# Top

**URL:** https://discuss.elastic.co/top.md?page=1431&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1432

---

## [Lens - show values on histogram visualisation](https://discuss.elastic.co/t/lens-show-values-on-histogram-visualisation/289371)

<div class="topic-metadata">

**Author:** [@cpu](https://discuss.elastic.co/u/cpu)\
**Replies:** 2\
**Last updated:** [November 17, 2021, 10:10am UTC](https://discuss.elastic.co/t/lens-show-values-on-histogram-visualisation/289371 "2021-11-17T10:10:06Z")

</div>

Hi All, I'm trying to show values on histogram visualisation created with lens. I can't find the option to get this results... I'm missing something? Could anyone point me to the solution? Thanks in advance!

---

## [Field length and average field lengths BM25](https://discuss.elastic.co/t/field-length-and-average-field-lengths-bm25/265105)

<div class="topic-metadata">

**Author:** [@d3v3lop3r](https://discuss.elastic.co/u/d3v3lop3r)\
**Replies:** 2\
**Last updated:** [February 22, 2021, 7:39pm UTC](https://discuss.elastic.co/t/field-length-and-average-field-lengths-bm25/265105 "2021-02-22T19:39:36Z")

</div>

I dont quite understand the forumula of the BM25 explained here: What is menat by the field length?

---

## [How does sorting work under the hood?](https://discuss.elastic.co/t/how-does-sorting-work-under-the-hood/263999)

<div class="topic-metadata">

**Author:** [@Harald\_Bittermann](https://discuss.elastic.co/u/Harald_Bittermann)\
**Replies:** 2\
**Last updated:** [February 18, 2021, 3:34pm UTC](https://discuss.elastic.co/t/how-does-sorting-work-under-the-hood/263999 "2021-02-18T15:34:56Z")

</div>

Elasticsearch Version: 7.10 Before I start to take a deeper look at a bug report that just arrived my desk I wanted to know the following. When a sort criteria is applied, is it guaranteed that all documents are sorted…

---

## [Date range doesn't have effect in Dashboard, missing in Explore](https://discuss.elastic.co/t/date-range-doesnt-have-effect-in-dashboard-missing-in-explore/238889)

<div class="topic-metadata">

**Author:** [@dmatt](https://discuss.elastic.co/u/dmatt)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 5:30pm UTC](https://discuss.elastic.co/t/date-range-doesnt-have-effect-in-dashboard-missing-in-explore/238889 "2020-07-02T17:30:39Z")

</div>

Hi, I'm trying to solve a problem with the date range not appearing in the Explore page, and if I adjust the filter in a Dashboard, it has no effect on Data. Here's are the details: Kibana 7.1.0 created a visualization…

---

## [Timelion and split with an if statement help](https://discuss.elastic.co/t/timelion-and-split-with-an-if-statement-help/234451)

<div class="topic-metadata">

**Author:** [@bjeeves](https://discuss.elastic.co/u/bjeeves)\
**Replies:** 2\
**Last updated:** [June 3, 2020, 2:04am UTC](https://discuss.elastic.co/t/timelion-and-split-with-an-if-statement-help/234451 "2020-06-03T02:04:46Z")

</div>

Hi I am looking for some help and not sure if I am doing it right or if it's possible so here I go on my problem. I am monitoring a switch interfaces with netconf/python and storing the values into ES. Then using timel…

---

## [How to use search\_as\_you\_type datatype to get substring(infix) completion](https://discuss.elastic.co/t/how-to-use-search-as-you-type-datatype-to-get-substring-infix-completion/199570)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 2\
**Last updated:** [September 16, 2019, 6:22am UTC](https://discuss.elastic.co/t/how-to-use-search-as-you-type-datatype-to-get-substring-infix-completion/199570 "2019-09-16T06:22:29Z")

</div>

Hi, The new search\_as\_you\_type feature should provide both infix and prefix completion, but i am seeing only prefix completion. { "mappings":{ "properties":{ "mail":{"type":"search\_as\_you\_type"} }}} and the query whic…

---

## [\[Dashboard\] Proposal: Time spent by span type](https://discuss.elastic.co/t/dashboard-proposal-time-spent-by-span-type/194359)

<div class="topic-metadata">

**Author:** [@lobotomist](https://discuss.elastic.co/u/lobotomist)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 5:52am UTC](https://discuss.elastic.co/t/dashboard-proposal-time-spent-by-span-type/194359 "2019-08-09T05:52:09Z")

</div>

It would be good to have an option to switch display in percentages or milliseconds.

---

## [Filter by Date in Aggregations](https://discuss.elastic.co/t/filter-by-date-in-aggregations/185463)

<div class="topic-metadata">

**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\
**Replies:** 2\
**Last updated:** [June 12, 2019, 4:21pm UTC](https://discuss.elastic.co/t/filter-by-date-in-aggregations/185463 "2019-06-12T16:21:53Z")

</div>

I can search for de most popular email, but i want to filter this search for a range of date ex: (now-30d)-(now) or 1 month. This is the command: curl -XGET "http://localhost:9200/\_search" -H 'Content-Type: applicati…

---

## [How to get the "Advanced Settings" from the Dev Tools?](https://discuss.elastic.co/t/how-to-get-the-advanced-settings-from-the-dev-tools/168400)

<div class="topic-metadata">

**Author:** [@HenrikT](https://discuss.elastic.co/u/HenrikT)\
**Replies:** 2\
**Last updated:** [February 15, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-to-get-the-advanced-settings-from-the-dev-tools/168400 "2019-02-15T07:30:51Z")

</div>

Hello, I'm using Kibana 6.5 and I would like to set the advanced settings in a script or similar without the need of the WebUI. I saw this thread: https://discuss.elastic.co/t/advanced-settings-via-config-file-possible…

---

## [Logstash exception for copying docs from one index to another index](https://discuss.elastic.co/t/logstash-exception-for-copying-docs-from-one-index-to-another-index/34585)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 2\
**Last updated:** [December 11, 2015, 8:05am UTC](https://discuss.elastic.co/t/logstash-exception-for-copying-docs-from-one-index-to-another-index/34585 "2015-12-11T08:05:08Z")

</div>

Hi Team, I tried to copy docs from one index to another index by using logstash. Elasticsearch is 1.7.2 and I am using logstash 1.5.0 Below is the logstash.conf file I created. input { We read from the "old" in…

---

## [How to map already fields in a index to ECS fields in elasticsearch](https://discuss.elastic.co/t/how-to-map-already-fields-in-a-index-to-ecs-fields-in-elasticsearch/208868)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 7\
**Last updated:** [November 28, 2019, 8:33am UTC](https://discuss.elastic.co/t/how-to-map-already-fields-in-a-index-to-ecs-fields-in-elasticsearch/208868 "2019-11-28T08:33:32Z")

</div>

Suppose I want to map my ClientIP field to ECS fIeld what is the approach. The ClientIP filed is already created in the index . Can I map it to ECS field,if the ClientIP field is already created

---

## [Heatbeat with SNMP](https://discuss.elastic.co/t/heatbeat-with-snmp/185398)

<div class="topic-metadata">

**Author:** [@Michel99\_7](https://discuss.elastic.co/u/Michel99_7)\
**Replies:** 1\
**Last updated:** [July 10, 2019, 10:19am UTC](https://discuss.elastic.co/t/heatbeat-with-snmp/185398 "2019-07-10T10:19:26Z")

</div>

It would be nice to use such a tool to request a device via a snmp request...

---

## [Security Section Not Listed](https://discuss.elastic.co/t/security-section-not-listed/185919)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 7\
**Last updated:** [June 17, 2019, 11:59pm UTC](https://discuss.elastic.co/t/security-section-not-listed/185919 "2019-06-17T23:59:40Z")

</div>

I see that in version 7.1.0, the security module was made available to basic licenses but I am not seeing it in my 7.1.1 install. Do I have to setup transport and http security first for those features to expose themsel…

---

## [Mapping for text and date field that should be null-able and sort-able](https://discuss.elastic.co/t/mapping-for-text-and-date-field-that-should-be-null-able-and-sort-able/126932)

<div class="topic-metadata">

**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\
**Replies:** 1\
**Last updated:** [April 6, 2018, 11:33am UTC](https://discuss.elastic.co/t/mapping-for-text-and-date-field-that-should-be-null-able-and-sort-able/126932 "2018-04-06T11:33:20Z")

</div>

Hello All, I have some very important allow null fields in my database .. few are text fields and few date fields.... I am facing issue with elasticsearch mapping. When I set allow null to the properties then sorting d…

---

## [Writing to Metadata with a custom pattern in grok](https://discuss.elastic.co/t/writing-to-metadata-with-a-custom-pattern-in-grok/116688)

<div class="topic-metadata">

**Author:** [@c4alexc4](https://discuss.elastic.co/u/c4alexc4)\
**Replies:** 1\
**Last updated:** [January 25, 2018, 9:02pm UTC](https://discuss.elastic.co/t/writing-to-metadata-with-a-custom-pattern-in-grok/116688 "2018-01-25T21:02:36Z")

</div>

Hey, I have more of a bugreport rather than a question: I want to use grok to write data into metadata fields. While this works with predefined patterns it doesnt work with custom patterns. Example: %{NUMBER:\[@metad…

---

## [Get file name from s3 file](https://discuss.elastic.co/t/get-file-name-from-s3-file/102683)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 12:14pm UTC](https://discuss.elastic.co/t/get-file-name-from-s3-file/102683 "2017-10-04T12:14:32Z")

</div>

Hi i have s3 bucket from where i taking csv file and uploading in to ES . i stuck on how to get file name which i have in s3 , beacuse i am using s3 file name as Index name . My config file - input{ s3{ bucket =\> …

---

## [Is there any limit of number of Index](https://discuss.elastic.co/t/is-there-any-limit-of-number-of-index/88096)

<div class="topic-metadata">

**Author:** [@arifemre61](https://discuss.elastic.co/u/arifemre61)\
**Replies:** 1\
**Last updated:** [June 2, 2017, 2:20pm UTC](https://discuss.elastic.co/t/is-there-any-limit-of-number-of-index/88096 "2017-06-02T14:20:20Z")

</div>

Hi All, Our aim is to implement a Chat Service and we want to use ElasticSearch to store our hot message data. So we are thinking that Every conversation has unique "index" and there will be messages inside of it as …

---

## [Possible bug with grok pattern\_definitions](https://discuss.elastic.co/t/possible-bug-with-grok-pattern-definitions/84433)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 1\
**Last updated:** [May 5, 2017, 5:52am UTC](https://discuss.elastic.co/t/possible-bug-with-grok-pattern-definitions/84433 "2017-05-05T05:52:27Z")

</div>

The following configuration is giving me an error. Can someone test if this is giving them an error as well? filter { if \[type\] == "test" { grok { pattern\_definitions =\> { "YMD…

---

## [How to set analyzer in elasticsearch.yml](https://discuss.elastic.co/t/how-to-set-analyzer-in-elasticsearch-yml/60073)

<div class="topic-metadata">

**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\
**Replies:** 1\
**Last updated:** [September 8, 2016, 12:59pm UTC](https://discuss.elastic.co/t/how-to-set-analyzer-in-elasticsearch-yml/60073 "2016-09-08T12:59:46Z")

</div>

default, elasticsearch use standard analyzer to every fields. But I only want to analyzer the fields "message", and other fields use non\_analyzer, I don't know the all fields in the index, only "message" is fixed, othe…

---

## [\[ELK\] Comportement que je n'arrive pas à expliquer!](https://discuss.elastic.co/t/elk-comportement-que-je-narrive-pas-a-expliquer/43280)

<div class="topic-metadata">

**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 4:37pm UTC](https://discuss.elastic.co/t/elk-comportement-que-je-narrive-pas-a-expliquer/43280 "2016-03-09T16:37:45Z")

</div>

Bonjour à tous =) Je vous fais part de ce message car j'ai un comportement que je n'arrive pas à comprendre, ce qui m'énerve !! ^^ Actuellement, je récupère des logs (zimbra) depuis un serveur via Filebeat que j'envoie…

---

## [INFO: Could not find files for the given pattern(s).-kibana](https://discuss.elastic.co/t/info-could-not-find-files-for-the-given-pattern-s-kibana/37148)

<div class="topic-metadata">

**Author:** [@nqioweryuadfge](https://discuss.elastic.co/u/nqioweryuadfge)\
**Replies:** 1\
**Last updated:** [December 15, 2015, 4:06am UTC](https://discuss.elastic.co/t/info-could-not-find-files-for-the-given-pattern-s-kibana/37148 "2015-12-15T04:06:15Z")

</div>

I found this error on windows when I first ran Kibana INFO: Could not find files for the given pattern(s).-kibana Second error comes from here, but there was no solution at all on the website or online. Index…

---

## [File locking in Windows of logs from logstash preventing deletion](https://discuss.elastic.co/t/file-locking-in-windows-of-logs-from-logstash-preventing-deletion/26010)

<div class="topic-metadata">

**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\
**Replies:** 1\
**Last updated:** [July 23, 2015, 7:00am UTC](https://discuss.elastic.co/t/file-locking-in-windows-of-logs-from-logstash-preventing-deletion/26010 "2015-07-23T07:00:11Z")

</div>

Hello, I'm hoping someone can help me with this... I've got logstash running on a windows machine. The logs from logstash are then transferred to an AWS S3 bucket using an S3 plugin (which is essentially a Ruby scrip…

---

## [Remove IPV6 from host.ip and host.mac field](https://discuss.elastic.co/t/remove-ipv6-from-host-ip-and-host-mac-field/268095)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 3\
**Last updated:** [March 26, 2021, 7:58am UTC](https://discuss.elastic.co/t/remove-ipv6-from-host-ip-and-host-mac-field/268095 "2021-03-26T07:58:36Z")

</div>

Hi, after filebeat upgrade (installed as daemonset on openshift) from 7.6.2 to 7.9.1 I get very big amount of data per field for host.ip and host.mac. Before upgrade it was just IP version 4 and now I have multiple line…

---

## [Kibana behind HAProxy getting 302 for "option httpchk"](https://discuss.elastic.co/t/kibana-behind-haproxy-getting-302-for-option-httpchk/233224)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 7:38am UTC](https://discuss.elastic.co/t/kibana-behind-haproxy-getting-302-for-option-httpchk/233224 "2020-05-20T07:38:14Z")

</div>

Hey All, I have 2 Kibana nodes behind HAProxy. Trying to set the "option httpchk" on the backend. I am getting a 302 response? I tried the following: option httpchk GET /kibana HTTP/1.1\\r\\nHost:\\ haproxy option htt…

---

## [Offline install x-pack on windows fails v5.3.0](https://discuss.elastic.co/t/offline-install-x-pack-on-windows-fails-v5-3-0/80722)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 3\
**Last updated:** [April 1, 2017, 10:12am UTC](https://discuss.elastic.co/t/offline-install-x-pack-on-windows-fails-v5-3-0/80722 "2017-04-01T10:12:52Z")

</div>

Hi I am trying to incorporate x-pack in my logstash setup scripts. However offline install of x-pack seems to be broken on windows. If I install it online , it works fine. c:\\elastic\\logstash\\bin\>call logstash-pl…

---

## [Cannot offline install x-pack to Kibana 5.0 RC1 in Windows](https://discuss.elastic.co/t/cannot-offline-install-x-pack-to-kibana-5-0-rc1-in-windows/63238)

<div class="topic-metadata">

**Author:** [@ichan](https://discuss.elastic.co/u/ichan)\
**Replies:** 3\
**Last updated:** [October 19, 2016, 3:53pm UTC](https://discuss.elastic.co/t/cannot-offline-install-x-pack-to-kibana-5-0-rc1-in-windows/63238 "2016-10-19T15:53:52Z")

</div>

I have been trying to install x-pack to Kibana 5.0 RC1 in our Windows server without success. Since the server has firewall setup and won't allow online install, the only option is to install offline. I have no problem i…

---

## [Problem with timelion plugin, can you help me?](https://discuss.elastic.co/t/problem-with-timelion-plugin-can-you-help-me/58896)

<div class="topic-metadata">

**Author:** [@pill663](https://discuss.elastic.co/u/pill663)\
**Replies:** 3\
**Last updated:** [August 26, 2016, 5:02am UTC](https://discuss.elastic.co/t/problem-with-timelion-plugin-can-you-help-me/58896 "2016-08-26T05:02:03Z")

</div>

I use my own kibana version 4.5.4 to bind with aws es 2.3. kibana works fine. But when I install the timelion plugin for my kibana, then the timelion didn't work. shows this error in webpage: Error: in cell #1: \[reduce…

---

## [Indexing many xml files](https://discuss.elastic.co/t/indexing-many-xml-files/56420)

<div class="topic-metadata">

**Author:** [@mark.demichele](https://discuss.elastic.co/u/mark.demichele)\
**Replies:** 3\
**Last updated:** [August 14, 2016, 1:54pm UTC](https://discuss.elastic.co/t/indexing-many-xml-files/56420 "2016-08-14T13:54:07Z")

</div>

I have an application that maintains many xml files under a folder and set of sub-folders. The xml files are added and removed from these folders. Is there a way to use logstash to send these files to Elastic Search al…

---

## [Elasticsearch Cluster connecting with Kibana](https://discuss.elastic.co/t/elasticsearch-cluster-connecting-with-kibana/57792)

<div class="topic-metadata">

**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\
**Replies:** 3\
**Last updated:** [August 12, 2016, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-connecting-with-kibana/57792 "2016-08-12T07:09:19Z")

</div>

Hello guys, i want to connect my elasticsearch cluster to Kibana. I have read in the elastic documentation for kibana that i should also install elasticsearch on the same machine as kibana. After thath i should modify …

---

## [Metrics filter stopped working after upgrade to logstash 2.2.x](https://discuss.elastic.co/t/metrics-filter-stopped-working-after-upgrade-to-logstash-2-2-x/42336)

<div class="topic-metadata">

**Author:** [@tetlika](https://discuss.elastic.co/u/tetlika)\
**Replies:** 3\
**Last updated:** [February 26, 2016, 11:43am UTC](https://discuss.elastic.co/t/metrics-filter-stopped-working-after-upgrade-to-logstash-2-2-x/42336 "2016-02-26T11:43:01Z")

</div>

hi, have anyone faced issue that logstash metrics stopped working after upgrade to 2.2.x? it does not work both on 2.2.0 and 2.2.2 config is so (see below), also there is another ouptut section (to redis) in anothe…

---

## [Unable to find source.geo.location filebeat aws module](https://discuss.elastic.co/t/unable-to-find-source-geo-location-filebeat-aws-module/268254)

<div class="topic-metadata">

**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\
**Replies:** 6\
**Last updated:** [March 29, 2021, 5:35pm UTC](https://discuss.elastic.co/t/unable-to-find-source-geo-location-filebeat-aws-module/268254 "2021-03-29T17:35:55Z")

</div>

I would like to convert the following to a geo\_point type "location": { "properties": { "lat": { "type": "float" }, "lon": { …

---

## [Issue in parsing a custom apache log file with grok plugin](https://discuss.elastic.co/t/issue-in-parsing-a-custom-apache-log-file-with-grok-plugin/176640)

<div class="topic-metadata">

**Author:** [@Stefano\_M](https://discuss.elastic.co/u/Stefano_M)\
**Replies:** 6\
**Last updated:** [April 12, 2019, 4:56pm UTC](https://discuss.elastic.co/t/issue-in-parsing-a-custom-apache-log-file-with-grok-plugin/176640 "2019-04-12T16:56:32Z")

</div>

Hello, I'm new to Elastic stack so be patient :slight\_smile: My first purpose is to parse a custom Apache2 access log. "Custom" means that I only have added a field to the Apache2 Combined Log format. This filed, add…

---

## [Unnest Exceptions](https://discuss.elastic.co/t/unnest-exceptions/173743)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 6\
**Last updated:** [March 25, 2019, 2:35pm UTC](https://discuss.elastic.co/t/unnest-exceptions/173743 "2019-03-25T14:35:06Z")

</div>

Hi, i get this error recorded by the APM-Agent. Could not open Jcr Session; nested exception is javax.jcr.LoginException: Workspace access denied i've set this in my properties file: unnest\_exceptions and i also tri…

---

## [What to put in logstash config if ther is null for lat & long?](https://discuss.elastic.co/t/what-to-put-in-logstash-config-if-ther-is-null-for-lat-long/149600)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 6\
**Last updated:** [October 8, 2018, 7:16pm UTC](https://discuss.elastic.co/t/what-to-put-in-logstash-config-if-ther-is-null-for-lat-long/149600 "2018-10-08T19:16:06Z")

</div>

What to put in logstash config if ther is null for lat & long? Some rows do not have gps\_long nor gps\_lat coordinates. SQL input returns NULL. But null is rejected by logstash or ES. My logstash config: mutate { r…

---

## [Problem bulk indexing](https://discuss.elastic.co/t/problem-bulk-indexing/3742)

<div class="topic-metadata">

**Author:** [@searchersteve](https://discuss.elastic.co/u/searchersteve)\
**Replies:** 6\
**Last updated:** [July 14, 2011, 12:50pm UTC](https://discuss.elastic.co/t/problem-bulk-indexing/3742 "2011-07-14T12:50:46Z")

</div>

More newbie questions... I am trying out bulk indexing for the first time, running one line of the example from the manual: curl -XPUT 'http://localhost:9200/\_bulk' -d '{ "index" : { "\_index" : "test", "\_type" …

---

## [How to change two fields in an index to a geo point?](https://discuss.elastic.co/t/how-to-change-two-fields-in-an-index-to-a-geo-point/252033)

<div class="topic-metadata">

**Author:** [@witcher](https://discuss.elastic.co/u/witcher)\
**Replies:** 5\
**Last updated:** [October 14, 2020, 3:19pm UTC](https://discuss.elastic.co/t/how-to-change-two-fields-in-an-index-to-a-geo-point/252033 "2020-10-14T15:19:47Z")

</div>

PUT \_ingest/pipeline/geoip { "description" : "Add geoip info", "processors" : \[ { "geoip" : { "field" : "source\_ip", "database\_file": "GeoLite2-City.mmdb", "target\_field": "sourceip\_geo" } } \] } …

---

## [NullPointerException on empty filter with 0.90.3](https://discuss.elastic.co/t/nullpointerexception-on-empty-filter-with-0-90-3/13371)

<div class="topic-metadata">

**Author:** [@Benoit](https://discuss.elastic.co/u/Benoit)\
**Replies:** 5\
**Last updated:** [August 29, 2013, 9:32am UTC](https://discuss.elastic.co/t/nullpointerexception-on-empty-filter-with-0-90-3/13371 "2013-08-29T09:32:54Z")

</div>

Hello, I'm not sure this have already been reported, but i can't found it on github issues This query $ curl http://localhost:9200/\_search -d '{"filter": {}, "query": {"match\_all": {}}}' give the follwing …

---

## [Disable username/password for eck](https://discuss.elastic.co/t/disable-username-password-for-eck/265160)

<div class="topic-metadata">

**Author:** [@benjaminhuo](https://discuss.elastic.co/u/benjaminhuo)\
**Replies:** 2\
**Last updated:** [February 23, 2021, 12:04pm UTC](https://discuss.elastic.co/t/disable-username-password-for-eck/265160 "2021-02-23T12:04:48Z")

</div>

Is it possible to disable username and password for https://github.com/elastic/cloud-on-k8s ?

---

## [Request must contain a kbn-xsrf header](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785)

<div class="topic-metadata">

**Author:** [@todor](https://discuss.elastic.co/u/todor)\
**Replies:** 2\
**Last updated:** [September 16, 2020, 12:52pm UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785 "2020-09-16T12:52:11Z")

</div>

I've had this issue when i'm trying to open Kibana on http://localhost:5601/app/home Can some help me?

---

## [Grok pattern to get the whole text without considering space](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095)

<div class="topic-metadata">

**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 6:55am UTC](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095 "2020-06-23T06:55:15Z")

</div>

I am trying to grok a message text with my grok pattern if i pass the sample data without space my grok pattern works fine but if there is any space in between text it fetch only the first word before space and after spa…

---

## [Could not locate that index-pattern (id: filebeat-\*), click here to re-create it](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat-click-here-to-re-create-it/204108)

<div class="topic-metadata">

**Author:** [@jmoran8888](https://discuss.elastic.co/u/jmoran8888)\
**Replies:** 2\
**Last updated:** [October 18, 2019, 10:26pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat-click-here-to-re-create-it/204108 "2019-10-18T22:26:02Z")

</div>

I was running ELK perfectly fine v7.3.0. I wanted to add user management and enabled xpack.security.enabled: true - fixed all the authentication errors that caused - created a couple of dashboard only users. However now…

---

## [Передача переменной в запросе из Powershell в Elasticsearch](https://discuss.elastic.co/t/powershell-elasticsearch/201395)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 3:09pm UTC](https://discuss.elastic.co/t/powershell-elasticsearch/201395 "2019-09-27T15:09:22Z")

</div>

Добрый день. Хочу настроить возможность получать данные из ES через powershell. В моем случае это поиск по логу Exchange. Вижу это так: администратор запускает скрипт, вводит в переменные отправителя, получателя, дату и…

---

## [Document count is same but index size is growing every logstash run](https://discuss.elastic.co/t/document-count-is-same-but-index-size-is-growing-every-logstash-run/198984)

<div class="topic-metadata">

**Author:** [@Metehan\_Gulcicek](https://discuss.elastic.co/u/Metehan_Gulcicek)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 7:53pm UTC](https://discuss.elastic.co/t/document-count-is-same-but-index-size-is-growing-every-logstash-run/198984 "2019-09-11T19:53:01Z")

</div>

input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://\*\*\*\*\*\*.rds.amazonaws.com:3306/" jdbc\_user =\> "user" jdbc\_password =\> "pass" jdbc\_driver\_library =\> "\*\*\*\*\\mysql-connector-java-5.1.46/mysql-connector-java-5.…

---

## [Unzip MQTT Message](https://discuss.elastic.co/t/unzip-mqtt-message/127855)

<div class="topic-metadata">

**Author:** [@CasMeiron](https://discuss.elastic.co/u/CasMeiron)\
**Replies:** 2\
**Last updated:** [April 13, 2018, 1:10pm UTC](https://discuss.elastic.co/t/unzip-mqtt-message/127855 "2018-04-13T13:10:41Z")

</div>

Hi, I'm using Mqtt plugin (Eclipse-Paho) to get messages from a MQTT topic, using the follow snippet: input { mqtt { topic =\> "/some/topic" host =\> "${MQTT\_HOST}" username =\> "${MQTT\_US…

---

## [Errors with Metricbeat rabbitmq module and RabbitMQ 2.7.1](https://discuss.elastic.co/t/errors-with-metricbeat-rabbitmq-module-and-rabbitmq-2-7-1/115667)

<div class="topic-metadata">

**Author:** [@Kaouther\_Mechri](https://discuss.elastic.co/u/Kaouther_Mechri)\
**Replies:** 2\
**Last updated:** [February 7, 2018, 10:25am UTC](https://discuss.elastic.co/t/errors-with-metricbeat-rabbitmq-module-and-rabbitmq-2-7-1/115667 "2018-02-07T10:25:16Z")

</div>

Hello; when I enable rabbitmq module with metricbeats; I have the following error in my metricbeats logfile 2018-01-16T09:33:54+01:00 ERR Error on field 'state': Missing field: state, Error: Key state not found: ke…

---

## [Include Pattern error after update kibana to 5.2.0-1](https://discuss.elastic.co/t/include-pattern-error-after-update-kibana-to-5-2-0-1/74467)

<div class="topic-metadata">

**Author:** [@Terence\_Chuen](https://discuss.elastic.co/u/Terence_Chuen)\
**Replies:** 2\
**Last updated:** [February 11, 2017, 3:53am UTC](https://discuss.elastic.co/t/include-pattern-error-after-update-kibana-to-5-2-0-1/74467 "2017-02-11T03:53:52Z")

</div>

I have some visualization chart using Include or Exclude Pattern,the syntax in kibana 5.1 was work normally. But when I update kibana to 5.2.0-1 yesterday,I get error,like this: Visualize: \[parsing\_exception\] Expected …

---

## [Filebeat sending to Logstash AND Elasticsearch](https://discuss.elastic.co/t/filebeat-sending-to-logstash-and-elasticsearch/69650)

<div class="topic-metadata">

**Author:** [@ypereirareis](https://discuss.elastic.co/u/ypereirareis)\
**Replies:** 2\
**Last updated:** [December 21, 2016, 9:52am UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-and-elasticsearch/69650 "2016-12-21T09:52:33Z")

</div>

Hello, Is it possible in the same filebeat configuration to tell filebeat to send some logs (prospectors) directly to elasticsearch (mysql, nginx) AND some other logs to logstash ? Because some log formats can direct…

---

## [Min score mode not supported in Nested Query](https://discuss.elastic.co/t/min-score-mode-not-supported-in-nested-query/39262)

<div class="topic-metadata">

**Author:** [@sumit\_jain](https://discuss.elastic.co/u/sumit_jain)\
**Replies:** 2\
**Last updated:** [January 15, 2016, 11:00am UTC](https://discuss.elastic.co/t/min-score-mode-not-supported-in-nested-query/39262 "2016-01-15T11:00:34Z")

</div>

Why is min not available as a score\_mode in nested query? This is a serious limitation, since to select lowest value, we need to use -1 factor in function\_score query, still its not possible to select minimum value fr…

---

## [Using yyyyMMdd dates](https://discuss.elastic.co/t/using-yyyymmdd-dates/12886)

<div class="topic-metadata">

**Author:** [@Douglas\_Moore](https://discuss.elastic.co/u/Douglas_Moore)\
**Replies:** 2\
**Last updated:** [July 23, 2013, 5:05pm UTC](https://discuss.elastic.co/t/using-yyyymmdd-dates/12886 "2013-07-23T17:05:50Z")

</div>

I have a number of fields in the yyyyMMdd format, and I've tried to setup a a number of date formats in my mapping to get those fields to be understood well by the date\_histogram in Kibana 3, and date type queries. N…

---

## [Why the order of split rows change the displayed values on Kibana table visualization](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:15pm UTC](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168 "2020-12-04T16:15:42Z")

</div>

Im counting documents with repeated values of the field throughput\_mb\_range grouped by the name of an interface. My metric is Count. My first split row is the name of the interface with a size of 600. My second split …

[Previous page](https://discuss.elastic.co/top.md?page=1430&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1432&per_page=50&period=all)
