# Top **URL:** https://discuss.elastic.co/top.md?page=1377&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1378 --- ## [Can't seem to register a snapshot repository with AWS S3](https://discuss.elastic.co/t/cant-seem-to-register-a-snapshot-repository-with-aws-s3/169026)
**Author:** [@3minus1](https://discuss.elastic.co/u/3minus1)\ **Replies:** 1\ **Last updated:** [February 23, 2019, 1:53am UTC](https://discuss.elastic.co/t/cant-seem-to-register-a-snapshot-repository-with-aws-s3/169026 "2019-02-23T01:53:04Z")
I'm running an Elasticsearch V6.3.2 cluster on Kubernetes, and I've installed the repository-s3 plugin. I've added my AWS Access Key and Secret Key to the elasticsearch.keystore. I'm trying to register my snapshot repo… --- ## [Reporting difference logs with condition on visualize](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355)
**Author:** [@ntruonghau](https://discuss.elastic.co/u/ntruonghau)\ **Replies:** 5\ **Last updated:** [July 31, 2019, 1:46am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355 "2019-07-31T01:46:55Z")
I using nmap codec from logstash to send log daily for inventory checking. Suppose log of yesterday said that a host is up, but new log today display log is down. How can i create a visualize to display only hosts down… --- ## [Avoid 'indices hell' by copying and deleting data](https://discuss.elastic.co/t/avoid-indices-hell-by-copying-and-deleting-data/55737)
**Author:** [@edeak](https://discuss.elastic.co/u/edeak)\ **Replies:** 5\ **Last updated:** [July 18, 2016, 3:02pm UTC](https://discuss.elastic.co/t/avoid-indices-hell-by-copying-and-deleting-data/55737 "2016-07-18T15:02:18Z")
Hi guys, I'm working with Elasticsearch for a while and I'm dealing with the following: - I'm creating indices by three dimensions: language, document type and time (new index per day) - I use aliases for grouping indi… --- ## [(Newbie) Differences between text and field/query\_string, and matching words vs phrases](https://discuss.elastic.co/t/newbie-differences-between-text-and-field-query-string-and-matching-words-vs-phrases/6748)
**Author:** [@Nick\_Dunn](https://discuss.elastic.co/u/Nick_Dunn)\ **Replies:** 5\ **Last updated:** [February 20, 2012, 1:25pm UTC](https://discuss.elastic.co/t/newbie-differences-between-text-and-field-query-string-and-matching-words-vs-phrases/6748 "2012-02-20T13:25:54Z")
Hello all. I'm very new to ES and Lucene, but I have spent a lot of time devouring the documentation, this group and Stack Overflow. However I've yet to find a definitive answer to my, hopefully simple, question. I… --- ## [Multiple syslog input into logstash](https://discuss.elastic.co/t/multiple-syslog-input-into-logstash/316360)
**Author:** [@kazishafiullah](https://discuss.elastic.co/u/kazishafiullah)\ **Replies:** 2\ **Last updated:** [October 11, 2022, 5:24pm UTC](https://discuss.elastic.co/t/multiple-syslog-input-into-logstash/316360 "2022-10-11T17:24:27Z")
Hello, I wanted to parse logs of network devices into logstash. I have configured individual pipeline for cisco and paloalto. I have configured the input as syslog with different ports and output to different index name… --- ## [Does ES store \_id field in Lucene as its docid?](https://discuss.elastic.co/t/does-es-store-id-field-in-lucene-as-its-docid/215977)
**Author:** [@DeeeFOX](https://discuss.elastic.co/u/DeeeFOX)\ **Replies:** 2\ **Last updated:** [January 22, 2020, 9:32am UTC](https://discuss.elastic.co/t/does-es-store-id-field-in-lucene-as-its-docid/215977 "2020-01-22T09:32:35Z")
As the title asked, Does ES store \_id field in Lucene as its docid? Or ES just store \_id field as an index-field and each time ES write a doc, lucene create an unique docid and return to ES? --- ## [Valid application packages values](https://discuss.elastic.co/t/valid-application-packages-values/202282)
**Author:** [@Nie](https://discuss.elastic.co/u/Nie)\ **Replies:** 2\ **Last updated:** [October 6, 2019, 4:29am UTC](https://discuss.elastic.co/t/valid-application-packages-values/202282 "2019-10-06T04:29:17Z")
I'm a little confused with application\_packages=org.example,org.another.example which I saw in https://www.elastic.co/guide/en/apm/agent/java/current/configuration.html Is there a cli command that can help display possib… --- ## [Elasticsearch output: LogStash::Error: timestamp field is missing](https://discuss.elastic.co/t/elasticsearch-output-logstash-timestamp-field-is-missing/197888)
**Author:** [@ouss](https://discuss.elastic.co/u/ouss)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-output-logstash-timestamp-field-is-missing/197888 "2019-09-04T10:00:02Z")
Hello, I have an elasticsearch output working without any problem elasticsearch { hosts =\> \[ "${LOGS\_ELASTICSEARCH\_CLUSTER}:443" \] ssl =\> true index =\> "cwl-%{+YYYY.MM.dd}" document\_type =\> "log" } I wanted to… --- ## [\[AWS\] No functions are enabled for selected provider](https://discuss.elastic.co/t/aws-no-functions-are-enabled-for-selected-provider/171184)
**Author:** [@tyler\_hilsabeck](https://discuss.elastic.co/u/tyler_hilsabeck)\ **Replies:** 2\ **Last updated:** [March 6, 2019, 8:28pm UTC](https://discuss.elastic.co/t/aws-no-functions-are-enabled-for-selected-provider/171184 "2019-03-06T20:28:04Z")
Hello! I am trying to collect VPC flowlogs in Cloudwatch Logs using the functionbeat. The deploy command works as expected. I am running Functionbeat 6.6.1 on a RHEL 7 machine. Environment variables are correctly set. … --- ## [Optional fields](https://discuss.elastic.co/t/optional-fields/160827)
**Author:** [@glennharm](https://discuss.elastic.co/u/glennharm)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 5:57pm UTC](https://discuss.elastic.co/t/optional-fields/160827 "2018-12-18T17:57:58Z")
I've looked at several posts regarding optional fields in grok match filter and so far I've been unsuccessful in getting it to work using the parenthesis (with and without ? in various places, depending on what was advis… --- ## [Filebeat Nginx Module - Nginx log has a non default format](https://discuss.elastic.co/t/filebeat-nginx-module-nginx-log-has-a-non-default-format/106212)
**Author:** [@system](https://discuss.elastic.co/u/system)\ **Replies:** 2\ **Last updated:** [November 3, 2017, 12:32am UTC](https://discuss.elastic.co/t/filebeat-nginx-module-nginx-log-has-a-non-default-format/106212 "2017-11-03T00:32:58Z")
Hi can I find out what my options are if my nginx logs are not in the default format? I could send the logs from filebeat to logstash and have logstash parse the message there but wasn't sure if that was the right soluti… --- ## [Creating my own QueryBuilder](https://discuss.elastic.co/t/creating-my-own-querybuilder/103302)
**Author:** [@jpmantuano](https://discuss.elastic.co/u/jpmantuano)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 7:17am UTC](https://discuss.elastic.co/t/creating-my-own-querybuilder/103302 "2017-10-13T07:17:24Z")
I'm trying to integrate a 3rd party plugin into Elasticsearch. The query request I made including a 3rd party plugin is working properly via kibana. Then I tried to create my own QueryBuilder using the Elasticsearch's j… --- ## [Icu\_collation as keyword normalizer](https://discuss.elastic.co/t/icu-collation-as-keyword-normalizer/74688)
**Author:** [@mabn0](https://discuss.elastic.co/u/mabn0)\ **Replies:** 2\ **Last updated:** [February 13, 2017, 1:56pm UTC](https://discuss.elastic.co/t/icu-collation-as-keyword-normalizer/74688 "2017-02-13T13:56:14Z")
I'd like to use icu\_collation to normalize fields with "keyword" type - the goal is to make sorting behave properly on string in a certain language. But ElasticSearch does not let me do that - it complains that: "Custom … --- ## [Does GRAPH recognize index aliases?](https://discuss.elastic.co/t/does-graph-recognize-index-aliases/70789)
**Author:** [@bgiordano](https://discuss.elastic.co/u/bgiordano)\ **Replies:** 2\ **Last updated:** [January 6, 2017, 2:33pm UTC](https://discuss.elastic.co/t/does-graph-recognize-index-aliases/70789 "2017-01-06T14:33:53Z")
Is there a way to point Graph to multiple indexes simultaneously or to an index alias created in elasticsearch? If so, what version provides this? --- ## [ElasticSearch Segment merge not happening when deleted documents count is greater than 50%](https://discuss.elastic.co/t/elasticsearch-segment-merge-not-happening-when-deleted-documents-count-is-greater-than-50/277209)
**Author:** [@Vignesh\_Ramesh](https://discuss.elastic.co/u/Vignesh_Ramesh)\ **Replies:** 1\ **Last updated:** [July 3, 2021, 5:54pm UTC](https://discuss.elastic.co/t/elasticsearch-segment-merge-not-happening-when-deleted-documents-count-is-greater-than-50/277209 "2021-07-03T17:54:47Z")
Elasticsearch version: 7.10.0 I have an elasticsearch index with 8 shards in 8 different nodes and with a document count greater than 25 million documents(nested not included). It's an heavy update index. The document s… --- ## [Logs Sequence not in Order](https://discuss.elastic.co/t/logs-sequence-not-in-order/219982)
**Author:** [@Himanshu\_Yadav](https://discuss.elastic.co/u/Himanshu_Yadav)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:44pm UTC](https://discuss.elastic.co/t/logs-sequence-not-in-order/219982 "2020-02-19T14:44:23Z")
Hi Team, We are facing an issue where logs on Kibana dashboard are not coming in its original sequence, as seen in the file attached below: --- ## [How to build a Vega tree using csv data stored in my index](https://discuss.elastic.co/t/how-to-build-a-vega-tree-using-csv-data-stored-in-my-index/215717)
**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 8:28am UTC](https://discuss.elastic.co/t/how-to-build-a-vega-tree-using-csv-data-stored-in-my-index/215717 "2020-02-12T08:28:40Z")
I want to visualize a tree using vega. I have indexed a csv file containing employee data into elasticsearch. I would like vega to query that index and visualize a tree for me. Every employee has a PersonID and their ma… --- ## [Filebeats not working in 7.x, and front end app logging](https://discuss.elastic.co/t/filebeats-not-working-in-7-x-and-front-end-app-logging/197240)
**Author:** [@ngg971](https://discuss.elastic.co/u/ngg971)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 9:22am UTC](https://discuss.elastic.co/t/filebeats-not-working-in-7-x-and-front-end-app-logging/197240 "2019-08-30T09:22:13Z")
Hi, I’ve been using the ELK stack to capture our logs from our Kubernetes cluster. I had filebeats setup on the cluster and everything was working fine until I updated from 6.7 to 7.3 (I also updated the docker image th… --- ## [Support multiple sources](https://discuss.elastic.co/t/support-multiple-sources/184117)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 1\ **Last updated:** [June 4, 2019, 9:00am UTC](https://discuss.elastic.co/t/support-multiple-sources/184117 "2019-06-04T09:00:25Z")
Hi, I don't know if this already implemented, but I think it'll be helpful to add an option for configuring multiple sources then display them as a dropdown for quick navigation between the different sources without th… --- ## [Does node.name need to match ip or hostname?](https://discuss.elastic.co/t/does-node-name-need-to-match-ip-or-hostname/183042)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 10:15am UTC](https://discuss.elastic.co/t/does-node-name-need-to-match-ip-or-hostname/183042 "2019-05-28T10:15:58Z")
Hi, I am setting up my first multi node cluster. I only made it running, when the node.name equals to the hostname. It did not work when I said: cluster.name: multinode node.name: 0 hostname is multinode-es-0 I had … --- ## [Logstash aggregate filter on auditd logs](https://discuss.elastic.co/t/logstash-aggregate-filter-on-auditd-logs/98480)
**Author:** [@Nadavr](https://discuss.elastic.co/u/Nadavr)\ **Replies:** 1\ **Last updated:** [August 27, 2017, 4:50pm UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-on-auditd-logs/98480 "2017-08-27T16:50:48Z")
Hi Everyone, I’m trying to parse Linux audit.log files with logstash. Every execution of shell command (in this example: tail /etc/hosts) generates 5 different event types, relating to the same action, having the sam… --- ## [Kibana Table Visualization row coloring](https://discuss.elastic.co/t/kibana-table-visualization-row-coloring/56368)
**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\ **Replies:** 1\ **Last updated:** [July 26, 2016, 10:13am UTC](https://discuss.elastic.co/t/kibana-table-visualization-row-coloring/56368 "2016-07-26T10:13:00Z")
Is there a way I can color an entire row or a cell in a Data Table Visualization? So i have a table with column status and it has values ("Severe", "Warning". "OK") Based on these values, I would like to see the cell or… --- ## [Using ES Spark to copy data from one instance to another](https://discuss.elastic.co/t/using-es-spark-to-copy-data-from-one-instance-to-another/34568)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 1\ **Last updated:** [November 14, 2015, 7:56pm UTC](https://discuss.elastic.co/t/using-es-spark-to-copy-data-from-one-instance-to-another/34568 "2015-11-14T19:56:22Z")
Hi: Is it possible to use the Spark API to read an index from one ES Cluster and write the same data into a different ES Cluster ? If so, how can I do it ? basically how would the configuration look like and how can … --- ## [Revisiting query parse (no field after start\_object) errors](https://discuss.elastic.co/t/revisiting-query-parse-no-field-after-start-object-errors/19791)
**Author:** [@jackpark](https://discuss.elastic.co/u/jackpark)\ **Replies:** 1\ **Last updated:** [September 15, 2014, 6:31pm UTC](https://discuss.elastic.co/t/revisiting-query-parse-no-field-after-start-object-errors/19791 "2014-09-15T18:31:35Z")
This query: { "from": 0, "size": 30, "query": { "term": { "sbOf": "TypeType" } } } is giving me fits. I recently migrated from 0.90 to 1.2.2 and went through thi… --- ## [Help with installing logstash - no such file to load --logstash/build](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572)
**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 9:37pm UTC](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572 "2021-01-08T21:37:32Z")
When in the logstash folder I have tried to install logstash with the command. logstash -f logstash.conf and get the error no such file to load --logstash/build. I have supplied a screenshot. If anyone could help that wo… --- ## [Error in logstash-input-s3-sns-sqs plugin](https://discuss.elastic.co/t/error-in-logstash-input-s3-sns-sqs-plugin/244699)
**Author:** [@Jayakumar\_R\_R](https://discuss.elastic.co/u/Jayakumar_R_R)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 3:53pm UTC](https://discuss.elastic.co/t/error-in-logstash-input-s3-sns-sqs-plugin/244699 "2020-08-12T15:53:36Z")
Hi all, I am new to logstash. I am using s3snssqs plugin to pull data from s3. input { s3snssqs { region =\> "us-east-1" s3\_default\_options =\> { "endpoint\_discovery" =\> … --- ## [Filtering By Field Inequality](https://discuss.elastic.co/t/filtering-by-field-inequality/206481)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [November 6, 2019, 5:15pm UTC](https://discuss.elastic.co/t/filtering-by-field-inequality/206481 "2019-11-06T17:15:56Z")
I have two fields with the same value, 99% of the time. I'd like to filter down to just the entries where the two fields are NOT the same, is it possible to do something like \[field1\] != \[field2\]? --- ## [Logstash Input Plugin fails](https://discuss.elastic.co/t/logstash-input-plugin-fails/182703)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 4\ **Last updated:** [May 24, 2019, 7:07pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-fails/182703 "2019-05-24T19:07:21Z")
Hi everyone, I'm trying to export AWS Cloudwatch logs to Logstash input plugin. However, I get an error message saying "Failed to execute action...". \[pipeline.conf file\]: input{ cloudwatch { namespace =\> "AWS/Logs" … --- ## [Logstash GROK pattern not accepted](https://discuss.elastic.co/t/logstash-grok-pattern-not-accepted/178924)
**Author:** [@weed101](https://discuss.elastic.co/u/weed101)\ **Replies:** 4\ **Last updated:** [April 29, 2019, 5:36pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-not-accepted/178924 "2019-04-29T17:36:48Z")
Hello, I'm having a problem with getting my grok pattern to work within my filter. I've created a test.conf file to simplify and narrow down my problem and I cannot seem to get this to work. I have tried the syntax an… --- ## [Machine Learning Watcher](https://discuss.elastic.co/t/machine-learning-watcher/159585)
**Author:** [@lowdmt](https://discuss.elastic.co/u/lowdmt)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 11:03pm UTC](https://discuss.elastic.co/t/machine-learning-watcher/159585 "2018-12-05T23:03:35Z")
Hi, I have a metricbeat index in Elastic and have created a new machine learning job looking at cpu usage. The index is gathering data from 25 installed beats all rolled up into a single index (metricbeat-\*) How do I c… --- ## [addScriptParam not working in Java Update API](https://discuss.elastic.co/t/addscriptparam-not-working-in-java-update-api/91162)
**Author:** [@kaushah](https://discuss.elastic.co/u/kaushah)\ **Replies:** 4\ **Last updated:** [June 29, 2017, 5:15pm UTC](https://discuss.elastic.co/t/addscriptparam-not-working-in-java-update-api/91162 "2017-06-29T17:15:26Z")
HashMap newObject = new HashMap(); newObject.put("TimeStamp", "2012-03-11T01:28:39.461Z"); newObject.put("Name", "\[ " + "\\"John1\\","+ "\\"John2\\","+ "\\"John3\\""+ … --- ## [Kibana discards old records after ES restart](https://discuss.elastic.co/t/kibana-discards-old-records-after-es-restart/40940)
**Author:** [@zahid](https://discuss.elastic.co/u/zahid)\ **Replies:** 4\ **Last updated:** [February 9, 2016, 5:25pm UTC](https://discuss.elastic.co/t/kibana-discards-old-records-after-es-restart/40940 "2016-02-09T17:25:09Z")
Hi, i m a newbie working with kibana and elasticseach and i need some help \[:slightly\_smiling:\] i allready searched about my problem but i couldnt figure out how to solve this. @warkolm adviced me to write my own thread \[… --- ## [Parse directory name regex](https://discuss.elastic.co/t/parse-directory-name-regex/36778)
**Author:** [@Sonne](https://discuss.elastic.co/u/Sonne)\ **Replies:** 4\ **Last updated:** [December 10, 2015, 8:39am UTC](https://discuss.elastic.co/t/parse-directory-name-regex/36778 "2015-12-10T08:39:00Z")
Hello. I have the logline 2015.10.05 18:32:25.913:Process cannot access the file 'file.txt' because it is being used by another process I have written the grok: (?m)%{YEAR:year}.%{MONTHNUM:month}.%{MONTHDAY:day}%{SP… --- ## [Kibana stats panel](https://discuss.elastic.co/t/kibana-stats-panel/16680)
**Author:** [@Jeff\_Klug](https://discuss.elastic.co/u/Jeff_Klug)\ **Replies:** 4\ **Last updated:** [March 28, 2014, 4:46pm UTC](https://discuss.elastic.co/t/kibana-stats-panel/16680 "2014-03-28T16:46:46Z")
The stats panel doesn't seem to work for me at all. I want it to calculate the mean of a numeric field, but it just prints out 0. No errors. Anybody got this working? JK -- You received this message becaus… --- ## [Elastic Agent - Upgrading Windows Elastic Agent failing via UI](https://discuss.elastic.co/t/elastic-agent-upgrading-windows-elastic-agent-failing-via-ui/301790)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 4:39pm UTC](https://discuss.elastic.co/t/elastic-agent-upgrading-windows-elastic-agent-failing-via-ui/301790 "2022-04-08T16:39:39Z")
Upgrading from 8.1.1 to 8.1.2 Same happens from 8.0.0, seems the file it is looking for isn't downloaded first. Windows 10 Enterprise failed to dispatch actions, error: failed verification of agent binary: 2 errors oc… --- ## [Undersized batches produced in ES output while persistent queue is enabled](https://discuss.elastic.co/t/undersized-batches-produced-in-es-output-while-persistent-queue-is-enabled/88076)
**Author:** [@shog](https://discuss.elastic.co/u/shog)\ **Replies:** 2\ **Last updated:** [June 2, 2017, 11:58am UTC](https://discuss.elastic.co/t/undersized-batches-produced-in-es-output-while-persistent-queue-is-enabled/88076 "2017-06-02T11:58:50Z")
I've described this problem in more details here https://github.com/elastic/logstash/issues/7243, but got no reply so far. TLDR problem is that; enabling persistent queue in logstash will result in undersized elasticse… --- ## [Need help in elasticsearch snapshot](https://discuss.elastic.co/t/need-help-in-elasticsearch-snapshot/249605)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 8\ **Last updated:** [September 23, 2020, 5:41am UTC](https://discuss.elastic.co/t/need-help-in-elasticsearch-snapshot/249605 "2020-09-23T05:41:44Z")
Hi Team, I am planning to migrate data from one cluster to another cluster by taking snapshot of indices. In current k8s cluster, I do not have shared storage which is needed to define repo location. We are using rook… --- ## [Parsing measurement xml data using logstash](https://discuss.elastic.co/t/parsing-measurement-xml-data-using-logstash/226897)
**Author:** [@yagoza](https://discuss.elastic.co/u/yagoza)\ **Replies:** 3\ **Last updated:** [April 30, 2020, 1:40pm UTC](https://discuss.elastic.co/t/parsing-measurement-xml-data-using-logstash/226897 "2020-04-30T13:40:41Z")
\ \ \ \ **Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 5:31pm UTC](https://discuss.elastic.co/t/curator-ssl-no-validate-true-helm-option-doesnt-work/206748 "2019-11-06T17:31:45Z") I needed to enable TLS on elasticsearch just to make pods stable after restart(they didn't get up if TLS is disabled). I don't want to have any TLS validation and so on just to make things easier (we have security enable… --- ## [APM's metrics tab doesn't show when using Kibana spaces](https://discuss.elastic.co/t/apms-metrics-tab-doesnt-show-when-using-kibana-spaces/205983)
**Author:** [@Evgeni\_Dzhelyov](https://discuss.elastic.co/u/Evgeni_Dzhelyov)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 12:12pm UTC](https://discuss.elastic.co/t/apms-metrics-tab-doesnt-show-when-using-kibana-spaces/205983 "2019-10-31T12:12:18Z")
Kibana version: 7.4 APM Server version: 7.4 We have a different elastic cluster for each environment – staging, production, etc. Only one Kibana instance is used to visualize data from these clusters using Spaces for t… --- ## [\[6.2.2\] je n'arrive pas à créer mon cluster elasticsearch - ou peut être est il créé mais je ne le sais pas](https://discuss.elastic.co/t/6-2-2-je-narrive-pas-a-creer-mon-cluster-elasticsearch-ou-peut-etre-est-il-cree-mais-je-ne-le-sais-pas/128555)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 3\ **Last updated:** [April 20, 2018, 8:09pm UTC](https://discuss.elastic.co/t/6-2-2-je-narrive-pas-a-creer-mon-cluster-elasticsearch-ou-peut-etre-est-il-cree-mais-je-ne-le-sais-pas/128555 "2018-04-20T20:09:56Z")
Bonjour, je veux monter un cluster ES de 3 machines avec x-pack. J'ai commencé par monter 1 host avec mes données historiques métier, x-pack, kibana Mon host a 2 cartes réseau, une connectée à internet et l'autre sur u… --- ## [Line chart from field values](https://discuss.elastic.co/t/line-chart-from-field-values/124913)
**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\ **Replies:** 3\ **Last updated:** [March 21, 2018, 4:09pm UTC](https://discuss.elastic.co/t/line-chart-from-field-values/124913 "2018-03-21T16:09:25Z")
Hi Is it possible to draw line chart from field values ? I want to plot following two fields - error:1, time: 17/11/13-13:28:21.247 error:0, time: 18/11/13-13:28:21.247 error:1, time: 19/11/13-13:28:21.247 error:0, … --- ## [Single node ES 2.4.5 "cluster" locks up on reindex reads](https://discuss.elastic.co/t/single-node-es-2-4-5-cluster-locks-up-on-reindex-reads/101545)
**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\ **Replies:** 8\ **Last updated:** [September 29, 2017, 3:38am UTC](https://discuss.elastic.co/t/single-node-es-2-4-5-cluster-locks-up-on-reindex-reads/101545 "2017-09-29T03:38:36Z")
Hello All, I've been flailing for some time on upgrading a two-node ES 1.x cluster to 5.x, finally hitting a wall after upgrading the indices in place from 0.20 (some of them, anyway) to 1.7 and then upgrading as far as… --- ## [Elasticsearch indices](https://discuss.elastic.co/t/elasticsearch-indices/98245)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 8\ **Last updated:** [August 28, 2017, 7:18pm UTC](https://discuss.elastic.co/t/elasticsearch-indices/98245 "2017-08-28T19:18:15Z")
Hello, I have installed ELK 5.5.x on Windows 2012 with winlogbeat, it works but logs in ..\\Elasticsearch\\data\\nodes\\0\\indices look like this 5uv-yuK5T4CNkTC2G7x4Mg but they should look like this winlogbeat-2017.08.24. W… --- ## [SocketTimeoutException in Elasticsearch logs](https://discuss.elastic.co/t/sockettimeoutexception-in-elasticsearch-logs/87792)
**Author:** [@manojbadam](https://discuss.elastic.co/u/manojbadam)\ **Replies:** 0\ **Last updated:** [May 31, 2017, 6:03pm UTC](https://discuss.elastic.co/t/sockettimeoutexception-in-elasticsearch-logs/87792 "2017-05-31T18:03:34Z")
Hi All, This is my first post, I was going through my elasticsearch logs and found the frequent SocketTimeoutException (stack trace posted below). We are currently using elasticsearch v2.3.3, we have 3 master nodes beh… --- ## [Synonyms and prefix query](https://discuss.elastic.co/t/synonyms-and-prefix-query/11352)
**Author:** [@Fadel\_Chafai](https://discuss.elastic.co/u/Fadel_Chafai)\ **Replies:** 3\ **Last updated:** [March 29, 2013, 8:58am UTC](https://discuss.elastic.co/t/synonyms-and-prefix-query/11352 "2013-03-29T08:58:45Z")
hi how i can combine a prefix query and a synonyme filter ? this is my query : { "query": { "query\_string": { "query": "samsung", "analyzer": "synonym", "fields": \[ "name\_fr… --- ## [Wildcard search](https://discuss.elastic.co/t/wildcard-search/7550)
**Author:** [@ajan](https://discuss.elastic.co/u/ajan)\ **Replies:** 3\ **Last updated:** [May 10, 2012, 5:55pm UTC](https://discuss.elastic.co/t/wildcard-search/7550 "2012-05-10T17:55:08Z")
curl http://mysearchhost:9200/test/\_search?q=Identifier:\*6099d3e1\* returns successfully with hits, however curl http://mysearchhost:9200/test/\_search?q=Identifier:\*ABC\*6099d3e1\* does not return any hits The Ident… --- ## [Linking Dashboard and Discover tab to view documents based on filter](https://discuss.elastic.co/t/linking-dashboard-and-discover-tab-to-view-documents-based-on-filter/315687)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 3\ **Last updated:** [October 10, 2022, 7:13am UTC](https://discuss.elastic.co/t/linking-dashboard-and-discover-tab-to-view-documents-based-on-filter/315687 "2022-10-10T07:13:05Z")
Hi Team, I am looking for any feature availability in Kibana which would enable me to link my dashboard to the discover tab to view the documents. So the idea is I have a dashboard created based on field aggregation I … --- ## [Saved scripted metric aggregation in Elasticsearch and Kibana 4](https://discuss.elastic.co/t/saved-scripted-metric-aggregation-in-elasticsearch-and-kibana-4/20951)
**Author:** [@ann4beyer](https://discuss.elastic.co/u/ann4beyer)\ **Replies:** 3\ **Last updated:** [March 20, 2015, 7:10pm UTC](https://discuss.elastic.co/t/saved-scripted-metric-aggregation-in-elasticsearch-and-kibana-4/20951 "2015-03-20T19:10:18Z")
Hi all, I was wondering if it is possible to save a scripted metric aggregation in Elasticsearch and to use it in Kibana 4 as a metric in a Data Table. Thanks in advance! Anna -- You received this message… --- ## [Some Change in Percolation/QueryStringQuery/Mapping between 7.6.2 and 7.7.0?](https://discuss.elastic.co/t/some-change-in-percolation-querystringquery-mapping-between-7-6-2-and-7-7-0/250579)
**Author:** [@Andrew\_DS](https://discuss.elastic.co/u/Andrew_DS)\ **Replies:** 4\ **Last updated:** [November 6, 2020, 1:31pm UTC](https://discuss.elastic.co/t/some-change-in-percolation-querystringquery-mapping-between-7-6-2-and-7-7-0/250579 "2020-11-06T13:31:15Z")
I've noticed that, while trying to migrate from Elasticsearch 7.5.2 -\> 7.9.2, something seems to have changed in how percolator queries seem to work. I have narrowed down my problem to a change between 7.6.2 and 7.7.0; t… [Previous page](https://discuss.elastic.co/top.md?page=1376&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1378&per_page=50&period=all)