# Top

**URL:** https://discuss.elastic.co/top.md?page=1373&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1374

---

## [How to search with specific keyword order](https://discuss.elastic.co/t/how-to-search-with-specific-keyword-order/38293)

<div class="topic-metadata">

**Author:** [@Hacksign](https://discuss.elastic.co/u/Hacksign)\
**Replies:** 2\
**Last updated:** [January 4, 2016, 10:08pm UTC](https://discuss.elastic.co/t/how-to-search-with-specific-keyword-order/38293 "2016-01-04T22:08:15Z")

</div>

If there is an data like below : this is a test line contain notepad.exe. this is not the line I want which contain notepad.exe for test and hypothesis, I dont know all words in above sentence, what I know is below …

---

## [How to drill from one visualization to another](https://discuss.elastic.co/t/how-to-drill-from-one-visualization-to-another/25684)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [July 16, 2015, 5:26am UTC](https://discuss.elastic.co/t/how-to-drill-from-one-visualization-to-another/25684 "2015-07-16T05:26:33Z")

</div>

Hi Kibana Experts, I was wondering if this is possible in Kibana 4. I want to drill form one visualization to another . Something like if I click on overall count of events it will open detail of all those events and …

---

## [Document corruption in index, id field is garbled text](https://discuss.elastic.co/t/document-corruption-in-index-id-field-is-garbled-text/19303)

<div class="topic-metadata">

**Author:** [@anurag\_naidu](https://discuss.elastic.co/u/anurag_naidu)\
**Replies:** 2\
**Last updated:** [August 15, 2014, 3:38pm UTC](https://discuss.elastic.co/t/document-corruption-in-index-id-field-is-garbled-text/19303 "2014-08-15T15:38:08Z")

</div>

We are using ES 1.2.2 server with a rails application as the client (ActiveRecord document model) and it seems as though some of the documents in the index might have been corrupted because the \*id \*field of the do…

---

## [Classloader warnings after updating to Java 21](https://discuss.elastic.co/t/classloader-warnings-after-updating-to-java-21/362003)

<div class="topic-metadata">

**Author:** [@svenrienstra](https://discuss.elastic.co/u/svenrienstra)\
**Replies:** 4\
**Last updated:** [June 26, 2024, 10:34am UTC](https://discuss.elastic.co/t/classloader-warnings-after-updating-to-java-21/362003 "2024-06-26T10:34:06Z")

</div>

After updating our JVM (and updated compile level) from Java 17 to 21 our logs are spammed with classloader warnings. Here is the startup log of the agent: 2024-06-25 09:24:17,810 \[Attach Listener\] INFO co.elastic.apm…

---

## [Парсинг поля “message” windows print](https://discuss.elastic.co/t/message-windows-print/282018)

<div class="topic-metadata">

**Author:** [@zhsv](https://discuss.elastic.co/u/zhsv)\
**Replies:** 4\
**Last updated:** [August 27, 2021, 6:16am UTC](https://discuss.elastic.co/t/message-windows-print/282018 "2021-08-27T06:16:24Z")

</div>

Добрый день! Прошу помочь разобрать лог печати из windows. За ранее извиняюсь, т.к. дуб дубом в grok \[2021-08-19T23:14:41,726\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[7a22c627e1accad82d7e582d6ff4b94f3fb25a00d65131…

---

## [How to manage data with high update rate?](https://discuss.elastic.co/t/how-to-manage-data-with-high-update-rate/261995)

<div class="topic-metadata">

**Author:** [@alireza\_jazayerei](https://discuss.elastic.co/u/alireza_jazayerei)\
**Replies:** 4\
**Last updated:** [January 24, 2021, 5:34am UTC](https://discuss.elastic.co/t/how-to-manage-data-with-high-update-rate/261995 "2021-01-24T05:34:34Z")

</div>

hello everyone I want to implement an advanced search system that has the ability to sort results by their popularity. I feel that update operation is expensive in elastic search. what is the best way to store user like…

---

## [Kibana not started](https://discuss.elastic.co/t/kibana-not-started/237908)

<div class="topic-metadata">

**Author:** [@ronics](https://discuss.elastic.co/u/ronics)\
**Replies:** 4\
**Last updated:** [June 23, 2020, 5:15am UTC](https://discuss.elastic.co/t/kibana-not-started/237908 "2020-06-23T05:15:44Z")

</div>

I recently upgraded elk from 7.7.0 to 7.8.0 The elasticsearch is working fine but when I try to start kibana it shows following error. Please help FATAL Error: \[config validation of \[xpack.reporting\].enabled\]: definit…

---

## [S3 Output Plugin with many S3 buckets takes 30 minutes to start](https://discuss.elastic.co/t/s3-output-plugin-with-many-s3-buckets-takes-30-minutes-to-start/184685)

<div class="topic-metadata">

**Author:** [@dorth](https://discuss.elastic.co/u/dorth)\
**Replies:** 4\
**Last updated:** [June 25, 2019, 4:07pm UTC](https://discuss.elastic.co/t/s3-output-plugin-with-many-s3-buckets-takes-30-minutes-to-start/184685 "2019-06-25T16:07:56Z")

</div>

I'm using Logstash 7.1.1 and logstash-output-s3 4.1.9. I have 38 different output locations (S3 buckets) depending on the logic. Logstash is taking nearly 30 minutes to start. \[2019-06-07T01:21:21,711\]\[INFO \]\[logstash…

---

## [Find length of 'tag' attribute](https://discuss.elastic.co/t/find-length-of-tag-attribute/119415)

<div class="topic-metadata">

**Author:** [@dsakpal](https://discuss.elastic.co/u/dsakpal)\
**Replies:** 4\
**Last updated:** [February 12, 2018, 1:31pm UTC](https://discuss.elastic.co/t/find-length-of-tag-attribute/119415 "2018-02-12T13:31:29Z")

</div>

Hi, How to find length/size of 'tag' attribute in logstash(output section)? My scenario : All my errors are automatically puts into the 'tag' attribute by logstash & thats why I wanted to know the size of 'tag' attribu…

---

## [Json Data not getting parsed when sent to Elasticsearch](https://discuss.elastic.co/t/json-data-not-getting-parsed-when-sent-to-elasticsearch/19424)

<div class="topic-metadata">

**Author:** [@Didjit](https://discuss.elastic.co/u/Didjit)\
**Replies:** 4\
**Last updated:** [August 27, 2014, 5:12pm UTC](https://discuss.elastic.co/t/json-data-not-getting-parsed-when-sent-to-elasticsearch/19424 "2014-08-27T17:12:07Z")

</div>

Hi, The following is a debug from Logstash: { "message" =\> "{\\"EventTime\\":\\"2014-08-24T09:44:46-0400\\",\\"URI\\":\\"http://ME/rest/venue/ME/hours/2014-08-24\\",\\"uri\_payload\\":{\\"value\\":\[{\\"open\\":\\"2014-0…

---

## [Vulnerabilities in latest docker image of Elasticsearch 8.3.1](https://discuss.elastic.co/t/vulnerabilities-in-latest-docker-image-of-elasticsearch-8-3-1/310031)

<div class="topic-metadata">

**Author:** [@chitransh\_1](https://discuss.elastic.co/u/chitransh_1)\
**Replies:** 1\
**Last updated:** [July 19, 2022, 9:30pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-latest-docker-image-of-elasticsearch-8-3-1/310031 "2022-07-19T21:30:13Z")

</div>

Hi, We are using Elasticsearch 8.3.1 for one of our projects. While scanning the Elasticsearch 8.3.1 with Aquasec Scanner, we are getting a few CVEs: These CVE are associated with various Java based packages which hav…

---

## [Response time much greater than query time in slowlogs - AWS ES](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176)

<div class="topic-metadata">

**Author:** [@jlicheng](https://discuss.elastic.co/u/jlicheng)\
**Replies:** 1\
**Last updated:** [August 25, 2020, 6:51pm UTC](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176 "2020-08-25T18:51:15Z")

</div>

Hi folks, we are using Amazon Elasticsearch and we're seeing a big discrepancy in response time as measured by the code querying Elasticsearch and the slowlogs produced by Elasticsearch. We've turned on "slowlogs" and g…

---

## [Configuring filebeats for persistentVolumes in a cluster with multiple nodes](https://discuss.elastic.co/t/configuring-filebeats-for-persistentvolumes-in-a-cluster-with-multiple-nodes/205934)

<div class="topic-metadata">

**Author:** [@JeffKet](https://discuss.elastic.co/u/JeffKet)\
**Replies:** 1\
**Last updated:** [November 14, 2019, 4:37pm UTC](https://discuss.elastic.co/t/configuring-filebeats-for-persistentvolumes-in-a-cluster-with-multiple-nodes/205934 "2019-11-14T16:37:24Z")

</div>

I have a cluster with 3 master and 8 worker nodes. I have deployed filebeats in pods on each of the worker nodes to gather container logs. What I also have done is create a pod that writes to a persistentVolumeClaim in a…

---

## [Problem with retrieving data from Elasticsearch by Spark](https://discuss.elastic.co/t/problem-with-retrieving-data-from-elasticsearch-by-spark/166790)

<div class="topic-metadata">

**Author:** [@Yasmeenc](https://discuss.elastic.co/u/Yasmeenc)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 9:42pm UTC](https://discuss.elastic.co/t/problem-with-retrieving-data-from-elasticsearch-by-spark/166790 "2019-02-11T21:42:58Z")

</div>

Hi Team, I'm quite new to ES and ES-Hadoop. The code for pulling the data out from ES is like below: es\_read\_conf = { "es.nodes" : "", "es.port" : "80", "es.resource" : 'temprollover/rollover…

---

## [TypeError: Cannot read property 'group' of undefined](https://discuss.elastic.co/t/typeerror-cannot-read-property-group-of-undefined/151000)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 1\
**Last updated:** [October 4, 2018, 10:49am UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-group-of-undefined/151000 "2018-10-04T10:49:17Z")

</div>

Dear all, I am using kibana 6.2.4 and would like to install a plugin which is called mapster (https://github.com/OmniCyberSecurity/mapster). When I try to run, it show following error message. Any idea? Thanks

---

## [Integrate elasticsearch with Servicenow](https://discuss.elastic.co/t/integrate-elasticsearch-with-servicenow/140583)

<div class="topic-metadata">

**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 11:30pm UTC](https://discuss.elastic.co/t/integrate-elasticsearch-with-servicenow/140583 "2018-07-18T23:30:53Z")

</div>

Hi, I am using ELK and capturing application logs using beats. I would like to raise a ticket in ServiceNow if there are any warnings or critical messages in the logs. Is there anyway I can integrate elasticsearch with …

---

## [Filebeat to send to Multiple Logstash Sever](https://discuss.elastic.co/t/filebeat-to-send-to-multiple-logstash-sever/123145)

<div class="topic-metadata">

**Author:** [@srcpro](https://discuss.elastic.co/u/srcpro)\
**Replies:** 1\
**Last updated:** [March 12, 2018, 1:19am UTC](https://discuss.elastic.co/t/filebeat-to-send-to-multiple-logstash-sever/123145 "2018-03-12T01:19:09Z")

</div>

I am trying to send logs using filebeats to multiple logstash server. Same logs in 2 different logstash server. |----\> logstash01 Filebeat ----\> | |----\> logsstash02 Is it some…

---

## [How do I use the \_id field in Painless?](https://discuss.elastic.co/t/how-do-i-use-the--id-field-in-painless/66642)

<div class="topic-metadata">

**Author:** [@Tal\_Weiss](https://discuss.elastic.co/u/Tal_Weiss)\
**Replies:** 1\
**Last updated:** [November 20, 2016, 2:39pm UTC](https://discuss.elastic.co/t/how-do-i-use-the--id-field-in-painless/66642 "2016-11-20T14:39:40Z")

</div>

How do I access the \_id field of a document in the Painless scripting language? Every time I try something like this: doc\['\_id'\] + "/" + doc\['site\_code'\].value doc\['\_index'\] + "/" + doc\['site\_code'\].value ctx.index +…

---

## [Default Time column in Discover or saved searches](https://discuss.elastic.co/t/default-time-column-in-discover-or-saved-searches/47434)

<div class="topic-metadata">

**Author:** [@Praveen\_Shilavantar](https://discuss.elastic.co/u/Praveen_Shilavantar)\
**Replies:** 1\
**Last updated:** [April 15, 2016, 1:53pm UTC](https://discuss.elastic.co/t/default-time-column-in-discover-or-saved-searches/47434 "2016-04-15T13:53:46Z")

</div>

How do we remove default "Time" column here? I want to use "CreatedDate" instead default "Time".

---

## [Init scripts defaults](https://discuss.elastic.co/t/init-scripts-defaults/27528)

<div class="topic-metadata">

**Author:** [@Erwin](https://discuss.elastic.co/u/Erwin)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 10:23pm UTC](https://discuss.elastic.co/t/init-scripts-defaults/27528 "2015-08-17T22:23:11Z")

</div>

I just installed Elastic and Logstash on Debian via the repositories given via the site https://www.elastic.co/guide/en/logstash/current/package-repositories.html Now i noticed that the the scripts: - /etc/init.d/logstas…

---

## [Cannot install ECE onto Ubuntu 16.04](https://discuss.elastic.co/t/cannot-install-ece-onto-ubuntu-16-04/222961)

<div class="topic-metadata">

**Author:** [@akimbah](https://discuss.elastic.co/u/akimbah)\
**Replies:** 8\
**Last updated:** [March 12, 2020, 6:20pm UTC](https://discuss.elastic.co/t/cannot-install-ece-onto-ubuntu-16-04/222961 "2020-03-12T18:20:09Z")

</div>

I am attempting to install ECE 2.4.3 onto an EC2 instance of Ubuntu 16.04. Keep getting stuck in this portion. Attached a screenshot of the --debug information above. Please advise

---

## [Kibana \<---\> Elasticsearch integration with SSL enable](https://discuss.elastic.co/t/kibana-elasticsearch-integration-with-ssl-enable/312298)

<div class="topic-metadata">

**Author:** [@Diego\_Lopes\_Penna](https://discuss.elastic.co/u/Diego_Lopes_Penna)\
**Replies:** 5\
**Last updated:** [August 19, 2022, 2:07pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-integration-with-ssl-enable/312298 "2022-08-19T14:07:00Z")

</div>

Hello, I've tried to find a solution for this on this forum but I was not able to find a solution that solves the problem. I'm trying to configure a Kibana/Elasticsearch integration. Each one of them is running on its …

---

## [Local Login and Active Directory Login](https://discuss.elastic.co/t/local-login-and-active-directory-login/304844)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [May 20, 2022, 4:43am UTC](https://discuss.elastic.co/t/local-login-and-active-directory-login/304844 "2022-05-20T04:43:35Z")

</div>

I've recently activated gold licensing for our Elasticsearch 7.16.1 instance. I'm trying to implement Active Directory authentication. I've successfully added the needed configuration for Elasticsearch, but when I add …

---

## [Grok regex pattern for symbols?](https://discuss.elastic.co/t/grok-regex-pattern-for-symbols/286624)

<div class="topic-metadata">

**Author:** [@helloworld1234](https://discuss.elastic.co/u/helloworld1234)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 4:44pm UTC](https://discuss.elastic.co/t/grok-regex-pattern-for-symbols/286624 "2021-10-13T16:44:24Z")

</div>

Lets say I have a string: "petBreed":"dachshund" "petName":"rufus" "petAge":"12" The value is not constant and can vary in length and content. And i want to use grok overwrite to remove rufus from the raw string. So…

---

## [Questions about handling delete operations on a latest-data-only index](https://discuss.elastic.co/t/questions-about-handling-delete-operations-on-a-latest-data-only-index/286227)

<div class="topic-metadata">

**Author:** [@nivo](https://discuss.elastic.co/u/nivo)\
**Replies:** 5\
**Last updated:** [October 12, 2021, 6:54pm UTC](https://discuss.elastic.co/t/questions-about-handling-delete-operations-on-a-latest-data-only-index/286227 "2021-10-12T18:54:46Z")

</div>

Hi everyone, I have a question regarding our use case following this topic - In our case we use a single index per customer (without rolling it) and keeping its data up to date by indexing or deleting documents when t…

---

## [How can we use the beats-provided Kibana dashboards but use a custom index-pattern name?](https://discuss.elastic.co/t/how-can-we-use-the-beats-provided-kibana-dashboards-but-use-a-custom-index-pattern-name/271282)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 5\
**Last updated:** [May 9, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-can-we-use-the-beats-provided-kibana-dashboards-but-use-a-custom-index-pattern-name/271282 "2021-05-09T11:26:11Z")

</div>

Hii,I am using Filebeat 7.12.0 to ingest netflow flows and store it into elasticsearch.I want to load the example dashboards of filebeat but with an index pattern different than filebeat-\*.How can I do this? I am running…

---

## [Watcher alert error](https://discuss.elastic.co/t/watcher-alert-error/241311)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 10:06am UTC](https://discuss.elastic.co/t/watcher-alert-error/241311 "2020-08-05T10:06:11Z")

</div>

Hello, I want to calculate the ratio of orders/searches per customer number in my erp and send an alert with that info. So i have created an advance alert with the following code: { "trigger": { "schedule": { …

---

## [Kibana Plugin Not working](https://discuss.elastic.co/t/kibana-plugin-not-working/241180)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 5\
**Last updated:** [July 15, 2020, 12:38pm UTC](https://discuss.elastic.co/t/kibana-plugin-not-working/241180 "2020-07-15T12:38:34Z")

</div>

I have integrated one custom kibana plugin but I can not find that in my kibana tool. I have setup the development environment, ran yarn kbn bootstrap and yarn start. I am not getting any issue. I checked in kibana bund…

---

## [Can't shrink, how to debug curator?](https://discuss.elastic.co/t/cant-shrink-how-to-debug-curator/159294)

<div class="topic-metadata">

**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\
**Replies:** 5\
**Last updated:** [December 4, 2018, 9:20pm UTC](https://discuss.elastic.co/t/cant-shrink-how-to-debug-curator/159294 "2018-12-04T21:20:27Z")

</div>

Working on a test stack, elasticsearch and curator running on a single node, kibana running on a separate node, indexes set to zero repls, beat indexs set to the default 'daily index'... Experimenting with curator shrink…

---

## [Logstash.yml file is missing on Linux Redhat distribution](https://discuss.elastic.co/t/logstash-yml-file-is-missing-on-linux-redhat-distribution/99344)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 5\
**Last updated:** [September 7, 2017, 7:00pm UTC](https://discuss.elastic.co/t/logstash-yml-file-is-missing-on-linux-redhat-distribution/99344 "2017-09-07T19:00:00Z")

</div>

Hi, I’ve installed Logstash 2.4 on Redhat based system using rpm install. From the documentation, logstash.yml should be at /etc/logstash/ but I can’t find any of the files there except conf.d directory. Can someone pl…

---

## [How to create index name with date and incremental Number](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923)

<div class="topic-metadata">

**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\
**Replies:** 3\
**Last updated:** [June 9, 2022, 1:33pm UTC](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923 "2022-06-09T13:33:22Z")

</div>

Greetings ..! I want to create index from Logstash. The index name should be (index\_name-2022-05-30-001). And I set a limit to index is 1.5gb, when it exceeds in the same day, the newly created index name should be ind…

---

## [Create a document id using more than 2 fields](https://discuss.elastic.co/t/create-a-document-id-using-more-than-2-fields/187867)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 3\
**Last updated:** [June 27, 2019, 3:09pm UTC](https://discuss.elastic.co/t/create-a-document-id-using-more-than-2-fields/187867 "2019-06-27T15:09:49Z")

</div>

How can one create a document id using multiple fields, more than just two? I'm trying to use more than 3 fields but it doesn't seem to accept it unless there is another way to do it. Right now i'm using this format: d…

---

## [Uptime dashboard is not showing any data after upgrade to 7](https://discuss.elastic.co/t/uptime-dashboard-is-not-showing-any-data-after-upgrade-to-7/176798)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 3\
**Last updated:** [May 8, 2019, 6:26pm UTC](https://discuss.elastic.co/t/uptime-dashboard-is-not-showing-any-data-after-upgrade-to-7/176798 "2019-05-08T18:26:37Z")

</div>

Uptime is not showing any data after upgrade. I am able to see logs in discover from heartbeat.

---

## [How to add additional data when using ScriptEngineService and return as part of result](https://discuss.elastic.co/t/how-to-add-additional-data-when-using-scriptengineservice-and-return-as-part-of-result/171096)

<div class="topic-metadata">

**Author:** [@Yang\_zhen](https://discuss.elastic.co/u/Yang_zhen)\
**Replies:** 3\
**Last updated:** [March 6, 2019, 1:07pm UTC](https://discuss.elastic.co/t/how-to-add-additional-data-when-using-scriptengineservice-and-return-as-part-of-result/171096 "2019-03-06T13:07:17Z")

</div>

Hi I am using ScriptEnginService to implement a scoring plugin, except the score calculated by the runAsDouble() function, I want to add more additional feature data and return as a part of result. Some doc in my ind…

---

## [How to fix repository\_missing\_exception?](https://discuss.elastic.co/t/how-to-fix-repository-missing-exception/122013)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 0\
**Last updated:** [March 1, 2018, 9:38am UTC](https://discuss.elastic.co/t/how-to-fix-repository-missing-exception/122013 "2018-03-01T09:38:24Z")

</div>

Hi, I made a snapshot on production tared the complete repository folder and moved it to another system for deeper analysis. Path configuration for repository and snapshot is identical. But on my target system I had t…

---

## [Date filter does not assign value to target field](https://discuss.elastic.co/t/date-filter-does-not-assign-value-to-target-field/112913)

<div class="topic-metadata">

**Author:** [@sramshey](https://discuss.elastic.co/u/sramshey)\
**Replies:** 3\
**Last updated:** [December 31, 2017, 1:05pm UTC](https://discuss.elastic.co/t/date-filter-does-not-assign-value-to-target-field/112913 "2017-12-31T13:05:54Z")

</div>

Hi- I'm having some trouble using a date filter in logstash. I am able to parse the date elements from the original log message into a custom field, but the date filter does not assign it to the @timestamp field and I do…

---

## [Vector map - not showing](https://discuss.elastic.co/t/vector-map-not-showing/111310)

<div class="topic-metadata">

**Author:** [@Ninoslav](https://discuss.elastic.co/u/Ninoslav)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 8:34pm UTC](https://discuss.elastic.co/t/vector-map-not-showing/111310 "2017-12-19T20:34:22Z")

</div>

Hello, I just installed "new" Kibana v6.0.1 had 6.0.0 before, on both versions, i was unable to use Region Map, on both those versions, because i can\`t select Vector map. \[image\] Can someone help me, or explain how to…

---

## [Logstash filter not able to split](https://discuss.elastic.co/t/logstash-filter-not-able-to-split/52205)

<div class="topic-metadata">

**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\
**Replies:** 3\
**Last updated:** [June 8, 2016, 6:33pm UTC](https://discuss.elastic.co/t/logstash-filter-not-able-to-split/52205 "2016-06-08T18:33:33Z")

</div>

Hi Gurus, please help me out . I am trying to split the nested fields in log files but not able to do .Could you please help me out . He is the sample file: Mon May 30 00:30:26 PDT 2016 kthr memory page disk faults c…

---

## [What additional steps need to be performed for Laravel?](https://discuss.elastic.co/t/what-additional-steps-need-to-be-performed-for-laravel/309919)

<div class="topic-metadata">

**Author:** [@Abhishek\_Sharma1](https://discuss.elastic.co/u/Abhishek_Sharma1)\
**Replies:** 1\
**Last updated:** [December 4, 2022, 10:18am UTC](https://discuss.elastic.co/t/what-additional-steps-need-to-be-performed-for-laravel/309919 "2022-12-04T10:18:17Z")

</div>

I recently installed a dockerized Laravel application. I followed the instructions as mentioned here: apm-agent-php/setup.asciidoc at main · elastic/apm-agent-php · GitHub inside my Docker container. My container is usin…

---

## [Error restoring state from URL Unable to completely restore the URL, be sure to use the share functionality](https://discuss.elastic.co/t/error-restoring-state-from-url-unable-to-completely-restore-the-url-be-sure-to-use-the-share-functionality/314925)

<div class="topic-metadata">

**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\
**Replies:** 1\
**Last updated:** [September 26, 2022, 5:46pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-unable-to-completely-restore-the-url-be-sure-to-use-the-share-functionality/314925 "2022-09-26T17:46:13Z")

</div>

When I open Kibana, it show error like this. I search on discussion and nobody answer. How to fix it?

---

## [Pipelines YAML file is empty](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/297560)

<div class="topic-metadata">

**Author:** [@Naba01](https://discuss.elastic.co/u/Naba01)\
**Replies:** 1\
**Last updated:** [February 20, 2022, 3:17pm UTC](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/297560 "2022-02-20T15:17:45Z")

</div>

I am new to ELK.Just tried installing and starting logstash on local windows PC, getting the below error after run the logstash.bat command. Could you please help resolve the issue. ERROR: Pipelines YAML file is empty…

---

## [ECK Quickstart - Elasticsearch fails to start with "permission denied" error](https://discuss.elastic.co/t/eck-quickstart-elasticsearch-fails-to-start-with-permission-denied-error/247094)

<div class="topic-metadata">

**Author:** [@kurbar](https://discuss.elastic.co/u/kurbar)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 12:30pm UTC](https://discuss.elastic.co/t/eck-quickstart-elasticsearch-fails-to-start-with-permission-denied-error/247094 "2020-09-04T12:30:22Z")

</div>

Hello, I’m following the quickstart guide for ECK on one of my Kubeadm clusters (Kubernetes version 1.15.7). I have the Elastic operator up and running with version 1.2.1. I then tried deploying the same Elasticsearch cl…

---

## [Search for a negative value](https://discuss.elastic.co/t/search-for-a-negative-value/241159)

<div class="topic-metadata">

**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\
**Replies:** 1\
**Last updated:** [July 14, 2020, 4:18pm UTC](https://discuss.elastic.co/t/search-for-a-negative-value/241159 "2020-07-14T16:18:39Z")

</div>

I have indexed fields containing character codes such as 3 1 1 and 3 1 -1. But when I search 3 1 -1 it seems that the "-" is not supported! could you please help me? GET /\_search { "query": { "match\_phra…

---

## [RestHighLevelClient & http.compression for gzip](https://discuss.elastic.co/t/resthighlevelclient-http-compression-for-gzip/199155)

<div class="topic-metadata">

**Author:** [@kiran\_reddy1](https://discuss.elastic.co/u/kiran_reddy1)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:36am UTC](https://discuss.elastic.co/t/resthighlevelclient-http-compression-for-gzip/199155 "2019-09-13T11:36:40Z")

</div>

Hi , Trying to enable http.compression on elasticsearch but the response is not able to parse through handlers on RestHighLevelClient. Error : Caused by: com.fasterxml.jackson.core.JsonParseException: Illegal charact…

---

## [Do global variables override the result of matching?](https://discuss.elastic.co/t/do-global-variables-override-the-result-of-matching/170042)

<div class="topic-metadata">

**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\
**Replies:** 7\
**Last updated:** [February 27, 2019, 4:30pm UTC](https://discuss.elastic.co/t/do-global-variables-override-the-result-of-matching/170042 "2019-02-27T16:30:07Z")

</div>

Hi maybe the subject is not clear. I will try to explain it. I have a log file that looks like this 06/22/18 00:41:11.719 PID = 1036 ... 06/22/18 00:41:11.757 host is "host1" ... 06/22/18 00:41:11.772 JOB ID: 87.113 .…

---

## [Define Index mapping for time based indexes my\_index-%{YYYY-MM-DD}](https://discuss.elastic.co/t/define-index-mapping-for-time-based-indexes-my-index-yyyy-mm-dd/162898)

<div class="topic-metadata">

**Author:** [@BHAVIK\_CHITRODA](https://discuss.elastic.co/u/BHAVIK_CHITRODA)\
**Replies:** 1\
**Last updated:** [January 4, 2019, 5:25am UTC](https://discuss.elastic.co/t/define-index-mapping-for-time-based-indexes-my-index-yyyy-mm-dd/162898 "2019-01-04T05:25:28Z")

</div>

Is there a way to use define mapping for an index that will be used for all the subsequent indexes with different time stamps? I am sending logs from Logstash to ES using elasticsearch plugin. In the index configuration…

---

## [Elasticsearch Master Node](https://discuss.elastic.co/t/elasticsearch-master-node/118256)

<div class="topic-metadata">

**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\
**Replies:** 7\
**Last updated:** [February 13, 2018, 10:48pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node/118256 "2018-02-13T22:48:53Z")

</div>

Where does master node store data nodes information. Thanks Gaurav

---

## [How is search rate calculated for each node?](https://discuss.elastic.co/t/how-is-search-rate-calculated-for-each-node/72973)

<div class="topic-metadata">

**Author:** [@trusttheprocess2017](https://discuss.elastic.co/u/trusttheprocess2017)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 8:36pm UTC](https://discuss.elastic.co/t/how-is-search-rate-calculated-for-each-node/72973 "2017-02-09T20:36:22Z")

</div>

For each index search rate is lookup per second \* number of shards What about for each node?

---

## [Elasticsearch start failure related to snapshot reconfigure](https://discuss.elastic.co/t/elasticsearch-start-failure-related-to-snapshot-reconfigure/68781)

<div class="topic-metadata">

**Author:** [@john6](https://discuss.elastic.co/u/john6)\
**Replies:** 1\
**Last updated:** [December 16, 2016, 4:29pm UTC](https://discuss.elastic.co/t/elasticsearch-start-failure-related-to-snapshot-reconfigure/68781 "2016-12-16T16:29:01Z")

</div>

Elasticsearch 2.3, single server, Centos 7 The server used to store snapshots was lost. Tried to reconfigure for new backup server and ended up here. Is there a way to recover ? \[2016-12-12 11:02:29,793\]\[WARN \]\[rest.s…

---

## [Stemming on multiple language index](https://discuss.elastic.co/t/stemming-on-multiple-language-index/27234)

<div class="topic-metadata">

**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\
**Replies:** 1\
**Last updated:** [August 12, 2015, 4:16am UTC](https://discuss.elastic.co/t/stemming-on-multiple-language-index/27234 "2015-08-12T04:16:09Z")

</div>

hi , My elastic index contains more than one language and a document in elastic index contains more than one language For example :my elastic index has Chinese ,Japanese and Korean language documents . Chinese docu…

[Previous page](https://discuss.elastic.co/top.md?page=1372&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1374&per_page=50&period=all)
