# Top

**URL:** https://discuss.elastic.co/top.md?page=1476&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1477

---

## [Source and Store Level Compression](https://discuss.elastic.co/t/source-and-store-level-compression/11115)

<div class="topic-metadata">

**Author:** [@Mike](https://discuss.elastic.co/u/Mike)\
**Replies:** 1\
**Last updated:** [March 13, 2013, 7:18am UTC](https://discuss.elastic.co/t/source-and-store-level-compression/11115 "2013-03-13T07:18:56Z")

</div>

I'm using Elasticsearch 19.8, and currently I have "\_source" : { "compress" : "true" } in my index mapping. My average document size is have millions of them making my indices gigabytes in size. The documentation s…

---

## [Elastic Agent on windows Unhealthy : 1 error: initialization of reader failed: failed to expand counter (query='\\Process(\*)\\% Processor Time'): The specified object was not found on the computer](https://discuss.elastic.co/t/elastic-agent-on-windows-unhealthy-1-error-initialization-of-reader-failed-failed-to-expand-counter-query-process-processor-time-the-specified-object-was-not-found-on-the-computer/350770)

<div class="topic-metadata">

**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\
**Replies:** 2\
**Last updated:** [January 10, 2024, 6:18pm UTC](https://discuss.elastic.co/t/elastic-agent-on-windows-unhealthy-1-error-initialization-of-reader-failed-failed-to-expand-counter-query-process-processor-time-the-specified-object-was-not-found-on-the-computer/350770 "2024-01-10T18:18:56Z")

</div>

Hello all, Just for the record. One of my Agents (Windows Server) was unhealthy showing this message: 1 error: initialization of reader failed: failed to expand counter (query='\\Process(\*)% Processor Time'): The speci…

---

## [Regression in ES 7.7.0 with es-rally http\_logs Track](https://discuss.elastic.co/t/regression-in-es-7-7-0-with-es-rally-http-logs-track/235954)

<div class="topic-metadata">

**Author:** [@Astro-es](https://discuss.elastic.co/u/Astro-es)\
**Replies:** 6\
**Last updated:** [July 1, 2020, 2:23pm UTC](https://discuss.elastic.co/t/regression-in-es-7-7-0-with-es-rally-http-logs-track/235954 "2020-07-01T14:23:47Z")

</div>

Elasticsearch 7.7.0 shows regression when benchmarked against 7.2.0 for the following challenges in es-rally: Es-Rally Version: 2.0 Track: http\_logs Challenge: append-sorted-no-conflicts Total Regressions: 18 ES Ver…

---

## ["You need permission to create data views" error in new space](https://discuss.elastic.co/t/you-need-permission-to-create-data-views-error-in-new-space/340998)

<div class="topic-metadata">

**Author:** [@jonasjancarik](https://discuss.elastic.co/u/jonasjancarik)\
**Replies:** 2\
**Last updated:** [August 17, 2023, 8:17pm UTC](https://discuss.elastic.co/t/you-need-permission-to-create-data-views-error-in-new-space/340998 "2023-08-17T20:17:33Z")

</div>

I've created a new space in Kibana, but I am unable to access the Analytics features, such as opening dashboards. I'm met with the error message "You need permission to create data views." What's even more confusing is t…

---

## [\[NEW\] Openshift 4 - Fleet and Elastic Agent permission denied](https://discuss.elastic.co/t/new-openshift-4-fleet-and-elastic-agent-permission-denied/330841)

<div class="topic-metadata">

**Author:** [@demon86rm](https://discuss.elastic.co/u/demon86rm)\
**Replies:** 2\
**Last updated:** [April 27, 2023, 3:56pm UTC](https://discuss.elastic.co/t/new-openshift-4-fleet-and-elastic-agent-permission-denied/330841 "2023-04-27T15:56:32Z")

</div>

Hi, I'd like to reopen the old post from splitmessage88 as I'm facing the exact same issue while trying to configure an Elastic Agent on an ARO cluster. I've followed all the existing instructions for deploy the ECK ope…

---

## [Is it possible to acknowledge an alert / watcher?](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540)

<div class="topic-metadata">

**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\
**Replies:** 2\
**Last updated:** [November 2, 2022, 2:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540 "2022-11-02T14:57:30Z")

</div>

Hello, is it possible to acknowledge an alert? Let's imagine that every 10 minutes, an application sends to Elasticsearch an information telling me if there is an error or not : The application send me two kind of data…

---

## [Grok Parsing](https://discuss.elastic.co/t/grok-parsing/309200)

<div class="topic-metadata">

**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 2:03pm UTC](https://discuss.elastic.co/t/grok-parsing/309200 "2022-07-08T14:03:28Z")

</div>

Hi everyone, I am having trouble when I want to parse this Fortigate Log \<189\>devname="FWFG240D" type="traffic" subtype="forward" level="notice" vd="root" eventtime=1565130979 srcip=146.0.138.202 srcport=61103 dstip=192…

---

## [シャードのサイズ上限について](https://discuss.elastic.co/t/topic/306084)

<div class="topic-metadata">

**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 6:22am UTC](https://discuss.elastic.co/t/topic/306084 "2022-06-07T06:22:00Z")

</div>

シャードのサイズ上限についてご教授お願い致します。 インデックス毎のシャード数についてはヒープサイズが30GBの場合、最大600-750と認識しているのですが、シャード単体のサイズについては上限が存在するのでしょうか。 1シャードのサイズは大体30GBになるよう設計することが推奨されているのは承知ですが、送信されるログ量が急増することで1シャードに入っているデータがどのくらいまでなら耐えられるのか教えていただけますと幸いです。

---

## [Kibana not recognizing fleet server in apm example](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806)

<div class="topic-metadata">

**Author:** [@Arnatious](https://discuss.elastic.co/u/Arnatious)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 5:40pm UTC](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806 "2022-04-19T17:40:12Z")

</div>

I'm attempting to spin up a ECK deployment using the fleet-apm config example at cloud-on-k8s/fleet-apm-integration.yaml at main · elastic/cloud-on-k8s · GitHub . The only change I've made is changing the count of Elasti…

---

## [Reverse proxy using nginx to a specific dashboard](https://discuss.elastic.co/t/reverse-proxy-using-nginx-to-a-specific-dashboard/260580)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 2\
**Last updated:** [January 11, 2021, 3:14pm UTC](https://discuss.elastic.co/t/reverse-proxy-using-nginx-to-a-specific-dashboard/260580 "2021-01-11T15:14:18Z")

</div>

Hello, I am a bit green in setting up a reverse proxy using nginx and I was hoping someone would help me with the following: The following is my simple configuration (please suggest more directives if I should include …

---

## [How to get index to refresh automatically, even when not receiving queries?](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929)

<div class="topic-metadata">

**Author:** [@redec](https://discuss.elastic.co/u/redec)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 2:49am UTC](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929 "2020-12-08T02:49:45Z")

</div>

Is there any way to get elasticsearch to automatically refresh an index even if it never gets any queries? The reason I need to do this is I have a process which is constantly running, updating my index with delta updat…

---

## [Audit logs or other way to ensure integrity of the logs](https://discuss.elastic.co/t/audit-logs-or-other-way-to-ensure-integrity-of-the-logs/247332)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 2\
**Last updated:** [September 3, 2020, 8:34am UTC](https://discuss.elastic.co/t/audit-logs-or-other-way-to-ensure-integrity-of-the-logs/247332 "2020-09-03T08:34:29Z")

</div>

Hi all, I am wondering if audit logging like described here (https://www.elastic.co/guide/en/elasticsearch/reference/current/enable-audit-logging.html) is also available for elastic cloud on kubernetes deployments. If s…

---

## [Elasticsearch.yml path config](https://discuss.elastic.co/t/elasticsearch-yml-path-config/202919)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 2\
**Last updated:** [October 16, 2019, 6:36pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-path-config/202919 "2019-10-16T18:36:30Z")

</div>

Im currently building a cluster following hot warm arch. I have 3 master nodes with 2 OS drives as RAID1 20 data nodes Each of them with 2 OS drives as RAID1 and 8 drives, configure as JBOD. Based on server roles. I o…

---

## [Terms performance vs many should clauses](https://discuss.elastic.co/t/terms-performance-vs-many-should-clauses/108371)

<div class="topic-metadata">

**Author:** [@Aharon\_Levine](https://discuss.elastic.co/u/Aharon_Levine)\
**Replies:** 2\
**Last updated:** [November 21, 2017, 4:53pm UTC](https://discuss.elastic.co/t/terms-performance-vs-many-should-clauses/108371 "2017-11-21T16:53:10Z")

</div>

Hi Can someone please help me understand the performance difference between these 2 queries: #1 Query with 'terms' { "query": { "bool": { "filter": \[ { "term": { "service\_id": "12345" } }, { "term": { "nam…

---

## [How can i convert text column in sql to array type field in elasticsearch using Logstash?](https://discuss.elastic.co/t/how-can-i-convert-text-column-in-sql-to-array-type-field-in-elasticsearch-using-logstash/74505)

<div class="topic-metadata">

**Author:** [@Adinarayana\_Murthy](https://discuss.elastic.co/u/Adinarayana_Murthy)\
**Replies:** 2\
**Last updated:** [February 9, 2017, 8:26pm UTC](https://discuss.elastic.co/t/how-can-i-convert-text-column-in-sql-to-array-type-field-in-elasticsearch-using-logstash/74505 "2017-02-09T20:26:20Z")

</div>

Hi I want to convert the SQL column that contains text data to array of strings before storing into the elastics server. eg: Data in SQL with column name as "tags" tags : "Monday Today lastday…

---

## [Puppet-elasticsearch upgrading instance from 2.3.2 to 5.1.2](https://discuss.elastic.co/t/puppet-elasticsearch-upgrading-instance-from-2-3-2-to-5-1-2/72941)

<div class="topic-metadata">

**Author:** [@Joseph.Flanigan](https://discuss.elastic.co/u/Joseph.Flanigan)\
**Replies:** 2\
**Last updated:** [January 27, 2017, 7:07pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-upgrading-instance-from-2-3-2-to-5-1-2/72941 "2017-01-27T19:07:23Z")

</div>

I have a large number of elasticsearch nodes with version 2.3.2 installed and puppetized on them. I was hoping this week to start the process of upgrading some of the clusters containing these nodes to some version of El…

---

## [Detect product names within search query text?](https://discuss.elastic.co/t/detect-product-names-within-search-query-text/50645)

<div class="topic-metadata">

**Author:** [@Pro-Jules](https://discuss.elastic.co/u/Pro-Jules)\
**Replies:** 2\
**Last updated:** [May 28, 2016, 9:07am UTC](https://discuss.elastic.co/t/detect-product-names-within-search-query-text/50645 "2016-05-28T09:07:21Z")

</div>

At present using our Sphinx / fultext search on our discussion forum only recognises and flags up to us key word matches of product names or alias / nicknames in a (separate database) if they are at the front of the sear…

---

## [Scroll java API timeout setting seemingly no effact](https://discuss.elastic.co/t/scroll-java-api-timeout-setting-seemingly-no-effact/50835)

<div class="topic-metadata">

**Author:** [@MarvelAgent](https://discuss.elastic.co/u/MarvelAgent)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 9:43am UTC](https://discuss.elastic.co/t/scroll-java-api-timeout-setting-seemingly-no-effact/50835 "2016-05-25T09:43:46Z")

</div>

Hi, I wrote a program get data use the java scroll API, when set timeout equals 1 second, it seems elasticsearch used about 60 seconds to timeout. I used elasticsearch2.3.1. here is my code, any suggestion? thanks @T…

---

## [Logstash can not output redis data to ElasticSearch](https://discuss.elastic.co/t/logstash-can-not-output-redis-data-to-elasticsearch/38932)

<div class="topic-metadata">

**Author:** [@tctr715](https://discuss.elastic.co/u/tctr715)\
**Replies:** 2\
**Last updated:** [January 12, 2016, 12:13pm UTC](https://discuss.elastic.co/t/logstash-can-not-output-redis-data-to-elasticsearch/38932 "2016-01-12T12:13:40Z")

</div>

my logstash.conf: input { redis { host =\> "10.57.147.83" port =\> "6379" key =\> "logstash" data\_type =\> "list" codec =\> "json" type =\> "logstash-redis-demo" tags =\> \["logstashdemo"\] } } …

---

## [Index default sorting](https://discuss.elastic.co/t/index-default-sorting/32154)

<div class="topic-metadata">

**Author:** [@xpepermint](https://discuss.elastic.co/u/xpepermint)\
**Replies:** 2\
**Last updated:** [October 18, 2015, 10:29pm UTC](https://discuss.elastic.co/t/index-default-sorting/32154 "2015-10-18T22:29:59Z")

</div>

Hey. I need to use the scroll & scan command for retrieving a large set of data. Is there a way to set the default index order in which the documents would be sorted when indexing? Thus, the index would be a list of sort…

---

## [Return popular docs if no hits](https://discuss.elastic.co/t/return-popular-docs-if-no-hits/25073)

<div class="topic-metadata">

**Author:** [@pferrel](https://discuss.elastic.co/u/pferrel)\
**Replies:** 2\
**Last updated:** [July 7, 2015, 7:34pm UTC](https://discuss.elastic.co/t/return-popular-docs-if-no-hits/25073 "2015-07-07T19:34:42Z")

</div>

I'd like my query to return popular documents if the rest of the query has no hits. I'm periodically updating a double value for every doc, with it's popularity magnitude so the "popularity" field is always available.…

---

## [ElasticSearch Mapping - Need to stop indexing/analyzing a field](https://discuss.elastic.co/t/elasticsearch-mapping-need-to-stop-indexing-analyzing-a-field/13167)

<div class="topic-metadata">

**Author:** [@karan](https://discuss.elastic.co/u/karan)\
**Replies:** 2\
**Last updated:** [August 12, 2013, 7:32am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-need-to-stop-indexing-analyzing-a-field/13167 "2013-08-12T07:32:00Z")

</div>

Hi Everyone, I needed some help please. Each document json has a many fields. One particular field called "hotlinks" comprises of many internal dynamic object fields. Doc1: { hotlinks : { 112222:{....} , 33…

---

## [Errors in Kibana: plugins.securitySolution.endpoint:metadata-check-transforms-task:0.0.1](https://discuss.elastic.co/t/errors-in-kibana-plugins-securitysolution-endpoint0-0-1/314134)

<div class="topic-metadata">

**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\
**Replies:** 1\
**Last updated:** [September 26, 2022, 2:02pm UTC](https://discuss.elastic.co/t/errors-in-kibana-plugins-securitysolution-endpoint0-0-1/314134 "2022-09-26T14:02:46Z")

</div>

hi all! in kibana.log I see a lot of errors like \[2022-09-07T03:58:32.117+03:00\]\[WARN \]\[plugins.securitySolution.endpoint:metadata-check-transforms-task:0.0.1\] transform endpoint.metadata\_current-default-8.3.0 has fail…

---

## [Elastic Seach: master not discovered or elected yet, an election requires at least 2 nodes with ids from](https://discuss.elastic.co/t/elastic-seach-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/281564)

<div class="topic-metadata">

**Author:** [@michelefa1988](https://discuss.elastic.co/u/michelefa1988)\
**Replies:** 1\
**Last updated:** [August 17, 2021, 12:57am UTC](https://discuss.elastic.co/t/elastic-seach-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/281564 "2021-08-17T00:57:44Z")

</div>

Hello, Elastic search was running 7.10.1 was running successfully (via helm chart, however recently I got the following error The configuration is pretty standard (3 nodes 3x masters I would like to know what the corr…

---

## [Problem in parsing json string](https://discuss.elastic.co/t/problem-in-parsing-json-string/238901)

<div class="topic-metadata">

**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 6:45pm UTC](https://discuss.elastic.co/t/problem-in-parsing-json-string/238901 "2020-06-26T18:45:44Z")

</div>

This is how I parse json in filter json { source =\> "json\_content" target =\> "content" remove\_field=\>\["json\_content"\] } But I got the following error "type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse…

---

## [Java client can't connect when using a virtual IP](https://discuss.elastic.co/t/java-client-cant-connect-when-using-a-virtual-ip/95587)

<div class="topic-metadata">

**Author:** [@pshroads](https://discuss.elastic.co/u/pshroads)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 7:28am UTC](https://discuss.elastic.co/t/java-client-cant-connect-when-using-a-virtual-ip/95587 "2017-08-04T07:28:32Z")

</div>

We are having issues with the java client connecting to elasticsearch through a virtual IP. We have the vip set up on our F5 with all the nodes of the cluster in the vip. We can connect to the cluster using the vip an…

---

## [How to serialize elastic4s queries for reuse?](https://discuss.elastic.co/t/how-to-serialize-elastic4s-queries-for-reuse/27220)

<div class="topic-metadata">

**Author:** [@sergioasantiago](https://discuss.elastic.co/u/sergioasantiago)\
**Replies:** 1\
**Last updated:** [August 12, 2015, 9:01pm UTC](https://discuss.elastic.co/t/how-to-serialize-elastic4s-queries-for-reuse/27220 "2015-08-12T21:01:58Z")

</div>

I'm using elastic4s to query elastic search, and now I need to cache this query to be used later for pagination purposes. The query built process is a heavy calculation that is why I need the final query it self save i…

---

## [Is it possible to visualize different time series based on 2 fields on kibana](https://discuss.elastic.co/t/is-it-possible-to-visualize-different-time-series-based-on-2-fields-on-kibana/330035)

<div class="topic-metadata">

**Author:** [@FTOR](https://discuss.elastic.co/u/FTOR)\
**Replies:** 4\
**Last updated:** [April 18, 2023, 11:41am UTC](https://discuss.elastic.co/t/is-it-possible-to-visualize-different-time-series-based-on-2-fields-on-kibana/330035 "2023-04-18T11:41:37Z")

</div>

Hello, I would like to visualise different time series based on 2 fields (field1 and field2). I have a field named numr\_Ficher that could have the values : 2235/2234/2230.. And another field named operateur that could …

---

## [Kibana v7.2.0 plugin yarn start failed](https://discuss.elastic.co/t/kibana-v7-2-0-plugin-yarn-start-failed/204015)

<div class="topic-metadata">

**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\
**Replies:** 4\
**Last updated:** [October 18, 2019, 6:32am UTC](https://discuss.elastic.co/t/kibana-v7-2-0-plugin-yarn-start-failed/204015 "2019-10-18T06:32:42Z")

</div>

Hi, I follow the instruction of node scripts/generate\_plugin test script,and successfully create the plugin template project. Then I move to the plugins/test folder and run yarn start,and It failed the message as s…

---

## [Migrating geo\_shape data from 6.5.3 to 6.8.1: mapper \[xxx\] of different type, current\_type \[geo\_shape\], merged\_type \[geo\_shape\]](https://discuss.elastic.co/t/migrating-geo-shape-data-from-6-5-3-to-6-8-1-mapper-xxx-of-different-type-current-type-geo-shape-merged-type-geo-shape/200836)

<div class="topic-metadata">

**Author:** [@edumucelli](https://discuss.elastic.co/u/edumucelli)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 11:54am UTC](https://discuss.elastic.co/t/migrating-geo-shape-data-from-6-5-3-to-6-8-1-mapper-xxx-of-different-type-current-type-geo-shape-merged-type-geo-shape/200836 "2019-09-24T11:54:40Z")

</div>

When migrating documents from ES 6.5.3 to 6.8.1 we are facing the following issue with the geo\_shape type. By querying an indexed document from ES 6.5.3 with the following query on ES 6.8.1 { "size": 2000, "query": …

---

## [Coordiante Map - Circle color function of the timestamp](https://discuss.elastic.co/t/coordiante-map-circle-color-function-of-the-timestamp/116222)

<div class="topic-metadata">

**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\
**Replies:** 4\
**Last updated:** [January 23, 2018, 1:30pm UTC](https://discuss.elastic.co/t/coordiante-map-circle-color-function-of-the-timestamp/116222 "2018-01-23T13:30:01Z")

</div>

Dear all, How to correlate circle colour with time (or any other field) in the coordinate map? For example the older the timestamp of a geopoint is, the clearer is the colour. So you can retrace visually a path from its…

---

## [Use Time Picker parameters in scripts](https://discuss.elastic.co/t/use-time-picker-parameters-in-scripts/103252)

<div class="topic-metadata">

**Author:** [@nvitucci](https://discuss.elastic.co/u/nvitucci)\
**Replies:** 4\
**Last updated:** [October 9, 2017, 11:48pm UTC](https://discuss.elastic.co/t/use-time-picker-parameters-in-scripts/103252 "2017-10-09T23:48:39Z")

</div>

Is it possible to access the Time Picker parameters (i.e. start time and end time) from a Painless script in a visualization? It would be very useful to define ranges and filters dynamically based on the "main" time fiel…

---

## [Help with River](https://discuss.elastic.co/t/help-with-river/26349)

<div class="topic-metadata">

**Author:** [@fabioebner](https://discuss.elastic.co/u/fabioebner)\
**Replies:** 4\
**Last updated:** [July 27, 2015, 9:07pm UTC](https://discuss.elastic.co/t/help-with-river/26349 "2015-07-27T21:07:57Z")

</div>

Anyone know about this error: \[imoveis\_protocolo\_titulo\], type \[imoveisprotocolotitulotype\], id \[184114\], message \[EsRejectedExecutionException\[rejected execution (queue capacity 50) on org.elasticsearch.action.suppor…

---

## [Sorting cache?](https://discuss.elastic.co/t/sorting-cache/7073)

<div class="topic-metadata">

**Author:** [@marcus](https://discuss.elastic.co/u/marcus)\
**Replies:** 4\
**Last updated:** [March 22, 2012, 1:24pm UTC](https://discuss.elastic.co/t/sorting-cache/7073 "2012-03-22T13:24:17Z")

</div>

Hi, A question that is related to my question here: http://elasticsearch-users.115913.n3.nabble.com/Sorting-tables-tt3839391.html I'm doing a really slow MVEL sort script and need to solve that in some way. I…

---

## [Remove garbage from message end](https://discuss.elastic.co/t/remove-garbage-from-message-end/263916)

<div class="topic-metadata">

**Author:** [@John\_Smith](https://discuss.elastic.co/u/John_Smith)\
**Replies:** 3\
**Last updated:** [February 10, 2021, 11:19pm UTC](https://discuss.elastic.co/t/remove-garbage-from-message-end/263916 "2021-02-10T23:19:13Z")

</div>

Hello, I've following message send by filebeat: "message" =\> "{"country-code":"GB","payload":"{\\"access\_token\\":\\"\*\*\*\*\*\*\*\*\*\*\\",\\"token\_type\\":\\"Bearer\\",}","status":"ok","status-code":200,"error":"","content-type":"app…

---

## [Logstash randomly skipping files](https://discuss.elastic.co/t/logstash-randomly-skipping-files/262228)

<div class="topic-metadata">

**Author:** [@Rutger2000](https://discuss.elastic.co/u/Rutger2000)\
**Replies:** 3\
**Last updated:** [January 27, 2021, 4:25pm UTC](https://discuss.elastic.co/t/logstash-randomly-skipping-files/262228 "2021-01-27T16:25:38Z")

</div>

I'm using logstash to ingest data into Elasticsearch and view it in Kibana. Every hour I receive multiple files in a folder which then are processed by logstash. We notice that logstash sometimes skips a file, as far as …

---

## [Map not filtering based on time](https://discuss.elastic.co/t/map-not-filtering-based-on-time/255503)

<div class="topic-metadata">

**Author:** [@Saurabh\_Anand](https://discuss.elastic.co/u/Saurabh_Anand)\
**Replies:** 3\
**Last updated:** [November 17, 2020, 5:25am UTC](https://discuss.elastic.co/t/map-not-filtering-based-on-time/255503 "2020-11-17T05:25:13Z")

</div>

I created a dashboard in which I inserted a Map in it. To restrict user from seeing data I saved Map with a filter such that Time is between now to 3 months before. But when I add this Map in my dashboard the filter is n…

---

## [How to get only indices list which I have permission](https://discuss.elastic.co/t/how-to-get-only-indices-list-which-i-have-permission/238660)

<div class="topic-metadata">

**Author:** [@Hagun](https://discuss.elastic.co/u/Hagun)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 6:01am UTC](https://discuss.elastic.co/t/how-to-get-only-indices-list-which-i-have-permission/238660 "2020-06-26T06:01:11Z")

</div>

If I have A and B users in my ES. A can access only a,b,c,d indices. And B can access only e,f,g,h. In this situation, how can A user get indices list 'a, b, c, d' using ES APi? If I use \_cat/indices, it returns 403.

---

## [Kibana dashboards - visualizations slower](https://discuss.elastic.co/t/kibana-dashboards-visualizations-slower/168451)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 11:54pm UTC](https://discuss.elastic.co/t/kibana-dashboards-visualizations-slower/168451 "2019-02-19T23:54:45Z")

</div>

When I add more data to my elasticsearch, I notice that Kibana dashboards are slower. What can I do to make kibana faster? Thank you. Francisca

---

## [Encrypting Sensitive Data in Watcher - How?](https://discuss.elastic.co/t/encrypting-sensitive-data-in-watcher-how/135790)

<div class="topic-metadata">

**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\
**Replies:** 3\
**Last updated:** [June 25, 2018, 8:45am UTC](https://discuss.elastic.co/t/encrypting-sensitive-data-in-watcher-how/135790 "2018-06-25T08:45:44Z")

</div>

This document talks about encrypting sensitive data in watcher. It only covers the configuration of the cluster but says nothing about how to actually encrypt the data or identify which data is sensitive. https://www.el…

---

## [Last location on map](https://discuss.elastic.co/t/last-location-on-map/108935)

<div class="topic-metadata">

**Author:** [@wkpv68](https://discuss.elastic.co/u/wkpv68)\
**Replies:** 3\
**Last updated:** [November 25, 2017, 3:59am UTC](https://discuss.elastic.co/t/last-location-on-map/108935 "2017-11-25T03:59:35Z")

</div>

Hi, I received every X sec the gps coordinates. I'm trying yo create a coordinate map that show only the last location. I tried several options but the map always show also the old points. Is there a option to show o…

---

## [MIgration of ELK Platform to Platform](https://discuss.elastic.co/t/migration-of-elk-platform-to-platform/99917)

<div class="topic-metadata">

**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\
**Replies:** 3\
**Last updated:** [September 9, 2017, 3:43pm UTC](https://discuss.elastic.co/t/migration-of-elk-platform-to-platform/99917 "2017-09-09T15:43:55Z")

</div>

HI , Could you please help me out how do i Migrate ELK stack from one platform to another platform. (i.e one O.S to another O.S). Thanks, Jagan

---

## [Kibana 5.5.1 - filter by timestamp disables time picker functionality](https://discuss.elastic.co/t/kibana-5-5-1-filter-by-timestamp-disables-time-picker-functionality/94835)

<div class="topic-metadata">

**Author:** [@goofy](https://discuss.elastic.co/u/goofy)\
**Replies:** 3\
**Last updated:** [July 28, 2017, 7:35pm UTC](https://discuss.elastic.co/t/kibana-5-5-1-filter-by-timestamp-disables-time-picker-functionality/94835 "2017-07-28T19:35:53Z")

</div>

Hi guys, I'm using kibana 5.5.1 and worked with kibana 3 before. I don't understand following behaviour in kibana 5. My Steps: -\> Discover -\> Add a filter -\> @timestamp is between -\> from: now-15m, to: now -\> Save …

---

## [Kuromoji analyzer default character/token filters](https://discuss.elastic.co/t/kuromoji-analyzer-default-character-token-filters/67976)

<div class="topic-metadata">

**Author:** [@Luke3113](https://discuss.elastic.co/u/Luke3113)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 8:03am UTC](https://discuss.elastic.co/t/kuromoji-analyzer-default-character-token-filters/67976 "2016-12-05T08:03:08Z")

</div>

Hi I'm using Elasticsearch 5.0.1 with the Kuromoji plugin. Until now I've merely used its default configuration by using the following mapping: "analyzer": "kuromoji" However as stated in the docs (Kuromoji analyzer)…

---

## [Switching from Logstash to Beats](https://discuss.elastic.co/t/switching-from-logstash-to-beats/39957)

<div class="topic-metadata">

**Author:** [@Stuart\_Cracraft](https://discuss.elastic.co/u/Stuart_Cracraft)\
**Replies:** 3\
**Last updated:** [January 24, 2016, 4:10am UTC](https://discuss.elastic.co/t/switching-from-logstash-to-beats/39957 "2016-01-24T04:10:54Z")

</div>

I currently have Logstash 1.5.5 shipper installed on all my boxes. For the most part, no issues. They all go into a largish Elasticsearch cluster and are fronted by Kibana. No problem collecting a bunch of files with log…

---

## [ElasticSearch gradle plugin](https://discuss.elastic.co/t/elasticsearch-gradle-plugin/1111)

<div class="topic-metadata">

**Author:** [@amirkibbar](https://discuss.elastic.co/u/amirkibbar)\
**Replies:** 0\
**Last updated:** [May 21, 2015, 4:05pm UTC](https://discuss.elastic.co/t/elasticsearch-gradle-plugin/1111 "2015-05-21T16:05:17Z")

</div>

Hi, I've written a gradle plugin that can install, stop and start ElasticSearch. The purpose of this plugin is to help integration testing with ElasticSearch. To learn how to use this plugin please see: https://github.…

---

## [How to change memory usage unit](https://discuss.elastic.co/t/how-to-change-memory-usage-unit/180158)

<div class="topic-metadata">

**Author:** [@Kalyan\_MB](https://discuss.elastic.co/u/Kalyan_MB)\
**Replies:** 5\
**Last updated:** [May 10, 2019, 5:09am UTC](https://discuss.elastic.co/t/how-to-change-memory-usage-unit/180158 "2019-05-10T05:09:08Z")

</div>

Hi, i have installed metric beat in few clients where i am running some load and integrated it to ELK stack, i can see the dashboard in kibana for the same. can any one help with how to change the unit of "Processes B…

---

## [How to aggregate two events from log lines with no common pattern](https://discuss.elastic.co/t/how-to-aggregate-two-events-from-log-lines-with-no-common-pattern/167939)

<div class="topic-metadata">

**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\
**Replies:** 5\
**Last updated:** [February 22, 2019, 2:56pm UTC](https://discuss.elastic.co/t/how-to-aggregate-two-events-from-log-lines-with-no-common-pattern/167939 "2019-02-22T14:56:31Z")

</div>

Hi I am reading the documentation on the Aggregate Filter, but all examples assume there is something common between the lines (events) to be aggregated. Usually, that common entity is also used as task\_id. But my case…

---

## [Elastic server not running after server reboot. i don't know why](https://discuss.elastic.co/t/elastic-server-not-running-after-server-reboot-i-dont-know-why/156798)

<div class="topic-metadata">

**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\
**Replies:** 5\
**Last updated:** [November 15, 2018, 7:37am UTC](https://discuss.elastic.co/t/elastic-server-not-running-after-server-reboot-i-dont-know-why/156798 "2018-11-15T07:37:48Z")

</div>

\*\*elastic \*\* \[2018-11-15T16:04:13,149\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[cloudoc1\] All shards failed for phase: \[query\] \[2018-11-15T16:04:13,180\]\[WARN \]\[r.suppressed \] path: /.kibana/\_search, params:…

---

## [Select Operation Holds Insert /Updates reflection](https://discuss.elastic.co/t/select-operation-holds-insert-updates-reflection/113209)

<div class="topic-metadata">

**Author:** [@itsmedoss](https://discuss.elastic.co/u/itsmedoss)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 8:00am UTC](https://discuss.elastic.co/t/select-operation-holds-insert-updates-reflection/113209 "2018-01-05T08:00:55Z")

</div>

We are looking out replacement for our existing SPHINX cluster for search, we are evaluating SOLR & Elasticsearch. We need real time index and fast response for selects. For our POC we are using 2 cent OS (64 bit) boxes …

[Previous page](https://discuss.elastic.co/top.md?page=1475&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1477&per_page=50&period=all)
