# Top

**URL:** https://discuss.elastic.co/top.md?page=1403&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1404

---

## [Исправление опечаток для русского языка](https://discuss.elastic.co/t/topic/215296)

<div class="topic-metadata">

**Author:** [@lynxoft](https://discuss.elastic.co/u/lynxoft)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 2:53pm UTC](https://discuss.elastic.co/t/topic/215296 "2020-01-17T14:53:52Z")

</div>

Добрый день. Есть поисковый индекс с настройками: 'settings' =\> \[ 'number\_of\_shards' =\> 1, 'number\_of\_replicas' =\> 0, 'analysis'=\>\[ 'c…

---

## [Kibana Maps: Results limited to first 10000 documents](https://discuss.elastic.co/t/kibana-maps-results-limited-to-first-10000-documents/194077)

<div class="topic-metadata">

**Author:** [@Celio\_Nogueira\_de\_Fa](https://discuss.elastic.co/u/Celio_Nogueira_de_Fa)\
**Replies:** 2\
**Last updated:** [August 7, 2019, 3:55pm UTC](https://discuss.elastic.co/t/kibana-maps-results-limited-to-first-10000-documents/194077 "2019-08-07T15:55:32Z")

</div>

Hi all, I'm testing the Kibana Maps feature (7.3 version) and it's really great, kudos! However, as I intend to work with a huge (about billions of documents) index, I could not help but notice that a message saying "Re…

---

## [Change file scan frequency in Winlogbeat](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950)

<div class="topic-metadata">

**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Replies:** 2\
**Last updated:** [January 27, 2019, 3:44pm UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950 "2019-01-27T15:44:17Z")

</div>

As in filebeat there is an option to change file scan frequency. Can someone please let me know what is for winlogbeat ? Is it "refresh\_frequency:10m" or "rotate\_every\_kb: 10000" ? https://www.elastic.co/guide/en/beats…

---

## [How to delete a property in the index](https://discuss.elastic.co/t/how-to-delete-a-property-in-the-index/134714)

<div class="topic-metadata">

**Author:** [@pqt120583](https://discuss.elastic.co/u/pqt120583)\
**Replies:** 2\
**Last updated:** [June 6, 2018, 3:46pm UTC](https://discuss.elastic.co/t/how-to-delete-a-property-in-the-index/134714 "2018-06-06T15:46:17Z")

</div>

Hi all, I have indexed some fields incorrectly in the existing index and now i want to delete them. How can I do it ? Thanks, Thomas.

---

## [This error message Standard Nginx Error Log?](https://discuss.elastic.co/t/this-error-message-standard-nginx-error-log/109102)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 2\
**Last updated:** [November 26, 2017, 7:37am UTC](https://discuss.elastic.co/t/this-error-message-standard-nginx-error-log/109102 "2017-11-26T07:37:38Z")

</div>

this error message Standard Nginx Error Log ?????????? 2017/11/25 06:25:18 \[error\] 14872#14872: \*16949093 FastCGI sent in stderr: "PHP message: PHP Notice: Undefined variable: params in /usr/share/nginx/www/mysitename…

---

## [Kibana is changing my dates to a different timezone](https://discuss.elastic.co/t/kibana-is-changing-my-dates-to-a-different-timezone/106042)

<div class="topic-metadata">

**Author:** [@pshroads](https://discuss.elastic.co/u/pshroads)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 2:36pm UTC](https://discuss.elastic.co/t/kibana-is-changing-my-dates-to-a-different-timezone/106042 "2017-11-01T14:36:54Z")

</div>

I'm on elasticsearch + kibana 6.0.0-rc2. I have a date field defined in my index like this: "timestamp" : { "type" : "date", "format" : "date\_hour\_minute\_second\_fraction" }, and an example of my data in elasticsearch …

---

## [Filebeat can real-time collection?](https://discuss.elastic.co/t/filebeat-can-real-time-collection/98545)

<div class="topic-metadata">

**Author:** [@netdata](https://discuss.elastic.co/u/netdata)\
**Replies:** 2\
**Last updated:** [August 28, 2017, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-can-real-time-collection/98545 "2017-08-28T14:31:38Z")

</div>

i set some parm but i can’t realize real-time collection

---

## [Script to create field if it does not already exist](https://discuss.elastic.co/t/script-to-create-field-if-it-does-not-already-exist/95863)

<div class="topic-metadata">

**Author:** [@samdev](https://discuss.elastic.co/u/samdev)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 11:37am UTC](https://discuss.elastic.co/t/script-to-create-field-if-it-does-not-already-exist/95863 "2017-08-09T11:37:35Z")

</div>

I have created a script that records the history of any updates to a document. It simply copies the current object to a history object. That part is working fine. The problem I have is that the tag names need to be dyna…

---

## [Elasticsearch 2.3.3 Scroll result doesnt deliver hits](https://discuss.elastic.co/t/elasticsearch-2-3-3-scroll-result-doesnt-deliver-hits/53447)

<div class="topic-metadata">

**Author:** [@michaelzollmann](https://discuss.elastic.co/u/michaelzollmann)\
**Replies:** 2\
**Last updated:** [June 22, 2016, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-3-scroll-result-doesnt-deliver-hits/53447 "2016-06-22T08:27:19Z")

</div>

I am using elasticsearch 2.3.3. I have indexed 3 documents which i want to scroll. To get a scrollId i send: curl -XGET 'localhost:8082/entities\_alias/entity/\_search?scroll=1m&pretty' -d ' { "query": { "match…

---

## [Speed up LSF](https://discuss.elastic.co/t/speed-up-lsf/29328)

<div class="topic-metadata">

**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\
**Replies:** 2\
**Last updated:** [September 16, 2015, 1:59pm UTC](https://discuss.elastic.co/t/speed-up-lsf/29328 "2015-09-16T13:59:19Z")

</div>

I am using LSF to send logs that are written in a file. The amount of data written is very large (around 5 millions) and I'd like to send it quickly. The problem I am facing is that LSF sends information quite slowly and…

---

## [To run Elastic Search on localhost](https://discuss.elastic.co/t/to-run-elastic-search-on-localhost/12295)

<div class="topic-metadata">

**Author:** [@kaush777](https://discuss.elastic.co/u/kaush777)\
**Replies:** 2\
**Last updated:** [June 6, 2013, 4:45pm UTC](https://discuss.elastic.co/t/to-run-elastic-search-on-localhost/12295 "2013-06-06T16:45:35Z")

</div>

Hi All, I want the elastic search to listen on the ports - 9300 to 9400 and 9200 by only localhost. I have set the bind and publish host as the default : 192.168.0.1 only.Also, in the url as well i am using local…

---

## [Time field not showing correct timestamp in Kibana logs](https://discuss.elastic.co/t/time-field-not-showing-correct-timestamp-in-kibana-logs/216781)

<div class="topic-metadata">

**Author:** [@Aaditya](https://discuss.elastic.co/u/Aaditya)\
**Replies:** 1\
**Last updated:** [January 28, 2020, 12:58pm UTC](https://discuss.elastic.co/t/time-field-not-showing-correct-timestamp-in-kibana-logs/216781 "2020-01-28T12:58:15Z")

</div>

Hi, I am new to ELK and have an issue with my logs display. The 'Time' field on my kibana dashboard is showing the date/time when the log file was ingested rather than the actual log timestamp. Could you please assist i…

---

## [Update the registry file](https://discuss.elastic.co/t/update-the-registry-file/147027)

<div class="topic-metadata">

**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\
**Replies:** 7\
**Last updated:** [September 3, 2018, 9:15am UTC](https://discuss.elastic.co/t/update-the-registry-file/147027 "2018-09-03T09:15:33Z")

</div>

Hello, I would like to update delete the old data from the file "registry", in fact I am getting now an error message : no left space on device. So I would like to delete information about files already parsed by logst…

---

## [Grok filter failing multiline logs from filebeat](https://discuss.elastic.co/t/grok-filter-failing-multiline-logs-from-filebeat/141152)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 10:03am UTC](https://discuss.elastic.co/t/grok-filter-failing-multiline-logs-from-filebeat/141152 "2018-07-25T10:03:53Z")

</div>

Hello, I have problem with parsing multiline log messages from Filebeat to Logstash using grok filter. This is my configuration of filebeat.yml: filebeat.inputs: - type: log paths: - "/home/mladen/De…

---

## [Elastic search NEST - filtered List sorting group wise](https://discuss.elastic.co/t/elastic-search-nest-filtered-list-sorting-group-wise/131373)

<div class="topic-metadata">

**Author:** [@ShwetaReddy](https://discuss.elastic.co/u/ShwetaReddy)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 11:12pm UTC](https://discuss.elastic.co/t/elastic-search-nest-filtered-list-sorting-group-wise/131373 "2018-05-18T23:12:16Z")

</div>

I am new to the elastic search, I have done a bit of research but I could not find the right answer which fits to my requirement. The below query return the results of searched term and surrounding suburbs results togeth…

---

## [Using logstash+http\_poller to loop through JSON structure, run 2nd poller](https://discuss.elastic.co/t/using-logstash-http-poller-to-loop-through-json-structure-run-2nd-poller/109121)

<div class="topic-metadata">

**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\
**Replies:** 1\
**Last updated:** [November 27, 2017, 6:30am UTC](https://discuss.elastic.co/t/using-logstash-http-poller-to-loop-through-json-structure-run-2nd-poller/109121 "2017-11-27T06:30:05Z")

</div>

Hello, I have an http\_poller working and getting me an array of JSON structures. Is it possible in logstash to loop through one of the fields and for each one run a second http\_poller? For example, let's say my struct…

---

## [Using answer templates](https://discuss.elastic.co/t/using-answer-templates/53998)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 12:43am UTC](https://discuss.elastic.co/t/using-answer-templates/53998 "2016-06-29T00:43:23Z")

</div>

Hey It would be super nice if any user can create their templates to fast answer to people. Templates would be available to create a full response or to complete an existing text. For example, let's say I have a templ…

---

## [\[Solved\] ETW windows logging](https://discuss.elastic.co/t/solved-etw-windows-logging/51666)

<div class="topic-metadata">

**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\
**Replies:** 1\
**Last updated:** [June 2, 2016, 10:21am UTC](https://discuss.elastic.co/t/solved-etw-windows-logging/51666 "2016-06-02T10:21:21Z")

</div>

Can logstash collect ETW logs from windows?

---

## [How to change the color of visualization?](https://discuss.elastic.co/t/how-to-change-the-color-of-visualization/2799)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 1\
**Last updated:** [June 16, 2015, 10:20pm UTC](https://discuss.elastic.co/t/how-to-change-the-color-of-visualization/2799 "2015-06-16T22:20:18Z")

</div>

In Dashboards im getting 404 errors. In visualizations i want where ever 404 error is there, i want red color in graphs for visualization. How can i achieve this. Where i have to make changes. If yes where i have to chan…

---

## [Query-time per-document authorization](https://discuss.elastic.co/t/query-time-per-document-authorization/12115)

<div class="topic-metadata">

**Author:** [@Peter\_Galiovsky](https://discuss.elastic.co/u/Peter_Galiovsky)\
**Replies:** 7\
**Last updated:** [November 20, 2013, 9:17am UTC](https://discuss.elastic.co/t/query-time-per-document-authorization/12115 "2013-11-20T09:17:03Z")

</div>

Hello, if one were to integrate elasticsearch with an external access management service that authorized users on a "per view" basis, how should one approach the issue? Let's say that any form of index-side cachin…

---

## [Does ES throughput/latency get bottlenecked by the slowest host in the cluster?](https://discuss.elastic.co/t/does-es-throughput-latency-get-bottlenecked-by-the-slowest-host-in-the-cluster/9042)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 7\
**Last updated:** [September 19, 2012, 5:02am UTC](https://discuss.elastic.co/t/does-es-throughput-latency-get-bottlenecked-by-the-slowest-host-in-the-cluster/9042 "2012-09-19T05:02:47Z")

</div>

i have a cluster of 2 nodes on aws - 1 m1.large and 1 m1.xlarge. i allocated 4GB on the former and 8GB on the latter for ES. i also have a m1.large non-data non-master node in addition to act as a load balancer. we ar…

---

## [Web crawler not extracting custom fields](https://discuss.elastic.co/t/web-crawler-not-extracting-custom-fields/274070)

<div class="topic-metadata">

**Author:** [@Richard\_Sudworth](https://discuss.elastic.co/u/Richard_Sudworth)\
**Replies:** 3\
**Last updated:** [June 22, 2021, 1:59pm UTC](https://discuss.elastic.co/t/web-crawler-not-extracting-custom-fields/274070 "2021-06-22T13:59:18Z")

</div>

I'm following the instructions at Web crawler reference | Elastic App Search Documentation \[8.4\] | Elastic to get some custom fields crawled on our site, but they are not being picked up. I initially deployed with data-s…

---

## [Error loading config file: yaml: line 38: did not find expected key](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-38-did-not-find-expected-key/240794)

<div class="topic-metadata">

**Author:** [@asagnam](https://discuss.elastic.co/u/asagnam)\
**Replies:** 0\
**Last updated:** [July 11, 2020, 11:11am UTC](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-38-did-not-find-expected-key/240794 "2020-07-11T11:11:57Z")

</div>

when i was testing the winloagbeat config i got error in line 38 couldn't find expected key this is my winlogbeat.yml file kindly help me please to solve this problem thank you ###################### Winlogbeat Conf…

---

## [Creating dedicated master nodes. How do we turn off coordinating responsibilities for master nodes?](https://discuss.elastic.co/t/creating-dedicated-master-nodes-how-do-we-turn-off-coordinating-responsibilities-for-master-nodes/225087)

<div class="topic-metadata">

**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\
**Replies:** 3\
**Last updated:** [March 26, 2020, 5:08am UTC](https://discuss.elastic.co/t/creating-dedicated-master-nodes-how-do-we-turn-off-coordinating-responsibilities-for-master-nodes/225087 "2020-03-26T05:08:05Z")

</div>

Here it is stated that the master node should not be a coordinating node. Dedicated master-eligible nodes only have the master role, allowing them to focus on managing the cluster. While master nodes can also behave …

---

## [Kibana ui settings elasticsearch plugin is red elasticsearch is still initiallizing the kibana index](https://discuss.elastic.co/t/kibana-ui-settings-elasticsearch-plugin-is-red-elasticsearch-is-still-initiallizing-the-kibana-index/173691)

<div class="topic-metadata">

**Author:** [@Sandeep.K](https://discuss.elastic.co/u/Sandeep.K)\
**Replies:** 3\
**Last updated:** [March 27, 2019, 9:25am UTC](https://discuss.elastic.co/t/kibana-ui-settings-elasticsearch-plugin-is-red-elasticsearch-is-still-initiallizing-the-kibana-index/173691 "2019-03-27T09:25:00Z")

</div>

Hi Team Please help on this topic. I have multi node environment. My environment was running from past 6+ months but suddenly got stopped with two errors"ui settings elasticsearch plugin is red" and "elasticsearch is s…

---

## [Addons to detect attacks](https://discuss.elastic.co/t/addons-to-detect-attacks/162204)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 3\
**Last updated:** [December 28, 2018, 5:39am UTC](https://discuss.elastic.co/t/addons-to-detect-attacks/162204 "2018-12-28T05:39:28Z")

</div>

Hi, Is there any addons or patterns available to detect any kind of attacks based on analyzing logs?

---

## [Beat not waiting for elasticsearch when sending dashboard](https://discuss.elastic.co/t/beat-not-waiting-for-elasticsearch-when-sending-dashboard/147468)

<div class="topic-metadata">

**Author:** [@Jas\_Ahluwalia](https://discuss.elastic.co/u/Jas_Ahluwalia)\
**Replies:** 3\
**Last updated:** [September 6, 2018, 9:29pm UTC](https://discuss.elastic.co/t/beat-not-waiting-for-elasticsearch-when-sending-dashboard/147468 "2018-09-06T21:29:46Z")

</div>

Hi, I'm runinng the ELK stack in docker containers (6.4). I have Metricbeat with custom dashboards that i'm mounting into the container. If elasticsearch isn't up, I get the folowing error: metricbeat\_1 | Exiting: Err…

---

## [Html in markdown](https://discuss.elastic.co/t/html-in-markdown/91047)

<div class="topic-metadata">

**Author:** [@zezz](https://discuss.elastic.co/u/zezz)\
**Replies:** 3\
**Last updated:** [June 29, 2017, 3:05pm UTC](https://discuss.elastic.co/t/html-in-markdown/91047 "2017-06-29T15:05:42Z")

</div>

In 5.4.1, the XSS security issue about html in markdown has been corrected. But, the feature could be really interesting... Is there plan to offer the feature again using a configuration flag? Or after sanitising the htm…

---

## [Elastic not indexing correctly. Showing "%{\[@metadata\]\[beat\]}-](https://discuss.elastic.co/t/elastic-not-indexing-correctly-showing-metadata-beat/55653)

<div class="topic-metadata">

**Author:** [@pip0](https://discuss.elastic.co/u/pip0)\
**Replies:** 3\
**Last updated:** [July 19, 2016, 10:14pm UTC](https://discuss.elastic.co/t/elastic-not-indexing-correctly-showing-metadata-beat/55653 "2016-07-19T22:14:35Z")

</div>

My elastic node is not indexing my filebeat correctly. The index is showing up as "%{\[@metadata\]\[beat\]}- I have attached all my configs for further investigation. Any help is appreciate it! Input http://pastebin.co…

---

## [Store indexes in ES while the data stays in HDFS](https://discuss.elastic.co/t/store-indexes-in-es-while-the-data-stays-in-hdfs/49752)

<div class="topic-metadata">

**Author:** [@a\_raj](https://discuss.elastic.co/u/a_raj)\
**Replies:** 3\
**Last updated:** [May 11, 2016, 8:56pm UTC](https://discuss.elastic.co/t/store-indexes-in-es-while-the-data-stays-in-hdfs/49752 "2016-05-11T20:56:09Z")

</div>

Is there a way to index data from an HDFS location into elasticsearch without moving/copying the same to ES? es-hadoop seems to copy the data into ES cluster there by making a copy of the same big chunk of data. Is ther…

---

## [Solr vs ES: performance](https://discuss.elastic.co/t/solr-vs-es-performance/5019)

<div class="topic-metadata">

**Author:** [@mfeingold](https://discuss.elastic.co/u/mfeingold)\
**Replies:** 3\
**Last updated:** [August 1, 2011, 8:36pm UTC](https://discuss.elastic.co/t/solr-vs-es-performance/5019 "2011-08-01T20:36:37Z")

</div>

In my quest for a search platform for our internal needs I am playing with both Solr and ES. I indexed the same data ~4.5M documents with the same structure of indexes and run the same query on both. What surprises …

---

## [Username in auditbeat file\_integrity module](https://discuss.elastic.co/t/username-in-auditbeat-file-integrity-module/298530)

<div class="topic-metadata">

**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 2:56pm UTC](https://discuss.elastic.co/t/username-in-auditbeat-file-integrity-module/298530 "2022-03-01T14:56:32Z")

</div>

Hello! We track file creation/deletion/change in Kibana with auditbeat file\_integrity module. Is there a way to see information about user, who create/change/delete file?

---

## [Check Point Filebeat module clarification](https://discuss.elastic.co/t/check-point-filebeat-module-clarification/243360)

<div class="topic-metadata">

**Author:** [@jasonwomack](https://discuss.elastic.co/u/jasonwomack)\
**Replies:** 0\
**Last updated:** [July 31, 2020, 1:52pm UTC](https://discuss.elastic.co/t/check-point-filebeat-module-clarification/243360 "2020-07-31T13:52:51Z")

</div>

I’m hoping someone can clarify how Filebeat is supposed to be setup when being used to process logs from a Check Point firewall (as covered here: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-chec…

---

## [Experiences with Elastic Upgrades from 1.X](https://discuss.elastic.co/t/experiences-with-elastic-upgrades-from-1-x/134523)

<div class="topic-metadata">

**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\
**Replies:** 0\
**Last updated:** [June 5, 2018, 5:50am UTC](https://discuss.elastic.co/t/experiences-with-elastic-upgrades-from-1-x/134523 "2018-06-05T05:50:15Z")

</div>

Hey Guys, I have written up my experiences with upgrading a few elasticsearch clusters from V1.X to V6.X over at github. I've included a docker-compose with elastic 1.7.5 (with kibana + sense) & 6.2.4 (with kibana an…

---

## [After enabling the xpack security, couldn't access into kibana](https://discuss.elastic.co/t/after-enabling-the-xpack-security-couldnt-access-into-kibana/305036)

<div class="topic-metadata">

**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\
**Replies:** 5\
**Last updated:** [May 20, 2022, 10:54am UTC](https://discuss.elastic.co/t/after-enabling-the-xpack-security-couldnt-access-into-kibana/305036 "2022-05-20T10:54:12Z")

</div>

First of all, I am currently using Elasticsearch 7.17 on Linux Redhat 8. Since I want to install the elastic agent on my windows client, so I get into Fleet to set it up. But there is a message told me that missing sec…

---

## [Make a filter on sub folders - I want to see the files inside the sub folder I selected](https://discuss.elastic.co/t/make-a-filter-on-sub-folders-i-want-to-see-the-files-inside-the-sub-folder-i-selected/191536)

<div class="topic-metadata">

**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\
**Replies:** 5\
**Last updated:** [July 22, 2019, 1:50pm UTC](https://discuss.elastic.co/t/make-a-filter-on-sub-folders-i-want-to-see-the-files-inside-the-sub-folder-i-selected/191536 "2019-07-22T13:50:00Z")

</div>

Dear Community, I am a week old to Elasticsearch and trying to achieve a solution. I have a folder say test with files and sub folders inside it. test - folder test1 - sub folder test2 - sub folder test3 - sub fold…

---

## [Part of my graph is not showen](https://discuss.elastic.co/t/part-of-my-graph-is-not-showen/104062)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 5\
**Last updated:** [October 16, 2017, 11:18am UTC](https://discuss.elastic.co/t/part-of-my-graph-is-not-showen/104062 "2017-10-16T11:18:03Z")

</div>

Hi, I made a graph to check if our system is working and the graph showed me a straight line on 100% (healthy), I made tests to the system to crash the system and it crashed to 16%. Kibana erased all the straight line fr…

---

## [Installation and download of free version of Elastic Enterprise Search on Windows](https://discuss.elastic.co/t/installation-and-download-of-free-version-of-elastic-enterprise-search-on-windows/326755)

<div class="topic-metadata">

**Author:** [@mansi\_raval](https://discuss.elastic.co/u/mansi_raval)\
**Replies:** 2\
**Last updated:** [March 1, 2023, 4:03pm UTC](https://discuss.elastic.co/t/installation-and-download-of-free-version-of-elastic-enterprise-search-on-windows/326755 "2023-03-01T16:03:42Z")

</div>

I started the free trial of 14 days of the Elastic Enterprise Search and uploaded tons of files and documents and explored its functionality. However, I need to develop a permanent system (search engine) to search throug…

---

## [License page not visible in kibana](https://discuss.elastic.co/t/license-page-not-visible-in-kibana/300585)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 2\
**Last updated:** [March 27, 2022, 6:15am UTC](https://discuss.elastic.co/t/license-page-not-visible-in-kibana/300585 "2022-03-27T06:15:33Z")

</div>

Hi Team, Trying to setup an ECK cluster on a local k8s environment with the 7.17.1 images (tested with the 8.1.1 image as well) and I am facing an issue. I can't seem the find the license management screen or any port…

---

## [Cluster Red, many shards Unassigned](https://discuss.elastic.co/t/cluster-red-many-shards-unassigned/275236)

<div class="topic-metadata">

**Author:** [@sakrayaami](https://discuss.elastic.co/u/sakrayaami)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 7:04am UTC](https://discuss.elastic.co/t/cluster-red-many-shards-unassigned/275236 "2021-06-08T07:04:56Z")

</div>

Hello, I'm very new to the community and here I am after some months of reading and configuring :slight\_smile: Ok I'm trying to work out a problem with my new cluster, I have the following setup: Elastic 7.13 2 Maste…

---

## [Best method for exact matches only](https://discuss.elastic.co/t/best-method-for-exact-matches-only/245300)

<div class="topic-metadata">

**Author:** [@blewis1337](https://discuss.elastic.co/u/blewis1337)\
**Replies:** 2\
**Last updated:** [August 18, 2020, 1:54pm UTC](https://discuss.elastic.co/t/best-method-for-exact-matches-only/245300 "2020-08-18T13:54:27Z")

</div>

We currently use elastic search for our magento storefront. We are a B2B style company and our customers search for very specific terms and skus when using our site. We have set all our items up with a number of meta\_key…

---

## [Access dashboard date range in queries](https://discuss.elastic.co/t/access-dashboard-date-range-in-queries/106295)

<div class="topic-metadata">

**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\
**Replies:** 2\
**Last updated:** [November 3, 2017, 4:44pm UTC](https://discuss.elastic.co/t/access-dashboard-date-range-in-queries/106295 "2017-11-03T16:44:04Z")

</div>

I have a date range set to field -\> field1 Now I need to access the same range (Only upper bound) for another field -\> field2. Is it possible? Like :- { "script": { "script": "doc\['field2'\].value \>= doc\['@Dashboard…

---

## [Query\_string performance](https://discuss.elastic.co/t/query-string-performance/86808)

<div class="topic-metadata">

**Author:** [@baltendo](https://discuss.elastic.co/u/baltendo)\
**Replies:** 2\
**Last updated:** [May 23, 2017, 1:46pm UTC](https://discuss.elastic.co/t/query-string-performance/86808 "2017-05-23T13:46:03Z")

</div>

Hi! We recently upgraded Elasticsearch and Kibana from 5.3.0 to 5.4.0 and since then we experience performance issues with dashboards and visualizations. Here is the query that is generated by Kibana for a visualizatio…

---

## [Mixing/Alternating Query Results](https://discuss.elastic.co/t/mixing-alternating-query-results/80748)

<div class="topic-metadata">

**Author:** [@David\_Klebanoff](https://discuss.elastic.co/u/David_Klebanoff)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 12:20am UTC](https://discuss.elastic.co/t/mixing-alternating-query-results/80748 "2017-03-31T00:20:42Z")

</div>

Suppose you had documents that fall into distinct categories: A, B, C, D, E, and F. Is it possible to make a query, such that the results are sorted in such a way that they are mixed/alternated evenly across these catego…

---

## [Download csv files on Kibana dashboard](https://discuss.elastic.co/t/download-csv-files-on-kibana-dashboard/65776)

<div class="topic-metadata">

**Author:** [@anonymous4](https://discuss.elastic.co/u/anonymous4)\
**Replies:** 2\
**Last updated:** [November 15, 2016, 4:34am UTC](https://discuss.elastic.co/t/download-csv-files-on-kibana-dashboard/65776 "2016-11-15T04:34:29Z")

</div>

I am new to kibana dashboard and i want to know if is there any plugins available for kibana so that i can download files from kibana dashboard?

---

## [Проблемы с хапуском elastic-hadoop](https://discuss.elastic.co/t/elastic-hadoop/28290)

<div class="topic-metadata">

**Author:** [@RobertRT](https://discuss.elastic.co/u/RobertRT)\
**Replies:** 2\
**Last updated:** [September 2, 2015, 7:45pm UTC](https://discuss.elastic.co/t/elastic-hadoop/28290 "2015-09-02T19:45:15Z")

</div>

Добрый вечер. При попытке установить elastic-yarne на cloudera возникли проблемы. При попытке старта эластика командой hadoop jar elastic-yarne-.jar - start выдаёт Exceptions in thread "main" jav a.lang.NoClassdeffou dEr…

---

## [Problem after upgrade to 7.13.3 "source primary is allocated on another node" and CLONE\_TEMP\_TO\_TARGET -\> CLONE\_TEMP\_TO\_TARGET](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 1\
**Last updated:** [July 23, 2021, 8:48am UTC](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404 "2021-07-23T08:48:23Z")

</div>

After we upgraded Elastic from 7.9 to 7.13.3 (on VM Centos7) all elasticsearch nodes has started but we couldnt start kibana the reason was it tries to migrate .kibana which si blocked by error "source primary is all…

---

## [KQL Max query search](https://discuss.elastic.co/t/kql-max-query-search/277061)

<div class="topic-metadata">

**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\
**Replies:** 1\
**Last updated:** [June 25, 2021, 3:21pm UTC](https://discuss.elastic.co/t/kql-max-query-search/277061 "2021-06-25T15:21:08Z")

</div>

Hello, I need to figure out a KQL query to pick a max value. My data is like below Doc1 =\> AppName: "A" , Revision : 1 then other keys Doc2 =\> AppName: "A" , Revision : 2 \* \* Docn =\> AppName: "A" , Revision : n. R…

---

## [Share a dashboard to an external website without logging in](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739)

<div class="topic-metadata">

**Author:** [@Luis\_Pizarro](https://discuss.elastic.co/u/Luis_Pizarro)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 5:35pm UTC](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739 "2021-02-18T17:35:03Z")

</div>

I am trying to share a kibana dashboard through embed code but repeatedly it asks for access attached to it. \<!DOCTYPE HTML\> \<html lang=es\> \<head\> \<title\>Tutorial de HTML para dummies\</title\> \<me…

---

## [Metricbeat doesn't communicate with Elasticsearch](https://discuss.elastic.co/t/metricbeat-doesnt-communicate-with-elasticsearch/256035)

<div class="topic-metadata">

**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\
**Replies:** 1\
**Last updated:** [November 19, 2020, 11:03pm UTC](https://discuss.elastic.co/t/metricbeat-doesnt-communicate-with-elasticsearch/256035 "2020-11-19T23:03:13Z")

</div>

Hi! I have installed Metricbeat and I have Security feature installed on my ELK! After I make all configurations with certificates and modules I get this error: "service": { "type": "elasticsearch", "address…

[Previous page](https://discuss.elastic.co/top.md?page=1402&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1404&per_page=50&period=all)
