# Top

**URL:** https://discuss.elastic.co/top.md?page=1329&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1330

---

## [Calculate duration between min and max @timestamp](https://discuss.elastic.co/t/calculate-duration-between-min-and-max-timestamp/95754)

<div class="topic-metadata">

**Author:** [@lefagr](https://discuss.elastic.co/u/lefagr)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 6:49pm UTC](https://discuss.elastic.co/t/calculate-duration-between-min-and-max-timestamp/95754 "2017-08-03T18:49:02Z")

</div>

Hello, We currently using Elastic stack 5.5.1. We are building a security dashboard and we would like to have a visualisation which can calculate the difference between MIN metric: @timestamp and MAX metric: @timestamp …

---

## [Are constants and/or variabales available in Logstash?](https://discuss.elastic.co/t/are-constants-and-or-variabales-available-in-logstash/72833)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 1\
**Last updated:** [January 26, 2017, 7:10am UTC](https://discuss.elastic.co/t/are-constants-and-or-variabales-available-in-logstash/72833 "2017-01-26T07:10:08Z")

</div>

I am reusing same values (see integer 100 example below) in my logstash configuration file. Is there way I can define constant at the beginning of the file i.e. THRESHOLD=60 for later use in the config file if \[SOMETHI…

---

## [Date Conversion from GMT to PST](https://discuss.elastic.co/t/date-conversion-from-gmt-to-pst/44983)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [March 21, 2016, 11:54am UTC](https://discuss.elastic.co/t/date-conversion-from-gmt-to-pst/44983 "2016-03-21T11:54:30Z")

</div>

HI, I'm trying to convert the GMT date filed into PST field but it failed to convert the field can anyone help me to resolve it timestamp=\> "2016-03-18 23:59:51" date { match =\> \["timestamp", "YYYY-MM-dd HH:mm:s…

---

## [ElasticSearch giving FileNotFoundException: (Too many open files)](https://discuss.elastic.co/t/elasticsearch-giving-filenotfoundexception-too-many-open-files/17254)

<div class="topic-metadata">

**Author:** [@prateek1](https://discuss.elastic.co/u/prateek1)\
**Replies:** 1\
**Last updated:** [April 29, 2014, 4:20pm UTC](https://discuss.elastic.co/t/elasticsearch-giving-filenotfoundexception-too-many-open-files/17254 "2014-04-29T16:20:56Z")

</div>

Hi Team, I have implemented logstash using LogStash+Redis+ElasticSearch and Kibana using kibana system is not showing logs from some hosts and this issue is coming very frequently. sometimes kibana is not showing…

---

## [Move shard to another node error](https://discuss.elastic.co/t/move-shard-to-another-node-error/333235)

<div class="topic-metadata">

**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Replies:** 3\
**Last updated:** [May 18, 2023, 9:02pm UTC](https://discuss.elastic.co/t/move-shard-to-another-node-error/333235 "2023-05-18T21:02:02Z")

</div>

Hello, I need to move shards to another node. I get the following error. The command is first and the error after it: error to check post \_cluster/reroute { "commands": \[ { "move": { "index": "yeshut\_2022.03.31-0…

---

## [Kibana UI Change](https://discuss.elastic.co/t/kibana-ui-change/325938)

<div class="topic-metadata">

**Author:** [@Ajay\_Kotnala](https://discuss.elastic.co/u/Ajay_Kotnala)\
**Replies:** 3\
**Last updated:** [February 20, 2023, 1:00pm UTC](https://discuss.elastic.co/t/kibana-ui-change/325938 "2023-02-20T13:00:54Z")

</div>

Is there a way to remove the option toggle dialog with the details option in Kibana UI. Need to rollback to older layout.

---

## [What if I don't set index.query.default\_field?](https://discuss.elastic.co/t/what-if-i-dont-set-index-query-default-field/299108)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 3\
**Last updated:** [March 10, 2022, 2:33pm UTC](https://discuss.elastic.co/t/what-if-i-dont-set-index-query-default-field/299108 "2022-03-10T14:33:49Z")

</div>

Our cluster is still running Elasticsearch 6.8, so I'm looking at getting it upgraded to Elasticsearch 7. The Kibana Upgrade Assistant is flagging a couple of hundred indices with this message This index has \[4234\] fie…

---

## [Moving Indices from Data Folder](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 5:57pm UTC](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768 "2022-03-03T17:57:53Z")

</div>

If I wanted to quickly move indices from one node to another, would I break anything if I just cut/pasted the indices files under %ES\_HOME%\\data from one node to another? ...as opposed to using the \_cluster/reroute API, …

---

## [Fscrawler does not index to ES with https](https://discuss.elastic.co/t/fscrawler-does-not-index-to-es-with-https/247522)

<div class="topic-metadata">

**Author:** [@Yamini\_Shashank](https://discuss.elastic.co/u/Yamini_Shashank)\
**Replies:** 3\
**Last updated:** [September 29, 2020, 5:29am UTC](https://discuss.elastic.co/t/fscrawler-does-not-index-to-es-with-https/247522 "2020-09-29T05:29:28Z")

</div>

The following is the configuration on fscrawler: name: "docscluster" fs: url: "/etc/STORE/" update\_rate: "2s" excludes: - "\*/~\*" json\_support: false filename\_as\_id: true add\_filesize: true remove\_deleted…

---

## [Tuning to handle extreme initial ingestion conditions (with logstash)](https://discuss.elastic.co/t/tuning-to-handle-extreme-initial-ingestion-conditions-with-logstash/188112)

<div class="topic-metadata">

**Author:** [@abcarroll](https://discuss.elastic.co/u/abcarroll)\
**Replies:** 3\
**Last updated:** [June 29, 2019, 7:35am UTC](https://discuss.elastic.co/t/tuning-to-handle-extreme-initial-ingestion-conditions-with-logstash/188112 "2019-06-29T07:35:49Z")

</div>

Hey folks. Well I'll be frank, logstash has really rubbed me the wrong way recently. It's not logstash's fault, for the most part, but it's really difficult to get things working in my paticular use case. Initially, w…

---

## [Logstash - unexpected behaviour with persistent queues](https://discuss.elastic.co/t/logstash-unexpected-behaviour-with-persistent-queues/164395)

<div class="topic-metadata">

**Author:** [@Sebastian\_Treu](https://discuss.elastic.co/u/Sebastian_Treu)\
**Replies:** 3\
**Last updated:** [January 17, 2019, 1:36pm UTC](https://discuss.elastic.co/t/logstash-unexpected-behaviour-with-persistent-queues/164395 "2019-01-17T13:36:59Z")

</div>

Hi, I'm testing persisted queues usage and I found that, after a lot of debugging, logstash is being stopped with exit code 0. Logs shows that pipeline is being stopped. No error log found. I can't find the reason but f…

---

## [Is there a way to start logstash remotely?](https://discuss.elastic.co/t/is-there-a-way-to-start-logstash-remotely/127381)

<div class="topic-metadata">

**Author:** [@elasticfunatic](https://discuss.elastic.co/u/elasticfunatic)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 8:09pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-start-logstash-remotely/127381 "2018-04-10T20:09:19Z")

</div>

Here's the use case:- Windows Environment. logstash is on Server A and runs using a simple configuration file. The configuration file uses JDBC input plugin and elasticsearch output plugin. JDBC is connecting to SQL on …

---

## [What's the best way to track calls to a specific URL?](https://discuss.elastic.co/t/whats-the-best-way-to-track-calls-to-a-specific-url/94825)

<div class="topic-metadata">

**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\
**Replies:** 3\
**Last updated:** [July 27, 2017, 5:10pm UTC](https://discuss.elastic.co/t/whats-the-best-way-to-track-calls-to-a-specific-url/94825 "2017-07-27T17:10:09Z")

</div>

I have Packetbeat installed on an application server. I'd like a way to determine how many calls to a given URL (say, www.xyz.com) are made per time frame I'm searching on in Kibana. What would be the best way to accompl…

---

## [Hourly to Daily Aggregations](https://discuss.elastic.co/t/hourly-to-daily-aggregations/58662)

<div class="topic-metadata">

**Author:** [@alexkru](https://discuss.elastic.co/u/alexkru)\
**Replies:** 3\
**Last updated:** [August 23, 2016, 11:45am UTC](https://discuss.elastic.co/t/hourly-to-daily-aggregations/58662 "2016-08-23T11:45:11Z")

</div>

Hi, We have weekly indices that contains hourly aggregations. We want to move them to monthly indices with daily aggregations. We are using 19 dimensions and 10 metrics, when Im doing a query on all of these metrics, E…

---

## [What are the fields required for Kibana to function properly](https://discuss.elastic.co/t/what-are-the-fields-required-for-kibana-to-function-properly/57721)

<div class="topic-metadata">

**Author:** [@bujar\_metaj](https://discuss.elastic.co/u/bujar_metaj)\
**Replies:** 3\
**Last updated:** [August 11, 2016, 8:38am UTC](https://discuss.elastic.co/t/what-are-the-fields-required-for-kibana-to-function-properly/57721 "2016-08-11T08:38:15Z")

</div>

Hi, i am using elasticseach search-guard 2 and I am getting this issue when launching Kibana indices:data/read/field\_stats Error: \[security\_exception\] no permissions for indices:data/read/field\_stats at respond (…

---

## [Plugin not work on es2.1](https://discuss.elastic.co/t/plugin-not-work-on-es2-1/38478)

<div class="topic-metadata">

**Author:** [@lizhecome](https://discuss.elastic.co/u/lizhecome)\
**Replies:** 3\
**Last updated:** [January 6, 2016, 9:37am UTC](https://discuss.elastic.co/t/plugin-not-work-on-es2-1/38478 "2016-01-06T09:37:55Z")

</div>

Hi, there is an error when install medcl/elasticsearch-analysis-pinyin, could you please take a look? thanks. \[root@iZ25g5gvvtgZ elasticsearch\]# bin/plugin install medcl/elasticsearch-analysis-pinyin -\> Installing …

---

## [Missing child spans on OpenTelemetry traces](https://discuss.elastic.co/t/missing-child-spans-on-opentelemetry-traces/340390)

<div class="topic-metadata">

**Author:** [@Sebastien\_Dan](https://discuss.elastic.co/u/Sebastien_Dan)\
**Replies:** 4\
**Last updated:** [August 24, 2023, 7:17am UTC](https://discuss.elastic.co/t/missing-child-spans-on-opentelemetry-traces/340390 "2023-08-24T07:17:58Z")

</div>

Kibana version: 8.9.0 Elasticsearch version: 8.9.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Elastic Cloud, no APM agent Description of the problem including expected versu…

---

## [How to Connect sharepoint on premise to elastic workplace search](https://discuss.elastic.co/t/how-to-connect-sharepoint-on-premise-to-elastic-workplace-search/249012)

<div class="topic-metadata">

**Author:** [@lakshmiteja\_salapu](https://discuss.elastic.co/u/lakshmiteja_salapu)\
**Replies:** 4\
**Last updated:** [November 16, 2020, 2:32pm UTC](https://discuss.elastic.co/t/how-to-connect-sharepoint-on-premise-to-elastic-workplace-search/249012 "2020-11-16T14:32:44Z")

</div>

I have created a custom api on workplace search. I understood posting csv files to workplacesearch using key and token. But I am trying to understand how to connect sharepoint which is on premise in our company to elasti…

---

## [Top left logo change in Kibana 7.4](https://discuss.elastic.co/t/top-left-logo-change-in-kibana-7-4/214188)

<div class="topic-metadata">

**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\
**Replies:** 4\
**Last updated:** [January 8, 2020, 9:14am UTC](https://discuss.elastic.co/t/top-left-logo-change-in-kibana-7-4/214188 "2020-01-08T09:14:30Z")

</div>

Hi I'm trying to change the kibana logo at top left ... I have tried searching through all possible post in elastic discuss regarding logo change. But couldn't find any usefull procedure for 7.4 version. Can someone who…

---

## [Restart dashboard programmatically in kibana plugin](https://discuss.elastic.co/t/restart-dashboard-programmatically-in-kibana-plugin/62056)

<div class="topic-metadata">

**Author:** [@rajav](https://discuss.elastic.co/u/rajav)\
**Replies:** 4\
**Last updated:** [October 3, 2016, 11:57am UTC](https://discuss.elastic.co/t/restart-dashboard-programmatically-in-kibana-plugin/62056 "2016-10-03T11:57:39Z")

</div>

Hi All, I was wondering if there is a way we can restart the dashboard programmatically in a kibana plugin code. Thanks.

---

## [No services found in Kibana](https://discuss.elastic.co/t/no-services-found-in-kibana/285139)

<div class="topic-metadata">

**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\
**Replies:** 2\
**Last updated:** [September 30, 2021, 6:44am UTC](https://discuss.elastic.co/t/no-services-found-in-kibana/285139 "2021-09-30T06:44:48Z")

</div>

Kibana version: 7.15 Elasticsearch version: 7.15 APM Server version: 7.15 APM Agent language and version: Python (5.1.2) Browser version: Firefox 92.0 Original install method (e.g. download page, yum, deb, from sour…

---

## [Action failed with 'security\_exception](https://discuss.elastic.co/t/action-failed-with-security-exception/278400)

<div class="topic-metadata">

**Author:** [@dridk](https://discuss.elastic.co/u/dridk)\
**Replies:** 2\
**Last updated:** [July 12, 2021, 7:44pm UTC](https://discuss.elastic.co/t/action-failed-with-security-exception/278400 "2021-07-12T19:44:34Z")

</div>

Ubuntu 20.04.2 LTS Kibana 7.13.3 ElasticSearch 7.13.3 After a kibana upgrade , I cannot restart the server. The webpage stay on "Kibana server is not ready yet" . My /var/log/kibana.log has : {"type":"log","@timest…

---

## [Sorting for IP\[IPv4 & IPv6\]](https://discuss.elastic.co/t/sorting-for-ip-ipv4-ipv6/205361)

<div class="topic-metadata">

**Author:** [@singamsundeep](https://discuss.elastic.co/u/singamsundeep)\
**Replies:** 2\
**Last updated:** [October 30, 2019, 4:59am UTC](https://discuss.elastic.co/t/sorting-for-ip-ipv4-ipv6/205361 "2019-10-30T04:59:05Z")

</div>

Hi, Is that possible to do sorting for the Ip type? or should we convert to integer format and do sorting on the integer converted value.

---

## [Accessing Elasticsearch from Vega to create custom visualizations](https://discuss.elastic.co/t/accessing-elasticsearch-from-vega-to-create-custom-visualizations/200714)

<div class="topic-metadata">

**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\
**Replies:** 2\
**Last updated:** [September 24, 2019, 12:24am UTC](https://discuss.elastic.co/t/accessing-elasticsearch-from-vega-to-create-custom-visualizations/200714 "2019-09-24T00:24:17Z")

</div>

Greetings, I bet this problem will be easy for someone out there - but I can't see what I'm doing wrong. I have data in an Elasticsearch index called "plotting\_test" that I'd like to plot with Vega. I'm looking at the b…

---

## [Custom Heatmap Color Schemes for Kibana Visualization](https://discuss.elastic.co/t/custom-heatmap-color-schemes-for-kibana-visualization/177451)

<div class="topic-metadata">

**Author:** [@druiz61](https://discuss.elastic.co/u/druiz61)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 7:54am UTC](https://discuss.elastic.co/t/custom-heatmap-color-schemes-for-kibana-visualization/177451 "2019-04-23T07:54:00Z")

</div>

Hi guys, I want to create a Heatmap with custom color schemes in Kibana. For instance, I have a time-series and an attribute "STATUS", I would like to see on the same Visualization all the data that comes through, but …

---

## [New operation for the mutate filter?](https://discuss.elastic.co/t/new-operation-for-the-mutate-filter/75070)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 9:41pm UTC](https://discuss.elastic.co/t/new-operation-for-the-mutate-filter/75070 "2017-02-15T21:41:41Z")

</div>

I often find myself using the ruby filter below in order to "move" a sub-structure at the root level in order to use it as the main event. ruby { code =\> " event.to\_hash.delete\_if {|k, v| k != 'payload'}…

---

## [Boosting has no effect in a Bool-Filter query](https://discuss.elastic.co/t/boosting-has-no-effect-in-a-bool-filter-query/70891)

<div class="topic-metadata">

**Author:** [@muwnd](https://discuss.elastic.co/u/muwnd)\
**Replies:** 2\
**Last updated:** [January 9, 2017, 8:22am UTC](https://discuss.elastic.co/t/boosting-has-no-effect-in-a-bool-filter-query/70891 "2017-01-09T08:22:11Z")

</div>

I'm trying to add a boost to documents that match to a term filter. The basis is a Boolean/MatchAll query. But the boosting in my Elasticsearch query has no effect. All result scores are set to 1: curl -XPOST localhost…

---

## [Node Up / Down Monitoring](https://discuss.elastic.co/t/node-up-down-monitoring/64948)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 2\
**Last updated:** [November 3, 2016, 10:25pm UTC](https://discuss.elastic.co/t/node-up-down-monitoring/64948 "2016-11-03T22:25:27Z")

</div>

I'm with a team that is migrating our monitoring stack to open source. I've implemented some fantastic performance and service-specific monitoring using the ELK stack. One key monitor I need to implement which isn't e…

---

## [Time series for a particular field in the dataset - No Luck using Timelion](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055)

<div class="topic-metadata">

**Author:** [@naveen\_elastic](https://discuss.elastic.co/u/naveen_elastic)\
**Replies:** 2\
**Last updated:** [April 3, 2016, 12:32am UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055 "2016-04-03T00:32:50Z")

</div>

Hi, I am a beginner, trying to see time series for a particular field in the dataset. My dataset looks like below {Application:"XXX", timestamp:"", "numofcalculations":1276, "timestamp":2016-03-16T 10:28:08.089Z"} {…

---

## [Exceptions matches escaping](https://discuss.elastic.co/t/exceptions-matches-escaping/366374)

<div class="topic-metadata">

**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\
**Replies:** 2\
**Last updated:** [September 23, 2024, 11:50am UTC](https://discuss.elastic.co/t/exceptions-matches-escaping/366374 "2024-09-23T11:50:52Z")

</div>

We've encountered this rather annoying problem when writing exceptions the documentation on Add and manage exceptions states following: Some characters must be escaped with a backslash, such as \\\\ for a literal backsla…

---

## [Anomaly Jobs - General Strategies to reduce false positives](https://discuss.elastic.co/t/anomaly-jobs-general-strategies-to-reduce-false-positives/348094)

<div class="topic-metadata">

**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\
**Replies:** 2\
**Last updated:** [November 28, 2023, 12:58pm UTC](https://discuss.elastic.co/t/anomaly-jobs-general-strategies-to-reduce-false-positives/348094 "2023-11-28T12:58:30Z")

</div>

Hello everybody, i'am struggling to baseline an anomaly detection job (filters are not really helping so far). What are the general strategies or factors which drive the model to become, simply put, more "insensitive" …

---

## [Chain of nodes - api call](https://discuss.elastic.co/t/chain-of-nodes-api-call/258804)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [December 16, 2020, 10:40am UTC](https://discuss.elastic.co/t/chain-of-nodes-api-call/258804 "2020-12-16T10:40:24Z")

</div>

Hi there, can someone give me an insight: If in Kibana I make a search, this query is transformed in a elasticsearch API call. My cluster has dedicated data nodes, dedicated master nodes, dedicated ingest nodes and ded…

---

## [Missing (few) official Docker images](https://discuss.elastic.co/t/missing-few-official-docker-images/160138)

<div class="topic-metadata">

**Author:** [@renan](https://discuss.elastic.co/u/renan)\
**Replies:** 3\
**Last updated:** [December 12, 2018, 2:31am UTC](https://discuss.elastic.co/t/missing-few-official-docker-images/160138 "2018-12-12T02:31:08Z")

</div>

At Werkspot (part of IAC / HomeAdvisor US) we extensively use Elastic products for both full-text search for our platform and for our centralized logging system. As we are migrating our stack to run on top of Kubernetes…

---

## [Strange size difference in shards since upgrading to 6.2](https://discuss.elastic.co/t/strange-size-difference-in-shards-since-upgrading-to-6-2/126238)

<div class="topic-metadata">

**Author:** [@kstoney](https://discuss.elastic.co/u/kstoney)\
**Replies:** 3\
**Last updated:** [April 6, 2018, 12:31pm UTC](https://discuss.elastic.co/t/strange-size-difference-in-shards-since-upgrading-to-6-2/126238 "2018-04-06T12:31:51Z")

</div>

Hi, We recently upgraded from 6.1 to 6.2 and we're noticing that some shards are getting disproportionately big. Take these two, shard 0 from the same index, different nodes. 16gig on one, 6 gig on the other? |metric…

---

## [Unhealthy status yet sending events - agent via logstash](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801)

<div class="topic-metadata">

**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\
**Replies:** 6\
**Last updated:** [December 28, 2022, 3:21pm UTC](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801 "2022-12-28T15:21:04Z")

</div>

We have converted an agent policy to use the Logstash ingest path instead of direct to the cluster. Events are being received by the logstash, and they appear in Elastic, so the end to end path is working ok. However t…

---

## [Field available in Discover is not available in Visualizations](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987)

<div class="topic-metadata">

**Author:** [@WimM](https://discuss.elastic.co/u/WimM)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 10:06am UTC](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987 "2021-11-30T10:06:56Z")

</div>

Hi We've setup ELK/Kibana for one of our applications and using the Discover "Top 5" feature we could quickly identify a specific issue: I wanted to get this exact same thing (top 5 of field "message") in a Visualiza…

---

## [Cluster state is yellow when configuring minimal security](https://discuss.elastic.co/t/cluster-state-is-yellow-when-configuring-minimal-security/270286)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 6\
**Last updated:** [April 16, 2021, 2:54pm UTC](https://discuss.elastic.co/t/cluster-state-is-yellow-when-configuring-minimal-security/270286 "2021-04-16T14:54:14Z")

</div>

Greetings folks, I have a cluster with two nodes (node1 and node2) running ELK 7.12, I activated security feature from this link Set up minimal security for Elasticsearch | Elasticsearch Guide \[7.12\] | Elastic, I follow…

---

## [Join in Kibana](https://discuss.elastic.co/t/join-in-kibana/88987)

<div class="topic-metadata">

**Author:** [@Vaishali](https://discuss.elastic.co/u/Vaishali)\
**Replies:** 6\
**Last updated:** [June 12, 2017, 9:57am UTC](https://discuss.elastic.co/t/join-in-kibana/88987 "2017-06-12T09:57:24Z")

</div>

indent preformatted text by 4 spaces Hi, I'm new to ELK and trying to explore Kibana. So far, I've read that it is not possible to join two indices so I'm trying to join two types under the same index. Suppose, there…

---

## [Index - shards not allocating properly](https://discuss.elastic.co/t/index-shards-not-allocating-properly/60753)

<div class="topic-metadata">

**Author:** [@kobyb](https://discuss.elastic.co/u/kobyb)\
**Replies:** 6\
**Last updated:** [September 18, 2016, 2:02am UTC](https://discuss.elastic.co/t/index-shards-not-allocating-properly/60753 "2016-09-18T02:02:34Z")

</div>

I'm having an issue with index allocation on elasticsearch version 2.4 Scenario: 5 elasticsearch nodes with a defined attribute node\_type: active 2 elasticsearch nodes with a defined attribute node\_type: archive Wi…

---

## [EsHadoopNoNodesLeftException-all nodes failed On Spark.SaveToES](https://discuss.elastic.co/t/eshadoopnonodesleftexception-all-nodes-failed-on-spark-savetoes/202161)

<div class="topic-metadata">

**Author:** [@Ramakrishnan\_Venkata](https://discuss.elastic.co/u/Ramakrishnan_Venkata)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 8:19pm UTC](https://discuss.elastic.co/t/eshadoopnonodesleftexception-all-nodes-failed-on-spark-savetoes/202161 "2019-10-16T20:19:45Z")

</div>

Hi, I Get "EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed" When i do a df = spark.sql(select \* from a table)and do a df.saveToES(indexName+"/docs") I have 200 ORC…

---

## [Old indices wont delete](https://discuss.elastic.co/t/old-indices-wont-delete/120708)

<div class="topic-metadata">

**Author:** [@shri](https://discuss.elastic.co/u/shri)\
**Replies:** 1\
**Last updated:** [February 27, 2018, 1:42am UTC](https://discuss.elastic.co/t/old-indices-wont-delete/120708 "2018-02-27T01:42:00Z")

</div>

All, i'm trying to delete old indices but can't get it work. Please help me on this issue. Error: 2018-02-19 21:34:40,977 INFO Preparing Action ID: 1, "delete\_indices" 2018-02-19 21:34:40,997 INFO Trying Action ID: 1,…

---

## [Issue with logstash-output-gelf plug-in install for logstash](https://discuss.elastic.co/t/issue-with-logstash-output-gelf-plug-in-install-for-logstash/113288)

<div class="topic-metadata">

**Author:** [@sagarsway](https://discuss.elastic.co/u/sagarsway)\
**Replies:** 1\
**Last updated:** [December 31, 2017, 1:38pm UTC](https://discuss.elastic.co/t/issue-with-logstash-output-gelf-plug-in-install-for-logstash/113288 "2017-12-31T13:38:24Z")

</div>

I am using logstash-6.1.1 on linux While installing plug-in , I am getting following error, $ ./logstash-plugin install logstash-output-gelf Validating logstash-output-gelf Unable to download data from https://rubyge…

---

## [Elasticsearch-py: how to hold session (python client)](https://discuss.elastic.co/t/elasticsearch-py-how-to-hold-session-python-client/37569)

<div class="topic-metadata">

**Author:** [@jigish\_thakar](https://discuss.elastic.co/u/jigish_thakar)\
**Replies:** 1\
**Last updated:** [April 5, 2017, 8:58pm UTC](https://discuss.elastic.co/t/elasticsearch-py-how-to-hold-session-python-client/37569 "2017-04-05T20:58:39Z")

</div>

Hi All, we have elasticsearch on cloud and various clients push data in seprate index. and we are not using sheild, where as what we have is nginx implimented on public front. and we are using auth + ssl to protect it. w…

---

## [Sequel::PoolTimeout error when contacting Database](https://discuss.elastic.co/t/sequel-pooltimeout-error-when-contacting-database/28414)

<div class="topic-metadata">

**Author:** [@KarthikaAr](https://discuss.elastic.co/u/KarthikaAr)\
**Replies:** 1\
**Last updated:** [September 4, 2015, 6:28am UTC](https://discuss.elastic.co/t/sequel-pooltimeout-error-when-contacting-database/28414 "2015-09-04T06:28:08Z")

</div>

Can Somebody explains what this Error means. How it can be fixed, { 11754 rufus-scheduler intercepted an error: 11754 job: 11754 Rufus::Scheduler::CronJob "\*/14 \* \* \* \*" {} 11754 error: 11754 11754 …

---

## [Aggregations: Possible to return additional fields?](https://discuss.elastic.co/t/aggregations-possible-to-return-additional-fields/19852)

<div class="topic-metadata">

**Author:** [@James\_Addison](https://discuss.elastic.co/u/James_Addison)\
**Replies:** 1\
**Last updated:** [September 18, 2014, 6:05am UTC](https://discuss.elastic.co/t/aggregations-possible-to-return-additional-fields/19852 "2014-09-18T06:05:03Z")

</div>

Is it possible to do a terms aggregation on a 'tags.id' field but also get back the associated 'tags.slug' and 'tags.name' fields? Here's how the documents are structured: { "id: 42, "name": Beer, "…

---

## [How to make nodes forget about the old/previous cluster?](https://discuss.elastic.co/t/how-to-make-nodes-forget-about-the-old-previous-cluster/306315)

<div class="topic-metadata">

**Author:** [@AS11](https://discuss.elastic.co/u/AS11)\
**Replies:** 3\
**Last updated:** [June 3, 2022, 12:04pm UTC](https://discuss.elastic.co/t/how-to-make-nodes-forget-about-the-old-previous-cluster/306315 "2022-06-03T12:04:49Z")

</div>

I had (and still have) a running 3-node cluster C1. C1 has all 3 nodes (es0,es1,es2) as master nodes. Then, accessible within the same network, I wanted to set up a second cluster C2 (nodes es3,es4,es5), to which I would…

---

## [How to connect to DB2 using JDBC with securityMechanism=13](https://discuss.elastic.co/t/how-to-connect-to-db2-using-jdbc-with-securitymechanism-13/249410)

<div class="topic-metadata">

**Author:** [@fsilveir](https://discuss.elastic.co/u/fsilveir)\
**Replies:** 0\
**Last updated:** [September 21, 2020, 6:40pm UTC](https://discuss.elastic.co/t/how-to-connect-to-db2-using-jdbc-with-securitymechanism-13/249410 "2020-09-21T18:40:18Z")

</div>

Hi there, I'm trying to extract some data from a DB2 database with securityMechanism 13. I've tried passing this parameter as part of the connection string as shown below: input { jdbc { jdbc\_connection\_string =\> …

---

## [Looking for systemd startup script examples for Elasticsearch 7.7.0, etc... CentOS 7](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405)

<div class="topic-metadata">

**Author:** [@uf0undzach](https://discuss.elastic.co/u/uf0undzach)\
**Replies:** 3\
**Last updated:** [August 3, 2020, 5:08pm UTC](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405 "2020-08-03T17:08:42Z")

</div>

Relatively new to ELK... I inherited this ELK server from another admin, and it appears that it was not installed via conventional means, as there are no x.services files in /systemd/system, etc.. The ELK processes work…

---

## [Setting privileges to spaces, privileges not working on default space](https://discuss.elastic.co/t/setting-privileges-to-spaces-privileges-not-working-on-default-space/187977)

<div class="topic-metadata">

**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\
**Replies:** 8\
**Last updated:** [June 28, 2019, 9:49am UTC](https://discuss.elastic.co/t/setting-privileges-to-spaces-privileges-not-working-on-default-space/187977 "2019-06-28T09:49:23Z")

</div>

Hi, I am using security feature in my project. I have three spaces, test1, test2 and default. I created a role and set privileges: test1: read test2: none default: none Now I created a user: test\_user with this role…

---

## [Unable to send CSV data through email notification](https://discuss.elastic.co/t/unable-to-send-csv-data-through-email-notification/160867)

<div class="topic-metadata">

**Author:** [@priya08](https://discuss.elastic.co/u/priya08)\
**Replies:** 3\
**Last updated:** [January 7, 2019, 9:31am UTC](https://discuss.elastic.co/t/unable-to-send-csv-data-through-email-notification/160867 "2019-01-07T09:31:02Z")

</div>

Hi Team, I am unable to send the email notification with kibana generated CSV report actual data , its having some meta data information like index name and other columns name . I am using below reqeust , PUT \_xpack/…

[Previous page](https://discuss.elastic.co/top.md?page=1328&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1330&per_page=50&period=all)
