# Top **URL:** https://discuss.elastic.co/top.md?page=1350&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1351 --- ## [\[KIBANA\] Problème de scripted field qui n'existe (soit disant) pas dans le mapping](https://discuss.elastic.co/t/kibana-probleme-de-scripted-field-qui-nexiste-soit-disant-pas-dans-le-mapping/50618)
**Author:** [@lenybernard](https://discuss.elastic.co/u/lenybernard)\ **Replies:** 1\ **Last updated:** [May 25, 2016, 5:59am UTC](https://discuss.elastic.co/t/kibana-probleme-de-scripted-field-qui-nexiste-soit-disant-pas-dans-le-mapping/50618 "2016-05-25T05:59:06Z")
Bonjour, Je tente d'afficher un metric dans kibana me permettant de voir les utilisateurs qui n'ont pas validé leur compte. Le metric est un peu particulier à compter car le fait est qu'il n'y a pas d'évenement disant c… --- ## [Elasticsearch Log message "deleted shard reason \[no longer used\]" version 2.1.1](https://discuss.elastic.co/t/elasticsearch-log-message-deleted-shard-reason-no-longer-used-version-2-1-1/38717)
**Author:** [@ggiessl](https://discuss.elastic.co/u/ggiessl)\ **Replies:** 1\ **Last updated:** [January 8, 2016, 10:18pm UTC](https://discuss.elastic.co/t/elasticsearch-log-message-deleted-shard-reason-no-longer-used-version-2-1-1/38717 "2016-01-08T22:18:08Z")
Hi Community! We are getting debug log messages on our 4-node test environment under heavy index load: \[2016-01-08 11:28:59,363\]\[DEBUG\]\[indices \] \[node4\] \[index\_2016-01-02\]\[10\] deleted shard reason… --- ## [Check if Elasticsearch index is SEARCHABLE](https://discuss.elastic.co/t/check-if-elasticsearch-index-is-searchable/270000)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 4\ **Last updated:** [April 14, 2021, 8:21am UTC](https://discuss.elastic.co/t/check-if-elasticsearch-index-is-searchable/270000 "2021-04-14T08:21:41Z")
Hello everyone, once again I ran into a wall with ELK stack that I'm unable to overcome by myself so I came here to ask for your help. In my project , I'm creating new index , putting data into it via logstash and then … --- ## [Difference between type and \_type](https://discuss.elastic.co/t/difference-between-type-and--type/96058)
**Author:** [@DFrant](https://discuss.elastic.co/u/DFrant)\ **Replies:** 4\ **Last updated:** [August 7, 2017, 9:50am UTC](https://discuss.elastic.co/t/difference-between-type-and--type/96058 "2017-08-07T09:50:31Z")
Hello, I would like to know what’s the difference between type and \_type and how to define it? Thanks. --- ## [Elasticsearch storage schema retention and aggregation](https://discuss.elastic.co/t/elasticsearch-storage-schema-retention-and-aggregation/76658)
**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\ **Replies:** 4\ **Last updated:** [March 8, 2017, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-storage-schema-retention-and-aggregation/76658 "2017-03-08T11:38:32Z")
Hi, I've not found a simple answer to this question, I'd appreciate if you can clear it up for me. In Graphite you can easily setup your storage aggregation (min, max, average, count) and your storage schema retention … --- ## [Single Node Clusters and Cluster Status](https://discuss.elastic.co/t/single-node-clusters-and-cluster-status/39860)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [January 24, 2016, 3:58am UTC](https://discuss.elastic.co/t/single-node-clusters-and-cluster-status/39860 "2016-01-24T03:58:01Z")
Hi, I have a test cluster comprised of a single node for performance baselining. I have replicas set to 0 and shard count set to 4. However, as soon as data gets indexed the cluster goes into a yellow state. is it pos… --- ## [Dumping raw data in custom format](https://discuss.elastic.co/t/dumping-raw-data-in-custom-format/22070)
**Author:** [@Andrew\_McFague](https://discuss.elastic.co/u/Andrew_McFague)\ **Replies:** 4\ **Last updated:** [February 11, 2015, 12:33am UTC](https://discuss.elastic.co/t/dumping-raw-data-in-custom-format/22070 "2015-02-11T00:33:14Z")
I have a use case where I'd like to be able to dump \*all\* the documents in ES to a specific output format. However, using scan or any other "consistent" view is relatively slow. Using the scan query with a "match… --- ## [Linux newbie trying to install elasticsearch/kabana/logstash](https://discuss.elastic.co/t/linux-newbie-trying-to-install-elasticsearch-kabana-logstash/15630)
**Author:** [@computer\_engineer](https://discuss.elastic.co/u/computer_engineer)\ **Replies:** 4\ **Last updated:** [February 6, 2014, 2:51am UTC](https://discuss.elastic.co/t/linux-newbie-trying-to-install-elasticsearch-kabana-logstash/15630 "2014-02-06T02:51:15Z")
A newbie here trying to install elasticsearch, logstash and kabana. I got logstash installed but after installing elasticsearch, I try to run it as showed by tutorials all over: bin/elasticsearch -f I get el… --- ## [Netty threads eats all of CPU](https://discuss.elastic.co/t/netty-threads-eats-all-of-cpu/4357)
**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\ **Replies:** 4\ **Last updated:** [May 10, 2011, 7:20am UTC](https://discuss.elastic.co/t/netty-threads-eats-all-of-cpu/4357 "2011-05-10T07:20:51Z")
Hi, Several weeks ago I reported same issue. http://elasticsearch-users.115913.n3.nabble.com/Netty-threads-eats-all-of-CPU-td2791974.html We upgraded JRE to latest one which is 1.6.0\_24-b07 as it is suggested by Sh… --- ## [Completely scaling down an ECK-based cluster](https://discuss.elastic.co/t/completely-scaling-down-an-eck-based-cluster/278074)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 2:31pm UTC](https://discuss.elastic.co/t/completely-scaling-down-an-eck-based-cluster/278074 "2021-07-07T14:31:11Z")
I want to completely scale down (i.e zero out all nodes) of an ECK-based cluster. I have tried to set nodeSet.count to 0 but this fails with spec.nodeSets: Required value: Elasticsearch needs to have at least one maste… --- ## [Install elasticsearch-analysis-ik not working](https://discuss.elastic.co/t/install-elasticsearch-analysis-ik-not-working/262800)
**Author:** [@George\_Lee](https://discuss.elastic.co/u/George_Lee)\ **Replies:** 2\ **Last updated:** [February 1, 2021, 9:40am UTC](https://discuss.elastic.co/t/install-elasticsearch-analysis-ik-not-working/262800 "2021-02-01T09:40:01Z")
hello I use the initialization container to install the plugin. ECK version: ECK version 1.3.1 kubernetes version Client Version: version.Info{Major:"1", Minor:"18", GitVersion:"v1.18.8", GitCommit:"9f2892aab98fe339… --- ## [Where can I find the host identifier?](https://discuss.elastic.co/t/where-can-i-find-the-host-identifier/239266)
**Author:** [@Asaf\_Jacovchak](https://discuss.elastic.co/u/Asaf_Jacovchak)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 9:57pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-host-identifier/239266 "2020-07-13T21:57:22Z")
Hey, When I first start using Elasticsearc I used Swiftype, but now it's closed and I moved to elastic cloud. My problem is that in my code I'm using the host identifier to authenticate the account, but now, there is n… --- ## [Java High Level Rest Client - including a basepath to request urls](https://discuss.elastic.co/t/java-high-level-rest-client-including-a-basepath-to-request-urls/217533)
**Author:** [@SavvySkylark](https://discuss.elastic.co/u/SavvySkylark)\ **Replies:** 2\ **Last updated:** [February 2, 2020, 3:50pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-including-a-basepath-to-request-urls/217533 "2020-02-02T15:50:29Z")
I have an API Gateway that will be put in-front of our elasticsearch APIs. It routes traffic by using a basepath. So a request url would look like the following. https://api.example.com/elasticsearch/v1/exampleindex/\_se… --- ## [Monitor array of objects in JSON response](https://discuss.elastic.co/t/monitor-array-of-objects-in-json-response/190145)
**Author:** [@wu3rstle](https://discuss.elastic.co/u/wu3rstle)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 3:37pm UTC](https://discuss.elastic.co/t/monitor-array-of-objects-in-json-response/190145 "2019-07-16T15:37:13Z")
I've tried monitoring a service with nested JSON using Heartbeat 7.2.0. Several variants for the check.response.json are not working. I've tried the following keys for the array check: data\[0\].state: data\[0\]\[state\]: d… --- ## [Timelion:Error](https://discuss.elastic.co/t/timelion-error/125079)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 4:01pm UTC](https://discuss.elastic.co/t/timelion-error/125079 "2018-03-22T16:01:04Z")
Hello Experts, I am trying compare success hit rate using Timelion feature. This is my query: (I learned from youtube) .es(index=swift-proxy-log-, q=status\_code:200).label('current') .es(index=swift-proxy-log-, q=stat… --- ## [ES ingest node vs logstash compression?](https://discuss.elastic.co/t/es-ingest-node-vs-logstash-compression/62675)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [October 13, 2016, 9:49pm UTC](https://discuss.elastic.co/t/es-ingest-node-vs-logstash-compression/62675 "2016-10-13T21:49:25Z")
Filebeat does compression when sending logs to logstash. I think sending directly to ES ingest node it will not do compression, is there any plan to add compression to ingest node? We have lot of filebeat clients that … --- ## [First query is slow, rest of them are fast. How to boost this?](https://discuss.elastic.co/t/first-query-is-slow-rest-of-them-are-fast-how-to-boost-this/61094)
**Author:** [@avion](https://discuss.elastic.co/u/avion)\ **Replies:** 2\ **Last updated:** [September 22, 2016, 7:30am UTC](https://discuss.elastic.co/t/first-query-is-slow-rest-of-them-are-fast-how-to-boost-this/61094 "2016-09-22T07:30:20Z")
I'm using this kind of mapping (well, it's a shortener version in order to make the question easier) on a children-parent relationship where item is the parent and user\_items is the children. curl -XPUT 'localhost:9200… --- ## [How can search multiple value in one field using Elasticsearch java api?](https://discuss.elastic.co/t/how-can-search-multiple-value-in-one-field-using-elasticsearch-java-api/48858)
**Author:** [@Rajnikant](https://discuss.elastic.co/u/Rajnikant)\ **Replies:** 2\ **Last updated:** [May 1, 2016, 5:20am UTC](https://discuss.elastic.co/t/how-can-search-multiple-value-in-one-field-using-elasticsearch-java-api/48858 "2016-05-01T05:20:15Z")
I have multiple value for find the data in one field. i don't understand how i can find it. --- ## [ELS memory consumption](https://discuss.elastic.co/t/els-memory-consumption/5749)
**Author:** [@mfeingold](https://discuss.elastic.co/u/mfeingold)\ **Replies:** 2\ **Last updated:** [November 2, 2011, 8:26pm UTC](https://discuss.elastic.co/t/els-memory-consumption/5749 "2011-11-02T20:26:53Z")
How much memory should be available for the ELS process? I am running ELS on a W2k8 server, the index has around 100M documents and the size of the index is just under 50GB. It looks like the heap size of 2GB is suffi… --- ## [European number format not recognised](https://discuss.elastic.co/t/european-number-format-not-recognised/292606)
**Author:** [@mpmass](https://discuss.elastic.co/u/mpmass)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/european-number-format-not-recognised/292606 "2021-12-22T13:12:32Z")
Hi, I have just started exploring Elastic and Kibana. When I am trying to upload a .csv file, the type and format isn't recognised properly. It is seen as a string instead of a double. The format of the number of the fi… --- ## [Could not locate that index-pattern (id: api-filebeat-\*)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-api-filebeat/233647)
**Author:** [@duc00](https://discuss.elastic.co/u/duc00)\ **Replies:** 3\ **Last updated:** [May 21, 2020, 11:45pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-api-filebeat/233647 "2020-05-21T23:45:39Z")
Hello, I am loading Filebeat pre-built dashboards into Kibana using the command filebeat setup -e --dashboards and having the following filebeat.yml configuration concerning indices: setup.dashboards.enabled: true se… --- ## [CPU and Garbage Collection Time Reguraily Spike For Long Periods of Time](https://discuss.elastic.co/t/cpu-and-garbage-collection-time-reguraily-spike-for-long-periods-of-time/204291)
**Author:** [@stockhausenj](https://discuss.elastic.co/u/stockhausenj)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 5:12pm UTC](https://discuss.elastic.co/t/cpu-and-garbage-collection-time-reguraily-spike-for-long-periods-of-time/204291 "2019-10-21T17:12:17Z")
Hello, Elasticsearch 6.7 This is regarding 8 nodes that have these settings: node.data: true node.master: false node.ingest: true -Xms30g -Xmx30g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+Use… --- ## [Create Kibana plugin with sao.js](https://discuss.elastic.co/t/create-kibana-plugin-with-sao-js/104402)
**Author:** [@Gwen\_P](https://discuss.elastic.co/u/Gwen_P)\ **Replies:** 3\ **Last updated:** [October 23, 2017, 3:59pm UTC](https://discuss.elastic.co/t/create-kibana-plugin-with-sao-js/104402 "2017-10-23T15:59:43Z")
Hi, I read that Yeoman generator is now deprecated (https://github.com/elastic/generator-kibana-plugin) and we have to use sao.js (https://github.com/elastic/template-kibana-plugin/). I want to know if someone have mad… --- ## [SavedObject view: Authorization Exception Error: Authorization Exception](https://discuss.elastic.co/t/savedobject-view-authorization-exception-error-authorization-exception/47658)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [April 19, 2016, 6:23am UTC](https://discuss.elastic.co/t/savedobject-view-authorization-exception-error-authorization-exception/47658 "2016-04-19T06:23:45Z")
Hello, When I delete a saved search I get following error. We have configured Kibana URL from webseal. I don't get below error if I access Kibana directly by ur http://localhost:5601/ SavedObject view: Authorizati… --- ## [What's the warmer do?](https://discuss.elastic.co/t/whats-the-warmer-do/15396)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 3\ **Last updated:** [February 6, 2014, 9:11am UTC](https://discuss.elastic.co/t/whats-the-warmer-do/15396 "2014-02-06T09:11:28Z")
Hi all, I am wondering what the warmer do and what the reason is that it can accelerate the indexing. Does there exist some caching workflow and what does it put into the cache? Also, if I execute the same quer… --- ## [Not able to delete ndex](https://discuss.elastic.co/t/not-able-to-delete-ndex/93269)
**Author:** [@kumar1](https://discuss.elastic.co/u/kumar1)\ **Replies:** 5\ **Last updated:** [July 16, 2017, 1:57pm UTC](https://discuss.elastic.co/t/not-able-to-delete-ndex/93269 "2017-07-16T13:57:23Z")
Hi , Iam trying to delete index from elastic search in Cygwin tool .But getting this error below. {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[indices:admin/delete\] requires authentication"… --- ## [Workaround for Dashboard short Share Link on Kibana v8.15.1](https://discuss.elastic.co/t/workaround-for-dashboard-short-share-link-on-kibana-v8-15-1/368061)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 6\ **Last updated:** [October 22, 2024, 5:41am UTC](https://discuss.elastic.co/t/workaround-for-dashboard-short-share-link-on-kibana-v8-15-1/368061 "2024-10-22T05:41:42Z")
Hi everyone, Since Kibana v8.15 and of course in v8.15.1 the Dashboard short Share Link doesn't work as expected, one user opened an issue, although has been improved. Is there a workaround to get in Kibana v8.15.1 Das… --- ## [Resources usage](https://discuss.elastic.co/t/resources-usage/238333)
**Author:** [@Elastan](https://discuss.elastic.co/u/Elastan)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 10:39pm UTC](https://discuss.elastic.co/t/resources-usage/238333 "2020-06-23T22:39:59Z")
Hello, I'm newbie to Elastic. Assuming index size will have 500GB, let's say 100 users each 5GB of index data. What hardware is needed for that? If querying/searching will be only performed always on about 1/100 of wh… --- ## [Kibana SAML integration with Azure](https://discuss.elastic.co/t/kibana-saml-integration-with-azure/219845)
**Author:** [@dbElastic](https://discuss.elastic.co/u/dbElastic)\ **Replies:** 6\ **Last updated:** [February 19, 2020, 9:18am UTC](https://discuss.elastic.co/t/kibana-saml-integration-with-azure/219845 "2020-02-19T09:18:30Z")
Hello @ikakavas We are using elastic cloud hosting version 7.5. We have below configuration for user overrides sections of elasticsearch and kibana.we have created roles in kibana and created a AD user group in Azure c… --- ## [Force cluster rebalance](https://discuss.elastic.co/t/force-cluster-rebalance/203979)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 6\ **Last updated:** [October 18, 2019, 11:11am UTC](https://discuss.elastic.co/t/force-cluster-rebalance/203979 "2019-10-18T11:11:17Z")
После перезагрузок нод, например, после rolling update происходит неравномерное распределение primary shard. Соответственно, если включить запись в кластер, то нагрузка по нодам будет неравномерная. Как всё таки принуди… --- ## [ElasticSQL math operation](https://discuss.elastic.co/t/elasticsql-math-operation/184680)
**Author:** [@Woolis\_Xiibil\_Peek](https://discuss.elastic.co/u/Woolis_Xiibil_Peek)\ **Replies:** 6\ **Last updated:** [June 19, 2019, 8:17pm UTC](https://discuss.elastic.co/t/elasticsql-math-operation/184680 "2019-06-19T20:17:41Z")
Hi. I need to substract two queries. I have try this SELECT SUM ((SELECT COUNT () AS "op\_totals" FROM "app20-" WHERE "path" = '/ops/login') - (SELECT COUNT () AS "op\_succ" FROM "app20-" WHERE "operacion" = 79)) AS "op\_… --- ## [\[ANN\] Elasticsearch Mapper Attachment plugin 2.0.0 released](https://discuss.elastic.co/t/ann-elasticsearch-mapper-attachment-plugin-2-0-0-released/16595)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 6\ **Last updated:** [November 4, 2015, 9:30am UTC](https://discuss.elastic.co/t/ann-elasticsearch-mapper-attachment-plugin-2-0-0-released/16595 "2015-11-04T09:30:35Z")
Heya, We are pleased to announce the release of the Elasticsearch Mapper Attachment plugin, version 2.0.0. The mapper attachments plugin adds the attachment type to Elasticsearch using Apache Tika.. https://g… --- ## [Use javaagent happened deadlock](https://discuss.elastic.co/t/use-javaagent-happened-deadlock/320132)
**Author:** [@fido](https://discuss.elastic.co/u/fido)\ **Replies:** 1\ **Last updated:** [December 1, 2022, 8:33am UTC](https://discuss.elastic.co/t/use-javaagent-happened-deadlock/320132 "2022-12-01T08:33:11Z")
We have one problem when we use javaagent with Tomcat. It will caused deadlock and make some thread blocked , but it seems like a occasional problem，because it happened just one time. JDK Version:1.8.0\_192-b12 Tomcat V… --- ## [Are there onClick or hover events in Canvas?](https://discuss.elastic.co/t/are-there-onclick-or-hover-events-in-canvas/219808)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 5:26pm UTC](https://discuss.elastic.co/t/are-there-onclick-or-hover-events-in-canvas/219808 "2020-02-18T17:26:27Z")
To display some info, when the mouse pointer is over an element, or this is clicked. thanks! --- ## [Index \[filebeat-7.4.1-YYYY.MM.DD\] is not the write index for alias \[filebeat-7.4.1\]](https://discuss.elastic.co/t/index-filebeat-7-4-1-yyyy-mm-dd-is-not-the-write-index-for-alias-filebeat-7-4-1/206405)
**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\ **Replies:** 1\ **Last updated:** [November 5, 2019, 1:22pm UTC](https://discuss.elastic.co/t/index-filebeat-7-4-1-yyyy-mm-dd-is-not-the-write-index-for-alias-filebeat-7-4-1/206405 "2019-11-05T13:22:00Z")
Hi, After installation on 1 filebeat agent to a new 7.4.1 Elastic cluster, I have the following errors on my filebeat indices: Index lifecycle error illegal\_argument\_exception: index \[filebeat-7.4.1-2019.11.04\] is not… --- ## [Add comment to watch definition](https://discuss.elastic.co/t/add-comment-to-watch-definition/152221)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 1\ **Last updated:** [October 15, 2018, 11:39am UTC](https://discuss.elastic.co/t/add-comment-to-watch-definition/152221 "2018-10-15T11:39:37Z")
On Kibana 6.2.4 under Management/Elasticsearch/Watcher there is the table of watches with the columns: ID, Name, State, Comment, Last Fired, Last Triggered My question is how can I define a comment for a watch? I figure… --- ## [Watcher not able to post bulk data into elastic](https://discuss.elastic.co/t/watcher-not-able-to-post-bulk-data-into-elastic/100925)
**Author:** [@umeshbt](https://discuss.elastic.co/u/umeshbt)\ **Replies:** 1\ **Last updated:** [October 2, 2017, 12:53pm UTC](https://discuss.elastic.co/t/watcher-not-able-to-post-bulk-data-into-elastic/100925 "2017-10-02T12:53:25Z")
I am facing one issue watcher watcher, I have a query which returns list of “servername” and “datatype” {"Servername":"2","datatype":"AuditJobBacklog"} {"Servername":"3","datatype":"AuditJobBacklog"} I want to insert… --- ## [Number of batch workers](https://discuss.elastic.co/t/number-of-batch-workers/60950)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [September 23, 2016, 1:50pm UTC](https://discuss.elastic.co/t/number-of-batch-workers/60950 "2016-09-23T13:50:02Z")
I have a platform where filebeat , logstash , elasticsearch , kibana is all installed in one server. In the document there is a sentence explaining about the number of workers. The number of workers may be set highe… --- ## [How to override the permissions in security.policy of ElasticSearch 2.1](https://discuss.elastic.co/t/how-to-override-the-permissions-in-security-policy-of-elasticsearch-2-1/37179)
**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\ **Replies:** 1\ **Last updated:** [December 15, 2015, 12:15am UTC](https://discuss.elastic.co/t/how-to-override-the-permissions-in-security-policy-of-elasticsearch-2-1/37179 "2015-12-15T00:15:20Z")
Hi All, I need to know if we can anyhow override the java permissions enforced by ESPolicy.java class in ElasticSearch 2.1 . I need to use a plugin which generates few keys before being bootstraped in Elasticsearch . --- ## [Watcher: Usecase: how to find users logging in from different locations using watcher?](https://discuss.elastic.co/t/watcher-usecase-how-to-find-users-logging-in-from-different-locations-using-watcher/33813)
**Author:** [@Fatema](https://discuss.elastic.co/u/Fatema)\ **Replies:** 1\ **Last updated:** [November 30, 2015, 6:21am UTC](https://discuss.elastic.co/t/watcher-usecase-how-to-find-users-logging-in-from-different-locations-using-watcher/33813 "2015-11-30T06:21:32Z")
Hi , I am pretty new to Watcher, and I had a curious use-case, I want to know if a user is logging into the machine from different geo-locations. I have the users logging info already dumped into ES and can see the log… --- ## [Java API to match multiple fields in elasticsearch](https://discuss.elastic.co/t/java-api-to-match-multiple-fields-in-elasticsearch/21032)
**Author:** [@prachicsa](https://discuss.elastic.co/u/prachicsa)\ **Replies:** 1\ **Last updated:** [December 2, 2014, 12:49pm UTC](https://discuss.elastic.co/t/java-api-to-match-multiple-fields-in-elasticsearch/21032 "2014-12-02T12:49:27Z")
Currently I query ES for a single key value pair like this: String query\_key = "abc"; String query\_val = "def"; searchRequestBuilder.setQuery(QueryBuilders.matchQuery(query\_key, query\_val)).execute().actionGet(… --- ## [Beat Stops Sending Events When Journal Rotates](https://discuss.elastic.co/t/beat-stops-sending-events-when-journal-rotates/160805)
**Author:** [@kfalconer](https://discuss.elastic.co/u/kfalconer)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 3:17am UTC](https://discuss.elastic.co/t/beat-stops-sending-events-when-journal-rotates/160805 "2018-12-14T03:17:40Z")
The Journal beat service appears to stop ending log events after the journal is rotated. -rw-r-----+ 1 root systemd-journal 16M Dec 13 13:10 system@662da6c735c64e5f98db920498125e8e-0000000001f1a3dc-00057ce953492eca.jou… --- ## [Audit logging - Is it possible to include request\_body to event type access\_granted?](https://discuss.elastic.co/t/audit-logging-is-it-possible-to-include-request-body-to-event-type-access-granted/47769)
**Author:** [@artoheik](https://discuss.elastic.co/u/artoheik)\ **Replies:** 1\ **Last updated:** [April 19, 2016, 12:06pm UTC](https://discuss.elastic.co/t/audit-logging-is-it-possible-to-include-request-body-to-event-type-access-granted/47769 "2016-04-19T12:06:36Z")
Hi, is it possible to log the request body of access\_granted event type? Similarly to event type authentication\_failed. Or is there any other option to audit log what searches user has made in elasticsearch? Kind r… --- ## [Getting error in Logstash grok filter for rds slow query](https://discuss.elastic.co/t/getting-error-in-logstash-grok-filter-for-rds-slow-query/176878)
**Author:** [@Rajat\_Ravi](https://discuss.elastic.co/u/Rajat_Ravi)\ **Replies:** 8\ **Last updated:** [April 16, 2019, 11:47am UTC](https://discuss.elastic.co/t/getting-error-in-logstash-grok-filter-for-rds-slow-query/176878 "2019-04-16T11:47:40Z")
Hi Team Below are the error that I am getting Error registering plugin {:pipeline\_id=\>"main", :plugin=\>"#\