# Top

**URL:** https://discuss.elastic.co/top.md?page=1375&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1376

---

## [Failed to parse date - Elasticsearch 2.2 / Logstash 2.2](https://discuss.elastic.co/t/failed-to-parse-date-elasticsearch-2-2-logstash-2-2/42982)

<div class="topic-metadata">

**Author:** [@Marine](https://discuss.elastic.co/u/Marine)\
**Replies:** 3\
**Last updated:** [March 2, 2016, 10:23am UTC](https://discuss.elastic.co/t/failed-to-parse-date-elasticsearch-2-2-logstash-2-2/42982 "2016-03-02T10:23:57Z")

</div>

Hi, I have two log files with different date format, and two config files in my conf.d dir for each log file : 01-file.conf corresponding to the first log file, and 02-file.conf corresponding to my second log file. I…

---

## [Curier fatch x of x shards failed](https://discuss.elastic.co/t/curier-fatch-x-of-x-shards-failed/32765)

<div class="topic-metadata">

**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\
**Replies:** 3\
**Last updated:** [October 26, 2015, 12:50pm UTC](https://discuss.elastic.co/t/curier-fatch-x-of-x-shards-failed/32765 "2015-10-26T12:50:56Z")

</div>

When i try to search kibana i see errors in the log and i cant find a sulotion this is the logs \[2015-10-22 08:58:01,352\]\[DEBUG\]\[action.search.type \] \[\*\*\*\*\*\*\] \[logstash-2015.09.13\]\[0\], node\[mVSbQ\_KdTL-X-tMUepTaRA\], \[P\]…

---

## [CPU and HEAP spiral out of control](https://discuss.elastic.co/t/cpu-and-heap-spiral-out-of-control/25346)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 3\
**Last updated:** [July 14, 2015, 3:27am UTC](https://discuss.elastic.co/t/cpu-and-heap-spiral-out-of-control/25346 "2015-07-14T03:27:52Z")

</div>

We are a very large high tech organization, and we try to test out ES for one of our products. We are using ES v1.6, and elasticsearch-mapper-attachments v2.60. Using Highlight search we experienced very high CPU load in…

---

## [Pagination over facets values](https://discuss.elastic.co/t/pagination-over-facets-values/7564)

<div class="topic-metadata">

**Author:** [@ElasticUsers](https://discuss.elastic.co/u/ElasticUsers)\
**Replies:** 3\
**Last updated:** [June 25, 2013, 11:55am UTC](https://discuss.elastic.co/t/pagination-over-facets-values/7564 "2013-06-25T11:55:23Z")

</div>

Hi Team, Kindly let us know can we paginate over facets values. Our requirement is to retrieve all the values for a particular field. Since we may have hundreds of thousands of values for a particular field,it would…

---

## [How to so sort multy token string and distinct feature + utf8 support?](https://discuss.elastic.co/t/how-to-so-sort-multy-token-string-and-distinct-feature-utf8-support/6124)

<div class="topic-metadata">

**Author:** [@Pascal\_Pensa](https://discuss.elastic.co/u/Pascal_Pensa)\
**Replies:** 8\
**Last updated:** [December 13, 2011, 6:20pm UTC](https://discuss.elastic.co/t/how-to-so-sort-multy-token-string-and-distinct-feature-utf8-support/6124 "2011-12-13T18:20:29Z")

</div>

Hi, I'm new to ES ans trying to sort strings i always get an error if string contains more than one word. Another question is about dynamic deduplication/distinct/unique based on a field, i've searched along the …

---

## [Do you recommend to use a Vega or a non-Vega visualization?](https://discuss.elastic.co/t/do-you-recommend-to-use-a-vega-or-a-non-vega-visualization/237068)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 7\
**Last updated:** [June 17, 2020, 3:37am UTC](https://discuss.elastic.co/t/do-you-recommend-to-use-a-vega-or-a-non-vega-visualization/237068 "2020-06-17T03:37:28Z")

</div>

If a visualization has the same or very similar visual in Vega and non-Vega graph, which one is recommended to visualize? Are there any differences between Vega and non-Vega, such as performance behavior on dashboard?

---

## [\[NOT POSSIBLE\] Yet another how to pre-register a "pretty printed" search template with conditional clauses?](https://discuss.elastic.co/t/not-possible-yet-another-how-to-pre-register-a-pretty-printed-search-template-with-conditional-clauses/189144)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 7\
**Last updated:** [July 8, 2019, 10:16pm UTC](https://discuss.elastic.co/t/not-possible-yet-another-how-to-pre-register-a-pretty-printed-search-template-with-conditional-clauses/189144 "2019-07-08T22:16:37Z")

</div>

hello All, i have to maintain pretty big search templates. Now, I'd like to extend them by adding conditional clauses, as described here, it should be possible with pre-registered templates. But I ran into the same iss…

---

## [Beats input: SSL Certificate will not be used and deprecated config setting "document\_type"](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374)

<div class="topic-metadata">

**Author:** [@ralfr](https://discuss.elastic.co/u/ralfr)\
**Replies:** 1\
**Last updated:** [February 19, 2018, 3:11am UTC](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374 "2018-02-19T03:11:30Z")

</div>

Hi Everyone, I'm pretty new to the ELK stack and love it so far. However, I'm running into some subtle issues and hope you guys can help. I'm on Elasticsearch Version 6.2.1 with the latest Kibana, Logstash and Filebeat…

---

## [connectionError in ubuntu](https://discuss.elastic.co/t/connectionerror-in-ubuntu/51635)

<div class="topic-metadata">

**Author:** [@Jen](https://discuss.elastic.co/u/Jen)\
**Replies:** 1\
**Last updated:** [June 2, 2016, 3:25am UTC](https://discuss.elastic.co/t/connectionerror-in-ubuntu/51635 "2016-06-02T03:25:45Z")

</div>

I installed docker on ubuntu and ran docker run -d -p 9200:9200 -p 5601:5601 nshou/elasticsearch-kibana so now I have Elasticsearch running as a container on docker. I am using python and a module called Tweepy to inse…

---

## [Securing ES node to node transport](https://discuss.elastic.co/t/securing-es-node-to-node-transport/46683)

<div class="topic-metadata">

**Author:** [@mnhan](https://discuss.elastic.co/u/mnhan)\
**Replies:** 7\
**Last updated:** [April 11, 2016, 11:07pm UTC](https://discuss.elastic.co/t/securing-es-node-to-node-transport/46683 "2016-04-11T23:07:49Z")

</div>

Hi, I couldn't find any post or doc that would answer this question. Without using shield, are there any working methods to secure the node-to-node transport of data between ES nodes. Is there a way to enable ssl n…

---

## [Kibana: howto query for IPaddr:Port in String with regex/wildcard](https://discuss.elastic.co/t/kibana-howto-query-for-ipaddr-port-in-string-with-regex-wildcard/18328)

<div class="topic-metadata">

**Author:** [@Mischa\_Diehm](https://discuss.elastic.co/u/Mischa_Diehm)\
**Replies:** 1\
**Last updated:** [June 25, 2014, 11:51am UTC](https://discuss.elastic.co/t/kibana-howto-query-for-ipaddr-port-in-string-with-regex-wildcard/18328 "2014-06-25T11:51:03Z")

</div>

Hi, I use logstash to receive our network device logs and pump them into elasticsearch. For the moment this data is just parsed with the logstash syslog filter. I which to search within the default kibana logs…

---

## [Conditional Sorting](https://discuss.elastic.co/t/conditional-sorting/13717)

<div class="topic-metadata">

**Author:** [@alkaruzi](https://discuss.elastic.co/u/alkaruzi)\
**Replies:** 1\
**Last updated:** [September 23, 2013, 12:28am UTC](https://discuss.elastic.co/t/conditional-sorting/13717 "2013-09-23T00:28:05Z")

</div>

I have some documents that I would like to sort on a date field. For documents with date equal to a specified date, example today, and all dates after that I would like to sort ascending. For dates before the specifi…

---

## [How to show zero value in len](https://discuss.elastic.co/t/how-to-show-zero-value-in-len/333517)

<div class="topic-metadata">

**Author:** [@tonyaw](https://discuss.elastic.co/u/tonyaw)\
**Replies:** 4\
**Last updated:** [May 17, 2023, 9:21am UTC](https://discuss.elastic.co/t/how-to-show-zero-value-in-len/333517 "2023-05-17T09:21:33Z")

</div>

I had a search result which has non-zero per 2 hours. I want to use Lens to show a sawtooth graph per hour(contains both non-zero value and zero value). May I ask how to configure it? Currently, I got a straight line re…

---

## [\[Kibana 4\] How do I feed a complex query result to terms visualization?](https://discuss.elastic.co/t/kibana-4-how-do-i-feed-a-complex-query-result-to-terms-visualization/35265)

<div class="topic-metadata">

**Author:** [@fandrei](https://discuss.elastic.co/u/fandrei)\
**Replies:** 4\
**Last updated:** [November 23, 2015, 5:24am UTC](https://discuss.elastic.co/t/kibana-4-how-do-i-feed-a-complex-query-result-to-terms-visualization/35265 "2015-11-23T05:24:29Z")

</div>

Is it possible to use a complex query as a data source for a terms visualization, rather than just a simple field specification?

---

## [Latest Transform questions](https://discuss.elastic.co/t/latest-transform-questions/297293)

<div class="topic-metadata">

**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\
**Replies:** 6\
**Last updated:** [February 16, 2022, 5:25pm UTC](https://discuss.elastic.co/t/latest-transform-questions/297293 "2022-02-16T17:25:06Z")

</div>

Creating a latest transform using the API, I need to provide a set of unique\_keys, which can be a list of field names. Some questions: How do I reference a field in a sub object? Like within foo there is a key bar th…

---

## [Elasticsearch 2.4.0 Cluster issues:](https://discuss.elastic.co/t/elasticsearch-2-4-0-cluster-issues/63890)

<div class="topic-metadata">

**Author:** [@zero](https://discuss.elastic.co/u/zero)\
**Replies:** 6\
**Last updated:** [November 1, 2016, 2:36am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-0-cluster-issues/63890 "2016-11-01T02:36:09Z")

</div>

elasticsearch-2.4.0 Cluster Server configuration : 4 servers （8 core 16G Memory，800G disk with Ali cloud server） shards info: • "number\_of\_shards": "4", • "number\_of\_replicas": "1", the doc is: 512,977,028 docs, total da…

---

## [Filebeat creates too many handlers](https://discuss.elastic.co/t/filebeat-creates-too-many-handlers/234793)

<div class="topic-metadata">

**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 1:06pm UTC](https://discuss.elastic.co/t/filebeat-creates-too-many-handlers/234793 "2020-06-12T13:06:35Z")

</div>

I have this production cluster that is running dockerized versions of ELK applications. One VM hosts the entire stack except for filebeat instances that run one in each VM where other applications run. Sometimes the con…

---

## [Logstash Jenkins plugin - Do I need to set logstashSend failBuild to false to avoid failing entire build?](https://discuss.elastic.co/t/logstash-jenkins-plugin-do-i-need-to-set-logstashsend-failbuild-to-false-to-avoid-failing-entire-build/171210)

<div class="topic-metadata">

**Author:** [@ps895r](https://discuss.elastic.co/u/ps895r)\
**Replies:** 1\
**Last updated:** [March 6, 2019, 10:27pm UTC](https://discuss.elastic.co/t/logstash-jenkins-plugin-do-i-need-to-set-logstashsend-failbuild-to-false-to-avoid-failing-entire-build/171210 "2019-03-06T22:27:12Z")

</div>

Hi everyone, I have this line in a shared library that's used by Jenkins. logstashSend failBuild: true, maxLines: 1000 My current understanding is this will fail the build if ELK crashes or this line doesn't work. Ple…

---

## [Where can I find the docs on "question\_answering"?](https://discuss.elastic.co/t/where-can-i-find-the-docs-on-question-answering/310060)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [July 20, 2022, 12:13pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-docs-on-question-answering/310060 "2022-07-20T12:13:51Z")

</div>

Hi All, Elasticsearch added question\_answering in 8.3, but I can't seem to find any documentation on how to use/test it. I've looked here: Natural language processing | Machine Learning in the Elastic Stack \[8.3\] | Elas…

---

## [A little confused about JAVA requirement to install ES 6.8.15 in a clean Ubuntu 18.04 server](https://discuss.elastic.co/t/a-little-confused-about-java-requirement-to-install-es-6-8-15-in-a-clean-ubuntu-18-04-server/273306)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 1:11am UTC](https://discuss.elastic.co/t/a-little-confused-about-java-requirement-to-install-es-6-8-15-in-a-clean-ubuntu-18-04-server/273306 "2021-05-19T01:11:45Z")

</div>

I'm about to install ES 6.8.15 on a CLEAN ubuntu 18.04 server. I know I need JAVA, the question is when i stood up a clean VM with Ubuntu 18.04, It DOES NOT have any JAVA installed at all. So I'm going to have to insta…

---

## [Short read of DER length](https://discuss.elastic.co/t/short-read-of-der-length/249343)

<div class="topic-metadata">

**Author:** [@AkatsukiPain](https://discuss.elastic.co/u/AkatsukiPain)\
**Replies:** 2\
**Last updated:** [September 23, 2020, 5:17am UTC](https://discuss.elastic.co/t/short-read-of-der-length/249343 "2020-09-23T05:17:02Z")

</div>

I was running this command to generate certificate and the problem occurs /usr/share/elasticsearch/bin/elasticsearch-certutil cert --ca /home/elastic-stack-ca.p12 Could you guys help me this problem?

---

## [Kibana Canvas Share: "Copy POST URL" error](https://discuss.elastic.co/t/kibana-canvas-share-copy-post-url-error/212694)

<div class="topic-metadata">

**Author:** [@AdrianSanchezLopez](https://discuss.elastic.co/u/AdrianSanchezLopez)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 2:25pm UTC](https://discuss.elastic.co/t/kibana-canvas-share-copy-post-url-error/212694 "2020-01-10T14:25:53Z")

</div>

I'm trying to generate a Watcher Report with Kibana Canvas 7.5.0, but when going to Canvas "Share"-\>"PDF Reports"-\>"Copy POST URL" the url I'm getting is something like: https://\<cloud-id\>.eu-west-1.aws.found.io:9243/s/…

---

## [Executing Oracle Stored Procedure failed with ORA-00900: invalid SQL statement](https://discuss.elastic.co/t/executing-oracle-stored-procedure-failed-with-ora-00900-invalid-sql-statement/180775)

<div class="topic-metadata">

**Author:** [@rubylou](https://discuss.elastic.co/u/rubylou)\
**Replies:** 2\
**Last updated:** [May 14, 2019, 1:31am UTC](https://discuss.elastic.co/t/executing-oracle-stored-procedure-failed-with-ora-00900-invalid-sql-statement/180775 "2019-05-14T01:31:51Z")

</div>

input { jdbc { jdbc\_connection\_string =\> "###" jdbc\_user =\> "###" jdbc\_password =\> "###" jdbc\_driver\_library =\> "/home/ojdbc6.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver…

---

## [Curator for elasticsearch 6.7 not working](https://discuss.elastic.co/t/curator-for-elasticsearch-6-7-not-working/175527)

<div class="topic-metadata">

**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\
**Replies:** 2\
**Last updated:** [April 8, 2019, 9:04am UTC](https://discuss.elastic.co/t/curator-for-elasticsearch-6-7-not-working/175527 "2019-04-08T09:04:51Z")

</div>

Hi, I am using my previous action.yml and config.yml of curator to delete old indices of elasticsearch. I have installed python 3.7.2 and curator 5.6. My config is: cat config.yml client: hosts: - 127.0.0.1 po…

---

## [Is my date field being parsed as a text field?](https://discuss.elastic.co/t/is-my-date-field-being-parsed-as-a-text-field/142073)

<div class="topic-metadata">

**Author:** [@Ormesome](https://discuss.elastic.co/u/Ormesome)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 4:54am UTC](https://discuss.elastic.co/t/is-my-date-field-being-parsed-as-a-text-field/142073 "2018-07-30T04:54:58Z")

</div>

I've pushed a lot of data into an index (I admit, poorly named) with a field that looks like this: "creationdate": "2016-05-24 09:31:09.0600000" When I search for it as a date I get zero results: GET /documents/\_searc…

---

## [License+monitoring issue after upgrading to 6.3.0](https://discuss.elastic.co/t/license-monitoring-issue-after-upgrading-to-6-3-0/136892)

<div class="topic-metadata">

**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\
**Replies:** 2\
**Last updated:** [June 25, 2018, 2:06pm UTC](https://discuss.elastic.co/t/license-monitoring-issue-after-upgrading-to-6-3-0/136892 "2018-06-25T14:06:33Z")

</div>

Hi, We are "on our way" to production but we are still on a trial license. and today we migrated our elasticsearch cluster to 6.3.0 (kibana is still on 6.2.4). During installation of elasticsearch-6.3.0 the license inf…

---

## [How to auto start filebeat on RHEL65](https://discuss.elastic.co/t/how-to-auto-start-filebeat-on-rhel65/109693)

<div class="topic-metadata">

**Author:** [@rudee](https://discuss.elastic.co/u/rudee)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 5:09pm UTC](https://discuss.elastic.co/t/how-to-auto-start-filebeat-on-rhel65/109693 "2017-11-30T17:09:14Z")

</div>

Hi does anyone know how to auto start the filebeat service on RHEL65?

---

## [Parsing a keyword from message](https://discuss.elastic.co/t/parsing-a-keyword-from-message/86434)

<div class="topic-metadata">

**Author:** [@Bhargav\_Narine](https://discuss.elastic.co/u/Bhargav_Narine)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 2:35pm UTC](https://discuss.elastic.co/t/parsing-a-keyword-from-message/86434 "2017-05-19T14:35:35Z")

</div>

Hi, I am new to ELK and trying to parse a specific keyword from message of the log entry and if that matches, creating a separate index in elasticsearch. My output config is like below output { if "ALARM" in \[logm…

---

## [Visualization in Kibana - Data formatting options](https://discuss.elastic.co/t/visualization-in-kibana-data-formatting-options/83614)

<div class="topic-metadata">

**Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\
**Replies:** 2\
**Last updated:** [April 29, 2017, 12:59pm UTC](https://discuss.elastic.co/t/visualization-in-kibana-data-formatting-options/83614 "2017-04-29T12:59:05Z")

</div>

I have inserted sample data into elasticsearch .PFA the sample dummy data I need it to visualize that in a tabular format by including only the columns given in the elasticsearch index and columns as header. Output sh…

---

## [How to add custom similarity provider to ES v2.3?](https://discuss.elastic.co/t/how-to-add-custom-similarity-provider-to-es-v2-3/68246)

<div class="topic-metadata">

**Author:** [@Jason\_Zhang](https://discuss.elastic.co/u/Jason_Zhang)\
**Replies:** 2\
**Last updated:** [December 29, 2016, 4:21am UTC](https://discuss.elastic.co/t/how-to-add-custom-similarity-provider-to-es-v2-3/68246 "2016-12-29T04:21:23Z")

</div>

I want to implement my custom similarity function based on TFIDF with the codes forked from this repo. With service elasticsearch restart, the log prints out: \[2016-12-07 12:29:10,350\]\[DEBUG\]\[action.admin.indices.cre…

---

## [Can't refresh an index pattern through my plugin](https://discuss.elastic.co/t/cant-refresh-an-index-pattern-through-my-plugin/65634)

<div class="topic-metadata">

**Author:** [@pdesoyres](https://discuss.elastic.co/u/pdesoyres)\
**Replies:** 2\
**Last updated:** [November 14, 2016, 8:03am UTC](https://discuss.elastic.co/t/cant-refresh-an-index-pattern-through-my-plugin/65634 "2016-11-14T08:03:14Z")

</div>

Hi, I am developping a kibana plugin which, at some point, needs to refresh the fields of a specific index pattern. I'm using the following code: import uiModules from 'ui/modules'; import 'ui/courier'; var app = …

---

## [LDAP roles + Grating access to a subset of data (Kibana 4)](https://discuss.elastic.co/t/ldap-roles-grating-access-to-a-subset-of-data-kibana-4/2025)

<div class="topic-metadata">

**Author:** [@matt](https://discuss.elastic.co/u/matt)\
**Replies:** 2\
**Last updated:** [June 5, 2015, 6:20pm UTC](https://discuss.elastic.co/t/ldap-roles-grating-access-to-a-subset-of-data-kibana-4/2025 "2015-06-05T18:20:33Z")

</div>

Hi there, We have a server farm belongs to various enterprise groups. As part of the security meassures, we want to limit certain users from accessing some parts of the centralized data. Current Setup: Server Grp A…

---

## [Data too large circuit breaking exception after migrating to 7.12](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029)

<div class="topic-metadata">

**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\
**Replies:** 3\
**Last updated:** [April 21, 2021, 12:10pm UTC](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029 "2021-04-21T12:10:45Z")

</div>

Hello, We have just migrated our cluster from 6.8 to 7.12 and just noticed some recurring errors during intensive parallel indexations. Here is the kind of error we have: \[parent\] Data too large, data for \[\<http\_reque…

---

## [Grok filter not adding new fields](https://discuss.elastic.co/t/grok-filter-not-adding-new-fields/240825)

<div class="topic-metadata">

**Author:** [@vamshisiddarth](https://discuss.elastic.co/u/vamshisiddarth)\
**Replies:** 3\
**Last updated:** [August 9, 2020, 1:26pm UTC](https://discuss.elastic.co/t/grok-filter-not-adding-new-fields/240825 "2020-08-09T13:26:02Z")

</div>

We have the below grok filter configured for our journlabeat. The same was deployed on our local for filebeat was working fine but isn't adding the new fields on journalbeat. filter { grok { patterns\_dir =\> \[…

---

## [C# поиск по нескольким индексам](https://discuss.elastic.co/t/c/191569)

<div class="topic-metadata">

**Author:** [@PashaMak](https://discuss.elastic.co/u/PashaMak)\
**Replies:** 3\
**Last updated:** [July 23, 2019, 9:57am UTC](https://discuss.elastic.co/t/c/191569 "2019-07-23T09:57:42Z")

</div>

Добрый день. У меня несколько индексов v8log-Дата1, v8log-Дата2 ... Хочу на C# получить все записи этих индексов, указываю в запросе индекс v8log\* и получаю ошибку неправильного запроса. Если указать v8log запрос отраб…

---

## [Questions Regarding Sibling Pipeline Aggregation](https://discuss.elastic.co/t/questions-regarding-sibling-pipeline-aggregation/157590)

<div class="topic-metadata">

**Author:** [@davidb](https://discuss.elastic.co/u/davidb)\
**Replies:** 3\
**Last updated:** [December 7, 2018, 7:33pm UTC](https://discuss.elastic.co/t/questions-regarding-sibling-pipeline-aggregation/157590 "2018-12-07T19:33:11Z")

</div>

Greetings, my question deals with processing of time series data using the sibling pipeline aggregation, e.g. for creating a line chart. As first aggregation, I need to sum up buckets of different time series. The buck…

---

## [APM Roadmap (again)](https://discuss.elastic.co/t/apm-roadmap-again/119395)

<div class="topic-metadata">

**Author:** [@gomesp](https://discuss.elastic.co/u/gomesp)\
**Replies:** 3\
**Last updated:** [February 12, 2018, 11:17am UTC](https://discuss.elastic.co/t/apm-roadmap-again/119395 "2018-02-12T11:17:15Z")

</div>

Hi team Apologies for creating another topic about the roadmap (the other topic has been closed). I am interested in instrumenting C/C++ and Java applications. I've seen many responses about prioritising Java and micro…

---

## [Is it okay to keep product data only in Elasticsearch?](https://discuss.elastic.co/t/is-it-okay-to-keep-product-data-only-in-elasticsearch/113553)

<div class="topic-metadata">

**Author:** [@Piyush\_Aggarwal](https://discuss.elastic.co/u/Piyush_Aggarwal)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 6:44am UTC](https://discuss.elastic.co/t/is-it-okay-to-keep-product-data-only-in-elasticsearch/113553 "2018-01-05T06:44:54Z")

</div>

Hello, I am trying to build an e-commerce platform in which I am going to put the products into the elasticsearch Index. I am referencing this for the modeling of the Product. Is it okay to keep the products only in the …

---

## [Integrate MongoDB with elasticsearch mongo-connector](https://discuss.elastic.co/t/integrate-mongodb-with-elasticsearch-mongo-connector/101471)

<div class="topic-metadata">

**Author:** [@vaibhav2903](https://discuss.elastic.co/u/vaibhav2903)\
**Replies:** 0\
**Last updated:** [September 22, 2017, 10:31am UTC](https://discuss.elastic.co/t/integrate-mongodb-with-elasticsearch-mongo-connector/101471 "2017-09-22T10:31:03Z")

</div>

I am trying to integrate MongoDB with elasticsearch using mongo-connector. I type the following command. I am using elastic2\_doc\_manager sudo mongo-connector -m localhost:27017 -t localhost:9200 -d elastic2\_doc\_manager …

---

## [Rally metrics store](https://discuss.elastic.co/t/rally-metrics-store/100741)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 6:06am UTC](https://discuss.elastic.co/t/rally-metrics-store/100741 "2017-09-19T06:06:18Z")

</div>

How can I configure the metrics store for my rally results ? The documentation says that we can use a separate ES cluster for this, where and how can I configure this ? Thanks !

---

## [Enriching Logs with Internal Geo Ip Location Lookups](https://discuss.elastic.co/t/enriching-logs-with-internal-geo-ip-location-lookups/95746)

<div class="topic-metadata">

**Author:** [@megadevx](https://discuss.elastic.co/u/megadevx)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 9:49pm UTC](https://discuss.elastic.co/t/enriching-logs-with-internal-geo-ip-location-lookups/95746 "2017-08-03T21:49:30Z")

</div>

I have been trying to find a way to do internal Geo IP lookup to enrich logs. I have over 500 subnets with specific locations for each that I want to map the whole subnet to that location. Is there any way that this woul…

---

## [Why my clusters are all disabled?](https://discuss.elastic.co/t/why-my-clusters-are-all-disabled/60353)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 3\
**Last updated:** [September 13, 2016, 9:50am UTC](https://discuss.elastic.co/t/why-my-clusters-are-all-disabled/60353 "2016-09-13T09:50:34Z")

</div>

.

---

## [How I can make tow fields as default query search analyzed filed in ES 1.7.1](https://discuss.elastic.co/t/how-i-can-make-tow-fields-as-default-query-search-analyzed-filed-in-es-1-7-1/44235)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 3:54pm UTC](https://discuss.elastic.co/t/how-i-can-make-tow-fields-as-default-query-search-analyzed-filed-in-es-1-7-1/44235 "2016-03-18T15:54:41Z")

</div>

Hi Experts, Please guide me how I can enable only 2 fields to be a part of default query search , for now I am using following in my mapping , but I want other 2 fields except message . "index.query.default\_field" : "m…

---

## [Auditbeat - User Attribution](https://discuss.elastic.co/t/auditbeat-user-attribution/333620)

<div class="topic-metadata">

**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Replies:** 0\
**Last updated:** [May 17, 2023, 3:53am UTC](https://discuss.elastic.co/t/auditbeat-user-attribution/333620 "2023-05-17T03:53:01Z")

</div>

Hi, We are running auditbeat with the auditd module using standard auditd.rules. We are seeing the events in our Elasticsearch instance, however there is no user attribution tied to the events. It's great that we are …

---

## [Inconsistencies between DSL queries and Java REST client](https://discuss.elastic.co/t/inconsistencies-between-dsl-queries-and-java-rest-client/186137)

<div class="topic-metadata">

**Author:** [@emilg02](https://discuss.elastic.co/u/emilg02)\
**Replies:** 0\
**Last updated:** [June 17, 2019, 6:39pm UTC](https://discuss.elastic.co/t/inconsistencies-between-dsl-queries-and-java-rest-client/186137 "2019-06-17T18:39:26Z")

</div>

Hi all, I'm trying to perform a simple query using the Java High Level REST API. I'm seeing differences in the results I get. DSL Query: {"\_source":{"includes":\["space","transaction"\],"excludes":\[\]}} Response: { …

---

## [Configure fleet server](https://discuss.elastic.co/t/configure-fleet-server/353373)

<div class="topic-metadata">

**Author:** [@01052346103a](https://discuss.elastic.co/u/01052346103a)\
**Replies:** 5\
**Last updated:** [March 13, 2024, 9:50am UTC](https://discuss.elastic.co/t/configure-fleet-server/353373 "2024-03-13T09:50:50Z")

</div>

now im trying to configure fleet server on Centos7 while i configure fleet server with lines on Kibana UI ES / Kibana version - 8.12.1 sudo ./elastic-agent install \\ --fleet-server-es=https://\[my server ip\] \\ --fl…

---

## [Unable to initialize Fleet on Kibana in Ubuntu 22.04](https://discuss.elastic.co/t/unable-to-initialize-fleet-on-kibana-in-ubuntu-22-04/334618)

<div class="topic-metadata">

**Author:** [@Calvy93](https://discuss.elastic.co/u/Calvy93)\
**Replies:** 5\
**Last updated:** [June 2, 2023, 4:36pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-on-kibana-in-ubuntu-22-04/334618 "2023-06-02T16:36:40Z")

</div>

I'm currently trying to set up a fleet in Kibana as this seems to be a prerequisite for using a suricata module, but I can't get past the error message "Unable to initialize Fleet - An internal server error occured. Chec…

---

## [Curator is not working](https://discuss.elastic.co/t/curator-is-not-working/309219)

<div class="topic-metadata">

**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\
**Replies:** 5\
**Last updated:** [July 11, 2022, 9:35am UTC](https://discuss.elastic.co/t/curator-is-not-working/309219 "2022-07-11T09:35:55Z")

</div>

Hi All, I was trying to setup curator for auto removal of my old indices but i am getting below error. Please someone help me on this. I have also attached screenshot of my curator and action file with it's output. o…

---

## [Zlib: invalid header error in node js apm agent](https://discuss.elastic.co/t/zlib-invalid-header-error-in-node-js-apm-agent/305616)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 5\
**Last updated:** [May 31, 2022, 9:05pm UTC](https://discuss.elastic.co/t/zlib-invalid-header-error-in-node-js-apm-agent/305616 "2022-05-31T21:05:48Z")

</div>

Kibana version: 7.17.3 Elasticsearch version: 7.17.3 APM Server version: 7.17.3 APM Agent language and version: node.js and version 3 Browser version: Chrome Original install method (e.g. download page, yum, deb, fr…

---

## [Kibana7.4 does not start](https://discuss.elastic.co/t/kibana7-4-does-not-start/202642)

<div class="topic-metadata">

**Author:** [@kba](https://discuss.elastic.co/u/kba)\
**Replies:** 5\
**Last updated:** [October 9, 2019, 2:02am UTC](https://discuss.elastic.co/t/kibana7-4-does-not-start/202642 "2019-10-09T02:02:08Z")

</div>

Hi Kibana web page do not open,while process is active after systemctl restart. ■What I want to realize Confirm the data acquired with elasticsearch with kibana on another server ■Status ・elasticsearch server is alr…

[Previous page](https://discuss.elastic.co/top.md?page=1374&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1376&per_page=50&period=all)
