# Top

**URL:** https://discuss.elastic.co/top.md?page=1370&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1371

---

## [Strange behavior with ELK setup](https://discuss.elastic.co/t/strange-behavior-with-elk-setup/92332)

<div class="topic-metadata">

**Author:** [@rahul.dhammy](https://discuss.elastic.co/u/rahul.dhammy)\
**Replies:** 8\
**Last updated:** [July 12, 2017, 7:26pm UTC](https://discuss.elastic.co/t/strange-behavior-with-elk-setup/92332 "2017-07-12T19:26:41Z")

</div>

Here is the setup for my ELK setup. I have about 3 data shippers running on different boxes which ships the log files to central logstash server. The logstash server parses these events and outputs it to Kibana. I have b…

---

## [Deploying Helm chart to local Kubernetes gives FileSystemException](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906)

<div class="topic-metadata">

**Author:** [@ngruson](https://discuss.elastic.co/u/ngruson)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 2:07pm UTC](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906 "2021-12-17T14:07:07Z")

</div>

I'm trying to deploy Elasticsearch 7.9.3 to my local Kubernetes cluster running in Docker Desktop. I cloned the helm charts for Elasticsearch from GitHub ( helm-charts/elasticsearch at main · elastic/helm-charts (github…

---

## [Talk to server... ERROR 401 Unauthorized: Unauthorized](https://discuss.elastic.co/t/talk-to-server-error-401-unauthorized-unauthorized/288469)

<div class="topic-metadata">

**Author:** [@nasirnjs](https://discuss.elastic.co/u/nasirnjs)\
**Replies:** 1\
**Last updated:** [November 8, 2021, 12:03am UTC](https://discuss.elastic.co/t/talk-to-server-error-401-unauthorized-unauthorized/288469 "2021-11-08T00:03:07Z")

</div>

Hi Experts assist me please .... after install Wazuh I have added agent, when I click agent there is no log showing. Elasticsearch: https://127.0.0.1:9200... parse url... OK connection... parse host... OK dns lookup…

---

## [APM Agent - Error: Could not find or load main class](https://discuss.elastic.co/t/apm-agent-error-could-not-find-or-load-main-class/251648)

<div class="topic-metadata">

**Author:** [@MfuentesG](https://discuss.elastic.co/u/MfuentesG)\
**Replies:** 1\
**Last updated:** [October 26, 2020, 8:45pm UTC](https://discuss.elastic.co/t/apm-agent-error-could-not-find-or-load-main-class/251648 "2020-10-26T20:45:36Z")

</div>

Good morning, Could someone please help me with this configuration. WAS: 8.5.5.11 Java SDK: 8.0.6.15 APM Agent: 1.18.1 Jar File: elastic-apm-agent-1.18.1.jar SO: RHEL7.9 - 64bits Java server: \[root@wasdev ~\]# jav…

---

## [Forward Errors to Sentry](https://discuss.elastic.co/t/forward-errors-to-sentry/210386)

<div class="topic-metadata">

**Author:** [@Thien\_Ho](https://discuss.elastic.co/u/Thien_Ho)\
**Replies:** 1\
**Last updated:** [December 3, 2019, 3:58pm UTC](https://discuss.elastic.co/t/forward-errors-to-sentry/210386 "2019-12-03T15:58:11Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.4.…

---

## [Custom function for Text Similarity Search](https://discuss.elastic.co/t/custom-function-for-text-similarity-search/210158)

<div class="topic-metadata">

**Author:** [@Loreto\_Parisi](https://discuss.elastic.co/u/Loreto_Parisi)\
**Replies:** 1\
**Last updated:** [December 2, 2019, 8:49pm UTC](https://discuss.elastic.co/t/custom-function-for-text-similarity-search/210158 "2019-12-02T20:49:10Z")

</div>

I'm using a dense\_vector and cosineSimilarity to get documents similarity following the good tutorial here script\_query = { "script\_score": { "query": {"match\_all": {}}, "script": { …

---

## [How to compare most recent daily metrics with previous day's metrics](https://discuss.elastic.co/t/how-to-compare-most-recent-daily-metrics-with-previous-days-metrics/167695)

<div class="topic-metadata">

**Author:** [@Steve\_Potter](https://discuss.elastic.co/u/Steve_Potter)\
**Replies:** 1\
**Last updated:** [February 9, 2019, 1:03am UTC](https://discuss.elastic.co/t/how-to-compare-most-recent-daily-metrics-with-previous-days-metrics/167695 "2019-02-09T01:03:53Z")

</div>

This is probably a simple one for someone who knows what they are doing. I have some metrics that are collected M-F, and everything from a given day has the same timestamp. I'd like to compare the most recent daily set…

---

## [Do full gc frequently?](https://discuss.elastic.co/t/do-full-gc-frequently/67084)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 1\
**Last updated:** [November 25, 2016, 3:18pm UTC](https://discuss.elastic.co/t/do-full-gc-frequently/67084 "2016-11-25T15:18:22Z")

</div>

Today,i find my es node do full gc frequently,but there are no other logs. I want to use jmap to dump the memory,but the dump file's size is 19GB,mat can't analysis the file. I use \_nodes/stats to get the node info,but…

---

## [Embedding into web without](https://discuss.elastic.co/t/embedding-into-web-without/27516)

<div class="topic-metadata">

**Author:** [@DC64](https://discuss.elastic.co/u/DC64)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 4:01pm UTC](https://discuss.elastic.co/t/embedding-into-web-without/27516 "2015-08-18T16:01:22Z")

</div>

Currently to visualize data, I have to type into my search bar the IP of the VM that Kibana is running on. I would like to embed Kibana into my website, with some changes being made: - An alternate to iframes be used -…

---

## [Installing elasticsearch at Redhat openshift](https://discuss.elastic.co/t/installing-elasticsearch-at-redhat-openshift/337637)

<div class="topic-metadata">

**Author:** [@Yasser\_Alsawy](https://discuss.elastic.co/u/Yasser_Alsawy)\
**Replies:** 2\
**Last updated:** [July 6, 2023, 8:52am UTC](https://discuss.elastic.co/t/installing-elasticsearch-at-redhat-openshift/337637 "2023-07-06T08:52:31Z")

</div>

I want to install Elasticsearch at Openshif on-premise. I'm not sure if I have to follow ECE or is it limited to only installation on cloud? should I create servers with roles allocator, director, proxy and coordinator …

---

## [Big JSON Payloads in Elastic APM](https://discuss.elastic.co/t/big-json-payloads-in-elastic-apm/317527)

<div class="topic-metadata">

**Author:** [@rStorms](https://discuss.elastic.co/u/rStorms)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 6:59am UTC](https://discuss.elastic.co/t/big-json-payloads-in-elastic-apm/317527 "2022-10-27T06:59:20Z")

</div>

Hi there, we are using Elastic for Logs and APM in our application. To track bigger JSON payloads sent via REST between Microservices we selectively log those to a capped MongoDB collection in order to debug. I saw the …

---

## [Performance of running ELK Stack on Docker or VM?](https://discuss.elastic.co/t/performance-of-running-elk-stack-on-docker-or-vm/241595)

<div class="topic-metadata">

**Author:** [@eva\_cch](https://discuss.elastic.co/u/eva_cch)\
**Replies:** 2\
**Last updated:** [July 21, 2020, 2:38am UTC](https://discuss.elastic.co/t/performance-of-running-elk-stack-on-docker-or-vm/241595 "2020-07-21T02:38:49Z")

</div>

I have tried running ELK Stack on Docker in a CentOS 7 VM with 3 different Docker containers - Elasticsearch, Logstash and Kibana containers. It took me about an hour to run 625MB as per screenshot below whereby I have a…

---

## [Discarding unnecessary data](https://discuss.elastic.co/t/discarding-unnecessary-data/215677)

<div class="topic-metadata">

**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Replies:** 2\
**Last updated:** [January 21, 2020, 7:34am UTC](https://discuss.elastic.co/t/discarding-unnecessary-data/215677 "2020-01-21T07:34:23Z")

</div>

Hello, I am just starting with logstash and writing filters, and trying to better understand how it works. We want to push all syslog messages to logstash but I want to ensure that events are only sent to elastic if the…

---

## [Kibana 5.6.3: Short Links Not Working](https://discuss.elastic.co/t/kibana-5-6-3-short-links-not-working/181845)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 9:05pm UTC](https://discuss.elastic.co/t/kibana-5-6-3-short-links-not-working/181845 "2019-05-20T21:05:12Z")

</div>

Hi, Short urls have stopped working in our kibana. The setting which enables this is set as follows: state:storeInSessionStorage: true However, following a shared short link displays: Kibana did not load properly. Ch…

---

## [Strip in mutate filter](https://discuss.elastic.co/t/strip-in-mutate-filter/168167)

<div class="topic-metadata">

**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\
**Replies:** 2\
**Last updated:** [February 14, 2019, 7:20am UTC](https://discuss.elastic.co/t/strip-in-mutate-filter/168167 "2019-02-14T07:20:17Z")

</div>

I have a field in logstash \[user scp -t /apps/user\] I would like to extract the user by doing something similar to stripping off '\[' in the string. I saw that the strip option just strips off spaces. So I wanted to kno…

---

## [How to create a timeline in vega-lite with hourly division as well as date and day mentioned in X-axis](https://discuss.elastic.co/t/how-to-create-a-timeline-in-vega-lite-with-hourly-division-as-well-as-date-and-day-mentioned-in-x-axis/160373)

<div class="topic-metadata">

**Author:** [@SunilT](https://discuss.elastic.co/u/SunilT)\
**Replies:** 2\
**Last updated:** [December 12, 2018, 8:58pm UTC](https://discuss.elastic.co/t/how-to-create-a-timeline-in-vega-lite-with-hourly-division-as-well-as-date-and-day-mentioned-in-x-axis/160373 "2018-12-12T20:58:52Z")

</div>

I am putting some data in vega-lite, which has time values in the format " YYYY-MM-DD HH:MM:SS". And I want the timeline in x-axis with hourly division of 24hrs as well as the date mentioned. I have put the following …

---

## [Embbeed elastic search, how to install painless plugin](https://discuss.elastic.co/t/embbeed-elastic-search-how-to-install-painless-plugin/106528)

<div class="topic-metadata">

**Author:** [@eric.santos](https://discuss.elastic.co/u/eric.santos)\
**Replies:** 2\
**Last updated:** [November 7, 2017, 8:07pm UTC](https://discuss.elastic.co/t/embbeed-elastic-search-how-to-install-painless-plugin/106528 "2017-11-07T20:07:46Z")

</div>

Hello, I'm trying to setup a embedded elastic search cluster for integration tests, but I'm failing when I try to insert a painless script in this cluster, I opened this ticket because i thought might be a bug, but accor…

---

## [Not getting exact match first in the elastic search](https://discuss.elastic.co/t/not-getting-exact-match-first-in-the-elastic-search/106269)

<div class="topic-metadata">

**Author:** [@pavani](https://discuss.elastic.co/u/pavani)\
**Replies:** 2\
**Last updated:** [November 3, 2017, 5:46am UTC](https://discuss.elastic.co/t/not-getting-exact-match-first-in-the-elastic-search/106269 "2017-11-03T05:46:37Z")

</div>

I am newbie to elastic search.So i have a scenario like i have a values like... cricket, cricketab, cricketbcd, cricketcd, crazy, my fav game is cricket, cricket king, cricbuzzz, cricket is universal game, anu likes cr…

---

## [Kibana Index patternsをまとめてやりたい](https://discuss.elastic.co/t/kibana-index-patterns/91611)

<div class="topic-metadata">

**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 3:09am UTC](https://discuss.elastic.co/t/kibana-index-patterns/91611 "2017-07-07T03:09:38Z")

</div>

kibana/elasticsearch 5.4.1を使用しています。 Elasticsearchに登録したIndiesを、 kibanaのIndex patternsによって、取込むかと思います。 たくさんあるindexを、一つ一つ手作業で、取込むのは面倒なので、 複数のindexをまとめて取込みたいのですが、どのようにすればよいでしょうか? ただし、search/match/グラフ化の際に、個々のindexを指定したいので、 …

---

## [New node not joining to cluster over iptable rule](https://discuss.elastic.co/t/new-node-not-joining-to-cluster-over-iptable-rule/89183)

<div class="topic-metadata">

**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\
**Replies:** 2\
**Last updated:** [June 14, 2017, 8:27am UTC](https://discuss.elastic.co/t/new-node-not-joining-to-cluster-over-iptable-rule/89183 "2017-06-14T08:27:05Z")

</div>

Currently, I am using Nginx to secure my elasticsearch API. I want to add the new node to my current single node cluster. So I use network.publish\_host: \<node-ip\> and make the port accessible only by the other node of…

---

## [On demand training - Elastic Stack: Logging](https://discuss.elastic.co/t/on-demand-training-elastic-stack-logging/82295)

<div class="topic-metadata">

**Author:** [@jdezego](https://discuss.elastic.co/u/jdezego)\
**Replies:** 2\
**Last updated:** [April 18, 2017, 2:51pm UTC](https://discuss.elastic.co/t/on-demand-training-elastic-stack-logging/82295 "2017-04-18T14:51:47Z")

</div>

I'm following the video training, at a point where I'm supposed to run a Windows Powershell script to load the TopBeats dashboards into the .kibana index. Getting the following error, then if I open Kibana in a web brows…

---

## [Line chart threshold](https://discuss.elastic.co/t/line-chart-threshold/80949)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 2\
**Last updated:** [April 3, 2017, 8:28pm UTC](https://discuss.elastic.co/t/line-chart-threshold/80949 "2017-04-03T20:28:27Z")

</div>

I am using kibana 4.5 I need to draw a line chart with dots above threshold value in one color and dots below threshold value in another Color.is there a way to draw this

---

## [Logstash 2.3 redis input not compatible with redis 2.4.10](https://discuss.elastic.co/t/logstash-2-3-redis-input-not-compatible-with-redis-2-4-10/46278)

<div class="topic-metadata">

**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\
**Replies:** 2\
**Last updated:** [April 5, 2016, 12:15am UTC](https://discuss.elastic.co/t/logstash-2-3-redis-input-not-compatible-with-redis-2-4-10/46278 "2016-04-05T00:15:10Z")

</div>

Just a FYI for anyone else who hits this: I just upgraded to logstash 2.3 and my ELK pipeline broke because my indexers were not able to read from my redis instances, which were running redis 2.4.10 (Default RHEL 6 versi…

---

## [Cannot update logstash-input-beats plugin](https://discuss.elastic.co/t/cannot-update-logstash-input-beats-plugin/35436)

<div class="topic-metadata">

**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\
**Replies:** 2\
**Last updated:** [November 25, 2015, 7:59am UTC](https://discuss.elastic.co/t/cannot-update-logstash-input-beats-plugin/35436 "2015-11-25T07:59:56Z")

</div>

Hello, I try to update logstash-input-beats plugin but it does not work : D:\\logstash\\bin\>plugin update logstash-input-beats io/console not supported; tty will not be manipulated You are updating logstash-input-beats…

---

## [Efficient retrieval of stems mapped to original words](https://discuss.elastic.co/t/efficient-retrieval-of-stems-mapped-to-original-words/29187)

<div class="topic-metadata">

**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Replies:** 2\
**Last updated:** [September 15, 2015, 8:13am UTC](https://discuss.elastic.co/t/efficient-retrieval-of-stems-mapped-to-original-words/29187 "2015-09-15T08:13:15Z")

</div>

Hi, If I have a text field indexed in Elasticsearch with an analyzer applied, I know I can retrieve the analyzed word stems with the term vector API. Is there an efficient way to retrieve all the original words that ar…

---

## [Analyzer issues using query\_string in ES 1.5.2?](https://discuss.elastic.co/t/analyzer-issues-using-query-string-in-es-1-5-2/28944)

<div class="topic-metadata">

**Author:** [@dunnlow](https://discuss.elastic.co/u/dunnlow)\
**Replies:** 2\
**Last updated:** [September 10, 2015, 6:39pm UTC](https://discuss.elastic.co/t/analyzer-issues-using-query-string-in-es-1-5-2/28944 "2015-09-10T18:39:34Z")

</div>

I'm a noob using ES 1.5.2 I want to ngram analyze a field on index, but do no analysis on search. Why? I want a user to be able to search for "group" and match the field "aged grouper" (no wildcards required - but stil…

---

## [Issue with binary field with real time GET operations](https://discuss.elastic.co/t/issue-with-binary-field-with-real-time-get-operations/27627)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 2\
**Last updated:** [August 19, 2015, 9:33am UTC](https://discuss.elastic.co/t/issue-with-binary-field-with-real-time-get-operations/27627 "2015-08-19T09:33:39Z")

</div>

Hello, I'm trying to deal with the following issue. I'm using the real time get api from java. The json object I store in ES contains a binary field that represents an xml file. This field sometimes will be stored (…

---

## [Shuffle the index sorting for match\_all](https://discuss.elastic.co/t/shuffle-the-index-sorting-for-match-all/15827)

<div class="topic-metadata">

**Author:** [@Gabriel\_Gavilan\_gavi](https://discuss.elastic.co/u/Gabriel_Gavilan_gavi)\
**Replies:** 2\
**Last updated:** [February 16, 2014, 6:44pm UTC](https://discuss.elastic.co/t/shuffle-the-index-sorting-for-match-all/15827 "2014-02-16T18:44:52Z")

</div>

I want to shuffle the index so that when I get the documents with "match\_all" they don't appear in chronological order. Here's the question with details on stackoverflow: http://stackoverflow.com/questions/21802009…

---

## [Adding custom analyzer after index creation](https://discuss.elastic.co/t/adding-custom-analyzer-after-index-creation/9764)

<div class="topic-metadata">

**Author:** [@Todd\_Gruben](https://discuss.elastic.co/u/Todd_Gruben)\
**Replies:** 2\
**Last updated:** [November 20, 2012, 6:42pm UTC](https://discuss.elastic.co/t/adding-custom-analyzer-after-index-creation/9764 "2012-11-20T18:42:02Z")

</div>

I would like to add a new type mapping to an existing index that needs to have a custom analyzer (ngram\_analyzer) described below. { "index" : { "analysis" : { "analyzer" : { "ngram\_a…

---

## [How to programmatically cancel a running snapshot on Elastic Cloud](https://discuss.elastic.co/t/how-to-programmatically-cancel-a-running-snapshot-on-elastic-cloud/154220)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 1\
**Last updated:** [October 30, 2018, 3:33pm UTC](https://discuss.elastic.co/t/how-to-programmatically-cancel-a-running-snapshot-on-elastic-cloud/154220 "2018-10-30T15:33:55Z")

</div>

I have cron jobs configured which delete old indices. I just noticed that some of these curl commands are failing with the below message: "Cannot delete indices that are being snapshotted: \[\[...\]\]. Try again after snap…

---

## [Empty message after curl input exec command](https://discuss.elastic.co/t/empty-message-after-curl-input-exec-command/142405)

<div class="topic-metadata">

**Author:** [@nico2](https://discuss.elastic.co/u/nico2)\
**Replies:** 1\
**Last updated:** [August 9, 2018, 9:24am UTC](https://discuss.elastic.co/t/empty-message-after-curl-input-exec-command/142405 "2018-08-09T09:24:12Z")

</div>

Hello, The following logstash conf file should send back the content of a sftp server. But I get an empty message in the created index. When my command is "DIR C:/Logs", I can get some informations in the message. Is t…

---

## [Custom date format in elasticsearch](https://discuss.elastic.co/t/custom-date-format-in-elasticsearch/306218)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 3\
**Last updated:** [June 7, 2022, 12:08pm UTC](https://discuss.elastic.co/t/custom-date-format-in-elasticsearch/306218 "2022-06-07T12:08:03Z")

</div>

Hi, I am trying to index the data with the data as May 26 2022 17:41:24 . I have given the format in my index template as MMM d Y H:m:s . I have been following this link for formatting http://joda-time.sourceforge.net…

---

## [LOG4J vulenrability](https://discuss.elastic.co/t/log4j-vulenrability/295847)

<div class="topic-metadata">

**Author:** [@eden\_shirazi](https://discuss.elastic.co/u/eden_shirazi)\
**Replies:** 3\
**Last updated:** [February 1, 2022, 2:10pm UTC](https://discuss.elastic.co/t/log4j-vulenrability/295847 "2022-02-01T14:10:00Z")

</div>

Hi, I didn't found any official information about the log4j vulnerability in elastic. what is the official version of elastic that protect from log4j vulnerability? Thank for the help.

---

## [Trouble setting up Elastic Agent Fleet server on self-managed Elasticsearch setup](https://discuss.elastic.co/t/trouble-setting-up-elastic-agent-fleet-server-on-self-managed-elasticsearch-setup/291443)

<div class="topic-metadata">

**Author:** [@iamuser](https://discuss.elastic.co/u/iamuser)\
**Replies:** 3\
**Last updated:** [December 14, 2021, 8:14am UTC](https://discuss.elastic.co/t/trouble-setting-up-elastic-agent-fleet-server-on-self-managed-elasticsearch-setup/291443 "2021-12-14T08:14:06Z")

</div>

hi all! I'm having a hard time setting up the elastic agent fleet server. The environment: single node Elasticsearch/wazuh installation with filebeat/metricbeat/heartbeat installed on the node host. I used to copy & past…

---

## [Index Rollover fails with index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-rollover-fails-with-index-lifecycle-rollover-alias-does-not-point-to-index/216338)

<div class="topic-metadata">

**Author:** [@kevinmo13](https://discuss.elastic.co/u/kevinmo13)\
**Replies:** 0\
**Last updated:** [January 23, 2020, 10:50pm UTC](https://discuss.elastic.co/t/index-rollover-fails-with-index-lifecycle-rollover-alias-does-not-point-to-index/216338 "2020-01-23T22:50:03Z")

</div>

I am using ELK version 7.5 and the ILM policy I have set up for a fluent-bit index Fluent bit is managed by a helm-chart with the following config: backend: type: es es: type: \_doc logstash\_format: "Off" …

---

## [Issue with ports](https://discuss.elastic.co/t/issue-with-ports/176414)

<div class="topic-metadata">

**Author:** [@Farhad\_Kocharli](https://discuss.elastic.co/u/Farhad_Kocharli)\
**Replies:** 3\
**Last updated:** [April 12, 2019, 12:27pm UTC](https://discuss.elastic.co/t/issue-with-ports/176414 "2019-04-12T12:27:40Z")

</div>

Hello everyone! I have elastic stack 6.7 on one node I am trying to parse logs from cisco devices. I am using below configuration logstash stops listen on all ports (for winlogbeat and filebeat). P.S I have installed …

---

## [Problem with kibana](https://discuss.elastic.co/t/problem-with-kibana/165965)

<div class="topic-metadata">

**Author:** [@Hill003](https://discuss.elastic.co/u/Hill003)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 6:04am UTC](https://discuss.elastic.co/t/problem-with-kibana/165965 "2019-01-29T06:04:53Z")

</div>

Hi, everyone, I just started depolying this kibana thing, I don't know why the kibana kept saying this. Jan 28 16:35:54 \[localhost\] rc.local: {"type":"log","@timestamp":"2019-01-28T08:35:54Z","tags":\["status","plugin:w…

---

## [Sankey Charts - Using IP addresses](https://discuss.elastic.co/t/sankey-charts-using-ip-addresses/163069)

<div class="topic-metadata">

**Author:** [@nsheridan](https://discuss.elastic.co/u/nsheridan)\
**Replies:** 3\
**Last updated:** [January 8, 2019, 10:25am UTC](https://discuss.elastic.co/t/sankey-charts-using-ip-addresses/163069 "2019-01-08T10:25:26Z")

</div>

Hi Forum, I am completely new to lab visualisations, and I have seen Sankey Charts and they struck me as particulary useful for charting IP address pairing for flows from DDoS mitigation appliances (I get better informa…

---

## [Speeding up a re-deploy](https://discuss.elastic.co/t/speeding-up-a-re-deploy/114423)

<div class="topic-metadata">

**Author:** [@Johnson\_Johnson](https://discuss.elastic.co/u/Johnson_Johnson)\
**Replies:** 3\
**Last updated:** [February 5, 2018, 11:05am UTC](https://discuss.elastic.co/t/speeding-up-a-re-deploy/114423 "2018-02-05T11:05:36Z")

</div>

I did a lot of research, and didn't find anything that was 100% clear to me as far as re-deploying a cluster. I found some good tutorials, and blog posts that touch on the subject with insightful information such as dis…

---

## [Creating line chart using datetime values](https://discuss.elastic.co/t/creating-line-chart-using-datetime-values/114979)

<div class="topic-metadata">

**Author:** [@suryagprakash](https://discuss.elastic.co/u/suryagprakash)\
**Replies:** 3\
**Last updated:** [January 30, 2018, 5:54pm UTC](https://discuss.elastic.co/t/creating-line-chart-using-datetime-values/114979 "2018-01-30T17:54:05Z")

</div>

Hi All, I am new to ELK stack and need help with creating linechart using time values. I have 3 time fields in a my document and want to plot a line chart using these values. Example I have below fields and values T…

---

## [ElasticSearch 5.4.1 Service Start Issue after installation](https://discuss.elastic.co/t/elasticsearch-5-4-1-service-start-issue-after-installation/88315)

<div class="topic-metadata">

**Author:** [@Bapu](https://discuss.elastic.co/u/Bapu)\
**Replies:** 0\
**Last updated:** [June 5, 2017, 6:22pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-1-service-start-issue-after-installation/88315 "2017-06-05T18:22:13Z")

</div>

Greetings! We have installed the ElasticSearch 5.4.1 and unable to start service through command prompt as well as windows service. When we run using elasticsearch.bat command, it log few warnings in error logs as …

---

## [Data migration during ES Upgrade](https://discuss.elastic.co/t/data-migration-during-es-upgrade/73458)

<div class="topic-metadata">

**Author:** [@Srivastavark](https://discuss.elastic.co/u/Srivastavark)\
**Replies:** 3\
**Last updated:** [February 2, 2017, 7:48pm UTC](https://discuss.elastic.co/t/data-migration-during-es-upgrade/73458 "2017-02-02T19:48:30Z")

</div>

Hi All, I have two different cluster ES 1.4.4 and ES 2.4.0 , want to migrate single index (250GB) from old cluster to new cluster with default mapping and settings. Any Suggestion. Regards raj

---

## [What is actual?](https://discuss.elastic.co/t/what-is-actual/36548)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 3\
**Last updated:** [December 7, 2015, 8:47pm UTC](https://discuss.elastic.co/t/what-is-actual/36548 "2015-12-07T20:47:36Z")

</div>

there are lots of fields that are labeled with actual! What is the difference? mem.actual\_used?

---

## [SEO - What is Search Engine Optimization and How it Can Benefit Your Business](https://discuss.elastic.co/t/seo-what-is-search-engine-optimization-and-how-it-can-benefit-your-business/16610)

<div class="topic-metadata">

**Author:** [@robertadazs](https://discuss.elastic.co/u/robertadazs)\
**Replies:** 0\
**Last updated:** [March 26, 2014, 12:54pm UTC](https://discuss.elastic.co/t/seo-what-is-search-engine-optimization-and-how-it-can-benefit-your-business/16610 "2014-03-26T12:54:02Z")

</div>

What is Search Engine Optimization? Search Engine Optimization, which is also known as SEO, is the process of increasing the volume and quality of traffic to a website from search engines via organic or search resul…

---

## [ERROR instance/beat.go:971 Exiting: error initializing processors: unexpected expand\_keys option in processors.1.decode\_json\_fields](https://discuss.elastic.co/t/error-instance-beat-go-971-exiting-error-initializing-processors-unexpected-expand-keys-option-in-processors-1-decode-json-fields/271986)

<div class="topic-metadata">

**Author:** [@NiamhAsura](https://discuss.elastic.co/u/NiamhAsura)\
**Replies:** 4\
**Last updated:** [May 22, 2021, 12:35am UTC](https://discuss.elastic.co/t/error-instance-beat-go-971-exiting-error-initializing-processors-unexpected-expand-keys-option-in-processors-1-decode-json-fields/271986 "2021-05-22T00:35:57Z")

</div>

Hi, I am trying to use the expand\_keys option as specified in the configuration for decode\_json\_fields. I am getting the following error: ERROR instance/beat.go:971 Exiting: error initializing processors: unexpec…

---

## [Suggester completion with short product model names](https://discuss.elastic.co/t/suggester-completion-with-short-product-model-names/219514)

<div class="topic-metadata">

**Author:** [@Martin\_Aronsen](https://discuss.elastic.co/u/Martin_Aronsen)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 10:47am UTC](https://discuss.elastic.co/t/suggester-completion-with-short-product-model-names/219514 "2020-02-17T10:47:35Z")

</div>

Hi, We're building a database with various technological products, and trying to use the completion suggester to build an autocomplete search bar. This is built inside Invision Community, so we're using the same index …

---

## [Deleting daily indices](https://discuss.elastic.co/t/deleting-daily-indices/162514)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 4\
**Last updated:** [December 31, 2018, 5:08pm UTC](https://discuss.elastic.co/t/deleting-daily-indices/162514 "2018-12-31T17:08:15Z")

</div>

I am having daily indices. I want to delete past indices beyond the last seven days. I read about date maths in index names but I dont find a direct way of doing that in a single query. My current strategy is as follows…

---

## [How to make the healt indicator in the visualisation?](https://discuss.elastic.co/t/how-to-make-the-healt-indicator-in-the-visualisation/79907)

<div class="topic-metadata">

**Author:** [@AlexM](https://discuss.elastic.co/u/AlexM)\
**Replies:** 4\
**Last updated:** [March 27, 2017, 1:17pm UTC](https://discuss.elastic.co/t/how-to-make-the-healt-indicator-in-the-visualisation/79907 "2017-03-27T13:17:20Z")

</div>

Hi, Hot to make the indicators of healts as show in the pictures? I will appreciate for the reply. Thanks

---

## [How to "highlight" the request and not the response in multivalue query](https://discuss.elastic.co/t/how-to-highlight-the-request-and-not-the-response-in-multivalue-query/47650)

<div class="topic-metadata">

**Author:** [@Thibault\_Duez](https://discuss.elastic.co/u/Thibault_Duez)\
**Replies:** 4\
**Last updated:** [April 18, 2016, 3:19pm UTC](https://discuss.elastic.co/t/how-to-highlight-the-request-and-not-the-response-in-multivalue-query/47650 "2016-04-18T15:19:58Z")

</div>

Hi guys, I would first thank you for your help. Here is my problem : I have an index of products and I request elasticsearch to retreive me all products who match with an array of queries. But I would know for each p…

---

## [Cumulative mode in bar chart for kibana 4?](https://discuss.elastic.co/t/cumulative-mode-in-bar-chart-for-kibana-4/23463)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [May 23, 2015, 1:35pm UTC](https://discuss.elastic.co/t/cumulative-mode-in-bar-chart-for-kibana-4/23463 "2015-05-23T13:35:24Z")

</div>

Hi! I was wondering is there a cumulative mode for bar chart which existed in kibana 3? I am considering to show the overall sum of past values for each period. For example, if following points had 2015 apr …

[Previous page](https://discuss.elastic.co/top.md?page=1369&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1371&per_page=50&period=all)
