# Top

**URL:** https://discuss.elastic.co/top.md?page=1470&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1471

---

## [Elastic Endpoint File Monitoring vs Elastic Agent File Integrity Monitoring Integration](https://discuss.elastic.co/t/elastic-endpoint-file-monitoring-vs-elastic-agent-file-integrity-monitoring-integration/321599)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 1\
**Last updated:** [December 20, 2022, 2:07am UTC](https://discuss.elastic.co/t/elastic-endpoint-file-monitoring-vs-elastic-agent-file-integrity-monitoring-integration/321599 "2022-12-20T02:07:13Z")

</div>

Hi All, I was curious if anyone knows the answer to this question, what are the differences between the Elastic Endpoint Security File Monitoring, and the Elastic Agent File Integrity Monitoring Integration? Are they i…

---

## [Fleet Server invalid argument "tcp://10.233.110.49:8220" for "--fleet-server-port"](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/293566)

<div class="topic-metadata">

**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Replies:** 2\
**Last updated:** [January 25, 2022, 12:37pm UTC](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/293566 "2022-01-25T12:37:33Z")

</div>

We are looking at depoying fleet server within our ECK env. We're currently using ECK 1.8 and ELK 7.15.1. When I deploy Fleet the pod just continuously crashes with the below logs Performing setup of Fleet in Kibana …

---

## [Regexp containing double quotes](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662)

<div class="topic-metadata">

**Author:** [@Olaph](https://discuss.elastic.co/u/Olaph)\
**Replies:** 2\
**Last updated:** [August 7, 2021, 7:12pm UTC](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662 "2021-08-07T19:12:49Z")

</div>

Hello, I am trying to search values that contains numbers or numbers in a quotes (no other character types except whitespaces). I was not able to use double-quotes character in character class. I have tried both \\" and…

---

## [Grok filter for email address alteration](https://discuss.elastic.co/t/grok-filter-for-email-address-alteration/201270)

<div class="topic-metadata">

**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 9:19am UTC](https://discuss.elastic.co/t/grok-filter-for-email-address-alteration/201270 "2019-09-27T09:19:02Z")

</div>

Hi, Am trying to pre-filter some data in Filebeat, i have a issue i cannot resolve from picking up some weird logs. I'm trying to pickup an email address from the file as well as an ip and date time etc... whilst it al…

---

## [Timelion bars dynamic width](https://discuss.elastic.co/t/timelion-bars-dynamic-width/191045)

<div class="topic-metadata">

**Author:** [@patimothe](https://discuss.elastic.co/u/patimothe)\
**Replies:** 2\
**Last updated:** [July 17, 2019, 11:50pm UTC](https://discuss.elastic.co/t/timelion-bars-dynamic-width/191045 "2019-07-17T23:50:58Z")

</div>

Hello, I would like to know if there is a way to give a dynamic width for bars in the timelion visualization. for example if i choose 1 day as intervall I would like that the right border of the bar representing july th…

---

## [DANGLING\_INDEX\_IMPORTED as reason of unassigned shards](https://discuss.elastic.co/t/dangling-index-imported-as-reason-of-unassigned-shards/110640)

<div class="topic-metadata">

**Author:** [@vsevolodk](https://discuss.elastic.co/u/vsevolodk)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 3:16pm UTC](https://discuss.elastic.co/t/dangling-index-imported-as-reason-of-unassigned-shards/110640 "2017-12-07T15:16:34Z")

</div>

Hello. Can you please give more detailed description about this reason DANGLING\_INDEX\_IMPORTED In documentation I see next Unassigned as a result of importing a dangling index. but I don't understand what does it mean…

---

## [Ignore\_above behavior](https://discuss.elastic.co/t/ignore-above-behavior/97445)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 2\
**Last updated:** [August 22, 2017, 6:58pm UTC](https://discuss.elastic.co/t/ignore-above-behavior/97445 "2017-08-22T18:58:11Z")

</div>

in the 2.3 documentation for ignore\_above, it says Strings longer than the ignore\_above setting will not be processed by the analyzer and will not be indexed. in the 5.0+ documentation, it says Strings longer than the i…

---

## [Lucene Segments and Performance](https://discuss.elastic.co/t/lucene-segments-and-performance/6234)

<div class="topic-metadata">

**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\
**Replies:** 2\
**Last updated:** [February 13, 2017, 11:40am UTC](https://discuss.elastic.co/t/lucene-segments-and-performance/6234 "2017-02-13T11:40:10Z")

</div>

I have some old indexes that are not being updated anymore. They are read-only, and I'm looking to optimize the segments for the best performance. I have heard conflicting arguments. Some argue that you should have …

---

## [Index Date values in multiple formats](https://discuss.elastic.co/t/index-date-values-in-multiple-formats/70353)

<div class="topic-metadata">

**Author:** [@inadler](https://discuss.elastic.co/u/inadler)\
**Replies:** 2\
**Last updated:** [January 2, 2017, 12:05pm UTC](https://discuss.elastic.co/t/index-date-values-in-multiple-formats/70353 "2017-01-02T12:05:06Z")

</div>

I wish to index a date value into several fields each in different format. for example, index "1/1/2011 10:11:12" into two fields: \* time: "HH:mm:ss" \* date: "dd/MM/yyyy HH:mm:ss" I tried using both multi fields and…

---

## [Prevent unknown index(s) created regularly](https://discuss.elastic.co/t/prevent-unknown-index-s-created-regularly/62026)

<div class="topic-metadata">

**Author:** [@chakkasm](https://discuss.elastic.co/u/chakkasm)\
**Replies:** 2\
**Last updated:** [October 3, 2016, 1:07pm UTC](https://discuss.elastic.co/t/prevent-unknown-index-s-created-regularly/62026 "2016-10-03T13:07:44Z")

</div>

Elasticsearch version: elasticsearch-2.3.4 Plugins installed: NONE JVM version: 1.8.0\_60 OS version: 2.6.39-400.283.2.el6uek.x86\_64 Since couple of weeks, every weekend some unknown indexes are getting created in…

---

## [The different num of Dashborad's show and table](https://discuss.elastic.co/t/the-different-num-of-dashborads-show-and-table/45059)

<div class="topic-metadata">

**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\
**Replies:** 2\
**Last updated:** [March 23, 2016, 1:05am UTC](https://discuss.elastic.co/t/the-different-num-of-dashborads-show-and-table/45059 "2016-03-23T01:05:11Z")

</div>

hi everyone, I toke an dashborad for my table using kibana,I found the dashboard num different from table.here is my sql as bellows: SELECT DISTINCT(t.amount) FROM v\_achievement\_budget t WHERE t.amount BETWEEN 0…

---

## [What is the effect of circuit breakers limit on search queries](https://discuss.elastic.co/t/what-is-the-effect-of-circuit-breakers-limit-on-search-queries/318795)

<div class="topic-metadata">

**Author:** [@md2](https://discuss.elastic.co/u/md2)\
**Replies:** 1\
**Last updated:** [November 13, 2022, 11:36pm UTC](https://discuss.elastic.co/t/what-is-the-effect-of-circuit-breakers-limit-on-search-queries/318795 "2022-11-13T23:36:45Z")

</div>

Hi, I am wondering what happens to the queries that hit the circuit breakers memory limit, are they discarded completely and lost forever? What is the recommended method to monitor these queries? Does this entry from th…

---

## ["tags":\["info","savedobjects-service"\],"pid":X,"message":"Starting saved objects migrations"}](https://discuss.elastic.co/t/tags-info-savedobjects-service-pid-x-message-starting-saved-objects-migrations/311458)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [August 11, 2022, 1:12pm UTC](https://discuss.elastic.co/t/tags-info-savedobjects-service-pid-x-message-starting-saved-objects-migrations/311458 "2022-08-11T13:12:43Z")

</div>

Hello World! As I start Kibana, it takes kinda long to start and in logs I see "Starting saved objects migrations": kibana | {"type":"log","@timestamp":"2022-08-04T04:10:47+00:00","tags":\["info","savedobjects-service"…

---

## [bulkResponse had errors with response statuses:counts of... {](https://discuss.elastic.co/t/bulkresponse-had-errors-with-response-statuses-counts-of/226492)

<div class="topic-metadata">

**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\
**Replies:** 5\
**Last updated:** [April 15, 2020, 1:28pm UTC](https://discuss.elastic.co/t/bulkresponse-had-errors-with-response-statuses-counts-of/226492 "2020-04-15T13:28:56Z")

</div>

We consistently hit the invalid request error in elastic SIEM Found 10000 signals from the indexes of "\[oci-audit-span\*\]" using signal rule name: "OCI Audit: Delete VCN \[Duplicate\]", id: "0e2d1191-7600-4268-be75-0f13ce1…

---

## [Auditbeat // File intergrity // Windows / GetFileAttributes: Access is denied](https://discuss.elastic.co/t/auditbeat-file-intergrity-windows-getfileattributes-access-is-denied/127804)

<div class="topic-metadata">

**Author:** [@0xFFFFFF](https://discuss.elastic.co/u/0xFFFFFF)\
**Replies:** 5\
**Last updated:** [April 12, 2018, 1:49pm UTC](https://discuss.elastic.co/t/auditbeat-file-intergrity-windows-getfileattributes-access-is-denied/127804 "2018-04-12T13:49:56Z")

</div>

Hi, Could you help me to solve an issue I faced, when turning on the recursive mode (to true), the auditbeat does not report any event. after further investigation i released the the issue is related to the auditbeat …

---

## [Unable to get elasticsearch work with camel](https://discuss.elastic.co/t/unable-to-get-elasticsearch-work-with-camel/123248)

<div class="topic-metadata">

**Author:** [@dvkawa](https://discuss.elastic.co/u/dvkawa)\
**Replies:** 5\
**Last updated:** [March 12, 2018, 6:26am UTC](https://discuss.elastic.co/t/unable-to-get-elasticsearch-work-with-camel/123248 "2018-03-12T06:26:29Z")

</div>

Hi Team, I am doing a very small POC on camel-elasticsearch. Things look smooth as i debug through and there are no error or exceptions seen on the camel side. Even after code execution complete, i do not see the json …

---

## [Using 2 function in same ML Job](https://discuss.elastic.co/t/using-2-function-in-same-ml-job/117520)

<div class="topic-metadata">

**Author:** [@mgarg123](https://discuss.elastic.co/u/mgarg123)\
**Replies:** 5\
**Last updated:** [January 29, 2018, 9:07pm UTC](https://discuss.elastic.co/t/using-2-function-in-same-ml-job/117520 "2018-01-29T21:07:26Z")

</div>

Hi, I have a use case where I would like to identify anomalies in the unusual time of day user logins from the unusual geo-location (latitude - longitude). From my understanding I'll have to use 2 function in the same M…

---

## [@timestamp cannot be deleted - overwriting does not work](https://discuss.elastic.co/t/timestamp-cannot-be-deleted-overwriting-does-not-work/93512)

<div class="topic-metadata">

**Author:** [@dschmitz](https://discuss.elastic.co/u/dschmitz)\
**Replies:** 5\
**Last updated:** [July 18, 2017, 1:57pm UTC](https://discuss.elastic.co/t/timestamp-cannot-be-deleted-overwriting-does-not-work/93512 "2017-07-18T13:57:52Z")

</div>

Hi, I know, that the field @timestamp can not be deleted. So I want to override @timestamp with the timestamp of logs. I've created a new field. The timestamp in logfile looks like "13.07.2017 07:11:10 ..." my new field …

---

## [Filter result in top-term-aggs](https://discuss.elastic.co/t/filter-result-in-top-term-aggs/84182)

<div class="topic-metadata">

**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\
**Replies:** 5\
**Last updated:** [May 1, 2017, 10:21pm UTC](https://discuss.elastic.co/t/filter-result-in-top-term-aggs/84182 "2017-05-01T22:21:43Z")

</div>

I want to filter out field from my results. My query is, { "size":0, "aggs":{ "top-terms-aggregation":{ "terms":{ "field":"client\_ip.keyword", …

---

## [Logstash http poller](https://discuss.elastic.co/t/logstash-http-poller/295441)

<div class="topic-metadata">

**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\
**Replies:** 3\
**Last updated:** [January 26, 2022, 6:03pm UTC](https://discuss.elastic.co/t/logstash-http-poller/295441 "2022-01-26T18:03:04Z")

</div>

Hi, I am using logstash 7.13.4 and I want to use http poller for this url http://10.10.10.10:8080/dbonequerydata/?username=user/password=password/encrypted=false/conversion=true/DT=csv -H "Content-Type: application/xml…

---

## [Heartbeat config files fail when path variables passed](https://discuss.elastic.co/t/heartbeat-config-files-fail-when-path-variables-passed/289890)

<div class="topic-metadata">

**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\
**Replies:** 3\
**Last updated:** [December 10, 2021, 6:42pm UTC](https://discuss.elastic.co/t/heartbeat-config-files-fail-when-path-variables-passed/289890 "2021-12-10T18:42:18Z")

</div>

In order to get my Kibana https heartbeat working, I had to add the standard ssl blob. I used the same blob that I have in all my .yml's that lets everything successfully (mostly) talk over https: ssl.enabled: true …

---

## [Changes to config file not updating the data in kibana](https://discuss.elastic.co/t/changes-to-config-file-not-updating-the-data-in-kibana/229572)

<div class="topic-metadata">

**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\
**Replies:** 3\
**Last updated:** [April 24, 2020, 5:34pm UTC](https://discuss.elastic.co/t/changes-to-config-file-not-updating-the-data-in-kibana/229572 "2020-04-24T17:34:28Z")

</div>

Hello All, I am using the latest version of logstash(7.6.2). I tried uploading a sample data and was able to successfully upload it into the elasticsearch using logstash(enabled auto-reload) and was able to see the inde…

---

## [Elasticsearch in K8s cannot restart because of recovery failure (multiple alias write indexes)](https://discuss.elastic.co/t/elasticsearch-in-k8s-cannot-restart-because-of-recovery-failure-multiple-alias-write-indexes/214100)

<div class="topic-metadata">

**Author:** [@MF57](https://discuss.elastic.co/u/MF57)\
**Replies:** 3\
**Last updated:** [January 8, 2020, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-in-k8s-cannot-restart-because-of-recovery-failure-multiple-alias-write-indexes/214100 "2020-01-08T09:41:26Z")

</div>

Hello, I have an elastic search cluster deployed in the k8s cluster: "version" : { "number" : "6.7.1", "build\_flavor" : "default", "build\_type" : "docker", "build\_hash" : "2f32220", "build\_date" : "2019-04-02T15:59:27.…

---

## [Tags not applied by json filter when source sets HTTP header Content-Type: application/json](https://discuss.elastic.co/t/tags-not-applied-by-json-filter-when-source-sets-http-header-content-type-application-json/194754)

<div class="topic-metadata">

**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\
**Replies:** 3\
**Last updated:** [August 11, 2019, 10:24pm UTC](https://discuss.elastic.co/t/tags-not-applied-by-json-filter-when-source-sets-http-header-content-type-application-json/194754 "2019-08-11T22:24:38Z")

</div>

Hi, I set up an http listener, and json filter and discovered tag application inconsistencies. ELK components 5.6.16. Input: input { http { port =\> "5048" tags =\> \[ "CURL" \] type =\> "curl" } } Filter: filt…

---

## [Logstash output rabbitmq](https://discuss.elastic.co/t/logstash-output-rabbitmq/154401)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 8:48am UTC](https://discuss.elastic.co/t/logstash-output-rabbitmq/154401 "2018-10-31T08:48:34Z")

</div>

Hello, I use the output of logstash to connect to Rabbitmq with ssl. I have this config for Logstash : output { rabbitmq { host =\> "rabbitmq" port =\> 5671 exchange =\> "logstash" exchange\_type =\> "dir…

---

## [Postgres privileges](https://discuss.elastic.co/t/postgres-privileges/144603)

<div class="topic-metadata">

**Author:** [@joshsmoore](https://discuss.elastic.co/u/joshsmoore)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 7:12am UTC](https://discuss.elastic.co/t/postgres-privileges/144603 "2018-08-21T07:12:01Z")

</div>

Hi have setup the Postgres module and it seems to be working correctly with one exception. postgresql.activity.query: Can you tell me what privilege I need to set on this user to fix this?

---

## [Проблема после обновления ELK до 6.3](https://discuss.elastic.co/t/elk-6-3/136544)

<div class="topic-metadata">

**Author:** [@if22](https://discuss.elastic.co/u/if22)\
**Replies:** 3\
**Last updated:** [June 19, 2018, 5:58pm UTC](https://discuss.elastic.co/t/elk-6-3/136544 "2018-06-19T17:58:06Z")

</div>

Всем привет! После обновления с 6.2 до 6.3 logstash перестал писать данные в elasticsearch. \[2018-06-18T10:05:16,341\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. ...skipped..."Can't ge…

---

## [Ruby Agent Failed posting (EOFError)](https://discuss.elastic.co/t/ruby-agent-failed-posting-eoferror/134120)

<div class="topic-metadata">

**Author:** [@cylofe](https://discuss.elastic.co/u/cylofe)\
**Replies:** 3\
**Last updated:** [June 1, 2018, 5:46pm UTC](https://discuss.elastic.co/t/ruby-agent-failed-posting-eoferror/134120 "2018-06-01T17:46:00Z")

</div>

I am not sure what is wrong with my current setup. I get the following log when I am trying to send an event. 2018-05-31 18:00:37.435499 D \[57163:70296031926600\] Rails -- \[ElasticAPM\] Booting worker 2018-05-31 18:00:53.…

---

## [Logstash output s3 didn't work with condition](https://discuss.elastic.co/t/logstash-output-s3-didnt-work-with-condition/29905)

<div class="topic-metadata">

**Author:** [@vankhoa011](https://discuss.elastic.co/u/vankhoa011)\
**Replies:** 3\
**Last updated:** [September 25, 2015, 8:10am UTC](https://discuss.elastic.co/t/logstash-output-s3-didnt-work-with-condition/29905 "2015-09-25T08:10:50Z")

</div>

Hi all, I make a config for logstash , I want if the logs match logtype==request and env==prd , it will save to Bucket 1 If the logstash logtype==request and env==stg , i will save to Bucket2. However, there is some…

---

## [Setting the number of replicas in Index Creation](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 1\
**Last updated:** [April 25, 2022, 5:22pm UTC](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166 "2022-04-25T17:22:34Z")

</div>

Hello everyone, when I create a new Index via Logstash they always go with 1 replica and that turns the Index yellow. So I edit it in Index Management to set replicas to 0 the Index turns green; It might be silly but I …

---

## [Metricbeat setup --dashboards fails: error loading config file](https://discuss.elastic.co/t/metricbeat-setup-dashboards-fails-error-loading-config-file/284495)

<div class="topic-metadata">

**Author:** [@cdalexndr](https://discuss.elastic.co/u/cdalexndr)\
**Replies:** 1\
**Last updated:** [September 17, 2021, 3:15pm UTC](https://discuss.elastic.co/t/metricbeat-setup-dashboards-fails-error-loading-config-file/284495 "2021-09-17T15:15:30Z")

</div>

λ docker exec -it docker\_metricbeat\_1 sh sh-4.2# metricbeat setup --dashboards Exiting: error loading config file: config file ("metricbeat.yml") can only be writable by the owner but the permissions are "-rwxrwxrwx" (to…

---

## [Вычисляемые поля в Kibana](https://discuss.elastic.co/t/kibana/266898)

<div class="topic-metadata">

**Author:** [@iNNerScream](https://discuss.elastic.co/u/iNNerScream)\
**Replies:** 1\
**Last updated:** [March 15, 2021, 2:41pm UTC](https://discuss.elastic.co/t/kibana/266898 "2021-03-15T14:41:21Z")

</div>

Добрый день! У меня есть данные состава: timestamp field1 field2 При помощи scripted fields я смог добиться получения доли одного поля от другого (doc\['field1'\].value / doc\['field2'\].value). Однако данный расчет прои…

---

## [RegEx for URI field](https://discuss.elastic.co/t/regex-for-uri-field/207779)

<div class="topic-metadata">

**Author:** [@AshishC](https://discuss.elastic.co/u/AshishC)\
**Replies:** 1\
**Last updated:** [November 18, 2019, 8:37pm UTC](https://discuss.elastic.co/t/regex-for-uri-field/207779 "2019-11-18T20:37:30Z")

</div>

Hi Team, Regular expression to search all the documents with following URL ( have shown 3 docs here) @fields.requested\_uri: "/services/chinesedrugcontent/drugTopics/3492/json" @fields.requested\_uri: "/services/chinese…

---

## [Bulk Index newline termination error from Elastic cloud](https://discuss.elastic.co/t/bulk-index-newline-termination-error-from-elastic-cloud/146247)

<div class="topic-metadata">

**Author:** [@Martin\_Arndt](https://discuss.elastic.co/u/Martin_Arndt)\
**Replies:** 1\
**Last updated:** [August 28, 2018, 5:34am UTC](https://discuss.elastic.co/t/bulk-index-newline-termination-error-from-elastic-cloud/146247 "2018-08-28T05:34:45Z")

</div>

I am sending content-Type/x-ndjson from AWS Nodejs lambda functions to elastic cloud cluster using https and JSON.Stringify to create message that looks like this "{ "index" : { "\_index" : "requests-2018-08", "\_type" : …

---

## [Plugin to generate CEF output for ARCsight](https://discuss.elastic.co/t/plugin-to-generate-cef-output-for-arcsight/106016)

<div class="topic-metadata">

**Author:** [@oscario](https://discuss.elastic.co/u/oscario)\
**Replies:** 1\
**Last updated:** [November 1, 2017, 12:09pm UTC](https://discuss.elastic.co/t/plugin-to-generate-cef-output-for-arcsight/106016 "2017-11-01T12:09:55Z")

</div>

Hi, I see a lot of answers using the cef-codes plugin to parse CEF output from i.e. ARCsight. I need the other way around: generate CEF output (from syslog but probably also from other formats) to use as input for ARCs…

---

## [Build of filebeat for ppc64el available?](https://discuss.elastic.co/t/build-of-filebeat-for-ppc64el-available/70995)

<div class="topic-metadata">

**Author:** [@wdirons](https://discuss.elastic.co/u/wdirons)\
**Replies:** 1\
**Last updated:** [January 10, 2017, 9:42am UTC](https://discuss.elastic.co/t/build-of-filebeat-for-ppc64el-available/70995 "2017-01-10T09:42:30Z")

</div>

I have downloaded go and the source for filebeat and will able to compile filebeat for powerpc little endian using the instructions for building code in CONTRIBUTING.md so I know it is possible to build filebeat for powe…

---

## [Parse Failure \[No mapping found for \[\_uid\] in order to sort on\]](https://discuss.elastic.co/t/parse-failure-no-mapping-found-for--uid-in-order-to-sort-on/14494)

<div class="topic-metadata">

**Author:** [@Ranjith\_Venkatesan](https://discuss.elastic.co/u/Ranjith_Venkatesan)\
**Replies:** 1\
**Last updated:** [December 12, 2016, 4:12am UTC](https://discuss.elastic.co/t/parse-failure-no-mapping-found-for--uid-in-order-to-sort-on/14494 "2016-12-12T04:12:02Z")

</div>

Hi, I am new to ElasticSearch. I am using ElasticSearch 0.90.5 for search module of my application. In my application, i will be using multi-tenant setup with alias for each user. I had a use case such that i want t…

---

## [ES and sparkStreaming](https://discuss.elastic.co/t/es-and-sparkstreaming/46263)

<div class="topic-metadata">

**Author:** [@JoaquinS](https://discuss.elastic.co/u/JoaquinS)\
**Replies:** 1\
**Last updated:** [April 5, 2016, 3:18pm UTC](https://discuss.elastic.co/t/es-and-sparkstreaming/46263 "2016-04-05T15:18:43Z")

</div>

Hi, I have an ES cluster and a Cloudera cluster and I want to stream data (indexes) from ES to Cloudera-Kudu tables. Now I'm using Logstash to extract the index data, then Kafka to carry them into SparkStreaming and fin…

---

## [Word delimiter filter - ignore words with hyphen](https://discuss.elastic.co/t/word-delimiter-filter-ignore-words-with-hyphen/15430)

<div class="topic-metadata">

**Author:** [@Patrick\_Norwood](https://discuss.elastic.co/u/Patrick_Norwood)\
**Replies:** 1\
**Last updated:** [January 27, 2014, 2:53pm UTC](https://discuss.elastic.co/t/word-delimiter-filter-ignore-words-with-hyphen/15430 "2014-01-27T14:53:00Z")

</div>

Hi all, I would really appreciate if anyone could navigate me, how I should set my word\_delimiter\_filter to skip words containing hyphen? The desired result is that the word with '-' in them, will be ignored by wo…

---

## [.NET: Using newer NEST high-level client against previous version of Elasticsearch](https://discuss.elastic.co/t/net-using-newer-nest-high-level-client-against-previous-version-of-elasticsearch/336613)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 6\
**Last updated:** [June 23, 2023, 7:43pm UTC](https://discuss.elastic.co/t/net-using-newer-nest-high-level-client-against-previous-version-of-elasticsearch/336613 "2023-06-23T19:43:25Z")

</div>

NEST: 6.8.6 Elasticsearch: 6.8.23 We're looking to upgrade our Elasticsearch clusters now that we're on ECK (hallelujah!). Our .NET code uses NEST and I'd like to try the NEST 7.17.5 NuGet package without upgrading ou…

---

## [Uptime Investigate Dropdown Link Uptime Monitor to Host Metrics/Logs](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 6\
**Last updated:** [December 17, 2021, 1:57pm UTC](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419 "2021-12-17T13:57:08Z")

</div>

Hi All, In the Kibana UI \> Uptime \> Monitors, each monitor is listed. If you expand a monitor, there is a dropdown menu on the right hand side called Investigate, in the menu there are options like Show host logs and Sh…

---

## [ElasticSearch & Statistiques](https://discuss.elastic.co/t/elasticsearch-statistiques/247744)

<div class="topic-metadata">

**Author:** [@RSTMAN](https://discuss.elastic.co/u/RSTMAN)\
**Replies:** 6\
**Last updated:** [September 7, 2020, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-statistiques/247744 "2020-09-07T10:42:52Z")

</div>

Bonjour, je ne suis pas un spécialiste d'ElasticSearch mais je l'utilise dans mon milieu professionnel :). je voulais avoir des retours par rapport à l'utilisation de ES dans le calcul des statistiques: est ce que c'es…

---

## [Elastic search nodes are going down across multiple instances](https://discuss.elastic.co/t/elastic-search-nodes-are-going-down-across-multiple-instances/246151)

<div class="topic-metadata">

**Author:** [@prasanthpola](https://discuss.elastic.co/u/prasanthpola)\
**Replies:** 6\
**Last updated:** [August 26, 2020, 9:39pm UTC](https://discuss.elastic.co/t/elastic-search-nodes-are-going-down-across-multiple-instances/246151 "2020-08-26T21:39:28Z")

</div>

Hi - We have a problem of Elastic nodes going down one by one around the same time frames which are hosted on different VPC's in aws. I could not figure out the pattern, i see these errors in the log files, Appreciate a…

---

## [Render visualize in a Kibana plugin](https://discuss.elastic.co/t/render-visualize-in-a-kibana-plugin/228204)

<div class="topic-metadata">

**Author:** [@Nicolap](https://discuss.elastic.co/u/Nicolap)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 11:40am UTC](https://discuss.elastic.co/t/render-visualize-in-a-kibana-plugin/228204 "2020-04-20T11:40:16Z")

</div>

Hello guys, I'm writing a kibana plugin, and as requirements I should render some visualizations. Using the code below I can see the visualize rendered correctly. import { start as embeddables } from "plugins/embeddab…

---

## [Ingest json file](https://discuss.elastic.co/t/ingest-json-file/175652)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 6\
**Last updated:** [April 6, 2019, 12:00am UTC](https://discuss.elastic.co/t/ingest-json-file/175652 "2019-04-06T00:00:38Z")

</div>

Currently I'm trying to ingest the following json file: my\_file.json { "key\_1": { "key\_1-a": "value\_a", "key\_1-b": "value\_b" }, "key\_2": { "key\_2-a": "value\_a", "key\_2-b": "value\_b" } } my\_conf…

---

## [Click on bars in a bar chart and go to another dashboard](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059)

<div class="topic-metadata">

**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 3:08am UTC](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059 "2021-03-04T03:08:23Z")

</div>

Hi all, I have different dashboards named as leave,time.... for each row in the above chart . Is it possible to go to the relevant dashboard when click on a bar? As an example when click on the leave bar it should r…

---

## [OOM | load issues | quick question about mixed patch level in cluster](https://discuss.elastic.co/t/oom-load-issues-quick-question-about-mixed-patch-level-in-cluster/79879)

<div class="topic-metadata">

**Author:** [@AndreCimander](https://discuss.elastic.co/u/AndreCimander)\
**Replies:** 4\
**Last updated:** [March 25, 2017, 5:24pm UTC](https://discuss.elastic.co/t/oom-load-issues-quick-question-about-mixed-patch-level-in-cluster/79879 "2017-03-25T17:24:05Z")

</div>

Hey, just wanted to ask if having a few nodes with a newer patch level within a 5.2.0 cluster (in our case: three 5.2.2 nodes) is a really, REALLY bad idea? We are seeing OOM crashes and crazy high loads before the cra…

---

## [Which character/special character break Elastic Search on index time as well as Search?](https://discuss.elastic.co/t/which-character-special-character-break-elastic-search-on-index-time-as-well-as-search/7042)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 4\
**Last updated:** [March 18, 2012, 5:24pm UTC](https://discuss.elastic.co/t/which-character-special-character-break-elastic-search-on-index-time-as-well-as-search/7042 "2012-03-18T17:24:03Z")

</div>

Hi can anyone provide list of character which breaks Elastic Search on index and search . Thanks

---

## [Set relative time with timestamp](https://discuss.elastic.co/t/set-relative-time-with-timestamp/177152)

<div class="topic-metadata">

**Author:** [@Pierre-Olivier\_Lerou](https://discuss.elastic.co/u/Pierre-Olivier_Lerou)\
**Replies:** 2\
**Last updated:** [April 17, 2019, 1:42pm UTC](https://discuss.elastic.co/t/set-relative-time-with-timestamp/177152 "2019-04-17T13:42:15Z")

</div>

Is there a way to show the timestamp as a relative time to now? So I'm currently monitoring some services and I'm only showing the latest data for each service. I'm currently displaying the timestamp in this format: Apr…

---

## [Some proplem about Elasticsearch service install on windows](https://discuss.elastic.co/t/some-proplem-about-elasticsearch-service-install-on-windows/145149)

<div class="topic-metadata">

**Author:** [@RioChen](https://discuss.elastic.co/u/RioChen)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 1:28pm UTC](https://discuss.elastic.co/t/some-proplem-about-elasticsearch-service-install-on-windows/145149 "2018-08-20T13:28:15Z")

</div>

When I tried to install the elasticsearch as a service, I meet this probloem,and I can't solve it,could anyone know how to do with this.PS C:\\WINDOWS\\system32\> f:PS F:\> cd .\\Elasticsearch\` PS F:\\Elasticsearch\> cd bin P…

[Previous page](https://discuss.elastic.co/top.md?page=1469&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1471&per_page=50&period=all)
