# Top **URL:** https://discuss.elastic.co/top.md?page=1335&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1336 --- ## [Fail to update index data on Elasticsearch](https://discuss.elastic.co/t/fail-to-update-index-data-on-elasticsearch/342825)
**Author:** [@Antra](https://discuss.elastic.co/u/Antra)\ **Replies:** 3\ **Last updated:** [September 14, 2023, 5:56pm UTC](https://discuss.elastic.co/t/fail-to-update-index-data-on-elasticsearch/342825 "2023-09-14T17:56:05Z")
Hi team, I am facing an issue while using an Elasticsearch update query. I have given the detailed description of the issue below: Version of Elasticsearch: 7.17.0 Problem Description: My application has different te… --- ## [Elasticsearch cluster search performance is bad after upgrade from 7.17 to 8.8](https://discuss.elastic.co/t/elasticsearch-cluster-search-performance-is-bad-after-upgrade-from-7-17-to-8-8/340592)
**Author:** [@chandra123](https://discuss.elastic.co/u/chandra123)\ **Replies:** 3\ **Last updated:** [August 11, 2023, 5:12pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-search-performance-is-bad-after-upgrade-from-7-17-to-8-8/340592 "2023-08-11T17:12:56Z")
Hello Elasticsearch Community, We recently did in-place upgrade from 7.17 to 8.8 and after which we started to see degraded search performance/latency. We have 150 data nodes and we observed that at most 10 data nodes a… --- ## [Tsvb markdown with two different color table](https://discuss.elastic.co/t/tsvb-markdown-with-two-different-color-table/294054)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 3\ **Last updated:** [January 12, 2022, 3:05pm UTC](https://discuss.elastic.co/t/tsvb-markdown-with-two-different-color-table/294054 "2022-01-12T15:05:23Z")
Hello, I have a use case that i need to created two different bg color table in the same markdown. As i know markdown support class (so i may use class selector in css). But it seems that it don't work in Kibana tsvb ma… --- ## [Cannot index event publisher.Event ... Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/cannot-index-event-publisher-event-cant-get-text-on-a-start-object/207859)
**Author:** [@tkzv](https://discuss.elastic.co/u/tkzv)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 4:11pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-event-cant-get-text-on-a-start-object/207859 "2019-11-27T16:11:00Z")
I'm trying to collect data from Kubernetes cluster using Metricbeat and Kube-state-metrics. My configuration is the same as https://raw.githubusercontent.com/elastic/beats/7.3/deploy/kubernetes/metricbeat-kubernetes.yaml … --- ## [Logstash : Extract values from a String field in Json](https://discuss.elastic.co/t/logstash-extract-values-from-a-string-field-in-json/197349)
**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 4:15pm UTC](https://discuss.elastic.co/t/logstash-extract-values-from-a-string-field-in-json/197349 "2019-08-29T16:15:32Z")
I have the below Json submitted to my logstash from kinesis where the message string in the json contains all the required values which I need to store it as a separate field in elasticsearch . Currently its stored as a … --- ## [ElasticSearch for ETL - question about from-to requests and Scroll API](https://discuss.elastic.co/t/elasticsearch-for-etl-question-about-from-to-requests-and-scroll-api/197037)
**Author:** [@KindYAK](https://discuss.elastic.co/u/KindYAK)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-for-etl-question-about-from-to-requests-and-scroll-api/197037 "2019-08-29T07:26:55Z")
I am planning to use Elasticsearch for ETL. Airflow tasks are configured to read data from Elasticsearch in batches, process the data and load it back to Elastic. The problem is that processing takes a lot of time and … --- ## [ECE reinstall error](https://discuss.elastic.co/t/ece-reinstall-error/191119)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 1:33pm UTC](https://discuss.elastic.co/t/ece-reinstall-error/191119 "2019-07-18T13:33:11Z")
one is timeout with install and try to install with out error: \[es@xxxx ECE\]$ ./elastic-cloud-enterprise.sh install ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~… --- ## [Grok type](https://discuss.elastic.co/t/grok-type/118014)
**Author:** [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Replies:** 8\ **Last updated:** [February 2, 2018, 4:49am UTC](https://discuss.elastic.co/t/grok-type/118014 "2018-02-02T04:49:45Z")
what grok i should use for " (http-WEB0001VR%2F10.351.100.19-1000-15) " --- ## [How can I display multiple fields in a histogram?](https://discuss.elastic.co/t/how-can-i-display-multiple-fields-in-a-histogram/113006)
**Author:** [@pbData](https://discuss.elastic.co/u/pbData)\ **Replies:** 3\ **Last updated:** [December 28, 2017, 11:19pm UTC](https://discuss.elastic.co/t/how-can-i-display-multiple-fields-in-a-histogram/113006 "2017-12-28T23:19:31Z")
I am using kibana v3.x. I am able to successfully display timeseries data of a single field for a histogram. Now I would do this for multiple fields, being able to accumulate the result fields of the fields. I cant se… --- ## [Need Help to install Translate filter in Logstash](https://discuss.elastic.co/t/need-help-to-install-translate-filter-in-logstash/100276)
**Author:** [@Akrishna](https://discuss.elastic.co/u/Akrishna)\ **Replies:** 3\ **Last updated:** [September 13, 2017, 6:22am UTC](https://discuss.elastic.co/t/need-help-to-install-translate-filter-in-logstash/100276 "2017-09-13T06:22:25Z")
My server(centos) has logstash installed but I donot have internet connection there. 1)So I installed translate filter from below site in my local machine(Windows os). https://rubygems.org/gems/logstash-filter-translat… --- ## [java.lang.ClassNotFoundException: org.elasticsearch.node.NodeValidationException from \[Module "deployment.\*\*\*" from Service Module Loader\]](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-node-nodevalidationexception-from-module-deployment-from-service-module-loader/98950)
**Author:** [@KK\_bh](https://discuss.elastic.co/u/KK_bh)\ **Replies:** 0\ **Last updated:** [August 31, 2017, 7:01am UTC](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-node-nodevalidationexception-from-module-deployment-from-service-module-loader/98950 "2017-08-31T07:01:52Z")
We are upgrading to ES 5.1.1. While deploying the application I see below error - stratas | 06:48:48,180 ERROR \[org.jboss.msc.service.fail\] (MSC service thread 1-3) MSC000001: Failed to start service… --- ## [Mapping for Bytes/percentage format](https://discuss.elastic.co/t/mapping-for-bytes-percentage-format/97430)
**Author:** [@randude](https://discuss.elastic.co/u/randude)\ **Replies:** 3\ **Last updated:** [August 22, 2017, 7:09am UTC](https://discuss.elastic.co/t/mapping-for-bytes-percentage-format/97430 "2017-08-22T07:09:10Z")
Hi, Is there a way to define automatically the format for some fields via a custom mapping? I’m talking about the BYTES or Percentage format. --- ## ["failed to process cluster event (update-settings) within 30s"](https://discuss.elastic.co/t/failed-to-process-cluster-event-update-settings-within-30s/86633)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 0\ **Last updated:** [May 22, 2017, 9:00am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-update-settings-within-30s/86633 "2017-05-22T09:00:59Z")
Hi, I posted here last week because of the strange behaviour of my cluster. Now I wanted to shrink my shards, but everytime i try to do it, I get: { "error" : { "root\_cause" : \[ { "type" : "process\_… --- ## [How to ignore special characters in a search query?](https://discuss.elastic.co/t/how-to-ignore-special-characters-in-a-search-query/80899)
**Author:** [@gibbon](https://discuss.elastic.co/u/gibbon)\ **Replies:** 0\ **Last updated:** [April 1, 2017, 2:51pm UTC](https://discuss.elastic.co/t/how-to-ignore-special-characters-in-a-search-query/80899 "2017-04-01T14:51:28Z")
I'm using ES with fairly default settings, I think pretty much the only thing I changed was setting 'analyzer' =\> 'english' If a user enters a \[ character (or some of the other special chars) into the text in their sea… --- ## [Filebeat to Logstash ERROR, wsasend, wsarecv](https://discuss.elastic.co/t/filebeat-to-logstash-error-wsasend-wsarecv/73363)
**Author:** [@loutocky](https://discuss.elastic.co/u/loutocky)\ **Replies:** 0\ **Last updated:** [January 31, 2017, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-error-wsasend-wsarecv/73363 "2017-01-31T12:40:24Z")
Hi, I am using ELK stack version 5.1.2 and I have problem with sending logs from one worker (node) to central server. Everything I configured on localhost and it worked perfectly, but on development environment not. On… --- ## [Logstash 1.5.x grok regex multiline behavior change?](https://discuss.elastic.co/t/logstash-1-5-x-grok-regex-multiline-behavior-change/34347)
**Author:** [@bitsofinfo](https://discuss.elastic.co/u/bitsofinfo)\ **Replies:** 3\ **Last updated:** [November 18, 2015, 6:00pm UTC](https://discuss.elastic.co/t/logstash-1-5-x-grok-regex-multiline-behavior-change/34347 "2015-11-18T18:00:29Z")
Hi, Currently upgrading from 1.4.1 to 1.5.4 This filter works fine in 1.4.x : https://github.com/bitsofinfo/logstash-modsecurity/blob/master/logstash-modsecurity.conf When I run it in 1.5.4 it "sort of" works. Ther… --- ## [Exists filter does not respect must\_not bool filter](https://discuss.elastic.co/t/exists-filter-does-not-respect-must-not-bool-filter/19606)
**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\ **Replies:** 8\ **Last updated:** [October 26, 2015, 9:26pm UTC](https://discuss.elastic.co/t/exists-filter-does-not-respect-must-not-bool-filter/19606 "2015-10-26T21:26:25Z")
Hi Everyone, Goal: I want to find all the documents which does not have giving.assignee field. I am executing below query on ES version 1.3.2 involving exists filter and boolean filter. { "query": { … --- ## [Auto complete](https://discuss.elastic.co/t/auto-complete/8455)
**Author:** [@Vinicius\_Carvalho](https://discuss.elastic.co/u/Vinicius_Carvalho)\ **Replies:** 8\ **Last updated:** [August 28, 2012, 4:32pm UTC](https://discuss.elastic.co/t/auto-complete/8455 "2012-08-28T16:32:15Z")
I've searched across this list on the subject, seeing some stuff, many strategies, and I'm trying to get one to work here. So, I tried to index my data with a field named auto\_complete using a different analyzer t… --- ## [Dashboards not showing in custom kibana space](https://discuss.elastic.co/t/dashboards-not-showing-in-custom-kibana-space/325420)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 4\ **Last updated:** [February 17, 2023, 7:07am UTC](https://discuss.elastic.co/t/dashboards-not-showing-in-custom-kibana-space/325420 "2023-02-17T07:07:40Z")
I have created a two space in kibana one for production which is default space and second is for staging. on my production space all indexes are showing into it but on my staging space there is only staging index is show… --- ## [How to install elastic/kibana/logstash in custom path?](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 12:52pm UTC](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366 "2021-10-11T12:52:41Z")
I need to install Elasticsearch in /opt/elasticsearch, kibana and logstash like this. And then autostart via systemctl. So, I tried like this Install Elasticsearch with RPM | Elasticsearch Reference \[6.2\] | Elastic I e… --- ## [Send log records with Filebeat over TCP](https://discuss.elastic.co/t/send-log-records-with-filebeat-over-tcp/259331)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [December 23, 2020, 12:19am UTC](https://discuss.elastic.co/t/send-log-records-with-filebeat-over-tcp/259331 "2020-12-23T00:19:46Z")
Is there a way to send filebeats output to a TCP socket? I have tried using output.logstash As written - The Logstash output sends events directly to Logstash by using the lumberjack protocol, which runs over TCP. But… --- ## [Kibana 7.9.0 does not start when setting path.data](https://discuss.elastic.co/t/kibana-7-9-0-does-not-start-when-setting-path-data/246632)
**Author:** [@jlthorel](https://discuss.elastic.co/u/jlthorel)\ **Replies:** 4\ **Last updated:** [September 9, 2020, 12:23pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-does-not-start-when-setting-path-data/246632 "2020-09-09T12:23:02Z")
Hello, I have an issue with Kibana 7.9.0. Kibana does not start when I set the parameter path.data I have the following error message Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read… --- ## [Failed to process cluster event (put-mapping) within 30s at UTC 00:00:00](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-at-utc-0000/231919)
**Author:** [@vissu](https://discuss.elastic.co/u/vissu)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 7:57am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-at-utc-0000/231919 "2020-05-14T07:57:16Z")
Hi Team, every day during UTC 00:00:00 we start receiving this error( failed to process cluster event (put-mapping) within 30s ). will the mappings be put all the data nodes ?? i mean will this API hit all the data node… --- ## [Query for multiple terms and their order in one text field](https://discuss.elastic.co/t/query-for-multiple-terms-and-their-order-in-one-text-field/153555)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 4:10am UTC](https://discuss.elastic.co/t/query-for-multiple-terms-and-their-order-in-one-text-field/153555 "2018-10-26T04:10:42Z")
Hi all, I'm new to Elasticsearch. As far as I checked Elasticsearch reference and this site about the following query DSL design, seems like it's impossible but I will be able to realize what I'd like to do using Painle… --- ## [CSV and double qoutes](https://discuss.elastic.co/t/csv-and-double-qoutes/90201)
**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\ **Replies:** 4\ **Last updated:** [June 21, 2017, 7:14am UTC](https://discuss.elastic.co/t/csv-and-double-qoutes/90201 "2017-06-21T07:14:13Z")
I am trying to import a CSV file by using the CSV filter in Logstash. This works fine, but in the description field I sometime have special characters, like " (double quotes), so this gives a parse failure. How can I sol… --- ## [Create field DATE - 3 Months ago](https://discuss.elastic.co/t/create-field-date-3-months-ago/56290)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 4\ **Last updated:** [July 27, 2016, 3:13pm UTC](https://discuss.elastic.co/t/create-field-date-3-months-ago/56290 "2016-07-27T15:13:00Z")
In an index, I have a field called date (format: YYYY-MM-DD HH:MM:SS) How can I create a new field "called Date3M) to have the same date but 3 months ago ? Example: Date: 2016-07-05 02:30:54 Date3M: 2016-04-05 2:30:54 … --- ## [Could not push logs to Elasticsearch cluster](https://discuss.elastic.co/t/could-not-push-logs-to-elasticsearch-cluster/339488)
**Author:** [@Vikas1633](https://discuss.elastic.co/u/Vikas1633)\ **Replies:** 1\ **Last updated:** [July 28, 2023, 1:16pm UTC](https://discuss.elastic.co/t/could-not-push-logs-to-elasticsearch-cluster/339488 "2023-07-28T13:16:04Z")
I am facing issue could not push logs to Elasticsearch cluster but when i change the buffer path and restart elastic it gets solved and every odd day I have to do this, looking for some permanent solution over this. :El… --- ## [Merge 2 index based off fields and not rows](https://discuss.elastic.co/t/merge-2-index-based-off-fields-and-not-rows/292706)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 7\ **Last updated:** [December 30, 2021, 5:36am UTC](https://discuss.elastic.co/t/merge-2-index-based-off-fields-and-not-rows/292706 "2021-12-30T05:36:10Z")
Hi ES team, I'm looking to merge 2 index's based off unique ID which is same across both the index and the desired index should look like, Index 1 Fields ID, Email, Fax Index 2 Fields ID, Email, Fax Now the merge… --- ## [Logstash Config Files (Am I doing something wrong)](https://discuss.elastic.co/t/logstash-config-files-am-i-doing-something-wrong/182025)
**Author:** [@thev0yager](https://discuss.elastic.co/u/thev0yager)\ **Replies:** 7\ **Last updated:** [May 22, 2019, 3:31pm UTC](https://discuss.elastic.co/t/logstash-config-files-am-i-doing-something-wrong/182025 "2019-05-22T15:31:20Z")
Hi everyone, I have been working with the elastic stack for a short while. I have been following a udemy class about setting all of it up. Right now I am facing a really confusing problem with the Logstash setup. I am wo… --- ## [Why I do not receive after\_key from my composite aggregation query?](https://discuss.elastic.co/t/why-i-do-not-receive-after-key-from-my-composite-aggregation-query/175482)
**Author:** [@andrei-galkin](https://discuss.elastic.co/u/andrei-galkin)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 3:07pm UTC](https://discuss.elastic.co/t/why-i-do-not-receive-after-key-from-my-composite-aggregation-query/175482 "2019-04-05T15:07:32Z")
Elastic search Version: 6.2.4. My query { "aggs": { "composite\_agg": { "aggs": { "ActDate": { "max": { "field": "details.details.ActDate", "format": "yyyy'-'MM'-'dd… --- ## [Elastic Search Load Testing With Apache Benchmark](https://discuss.elastic.co/t/elastic-search-load-testing-with-apache-benchmark/161838)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 1\ **Last updated:** [December 21, 2018, 1:09pm UTC](https://discuss.elastic.co/t/elastic-search-load-testing-with-apache-benchmark/161838 "2018-12-21T13:09:32Z")
I am using the elastic cloud to store my data. My index having 13Lac documents and I am using apache benchmark to perform load testing on my elastic search index. I am using the following command to perform load testing: … --- ## [Structured Streaming ES Sink](https://discuss.elastic.co/t/structured-streaming-es-sink/139501)
**Author:** [@mattjackson1989](https://discuss.elastic.co/u/mattjackson1989)\ **Replies:** 1\ **Last updated:** [July 11, 2018, 8:40am UTC](https://discuss.elastic.co/t/structured-streaming-es-sink/139501 "2018-07-11T08:40:39Z")
I have been trying to output data from my Spark Structured Streaming job to Elastic Search, following the example here. I am using Spark 2.3.0 and elasticsearch-hadoop:6.3.1 (specified through --jars in spark submit). T… --- ## [Maven build plugin failed with official document](https://discuss.elastic.co/t/maven-build-plugin-failed-with-official-document/108497)
**Author:** [@BrickXu](https://discuss.elastic.co/u/BrickXu)\ **Replies:** 1\ **Last updated:** [November 21, 2017, 4:25am UTC](https://discuss.elastic.co/t/maven-build-plugin-failed-with-official-document/108497 "2017-11-21T04:25:18Z")
Refs to https://www.elastic.co/guide/en/elasticsearch/plugins/2.4/plugin-authors.html I build my project with maven, and the pom.xml is the following: \ \ **Author:** [@Juneyoung\_Oh](https://discuss.elastic.co/u/Juneyoung_Oh)\ **Replies:** 1\ **Last updated:** [June 9, 2017, 8:54am UTC](https://discuss.elastic.co/t/logstash-json-parsing-error-to-read-logback-json-file/88644 "2017-06-09T08:54:49Z") Hi. I am trying to read and store tomcat logs into elasticsearch via logstash. The json file which made by logback looks like below. { "@timestamp" : "2017-06-08T09:33:48.579+09:00", "@version" : 1, "message" : "… --- ## [Indexing Source Control Repositories](https://discuss.elastic.co/t/indexing-source-control-repositories/27584)
**Author:** [@Avi](https://discuss.elastic.co/u/Avi)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 2:50pm UTC](https://discuss.elastic.co/t/indexing-source-control-repositories/27584 "2016-02-11T14:50:23Z")
Hi, I am a new elastic search user. Just installed it today. I have previously been using opengrok to index our source control repositories and am looking at an alternative. Basically we use a bunch of various versio… --- ## [Logstash-filter-rest POST Request Issue](https://discuss.elastic.co/t/logstash-filter-rest-post-request-issue/131449)
**Author:** [@MariumHassan](https://discuss.elastic.co/u/MariumHassan)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 10:36am UTC](https://discuss.elastic.co/t/logstash-filter-rest-post-request-issue/131449 "2018-05-11T10:36:17Z")
This issue has been resolved. Hi, I have recently installed logstash-filter-rest. Now, I want to send a POST request to my webservice which takes xml body, parses it using JAXB and returns xml but I am having an issue… --- ## [CCR - auto-follow problem on data streams](https://discuss.elastic.co/t/ccr-auto-follow-problem-on-data-streams/348789)
**Author:** [@Wojciech\_Kwiecien](https://discuss.elastic.co/u/Wojciech_Kwiecien)\ **Replies:** 5\ **Last updated:** [December 11, 2023, 1:13am UTC](https://discuss.elastic.co/t/ccr-auto-follow-problem-on-data-streams/348789 "2023-12-11T01:13:10Z")
I found this topic Elastic Cross Cluster Replication of Data Stream But I do not find a solution for me. I was able to create CCR auto-follow pattern and nothing happened when I ran GET /\_ccr/stats After I follow inst… --- ## [Unassigned shards because of different elasticsearch version](https://discuss.elastic.co/t/unassigned-shards-because-of-different-elasticsearch-version/299182)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 10:33am UTC](https://discuss.elastic.co/t/unassigned-shards-because-of-different-elasticsearch-version/299182 "2022-03-17T10:33:06Z")
Hi All, Recently I have upgraded the one data node , Node got successfully upgraded but there are some unassigned shards which are not being replicated to other nodes because of below error: "explanation" : "cannot all… --- ## [Filter by clicking legend in line charts](https://discuss.elastic.co/t/filter-by-clicking-legend-in-line-charts/171329)
**Author:** [@tomhel](https://discuss.elastic.co/u/tomhel)\ **Replies:** 5\ **Last updated:** [March 11, 2019, 12:11pm UTC](https://discuss.elastic.co/t/filter-by-clicking-legend-in-line-charts/171329 "2019-03-11T12:11:16Z")
I'm quite sure that I used to be able to click a legend in a line chart followed by the plus sign to create a filter, but for some reason, the plus and minus signs are missing now. For pie charts this still works: C… --- ## [Missing data from replica shards after delete by query and index](https://discuss.elastic.co/t/missing-data-from-replica-shards-after-delete-by-query-and-index/149402)
**Author:** [@ashokm](https://discuss.elastic.co/u/ashokm)\ **Replies:** 5\ **Last updated:** [September 22, 2018, 6:43am UTC](https://discuss.elastic.co/t/missing-data-from-replica-shards-after-delete-by-query-and-index/149402 "2018-09-22T06:43:03Z")
Hi All, We are on ES 2.4.4. We are using delete by query to delete all docs of given type in an index using delete by query. Immediately, we index the data again. Sometimes, doc count on replica is less than primary. I… --- ## [Error on missing field query](https://discuss.elastic.co/t/error-on-missing-field-query/5688)
**Author:** [@vpunski](https://discuss.elastic.co/u/vpunski)\ **Replies:** 5\ **Last updated:** [October 30, 2011, 7:43am UTC](https://discuss.elastic.co/t/error-on-missing-field-query/5688 "2011-10-30T07:43:50Z")
Hi, 6 nodes working cluster, 26M entries, with following configuration: Index definition: curl -XPUT "http://HOST:9200/my\_index/\_settings" -d '{ index: { number\_of\_shards: 10, number\_of\_replic… --- ## [Watcher 500 Bug](https://discuss.elastic.co/t/watcher-500-bug/118281)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 6\ **Last updated:** [February 8, 2018, 2:16pm UTC](https://discuss.elastic.co/t/watcher-500-bug/118281 "2018-02-08T14:16:52Z")
So currently if a user saves a watch that is invalid it can break the entire watcher mgmt page in kibana. SHouldn't this just deactivate or prevent the user from saving? I foresee this being a big issue with tracking dow… --- ## [How to change the data directory of a node in a cluster?](https://discuss.elastic.co/t/how-to-change-the-data-directory-of-a-node-in-a-cluster/327779)
**Author:** [@Wpq](https://discuss.elastic.co/u/Wpq)\ **Replies:** 2\ **Last updated:** [March 15, 2023, 10:27pm UTC](https://discuss.elastic.co/t/how-to-change-the-data-directory-of-a-node-in-a-cluster/327779 "2023-03-15T22:27:28Z")
I have a cluster of 8 nodes. This is an "under development but with real data" kind of project (the worst type of project) and I see that I will soon have problems with disk space of the default data store. path: data… --- ## [ILM with Python Client](https://discuss.elastic.co/t/ilm-with-python-client/261469)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 9:37pm UTC](https://discuss.elastic.co/t/ilm-with-python-client/261469 "2021-03-16T21:37:35Z")
Hi All, I'm currently using Elasticsearch client for Python 3. I'm trying to import IlmClient module, but I received following error. \>\>\> from elasticsearch.client import IlmClient Traceback (most recent call last): … --- ## [Visual Builder & Controls - Link to Saved Search?](https://discuss.elastic.co/t/visual-builder-controls-link-to-saved-search/223511)
**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 1:31pm UTC](https://discuss.elastic.co/t/visual-builder-controls-link-to-saved-search/223511 "2020-03-13T13:31:44Z")
I defined a bunch of SAVED SEARCHES that are very useful for various data table and chart visualizations. However, I find that I can't assign a saved search to VISUAL BUILDER or CONTROLS visualizations (and possibly othe… --- ## [Elastic REST 6.4 IndexShrink Error](https://discuss.elastic.co/t/elastic-rest-6-4-indexshrink-error/146991)
**Author:** [@questar](https://discuss.elastic.co/u/questar)\ **Replies:** 2\ **Last updated:** [September 3, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elastic-rest-6-4-indexshrink-error/146991 "2018-09-03T15:16:18Z")
Index built with: {"settings":{"number\_of\_shards":"1","number\_of\_routing\_shards":"2","number\_of\_replicas":"0"}} ResizeRequest request = new ResizeRequest("code-000001", "code-000002"); Settings settings = Settings.bui… --- ## [Cpu utilization monitoring in kibana](https://discuss.elastic.co/t/cpu-utilization-monitoring-in-kibana/128336)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 2\ **Last updated:** [April 18, 2018, 9:42am UTC](https://discuss.elastic.co/t/cpu-utilization-monitoring-in-kibana/128336 "2018-04-18T09:42:51Z")
Can we display server details like cpu utilization heap memory in kibana Is there is some way to display that. --- ## [Can t remove filter once applied (kibana 4.6.3)](https://discuss.elastic.co/t/can-t-remove-filter-once-applied-kibana-4-6-3/86426)
**Author:** [@raphaelkh2ad](https://discuss.elastic.co/u/raphaelkh2ad)\ **Replies:** 2\ **Last updated:** [May 23, 2017, 1:51pm UTC](https://discuss.elastic.co/t/can-t-remove-filter-once-applied-kibana-4-6-3/86426 "2017-05-23T13:51:00Z")
Hello guys, in kibana 4.6.3, I can t remove applied filter from a dashboard. Once applied, the filters "disapear" from the interface. It is very strange, because in older version (4.1.2), I was able to remove them, inver… --- ## [Getting grokfailure, but grok constructor test works](https://discuss.elastic.co/t/getting-grokfailure-but-grok-constructor-test-works/54331)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 2\ **Last updated:** [June 30, 2016, 5:17pm UTC](https://discuss.elastic.co/t/getting-grokfailure-but-grok-constructor-test-works/54331 "2016-06-30T17:17:40Z")
Hello, I am getting this discrepancy between http://grokconstructor.appspot.com/do/match and logstash grok filter. In the grok constructor site I am getting following parsed: "10.1.40.20 22.77.167.65 - \[29/Jun/2016:… --- ## [Kibana4: Add 'other' slice to pie chart using sum\_other\_doc\_count](https://discuss.elastic.co/t/kibana4-add-other-slice-to-pie-chart-using-sum-other-doc-count/1347)
**Author:** [@Sesha\_Narahari](https://discuss.elastic.co/u/Sesha_Narahari)\ **Replies:** 2\ **Last updated:** [June 2, 2015, 9:55pm UTC](https://discuss.elastic.co/t/kibana4-add-other-slice-to-pie-chart-using-sum-other-doc-count/1347 "2015-06-02T21:55:57Z")
I getthis field in the query results. Can I see an example of how to use this in a pie chart? JSON input? Scripted field? -- "aggregations": { "2": { "doc\_count\_error\_upper\_bound": 520, "sum\_other… [Previous page](https://discuss.elastic.co/top.md?page=1334&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1336&per_page=50&period=all)