# Top

**URL:** https://discuss.elastic.co/top.md?page=1445&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1446

---

## [No result when filter by scripted field](https://discuss.elastic.co/t/no-result-when-filter-by-scripted-field/197575)

<div class="topic-metadata">

**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\
**Replies:** 2\
**Last updated:** [August 30, 2019, 8:24pm UTC](https://discuss.elastic.co/t/no-result-when-filter-by-scripted-field/197575 "2019-08-30T20:24:02Z")

</div>

Hello, using Kibana 5.4.1 My documents in ElasticSearch have 2 date fields: start and end. Or only start while the event is still happening. I have created a scripted field in Kibana, length, defined like this if (!d…

---

## [ILP failed step: Index name does not match patten](https://discuss.elastic.co/t/ilp-failed-step-index-name-does-not-match-patten/191664)

<div class="topic-metadata">

**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\
**Replies:** 2\
**Last updated:** [July 24, 2019, 5:00pm UTC](https://discuss.elastic.co/t/ilp-failed-step-index-name-does-not-match-patten/191664 "2019-07-24T17:00:31Z")

</div>

Hi. We've been creating our index daily with the following pattern 'test-logs-date'. For example, today's index would be 'test-logs2019.07.22'. I tried implementing Index Lifecycle Management/Index Lifecycle Policies an…

---

## [SIEM Elastic - Beta -7.2 - Cisco module - unable to see data](https://discuss.elastic.co/t/siem-elastic-beta-7-2-cisco-module-unable-to-see-data/187546)

<div class="topic-metadata">

**Author:** [@Mons](https://discuss.elastic.co/u/Mons)\
**Replies:** 2\
**Last updated:** [July 17, 2019, 1:51am UTC](https://discuss.elastic.co/t/siem-elastic-beta-7-2-cisco-module-unable-to-see-data/187546 "2019-07-17T01:51:58Z")

</div>

Hi All, I am trying my hands on SIEM elastic module. Wanted to configure Cisco network device’s logs using add data option under SIEM. Followed the steps under RPM. Have enabled the filebeat module for cisco as well. B…

---

## [High cpu usage on windows how to fix?](https://discuss.elastic.co/t/high-cpu-usage-on-windows-how-to-fix/81440)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 2\
**Last updated:** [April 10, 2017, 9:12am UTC](https://discuss.elastic.co/t/high-cpu-usage-on-windows-how-to-fix/81440 "2017-04-10T09:12:10Z")

</div>

hi i get sporaticly high cpu usage on the windows. i have 16 gb ram and tried fixing it with more ram but i still run into the 80-100% cpu load and it affects the search result time in a negative way. I found this "…

---

## [Problem in Kibana 3.0.1 loading](https://discuss.elastic.co/t/problem-in-kibana-3-0-1-loading/25605)

<div class="topic-metadata">

**Author:** [@asgawali](https://discuss.elastic.co/u/asgawali)\
**Replies:** 2\
**Last updated:** [August 20, 2015, 9:43am UTC](https://discuss.elastic.co/t/problem-in-kibana-3-0-1-loading/25605 "2015-08-20T09:43:07Z")

</div>

Hi, I have installed Elasticsearch ,logstash and kibana in different aws linux boxes. My problem is when I hit kibana URL, the UI is gets loaded as basic html page. Can you help me out here? Please note that Kibana is …

---

## [How can I convert a given array structure?](https://discuss.elastic.co/t/how-can-i-convert-a-given-array-structure/168635)

<div class="topic-metadata">

**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\
**Replies:** 2\
**Last updated:** [February 15, 2019, 9:03pm UTC](https://discuss.elastic.co/t/how-can-i-convert-a-given-array-structure/168635 "2019-02-15T21:03:09Z")

</div>

Hi, I'm still in the beginning of understanding how to use logstash. I have this structure in my event's JSON. "testDetails":\[ { "placeholder":"NO\_SECURE\_FLAG\_SET", "values":{…some more stuff…} …

---

## [Poor knn results from \*some\* nodes](https://discuss.elastic.co/t/poor-knn-results-from-some-nodes/358239)

<div class="topic-metadata">

**Author:** [@peedeeboy](https://discuss.elastic.co/u/peedeeboy)\
**Replies:** 6\
**Last updated:** [April 29, 2024, 7:33pm UTC](https://discuss.elastic.co/t/poor-knn-results-from-some-nodes/358239 "2024-04-29T19:33:05Z")

</div>

For customer requests we currently run two searches - a classic keyword search, and a knn search on a dense vector field. We calculate the query vector outside of ES and we have our own function to calculate final score…

---

## [Snapshot backup](https://discuss.elastic.co/t/snapshot-backup/218775)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 6\
**Last updated:** [March 5, 2020, 10:46am UTC](https://discuss.elastic.co/t/snapshot-backup/218775 "2020-03-05T10:46:37Z")

</div>

is there any option to backup elasticsearch direct to tape as shared file system will require equal to all index size ?

---

## [No jvm.options after having installed JRE 8 and Elasticsearch 7.3.1](https://discuss.elastic.co/t/no-jvm-options-after-having-installed-jre-8-and-elasticsearch-7-3-1/195939)

<div class="topic-metadata">

**Author:** [@scarabas](https://discuss.elastic.co/u/scarabas)\
**Replies:** 6\
**Last updated:** [August 21, 2019, 7:07am UTC](https://discuss.elastic.co/t/no-jvm-options-after-having-installed-jre-8-and-elasticsearch-7-3-1/195939 "2019-08-21T07:07:56Z")

</div>

I have just installed JRE by using apt-get install default-jre I then installed Elasticsearch by using apt-get install elasticsearch Now, I have to edit the jvm.options file, which should reside under /etc/elasticse…

---

## [Could not initialize class org.elasticsearch.common.xcontent.json.JsonXContent](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-common-xcontent-json-jsonxcontent/48275)

<div class="topic-metadata">

**Author:** [@gopin4hat7ash](https://discuss.elastic.co/u/gopin4hat7ash)\
**Replies:** 0\
**Last updated:** [April 25, 2016, 5:30am UTC](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-common-xcontent-json-jsonxcontent/48275 "2016-04-25T05:30:39Z")

</div>

While running the junits , we are facing the below issue and we are using ES2.3.1 java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.common.xcontent.json.JsonXContent at org.elasticsearch.com…

---

## [Latest Timestamp Machine learning doesn't change](https://discuss.elastic.co/t/latest-timestamp-machine-learning-doesnt-change/267362)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 5\
**Last updated:** [March 19, 2021, 1:52pm UTC](https://discuss.elastic.co/t/latest-timestamp-machine-learning-doesnt-change/267362 "2021-03-19T13:52:14Z")

</div>

Elasticsearch: Platinum 7.10.1 Kibana: 7.10.1 Hi, I am creating Machine learning jobs in real time. The questions are: What kind of information Latest Timestamp provides? and Why the Latest Timestamp remains the sa…

---

## [Searching with coordinates using NEST](https://discuss.elastic.co/t/searching-with-coordinates-using-nest/110669)

<div class="topic-metadata">

**Author:** [@Liron1379](https://discuss.elastic.co/u/Liron1379)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 12:32am UTC](https://discuss.elastic.co/t/searching-with-coordinates-using-nest/110669 "2017-12-12T00:32:00Z")

</div>

How should the C# code look like when I'm searching with coordinates? I've tried to do it like a regular search but nothing seems to happen. The regular search code is: var searchResponse = lowlevelClient.…

---

## [Adjusting number of replica shards?](https://discuss.elastic.co/t/adjusting-number-of-replica-shards/57232)

<div class="topic-metadata">

**Author:** [@Steve\_Suh](https://discuss.elastic.co/u/Steve_Suh)\
**Replies:** 5\
**Last updated:** [August 4, 2016, 3:26pm UTC](https://discuss.elastic.co/t/adjusting-number-of-replica-shards/57232 "2016-08-04T15:26:39Z")

</div>

Can I just the number of replica shards after index creation and the index starts taking documents? Can I increase and decrease as well? For our staging, I currently have 1 and I want to reduce it to 0. Will that a…

---

## [ANN : elasticsearch-entity-resolution plugin 0.1](https://discuss.elastic.co/t/ann-elasticsearch-entity-resolution-plugin-0-1/13598)

<div class="topic-metadata">

**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\
**Replies:** 5\
**Last updated:** [September 16, 2013, 2:42pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-entity-resolution-plugin-0-1/13598 "2013-09-16T14:42:50Z")

</div>

Hi folks, I'm happy to announce my first release of Elasticsearch entity resolution plugin. https://github.com/YannBrrd/elasticsearch-entity-resolution/ Hope you'll enjoy it ! Regards, Yann -- You re…

---

## [Restarting ES and slow recovery](https://discuss.elastic.co/t/restarting-es-and-slow-recovery/9099)

<div class="topic-metadata">

**Author:** [@David\_Loehr](https://discuss.elastic.co/u/David_Loehr)\
**Replies:** 5\
**Last updated:** [September 21, 2012, 9:30pm UTC](https://discuss.elastic.co/t/restarting-es-and-slow-recovery/9099 "2012-09-21T21:30:20Z")

</div>

I'm running two elasticsearch nodes (0.18.6), with unicast discovery, 5 shards and 1 replica per index, 747 indices, and 2 types per index. I restarted elasticsearch on each server (waited about a minute between them)…

---

## [Kibana not give logs](https://discuss.elastic.co/t/kibana-not-give-logs/328695)

<div class="topic-metadata">

**Author:** [@Prabhath\_samarasingh](https://discuss.elastic.co/u/Prabhath_samarasingh)\
**Replies:** 7\
**Last updated:** [March 31, 2023, 8:13pm UTC](https://discuss.elastic.co/t/kibana-not-give-logs/328695 "2023-03-31T20:13:11Z")

</div>

Configured basic ELK set up.But my kibana interface had no logs. This is the guide I followed. What is the mistake I have done. Installing and Configuring Elasticsearch curl -fsSL https://artifacts.elastic.co/GPG-KEY…

---

## [APM RUM Angular CORS error](https://discuss.elastic.co/t/apm-rum-angular-cors-error/270226)

<div class="topic-metadata">

**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\
**Replies:** 1\
**Last updated:** [April 21, 2021, 10:23am UTC](https://discuss.elastic.co/t/apm-rum-angular-cors-error/270226 "2021-04-21T10:23:18Z")

</div>

I have an Angular app and I am using the Angular APM Rum library. My APM server is behind an nginx reverse proxy. I'm getting CORS errors as per attached screenshot. Kibana version: 7.11.0 Elasticsearch version: 7.11…

---

## [Cannot Login to Enterprise Search 7.7](https://discuss.elastic.co/t/cannot-login-to-enterprise-search-7-7/242517)

<div class="topic-metadata">

**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 3:55am UTC](https://discuss.elastic.co/t/cannot-login-to-enterprise-search-7-7/242517 "2020-07-27T03:55:26Z")

</div>

Hi There, I'm testing out ent search 7.7 and i have successfully start ent search and can see the landing page. \[root@elk-entsearch01 ~\]# ENT\_SEARCH\_DEFAULT\_PASSWORD=passwordexample /usr/share/enterprise-search/bin/ent…

---

## [Does Dissect's mapping able to match multiple pattern?](https://discuss.elastic.co/t/does-dissects-mapping-able-to-match-multiple-pattern/220259)

<div class="topic-metadata">

**Author:** [@Muhammad\_Ariful\_Isla](https://discuss.elastic.co/u/Muhammad_Ariful_Isla)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 3:15pm UTC](https://discuss.elastic.co/t/does-dissects-mapping-able-to-match-multiple-pattern/220259 "2020-02-21T15:15:57Z")

</div>

As my log have multiple pattern I need to use multiple dissect pattern so that if one pattern fails to recognize the log other can capture. Following pseudo configuration works, "message" =\> "pattern1" Or "message" =\> …

---

## [Help with match date 2019-12-04 06:34:33.850000+00:00](https://discuss.elastic.co/t/help-with-match-date-2019-12-04-0633-850000-00-00/211152)

<div class="topic-metadata">

**Author:** [@LLhborda](https://discuss.elastic.co/u/LLhborda)\
**Replies:** 7\
**Last updated:** [December 10, 2019, 3:13pm UTC](https://discuss.elastic.co/t/help-with-match-date-2019-12-04-0633-850000-00-00/211152 "2019-12-10T15:13:05Z")

</div>

I have date values like this 2019-12-04 06:34:33.850000+00:00 I have trouble describing the format on "match". So far the closet I came up is "yyyy-mm-dd hh:mm:ss.sss" should I use: timezone =\> GMT locale - en-us T…

---

## [Documents with same IDs but of different types in the same index in ES6?](https://discuss.elastic.co/t/documents-with-same-ids-but-of-different-types-in-the-same-index-in-es6/122959)

<div class="topic-metadata">

**Author:** [@Andrey\_Bakhrachev](https://discuss.elastic.co/u/Andrey_Bakhrachev)\
**Replies:** 7\
**Last updated:** [March 8, 2018, 1:07pm UTC](https://discuss.elastic.co/t/documents-with-same-ids-but-of-different-types-in-the-same-index-in-es6/122959 "2018-03-08T13:07:38Z")

</div>

Hey there, Sorry guys, but that mapping types removal in ES6 is quite a pain in the ass to say the least! As it's proposed in the docs I chose the "custom type field" option to store the different document types in the…

---

## [Logstash logs are not found in /var/log/logstash](https://discuss.elastic.co/t/logstash-logs-are-not-found-in-var-log-logstash/107825)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [November 16, 2017, 10:56am UTC](https://discuss.elastic.co/t/logstash-logs-are-not-found-in-var-log-logstash/107825 "2017-11-16T10:56:36Z")

</div>

Hi all i have installed logstash with rpm i am trying to check it's logs in /var/log/logstash directory but i have found no files in that\[/var/log/logstash\] directory here i am using default logstash.yml file how ca…

---

## [How to install packagebeat in AIX](https://discuss.elastic.co/t/how-to-install-packagebeat-in-aix/97671)

<div class="topic-metadata">

**Author:** [@fenggnay](https://discuss.elastic.co/u/fenggnay)\
**Replies:** 1\
**Last updated:** [August 20, 2017, 5:02pm UTC](https://discuss.elastic.co/t/how-to-install-packagebeat-in-aix/97671 "2017-08-20T17:02:03Z")

</div>

Install package for linux doesn’t used in IBM AIX server.how to set environment for compress beat.

---

## [Logstash keep restarting and doesn't listen to beats](https://discuss.elastic.co/t/logstash-keep-restarting-and-doesnt-listen-to-beats/80001)

<div class="topic-metadata">

**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\
**Replies:** 1\
**Last updated:** [March 27, 2017, 7:21am UTC](https://discuss.elastic.co/t/logstash-keep-restarting-and-doesnt-listen-to-beats/80001 "2017-03-27T07:21:16Z")

</div>

Hi guys, i'm using ubuntu server 16.10 headless, i installed ELK and filebeat via apt, configured everything i should've (that i know of) and for some reason, logstash isn't getting the syslogs from the 'filebeat' , and…

---

## [Wildcard phrases with slop using string query](https://discuss.elastic.co/t/wildcard-phrases-with-slop-using-string-query/26638)

<div class="topic-metadata">

**Author:** [@Vladimir\_Sidorenko](https://discuss.elastic.co/u/Vladimir_Sidorenko)\
**Replies:** 1\
**Last updated:** [August 3, 2015, 8:03am UTC](https://discuss.elastic.co/t/wildcard-phrases-with-slop-using-string-query/26638 "2015-08-03T08:03:26Z")

</div>

Elastic supports slop for simple phrases, like "quick fox"~2, but when wildcards are used in string, it doesn't work: "qui\* fox"~2 I've found a workaround for this using json query dsl using span\_near and match prefix:…

---

## [Resolve code -\> display value in a visualization?](https://discuss.elastic.co/t/resolve-code-display-value-in-a-visualization/24337)

<div class="topic-metadata">

**Author:** [@Ben\_Bimber](https://discuss.elastic.co/u/Ben_Bimber)\
**Replies:** 1\
**Last updated:** [June 25, 2015, 4:02pm UTC](https://discuss.elastic.co/t/resolve-code-display-value-in-a-visualization/24337 "2015-06-25T16:02:26Z")

</div>

Hello - I am very new to kibana. In the demo video there is an example showing google news feeds. They aggregate these data based on some numeric code google assigns to the items (ie. 1 -\> 'Positive', 2 -\> 'Negative',…

---

## [I configure rsyslog for my linux server now I want to send logs to LOGSTASH. How could I achieve that](https://discuss.elastic.co/t/i-configure-rsyslog-for-my-linux-server-now-i-want-to-send-logs-to-logstash-how-could-i-achieve-that/349566)

<div class="topic-metadata">

**Author:** [@Subrato1](https://discuss.elastic.co/u/Subrato1)\
**Replies:** 4\
**Last updated:** [December 19, 2023, 12:52pm UTC](https://discuss.elastic.co/t/i-configure-rsyslog-for-my-linux-server-now-i-want-to-send-logs-to-logstash-how-could-i-achieve-that/349566 "2023-12-19T12:52:08Z")

</div>

Below is my rsyslog conf. My audit logs are generating in syslogs only.

---

## [Installation erreur Localhost:9200](https://discuss.elastic.co/t/installation-erreur-localhost-9200/305957)

<div class="topic-metadata">

**Author:** [@Merveille\_Kimfuta](https://discuss.elastic.co/u/Merveille_Kimfuta)\
**Replies:** 4\
**Last updated:** [June 3, 2022, 9:11am UTC](https://discuss.elastic.co/t/installation-erreur-localhost-9200/305957 "2022-06-03T09:11:17Z")

</div>

Bonjour, Etant novice, J'ai suivi ce tutoriel https://www.youtube.com/watch?v=4BtAuGcUjCo&t=93s pour installer ELK sur Windows 10 mais je rencontre ce message d'erreur en pièce jointe. Avez-vous une idée de comment je p…

---

## [How to change Lucene version?](https://discuss.elastic.co/t/how-to-change-lucene-version/305959)

<div class="topic-metadata">

**Author:** [@Seo](https://discuss.elastic.co/u/Seo)\
**Replies:** 4\
**Last updated:** [May 31, 2022, 12:29am UTC](https://discuss.elastic.co/t/how-to-change-lucene-version/305959 "2022-05-31T00:29:48Z")

</div>

Hello. I have some questions about Lucene version. Are there any methods to change version of Lucene without change of Elasticsearch version? I want to apply the modified Lucene code(without version change) to my Elas…

---

## [ElasticSearch security set up documentation is Byzantine](https://discuss.elastic.co/t/elasticsearch-security-set-up-documentation-is-byzantine/268722)

<div class="topic-metadata">

**Author:** [@lachlan.simpson](https://discuss.elastic.co/u/lachlan.simpson)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 4:41am UTC](https://discuss.elastic.co/t/elasticsearch-security-set-up-documentation-is-byzantine/268722 "2021-03-30T04:41:45Z")

</div>

I am setting up a testing instance in house. Single node, with proof of concept reporting. Elastic, Kibana, Beats, using the free software only. There is no indication that ElasticSearch is securable on the free license…

---

## [How are keywords indexed](https://discuss.elastic.co/t/how-are-keywords-indexed/187025)

<div class="topic-metadata">

**Author:** [@shekharshan](https://discuss.elastic.co/u/shekharshan)\
**Replies:** 1\
**Last updated:** [June 24, 2019, 5:29am UTC](https://discuss.elastic.co/t/how-are-keywords-indexed/187025 "2019-06-24T05:29:21Z")

</div>

I am new to this topic of text searching so I have some confusions. I understand that full text data goes through the analyzer that does the following processing: Tokenizes the full text into individual words Throws aw…

---

## [WHAT IS SCRIPT FOR FINDING MINIMUM OF DATES WHICH ARE IN strict\_date\_time\_no\_millis FORMAT IN KIBANA](https://discuss.elastic.co/t/what-is-script-for-finding-minimum-of-dates-which-are-in-strict-date-time-no-millis-format-in-kibana/172839)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 4\
**Last updated:** [March 25, 2019, 9:37pm UTC](https://discuss.elastic.co/t/what-is-script-for-finding-minimum-of-dates-which-are-in-strict-date-time-no-millis-format-in-kibana/172839 "2019-03-25T21:37:55Z")

</div>

FIND MINIMUM OF DATES WHICH ARE IN strict\_date\_time\_no\_millis FORMAT IN KIBANA PAINLESS SCRIPT FIELD 2019-03-14T11:36:49.635Z, 2019-03-14T11:37:49.635Z, 2019-03-14T11:34:49.635Z, I have several dates like above in …

---

## [Mysql server to elasticsearch](https://discuss.elastic.co/t/mysql-server-to-elasticsearch/167037)

<div class="topic-metadata">

**Author:** [@sahil\_ahmed](https://discuss.elastic.co/u/sahil_ahmed)\
**Replies:** 4\
**Last updated:** [February 5, 2019, 3:14pm UTC](https://discuss.elastic.co/t/mysql-server-to-elasticsearch/167037 "2019-02-05T15:14:53Z")

</div>

Hello, I am trying to input the data my sql server to the elasticsearch. i am running ELK in one server and mysql is in the other server they both are in the same network.I installed the mysql JDBC connector to the Serv…

---

## [New Elasticsearch and Umbraco](https://discuss.elastic.co/t/new-elasticsearch-and-umbraco/87083)

<div class="topic-metadata">

**Author:** [@JamMan](https://discuss.elastic.co/u/JamMan)\
**Replies:** 4\
**Last updated:** [May 25, 2017, 10:56am UTC](https://discuss.elastic.co/t/new-elasticsearch-and-umbraco/87083 "2017-05-25T10:56:07Z")

</div>

Hi, Which versions of Umbraco are compatible with the new Elasticsearch product? Any help / advice would be much appreciated. Regards, Jamie

---

## [New Graph Feature?](https://discuss.elastic.co/t/new-graph-feature/35962)

<div class="topic-metadata">

**Author:** [@ryanbales](https://discuss.elastic.co/u/ryanbales)\
**Replies:** 4\
**Last updated:** [December 1, 2015, 10:18pm UTC](https://discuss.elastic.co/t/new-graph-feature/35962 "2015-12-01T22:18:05Z")

</div>

Trying to locate details or a possible demo of thew new Graph features in Kibana. Essentially, I'm looking for a way to leverage Kibana as API and use it from calls on my pages. Thanks for your help. Ryan

---

## [\[Question\] No field could be selected when try to sum an aggregation in the visualization](https://discuss.elastic.co/t/question-no-field-could-be-selected-when-try-to-sum-an-aggregation-in-the-visualization/370)

<div class="topic-metadata">

**Author:** [@Gwan](https://discuss.elastic.co/u/Gwan)\
**Replies:** 4\
**Last updated:** [May 8, 2015, 10:34am UTC](https://discuss.elastic.co/t/question-no-field-could-be-selected-when-try-to-sum-an-aggregation-in-the-visualization/370 "2015-05-08T10:34:09Z")

</div>

Hi I'm new to Kibana. I follow the guidance and try to visualize a search, but meet some little problems. I got items like this: \[image\] I want to sum the "pos" section of all the items that have the same timestamp, howe…

---

## [Which Spring Data design when the total\_fields limit is reached?](https://discuss.elastic.co/t/which-spring-data-design-when-the-total-fields-limit-is-reached/248315)

<div class="topic-metadata">

**Author:** [@juherr](https://discuss.elastic.co/u/juherr)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 12:09pm UTC](https://discuss.elastic.co/t/which-spring-data-design-when-the-total-fields-limit-is-reached/248315 "2020-09-22T12:09:58Z")

</div>

Hi, We are using Elasticsearch through Spring Data and we reached the default "index.mapping.total\_fields.limit". We are indexing 5 different types of documents (via Java types, not index types). Each document has many…

---

## [Fully automated upgrading of Elasticsearch cluster](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665)

<div class="topic-metadata">

**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 6:07am UTC](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665 "2019-08-05T06:07:42Z")

</div>

Hey there, currently working on a project that aims to automate upgrading of an Elasticsearch cluster (a typical cluster size is ~20 nodes, the majority of which are master-eligible) to a higher minor version (eg. 7.1.1 …

---

## [Filebeat issue on windows](https://discuss.elastic.co/t/filebeat-issue-on-windows/104929)

<div class="topic-metadata">

**Author:** [@Paris\_Bangrazi](https://discuss.elastic.co/u/Paris_Bangrazi)\
**Replies:** 3\
**Last updated:** [October 25, 2017, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-issue-on-windows/104929 "2017-10-25T13:53:42Z")

</div>

Hi, I'm having an issue with filebeat on windowsXP, the same file is loaded several times, and it causes duplicated rows. any advices? Thanks Paris Filebeat.yml filebeat.prospectors: - input\_type: log paths: - …

---

## [Gold and Platinum subscription](https://discuss.elastic.co/t/gold-and-platinum-subscription/100037)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 3\
**Last updated:** [September 12, 2017, 2:33pm UTC](https://discuss.elastic.co/t/gold-and-platinum-subscription/100037 "2017-09-12T14:33:21Z")

</div>

Can you please provide more details about the Elastic Stack Monitoring Service which is part of the platinum and gold subscriptions?

---

## [Population](https://discuss.elastic.co/t/population/53698)

<div class="topic-metadata">

**Author:** [@Julio](https://discuss.elastic.co/u/Julio)\
**Replies:** 3\
**Last updated:** [June 29, 2016, 8:19pm UTC](https://discuss.elastic.co/t/population/53698 "2016-06-29T20:19:28Z")

</div>

My doubt is, How do I will populate the IPs with their correct lat/long to call the heat map correctly? Info: I just have the IP of my client when he/her open the e-mail and I get the lat/long.

---

## [Update mapping gives error](https://discuss.elastic.co/t/update-mapping-gives-error/38880)

<div class="topic-metadata">

**Author:** [@trushad](https://discuss.elastic.co/u/trushad)\
**Replies:** 3\
**Last updated:** [January 12, 2016, 2:34pm UTC](https://discuss.elastic.co/t/update-mapping-gives-error/38880 "2016-01-12T14:34:48Z")

</div>

I m getting merge\_mapping\_exception when I m updating mapping, http://localhost:9200/logstash/filedoc/\_mapping?ignore\_conflicts=true { "properties": { "id": { "type": "long" } } } { "logstash": …

---

## [Analyzed field](https://discuss.elastic.co/t/analyzed-field/32550)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 3\
**Last updated:** [October 20, 2015, 6:18am UTC](https://discuss.elastic.co/t/analyzed-field/32550 "2015-10-20T06:18:45Z")

</div>

i dont want analyzed field so how can i correct itin kibana 4 ? My data is coming from log file

---

## [Rails: Tire import taking too long](https://discuss.elastic.co/t/rails-tire-import-taking-too-long/13897)

<div class="topic-metadata">

**Author:** [@Karan\_Verma](https://discuss.elastic.co/u/Karan_Verma)\
**Replies:** 3\
**Last updated:** [October 10, 2013, 7:54pm UTC](https://discuss.elastic.co/t/rails-tire-import-taking-too-long/13897 "2013-10-10T19:54:49Z")

</div>

Hi I want to index close to 900,000 documents but it is taking quite long. I have defined a mapping which contains indexes is on the lines of: indexes :residencies\_with\_year, type: 'string', :as =\> …

---

## [How to install Elasticsearch & Logstash using RPM for version 7.13.4](https://discuss.elastic.co/t/how-to-install-elasticsearch-logstash-using-rpm-for-version-7-13-4/292715)

<div class="topic-metadata">

**Author:** [@chandra\_mohan1](https://discuss.elastic.co/u/chandra_mohan1)\
**Replies:** 2\
**Last updated:** [December 23, 2021, 4:13am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-logstash-using-rpm-for-version-7-13-4/292715 "2021-12-23T04:13:46Z")

</div>

I want install Elasticsearch & Logstash of version 7.13.4 using RPM to perform some testing. I am trying to install using using RPM package mentioned here: \[Installing Logstash | Logstash Reference \[7.16\] | Elastic\](htt…

---

## [Elastic Cloud Kibana IP Source Filtering](https://discuss.elastic.co/t/elastic-cloud-kibana-ip-source-filtering/140811)

<div class="topic-metadata">

**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 8:40am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-ip-source-filtering/140811 "2018-07-30T08:40:50Z")

</div>

Hey Guys, I have a question around "elastic cloud" whitelisting of source IP connections for Kibana and elasticsearch, is this possible?. This page talks about elastic node IP address filtering. https://www.elastic.co…

---

## [Kibana 6.1 Cannot access nor delete index pattern](https://discuss.elastic.co/t/kibana-6-1-cannot-access-nor-delete-index-pattern/114494)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 12:33pm UTC](https://discuss.elastic.co/t/kibana-6-1-cannot-access-nor-delete-index-pattern/114494 "2018-01-08T12:33:24Z")

</div>

Hi Everyone, I get this error while accessing an existing index pattern - the page for the index simply does not load. This index pattern does have a lot of fields, 1700 of them. Is the error the result of too many fie…

---

## [Split Timelion view based on Field](https://discuss.elastic.co/t/split-timelion-view-based-on-field/93748)

<div class="topic-metadata">

**Author:** [@viswadeep](https://discuss.elastic.co/u/viswadeep)\
**Replies:** 2\
**Last updated:** [July 19, 2017, 9:53pm UTC](https://discuss.elastic.co/t/split-timelion-view-based-on-field/93748 "2017-07-19T21:53:36Z")

</div>

Hi, I have an Index "school" Each record in "School" is like { finance\_dept: { "budget" : $10000 "spend" : $5000 "money\_left" : $5000 } ........ How to show "budget", "spend" & "money\_left" in a single…

---

## [X-Pack Security and Azure Active Directory](https://discuss.elastic.co/t/x-pack-security-and-azure-active-directory/90441)

<div class="topic-metadata">

**Author:** [@mirek](https://discuss.elastic.co/u/mirek)\
**Replies:** 2\
**Last updated:** [June 23, 2017, 7:44am UTC](https://discuss.elastic.co/t/x-pack-security-and-azure-active-directory/90441 "2017-06-23T07:44:28Z")

</div>

Hi Do you know if X-Pack Security works with Azure Acitve Directory? AFAIK Azure AD is not a full version of on-premise Active Directory (i.e. it's not a domain controller), but I haven't found any information in doc…

---

## [RestClient issue : Request denied by WatchGuard HTTP Proxy](https://discuss.elastic.co/t/restclient-issue-request-denied-by-watchguard-http-proxy/87383)

<div class="topic-metadata">

**Author:** [@jshraddha](https://discuss.elastic.co/u/jshraddha)\
**Replies:** 2\
**Last updated:** [May 29, 2017, 6:17am UTC](https://discuss.elastic.co/t/restclient-issue-request-denied-by-watchguard-http-proxy/87383 "2017-05-29T06:17:20Z")

</div>

Hi I am using elasticsearch rest client to push data to my amazon elasticsearch domain. It works perfect with host : localhost port: 9200 whereas when I change host to point my amazon elasticsearch endpoint with the po…

[Previous page](https://discuss.elastic.co/top.md?page=1444&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1446&per_page=50&period=all)
