# Top **URL:** https://discuss.elastic.co/top.md?page=1466&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1467 --- ## [Restoring ML Jobs using Elasticdump](https://discuss.elastic.co/t/restoring-ml-jobs-using-elasticdump/143747)
**Author:** [@ryanrossiter](https://discuss.elastic.co/u/ryanrossiter)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 7:07pm UTC](https://discuss.elastic.co/t/restoring-ml-jobs-using-elasticdump/143747 "2018-08-09T19:07:58Z")
I'm currently working on an Elasticsearch SDLC, and would like to store the machine learning jobs into version control so they can be restored, tracked, etc.. I have been doing the same with dashboards and watches using … --- ## [Kibana Index Problem](https://discuss.elastic.co/t/kibana-index-problem/80462)
**Author:** [@safasalwan](https://discuss.elastic.co/u/safasalwan)\ **Replies:** 3\ **Last updated:** [March 29, 2017, 12:15pm UTC](https://discuss.elastic.co/t/kibana-index-problem/80462 "2017-03-29T12:15:58Z")
Hi everyone, I installed ElasticSearch and Kibana and was able to access it on port 5601. Now I want to configure my indices. It's not working. Here's what shows: Because of these errors, I can't continue with Discov… --- ## [Completion suggestor field returns both old and updated document results](https://discuss.elastic.co/t/completion-suggestor-field-returns-both-old-and-updated-document-results/68076)
**Author:** [@Cara\_B](https://discuss.elastic.co/u/Cara_B)\ **Replies:** 3\ **Last updated:** [December 7, 2016, 11:19am UTC](https://discuss.elastic.co/t/completion-suggestor-field-returns-both-old-and-updated-document-results/68076 "2016-12-07T11:19:14Z")
Hi All, We've noticed that on updating a document completion field that the results will then return both the old document completion field and the updated version. If I update again we continue to get 2 results - th… --- ## [Jest Client issue](https://discuss.elastic.co/t/jest-client-issue/63319)
**Author:** [@sukumar](https://discuss.elastic.co/u/sukumar)\ **Replies:** 3\ **Last updated:** [November 10, 2016, 5:21am UTC](https://discuss.elastic.co/t/jest-client-issue/63319 "2016-11-10T05:21:31Z")
I am trying to use Jest client in spark , its working good only if I use in single machine, if I use in cluster mode, its not working due to Client is not serialized. Any one using java client which is serialized ? --- ## [Document Related in Elasticsearch?](https://discuss.elastic.co/t/document-related-in-elasticsearch/52211)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 3\ **Last updated:** [June 9, 2016, 4:08am UTC](https://discuss.elastic.co/t/document-related-in-elasticsearch/52211 "2016-06-09T04:08:51Z")
Can any one explain how to relate documents having same skill. Let us say for example if I’m looking at lets say a javascript profile of Murali, the system should also suggest candidates with similar skills like Srirag… --- ## [Elasticsearch doesn't support backquote?](https://discuss.elastic.co/t/elasticsearch-doesnt-support-backquote/49504)
**Author:** [@qpily](https://discuss.elastic.co/u/qpily)\ **Replies:** 3\ **Last updated:** [May 17, 2016, 5:59am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-support-backquote/49504 "2016-05-17T05:59:48Z")
Hi, I met a problem these days that I cannot query backquote in elastic. My setting included letter, digit, symbol and punctuation. But it seems that \` is not included. I tried version 1.6, 2.2 and 2.3 either. It seems t… --- ## [Best way to filter elasticsearch results?](https://discuss.elastic.co/t/best-way-to-filter-elasticsearch-results/46703)
**Author:** [@tcates](https://discuss.elastic.co/u/tcates)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 4:30pm UTC](https://discuss.elastic.co/t/best-way-to-filter-elasticsearch-results/46703 "2016-04-13T16:30:59Z")
We are considering using Elastic search in our web application as a replacement for SOLR. I was hoping to get some guidance/advice on the best approach for one aspect of how we use search in our product. A user's acce… --- ## [Regarding Kibana Plugins](https://discuss.elastic.co/t/regarding-kibana-plugins/37475)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 3\ **Last updated:** [December 18, 2015, 4:36pm UTC](https://discuss.elastic.co/t/regarding-kibana-plugins/37475 "2015-12-18T16:36:04Z")
I've come up with a following requirement. Please confirm if it's feasible to implement in Kibana. Is it possible open the log files from kibana interface to find the context of failures in the logs. Need to find the… --- ## [Which folders should be excluded in case of any Endpoint protection client?](https://discuss.elastic.co/t/which-folders-should-be-excluded-in-case-of-any-endpoint-protection-client/27724)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 0\ **Last updated:** [August 20, 2015, 5:23am UTC](https://discuss.elastic.co/t/which-folders-should-be-excluded-in-case-of-any-endpoint-protection-client/27724 "2015-08-20T05:23:46Z")
Hi, If I want to install any antivirus/malware EndPoint protection client on any of my ELK stack windows servers, which folders should I exclude? I am using two Windows Server 2012 R2 servers. One is for Logstash and… --- ## [Marvel showing unresponsive nodes but active data](https://discuss.elastic.co/t/marvel-showing-unresponsive-nodes-but-active-data/23394)
**Author:** [@Tristan\_Hammond](https://discuss.elastic.co/u/Tristan_Hammond)\ **Replies:** 3\ **Last updated:** [May 15, 2015, 6:40pm UTC](https://discuss.elastic.co/t/marvel-showing-unresponsive-nodes-but-active-data/23394 "2015-05-15T18:40:54Z")
Hi all. So we have an Elasticsearch cluster up and running. 5 nodes (1 master, 1 client and 3 data). At some point the Marvel dash began stating on all our nodes and indices that "no report has been received for m… --- ## [Enrich workplace search indices](https://discuss.elastic.co/t/enrich-workplace-search-indices/266333)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:18pm UTC](https://discuss.elastic.co/t/enrich-workplace-search-indices/266333 "2021-03-05T17:18:17Z")
Hello, I use workplace search to benefit from the connectors, in particular Sharepoint connector. I need to make some post-processing to my documents (cleaning, alignment, enrichment via an external API), so I use Logs… --- ## [Creating password to default users](https://discuss.elastic.co/t/creating-password-to-default-users/272006)
**Author:** [@Antonio\_Marques](https://discuss.elastic.co/u/Antonio_Marques)\ **Replies:** 2\ **Last updated:** [May 4, 2021, 3:48pm UTC](https://discuss.elastic.co/t/creating-password-to-default-users/272006 "2021-05-04T15:48:06Z")
Hey gurus! I want to automate the process of my docker installation. I don't want to setup an elasticsearch instance to run docker exec elasticsearch-1 /bin/bash -c "bin/elasticsearch-setup-passwords auto --batch --url… --- ## [Result window is too large Error](https://discuss.elastic.co/t/result-window-is-too-large-error/237941)
**Author:** [@skv325](https://discuss.elastic.co/u/skv325)\ **Replies:** 2\ **Last updated:** [June 21, 2020, 6:18am UTC](https://discuss.elastic.co/t/result-window-is-too-large-error/237941 "2020-06-21T06:18:22Z")
Hello, I am getting an error message when doing paged search from kendo data grid on elasticsearch: "Result window is too large, from + size must be less than or equal to: \[10000\] but was \[44800\]..." The index has app… --- ## [SinceDB null, question](https://discuss.elastic.co/t/sincedb-null-question/223169)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 3:39pm UTC](https://discuss.elastic.co/t/sincedb-null-question/223169 "2020-03-11T15:39:04Z")
If I set sincedb\_path = /dev/null in a logstash configuration, that means that every time I run logstash, de data will be re-indexed in elastic? this will create duplicates? what problems could arise with this? --- ## [TD-Agent と Elasticsearch を使用した Windows ログ収集](https://discuss.elastic.co/t/td-agent-elasticsearch-windows/135861)
**Author:** [@birdland](https://discuss.elastic.co/u/birdland)\ **Replies:** 2\ **Last updated:** [June 15, 2018, 7:39am UTC](https://discuss.elastic.co/t/td-agent-elasticsearch-windows/135861 "2018-06-15T07:39:30Z")
お世話になっております。 Windows クライアントからイベントログ（application,system,security）を収集し、TD-Agent サーバの Elasticsearch へ書き込み、Kibana で確認したいと考えています。 環境は以下の通りです。 Windows クライアント OS：Windows Server 2012 SE 収集AP：Fluentd 1.0.2（コード変換にrecord\_modif… --- ## [Leading zeros on number field formatting](https://discuss.elastic.co/t/leading-zeros-on-number-field-formatting/129653)
**Author:** [@uoberdorf](https://discuss.elastic.co/u/uoberdorf)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 5:32am UTC](https://discuss.elastic.co/t/leading-zeros-on-number-field-formatting/129653 "2018-04-27T05:32:22Z")
Hi, I am trying to format a numeric field in kibana to show leading zeros. The goal is to receive a fixed length on the field. I configured a formatter on the field in the index management and followed the examples on… --- ## [Using request\_path to create output filter?](https://discuss.elastic.co/t/using-request-path-to-create-output-filter/126789)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 2\ **Last updated:** [April 4, 2018, 5:22pm UTC](https://discuss.elastic.co/t/using-request-path-to-create-output-filter/126789 "2018-04-04T17:22:03Z")
Hello, I'm using the following configuration to route request to my Elastic Instance. However, it looks like the request\_path header IF check is not passing and thus the elasticsearch instance is not being invoked. Can … --- ## [Cross Cluster Search using ELBs of remote ES cluster](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 2\ **Last updated:** [June 14, 2017, 6:14am UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089 "2017-06-14T06:14:05Z")
Hi I have 2 elastic search clusters. Both cluster have ELBs for datanode & co-ordinator nodes set as the number of nodes can be increased/decreased. As we have deployed ELK stack in AWS cloud and do rehydration ever… --- ## [How to disable delete from an alias which cover multiple indices?](https://discuss.elastic.co/t/how-to-disable-delete-from-an-alias-which-cover-multiple-indices/74872)
**Author:** [@BrickXu](https://discuss.elastic.co/u/BrickXu)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 6:47am UTC](https://discuss.elastic.co/t/how-to-disable-delete-from-an-alias-which-cover-multiple-indices/74872 "2017-02-14T06:47:10Z")
Hi guys, I create multiple indices with the following template: { "order": 0, "template": "my-index-\*", "settings": {}, "mappings": {}, "aliases": { "my-index": {} } } And insert some docs with a pyt… --- ## [Not able to ADD USERS in shield. Please Help!](https://discuss.elastic.co/t/not-able-to-add-users-in-shield-please-help/63854)
**Author:** [@amits](https://discuss.elastic.co/u/amits)\ **Replies:** 2\ **Last updated:** [October 25, 2016, 1:49pm UTC](https://discuss.elastic.co/t/not-able-to-add-users-in-shield-please-help/63854 "2016-10-25T13:49:38Z")
Hi all, @magnusbaeck I am not able to add users in my ES. I installed the Shield also. It is giving the Following ERROR in ES log: 2016-10-25 14:46:41,158\]\[WARN \]\[shield.authc.esusers \] \[NTP-node\] no users found … --- ## [Mapper\_parsing\_exception with JSON event in custom Beat](https://discuss.elastic.co/t/mapper-parsing-exception-with-json-event-in-custom-beat/60454)
**Author:** [@raposa](https://discuss.elastic.co/u/raposa)\ **Replies:** 2\ **Last updated:** [September 14, 2016, 2:52pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-with-json-event-in-custom-beat/60454 "2016-09-14T14:52:54Z")
I am writing a Beat that generates the following event and sends to ES. I have included a sample event below. The data does not make it into ES - there is an error occurring: WARN Can not index event (status=400): {"t… --- ## [Waiting for Marvel Data after one sided 2.2.0 -\> 2.3.1 upgrade](https://discuss.elastic.co/t/waiting-for-marvel-data-after-one-sided-2-2-0-2-3-1-upgrade/46589)
**Author:** [@mdrago](https://discuss.elastic.co/u/mdrago)\ **Replies:** 2\ **Last updated:** [April 6, 2016, 9:47pm UTC](https://discuss.elastic.co/t/waiting-for-marvel-data-after-one-sided-2-2-0-2-3-1-upgrade/46589 "2016-04-06T21:47:27Z")
We're using an external marvel cluster to monitor our production elasticsearch cluster. As part of rolling out elasticsearch 2.3.1 I deployed it to the external marvel cluster but have not yet upgraded the production cl… --- ## [Equivalent of 'stream\_identity' for multiline codec](https://discuss.elastic.co/t/equivalent-of-stream-identity-for-multiline-codec/45785)
**Author:** [@jpry](https://discuss.elastic.co/u/jpry)\ **Replies:** 2\ **Last updated:** [April 6, 2016, 8:23am UTC](https://discuss.elastic.co/t/equivalent-of-stream-identity-for-multiline-codec/45785 "2016-04-06T08:23:08Z")
Hello, All is in the title. Is there an equivalent for 'stream\_identity' property of the multiline filter in multiline codec? How to merge interlaced log lines based on their dynamic identifier using multiline codec in… --- ## [Unable to RUN bulk API client from different server -- NoNodeAvailableException](https://discuss.elastic.co/t/unable-to-run-bulk-api-client-from-different-server-nonodeavailableexception/42743)
**Author:** [@tirupathi](https://discuss.elastic.co/u/tirupathi)\ **Replies:** 2\ **Last updated:** [March 16, 2016, 3:38pm UTC](https://discuss.elastic.co/t/unable-to-run-bulk-api-client-from-different-server-nonodeavailableexception/42743 "2016-03-16T15:38:06Z")
I am doing a POC using Elastic Search, when I ran a Bulkload Client on Same server where Elastic Search is running it is working fine, where I moved the BlukLoad client to another batch server I started getting this erro… --- ## [Remove accidental tag?](https://discuss.elastic.co/t/remove-accidental-tag/26448)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 2\ **Last updated:** [July 28, 2015, 10:04pm UTC](https://discuss.elastic.co/t/remove-accidental-tag/26448 "2015-07-28T22:04:51Z")
I accidently fat fingered a curator command and updated the indices with the wrong tag. "tag": "hdd" Is there a way i can manually remove this from the index? { "logstash-2015.06.24": { "settings": { … --- ## [Returning values from an update script](https://discuss.elastic.co/t/returning-values-from-an-update-script/15390)
**Author:** [@Daniel\_Winterstein](https://discuss.elastic.co/u/Daniel_Winterstein)\ **Replies:** 2\ **Last updated:** [January 27, 2014, 10:44am UTC](https://discuss.elastic.co/t/returning-values-from-an-update-script/15390 "2014-01-27T10:44:38Z")
Hello, I'm running an update request using a script. How can I return values from that? Specifically, I want to return true/false based on what update the script has done. Thank you & Best regards, - Dani… --- ## [Deployment architecture of ELK stack in on premise Windows Server](https://discuss.elastic.co/t/deployment-architecture-of-elk-stack-in-on-premise-windows-server/373251)
**Author:** [@grootlin](https://discuss.elastic.co/u/grootlin)\ **Replies:** 6\ **Last updated:** [January 18, 2025, 12:33am UTC](https://discuss.elastic.co/t/deployment-architecture-of-elk-stack-in-on-premise-windows-server/373251 "2025-01-18T00:33:47Z")
I have found myself as an administrator in an environment where ELK stack is used for log aggregation. We need to be pulling in Syslog data from our Network devices, virtualization cluster, and logs from our Windows / Li… --- ## [Error after OS upgrade](https://discuss.elastic.co/t/error-after-os-upgrade/286966)
**Author:** [@Zincometal](https://discuss.elastic.co/u/Zincometal)\ **Replies:** 6\ **Last updated:** [October 19, 2021, 9:04am UTC](https://discuss.elastic.co/t/error-after-os-upgrade/286966 "2021-10-19T09:04:23Z")
Hello all, I'm a newbie to ELK and after many search I've not found a solution. After an OS upgrade Devuan 3 =\> Devuan 4 my filebeat doesn't work. The error in /var/log/filebeat.log is this: Preformatted text2021-10-… --- ## [How to exclude key value pair from KV filter if Key size greater than 15 char](https://discuss.elastic.co/t/how-to-exclude-key-value-pair-from-kv-filter-if-key-size-greater-than-15-char/269566)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 6\ **Last updated:** [April 9, 2021, 6:00pm UTC](https://discuss.elastic.co/t/how-to-exclude-key-value-pair-from-kv-filter-if-key-size-greater-than-15-char/269566 "2021-04-09T18:00:42Z")
We have log message which contain key value pairs and we are using KV filter to parse these data. We need to exclude key value pair from KV filter if Key size greater than 15 char. Need to exclude https://www.google.co… --- ## [Cardinality query takes more than 10 seconds to return for buckets of unique values ~15K](https://discuss.elastic.co/t/cardinality-query-takes-more-than-10-seconds-to-return-for-buckets-of-unique-values-15k/234073)
**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\ **Replies:** 6\ **Last updated:** [May 25, 2020, 9:01pm UTC](https://discuss.elastic.co/t/cardinality-query-takes-more-than-10-seconds-to-return-for-buckets-of-unique-values-15k/234073 "2020-05-25T21:01:26Z")
Due to the nature of the data I work with I have to create buckets of 5 minutes and then inside the bucket to calculate the count of the unique values (cardinality). Up until recently in our system those unique values w… --- ## [Keep default mapping type for any field as integer](https://discuss.elastic.co/t/keep-default-mapping-type-for-any-field-as-integer/123899)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 6\ **Last updated:** [March 21, 2018, 11:36am UTC](https://discuss.elastic.co/t/keep-default-mapping-type-for-any-field-as-integer/123899 "2018-03-21T11:36:00Z")
Hi, I have many fields (~800) in my CSV file. Most are integers while few are strings. I do have a mapping file where I list the type. But it is not feasible to list every field and its type since it keeps getting upda… --- ## [Logstash taking wrong url for Elasticserach](https://discuss.elastic.co/t/logstash-taking-wrong-url-for-elasticserach/275527)
**Author:** [@Shubham\_Dhote](https://discuss.elastic.co/u/Shubham_Dhote)\ **Replies:** 5\ **Last updated:** [June 11, 2021, 4:12am UTC](https://discuss.elastic.co/t/logstash-taking-wrong-url-for-elasticserach/275527 "2021-06-11T04:12:57Z")
Hi, I have deployed elasticserach and logstash in kubernetes cluster. And my logstash is unable to connect to elasticserach. Problem is:- my elasticserach url is:- https://my-server.com/elasticsearch And logstash is ta… --- ## [Vega: Cannot get dynamic data into strokeDash field](https://discuss.elastic.co/t/vega-cannot-get-dynamic-data-into-strokedash-field/260551)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 5:32pm UTC](https://discuss.elastic.co/t/vega-cannot-get-dynamic-data-into-strokedash-field/260551 "2021-01-11T17:32:43Z")
I am in the process of creating a sequence diagram using Vega viz. The following code is the approach I'm using. { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "Sequence Diagram", "paddi… --- ## [How to disable index migration on mapping change](https://discuss.elastic.co/t/how-to-disable-index-migration-on-mapping-change/180561)
**Author:** [@ENG618](https://discuss.elastic.co/u/ENG618)\ **Replies:** 5\ **Last updated:** [June 4, 2019, 5:12pm UTC](https://discuss.elastic.co/t/how-to-disable-index-migration-on-mapping-change/180561 "2019-06-04T17:12:21Z")
While upgrading my plugin (from: 5.6, to: 6.5), I have updated some mappings. This seems to be causing kibana to think it needs to migrate data, and causing the below error. server log \[21:06:03.159\] \[error\]\[statu… --- ## [Datafeed not happening in ml job](https://discuss.elastic.co/t/datafeed-not-happening-in-ml-job/161483)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 5\ **Last updated:** [December 20, 2018, 11:03am UTC](https://discuss.elastic.co/t/datafeed-not-happening-in-ml-job/161483 "2018-12-20T11:03:57Z")
Hi all, I'm new to ml job. I've created the ml job in kibana. I got an error 1. My data with timestamp (It's a sample data of one log file ) all data are feed at one shot. 2. While validating my job i got the bel… --- ## [How can specify the log message](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766)
**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\ **Replies:** 5\ **Last updated:** [July 27, 2017, 1:35pm UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766 "2017-07-27T13:35:53Z")
I'm newbie at ELK stack. I have installed and the ELK working find but now i want to visualize the content of my log after filebeat send it to logstash. I had read some topic still cant find how to do it so i post the is… --- ## [Windows 2012 Servers are not responding due to memory issue](https://discuss.elastic.co/t/windows-2012-servers-are-not-responding-due-to-memory-issue/70297)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 5\ **Last updated:** [December 30, 2016, 9:28pm UTC](https://discuss.elastic.co/t/windows-2012-servers-are-not-responding-due-to-memory-issue/70297 "2016-12-30T21:28:59Z")
I have 3 windows servers with elastic search installed and clustered. These servers are not responding after 1 week, I cannot RDP into the vms. When I look into vsphere I notice that its utilizing max memory, So immediat… --- ## [Getting the first and last entry(by timestamp) for each filename](https://discuss.elastic.co/t/getting-the-first-and-last-entry-by-timestamp-for-each-filename/114871)
**Author:** [@phytopius](https://discuss.elastic.co/u/phytopius)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 12:42pm UTC](https://discuss.elastic.co/t/getting-the-first-and-last-entry-by-timestamp-for-each-filename/114871 "2018-01-10T12:42:56Z")
I have an index with around 140 milllion documents stored. The fields in general look like this: systemname, filename, timestamp, message, version, etc, What I want to get is the first and last document (based on the t… --- ## [How To parse Json in json](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720)
**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\ **Replies:** 1\ **Last updated:** [August 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720 "2019-08-11T12:16:07Z")
Hi , i am new to ELK and i wonder how can i parse json have json For ex: my "Content" field have String but this string is also a json { "Method":"some string", "Request":"some string", "Time":"Datetime", "Content"… --- ## [Need to use basic version ( free version) of ELK stack with security features](https://discuss.elastic.co/t/need-to-use-basic-version-free-version-of-elk-stack-with-security-features/185081)
**Author:** [@Prashant\_Shirsath](https://discuss.elastic.co/u/Prashant_Shirsath)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 4:18am UTC](https://discuss.elastic.co/t/need-to-use-basic-version-free-version-of-elk-stack-with-security-features/185081 "2019-06-11T04:18:48Z")
I am naive to ELK stack. I wanted to unable the basic security feature in EKL stack. It should ask me user ID and password when I am running ES or Kibana or Logstash. With the initial free trial license, I could do it, b… --- ## [Ingest-attachment how to use analysis-ik as analyzer?](https://discuss.elastic.co/t/ingest-attachment-how-to-use-analysis-ik-as-analyzer/128812)
**Author:** [@lxiaoixi](https://discuss.elastic.co/u/lxiaoixi)\ **Replies:** 1\ **Last updated:** [April 20, 2018, 12:47pm UTC](https://discuss.elastic.co/t/ingest-attachment-how-to-use-analysis-ik-as-analyzer/128812 "2018-04-20T12:47:20Z")
I want to search file 'attachment.content' use analysis-ik,what should I do? "data": { //必须同管道的field 字段值相同 "type": "text", "analyzer": "ik\_max\_word" // } Is this right? --- ## [Watcher index action with dynamic doc\_id value](https://discuss.elastic.co/t/watcher-index-action-with-dynamic-doc-id-value/103787)
**Author:** [@acastellano](https://discuss.elastic.co/u/acastellano)\ **Replies:** 1\ **Last updated:** [October 13, 2017, 8:05am UTC](https://discuss.elastic.co/t/watcher-index-action-with-dynamic-doc-id-value/103787 "2017-10-13T08:05:02Z")
I'm doing an index action in my watch's Actions block for docs from a \_doc payload (see code below). Index action works fine, however, I have duplicate docs and haven't figured out how to evaluate the "doc\_id" value in … --- ## [Simple Pie chart question](https://discuss.elastic.co/t/simple-pie-chart-question/92749)
**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 11:39pm UTC](https://discuss.elastic.co/t/simple-pie-chart-question/92749 "2017-07-12T23:39:18Z")
I have a number of documents, each documents has "input bytes", "output bytes", "total bytes", the "total bytes" is the sum of the "input bytes" and "output bytes". I want to create a pie chart display the ratio of the… --- ## [Flume 关于 X-Pack认证的写法？](https://discuss.elastic.co/t/flume-x-pack/90046)
**Author:** [@lapertem4](https://discuss.elastic.co/u/lapertem4)\ **Replies:** 1\ **Last updated:** [July 4, 2017, 9:14am UTC](https://discuss.elastic.co/t/flume-x-pack/90046 "2017-07-04T09:14:01Z")
Hi, 请问谁有FLume 在认证X-pack配置方法实例，谢谢。 I'm using Flume+ES+Kibana ES and Kibana works fine, but log can't transfer through, On Flume side, 20:29:54.061 INFO org.elasticsearch.client.transport.TransportClientNodesService… --- ## [FixProtocol delimiter confusion](https://discuss.elastic.co/t/fixprotocol-delimiter-confusion/66529)
**Author:** [@Ramesh\_Janagam](https://discuss.elastic.co/u/Ramesh_Janagam)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 9:01am UTC](https://discuss.elastic.co/t/fixprotocol-delimiter-confusion/66529 "2016-11-22T09:01:04Z")
Hi All, We are processing FIX protocol messages in logstash( without Fix protocol plugin). but still I am not able to figure out 'delimiter'. We know its '\\001' in ascii but still it not working. In logstash its displ… --- ## [Nested object facets with filtering by nested object and parent field](https://discuss.elastic.co/t/nested-object-facets-with-filtering-by-nested-object-and-parent-field/14862)
**Author:** [@Kaspars\_Sprogis](https://discuss.elastic.co/u/Kaspars_Sprogis)\ **Replies:** 7\ **Last updated:** [December 16, 2013, 1:53pm UTC](https://discuss.elastic.co/t/nested-object-facets-with-filtering-by-nested-object-and-parent-field/14862 "2013-12-16T13:53:54Z")
Hi, I have movies index and each movie contains nested object "credits". What i need is to get facets for departments for specific person for one movie genre. In other words: facets for credit.department where g… --- ## [Why is subscription not mentioned in X-Pack introduction page?](https://discuss.elastic.co/t/why-is-subscription-not-mentioned-in-x-pack-introduction-page/131529)
**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\ **Replies:** 1\ **Last updated:** [May 12, 2018, 3:42am UTC](https://discuss.elastic.co/t/why-is-subscription-not-mentioned-in-x-pack-introduction-page/131529 "2018-05-12T03:42:32Z")
Hate to post a complaint here to start, but I'm really frustrated that I just now discovered that X-Pack requires a subscription to use some features. It almost feels like a "bait and switch". I would like to kindly requ… --- ## [Turn on SIEM in Kibana 7.10.2](https://discuss.elastic.co/t/turn-on-siem-in-kibana-7-10-2/271346)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 4\ **Last updated:** [May 6, 2021, 1:15pm UTC](https://discuss.elastic.co/t/turn-on-siem-in-kibana-7-10-2/271346 "2021-05-06T13:15:25Z")
I was able to turn off / on SIEM in kibana 7.8.1 under spaces however this seems to be gone in 7.10.2 How can i enable SIEM in Kibana 7.10.2 ? 7.8.1 7.10.2 --- ## [Kibana Grouping](https://discuss.elastic.co/t/kibana-grouping/271718)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 4\ **Last updated:** [April 30, 2021, 10:26pm UTC](https://discuss.elastic.co/t/kibana-grouping/271718 "2021-04-30T22:26:12Z")
My use case calls for counting all documents in an index pattern across days. I am grouping by timestamp field by minutes that is being ingested in milliseconds. So simply trying to group milliseconds into minutes. I ge… --- ## [Upgrade Elasticsearch from 6.0.0 to 6.2.1 breaks XPack security audit log bulk indexing](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-0-0-to-6-2-1-breaks-xpack-security-audit-log-bulk-indexing/119302)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 4\ **Last updated:** [February 19, 2018, 10:08am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-0-0-to-6-2-1-breaks-xpack-security-audit-log-bulk-indexing/119302 "2018-02-19T10:08:49Z")
We are using the docker images of the elastic stack. we were upgrading from 6.0.0 to 6.2.1 and when we did, some of our nodes were logging a bunch of errors reporting that they were failing to bulk index the security aud… [Previous page](https://discuss.elastic.co/top.md?page=1465&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1467&per_page=50&period=all)