# Top **URL:** https://discuss.elastic.co/top.md?page=1379&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1380 --- ## [Curator Alias Add not working if Remove list is empty](https://discuss.elastic.co/t/curator-alias-add-not-working-if-remove-list-is-empty/73549)
**Author:** [@crags](https://discuss.elastic.co/u/crags)\ **Replies:** 3\ **Last updated:** [February 1, 2017, 7:24pm UTC](https://discuss.elastic.co/t/curator-alias-add-not-working-if-remove-list-is-empty/73549 "2017-02-01T19:24:14Z")
Hi All I was just wondering if you could help me with something and whether this is the intended behaviour of Curator or not... I am currently setting up a number of automated alias actions in Curator, for things like … --- ## [Replica generation after Elasticsearch restart](https://discuss.elastic.co/t/replica-generation-after-elasticsearch-restart/71520)
**Author:** [@peter.ridzi](https://discuss.elastic.co/u/peter.ridzi)\ **Replies:** 3\ **Last updated:** [January 19, 2017, 2:35pm UTC](https://discuss.elastic.co/t/replica-generation-after-elasticsearch-restart/71520 "2017-01-19T14:35:42Z")
Hi, I am using Elasticsearch 2.3.4 and I have the following issue with rolling restart. I need to perform some changes in the configuration or install a new plugin. I stopped my indexing processes and followed the st… --- ## [Index template files are not working](https://discuss.elastic.co/t/index-template-files-are-not-working/36475)
**Author:** [@Shay\_Tsadok](https://discuss.elastic.co/u/Shay_Tsadok)\ **Replies:** 3\ **Last updated:** [December 7, 2015, 9:05am UTC](https://discuss.elastic.co/t/index-template-files-are-not-working/36475 "2015-12-07T09:05:24Z")
Hi, When POSTing my template json to: http://es:9200/\_template/gaia\_template everything works just fine, but when I place it under ES\_HOME/config/templates/gaia\_template.json, nothing happens. I've tried to look inside… --- ## [Improving a slow running Match\_All Query](https://discuss.elastic.co/t/improving-a-slow-running-match-all-query/17792)
**Author:** [@sairam\_2](https://discuss.elastic.co/u/sairam_2)\ **Replies:** 3\ **Last updated:** [May 30, 2014, 9:03pm UTC](https://discuss.elastic.co/t/improving-a-slow-running-match-all-query/17792 "2014-05-30T21:03:05Z")
Hello, The queries that we run seem to be very CPU Intensive and cause the Servers to max out within a short amount of time. On debugging, it looks like standard queries take too long to respond too. We are cu… --- ## [Kibana alerting not matching wildcard AND condition](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:33am UTC](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580 "2020-11-26T11:33:31Z")
Hi, trying to determine why a field isn't matching wildcard searches in our log data in Kibana alerting. We're on the elastic cloud stack, v7.9.2. We need to add an AND condition for this particular log search and with … --- ## [How to set field\_multi\_value\_leniency parameter in elasticsearch-sql-cli command line?](https://discuss.elastic.co/t/how-to-set-field-multi-value-leniency-parameter-in-elasticsearch-sql-cli-command-line/179990)
**Author:** [@byronhe](https://discuss.elastic.co/u/byronhe)\ **Replies:** 1\ **Last updated:** [May 8, 2019, 5:11am UTC](https://discuss.elastic.co/t/how-to-set-field-multi-value-leniency-parameter-in-elasticsearch-sql-cli-command-line/179990 "2019-05-08T05:11:46Z")
how to set field\_multi\_value\_leniency parameter in elasticsearch-sql-cli command line ? https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-rest.html#sql-rest-fields --- ## [Remove backslash "\\\\s" about in Logstash](https://discuss.elastic.co/t/remove-backslash-s-about-in-logstash/175509)
**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 12:43pm UTC](https://discuss.elastic.co/t/remove-backslash-s-about-in-logstash/175509 "2019-04-05T12:43:57Z")
Hi, There is json data so I want to parse use but ı need \\" remove in json line. How can ı remove \*\*\\"\*\*quate? I know using gsub but ı can't. Exampler data; { "dateTime":"\\"2019-03-27T00:59:15\\"", "scStatus":2… --- ## [Mousse Data To-Go - Real-time visualization of critical information at your fingertips via a Mobile App](https://discuss.elastic.co/t/mousse-data-to-go-real-time-visualization-of-critical-information-at-your-fingertips-via-a-mobile-app/39537)
**Author:** [@grwongku](https://discuss.elastic.co/u/grwongku)\ **Replies:** 1\ **Last updated:** [May 9, 2017, 5:55am UTC](https://discuss.elastic.co/t/mousse-data-to-go-real-time-visualization-of-critical-information-at-your-fingertips-via-a-mobile-app/39537 "2017-05-09T05:55:43Z")
Real-time visualization of critical information at your fingertips via a Mobile App. Mousse Data To-Go (Mousse DTG) abstracts raw data into easily comprehensible views consumed by mobile devices. So that the Marketing M… --- ## [Pipeline Aggregations: Parse Failure Could not find aggregator type avg\_bucket](https://discuss.elastic.co/t/pipeline-aggregations-parse-failure-could-not-find-aggregator-type-avg-bucket/44847)
**Author:** [@benBA](https://discuss.elastic.co/u/benBA)\ **Replies:** 1\ **Last updated:** [March 18, 2016, 4:08pm UTC](https://discuss.elastic.co/t/pipeline-aggregations-parse-failure-could-not-find-aggregator-type-avg-bucket/44847 "2016-03-18T16:08:37Z")
Hi, I am trying to query Elasticsearch to show for each week, the average count of documents per day. I understand I must use the pipeline aggregation to achieve this, however I am having an issue with it... This is… --- ## [Kibana 4 Visaulisation Progress bar](https://discuss.elastic.co/t/kibana-4-visaulisation-progress-bar/40512)
**Author:** [@brew42](https://discuss.elastic.co/u/brew42)\ **Replies:** 1\ **Last updated:** [January 29, 2016, 7:24pm UTC](https://discuss.elastic.co/t/kibana-4-visaulisation-progress-bar/40512 "2016-01-29T19:24:08Z")
Hi In pre Kibana 4 each visualisation had its own progress/loading icon. Kibana 4 doesn't have this. I have kibana embedded in Iframe and on load empty visualisations show, then it takes some time for data to load - … --- ## [An index has stayed on the same action longer than expected](https://discuss.elastic.co/t/an-index-has-stayed-on-the-same-action-longer-than-expected/339636)
**Author:** [@nitinkapoor](https://discuss.elastic.co/u/nitinkapoor)\ **Replies:** 2\ **Last updated:** [August 1, 2023, 1:46am UTC](https://discuss.elastic.co/t/an-index-has-stayed-on-the-same-action-longer-than-expected/339636 "2023-08-01T01:46:06Z")
I have upgraded my Elastic stack from 8.82 to 8.9 and facing this warning for one of my indices Deployment\_management Automatic index lifecycle and data retention management cannot make progress on one or more indices.… --- ## [Confirm force merging the index is running](https://discuss.elastic.co/t/confirm-force-merging-the-index-is-running/330189)
**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\ **Replies:** 2\ **Last updated:** [April 20, 2023, 5:09am UTC](https://discuss.elastic.co/t/confirm-force-merging-the-index-is-running/330189 "2023-04-20T05:09:18Z")
We are using a dense\_vector field for semantic search. Due to very slow performance on our index and based on several conversations here I decided to force\_merge the index to 1 segment. So it's been running asynchronous… --- ## [Percentage difference over two different periods](https://discuss.elastic.co/t/percentage-difference-over-two-different-periods/247838)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 9:32am UTC](https://discuss.elastic.co/t/percentage-difference-over-two-different-periods/247838 "2020-09-11T09:32:24Z")
Hi, I would like to see how I receive specifics logs during two periods : Current month Current month - 1 The goal is to see the difference, in percentage, between them. For example, this month we increased log integ… --- ## [Difficulties forming a new Elastic Stack possibly because of Elasticsearch discovery procedure](https://discuss.elastic.co/t/difficulties-forming-a-new-elastic-stack-possibly-because-of-elasticsearch-discovery-procedure/218482)
**Author:** [@pwh589](https://discuss.elastic.co/u/pwh589)\ **Replies:** 2\ **Last updated:** [February 9, 2020, 11:48pm UTC](https://discuss.elastic.co/t/difficulties-forming-a-new-elastic-stack-possibly-because-of-elasticsearch-discovery-procedure/218482 "2020-02-09T23:48:35Z")
Hi, I am trying to form an Elastic Stack made of a single RHEL 7.4 Elasticsearch node, a RHEL 7.4 Kibana node, and RHEL 7.4 Logstash node, all 7.5.2 (current version as of now). For some reason, in 7.5.2 Elasticsearch … --- ## [Multiline codec in input](https://discuss.elastic.co/t/multiline-codec-in-input/59451)
**Author:** [@rmalired](https://discuss.elastic.co/u/rmalired)\ **Replies:** 2\ **Last updated:** [September 3, 2016, 4:17pm UTC](https://discuss.elastic.co/t/multiline-codec-in-input/59451 "2016-09-03T16:17:46Z")
I have a scenario where filebeat send information from access.log as well as application.log. The application log can be multiline. so in the logstash.conf i have a multiline codec looking for a timestamp as the patte… --- ## [Elastic search node not forming cluster, running on windows server 2012 VM on windows Azure](https://discuss.elastic.co/t/elastic-search-node-not-forming-cluster-running-on-windows-server-2012-vm-on-windows-azure/41687)
**Author:** [@mayanksaini](https://discuss.elastic.co/u/mayanksaini)\ **Replies:** 2\ **Last updated:** [May 27, 2016, 5:23am UTC](https://discuss.elastic.co/t/elastic-search-node-not-forming-cluster-running-on-windows-server-2012-vm-on-windows-azure/41687 "2016-05-27T05:23:24Z")
Hi All, I am trying to setup a ES cluster over windows virtual machine on windows azure using uni cast. I think I have made all required configuration changes, but still my ES nodes do not form cluster. Between I can p… --- ## [Is there a way to let elasticsearch-hadoop auto-generate doc id?](https://discuss.elastic.co/t/is-there-a-way-to-let-elasticsearch-hadoop-auto-generate-doc-id/44127)
**Author:** [@mint](https://discuss.elastic.co/u/mint)\ **Replies:** 2\ **Last updated:** [March 16, 2016, 2:57pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-let-elasticsearch-hadoop-auto-generate-doc-id/44127 "2016-03-16T14:57:25Z")
I'm using elasticsearch-hadoop-2.2.0 running against hadoop 2.4.1, if not specifying "es.mapping.id", it throws following exception: 16/03/11 16:30:56 INFO mapreduce.Job: Task Id : attempt\_1452685769492\_240664\_r\_000000\_2… --- ## [Problem with document level security](https://discuss.elastic.co/t/problem-with-document-level-security/41944)
**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\ **Replies:** 2\ **Last updated:** [February 17, 2016, 5:40pm UTC](https://discuss.elastic.co/t/problem-with-document-level-security/41944 "2016-02-17T17:40:46Z")
I have the following two documents in Elastic: \[ { "\_index" : "hr", "\_type" : "blog", "\_id" : "123", "\_score" : 1.0, "\_source" : { "title" : "blah blah Doe" } }, { … --- ## [PyEQS: Query Elasticsearch like a Django Queryset](https://discuss.elastic.co/t/pyeqs-query-elasticsearch-like-a-django-queryset/17603)
**Author:** [@Andrew\_Gross](https://discuss.elastic.co/u/Andrew_Gross)\ **Replies:** 2\ **Last updated:** [May 20, 2014, 2:28pm UTC](https://discuss.elastic.co/t/pyeqs-query-elasticsearch-like-a-django-queryset/17603 "2014-05-20T14:28:48Z")
Hey all, I wrote a wrapper around 'elasticsearch-py' to simplify building JSON queries. It aims to mimic the Django Queryset API so make it easier to work with and replicate queries against elasticsearch. Check … --- ## [Master election process is not happening](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443)
**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\ **Replies:** 8\ **Last updated:** [April 23, 2020, 11:33am UTC](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443 "2020-04-23T11:33:14Z")
HI, I have configured multi master node configurtaion in cluster but master election process is not happening correctly .. I have 4 nodes out of 4 , Node1, Node2 and node3 is master node and node 4 is data node. Activ… --- ## [Elkwin - a free all-in-one ELK Stack Installer for Windows](https://discuss.elastic.co/t/elkwin-a-free-all-in-one-elk-stack-installer-for-windows/124005)
**Author:** [@itefix](https://discuss.elastic.co/u/itefix)\ **Replies:** 0\ **Last updated:** [March 14, 2018, 10:20pm UTC](https://discuss.elastic.co/t/elkwin-a-free-all-in-one-elk-stack-installer-for-windows/124005 "2018-03-14T22:20:12Z")
Elkwin is a free packaging of Elasticsearch, Logstash, Kibana and Oracle Java Server JRE, providing a standalone solution ready to use for searching, analyzing and visualization of almost any type of structured and unstr… --- ## [Receiving and displaying logs in kibana over openvpn](https://discuss.elastic.co/t/receiving-and-displaying-logs-in-kibana-over-openvpn/97928)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 0\ **Last updated:** [August 22, 2017, 2:44pm UTC](https://discuss.elastic.co/t/receiving-and-displaying-logs-in-kibana-over-openvpn/97928 "2017-08-22T14:44:49Z")
I have configured a ELK stack and I am having problems getting Kibana to display the logs only\* over our VPN. Our logstash server is 10.100.1.10 and the openvpn server is 10.200.1.0/24 network. I am able to send test log… --- ## [Elasticsearch 5.6.10 on instantly killed](https://discuss.elastic.co/t/elasticsearch-5-6-10-on-instantly-killed/140723)
**Author:** [@dumkaz](https://discuss.elastic.co/u/dumkaz)\ **Replies:** 6\ **Last updated:** [July 30, 2018, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-10-on-instantly-killed/140723 "2018-07-30T10:49:15Z")
Hi I use a dedicated elastic cluster, consist of 9 nodes: 3 dedicated master nodes and 6 dedicated data nodes. The cluster used as a backend to collect logs from all company production servers. Log traffic volume is ab… --- ## [What's Python "best practice" for security certificates with ES8?](https://discuss.elastic.co/t/whats-python-best-practice-for-security-certificates-with-es8/327009)
**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\ **Replies:** 1\ **Last updated:** [March 5, 2023, 4:17pm UTC](https://discuss.elastic.co/t/whats-python-best-practice-for-security-certificates-with-es8/327009 "2023-03-05T16:17:08Z")
I just set up ES 8.6.2 on my machine. This is a single-machine setup. In fact I'm upgrading from 7.10.2, see previous question. I've managed to obtain a password for user "elastic"... this means I can get the "You know,… --- ## [Does forcing/manually setting the id of the document makes the shards unevenly distributed?](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 7\ **Last updated:** [October 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372 "2022-10-29T05:32:29Z")
Does forcing/manually setting the id of the document makes the shards unevenly distributed? Currently, we are forcing the values of id when storing documents in the index. Is this a bad practice? Does it make the shar… --- ## [Data Correlation in Elasticsearch](https://discuss.elastic.co/t/data-correlation-in-elasticsearch/248833)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/data-correlation-in-elasticsearch/248833 "2020-09-16T13:42:40Z")
Hi All, I just wanted to know whether i can use ELK for my use case, please suggest. WE are using ELK for dashboarding and reporting purpose, for this we are fetching data from multiple datasources like (servicenow, so… --- ## [Time spent by span type emtpy](https://discuss.elastic.co/t/time-spent-by-span-type-emtpy/233904)
**Author:** [@aleksclark](https://discuss.elastic.co/u/aleksclark)\ **Replies:** 1\ **Last updated:** [May 25, 2020, 1:13am UTC](https://discuss.elastic.co/t/time-spent-by-span-type-emtpy/233904 "2020-05-25T01:13:17Z")
Kibana version: 7.5.0 Elasticsearch version: 7.5.0 APM Server version: 7.5.0 APM Agent language and version: Ruby/elastic-apm 3.1.0 Browser version: Chrome Original install method (e.g. download page, yum, deb, from… --- ## [Not reading /var/lib/docker/containers?](https://discuss.elastic.co/t/not-reading-var-lib-docker-containers/162446)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 1\ **Last updated:** [January 2, 2019, 1:28pm UTC](https://discuss.elastic.co/t/not-reading-var-lib-docker-containers/162446 "2019-01-02T13:28:56Z")
Am hoping to use filebeat to get stdout from my containers running on kubernetes. So far no luck here. Looking at filesystem on kubernetes hosts I see that /var/lib/docker/containers has permissions only for root drwx-… --- ## [Filebeat with Docker mounted logs handle restart duplicates](https://discuss.elastic.co/t/filebeat-with-docker-mounted-logs-handle-restart-duplicates/139711)
**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\ **Replies:** 1\ **Last updated:** [July 12, 2018, 2:48pm UTC](https://discuss.elastic.co/t/filebeat-with-docker-mounted-logs-handle-restart-duplicates/139711 "2018-07-12T14:48:28Z")
Im currently sending logs via a mounted volume. docker-compose.yml looks like the following version: '3' services: filebeat: image: docker.elastic.co/beats/filebeat:6.3.0 container\_name: filebeat volumes:… --- ## [Dangling Index after running Curator](https://discuss.elastic.co/t/dangling-index-after-running-curator/139268)
**Author:** [@james5](https://discuss.elastic.co/u/james5)\ **Replies:** 7\ **Last updated:** [July 10, 2018, 7:31am UTC](https://discuss.elastic.co/t/dangling-index-after-running-curator/139268 "2018-07-10T07:31:14Z")
I have a situation where deleted indexes are not deleted from all nodes. As such, when ES is restarted, this Dangling Shard is imported as a Dangling Index and is thus UNASSIGNED and causes the cluster to enter "red" sta… --- ## [Logstash not parsing logs](https://discuss.elastic.co/t/logstash-not-parsing-logs/90148)
**Author:** [@vgupta0308](https://discuss.elastic.co/u/vgupta0308)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 6:15am UTC](https://discuss.elastic.co/t/logstash-not-parsing-logs/90148 "2017-06-21T06:15:51Z")
Hello, We have created the Logstash config for parsing the bro ids logs which is not working. Below is the output of log file: \[2017-06-20T17:25:16,966\]\[WARN \]\[logstash.outputs.elasticsearch\] Restored connection to … --- ## [Kibana 5.0 not showing indexed data](https://discuss.elastic.co/t/kibana-5-0-not-showing-indexed-data/66382)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 1\ **Last updated:** [November 19, 2016, 1:32am UTC](https://discuss.elastic.co/t/kibana-5-0-not-showing-indexed-data/66382 "2016-11-19T01:32:11Z")
I have indexed accesslogs using logstash into kibana5.0 .It does not show up in discover,graph,visualize anywhere ...but in x-pack with monitoring i find it when i select show system indices as: .monitoring-es-2-2016.… --- ## [Background\_filter for significant\_terms](https://discuss.elastic.co/t/background-filter-for-significant-terms/48065)
**Author:** [@Tibor\_Schmidt](https://discuss.elastic.co/u/Tibor_Schmidt)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 6:52pm UTC](https://discuss.elastic.co/t/background-filter-for-significant-terms/48065 "2016-06-08T18:52:04Z")
Hey, I'm using es 1.7 and I'd like to start playing with the significant\_terms aggregation. Im using elasticsearch-dsl-py, printing the query as a dict: { "aggs": { "myterms": { "significant\_terms": { "back… --- ## [How to hide time field @ Discovery table in Kibana](https://discuss.elastic.co/t/how-to-hide-time-field-discovery-table-in-kibana/44016)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 1\ **Last updated:** [March 11, 2016, 5:41pm UTC](https://discuss.elastic.co/t/how-to-hide-time-field-discovery-table-in-kibana/44016 "2016-03-11T17:41:04Z")
Hi , Is there any way where i can hide Time (default field) in Discovery Table in kibana? Thanks, Rohan --- ## [Equivalent aggregation query to terms facet](https://discuss.elastic.co/t/equivalent-aggregation-query-to-terms-facet/19952)
**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\ **Replies:** 1\ **Last updated:** [September 27, 2014, 5:54am UTC](https://discuss.elastic.co/t/equivalent-aggregation-query-to-terms-facet/19952 "2014-09-27T05:54:24Z")
Hi all, I'm using ES 1.3.2 My document structure { "mapids" : \[mapid1, mapid2,mapid3\], "rdata" : \[ {mapid1: value1}, {mapid2:value2},{mapid3:value3} \] … --- ## [How many metadata fields exist of MP3 file?](https://discuss.elastic.co/t/how-many-metadata-fields-exist-of-mp3-file/15135)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 7\ **Last updated:** [January 8, 2014, 11:44am UTC](https://discuss.elastic.co/t/how-many-metadata-fields-exist-of-mp3-file/15135 "2014-01-08T11:44:41Z")
Hi all, I am wondering how many metadata fields of MP3 files exist when I post the mp3 file into ElasticSearch using the mapper-attachment. Because in Solr we can know the field information through the endpoint … --- ## [Airgapped install of plugin fails trying to access artifacts.elastic.co](https://discuss.elastic.co/t/airgapped-install-of-plugin-fails-trying-to-access-artifacts-elastic-co/356781)
**Author:** [@SebastianThorn](https://discuss.elastic.co/u/SebastianThorn)\ **Replies:** 5\ **Last updated:** [April 5, 2024, 10:25am UTC](https://discuss.elastic.co/t/airgapped-install-of-plugin-fails-trying-to-access-artifacts-elastic-co/356781 "2024-04-05T10:25:56Z")
Hello, I'm trying to install a plugin behind an airgapped environment. The environment has access to a private RubyGems-repository located in Artifactory. I'm getting this error: \> \[config 4/5\] RUN logstash-plugin i… --- ## [Comparing Two Indices Across Clusters](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904)
**Author:** [@connellyethan](https://discuss.elastic.co/u/connellyethan)\ **Replies:** 5\ **Last updated:** [November 16, 2022, 7:37am UTC](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904 "2022-11-16T07:37:08Z")
Hi All, We are currently attempting to compare two indices across clusters to verify we did not lose any records or fields during the process of cross cluster replication, which is how we chose to do this data migration… --- ## [Error while installing X-pack on windows](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310)
**Author:** [@humza-cyber](https://discuss.elastic.co/u/humza-cyber)\ **Replies:** 5\ **Last updated:** [September 30, 2019, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310 "2019-09-30T14:14:13Z")
I have elastic 5.5.0, downloaded in zip format, on Windows. I'm trying to install X-pack 5.5.3. As per Elastic support matrix it is compatible but getting an error will installing it. Here is the error log C:\\elasticse… --- ## [Sending only Json format of log to Kafka server from logs containing both json and non json format in logstash config](https://discuss.elastic.co/t/sending-only-json-format-of-log-to-kafka-server-from-logs-containing-both-json-and-non-json-format-in-logstash-config/143168)
**Author:** [@Anshika](https://discuss.elastic.co/u/Anshika)\ **Replies:** 5\ **Last updated:** [August 7, 2018, 1:17pm UTC](https://discuss.elastic.co/t/sending-only-json-format-of-log-to-kafka-server-from-logs-containing-both-json-and-non-json-format-in-logstash-config/143168 "2018-08-07T13:17:31Z")
I am trying to send the Json format of the log from the logs containing both json and non json format to Kafka server. example of logs: 880 \<14\>1 2018-08-06T10:49:05.89677+00:00 dev.hello-world 24f9ade2-1bdb-46c2-bc5c-4… --- ## [X-Pack 6.1.2 - Watcher Firing twice for the same event](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267)
**Author:** [@jamesspi](https://discuss.elastic.co/u/jamesspi)\ **Replies:** 5\ **Last updated:** [January 19, 2018, 4:28pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267 "2018-01-19T16:28:06Z")
Hi, For most of our watches, watcher is firing twice for the same results since 6.1.2. Additionally, sometimes it doesn't fire all together. No issues whatsoever on 6.1.1. Anyone know if this is a known bug? Thanks! … --- ## [No Service Found in APM DATA](https://discuss.elastic.co/t/no-service-found-in-apm-data/326325)
**Author:** [@Sam\_1995](https://discuss.elastic.co/u/Sam_1995)\ **Replies:** 4\ **Last updated:** [March 10, 2023, 5:52am UTC](https://discuss.elastic.co/t/no-service-found-in-apm-data/326325 "2023-03-10T05:52:59Z")
No Service Found in APM DATA in Kibana even though data is present in apm\* index and could application apm data received in apm-server logs Kibana version: 7.17.9 Elasticsearch version: 7.17.9 APM Server version: 7… --- ## [Cannot parse empty date](https://discuss.elastic.co/t/cannot-parse-empty-date/320575)
**Author:** [@stefanocog](https://discuss.elastic.co/u/stefanocog)\ **Replies:** 4\ **Last updated:** [December 6, 2022, 1:16pm UTC](https://discuss.elastic.co/t/cannot-parse-empty-date/320575 "2022-12-06T13:16:58Z")
Hi, I have a log that has a json field inside that can have empty fields, specifically I have a date field, the log can be like this "2022-11-28 09:24:46:705"|"+0100"|"transId: xxxxxx"|"resId: xxxxxx"|"1.1.1.1"|"https:… --- ## [How to achieve CCR for more than 20 indices at once without snapshot](https://discuss.elastic.co/t/how-to-achieve-ccr-for-more-than-20-indices-at-once-without-snapshot/275404)
**Author:** [@Thesupersoftwareguy](https://discuss.elastic.co/u/Thesupersoftwareguy)\ **Replies:** 4\ **Last updated:** [August 1, 2021, 5:18pm UTC](https://discuss.elastic.co/t/how-to-achieve-ccr-for-more-than-20-indices-at-once-without-snapshot/275404 "2021-08-01T17:18:34Z")
Hello, I have multiple indices already created in cluster A and I want them to be replicated to cluster B , is there a way to create those many follower indices without manual effort as it will increase operational load… --- ## [Java Automatic Agent Configuration Options are not working](https://discuss.elastic.co/t/java-automatic-agent-configuration-options-are-not-working/270944)
**Author:** [@Kevin\_Christopher](https://discuss.elastic.co/u/Kevin_Christopher)\ **Replies:** 4\ **Last updated:** [April 25, 2021, 7:53am UTC](https://discuss.elastic.co/t/java-automatic-agent-configuration-options-are-not-working/270944 "2021-04-25T07:53:01Z")
Kibana version: 7.12 Elasticsearch version: 7.12 APM Server version: 7.12 APM Agent language and version: Java 1.21 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and… --- ## [Process.binding is not supported when running kibana 7.5.1 with custom plugin deployed](https://discuss.elastic.co/t/process-binding-is-not-supported-when-running-kibana-7-5-1-with-custom-plugin-deployed/213699)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 6:31pm UTC](https://discuss.elastic.co/t/process-binding-is-not-supported-when-running-kibana-7-5-1-with-custom-plugin-deployed/213699 "2020-01-10T18:31:38Z")
I am using kibana tags/v7.5.1 to develop a custom plugin It's working fine on dev When i build and deploy the plugin into a stable release of kibana 7.5.1, i started Kibana but when running browser into http://kibana\_s… --- ## [Reticulating Splines](https://discuss.elastic.co/t/reticulating-splines/172376)
**Author:** [@Meredith](https://discuss.elastic.co/u/Meredith)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 2:55pm UTC](https://discuss.elastic.co/t/reticulating-splines/172376 "2019-03-19T14:55:13Z")
I am not able to create an index pattern in my Kibana because it keeps saying it is Checking for Elasticsearch data/ Reticulating splines... I do not know if it is an issue of permissions. I tried to change my access pol… --- ## [GeoPoint Script Processing](https://discuss.elastic.co/t/geopoint-script-processing/126150)
**Author:** [@ESmonkey](https://discuss.elastic.co/u/ESmonkey)\ **Replies:** 4\ **Last updated:** [April 10, 2018, 11:30pm UTC](https://discuss.elastic.co/t/geopoint-script-processing/126150 "2018-04-10T23:30:59Z")
I wanted to use script term aggregation to process array of Geo point locations using arcDistance function in painless. But it seems like the arcDistance function always takes the first (lat,lon) location to do distanc… --- ## [Filter the data sent by filebeat](https://discuss.elastic.co/t/filter-the-data-sent-by-filebeat/90288)
**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\ **Replies:** 4\ **Last updated:** [June 26, 2017, 8:57am UTC](https://discuss.elastic.co/t/filter-the-data-sent-by-filebeat/90288 "2017-06-26T08:57:53Z")
Hello Everyone, I have a small problem with filebeat and logstash. On my logstash machine I receive data from two different servers (filebeat). The problem is that I don't want to apply the same filters to the 2 serv… --- ## [About extends a new protocol](https://discuss.elastic.co/t/about-extends-a-new-protocol/75152)
**Author:** [@jerome\_tan](https://discuss.elastic.co/u/jerome_tan)\ **Replies:** 4\ **Last updated:** [February 15, 2017, 1:02pm UTC](https://discuss.elastic.co/t/about-extends-a-new-protocol/75152 "2017-02-15T13:02:50Z")
I am extending a new packetbeat, just wondering that the beat can bind and listen a port, if it can get the inbound and outbound byte via the port. i.e.: while listening to a HTTP port like 80, can we get the HTTP reques… [Previous page](https://discuss.elastic.co/top.md?page=1378&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1380&per_page=50&period=all)