# Top

**URL:** https://discuss.elastic.co/top.md?page=1478&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1479

---

## [How to Use range in Y axis in kibana](https://discuss.elastic.co/t/how-to-use-range-in-y-axis-in-kibana/110020)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/how-to-use-range-in-y-axis-in-kibana/110020 "2017-12-05T13:14:39Z")

</div>

Can this be achieved through Json input . if yes, let me know how.? basically i want to specify count between 100 to 500... if i code {"min\_doc\_count": 100 } in jason input, it shows all the count above 100. how to p…

---

## [Facets : limit the terms values to a list?](https://discuss.elastic.co/t/facets-limit-the-terms-values-to-a-list/6208)

<div class="topic-metadata">

**Author:** [@Sebastien\_Charrier](https://discuss.elastic.co/u/Sebastien_Charrier)\
**Replies:** 4\
**Last updated:** [January 2, 2012, 5:40pm UTC](https://discuss.elastic.co/t/facets-limit-the-terms-values-to-a-list/6208 "2012-01-02T17:40:40Z")

</div>

Hi, I'm actually working on a faceted search, and I can't find a good solution to a problem (in the docs nor with my best friend Google ;)). One of the facets I have to manage has to be hierarchical (it's a categ…

---

## [Any way to give role based access to kibana indices](https://discuss.elastic.co/t/any-way-to-give-role-based-access-to-kibana-indices/104092)

<div class="topic-metadata">

**Author:** [@Aparna\_Thomas](https://discuss.elastic.co/u/Aparna_Thomas)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 10:21am UTC](https://discuss.elastic.co/t/any-way-to-give-role-based-access-to-kibana-indices/104092 "2017-10-17T10:21:07Z")

</div>

Is there any way to give role based access (like admin,user1,user2 etc.) to different kibana indices other than using X-pack or Shield plugin

---

## [\[SOLVED\] Deleted index pattern, dashboards not working](https://discuss.elastic.co/t/solved-deleted-index-pattern-dashboards-not-working/197641)

<div class="topic-metadata">

**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\
**Replies:** 1\
**Last updated:** [September 2, 2019, 3:58am UTC](https://discuss.elastic.co/t/solved-deleted-index-pattern-dashboards-not-working/197641 "2019-09-02T03:58:44Z")

</div>

Hi, I accidently deleted an index pattern, and dashboards relying on it no longer load. Using ELK 5.6.16 I tried Get index pattern ID? but I get 0 results: GET .kibana/\_search { "\_source": \["index-pattern.title"\], …

---

## [Please activate synonyms and stopwords list upload](https://discuss.elastic.co/t/please-activate-synonyms-and-stopwords-list-upload/88124)

<div class="topic-metadata">

**Author:** [@Liudmyla\_Burkan](https://discuss.elastic.co/u/Liudmyla_Burkan)\
**Replies:** 1\
**Last updated:** [June 6, 2017, 8:58am UTC](https://discuss.elastic.co/t/please-activate-synonyms-and-stopwords-list-upload/88124 "2017-06-06T08:58:18Z")

</div>

Hi, i would like to upload Wordnet synonyms file and custom file that contains a list of stopwords. Could you please activate these feature for my cluster? Cluster ID: baaed5

---

## [How to get smaller intervals on x axis in bar visualization?](https://discuss.elastic.co/t/how-to-get-smaller-intervals-on-x-axis-in-bar-visualization/265932)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 5:12pm UTC](https://discuss.elastic.co/t/how-to-get-smaller-intervals-on-x-axis-in-bar-visualization/265932 "2021-03-02T17:12:44Z")

</div>

Hi, Just upgraded Kibana to 7.11 and started using Lens to create visualizations. I'm creating a bar visualization using the interval function on the x axis. I would like to set a smaller interval than I can get using t…

---

## [Kibana plugin search elastic](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504)

<div class="topic-metadata">

**Author:** [@omerf](https://discuss.elastic.co/u/omerf)\
**Replies:** 5\
**Last updated:** [November 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504 "2020-11-18T14:55:10Z")

</div>

I am creating a plugin in Kibana 7.0.1, to search through api, with an http request through server.route. In the new kibana plugins I can see: \<navigation.ui.TopNavMenu appName={PLUGIN\_ID} showSearchBar={true} useDe…

---

## [Convert date to 2019-09-11T15:47:00Z from 11/09/2019 15:47](https://discuss.elastic.co/t/convert-date-to-2019-09-11t1500z-from-11-09-2019-15-47/200826)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 5\
**Last updated:** [September 25, 2019, 2:25am UTC](https://discuss.elastic.co/t/convert-date-to-2019-09-11t1500z-from-11-09-2019-15-47/200826 "2019-09-25T02:25:46Z")

</div>

Hi all can someone help me how to convert the column value in csv from the date 11/09/2019 15:47 to 2019-09-11T15:47:00Z format Thanks

---

## [Number of replicas](https://discuss.elastic.co/t/number-of-replicas/9455)

<div class="topic-metadata">

**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\
**Replies:** 5\
**Last updated:** [October 25, 2012, 6:21pm UTC](https://discuss.elastic.co/t/number-of-replicas/9455 "2012-10-25T18:21:14Z")

</div>

Hi, I have the following situation: - 3 nodes - 1 index with 60 shards and 2 replicas - NO data yet After starting all nodes I have all 180 shards as 'unassigned' in /\_cluster/health. After changing the index s…

---

## [Watcherで特定のフィールドの値ごとに集計して件数超過で通知する方法](https://discuss.elastic.co/t/watcher/282658)

<div class="topic-metadata">

**Author:** [@a-naga](https://discuss.elastic.co/u/a-naga)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 6:12am UTC](https://discuss.elastic.co/t/watcher/282658 "2021-09-14T06:12:24Z")

</div>

ElasticsearchにIPフィールドを含むログデータがindexされていく状態で、 以下のようなWatcher定義を検討しています。 過去10分間のログを対象に、IPフィールドのIPアドレス毎に同一IPアドレスの件数を集計し、 5件以上出ている全てのIPアドレスのドキュメント内容をメールで通知する Watcherでこのような条件が可能かどうか、良い方法があればご教示いただきたいです。

---

## [Filebeat stop working after upgrade from 7.6.0 to 7.7.1 (kubernetes)](https://discuss.elastic.co/t/filebeat-stop-working-after-upgrade-from-7-6-0-to-7-7-1-kubernetes/238190)

<div class="topic-metadata">

**Author:** [@Johanes\_Anggara](https://discuss.elastic.co/u/Johanes_Anggara)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 9:23am UTC](https://discuss.elastic.co/t/filebeat-stop-working-after-upgrade-from-7-6-0-to-7-7-1-kubernetes/238190 "2020-06-23T09:23:42Z")

</div>

I have filebeat running as daemonset in k8s cluster, while apps storing file which mounted in host disk, this path also mounted by filebeat containers. Previously on 7.6 its working but after upgrading to 7.7.1 its stop…

---

## [Interested to contribute to EUI for GSoC 2021](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2021/234394)

<div class="topic-metadata">

**Author:** [@nnoukastephen](https://discuss.elastic.co/u/nnoukastephen)\
**Replies:** 2\
**Last updated:** [May 26, 2020, 11:44pm UTC](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2021/234394 "2020-05-26T23:44:46Z")

</div>

Hi I am N’nouka Stephen a student of the university of Buea, Cameroon. I am interested in open source. I found your work interesting when going through the organizations on the gsoc website. I just want to begin partici…

---

## [AutoCompletion for Hindi (Indian Language)](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247)

<div class="topic-metadata">

**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 9:54am UTC](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247 "2020-03-20T09:54:04Z")

</div>

Hello, I am trying to use the Edge Ngram Tokeniser for auto complete search. Below is my index definition: PUT hindi\_test { "settings": { "analysis": { "filter": { "hindi\_stop": { "t…

---

## [Time Series Visual Builder - Inverted Y-Axis](https://discuss.elastic.co/t/time-series-visual-builder-inverted-y-axis/212138)

<div class="topic-metadata">

**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\
**Replies:** 2\
**Last updated:** [December 18, 2019, 6:12am UTC](https://discuss.elastic.co/t/time-series-visual-builder-inverted-y-axis/212138 "2019-12-18T06:12:03Z")

</div>

Hey there, so I'm trying to build an area chart in Kibana 6.8 that visualizes the document count of a specific filter. My plan: We have firewall logs and I want an area chart. One area is based on filtering specific s…

---

## [Dashoboard user can not see the data](https://discuss.elastic.co/t/dashoboard-user-can-not-see-the-data/174306)

<div class="topic-metadata">

**Author:** [@nitin.saloodo](https://discuss.elastic.co/u/nitin.saloodo)\
**Replies:** 2\
**Last updated:** [March 28, 2019, 12:54pm UTC](https://discuss.elastic.co/t/dashoboard-user-can-not-see-the-data/174306 "2019-03-28T12:54:16Z")

</div>

We have created the user with dashboard only permission to specific index pattern. but there is no data shown to user. I tried following steps under https://discuss.elastic.co/t/dashboard-user-cant-see-any-data/122461 …

---

## [CSV filter parsing errors](https://discuss.elastic.co/t/csv-filter-parsing-errors/120789)

<div class="topic-metadata">

**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 6:04am UTC](https://discuss.elastic.co/t/csv-filter-parsing-errors/120789 "2018-02-22T06:04:59Z")

</div>

Hi I am getting the below errors while parsing using CSV filter \[2018-02-21T08:30:48,657\]\[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"filename", :source=\>\["CNT415653", "CNT415653"\], :exception=\>#\<NoMe…

---

## [Can't get the Upgrade Assistant to work](https://discuss.elastic.co/t/cant-get-the-upgrade-assistant-to-work/114269)

<div class="topic-metadata">

**Author:** [@Rok](https://discuss.elastic.co/u/Rok)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 11:25am UTC](https://discuss.elastic.co/t/cant-get-the-upgrade-assistant-to-work/114269 "2018-01-05T11:25:57Z")

</div>

Hey everyone, I have ELK stack version 6.1.1 installed with corresponding x-pack plugin, but there is no Upgrade Assistant in Kibana\>Management. The only thing I see is license management under elasticsearch and kibana …

---

## [Problem installing x-pack on Centos 7 virtual box vm](https://discuss.elastic.co/t/problem-installing-x-pack-on-centos-7-virtual-box-vm/109165)

<div class="topic-metadata">

**Author:** [@echeadle](https://discuss.elastic.co/u/echeadle)\
**Replies:** 2\
**Last updated:** [November 27, 2017, 4:31pm UTC](https://discuss.elastic.co/t/problem-installing-x-pack-on-centos-7-virtual-box-vm/109165 "2017-11-27T16:31:19Z")

</div>

I have elasticsearch 6 and kibana running on a test machine. It is a virtualbox vm running Centos 7. Everything runs fine until I run the kibana-plugin command to install x-pack. It runs fine until it gets to: Optimiz…

---

## [Watcher, action transform, Help getting "value" from this response](https://discuss.elastic.co/t/watcher-action-transform-help-getting-value-from-this-response/99163)

<div class="topic-metadata">

**Author:** [@Ross\_C](https://discuss.elastic.co/u/Ross_C)\
**Replies:** 2\
**Last updated:** [September 8, 2017, 3:32pm UTC](https://discuss.elastic.co/t/watcher-action-transform-help-getting-value-from-this-response/99163 "2017-09-08T15:32:35Z")

</div>

I want to alert on error\_percent \> 9, but I don’t know how to reference value under the field in the response. transactioncount, errorcount, error\_percent Can someone help? Below is the response from my aggregation …

---

## [UCS-2LE encoding not harvested](https://discuss.elastic.co/t/ucs-2le-encoding-not-harvested/97081)

<div class="topic-metadata">

**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\
**Replies:** 2\
**Last updated:** [August 16, 2017, 7:10am UTC](https://discuss.elastic.co/t/ucs-2le-encoding-not-harvested/97081 "2017-08-16T07:10:53Z")

</div>

Hi, I have a log file with with ucs-2 little endian encoding. For some reason these log file are not harversted by Filebeat if no encoding is configured. When I have tried to configure the follwoing encoding entries n…

---

## [Best way to measure performance and efficiency](https://discuss.elastic.co/t/best-way-to-measure-performance-and-efficiency/80439)

<div class="topic-metadata">

**Author:** [@parrot](https://discuss.elastic.co/u/parrot)\
**Replies:** 2\
**Last updated:** [March 29, 2017, 8:45am UTC](https://discuss.elastic.co/t/best-way-to-measure-performance-and-efficiency/80439 "2017-03-29T08:45:46Z")

</div>

Hello, Because im parsing big amount of logs, i want to reduce the time it takes to parse them with logstash. Most of the configuration im using grok, so i want to compare it in different ways on different log files s…

---

## [Timelion -1M offeset producing unexpected results](https://discuss.elastic.co/t/timelion-1m-offeset-producing-unexpected-results/68500)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 2\
**Last updated:** [December 14, 2016, 1:45am UTC](https://discuss.elastic.co/t/timelion-1m-offeset-producing-unexpected-results/68500 "2016-12-14T01:45:11Z")

</div>

Hi, What does -1M offset in Timelion translate to? Is it aware of calendar months or does it just translate to the number of days in the current month? I have the Kibana time filter set to last month and the metric is …

---

## [Save and Share capability for Graph](https://discuss.elastic.co/t/save-and-share-capability-for-graph/56840)

<div class="topic-metadata">

**Author:** [@geethaRam](https://discuss.elastic.co/u/geethaRam)\
**Replies:** 2\
**Last updated:** [August 4, 2016, 7:49am UTC](https://discuss.elastic.co/t/save-and-share-capability-for-graph/56840 "2016-08-04T07:49:21Z")

</div>

Just started to use the ELK stack for evaluating graph for our use-case. Overall able to feed the data into ES through Logstash from CSV input and visualize in graph. Couple of concerns: There is no Save capability in …

---

## [Can't run python script on my plugin](https://discuss.elastic.co/t/cant-run-python-script-on-my-plugin/49131)

<div class="topic-metadata">

**Author:** [@pkunico](https://discuss.elastic.co/u/pkunico)\
**Replies:** 2\
**Last updated:** [May 6, 2016, 1:20am UTC](https://discuss.elastic.co/t/cant-run-python-script-on-my-plugin/49131 "2016-05-06T01:20:23Z")

</div>

I have developed a plugin to manage user info on elasticsearch,and need to call a python script,but when require('python-shell'), kibana just can't start up and report the error: Module not found: Error: Cannot resolv…

---

## [Port mirror client\_ip perseverance](https://discuss.elastic.co/t/port-mirror-client-ip-perseverance/47923)

<div class="topic-metadata">

**Author:** [@Rachit\_Puri](https://discuss.elastic.co/u/Rachit_Puri)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 5:21am UTC](https://discuss.elastic.co/t/port-mirror-client-ip-perseverance/47923 "2016-04-21T05:21:28Z")

</div>

Hi, If, i do port mirroring and then dump logs to packetbeat. Will i, be able to preserbe the client\_ip of the mirrored port. Wanted to know about the outcome before trying it on my own.

---

## [How to achieve search relevance?](https://discuss.elastic.co/t/how-to-achieve-search-relevance/31306)

<div class="topic-metadata">

**Author:** [@Navaneeth\_K\_N](https://discuss.elastic.co/u/Navaneeth_K_N)\
**Replies:** 2\
**Last updated:** [September 29, 2015, 9:42am UTC](https://discuss.elastic.co/t/how-to-achieve-search-relevance/31306 "2015-09-29T09:42:08Z")

</div>

I am using Elasticsearch to index products from Amazon. Currently the index holds 30Million products. Each product is associated to a category. Now when I do a search for Canon 7d, all the accessories for canon 7d app…

---

## [Elasticsearch-river-web plugin problem](https://discuss.elastic.co/t/elasticsearch-river-web-plugin-problem/22500)

<div class="topic-metadata">

**Author:** [@Ali\_Lotfdar](https://discuss.elastic.co/u/Ali_Lotfdar)\
**Replies:** 2\
**Last updated:** [March 4, 2015, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-river-web-plugin-problem/22500 "2015-03-04T13:51:42Z")

</div>

Hello All, link :https://github.com/codelibs/elasticsearch-river-web I am following instruction of using river-web plugin, but I encounter with this error: () \[2015-03-03 16:31:29,075\]\[WARN \]\[river …

---

## [Terms aggregation query performance slow](https://discuss.elastic.co/t/terms-aggregation-query-performance-slow/55542)

<div class="topic-metadata">

**Author:** [@caddala](https://discuss.elastic.co/u/caddala)\
**Replies:** 0\
**Last updated:** [July 14, 2016, 4:25pm UTC](https://discuss.elastic.co/t/terms-aggregation-query-performance-slow/55542 "2016-07-14T16:25:25Z")

</div>

I am indexing metric names in Elasticsearch. Metric names are of the form foo.bar.baz.aux. Here is the index I use. \> { \> "index": { \> "analysis": { \> "analyzer": { \> "prefix-test…

---

## [Looking beta testers and ideas for our new iOS App ElasticOcean](https://discuss.elastic.co/t/looking-beta-testers-and-ideas-for-our-new-ios-app-elasticocean/21817)

<div class="topic-metadata">

**Author:** [@Andrei\_Popov](https://discuss.elastic.co/u/Andrei_Popov)\
**Replies:** 0\
**Last updated:** [January 24, 2015, 5:28pm UTC](https://discuss.elastic.co/t/looking-beta-testers-and-ideas-for-our-new-ios-app-elasticocean/21817 "2015-01-24T17:28:12Z")

</div>

Hello everyone, I’m quite new to this group and ElasticSearch overall, but became really passionate about this advanced open source search and analytics engine lately. I think that a lot of interesting stuff can b…

---

## [Term Aggregation in Visual Builder](https://discuss.elastic.co/t/term-aggregation-in-visual-builder/182991)

<div class="topic-metadata">

**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\
**Replies:** 4\
**Last updated:** [May 28, 2019, 1:26pm UTC](https://discuss.elastic.co/t/term-aggregation-in-visual-builder/182991 "2019-05-28T13:26:08Z")

</div>

Is ist possible to aggregate data over terms like it is possible in the normal visualizations?

---

## [Elastic Search and Python pushing error](https://discuss.elastic.co/t/elastic-search-and-python-pushing-error/316105)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 1\
**Last updated:** [October 8, 2022, 9:07am UTC](https://discuss.elastic.co/t/elastic-search-and-python-pushing-error/316105 "2022-10-08T09:07:33Z")

</div>

elasticsearch.BadRequestError: BadRequestError(400, 'illegal\_argument\_exception', 'Action/metadata line \[1\] contains an unknown parameter \[\_type\]') How do you resolve this error? I'm trying to push the data through my p…

---

## [Elasticsearch Index Latency Rate - API](https://discuss.elastic.co/t/elasticsearch-index-latency-rate-api/209531)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 1\
**Last updated:** [December 3, 2019, 12:04pm UTC](https://discuss.elastic.co/t/elasticsearch-index-latency-rate-api/209531 "2019-12-03T12:04:31Z")

</div>

Hi, I asked a very similar question yesterday in regard to exposing Elasticsearch Indexing Rate via the API. Thanks to @danielmitterdorfer this was achieved easily. I'm now trying to get other monitoring metrics via the…

---

## [Importing data files into already created index](https://discuss.elastic.co/t/importing-data-files-into-already-created-index/204675)

<div class="topic-metadata">

**Author:** [@computer\_engineer](https://discuss.elastic.co/u/computer_engineer)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 4:06pm UTC](https://discuss.elastic.co/t/importing-data-files-into-already-created-index/204675 "2019-10-23T16:06:56Z")

</div>

I have been having issues getting filebeat to work and opted to import the data using files into elasticsearch. However it looks like it is not possible to import into an existing created index. Is this true or is there …

---

## [Return a set of values only on the first occurrence of one of them](https://discuss.elastic.co/t/return-a-set-of-values-only-on-the-first-occurrence-of-one-of-them/157239)

<div class="topic-metadata">

**Author:** [@Dany1](https://discuss.elastic.co/u/Dany1)\
**Replies:** 1\
**Last updated:** [November 19, 2018, 8:49pm UTC](https://discuss.elastic.co/t/return-a-set-of-values-only-on-the-first-occurrence-of-one-of-them/157239 "2018-11-19T20:49:55Z")

</div>

Hi all, I use the latest ES version. My data set is a network flow (see an exemple below). Each time a new host starts a flow with one other, a new and unique flow\_id is created. I would like to write an Elasticsearch r…

---

## [Problem with meta-fields](https://discuss.elastic.co/t/problem-with-meta-fields/151321)

<div class="topic-metadata">

**Author:** [@plex](https://discuss.elastic.co/u/plex)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 9:30am UTC](https://discuss.elastic.co/t/problem-with-meta-fields/151321 "2018-10-10T09:30:05Z")

</div>

Hi , today i have some issue with meta-fields on my kibana's .New indices are not coming ( they are not searchable and url request give me 404 for them) . But i can see data for this indices . Just only meta fields ( …

---

## [Dangled indices判定条件](https://discuss.elastic.co/t/dangled-indices/123869)

<div class="topic-metadata">

**Author:** [@z\_y\_xing](https://discuss.elastic.co/u/z_y_xing)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 9:20am UTC](https://discuss.elastic.co/t/dangled-indices/123869 "2018-04-10T09:20:05Z")

</div>

我看了下 dangling indices 里面有这样一句话： ..... any shards stored in its local data directory directory which do not already exist in the cluster ... 比较好奇是怎么判断不存在的？ es 日志说这索引是dangling的，然后自动导入了： \[2018-03-14T12:33:11,873\]\[WARN…

---

## [Not able to create watcher](https://discuss.elastic.co/t/not-able-to-create-watcher/125915)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 7\
**Last updated:** [March 28, 2018, 12:23pm UTC](https://discuss.elastic.co/t/not-able-to-create-watcher/125915 "2018-03-28T12:23:11Z")

</div>

Hi, I have created a watcher. When I am trying to execute the same, I am getting below error: { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reason": "blocked by: \[SERVIC…

---

## [Shard allocation not working if on different subnet?](https://discuss.elastic.co/t/shard-allocation-not-working-if-on-different-subnet/123830)

<div class="topic-metadata">

**Author:** [@Edmund\_Cheng](https://discuss.elastic.co/u/Edmund_Cheng)\
**Replies:** 7\
**Last updated:** [March 14, 2018, 7:50am UTC](https://discuss.elastic.co/t/shard-allocation-not-working-if-on-different-subnet/123830 "2018-03-14T07:50:14Z")

</div>

hi, I was doing some testing where for e.g node1 IP : 192.168.168.X node2 IP : 192.168.168.X node3 IP : 10.91.10.X They are able to discover one another, but shards are only allocated among node1 and node2, while no…

---

## [Elasticsearch behavior after License expiry](https://discuss.elastic.co/t/elasticsearch-behavior-after-license-expiry/63810)

<div class="topic-metadata">

**Author:** [@santsaha](https://discuss.elastic.co/u/santsaha)\
**Replies:** 1\
**Last updated:** [October 25, 2016, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-behavior-after-license-expiry/63810 "2016-10-25T10:49:25Z")

</div>

I understand that we can get going with elasticsearch using trial license for plugins. My question is what happens after the license has expired. For eg. if I use trial license for marvel and watcher and after one month,…

---

## [Creating Multiple Alert Documents when Alert is Triggered](https://discuss.elastic.co/t/creating-multiple-alert-documents-when-alert-is-triggered/327088)

<div class="topic-metadata">

**Author:** [@juliette.littlewood](https://discuss.elastic.co/u/juliette.littlewood)\
**Replies:** 3\
**Last updated:** [March 10, 2023, 11:46pm UTC](https://discuss.elastic.co/t/creating-multiple-alert-documents-when-alert-is-triggered/327088 "2023-03-10T23:46:47Z")

</div>

Hi all, I've got a bit of a unique issue. For the system I am developing, data records will be ingested and compared against thresholds to confirm if values are anomalous. To test out this functionality I've set up an …

---

## [Fleet server & integrations does not provide log/data](https://discuss.elastic.co/t/fleet-server-integrations-does-not-provide-log-data/316473)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 3\
**Last updated:** [November 21, 2022, 1:23pm UTC](https://discuss.elastic.co/t/fleet-server-integrations-does-not-provide-log-data/316473 "2022-11-21T13:23:03Z")

</div>

Need help on fleet I have recently installed a cluster (8.4.0 docker) and facing issues with fleet/APM integration. Fleet container is running in the same elk server and getting registered with healthy status. However,…

---

## [我的logstash docker容器启动不了](https://discuss.elastic.co/t/logstash-docker/308775)

<div class="topic-metadata">

**Author:** [@ahong](https://discuss.elastic.co/u/ahong)\
**Replies:** 3\
**Last updated:** [July 4, 2022, 5:16am UTC](https://discuss.elastic.co/t/logstash-docker/308775 "2022-07-04T05:16:42Z")

</div>

我在docker容器里部署了ELK（版本是8.2.3），但是在配置logstash时docker容器启动不了。日志报错如下： {"log":"\[2022-07-04T03:29:27,007\]\[INFO \]\[logstash.javapipeline \]\[main\] Pipeline terminated {\\"pipeline.id\\"=\\u003e\\"main\\"}\\n","stream":"stdout","time":"…

---

## [Remote cluster - TCP connection is not happened with Istio ingress](https://discuss.elastic.co/t/remote-cluster-tcp-connection-is-not-happened-with-istio-ingress/271040)

<div class="topic-metadata">

**Author:** [@rmssath](https://discuss.elastic.co/u/rmssath)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 8:57am UTC](https://discuss.elastic.co/t/remote-cluster-tcp-connection-is-not-happened-with-istio-ingress/271040 "2021-05-04T08:57:01Z")

</div>

Hi Team, We have followed the below step to configure remote cluster. In remote cluster, we have create istio ingress gateway/virtualservice with TCP to expose the service. apiVersion: networking.istio.io/v1alpha3 k…

---

## [Unauthorized to indices:admin/settings/update](https://discuss.elastic.co/t/unauthorized-to-indices-admin-settings-update/249987)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 0\
**Last updated:** [September 25, 2020, 2:10pm UTC](https://discuss.elastic.co/t/unauthorized-to-indices-admin-settings-update/249987 "2020-09-25T14:10:14Z")

</div>

Hello do you know what privilege I have to include in a role in order for this user to be able to execute that action? \[2020-09-24T19:47:08,114\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner\] \[node01\] policy \[apm-rollover-30-day…

---

## [Custom Tile Map (no geo data)](https://discuss.elastic.co/t/custom-tile-map-no-geo-data/203689)

<div class="topic-metadata">

**Author:** [@eiksch](https://discuss.elastic.co/u/eiksch)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 1:08pm UTC](https://discuss.elastic.co/t/custom-tile-map-no-geo-data/203689 "2019-10-21T13:08:42Z")

</div>

Hi, I have a tileset for a big ingame map (GTA V Example Map Interface) and I want to put it into Kibana. I created the layer and managed to make it display the images, but they are kinda screwed Screenshot Is it even …

---

## [How to take the hostname field in the timelion Kibana](https://discuss.elastic.co/t/how-to-take-the-hostname-field-in-the-timelion-kibana/179168)

<div class="topic-metadata">

**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\
**Replies:** 3\
**Last updated:** [May 3, 2019, 10:12am UTC](https://discuss.elastic.co/t/how-to-take-the-hostname-field-in-the-timelion-kibana/179168 "2019-05-03T10:12:36Z")

</div>

I'm trying to to get into the timelion visual where i'm trying to get the two queries.. to query the out of memory string second one not responding Now, i'm looking if i can get the hostname from the field syslog\_hos…

---

## [Metricbeat odd CPU percentage values](https://discuss.elastic.co/t/metricbeat-odd-cpu-percentage-values/114420)

<div class="topic-metadata">

**Author:** [@Zappelphilipp](https://discuss.elastic.co/u/Zappelphilipp)\
**Replies:** 3\
**Last updated:** [January 8, 2018, 11:57pm UTC](https://discuss.elastic.co/t/metricbeat-odd-cpu-percentage-values/114420 "2018-01-08T23:57:07Z")

</div>

hi, i am pretty new to the beats family and i am using metricbeat in a small invironment with Graylog and Kibana. There is one maschine which inputs me very strange values for the following items. i added some real valu…

---

## [Automatic refresh when clicking the the browser tab](https://discuss.elastic.co/t/automatic-refresh-when-clicking-the-the-browser-tab/84567)

<div class="topic-metadata">

**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\
**Replies:** 3\
**Last updated:** [May 5, 2017, 3:53pm UTC](https://discuss.elastic.co/t/automatic-refresh-when-clicking-the-the-browser-tab/84567 "2017-05-05T15:53:29Z")

</div>

When I turn to a tab on my Chrome, how can I set the kibana to refresh the page automatically? I guess this functionality is disabled with kibana pages. Thanks!

---

## [Buggy Elasticsearch monitoring data after upgrading to Logstash 5.2.0](https://discuss.elastic.co/t/buggy-elasticsearch-monitoring-data-after-upgrading-to-logstash-5-2-0/73785)

<div class="topic-metadata">

**Author:** [@omarzing](https://discuss.elastic.co/u/omarzing)\
**Replies:** 3\
**Last updated:** [February 4, 2017, 9:47pm UTC](https://discuss.elastic.co/t/buggy-elasticsearch-monitoring-data-after-upgrading-to-logstash-5-2-0/73785 "2017-02-04T21:47:09Z")

</div>

Hi All! I'm experiencing some strage behavior after upgrading to the super cool Logstash 5.2.0 + X-Pack. For the first 15 minutes after my cluster is brought up, I am able to get useful monitoring data about my Elastics…

---

## [Example geoip config that works LS/ES 5.1](https://discuss.elastic.co/t/example-geoip-config-that-works-ls-es-5-1/71394)

<div class="topic-metadata">

**Author:** [@paka](https://discuss.elastic.co/u/paka)\
**Replies:** 3\
**Last updated:** [January 13, 2017, 9:39am UTC](https://discuss.elastic.co/t/example-geoip-config-that-works-ls-es-5-1/71394 "2017-01-13T09:39:04Z")

</div>

Hello, please does geoip work for someone in LS and ES 5.1, is there an example of configuration that works ? I'm fighting with it whole day, trying all various things found in many issues also others apparently hav…

[Previous page](https://discuss.elastic.co/top.md?page=1477&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1479&per_page=50&period=all)
