the below multiline log: 2020-05-27 11:59:17 ---------------------------------------------------------------------- 2020-05-27 11:59:17 Got context 2020-05-27 11:59:17 Raw context: EMAIL=abc.d… --- ## [How to work Agent policy witn APM Integration](https://discuss.elastic.co/t/how-to-work-agent-policy-witn-apm-integration/321997)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 16\ **Last updated:** [February 6, 2023, 4:05pm UTC](https://discuss.elastic.co/t/how-to-work-agent-policy-witn-apm-integration/321997 "2023-02-06T16:05:15Z")
Hello friends, I'm a bit confused, I have 2 agent policies and 2 APM integrations, the first agent policy is by default and this one has 2 integrations "Elastic APM" and "Fleet-server" and another policy that I created w… --- ## [Enrich Policy Execute Unable to Find Source Index](https://discuss.elastic.co/t/enrich-policy-execute-unable-to-find-source-index/302750)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 14\ **Last updated:** [April 20, 2022, 6:08pm UTC](https://discuss.elastic.co/t/enrich-policy-execute-unable-to-find-source-index/302750 "2022-04-20T18:08:57Z")
Hello, I am trying to familiarize myself with the Enrich Policy. I have set up a source index and an enrich policy. When I go to execute the enrich policy I receive a "index\_not\_found\_exception". I have posted some sho… --- ## [How to disable http in elasticsearch](https://discuss.elastic.co/t/how-to-disable-http-in-elasticsearch/248359)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 14\ **Last updated:** [September 16, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-disable-http-in-elasticsearch/248359 "2020-09-16T06:14:40Z")
How to disable http on data or master nodes , how to specify in cr file. Please anyone help me out. --- ## [One elastic node fills up prior to the others?](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276)
**Author:** [@Jcroy](https://discuss.elastic.co/u/Jcroy)\ **Replies:** 13\ **Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276 "2021-04-20T13:48:39Z")
Am I missing a policy or something? I have a 8 node cluster. 3k Winlogbeat agents reporting in. I ran winlogbeat setup -e to get the template installed. I've reviewed logs and nothing related to allocation seems to be in… --- ## [Elasticsearch crashes after a few minutes on VM](https://discuss.elastic.co/t/elasticsearch-crashes-after-a-few-minutes-on-vm/300487)
**Author:** [@fidegnon](https://discuss.elastic.co/u/fidegnon)\ **Replies:** 10\ **Last updated:** [March 30, 2022, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-after-a-few-minutes-on-vm/300487 "2022-03-30T09:31:50Z")
I have two identical VM where ELK 6.6.2 is running, they are independent and not configured as a cluster. On one Elasticsearch is running fine, on the other Elasticsearch crashes a few minutes after starting. Here is t… --- ## [ElasticSearch custom index and mapping | local json data visualization issue](https://discuss.elastic.co/t/elasticsearch-custom-index-and-mapping-local-json-data-visualization-issue/344571)
**Author:** [@Srini-99](https://discuss.elastic.co/u/Srini-99)\ **Replies:** 11\ **Last updated:** [October 11, 2023, 2:34am UTC](https://discuss.elastic.co/t/elasticsearch-custom-index-and-mapping-local-json-data-visualization-issue/344571 "2023-10-11T02:34:42Z")
Hi! I have setup elasticsearch, kibana, filebeat. With the other beats, i am able to collect logs and visualize them. But i want to be able to upload logs that are in json format and visualize them. The logs that i wa… --- ## [1 of 21 shards failed](https://discuss.elastic.co/t/1-of-21-shards-failed/276797)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 13\ **Last updated:** [July 1, 2021, 4:27pm UTC](https://discuss.elastic.co/t/1-of-21-shards-failed/276797 "2021-07-01T16:27:51Z")
Привет товарищи! Ни у кого не вываливалось подобное сообщение в Кибане (1 of 21 shards failed)? Оно возникает когда включаю визуализацию 3х таблиц с логами nginx с выборкой за +-3 часа (не только с ним проблема) и когда … --- ## [Why filebeat pipelines disappoint or SIEM missing authentication patterns](https://discuss.elastic.co/t/why-filebeat-pipelines-disappoint-or-siem-missing-authentication-patterns/307308)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 12\ **Last updated:** [August 23, 2022, 9:34am UTC](https://discuss.elastic.co/t/why-filebeat-pipelines-disappoint-or-siem-missing-authentication-patterns/307308 "2022-08-23T09:34:21Z")
Filebeat has a lot of modules and I like it but I can see that its approach to log parsing is chaotic. Almost all tests I can find for testing ingest pipelines on github missing example of messages about successful or fa… --- ## [Elasticsearch remove fields](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 12\ **Last updated:** [November 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442 "2021-11-22T14:27:22Z")
Hello! i'm using: elasticsearch 7.13.2 kibana 7.12.1 I am trying to remove index pattern fields in kibana -\> dev tools using the following command POST /mdaemon\_test\_array\_2\_step-2021.11.16\_test\_reindex/\_update\_by\_… --- ## [Cross\_fields and boost - Is it feasible?](https://discuss.elastic.co/t/cross-fields-and-boost-is-it-feasible/134219)
**Author:** [@lapilit](https://discuss.elastic.co/u/lapilit)\ **Replies:** 14\ **Last updated:** [June 7, 2018, 12:42pm UTC](https://discuss.elastic.co/t/cross-fields-and-boost-is-it-feasible/134219 "2018-06-07T12:42:33Z")
Does it work-as-expected in common sense, when boosting individual fields of cross\_fields query? It looks like the following page states it's impractical to use boosting of cross\_fields query: Note that cross\_fields i… --- ## [Distrubuted Trace wrong order in timeline](https://discuss.elastic.co/t/distrubuted-trace-wrong-order-in-timeline/179557)
**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\ **Replies:** 20\ **Last updated:** [May 7, 2019, 11:25am UTC](https://discuss.elastic.co/t/distrubuted-trace-wrong-order-in-timeline/179557 "2019-05-07T11:25:57Z")
Hi, I test a simple use case. A Jms client sends message to a listener and get a result from it. The testcase and the expected trace is shown below. ( I use the Elk stack 7.0.1 and apm agent 1.6.1 with oracle jdk 8 ) … --- ## [Elasticsearch stops in minutes when restarted](https://discuss.elastic.co/t/elasticsearch-stops-in-minutes-when-restarted/198221)
**Author:** [@lmqnam](https://discuss.elastic.co/u/lmqnam)\ **Replies:** 17\ **Last updated:** [September 9, 2019, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-stops-in-minutes-when-restarted/198221 "2019-09-09T06:56:07Z")
When I restart Elasticsearch, it stops more than 10 minutes at "logger":"o.e.g.GatewayService", "log":"recovered \[0\] indices into cluster\_state" I don't know the root cause. Please help me. Thanks for your time! {"type… --- ## [Getting grokparsefailure with Bro logs, even though everything parses....?](https://discuss.elastic.co/t/getting-grokparsefailure-with-bro-logs-even-though-everything-parses/98969)
**Author:** [@Blaxican707](https://discuss.elastic.co/u/Blaxican707)\ **Replies:** 11\ **Last updated:** [September 7, 2017, 8:00am UTC](https://discuss.elastic.co/t/getting-grokparsefailure-with-bro-logs-even-though-everything-parses/98969 "2017-09-07T08:00:54Z")
I’m parsing Bro Logs and currently everything is working perfectly, EXCEPT that I am receiving grokparsefailures. Everything is moved over into logstash, I confirmed by looking into the stdout log and then i match it wit… --- ## [How to use logstash filter](https://discuss.elastic.co/t/how-to-use-logstash-filter/68671)
**Author:** [@JohnnyS](https://discuss.elastic.co/u/JohnnyS)\ **Replies:** 9\ **Last updated:** [December 21, 2016, 8:41am UTC](https://discuss.elastic.co/t/how-to-use-logstash-filter/68671 "2016-12-21T08:41:02Z")
Hi As I'm new to Logstash I just wanted to ask you some filter questions, probably you guys will be able to help me on this and get me starting... These are the logs I'm sending to Logstash (example): "message" … --- ## [Loading Sample Data Error unavailable\_shards\_exception](https://discuss.elastic.co/t/loading-sample-data-error-unavailable-shards-exception/131912)
**Author:** [@Harshal\_Yeole](https://discuss.elastic.co/u/Harshal_Yeole)\ **Replies:** 19\ **Last updated:** [May 15, 2018, 2:24pm UTC](https://discuss.elastic.co/t/loading-sample-data-error-unavailable-shards-exception/131912 "2018-05-15T14:24:26Z")
Hi, ELK Stack version: 6.2.4 I am using Loading Sample Data..and I have managed to create the mapping using curls calls provided but when I hit \`curl -H 'Content-Type: application/x-ndjson' -XPOST 'localhost:9200/bank… --- ## [Metric visualization shows no results instead of 0 in count aggregation with terms exclusion](https://discuss.elastic.co/t/metric-visualization-shows-no-results-instead-of-0-in-count-aggregation-with-terms-exclusion/251794)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 12\ **Last updated:** [October 15, 2020, 9:41am UTC](https://discuss.elastic.co/t/metric-visualization-shows-no-results-instead-of-0-in-count-aggregation-with-terms-exclusion/251794 "2020-10-15T09:41:11Z")
Hi, I've created a Metric visualization with 2 metrics: Top hit aggregation on "name" field that I have Count aggregation On top of that I created a filter to get only the results from the recent minute. So, I get a… --- ## [Large (stored) fields, json source and highlighting](https://discuss.elastic.co/t/large-stored-fields-json-source-and-highlighting/3213)
**Author:** [@Tomislav\_Poljak](https://discuss.elastic.co/u/Tomislav_Poljak)\ **Replies:** 18\ **Last updated:** [August 13, 2010, 3:20pm UTC](https://discuss.elastic.co/t/large-stored-fields-json-source-and-highlighting/3213 "2010-08-13T15:20:00Z")
Hi, I really like all the features stored json (enabled \_source) provides in both Java API (used it in indexing/updating) and REST API (used it for searching). I do however have one possible request for improvemen… --- ## [Installing Elasticsearch on Azure Vm Scaleset](https://discuss.elastic.co/t/installing-elasticsearch-on-azure-vm-scaleset/153481)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 13\ **Last updated:** [November 5, 2018, 8:34pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-azure-vm-scaleset/153481 "2018-11-05T20:34:56Z")
i am trying to Configure Elasticsearch on Red Hat Enterprise Linux Server release 7.3 (Maipo) with Azure VM Scaleset, service is unable to start, can someone please help me with it, Thanks. sudo systemctl status elastic… --- ## [Snapshot Restore from s3 or fs](https://discuss.elastic.co/t/snapshot-restore-from-s3-or-fs/77639)
**Author:** [@Srivastavark](https://discuss.elastic.co/u/Srivastavark)\ **Replies:** 11\ **Last updated:** [March 8, 2017, 2:55pm UTC](https://discuss.elastic.co/t/snapshot-restore-from-s3-or-fs/77639 "2017-03-08T14:55:35Z")
Hello Experts, I am working on ES upgrade from 1.4.4 to 2.4.0 and want to migrate single index data(250 GB) from cluster A(1.4.4) to Cluster B(2.4.0). Earlier i have taken snapshot on S3 and tried to restore in Clus… --- ## [Using Scripts for Documents Updating](https://discuss.elastic.co/t/using-scripts-for-documents-updating/85968)
**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Replies:** 9\ **Last updated:** [May 23, 2017, 6:45am UTC](https://discuss.elastic.co/t/using-scripts-for-documents-updating/85968 "2017-05-23T06:45:26Z")
Hi, i'm just trying to use script because i want to update by 1 my field data. I want to make a request like this: curl -XPOST 'http://localhost:9200/asl/tot/2/\_update' -d '{"script" : "ctx.\_source.conta += 1"}' an… --- ## [Ip type and support for a port?](https://discuss.elastic.co/t/ip-type-and-support-for-a-port/18988)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 9\ **Last updated:** [July 31, 2014, 6:17pm UTC](https://discuss.elastic.co/t/ip-type-and-support-for-a-port/18988 "2014-07-31T18:17:06Z")
Hi all, I'm trying to use the ip type in ES, but my IPs also have ports. That doesn't seem to be supported, which was a bit of a surprise! Does anyone know of a way to do this? Or does it sound like a good featu… --- ## [Failed date from field](https://discuss.elastic.co/t/failed-date-from-field/43294)
**Author:** [@hursto75](https://discuss.elastic.co/u/hursto75)\ **Replies:** 12\ **Last updated:** [March 3, 2016, 2:49pm UTC](https://discuss.elastic.co/t/failed-date-from-field/43294 "2016-03-03T14:49:23Z")
I have the conf file reading data but still getting exceptions to my CSV Timestamp issues. Is this the proper ISO8601 format? 2016-02-21T04:15:04.290 Failed parsing date from field {:field=\>"mydatetime", :value=\>"2016-0… --- ## [Elastica - PHP client for elasticsearch](https://discuss.elastic.co/t/elastica-php-client-for-elasticsearch/3461)
**Author:** [@ruflin\_2](https://discuss.elastic.co/u/ruflin_2)\ **Replies:** 10\ **Last updated:** [November 29, 2010, 12:36pm UTC](https://discuss.elastic.co/t/elastica-php-client-for-elasticsearch/3461 "2010-11-29T12:36:17Z")
Hi I published my PHP client for elasticsearch named Elastica to github. The client is still in development but it I'm already using it in two installations. The difference to the PHP client from nervetattoo is tha… --- ## [Is it possible to change output structure](https://discuss.elastic.co/t/is-it-possible-to-change-output-structure/153759)
**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\ **Replies:** 24\ **Last updated:** [October 25, 2018, 11:47am UTC](https://discuss.elastic.co/t/is-it-possible-to-change-output-structure/153759 "2018-10-25T11:47:49Z")
Hello, I got an output structure like that: { "path" =\> "/home/data/test.xml", "@version" =\> "1", "@timestamp" =\> 2018-10-24T08:49:15.480Z, "Properties" =\> { "tag" =\> … --- ## [Logstash is blocked by elasticsearch-setup-passwords](https://discuss.elastic.co/t/logstash-is-blocked-by-elasticsearch-setup-passwords/317142)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 19\ **Last updated:** [October 21, 2022, 1:34pm UTC](https://discuss.elastic.co/t/logstash-is-blocked-by-elasticsearch-setup-passwords/317142 "2022-10-21T13:34:26Z")
this a very bad procedure i have used this command for create password for kibana elasticsearch-setup-passwords but logstash is non started --- ## [Canvas time filter](https://discuss.elastic.co/t/canvas-time-filter/277420)
**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\ **Replies:** 12\ **Last updated:** [July 2, 2021, 7:48am UTC](https://discuss.elastic.co/t/canvas-time-filter/277420 "2021-07-02T07:48:36Z")
I made a Canvas workpad showing one metric. I need dynamic filters and if I import a filter from the dashboard they seem to have no effect. When I add a time filter from canvas "add element" my metric says "Error canno… --- ## [Logstash elasticsearch output problem](https://discuss.elastic.co/t/logstash-elasticsearch-output-problem/234577)
**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\ **Replies:** 10\ **Last updated:** [June 1, 2020, 1:15pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-problem/234577 "2020-06-01T13:15:06Z")
hi all i have an strange problem i do check apache grok from this git in stdout codec rubydebug and i get success but when i try to push it in elastic search it wont show in indexes could you kindly test that out too… --- ## [Specifie error logged in logstash-plain.log](https://discuss.elastic.co/t/specifie-error-logged-in-logstash-plain-log/146473)
**Author:** [@wonki](https://discuss.elastic.co/u/wonki)\ **Replies:** 9\ **Last updated:** [August 30, 2018, 6:39am UTC](https://discuss.elastic.co/t/specifie-error-logged-in-logstash-plain-log/146473 "2018-08-30T06:39:12Z")
I thought my elastic stack runs well, but in logstash-plain.log file, the below error logged repeatebly. Is it the normal situation?? Again, there is no problem to fetch log data indexed in elasticsearch using filebeat… --- ## [Strange indices](https://discuss.elastic.co/t/strange-indices/113585)
**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\ **Replies:** 11\ **Last updated:** [January 1, 2018, 7:09pm UTC](https://discuss.elastic.co/t/strange-indices/113585 "2018-01-01T19:09:18Z")
I have already checked these two threads, But they did scanning and other things. But I never did anything. and moreover, i use Nginx for reverse proxy. so it is not open to the internet. I want to know what these ind… --- ## [Can we change sincedb different location for different input?](https://discuss.elastic.co/t/can-we-change-sincedb-different-location-for-different-input/127022)
**Author:** [@Karthik\_Saravanan](https://discuss.elastic.co/u/Karthik_Saravanan)\ **Replies:** 13\ **Last updated:** [April 12, 2018, 6:57am UTC](https://discuss.elastic.co/t/can-we-change-sincedb-different-location-for-different-input/127022 "2018-04-12T06:57:06Z")
I have changed path.data on logstash.yml path.data:D:/www/logstash-6.2.3/pr/ Input file: input { file { path =\> "D:/ELK-Sample-CSV/txt-5/test-import.csv" \<-- this file have 100k lines start\_position =\> "beg… --- ## [Metricbeat not sending data or Elasticsearch not recieving (?)](https://discuss.elastic.co/t/metricbeat-not-sending-data-or-elasticsearch-not-recieving/326863)
**Author:** [@enigmatic](https://discuss.elastic.co/u/enigmatic)\ **Replies:** 12\ **Last updated:** [March 9, 2023, 9:06am UTC](https://discuss.elastic.co/t/metricbeat-not-sending-data-or-elasticsearch-not-recieving/326863 "2023-03-09T09:06:34Z")
Hi Guys, hope you can help me out in the following. i'm using: Elasticseearch 8.4.3 metricbeat 8.4.3 kubernetes / AWS EKS I've deployed metricbeat in a kubernetes cluster. it gathering all sort of data and i also wa… --- ## [Filebeat 6.0 Multiline issue](https://discuss.elastic.co/t/filebeat-6-0-multiline-issue/109408)
**Author:** [@Oldo](https://discuss.elastic.co/u/Oldo)\ **Replies:** 16\ **Last updated:** [November 29, 2017, 2:15pm UTC](https://discuss.elastic.co/t/filebeat-6-0-multiline-issue/109408 "2017-11-29T14:15:07Z")
Hello. I use multiline in filebeat prospectors for procesing error messages with python trace. Example: - paths: - "/var/log/heat/\*.log" exclude\_lines: \['DEBUG'\] fields: service: heat … --- ## [Elasticsearch worked and then stopped](https://discuss.elastic.co/t/elasticsearch-worked-and-then-stopped/282795)
**Author:** [@sasha198407](https://discuss.elastic.co/u/sasha198407)\ **Replies:** 11\ **Last updated:** [August 31, 2021, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-worked-and-then-stopped/282795 "2021-08-31T09:20:30Z")
Elasticsearch worked and then stopped. It starts, runs for a minute and falls. In the logs, this is what. "at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) ~\[?:?\]", "at java.util.concur… --- ## [Canvas days calculations](https://discuss.elastic.co/t/canvas-days-calculations/172889)
**Author:** [@hashitha](https://discuss.elastic.co/u/hashitha)\ **Replies:** 12\ **Last updated:** [April 25, 2019, 5:09am UTC](https://discuss.elastic.co/t/canvas-days-calculations/172889 "2019-04-25T05:09:38Z")
I have a table with the following headers AppointmentId, BookedByUser, BookedDate, Status I have managed to create a horizontal bar chart using the following sql SELECT COUNT(AppointmentId) as Appointments, BookedBy… --- ## [Installing filebeats Ubuntu 16.04 repo timeout](https://discuss.elastic.co/t/installing-filebeats-ubuntu-16-04-repo-timeout/101825)
**Author:** [@drenriza](https://discuss.elastic.co/u/drenriza)\ **Replies:** 10\ **Last updated:** [October 10, 2017, 2:27pm UTC](https://discuss.elastic.co/t/installing-filebeats-ubuntu-16-04-repo-timeout/101825 "2017-10-10T14:27:04Z")
When looking over the installation documentation for APT it is stated that you need to download and add the elasticsearch GPG key, and than add the following repo deb https://artifacts.elastic.co/packages/5.x/apt stabl… --- ## [Logstash 1.5.0 Performance Regression](https://discuss.elastic.co/t/logstash-1-5-0-performance-regression/842)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 10\ **Last updated:** [May 20, 2015, 3:42pm UTC](https://discuss.elastic.co/t/logstash-1-5-0-performance-regression/842 "2015-05-20T15:42:02Z")
Setup: Redis -\> 6 Logstash instances (json codec, date mutate) -\> elasticsearch We have 6 Logstash instances pulling from Redis with a batch size of 1,000 for very small documents \<1KB. We don't really do any process… --- ## [Reindexing 20TB document tips](https://discuss.elastic.co/t/reindexing-20tb-document-tips/188140)
**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\ **Replies:** 14\ **Last updated:** [July 1, 2019, 2:21pm UTC](https://discuss.elastic.co/t/reindexing-20tb-document-tips/188140 "2019-07-01T14:21:08Z")
Hi, Everytime I am trying to reindex this index with 20million documents(20TB) with reindex api, it stops in the half way. I even tried using sliced scroll(slicing) method to break it into multiple jobs and parallelize… --- ## [New Index not showingup in kibana 5 Discover Data](https://discuss.elastic.co/t/new-index-not-showingup-in-kibana-5-discover-data/87868)
**Author:** [@Ansuman](https://discuss.elastic.co/u/Ansuman)\ **Replies:** 14\ **Last updated:** [June 1, 2017, 10:37am UTC](https://discuss.elastic.co/t/new-index-not-showingup-in-kibana-5-discover-data/87868 "2017-06-01T10:37:07Z")
Hi Team, I have loaded sample data given in doc for log data . Could able to successfully do it verified in elasticSearch plugins index got created with data loaded . Create index in kibana but unable to access in "Disc… --- ## [How to check logs were sending to elasticsearch](https://discuss.elastic.co/t/how-to-check-logs-were-sending-to-elasticsearch/302799)
**Author:** [@Hoa\_Nguy\_n\_Van](https://discuss.elastic.co/u/Hoa_Nguy_n_Van)\ **Replies:** 11\ **Last updated:** [April 22, 2022, 8:31am UTC](https://discuss.elastic.co/t/how-to-check-logs-were-sending-to-elasticsearch/302799 "2022-04-22T08:31:28Z")
I deployment my EFK stack on version 7.4.0. When deploying filebeat, logs from filebeat do not send to Elasticsearch. My configuration Filebeat on k8s: Logs from Filebeat: Help me for this issue. Thanks ! … --- ## [Elastic Search stack is not working in azure platform](https://discuss.elastic.co/t/elastic-search-stack-is-not-working-in-azure-platform/159105)
**Author:** [@rahul.ranjan](https://discuss.elastic.co/u/rahul.ranjan)\ **Replies:** 12\ **Last updated:** [December 11, 2018, 7:09am UTC](https://discuss.elastic.co/t/elastic-search-stack-is-not-working-in-azure-platform/159105 "2018-12-11T07:09:59Z")
Elastic Search stack is not working in azure platform. --- ## [Snapshots are failing in ECE minio](https://discuss.elastic.co/t/snapshots-are-failing-in-ece-minio/207553)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 9\ **Last updated:** [November 21, 2019, 5:32pm UTC](https://discuss.elastic.co/t/snapshots-are-failing-in-ece-minio/207553 "2019-11-21T17:32:28Z")
Hi there, I have integrated a repository with minio. After I recognized that elasticsearch 6.x was not able to resolve hostnames I changed to IP. Elasticsearch 7.x worked fine for a while. I use version 2.4.1 and updat… --- ## [How to use ruby variable outside ruby block?](https://discuss.elastic.co/t/how-to-use-ruby-variable-outside-ruby-block/135194)
**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\ **Replies:** 9\ **Last updated:** [June 9, 2018, 9:23pm UTC](https://discuss.elastic.co/t/how-to-use-ruby-variable-outside-ruby-block/135194 "2018-06-09T21:23:07Z")
Hi, I like to know, how to use ruby variable outside ruby code block. say for eg. input { file { path =\> "/logfile/\*" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { ruby { c… --- ## [Multisearch coming back empty](https://discuss.elastic.co/t/multisearch-coming-back-empty/55344)
**Author:** [@Shimon\_k](https://discuss.elastic.co/u/Shimon_k)\ **Replies:** 9\ **Last updated:** [July 14, 2016, 3:47pm UTC](https://discuss.elastic.co/t/multisearch-coming-back-empty/55344 "2016-07-14T15:47:27Z")
I wrote a python script to take a line from a file and query the line\_item. If there are results It should place the line\_item into a new file, otherwise it should continue to the next item. I want to search across all i… --- ## [SOLVED - Long & Lat Help - I've been reading many posts & still no answers](https://discuss.elastic.co/t/solved-long-lat-help-ive-been-reading-many-posts-still-no-answers/122137)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 12\ **Last updated:** [March 13, 2018, 8:03am UTC](https://discuss.elastic.co/t/solved-long-lat-help-ive-been-reading-many-posts-still-no-answers/122137 "2018-03-13T08:03:06Z")
Team, My data source has Longtitude and Latitude in it. I have time series data of aircraft and want to plot the map progress. I am using Logstash 5.3.0 from an event stream. Below is my configuration. Currently when t… --- ## [Create user with multiple roles(of different spaces) and having access to only single space](https://discuss.elastic.co/t/create-user-with-multiple-roles-of-different-spaces-and-having-access-to-only-single-space/284591)
**Author:** [@srinielk](https://discuss.elastic.co/u/srinielk)\ **Replies:** 10\ **Last updated:** [October 8, 2021, 12:20pm UTC](https://discuss.elastic.co/t/create-user-with-multiple-roles-of-different-spaces-and-having-access-to-only-single-space/284591 "2021-10-08T12:20:56Z")
please advise how to create user with multiple roles(of different spaces) and having access to only single space [Previous page](https://discuss.elastic.co/top.md?page=131&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=133&per_page=50&period=all)