# Top

**URL:** https://discuss.elastic.co/top.md?page=1429&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1430

---

## [After ES upgrade to 5.6 logstash only gets 400 bad request \[SOLVED\]](https://discuss.elastic.co/t/after-es-upgrade-to-5-6-logstash-only-gets-400-bad-request-solved/152843)

<div class="topic-metadata">

**Author:** [@deltadelta](https://discuss.elastic.co/u/deltadelta)\
**Replies:** 1\
**Last updated:** [October 29, 2018, 5:11pm UTC](https://discuss.elastic.co/t/after-es-upgrade-to-5-6-logstash-only-gets-400-bad-request-solved/152843 "2018-10-29T17:11:44Z")

</div>

Hi, Not sure if this should be in LS or ES, but thought I'd try here first. Up until recently, I was running ES 2.4 and LS 5.6 and all was well. Recently updated ES to 5.6 and now LS only ever gets a 400 bad request res…

---

## [(AWS Linux) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/aws-linux-failed-to-connect-to-localhost-port-9200-connection-refused/140271)

<div class="topic-metadata">

**Author:** [@justintranjt](https://discuss.elastic.co/u/justintranjt)\
**Replies:** 1\
**Last updated:** [July 17, 2018, 5:20pm UTC](https://discuss.elastic.co/t/aws-linux-failed-to-connect-to-localhost-port-9200-connection-refused/140271 "2018-07-17T17:20:24Z")

</div>

I am unable to start my elasticsearch service successfully despite a correctly configured elasticsearch.yml file. I have only uncommented one line and edited it. network.host: "localhost" I start my service with sudo s…

---

## [Copy \_id field to another field for prefix query](https://discuss.elastic.co/t/copy--id-field-to-another-field-for-prefix-query/68198)

<div class="topic-metadata">

**Author:** [@tcollinsworth](https://discuss.elastic.co/u/tcollinsworth)\
**Replies:** 1\
**Last updated:** [December 7, 2016, 4:52pm UTC](https://discuss.elastic.co/t/copy--id-field-to-another-field-for-prefix-query/68198 "2016-12-07T16:52:24Z")

</div>

I have an index that stores versioned schema files where the filename is entity~date~hash.schema.json and forms the unique id that is stored in the \_id field. I want to use a copy\_to to copy the \_id field to an altId fi…

---

## [Elasticsearch clickthrough relevance ranking](https://discuss.elastic.co/t/elasticsearch-clickthrough-relevance-ranking/13600)

<div class="topic-metadata">

**Author:** [@Rafael\_Almeida](https://discuss.elastic.co/u/Rafael_Almeida)\
**Replies:** 1\
**Last updated:** [June 1, 2016, 10:54pm UTC](https://discuss.elastic.co/t/elasticsearch-clickthrough-relevance-ranking/13600 "2016-06-01T22:54:59Z")

</div>

Hello, I have been reading about lucidworks search. One interesting feature I found on it was what they call "click tracking and boosting". I haven't find anything like it in elastic search world (hopefully becaus…

---

## [Unable to start logstash-forwarder in centos 5](https://discuss.elastic.co/t/unable-to-start-logstash-forwarder-in-centos-5/38841)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 1\
**Last updated:** [January 11, 2016, 2:39pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-forwarder-in-centos-5/38841 "2016-01-11T14:39:43Z")

</div>

I tried install logstash forwarder in one of my production server to monitor the application logs. When I start the logstash-forwarder , its show "Segment Fault Error". Could you please guide, does logstash-forwarder wo…

---

## [Sizing Elastic Stack for a PoC (security use case)](https://discuss.elastic.co/t/sizing-elastic-stack-for-a-poc-security-use-case/350733)

<div class="topic-metadata">

**Author:** [@Ammar\_Mostafa](https://discuss.elastic.co/u/Ammar_Mostafa)\
**Replies:** 6\
**Last updated:** [January 14, 2024, 2:12pm UTC](https://discuss.elastic.co/t/sizing-elastic-stack-for-a-poc-security-use-case/350733 "2024-01-14T14:12:04Z")

</div>

Hello Everyone, I was asked to make a PoC to show the capability the Elastic as a SIEM so the PoC will take logs from (Fortigate Firewall, Two WIndows PCs, one Windows server for file sharing) So I will setup Elasticsea…

---

## [HELP, Interconnecting SentinelOne with Elasticsearch](https://discuss.elastic.co/t/help-interconnecting-sentinelone-with-elasticsearch/332774)

<div class="topic-metadata">

**Author:** [@Mdiouf01](https://discuss.elastic.co/u/Mdiouf01)\
**Replies:** 6\
**Last updated:** [May 23, 2023, 12:11pm UTC](https://discuss.elastic.co/t/help-interconnecting-sentinelone-with-elasticsearch/332774 "2023-05-23T12:11:34Z")

</div>

Hello, I need your help :face\_holding\_back\_tears::face\_holding\_back\_tears: I am a SOC analyst, and I want to interconnect SentinelOne with ELK SIEM. Could you help me to know if you have a tuto or clear documentation e…

---

## [Display memory usage in bytes instead of percentage](https://discuss.elastic.co/t/display-memory-usage-in-bytes-instead-of-percentage/238086)

<div class="topic-metadata">

**Author:** [@wolph](https://discuss.elastic.co/u/wolph)\
**Replies:** 6\
**Last updated:** [June 25, 2020, 1:40pm UTC](https://discuss.elastic.co/t/display-memory-usage-in-bytes-instead-of-percentage/238086 "2020-06-25T13:40:17Z")

</div>

For the Observability-\>Metrics screen the memory usage is currently shown as a percentage. While that might still be useful for the Hosts, for both Kubernetes Pods and Docker Containers that's pretty useless. So I'm wo…

---

## [Intermittent exception in index call](https://discuss.elastic.co/t/intermittent-exception-in-index-call/340903)

<div class="topic-metadata">

**Author:** [@Luiz\_Basile](https://discuss.elastic.co/u/Luiz_Basile)\
**Replies:** 2\
**Last updated:** [September 4, 2023, 4:06pm UTC](https://discuss.elastic.co/t/intermittent-exception-in-index-call/340903 "2023-09-04T16:06:00Z")

</div>

We are using Elasticsearch java, in a lambda function. The below log is in lambda Apparently this exception is happening when you use the Elastic of other component and quickly trigger the lambda function. Any suggestio…

---

## [Extract Hashtags and Mentions into separate fields](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656)

<div class="topic-metadata">

**Author:** [@prakhar\_nigam](https://discuss.elastic.co/u/prakhar_nigam)\
**Replies:** 2\
**Last updated:** [December 16, 2021, 6:48am UTC](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656 "2021-12-16T06:48:50Z")

</div>

I am doing a DIY Tweet Sentiment analyser, I have an index of tweets like these, "\_source" : { "id" : 26930655, "status" : 1, "title" : "Here’s 5 underrated #BTC and realistic crypto accounts that ever…

---

## [Keep data synchronize with Indices](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257 "2020-12-10T17:12:01Z")

</div>

I'm using Elasticsearch 7.9.0. and using ingress to process and enrich data. I want to share data in indices Elasticsearch with another app. This app have api to collect data. Have any way to keep sync data in indices …

---

## [APM to make it work with Python](https://discuss.elastic.co/t/apm-to-make-it-work-with-python/199165)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 2\
**Last updated:** [September 16, 2019, 4:02am UTC](https://discuss.elastic.co/t/apm-to-make-it-work-with-python/199165 "2019-09-16T04:02:37Z")

</div>

Hi All, I am evaluating APM for Java and Python based erp server, I was able to data from Java based Apllication Server like Jboss, tomcat and wildfly , the setup was able to be done with forum help Now I am trying to…

---

## [Manually import Heartbeat dashboards](https://discuss.elastic.co/t/manually-import-heartbeat-dashboards/179129)

<div class="topic-metadata">

**Author:** [@Dhulem](https://discuss.elastic.co/u/Dhulem)\
**Replies:** 2\
**Last updated:** [May 2, 2019, 10:02am UTC](https://discuss.elastic.co/t/manually-import-heartbeat-dashboards/179129 "2019-05-02T10:02:38Z")

</div>

I am new to the Elk-Stack and found that when I try to import the dashboards with the following command. .\\heartbeat setup --dashboards No Directory (c:\\elk-stack\\heatbeat7.0.0\\kibana/7) I found https://github.com/ela…

---

## [Logstash-patterns-core BRO\_\* not working?](https://discuss.elastic.co/t/logstash-patterns-core-bro--not-working/70595)

<div class="topic-metadata">

**Author:** [@blacktop](https://discuss.elastic.co/u/blacktop)\
**Replies:** 2\
**Last updated:** [January 7, 2017, 2:19am UTC](https://discuss.elastic.co/t/logstash-patterns-core-bro--not-working/70595 "2017-01-07T02:19:54Z")

</div>

I have a question about the built-in bro grok patterns. In Bro you can greatly change the fields that are present depending on what scripts/mods/policies you load. When you look at their log-file docs MOST of the fie…

---

## [Cannot curl elasticsearch from outside network](https://discuss.elastic.co/t/cannot-curl-elasticsearch-from-outside-network/66924)

<div class="topic-metadata">

**Author:** [@zellduck](https://discuss.elastic.co/u/zellduck)\
**Replies:** 2\
**Last updated:** [November 23, 2016, 11:18am UTC](https://discuss.elastic.co/t/cannot-curl-elasticsearch-from-outside-network/66924 "2016-11-23T11:18:58Z")

</div>

Hi guys, I am new to elasticsearch and my company currently have a project that needs to use elasticsearch, so this issue is quite ... urgent I have installed elasticsearch 5 via this document https://www.elastic.co/…

---

## [Elastic SIEM "Data Fetch Failure Invalid time value"](https://discuss.elastic.co/t/elastic-siem-data-fetch-failure-invalid-time-value/249388)

<div class="topic-metadata">

**Author:** [@soufiane\_adn](https://discuss.elastic.co/u/soufiane_adn)\
**Replies:** 5\
**Last updated:** [September 25, 2020, 2:07pm UTC](https://discuss.elastic.co/t/elastic-siem-data-fetch-failure-invalid-time-value/249388 "2020-09-25T14:07:54Z")

</div>

Hello guys, i hope you are doing well, so i'm facing a problem on the elastic siem app after parsing my logs and migrating them to ecs by logstash. the problem is the following error on the host/ event view : Data F…

---

## [How to perform automatic update\_by\_query on an index?](https://discuss.elastic.co/t/how-to-perform-automatic-update-by-query-on-an-index/198306)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 5\
**Last updated:** [October 4, 2019, 5:08am UTC](https://discuss.elastic.co/t/how-to-perform-automatic-update-by-query-on-an-index/198306 "2019-10-04T05:08:21Z")

</div>

Here is an example: POST /test-scholarship/\_doc { "student": "George", "grade": 98 } I want to add a new field (scholarship) to the above doc. POST /test-scholarship/\_update\_by\_query { "script": "ctx.\_source.sch…

---

## [Elasticsearch (2.3.4), ignores not\_analyzed even though inserted during index creation](https://discuss.elastic.co/t/elasticsearch-2-3-4-ignores-not-analyzed-even-though-inserted-during-index-creation/63800)

<div class="topic-metadata">

**Author:** [@Daniel\_Lee](https://discuss.elastic.co/u/Daniel_Lee)\
**Replies:** 5\
**Last updated:** [October 26, 2016, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-4-ignores-not-analyzed-even-though-inserted-during-index-creation/63800 "2016-10-26T19:00:50Z")

</div>

created a new index along with the following mapping that turns off analysis. curl -XPUT localhost:9200/vacation/ -d '{ "mappings": { "rentals": { "properties": {…

---

## [Getting started on a Mac (Splunk user looking to migrate)](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791)

<div class="topic-metadata">

**Author:** [@Phoenix\_Kiula](https://discuss.elastic.co/u/Phoenix_Kiula)\
**Replies:** 5\
**Last updated:** [February 14, 2014, 3:07pm UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791 "2014-02-14T15:07:49Z")

</div>

Hi. I'm somewhat familiar with Splunk, because our company invested in it. Now it's proving to be expensive so we're looking for alternatives. (It's a super tool though) ElasticSearch was recommended on Quora. But…

---

## [Filter search with drill down approach using Java API](https://discuss.elastic.co/t/filter-search-with-drill-down-approach-using-java-api/14446)

<div class="topic-metadata">

**Author:** [@kavesh](https://discuss.elastic.co/u/kavesh)\
**Replies:** 5\
**Last updated:** [November 19, 2013, 5:30pm UTC](https://discuss.elastic.co/t/filter-search-with-drill-down-approach-using-java-api/14446 "2013-11-19T17:30:00Z")

</div>

Hi All, I need a help on drill down approach as i was successfully able to do the process at multi level search. The problem currently i am facing is my query gets generated twice for same option. For eg : if …

---

## [Can elasticsearch be used to help in this advanced usecase?](https://discuss.elastic.co/t/can-elasticsearch-be-used-to-help-in-this-advanced-usecase/183304)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 6:54am UTC](https://discuss.elastic.co/t/can-elasticsearch-be-used-to-help-in-this-advanced-usecase/183304 "2019-06-04T06:54:31Z")

</div>

Hi there, I have been asked if elasticsearch can be helpful solving the following task. We want to analyze our user's workflow, meaning to check in which order users are calling our functions in a session and we would …

---

## [.16.3 Hangs](https://discuss.elastic.co/t/16-3-hangs/4868)

<div class="topic-metadata">

**Author:** [@electic](https://discuss.elastic.co/u/electic)\
**Replies:** 8\
**Last updated:** [July 17, 2011, 9:10am UTC](https://discuss.elastic.co/t/16-3-hangs/4868 "2011-07-17T09:10:50Z")

</div>

I am still having trouble with Elastic Search. After a day of tens of thousands of inserts via the bulk api we notice that Elastic Search hangs. The REST api stops responding and the CPU is at 100 percent. The box has…

---

## [Creating a Tag Cloud](https://discuss.elastic.co/t/creating-a-tag-cloud/346289)

<div class="topic-metadata">

**Author:** [@vils](https://discuss.elastic.co/u/vils)\
**Replies:** 3\
**Last updated:** [November 2, 2023, 8:55pm UTC](https://discuss.elastic.co/t/creating-a-tag-cloud/346289 "2023-11-02T20:55:35Z")

</div>

Hello all, I have a field that displays feedback. I was hoping to create a tag cloud of the most popular words from the feedback, to get a feel of what customers are saying. Does anyone know how I could do this?

---

## [How to display only positive values after a tophit (latest) aggregation](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997)

<div class="topic-metadata">

**Author:** [@Ricks](https://discuss.elastic.co/u/Ricks)\
**Replies:** 3\
**Last updated:** [February 5, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997 "2021-02-05T08:05:01Z")

</div>

Hi, currently I am exporting (once per hour) certificate expiration data to elasticsearch and visualize it with Kibana. So far so good, but I can't figure out to properly display certificates that are within 30 days to …

---

## [Parent circuit breaking is always triggered in ES 7.3.2](https://discuss.elastic.co/t/parent-circuit-breaking-is-always-triggered-in-es-7-3-2/204185)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 3\
**Last updated:** [October 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/parent-circuit-breaking-is-always-triggered-in-es-7-3-2/204185 "2019-10-28T13:29:06Z")

</div>

Hi Team, we are using Elasticsearch version 7.3.2 we are getting parent circuit breaking Exception frequently,and it occupies all estimate limit, without bouncing the node how can we rectify it. Any command or param…

---

## [Histogram aggregation on collapse result](https://discuss.elastic.co/t/histogram-aggregation-on-collapse-result/197440)

<div class="topic-metadata">

**Author:** [@mybluedog24](https://discuss.elastic.co/u/mybluedog24)\
**Replies:** 3\
**Last updated:** [August 30, 2019, 4:37pm UTC](https://discuss.elastic.co/t/histogram-aggregation-on-collapse-result/197440 "2019-08-30T16:37:54Z")

</div>

Hi, My question is that I need to find the first time login of each user, and then apply date\_histogram aggregation. I tried top\_hits aggregation, min aggregation and collapse. They all get the first time login of each …

---

## [Logstash json filter error](https://discuss.elastic.co/t/logstash-json-filter-error/149117)

<div class="topic-metadata">

**Author:** [@chowdary](https://discuss.elastic.co/u/chowdary)\
**Replies:** 3\
**Last updated:** [September 20, 2018, 8:19pm UTC](https://discuss.elastic.co/t/logstash-json-filter-error/149117 "2018-09-20T20:19:24Z")

</div>

Hi , i am facing below error, while running the logstash . ←\[33mError parsing json {:source=\>"message", :raw=\>"}\\r", :exception=\>#\<LogStash::Json::ParserError: Unexpected close marker '}': expected '\]' (for ROOT starti…

---

## [Need help with query for heartbeat](https://discuss.elastic.co/t/need-help-with-query-for-heartbeat/115904)

<div class="topic-metadata">

**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\
**Replies:** 3\
**Last updated:** [January 17, 2018, 3:30pm UTC](https://discuss.elastic.co/t/need-help-with-query-for-heartbeat/115904 "2018-01-17T15:30:36Z")

</div>

Hello, I have the following query with matches all results with heartbeat field "up"=false. GET heartbeat-2018.01.17/\_search { "query": { "match": { "up": { "query": false } } } } Can y…

---

## [How can i move localhost kibana dashboard into cloud(aws server)](https://discuss.elastic.co/t/how-can-i-move-localhost-kibana-dashboard-into-cloud-aws-server/106266)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 3\
**Last updated:** [November 3, 2017, 5:40am UTC](https://discuss.elastic.co/t/how-can-i-move-localhost-kibana-dashboard-into-cloud-aws-server/106266 "2017-11-03T05:40:45Z")

</div>

I developed one dashboard in my localhost. Now i need to move my localhost dashboard into aws server. How can i do that?please help me.... Thanks in advance!!!

---

## [Doubt about having clause behaviour](https://discuss.elastic.co/t/doubt-about-having-clause-behaviour/65129)

<div class="topic-metadata">

**Author:** [@templair79](https://discuss.elastic.co/u/templair79)\
**Replies:** 3\
**Last updated:** [December 1, 2016, 10:14pm UTC](https://discuss.elastic.co/t/doubt-about-having-clause-behaviour/65129 "2016-12-01T22:14:27Z")

</div>

Hi I need some help to understand how having is used in aggregations. I'm using ES 2.4.1 and I have some documents indexed like these: {"author":"first writter", "book": "first book"}, {"author":"first writter","bo…

---

## [\--authenticationDatabase admin](https://discuss.elastic.co/t/authenticationdatabase-admin/1164)

<div class="topic-metadata">

**Author:** [@Amit\_Kumar\_Srivastav](https://discuss.elastic.co/u/Amit_Kumar_Srivastav)\
**Replies:** 3\
**Last updated:** [May 26, 2015, 7:22pm UTC](https://discuss.elastic.co/t/authenticationdatabase-admin/1164 "2015-05-26T19:22:38Z")

</div>

Continuing the discussion from Issue with Watcher:

---

## [Why does Beat need to connect to Kibana?](https://discuss.elastic.co/t/why-does-beat-need-to-connect-to-kibana/255417)

<div class="topic-metadata">

**Author:** [@houmie](https://discuss.elastic.co/u/houmie)\
**Replies:** 4\
**Last updated:** [November 22, 2020, 1:11am UTC](https://discuss.elastic.co/t/why-does-beat-need-to-connect-to-kibana/255417 "2020-11-22T01:11:54Z")

</div>

In filebeat.yml there is this line Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. But filebeat either connects to logstash or directly to Elasticsearch. Elastic search then in return…

---

## [Newest ES versions, Java 11 and heap memory size](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353)

<div class="topic-metadata">

**Author:** [@crs](https://discuss.elastic.co/u/crs)\
**Replies:** 4\
**Last updated:** [September 3, 2019, 7:38am UTC](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353 "2019-09-03T07:38:11Z")

</div>

Hi, Is there any change in recommenced settings for maximum heap size (\<32GB) since ES now supports Java 11 and G1GC ? I'd be really happy to try with more RAM allocated for heap. Also have question if anybody can poin…

---

## [Hello, may I ask you a question](https://discuss.elastic.co/t/hello-may-i-ask-you-a-question/194705)

<div class="topic-metadata">

**Author:** [@kakano.1](https://discuss.elastic.co/u/kakano.1)\
**Replies:** 4\
**Last updated:** [August 11, 2019, 8:05am UTC](https://discuss.elastic.co/t/hello-may-i-ask-you-a-question/194705 "2019-08-11T08:05:14Z")

</div>

es : v7.2 logstash: v7.2 kibana : v7.2

---

## [How to setup local user accounts for kibana on kibana host](https://discuss.elastic.co/t/how-to-setup-local-user-accounts-for-kibana-on-kibana-host/99647)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 4\
**Last updated:** [September 7, 2017, 2:10am UTC](https://discuss.elastic.co/t/how-to-setup-local-user-accounts-for-kibana-on-kibana-host/99647 "2017-09-07T02:10:28Z")

</div>

Hi , I have installed kibana on server and want to create local user accounts for different user with UN and PWs . I can not use x-pack or shield as this kibana instance is connecting to AWS managed ES. Can someone pl…

---

## [Elasticsearch 5.0.0 rc1 highlight incorrectly with hunspell](https://discuss.elastic.co/t/elasticsearch-5-0-0-rc1-highlight-incorrectly-with-hunspell/63620)

<div class="topic-metadata">

**Author:** [@edeak](https://discuss.elastic.co/u/edeak)\
**Replies:** 4\
**Last updated:** [October 24, 2016, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-rc1-highlight-incorrectly-with-hunspell/63620 "2016-10-24T09:13:06Z")

</div>

Hi, my issue is basically related to the hungarian language, but very strange. Consider the following word: "alma" (apple in english). This is a noun, but it's also a genitive of "alom" (bedding). Here's the stange b…

---

## [Eventual consistency on simple document put/get](https://discuss.elastic.co/t/eventual-consistency-on-simple-document-put-get/46691)

<div class="topic-metadata">

**Author:** [@Serguzest](https://discuss.elastic.co/u/Serguzest)\
**Replies:** 4\
**Last updated:** [April 7, 2016, 7:15pm UTC](https://discuss.elastic.co/t/eventual-consistency-on-simple-document-put-get/46691 "2016-04-07T19:15:01Z")

</div>

Hello! Let's imagine elasticsearch as a simple object key-value store and ignore all search/indexing functionality. When I create/update a document, is it instantly (not eventually) available for all clients when the…

---

## [Unable to use stats on field](https://discuss.elastic.co/t/unable-to-use-stats-on-field/32217)

<div class="topic-metadata">

**Author:** [@etfeet](https://discuss.elastic.co/u/etfeet)\
**Replies:** 4\
**Last updated:** [October 16, 2015, 8:09pm UTC](https://discuss.elastic.co/t/unable-to-use-stats-on-field/32217 "2015-10-16T20:09:17Z")

</div>

I have a field that i'm trying to use for stats. However, kibana is not displaying any data. In logstash im using ruby code to add the value of two fields into a third one. I'm trying to graph the value of the third on…

---

## [Basic Configuration File](https://discuss.elastic.co/t/basic-configuration-file/32215)

<div class="topic-metadata">

**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\
**Replies:** 4\
**Last updated:** [October 15, 2015, 8:09pm UTC](https://discuss.elastic.co/t/basic-configuration-file/32215 "2015-10-15T20:09:54Z")

</div>

Hello, I have the following code as a test configuration file. input { file { path =\> "C:\\Users\\Admin\\Desktop\\Logs\_elasticsearch\\test\_10142015.txt" } } filter { grok { patterns\_dir =\> "C:\\Program Files\\lo…

---

## [Elastic System Integration dashboard issue](https://discuss.elastic.co/t/elastic-system-integration-dashboard-issue/318549)

<div class="topic-metadata">

**Author:** [@subash](https://discuss.elastic.co/u/subash)\
**Replies:** 7\
**Last updated:** [November 11, 2022, 11:20pm UTC](https://discuss.elastic.co/t/elastic-system-integration-dashboard-issue/318549 "2022-11-11T23:20:40Z")

</div>

Mistakenly I have deleted the inbuilt dashboards of System integration with elastic. Is there any way that I can get those dashboards back?

---

## [Extending multi-match for nested Object objects in MongoDB](https://discuss.elastic.co/t/extending-multi-match-for-nested-object-objects-in-mongodb/315471)

<div class="topic-metadata">

**Author:** [@scheung38](https://discuss.elastic.co/u/scheung38)\
**Replies:** 7\
**Last updated:** [September 30, 2022, 6:23pm UTC](https://discuss.elastic.co/t/extending-multi-match-for-nested-object-objects-in-mongodb/315471 "2022-09-30T18:23:16Z")

</div>

Given this works, but how to extend this multi\_match to nested ObjectID objects in a MongoDB database: GET address\*/\_search/ { "query": { "multi\_match" : { "query": "york", "fields": \[ "outward\_code"…

---

## [Elasticsearch 7.10.1 new test cluster - cannot bring up - state not recovered](https://discuss.elastic.co/t/elasticsearch-7-10-1-new-test-cluster-cannot-bring-up-state-not-recovered/259520)

<div class="topic-metadata">

**Author:** [@lakshmi-github](https://discuss.elastic.co/u/lakshmi-github)\
**Replies:** 1\
**Last updated:** [December 26, 2020, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-1-new-test-cluster-cannot-bring-up-state-not-recovered/259520 "2020-12-26T23:36:53Z")

</div>

Hello, I am trying to bring up a new ES 7.10.1 cluster for testing as follows: node1 - master (node.roles: \[ 'master'\]) node2 - master (node.roles: \[ 'master'\]) node3 - master (node.roles: \[ 'master'\]) node4 - data (n…

---

## [Elastic Search query on multiple fields in terms lookup](https://discuss.elastic.co/t/elastic-search-query-on-multiple-fields-in-terms-lookup/245342)

<div class="topic-metadata">

**Author:** [@santoshk](https://discuss.elastic.co/u/santoshk)\
**Replies:** 1\
**Last updated:** [August 18, 2020, 7:07pm UTC](https://discuss.elastic.co/t/elastic-search-query-on-multiple-fields-in-terms-lookup/245342 "2020-08-18T19:07:52Z")

</div>

Hello experts and fellow elastic enthusiasts, Am a beginner to elastic search and working on writing a search query which filters data from one index by using data from another index (am using terms lookup to achieve it…

---

## [Canvas dropdown filter result no data after filtering](https://discuss.elastic.co/t/canvas-dropdown-filter-result-no-data-after-filtering/218537)

<div class="topic-metadata">

**Author:** [@Timothy\_Julius](https://discuss.elastic.co/u/Timothy_Julius)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 3:49pm UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-result-no-data-after-filtering/218537 "2020-02-10T15:49:50Z")

</div>

Hello, i know this is an outdated problem, but after i research all the topic about dropdown canvas and implement it, the result always zero data i don't know why. So, right now i want to developed a simple visualizatio…

---

## [Minimum\_should\_match not working as expected](https://discuss.elastic.co/t/minimum-should-match-not-working-as-expected/190775)

<div class="topic-metadata">

**Author:** [@Erhan\_Karabulut](https://discuss.elastic.co/u/Erhan_Karabulut)\
**Replies:** 1\
**Last updated:** [July 19, 2019, 8:02pm UTC](https://discuss.elastic.co/t/minimum-should-match-not-working-as-expected/190775 "2019-07-19T20:02:05Z")

</div>

Hello All, Match Query: { "query":{ "bool":{ "should":\[ { "match":{ "nAME":{ "analyzer":"my\_fuzzy\_analyzer", …

---

## [Problem when visualizing my custom date field](https://discuss.elastic.co/t/problem-when-visualizing-my-custom-date-field/170761)

<div class="topic-metadata">

**Author:** [@HamiltonTM](https://discuss.elastic.co/u/HamiltonTM)\
**Replies:** 1\
**Last updated:** [March 5, 2019, 6:10pm UTC](https://discuss.elastic.co/t/problem-when-visualizing-my-custom-date-field/170761 "2019-03-05T18:10:01Z")

</div>

Hi, I have a mapping like this: "queuedtime":{ "type": "date", "format": "dd-HH:mm:ss||d-HH:mm:ss||HH:mm:ss" } It works, and when I make a sort query like this one: GET /slurm/\_search { "sort":\[ {…

---

## [Export machine learning graphs](https://discuss.elastic.co/t/export-machine-learning-graphs/96670)

<div class="topic-metadata">

**Author:** [@deepaknadig](https://discuss.elastic.co/u/deepaknadig)\
**Replies:** 1\
**Last updated:** [August 11, 2017, 12:55pm UTC](https://discuss.elastic.co/t/export-machine-learning-graphs/96670 "2017-08-11T12:55:27Z")

</div>

Hello All, This is my first post! Is there a way to export or create dashboards of the graphs generated using machine learning? How do I recreate/export (using visualization tools for example) the graphs for the Anomaly…

---

## [Searching by some property](https://discuss.elastic.co/t/searching-by-some-property/80455)

<div class="topic-metadata">

**Author:** [@nospor](https://discuss.elastic.co/u/nospor)\
**Replies:** 7\
**Last updated:** [March 30, 2017, 6:44pm UTC](https://discuss.elastic.co/t/searching-by-some-property/80455 "2017-03-30T18:44:35Z")

</div>

Hi, I index some documents. They have structure like that id title some stuff1 some stuff2 owner So many documents can have the same owner When I search for documents with a specific eg title then it is fine. But n…

---

## [5.2 Offline Plugin Install](https://discuss.elastic.co/t/5-2-offline-plugin-install/73665)

<div class="topic-metadata">

**Author:** [@NirKa](https://discuss.elastic.co/u/NirKa)\
**Replies:** 1\
**Last updated:** [February 2, 2017, 1:02pm UTC](https://discuss.elastic.co/t/5-2-offline-plugin-install/73665 "2017-02-02T13:02:55Z")

</div>

Hi, I'm trying to use the new offline plugin install feature and it doesn't seem to work... looks like I'm missing something. I created a custom plugin that pushes events to google pub sub. Steps: Installed the pl…

---

## [Failed Upgrade from 1.6 to 2](https://discuss.elastic.co/t/failed-upgrade-from-1-6-to-2/57573)

<div class="topic-metadata">

**Author:** [@NiGame](https://discuss.elastic.co/u/NiGame)\
**Replies:** 7\
**Last updated:** [August 9, 2016, 10:43am UTC](https://discuss.elastic.co/t/failed-upgrade-from-1-6-to-2/57573 "2016-08-09T10:43:02Z")

</div>

Upgrading from 1.6 Single node, following instructions from https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-upgrade.html Disabled shard allocation Sync flushed shut down elasticsearch plus kibana…

[Previous page](https://discuss.elastic.co/top.md?page=1428&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1430&per_page=50&period=all)
