# Top **URL:** https://discuss.elastic.co/top.md?page=1443&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1444 --- ## [Logstash - Scheduler (rufus scheduler)](https://discuss.elastic.co/t/logstash-scheduler-rufus-scheduler/45963)
**Author:** [@vikram\_yerneni](https://discuss.elastic.co/u/vikram_yerneni)\ **Replies:** 0\ **Last updated:** [March 31, 2016, 3:24pm UTC](https://discuss.elastic.co/t/logstash-scheduler-rufus-scheduler/45963 "2016-03-31T15:24:08Z")
Hello, I am trying to schedule logstash run for every 5 mins every day (full week) expect during certain time intervals in a day (between 10:00 AM - 10:30 AM). I know I can use the cron syntax for the job "schedule =\> "\*… --- ## [Kibana server is not ready yet, error : Unable to get issuer certificate](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-unable-to-get-issuer-certificate/313218)
**Author:** [@Florian-LB](https://discuss.elastic.co/u/Florian-LB)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 6:47am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-unable-to-get-issuer-certificate/313218 "2022-09-01T06:47:47Z")
Hello, I’ve been struggling for some time with the SSL configuration of Kibana. I need to set the elasticsearch.ssl.verificationMode on "full" or on "certificate" but Kibana is only working in "none". When I start the… --- ## [Debian 7.x repository broken?](https://discuss.elastic.co/t/debian-7-x-repository-broken/284906)
**Author:** [@theredcat](https://discuss.elastic.co/u/theredcat)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 6:40pm UTC](https://discuss.elastic.co/t/debian-7-x-repository-broken/284906 "2021-09-22T18:40:57Z")
Hi ! It seems that the 7.x debian repository is currently broken : Get:7 https://artifacts.elastic.co/packages/7.x/apt stable/main amd64 Packages \[78.8 kB\] Err:7 https://artifacts.elastic.co/packages/7.x/apt stable/mai… --- ## [Could not index event to elasticsearch error](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:33am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379 "2021-03-17T05:33:48Z")
Hello guys, I am getting following error about my filter and I have no clue why it is happening. I have included details. Filter filter { if "cost\_management" in \[tags\] { fingerprint { source =\> "message" targe… --- ## [No handler for type \[multi\_field\] declared on field,I am using es 7.9.1](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570)
**Author:** [@sanyoja\_sagare](https://discuss.elastic.co/u/sanyoja_sagare)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 6:19am UTC](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570 "2020-12-04T06:19:48Z")
No handler for type \[multi\_field\] declared on the field, I am using es 7.9.1 --- ## [Functional boost on a date field](https://discuss.elastic.co/t/functional-boost-on-a-date-field/257085)
**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\ **Replies:** 2\ **Last updated:** [December 1, 2020, 9:02am UTC](https://discuss.elastic.co/t/functional-boost-on-a-date-field/257085 "2020-12-01T09:02:17Z")
Hi! I'm trying App Search and I was wondering if there is a workaround to boost documents by "freshness" (the closer the date, the better the score). I see here Relevance Tuning Guide, Weights and Boosts | Elastic App … --- ## [Spark ES Read Error](https://discuss.elastic.co/t/spark-es-read-error/233845)
**Author:** [@dlSpark](https://discuss.elastic.co/u/dlSpark)\ **Replies:** 2\ **Last updated:** [May 22, 2020, 7:00am UTC](https://discuss.elastic.co/t/spark-es-read-error/233845 "2020-05-22T07:00:03Z")
We have several index(s) stored in out ES (7.1.1) cluster. edit-- Spark is 2.3.1, Scala 2.11.8, Hadoop HDP 3.0.1 When reading as a dataframe by val reader = spark.read.format("org.elasticsearch.spark.sql").option("es.n… --- ## [Syslog harvester does not start. Running Filebeat 7.3.1 on Docker](https://discuss.elastic.co/t/syslog-harvester-does-not-start-running-filebeat-7-3-1-on-docker/201398)
**Author:** [@glauber.ferreira](https://discuss.elastic.co/u/glauber.ferreira)\ **Replies:** 2\ **Last updated:** [September 30, 2019, 7:58pm UTC](https://discuss.elastic.co/t/syslog-harvester-does-not-start-running-filebeat-7-3-1-on-docker/201398 "2019-09-30T19:58:38Z")
I am running Elastic Stack 7.3.1 on Docker (Elastic, Kibana, Metricbeat, Filebeat). Filebeat harvesting are being started successfully for Docker container files. But, harvesting for Syslog module are not being started. … --- ## [Filebeat module - auditd](https://discuss.elastic.co/t/filebeat-module-auditd/136681)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-module-auditd/136681 "2018-06-21T12:37:35Z")
Hi, I am using auditd module in Filebeat to send the audit logs to Logstash. Do I still need to parse the audit logs in Logstash? When I sent the output to elasticsearch everything was working fine but whenswitched to … --- ## [Winlogbeats indices created but docs appear as deleted](https://discuss.elastic.co/t/winlogbeats-indices-created-but-docs-appear-as-deleted/81230)
**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 7:09am UTC](https://discuss.elastic.co/t/winlogbeats-indices-created-but-docs-appear-as-deleted/81230 "2017-04-05T07:09:51Z")
Hi Problem: Indices are created, and I see traffic on port 5044 but all docs are created as deleted Configuration I configured the system as follows: Winlogbeats --\> Logstash --\> Elasticsearch --\> Kibana Installe… --- ## [Multiple custom analyzers in a single index](https://discuss.elastic.co/t/multiple-custom-analyzers-in-a-single-index/58853)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 7:01pm UTC](https://discuss.elastic.co/t/multiple-custom-analyzers-in-a-single-index/58853 "2017-03-15T19:01:36Z")
Hi I am trying to add multiple custom analyzers to analyzer a specific field. So my mapping would look like so : { "mappings": { "entity": { "properties": { "ids": { "type":… --- ## [\_field\_names aggregation with sub-aggregation](https://discuss.elastic.co/t/-field-names-aggregation-with-sub-aggregation/61974)
**Author:** [@velcro](https://discuss.elastic.co/u/velcro)\ **Replies:** 2\ **Last updated:** [October 10, 2016, 7:35pm UTC](https://discuss.elastic.co/t/-field-names-aggregation-with-sub-aggregation/61974 "2016-10-10T19:35:56Z")
After using terms on \_field\_names, I want to sub-aggregation on each field. For each field, I want to know if it contained a non-null value (e.g. using missing, or exists). I do not know how to tell the sub-aggregation t… --- ## [Get number of unique values in a field](https://discuss.elastic.co/t/get-number-of-unique-values-in-a-field/20772)
**Author:** [@Saurabh\_Minni](https://discuss.elastic.co/u/Saurabh_Minni)\ **Replies:** 2\ **Last updated:** [November 17, 2014, 11:05am UTC](https://discuss.elastic.co/t/get-number-of-unique-values-in-a-field/20772 "2014-11-17T11:05:04Z")
Hi, I was trying to check Cardinality Aggregation. I believe it will give me an approx value of the number of unique users. Below is what I am using. { "aggs" : { "user\_count" : { "card… --- ## [Detection Rule Export API not working](https://discuss.elastic.co/t/detection-rule-export-api-not-working/287548)
**Author:** [@tejas.tech](https://discuss.elastic.co/u/tejas.tech)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 12:44am UTC](https://discuss.elastic.co/t/detection-rule-export-api-not-working/287548 "2021-11-18T00:44:23Z")
I would like to export all detection rule with details, and I did check with "Kibana IP: port/api/detection\_engine/rules/\_export", when I check with this I am getting 404 error with not found. Could anyone please help … --- ## [Cluster is not in a defined clean state while using the Elasticsearch setup by Rally](https://discuss.elastic.co/t/cluster-is-not-in-a-defined-clean-state-while-using-the-elasticsearch-setup-by-rally/307003)
**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\ **Replies:** 4\ **Last updated:** [June 15, 2022, 2:25pm UTC](https://discuss.elastic.co/t/cluster-is-not-in-a-defined-clean-state-while-using-the-elasticsearch-setup-by-rally/307003 "2022-06-15T14:25:29Z")
I got that message \[WARNING\] indexing\_total\_time is 3941 ms indicating that the cluster is not in a defined clean state. Recorded index time metrics may be misleading. While running esrally race --distribution-version… --- ## [How to record FCP and LCP while changing the routes in react for a single page applications](https://discuss.elastic.co/t/how-to-record-fcp-and-lcp-while-changing-the-routes-in-react-for-a-single-page-applications/282113)
**Author:** [@piyush.sarin](https://discuss.elastic.co/u/piyush.sarin)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:55am UTC](https://discuss.elastic.co/t/how-to-record-fcp-and-lcp-while-changing-the-routes-in-react-for-a-single-page-applications/282113 "2021-08-25T05:55:21Z")
Is it possible to record domComplete matrix such as FCP and LCP in transaction marks matrix when the we are not reloading a page and the component is changing with react routing? --- ## [KIBANAインストール時にFatalErrorが発生する。](https://discuss.elastic.co/t/kibana-fatalerror/273741)
**Author:** [@JunJun\_San](https://discuss.elastic.co/u/JunJun_San)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 6:10am UTC](https://discuss.elastic.co/t/kibana-fatalerror/273741 "2021-05-28T06:10:29Z")
Windows版ElasticSerchKibanaを使用したく、 インストールを進めています。 Ver.7.12.1 ElasticSerchのインストール（サービススタート）は上手くできましたが KIBANAインストール実施時に「Fatal Error：Cannot find module '../../../space/server」 が発生し前に進めません。 解決方法をご教示ください。 なお Kibana.yml… --- ## [Suggestions for person names doens't work so well](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 4:08pm UTC](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035 "2020-09-10T16:08:18Z")
Hi guys, I know that this use case is quite common but I'm a bit confused after I've read several tutorials and docs. In my application I'm trying to help the user when he digits a person's name in the form. I'd like t… --- ## [Active directory Authentication Problem](https://discuss.elastic.co/t/active-directory-authentication-problem/240838)
**Author:** [@Mahmoud\_Shash](https://discuss.elastic.co/u/Mahmoud_Shash)\ **Replies:** 4\ **Last updated:** [July 14, 2020, 4:16pm UTC](https://discuss.elastic.co/t/active-directory-authentication-problem/240838 "2020-07-14T16:16:34Z")
Hello Gents, I'm a newbie in the elastic World, actually, I'm counting on you to solve my problem. I've elastic search cluster and I need to do the Active directory integration I followed the https://www.elastic.co/gu… --- ## [Index associated with ILM policy is later disassociated](https://discuss.elastic.co/t/index-associated-with-ilm-policy-is-later-disassociated/181878)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 4\ **Last updated:** [May 21, 2019, 11:27pm UTC](https://discuss.elastic.co/t/index-associated-with-ilm-policy-is-later-disassociated/181878 "2019-05-21T23:27:29Z")
Hi, I'm using ILM, and currently when I created the index it is associted with the ILM policy. I can see the current phase, status, etc. Currently I: Write the index template Write the ILM policy Create the index, wi… --- ## [Open File Handles leaking on 6.2.3 nodes..?](https://discuss.elastic.co/t/open-file-handles-leaking-on-6-2-3-nodes/128979)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 4\ **Last updated:** [April 28, 2018, 5:04pm UTC](https://discuss.elastic.co/t/open-file-handles-leaking-on-6-2-3-nodes/128979 "2018-04-28T17:04:53Z")
We've had the same max-open-files setting for our ES clusters for a while (65k) and our nodes are pretty large (i3.2xl's w/ ~1-1.5TB of data on each one). We've never had a problem with file handles on our older ES 2.4 c… --- ## [XPack Not Installing on Logstash](https://discuss.elastic.co/t/xpack-not-installing-on-logstash/113757)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 12:28pm UTC](https://discuss.elastic.co/t/xpack-not-installing-on-logstash/113757 "2018-01-03T12:28:37Z")
I stop Logstash, run the "bin/logstash-plugin install x-pack" command, I get the 'Install successful' reply and then start Logstash again. I now check the Logstash.yml file and can't see the following settings: xpack.m… --- ## [Query for large numbers](https://discuss.elastic.co/t/query-for-large-numbers/100986)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 4\ **Last updated:** [September 19, 2017, 8:54am UTC](https://discuss.elastic.co/t/query-for-large-numbers/100986 "2017-09-19T08:54:23Z")
Hi I am trying to query for around 500K transactions per 5 minutes therefor I did: curl -XGET '192.168.1.116:9200/filebeat-\*/log/\_search?pretty&size=500000' -H 'Content-Type: application/json' -d' but I get null... whe… --- ## [Confict with head plugin](https://discuss.elastic.co/t/confict-with-head-plugin/67974)
**Author:** [@lfengjie](https://discuss.elastic.co/u/lfengjie)\ **Replies:** 4\ **Last updated:** [December 15, 2016, 7:26am UTC](https://discuss.elastic.co/t/confict-with-head-plugin/67974 "2016-12-15T07:26:50Z")
I followed the instructions on the web which link is https://www.elastic.co/guide/en/watcher/current/watch-cluster-status.html. But I found the head plugin will be abnormal when I add a cluster health watcher. The brows… --- ## [Creating subfileds in logstash](https://discuss.elastic.co/t/creating-subfileds-in-logstash/60070)
**Author:** [@Mahdy\_S](https://discuss.elastic.co/u/Mahdy_S)\ **Replies:** 4\ **Last updated:** [September 8, 2016, 1:38pm UTC](https://discuss.elastic.co/t/creating-subfileds-in-logstash/60070 "2016-09-08T13:38:15Z")
Dear Experts, I am trying to parse some logs with logstahs 2.3.3 into elasticsearch. The logs have similar format up to the log message, say: time\_stamp, node, field1, field2, log\_type, log\_message. Until now I was par… --- ## [java.lang.ArrayIndexOutOfBoundsException: 1 while preparing the index](https://discuss.elastic.co/t/java-lang-arrayindexoutofboundsexception-1-while-preparing-the-index/13900)
**Author:** [@kiran](https://discuss.elastic.co/u/kiran)\ **Replies:** 4\ **Last updated:** [October 10, 2013, 9:43am UTC](https://discuss.elastic.co/t/java-lang-arrayindexoutofboundsexception-1-while-preparing-the-index/13900 "2013-10-10T09:43:39Z")
--- ## [Kibana-Authentication attempt failed: UNEXPECTED\_SESSION\_ERROR(using basic and anonymous auth)](https://discuss.elastic.co/t/kibana-authentication-attempt-failed-unexpected-session-error-using-basic-and-anonymous-auth/341895)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [September 1, 2023, 5:14pm UTC](https://discuss.elastic.co/t/kibana-authentication-attempt-failed-unexpected-session-error-using-basic-and-anonymous-auth/341895 "2023-09-01T17:14:08Z")
Hello All, I've a requirement where in while user will login to kibana then it should always ask username and password to login and I have custom webui which has integrated dashboards from kibana using iframe and here i… --- ## [Ingest-Attachment: Enabling OCR](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527)
**Author:** [@roelandw](https://discuss.elastic.co/u/roelandw)\ **Replies:** 1\ **Last updated:** [September 14, 2020, 12:52pm UTC](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527 "2020-09-14T12:52:57Z")
Hi there, I'm trying to index some various documents using the Ingest-Attachment plugin. Some of these documents are image-based pdf documents that require OCR processing. According to this page on StackOverflow, Inges… --- ## [Matching the middle or the end part of a word elasticsearch](https://discuss.elastic.co/t/matching-the-middle-or-the-end-part-of-a-word-elasticsearch/221444)
**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 2:49pm UTC](https://discuss.elastic.co/t/matching-the-middle-or-the-end-part-of-a-word-elasticsearch/221444 "2020-02-28T14:49:20Z")
Hello I am new to elasticsearch, I use it to store my dataset. I created a IHM search engine where I can type a query and get the response I would like to know if there is a way to match the middle or the end part of … --- ## [Logstash clone resulting in literal "%{\[@metadata\]\[type\]}" index names!](https://discuss.elastic.co/t/logstash-clone-resulting-in-literal-metadata-type-index-names/108218)
**Author:** [@excalq](https://discuss.elastic.co/u/excalq)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 3:34am UTC](https://discuss.elastic.co/t/logstash-clone-resulting-in-literal-metadata-type-index-names/108218 "2017-11-18T03:34:24Z")
I'm using Logstash 5.5.1 and ElasticSearch 5.6.4. I'm ingesting Filebeat log data, and I'm seeing a very strange result when using the logstash-filter-clone. The intended indexes (app\_stats-2017.11.17) are missing, but I… --- ## [Como filtar mas logs con winlogbeat desde otra carpeta aparte de la existente](https://discuss.elastic.co/t/como-filtar-mas-logs-con-winlogbeat-desde-otra-carpeta-aparte-de-la-existente/103391)
**Author:** [@yolena.mora](https://discuss.elastic.co/u/yolena.mora)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 2:56pm UTC](https://discuss.elastic.co/t/como-filtar-mas-logs-con-winlogbeat-desde-otra-carpeta-aparte-de-la-existente/103391 "2017-10-10T14:56:41Z")
Buenos días comunidad elastic. Necesito su ayuda ya que soy nueva en esta área, con respecto al filtrado de logs. Actualmente estoy indexando logs desde un servidor con winlogbeat, especificamente en EventViewer la carp… --- ## [Timelion: Help for plotting calculated MovingAverage](https://discuss.elastic.co/t/timelion-help-for-plotting-calculated-movingaverage/78814)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 1:13pm UTC](https://discuss.elastic.co/t/timelion-help-for-plotting-calculated-movingaverage/78814 "2017-03-16T13:13:48Z")
Hi, I am exploring timelion vis so as to plot a movingaverage graph for my example below: Log file:(Plane-ID and corresponding Timestamp are stored in Elasticsearch) Jan 30,14:49:56.785 INFO Plane 1A landed Jan 30,1… --- ## ["mapper\_parsing\_exception" Geo Point](https://discuss.elastic.co/t/mapper-parsing-exception-geo-point/296160)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 10:08am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-geo-point/296160 "2022-02-16T10:08:50Z")
Hi, Can anyone tell why I'm getting an error here? P.S: I'm Running latest ELK stack 7.17 This is what i'm pasting in dev's console PUT /\_template/storms { "order": 0, "template": "storms\*", "mappings": { "… --- ## [Elasticsearch in different zone](https://discuss.elastic.co/t/elasticsearch-in-different-zone/230540)
**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\ **Replies:** 3\ **Last updated:** [May 1, 2020, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-in-different-zone/230540 "2020-05-01T09:39:27Z")
Hello, I want to confirm about the performance of Elasticsearch if data is separated among different zone but same region. I have tried to install in different zone but the performance (latency) was very bad. Data sha… --- ## [Metricbeat - Get only Local Disk usage (Excluding mount disk usage)](https://discuss.elastic.co/t/metricbeat-get-only-local-disk-usage-excluding-mount-disk-usage/103009)
**Author:** [@mahadevaprasadap](https://discuss.elastic.co/u/mahadevaprasadap)\ **Replies:** 3\ **Last updated:** [October 9, 2017, 3:26pm UTC](https://discuss.elastic.co/t/metricbeat-get-only-local-disk-usage-excluding-mount-disk-usage/103009 "2017-10-09T15:26:37Z")
How to get only local disk usage by excluding mount disk usage in Metricbeat? --- ## [Timeout](https://discuss.elastic.co/t/timeout/21636)
**Author:** [@Marek\_Dabrowski](https://discuss.elastic.co/u/Marek_Dabrowski)\ **Replies:** 3\ **Last updated:** [January 15, 2015, 7:58am UTC](https://discuss.elastic.co/t/timeout/21636 "2015-01-15T07:58:46Z")
Hello My configuration it's 2 master nodes + 6 data nodes. Master nodes have 128GB RAM + 2 CPU/8Core, data nodes 32GB RAM + 2CPU/6Core. I'm testing migrate data from Oracle to ES. It is about 12TB. Now I have been… --- ## [NRT indexing speed](https://discuss.elastic.co/t/nrt-indexing-speed/7788)
**Author:** [@Crwe](https://discuss.elastic.co/u/Crwe)\ **Replies:** 3\ **Last updated:** [May 24, 2012, 7:26pm UTC](https://discuss.elastic.co/t/nrt-indexing-speed/7788 "2012-05-24T19:26:07Z")
I plan to use the NRT feature heavily, for near-real-time indexing of documents, let's say adding 1,000 documents at a time via bulk index. I'd like to know: Does the bulk indexing performance depend on the size of … --- ## [Installing Kibana from source](https://discuss.elastic.co/t/installing-kibana-from-source/306045)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 10:51am UTC](https://discuss.elastic.co/t/installing-kibana-from-source/306045 "2022-06-10T10:51:50Z")
Hello, I have built Kibana 8.2.0 from source following these instructions. It has made a folder call build with 3 sub folders: default, Kibana, Kibana-docker. I couldn't find documentation on how to install my build o… --- ## [Querying limited nested data (However nested type is deprecated in 7.x)](https://discuss.elastic.co/t/querying-limited-nested-data-however-nested-type-is-deprecated-in-7-x/238329)
**Author:** [@emmm-dee](https://discuss.elastic.co/u/emmm-dee)\ **Replies:** 6\ **Last updated:** [June 24, 2020, 5:54am UTC](https://discuss.elastic.co/t/querying-limited-nested-data-however-nested-type-is-deprecated-in-7-x/238329 "2020-06-24T05:54:35Z")
Elasticsearch 7.7 and I'm using the official php client to interact with the server. My issue was somewhat solved here: Need to return part of a doc from a search query/filter; is parent-child the way to go? - #2 by xa… --- ## [How to compare value in elasticsearch](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379)
**Author:** [@quangvublog](https://discuss.elastic.co/u/quangvublog)\ **Replies:** 6\ **Last updated:** [July 14, 2019, 5:11pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379 "2019-07-14T17:11:13Z")
Hello everyone! I am having some problems in filtering metrics in elasticsearch. For example: beside a Total field, I want to filter value in fail column. function:Total AND fail\>0 In the above example: fail\>0 is wro… --- ## [5 of 16 shards failed](https://discuss.elastic.co/t/5-of-16-shards-failed/169294)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [February 22, 2019, 5:10am UTC](https://discuss.elastic.co/t/5-of-16-shards-failed/169294 "2019-02-22T05:10:06Z")
Hello World! I'm using Elastic Stack 6.6.1 and after enrolling beats into Central Management, I now seeing following message in Kibana: 5 of 16 shards failed above message was not prior to enroll, also Infrastructur… --- ## [The first connection to logstash is always an error](https://discuss.elastic.co/t/the-first-connection-to-logstash-is-always-an-error/296253)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 7\ **Last updated:** [March 3, 2022, 8:18am UTC](https://discuss.elastic.co/t/the-first-connection-to-logstash-is-always-an-error/296253 "2022-03-03T08:18:51Z")
When running lambda, I always see "retry" first, and then immediately connect to backoff. How to make logs sent on first connection? Is there any way to enable more readable logs? config functionbeat functionbeat:… --- ## [Finding relevant documents](https://discuss.elastic.co/t/finding-relevant-documents/97083)
**Author:** [@NikhilJoshi2](https://discuss.elastic.co/u/NikhilJoshi2)\ **Replies:** 7\ **Last updated:** [August 18, 2017, 9:20am UTC](https://discuss.elastic.co/t/finding-relevant-documents/97083 "2017-08-18T09:20:44Z")
Hello, I was going though “more\_like\_this” clause but not able to find relevant documents. I have below data in ElasticSearch and “description” field is having huge non-indexed data of size \>1 million bytes. Like below I… --- ## [Saving Nested Document - ES Hadoop - saveToES](https://discuss.elastic.co/t/saving-nested-document-es-hadoop-savetoes/77292)
**Author:** [@Faisal\_Ahamed\_R](https://discuss.elastic.co/u/Faisal_Ahamed_R)\ **Replies:** 1\ **Last updated:** [March 12, 2017, 8:57pm UTC](https://discuss.elastic.co/t/saving-nested-document-es-hadoop-savetoes/77292 "2017-03-12T20:57:01Z")
Written a code to save javaRDD to Elastic Search. There are no issues with document having NO nested mappings. But with any document having nested mappings, below exception comes while execution. Am I doing something wr… --- ## [Sub Aggregations in java API client](https://discuss.elastic.co/t/sub-aggregations-in-java-api-client/312072)
**Author:** [@Anna\_Mikhilev](https://discuss.elastic.co/u/Anna_Mikhilev)\ **Replies:** 2\ **Last updated:** [August 16, 2022, 6:53am UTC](https://discuss.elastic.co/t/sub-aggregations-in-java-api-client/312072 "2022-08-16T06:53:13Z")
Hi, I am trying to rewrite our code for building multiple aggregations to using the new java API client 7.16.3. I can't find an example for sub aggregations TermsAggregationBuilder aggregationBuilder AggregationBuilde… --- ## [Unable to open kibana map](https://discuss.elastic.co/t/unable-to-open-kibana-map/184835)
**Author:** [@vsk2017](https://discuss.elastic.co/u/vsk2017)\ **Replies:** 2\ **Last updated:** [June 10, 2019, 1:54pm UTC](https://discuss.elastic.co/t/unable-to-open-kibana-map/184835 "2019-06-10T13:54:37Z")
Hi, I'm getting the below error when accessing the Maps in kibana. Any help is appreciated. Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval… --- ## [Jdbc-input-plugin -\> how to supress sql statement in log?](https://discuss.elastic.co/t/jdbc-input-plugin-how-to-supress-sql-statement-in-log/163234)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [January 8, 2019, 7:26am UTC](https://discuss.elastic.co/t/jdbc-input-plugin-how-to-supress-sql-statement-in-log/163234 "2019-01-08T07:26:26Z")
Hi, I am using jdbc input plugin. I noticed that each time it runs, the complete sql statement is written to log. Is there a way to suppress this if needed? Thanks, Andreas --- ## [Elastic search get one record per hour](https://discuss.elastic.co/t/elastic-search-get-one-record-per-hour/148327)
**Author:** [@Jothi\_Kannan](https://discuss.elastic.co/u/Jothi_Kannan)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-get-one-record-per-hour/148327 "2018-09-14T10:01:21Z")
I want to get only one record per hours in a date range. For Example, If I want to get the data's between the days (28-08-2018 - 15-09-2018) there are almost 10000 records, but I want to filter the result to show only on… --- ## [Get User Retention with Timelion](https://discuss.elastic.co/t/get-user-retention-with-timelion/141521)
**Author:** [@xdholy](https://discuss.elastic.co/u/xdholy)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 8:57am UTC](https://discuss.elastic.co/t/get-user-retention-with-timelion/141521 "2018-07-25T08:57:57Z")
Hi, I'm trying to visualize the user retention using Timelion. In order to do calculate the retention, I have to get today's register user count and next day's " registered only 1 day" user count. So far, I managed to… --- ## [Free/Libre Open-Source (FLOSS) and Elastic](https://discuss.elastic.co/t/free-libre-open-source-floss-and-elastic/117247)
**Author:** [@chlarsen](https://discuss.elastic.co/u/chlarsen)\ **Replies:** 2\ **Last updated:** [January 26, 2018, 8:27pm UTC](https://discuss.elastic.co/t/free-libre-open-source-floss-and-elastic/117247 "2018-01-26T20:27:05Z")
Dear All, I have been monitoring, if that is the right expression, Elastic's core component, i.e. LogStash, Elasticsearch and Kibana for a number of years now, and have started using them more intensively recently. Whil… [Previous page](https://discuss.elastic.co/top.md?page=1442&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1444&per_page=50&period=all)