# Top **URL:** https://discuss.elastic.co/top.md?page=1384&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1385 --- ## [Logstash Crashed:NoMethodError: undefined method \`map\_cleanup' for nil:NilClass start at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-multiline-2.0.11/lib/logstash/codecs/identity\_map\_codec.rb:55](https://discuss.elastic.co/t/logstash-crashed-nomethoderror-undefined-method-map-cleanup-for-nil-nilclass-start-at-opt-logstash-vendor-bundle-jruby-1-9-gems-logstash-codec-multiline-2-0-11-lib-logstash-codecs-identity-map-codec-rb-55/49693)
**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\ **Replies:** 1\ **Last updated:** [May 15, 2016, 11:30am UTC](https://discuss.elastic.co/t/logstash-crashed-nomethoderror-undefined-method-map-cleanup-for-nil-nilclass-start-at-opt-logstash-vendor-bundle-jruby-1-9-gems-logstash-codec-multiline-2-0-11-lib-logstash-codecs-identity-map-codec-rb-55/49693 "2016-05-15T11:30:57Z")
Logstash crashed with the following error. NoMethodError: undefined method \`map\_cleanup' for nil:NilClass start at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-multiline-2.0.11/lib/logstash/codecs/identi… --- ## [Is there a way to mimic the \_source path for \_search in a specific document?](https://discuss.elastic.co/t/is-there-a-way-to-mimic-the--source-path-for--search-in-a-specific-document/36645)
**Author:** [@redolcas](https://discuss.elastic.co/u/redolcas)\ **Replies:** 7\ **Last updated:** [December 8, 2015, 3:49pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-mimic-the--source-path-for--search-in-a-specific-document/36645 "2015-12-08T15:49:54Z")
The resource /users/1/\_source will return data WITHOUT ANY METADATA, like: { "id" : 1, "name" : "John" } There is a way to get an array of sources WITHOUT ANY METADATA if a search is submitted to a specific docu… --- ## [Synonyms not working on 0.17.8?](https://discuss.elastic.co/t/synonyms-not-working-on-0-17-8/5569)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 8\ **Last updated:** [October 13, 2011, 1:58pm UTC](https://discuss.elastic.co/t/synonyms-not-working-on-0-17-8/5569 "2011-10-13T13:58:20Z")
Hello, I am running 0.17.8 in our dev environment and 0.16.5 in QA and production. I am doing some work around synonyms and noticed that they don't seem to be working on 0.17.8 or 0.17.7 (I had updated to .8 to che… --- ## [Crear un campo nuevo con scripted field y runtime](https://discuss.elastic.co/t/crear-un-campo-nuevo-con-scripted-field-y-runtime/275176)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 11:10am UTC](https://discuss.elastic.co/t/crear-un-campo-nuevo-con-scripted-field-y-runtime/275176 "2021-06-08T11:10:31Z")
Hola, espero que se encuentren bien! Quiero tener nuevos valores en un nuevo campo, por ejemplo, la velocidad maxima de un producto pero por tipos de producto. conosco las velocidades maximas por producto y solo quiero… --- ## [Backup dashboard in Kibana](https://discuss.elastic.co/t/backup-dashboard-in-kibana/240580)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 3\ **Last updated:** [July 10, 2020, 3:57pm UTC](https://discuss.elastic.co/t/backup-dashboard-in-kibana/240580 "2020-07-10T15:57:21Z")
Hi, I created a dashboard and it was beautiful and impressive Something goes wrong with my index and because of that I found myself delete the index and recreate it to fix the problem but then I have found that there … --- ## [SearchAPIにおけるレスポンスデータの操作について](https://discuss.elastic.co/t/searchapi/200363)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 3\ **Last updated:** [September 30, 2019, 12:42pm UTC](https://discuss.elastic.co/t/searchapi/200363 "2019-09-30T12:42:00Z")
お世話になります。 SearchAPIを使用して、Elasticsearchに貯めたデータを別システムへ連携しようとしています。 SearchAPIへのリクエストをプログラム化して、自動化するところまではできたのですが、 レスポンスのデータを操作するところでつまずいています。 \_idを指定してリクエストしたところ、下記のレスポンスを取得できました。 { "took": 407, "timed\_out": false, … --- ## [Custom query to create data table](https://discuss.elastic.co/t/custom-query-to-create-data-table/192700)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 12:02pm UTC](https://discuss.elastic.co/t/custom-query-to-create-data-table/192700 "2019-07-30T12:02:03Z")
Hi I do have the following custom query and want to create a Data Table visualization from it: GET applications\_\*/\_search { "size" : "0", "aggregations": { "by\_size": { "terms": { "field": "Size" … --- ## [Logstash different .conf inputs are mixing up entries in indexes](https://discuss.elastic.co/t/logstash-different-conf-inputs-are-mixing-up-entries-in-indexes/174144)
**Author:** [@karo](https://discuss.elastic.co/u/karo)\ **Replies:** 3\ **Last updated:** [March 27, 2019, 3:21pm UTC](https://discuss.elastic.co/t/logstash-different-conf-inputs-are-mixing-up-entries-in-indexes/174144 "2019-03-27T15:21:58Z")
Before I go on, I have tried to look through the interwebs for an answer, I scoured the forums posts so much I feel I know the elk staff member names by heart (not really). I do apologise if my insufficient research ski… --- ## [Index size explodes after \_split](https://discuss.elastic.co/t/index-size-explodes-after-split/150692)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 3\ **Last updated:** [October 17, 2018, 8:59pm UTC](https://discuss.elastic.co/t/index-size-explodes-after-split/150692 "2018-10-17T20:59:25Z")
Recently I had to split an index that had grown to 100GB on a single shard. I used the Split API to split this into 8 shards which nearly instantly created the new index with all 8 shards on the same node. I deleted the … --- ## [Mask parts of the message](https://discuss.elastic.co/t/mask-parts-of-the-message/125693)
**Author:** [@Kissa\_Koira](https://discuss.elastic.co/u/Kissa_Koira)\ **Replies:** 3\ **Last updated:** [March 29, 2018, 7:40am UTC](https://discuss.elastic.co/t/mask-parts-of-the-message/125693 "2018-03-29T07:40:32Z")
I am sending application exceptions from winlogbeat to logstash. Some parts of the message might contain information I want to mask. For example User and Host. How can I do that? Matched string is: "message" =\> "27.03.2… --- ## [Timeout - Pipeline blocked](https://discuss.elastic.co/t/timeout-pipeline-blocked/97519)
**Author:** [@g4nj4wizard](https://discuss.elastic.co/u/g4nj4wizard)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 10:14am UTC](https://discuss.elastic.co/t/timeout-pipeline-blocked/97519 "2017-08-18T10:14:44Z")
Hi. I’m new to this project and i am experiencing a big issue, since i added all the Clients (15 Server) for monitoring. Since i added these server, the response Time grew massively and now it doesn’t even respond. I a… --- ## [Can not split by number fields in multi metric machine learning jobs](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081)
**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 12:20pm UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081 "2017-07-14T12:20:33Z")
Hello. I have web server logs which contains numeric field response\_code. But I can not use this field in "Split Data" at machine learning multi metric jobs. In fact no numeric fields are showed here. Is this by design? --- ## [Définition de types : parent/enfant, à plat ou multi-types?](https://discuss.elastic.co/t/definition-de-types-parent-enfant-a-plat-ou-multi-types/87772)
**Author:** [@M4nd76](https://discuss.elastic.co/u/M4nd76)\ **Replies:** 3\ **Last updated:** [June 1, 2017, 3:40pm UTC](https://discuss.elastic.co/t/definition-de-types-parent-enfant-a-plat-ou-multi-types/87772 "2017-06-01T15:40:42Z")
Bonjour, Nous sommes en pleine réflexion pour revoir nos types de documents suite à la mise en place d'une nouvelle architecture de notre projet. Nous souhaitons mettre en place une architecture avec une application … --- ## [Import export saved search via curl request](https://discuss.elastic.co/t/import-export-saved-search-via-curl-request/82214)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [April 12, 2017, 7:39pm UTC](https://discuss.elastic.co/t/import-export-saved-search-via-curl-request/82214 "2017-04-12T19:39:47Z")
Hello, I am wondering if I could export/import saved searches via curl request from kibana5. Regards, Peter --- ## [Filebeat is not taking new entries from overwritten file](https://discuss.elastic.co/t/filebeat-is-not-taking-new-entries-from-overwritten-file/79062)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 3\ **Last updated:** [March 20, 2017, 10:24am UTC](https://discuss.elastic.co/t/filebeat-is-not-taking-new-entries-from-overwritten-file/79062 "2017-03-20T10:24:40Z")
Hi, I am using ELK GA 5.0.0. In my Linux box, I am pushing vmstat entries to a file using the following shell script; #!/bin/bash while true do \>vmstatlog.log echo "\`vmstat\`"$'\\n' \>\> vmstatlog.log sleep 2 done Th… --- ## [Kibana 5.2.1 visualisation unexpectedly blank](https://discuss.elastic.co/t/kibana-5-2-1-visualisation-unexpectedly-blank/77029)
**Author:** [@awconstable](https://discuss.elastic.co/u/awconstable)\ **Replies:** 3\ **Last updated:** [March 17, 2017, 7:32am UTC](https://discuss.elastic.co/t/kibana-5-2-1-visualisation-unexpectedly-blank/77029 "2017-03-17T07:32:53Z")
Hi, I'm experiencing a problem with visualising data in Kibana 5.2.1/Elasticsearch 5.2.1. The discover pane displays the data and count but when I try to plot this on a graph, it's blank. There's nothing seemingly inter… --- ## [Docs missing from a replica](https://discuss.elastic.co/t/docs-missing-from-a-replica/57382)
**Author:** [@Michael\_Hart](https://discuss.elastic.co/u/Michael_Hart)\ **Replies:** 3\ **Last updated:** [August 8, 2016, 4:00pm UTC](https://discuss.elastic.co/t/docs-missing-from-a-replica/57382 "2016-08-08T16:00:51Z")
I am missing documents from some shard replicas, looking for advice on how to debug this further. The initial symptom is that an update on a document id failed, further investigation showed that some nodes could search f… --- ## [\[SOLVED\]How to match index pattern](https://discuss.elastic.co/t/solved-how-to-match-index-pattern/47751)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 3\ **Last updated:** [April 19, 2016, 7:49am UTC](https://discuss.elastic.co/t/solved-how-to-match-index-pattern/47751 "2016-04-19T07:49:42Z")
Hello, How can I match indexnames in kibana in this format: logstash-YYYY-MM\_version Example index names logstash-2015-12\_v001; logstash-2014-07\_v003 (version is there to know what to reindex and what is already new ve… --- ## [Settings-\>Configure an index pattern - can I specify a type?](https://discuss.elastic.co/t/settings-configure-an-index-pattern-can-i-specify-a-type/34165)
**Author:** [@jsps](https://discuss.elastic.co/u/jsps)\ **Replies:** 3\ **Last updated:** [November 10, 2015, 9:20pm UTC](https://discuss.elastic.co/t/settings-configure-an-index-pattern-can-i-specify-a-type/34165 "2015-11-10T21:20:07Z")
So in the Settings-\>Configure an index pattern, is there a way to specifcy a type? My index has 4 document types, all with different date fields - when I go to create the index pattern i get the choice of all these dat… --- ## [Newbie question about relevance](https://discuss.elastic.co/t/newbie-question-about-relevance/11501)
**Author:** [@Steffen\_Larsen](https://discuss.elastic.co/u/Steffen_Larsen)\ **Replies:** 3\ **Last updated:** [April 10, 2013, 12:30pm UTC](https://discuss.elastic.co/t/newbie-question-about-relevance/11501 "2013-04-10T12:30:06Z")
Hi, I'm quite new in this area of elastic search, lucene etc. So I have quite a basic question. How do I compare multiple document and see their relevance in the different field. E.g. I have two documents, c… --- ## [Osquery has results but not displaying them](https://discuss.elastic.co/t/osquery-has-results-but-not-displaying-them/334606)
**Author:** [@meni0n](https://discuss.elastic.co/u/meni0n)\ **Replies:** 2\ **Last updated:** [June 19, 2023, 1:01pm UTC](https://discuss.elastic.co/t/osquery-has-results-but-not-displaying-them/334606 "2023-06-19T13:01:01Z")
I have osquery agent returning results but the result page keeping saying "1 agent has responded, no osquery data has been reported." --- ## [Logstash won't authenticate with elasticsearch](https://discuss.elastic.co/t/logstash-wont-authenticate-with-elasticsearch/129807)
**Author:** [@jarnold](https://discuss.elastic.co/u/jarnold)\ **Replies:** 2\ **Last updated:** [May 4, 2018, 2:29pm UTC](https://discuss.elastic.co/t/logstash-wont-authenticate-with-elasticsearch/129807 "2018-05-04T14:29:54Z")
Hello, I'm setting up a new stack & i'm having some trouble with my logstash authentication. I'm getting this error after startup; Sending Logstash's logs to /usr/share/logstash/logs which is now configured via log4j2.… --- ## [Can't turn on monitoring](https://discuss.elastic.co/t/cant-turn-on-monitoring/290356)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 4\ **Last updated:** [December 1, 2021, 11:42am UTC](https://discuss.elastic.co/t/cant-turn-on-monitoring/290356 "2021-12-01T11:42:01Z")
Hi, I have installed Kibana for the new cluster. When going to Stack Monitoring. It shows “We couldn't activate monitoring” In addition log prints “Unable to bulk upload the stats payload to the local cluster” Dev to… --- ## [Cisco Filebeat Issues](https://discuss.elastic.co/t/cisco-filebeat-issues/277890)
**Author:** [@codersoul](https://discuss.elastic.co/u/codersoul)\ **Replies:** 4\ **Last updated:** [July 7, 2021, 1:36am UTC](https://discuss.elastic.co/t/cisco-filebeat-issues/277890 "2021-07-07T01:36:18Z")
Hi, I'm working with Filebeat and Cisco Module in a Lab. I am ingesting data from Cisco AMP, everything work as expected , but I getting this error in Filebeat logs. Jul 02 09:26:48 cstxsvngs01 filebeat\[25410\]: 2021-07… --- ## [Query\_string with wildcard](https://discuss.elastic.co/t/query-string-with-wildcard/270061)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 4\ **Last updated:** [April 15, 2021, 6:57am UTC](https://discuss.elastic.co/t/query-string-with-wildcard/270061 "2021-04-15T06:57:53Z")
I am having latest ES and set a field in mapping to keyword and index: true. I need to use wildcard so this example from your web is perfect match: { "query": { "query\_string" : { "query" : … --- ## [Using Upsert across index](https://discuss.elastic.co/t/using-upsert-across-index/214465)
**Author:** [@smo](https://discuss.elastic.co/u/smo)\ **Replies:** 4\ **Last updated:** [January 9, 2020, 5:22pm UTC](https://discuss.elastic.co/t/using-upsert-across-index/214465 "2020-01-09T17:22:27Z")
I use this config to insert document in ES :\`\`\` output { if \[type\] == "usage" { elasticsearch { hosts =\> \["elastic4:9204"\] index =\> "usage-%{+YYYY-MM}" document\_id =\> "%{IDSU}" action =\> "update" doc\_as\_upsert =\> … --- ## [Kibana 6.7.2 OSS does not have the option to generate or share the report](https://discuss.elastic.co/t/kibana-6-7-2-oss-does-not-have-the-option-to-generate-or-share-the-report/197935)
**Author:** [@rahul\_mohan](https://discuss.elastic.co/u/rahul_mohan)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 8:00pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-oss-does-not-have-the-option-to-generate-or-share-the-report/197935 "2019-09-03T20:00:13Z")
Hello, I am using docker.elastic.co/kibana/kibana-oss 6.7.2 I can not find a way to generate the CSV report ans share it in anyway. I have a restriction of using the oss version of kibana 6.7.2 All I get is below C… --- ## [How to generate PDF Report of Dashboard and Visualizations in Kibana Version 6.5.4 or higher?](https://discuss.elastic.co/t/how-to-generate-pdf-report-of-dashboard-and-visualizations-in-kibana-version-6-5-4-or-higher/188956)
**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\ **Replies:** 4\ **Last updated:** [July 22, 2019, 12:57pm UTC](https://discuss.elastic.co/t/how-to-generate-pdf-report-of-dashboard-and-visualizations-in-kibana-version-6-5-4-or-higher/188956 "2019-07-22T12:57:23Z")
Hello Everybody, I am new to Elasticsearch and Kibana. I would like to know how can i generate PDF report of Dashboards and Visualizations in Kibana. Is X-Pack the only solution for this feature? It seems that X-Pack … --- ## [Log archiving - Difference between ES vs LS](https://discuss.elastic.co/t/log-archiving-difference-between-es-vs-ls/109792)
**Author:** [@minidan](https://discuss.elastic.co/u/minidan)\ **Replies:** 4\ **Last updated:** [November 30, 2017, 5:00pm UTC](https://discuss.elastic.co/t/log-archiving-difference-between-es-vs-ls/109792 "2017-11-30T17:00:54Z")
Hi, I'm brand new to this and learning as I go slowly. I've setup a ELK stack to store windows event logs, which had been working successfully. I'm unclear on one point though, at present I am sending direct from winbe… --- ## [ES Coexistence with other projects using different gradle versions](https://discuss.elastic.co/t/es-coexistence-with-other-projects-using-different-gradle-versions/66803)
**Author:** [@ferdamravenec](https://discuss.elastic.co/u/ferdamravenec)\ **Replies:** 4\ **Last updated:** [November 22, 2016, 8:43pm UTC](https://discuss.elastic.co/t/es-coexistence-with-other-projects-using-different-gradle-versions/66803 "2016-11-22T20:43:43Z")
I just built Elasticsearch for the first time. I followed the CONTRIBUTING.MD instructions, sort of. There was a circular aspect to this journey. "First install gradle. It must be version 2.13." I already had two … --- ## [Logstash 1.5.5 compatablity](https://discuss.elastic.co/t/logstash-1-5-5-compatablity/42234)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 4\ **Last updated:** [February 19, 2016, 6:26pm UTC](https://discuss.elastic.co/t/logstash-1-5-5-compatablity/42234 "2016-02-19T18:26:00Z")
whats the highest version of elasticsearch that this version is compatibale with? --- ## [Has\_child not working as expected inside has\_parent](https://discuss.elastic.co/t/has-child-not-working-as-expected-inside-has-parent/259992)
**Author:** [@Waseem\_Farooqui](https://discuss.elastic.co/u/Waseem_Farooqui)\ **Replies:** 0\ **Last updated:** [January 1, 2021, 12:11pm UTC](https://discuss.elastic.co/t/has-child-not-working-as-expected-inside-has-parent/259992 "2021-01-01T12:11:35Z")
I have a parent child relationship in my elasticsearch 7.9 where I am having the car as a parent type and it has multiple child types like honda, suzuki, volvo now I want to have a child of type volvo and parent type is … --- ## [Long field causing pipeline exception](https://discuss.elastic.co/t/long-field-causing-pipeline-exception/71425)
**Author:** [@mhooper](https://discuss.elastic.co/u/mhooper)\ **Replies:** 0\ **Last updated:** [January 12, 2017, 7:19pm UTC](https://discuss.elastic.co/t/long-field-causing-pipeline-exception/71425 "2017-01-12T19:19:32Z")
Hello. When parsing error logs once in a while we get extremely long messages (1M). Obviously this breaks the 32K index limit so I was looking at solutions. I found a rangefilter plugin that would allow me accept a ran… --- ## [How to query count of nested elasticsearch inner\_hits document](https://discuss.elastic.co/t/how-to-query-count-of-nested-elasticsearch-inner-hits-document/115622)
**Author:** [@smithyj](https://discuss.elastic.co/u/smithyj)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 2:37am UTC](https://discuss.elastic.co/t/how-to-query-count-of-nested-elasticsearch-inner-hits-document/115622 "2018-01-16T02:37:27Z")
How to count of nested elasticsearch inner\_hits document This is Mappings and Data PUT /xxx\_index { "mappings": { "doc": { "properties": { "interaction": { "type": "object", "pro… --- ## [Logstash GeoIP filter plugin not working after update to 7.15.1](https://discuss.elastic.co/t/logstash-geoip-filter-plugin-not-working-after-update-to-7-15-1/286989)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 5:23am UTC](https://discuss.elastic.co/t/logstash-geoip-filter-plugin-not-working-after-update-to-7-15-1/286989 "2021-10-20T05:23:13Z")
Hi, I am running a logstash server with 7.14.0 and one of my pipelines uses the geoip filter plugin. After upgrade to 7.15.1, the pipeline refuses to start with an error like \[2021-10-18T17:22:08,987\]\[ERROR\]\[logstash.j… --- ## [Matching Logstash and Elasticsearch data stream configuration](https://discuss.elastic.co/t/matching-logstash-and-elasticsearch-data-stream-configuration/281323)
**Author:** [@jze1](https://discuss.elastic.co/u/jze1)\ **Replies:** 2\ **Last updated:** [August 15, 2021, 10:44pm UTC](https://discuss.elastic.co/t/matching-logstash-and-elasticsearch-data-stream-configuration/281323 "2021-08-15T22:44:40Z")
Hello, can someone shed some light into configuration of logstash/data streams? I have a bunch of apps (kubernetes pods) and I need to store logs of some for one year and the rest just for one week. I found out that by… --- ## [Elasticsearch crash because of JVM fatal error](https://discuss.elastic.co/t/elasticsearch-crash-because-of-jvm-fatal-error/185055)
**Author:** [@xiang-liu-exa](https://discuss.elastic.co/u/xiang-liu-exa)\ **Replies:** 2\ **Last updated:** [June 10, 2019, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-crash-because-of-jvm-fatal-error/185055 "2019-06-10T22:17:03Z")
Elasticsearch version 6.2.4 The error before the process crash: Jun 08 10:45:44 xxx-168-24 docker\[11136\]: # Jun 08 10:45:44 xxx-168-24 docker\[11136\]: # A fatal error has been detected by the Java Runtime Environment: … --- ## [How i can use \*\*bool query\*\* in \*\*post\_filter\*\*](https://discuss.elastic.co/t/how-i-can-use-bool-query-in-post-filter/163812)
**Author:** [@rria](https://discuss.elastic.co/u/rria)\ **Replies:** 2\ **Last updated:** [January 11, 2019, 9:21am UTC](https://discuss.elastic.co/t/how-i-can-use-bool-query-in-post-filter/163812 "2019-01-11T09:21:41Z")
I I tried this search but not working GET ecommerce/products/\_search { "size": 0, "aggs": { "all\_color": { "terms": { "field": "color.keyword" } } }, "post\_filter": { "query": {… --- ## [Plotting Time Series With No Aggregation in Kibana](https://discuss.elastic.co/t/plotting-time-series-with-no-aggregation-in-kibana/146630)
**Author:** [@Tanatos\_Daniel](https://discuss.elastic.co/u/Tanatos_Daniel)\ **Replies:** 2\ **Last updated:** [September 1, 2018, 8:11am UTC](https://discuss.elastic.co/t/plotting-time-series-with-no-aggregation-in-kibana/146630 "2018-09-01T08:11:01Z")
I have these daily records (DayOfTheYear\*, NumericValue) that span multiple years and I would like to plot them in the same histogram to visually try to spot similarities. I actually managed to plot them using split ser… --- ## [Canvas doesn't works with SearchGuard](https://discuss.elastic.co/t/canvas-doesnt-works-with-searchguard/138625)
**Author:** [@w33ladalah](https://discuss.elastic.co/u/w33ladalah)\ **Replies:** 2\ **Last updated:** [July 5, 2018, 1:36pm UTC](https://discuss.elastic.co/t/canvas-doesnt-works-with-searchguard/138625 "2018-07-05T13:36:54Z")
Hello, I have installed ELK stack with version 6.3.0 and I also install Canvas plugin in Kibana. But it seems does not works because there is authentication issues when Canvas create request to Elasticsearch. I am uses … --- ## [GeoPoint precision](https://discuss.elastic.co/t/geopoint-precision/62359)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 2\ **Last updated:** [October 7, 2016, 9:04am UTC](https://discuss.elastic.co/t/geopoint-precision/62359 "2016-10-07T09:04:51Z")
Hello! Today we got a strange failure in our application tests : app wrote 10.783551695140882 but got 10.783551695140883 in reply. I know that everything after eight number after decimal point doesn't make sense, bu… --- ## [Crash when loading IPv6 GeoIP database](https://discuss.elastic.co/t/crash-when-loading-ipv6-geoip-database/48227)
**Author:** [@icb](https://discuss.elastic.co/u/icb)\ **Replies:** 2\ **Last updated:** [April 23, 2016, 11:05pm UTC](https://discuss.elastic.co/t/crash-when-loading-ipv6-geoip-database/48227 "2016-04-23T23:05:56Z")
I'm wanting to be able to geolocate IPv6 addresses. MaxMind publish a free (beta) IPv6 database along side their free IPv4 database, but when I configure it, logstash crashes during initialization. Has anyone gotten this… --- ## [Hot Thread Wheel Timer](https://discuss.elastic.co/t/hot-thread-wheel-timer/38281)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 2\ **Last updated:** [January 3, 2016, 9:07pm UTC](https://discuss.elastic.co/t/hot-thread-wheel-timer/38281 "2016-01-03T21:07:59Z")
Hello all, I see on and off when I query hot\_threads the following 0.0% (193.2micros out of 500ms) cpu usage by thread 'elasticsearch\[CLIENT\_02\]\[transport\_client\_timer\]\[T#1\]{Hashed wheel timer #1}' 10/10 snaps… --- ## [Search query doesn't return document](https://discuss.elastic.co/t/search-query-doesnt-return-document/32933)
**Author:** [@Grauen](https://discuss.elastic.co/u/Grauen)\ **Replies:** 2\ **Last updated:** [October 25, 2015, 1:44pm UTC](https://discuss.elastic.co/t/search-query-doesnt-return-document/32933 "2015-10-25T13:44:36Z")
I'm using ela 2.0.0-rc1. When I try to use the search query, to retrieve documents, elasticsearch will return { "\_index": "myindex", "\_type": "\_all", "\_id": "\_search'", "found": false } This is how I add… --- ## [Issue with datastream, each similar datastream have own hidden index](https://discuss.elastic.co/t/issue-with-datastream-each-similar-datastream-have-own-hidden-index/327201)
**Author:** [@danoque](https://discuss.elastic.co/u/danoque)\ **Replies:** 5\ **Last updated:** [March 14, 2023, 8:45am UTC](https://discuss.elastic.co/t/issue-with-datastream-each-similar-datastream-have-own-hidden-index/327201 "2023-03-14T08:45:11Z")
I have issue after i configured datastream without "Component Templates". I created datastream with , so like this: "my-index-pattern-" in field "Index patterns". And then, each day elastic creats new datastream with h… --- ## [Elasticsearch data nodes - disk usage optimisation](https://discuss.elastic.co/t/elasticsearch-data-nodes-disk-usage-optimisation/325544)
**Author:** [@chethan\_m](https://discuss.elastic.co/u/chethan_m)\ **Replies:** 5\ **Last updated:** [February 20, 2023, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes-disk-usage-optimisation/325544 "2023-02-20T17:36:15Z")
I have an elasticsearch deployed on kubenetes/aws platform. I'm observing that Disk Free Space is not equal in the data nodes. I have 4 data nodes out of which, Two data nodes have around 1 TB free disk space One … --- ## [How metricbeat to monitor Filebeat running in Daemonset on K8s](https://discuss.elastic.co/t/how-metricbeat-to-monitor-filebeat-running-in-daemonset-on-k8s/299397)
**Author:** [@cmy214](https://discuss.elastic.co/u/cmy214)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 5:23am UTC](https://discuss.elastic.co/t/how-metricbeat-to-monitor-filebeat-running-in-daemonset-on-k8s/299397 "2022-03-17T05:23:42Z")
Hi all, My filebeat is in Daemonset on K8s cluster. In 7.17 internal monitoring of beats is removed and requires a separate metricbeat for achieving monitoring. So I'm setting up metricbeat as Daemonset to monitor my … --- ## [Multiple Elasticsearch Filters in one Logstash Pipeline](https://discuss.elastic.co/t/multiple-elasticsearch-filters-in-one-logstash-pipeline/283087)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 5\ **Last updated:** [September 1, 2021, 6:49pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-filters-in-one-logstash-pipeline/283087 "2021-09-01T18:49:29Z")
Is it possible to do multiple Elasticsearch lookup filters to search multiple indices in a single Logstash pipeline? --- ## [Platinum Licensed cluster using CCS against a Basic Licensed cluster](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 5\ **Last updated:** [May 7, 2020, 11:21am UTC](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346 "2020-05-07T11:21:42Z")
Not sure if this idea is going to be offensive or not, but hear me out. We have a pretty standard log searching setup internally, spread across 40 nodes. It's kind of a pet project for some of our analysts. This setup… --- ## [\[ES5.6\] Unassigned Shards due to DANGLING\_INDEX\_IMPORTED](https://discuss.elastic.co/t/es5-6-unassigned-shards-due-to-dangling-index-imported/204739)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 5\ **Last updated:** [October 29, 2019, 7:30pm UTC](https://discuss.elastic.co/t/es5-6-unassigned-shards-due-to-dangling-index-imported/204739 "2019-10-29T19:30:04Z")
We are seeing multiple cases where an index was deleted \> 1 month ago but after a node restart the shards of this index becomes unassigned due to DANGLING\_INDEX\_IMPORTED. Actually, the corresponding index uuuid folder i… [Previous page](https://discuss.elastic.co/top.md?page=1383&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1385&per_page=50&period=all)