# Top **URL:** https://discuss.elastic.co/top.md?page=1454&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1455 --- ## [Elasticsearch init script for centos 7](https://discuss.elastic.co/t/elasticsearch-init-script-for-centos-7/137913)
**Author:** [@Tafsir\_Alam](https://discuss.elastic.co/u/Tafsir_Alam)\ **Replies:** 3\ **Last updated:** [June 29, 2018, 11:14pm UTC](https://discuss.elastic.co/t/elasticsearch-init-script-for-centos-7/137913 "2018-06-29T23:14:31Z")
Hi, Can someone please point me to an /etc/init.d script for Elasticsearch 5.6.4 for CentOS 7 Thanks --- ## [Using two kafka in the ELK setup(Load balancing)](https://discuss.elastic.co/t/using-two-kafka-in-the-elk-setup-load-balancing/101646)
**Author:** [@Jay\_Dabhi](https://discuss.elastic.co/u/Jay_Dabhi)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 6:37am UTC](https://discuss.elastic.co/t/using-two-kafka-in-the-elk-setup-load-balancing/101646 "2017-09-26T06:37:40Z")
Hi, I am designing the ELK setup.I want the two kafka setup for the load balancing. My setup will be look like below: filebeat-\>kafka(2 servers)-\>logstash(3 servers)-\>ES-\>Kibana I want to kafka server so that the log… --- ## [How to inject node object in elasticsearch 5.1.1 native script plugin](https://discuss.elastic.co/t/how-to-inject-node-object-in-elasticsearch-5-1-1-native-script-plugin/99393)
**Author:** [@Chandan\_Kar](https://discuss.elastic.co/u/Chandan_Kar)\ **Replies:** 3\ **Last updated:** [September 18, 2017, 7:43pm UTC](https://discuss.elastic.co/t/how-to-inject-node-object-in-elasticsearch-5-1-1-native-script-plugin/99393 "2017-09-18T19:43:08Z")
i am trying to create a elasticsearch native script plugin. The plugin should be able to execute some search query, something like “GetResponse response = client.prepareGet(lookupIndex, lookupType, fieldValue).setFields(… --- ## [ElasticSearch Mapping Issue for String fields](https://discuss.elastic.co/t/elasticsearch-mapping-issue-for-string-fields/29548)
**Author:** [@vsingh2020](https://discuss.elastic.co/u/vsingh2020)\ **Replies:** 3\ **Last updated:** [September 19, 2015, 5:56pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-issue-for-string-fields/29548 "2015-09-19T17:56:13Z")
Hi All, We have a requirement where in we have to insert data to elasticSearch from the Source file. We are using Java API to connect to ElasticSearch and then using JAVA API methods to perform action in ElasticSearch.… --- ## [How to discard entire lines of input](https://discuss.elastic.co/t/how-to-discard-entire-lines-of-input/2139)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 3\ **Last updated:** [June 8, 2015, 7:30pm UTC](https://discuss.elastic.co/t/how-to-discard-entire-lines-of-input/2139 "2015-06-08T19:30:58Z")
I have input coming from eight Apache webservers. Included in these logs are a fair bit of inter-cluster traffic. I'd like to not include this in my results, as they aren't users, just the servers running a health chec… --- ## [MySQL JDBC river: indexing large arrays](https://discuss.elastic.co/t/mysql-jdbc-river-indexing-large-arrays/21683)
**Author:** [@Stalinko](https://discuss.elastic.co/u/Stalinko)\ **Replies:** 8\ **Last updated:** [January 16, 2015, 4:04pm UTC](https://discuss.elastic.co/t/mysql-jdbc-river-indexing-large-arrays/21683 "2015-01-16T16:04:53Z")
I'm trying to index my movie DB into ES using MySQL JDBC river. The problem is: there are 3 tables: movies - has many columns persons - names of the people who participated in some movie tags - movie tags … --- ## [20 shards per 5 nodes, thoughts](https://discuss.elastic.co/t/20-shards-per-5-nodes-thoughts/20777)
**Author:** [@Pavel\_P](https://discuss.elastic.co/u/Pavel_P)\ **Replies:** 8\ **Last updated:** [November 19, 2014, 10:35am UTC](https://discuss.elastic.co/t/20-shards-per-5-nodes-thoughts/20777 "2014-11-19T10:35:30Z")
Hi, I have a cluster from 5 nodes, where I store the information from the logstash. Recently I've tried to increase the number of shards in the logstash index to 20 (from 5). From the beginning everything went… --- ## [Org.elasticsearch.indices.IndexMissingException: \[\_river\] missing](https://discuss.elastic.co/t/org-elasticsearch-indices-indexmissingexception--river-missing/13827)
**Author:** [@vozerov](https://discuss.elastic.co/u/vozerov)\ **Replies:** 3\ **Last updated:** [October 24, 2013, 3:13pm UTC](https://discuss.elastic.co/t/org-elasticsearch-indices-indexmissingexception--river-missing/13827 "2013-10-24T15:13:35Z")
Good day! I have a problem... or misconfiguration :) I have installed https://github.com/sksamuel/elasticsearch-river-redis plugin and add configuration to it: curl -XPUT 'http://localhost:9200/\_river/redisriv… --- ## [ES 6.3 - bound or publishing to a non-loopback address, enforcing bootstrap checks](https://discuss.elastic.co/t/es-6-3-bound-or-publishing-to-a-non-loopback-address-enforcing-bootstrap-checks/136614)
**Author:** [@Phillip\_Tribble](https://discuss.elastic.co/u/Phillip_Tribble)\ **Replies:** 0\ **Last updated:** [June 20, 2018, 6:29am UTC](https://discuss.elastic.co/t/es-6-3-bound-or-publishing-to-a-non-loopback-address-enforcing-bootstrap-checks/136614 "2018-06-20T06:29:22Z")
Hello, I am struggling for hours trying to get a new ES 6.3 cluster setup in Docker. The error is as below: \] \[rpi-1\] bound or publishing to a non-loopback address, enforcing bootstrap checks ERROR: \[1\] bootstrap checks… --- ## [Filebeat locking files (Access Denied)](https://discuss.elastic.co/t/filebeat-locking-files-access-denied/97900)
**Author:** [@Claus\_Nielsen](https://discuss.elastic.co/u/Claus_Nielsen)\ **Replies:** 0\ **Last updated:** [August 22, 2017, 11:45am UTC](https://discuss.elastic.co/t/filebeat-locking-files-access-denied/97900 "2017-08-22T11:45:58Z")
We are currently using filebeat 5.4.1 in our build environment The logs we are collecting are getting generated by the build software then removed after a build finishes. We are currently seeing a lot of access denied wh… --- ## [Cloudformation for elasticsearch cluster on aws](https://discuss.elastic.co/t/cloudformation-for-elasticsearch-cluster-on-aws/61314)
**Author:** [@santsaha](https://discuss.elastic.co/u/santsaha)\ **Replies:** 0\ **Last updated:** [September 22, 2016, 9:51pm UTC](https://discuss.elastic.co/t/cloudformation-for-elasticsearch-cluster-on-aws/61314 "2016-09-22T21:51:45Z")
I want to have an elasticsearch cluster deployed on AWS. I want to use Cloudformation to create the infra as well as install elasticsearch on those ec2 instances. I don't want to use Ansible and am thinking of leverag… --- ## [Database connection](https://discuss.elastic.co/t/database-connection/329309)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 5\ **Last updated:** [April 5, 2023, 2:33pm UTC](https://discuss.elastic.co/t/database-connection/329309 "2023-04-05T14:33:23Z")
Good morning, I have a database with differents instances but in the service map it shows according to the server, that is the same. Is it possible define something to the connections according to server+instance? I th… --- ## [Is there any way to monitor elastic search application?](https://discuss.elastic.co/t/is-there-any-way-to-monitor-elastic-search-application/280652)
**Author:** [@Rajdeep\_Sahoo](https://discuss.elastic.co/u/Rajdeep_Sahoo)\ **Replies:** 5\ **Last updated:** [August 10, 2021, 4:43pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-monitor-elastic-search-application/280652 "2021-08-10T16:43:25Z")
I am trying to monitor elastic search application and I have found the below ways, and none of them is working for me , please suggest if there is any way to monitor. As part of elastic search application monitoring I wa… --- ## [APM Sourcemap relative path?](https://discuss.elastic.co/t/apm-sourcemap-relative-path/233765)
**Author:** [@mgrip](https://discuss.elastic.co/u/mgrip)\ **Replies:** 5\ **Last updated:** [May 28, 2020, 7:40am UTC](https://discuss.elastic.co/t/apm-sourcemap-relative-path/233765 "2020-05-28T07:40:43Z")
From the docs, it seems like the only way a RUM source map can be applied is by matching the full absolute path https://www.elastic.co/guide/en/apm/server/master/sourcemap-api.html#sourcemap-apply Compare the stack tra… --- ## [Im using Logstash 5.6 restarting continuously](https://discuss.elastic.co/t/im-using-logstash-5-6-restarting-continuously/164960)
**Author:** [@Suraj\_Lal\_Gopinadhan](https://discuss.elastic.co/u/Suraj_Lal_Gopinadhan)\ **Replies:** 5\ **Last updated:** [January 21, 2019, 6:36pm UTC](https://discuss.elastic.co/t/im-using-logstash-5-6-restarting-continuously/164960 "2019-01-21T18:36:49Z")
Im using Logstash 5.6 and it is continuously restarting the process after every 12 sec, while starting with "systemctl start logstash". if im starting "bin/logstash --path.settings /etc/logstash" it is working properly. … --- ## [502 Bad Gateway Ingress nginx with kibana](https://discuss.elastic.co/t/502-bad-gateway-ingress-nginx-with-kibana/327175)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 1\ **Last updated:** [March 7, 2023, 12:13pm UTC](https://discuss.elastic.co/t/502-bad-gateway-ingress-nginx-with-kibana/327175 "2023-03-07T12:13:56Z")
I deployed kibana on a kubernetes cluster the port-forward locally works, I can surf on kibana but when set my ingress configuration, it comes back with a 502 Bad Gateway. Please help! This is my ingress configuration: … --- ## [Filebeat is putting whole JSON object into one field](https://discuss.elastic.co/t/filebeat-is-putting-whole-json-object-into-one-field/225815)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 8:26am UTC](https://discuss.elastic.co/t/filebeat-is-putting-whole-json-object-into-one-field/225815 "2020-03-31T08:26:17Z")
Hello, I am using filebeat to route log data from my machine to Elasticsearch. The log-files contain multiple lines with every line being one JSON object literal. I want each line to become an event with as many field… --- ## [Capture a substring from a windows path](https://discuss.elastic.co/t/capture-a-substring-from-a-windows-path/218533)
**Author:** [@Radha\_Krishna](https://discuss.elastic.co/u/Radha_Krishna)\ **Replies:** 7\ **Last updated:** [February 14, 2020, 8:36am UTC](https://discuss.elastic.co/t/capture-a-substring-from-a-windows-path/218533 "2020-02-14T08:36:01Z")
I need to capture services.exe from the path C:\\Windows\\System32\\services.exe, but for every event the path changes dynamically. What would be a generic way to capture whatever is there after the last \\. Thanks in advan… --- ## [Is it necessary to use putMapping() each time index() is called for a different type?](https://discuss.elastic.co/t/is-it-necessary-to-use-putmapping-each-time-index-is-called-for-a-different-type/95026)
**Author:** [@full\_vlad](https://discuss.elastic.co/u/full_vlad)\ **Replies:** 1\ **Last updated:** [July 29, 2017, 1:10am UTC](https://discuss.elastic.co/t/is-it-necessary-to-use-putmapping-each-time-index-is-called-for-a-different-type/95026 "2017-07-29T01:10:58Z")
I am using the elasticsearch 5.2 node.js module. I know that elasticsearch.index() creates the index if it's not already created. The problem, though, is that I am using a special mapping on one of the fields. For exam… --- ## [How can I get Spans' position data from a Near Span Query](https://discuss.elastic.co/t/how-can-i-get-spans-position-data-from-a-near-span-query/72228)
**Author:** [@hananlevy](https://discuss.elastic.co/u/hananlevy)\ **Replies:** 1\ **Last updated:** [January 25, 2017, 5:46pm UTC](https://discuss.elastic.co/t/how-can-i-get-spans-position-data-from-a-near-span-query/72228 "2017-01-25T17:46:16Z")
I'm running a SpanNear Query against a non-stored text field in ElasticSearch. Is there a way of getting the Span's "Position Info" data? There's a way through accessing the "getSpans" method in Lucene, and Lucene .Net. … --- ## [ERROR for Loss of Primary Shards](https://discuss.elastic.co/t/error-for-loss-of-primary-shards/63142)
**Author:** [@morning](https://discuss.elastic.co/u/morning)\ **Replies:** 7\ **Last updated:** [October 17, 2016, 5:53am UTC](https://discuss.elastic.co/t/error-for-loss-of-primary-shards/63142 "2016-10-17T05:53:08Z")
Carelessly make several primary shards lost and now the elasticsearch state is below: it takes about 2 days that hundreds of shards in initializing how to make health green version is 1.3.1 --- ## [Java fatal error with elasticsearch and kibana](https://discuss.elastic.co/t/java-fatal-error-with-elasticsearch-and-kibana/48721)
**Author:** [@Zach\_Lewis](https://discuss.elastic.co/u/Zach_Lewis)\ **Replies:** 1\ **Last updated:** [May 2, 2016, 7:07am UTC](https://discuss.elastic.co/t/java-fatal-error-with-elasticsearch-and-kibana/48721 "2016-05-02T07:07:20Z")
I'm setting up the elk for the first time so it hasnt worked yet. I start up elasticsearch with no issues but when kibana starts up it crashes java at the same point every time. It looks like it is once the kibana index … --- ## [Get the warning received shard failed for certain replicas](https://discuss.elastic.co/t/get-the-warning-received-shard-failed-for-certain-replicas/1245)
**Author:** [@Jacobus\_van\_heerden](https://discuss.elastic.co/u/Jacobus_van_heerden)\ **Replies:** 1\ **Last updated:** [May 26, 2015, 12:58am UTC](https://discuss.elastic.co/t/get-the-warning-received-shard-failed-for-certain-replicas/1245 "2015-05-26T00:58:51Z")
Good Day I hope someone can possible help me. I have a 5 node ES cluster. The app writes data to our index. When there are no replicas on the index all is fine. As soon as i add replicas I get the following: Not sure w… --- ## [Facets with all\_terms return deleted terms](https://discuss.elastic.co/t/facets-with-all-terms-return-deleted-terms/11245)
**Author:** [@the\_mouette](https://discuss.elastic.co/u/the_mouette)\ **Replies:** 7\ **Last updated:** [March 22, 2013, 4:16pm UTC](https://discuss.elastic.co/t/facets-with-all-terms-return-deleted-terms/11245 "2013-03-22T16:16:36Z")
Hi, I'm building a search/filter interface based on \*elasticsearch 0.20.X\*. I've got books with following schema : - title - author - publisher I sometimes need to remove all \*books\* of given \*publ… --- ## [How to config filebeat to collect containerd logs file in K8S?](https://discuss.elastic.co/t/how-to-config-filebeat-to-collect-containerd-logs-file-in-k8s/259237)
**Author:** [@hillbun](https://discuss.elastic.co/u/hillbun)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 9:53am UTC](https://discuss.elastic.co/t/how-to-config-filebeat-to-collect-containerd-logs-file-in-k8s/259237 "2020-12-21T09:53:36Z")
apiVersion: v1 kind: ConfigMap metadata: name: filebeat-inputs namespace: kube-system labels: k8s-app: filebeat data: kubernetes.yml: |- - type: container symlinks: true paths: - '/var/log/containers/\*.log' … --- ## [Search Issue with Long Text keyword](https://discuss.elastic.co/t/search-issue-with-long-text-keyword/266513)
**Author:** [@sdubey472](https://discuss.elastic.co/u/sdubey472)\ **Replies:** 6\ **Last updated:** [March 15, 2021, 9:30am UTC](https://discuss.elastic.co/t/search-issue-with-long-text-keyword/266513 "2021-03-15T09:30:34Z")
I'm facing the issue with elastic Search, Actually I've search query given bellow and By using this search query I'm facing the issue with long text, whenever I type long text to search then search isn't giving proper r… --- ## [How To use date Field in RAW data to used as @timestamp in Grok pattern](https://discuss.elastic.co/t/how-to-use-date-field-in-raw-data-to-used-as-timestamp-in-grok-pattern/174950)
**Author:** [@Nabil\_Mohamed](https://discuss.elastic.co/u/Nabil_Mohamed)\ **Replies:** 6\ **Last updated:** [April 3, 2019, 7:11pm UTC](https://discuss.elastic.co/t/how-to-use-date-field-in-raw-data-to-used-as-timestamp-in-grok-pattern/174950 "2019-04-03T19:11:59Z")
Hi all , i need to use the date field in my Raw Data to used as the @timestamp in my index: RAW record data in the Filebeat --\> 20190402-000037,8120791274.50,7174800715.40,4.18,/run 11.00% / 77.00% /data 55.00% /boot … --- ## [Kibana shows incorrect syslog\_timestamp version 6.5.4](https://discuss.elastic.co/t/kibana-shows-incorrect-syslog-timestamp-version-6-5-4/171966)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 6\ **Last updated:** [March 12, 2019, 5:34pm UTC](https://discuss.elastic.co/t/kibana-shows-incorrect-syslog-timestamp-version-6-5-4/171966 "2019-03-12T17:34:17Z")
I have Below logstash.conf file, i see the data is processing correctly but today i see very weird issues where indices for apic\_logs are not showing the correct syslog\_timestamp . input { file { path =\> \[ "/scrat… --- ## [The performance of facets](https://discuss.elastic.co/t/the-performance-of-facets/12658)
**Author:** [@lijionly](https://discuss.elastic.co/u/lijionly)\ **Replies:** 6\ **Last updated:** [July 5, 2013, 4:25am UTC](https://discuss.elastic.co/t/the-performance-of-facets/12658 "2013-07-05T04:25:24Z")
Hi, We plan to do statistical aggregations, and ES has the facets function, but what's the performance of facets under big load? Our target is to count the access times of different application from the app log in … --- ## [Match array of terms in filtered query](https://discuss.elastic.co/t/match-array-of-terms-in-filtered-query/3250)
**Author:** [@Richard\_Livsey](https://discuss.elastic.co/u/Richard_Livsey)\ **Replies:** 6\ **Last updated:** [August 24, 2010, 6:17pm UTC](https://discuss.elastic.co/t/match-array-of-terms-in-filtered-query/3250 "2010-08-24T18:17:44Z")
Each user in our app can see a subset of the documents based on a number of conditions (permissions etc...) and I'm wondering what the best approach to building a restricted query would be. Andrei asked a similar qu… --- ## [Control visualization is not working as expected](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 1:14pm UTC](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602 "2021-03-19T13:14:07Z")
Hello everybody, I am comparing the same control visualisation for two different timespans. No other filter is being applied. With control visualisation, I mean this visualisation type: At first, I choose a timespa… --- ## [Grouping GPS points into custom GeoJSON sections](https://discuss.elastic.co/t/grouping-gps-points-into-custom-geojson-sections/251478)
**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 4:41pm UTC](https://discuss.elastic.co/t/grouping-gps-points-into-custom-geojson-sections/251478 "2020-10-13T16:41:01Z")
Hello all! Wondering if someone can shed some light on whether I'm trying to do the impossible in Kibana :slight\_smile: I'll use example images for the purposes of this post. The following image shows a number of geog… --- ## [How to disable pie filter for some metric](https://discuss.elastic.co/t/how-to-disable-pie-filter-for-some-metric/157912)
**Author:** [@Cyber\_Bobak](https://discuss.elastic.co/u/Cyber_Bobak)\ **Replies:** 4\ **Last updated:** [November 23, 2018, 1:46pm UTC](https://discuss.elastic.co/t/how-to-disable-pie-filter-for-some-metric/157912 "2018-11-23T13:46:10Z")
Hello, I've in dashboard 2 metrics, every has different index source & pie which is using the second index.The pie is filtering on field 'severity' which exist only in second index. Issue is that when I click on the pie… --- ## [Переход на новую модель](https://discuss.elastic.co/t/topic/87920)
**Author:** [@Lid](https://discuss.elastic.co/u/Lid)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 11:31pm UTC](https://discuss.elastic.co/t/topic/87920 "2017-06-07T23:31:52Z")
Нам необходимо обновить модель данных для ускорения поиска. Рассматриваем 2 варианта: 1) залить новую модель, что бы новые данные индексировались по-новому, а старые оставить как есть 2) возможность переиндексировать с… --- ## [Error while sending mongodb.status on mac os 10.11 using metricbeat 5.0](https://discuss.elastic.co/t/error-while-sending-mongodb-status-on-mac-os-10-11-using-metricbeat-5-0/65713)
**Author:** [@Zhomart](https://discuss.elastic.co/u/Zhomart)\ **Replies:** 4\ **Last updated:** [November 14, 2016, 3:14pm UTC](https://discuss.elastic.co/t/error-while-sending-mongodb-status-on-mac-os-10-11-using-metricbeat-5-0/65713 "2016-11-14T15:14:30Z")
I followed https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-mongodb.html doc, still getting error. What could be the problem? Configuration and output is here --- ## [Using ElasticSearch on Host](https://discuss.elastic.co/t/using-elasticsearch-on-host/53982)
**Author:** [@Mostafa\_Zeinivand](https://discuss.elastic.co/u/Mostafa_Zeinivand)\ **Replies:** 4\ **Last updated:** [June 27, 2016, 9:52am UTC](https://discuss.elastic.co/t/using-elasticsearch-on-host/53982 "2016-06-27T09:52:32Z")
hi i'm newbie in elasticsearch. i have a stupid question can i use elasticsearch in cpanel? i can work with elasticsearch in localhost but i want to know if i upload my site to a cpanel host, how i can use elastic … --- ## [Java version update in running ES cluster](https://discuss.elastic.co/t/java-version-update-in-running-es-cluster/48286)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 4\ **Last updated:** [May 6, 2016, 5:09am UTC](https://discuss.elastic.co/t/java-version-update-in-running-es-cluster/48286 "2016-05-06T05:09:10Z")
Hi, I have 3 nodes running in ES cluster in production. There is little difference in jre version on those 3 machines. Now if I want to change version on master node then what is better way to change it with minimum data… --- ## [Enable Cross Cluster Search vs Monitoring](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 11:16am UTC](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749 "2023-02-06T11:16:24Z")
Just installed a ES cluster 8.6.1 and a Kibana 8.6.1, trying to enable cluster monitoring, but attempting to access monitoring app from kibana, it just tells me that my cluster has monitoring.ui.ccs.enabled=true. Dunno h… --- ## [How to display 0 count field values in Elastic DSL Query](https://discuss.elastic.co/t/how-to-display-0-count-field-values-in-elastic-dsl-query/275137)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 8:43am UTC](https://discuss.elastic.co/t/how-to-display-0-count-field-values-in-elastic-dsl-query/275137 "2021-06-30T08:43:32Z")
All, I am trying to find out a way to display input field values in Elastic watcher which are having 0 count records. For example my input fields and values are hostname=sample.com and source=/tmp/sample/log I am usin… --- ## [Vincular sinônimos dentro do contexto de um filter](https://discuss.elastic.co/t/vincular-sinonimos-dentro-do-contexto-de-um-filter/196397)
**Author:** [@lucianocarvalho](https://discuss.elastic.co/u/lucianocarvalho)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 2:59am UTC](https://discuss.elastic.co/t/vincular-sinonimos-dentro-do-contexto-de-um-filter/196397 "2020-08-10T02:59:44Z")
Eu consigo organizar melhor os sinônimos dentro de um contexto do filter? Imagine que tenho uma lista de sinônimos diferentes para blog e para loja, mas ambos estão no mesmo índice. Ex: Vincular apenas a lista de sinô… --- ## [Handling events after using split](https://discuss.elastic.co/t/handling-events-after-using-split/235929)
**Author:** [@pasno](https://discuss.elastic.co/u/pasno)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 1:16pm UTC](https://discuss.elastic.co/t/handling-events-after-using-split/235929 "2020-06-08T13:16:33Z")
Hi, I'm trying to figure out how to use the split-filter in Logstash correctly. I've read forum-posts and the doc, but don't get to the bottom of this. I'm using the Azure Eventhub plugin to ingest stream of logs. The … --- ## [Java security error after upgrading to 7.0](https://discuss.elastic.co/t/java-security-error-after-upgrading-to-7-0/183325)
**Author:** [@perezjasonr](https://discuss.elastic.co/u/perezjasonr)\ **Replies:** 2\ **Last updated:** [May 31, 2019, 2:31pm UTC](https://discuss.elastic.co/t/java-security-error-after-upgrading-to-7-0/183325 "2019-05-31T14:31:36Z")
Hello, I upgraded from 6.6 to latest 7.x everything was working fine before this but now I get a java security error: Blockquote ion: /etc/elasticsearch/certs/elastic-stack-ca.p12 May 29 11:39:09 598717Ubuntu1 elast… --- ## [=\> Timelion: Error: in cell #1: Elasticsearch index not found: metricbeat-\*](https://discuss.elastic.co/t/timelion-error-in-cell-1-elasticsearch-index-not-found-metricbeat/131697)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 3:07pm UTC](https://discuss.elastic.co/t/timelion-error-in-cell-1-elasticsearch-index-not-found-metricbeat/131697 "2018-05-14T15:07:35Z")
Hi, I wanted to use Timelion but I have this error : Timelion: Error: in cell #1: Elasticsearch index not found: metricbeat-\* How could I resolve it ? I install metricbeat et did this : metricbeat setup --template -… --- ## [Template Post Fail](https://discuss.elastic.co/t/template-post-fail/120275)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [February 18, 2018, 10:57pm UTC](https://discuss.elastic.co/t/template-post-fail/120275 "2018-02-18T22:57:24Z")
Trying to create custom template. Pulled the dynamic template created, made modifications and then used Kibana's dev tool to PUT it into Elasticsearch. Tested the template and saw an error with my config. but now I can… --- ## [Kibana did not load properly / Short URL](https://discuss.elastic.co/t/kibana-did-not-load-properly-short-url/114766)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 12:42am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-short-url/114766 "2018-01-10T00:42:44Z")
I'm using Kibana 6.1.1 and while I'm in Discover, I click Share -\> Short URL & Copy and whenever I tried to open same link on another browser I get following message: Kibana did not load properly. Check the server outp… --- ## [Can Packetbeat capture DHCP packets?](https://discuss.elastic.co/t/can-packetbeat-capture-dhcp-packets/73571)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 2\ **Last updated:** [February 1, 2017, 7:20pm UTC](https://discuss.elastic.co/t/can-packetbeat-capture-dhcp-packets/73571 "2017-02-01T19:20:57Z")
I am curious if a Packetbeat install on a Windows DHCP server could see and capture the DHCP traffic? --- ## [Highlighting Offset Issue with Vietnamese](https://discuss.elastic.co/t/highlighting-offset-issue-with-vietnamese/50421)
**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\ **Replies:** 2\ **Last updated:** [May 24, 2016, 12:27pm UTC](https://discuss.elastic.co/t/highlighting-offset-issue-with-vietnamese/50421 "2016-05-24T12:27:12Z")
We are using ElasticSearch 2.2.0 with the compatible Vietnamese Plugin. When I run the following query: { "query": { "bool": { "should": { "multi\_match": { "query": "chữ", "field… --- ## [Filebeat: Configuring Bind Port](https://discuss.elastic.co/t/filebeat-configuring-bind-port/42484)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [February 23, 2016, 11:44am UTC](https://discuss.elastic.co/t/filebeat-configuring-bind-port/42484 "2016-02-23T11:44:17Z")
Hi, Is it possible to configure filebeat so that it binds to a port other than 5044? Regards, David --- ## [Problems to deploy metricbeat in a ECK environment running on Minikube](https://discuss.elastic.co/t/problems-to-deploy-metricbeat-in-a-eck-environment-running-on-minikube/320816)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 1\ **Last updated:** [December 12, 2022, 9:32am UTC](https://discuss.elastic.co/t/problems-to-deploy-metricbeat-in-a-eck-environment-running-on-minikube/320816 "2022-12-12T09:32:46Z")
Hi all. After installing Minikube in a Ubuntu VM and creating a single Masternode K8s cluster I've been able to deploy ES and Kibana by using the quickstart examples that can be found in Elastic Offitial Documentation. … --- ## [Brute Force Watcher and Alert](https://discuss.elastic.co/t/brute-force-watcher-and-alert/215708)
**Author:** [@mdp](https://discuss.elastic.co/u/mdp)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 2:06pm UTC](https://discuss.elastic.co/t/brute-force-watcher-and-alert/215708 "2020-01-20T14:06:06Z")
Hi, I am looking at support/advice on modifying a watcher to accomplish: A single email and alert output for each occurrence where there a user has failed logins x times in x minutes. The alert and email to contain a … [Previous page](https://discuss.elastic.co/top.md?page=1453&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1455&per_page=50&period=all)