# Top **URL:** https://discuss.elastic.co/top.md?page=1330&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1331 --- ## [Retrieve distinct values from multiple fields in ElasticSearch](https://discuss.elastic.co/t/retrieve-distinct-values-from-multiple-fields-in-elasticsearch/100523)
**Author:** [@stackf01](https://discuss.elastic.co/u/stackf01)\ **Replies:** 0\ **Last updated:** [September 14, 2017, 11:39am UTC](https://discuss.elastic.co/t/retrieve-distinct-values-from-multiple-fields-in-elasticsearch/100523 "2017-09-14T11:39:03Z")
Hello, How can I retrieve distinct values from multiple fields in elasticsearch ? I have used the below method, but it seems too nested. Can someone provide a more efficient way of doing it ? { "size":"0", "aggs" : … --- ## [Defining Elasticsearch mapping for ingest-attachment inner field](https://discuss.elastic.co/t/defining-elasticsearch-mapping-for-ingest-attachment-inner-field/87533)
**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\ **Replies:** 3\ **Last updated:** [June 4, 2017, 12:04pm UTC](https://discuss.elastic.co/t/defining-elasticsearch-mapping-for-ingest-attachment-inner-field/87533 "2017-06-04T12:04:22Z")
I'm trying to build an application using an Elasticsearch index. I have several "inner" fields which can contain binary data (mainly PDF), and I'm looking for the best way to define my pipeline and mapping, given the fac… --- ## [Heap issue after upgrading Elasticsearch from v1.7.5 to v2.4.1](https://discuss.elastic.co/t/heap-issue-after-upgrading-elasticsearch-from-v1-7-5-to-v2-4-1/65612)
**Author:** [@asr](https://discuss.elastic.co/u/asr)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 9:12am UTC](https://discuss.elastic.co/t/heap-issue-after-upgrading-elasticsearch-from-v1-7-5-to-v2-4-1/65612 "2016-11-14T09:12:05Z")
Hi, After upgrading Elasticsearch from v1.7.5 to v2.4.1, we are facing issues with the JAVA Heap. The following image shows the behavior of the java heap memory usage before and after the upgrade (the red line identifie… --- ## [Kibana 5.0 Tribe Node is not working in ES 5.0](https://discuss.elastic.co/t/kibana-5-0-tribe-node-is-not-working-in-es-5-0/65478)
**Author:** [@mcortinas](https://discuss.elastic.co/u/mcortinas)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 2:46pm UTC](https://discuss.elastic.co/t/kibana-5-0-tribe-node-is-not-working-in-es-5-0/65478 "2016-11-09T14:46:52Z")
Hello, I'm working in cloud environment with multiples applications. We're using 1 ES version 5.0 cluster for each application and Tribe nodes for dispatch queries in multiple ES Cluster. I read https://www.el… --- ## [HOW TO ElasticSearch Using Marvel with Google Compute Engine Instance](https://discuss.elastic.co/t/how-to-elasticsearch-using-marvel-with-google-compute-engine-instance/31687)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 3\ **Last updated:** [October 7, 2015, 7:36am UTC](https://discuss.elastic.co/t/how-to-elasticsearch-using-marvel-with-google-compute-engine-instance/31687 "2015-10-07T07:36:19Z")
We have created instance and then installed marvel and I'm trying to connect to that instance but it was not connecting.Can you please where the cors settings should be changed. Thanks in Advance Kartheek Gummaluri --- ## [Found xpack.reporting.capture.timeouts.openUrl timeout during create report pdf on elastic 7.11.2](https://discuss.elastic.co/t/found-xpack-reporting-capture-timeouts-openurl-timeout-during-create-report-pdf-on-elastic-7-11-2/277582)
**Author:** [@golfreeze](https://discuss.elastic.co/u/golfreeze)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 4:49pm UTC](https://discuss.elastic.co/t/found-xpack-reporting-capture-timeouts-openurl-timeout-during-create-report-pdf-on-elastic-7-11-2/277582 "2021-07-06T16:49:55Z")
elastic 7.11.2 xpack.reporting.capture.timeouts.openUrl timeout on security onion and try to added xpack.reporting.capture.timeouts.renderComplete: 120000 xpack.reporting.capture.timeouts.openUrl: 120000 xpack.report… --- ## [Elasticsearch persistent settings](https://discuss.elastic.co/t/elasticsearch-persistent-settings/233335)
**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\ **Replies:** 5\ **Last updated:** [May 20, 2020, 6:18pm UTC](https://discuss.elastic.co/t/elasticsearch-persistent-settings/233335 "2020-05-20T18:18:30Z")
On occasion, it's necessary for us to redeploy our eck stack. Kubernetes makes this convenient, and we don't mind having to clear our persistent storage if it's necessary at the time, but it would be really helpful if o… --- ## [Copy winlog.user.name (if present) to user.name (if missing)](https://discuss.elastic.co/t/copy-winlog-user-name-if-present-to-user-name-if-missing/229313)
**Author:** [@\_finack](https://discuss.elastic.co/u/_finack)\ **Replies:** 5\ **Last updated:** [April 27, 2020, 9:39pm UTC](https://discuss.elastic.co/t/copy-winlog-user-name-if-present-to-user-name-if-missing/229313 "2020-04-27T21:39:59Z")
For normalization purposes, I would like to copy the contents of winlog.user.name to user.name if the former is present but the latter is not. I tried the following, but it does not work: - copy\_fields: when: … --- ## [バージョン6系への移行について](https://discuss.elastic.co/t/topic/142302)
**Author:** [@Skane](https://discuss.elastic.co/u/Skane)\ **Replies:** 5\ **Last updated:** [August 1, 2018, 3:52am UTC](https://discuss.elastic.co/t/topic/142302 "2018-08-01T03:52:15Z")
Elasticsearch6系を使用した場合のIndexの扱いについて困ったことが出て来ました。 現状、Elasticsearch5.6系を使用しておりまして、今後6の最新バージョンに移行を検討している段階でおります。 そのときに懸念事項が出てきてしまいまして、 6系以降からtypeの概念をなくそうとしているとのことですが、 現状、色々なフィールドを自由に組み合わせてmapping定義が追加されていくようなサービスを使っておりま… --- ## [Alerts based on increase in logged value, rather than specific threshold](https://discuss.elastic.co/t/alerts-based-on-increase-in-logged-value-rather-than-specific-threshold/261163)
**Author:** [@Christopher1](https://discuss.elastic.co/u/Christopher1)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 12:48pm UTC](https://discuss.elastic.co/t/alerts-based-on-increase-in-logged-value-rather-than-specific-threshold/261163 "2021-01-18T12:48:54Z")
Hi there, I am quite new to the Elastic Stack, as is my company. We are attempting to build a centralized logging and alerting system, building dashboards and alerts in Kibana. Currently we have AWS Lambda functions ship… --- ## [Exception in thread "main" java.nio.file.AccessDeniedException](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849)
**Author:** [@Elastic-Noob](https://discuss.elastic.co/u/Elastic-Noob)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 2:02pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849 "2020-09-28T14:02:36Z")
I'm getting the following error when running elasticsearch.bat C:\\Program Files\\Elastic\\Elasticsearch\\7.7.0\\bin\> .\\elasticsearch.bat Exception in thread "main" java.nio.file.AccessDeniedException: C:\\ProgramData\\Elasti… --- ## [Filebeat stop harvesting new logs](https://discuss.elastic.co/t/filebeat-stop-harvesting-new-logs/208416)
**Author:** [@wackwinds](https://discuss.elastic.co/u/wackwinds)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:56am UTC](https://discuss.elastic.co/t/filebeat-stop-harvesting-new-logs/208416 "2019-11-19T04:56:12Z")
Hi all, I used filebeat to collect docker logs in k8s. After all environment prepared, filebeat send some logs to logstash, but a short time later it stopped sending any logs to logstash. Can someone help me with this pr… --- ## [Metricbeat 6.3.0 tries to connect on 443 instead of 9243](https://discuss.elastic.co/t/metricbeat-6-3-0-tries-to-connect-on-443-instead-of-9243/145919)
**Author:** [@jmcherian](https://discuss.elastic.co/u/jmcherian)\ **Replies:** 2\ **Last updated:** [August 27, 2018, 10:23am UTC](https://discuss.elastic.co/t/metricbeat-6-3-0-tries-to-connect-on-443-instead-of-9243/145919 "2018-08-27T10:23:16Z")
Hi I am trying to evaluate ECE and configured a cluster and am trying to set up a issue with metric beat to send performance information to ECE cloud. I keep getting error showing that the connection is refused. Firewa… --- ## [Multi-table JDBC Support](https://discuss.elastic.co/t/multi-table-jdbc-support/32173)
**Author:** [@Jaraxal](https://discuss.elastic.co/u/Jaraxal)\ **Replies:** 2\ **Last updated:** [October 14, 2015, 1:01pm UTC](https://discuss.elastic.co/t/multi-table-jdbc-support/32173 "2015-10-14T13:01:54Z")
Does Logstash support using JDBC to pull data from multiple, related tables as a single index? We have data sources that have multiple tables, between 10 and 20. There is always a primary table that has the key used to… --- ## [Return nested fields from query using source filter](https://discuss.elastic.co/t/return-nested-fields-from-query-using-source-filter/238091)
**Author:** [@misheck](https://discuss.elastic.co/u/misheck)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 3:25pm UTC](https://discuss.elastic.co/t/return-nested-fields-from-query-using-source-filter/238091 "2020-06-22T15:25:58Z")
I am trying to query my signals indices in Elastic and I would like the results to return only the fields that I am interested and my current challenge is that some of the fields are nested. I have tried various methods … --- ## [Unable to configure plugins](https://discuss.elastic.co/t/unable-to-configure-plugins/226526)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 1\ **Last updated:** [April 4, 2020, 9:23pm UTC](https://discuss.elastic.co/t/unable-to-configure-plugins/226526 "2020-04-04T21:23:51Z")
Hi, I'm using Elasticsearch 1.7 and trying to copy documents from old index to new index using Logstash 7.6. Here is my configuration file: input { # We read from the "old" cluster elasticsearch { hosts =\> \[ "… --- ## [Migrating elasticsearch data](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905)
**Author:** [@ShahafSW](https://discuss.elastic.co/u/ShahafSW)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 9:03am UTC](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905 "2019-08-28T09:03:07Z")
Hey Everyone, I have this situation that I have a disconnected elasticsearch\[1\] environment and I need to transfer the data to another elasticsearch\[2\] cluster. I was thinking to export all of the data from \[1\] to a Js… --- ## [A Little guidance please](https://discuss.elastic.co/t/a-little-guidance-please/171598)
**Author:** [@10acc](https://discuss.elastic.co/u/10acc)\ **Replies:** 7\ **Last updated:** [March 11, 2019, 2:34pm UTC](https://discuss.elastic.co/t/a-little-guidance-please/171598 "2019-03-11T14:34:52Z")
Hello, and first of all I would like to say that your product is looking awesome , and pretty noob friendly ( having in mind that I managed to sort of set it up in one day). I am mainly looking to filtering Haproxy logs… --- ## [Configure Logstash to send MS SQL ErrorLog](https://discuss.elastic.co/t/configure-logstash-to-send-ms-sql-errorlog/154794)
**Author:** [@Mustapha\_MJ](https://discuss.elastic.co/u/Mustapha_MJ)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 8:38pm UTC](https://discuss.elastic.co/t/configure-logstash-to-send-ms-sql-errorlog/154794 "2018-11-01T20:38:10Z")
Hi guys i spend almost a week without result trying to find out how to send ErrorLogs of my MS SQL Server to Elasticsearch via logstash, in another word i want a logstash config file sample --- ## [Search for a parent and all it's children in one query in elastic search](https://discuss.elastic.co/t/search-for-a-parent-and-all-its-children-in-one-query-in-elastic-search/122902)
**Author:** [@RishuK](https://discuss.elastic.co/u/RishuK)\ **Replies:** 1\ **Last updated:** [March 8, 2018, 5:21am UTC](https://discuss.elastic.co/t/search-for-a-parent-and-all-its-children-in-one-query-in-elastic-search/122902 "2018-03-08T05:21:01Z")
Referring to the examples mentioned in the official documentation of building a parent-child relationship - https://www.elastic.co/guide/en/elasticsearch/reference/current/parent-join.html The link has provided question… --- ## [Kafka Logstash Plugin Not Working 6.12](https://discuss.elastic.co/t/kafka-logstash-plugin-not-working-6-12/116297)
**Author:** [@grantcurell](https://discuss.elastic.co/u/grantcurell)\ **Replies:** 1\ **Last updated:** [January 21, 2018, 6:26pm UTC](https://discuss.elastic.co/t/kafka-logstash-plugin-not-working-6-12/116297 "2018-01-21T18:26:06Z")
I'm new to Kafka and Logstash, but have done a fair amount of studying and have encountered a series of errors which I can't figure out and have no idea how to fix. ... had to cut because character limit pipeline.RUBY$… --- ## [Using dis\_max query in a filter](https://discuss.elastic.co/t/using-dis-max-query-in-a-filter/88870)
**Author:** [@stevenmwall](https://discuss.elastic.co/u/stevenmwall)\ **Replies:** 1\ **Last updated:** [June 9, 2017, 7:49pm UTC](https://discuss.elastic.co/t/using-dis-max-query-in-a-filter/88870 "2017-06-09T19:49:40Z")
I have documents in my Elasticsearch index like tihs: { "id": 1, "text": "My document text", "field1": "value1", "field2": "value2" } I need to support: A user entered query string that should search the "t… --- ## [Unable to install ES 5 (but can ES 2) on macOS Sierra](https://discuss.elastic.co/t/unable-to-install-es-5-but-can-es-2-on-macos-sierra/69119)
**Author:** [@gsccheng](https://discuss.elastic.co/u/gsccheng)\ **Replies:** 1\ **Last updated:** [January 27, 2017, 9:12pm UTC](https://discuss.elastic.co/t/unable-to-install-es-5-but-can-es-2-on-macos-sierra/69119 "2017-01-27T21:12:24Z")
EDIT: This problem is now resolved. It was because of my .bash\_profile. Hi, I made an SO post here on my problem here: http://stackoverflow.com/questions/41149796/unable-to-install-elasticsearch-on-mac-sierra-10-12-2?n… --- ## [Logstash high availability](https://discuss.elastic.co/t/logstash-high-availability/26796)
**Author:** [@saif](https://discuss.elastic.co/u/saif)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 11:37pm UTC](https://discuss.elastic.co/t/logstash-high-availability/26796 "2016-02-11T23:37:19Z")
hi im using 2 logstash servers as shipper actually im trying to set up HAporxy and Keepalived to set the LB between the server because im use rsyslog as log forworder to send logs to an VIP (haproxy) this is the best… --- ## [Having problem getting syslog to show on Elasticsearch](https://discuss.elastic.co/t/having-problem-getting-syslog-to-show-on-elasticsearch/273179)
**Author:** [@Praewpun](https://discuss.elastic.co/u/Praewpun)\ **Replies:** 4\ **Last updated:** [May 18, 2021, 1:41pm UTC](https://discuss.elastic.co/t/having-problem-getting-syslog-to-show-on-elasticsearch/273179 "2021-05-18T13:41:24Z")
Hi, I'm having problems trying to get syslog sent by external sources to logstash, then to elasticsearch (Kibana). I think the problem is that I don't understand what should the host and port should be specified. Here … --- ## [Single Node Performance and periodic latency spikes](https://discuss.elastic.co/t/single-node-performance-and-periodic-latency-spikes/192855)
**Author:** [@Samy\_Ateia](https://discuss.elastic.co/u/Samy_Ateia)\ **Replies:** 4\ **Last updated:** [July 31, 2019, 7:34am UTC](https://discuss.elastic.co/t/single-node-performance-and-periodic-latency-spikes/192855 "2019-07-31T07:34:29Z")
Hi Everyone, we are currently conducting experiments to evaluate Elasticsearch for our Use-Case. While doing performance tests on a single Node instance, we came across some periodic search-latency spikes. We are runni… --- ## [Share visualisations with read-only users](https://discuss.elastic.co/t/share-visualisations-with-read-only-users/187166)
**Author:** [@Kult](https://discuss.elastic.co/u/Kult)\ **Replies:** 4\ **Last updated:** [June 25, 2019, 8:54am UTC](https://discuss.elastic.co/t/share-visualisations-with-read-only-users/187166 "2019-06-25T08:54:09Z")
Hi, I'm looking for a way to share visualisations with read-only users. The kibana\_dashboard\_only\_user role works like a charm for dashboards, and since dashboards are basically collections of visualisations I'd think t… --- ## [Elasticsearch - How to find similarity between 2 arrays?](https://discuss.elastic.co/t/elasticsearch-how-to-find-similarity-between-2-arrays/171239)
**Author:** [@aditisrinivas97](https://discuss.elastic.co/u/aditisrinivas97)\ **Replies:** 4\ **Last updated:** [March 8, 2019, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-find-similarity-between-2-arrays/171239 "2019-03-08T10:46:07Z")
I have an array of integers stored in ES say : \[1,2,3,4,5\] Now my query array is \[1,2,3,7,8\] I want to be able to get a score of how similar the two arrays are. For example, Array in ES - \[1,2,3,4,5\] Query 1 - \[1,2,… --- ## [Best way to reindex in production](https://discuss.elastic.co/t/best-way-to-reindex-in-production/11792)
**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\ **Replies:** 4\ **Last updated:** [June 6, 2017, 7:22am UTC](https://discuss.elastic.co/t/best-way-to-reindex-in-production/11792 "2017-06-06T07:22:37Z")
Hello, I'm running Elastic 0.26, 2 nodes. I need to make a change to the mapping. The cluster is in heavy use 24/7. What is the best way to do this? -Matt -- You received this message because you are su… --- ## [Logstash Filter Verifier - Multiline Messages](https://discuss.elastic.co/t/logstash-filter-verifier-multiline-messages/84463)
**Author:** [@dawi](https://discuss.elastic.co/u/dawi)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 3:28pm UTC](https://discuss.elastic.co/t/logstash-filter-verifier-multiline-messages/84463 "2017-05-30T15:28:18Z")
Logstash Filter Verifier works great for testing even complex Logstash Pipelines. However it seems that it currently does not support testing of multiline messages properly. Whenever I add a "\\n" into the message strin… --- ## [Using sentry logging with elasticsearch](https://discuss.elastic.co/t/using-sentry-logging-with-elasticsearch/42356)
**Author:** [@vicmosin](https://discuss.elastic.co/u/vicmosin)\ **Replies:** 0\ **Last updated:** [February 22, 2016, 6:22am UTC](https://discuss.elastic.co/t/using-sentry-logging-with-elasticsearch/42356 "2016-02-22T06:22:45Z")
I try to store all the logs at sentry instance. Accordingly to this thread I tried the following: Added sentry appender to loggin.yml: es.logger.level: INFO rootLogger: ${es.logger.level}, console, sentry ... appende… --- ## [Cluster fails to elect master after using new data store](https://discuss.elastic.co/t/cluster-fails-to-elect-master-after-using-new-data-store/335450)
**Author:** [@Xand](https://discuss.elastic.co/u/Xand)\ **Replies:** 6\ **Last updated:** [June 13, 2023, 2:36pm UTC](https://discuss.elastic.co/t/cluster-fails-to-elect-master-after-using-new-data-store/335450 "2023-06-13T14:36:41Z")
We have a 2-node cluster running on an Openshift platform. Recently, we installed new NFS volume shares to be used as data stores for the cluster, and we want to make a new cluster using those volumes. After deleting the… --- ## [Error: Could not find or load main class org.elasticsearch.launcher.CliToolLauncher](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572)
**Author:** [@dziugitaz](https://discuss.elastic.co/u/dziugitaz)\ **Replies:** 3\ **Last updated:** [January 12, 2023, 3:26am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572 "2023-01-12T03:26:27Z")
I'm using windows and when I'm trying to run any other command than bin/elasticsearch.bat I get this strange error, maybe do you know why? I've checked the logs but I didn't found anything other than this dziugas@DESKTO… --- ## [Collector \[cluster\_stats\] timed out when collecting data: node](https://discuss.elastic.co/t/collector-cluster-stats-timed-out-when-collecting-data-node/319955)
**Author:** [@rh05](https://discuss.elastic.co/u/rh05)\ **Replies:** 3\ **Last updated:** [November 29, 2022, 9:12am UTC](https://discuss.elastic.co/t/collector-cluster-stats-timed-out-when-collecting-data-node/319955 "2022-11-29T09:12:54Z")
Hello everyone, I have a problem if someone can help me it would be very appreciated. For several weeks I have noticed that my elastic cluster is unavailable for about 1 hour almost all the time at the same time on Sun… --- ## [Openid connect for kibana login](https://discuss.elastic.co/t/openid-connect-for-kibana-login/211792)
**Author:** [@amiya-santra](https://discuss.elastic.co/u/amiya-santra)\ **Replies:** 3\ **Last updated:** [December 13, 2019, 1:51pm UTC](https://discuss.elastic.co/t/openid-connect-for-kibana-login/211792 "2019-12-13T13:51:35Z")
Hi, I am using an x-pack trail license, using openid connect to use our customized oauth2.0 but, it is giving error : Successfully exchanged code for ID Token: \[null\] and Access Token \[2019-12-13T15:26:42,047\]\[DEBUG\]\[o… --- ## [Call REST API using ingest pipeline script processor](https://discuss.elastic.co/t/call-rest-api-using-ingest-pipeline-script-processor/103468)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 3\ **Last updated:** [October 11, 2017, 8:14am UTC](https://discuss.elastic.co/t/call-rest-api-using-ingest-pipeline-script-processor/103468 "2017-10-11T08:14:37Z")
Hello Team, Is is possible to call any REST API through the ingest pipeline script processor? Thanks, Rohan --- ## [Filter Multiple Patterns](https://discuss.elastic.co/t/filter-multiple-patterns/98016)
**Author:** [@Bhuvanesh](https://discuss.elastic.co/u/Bhuvanesh)\ **Replies:** 3\ **Last updated:** [August 25, 2017, 7:58am UTC](https://discuss.elastic.co/t/filter-multiple-patterns/98016 "2017-08-25T07:58:01Z")
Hi All, I have an ELK integrated log server. Normally I get all the messages in the format %{SYSLOGTIMESTAMP} %{SYSLOGHOST:sysloghost} %{SYSLOGPROG:syslogprog}: %{GREEDYDATA:Message} I have two level filters where I … --- ## [Wireless LAN: Unsupported link type](https://discuss.elastic.co/t/wireless-lan-unsupported-link-type/88571)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 3\ **Last updated:** [June 8, 2017, 12:54pm UTC](https://discuss.elastic.co/t/wireless-lan-unsupported-link-type/88571 "2017-06-08T12:54:05Z")
Hi! I'm trying to index a pcap-file with wireless traffic using Packetbeat 5.4.1: packetbeat -e -v -waitstop 10 -t -d publish -I c:\\temp\\wlan-132\_07.06.17\_1232.eth but getting the following error: 2017/06/07 11:52:0… --- ## [Kibana does't show all data from daily indices](https://discuss.elastic.co/t/kibana-doest-show-all-data-from-daily-indices/66388)
**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 2:50pm UTC](https://discuss.elastic.co/t/kibana-doest-show-all-data-from-daily-indices/66388 "2016-11-17T14:50:50Z")
Hi, My kibana has a strange behavior, when I select a Last 24h on the Discovery tab to see data from two days, sometimes kibana only shows data from one day. But if I select, e.g. Last 12h, I can visualize data from … --- ## [How to use APM with php](https://discuss.elastic.co/t/how-to-use-apm-with-php/297799)
**Author:** [@tronje85](https://discuss.elastic.co/u/tronje85)\ **Replies:** 1\ **Last updated:** [February 23, 2022, 12:27pm UTC](https://discuss.elastic.co/t/how-to-use-apm-with-php/297799 "2022-02-23T12:27:05Z")
Hi After reading the documentation for the PHP APM Agent 3 times, I still don't understand how it works. Initial situation: one has written a web page in PHP and uses for example the monolog handler. (1) Is the workflo… --- ## [Elasticsearch to Google sheets](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173 "2021-03-15T22:10:26Z")
Hi All, Is there any direct way to export data from the Elasticsearch index to Googlesheets (not from google sheets to elasticsearch) based on a defined iterval without using any ETL tool or script? Something like G-conn… --- ## [If statement in timelion](https://discuss.elastic.co/t/if-statement-in-timelion/110795)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 1\ **Last updated:** [December 8, 2017, 10:22pm UTC](https://discuss.elastic.co/t/if-statement-in-timelion/110795 "2017-12-08T22:22:21Z")
Is it possible to exclude a document based on a value in a field? In my case, I want to count the ammount of errors, but only if the field 'status' is not set to 3 (Range from 1 to 6). I have found tahe blog about if's… --- ## [X-pack integration with netcool or any other event management tool](https://discuss.elastic.co/t/x-pack-integration-with-netcool-or-any-other-event-management-tool/86949)
**Author:** [@hemasalma](https://discuss.elastic.co/u/hemasalma)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 3:48pm UTC](https://discuss.elastic.co/t/x-pack-integration-with-netcool-or-any-other-event-management-tool/86949 "2017-05-24T15:48:06Z")
Hello, I have installed x-pack 5.3 in our elasticsearch server 5.3 and we are able to get alerts generated but when it comes to actions part we need to send our alerts to netcool or any other management tool so do i ha… --- ## [Filebeats not shipping auth.log](https://discuss.elastic.co/t/filebeats-not-shipping-auth-log/45054)
**Author:** [@dach384](https://discuss.elastic.co/u/dach384)\ **Replies:** 1\ **Last updated:** [March 22, 2016, 6:49am UTC](https://discuss.elastic.co/t/filebeats-not-shipping-auth-log/45054 "2016-03-22T06:49:52Z")
Hi there, Filebeat version = 1.1.2 Operating System = Ubuntu 12.04 The problem I'm having is that my auth.log is being sent to logstash server. It might be that the auth.log is owned by user "syslog" and group "adm"… --- ## [環境構築でのエラー。java.lang.UnsupportedClassVersionError](https://discuss.elastic.co/t/java-lang-unsupportedclassversionerror/32958)
**Author:** [@hase\_gawa](https://discuss.elastic.co/u/hase_gawa)\ **Replies:** 1\ **Last updated:** [October 26, 2015, 7:24am UTC](https://discuss.elastic.co/t/java-lang-unsupportedclassversionerror/32958 "2015-10-26T07:24:10Z")
環境は以下になります。 Mac yosemite java -version java version "1.6.0\_65" javac -version javac 1.6.0\_65 elasticsearch-1.7.3をHPからzipでダウンロード $ pwd ~/elasticsearch/elasticsearch-1.7.3 この状態で、./bin/elasticsearch を実行すると以下のエラー… --- ## [script\_score return is strange](https://discuss.elastic.co/t/script-score-return-is-strange/29207)
**Author:** [@jianfeng\_ye](https://discuss.elastic.co/u/jianfeng_ye)\ **Replies:** 1\ **Last updated:** [September 14, 2015, 2:14am UTC](https://discuss.elastic.co/t/script-score-return-is-strange/29207 "2015-09-14T02:14:27Z")
I need to get documents order by custom score, so i use script\_score: $params = \[ 'index' =\> "questions", 'type' =\> "baichebao", 'body' =\> \[ 'from' =\> $from, … --- ## [FATAL Error: Unknown configuration key(s): "action.auto\_create\_index"](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850)
**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 6:01pm UTC](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850 "2021-12-04T18:01:32Z")
Hi, i have this message when i start the service kibana: my kibana.yml file: # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 elasticsearch.hosts: - https://elk0… --- ## [Get API, refresh=wait\_for not allowed](https://discuss.elastic.co/t/get-api-refresh-wait-for-not-allowed/230396)
**Author:** [@antonio\_antuan](https://discuss.elastic.co/u/antonio_antuan)\ **Replies:** 2\ **Last updated:** [April 29, 2020, 8:14pm UTC](https://discuss.elastic.co/t/get-api-refresh-wait-for-not-allowed/230396 "2020-04-29T20:14:44Z")
Hi! I'm using elasticsearch 7.4.2. Docs are saying that I can set refresh parameter with wait\_for value. But if I try to do this, an error is returned: GET http://0.0.0.0:9200/events/\_doc/31780294-6529-425d-b0fa-7b03b9… --- ## [How to assign nodeSelector to Kibana](https://discuss.elastic.co/t/how-to-assign-nodeselector-to-kibana/210636)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 8:55am UTC](https://discuss.elastic.co/t/how-to-assign-nodeselector-to-kibana/210636 "2019-12-05T08:55:43Z")
I try to add spec: version: 7.5.0 count: 1 nodeSelector: appType: stateless but it didn't work. --- ## [Painless regex](https://discuss.elastic.co/t/painless-regex/209089)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 2\ **Last updated:** [November 23, 2019, 9:57pm UTC](https://discuss.elastic.co/t/painless-regex/209089 "2019-11-23T21:57:10Z")
Hi, Im trying to extract the "ABCD\_123.123.123.123" part from an adress, can you help me figure it out? ABCD\_123.123.123.123\_DD\_FS This is what I have tried, but it trows me an error at the beggining of the regex def … [Previous page](https://discuss.elastic.co/top.md?page=1329&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1331&per_page=50&period=all)