# Top

**URL:** https://discuss.elastic.co/top.md?page=1396&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1397

---

## [\_Score = null при сортировке по другому полю](https://discuss.elastic.co/t/score-null/181384)

<div class="topic-metadata">

**Author:** [@older\_Jack\_D](https://discuss.elastic.co/u/older_Jack_D)\
**Replies:** 4\
**Last updated:** [May 17, 2019, 11:08am UTC](https://discuss.elastic.co/t/score-null/181384 "2019-05-17T11:08:59Z")

</div>

У меня такая проблема что я не могу сделать релевантную сортировку у меня есть запрос на продукты : "query": { "bool": { "must": \[ { "multi\_match": { "query": "apple Iphone XR 1…

---

## [How get the Action ID in script](https://discuss.elastic.co/t/how-get-the-action-id-in-script/107206)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 5:30pm UTC](https://discuss.elastic.co/t/how-get-the-action-id-in-script/107206 "2017-11-13T17:30:52Z")

</div>

Hi, In the Watcher, I have two actions which output to Slack. In the payload send to Slack, I want to inside the current Action ID. But I don't find a var contain the action id in the ctx. I want get the ID of the act…

---

## [Problem in my Groking](https://discuss.elastic.co/t/problem-in-my-groking/69582)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 4\
**Last updated:** [December 27, 2016, 2:42pm UTC](https://discuss.elastic.co/t/problem-in-my-groking/69582 "2016-12-27T14:42:39Z")

</div>

Hi, I have few entries in log that looks like that: I am trying to build a grok that will fits them all, but have a problem where the string is : Exception occurred in API invocation More that, I need to try and c…

---

## [\[SOLVED\] Drop filter issue](https://discuss.elastic.co/t/solved-drop-filter-issue/54944)

<div class="topic-metadata">

**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 1:51pm UTC](https://discuss.elastic.co/t/solved-drop-filter-issue/54944 "2016-07-07T13:51:24Z")

</div>

Hi all, I try to drop the field "message" in logstash: filter { if \[type\] == "test" { grok { match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:syslog\_host\_time} %{IP:client} %{WORD:severity} %{…

---

## [Grokparsefailure migrating from 1.4.1 to 2.3.1](https://discuss.elastic.co/t/grokparsefailure-migrating-from-1-4-1-to-2-3-1/47662)

<div class="topic-metadata">

**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\
**Replies:** 4\
**Last updated:** [April 19, 2016, 8:10pm UTC](https://discuss.elastic.co/t/grokparsefailure-migrating-from-1-4-1-to-2-3-1/47662 "2016-04-19T20:10:18Z")

</div>

I'm migrating from logstash 1.4.1 to 2.3.1 and grok is giving me troubles, seems like it's not behaving like it used to. Is giving me grokparsefailure on this data: Apr 18 09:25:20 10.0.0.10 date=2016-04-18 time=09:19:…

---

## [Yarn build fails](https://discuss.elastic.co/t/yarn-build-fails/281849)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 3:59pm UTC](https://discuss.elastic.co/t/yarn-build-fails/281849 "2021-08-19T15:59:08Z")

</div>

Hello there, I am trying to build archive for my custom plugin. I am following the process in the link below. So, I generated the plugin with the generate\_plugin script but then it says that in order to use my plugin…

---

## [User Account Details](https://discuss.elastic.co/t/user-account-details/279636)

<div class="topic-metadata">

**Author:** [@pradeepvj](https://discuss.elastic.co/u/pradeepvj)\
**Replies:** 6\
**Last updated:** [July 28, 2021, 3:48am UTC](https://discuss.elastic.co/t/user-account-details/279636 "2021-07-28T03:48:07Z")

</div>

Hi All, I'm new to ELK...how to we get information about user accounts like user account creation or expiration? something similar to a table in Database I can see \_security/user api has only username,fullname,email and…

---

## [Logstash if statement for program](https://discuss.elastic.co/t/logstash-if-statement-for-program/234020)

<div class="topic-metadata">

**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\
**Replies:** 6\
**Last updated:** [May 28, 2020, 5:56am UTC](https://discuss.elastic.co/t/logstash-if-statement-for-program/234020 "2020-05-28T05:56:19Z")

</div>

hi i know its elementary but i am stuck at an if statement with if statement I get grok failure and without it every thing is fine I'm using logstash 7.7 indent preformatted text by 4 spaces \`\`\` input {stdin{}} filt…

---

## [Авторизация Kibana - failed to authenticate user \[kibana\]](https://discuss.elastic.co/t/kibana-failed-to-authenticate-user-kibana/227867)

<div class="topic-metadata">

**Author:** [@Nurlan199206](https://discuss.elastic.co/u/Nurlan199206)\
**Replies:** 6\
**Last updated:** [April 15, 2020, 9:40am UTC](https://discuss.elastic.co/t/kibana-failed-to-authenticate-user-kibana/227867 "2020-04-15T09:40:12Z")

</div>

Всем привет. Не получается настроить авторизацию в Kibana для Elasticsearch кластера состоящих из 3 мастер нод. Пароли заводил с помощью утилиты elasticsearch-setup-passwords auto Хотя у меня получалось настраивать стр…

---

## [Logstash exits after less than a minute?](https://discuss.elastic.co/t/logstash-exits-after-less-than-a-minute/85035)

<div class="topic-metadata">

**Author:** [@BrunoC](https://discuss.elastic.co/u/BrunoC)\
**Replies:** 6\
**Last updated:** [May 9, 2017, 8:48am UTC](https://discuss.elastic.co/t/logstash-exits-after-less-than-a-minute/85035 "2017-05-09T08:48:48Z")

</div>

Hi guys, I'm having a big problem, when I start Logstash's service it exits after a few seconds. (When checking it's statut it says "active (exited)", I managed to have it run for a few hours last week but now it's ju…

---

## [로그 watcher를 통한 알림 설정 관련 문의](https://discuss.elastic.co/t/watcher/303568)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 5\
**Last updated:** [April 29, 2022, 6:46am UTC](https://discuss.elastic.co/t/watcher/303568 "2022-04-29T06:46:25Z")

</div>

안녕하세요~! 늘 많은 도움을 받고 있습니다. watcher를 통해, 특정 조건 부합시 slack으로 알림을 보내도록 하고 싶은데, 혹시 참고할만한 레퍼런스가 있을까요?

---

## [Check for a dialog box during process](https://discuss.elastic.co/t/check-for-a-dialog-box-during-process/295363)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 5\
**Last updated:** [January 28, 2022, 9:25am UTC](https://discuss.elastic.co/t/check-for-a-dialog-box-during-process/295363 "2022-01-28T09:25:21Z")

</div>

I have an application that, after login, may sometimes present a dialog box that you would click on an 'ok' button to remove. Other times the dialog box may not appear. Is their any method to check if the dialog box ap…

---

## [Elastic node can't start due to removed index setting](https://discuss.elastic.co/t/elastic-node-cant-start-due-to-removed-index-setting/290115)

<div class="topic-metadata">

**Author:** [@vvp199303](https://discuss.elastic.co/u/vvp199303)\
**Replies:** 5\
**Last updated:** [November 26, 2021, 6:50pm UTC](https://discuss.elastic.co/t/elastic-node-cant-start-due-to-removed-index-setting/290115 "2021-11-26T18:50:10Z")

</div>

Hi. I have a trouble with Elastic cluster (v 7.13.0) . Аfter adding an { "index.mapper.dynamic" : false } option for one index in cluster I was unable to restart cluster node. Also, I can't change "index.mapper.dynamic…

---

## [\_grokparsefailure for Apache access logs, working fine without fluentbit, works fine on grokdebugger](https://discuss.elastic.co/t/grokparsefailure-for-apache-access-logs-working-fine-without-fluentbit-works-fine-on-grokdebugger/176019)

<div class="topic-metadata">

**Author:** [@vaibhavz](https://discuss.elastic.co/u/vaibhavz)\
**Replies:** 5\
**Last updated:** [April 11, 2019, 6:37am UTC](https://discuss.elastic.co/t/grokparsefailure-for-apache-access-logs-working-fine-without-fluentbit-works-fine-on-grokdebugger/176019 "2019-04-11T06:37:11Z")

</div>

Hello, I'm getting \_grokparsefailure while parsing access logs using FluentBit, I'm able to parse it usign grok debugger. sample logs 22.244.133.97 : 22.244.133.97 - - \[09/Apr/2019:11:04:15 +0000\] GET /app/include/sty…

---

## [Конструкции if else в секции input](https://discuss.elastic.co/t/if-else-input/151326)

<div class="topic-metadata">

**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\
**Replies:** 5\
**Last updated:** [October 11, 2018, 10:28am UTC](https://discuss.elastic.co/t/if-else-input/151326 "2018-10-11T10:28:11Z")

</div>

Коллеги доброго дня, есть поток файлов идущих по rsyslog на сервер logstash. Есть желание разделить multiline правила в зависимости от того какой файл сейчас обрабатывается. Возможно ли использовать конструкцию if \[…

---

## [Query Performace Help](https://discuss.elastic.co/t/query-performace-help/38993)

<div class="topic-metadata">

**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\
**Replies:** 5\
**Last updated:** [April 19, 2016, 10:01am UTC](https://discuss.elastic.co/t/query-performace-help/38993 "2016-04-19T10:01:27Z")

</div>

Hi, We are getting logs from multiple ips thus a single index can have docs from multiple ips. I need to categorise set of ips into one group. As of now i am using OR query to filter those group logs. Method1 Exam…

---

## [Marvel not showing nodes stats](https://discuss.elastic.co/t/marvel-not-showing-nodes-stats/17783)

<div class="topic-metadata">

**Author:** [@prometheus](https://discuss.elastic.co/u/prometheus)\
**Replies:** 5\
**Last updated:** [August 28, 2014, 8:42pm UTC](https://discuss.elastic.co/t/marvel-not-showing-nodes-stats/17783 "2014-08-28T20:42:35Z")

</div>

Hi, We have development test cluster 8 nodes running on 0.90.10 ES. Also we have one monitoring node separated from dev cluster for marvel. We installed all nodes to marvel latest /1.1.1/ pointing to monitori…

---

## [No\_shard\_available\_action\_exception](https://discuss.elastic.co/t/no-shard-available-action-exception/341883)

<div class="topic-metadata">

**Author:** [@Nibort](https://discuss.elastic.co/u/Nibort)\
**Replies:** 0\
**Last updated:** [August 29, 2023, 1:25pm UTC](https://discuss.elastic.co/t/no-shard-available-action-exception/341883 "2023-08-29T13:25:32Z")

</div>

Hello, I'm trying to send rsyslog with filebeat to my Elasticsearch cluster I've added the global path where logs are stored (/var/log/\*.log) filebeat.yml filebeat.inputs: - type: log id: rsyslog paths: - /va…

---

## [Visualize unique count of IDs values by a date field](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616)

<div class="topic-metadata">

**Author:** [@H0tmilk](https://discuss.elastic.co/u/H0tmilk)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 2:51pm UTC](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616 "2022-05-02T14:51:31Z")

</div>

Hello, This is my data (for example) in Elasticsearch : { "id": 1, "status": "Active", "title": "Incident 1", "@timestamp": "28/04/22" }, { "id": 2, "status": "Active", "title": "Incident 2", "@timestamp": "28/…

---

## [Filtering setup for docker containers not working](https://discuss.elastic.co/t/filtering-setup-for-docker-containers-not-working/295573)

<div class="topic-metadata">

**Author:** [@mitlonik](https://discuss.elastic.co/u/mitlonik)\
**Replies:** 3\
**Last updated:** [January 31, 2022, 6:27am UTC](https://discuss.elastic.co/t/filtering-setup-for-docker-containers-not-working/295573 "2022-01-31T06:27:14Z")

</div>

filtering setup for docker containers not working. I started Elastic Stack without anybody additional settings. And here are my filebeat settings: filebeat.yml filebeat.autodiscover: providers: - type: docker …

---

## [Filebeat Cisco Umbrella](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779)

<div class="topic-metadata">

**Author:** [@nathanachey](https://discuss.elastic.co/u/nathanachey)\
**Replies:** 3\
**Last updated:** [December 17, 2020, 2:01pm UTC](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779 "2020-12-17T14:01:26Z")

</div>

I'm trying to setup Filebeat to use the Cisco Umbrella module. We have the Cisco maintained bucket. The URL Cisco provides is s3://cisco-managed-us-west-1/2613934\_1b0f4f029c8f0b75a2f9a6d4e06a79d6cbbc41bb The error I'm…

---

## [Auditbeat 7.7.0 fails to start on Kubuntu](https://discuss.elastic.co/t/auditbeat-7-7-0-fails-to-start-on-kubuntu/235004)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 3\
**Last updated:** [June 1, 2020, 9:14pm UTC](https://discuss.elastic.co/t/auditbeat-7-7-0-fails-to-start-on-kubuntu/235004 "2020-06-01T21:14:56Z")

</div>

I am trying to run auditbeat on Kubuntu (20.04 LTS), however it keeps crashing. There is no configuration inside audit.rules.d/. However crash reason seems to be something else: May 30 13:13:01 HOSTNAME auditbeat\[1…

---

## [Filebeat docker input: Error getting container info: \<nil\>](https://discuss.elastic.co/t/filebeat-docker-input-error-getting-container-info-nil/153878)

<div class="topic-metadata">

**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\
**Replies:** 3\
**Last updated:** [October 25, 2018, 9:20pm UTC](https://discuss.elastic.co/t/filebeat-docker-input-error-getting-container-info-nil/153878 "2018-10-25T21:20:37Z")

</div>

Hi, Running filebeat 6.3.2 with "- add\_docker\_metadata" set, and periodically see this in the logs: ERROR docker/watcher.go:233 Error getting container info: \<nil\> Can you please provide some information as to what ma…

---

## [Kibana- TIme Range filter in Dashboard does not work](https://discuss.elastic.co/t/kibana-time-range-filter-in-dashboard-does-not-work/150200)

<div class="topic-metadata">

**Author:** [@Nerin](https://discuss.elastic.co/u/Nerin)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 1:41pm UTC](https://discuss.elastic.co/t/kibana-time-range-filter-in-dashboard-does-not-work/150200 "2018-09-27T13:41:30Z")

</div>

Hi Peeps, New to ELK. I have my Dashboards displaying a count of occurrences from the time i started logging. How do i make the Time Range Filter options in Kibana to work. Attached screenshot of the feature. Any …

---

## [Filebeat error when parsing .txt log files (Failed to publish events: temporary bulk send failure)](https://discuss.elastic.co/t/filebeat-error-when-parsing-txt-log-files-failed-to-publish-events-temporary-bulk-send-failure/148025)

<div class="topic-metadata">

**Author:** [@jobse.batres](https://discuss.elastic.co/u/jobse.batres)\
**Replies:** 3\
**Last updated:** [September 11, 2018, 3:27pm UTC](https://discuss.elastic.co/t/filebeat-error-when-parsing-txt-log-files-failed-to-publish-events-temporary-bulk-send-failure/148025 "2018-09-11T15:27:39Z")

</div>

Hello, I'm trying to get some log files that in a .txt format to my ElasticSearch instance in AWS. I'm using Filebeat to send the output to my ES cluster. However when I initiate Filebeat on the Windows host, I get th…

---

## [Logstash Elasticsearch Output with specific fields to index](https://discuss.elastic.co/t/logstash-elasticsearch-output-with-specific-fields-to-index/140914)

<div class="topic-metadata">

**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Replies:** 3\
**Last updated:** [July 26, 2018, 1:37pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-with-specific-fields-to-index/140914 "2018-07-26T13:37:50Z")

</div>

Is there possibility for logstash to ingest whole document to one index and specific fields to other index in the elastic search output. Example: If i have 10 fields coming in from input , can i write all the fields to …

---

## [Netflow disable pipeline.yml](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852)

<div class="topic-metadata">

**Author:** [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\
**Replies:** 3\
**Last updated:** [June 28, 2018, 8:37pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852 "2018-06-28T20:37:21Z")

</div>

Hi Using debian 9.4 logstash 6.3.0-1 kibana 6.3.0 elasticsearch 6.3.0 When I install netflow by comnand it disable all configs via pipeline.yml and all others logstashs output that is under /etc/logstash/conf.d/\*,c…

---

## [Logstash JDBC MySQL \> Elastic... not all Records are imported](https://discuss.elastic.co/t/logstash-jdbc-mysql-elastic-not-all-records-are-imported/101175)

<div class="topic-metadata">

**Author:** [@open7](https://discuss.elastic.co/u/open7)\
**Replies:** 3\
**Last updated:** [October 2, 2017, 10:30am UTC](https://discuss.elastic.co/t/logstash-jdbc-mysql-elastic-not-all-records-are-imported/101175 "2017-10-02T10:30:50Z")

</div>

We have a MySQL Table with this kind of Datasets (10 Tables, a few hundred thousands Entries): field\_129: {"MANDT":"200","BUKRS":"3000","ANLN1":"000000002130","ANLN2":"0194","ANLKL":"00002000","GEGST":"","ANLAR":"","E…

---

## [Category examples not available in Machine Learning module 5.5](https://discuss.elastic.co/t/category-examples-not-available-in-machine-learning-module-5-5/97756)

<div class="topic-metadata">

**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\
**Replies:** 3\
**Last updated:** [August 30, 2017, 2:25pm UTC](https://discuss.elastic.co/t/category-examples-not-available-in-machine-learning-module-5-5/97756 "2017-08-30T14:25:24Z")

</div>

Hi, I'm trying out the new Machine learning module 5.5. I'm running a job where I want to identify anomalies using function count and by\_field\_name mlcategory (categorization\_field\_name is message). However, in the ano…

---

## [Help understanding hot threads](https://discuss.elastic.co/t/help-understanding-hot-threads/68943)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 3\
**Last updated:** [December 14, 2016, 4:49am UTC](https://discuss.elastic.co/t/help-understanding-hot-threads/68943 "2016-12-14T04:49:38Z")

</div>

I am querying hot threads and I am seeing these index names, is this native to ES? Not sure what that means. By default groovy is turned off, but we have it turned on. Does this mean a client that is using groovy could b…

---

## [Filebeat 5.0alpha3/4 doesn't clean registry and crashes](https://discuss.elastic.co/t/filebeat-5-0alpha3-4-doesnt-clean-registry-and-crashes/56971)

<div class="topic-metadata">

**Author:** [@Gabry993](https://discuss.elastic.co/u/Gabry993)\
**Replies:** 3\
**Last updated:** [August 6, 2016, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-5-0alpha3-4-doesnt-clean-registry-and-crashes/56971 "2016-08-06T21:10:16Z")

</div>

Hi, I'm facing a couple of problem when running filebeat (both alpha 3 and 4) on a windows server 2003. I'm trying to send the content of a log file which is written continuously and it's rotated often. This is how th…

---

## [Message not fully Read while Indexing by ElasticSsearch Client](https://discuss.elastic.co/t/message-not-fully-read-while-indexing-by-elasticssearch-client/38602)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 3\
**Last updated:** [January 8, 2016, 9:06am UTC](https://discuss.elastic.co/t/message-not-fully-read-while-indexing-by-elasticssearch-client/38602 "2016-01-08T09:06:49Z")

</div>

Hi , We are running elasticsearch production server in 1.5.2 and the client in 1.2.2 for Indexing the data to elasticsearch .I have faced the warnings in the logs as follows, 2016-01-07 10:53:49,985\] WARN\[Log4jESLog…

---

## [Relation between two fields](https://discuss.elastic.co/t/relation-between-two-fields/36132)

<div class="topic-metadata">

**Author:** [@henil\_shah](https://discuss.elastic.co/u/henil_shah)\
**Replies:** 3\
**Last updated:** [December 3, 2015, 6:46am UTC](https://discuss.elastic.co/t/relation-between-two-fields/36132 "2015-12-03T06:46:34Z")

</div>

I have a health data where the fields are Population and Infected. Now for example the population of California is 38,802,500 and total infected are 50,000. Now I want to show how many are infected per 100,000 populatio…

---

## [Field null\_value doesn't seem to have any effect?](https://discuss.elastic.co/t/field-null-value-doesnt-seem-to-have-any-effect/22015)

<div class="topic-metadata">

**Author:** [@AS\_2](https://discuss.elastic.co/u/AS_2)\
**Replies:** 3\
**Last updated:** [February 6, 2015, 4:06pm UTC](https://discuss.elastic.co/t/field-null-value-doesnt-seem-to-have-any-effect/22015 "2015-02-06T16:06:56Z")

</div>

Hello, I've configured the null\_value of a field, as below. But when I do a query, the documents that lack a barfield, don't return the value "0" for the 'barfield' as expected. What could be the reason? "f…

---

## [Function Score Query Java API Not working with Multiple Filters](https://discuss.elastic.co/t/function-score-query-java-api-not-working-with-multiple-filters/19170)

<div class="topic-metadata">

**Author:** [@raghuveer\_jagirdar](https://discuss.elastic.co/u/raghuveer_jagirdar)\
**Replies:** 0\
**Last updated:** [August 8, 2014, 8:29pm UTC](https://discuss.elastic.co/t/function-score-query-java-api-not-working-with-multiple-filters/19170 "2014-08-08T20:29:52Z")

</div>

I am using elasticsearch 1.3.1 version. I am facing a unique problem with FunctionScore Query Java API. I am placing a bool filter inside the function score query in an effort to combine multiple queries. But the …

---

## [Getting 403 code while connecting to elastic](https://discuss.elastic.co/t/getting-403-code-while-connecting-to-elastic/325615)

<div class="topic-metadata">

**Author:** [@fvtarnovskiy](https://discuss.elastic.co/u/fvtarnovskiy)\
**Replies:** 1\
**Last updated:** [February 15, 2023, 9:32pm UTC](https://discuss.elastic.co/t/getting-403-code-while-connecting-to-elastic/325615 "2023-02-15T21:32:05Z")

</div>

Hello! We are a cloud provider from Uzbekistan pro-data.tech (https://pro-data.tech/). Please help in solving the problem - when trying to access Elastic, we get an error code 403 from all our addresses (95.47.127.0/24…

---

## [Can I use Vega Lite with multiple indexes?](https://discuss.elastic.co/t/can-i-use-vega-lite-with-multiple-indexes/300960)

<div class="topic-metadata">

**Author:** [@ivanhoe-dev](https://discuss.elastic.co/u/ivanhoe-dev)\
**Replies:** 1\
**Last updated:** [March 30, 2022, 11:13am UTC](https://discuss.elastic.co/t/can-i-use-vega-lite-with-multiple-indexes/300960 "2022-03-30T11:13:08Z")

</div>

I have a use case which data sources are from two separated indexes, is it possible to plot a single chart from two indexes by vega? Thanks

---

## [Jar file version for logstash jdbc input](https://discuss.elastic.co/t/jar-file-version-for-logstash-jdbc-input/281353)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 1\
**Last updated:** [August 16, 2021, 5:20am UTC](https://discuss.elastic.co/t/jar-file-version-for-logstash-jdbc-input/281353 "2021-08-16T05:20:29Z")

</div>

I am trying to pull in data from a MS SQL Server database via logstash that is hosted on a linux server. It looks like this is a great job for the JDBC input plugin. I am going through the example config posted on the d…

---

## [Multiple kibana in production](https://discuss.elastic.co/t/multiple-kibana-in-production/252694)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 6:35pm UTC](https://discuss.elastic.co/t/multiple-kibana-in-production/252694 "2020-10-21T18:35:00Z")

</div>

I am going to use elasticsearch cluster in which there is 3 master node and 3 data node. And i read the docs of use kibana in production environment i am planning to have another node of elasticsearch which will act as …

---

## [Deoptimised the styling of pitch\_presentation.js as it exceeds the max of 500KB](https://discuss.elastic.co/t/deoptimised-the-styling-of-pitch-presentation-js-as-it-exceeds-the-max-of-500kb/249473)

<div class="topic-metadata">

**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 11:14am UTC](https://discuss.elastic.co/t/deoptimised-the-styling-of-pitch-presentation-js-as-it-exceeds-the-max-of-500kb/249473 "2020-09-22T11:14:57Z")

</div>

Hi, I am getting below issue on starting kibana 7.9.1 on ubuntu(8GB RAM) machine and its stuck at this point. \[BABEL\] Note: The code generator has deoptimised the styling of /export/home1/Elk\_Setup/kibana-7.9.1-linux-x…

---

## [Logstash java class error](https://discuss.elastic.co/t/logstash-java-class-error/227644)

<div class="topic-metadata">

**Author:** [@Krish\_Na](https://discuss.elastic.co/u/Krish_Na)\
**Replies:** 1\
**Last updated:** [April 12, 2020, 8:22am UTC](https://discuss.elastic.co/t/logstash-java-class-error/227644 "2020-04-12T08:22:06Z")

</div>

Hi Gurus, Its been crazy Easter days for me, I tried installing ELK and JDK 14. Elasticsearch is working fine however when I try to run logbash.bat I am getting below error Java HotSpot(TM) 64-Bit Server VM warning: Ign…

---

## [Running script from logstash](https://discuss.elastic.co/t/running-script-from-logstash/218731)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 1\
**Last updated:** [February 11, 2020, 9:03am UTC](https://discuss.elastic.co/t/running-script-from-logstash/218731 "2020-02-11T09:03:29Z")

</div>

Hi Team, Quick Question, Can we run any script that is present in our system, from logstash configuration output section? Thanks

---

## [How to add label in filters aggregation](https://discuss.elastic.co/t/how-to-add-label-in-filters-aggregation/168920)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 9:15pm UTC](https://discuss.elastic.co/t/how-to-add-label-in-filters-aggregation/168920 "2019-02-20T21:15:04Z")

</div>

hi there in kibana, how to add label for each filter of filters aggregation eg: i just want to name for each filter. plz point out to me :slight\_smile: thank you

---

## [Skript for running elasticsearch from command line / bin](https://discuss.elastic.co/t/skript-for-running-elasticsearch-from-command-line-bin/144177)

<div class="topic-metadata">

**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 11:33am UTC](https://discuss.elastic.co/t/skript-for-running-elasticsearch-from-command-line-bin/144177 "2018-08-17T11:33:20Z")

</div>

Hello, I needed to install a different instance of elasticsearch-6.2.4 with .tar.gz on our debian server. We are almost always accessing our servers with root user. Elasticsearch cannot be run as root. It would be verry…

---

## [Aggregate push\_previous\_map\_as\_event seems not work](https://discuss.elastic.co/t/aggregate-push-previous-map-as-event-seems-not-work/114498)

<div class="topic-metadata">

**Author:** [@Rayburn](https://discuss.elastic.co/u/Rayburn)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 8:55am UTC](https://discuss.elastic.co/t/aggregate-push-previous-map-as-event-seems-not-work/114498 "2018-01-09T08:55:27Z")

</div>

I followed the sample 4# of logstash aggregation guide which url is https://www.elastic.co/guide/en/logstash/current/plugins-filters-aggregate.html#plugins-filters-aggregate-example4 The log output json is right, data h…

---

## [Multiple primary shards and how this work on multiple node](https://discuss.elastic.co/t/multiple-primary-shards-and-how-this-work-on-multiple-node/114080)

<div class="topic-metadata">

**Author:** [@tremk](https://discuss.elastic.co/u/tremk)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 11:47am UTC](https://discuss.elastic.co/t/multiple-primary-shards-and-how-this-work-on-multiple-node/114080 "2018-01-04T11:47:33Z")

</div>

Hello In elasticsearch we can have multiple primary shards i.e by default we have 5 primary shards for one index. How elasticsearch store 5 primary shard, i.e if i have 3 nodes in the clusters and create an index with …

---

## [The requested cluster is currently unavailable ID 3fd386](https://discuss.elastic.co/t/the-requested-cluster-is-currently-unavailable-id-3fd386/102028)

<div class="topic-metadata">

**Author:** [@egarl004](https://discuss.elastic.co/u/egarl004)\
**Replies:** 1\
**Last updated:** [September 28, 2017, 4:25am UTC](https://discuss.elastic.co/t/the-requested-cluster-is-currently-unavailable-id-3fd386/102028 "2017-09-28T04:25:14Z")

</div>

Elastic Cloud Issue Attempting to access kibana and receive this message {"ok":false,"message":"The requested cluster is currently unavailable"} Attempted an upgrade today and elastic and kibana seem to be down. messa…

---

## [Error while creating elasticsearch Azure repository for snapshot and restore](https://discuss.elastic.co/t/error-while-creating-elasticsearch-azure-repository-for-snapshot-and-restore/61248)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 1\
**Last updated:** [September 28, 2016, 11:09am UTC](https://discuss.elastic.co/t/error-while-creating-elasticsearch-azure-repository-for-snapshot-and-restore/61248 "2016-09-28T11:09:54Z")

</div>

Hi All, I want to take snapshot and restore using azure repository in Linux, I have configured these below setting in yml, cloud: azure: storage: my\_account: account: https://…

---

## [Diff cluster state](https://discuss.elastic.co/t/diff-cluster-state/57712)

<div class="topic-metadata">

**Author:** [@QD\_Wang](https://discuss.elastic.co/u/QD_Wang)\
**Replies:** 1\
**Last updated:** [August 10, 2016, 2:38pm UTC](https://discuss.elastic.co/t/diff-cluster-state/57712 "2016-08-10T14:38:19Z")

</div>

Hi there after i changed the log level to DEBUG, i am seeing following message \[2016-08-10 09:01:04,329\]\[DEBUG\]\[discovery.zen.publish \] \[ck-client\] received diff cluster state version 5317 with uuid yQlhgJKsRJG-o…

---

## [Why doesn't this plugin add messages to the queue?](https://discuss.elastic.co/t/why-doesnt-this-plugin-add-messages-to-the-queue/51229)

<div class="topic-metadata">

**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\
**Replies:** 1\
**Last updated:** [May 28, 2016, 9:54pm UTC](https://discuss.elastic.co/t/why-doesnt-this-plugin-add-messages-to-the-queue/51229 "2016-05-28T21:54:54Z")

</div>

I'm trying to write my first logstash input plugin by following the guide. It uses the mqtt ruby gem to fetch from a mqtt message bus. The method 'run' is able to fetch from mqtt, and the 'puts' statement shows the me…

[Previous page](https://discuss.elastic.co/top.md?page=1395&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1397&per_page=50&period=all)
