# Top **URL:** https://discuss.elastic.co/top.md?page=1331&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1332 --- ## [Is the 7.x Elasticsearch APT repository down?](https://discuss.elastic.co/t/is-the-7-x-elasticsearch-apt-repository-down/203071)
**Author:** [@eype69](https://discuss.elastic.co/u/eype69)\ **Replies:** 2\ **Last updated:** [October 11, 2019, 1:33pm UTC](https://discuss.elastic.co/t/is-the-7-x-elasticsearch-apt-repository-down/203071 "2019-10-11T13:33:58Z")
I am trying to install Elasticsearch from the APT repositories as per Elasticsearch Reference \[7.4\] and I am getting an error. See below for the commands issued. Are the Elastic APT repositories up at the moment because … --- ## [\[Help!\] x-pack reporting returns timeout error](https://discuss.elastic.co/t/help-x-pack-reporting-returns-timeout-error/90455)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 6:59am UTC](https://discuss.elastic.co/t/help-x-pack-reporting-returns-timeout-error/90455 "2017-07-21T06:59:24Z")
Hello. I would like get advice for reporting configuration. I am getting Max attempts reached (3) when I generate report. I have an environment which kibana is operating behind reverse proxy (nginx). All elastic co… --- ## [Logstash regexp if not working](https://discuss.elastic.co/t/logstash-regexp-if-not-working/88488)
**Author:** [@rpuserh](https://discuss.elastic.co/u/rpuserh)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 6:08pm UTC](https://discuss.elastic.co/t/logstash-regexp-if-not-working/88488 "2017-06-12T18:08:26Z")
hi, I have JSON which has key body.message and content of this key can be JSON\[OBJECT\] or text (I cant insert like this to ES as it giving mapping error) I want to move it to another field if it look like text and exists… --- ## [ACK Watch API](https://discuss.elastic.co/t/ack-watch-api/49192)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 2\ **Last updated:** [May 5, 2016, 4:31am UTC](https://discuss.elastic.co/t/ack-watch-api/49192 "2016-05-05T04:31:03Z")
I have created a watcher on packetbeat which sends email when http.code goes at or above 10 in the last 1 minute. { "trigger" : { "schedule" : { "interval" : "10s" } }, "input" : { "search" : { … --- ## [Shield license installation error](https://discuss.elastic.co/t/shield-license-installation-error/37458)
**Author:** [@Anusha](https://discuss.elastic.co/u/Anusha)\ **Replies:** 2\ **Last updated:** [December 17, 2015, 12:59pm UTC](https://discuss.elastic.co/t/shield-license-installation-error/37458 "2015-12-17T12:59:53Z")
Hi Team, I have tried to install shield by the procedure given in this link https://www.elastic.co/guide/en/shield/current/installing-shield.html I got installation error as shown in the below image D:\\MyElasticSea… --- ## [Recreate dashboards from kibana3 to kibana4](https://discuss.elastic.co/t/recreate-dashboards-from-kibana3-to-kibana4/26064)
**Author:** [@joiceedattel](https://discuss.elastic.co/u/joiceedattel)\ **Replies:** 2\ **Last updated:** [July 22, 2015, 11:29am UTC](https://discuss.elastic.co/t/recreate-dashboards-from-kibana3-to-kibana4/26064 "2015-07-22T11:29:42Z")
Hi, Currently I'm having a kibana 3 setup and I installed Kibana 4 as a separate installation. Now I want to recreate my existing K3 customized dashboards in K4 . I'm having last 20 days indices file in my elasticsearch-… --- ## [Where is compatibility matrix?](https://discuss.elastic.co/t/where-is-compatibility-matrix/23478)
**Author:** [@Sitkawoof](https://discuss.elastic.co/u/Sitkawoof)\ **Replies:** 2\ **Last updated:** [April 29, 2015, 10:11pm UTC](https://discuss.elastic.co/t/where-is-compatibility-matrix/23478 "2015-04-29T22:11:47Z")
I need to move backward from the current release of ELK due to inability to get Kibana to load pages. There used to be a compatibility matrix telling you which versions of E + L + K play nicely together but I can s… --- ## [Sorting equal scores by field length?](https://discuss.elastic.co/t/sorting-equal-scores-by-field-length/20047)
**Author:** [@Lee\_Gee](https://discuss.elastic.co/u/Lee_Gee)\ **Replies:** 2\ **Last updated:** [October 7, 2014, 12:57pm UTC](https://discuss.elastic.co/t/sorting-equal-scores-by-field-length/20047 "2014-10-07T12:57:51Z")
Is it possible to sort equally-scored results by the length of the field? Or am I doing something else incorrectly? With an edge\_ngram filter on a keyword field, with search term S, I see SUPER comes before S in … --- ## [Update date field format mapping](https://discuss.elastic.co/t/update-date-field-format-mapping/13924)
**Author:** [@Matthias\_Gotzke](https://discuss.elastic.co/u/Matthias_Gotzke)\ **Replies:** 2\ **Last updated:** [October 14, 2013, 10:14am UTC](https://discuss.elastic.co/t/update-date-field-format-mapping/13924 "2013-10-14T10:14:47Z")
Since the format used in the mapping of a field also seems to be used for interpreting query\_string queries. Is it possible to update the format of a mapped date field to include alternate representations ? eg. … --- ## [\[Java\] new equivalent of boolQuery.hasClauses() in ES 8 Java client?](https://discuss.elastic.co/t/java-new-equivalent-of-boolquery-hasclauses-in-es-8-java-client/319485)
**Author:** [@toto12214](https://discuss.elastic.co/u/toto12214)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 5:44pm UTC](https://discuss.elastic.co/t/java-new-equivalent-of-boolquery-hasclauses-in-es-8-java-client/319485 "2022-11-21T17:44:59Z")
Hello, I'm looking for the new equivalent of the old BoolQueryBuilder.hasClauses() for Elasticsearch 8 Java client. It seems to have completely dissapear ? Any workaround about ? --- ## [Detect document position in resultset](https://discuss.elastic.co/t/detect-document-position-in-resultset/184209)
**Author:** [@sevik](https://discuss.elastic.co/u/sevik)\ **Replies:** 0\ **Last updated:** [June 4, 2019, 2:42pm UTC](https://discuss.elastic.co/t/detect-document-position-in-resultset/184209 "2019-06-04T14:42:22Z")
Can I detect concrete document position is elastic query response? I have 15 advert on page, but I want to know position of my advert in elastic query result. Is there a way to find out about document position in query… --- ## [Parse a log line and send only 1st 2 levels](https://discuss.elastic.co/t/parse-a-log-line-and-send-only-1st-2-levels/106238)
**Author:** [@pgokhale10](https://discuss.elastic.co/u/pgokhale10)\ **Replies:** 5\ **Last updated:** [November 2, 2017, 11:08pm UTC](https://discuss.elastic.co/t/parse-a-log-line-and-send-only-1st-2-levels/106238 "2017-11-02T23:08:49Z")
Hi, Lets says my log looks like this: IP - - \[24/Oct/2017:08:11:46 +0000\] "GET /X/Y/Z/ABCD HTTP/1.1" 200 1225 "www.x.com?query=&abcd" "Mozilla/5.0 (X11; Linux x86\_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.… --- ## [Analyse events under detection is not working](https://discuss.elastic.co/t/analyse-events-under-detection-is-not-working/266444)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 5:53pm UTC](https://discuss.elastic.co/t/analyse-events-under-detection-is-not-working/266444 "2021-03-16T17:53:22Z")
Hello, Prior to updating to 7.11.1, analyse events as part of detection alerts was showing chain of events and allowing for quick analysis. However, post the upgrade; I see an "error loading data" whenever I click on an… --- ## [Painless script issue with putAll() and add() methods](https://discuss.elastic.co/t/painless-script-issue-with-putall-and-add-methods/356076)
**Author:** [@Neeraj10](https://discuss.elastic.co/u/Neeraj10)\ **Replies:** 8\ **Last updated:** [April 1, 2024, 4:24pm UTC](https://discuss.elastic.co/t/painless-script-issue-with-putall-and-add-methods/356076 "2024-04-01T16:24:21Z")
I have written a painless script to update a nested field named "workflowassociated" in which I have fields "teamroleids", "userid", "workflowid", etc. I have written some required conditions in the script to update the "… --- ## [Invalid\_index\_name\_exception in Eleasticsearch](https://discuss.elastic.co/t/invalid-index-name-exception-in-eleasticsearch/221057)
**Author:** [@sujit\_kumar](https://discuss.elastic.co/u/sujit_kumar)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 2:34pm UTC](https://discuss.elastic.co/t/invalid-index-name-exception-in-eleasticsearch/221057 "2020-02-26T14:34:04Z")
Hi I am using 7.2.0 version of ELK I have used docker compose file. My containers are running but can't seem my KIbana dash board. When used curl -XGET http://localhost:9200/\_status to check my eleastcisearch, got follo… --- ## [Enrolling agent on Graviton ARM processor](https://discuss.elastic.co/t/enrolling-agent-on-graviton-arm-processor/342351)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 4\ **Last updated:** [September 19, 2023, 3:26pm UTC](https://discuss.elastic.co/t/enrolling-agent-on-graviton-arm-processor/342351 "2023-09-19T15:26:59Z")
Hi, I was wondering if it is possible to run the agent on aarm64 architecture? We're potentially aiming to migrate all of our hosts from x86\_64 to aarm64. However when I try to run the agent install command on a host r… --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 4\ **Last updated:** [December 15, 2021, 12:59pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777 "2021-12-15T12:59:54Z")
Hello everyone. i have a trouble with elastic. the logs stop come in since 16:40 and here is the log of logstash \` \> \[2021-12-14T16:57:20,948\]\[WARN \]\[logstash.outputs.elasticsearch\]\[pipeline\_ocp4\] Could not index event… --- ## [How to Change Default Index Pattern on Filebeat dashboards on Kibana](https://discuss.elastic.co/t/how-to-change-default-index-pattern-on-filebeat-dashboards-on-kibana/281486)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 4\ **Last updated:** [August 15, 2021, 7:51pm UTC](https://discuss.elastic.co/t/how-to-change-default-index-pattern-on-filebeat-dashboards-on-kibana/281486 "2021-08-15T19:51:42Z")
Hi. I am having a hard time trying to figure this out. I changed the default index name to suricata-ids. Also, added this line in order to use this new index on the default dashboards. But still, default dashboa… --- ## [Need Elastic APM support for Ktor backend server](https://discuss.elastic.co/t/need-elastic-apm-support-for-ktor-backend-server/278129)
**Author:** [@Mahesh09](https://discuss.elastic.co/u/Mahesh09)\ **Replies:** 4\ **Last updated:** [July 12, 2021, 4:52pm UTC](https://discuss.elastic.co/t/need-elastic-apm-support-for-ktor-backend-server/278129 "2021-07-12T16:52:38Z")
Our team is trying to monitor performance of our Ktor (by Jetbrains) backend application. We are able to attach Elastic APM agent in backend server, and this server is visible at Kibana dashboard as service. But it is no… --- ## [Import CSV data to Elastic App Search "block in start\_input" Error](https://discuss.elastic.co/t/import-csv-data-to-elastic-app-search-block-in-start-input-error/237937)
**Author:** [@th3Hopper](https://discuss.elastic.co/u/th3Hopper)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 8:40pm UTC](https://discuss.elastic.co/t/import-csv-data-to-elastic-app-search-block-in-start-input-error/237937 "2020-06-20T20:40:42Z")
I'm trying to import CSV data to my Elastic App search but it throwing an error. Error Message:- \[2020-06-21T01:40:17,552\]\[INFO \]\[filewatch.observingtail \]\[main\]\[07a10415268d8655d99cdad82a61cbca125e21687e65bc0296c88f9… --- ## [Extract server name from fqdn](https://discuss.elastic.co/t/extract-server-name-from-fqdn/224503)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 4:45am UTC](https://discuss.elastic.co/t/extract-server-name-from-fqdn/224503 "2020-04-14T04:45:22Z")
in beat.hostname, some are in CAPS / small , lower /upper case characters . To stabilize the search, i want to extract server name without fqdn and store in new field in lower case i tried following mutate { split … --- ## [Querying 5.4 Billion JSON Documents occupying 2 TB - is it possible in Elasticsearch?](https://discuss.elastic.co/t/querying-5-4-billion-json-documents-occupying-2-tb-is-it-possible-in-elasticsearch/227617)
**Author:** [@somnath.choudhuri](https://discuss.elastic.co/u/somnath.choudhuri)\ **Replies:** 1\ **Last updated:** [April 11, 2020, 4:03pm UTC](https://discuss.elastic.co/t/querying-5-4-billion-json-documents-occupying-2-tb-is-it-possible-in-elasticsearch/227617 "2020-04-11T16:03:19Z")
Ingesting once a day (not real-time) 60 million JSON documents via a once run batch script Elasticsearch to query 90 days worth of data for a total of 5.4 billion documents Occupies about 2 TB of storage overall (23 GB … --- ## [Scroll Bar for Bart Chart](https://discuss.elastic.co/t/scroll-bar-for-bart-chart/191089)
**Author:** [@nhbala](https://discuss.elastic.co/u/nhbala)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 5:40pm UTC](https://discuss.elastic.co/t/scroll-bar-for-bart-chart/191089 "2019-07-18T17:40:09Z")
I was wondering if there was a way to enable a scroll bar for bar charts? I have a lot of of categories on my x Axis that I want to represent, but they become unreadable with the amount of categories. --- ## [Elastic EUIBasic Table shows all rows selected](https://discuss.elastic.co/t/elastic-euibasic-table-shows-all-rows-selected/180327)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 5:01am UTC](https://discuss.elastic.co/t/elastic-euibasic-table-shows-all-rows-selected/180327 "2019-05-10T05:01:52Z")
Hello Team, I am using Kibana 6.3 and generated custom plugin using Kibana 6.3 source code. I am facing issue in EUIBasic Table. all table items are shows selected even only one row item is clicked. Here is my confi… --- ## [Elasticsearch on RHEL 7.4 installation](https://discuss.elastic.co/t/elasticsearch-on-rhel-7-4-installation/147655)
**Author:** [@msomasun](https://discuss.elastic.co/u/msomasun)\ **Replies:** 4\ **Last updated:** [September 14, 2018, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-on-rhel-7-4-installation/147655 "2018-09-14T06:52:31Z")
Hi I am installing Elasticsearch in RHEL by downloading the RPM. Any suggestions on below issue. in /etc/elasticsearch/elasticsearch.yml i have made below chagne. network.host: 0.0.0.0 \[root@bdm ~\]# ll total 95576 … --- ## [Custom Realm Authentication Validation](https://discuss.elastic.co/t/custom-realm-authentication-validation/99459)
**Author:** [@Aclose](https://discuss.elastic.co/u/Aclose)\ **Replies:** 4\ **Last updated:** [September 7, 2017, 11:03am UTC](https://discuss.elastic.co/t/custom-realm-authentication-validation/99459 "2017-09-07T11:03:33Z")
Hi All, I have created a custom realm and trying to validate that it is working in curl. It has the following request headers: audience referer stoken username How do I test this is working via curl? It seems to only… --- ## [Index level settings are wiped-out from v5.2.2](https://discuss.elastic.co/t/index-level-settings-are-wiped-out-from-v5-2-2/81975)
**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\ **Replies:** 4\ **Last updated:** [April 13, 2017, 3:37am UTC](https://discuss.elastic.co/t/index-level-settings-are-wiped-out-from-v5-2-2/81975 "2017-04-13T03:37:01Z")
Hello techies we are using elasticsearch 2.1.0(centos7) servers on production. we want to upgrade to v5.2.2 very soon. Following parameters are using while creating new indexes. index.translog.flush\_threshold\_ops: 100000 … --- ## [Adding new Elastic Stack version](https://discuss.elastic.co/t/adding-new-elastic-stack-version/72540)
**Author:** [@stanley.cheung](https://discuss.elastic.co/u/stanley.cheung)\ **Replies:** 4\ **Last updated:** [January 24, 2017, 6:04pm UTC](https://discuss.elastic.co/t/adding-new-elastic-stack-version/72540 "2017-01-24T18:04:06Z")
There doesn't appear to be any documentation in the Elastic Cloud Enterprise reference guide on how to add an Elastic Stack version. What I'm looking for is a how-to guide on creating a docker image with a specific ela… --- ## [Whats different with 'index' and 'create' of Bulk API](https://discuss.elastic.co/t/whats-different-with-index-and-create-of-bulk-api/36240)
**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\ **Replies:** 4\ **Last updated:** [December 3, 2015, 2:57pm UTC](https://discuss.elastic.co/t/whats-different-with-index-and-create-of-bulk-api/36240 "2015-12-03T14:57:05Z")
Hi all, I tried Bulk API from the document as { "index" : { "\_index" : "test", "\_type" : "type1", "\_id" : "1" } } { "field1" : "value1" } { "delete" : { "\_index" : "test", "\_type" : "type1", "\_id" : "2" } } { "create"… --- ## [Custom Logs - json - Why do we need to map fields?](https://discuss.elastic.co/t/custom-logs-json-why-do-we-need-to-map-fields/354542)
**Author:** [@jjwallaby](https://discuss.elastic.co/u/jjwallaby)\ **Replies:** 7\ **Last updated:** [March 11, 2024, 9:32pm UTC](https://discuss.elastic.co/t/custom-logs-json-why-do-we-need-to-map-fields/354542 "2024-03-11T21:32:05Z")
Hi, json objects fields are meant to be dynamic. Does 'Custom Logs' from the 'Elastic Agent' have a facility to map json fields on the fly as entry comes in ? If you do not have any mapping an error occurs 'could no… --- ## [Not able to restore snap shot from 5.6.3 to 7.4.2 elastic search](https://discuss.elastic.co/t/not-able-to-restore-snap-shot-from-5-6-3-to-7-4-2-elastic-search/225679)
**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\ **Replies:** 7\ **Last updated:** [April 3, 2020, 2:05pm UTC](https://discuss.elastic.co/t/not-able-to-restore-snap-shot-from-5-6-3-to-7-4-2-elastic-search/225679 "2020-04-03T14:05:45Z")
Hello , Actually i have installed 5.6.3 elasticsearch and created some indexes not i want to install new version of elastic search 7.4.2 so in that case i followed below steps 1.Take backup by creating snap shot for 5.… --- ## [When filebeat harvest logs to elasticsearch ,"Failed to perform any bulk index operations: 413 Request Entity Too Large:"](https://discuss.elastic.co/t/when-filebeat-harvest-logs-to-elasticsearch-failed-to-perform-any-bulk-index-operations-413-request-entity-too-large/223045)
**Author:** [@ELK\_2100](https://discuss.elastic.co/u/ELK_2100)\ **Replies:** 1\ **Last updated:** [March 11, 2020, 8:13am UTC](https://discuss.elastic.co/t/when-filebeat-harvest-logs-to-elasticsearch-failed-to-perform-any-bulk-index-operations-413-request-entity-too-large/223045 "2020-03-11T08:13:19Z")
2020-03-11T09:00:51.117+0800 INFO pipeline/output.go:105 Connection to backoff(elasticsearch(http://1.2.3.4:9300)) established 2020-03-11T09:00:51.344+0800 ERROR elasticsearch/client.go:343 Failed to perform any bulk in… --- ## [Elastic and kibana send resets on Ubuntu server](https://discuss.elastic.co/t/elastic-and-kibana-send-resets-on-ubuntu-server/196216)
**Author:** [@Mezoloth](https://discuss.elastic.co/u/Mezoloth)\ **Replies:** 7\ **Last updated:** [August 26, 2019, 8:20am UTC](https://discuss.elastic.co/t/elastic-and-kibana-send-resets-on-ubuntu-server/196216 "2019-08-26T08:20:53Z")
I have elastic and kibana setup and running. I can curl to localhost:9200 as show below: root@elk:~# curl http://127.0.0.1:9200 { "name" : "elk", "cluster\_name" : "elasticsearch", "cluster\_uuid" : … --- ## [Calculating one field from different documents](https://discuss.elastic.co/t/calculating-one-field-from-different-documents/119185)
**Author:** [@phia](https://discuss.elastic.co/u/phia)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 9:20am UTC](https://discuss.elastic.co/t/calculating-one-field-from-different-documents/119185 "2018-02-09T09:20:40Z")
Hello guys, is it possible to calculate with one field of two different documents? :woman\_shrugging:t2: Example: I have two documents with the fields "jobID", "number", "jobType" and some others, which are not importa… --- ## [Basic auth header kibana not working](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 7:52am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910 "2021-09-22T07:52:51Z")
I have everything enabled that i can find, which by the way is very difficult to find what i need at times with the elastic docs. I want to pass the Authorization: header with base64 encoded correct credentials for user… --- ## [Can't volume mount /usr/share/elasticsearch/config on docker](https://discuss.elastic.co/t/cant-volume-mount-usr-share-elasticsearch-config-on-docker/184092)
**Author:** [@kimchigood](https://discuss.elastic.co/u/kimchigood)\ **Replies:** 0\ **Last updated:** [June 4, 2019, 5:43am UTC](https://discuss.elastic.co/t/cant-volume-mount-usr-share-elasticsearch-config-on-docker/184092 "2019-06-04T05:43:13Z")
I tried to set up elasticsearch on docker. but i can't volume mount on /usr/share/elasticsearch/config. /usr/share/elasticsearch/data, /usr/share/elasticsearch/plugins is okay. but only i can't volume mount path is /… --- ## [Kibana forcemerge time out](https://discuss.elastic.co/t/kibana-forcemerge-time-out/102870)
**Author:** [@yuanhui](https://discuss.elastic.co/u/yuanhui)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 10:36pm UTC](https://discuss.elastic.co/t/kibana-forcemerge-time-out/102870 "2017-10-06T22:36:25Z")
I try to delete some old data to clean storage space, I use "POST /index/\_forcemerge?only\_expunge\_deletes=true" in Kibana after a delete-by-query, but I get a 502 time out error everytime, what is wrong here? --- ## [New timestamp using dynamic timezone not working](https://discuss.elastic.co/t/new-timestamp-using-dynamic-timezone-not-working/97166)
**Author:** [@bitesize](https://discuss.elastic.co/u/bitesize)\ **Replies:** 3\ **Last updated:** [August 16, 2017, 2:43pm UTC](https://discuss.elastic.co/t/new-timestamp-using-dynamic-timezone-not-working/97166 "2017-08-16T14:43:36Z")
I am trying to add a field called localtimestamp to match the UNIX timestamp received in the json message: {"event": 1,"content": \["test","value1","value2","value3","value4"\],"timestamp": 1502844683} This is my filter … --- ## [Kibana Importing](https://discuss.elastic.co/t/kibana-importing/66296)
**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\ **Replies:** 3\ **Last updated:** [November 16, 2016, 9:02pm UTC](https://discuss.elastic.co/t/kibana-importing/66296 "2016-11-16T21:02:53Z")
So I exported a few Kibana objects (Saved Search, Visualizations, Dashboard) and then I imported the objects in a different ELK system. After exporting, I tried searching for all the Objects in the Kibana Settings Object… --- ## [Elasticsearch bulk request error](https://discuss.elastic.co/t/elasticsearch-bulk-request-error/51830)
**Author:** [@rishi\_shah](https://discuss.elastic.co/u/rishi_shah)\ **Replies:** 3\ **Last updated:** [June 5, 2016, 5:25pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-request-error/51830 "2016-06-05T17:25:17Z")
Hi, I am using this elasticsearch go lib- oliver, I am sending the data to my elastic cluster using the bulk request. But sometimes its failed and showing me this error - "unexpected end of JSON input". I read many artic… --- ## [How to uninstall logstash service in windows?](https://discuss.elastic.co/t/how-to-uninstall-logstash-service-in-windows/304740)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 2\ **Last updated:** [May 15, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash-service-in-windows/304740 "2022-05-15T06:31:42Z")
I want to know how to uninstall Logstash in the windows server? someone please help me with the appropriate command. --- ## [Inline Script with Parameters and Stored Script performance](https://discuss.elastic.co/t/inline-script-with-parameters-and-stored-script-performance/204070)
**Author:** [@aadishj02](https://discuss.elastic.co/u/aadishj02)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 5:33am UTC](https://discuss.elastic.co/t/inline-script-with-parameters-and-stored-script-performance/204070 "2019-10-30T05:33:32Z")
Hi, Is there any performance difference between the inline script with parameters and stored script? And also how is elasticsearch not compiling the script if I use the same inline script with parameters multiple times? … --- ## [Is it possible to mix json and plain text?](https://discuss.elastic.co/t/is-it-possible-to-mix-json-and-plain-text/205141)
**Author:** [@Mikael\_Elkiaer](https://discuss.elastic.co/u/Mikael_Elkiaer)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 2:30pm UTC](https://discuss.elastic.co/t/is-it-possible-to-mix-json-and-plain-text/205141 "2019-10-25T14:30:44Z")
I use filebeat to grab my Docker logs. Most of these are plain text. However, for self-created services I like to use Serilog for structured logging and it therefore formats the logs in elasticsearch format. Is it possi… --- ## [How do I sort of filter based on \_score?](https://discuss.elastic.co/t/how-do-i-sort-of-filter-based-on-score/168911)
**Author:** [@mt-at-td](https://discuss.elastic.co/u/mt-at-td)\ **Replies:** 2\ **Last updated:** [March 12, 2019, 5:52pm UTC](https://discuss.elastic.co/t/how-do-i-sort-of-filter-based-on-score/168911 "2019-03-12T17:52:13Z")
If I follow the syntax of Sorting | Swiftype Documentation and use sort\_field: {page: "\_score"} I get the error {sort\_field: {page: \["DocumentType 'page' does not have a field '\_score'."\]}} If I try to filter with fi… --- ## [How to create .raw field through logstash](https://discuss.elastic.co/t/how-to-create-raw-field-through-logstash/122540)
**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\ **Replies:** 2\ **Last updated:** [March 5, 2018, 8:21pm UTC](https://discuss.elastic.co/t/how-to-create-raw-field-through-logstash/122540 "2018-03-05T20:21:55Z")
Hello, I have been using ELK to see our application logs. I achieved this by feeding application generated logs as JSON string through Logstash --\> Elasticsearch --\> Kibana. All the objects in my JSON stings are anal… --- ## [Filebeat hangs on starting - ubuntu:trusty](https://discuss.elastic.co/t/filebeat-hangs-on-starting-ubuntu-trusty/60370)
**Author:** [@myles-mcdonnell](https://discuss.elastic.co/u/myles-mcdonnell)\ **Replies:** 2\ **Last updated:** [September 13, 2016, 12:15pm UTC](https://discuss.elastic.co/t/filebeat-hangs-on-starting-ubuntu-trusty/60370 "2016-09-13T12:15:48Z")
I am building a docker image to run filebeat which will via a shared volume harvest all the log files output from the other services running in containers on the host. However, it appears to hang on startup. Relevant f… --- ## [Logstash 2.1.0 with ElasticSearch 1.7.3 vs 2.0 vs 2.1 missing data](https://discuss.elastic.co/t/logstash-2-1-0-with-elasticsearch-1-7-3-vs-2-0-vs-2-1-missing-data/36539)
**Author:** [@Adam\_Wrobel](https://discuss.elastic.co/u/Adam_Wrobel)\ **Replies:** 2\ **Last updated:** [December 8, 2015, 3:35am UTC](https://discuss.elastic.co/t/logstash-2-1-0-with-elasticsearch-1-7-3-vs-2-0-vs-2-1-missing-data/36539 "2015-12-08T03:35:39Z")
Hi. I have ES cluster running on 1.7.3 storing logs parsed by logstash 2.1. I prepare new logstash template compatible with ES 2.x and run new separated ES cluster with version 2.0.1 and another one separated with 2.1. … --- ## [Kibana visualization data table results missing](https://discuss.elastic.co/t/kibana-visualization-data-table-results-missing/2349)
**Author:** [@DanielJay](https://discuss.elastic.co/u/DanielJay)\ **Replies:** 2\ **Last updated:** [June 18, 2015, 5:16pm UTC](https://discuss.elastic.co/t/kibana-visualization-data-table-results-missing/2349 "2015-06-18T17:16:09Z")
I am working with a data table of the top 50 event log messages. There are several events that are slipping through the cracks. These events have a backslash in them. For instance the following @message.raw: Activatio… --- ## [How to change the store value of a field](https://discuss.elastic.co/t/how-to-change-the-store-value-of-a-field/23283)
**Author:** [@abr](https://discuss.elastic.co/u/abr)\ **Replies:** 2\ **Last updated:** [April 16, 2015, 7:03pm UTC](https://discuss.elastic.co/t/how-to-change-the-store-value-of-a-field/23283 "2015-04-16T19:03:44Z")
Hello, is there any simple way to update a mapping and change the store value of a field? I'm trying to enable \_timestamp: curl -X PUT http://localhost:9200/ubilogs-mbr/\_mappings/logs -d '{ "logs" : { … --- ## [BulkProcessor + NoNodeAvailableException - things to avoid](https://discuss.elastic.co/t/bulkprocessor-nonodeavailableexception-things-to-avoid/13716)
**Author:** [@Abhishek\_Sanoujam](https://discuss.elastic.co/u/Abhishek_Sanoujam)\ **Replies:** 2\ **Last updated:** [September 23, 2013, 8:26am UTC](https://discuss.elastic.co/t/bulkprocessor-nonodeavailableexception-things-to-avoid/13716 "2013-09-23T08:26:05Z")
Using BulkProcessor and rethrowing exception from the afterBulk() method should not be recommended at all. Currently, doing so results in closing down the transport and resulting in NoNodeAvailableException's subs… [Previous page](https://discuss.elastic.co/top.md?page=1330&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1332&per_page=50&period=all)