# Top

**URL:** https://discuss.elastic.co/top.md?page=1392&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1393

---

## [Update elastic stack](https://discuss.elastic.co/t/update-elastic-stack/156888)

<div class="topic-metadata">

**Author:** [@barryp](https://discuss.elastic.co/u/barryp)\
**Replies:** 0\
**Last updated:** [November 15, 2018, 2:31pm UTC](https://discuss.elastic.co/t/update-elastic-stack/156888 "2018-11-15T14:31:38Z")

</div>

Hi, We are running an Elasticstack (elasticsearch/kibana/logstash) in a Docker Swarm. Our ElasticStack version is 6.2.2. Now I want to update the stack to 6.5.0. Reading through the releasenotes and the breaking chan…

---

## [Scoring based on the field(s) results were matched](https://discuss.elastic.co/t/scoring-based-on-the-field-s-results-were-matched/128658)

<div class="topic-metadata">

**Author:** [@xan\_ps](https://discuss.elastic.co/u/xan_ps)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 8:30am UTC](https://discuss.elastic.co/t/scoring-based-on-the-field-s-results-were-matched/128658 "2018-04-19T08:30:44Z")

</div>

Currently, I'm trying to put a constant score according to the fields that have matched. So, I want to assign a particular score if: the query matches in a particular field + boolean value on another field. for it wou…

---

## [Hi All, I am facing the issue, Not eligible for data streams because config contains one or more settings that are not compatible with data streams: {"index"=\>"info\_apim\_event"}](https://discuss.elastic.co/t/hi-all-i-am-facing-the-issue-not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-info-apim-event/354424)

<div class="topic-metadata">

**Author:** [@Haribabu](https://discuss.elastic.co/u/Haribabu)\
**Replies:** 8\
**Last updated:** [March 4, 2024, 1:01pm UTC](https://discuss.elastic.co/t/hi-all-i-am-facing-the-issue-not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-info-apim-event/354424 "2024-03-04T13:01:34Z")

</div>

input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "TID: \\\[%{DATA:thread}\\\] \\\[%{DATA:component}\\\] \\\[%{TIMESTAMP\_ISO8601:timestamp}\\\] %{LOGLEVEL:logLevel} \\{%…

---

## [How to optimize elasticsearch query dsl to improve the query performance？](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-query-dsl-to-improve-the-query-performance/323213)

<div class="topic-metadata">

**Author:** [@yeoman](https://discuss.elastic.co/u/yeoman)\
**Replies:** 8\
**Last updated:** [January 17, 2023, 9:53am UTC](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-query-dsl-to-improve-the-query-performance/323213 "2023-01-17T09:53:16Z")

</div>

Dear elasticsearch technology experts,I have a elasticsearch index which size is almost 18Gb,and the amount of documents is about 400000.There are 3 nodes in the elasticserch cluster,and each nodes server is 2Cpu 4Gb mem…

---

## [Nothing to see in Traces](https://discuss.elastic.co/t/nothing-to-see-in-traces/236917)

<div class="topic-metadata">

**Author:** [@FutuPoul](https://discuss.elastic.co/u/FutuPoul)\
**Replies:** 8\
**Last updated:** [June 22, 2020, 11:53am UTC](https://discuss.elastic.co/t/nothing-to-see-in-traces/236917 "2020-06-22T11:53:04Z")

</div>

Hello, I have two services that communicate a-\>b. The information appears in the "Trace sample" but nothing appears on the "Traces" . Details on the screenshots. I am asking for advice as to what may be incorrect. …

---

## [An REST API which can Filter Based on field](https://discuss.elastic.co/t/an-rest-api-which-can-filter-based-on-field/227058)

<div class="topic-metadata">

**Author:** [@nikhilmahipathi555](https://discuss.elastic.co/u/nikhilmahipathi555)\
**Replies:** 3\
**Last updated:** [April 9, 2020, 5:42am UTC](https://discuss.elastic.co/t/an-rest-api-which-can-filter-based-on-field/227058 "2020-04-09T05:42:03Z")

</div>

Hi, I need a Search API that can filter based on a field value in the response body. e.g: I need to filter based on TYPE value { "took": 12, "responses": \[ { "took": 12, "t…

---

## [Import (21gb) csv to elasticsearch](https://discuss.elastic.co/t/import-21gb-csv-to-elasticsearch/162771)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 8\
**Last updated:** [January 4, 2019, 11:00am UTC](https://discuss.elastic.co/t/import-21gb-csv-to-elasticsearch/162771 "2019-01-04T11:00:54Z")

</div>

Please advice me how can i upload this huge file. Any sample java/python or name of plugin to use will help. I am doing on local machine and single node.

---

## [How does painless work?](https://discuss.elastic.co/t/how-does-painless-work/155077)

<div class="topic-metadata">

**Author:** [@bps](https://discuss.elastic.co/u/bps)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 6:42am UTC](https://discuss.elastic.co/t/how-does-painless-work/155077 "2018-11-21T06:42:51Z")

</div>

I have been using painless saved on my ES cluster for a while now on a project and little is really documented as far as how it works "under the covers" of elastic search -- at least I can't find much. Can any of the exp…

---

## [Manage machine learnings](https://discuss.elastic.co/t/manage-machine-learnings/131842)

<div class="topic-metadata">

**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\
**Replies:** 8\
**Last updated:** [June 2, 2018, 5:53am UTC](https://discuss.elastic.co/t/manage-machine-learnings/131842 "2018-06-02T05:53:44Z")

</div>

i need something (folders) for categorize machine learnings. there is no feature for import and export machine learnings.

---

## [Voting Only Master Node](https://discuss.elastic.co/t/voting-only-master-node/95375)

<div class="topic-metadata">

**Author:** [@discomatt](https://discuss.elastic.co/u/discomatt)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 3:53pm UTC](https://discuss.elastic.co/t/voting-only-master-node/95375 "2017-08-01T15:53:23Z")

</div>

Bringing this github conversation to this forum: https://github.com/elastic/elasticsearch/issues/14340 What is the best way to create a Master Node that can vote in a new Master Election, but itself will never get elect…

---

## [Adding a pattern in grok file in Logstash Grok File - Creating Grok Pattern](https://discuss.elastic.co/t/adding-a-pattern-in-grok-file-in-logstash-grok-file-creating-grok-pattern/69162)

<div class="topic-metadata">

**Author:** [@taurs](https://discuss.elastic.co/u/taurs)\
**Replies:** 3\
**Last updated:** [December 20, 2016, 10:09am UTC](https://discuss.elastic.co/t/adding-a-pattern-in-grok-file-in-logstash-grok-file-creating-grok-pattern/69162 "2016-12-20T10:09:52Z")

</div>

Hi, Here is my log pattern for which I need to write the grok for: Log Pattern : 2016-12-05 17:31:10:675 WARNI Received signal: SIGTERM \[OSignalHandler\] Another log pattern : 2016-12-05 16:52:12:805 SEVER Unabl…

---

## [I can,t use murmur3 field in kibana](https://discuss.elastic.co/t/i-can-t-use-murmur3-field-in-kibana/52496)

<div class="topic-metadata">

**Author:** [@anasoid](https://discuss.elastic.co/u/anasoid)\
**Replies:** 3\
**Last updated:** [July 7, 2016, 8:34pm UTC](https://discuss.elastic.co/t/i-can-t-use-murmur3-field-in-kibana/52496 "2016-07-07T20:34:16Z")

</div>

I use kibana 4.5.1 and i add murmur3 to have quick unique count, but i can see the murmur3 in setting-\>indices-\>logstash-\* fields with type murmur3, but when i would create chart, i can find it in proposition event i c…

---

## [Mass update of records - dns resolution](https://discuss.elastic.co/t/mass-update-of-records-dns-resolution/21451)

<div class="topic-metadata">

**Author:** [@Mike\_Sheinberg](https://discuss.elastic.co/u/Mike_Sheinberg)\
**Replies:** 3\
**Last updated:** [January 2, 2015, 4:10pm UTC](https://discuss.elastic.co/t/mass-update-of-records-dns-resolution/21451 "2015-01-02T16:10:41Z")

</div>

Howdy, I'm not sure what the best way to tackle an issue I'm having in regards to DNS resolution of IP addresses in my ES documents. For the background, I'm using logstash as a netflow collector --\> ES. I was p…

---

## [NPE for bulk indexing via Java API](https://discuss.elastic.co/t/npe-for-bulk-indexing-via-java-api/3843)

<div class="topic-metadata">

**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\
**Replies:** 3\
**Last updated:** [February 5, 2011, 11:19pm UTC](https://discuss.elastic.co/t/npe-for-bulk-indexing-via-java-api/3843 "2011-02-05T23:19:40Z")

</div>

Hi, I got a NPE when doing sth. like this: BulkRequestBuilder brb = client.prepareBulk(); for (SolrTweet tw : tweets) { String id = Long.toString(tw.getTwitterId()); …

---

## [Performance issue with concurrent call ElasticSearch API](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912)

<div class="topic-metadata">

**Author:** [@css.carlyle](https://discuss.elastic.co/u/css.carlyle)\
**Replies:** 1\
**Last updated:** [April 8, 2022, 4:43am UTC](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912 "2022-04-08T04:43:40Z")

</div>

Hello all, Recently, my program failed the stress test (Jmeter) :dizzy\_face:, my requirement is that get response from Elasticsearch within 5 seconds when it was 50, 100, 500, 1000, 1300 concurrent call. During the stre…

---

## [Best practices for managing application logs](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824)

<div class="topic-metadata">

**Author:** [@pampua84](https://discuss.elastic.co/u/pampua84)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 12:07am UTC](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824 "2021-01-25T00:07:17Z")

</div>

Hello boys and girls, I have a few questions about best practices for managing my application logs on elastic: Is it a good idea to create an index by app and day to improve search performance? I have logs in Json for…

---

## [Ansible Tower Integration with Logstash](https://discuss.elastic.co/t/ansible-tower-integration-with-logstash/155304)

<div class="topic-metadata">

**Author:** [@sunnypalsingh](https://discuss.elastic.co/u/sunnypalsingh)\
**Replies:** 1\
**Last updated:** [November 7, 2018, 9:22pm UTC](https://discuss.elastic.co/t/ansible-tower-integration-with-logstash/155304 "2018-11-07T21:22:55Z")

</div>

Hi Team, Just want to know if anyone body has integrated Ansible Tower with ELK. It would be really useful to reuse rather than re-inventing wheel. If nobody has done it, then I can show my configuration which is not wo…

---

## [Elastic plugin head](https://discuss.elastic.co/t/elastic-plugin-head/106311)

<div class="topic-metadata">

**Author:** [@lebilien](https://discuss.elastic.co/u/lebilien)\
**Replies:** 1\
**Last updated:** [November 3, 2017, 1:33pm UTC](https://discuss.elastic.co/t/elastic-plugin-head/106311 "2017-11-03T13:33:16Z")

</div>

hi i have this error : java.lang.IllegalArgumentException: property \[elasticsearch.version\] is missing for plugin \[head\] it's impossible to install this /var/www/elasticsearch-head/node\_modules/grunt-contrib-jasmin…

---

## [How to copy (or rename) a complex field into another field?](https://discuss.elastic.co/t/how-to-copy-or-rename-a-complex-field-into-another-field/61015)

<div class="topic-metadata">

**Author:** [@vandamo](https://discuss.elastic.co/u/vandamo)\
**Replies:** 1\
**Last updated:** [September 25, 2016, 7:18pm UTC](https://discuss.elastic.co/t/how-to-copy-or-rename-a-complex-field-into-another-field/61015 "2016-09-25T19:18:26Z")

</div>

Hi, I'd like to keep all the information from rabbitmq\_properties that are stored in \[@metadata\]\[rabbitmq\_properties\]. To achieve that, I wanted to copy the complex element into another field (not under @metadata), but…

---

## [Need to delete data and Indexes from ES older than 7 days](https://discuss.elastic.co/t/need-to-delete-data-and-indexes-from-es-older-than-7-days/46173)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 1\
**Last updated:** [April 3, 2016, 6:14pm UTC](https://discuss.elastic.co/t/need-to-delete-data-and-indexes-from-es-older-than-7-days/46173 "2016-04-03T18:14:31Z")

</div>

I have many indexes and the size of all those is around 10 GB. The data is around more than 2 weeks older. I need to keep data only for last 7 days. As per my analysis, one way is to use DELETE - http://myserver:9200/…

---

## [Make an analyzed field to a not\_analyzed](https://discuss.elastic.co/t/make-an-analyzed-field-to-a-not-analyzed/23978)

<div class="topic-metadata">

**Author:** [@andimak](https://discuss.elastic.co/u/andimak)\
**Replies:** 1\
**Last updated:** [June 19, 2015, 6:24pm UTC](https://discuss.elastic.co/t/make-an-analyzed-field-to-a-not-analyzed/23978 "2015-06-19T18:24:23Z")

</div>

Hi there, I have some a field "domain" and a filtered alias on that field. The problem is i have the field "domain" with default settings, which means "analyzed". I have "domain" values like "test.com" and "test-book.…

---

## [Upgrading Elastic from 7.13.1 to 7.14](https://discuss.elastic.co/t/upgrading-elastic-from-7-13-1-to-7-14/282478)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 2\
**Last updated:** [August 25, 2021, 7:57pm UTC](https://discuss.elastic.co/t/upgrading-elastic-from-7-13-1-to-7-14/282478 "2021-08-25T19:57:45Z")

</div>

I am trying to upgrade elastic from 7.13.1 to 7.14.0 by following the steps in Rolling upgrades | Elasticsearch Guide \[7.14\] | Elastic I am getting the conflict error as follows localhost:~ # sudo rpm --install elastic…

---

## [Convert text value to IP](https://discuss.elastic.co/t/convert-text-value-to-ip/277146)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 2\
**Last updated:** [June 27, 2021, 10:27pm UTC](https://discuss.elastic.co/t/convert-text-value-to-ip/277146 "2021-06-27T22:27:14Z")

</div>

Hello every body, I am parsing the wallix logs by using the kv plugin kv{ source =\> "syslog\_message" value\_split =\> "=\\"" field\_split =\> "\\"\\s" } As results i get all the output as text as you can see bellow: \> { \>…

---

## [Using NER Apache NLP](https://discuss.elastic.co/t/using-ner-apache-nlp/209092)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 12:32pm UTC](https://discuss.elastic.co/t/using-ner-apache-nlp/209092 "2019-11-28T12:32:35Z")

</div>

Hi all. I hava a NER model from ApacheNLP ner.bin. I need process a text into field text\_ner using this NER, transforming tags\[1\] in anothers fields. Is there any plugin that I can point to ner.bin and elastic do this…

---

## [Canvas replace function](https://discuss.elastic.co/t/canvas-replace-function/169019)

<div class="topic-metadata">

**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\
**Replies:** 2\
**Last updated:** [February 25, 2019, 12:10pm UTC](https://discuss.elastic.co/t/canvas-replace-function/169019 "2019-02-25T12:10:15Z")

</div>

I'm working with Canvas a lot at the moment so please excuse all the questions... Can anyone give usage examples of the replace function? I would expect something like this to work: | mapColumn service fn={replace "-"…

---

## [Field value String manipulation in logstash filter](https://discuss.elastic.co/t/field-value-string-manipulation-in-logstash-filter/97726)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 6:49pm UTC](https://discuss.elastic.co/t/field-value-string-manipulation-in-logstash-filter/97726 "2017-08-23T18:49:55Z")

</div>

I need to manipulate the string value of my json log, This is my sample log file {"LogLevel":"ERROR","LogMsg":"{\\"itemId\\":0,\\"module\\":\\"/curie/calendar/appointment\\",\\"action\\":\\"/getSlotByDate/{doctorId}/{date}\\",\\"e…

---

## [Kibana giving error "This site can’t be reached" post migration](https://discuss.elastic.co/t/kibana-giving-error-this-site-can-t-be-reached-post-migration/97554)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 7:09am UTC](https://discuss.elastic.co/t/kibana-giving-error-this-site-can-t-be-reached-post-migration/97554 "2017-08-23T07:09:10Z")

</div>

Hi I upgraded my ELK cluster to latest versions. its a 2 node for ES, 1 each for logstash and kibana Kibana not loading. service is running fine with kibana user and could see below in kibana.stdout logs {"type":"lo…

---

## [Define parent / child mapping via Java API](https://discuss.elastic.co/t/define-parent-child-mapping-via-java-api/63997)

<div class="topic-metadata">

**Author:** [@chris\_ttonk](https://discuss.elastic.co/u/chris_ttonk)\
**Replies:** 2\
**Last updated:** [October 28, 2016, 10:31am UTC](https://discuss.elastic.co/t/define-parent-child-mapping-via-java-api/63997 "2016-10-28T10:31:07Z")

</div>

I want to define the following parent child mapping in Java: PUT my\_index { "mappings": { "my\_parent": {}, "my\_child": { "\_parent": { "type": "my\_parent" } } } } My problem is tha…

---

## [Server workflow direction](https://discuss.elastic.co/t/server-workflow-direction/38640)

<div class="topic-metadata">

**Author:** [@nick76](https://discuss.elastic.co/u/nick76)\
**Replies:** 2\
**Last updated:** [January 8, 2016, 9:43am UTC](https://discuss.elastic.co/t/server-workflow-direction/38640 "2016-01-08T09:43:03Z")

</div>

Hello all, I'm absolutely new to Logstash, Elasticsearch and kibana. My boss asked me to put in place a cluster of logstash and elastic search servers for collecting all the logs we have in our DMZ server. What I wish t…

---

## [Convert bulk request to json document and publish that document to ES as a seperate task](https://discuss.elastic.co/t/convert-bulk-request-to-json-document-and-publish-that-document-to-es-as-a-seperate-task/23448)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 2\
**Last updated:** [April 28, 2015, 7:15pm UTC](https://discuss.elastic.co/t/convert-bulk-request-to-json-document-and-publish-that-document-to-es-as-a-seperate-task/23448 "2015-04-28T19:15:08Z")

</div>

Hi, I'm expecting to implement ES back statistic collecting application. For that I'm expecting to publish data using bulk API. I want to separate out request generating and request publishing tasks. First task is…

---

## [Error on adding the new field mapping in already existing mapping](https://discuss.elastic.co/t/error-on-adding-the-new-field-mapping-in-already-existing-mapping/19734)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 2\
**Last updated:** [September 17, 2014, 9:43am UTC](https://discuss.elastic.co/t/error-on-adding-the-new-field-mapping-in-already-existing-mapping/19734 "2014-09-17T09:43:15Z")

</div>

Hi, We already have a type in our system, \*YsFact\*. Now I needed to add a new field in this type, \*username\*. And username has following mapping. \*"username":{"type":"string","index":"not\_analyzed"}\*…

---

## [Only one of dozens of log indexes won't rollover: "source alias does not exist"](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 5\
**Last updated:** [March 23, 2022, 7:52pm UTC](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673 "2022-03-23T19:52:23Z")

</div>

ES: 6.8.13 NEST 6.8.6 We have a number of indexes for which we have a programmatic process that checks rollover criteria (ie. max age, max size, etc.) every night. They all have essentially identical template rules, e…

---

## [Change field value within to another value](https://discuss.elastic.co/t/change-field-value-within-to-another-value/137039)

<div class="topic-metadata">

**Author:** [@SuperK\_1860](https://discuss.elastic.co/u/SuperK_1860)\
**Replies:** 5\
**Last updated:** [June 26, 2018, 7:17am UTC](https://discuss.elastic.co/t/change-field-value-within-to-another-value/137039 "2018-06-26T07:17:10Z")

</div>

Good day Could someone please let me know what filter plugin or process I would need to do to change a field value. By this I mean I have a column that I want to input via csv, I am good and using the filter csv plugin…

---

## [Get 'unique' results when uniqueness is defined by a different element](https://discuss.elastic.co/t/get-unique-results-when-uniqueness-is-defined-by-a-different-element/110418)

<div class="topic-metadata">

**Author:** [@PaulAngus](https://discuss.elastic.co/u/PaulAngus)\
**Replies:** 5\
**Last updated:** [January 3, 2018, 10:54pm UTC](https://discuss.elastic.co/t/get-unique-results-when-uniqueness-is-defined-by-a-different-element/110418 "2018-01-03T22:54:22Z")

</div>

I have results from test runs, every run has a testrun\_uuid, and every run creates 100s of result sets. I want to create a pie chart of results in a field (which is metadata about the test run and he same in every resul…

---

## [Logstash Filebeat integration issue with custom logs](https://discuss.elastic.co/t/logstash-filebeat-integration-issue-with-custom-logs/72367)

<div class="topic-metadata">

**Author:** [@Ramakrishna\_K](https://discuss.elastic.co/u/Ramakrishna_K)\
**Replies:** 5\
**Last updated:** [January 24, 2017, 6:46am UTC](https://discuss.elastic.co/t/logstash-filebeat-integration-issue-with-custom-logs/72367 "2017-01-24T06:46:32Z")

</div>

Hi, I have a custom log generated by shell script as shown below: 06:48:18 PM CPU %user %nice %system %iowait %steal %idle 06:48:19 PM all 3.05 0.00 0.54 0.46 0.00 …

---

## [Number of matched positions as score](https://discuss.elastic.co/t/number-of-matched-positions-as-score/18414)

<div class="topic-metadata">

**Author:** [@Dany\_Gielow](https://discuss.elastic.co/u/Dany_Gielow)\
**Replies:** 5\
**Last updated:** [July 1, 2014, 2:06pm UTC](https://discuss.elastic.co/t/number-of-matched-positions-as-score/18414 "2014-07-01T14:06:05Z")

</div>

Hello, I want to match only documents which match all positions. My approach would be to index the number of positions and compare it to the number of matched positions. Every position that has multiple tokens (…

---

## [Elastic Cloud Pricing Question](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [August 29, 2022, 3:43am UTC](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079 "2022-08-29T03:43:44Z")

</div>

Hi there, I was reading this article: and I have a question to better understand the pricing mode. Let us say I have choose (as stated in the example) a “Compute Optimized” profile. This means in the first place mor…

---

## [Kibana support for System for Cross-Domain Identity Management (SCIM)](https://discuss.elastic.co/t/kibana-support-for-system-for-cross-domain-identity-management-scim/334930)

<div class="topic-metadata">

**Author:** [@sivanov](https://discuss.elastic.co/u/sivanov)\
**Replies:** 4\
**Last updated:** [June 6, 2023, 8:44am UTC](https://discuss.elastic.co/t/kibana-support-for-system-for-cross-domain-identity-management-scim/334930 "2023-06-06T08:44:22Z")

</div>

Hi, Does Kibana / Elastic Stack support SCIM for identity providers like Microsoft (Azure/AD)? There is no documentation available on the topic. A short info on SCIM systems: SCIM synchronization with Azure Active Dir…

---

## ['Cannot read ENT\_SEARCH\_CONFIG\_PATH file' error in Enterprise Search](https://discuss.elastic.co/t/cannot-read-ent-search-config-path-file-error-in-enterprise-search/265588)

<div class="topic-metadata">

**Author:** [@basan4ik](https://discuss.elastic.co/u/basan4ik)\
**Replies:** 4\
**Last updated:** [February 28, 2021, 5:57pm UTC](https://discuss.elastic.co/t/cannot-read-ent-search-config-path-file-error-in-enterprise-search/265588 "2021-02-28T17:57:39Z")

</div>

I'm trying to log in Elastic Enterpirse Search: ENT\_SEARCH\_DEFAULT\_PASSWORD=somepassword bin/enterprise-search but get this Error: Found java executable in PATH Java version detected: 11.0.10 (major version: 11) Canno…

---

## [Query multiple fields with and](https://discuss.elastic.co/t/query-multiple-fields-with-and/260021)

<div class="topic-metadata">

**Author:** [@bastimm](https://discuss.elastic.co/u/bastimm)\
**Replies:** 4\
**Last updated:** [January 8, 2021, 8:57am UTC](https://discuss.elastic.co/t/query-multiple-fields-with-and/260021 "2021-01-08T08:57:53Z")

</div>

Hello back again! Last time I wrote queries is about 3 years ago, so I am not sure wether something changed for my case ,-) I have multiple fields in my Index, like MPN (manufacturernumber), manufacturer, title, descri…

---

## [Socket hang up error in Kibana v6.8.3](https://discuss.elastic.co/t/socket-hang-up-error-in-kibana-v6-8-3/203849)

<div class="topic-metadata">

**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\
**Replies:** 4\
**Last updated:** [October 22, 2019, 1:14pm UTC](https://discuss.elastic.co/t/socket-hang-up-error-in-kibana-v6-8-3/203849 "2019-10-22T13:14:20Z")

</div>

Hi, I noticed the following error in Kibana logs for queries that are taking more than 2 minutes: {"type":"log","@timestamp":"2019-10-16T12:56:07Z","tags":\["error","elasticsearch","data"\],"pid":30353,"message":"Reques…

---

## [Linestring does not display on Maps App](https://discuss.elastic.co/t/linestring-does-not-display-on-maps-app/168737)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 4\
**Last updated:** [February 20, 2019, 4:36pm UTC](https://discuss.elastic.co/t/linestring-does-not-display-on-maps-app/168737 "2019-02-20T16:36:41Z")

</div>

Using Kibana 7.0.beta1, with the new and marvelous Map app. I am able to add layers using elasticsearch indexes containing geo\_point, but when I try to add a simple Linestring using geo\_shape, I can not see it. The doc…

---

## [I can't draw with color red the negative bars in kibana vertical bar visualization](https://discuss.elastic.co/t/i-cant-draw-with-color-red-the-negative-bars-in-kibana-vertical-bar-visualization/157704)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 4\
**Last updated:** [November 22, 2018, 12:40pm UTC](https://discuss.elastic.co/t/i-cant-draw-with-color-red-the-negative-bars-in-kibana-vertical-bar-visualization/157704 "2018-11-22T12:40:40Z")

</div>

One question, is there any solution to draw the negative bar with red colour and positive bars with green colur in kibana vertical bar visualization?

---

## [Coping with ES' Use of org.joda.time.MutableDateTime](https://discuss.elastic.co/t/coping-with-es-use-of-org-joda-time-mutabledatetime/152733)

<div class="topic-metadata">

**Author:** [@SpaceMoose](https://discuss.elastic.co/u/SpaceMoose)\
**Replies:** 4\
**Last updated:** [October 18, 2018, 7:27am UTC](https://discuss.elastic.co/t/coping-with-es-use-of-org-joda-time-mutabledatetime/152733 "2018-10-18T07:27:12Z")

</div>

Hello... I'm still struggling with date arithmetic in the ES stack. I tried something that should have been trivial, coding along with an example presented at this url: https://www.codeproject.com/Articles/1179670/Usi…

---

## [How to store metricbeat data in local disk](https://discuss.elastic.co/t/how-to-store-metricbeat-data-in-local-disk/142682)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 9:56am UTC](https://discuss.elastic.co/t/how-to-store-metricbeat-data-in-local-disk/142682 "2018-08-02T09:56:40Z")

</div>

Hi All, We had a discussion in meeting about the metricbeat data sending through elasticsearch output and if the output elasticsearch is went down where the metric data will store? I was reading this article, https://…

---

## [How do I output the score](https://discuss.elastic.co/t/how-do-i-output-the-score/109437)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 4\
**Last updated:** [November 29, 2017, 12:12pm UTC](https://discuss.elastic.co/t/how-do-i-output-the-score/109437 "2017-11-29T12:12:50Z")

</div>

I perform the following query in: GET fullsiteindex/\_search { "query": { "query\_string" : { "query" :"my search string", "fields" :\["content"\] } }, "\_source" :\["path.real", "path.virtual", "meta.title", "meta.raw.mo…

---

## [Strange Logstash index fields in visualization](https://discuss.elastic.co/t/strange-logstash-index-fields-in-visualization/101023)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 4\
**Last updated:** [September 20, 2017, 5:01pm UTC](https://discuss.elastic.co/t/strange-logstash-index-fields-in-visualization/101023 "2017-09-20T17:01:02Z")

</div>

Hello, all. I previously posted this in the Logstash forum, but was advised that this may be a better location. I hope I present my issue understandably. I'm running Elastic Stack 5.6, and most things are working well…

---

## [Is Elasticsearch a drop in replacement for Memcached?](https://discuss.elastic.co/t/is-elasticsearch-a-drop-in-replacement-for-memcached/20024)

<div class="topic-metadata">

**Author:** [@Ryan\_Bergman](https://discuss.elastic.co/u/Ryan_Bergman)\
**Replies:** 4\
**Last updated:** [October 2, 2014, 2:59pm UTC](https://discuss.elastic.co/t/is-elasticsearch-a-drop-in-replacement-for-memcached/20024 "2014-10-02T14:59:42Z")

</div>

Hi, I've been trying to play with Elasticsearch as a drop in replacement for Memcached. I've installed the memcached transport and it looks like it started fine and is on the right port. However if I attempt to u…

---

## [TransportClient misuse cluster name when connection to the cluster](https://discuss.elastic.co/t/transportclient-misuse-cluster-name-when-connection-to-the-cluster/4683)

<div class="topic-metadata">

**Author:** [@Weiwei\_Wang](https://discuss.elastic.co/u/Weiwei_Wang)\
**Replies:** 4\
**Last updated:** [June 24, 2011, 4:56pm UTC](https://discuss.elastic.co/t/transportclient-misuse-cluster-name-when-connection-to-the-cluster/4683 "2011-06-24T16:56:58Z")

</div>

I have two clusters: pimsearch and elasticsearch both on the same server group. cluster pimsearch use port 9300 cluster elasticsearch use port 9301 the ips for the two clusters are 192.168.0.1, 192.168.0.2, 192…

---

## [Dissect Logs](https://discuss.elastic.co/t/dissect-logs/286048)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 7\
**Last updated:** [October 8, 2021, 2:41pm UTC](https://discuss.elastic.co/t/dissect-logs/286048 "2021-10-08T14:41:53Z")

</div>

I simply want to turn key:value data from a message string into fields in Elastic, so I can analyze the logs with Kibana. I'd like to use Dissect to do the following: Dissecting this log: conn=10 op=221996 RESULT err=…

[Previous page](https://discuss.elastic.co/top.md?page=1391&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1393&per_page=50&period=all)
