# Top **URL:** https://discuss.elastic.co/top.md?page=1387&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1388 --- ## [Split brain, confused master: failed to send rejoin request to \](https://discuss.elastic.co/t/split-brain-confused-master-failed-to-send-rejoin-request-to-host/9767)
**Author:** [@wvl](https://discuss.elastic.co/u/wvl)\ **Replies:** 8\ **Last updated:** [November 26, 2012, 11:15pm UTC](https://discuss.elastic.co/t/split-brain-confused-master-failed-to-send-rejoin-request-to-host/9767 "2012-11-26T23:15:45Z")
Nothing showed up on google, so here we go: Currently 3 nodes don't want to join the cluster of 15+ nodes. one of the nodes logs: \[2012-11-20 07:17:35,623\]\[DEBUG\]\[discovery.zen.fd \] \[es-028\] \[master\] s… --- ## [No SQL tracing for .net 5](https://discuss.elastic.co/t/no-sql-tracing-for-net-5/279609)
**Author:** [@Danny\_Stommen](https://discuss.elastic.co/u/Danny_Stommen)\ **Replies:** 5\ **Last updated:** [July 29, 2021, 8:27am UTC](https://discuss.elastic.co/t/no-sql-tracing-for-net-5/279609 "2021-07-29T08:27:27Z")
Hi, Basically I'm experiecing the same issue as described here: Which should be fixed here: However, I still don't have any traces for any SQL transaction. Our API is running .NET 5 (inside kubernetes). Elastic.Ap… --- ## [Indices are not visble in Kibana](https://discuss.elastic.co/t/indices-are-not-visble-in-kibana/122908)
**Author:** [@TechGeek](https://discuss.elastic.co/u/TechGeek)\ **Replies:** 5\ **Last updated:** [March 7, 2018, 11:25pm UTC](https://discuss.elastic.co/t/indices-are-not-visble-in-kibana/122908 "2018-03-07T23:25:24Z")
// My current indices created from mutiple pipe line using --path.data in logstash. \[image\] Using latest version of Kibana 6.2.1 . First index reports is visible in Kibana, but second index (changerpt) is not visible o… --- ## [ELK creates lots of hidden files](https://discuss.elastic.co/t/elk-creates-lots-of-hidden-files/91748)
**Author:** [@nousees](https://discuss.elastic.co/u/nousees)\ **Replies:** 5\ **Last updated:** [July 5, 2017, 9:45am UTC](https://discuss.elastic.co/t/elk-creates-lots-of-hidden-files/91748 "2017-07-05T09:45:21Z")
Hello everybody, I've just installed logstash, elasticsearch and kibana. The issue is that I've found lots of hidden files with this format: .1015766.51411.253032 .200184.53366.432265 I've found it in several dire… --- ## [Kibana/Kibi no errors but cant acess remotely](https://discuss.elastic.co/t/kibana-kibi-no-errors-but-cant-acess-remotely/66844)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 5\ **Last updated:** [November 22, 2016, 5:52pm UTC](https://discuss.elastic.co/t/kibana-kibi-no-errors-but-cant-acess-remotely/66844 "2016-11-22T17:52:27Z")
Hey, i just upgraded to ElasticSearch 5.0 and then i did a new instalation of kibana 5 (before i was using kibi). Everything runs with no problem. I see that the old data from previous elasticsearch installation is th… --- ## [Creating a tag out of the extracted field from the message](https://discuss.elastic.co/t/creating-a-tag-out-of-the-extracted-field-from-the-message/33753)
**Author:** [@swetav](https://discuss.elastic.co/u/swetav)\ **Replies:** 5\ **Last updated:** [November 5, 2015, 3:13pm UTC](https://discuss.elastic.co/t/creating-a-tag-out-of-the-extracted-field-from-the-message/33753 "2015-11-05T15:13:42Z")
Hi I have parsed a log using "COMBINEDAPACHELOG". filter{ grok { match =\> \[ "message", "%{COMBINEDAPACHELOG}" \] } } It's working well but now i need to extract string from the message tag and crerate a new… --- ## [How do you specify the "forbidden hours" in the Detection Rule "Auditd Login Attempt at Forbidden Time"](https://discuss.elastic.co/t/how-do-you-specify-the-forbidden-hours-in-the-detection-rule-auditd-login-attempt-at-forbidden-time/279713)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 2\ **Last updated:** [July 28, 2021, 11:29am UTC](https://discuss.elastic.co/t/how-do-you-specify-the-forbidden-hours-in-the-detection-rule-auditd-login-attempt-at-forbidden-time/279713 "2021-07-28T11:29:30Z")
I came across that Detection Rule but it seems unusual to me that i cannot specify the "Forbidden Times" somehow. My guess is that auditd has that event that can be triggered but the thing is that somehow you can control… --- ## [Unable to search all fields for IP address](https://discuss.elastic.co/t/unable-to-search-all-fields-for-ip-address/208141)
**Author:** [@JSkier](https://discuss.elastic.co/u/JSkier)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 12:12am UTC](https://discuss.elastic.co/t/unable-to-search-all-fields-for-ip-address/208141 "2019-11-16T00:12:00Z")
I'm trying to search for an IP (example query on search page: 127.0.0.1), and the results indicate 0. If I put \*.ip:127.0.0.1 it works fine (I get results with desintation and source IPs). My concern and question is, sh… --- ## [How to model indexes for complex availability searches](https://discuss.elastic.co/t/how-to-model-indexes-for-complex-availability-searches/7658)
**Author:** [@Donald\_Piret](https://discuss.elastic.co/u/Donald_Piret)\ **Replies:** 2\ **Last updated:** [February 23, 2016, 1:48pm UTC](https://discuss.elastic.co/t/how-to-model-indexes-for-complex-availability-searches/7658 "2016-02-23T13:48:41Z")
So I've got an interesting problem that I might need some help with. I'm trying to figure out how to model the indexes and queries for our search problem but am pretty much at a loss so would really appreciate if a… --- ## [Status code 403 unauthorized for user \[\_anonymous\] is returned for anonymous user with a custom role which is Stack Management plugin not displayed](https://discuss.elastic.co/t/status-code-403-unauthorized-for-user-anonymous-is-returned-for-anonymous-user-with-a-custom-role-which-is-stack-management-plugin-not-displayed/267586)
**Author:** [@thiton](https://discuss.elastic.co/u/thiton)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 5:51pm UTC](https://discuss.elastic.co/t/status-code-403-unauthorized-for-user-anonymous-is-returned-for-anonymous-user-with-a-custom-role-which-is-stack-management-plugin-not-displayed/267586 "2021-03-18T17:51:53Z")
Is that possible to configure Elasticsearch and Kibana for anonymous user with a custom role which is Stack Management plugin in NOT displayed when security is turned off? Many thanks in advance. Below are my steps: … --- ## [APM RUM Click events - Transaction Names](https://discuss.elastic.co/t/apm-rum-click-events-transaction-names/222496)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 2:11pm UTC](https://discuss.elastic.co/t/apm-rum-click-events-transaction-names/222496 "2020-03-09T14:11:24Z")
Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: APM RUM Angular 0.4.3 I wanted to report some feedback on the recent update of capturing user interaction c… --- ## [Index doesn't work, but why?](https://discuss.elastic.co/t/index-doesnt-work-but-why/151058)
**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\ **Replies:** 2\ **Last updated:** [October 5, 2018, 6:36am UTC](https://discuss.elastic.co/t/index-doesnt-work-but-why/151058 "2018-10-05T06:36:35Z")
Hello, i am new to EKB. I try to learn EKB 6.4.0 and i am at Watcher/Altering. It works fine with Logging Action. Now i want to run Index Action. I want to write certain index entries to a new index. This is my watch: … --- ## [Discover query but only show the first line of a field](https://discuss.elastic.co/t/discover-query-but-only-show-the-first-line-of-a-field/146917)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [September 4, 2018, 12:45pm UTC](https://discuss.elastic.co/t/discover-query-but-only-show-the-first-line-of-a-field/146917 "2018-09-04T12:45:06Z")
Hi, I'm a Kibana newbie but used to work in Splunk and I'm trying to put together a saved search but one of the fields I'm trying to query has at times multiple lines in that field. The field in question mostly has all t… --- ## [Processor -\> split -\> set array.element?](https://discuss.elastic.co/t/processor-split-set-array-element/83941)
**Author:** [@Zachary\_Buckholz](https://discuss.elastic.co/u/Zachary_Buckholz)\ **Replies:** 2\ **Last updated:** [April 28, 2017, 1:53pm UTC](https://discuss.elastic.co/t/processor-split-set-array-element/83941 "2017-04-28T13:53:14Z")
I posted a similar question to the elasticsearch forum since it appeared to be more of an intrinsic ES problem. But I am not sure. I have the following filebeat yaml. Basically I am attempting to split based on \\t (t… --- ## [Graph 2.3.0 problem](https://discuss.elastic.co/t/graph-2-3-0-problem/45946)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 2\ **Last updated:** [March 31, 2016, 1:47pm UTC](https://discuss.elastic.co/t/graph-2-3-0-problem/45946 "2016-03-31T13:47:58Z")
I just installed Kibana 4.5, elasticsearch 2.3 with graph 2.3.0. When I select an index and data to graph, I have this error: Anybody can help me with this problem ? --- ## [Timestamp and @timestamp problem with a big gap](https://discuss.elastic.co/t/timestamp-and-timestamp-problem-with-a-big-gap/27948)
**Author:** [@michaelzoet](https://discuss.elastic.co/u/michaelzoet)\ **Replies:** 2\ **Last updated:** [August 24, 2015, 2:46pm UTC](https://discuss.elastic.co/t/timestamp-and-timestamp-problem-with-a-big-gap/27948 "2015-08-24T14:46:36Z")
Hello all, I have a Logstash, Elasticsearch, Kibana, Logstash-forwarder setup running. Now I found a problem with the timestamp and @timestamp mismatch on some logfile types. I have no issue with syslog, Apache and Pos… --- ## [Different aggregation count for the same value](https://discuss.elastic.co/t/different-aggregation-count-for-the-same-value/324566)
**Author:** [@mbklein](https://discuss.elastic.co/u/mbklein)\ **Replies:** 0\ **Last updated:** [February 2, 2023, 4:47pm UTC](https://discuss.elastic.co/t/different-aggregation-count-for-the-same-value/324566 "2023-02-02T16:47:22Z")
I don't understand the results I'm seeing. I am asking for two different aggs in the same query. The first is “show me the doc counts for subject.label for these specific values,” and the second is “show me the doc count… --- ## [Can't set different values to the same field in different documents using updateByQuery](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407)
**Author:** [@Shahak\_Gabay](https://discuss.elastic.co/u/Shahak_Gabay)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:51am UTC](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407 "2020-05-13T09:51:40Z")
Hi, Using elasticsearch-7.5.2 with NEST client I'm trying to iterate through all documents in an update\_by\_query request and set different values to the same field (called wcf) in each doc. My code looks like this: va… --- ## [\_update\_by\_query - Update with match criteria in other index](https://discuss.elastic.co/t/update-by-query-update-with-match-criteria-in-other-index/135450)
**Author:** [@lyteh](https://discuss.elastic.co/u/lyteh)\ **Replies:** 0\ **Last updated:** [June 12, 2018, 2:50am UTC](https://discuss.elastic.co/t/update-by-query-update-with-match-criteria-in-other-index/135450 "2018-06-12T02:50:22Z")
I trying to loop thrus a single index (eg: userprofiles) and update the single field (eg: user\_type) if the userprofiles.NAME is exist in other index (eg: badlistedusers) Can "\_update\_by\_query" API do that? userprofile… --- ## [Kibana Vertical Split bar, Range aggregation for two fields](https://discuss.elastic.co/t/kibana-vertical-split-bar-range-aggregation-for-two-fields/173389)
**Author:** [@Mariner191](https://discuss.elastic.co/u/Mariner191)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 12:09pm UTC](https://discuss.elastic.co/t/kibana-vertical-split-bar-range-aggregation-for-two-fields/173389 "2019-03-22T12:09:32Z")
Hello everyone, When Vertical Split bar, Range aggregation. For two fields, how to add Split bars, for a second Field? Example (lower left): however x-axis is Terms Thank you! --- ## [Incremental snapshots - delete index, take another snapshot and then restore the index](https://discuss.elastic.co/t/incremental-snapshots-delete-index-take-another-snapshot-and-then-restore-the-index/56919)
**Author:** [@elssar](https://discuss.elastic.co/u/elssar)\ **Replies:** 1\ **Last updated:** [August 2, 2016, 2:48am UTC](https://discuss.elastic.co/t/incremental-snapshots-delete-index-take-another-snapshot-and-then-restore-the-index/56919 "2016-08-02T02:48:54Z")
Hi, My cluster has manual snapshots taken every 30 minutes. The indicies are rotated monthly, and all similar indices are part of the same alias. I'm planning on retiring some of the older indices. This is probably… --- ## [My index loses data every 30 days](https://discuss.elastic.co/t/my-index-loses-data-every-30-days/202015)
**Author:** [@Lotfi\_Zaouai](https://discuss.elastic.co/u/Lotfi_Zaouai)\ **Replies:** 6\ **Last updated:** [October 9, 2019, 9:12am UTC](https://discuss.elastic.co/t/my-index-loses-data-every-30-days/202015 "2019-10-09T09:12:05Z")
I use Elasticsearch and Kibana, I submit my data with the bulk API in vb.net program. I did not make any special configuration in elastic search. here is the content of the file elasticsearch.yml : bootstrap.memory\_l… --- ## [Can we manipulate the idf calculation field in Elasticsearch?](https://discuss.elastic.co/t/can-we-manipulate-the-idf-calculation-field-in-elasticsearch/88561)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 6\ **Last updated:** [June 8, 2017, 7:45am UTC](https://discuss.elastic.co/t/can-we-manipulate-the-idf-calculation-field-in-elasticsearch/88561 "2017-06-08T07:45:14Z")
Hi I am facing an issue and I may sound silly in asking this but really need to know if any solution to this is available. The condition being I have two fields title and statement. Title where as is a small field wi… --- ## [\[slm\] Snapshots are just ignored when scheduled, but manual \_execute works](https://discuss.elastic.co/t/slm-snapshots-are-just-ignored-when-scheduled-but-manual-execute-works/321429)
**Author:** [@stouch](https://discuss.elastic.co/u/stouch)\ **Replies:** 4\ **Last updated:** [December 30, 2022, 1:28pm UTC](https://discuss.elastic.co/t/slm-snapshots-are-just-ignored-when-scheduled-but-manual-execute-works/321429 "2022-12-30T13:28:18Z")
I have a got a S3 repository and a slm policy. I can execute this policy manually : Snapshot is created, last success of this manual execution appears well, no failures. So I set up the scheduled cron : After the cron t… --- ## [How to access Records from Elasticsearch using python dynamically](https://discuss.elastic.co/t/how-to-access-records-from-elasticsearch-using-python-dynamically/192248)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 3:00pm UTC](https://discuss.elastic.co/t/how-to-access-records-from-elasticsearch-using-python-dynamically/192248 "2019-08-16T15:00:53Z")
Dear all. i have below in python but that one static value passed. but need access the same code from services in dynamic way. Import Elasticsearch package from elasticsearch import Elasticsearch Connect to the elast… --- ## [Splitting HTTP\_Poller JSON Results](https://discuss.elastic.co/t/splitting-http-poller-json-results/191250)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 6:53pm UTC](https://discuss.elastic.co/t/splitting-http-poller-json-results/191250 "2019-07-18T18:53:39Z")
Making a call to a system for changes to tickets in a given time period, it returns the results as a single line of JSON. How can I split these out into separate events. Below is the returned results. { "result": \[{ "… --- ## [Multiline plugin not merging lines and throwing \_grokparsefailure](https://discuss.elastic.co/t/multiline-plugin-not-merging-lines-and-throwing-grokparsefailure/112799)
**Author:** [@vinit](https://discuss.elastic.co/u/vinit)\ **Replies:** 4\ **Last updated:** [December 22, 2017, 7:57am UTC](https://discuss.elastic.co/t/multiline-plugin-not-merging-lines-and-throwing-grokparsefailure/112799 "2017-12-22T07:57:24Z")
Hi, In logstash 1.x, used multiline plugin to merge all lines those are not starting with Timestamp and found issue that in some cases it didn't worked. Filter: multiline { patterns\_dir =\> "/u01/data/conf/patterns" … --- ## [How to deal with optionals fields in Logstash/ElasticSearch](https://discuss.elastic.co/t/how-to-deal-with-optionals-fields-in-logstash-elasticsearch/94965)
**Author:** [@NicolasHennion](https://discuss.elastic.co/u/NicolasHennion)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 12:08pm UTC](https://discuss.elastic.co/t/how-to-deal-with-optionals-fields-in-logstash-elasticsearch/94965 "2017-08-04T12:08:33Z")
have a problem when i try to import the following XML file in ElasticSearch with Logstash: \ \ \ \ \… --- ## [Node can't join cluster after install x-pack plugin](https://discuss.elastic.co/t/node-cant-join-cluster-after-install-x-pack-plugin/69672)
**Author:** [@Chen\_Jian](https://discuss.elastic.co/u/Chen_Jian)\ **Replies:** 4\ **Last updated:** [December 22, 2016, 2:41am UTC](https://discuss.elastic.co/t/node-cant-join-cluster-after-install-x-pack-plugin/69672 "2016-12-22T02:41:38Z")
One of my ES node unable to join cluster after install x-pack: \[2016-12-21T12:59:08,456\]\[WARN \]\[o.e.d.z.UnicastZenPing \] \[es2-client3.xxx.xxx\] failed to send ping to \[{#cloud-i-50aa2d46-0}{FYjZLUvCR4K999QndweltA}{10.… --- ## [Index lifecycle policy is not working](https://discuss.elastic.co/t/index-lifecycle-policy-is-not-working/246792)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 4:02pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-is-not-working/246792 "2020-08-31T16:02:06Z")
I've created a simple lifecycle policy where index records older than 10 days are deleted. Using Kibana I set the policy as follows: However, my index keeps growing by the day as I get daily index records that are o… --- ## [Create multiple Elasticsearch clusters in same K8s namespace using Helm](https://discuss.elastic.co/t/create-multiple-elasticsearch-clusters-in-same-k8s-namespace-using-helm/238480)
**Author:** [@ol-metaswitch](https://discuss.elastic.co/u/ol-metaswitch)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 8:43am UTC](https://discuss.elastic.co/t/create-multiple-elasticsearch-clusters-in-same-k8s-namespace-using-helm/238480 "2020-06-25T08:43:10Z")
Hi, I'm trying to create multiple Elasticsearch clusters in the same Kubernetes namespace using the official Helm chart (https://github.com/elastic/helm-charts/tree/7.7/elasticsearch). However, when I run the helm comma… --- ## [Painlessでの値の取得方法について](https://discuss.elastic.co/t/painless/223034)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 2:50am UTC](https://discuss.elastic.co/t/painless/223034 "2020-03-11T02:50:02Z")
お世話になります。 以下ご質問の続きとなりますが、 requestの値について①②のパターンがあり 以下処理を実施したいです。 ①"request=http://aaa.com/bbb/ccc request=http://ddd.com/"(配列) または ②"request=http://aaa.com/bbb/ccc"(String型) 「http:// XXX」の XXX を抽出 ↓ XXX の値の前後に"\*… --- ## [If statement incorrectly matches wildcard](https://discuss.elastic.co/t/if-statement-incorrectly-matches-wildcard/219322)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [February 17, 2020, 4:04am UTC](https://discuss.elastic.co/t/if-statement-incorrectly-matches-wildcard/219322 "2020-02-17T04:04:53Z")
Hi, I have the following piece of code and noticed that for some reason when the IP is in the 192.168.150.\* range, both dev and test are matched. If the IP is in the 192.168.1.\* range it correctly matches only dev. If … --- ## [Require Elasticsearch highlight words enclosed with Double Quotes (") instead of chopping them](https://discuss.elastic.co/t/require-elasticsearch-highlight-words-enclosed-with-double-quotes-instead-of-chopping-them/190478)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 1:06pm UTC](https://discuss.elastic.co/t/require-elasticsearch-highlight-words-enclosed-with-double-quotes-instead-of-chopping-them/190478 "2019-07-19T13:06:48Z")
Elasticsearch: v7.2 Application: PHP - Laravel v5.7 Hello and good day! I'm developing a web application that is similar to a search engine, whereas a user will enter words that will be designated to the variable $ke… --- ## [Spaces API not working](https://discuss.elastic.co/t/spaces-api-not-working/177930)
**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\ **Replies:** 2\ **Last updated:** [April 23, 2019, 5:04am UTC](https://discuss.elastic.co/t/spaces-api-not-working/177930 "2019-04-23T05:04:39Z")
I've just upgraded to Kibana 6.7.1 on Elastic Cloud in order to use spaces. I'm following https://www.elastic.co/guide/en/kibana/6.7/spaces-api-post.html So I run the following command: POST api/spaces/space { "id":… --- ## [AWS discovery from filebeat/metricbeat?](https://discuss.elastic.co/t/aws-discovery-from-filebeat-metricbeat/166130)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 2\ **Last updated:** [January 29, 2019, 5:20pm UTC](https://discuss.elastic.co/t/aws-discovery-from-filebeat-metricbeat/166130 "2019-01-29T17:20:18Z")
Hi, my Squid proxy is catching these requests and I wonder if they are from Filebeat or Metricbeat. They are the only Go binaries on the server. If so, how can I disable this AWS discovery feature ? X.X.X.X - - \[07/Ja… --- ## [Haproxy module authentication](https://discuss.elastic.co/t/haproxy-module-authentication/105108)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 9:46am UTC](https://discuss.elastic.co/t/haproxy-module-authentication/105108 "2017-10-25T09:46:14Z")
We have stats enabled on our haproxy loadbalancers, however we also have basic authentication enabled as a security measure. Is it possible to pass the credentials from the metricbeat haproxy module so it can pick up st… --- ## [How to use bootstrap tab/nav pills in kibana plugin Editor Panel](https://discuss.elastic.co/t/how-to-use-bootstrap-tab-nav-pills-in-kibana-plugin-editor-panel/70249)
**Author:** [@tarun\_kumar](https://discuss.elastic.co/u/tarun_kumar)\ **Replies:** 2\ **Last updated:** [December 31, 2016, 4:27am UTC](https://discuss.elastic.co/t/how-to-use-bootstrap-tab-nav-pills-in-kibana-plugin-editor-panel/70249 "2016-12-31T04:27:12Z")
I am trying to make kibana plugin which would be having Editor Panel with two tabs similar to "Data & Options Tabs" in kibana default/core visualizations editor Panels and for that i am trying to use bootstrap nav-pills … --- ## [Field marked as number, but index is having it as string](https://discuss.elastic.co/t/field-marked-as-number-but-index-is-having-it-as-string/58952)
**Author:** [@rmalired](https://discuss.elastic.co/u/rmalired)\ **Replies:** 2\ **Last updated:** [August 26, 2016, 3:55am UTC](https://discuss.elastic.co/t/field-marked-as-number-but-index-is-having-it-as-string/58952 "2016-08-26T03:55:35Z")
Hi, I running into an issue where my grok expression stays a particular field as NUMBER, but when the data is loaded into elastic search it is getting marked as string. below is the configuration grok Pattern WEBLOGIC… --- ## [About Using ElasticSearch WebServer?](https://discuss.elastic.co/t/about-using-elasticsearch-webserver/9337)
**Author:** [@zkidkid](https://discuss.elastic.co/u/zkidkid)\ **Replies:** 2\ **Last updated:** [October 14, 2012, 8:45am UTC](https://discuss.elastic.co/t/about-using-elasticsearch-webserver/9337 "2012-10-14T08:45:33Z")
Hi All, Currently, I have my own webserver (using embeed jetty ) My webserver listen and support jsonp to return search request. In my webserver, I use java api to connect to elastic search & return json value… --- ## [Redirect Elastic Agent to new Fleet Server](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 3:36pm UTC](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310 "2024-01-16T15:36:59Z")
I have about 1000 elastic agents currently connected to a Fleet server that is also my Kibana server. I'd like to migrate the devices to a new Fleet server to improve the performance of my Kibana server. Can I migrate … --- ## [Index lifecycle error - illegal\_argument\_exception:index name does not match pattern '^.\*-\\d+$' -Use Retry But Getting same error after sometime](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:50pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660 "2022-03-14T19:50:33Z")
Hi Team, I have created ilm , Template and alias respectively as i am getting illegal\_argument\_exception: index name \[rebalance\_index\_001\] does not match pattern '^.\*-\\d+$'. error. I have run retry ilm command . I don't… --- ## [Defective token when using SPNEGO in Kibana](https://discuss.elastic.co/t/defective-token-when-using-spnego-in-kibana/254287)
**Author:** [@marvi](https://discuss.elastic.co/u/marvi)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:45am UTC](https://discuss.elastic.co/t/defective-token-when-using-spnego-in-kibana/254287 "2020-11-05T09:45:58Z")
Environment: CentOS 7 Active Directory Elasticsearch & Kibana 7.9.3 Realms configured in ES: Kerberos and AD Kerberos authorization\_realm: AD ES cluster set up with keytabs on master and data nodes. I can run curl --n… --- ## [Table visualization to compare documents in same index](https://discuss.elastic.co/t/table-visualization-to-compare-documents-in-same-index/246379)
**Author:** [@singhabhisek](https://discuss.elastic.co/u/singhabhisek)\ **Replies:** 3\ **Last updated:** [August 30, 2020, 8:21am UTC](https://discuss.elastic.co/t/table-visualization-to-compare-documents-in-same-index/246379 "2020-08-30T08:21:05Z")
Hi Team, I have a single index in which I have multiple documents having same data structure. Basically I want to compare the two or more documents based on the application filter (or more filters) provided by the user.… --- ## [Elastiscserach Sous requête](https://discuss.elastic.co/t/elastiscserach-sous-requete/119826)
**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\ **Replies:** 3\ **Last updated:** [February 15, 2018, 9:02am UTC](https://discuss.elastic.co/t/elastiscserach-sous-requete/119826 "2018-02-15T09:02:27Z")
Bonjour, je cherche le moyen de faire une sous requête qui me retourne une liste de noms et ensuite j’exclus les noms de cette liste dans les résultats à afficher. Exemple en SQL: Select NOM from Table where NOM n… --- ## [Filebeat redis output less than 4096 events](https://discuss.elastic.co/t/filebeat-redis-output-less-than-4096-events/101942)
**Author:** [@zhouyue](https://discuss.elastic.co/u/zhouyue)\ **Replies:** 3\ **Last updated:** [October 11, 2017, 10:12am UTC](https://discuss.elastic.co/t/filebeat-redis-output-less-than-4096-events/101942 "2017-10-11T10:12:40Z")
when use the redis output, repeat generating the log file (with the same filename) and removing it. the filebeat would send events no more than 4096. even use one log file contains 6000 rows, the filebeat only send 40… --- ## [Is searching by \_id faster in parent-child relationship?](https://discuss.elastic.co/t/is-searching-by--id-faster-in-parent-child-relationship/66633)
**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 3:31pm UTC](https://discuss.elastic.co/t/is-searching-by--id-faster-in-parent-child-relationship/66633 "2016-11-25T15:31:37Z")
I'm trying to model one-to-many relationships in Elasticsearch with ability to fetch parents and children without involving any searches. Question 1: I thought that the way I can achieve this is by using \_id wherever … --- ## [Multiline allow\_duplicates=\>true config eleminating duplicates](https://discuss.elastic.co/t/multiline-allow-duplicates-true-config-eleminating-duplicates/51304)
**Author:** [@Avishek](https://discuss.elastic.co/u/Avishek)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 8:08am UTC](https://discuss.elastic.co/t/multiline-allow-duplicates-true-config-eleminating-duplicates/51304 "2016-06-13T08:08:30Z")
Hello, I am using logstash 2.3.1. I have created a config where I have used a multiline filter as one event in my log spans accross multiple lines. Apart from other filters which I have in my config, my last fi… --- ## [All String fields are splitting for / - \_](https://discuss.elastic.co/t/all-string-fields-are-splitting-for--/34059)
**Author:** [@slourenco](https://discuss.elastic.co/u/slourenco)\ **Replies:** 3\ **Last updated:** [November 9, 2015, 5:57pm UTC](https://discuss.elastic.co/t/all-string-fields-are-splitting-for--/34059 "2015-11-09T17:57:21Z")
After upgrading and loading the new index file to elasticsearch, all data on dashboards are splitting and grouping by the the parts the field like query, path and so on. --- ## [Unable to connect filebeat with elasticsearch " Authentication to realm default\_native failed"](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-elasticsearch-authentication-to-realm-default-native-failed/313095)
**Author:** [@Ahlam\_Abubaker](https://discuss.elastic.co/u/Ahlam_Abubaker)\ **Replies:** 1\ **Last updated:** [August 28, 2022, 3:34pm UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-elasticsearch-authentication-to-realm-default-native-failed/313095 "2022-08-28T15:34:43Z")
I'm trying to test the connection between filebeat on server and elasticsearch running on another server "both are on the same network" I'm getting this output when running this command ./filebeat test output ........… [Previous page](https://discuss.elastic.co/top.md?page=1386&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1388&per_page=50&period=all)