# Top **URL:** https://discuss.elastic.co/top.md?page=1481&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1482 --- ## [How to dispay hostname and host ip on my elastic search output?](https://discuss.elastic.co/t/how-to-dispay-hostname-and-host-ip-on-my-elastic-search-output/275928)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 7:49pm UTC](https://discuss.elastic.co/t/how-to-dispay-hostname-and-host-ip-on-my-elastic-search-output/275928 "2021-06-17T19:49:14Z")
Hi, Can help me please extract the host name from the message output (devname) in elasticsearch. In my current config on the host portion only ip is displayed. Current config: input { syslog { port =\> 5000 host =\> … --- ## [How to push csv data from filebeat to elasticsearch](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447)
**Author:** [@singhmac](https://discuss.elastic.co/u/singhmac)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447 "2020-08-27T04:38:24Z")
I am new to elasticsearch , i have csv file data which i need to push into elasticsearch via filebeat. how can i do that? ex: planname1, sunday 5pm, done, 123 planname2, sunday 6pm, pending, 123 when we try this we g… --- ## [Kibana Dashboard with Multiple Date Filter](https://discuss.elastic.co/t/kibana-dashboard-with-multiple-date-filter/203657)
**Author:** [@Carlos\_Rojas](https://discuss.elastic.co/u/Carlos_Rojas)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 1:51pm UTC](https://discuss.elastic.co/t/kibana-dashboard-with-multiple-date-filter/203657 "2019-10-15T13:51:05Z")
Hi Guys, Is Posible have a dashboard that has the main date filter and that a dashboard visualization has a different date filter to the main one? Example: Main date filter Last 15Hours, and 1 visualization have Last … --- ## [Testing for values and adding a value when value field is empty or null](https://discuss.elastic.co/t/testing-for-values-and-adding-a-value-when-value-field-is-empty-or-null/191703)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 2\ **Last updated:** [July 24, 2019, 8:49pm UTC](https://discuss.elastic.co/t/testing-for-values-and-adding-a-value-when-value-field-is-empty-or-null/191703 "2019-07-24T20:49:57Z")
Hello All, I have an upstream system that will produce event data that hopefully will be parsed by Logstash and then sent to ES. I've work out grok patterns and basic filters working with some test events. This part se… --- ## [Kibana 7.0.1 won't lad index pattern](https://discuss.elastic.co/t/kibana-7-0-1-wont-lad-index-pattern/187934)
**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 10:35pm UTC](https://discuss.elastic.co/t/kibana-7-0-1-wont-lad-index-pattern/187934 "2019-06-28T22:35:01Z")
Hi Team, We just installed Elasticsearch and Kibana 7.0.1. but I can't load the index pattern. I've read all the existing threads/topics related to this issue and I've done these: Loading sample data exhibits the s… --- ## ["in query" is not yet supported](https://discuss.elastic.co/t/in-query-is-not-yet-supported/183568)
**Author:** [@Paul\_Yeung](https://discuss.elastic.co/u/Paul_Yeung)\ **Replies:** 2\ **Last updated:** [May 31, 2019, 12:48pm UTC](https://discuss.elastic.co/t/in-query-is-not-yet-supported/183568 "2019-05-31T12:48:44Z")
When I try to use sql API to do the following: select name from school where name in ( select name from teachers ) ; ES complains that "in query" is not yet supported. This means I need to do this in query DSL. What is… --- ## [Elasticsearch API to add a lifecycle policy to an index template](https://discuss.elastic.co/t/elasticsearch-api-to-add-a-lifecycle-policy-to-an-index-template/173164)
**Author:** [@Matt\_Russell](https://discuss.elastic.co/u/Matt_Russell)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 2:57pm UTC](https://discuss.elastic.co/t/elasticsearch-api-to-add-a-lifecycle-policy-to-an-index-template/173164 "2019-03-20T14:57:15Z")
Is there a way to update an index template to add a lifecycle policy through Elasticsearch APIs (to achieve the same effect as can be done in Kibana)? --- ## [Remove duplications in Kibana dashboard](https://discuss.elastic.co/t/remove-duplications-in-kibana-dashboard/148491)
**Author:** [@elkNewbie1](https://discuss.elastic.co/u/elkNewbie1)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 6:51pm UTC](https://discuss.elastic.co/t/remove-duplications-in-kibana-dashboard/148491 "2018-09-13T18:51:14Z")
Currently using two separate index patterns (logstash-\* and filebeat-\*), with separate dashboards. The live logs go to a local machine that is then read through filebeat and sent to elasticsearch which sends to kibana. E… --- ## [How to get content of document in Kibana plugin](https://discuss.elastic.co/t/how-to-get-content-of-document-in-kibana-plugin/140837)
**Author:** [@bamboo2222](https://discuss.elastic.co/u/bamboo2222)\ **Replies:** 2\ **Last updated:** [July 23, 2018, 1:23am UTC](https://discuss.elastic.co/t/how-to-get-content-of-document-in-kibana-plugin/140837 "2018-07-23T01:23:40Z")
Preformatted textHi, I'm developing custom kibana plugin, and try to retrieve document using the Elasticsearch JS method "GET", but get nothing. I have some questions about how to fetch content from the "response", and m… --- ## [Graph Exploration Times Out](https://discuss.elastic.co/t/graph-exploration-times-out/127693)
**Author:** [@PaulCarsten](https://discuss.elastic.co/u/PaulCarsten)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 7:57am UTC](https://discuss.elastic.co/t/graph-exploration-times-out/127693 "2018-04-12T07:57:47Z")
Hello, I'm a relative newcomer to X-Pack's Graph function and I'm having some issues with timeouts. I find that whenever I try to create a graph it runs for a little while, returns some nodes, then tells me "exploration… --- ## [How to create a file link for input file path using logstash filter or any other means to show up the input file as a link of the file in kibana?](https://discuss.elastic.co/t/how-to-create-a-file-link-for-input-file-path-using-logstash-filter-or-any-other-means-to-show-up-the-input-file-as-a-link-of-the-file-in-kibana/92871)
**Author:** [@hara\_acharya](https://discuss.elastic.co/u/hara_acharya)\ **Replies:** 2\ **Last updated:** [July 12, 2017, 10:14pm UTC](https://discuss.elastic.co/t/how-to-create-a-file-link-for-input-file-path-using-logstash-filter-or-any-other-means-to-show-up-the-input-file-as-a-link-of-the-file-in-kibana/92871 "2017-07-12T22:14:25Z")
Hi, I have a logstash filter as below. input { file { path =\> "/home/testserver/Downloads/log\_source/logs/\*/\*\*" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" type =\> "test-logs" } } filt… --- ## [Shards not assigned when creating an index](https://discuss.elastic.co/t/shards-not-assigned-when-creating-an-index/31274)
**Author:** [@Pablo](https://discuss.elastic.co/u/Pablo)\ **Replies:** 2\ **Last updated:** [September 28, 2015, 6:17pm UTC](https://discuss.elastic.co/t/shards-not-assigned-when-creating-an-index/31274 "2015-09-28T18:17:59Z")
Hi all. I am having trouble creating a new index: elastic search assigns 3 shards and leaves 2 unassigned. It is installed as a 4-node cluster in amazon, almost out of the box. The cluster has 2 nodes in 2 different … --- ## [Join Multiple Fields to Form Label](https://discuss.elastic.co/t/join-multiple-fields-to-form-label/29663)
**Author:** [@coderlol](https://discuss.elastic.co/u/coderlol)\ **Replies:** 2\ **Last updated:** [September 26, 2015, 5:48am UTC](https://discuss.elastic.co/t/join-multiple-fields-to-form-label/29663 "2015-09-26T05:48:26Z")
I have the following field in my log event. I can plot max, min, avg, etc for the mb, me, and md fields. However, the X-axis shows only the selected field, in my case, it is "method", so the X-Axis would show "myMethod… --- ## [\[Bug\]: ElasticSearch : Timeout context manager should be used inside a task](https://discuss.elastic.co/t/bug-elasticsearch-timeout-context-manager-should-be-used-inside-a-task/363639)
**Author:** [@FlorentGrenier](https://discuss.elastic.co/u/FlorentGrenier)\ **Replies:** 1\ **Last updated:** [July 23, 2024, 3:24pm UTC](https://discuss.elastic.co/t/bug-elasticsearch-timeout-context-manager-should-be-used-inside-a-task/363639 "2024-07-23T15:24:03Z")
Bug Description I'm developing a chatbot, and on a second request sent the bug appears I have llama-index installed in the conda environment with Pyhton 3.12.3. I have streamlit 1.36.0 for UI. I have elastic-transport… --- ## [Anomalies and bucket span](https://discuss.elastic.co/t/anomalies-and-bucket-span/282601)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [August 28, 2021, 1:17pm UTC](https://discuss.elastic.co/t/anomalies-and-bucket-span/282601 "2021-08-28T13:17:38Z")
Hi, I have a ML job with a bucket span of 5 minutes. when an anomaly is detected and displayed in a graph, the red dot is the beggining of that bucket span? or the end of the bucket span? in other words the red dot indi… --- ## [Dashboard or Canvas with a drop down for filters for a data table](https://discuss.elastic.co/t/dashboard-or-canvas-with-a-drop-down-for-filters-for-a-data-table/272310)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 4\ **Last updated:** [May 10, 2021, 1:32pm UTC](https://discuss.elastic.co/t/dashboard-or-canvas-with-a-drop-down-for-filters-for-a-data-table/272310 "2021-05-10T13:32:43Z")
I have some network utilization data that I need to filter by all hours, prime business hours, non business hours. The filters are not straight forward as I'm dealing with local times across time zones. The prime filter … --- ## ["undefined" in synthetics performance breakdown](https://discuss.elastic.co/t/undefined-in-synthetics-performance-breakdown/271225)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 4\ **Last updated:** [April 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/undefined-in-synthetics-performance-breakdown/271225 "2021-04-30T16:19:07Z")
Hi, I am currently playing around with the synthetics package and found that the performance breakdown shows always "undefined" as title. What is supposed to be shown there? Obviously, when clicking on any of the "u… --- ## [Logstah reading from elastic daily based index name](https://discuss.elastic.co/t/logstah-reading-from-elastic-daily-based-index-name/257278)
**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 3:45pm UTC](https://discuss.elastic.co/t/logstah-reading-from-elastic-daily-based-index-name/257278 "2020-12-03T15:45:47Z")
Hello, I am new to logstash.I I want to get data out of elasticsearch and filter it and send it to some third party sw. With help of examples and docs the first draft seems to work. But the elasticsearch index name i… --- ## [Anomaly detection on ratio of two counts](https://discuss.elastic.co/t/anomaly-detection-on-ratio-of-two-counts/164842)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 4\ **Last updated:** [March 26, 2020, 1:26pm UTC](https://discuss.elastic.co/t/anomaly-detection-on-ratio-of-two-counts/164842 "2020-03-26T13:26:57Z")
Hi, I'm indexing a log file where the majority of the lines contain actions but a small percentage (1-2%) contains error lines. I have managed to successfully plot the hourly error rate using either Timelion or the Visu… --- ## [Configuring periodic snapshotting?](https://discuss.elastic.co/t/configuring-periodic-snapshotting/4751)
**Author:** [@Alex\_Lambert](https://discuss.elastic.co/u/Alex_Lambert)\ **Replies:** 4\ **Last updated:** [July 5, 2011, 2:18pm UTC](https://discuss.elastic.co/t/configuring-periodic-snapshotting/4751 "2011-07-05T14:18:19Z")
Hi folks, elasticsearch/modules/elasticsearch/src/main/java/org/elasticsearch/ action/admin/indices/gateway/snapshot/GatewaySnapshotRequest.java says: \* Gateway snapshot allows to explicitly perform a snapshot t… --- ## [How to write the following Elastic Search into advanced script query?](https://discuss.elastic.co/t/how-to-write-the-following-elastic-search-into-advanced-script-query/351111)
**Author:** [@ElasticDev1](https://discuss.elastic.co/u/ElasticDev1)\ **Replies:** 8\ **Last updated:** [January 19, 2024, 4:22pm UTC](https://discuss.elastic.co/t/how-to-write-the-following-elastic-search-into-advanced-script-query/351111 "2024-01-19T16:22:18Z")
{ "took": 13, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, "hits": { "total": { "value": 2, "relation": "eq" }, "max\_score":… --- ## [Unable to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system/344192)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 8\ **Last updated:** [October 2, 2023, 2:41pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system/344192 "2023-10-02T14:41:53Z")
Hi, Error "type":"log","@timestamp":"2023-10-01T18:33:17+00:00","tags":\["info","plugins-service"\],"pid":1219,"message":"Plugin \\"metricsEntities\\" is disabled."} {"type":"log","@timestamp":"2023-10-01T18:33:17+00:00","… --- ## [Transport connection hangups with Ubuntu on AWS](https://discuss.elastic.co/t/transport-connection-hangups-with-ubuntu-on-aws/83)
**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\ **Replies:** 0\ **Last updated:** [May 1, 2015, 9:37am UTC](https://discuss.elastic.co/t/transport-connection-hangups-with-ubuntu-on-aws/83 "2015-05-01T09:37:08Z")
Sometimes network connections to Elasticsearch seem to be in a stuck state. This will manifest in nodes being unable to perform queries that require data located on other nodes, and in certain \_cat commands failing to w… --- ## [The java application server in the pod was killed due to excessive memory usage](https://discuss.elastic.co/t/the-java-application-server-in-the-pod-was-killed-due-to-excessive-memory-usage/358346)
**Author:** [@majiayong](https://discuss.elastic.co/u/majiayong)\ **Replies:** 7\ **Last updated:** [May 8, 2024, 2:14am UTC](https://discuss.elastic.co/t/the-java-application-server-in-the-pod-was-killed-due-to-excessive-memory-usage/358346 "2024-05-08T02:14:28Z")
Hello, I am a Java developer. My online application encountered problems after the operation and maintenance personnel introduced elastic-apm-java. It is related to heap usage. I have recommended that the operation and m… --- ## [Coordinate Map (Geoip) - Show specific values within the map](https://discuss.elastic.co/t/coordinate-map-geoip-show-specific-values-within-the-map/127638)
**Author:** [@MaikLinnemann](https://discuss.elastic.co/u/MaikLinnemann)\ **Replies:** 7\ **Last updated:** [April 11, 2018, 8:34pm UTC](https://discuss.elastic.co/t/coordinate-map-geoip-show-specific-values-within-the-map/127638 "2018-04-11T20:34:56Z")
Hi, i created a coordinate map which is feeded by geoip-src.location and the metric is count. it works so far, all nice. i see the locations of source ips on the map and counter. what i want to archive is to display th… --- ## [\[Newbie Alert\] How would you process this data?](https://discuss.elastic.co/t/newbie-alert-how-would-you-process-this-data/78111)
**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\ **Replies:** 7\ **Last updated:** [April 3, 2017, 8:09pm UTC](https://discuss.elastic.co/t/newbie-alert-how-would-you-process-this-data/78111 "2017-04-03T20:09:20Z")
I would like to import this data into ELK. Data structure see below. --- ## [Alerting on index aggregation with filter](https://discuss.elastic.co/t/alerting-on-index-aggregation-with-filter/311763)
**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\ **Replies:** 1\ **Last updated:** [August 9, 2022, 9:13pm UTC](https://discuss.elastic.co/t/alerting-on-index-aggregation-with-filter/311763 "2022-08-09T21:13:38Z")
I'm working on some alerting functionality that I'd like some help with. The end goal is to return the count and field to our email connector that is the result of a query with aggregations/filters. In SQL, it would be … --- ## [System requirements for ELK SIEM](https://discuss.elastic.co/t/system-requirements-for-elk-siem/278025)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 7:10am UTC](https://discuss.elastic.co/t/system-requirements-for-elk-siem/278025 "2021-07-09T07:10:16Z")
Hi! I need depoly ELK SIEM for analyze Windows, Linux, routers logs. Network consist of 300 Windows PC , 15 Linux servers and 3 routers. What do CPU, RAM, HDD need for stable working ELK SIEM on Docker? Where I can fi… --- ## [New name (same great product): Elastic Workplace Search](https://discuss.elastic.co/t/new-name-same-great-product-elastic-workplace-search/217075)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 2:01pm UTC](https://discuss.elastic.co/t/new-name-same-great-product-elastic-workplace-search/217075 "2020-03-31T14:01:09Z")
The product formerly known as Enterprise Search has been renamed to Workplace Search. However, you’ll still see the forum category for Enterprise Search (you’re in it right now, after all). This category is where you can… --- ## [Error Running Rally against an existing cluster](https://discuss.elastic.co/t/error-running-rally-against-an-existing-cluster/212872)
**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 3:22pm UTC](https://discuss.elastic.co/t/error-running-rally-against-an-existing-cluster/212872 "2020-01-09T15:22:32Z")
Hi, I'm having trouble starting Rally to run against an existing Elasticsearch cluster from Mac OSX Catalina. I followed the instructions here However when I run using the command: esrally --track=pmc --target-hosts=\[… --- ## [How to setup snapshot repository for multi node cluster?](https://discuss.elastic.co/t/how-to-setup-snapshot-repository-for-multi-node-cluster/183031)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 10:18am UTC](https://discuss.elastic.co/t/how-to-setup-snapshot-repository-for-multi-node-cluster/183031 "2019-05-28T10:18:29Z")
Hi, I am familiar with snapshots and snapshot repositories on a single node cluster. Currently I am triggering snapshots via cron calling REST API via curl. Now I am setting up my first multi node cluster, and I need … --- ## [JSON input syntax](https://discuss.elastic.co/t/json-input-syntax/167487)
**Author:** [@alimo77](https://discuss.elastic.co/u/alimo77)\ **Replies:** 1\ **Last updated:** [February 8, 2019, 7:29pm UTC](https://discuss.elastic.co/t/json-input-syntax/167487 "2019-02-08T19:29:29Z")
I am creating a data table visualization and I have a value that is either a 1 or 0, but in the column I was hoping to use json input so that if the value is a 1 it displays up and 0 displays down in the data table. Is … --- ## [Graph - Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/graph-fielddata-is-disabled-on-text-fields-by-default/76250)
**Author:** [@CaveJohnson](https://discuss.elastic.co/u/CaveJohnson)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 10:22pm UTC](https://discuss.elastic.co/t/graph-fielddata-is-disabled-on-text-fields-by-default/76250 "2017-02-24T22:22:12Z")
New to elasticsearch and still getting to grips with everything! I've imported a load of nmap xml results in to elastic search using the VulntoES (https://github.com/ChrisRimondi/VulntoES) This has worked well and I … --- ## [How to synchronize mysql data to elasticsearch?](https://discuss.elastic.co/t/how-to-synchronize-mysql-data-to-elasticsearch/53234)
**Author:** [@kanjiushi](https://discuss.elastic.co/u/kanjiushi)\ **Replies:** 1\ **Last updated:** [June 19, 2016, 6:29pm UTC](https://discuss.elastic.co/t/how-to-synchronize-mysql-data-to-elasticsearch/53234 "2016-06-19T18:29:43Z")
How to synchronize mysql data to elasticsearch? There are 3 tools on github: 1、elasticsearch-jdbc 2、python-mysql-replication 3、go-mysql-elasticsearch in addition: 4、mysqlbinlog which one should I use? --- ## [Logstash running out of memory, tcp{} input](https://discuss.elastic.co/t/logstash-running-out-of-memory-tcp-input/34735)
**Author:** [@nrgetik](https://discuss.elastic.co/u/nrgetik)\ **Replies:** 1\ **Last updated:** [November 17, 2015, 7:29pm UTC](https://discuss.elastic.co/t/logstash-running-out-of-memory-tcp-input/34735 "2015-11-17T19:29:27Z")
Error: Your application used more memory than the safety cap of 500M I began encountering this crash/error condition a few days ago when setting up Logstash 2.0.0 alongside Elasticsearch 2.0.0, both installed via RPM.… --- ## [Plugin versions](https://discuss.elastic.co/t/plugin-versions/273787)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 10:12am UTC](https://discuss.elastic.co/t/plugin-versions/273787 "2021-05-26T10:12:01Z")
Hi everyone, What is the best way of versioning plugins. If we plan to have multiple versions of our plugin, and support multiple versions of ElasticSearch how would we do that? Is there anyway that we say that our pl… --- ## [Can't delete empty field](https://discuss.elastic.co/t/cant-delete-empty-field/250678)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 6\ **Last updated:** [October 2, 2020, 2:50pm UTC](https://discuss.elastic.co/t/cant-delete-empty-field/250678 "2020-10-02T14:50:30Z")
Hi, i want to parse a json response and load data into elasticsearch via logstash , i try to delete arrDate and depDate fields if it's empty ,,,but i still got this error, \[2020-10-01T13:24:13,646\]\[WARN \]\[logstash.out… --- ## [Kibana doesn't interpolate between data points on a map](https://discuss.elastic.co/t/kibana-doesnt-interpolate-between-data-points-on-a-map/195494)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 6\ **Last updated:** [August 30, 2019, 12:22pm UTC](https://discuss.elastic.co/t/kibana-doesnt-interpolate-between-data-points-on-a-map/195494 "2019-08-30T12:22:56Z")
I'm currently running Kibana 6.5.4 and plotting a heatmap using a coordinate map type. When the map is zoomed out, Kibana appears to interpolate between data points. But when I zoom in as close as I can go, Kibana just p… --- ## [How to speed up script query](https://discuss.elastic.co/t/how-to-speed-up-script-query/221125)
**Author:** [@bmax](https://discuss.elastic.co/u/bmax)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 7:46pm UTC](https://discuss.elastic.co/t/how-to-speed-up-script-query/221125 "2020-02-27T19:46:20Z")
Hello, I have an mapping for a field visit\_times which is a date type and contains many epoch timestamps. I have some complex queries such as checking the dayOfWeek of any of the values within that array or even checkin… --- ## [Tsvb - Sort by bucket script's value?](https://discuss.elastic.co/t/tsvb-sort-by-bucket-scripts-value/214073)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 2\ **Last updated:** [January 10, 2020, 6:37am UTC](https://discuss.elastic.co/t/tsvb-sort-by-bucket-scripts-value/214073 "2020-01-10T06:37:06Z")
My data contains informat about several companies sending mail. Each document contains company name (tenant\_name) sending domain total amount of mails sent (total\_volume) amount of mails considered spam (spam\_complai… --- ## [How to use kibana search and use aggregation](https://discuss.elastic.co/t/how-to-use-kibana-search-and-use-aggregation/195933)
**Author:** [@Ashish\_Sikarwar](https://discuss.elastic.co/u/Ashish_Sikarwar)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 10:02am UTC](https://discuss.elastic.co/t/how-to-use-kibana-search-and-use-aggregation/195933 "2019-08-22T10:02:18Z")
Hello, I am learning Lucene and Elasticsearch DSL. I am using Winlogbeat and querying over field "log.level". How to use aggregation "Count" and group the data by host so i know the count for a specific host. Without… --- ## [Return multiple values from script engine plugin](https://discuss.elastic.co/t/return-multiple-values-from-script-engine-plugin/127390)
**Author:** [@stephencoffman](https://discuss.elastic.co/u/stephencoffman)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 1:11pm UTC](https://discuss.elastic.co/t/return-multiple-values-from-script-engine-plugin/127390 "2018-04-10T13:11:32Z")
ES 6.2.3 My index contains docs like this: { str1: "some string", str2: "other string" } I'm using a custom plugin that implements a ScriptEngine based on these examples: Advanced scripts using script engines Exp… --- ## ["Add a filter" button disappear in the dashboard which only have Timelion and Visual Builder](https://discuss.elastic.co/t/add-a-filter-button-disappear-in-the-dashboard-which-only-have-timelion-and-visual-builder/103202)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 2\ **Last updated:** [October 11, 2017, 2:55am UTC](https://discuss.elastic.co/t/add-a-filter-button-disappear-in-the-dashboard-which-only-have-timelion-and-visual-builder/103202 "2017-10-11T02:55:43Z")
Today, I found a dashboard lost the "Add a filter" button. It disappeared, but the created is shown. \[16\] The dashboard have one Top N and three Timelion. After add a Data Table, it appears again. \[13\] The dashboard… --- ## [Division between two sum fields and order by the result](https://discuss.elastic.co/t/division-between-two-sum-fields-and-order-by-the-result/94049)
**Author:** [@junkainiu](https://discuss.elastic.co/u/junkainiu)\ **Replies:** 2\ **Last updated:** [July 25, 2017, 3:10am UTC](https://discuss.elastic.co/t/division-between-two-sum-fields-and-order-by-the-result/94049 "2017-07-25T03:10:58Z")
Hi, I need help to order by the division between two sum fields, how can I do ? Something like this { "aggs": { "field1": { "terms": { "field": "field1", "size":50, "order": divisi… --- ## [Scripted Field in Indices with date condition](https://discuss.elastic.co/t/scripted-field-in-indices-with-date-condition/52716)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 2\ **Last updated:** [June 16, 2016, 12:07pm UTC](https://discuss.elastic.co/t/scripted-field-in-indices-with-date-condition/52716 "2016-06-16T12:07:05Z")
Is it possible to "Create scripted Field" called VAL in Indices with à range date condition: Example: If $timestamp\< 2016-01-05; then $VAL="3000" elseIf $timestamp\< 2016-02-05; then $VAL="5000" thanks! ... --- ## [Arbitrary non standard log file. need help with grok pattern](https://discuss.elastic.co/t/arbitrary-non-standard-log-file-need-help-with-grok-pattern/39121)
**Author:** [@sharath3185](https://discuss.elastic.co/u/sharath3185)\ **Replies:** 2\ **Last updated:** [January 16, 2016, 10:54am UTC](https://discuss.elastic.co/t/arbitrary-non-standard-log-file-need-help-with-grok-pattern/39121 "2016-01-16T10:54:47Z")
Hi, I have a unstructured log file which does not have a similar pattern as below SOMEWORD: (@aaa.py:1222) Started test case 123 execution ABC\_TIME: started script aaa.py at \[20151202 17:10:28\] SOMEWORD: (@abc.pd)… --- ## [Acknowledgement pauses alert](https://discuss.elastic.co/t/acknowledgement-pauses-alert/34787)
**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 7:49am UTC](https://discuss.elastic.co/t/acknowledgement-pauses-alert/34787 "2015-11-18T07:49:30Z")
Hello there! During a conversation with a colleague regarding the use of Watcher with PagerDuty, we came across a thought. PagerDuty has the option to acknowledge an incident. Will this acknowledgement be played back t… --- ## [Java API : faire une recherche simple du style q=toto](https://discuss.elastic.co/t/java-api-faire-une-recherche-simple-du-style-q-toto/24413)
**Author:** [@Karim\_KOLLI](https://discuss.elastic.co/u/Karim_KOLLI)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 12:36pm UTC](https://discuss.elastic.co/t/java-api-faire-une-recherche-simple-du-style-q-toto/24413 "2015-07-01T12:36:59Z")
Bonjour J'essaie en vain (avec api JAVA) de faire une recherche du style ../\_search?q=toto (je ne souhaite pas specifier de champs) et j'ai essaye de nombreuses fonctuin du QueryBuilder . Voila ce que j'ai aujourd'hui : … --- ## [No nginx metric graphs](https://discuss.elastic.co/t/no-nginx-metric-graphs/265330)
**Author:** [@fortega](https://discuss.elastic.co/u/fortega)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/no-nginx-metric-graphs/265330 "2021-03-03T14:05:33Z")
Hi. I have installed metricbeat on the Nginx server to send the data to the ELK server. I have loaded the dashboards but no data appears in the graphs. The version used by Metricbeat and ELK is 1.10.1 and Nginx is 1.16.… --- ## [How to playback time series data with kibana](https://discuss.elastic.co/t/how-to-playback-time-series-data-with-kibana/179042)
**Author:** [@runing\_liang](https://discuss.elastic.co/u/runing_liang)\ **Replies:** 5\ **Last updated:** [May 5, 2019, 10:02am UTC](https://discuss.elastic.co/t/how-to-playback-time-series-data-with-kibana/179042 "2019-05-05T10:02:57Z")
I have a whole stock market time series data for years, I want cut some piece from the data which has already stored in elasticsearch, is there a way I can playback that piece of data like a real time market is going on… [Previous page](https://discuss.elastic.co/top.md?page=1480&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1482&per_page=50&period=all)