# Top **URL:** https://discuss.elastic.co/top.md?page=1451&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1452 --- ## [Recommendations for parsing 1000's ~10MB files to backfill elasticsearch](https://discuss.elastic.co/t/recommendations-for-parsing-1000s-10mb-files-to-backfill-elasticsearch/174114)
**Author:** [@drwg](https://discuss.elastic.co/u/drwg)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 3:53pm UTC](https://discuss.elastic.co/t/recommendations-for-parsing-1000s-10mb-files-to-backfill-elasticsearch/174114 "2019-03-29T15:53:53Z")
I'm currently using filebeat -\> logstash -\> elastic to back fill elastic search with exit codes from several thousand text output files each 10's MB in size and \>10k lines. ~200GB in total. The server can push 5GB/s read… --- ## [Multiple X-axis metrics](https://discuss.elastic.co/t/multiple-x-axis-metrics/126090)
**Author:** [@Nyu](https://discuss.elastic.co/u/Nyu)\ **Replies:** 2\ **Last updated:** [March 30, 2018, 7:45am UTC](https://discuss.elastic.co/t/multiple-x-axis-metrics/126090 "2018-03-30T07:45:49Z")
Hi, I'm learning kibana and I came across the following problem. Let's say I have an Index with this data: serie1 serie2 x1 40 20 x2 30 40 x3 50 60 x4 20 … --- ## [Enabling logout button for proxy authentication](https://discuss.elastic.co/t/enabling-logout-button-for-proxy-authentication/122318)
**Author:** [@lalbertorio](https://discuss.elastic.co/u/lalbertorio)\ **Replies:** 2\ **Last updated:** [March 5, 2018, 2:02pm UTC](https://discuss.elastic.co/t/enabling-logout-button-for-proxy-authentication/122318 "2018-03-05T14:02:41Z")
Hello, I am looking for a way to enable the logout button in kibana 5.6 when I log in through a proxy. Is there a way to do this without creating a plugin? --- ## [Grok Pattern for text file](https://discuss.elastic.co/t/grok-pattern-for-text-file/105567)
**Author:** [@ranjith](https://discuss.elastic.co/u/ranjith)\ **Replies:** 2\ **Last updated:** [October 27, 2017, 1:11pm UTC](https://discuss.elastic.co/t/grok-pattern-for-text-file/105567 "2017-10-27T13:11:48Z")
Hi all, I'm trying to parse an text file and am not able to grok the PKey in these text. Please find the sample text file below. ac92ec61-5a5c-df11-beff-001ec95274b6,8b2135d0-ba04-4473-8398-3e0e1045c7c4 I am trying i… --- ## [Java High Level REST Client での \_search/template クエリについて](https://discuss.elastic.co/t/java-high-level-rest-client--search-template/100643)
**Author:** [@mfuru](https://discuss.elastic.co/u/mfuru)\ **Replies:** 2\ **Last updated:** [September 20, 2017, 11:05pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client--search-template/100643 "2017-09-20T23:05:44Z")
Elastic5.6で追加になったHigh Level REST Clientを早速試してみました。 Search APIの動作は確認できました。 TransportClientで使っていた\_search/templateをマイグレーションしようと思ったのですが、対応するメソッドが見つかりませんでした。 GitHubのIssueを探してみたのですが、サンプルソースや、今後追加されるなどの情報は見つかりませんでした。何か情報をお持ち… --- ## [Use more than one table with different indexes in logstash](https://discuss.elastic.co/t/use-more-than-one-table-with-different-indexes-in-logstash/71676)
**Author:** [@Abdullah\_Alaiwat](https://discuss.elastic.co/u/Abdullah_Alaiwat)\ **Replies:** 2\ **Last updated:** [January 16, 2017, 6:38am UTC](https://discuss.elastic.co/t/use-more-than-one-table-with-different-indexes-in-logstash/71676 "2017-01-16T06:38:28Z")
Is there any way to use two tables in logstash but with two different indexes? or i have to create two config files with two services? --- ## [Authorization errors with custom Shield plugin](https://discuss.elastic.co/t/authorization-errors-with-custom-shield-plugin/52375)
**Author:** [@rmartin](https://discuss.elastic.co/u/rmartin)\ **Replies:** 2\ **Last updated:** [June 18, 2016, 12:51pm UTC](https://discuss.elastic.co/t/authorization-errors-with-custom-shield-plugin/52375 "2016-06-18T12:51:19Z")
Hello, I'm writing an ElasticSearch Shield plugin in order to integrate with my organization's internal authorization systems but have unfortunately hit a problem. For context, at the moment, there is no integration … --- ## [Index a large dataset into elasticsearch](https://discuss.elastic.co/t/index-a-large-dataset-into-elasticsearch/46535)
**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\ **Replies:** 2\ **Last updated:** [April 6, 2016, 1:33pm UTC](https://discuss.elastic.co/t/index-a-large-dataset-into-elasticsearch/46535 "2016-04-06T13:33:37Z")
Hello, I've been playing around with elasticsearch and graph for a while and a lot is very promising! I'm stuck when it comes to parsing JSON-datasets containing millions of rows with the bulk api. I have to add a h… --- ## [Found Remove Kibana Text from the iframe](https://discuss.elastic.co/t/found-remove-kibana-text-from-the-iframe/40483)
**Author:** [@Jasmeet\_Sangari](https://discuss.elastic.co/u/Jasmeet_Sangari)\ **Replies:** 2\ **Last updated:** [February 18, 2016, 7:18pm UTC](https://discuss.elastic.co/t/found-remove-kibana-text-from-the-iframe/40483 "2016-02-18T19:18:47Z")
Hi , We are looking into embed kibana visualizations and Dashboards on our Website (Its great that found can manage the ES and Kibana instances) , Is there is supported way of removing the Kibana text from the iframe d… --- ## [Level alerts in colors](https://discuss.elastic.co/t/level-alerts-in-colors/37126)
**Author:** [@Maxim\_Surdu](https://discuss.elastic.co/u/Maxim_Surdu)\ **Replies:** 2\ **Last updated:** [December 16, 2015, 7:12am UTC](https://discuss.elastic.co/t/level-alerts-in-colors/37126 "2015-12-16T07:12:09Z")
Hi everyone, I am new in Ossec, i configure ossec-server and ossec agent, all is working formidable! but how can i configure the KIbana to show me the level alerts in colors, like if level of alert is 15 to show in KIB… --- ## [Logstash stopping unexpectedly](https://discuss.elastic.co/t/logstash-stopping-unexpectedly/27026)
**Author:** [@ksvagarwal](https://discuss.elastic.co/u/ksvagarwal)\ **Replies:** 2\ **Last updated:** [August 8, 2015, 5:55am UTC](https://discuss.elastic.co/t/logstash-stopping-unexpectedly/27026 "2015-08-08T05:55:53Z")
I have set up a logstash with redis architecture to handle my logs. The way I have organized it is: logstash ---\> redis ---\> logstash ---\> elasticsearch but the problem that occurred is that after parsing nearly 1.25 … --- ## [How we can change Elasticsearch default analyzer](https://discuss.elastic.co/t/how-we-can-change-elasticsearch-default-analyzer/13412)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 2\ **Last updated:** [September 2, 2013, 5:34am UTC](https://discuss.elastic.co/t/how-we-can-change-elasticsearch-default-analyzer/13412 "2013-09-02T05:34:04Z")
Hi All, I would like to know about how we can use own \*custom analyzer\* as a default analyzer instead of standard analyzer. For examples: Currently, If any new fields enter into an index will be analyzed using … --- ## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/284747)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 4\ **Last updated:** [September 21, 2021, 3:59pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/284747 "2021-09-21T15:59:29Z")
we upgraded a cluster from 6.8.8 to 7.8.1. ever since this, we are having elastic nodes die with the below error. everything was working fine before the upgrade. i've googled and haven't found anything to really point… --- ## [Logstash - JDBC ERROR](https://discuss.elastic.co/t/logstash-jdbc-error/254160)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 12:07pm UTC](https://discuss.elastic.co/t/logstash-jdbc-error/254160 "2020-11-04T12:07:18Z")
Hello , Im using logstash in a linux server I have installed the latest update for logstash on my server And also jdbc installed Ever since the update im unable to run jdbc output I get an error in the log : 'Prefo… --- ## [Forward only ERROR or Warn log lines to Splunk](https://discuss.elastic.co/t/forward-only-error-or-warn-log-lines-to-splunk/232561)
**Author:** [@Shivhare](https://discuss.elastic.co/u/Shivhare)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 8:27am UTC](https://discuss.elastic.co/t/forward-only-error-or-warn-log-lines-to-splunk/232561 "2020-05-14T08:27:59Z")
Need your expert advise on how can I configure my logstash.conf file to forward only the ERROR OR WARN log lines to Splunk. I have done some online research that a grok filter or wrapping the output with if condition can… --- ## [Questions about the timezone](https://discuss.elastic.co/t/questions-about-the-timezone/80894)
**Author:** [@qin](https://discuss.elastic.co/u/qin)\ **Replies:** 4\ **Last updated:** [April 1, 2017, 2:27pm UTC](https://discuss.elastic.co/t/questions-about-the-timezone/80894 "2017-04-01T14:27:06Z")
I want to let logstash output to elasticsearch, My configuration is input { tcp { host =\> "0.0.0.0" port =\> 4560 mode =\> "server" codec =\> json\_lines } } output { s… --- ## [Generate multiple scripted fields for the whole index to filter and aggregate](https://discuss.elastic.co/t/generate-multiple-scripted-fields-for-the-whole-index-to-filter-and-aggregate/58795)
**Author:** [@dmitry\_polushkin](https://discuss.elastic.co/u/dmitry_polushkin)\ **Replies:** 4\ **Last updated:** [September 26, 2016, 12:16pm UTC](https://discuss.elastic.co/t/generate-multiple-scripted-fields-for-the-whole-index-to-filter-and-aggregate/58795 "2016-09-26T12:16:21Z")
I would like to generate multiple scripted fields for the whole index (per each document in the index), for post\_filter and aggregate (with filter) by those dynamic values. As I understand, at the moment the only solut… --- ## ['\_all' field for multi field data store occupying more space](https://discuss.elastic.co/t/-all-field-for-multi-field-data-store-occupying-more-space/39073)
**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\ **Replies:** 4\ **Last updated:** [January 13, 2016, 9:19pm UTC](https://discuss.elastic.co/t/-all-field-for-multi-field-data-store-occupying-more-space/39073 "2016-01-13T21:19:24Z")
Hello Team, I am using '\_all' field to query on multiple fields data and my mappings as shown... "mappings": { "ymme\_type": { "\_all": { "auto\_boost": true, "index\_a… --- ## [Bulk-add percolator queries](https://discuss.elastic.co/t/bulk-add-percolator-queries/2159)
**Author:** [@EricLandry](https://discuss.elastic.co/u/EricLandry)\ **Replies:** 4\ **Last updated:** [June 15, 2015, 5:10pm UTC](https://discuss.elastic.co/t/bulk-add-percolator-queries/2159 "2015-06-15T17:10:39Z")
I want to throw my many documents to a LOT of percolator queries (my query count is in the 6-digit). I've found how to multi-percolate many documents at once, but haven't found how to bulk-add many queries at once. Any… --- ## [Use my own data for Search UI example](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119)
**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\ **Replies:** 1\ **Last updated:** [July 4, 2020, 9:30pm UTC](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119 "2020-07-04T21:30:26Z")
I am currently working through the Search UI Guide on https://github.com/elastic/search-ui. By now, I have recreated the example site with the national parks. I understand now, how to modify the page for my needs. In a n… --- ## [Loading pySpark DataFrame into Elasticsearch - keep getting illegal argument error](https://discuss.elastic.co/t/loading-pyspark-dataframe-into-elasticsearch-keep-getting-illegal-argument-error/208348)
**Author:** [@dkajtoch](https://discuss.elastic.co/u/dkajtoch)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 6:04pm UTC](https://discuss.elastic.co/t/loading-pyspark-dataframe-into-elasticsearch-keep-getting-illegal-argument-error/208348 "2019-12-02T18:04:52Z")
I am trying to send data stored in pySpark Dataframe directly into Elasticsearch. I found some code snippets online on how to do this and basically it looks like this: # df - DataFrame df.write.format("org.elasticsearch… --- ## [What is Full stack monitoring in Elastic?](https://discuss.elastic.co/t/what-is-full-stack-monitoring-in-elastic/192845)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 9:44am UTC](https://discuss.elastic.co/t/what-is-full-stack-monitoring-in-elastic/192845 "2019-07-30T09:44:17Z")
I found that in Basic License version, in Alerting section, Full stack monitoring is enabled/open-sourced. I found NO supporting document which explains what kind of data/metrics is available for Full stack monitoring. … --- ## [Convert field string type to geo\_point type](https://discuss.elastic.co/t/convert-field-string-type-to-geo-point-type/65111)
**Author:** [@ChAkO](https://discuss.elastic.co/u/ChAkO)\ **Replies:** 1\ **Last updated:** [November 10, 2016, 6:03pm UTC](https://discuss.elastic.co/t/convert-field-string-type-to-geo-point-type/65111 "2016-11-10T18:03:27Z")
I need to convert a field string coordinates to geo\_point type to visualize in kibana correctly. I've tried to convert this field in the hive script, it's possible? CREATE EXTERNAL TABLE hive\_to\_es\_table ( id stri… --- ## [SOLVED Index pattern field (LogonType)](https://discuss.elastic.co/t/solved-index-pattern-field-logontype/60604)
**Author:** [@NFA](https://discuss.elastic.co/u/NFA)\ **Replies:** 1\ **Last updated:** [September 16, 2016, 7:48am UTC](https://discuss.elastic.co/t/solved-index-pattern-field-logontype/60604 "2016-09-16T07:48:47Z")
Hello I'm trying to import a premade visualization from https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat The thing is when i import this object i get the follow error: Saved Objects: Could no… --- ## [LS 2.3.0-1 can't valid the logstash configuration](https://discuss.elastic.co/t/ls-2-3-0-1-cant-valid-the-logstash-configuration/46350)
**Author:** [@woodkan](https://discuss.elastic.co/u/woodkan)\ **Replies:** 1\ **Last updated:** [April 5, 2016, 8:44am UTC](https://discuss.elastic.co/t/ls-2-3-0-1-cant-valid-the-logstash-configuration/46350 "2016-04-05T08:44:04Z")
I just upgraded LS to 2.3.0-1. Then logstash failed to valid LS configuration with below errors. \[root@tmp-os7 logstash\]# /opt/logstash/bin/logstash -f /etc/logstash/confw.d/ -t An unexpected error occurred! {:error… --- ## [Elasticsearch installation on windows](https://discuss.elastic.co/t/elasticsearch-installation-on-windows/27720)
**Author:** [@Arun\_Nair](https://discuss.elastic.co/u/Arun_Nair)\ **Replies:** 1\ **Last updated:** [August 21, 2015, 5:53pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-on-windows/27720 "2015-08-21T17:53:54Z")
I have installed Elastic search on a windows server using the instructions on https://www.ulyaoth.net/resources/tutorial-install-logstash-and-kibana-on-a-windows-server.34/ But when I navigate to 10.2.142.150:9200 , I … --- ## [ELK and mobile application analytics](https://discuss.elastic.co/t/elk-and-mobile-application-analytics/119317)
**Author:** [@Sachin\_Mishra](https://discuss.elastic.co/u/Sachin_Mishra)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 10:58pm UTC](https://discuss.elastic.co/t/elk-and-mobile-application-analytics/119317 "2018-02-09T22:58:49Z")
Hi All, Googled it and confused. As a back end developer it is huge time for me to decide which data storage can be best for my organisation's analytics related requirement. So here is the full story. "I want to do … --- ## [Kibana Aggregation between types](https://discuss.elastic.co/t/kibana-aggregation-between-types/108738)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 5\ **Last updated:** [November 23, 2017, 12:15pm UTC](https://discuss.elastic.co/t/kibana-aggregation-between-types/108738 "2017-11-23T12:15:33Z")
Hi everyone, I made another post earlier during the day, but didn't get any response. I've tried a lot of things during the day but i think understanding the issue is more important. My question is, if i have two type… --- ## [Logstash Ruby concat & event](https://discuss.elastic.co/t/logstash-ruby-concat-event/308816)
**Author:** [@jsauvebois](https://discuss.elastic.co/u/jsauvebois)\ **Replies:** 3\ **Last updated:** [August 1, 2022, 9:42am UTC](https://discuss.elastic.co/t/logstash-ruby-concat-event/308816 "2022-08-01T09:42:24Z")
Hi, In a first time, I tested how to add a field via ruby code based on existing field duration and event ... ruby { code =\> " if event.get('duration').nil? event.set('duration\_time','') else duration\_time = ev… --- ## [Logstash Ruby Filter Not Removing Fields](https://discuss.elastic.co/t/logstash-ruby-filter-not-removing-fields/225297)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 3\ **Last updated:** [March 28, 2020, 11:06am UTC](https://discuss.elastic.co/t/logstash-ruby-filter-not-removing-fields/225297 "2020-03-28T11:06:33Z")
Hello, I have logs that look like this { "attachments" : \[ { "field1" : "rkredux", "inner\_value" : \[ "check" \] }, { "field1" … --- ## [Automatic Documentation System](https://discuss.elastic.co/t/automatic-documentation-system/225101)
**Author:** [@ashikmeerankutty](https://discuss.elastic.co/u/ashikmeerankutty)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 1:40pm UTC](https://discuss.elastic.co/t/automatic-documentation-system/225101 "2020-03-26T13:40:02Z")
Hi, It seems like elastic uses propsTypes to generate docs using react-docgen and a custom babel script for typescript components to add propsTypes to nodes. Do the new system need to support jsx components or just sup… --- ## [Append to nested type object from multiple jdbc input stream using logstash aggregation](https://discuss.elastic.co/t/append-to-nested-type-object-from-multiple-jdbc-input-stream-using-logstash-aggregation/196056)
**Author:** [@sid1990](https://discuss.elastic.co/u/sid1990)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 12:28pm UTC](https://discuss.elastic.co/t/append-to-nested-type-object-from-multiple-jdbc-input-stream-using-logstash-aggregation/196056 "2019-08-22T12:28:30Z")
Hi, I'm trying to read from multiple jdbc inputs and aggregate the result which would be inserted into a field which is mapped to a nested type in elasticsearch. But the input stream is not executed sequentially. I did… --- ## [Watcher - include all errors in e-mail](https://discuss.elastic.co/t/watcher-include-all-errors-in-e-mail/117575)
**Author:** [@pp\_macrix](https://discuss.elastic.co/u/pp_macrix)\ **Replies:** 3\ **Last updated:** [January 30, 2018, 10:05am UTC](https://discuss.elastic.co/t/watcher-include-all-errors-in-e-mail/117575 "2018-01-30T10:05:36Z")
I've created a watch which shows me how many errors have been written in the log file (which is taken by logstash and then transferred to elasticSearch) for a specific range of time. For now in the email body I send th… --- ## [Es 6.x not support multi types in index, but elasticsearch-hadoop docs not update](https://discuss.elastic.co/t/es-6-x-not-support-multi-types-in-index-but-elasticsearch-hadoop-docs-not-update/116842)
**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\ **Replies:** 3\ **Last updated:** [January 25, 2018, 12:58am UTC](https://discuss.elastic.co/t/es-6-x-not-support-multi-types-in-index-but-elasticsearch-hadoop-docs-not-update/116842 "2018-01-25T00:58:46Z")
in this guide: https://www.elastic.co/guide/en/elasticsearch/hadoop/current/spark.html it recommend user to use es 6.x version which not support multi type, but still guide user to set multi-type in one index val game… --- ## [Why "Cardinality Aggregation - Date Histogram" lacks precision at particular date?](https://discuss.elastic.co/t/why-cardinality-aggregation-date-histogram-lacks-precision-at-particular-date/62818)
**Author:** [@dynamicscope](https://discuss.elastic.co/u/dynamicscope)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 8:17am UTC](https://discuss.elastic.co/t/why-cardinality-aggregation-date-histogram-lacks-precision-at-particular-date/62818 "2017-03-31T08:17:30Z")
I am using "Cardinality Aggregation" on "Date Histogram". And I found one weird result. I already know that "Counts are approximate", so the precision is not 100% accurate. But when I draw the "Date Histogram" only o… --- ## [Solved by google](https://discuss.elastic.co/t/solved-by-google/53235)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 3\ **Last updated:** [June 20, 2016, 6:51am UTC](https://discuss.elastic.co/t/solved-by-google/53235 "2016-06-20T06:51:42Z")
\[SOLVED\]solved by google --- ## [Watcher Email Configuration error](https://discuss.elastic.co/t/watcher-email-configuration-error/33127)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 8:08am UTC](https://discuss.elastic.co/t/watcher-email-configuration-error/33127 "2015-10-28T08:08:09Z")
Hi, I have configured watcher to Elasticsearch to get Alert & Notifications and I have setup Email configuration in yml file as shown below. watcher.actions.email.service.account: work: profile: gmail smtp: auth: tru… --- ## [Elasticsearch Bulk Write is slow using Scan and Scroll](https://discuss.elastic.co/t/elasticsearch-bulk-write-is-slow-using-scan-and-scroll/32139)
**Author:** [@AmitPandita](https://discuss.elastic.co/u/AmitPandita)\ **Replies:** 3\ **Last updated:** [October 15, 2015, 5:50am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-write-is-slow-using-scan-and-scroll/32139 "2015-10-15T05:50:42Z")
Hi Group, I am currently running into an issue on which i am really stuck. I am trying to work on a problem where I have to output the Elasticsearch documents and write them to csv. The docs range from 50,000 to 5 mil… --- ## [Iterate over the whole response without size 'predefined' using JAVA API](https://discuss.elastic.co/t/iterate-over-the-whole-response-without-size-predefined-using-java-api/25867)
**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\ **Replies:** 3\ **Last updated:** [July 21, 2015, 8:26am UTC](https://discuss.elastic.co/t/iterate-over-the-whole-response-without-size-predefined-using-java-api/25867 "2015-07-21T08:26:34Z")
Hi, How to make my search response to give all the documents matched to the relevant query without using any setSize(10) with predefined value. How can I achieve this???? Right now am using : response = client.prepa… --- ## [Explaining the execution plan](https://discuss.elastic.co/t/explaining-the-execution-plan/5208)
**Author:** [@mfeingold](https://discuss.elastic.co/u/mfeingold)\ **Replies:** 3\ **Last updated:** [August 29, 2011, 5:33pm UTC](https://discuss.elastic.co/t/explaining-the-execution-plan/5208 "2011-08-29T17:33:37Z")
Is there a way to understand how the query will be executed - something similar to the explain feature in SQL? As explained in the manual explain flag on the query only covers the score computation --- ## [Indicator Match Rule Failing from Rule Name](https://discuss.elastic.co/t/indicator-match-rule-failing-from-rule-name/309232)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 6\ **Last updated:** [July 13, 2022, 10:43pm UTC](https://discuss.elastic.co/t/indicator-match-rule-failing-from-rule-name/309232 "2022-07-13T22:43:54Z")
Hi, I created an indicator match rule using intel from the Recorded Future integration package v1.0.1. The match rule appears to be failing from the rule name itself. Here is the error output: Rule failure at Jul 8, 2… --- ## [Clarification on licensing](https://discuss.elastic.co/t/clarification-on-licensing/144342)
**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Replies:** 6\ **Last updated:** [August 17, 2018, 4:02am UTC](https://discuss.elastic.co/t/clarification-on-licensing/144342 "2018-08-17T04:02:13Z")
Hello All, I need couple of clarifications based on scenario's, need your input. Apology if this is a redundant question. scenario 1 3 nodes - master, data, ingest 2 nodes - co-coordinating nodes scenario 2 Data ce… --- ## [Low performance](https://discuss.elastic.co/t/low-performance/139574)
**Author:** [@shanmukha1499](https://discuss.elastic.co/u/shanmukha1499)\ **Replies:** 6\ **Last updated:** [July 12, 2018, 11:14am UTC](https://discuss.elastic.co/t/low-performance/139574 "2018-07-12T11:14:36Z")
Hi I have elastic cluster of 2 nodes with same hardware specifications hardware specs of each machine: RAM:16G No.of Cpu's : 2 node1- master+data node2- master+data discovery.zen.minimum\_master\_nodes: 1 Here are … --- ## [Error retrieving database names from Mongo instance: command listDatabases requires authentication](https://discuss.elastic.co/t/error-retrieving-database-names-from-mongo-instance-command-listdatabases-requires-authentication/290779)
**Author:** [@Abhishek\_Sarkate](https://discuss.elastic.co/u/Abhishek_Sarkate)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:23pm UTC](https://discuss.elastic.co/t/error-retrieving-database-names-from-mongo-instance-command-listdatabases-requires-authentication/290779 "2021-12-10T18:23:16Z")
I am trying to integrate elastic-agent in MongoDB replica-set and show mongo metrics on kibana , while trying with below code on mongo.conf security: authorization: enabled keyFile: /etc/keyfile MongoDb version u… --- ## [Logstash - Aggregate Sylsog events based on multiple Fields](https://discuss.elastic.co/t/logstash-aggregate-sylsog-events-based-on-multiple-fields/165080)
**Author:** [@jorj](https://discuss.elastic.co/u/jorj)\ **Replies:** 1\ **Last updated:** [January 21, 2019, 6:37pm UTC](https://discuss.elastic.co/t/logstash-aggregate-sylsog-events-based-on-multiple-fields/165080 "2019-01-21T18:37:48Z")
Hello I am receiving Syslog event from a CGNAT device, that i am able to parse properly. My issue is I am facing a large number of logs, as for each difference Source Port (irrelevant Field for me), i i am receiving a … --- ## [\-(subtraction) of long integer thronging exception in scripted fields in kibana 6.1.2](https://discuss.elastic.co/t/subtraction-of-long-integer-thronging-exception-in-scripted-fields-in-kibana-6-1-2/118600)
**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\ **Replies:** 1\ **Last updated:** [February 7, 2018, 6:07pm UTC](https://discuss.elastic.co/t/subtraction-of-long-integer-thronging-exception-in-scripted-fields-in-kibana-6-1-2/118600 "2018-02-07T18:07:46Z")
Hi All, I am getting an exception as below. Please help me out. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"script\_exception","reason":"runtime error","script\_stack":\["return (doc\['issues… --- ## [Elasticsearch Curator - deleting indices by priorities (with python api)](https://discuss.elastic.co/t/elasticsearch-curator-deleting-indices-by-priorities-with-python-api/107895)
**Author:** [@anyat](https://discuss.elastic.co/u/anyat)\ **Replies:** 1\ **Last updated:** [November 16, 2017, 2:06pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-deleting-indices-by-priorities-with-python-api/107895 "2017-11-16T14:06:32Z")
Hi! I have the following scenario that I want to handle with curator python api: I want to delete indices when my cluster storage reaches a fixed water mark (for example - 1TB). But, I want to delete indices by a cert… --- ## [X-Pack e course trial ended](https://discuss.elastic.co/t/x-pack-e-course-trial-ended/101664)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 2:31pm UTC](https://discuss.elastic.co/t/x-pack-e-course-trial-ended/101664 "2017-09-25T14:31:25Z")
Hi, I was using X- Pack e course which was offered free for 90 days. I had completed 50% of the course and i didnt notice the completion of 90 days. How to seek extension for few more days. --- ## [Multiple major versions from one Python script?](https://discuss.elastic.co/t/multiple-major-versions-from-one-python-script/42657)
**Author:** [@Jay\_Swan](https://discuss.elastic.co/u/Jay_Swan)\ **Replies:** 1\ **Last updated:** [June 22, 2016, 1:06pm UTC](https://discuss.elastic.co/t/multiple-major-versions-from-one-python-script/42657 "2016-06-22T13:06:13Z")
The official Python clients require different versions for different Elasticsearch major versions. Is there a way to talk to clusters running different major Elasticsearch versions from the same Python script? --- ## [Failed to query elasticsearch for previous even](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-even/46822)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [April 9, 2016, 7:17am UTC](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-even/46822 "2016-04-09T07:17:24Z")
Hi, I'm using logstash 2.3.0, we are using elastisearch correlation in my config file. While processing facing issue on correlation and its throwing below error, , :level=\>:warn} Failed to query elasticsearch for previou… [Previous page](https://discuss.elastic.co/top.md?page=1450&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1452&per_page=50&period=all)