# Top **URL:** https://discuss.elastic.co/top.md?page=1390&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1391 --- ## [Beats fields.yml and multi-fields](https://discuss.elastic.co/t/beats-fields-yml-and-multi-fields/132277)
**Author:** [@Sirk\_Johannsen](https://discuss.elastic.co/u/Sirk_Johannsen)\ **Replies:** 5\ **Last updated:** [May 22, 2018, 1:28pm UTC](https://discuss.elastic.co/t/beats-fields-yml-and-multi-fields/132277 "2018-05-22T13:28:39Z")
Hello, I really appreciate the great work on the beats. But the documentation for the new fields.yml is just awful or plainly missing :wink: Can someone explain to me how to achieve multi-field mapping as described he… --- ## [Logstash and Kibana for App Log files recommendations](https://discuss.elastic.co/t/logstash-and-kibana-for-app-log-files-recommendations/106769)
**Author:** [@VIJAY\_JOHN\_BRITTO](https://discuss.elastic.co/u/VIJAY_JOHN_BRITTO)\ **Replies:** 5\ **Last updated:** [November 9, 2017, 6:59am UTC](https://discuss.elastic.co/t/logstash-and-kibana-for-app-log-files-recommendations/106769 "2017-11-09T06:59:53Z")
Hello All We are planning to implement Logstash with kibana for our application logs(log4 j - weblogic..). We have about 10 applications running in 10 instances, we would have about 100 logs files. Total size would be… --- ## [Elastic Search 2.2 remote access issue](https://discuss.elastic.co/t/elastic-search-2-2-remote-access-issue/81278)
**Author:** [@Adminxfactory](https://discuss.elastic.co/u/Adminxfactory)\ **Replies:** 5\ **Last updated:** [April 6, 2017, 6:59pm UTC](https://discuss.elastic.co/t/elastic-search-2-2-remote-access-issue/81278 "2017-04-06T18:59:45Z")
I am unable to access Elastic search 2.2 installed on my inhouse server with Centos 7. I am able to access through local host. Please help. --- ## [Logstash with elastisearch cloud](https://discuss.elastic.co/t/logstash-with-elastisearch-cloud/231021)
**Author:** [@Georgios\_Nikoloudis](https://discuss.elastic.co/u/Georgios_Nikoloudis)\ **Replies:** 7\ **Last updated:** [May 28, 2020, 12:25am UTC](https://discuss.elastic.co/t/logstash-with-elastisearch-cloud/231021 "2020-05-28T00:25:27Z")
hi is it possible to give me some direction how to configure the logstash in the ES cloud? I have logstash configurations in the current logstash (server side deployment) and I would like to move them to the ES cloud. … --- ## [How do I set an index-level metadata field using the Elasticsearch-DSL Python client?](https://discuss.elastic.co/t/how-do-i-set-an-index-level-metadata-field-using-the-elasticsearch-dsl-python-client/347142)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 3\ **Last updated:** [November 16, 2023, 5:05am UTC](https://discuss.elastic.co/t/how-do-i-set-an-index-level-metadata-field-using-the-elasticsearch-dsl-python-client/347142 "2023-11-16T05:05:41Z")
I am using the Elasticsearch-DSL Python client to create a new index that stores objects called IndexedDocument that are subclasses of elasticsearch\_dsl.Document. index\_name = "my-index" index = elasticsearch\_dsl.Index(… --- ## [Forward logs from Kafka to Elastic](https://discuss.elastic.co/t/forward-logs-from-kafka-to-elastic/320075)
**Author:** [@Deepika1](https://discuss.elastic.co/u/Deepika1)\ **Replies:** 3\ **Last updated:** [December 15, 2022, 10:10am UTC](https://discuss.elastic.co/t/forward-logs-from-kafka-to-elastic/320075 "2022-12-15T10:10:44Z")
Hello, I'm trying to forward logs from Kafka machine to Elasticsearch machine using kafka elastic connect referring below document configurations are: name=elasticsearch-sink connector.class=io.confluent.connect.ela… --- ## [Elasticsearch Search Queries](https://discuss.elastic.co/t/elasticsearch-search-queries/226641)
**Author:** [@vpolizki](https://discuss.elastic.co/u/vpolizki)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-search-queries/226641 "2020-04-06T15:06:28Z")
Hi , I want to search in DEV TOOLS query : "((STATUS:Stop AND STIME\>180) OR STATUS:Start)" on last 15 minuts , in kibana-discover worked excellent. it is contain AND, OR and condition \> on integer field STIME bigge… --- ## [SNMP - loss of data when sending information from logstash to elasticsearch](https://discuss.elastic.co/t/snmp-loss-of-data-when-sending-information-from-logstash-to-elasticsearch/158214)
**Author:** [@rueldu](https://discuss.elastic.co/u/rueldu)\ **Replies:** 3\ **Last updated:** [November 27, 2018, 3:46pm UTC](https://discuss.elastic.co/t/snmp-loss-of-data-when-sending-information-from-logstash-to-elasticsearch/158214 "2018-11-27T15:46:18Z")
Hello everyone, I have installed ELK, one server ELASTICSEARCH, 3 servers (collectors) that have installed LOGSTASH and ELASTIFLOW and each one is in 3 branches. In a branch there is a server where logstash is installed… --- ## [Why Interval in Visualization by Auto is per 0 milliseconds](https://discuss.elastic.co/t/why-interval-in-visualization-by-auto-is-per-0-milliseconds/157333)
**Author:** [@\_Sergey](https://discuss.elastic.co/u/_Sergey)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 9:37am UTC](https://discuss.elastic.co/t/why-interval-in-visualization-by-auto-is-per-0-milliseconds/157333 "2018-11-20T09:37:39Z")
Hey guys, We faced with issue that suddenly all our visualizations (line, bar chars) have X-axis (using Date histogram) split by Auto per milliseconds 0. Previously we use this Auto feature and since you change time pe… --- ## [Pipeline UI not working properly?](https://discuss.elastic.co/t/pipeline-ui-not-working-properly/146578)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 11:41pm UTC](https://discuss.elastic.co/t/pipeline-ui-not-working-properly/146578 "2018-09-07T23:41:58Z")
Hi. I was in my Logstash Pipeline UI interface a few days ago and I had what seemed to be the correct layout of the display (vertex view?). I logged into it this morning and it seems to have gone to a different view? Ho… --- ## [Snapshot with index pattern](https://discuss.elastic.co/t/snapshot-with-index-pattern/145196)
**Author:** [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Replies:** 3\ **Last updated:** [August 21, 2018, 9:10am UTC](https://discuss.elastic.co/t/snapshot-with-index-pattern/145196 "2018-08-21T09:10:04Z")
Hello I'm trying to create a python script to automaticly create snapshots. This is not a big deal. But will use kibanas "Index Pattern". You find that under kibana - Management /Kibana. there you may create a new Ind… --- ## [REST client initialization](https://discuss.elastic.co/t/rest-client-initialization/134128)
**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\ **Replies:** 3\ **Last updated:** [June 8, 2018, 12:56pm UTC](https://discuss.elastic.co/t/rest-client-initialization/134128 "2018-06-08T12:56:18Z")
Assume I have a cluster containing master-eligible nodes, data nodes and coordinating nodes. When I initialize a REST client, which of the above node types should I include? All of the nodes, only the data nodes, only … --- ## [Install reporting 2.4.0 fail](https://discuss.elastic.co/t/install-reporting-2-4-0-fail/88217)
**Author:** [@Volu\_Po](https://discuss.elastic.co/u/Volu_Po)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 8:17am UTC](https://discuss.elastic.co/t/install-reporting-2-4-0-fail/88217 "2017-06-20T08:17:42Z")
Hi, I am now trying to install reporting plugin. Reporting icon shows on kibana but nothing can be generated. It just gave me "Reporing: Error 403 Forbidden: License check failed: Not Found" When I run below comma… --- ## [Most monitor two clusters?](https://discuss.elastic.co/t/most-monitor-two-clusters/60956)
**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\ **Replies:** 3\ **Last updated:** [September 20, 2016, 4:12am UTC](https://discuss.elastic.co/t/most-monitor-two-clusters/60956 "2016-09-20T04:12:57Z")
I set a monitor cluster,and i has four cluster to write data into the monitor cluster,but the page just show two clusters(other two clusters just change part nodes to write data to the monitor cluster)? --- ## [How to default to an implicit AND operator for QueryStringQueryBuilder?](https://discuss.elastic.co/t/how-to-default-to-an-implicit-and-operator-for-querystringquerybuilder/6507)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 3\ **Last updated:** [January 28, 2012, 1:43am UTC](https://discuss.elastic.co/t/how-to-default-to-an-implicit-and-operator-for-querystringquerybuilder/6507 "2012-01-28T01:43:27Z")
Given the following QueryStringQueryBuilder, where there is more than one term being passed, it defaults to doing something 'termA OR termB'. How can I change it to default to '+termA AND +termB'? https://gist.gi… --- ## [Elastic APM Agent for PHP](https://discuss.elastic.co/t/elastic-apm-agent-for-php/237372)
**Author:** [@ZoiloMora](https://discuss.elastic.co/u/ZoiloMora)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 10:43pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-for-php/237372 "2020-06-16T22:43:35Z")
Hello, a few months ago I started developing an APM agent for PHP \>= 5.4 . I have seen that there is thought to develop an official agent (https://discuss.elastic.co/t/elastic-apm-php-agent/229373) however I would like … --- ## [Access to aggregation results using kibana alerting](https://discuss.elastic.co/t/access-to-aggregation-results-using-kibana-alerting/319112)
**Author:** [@Youssef\_Mouadden](https://discuss.elastic.co/u/Youssef_Mouadden)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 4:45pm UTC](https://discuss.elastic.co/t/access-to-aggregation-results-using-kibana-alerting/319112 "2022-11-16T16:45:47Z")
Hello, I'm facing a problem with Kibana alerting: I defined my query DSL and defined an aggregation I want to access the result of the aggregation returned using the query. Kibana only suggest {{context.hits}} but I'm … --- ## [Reattaching Cold Data](https://discuss.elastic.co/t/reattaching-cold-data/298785)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 7\ **Last updated:** [March 5, 2022, 4:19am UTC](https://discuss.elastic.co/t/reattaching-cold-data/298785 "2022-03-05T04:19:29Z")
If you were to have cold data on removable hard disks (for long-term offline storage), what is the best way to re-attach one of these disks to the cold data node without causing trouble? For example, I was wondering if t… --- ## [Logstash.bat immediately errors out with \\Java\\jdk-11.0.12 was unexpected at this time](https://discuss.elastic.co/t/logstash-bat-immediately-errors-out-with-java-jdk-11-0-12-was-unexpected-at-this-time/281264)
**Author:** [@rjcpayne699](https://discuss.elastic.co/u/rjcpayne699)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 8:41pm UTC](https://discuss.elastic.co/t/logstash-bat-immediately-errors-out-with-java-jdk-11-0-12-was-unexpected-at-this-time/281264 "2021-08-12T20:41:55Z")
Just trying my first local run of logstash after installation on windows 10. I performed the first steps to validate jvm: PS C:\\logstash-7.14.0\> Write-Host $env:JAVA\_HOME C:\\Program Files (x86)\\Java\\jdk-11.0.12 PS C:\\… --- ## [Snapshot watcher - when there are more multiple repositories to be watched](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246)
**Author:** [@achybala](https://discuss.elastic.co/u/achybala)\ **Replies:** 7\ **Last updated:** [August 7, 2021, 1:39pm UTC](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246 "2021-08-07T13:39:38Z")
Hi, With the help from multiple discussions in this forum, I'm able to create a watcher to look for any snapshots in 'failed' state in a given snapshot repository. { "trigger": { "schedule": { "interval": "60s" … --- ## [Logstash cannot compile the .conf file](https://discuss.elastic.co/t/logstash-cannot-compile-the-conf-file/279735)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 7\ **Last updated:** [August 6, 2021, 2:21pm UTC](https://discuss.elastic.co/t/logstash-cannot-compile-the-conf-file/279735 "2021-08-06T14:21:52Z")
Hello, so I have this weird situation that all my logstash config files just stopped working. I have noticed it started probably like a few weeks ago after something happened. Only one thing I recognize I have done that… --- ## [Elastic search configuration for extensive search and read/write and indexing operations with heavy number of users](https://discuss.elastic.co/t/elastic-search-configuration-for-extensive-search-and-read-write-and-indexing-operations-with-heavy-number-of-users/189462)
**Author:** [@saurabh.singh2](https://discuss.elastic.co/u/saurabh.singh2)\ **Replies:** 7\ **Last updated:** [July 12, 2019, 10:20am UTC](https://discuss.elastic.co/t/elastic-search-configuration-for-extensive-search-and-read-write-and-indexing-operations-with-heavy-number-of-users/189462 "2019-07-12T10:20:01Z")
Hello, We need information regarding elastic search configuration for our application environment. We use elastic search very extensively for our application for search and indexing. Our application is using Liferay (… --- ## [Create graph on intervals of latency measurements showing percentage](https://discuss.elastic.co/t/create-graph-on-intervals-of-latency-measurements-showing-percentage/177951)
**Author:** [@JoostvD](https://discuss.elastic.co/u/JoostvD)\ **Replies:** 1\ **Last updated:** [April 24, 2019, 6:24pm UTC](https://discuss.elastic.co/t/create-graph-on-intervals-of-latency-measurements-showing-percentage/177951 "2019-04-24T18:24:49Z")
Hello all, I am new to the ELK stack and want to use it to create graphs on latency information. For each performed action the latency information is logged. The goal is to create a graph on this latency information sho… --- ## [Logstash config file processing order](https://discuss.elastic.co/t/logstash-config-file-processing-order/114927)
**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 8:45pm UTC](https://discuss.elastic.co/t/logstash-config-file-processing-order/114927 "2018-01-10T20:45:17Z")
Considering that the basic structure of a logstash.conf is: input { ... } filter { ... } output { ... } Looking above we assume that logstash will process the incoming events on that order (input, filter, out… --- ## [Настройка алертов по метрикам](https://discuss.elastic.co/t/topic/66707)
**Author:** [@111140](https://discuss.elastic.co/u/111140)\ **Replies:** 1\ **Last updated:** [November 21, 2016, 2:06pm UTC](https://discuss.elastic.co/t/topic/66707 "2016-11-21T14:06:07Z")
Добрый день! Использую облачное решение. Хочу настроить алерты на различные показатели, как я понял для этого нужно использовать X-PACK но как мне активировать его у себя в кластере? Нигде не нашел, возможно ли это вообщ… --- ## [Using S3 as input plugin](https://discuss.elastic.co/t/using-s3-as-input-plugin/28725)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 1\ **Last updated:** [September 5, 2015, 8:12pm UTC](https://discuss.elastic.co/t/using-s3-as-input-plugin/28725 "2015-09-05T20:12:14Z")
Hi, I am using s3 as the input plugin to download the logs in s3 bucket. The logs in my s3 bucket is organized in folders with a .tar.gz file in each of them. Can the S3 plugin help me achieve this. The .tar.gz file c… --- ## [Elastic Stack Architecture](https://discuss.elastic.co/t/elastic-stack-architecture/294849)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 4\ **Last updated:** [January 20, 2022, 5:04pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture/294849 "2022-01-20T17:04:56Z")
Hello everyone, /!\\ NB: First I would say that I am really really sorry for the ASCII Art but I can't upload images since this morning and I don't know why. :sweat\_smile: I read a lot about how an Elastic cluster shoul… --- ## [CEF codec outputting multiple CEF logs into single CEF l](https://discuss.elastic.co/t/cef-codec-outputting-multiple-cef-logs-into-single-cef-l/278477)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 4\ **Last updated:** [July 13, 2021, 12:35pm UTC](https://discuss.elastic.co/t/cef-codec-outputting-multiple-cef-logs-into-single-cef-l/278477 "2021-07-13T12:35:13Z")
Hey Everyone, I am having an issue when I output to a syslog sever using the CEF codec from the logs we receive from Filbeat. The logs contain mulitple individual CEF longs into one log, so sometimes you can get 3 diff… --- ## [Mutate add\_field gives sprint f format for nil values. How to solve this?](https://discuss.elastic.co/t/mutate-add-field-gives-sprint-f-format-for-nil-values-how-to-solve-this/181473)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 4\ **Last updated:** [May 18, 2019, 1:01pm UTC](https://discuss.elastic.co/t/mutate-add-field-gives-sprint-f-format-for-nil-values-how-to-solve-this/181473 "2019-05-18T13:01:58Z")
Hi All I am using mutate add\_field in my confile mutate { add\_field =\> {"CloserName" =\> "%{\[Bugs\]CloserName}"} } The value for many CloserName is null but some has value Which ever record is having null values, i… --- ## [Activating "system.process.cpu.total.ticks"](https://discuss.elastic.co/t/activating-system-process-cpu-total-ticks/74991)
**Author:** [@olivierpt](https://discuss.elastic.co/u/olivierpt)\ **Replies:** 4\ **Last updated:** [February 14, 2017, 1:57pm UTC](https://discuss.elastic.co/t/activating-system-process-cpu-total-ticks/74991 "2017-02-14T13:57:22Z")
Hi, The Metricbeat Exported Fields documentation that the System module should allow to get a "system.process.cpu.total.ticks" field. But I don't manage to get it and I can't find the option to activate this field. A… --- ## [Can not find the multine plug-in in my logstash 5.1.2?](https://discuss.elastic.co/t/can-not-find-the-multine-plug-in-in-my-logstash-5-1-2/73081)
**Author:** [@rlv\_praveen](https://discuss.elastic.co/u/rlv_praveen)\ **Replies:** 4\ **Last updated:** [January 28, 2017, 10:57am UTC](https://discuss.elastic.co/t/can-not-find-the-multine-plug-in-in-my-logstash-5-1-2/73081 "2017-01-28T10:57:31Z")
Hi , I was getting a error with logstash multi line plug in not found.Could you guys please help me out? Thanks in advance. PFB Error- reason-"Couldn't find any filter plugin named 'multiline'. Are you sure this is c… --- ## [Nested Aggregations : problème avec reverse-nested et script](https://discuss.elastic.co/t/nested-aggregations-probleme-avec-reverse-nested-et-script/33162)
**Author:** [@patrice](https://discuss.elastic.co/u/patrice)\ **Replies:** 4\ **Last updated:** [October 28, 2015, 4:17pm UTC](https://discuss.elastic.co/t/nested-aggregations-probleme-avec-reverse-nested-et-script/33162 "2015-10-28T16:17:42Z")
Bonjour, Le nombre de résultats retournés lorsque je fais une agrégation via un script n'est pas le bon, alors que j'obtiens le bon résultat avec une agrégation simple. Voici un exemple : Avec une agrégation simple… --- ## [Is there a security mailing list?](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 4\ **Last updated:** [March 16, 2015, 7:57pm UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119 "2015-03-16T19:57:44Z")
Is there a security announcement list for ELK somewhere? Something like what Ubuntu sends out when they patch security vulnerabilities. I don't see one listed on http://www.elasticsearch.org/community/ The l… --- ## [Match phrase prefix queryにてField値と同値で検索してもヒットしない](https://discuss.elastic.co/t/match-phrase-prefix-query-field/274703)
**Author:** [@b18bd8be4bf795b30ee7](https://discuss.elastic.co/u/b18bd8be4bf795b30ee7)\ **Replies:** 2\ **Last updated:** [June 4, 2021, 12:55am UTC](https://discuss.elastic.co/t/match-phrase-prefix-query-field/274703 "2021-06-04T00:55:06Z")
掲題のとおりです。Indexに格納済みの値と同値でMatch phrase prefix検索を行ってもヒットしないパターンがあり、現象について理解したく質問いたします。 よろしくお願いいたします。 バージョン：7.10 Mapping PUT /my\_index1 { "settings" : { "index": { "number\_of\_shards" : 1, "number\_of\_re… --- ## [System/socket dataset setup failed](https://discuss.elastic.co/t/system-socket-dataset-setup-failed/210574)
**Author:** [@Willl](https://discuss.elastic.co/u/Willl)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 6:22pm UTC](https://discuss.elastic.co/t/system-socket-dataset-setup-failed/210574 "2019-12-18T18:22:41Z")
Testing auditbeat-7.5.0-1-x86\_64 on SLES 12 SP4. When the socket dataset is enabled under module system, auditbeat restarts. I checked the release note which says ipv6.disable=1 is taken care of. Any suggestion? Blo… --- ## [Logstash file input plug - exception argument error](https://discuss.elastic.co/t/logstash-file-input-plug-exception-argument-error/188691)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 2\ **Last updated:** [July 3, 2019, 12:49pm UTC](https://discuss.elastic.co/t/logstash-file-input-plug-exception-argument-error/188691 "2019-07-03T12:49:56Z")
Hi All Getting a weird error when trying to use the file input plugin. Some information on my environment java --version openjdk 11.0.3 2019-04-16 OpenJDK Runtime Environment (build 11.0.3+7-Ubuntu-1ubuntu218.04.1) … --- ## [Map field as Object and Text](https://discuss.elastic.co/t/map-field-as-object-and-text/119708)
**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\ **Replies:** 2\ **Last updated:** [February 13, 2018, 10:04pm UTC](https://discuss.elastic.co/t/map-field-as-object-and-text/119708 "2018-02-13T22:04:12Z")
Is there any way to map a field as an object AND text, similar to what you can do with "fields" and text and keyword types? I'm having an issue where a field is mapped differently across indices, because Winlogbeat expe… --- ## [Http input response headers](https://discuss.elastic.co/t/http-input-response-headers/97030)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 8:32pm UTC](https://discuss.elastic.co/t/http-input-response-headers/97030 "2017-08-15T20:32:00Z")
I’m using Logstash to receive an http input from a plugin on Kibana and then it pushes it to an http output to Jira to make a ticket. I’m doing this to avoid CORS restrictions on Chrome because I can’t make POSTs to Jira… --- ## [Use the \_update\_by\_query API for a mapping change](https://discuss.elastic.co/t/use-the--update-by-query-api-for-a-mapping-change/88723)
**Author:** [@xgantan](https://discuss.elastic.co/u/xgantan)\ **Replies:** 2\ **Last updated:** [June 8, 2017, 9:42pm UTC](https://discuss.elastic.co/t/use-the--update-by-query-api-for-a-mapping-change/88723 "2017-06-08T21:42:37Z")
Hello, I have the following mappings defined for a field in an index that has hundreds of thousands of documents: { "status": { "type": "text" } } and I want to change its definition to: { "status": … --- ## [Using Facet filter in array](https://discuss.elastic.co/t/using-facet-filter-in-array/10212)
**Author:** [@aash\_dhariya](https://discuss.elastic.co/u/aash_dhariya)\ **Replies:** 2\ **Last updated:** [January 2, 2013, 6:45pm UTC](https://discuss.elastic.co/t/using-facet-filter-in-array/10212 "2013-01-02T18:45:01Z")
I have an elasticsearch document named "user", which contains an array field - "companies". I want to get all the company names that contains "xyz" in their name. I have set the custom mapping which tokenizes the data … --- ## [My ruby filter doesn't work](https://discuss.elastic.co/t/my-ruby-filter-doesnt-work/258439)
**Author:** [@olegans](https://discuss.elastic.co/u/olegans)\ **Replies:** 6\ **Last updated:** [December 11, 2020, 7:01pm UTC](https://discuss.elastic.co/t/my-ruby-filter-doesnt-work/258439 "2020-12-11T19:01:01Z")
I am trying to use a ruby ​​filter to process incoming json that I receive in the logs. At the beginning, using a grok filter, I receive json, then I try to process it in a ruby ​​filter grok { match =\> { "l… --- ## [Wrong Kibana timestamp](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174)
**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\ **Replies:** 6\ **Last updated:** [September 8, 2020, 2:07pm UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174 "2020-09-08T14:07:18Z")
Hello, I have a filebeat running on the same node as my ELK (single node cluster) and the timestamp shown in discover tab is +4:30 which is same as my timezone. for example this doc timestamp is : but when i querry… --- ## [Yet another date parse problem (noob)](https://discuss.elastic.co/t/yet-another-date-parse-problem-noob/127986)
**Author:** [@robs](https://discuss.elastic.co/u/robs)\ **Replies:** 6\ **Last updated:** [April 17, 2018, 8:06am UTC](https://discuss.elastic.co/t/yet-another-date-parse-problem-noob/127986 "2018-04-17T08:06:32Z")
Hi, I want to send log lines to elastic with logstash. I'm burning hours and can't get it right. My log lines all look like: yyyymmdd hh:mm:ss ev:1 rn:3 (like : 20170312 14:03:55 ev:1 rn:5 etc. etc.) In patterns\_di… --- ## [Index share allocation question with Docker containers](https://discuss.elastic.co/t/index-share-allocation-question-with-docker-containers/265676)
**Author:** [@InnerJoin](https://discuss.elastic.co/u/InnerJoin)\ **Replies:** 8\ **Last updated:** [February 27, 2021, 3:43am UTC](https://discuss.elastic.co/t/index-share-allocation-question-with-docker-containers/265676 "2021-02-27T03:43:18Z")
Hi all, I am currently working on building out an Elasticsearch cluster. I have sent out for the hardware that I'm planning to use and created another topic with the architecture that I'm planning and hardware specs to … --- ## [Logstash pipeline.yml error](https://discuss.elastic.co/t/logstash-pipeline-yml-error/251441)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 8\ **Last updated:** [October 8, 2020, 6:08pm UTC](https://discuss.elastic.co/t/logstash-pipeline-yml-error/251441 "2020-10-08T18:08:46Z")
I've one logstash pipeline.which is given in pipeline.yml. but when i run bin/logstash.bat command in powershell i'm getting error which is look like this ERROR: Failed to read pipelines yaml file. Location: D:/Elast… --- ## [Translating Field Names in a Dashboard](https://discuss.elastic.co/t/translating-field-names-in-a-dashboard/278087)
**Author:** [@Thomas\_Carmichael](https://discuss.elastic.co/u/Thomas_Carmichael)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 4:33pm UTC](https://discuss.elastic.co/t/translating-field-names-in-a-dashboard/278087 "2021-07-07T16:33:50Z")
I'm trying to build a pie chart lens that displays percentages of sex from my data. The data comes across as M, F, and O, but I would like to translate these to "Male" "Female" and "Other" when making the dashboard. I … --- ## [Select records from first index which are not present in another index](https://discuss.elastic.co/t/select-records-from-first-index-which-are-not-present-in-another-index/202510)
**Author:** [@Sonu\_Pajai\_Save](https://discuss.elastic.co/u/Sonu_Pajai_Save)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 12:37pm UTC](https://discuss.elastic.co/t/select-records-from-first-index-which-are-not-present-in-another-index/202510 "2019-10-07T12:37:53Z")
i wish select those records from products index which are not in shop\_inventory index is there any way to achieve this in elasticsearch. product\_id is the common field in both indexes --- ## [Cannot Save Data Frame to Elasticsearch during spark streaming](https://discuss.elastic.co/t/cannot-save-data-frame-to-elasticsearch-during-spark-streaming/103377)
**Author:** [@srinathji](https://discuss.elastic.co/u/srinathji)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 2:26pm UTC](https://discuss.elastic.co/t/cannot-save-data-frame-to-elasticsearch-during-spark-streaming/103377 "2017-10-10T14:26:52Z")
Hi All, please help me , i am getting below error while saving dataframe to Elastic search while spark streaming: org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot determine write shards for \[custAct\_in… --- ## [Index\_failed\_engine\_exception Index failed](https://discuss.elastic.co/t/index-failed-engine-exception-index-failed/80951)
**Author:** [@waheed](https://discuss.elastic.co/u/waheed)\ **Replies:** 1\ **Last updated:** [April 3, 2017, 8:13am UTC](https://discuss.elastic.co/t/index-failed-engine-exception-index-failed/80951 "2017-04-03T08:13:32Z")
When we update indexes most of them updated successfully but some indexes not updated. Share My Error Log ServerErrorResponseException in Connection.php line 659: index\_failed\_engine\_exception {"error":{"root\_cause":\[{… --- ## [Scripted Field for sum of max value!](https://discuss.elastic.co/t/scripted-field-for-sum-of-max-value/35804)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 1\ **Last updated:** [November 28, 2015, 11:44pm UTC](https://discuss.elastic.co/t/scripted-field-for-sum-of-max-value/35804 "2015-11-28T23:44:18Z")
I would like to write the script that need to show "Sum of Max value" . For example, Here, you can see same IP has opened two session and view the page.The value is accumulated \[incremental\] one. So I have to take ma… [Previous page](https://discuss.elastic.co/top.md?page=1389&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1391&per_page=50&period=all)