# Top

**URL:** https://discuss.elastic.co/top.md?page=1380&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1381

---

## [Disable Kibana msearch?](https://discuss.elastic.co/t/disable-kibana-msearch/65348)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 4\
**Last updated:** [December 2, 2016, 3:15pm UTC](https://discuss.elastic.co/t/disable-kibana-msearch/65348 "2016-12-02T15:15:15Z")

</div>

We have a quite big dashboard, that make elasticsearch client node crash (running out of memory). I don't see the problem when I run the query one by one, so is there a way to tune the msearch from Kibana ? Maybe 3 by …

---

## [The term(s) filter and the standard analyzer](https://discuss.elastic.co/t/the-term-s-filter-and-the-standard-analyzer/47803)

<div class="topic-metadata">

**Author:** [@jpblair](https://discuss.elastic.co/u/jpblair)\
**Replies:** 4\
**Last updated:** [April 25, 2016, 9:22pm UTC](https://discuss.elastic.co/t/the-term-s-filter-and-the-standard-analyzer/47803 "2016-04-25T21:22:58Z")

</div>

I have a document type that contains an array of objects about a person, one of which is their name. For example: "creators":\[ { "id":"john.doe", "name":"John Doe" }, { "id":"jane.smith", "name":"Jane Smit…

---

## [Replace my @timestamp](https://discuss.elastic.co/t/replace-my-timestamp/40739)

<div class="topic-metadata">

**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\
**Replies:** 4\
**Last updated:** [February 3, 2016, 1:07pm UTC](https://discuss.elastic.co/t/replace-my-timestamp/40739 "2016-02-03T13:07:25Z")

</div>

Hi! I have a log that looks like this "2016-02-02 14:52:18" , and I want to replace my @timestamp, I tried different ways but none works. I have read many entries but I didn´t find a solution. Actually im trying with thi…

---

## [Rule Preview not Working](https://discuss.elastic.co/t/rule-preview-not-working/327737)

<div class="topic-metadata">

**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\
**Replies:** 3\
**Last updated:** [March 24, 2023, 9:55am UTC](https://discuss.elastic.co/t/rule-preview-not-working/327737 "2023-03-24T09:55:36Z")

</div>

I have this weird problem where detection engine rules preview is not working for users. Now the users have roles that grant them read access to .preview.alerts-security.alerts-\<space-id\> and All Kibana pirvileges on Ki…

---

## [Throttled merge](https://discuss.elastic.co/t/throttled-merge/314963)

<div class="topic-metadata">

**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\
**Replies:** 3\
**Last updated:** [September 23, 2022, 12:47pm UTC](https://discuss.elastic.co/t/throttled-merge/314963 "2022-09-23T12:47:18Z")

</div>

Hello, Currently we have an index of 33TB (ES 7.8), 48 shards (16 primary, 32 replicas), two months ago we deleted a lot of documents and we noticed that one of the shards (the primary and the 2 replicas) has a very lar…

---

## [Programmatically update Logstash configuration file](https://discuss.elastic.co/t/programmatically-update-logstash-configuration-file/294096)

<div class="topic-metadata">

**Author:** [@Matt\_Jones](https://discuss.elastic.co/u/Matt_Jones)\
**Replies:** 3\
**Last updated:** [January 12, 2022, 3:43pm UTC](https://discuss.elastic.co/t/programmatically-update-logstash-configuration-file/294096 "2022-01-12T15:43:58Z")

</div>

Hi, I would like to create multiple ingestion pipelines in Elastic Cloud, each of which containing a pipeline configuration (inputs, filters, outputs). Different pipelines are being created to support different custome…

---

## [Kibana goes down if a specific node is down](https://discuss.elastic.co/t/kibana-goes-down-if-a-specific-node-is-down/242526)

<div class="topic-metadata">

**Author:** [@Dimitrios\_Dellios](https://discuss.elastic.co/u/Dimitrios_Dellios)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 6:33pm UTC](https://discuss.elastic.co/t/kibana-goes-down-if-a-specific-node-is-down/242526 "2020-08-06T18:33:59Z")

</div>

Greetings to all, I have a 3 node es-cluster (2 data and master-eligible nodes and 1 dedicated master node). Kibana is installed on the first node, pointing out to the host address that acts as a load balancer. For exa…

---

## [Top hits for recent values not working for numbers that give floating point results](https://discuss.elastic.co/t/top-hits-for-recent-values-not-working-for-numbers-that-give-floating-point-results/164797)

<div class="topic-metadata">

**Author:** [@keiranmraine](https://discuss.elastic.co/u/keiranmraine)\
**Replies:** 3\
**Last updated:** [January 21, 2019, 9:15am UTC](https://discuss.elastic.co/t/top-hits-for-recent-values-not-working-for-numbers-that-give-floating-point-results/164797 "2019-01-21T09:15:30Z")

</div>

I'm using metricbeat to gather system information. I can clearly see the values are being populated in the discover pane when filtering and splitting as required for the host, cpu\_id to ensure there are no nulls from un…

---

## [Kibana Dashboard, Get the last 10 elements of a specific index ignoring the specified time-range](https://discuss.elastic.co/t/kibana-dashboard-get-the-last-10-elements-of-a-specific-index-ignoring-the-specified-time-range/156835)

<div class="topic-metadata">

**Author:** [@faustf](https://discuss.elastic.co/u/faustf)\
**Replies:** 3\
**Last updated:** [November 15, 2018, 4:34pm UTC](https://discuss.elastic.co/t/kibana-dashboard-get-the-last-10-elements-of-a-specific-index-ignoring-the-specified-time-range/156835 "2018-11-15T16:34:51Z")

</div>

Hi Guys, I've created my own Kibana dashboard. In this dashobard I've added 3 "saved search" created by me. Everything works fine. What I need to do now is to modify one of these "saved search" to be indipendet by the …

---

## [Connecting metricbeat to microservices](https://discuss.elastic.co/t/connecting-metricbeat-to-microservices/140001)

<div class="topic-metadata">

**Author:** [@shubhamh](https://discuss.elastic.co/u/shubhamh)\
**Replies:** 3\
**Last updated:** [August 7, 2018, 1:12pm UTC](https://discuss.elastic.co/t/connecting-metricbeat-to-microservices/140001 "2018-08-07T13:12:03Z")

</div>

Hello, I am looking to connect Metricbeat with multiple microservices on a node. Each microservice is running jolokia and we are looking to pull all of that data into metricbeat. We currently have metricbeat setup to mo…

---

## [Want System memory usage to be come in Percentile form](https://discuss.elastic.co/t/want-system-memory-usage-to-be-come-in-percentile-form/133914)

<div class="topic-metadata">

**Author:** [@Pushpak\_Bhawsar](https://discuss.elastic.co/u/Pushpak_Bhawsar)\
**Replies:** 3\
**Last updated:** [June 4, 2018, 7:41pm UTC](https://discuss.elastic.co/t/want-system-memory-usage-to-be-come-in-percentile-form/133914 "2018-06-04T19:41:40Z")

</div>

Hello, I have set an advance watcher to get System memory usage of an Instance via mail, but I am getting the response as Watch \[{0={value=0.7806375838926162, key=wp-bookopidia-prod-vm}}\] has exceeded the threshold via …

---

## [Format document pour recherche de chambres d'hotel](https://discuss.elastic.co/t/format-document-pour-recherche-de-chambres-dhotel/61913)

<div class="topic-metadata">

**Author:** [@Karel\_SUEDILE](https://discuss.elastic.co/u/Karel_SUEDILE)\
**Replies:** 3\
**Last updated:** [January 31, 2017, 11:19am UTC](https://discuss.elastic.co/t/format-document-pour-recherche-de-chambres-dhotel/61913 "2017-01-31T11:19:11Z")

</div>

Bonjour, je galère pour trouver une structure de document qui sera efficace lorsque je souhaiterai requêter ES afin de trouver les chambres d'hotel matchant les critères suivants : - de telle date à telle date - entre te…

---

## [Is there any limit to the size of single doc being indexed?](https://discuss.elastic.co/t/is-there-any-limit-to-the-size-of-single-doc-being-indexed/53247)

<div class="topic-metadata">

**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\
**Replies:** 3\
**Last updated:** [June 20, 2016, 1:51pm UTC](https://discuss.elastic.co/t/is-there-any-limit-to-the-size-of-single-doc-being-indexed/53247 "2016-06-20T13:51:39Z")

</div>

I'm getting several exceptions like the one below in bulk indexing. u'error': {u'caused\_by': {u'reason': u'Java heap space', u'type': u'out\_of\_memory\_error'}, u'reason': u'failed to parse', u'type': u'mapper\_parsing\_e…

---

## [Convert text field to date in ingest pipeline](https://discuss.elastic.co/t/convert-text-field-to-date-in-ingest-pipeline/332595)

<div class="topic-metadata">

**Author:** [@KentLee](https://discuss.elastic.co/u/KentLee)\
**Replies:** 2\
**Last updated:** [May 5, 2023, 12:59pm UTC](https://discuss.elastic.co/t/convert-text-field-to-date-in-ingest-pipeline/332595 "2023-05-05T12:59:25Z")

</div>

Hi, I am creating a ingest pipeline to ingest application log to elastic and I have the log line format as follow: \[2023-05-03 16:12:19,420\] - \[Application Name\] - \[INFO\] - Log details goes here Based on this format I…

---

## [Kibana, xpack, nginx proxy and authentication](https://discuss.elastic.co/t/kibana-xpack-nginx-proxy-and-authentication/257138)

<div class="topic-metadata">

**Author:** [@annanicotera](https://discuss.elastic.co/u/annanicotera)\
**Replies:** 2\
**Last updated:** [December 7, 2020, 10:06pm UTC](https://discuss.elastic.co/t/kibana-xpack-nginx-proxy-and-authentication/257138 "2020-12-07T22:06:53Z")

</div>

Hello, We have embedded Kibana dashboards in our application. if xpack security is enabled, we configure a nginx proxy so that the user viewing the dashboards can seamlessly access/view the dashboards without having to …

---

## [Login is currently disabled after security on](https://discuss.elastic.co/t/login-is-currently-disabled-after-security-on/151298)

<div class="topic-metadata">

**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\
**Replies:** 2\
**Last updated:** [October 7, 2018, 7:20am UTC](https://discuss.elastic.co/t/login-is-currently-disabled-after-security-on/151298 "2018-10-07T07:20:23Z")

</div>

now I am trying to initiate x-pack Security but seeing some errors. in Kibana: (i am seeing below error while screen showing "login" feature) "Login is currently disabled. Administrators should consult the Kibana logs …

---

## [Kibana CSV report only contains one line](https://discuss.elastic.co/t/kibana-csv-report-only-contains-one-line/150894)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 2\
**Last updated:** [October 3, 2018, 5:16pm UTC](https://discuss.elastic.co/t/kibana-csv-report-only-contains-one-line/150894 "2018-10-03T17:16:56Z")

</div>

When we are trying to generate a csv report in Kibana, the end result only contains the headers and the first line. If I check the .reporting index the result is there just fine with all the desired lines. However I've…

---

## [Unable to install on Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-install-on-ubuntu-18-04/142770)

<div class="topic-metadata">

**Author:** [@eutychus](https://discuss.elastic.co/u/eutychus)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 5:44pm UTC](https://discuss.elastic.co/t/unable-to-install-on-ubuntu-18-04/142770 "2018-08-10T17:44:14Z")

</div>

It seems the deb Package can not be unpacked: Vorbereitung zum Entpacken von .../elasticsearch\_6.3.2\_all.deb ... dpkg: Fehler beim Bearbeiten des Archivs /var/cache/apt/archives/elasticsearch\_6.3.2\_all.deb (--unpack): …

---

## [Where can i get the logstash-codec-sflow plugin](https://discuss.elastic.co/t/where-can-i-get-the-logstash-codec-sflow-plugin/118520)

<div class="topic-metadata">

**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\
**Replies:** 2\
**Last updated:** [February 6, 2018, 3:48pm UTC](https://discuss.elastic.co/t/where-can-i-get-the-logstash-codec-sflow-plugin/118520 "2018-02-06T15:48:34Z")

</div>

Hi, I need the logstash-codec-sflow but can't find it. My lab server doesn't have internet access, so I need to download it directly. Can someone point me to it?

---

## [Jdbc\_password\_filepath not functioning in input-jdbc filter](https://discuss.elastic.co/t/jdbc-password-filepath-not-functioning-in-input-jdbc-filter/92089)

<div class="topic-metadata">

**Author:** [@lnm](https://discuss.elastic.co/u/lnm)\
**Replies:** 2\
**Last updated:** [July 13, 2017, 1:11pm UTC](https://discuss.elastic.co/t/jdbc-password-filepath-not-functioning-in-input-jdbc-filter/92089 "2017-07-13T13:11:33Z")

</div>

Hi everyone, I'm currently building some Logstash input filters which works great. The one thing I can't get working though is the jdbc\_password\_filepath setting. The query below is what I'm trying to run, with some…

---

## [Issue while Indexing bulk of Json to Elasticsearch](https://discuss.elastic.co/t/issue-while-indexing-bulk-of-json-to-elasticsearch/59093)

<div class="topic-metadata">

**Author:** [@SindhujaM](https://discuss.elastic.co/u/SindhujaM)\
**Replies:** 2\
**Last updated:** [August 29, 2016, 5:18am UTC](https://discuss.elastic.co/t/issue-while-indexing-bulk-of-json-to-elasticsearch/59093 "2016-08-29T05:18:28Z")

</div>

Hi I am trying to push bulk of Json fles to ElasticSearch. i am using elasticsearch 1.5.2 version for bulk push using Java API. public class TestIndex { public static void main(String\[\] args) throws ParseExcept…

---

## [Logstash-netflow-codec](https://discuss.elastic.co/t/logstash-netflow-codec/55539)

<div class="topic-metadata">

**Author:** [@abdalians](https://discuss.elastic.co/u/abdalians)\
**Replies:** 2\
**Last updated:** [July 26, 2016, 4:56pm UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539 "2016-07-26T16:56:31Z")

</div>

Hi We are testing out the netflow input plugin for logstash but cant seem to get logstash to output anything. input { udp { port =\> 1963 codec =\> netflow { ipfix\_definitions =\> "/opt/logstash/vendor/bundle/jru…

---

## [Is update by query async operation or sync operation?](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890)

<div class="topic-metadata">

**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\
**Replies:** 1\
**Last updated:** [October 28, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890 "2021-10-28T08:36:34Z")

</div>

And if so , how to know when update is done ?

---

## [How can I delete an index after one month automatically?](https://discuss.elastic.co/t/how-can-i-delete-an-index-after-one-month-automatically/272695)

<div class="topic-metadata">

**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 12:47pm UTC](https://discuss.elastic.co/t/how-can-i-delete-an-index-after-one-month-automatically/272695 "2021-05-11T12:47:22Z")

</div>

Hello everybody. I have a docker mounted elk stack server, which collects logs from various filebeats from other servers. Every month, I start a new index pattern,and I would like to make the previous index pattern auto…

---

## ["Moving data from Elastic Search to SQL Server"](https://discuss.elastic.co/t/moving-data-from-elastic-search-to-sql-server/189863)

<div class="topic-metadata">

**Author:** [@m2web](https://discuss.elastic.co/u/m2web)\
**Replies:** 1\
**Last updated:** [July 11, 2019, 2:34am UTC](https://discuss.elastic.co/t/moving-data-from-elastic-search-to-sql-server/189863 "2019-07-11T02:34:29Z")

</div>

I have found several SQL Relational Db solutions for moving data from a relational Db to Elastic Search. Is there a way to export data from Elastic Search to a relational Db such as SQL Server?

---

## [How to add root level field in logstash json output](https://discuss.elastic.co/t/how-to-add-root-level-field-in-logstash-json-output/185010)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 1\
**Last updated:** [June 10, 2019, 5:41pm UTC](https://discuss.elastic.co/t/how-to-add-root-level-field-in-logstash-json-output/185010 "2019-06-10T17:41:15Z")

</div>

My logstash output is like this { "a":"b", "c":"d" } I want to add a new field called parent as a root to this existing json like below: { "parent":{ "a":"b", "c":"d" …

---

## [Create a simple web form using elasticsearch](https://discuss.elastic.co/t/create-a-simple-web-form-using-elasticsearch/118327)

<div class="topic-metadata">

**Author:** [@Janith](https://discuss.elastic.co/u/Janith)\
**Replies:** 1\
**Last updated:** [February 4, 2018, 5:25am UTC](https://discuss.elastic.co/t/create-a-simple-web-form-using-elasticsearch/118327 "2018-02-04T05:25:32Z")

</div>

Hi, I'm trying to create a simple web form that have two functions Enter employees name, age and salary and then save it. Search employee by name I'm trying to do this only using HTML, JavaScript(AJAX) and elasticsea…

---

## [Longest match in string/array](https://discuss.elastic.co/t/longest-match-in-string-array/98121)

<div class="topic-metadata">

**Author:** [@prarabdh9909](https://discuss.elastic.co/u/prarabdh9909)\
**Replies:** 1\
**Last updated:** [August 23, 2017, 9:22pm UTC](https://discuss.elastic.co/t/longest-match-in-string-array/98121 "2017-08-23T21:22:58Z")

</div>

I am planning to use ES for storing tracebacks of exceptions such as: \[a/b/c/d/func/line, e/f/g/h/func/line, i/j/k/l/func/line\] Now, for any incoming tracebacks, I want to rank the results based on which document match…

---

## [Kibana Visualize doesn't allow to aggregate any field other than \_type](https://discuss.elastic.co/t/kibana-visualize-doesnt-allow-to-aggregate-any-field-other-than--type/82841)

<div class="topic-metadata">

**Author:** [@grembek](https://discuss.elastic.co/u/grembek)\
**Replies:** 1\
**Last updated:** [April 19, 2017, 6:24pm UTC](https://discuss.elastic.co/t/kibana-visualize-doesnt-allow-to-aggregate-any-field-other-than--type/82841 "2017-04-19T18:24:13Z")

</div>

Hi I've installed ES and Kibana 5.3, populated them with data and created an index. I am able to see all the fields (located in the JSON under \_source), however, when I try to visualize, I am unable to choose any field …

---

## [How to bulk load in elasticsearch?](https://discuss.elastic.co/t/how-to-bulk-load-in-elasticsearch/26516)

<div class="topic-metadata">

**Author:** [@sharatt](https://discuss.elastic.co/u/sharatt)\
**Replies:** 1\
**Last updated:** [July 29, 2015, 9:41pm UTC](https://discuss.elastic.co/t/how-to-bulk-load-in-elasticsearch/26516 "2015-07-29T21:41:59Z")

</div>

I am a newbie to ELK stack. I am exploring ways to load a bunch of json documents. I have downloaded a small number of json documents using wget. I have created an index call apis curl -XPUT localhost:9200/apis?pretty …

---

## [Esrally connection aborted](https://discuss.elastic.co/t/esrally-connection-aborted/354440)

<div class="topic-metadata">

**Author:** [@uttamkrpanda](https://discuss.elastic.co/u/uttamkrpanda)\
**Replies:** 6\
**Last updated:** [March 1, 2024, 8:09am UTC](https://discuss.elastic.co/t/esrally-connection-aborted/354440 "2024-03-01T08:09:59Z")

</div>

I am trying to run the esrally in local , however it's getting connection aborted . The curl to the elasticsearch host is working fine but not via esrally . Any help here please ? esrally race --track=pmc --target-hos…

---

## [Merge document by condition](https://discuss.elastic.co/t/merge-document-by-condition/268046)

<div class="topic-metadata">

**Author:** [@ku\_kon](https://discuss.elastic.co/u/ku_kon)\
**Replies:** 6\
**Last updated:** [March 23, 2021, 9:36am UTC](https://discuss.elastic.co/t/merge-document-by-condition/268046 "2021-03-23T09:36:24Z")

</div>

Hi, I have document : {"match\_id": xxx, userid: yyy, "bonus": zzz} I want to result like: {"match\_id" : xxx, users: \[{"userid": user1, bonos: bonus1}, {"userid": user2, bonos: bonus2}\]} Please help me. Thank you .

---

## [Elasticsearch | Dedicated Monitoring Cluster](https://discuss.elastic.co/t/elasticsearch-dedicated-monitoring-cluster/171498)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 6\
**Last updated:** [March 12, 2019, 10:36am UTC](https://discuss.elastic.co/t/elasticsearch-dedicated-monitoring-cluster/171498 "2019-03-12T10:36:20Z")

</div>

Hi, I am working on developing dedicated Monitoring Cluster for production environment I have gone through this documentation. It says a gold license is required to monitor multiple Elasticsearch clusters. But I want …

---

## [What ES mapping relationship should I use in this case?](https://discuss.elastic.co/t/what-es-mapping-relationship-should-i-use-in-this-case/73103)

<div class="topic-metadata">

**Author:** [@manbearpig](https://discuss.elastic.co/u/manbearpig)\
**Replies:** 6\
**Last updated:** [January 29, 2017, 10:19pm UTC](https://discuss.elastic.co/t/what-es-mapping-relationship-should-i-use-in-this-case/73103 "2017-01-29T22:19:14Z")

</div>

I am trying to create an ElasticSearch mapping to index an Email. I've read the ES documentation regarding mapping relationships. However I am confused as to what to use to represent recipients? Each email recipients i…

---

## [Upgrade ElasticSearch 0.16 tot 5.0](https://discuss.elastic.co/t/upgrade-elasticsearch-0-16-tot-5-0/69905)

<div class="topic-metadata">

**Author:** [@sdli907](https://discuss.elastic.co/u/sdli907)\
**Replies:** 6\
**Last updated:** [December 23, 2016, 12:20pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-0-16-tot-5-0/69905 "2016-12-23T12:20:40Z")

</div>

Hello ES-colleagues/users, We are currently using a premature version of ES 0.16 in production. Size is 200GB. We would like to upgrade to 5.0. The documentation states that we need to upgrade per Major Release : 0.16…

---

## [Registering node event listeners](https://discuss.elastic.co/t/registering-node-event-listeners/17271)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 6\
**Last updated:** [May 6, 2014, 4:59pm UTC](https://discuss.elastic.co/t/registering-node-event-listeners/17271 "2014-05-06T16:59:02Z")

</div>

I am looking to transition a piece of my search infrastructure from polling the cluster's health status to hopefully receiving notifications whenever an event occurs. Using the TransportService, I registered various re…

---

## [Overwrite Tokenizer of english analyzer](https://discuss.elastic.co/t/overwrite-tokenizer-of-english-analyzer/37084)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 10:42am UTC](https://discuss.elastic.co/t/overwrite-tokenizer-of-english-analyzer/37084 "2015-12-17T10:42:22Z")

</div>

The ES built-in english analyzer treat "." as valid token character. that is, www.google.com will be ONE token "www.google.com" in inverted index. Now I want to treat "." as delimiter in english analyzer, that is, www.…

---

## [Elastic Agent v8.7.0, Filebeat UDP listener error](https://discuss.elastic.co/t/elastic-agent-v8-7-0-filebeat-udp-listener-error/329579)

<div class="topic-metadata">

**Author:** [@rowra](https://discuss.elastic.co/u/rowra)\
**Replies:** 5\
**Last updated:** [April 10, 2023, 2:55pm UTC](https://discuss.elastic.co/t/elastic-agent-v8-7-0-filebeat-udp-listener-error/329579 "2023-04-10T14:55:47Z")

</div>

Hi After upgrading from 8.6.2 to 8.7.0 this error happens all the time causing the agent/filebeat to crash and restart: nagent | {"log.level":"error","@timestamp":"2023-04-07T12:57:29.090+0200","message":"panic: runti…

---

## [Search Data not reporting in Google Analytics](https://discuss.elastic.co/t/search-data-not-reporting-in-google-analytics/271694)

<div class="topic-metadata">

**Author:** [@HowardF](https://discuss.elastic.co/u/HowardF)\
**Replies:** 5\
**Last updated:** [May 5, 2021, 5:47pm UTC](https://discuss.elastic.co/t/search-data-not-reporting-in-google-analytics/271694 "2021-05-05T17:47:35Z")

</div>

We've had the search enabled on our live production site for a few days and have the Google Analytics set up according to this page but there is no data reporting in Google Analytics \> Behavior \> Site Search. I emailed …

---

## [How to add a global dashboard filter that will only be shown when the dashboard is not embedded](https://discuss.elastic.co/t/how-to-add-a-global-dashboard-filter-that-will-only-be-shown-when-the-dashboard-is-not-embedded/260284)

<div class="topic-metadata">

**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\
**Replies:** 5\
**Last updated:** [January 17, 2021, 7:53am UTC](https://discuss.elastic.co/t/how-to-add-a-global-dashboard-filter-that-will-only-be-shown-when-the-dashboard-is-not-embedded/260284 "2021-01-17T07:53:18Z")

</div>

Hi, I'm trying to add a filter to a dashboard without the filter shown in the embedded dashboard. Is there a way to do so? Add it in edit mode, save it and somehow for it not to be visible to the user while he is using…

---

## [ES 6.1.0 Aggregations Empty](https://discuss.elastic.co/t/es-6-1-0-aggregations-empty/112100)

<div class="topic-metadata">

**Author:** [@shreyask](https://discuss.elastic.co/u/shreyask)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 7:50pm UTC](https://discuss.elastic.co/t/es-6-1-0-aggregations-empty/112100 "2017-12-19T19:50:54Z")

</div>

I have about 400K documents in ES (3 node cluster), the documents have following format: { "@timestamp": "2017-11-21T06:49:39.800Z", "message": "xxxx", "username": "xxxx", "geoip": { "country\_nam…

---

## [Kibana "bettermap" widget](https://discuss.elastic.co/t/kibana-bettermap-widget/17812)

<div class="topic-metadata">

**Author:** [@Steven\_Pisarski](https://discuss.elastic.co/u/Steven_Pisarski)\
**Replies:** 5\
**Last updated:** [June 3, 2014, 6:25pm UTC](https://discuss.elastic.co/t/kibana-bettermap-widget/17812 "2014-06-03T18:25:00Z")

</div>

Hello, I have been trying to configure a bettermap widget in Kibana using some custom (non Logstash) data but the widget never renders the map and only shows a graphic making one believe it is working. I have test…

---

## [Masking password in logstash config file](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/253368)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 9:03pm UTC](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/253368 "2020-10-27T21:03:53Z")

</div>

Hello all, As logstash config file is not centrally controlled, I want to mask the elasticsearch password in logstash.conf file so that it is not visible to all. Also user with what "security role" should suffice for m…

---

## [S3 permissions](https://discuss.elastic.co/t/s3-permissions/224531)

<div class="topic-metadata">

**Author:** [@thoth](https://discuss.elastic.co/u/thoth)\
**Replies:** 3\
**Last updated:** [March 24, 2020, 1:44pm UTC](https://discuss.elastic.co/t/s3-permissions/224531 "2020-03-24T13:44:08Z")

</div>

The documentation has become outdated on the S3 permissions. https://www.elastic.co/guide/en/elasticsearch/plugins/current/repository-s3-repository.html#repository-s3-permissions If you try to apply this policy AWS com…

---

## [Timelion null](https://discuss.elastic.co/t/timelion-null/92182)

<div class="topic-metadata">

**Author:** [@beckyb8](https://discuss.elastic.co/u/beckyb8)\
**Replies:** 3\
**Last updated:** [July 7, 2017, 7:00pm UTC](https://discuss.elastic.co/t/timelion-null/92182 "2017-07-07T19:00:38Z")

</div>

When I plug this in to Timelion, I get a nifty graph: .es(index=vision-\*, 'avg:cacheFetch.99thPercentile').derivative() However, when I add kibana=true: .es(index=vision-\*, kibana=true, 'avg:cacheFetch.99thPercent…

---

## [Drop Lines before multiline codec](https://discuss.elastic.co/t/drop-lines-before-multiline-codec/91500)

<div class="topic-metadata">

**Author:** [@ssstarquin](https://discuss.elastic.co/u/ssstarquin)\
**Replies:** 3\
**Last updated:** [July 5, 2017, 5:07am UTC](https://discuss.elastic.co/t/drop-lines-before-multiline-codec/91500 "2017-07-05T05:07:24Z")

</div>

I am parsing multiple files using the multiline codec . Using the following to convert the file contents into one big string and then extract patterns i need from that string. input { file { path =\> "/…

---

## [Refresh interval and segments](https://discuss.elastic.co/t/refresh-interval-and-segments/63497)

<div class="topic-metadata">

**Author:** [@Nitzan\_Dana](https://discuss.elastic.co/u/Nitzan_Dana)\
**Replies:** 3\
**Last updated:** [October 30, 2016, 11:54am UTC](https://discuss.elastic.co/t/refresh-interval-and-segments/63497 "2016-10-30T11:54:23Z")

</div>

Hi, We have time-based data organized in monthly indices, and we try to optimize our non-current indices. Due to performances issues we’re not able to just run optimize so we planned to reindex our data into new indice…

---

## [Can we read data from index into spark by query?](https://discuss.elastic.co/t/can-we-read-data-from-index-into-spark-by-query/44285)

<div class="topic-metadata">

**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\
**Replies:** 3\
**Last updated:** [March 23, 2016, 3:10am UTC](https://discuss.elastic.co/t/can-we-read-data-from-index-into-spark-by-query/44285 "2016-03-23T03:10:25Z")

</div>

Hi I want to read from ElasticSearch into Spark by python. There are some example from doc df = sqlContext.read.format("org.elasticsearch.spark.sql").load("index/type") But in this way, the whole index is read. Is i…

---

## [Unable to parse log containing UNICODE characters and ANSI colour codes using grok](https://discuss.elastic.co/t/unable-to-parse-log-containing-unicode-characters-and-ansi-colour-codes-using-grok/33487)

<div class="topic-metadata">

**Author:** [@safiyat](https://discuss.elastic.co/u/safiyat)\
**Replies:** 0\
**Last updated:** [November 2, 2015, 7:58am UTC](https://discuss.elastic.co/t/unable-to-parse-log-containing-unicode-characters-and-ansi-colour-codes-using-grok/33487 "2015-11-02T07:58:31Z")

</div>

I am trying to parse the following line: 2015-09-17 17:44:49.663 ^\[\[00;32mDEBUG oslo\_concurrency.lockutils \[^\[\[00;36m-^\[\[00;32m\] ^\[\[01;35m^\[\[00;32mAcquired semaphore "singleton\_lock"^\[\[00m ^\[\[00;33mfrom (pid=30534) loc…

---

## [Logstash Config File not running getting error: contains non-ascii characters but are not UTF-8 encoded](https://discuss.elastic.co/t/logstash-config-file-not-running-getting-error-contains-non-ascii-characters-but-are-not-utf-8-encoded/327080)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 2\
**Last updated:** [March 6, 2023, 2:24pm UTC](https://discuss.elastic.co/t/logstash-config-file-not-running-getting-error-contains-non-ascii-characters-but-are-not-utf-8-encoded/327080 "2023-03-06T14:24:27Z")

</div>

Hello All, I'm getting below error while running the logstash config,Unable to understand how it can be resolved.Eearlier it worked by now giving error. input { jdbc { jdbc\_connection\_string =\> "jdbc:oracle:thin…

[Previous page](https://discuss.elastic.co/top.md?page=1379&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1381&per_page=50&period=all)
