# Top **URL:** https://discuss.elastic.co/top.md?page=1485&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1486 --- ## [Rolling back to ELK 6.2.4](https://discuss.elastic.co/t/rolling-back-to-elk-6-2-4/138769)
**Author:** [@dalamar666](https://discuss.elastic.co/u/dalamar666)\ **Replies:** 4\ **Last updated:** [July 6, 2018, 5:38am UTC](https://discuss.elastic.co/t/rolling-back-to-elk-6-2-4/138769 "2018-07-06T05:38:20Z")
Hi, With not being able to get Logstash working in the monitoring portion I was wondering if it is possible to roll back to 6.2.4 and then install x-pack without losing databases and see if that works? --- ## [Kibana and ADA compliance](https://discuss.elastic.co/t/kibana-and-ada-compliance/130326)
**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\ **Replies:** 4\ **Last updated:** [May 3, 2018, 6:54pm UTC](https://discuss.elastic.co/t/kibana-and-ada-compliance/130326 "2018-05-03T18:54:40Z")
Hello Kibana team, I am working with an external facing customer and I wanted to ask if Kibana 6.x is ADA compliant (https://www.ada.gov) The only reference I could find online was this blogpost: and this open issu… --- ## [How to migrate the existing json dashboards in 3.x to 4.x/5?](https://discuss.elastic.co/t/how-to-migrate-the-existing-json-dashboards-in-3-x-to-4-x-5/58085)
**Author:** [@xldai](https://discuss.elastic.co/u/xldai)\ **Replies:** 4\ **Last updated:** [August 16, 2016, 4:00am UTC](https://discuss.elastic.co/t/how-to-migrate-the-existing-json-dashboards-in-3-x-to-4-x-5/58085 "2016-08-16T04:00:19Z")
Hello, We have some json dashboards defined in the kibana-3.1.2/app/dashboards/, they worked fine with ElasticSearch 1.5.2, now we are testing and want to move to ElasticSearch 5/Kibana 5. My questions, 1) how to migr… --- ## [Inconsistent Results from Index](https://discuss.elastic.co/t/inconsistent-results-from-index/1302)
**Author:** [@ilivewithian](https://discuss.elastic.co/u/ilivewithian)\ **Replies:** 4\ **Last updated:** [May 27, 2015, 9:03am UTC](https://discuss.elastic.co/t/inconsistent-results-from-index/1302 "2015-05-27T09:03:52Z")
I have two search indexes, to the best of my understanding these indexes have an identical setup, apart from their name. One index has ~1.7 million documents, the other has 8. The documents have the following structure… --- ## [Docker logstash in ECS receives SIGTERM after ~5 min](https://discuss.elastic.co/t/docker-logstash-in-ecs-receives-sigterm-after-5-min/267012)
**Author:** [@tiberiu89](https://discuss.elastic.co/u/tiberiu89)\ **Replies:** 3\ **Last updated:** [March 12, 2021, 10:06am UTC](https://discuss.elastic.co/t/docker-logstash-in-ecs-receives-sigterm-after-5-min/267012 "2021-03-12T10:06:06Z")
Well, the title says it all, I have logstash container deployed in ECS, with a hard memory limit if 1.5GB, pipeline config is already tested locally so I'm fairly sure that's not the problem. I'm sending container logs … --- ## [The query results is different via kibana console and python api](https://discuss.elastic.co/t/the-query-results-is-different-via-kibana-console-and-python-api/171245)
**Author:** [@chely](https://discuss.elastic.co/u/chely)\ **Replies:** 3\ **Last updated:** [March 7, 2019, 9:41am UTC](https://discuss.elastic.co/t/the-query-results-is-different-via-kibana-console-and-python-api/171245 "2019-03-07T09:41:56Z")
Hi, when I using Query DSL in kibana console: GET newtest/\_search { "query":{ "terms":{"\_id":\["abcdefghij"\]} } } I got: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "s… --- ## [When use curator to manager es 5.4.3 how setting put\_mapping time\_out](https://discuss.elastic.co/t/when-use-curator-to-manager-es-5-4-3-how-setting-put-mapping-time-out/104481)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [October 19, 2017, 8:59am UTC](https://discuss.elastic.co/t/when-use-curator-to-manager-es-5-4-3-how-setting-put-mapping-time-out/104481 "2017-10-19T08:59:07Z")
when use curator to manager es i find there is have timeout setting about curator post commad as flow i change the time\_out can delete indices: DELETE http://hostname:9200/system-log-61-2017.08,system-log-61-2017.09,s… --- ## [Unable to view logs on Elastic/Kibana using JDBC Logstash plugin](https://discuss.elastic.co/t/unable-to-view-logs-on-elastic-kibana-using-jdbc-logstash-plugin/62220)
**Author:** [@tesaaron](https://discuss.elastic.co/u/tesaaron)\ **Replies:** 3\ **Last updated:** [May 12, 2017, 6:59pm UTC](https://discuss.elastic.co/t/unable-to-view-logs-on-elastic-kibana-using-jdbc-logstash-plugin/62220 "2017-05-12T18:59:11Z")
Hello, I have successfully connected Logstash to my back-end Vertica database using the JDBC plugin for Logstash. Anytime a new entry is made in the table I am pointing at in Vertica I can view the Logstash update in v… --- ## [How to request an Elasticsearch cluster?](https://discuss.elastic.co/t/how-to-request-an-elasticsearch-cluster/78897)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 5:15pm UTC](https://discuss.elastic.co/t/how-to-request-an-elasticsearch-cluster/78897 "2017-03-16T17:15:37Z")
Hello folks, I am building an Elasticsearch sluter with 3 nodes named 'node-i' where i=1,2 or 3. With a java or javascript client I want to request my data but I don't know which nodes to specify. Do you know how to do… --- ## [Search thru an IP blocklist](https://discuss.elastic.co/t/search-thru-an-ip-blocklist/58560)
**Author:** [@Laverio](https://discuss.elastic.co/u/Laverio)\ **Replies:** 3\ **Last updated:** [August 22, 2016, 11:34am UTC](https://discuss.elastic.co/t/search-thru-an-ip-blocklist/58560 "2016-08-22T11:34:52Z")
Hi, I'm new to the ELK stack and I'm looking for a way to filter my apache logs using an ip blocklist. There a way thru the Kibana GUI or I have to work directly on Logstash? --- ## [Elasticsearch convert filter not converting type to float](https://discuss.elastic.co/t/elasticsearch-convert-filter-not-converting-type-to-float/53675)
**Author:** [@apomerenk](https://discuss.elastic.co/u/apomerenk)\ **Replies:** 3\ **Last updated:** [June 22, 2016, 3:48pm UTC](https://discuss.elastic.co/t/elasticsearch-convert-filter-not-converting-type-to-float/53675 "2016-06-22T15:48:28Z")
I am trying to run a script and take the output of the script in the command line as an input to elasticsearch. I am then trying to convert this input into a float, and log that through logstash. My code currently loo… --- ## [Kibana group by terms](https://discuss.elastic.co/t/kibana-group-by-terms/20310)
**Author:** [@Michael\_Irwin](https://discuss.elastic.co/u/Michael_Irwin)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 8:18pm UTC](https://discuss.elastic.co/t/kibana-group-by-terms/20310 "2016-04-01T20:18:25Z")
I'm using Kibana w/ logstash to view web server logs. I'd like to add a graph that displays uniques of the \*entire\* User-Agent string. I've tried adding a terms graph, but that breaks the UA string into separate word… --- ## [Index configurations file (mappings & settings) in ES 1.7.x](https://discuss.elastic.co/t/index-configurations-file-mappings-settings-in-es-1-7-x/28484)
**Author:** [@SAURAV\_PAUL](https://discuss.elastic.co/u/SAURAV_PAUL)\ **Replies:** 3\ **Last updated:** [September 2, 2015, 5:25am UTC](https://discuss.elastic.co/t/index-configurations-file-mappings-settings-in-es-1-7-x/28484 "2015-09-02T05:25:41Z")
Hi, Does this below index settings & mapping correct? { "mappings":{ "record\_type\_1":{ "properties":{ "column\_1":{ "fields":{ "metaphone":{ "type":"string… --- ## [Shingle filter for sub phrase matching](https://discuss.elastic.co/t/shingle-filter-for-sub-phrase-matching/18829)
**Author:** [@nicktackes](https://discuss.elastic.co/u/nicktackes)\ **Replies:** 3\ **Last updated:** [May 2, 2015, 6:38am UTC](https://discuss.elastic.co/t/shingle-filter-for-sub-phrase-matching/18829 "2015-05-02T06:38:47Z")
I have created a gist with an analyzer that uses filter shingle in attempt to match sub phrases. For instance I have entries in the table with discrete phrases like EGFR Lung Cancer Lung Cancer and I … --- ## [What does it mean when refresh rate is high?](https://discuss.elastic.co/t/what-does-it-mean-when-refresh-rate-is-high/22930)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [March 31, 2015, 2:31am UTC](https://discuss.elastic.co/t/what-does-it-mean-when-refresh-rate-is-high/22930 "2015-03-31T02:31:39Z")
Using 1.4.3 So I have a nice "beefy" cluster 4 nodes of 32 cores, 128GB RAM, 5TB RAID 0 (Using Sandisk 960GB Extreme Pro) for each machine. I am indexing about 4000 documents per second at an average of about 800… --- ## [Filebeat module for modsecurity v3](https://discuss.elastic.co/t/filebeat-module-for-modsecurity-v3/209987)
**Author:** [@matthijs42](https://discuss.elastic.co/u/matthijs42)\ **Replies:** 0\ **Last updated:** [November 29, 2019, 4:09pm UTC](https://discuss.elastic.co/t/filebeat-module-for-modsecurity-v3/209987 "2019-11-29T16:09:10Z")
Hi, I'm trying to write a new filebeat module for modsecurity v3. I followed the tutorial on the website (https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html) but I am stuck on 'create… --- ## [Elastic search wildcard search space issue](https://discuss.elastic.co/t/elastic-search-wildcard-search-space-issue/274263)
**Author:** [@Mithoon](https://discuss.elastic.co/u/Mithoon)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 7:53am UTC](https://discuss.elastic.co/t/elastic-search-wildcard-search-space-issue/274263 "2021-05-31T07:53:26Z")
Consider index field " ProductName " having the value " dove 3.75oz " and when user searches for "dove 3.75oz" text below bool query is working fine to retreive the document: {"bool":{"must":\[{"wildcard":{"ProductName":… --- ## [Slow cluster operations (\_cat/nodes time out)](https://discuss.elastic.co/t/slow-cluster-operations-cat-nodes-time-out/197224)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 10:14am UTC](https://discuss.elastic.co/t/slow-cluster-operations-cat-nodes-time-out/197224 "2019-09-11T10:14:01Z")
Hey all, This is a fairly complex problem I'm facing for two days now. SYMPTOMS The main symptom from the admin perspective is the time out of the \_cat APIs, e.g. \_cat/nodes and slow user logins in Kibana. Sometime a… --- ## [Get dashboards IDs for REST API backup/snapshots](https://discuss.elastic.co/t/get-dashboards-ids-for-rest-api-backup-snapshots/180606)
**Author:** [@alonchis](https://discuss.elastic.co/u/alonchis)\ **Replies:** 1\ **Last updated:** [May 13, 2019, 3:47pm UTC](https://discuss.elastic.co/t/get-dashboards-ids-for-rest-api-backup-snapshots/180606 "2019-05-13T15:47:12Z")
Hello friends, Im tasked to create backups of dashboards and their visualizations, and from a previous post i know that i can use the kibana REST api, but it looks like i need the dashboard id to get its contents. Howev… --- ## [JAVALOGMESSAGE takes it all](https://discuss.elastic.co/t/javalogmessage-takes-it-all/87780)
**Author:** [@remi128](https://discuss.elastic.co/u/remi128)\ **Replies:** 1\ **Last updated:** [June 1, 2017, 4:10pm UTC](https://discuss.elastic.co/t/javalogmessage-takes-it-all/87780 "2017-06-01T16:10:39Z")
i am starting to analyze logs with filebeat and logstash. Inside the grok definition i am using JAVALOGMESSAGE to extract the pure message. From my understanding the pattern "(.\*)" should mean something like "take any ch… --- ## [Kibana role to just view dashboards and visualizations](https://discuss.elastic.co/t/kibana-role-to-just-view-dashboards-and-visualizations/71540)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 1\ **Last updated:** [January 13, 2017, 9:26pm UTC](https://discuss.elastic.co/t/kibana-role-to-just-view-dashboards-and-visualizations/71540 "2017-01-13T21:26:26Z")
How do I create a user that can ONLY view dashboards and visualizations? Seems the only thing that works, for users besides myself (admin), is SUPERUSER. I don't want to do that, right? --- ## [Elasticsearch Curator snapshot/restore with multiple .kibana/.kibana\_N indices](https://discuss.elastic.co/t/elasticsearch-curator-snapshot-restore-with-multiple-kibana-kibana-n-indices/222384)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 2\ **Last updated:** [March 6, 2020, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-snapshot-restore-with-multiple-kibana-kibana-n-indices/222384 "2020-03-06T15:14:50Z")
I am running two separate instances (x and y) of ES. I am treating y as the "source of truth" for saved objects. So x will snapshot to x's s3 bucket (as a backup plan if y goes stale) but always restore from y's s3 buck… --- ## [Interface bandwidth calculation](https://discuss.elastic.co/t/interface-bandwidth-calculation/213742)
**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 6:05pm UTC](https://discuss.elastic.co/t/interface-bandwidth-calculation/213742 "2020-01-06T18:05:53Z")
I'm using the logstash snmp plugin to get ifInOctect and ifOutOctect for all my interfaces. How can I create a scripted field to show the actual bandwidth of the interface from these numbers? --- ## [Table Visualisation - replace field \[error code\] value by some text](https://discuss.elastic.co/t/table-visualisation-replace-field-error-code-value-by-some-text/206981)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 9:28am UTC](https://discuss.elastic.co/t/table-visualisation-replace-field-error-code-value-by-some-text/206981 "2019-11-12T09:28:24Z")
Hello, I am trying to do a Table visualisation to show the different "error codes" found in the daily log and their respective count. The codes are int numbers : 0= OK, 166= Creation Failure, ... Is it possible to for… --- ## [Support for CRL/OCSP in PKI realm?](https://discuss.elastic.co/t/support-for-crl-ocsp-in-pki-realm/201858)
**Author:** [@cozbone43](https://discuss.elastic.co/u/cozbone43)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 1:45pm UTC](https://discuss.elastic.co/t/support-for-crl-ocsp-in-pki-realm/201858 "2019-10-14T13:45:01Z")
We are looking to start using PKI authentication in our cluster and I'm wondering what options are available to check revocation for client certificates. Are there are any config options in the PKI realm (or even in the… --- ## [Decision to throttle based on a condition](https://discuss.elastic.co/t/decision-to-throttle-based-on-a-condition/149489)
**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\ **Replies:** 2\ **Last updated:** [October 4, 2018, 7:04pm UTC](https://discuss.elastic.co/t/decision-to-throttle-based-on-a-condition/149489 "2018-10-04T19:04:44Z")
I want to throttle an action based on the result of a previously executed action. Let's say I have 10 unique nodes for a fs utilization alert and I want to throttle based on each unique node with the met condition. For … --- ## [Collapse option in Kibana](https://discuss.elastic.co/t/collapse-option-in-kibana/132748)
**Author:** [@remo](https://discuss.elastic.co/u/remo)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 5:40am UTC](https://discuss.elastic.co/t/collapse-option-in-kibana/132748 "2018-05-23T05:40:09Z")
How to make collapse option default for the kibana dashboard. Can we do that. It would be great if any one would suggest a solution for this. Thank you. I am attaching \[5CB65977\]the dashboard the way I need. PFA --- ## [Watcher doesn't support "distinct count"](https://discuss.elastic.co/t/watcher-doesnt-support-distinct-count/119565)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 2\ **Last updated:** [February 14, 2018, 7:59am UTC](https://discuss.elastic.co/t/watcher-doesnt-support-distinct-count/119565 "2018-02-14T07:59:20Z")
There are two fields in each log entry (elasticsearch document), which are userid and ipaddress. I want to fire an alert if the same user logs into the system using 2 or more ipaddresses in the past 10 minutes. So the … --- ## [Documentation for docker environment variables](https://discuss.elastic.co/t/documentation-for-docker-environment-variables/112907)
**Author:** [@Ryan\_Grannell1](https://discuss.elastic.co/u/Ryan_Grannell1)\ **Replies:** 2\ **Last updated:** [December 24, 2017, 1:54pm UTC](https://discuss.elastic.co/t/documentation-for-docker-environment-variables/112907 "2017-12-24T13:54:10Z")
Hi, Is there any documentation available for environment parameters than can be used when setting up APM through docker-compose? For example, when configuring ElasticSearch you can use the following yaml in place of a d… --- ## [Handle empty node in XPATH for xml filter](https://discuss.elastic.co/t/handle-empty-node-in-xpath-for-xml-filter/98674)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 2\ **Last updated:** [August 30, 2017, 2:25pm UTC](https://discuss.elastic.co/t/handle-empty-node-in-xpath-for-xml-filter/98674 "2017-08-30T14:25:56Z")
Hi All I have a XML file with 100 records, in one of the record the xml node is missing as the value is not available in system The xml path is like this /Envelope/Body/response/table/row/description/text in other re… --- ## [Dynamic Faceting](https://discuss.elastic.co/t/dynamic-faceting/86850)
**Author:** [@Mymoona\_S\_M](https://discuss.elastic.co/u/Mymoona_S_M)\ **Replies:** 2\ **Last updated:** [May 24, 2017, 6:59pm UTC](https://discuss.elastic.co/t/dynamic-faceting/86850 "2017-05-24T18:59:18Z")
I was able to aggregate over dynamic facets that I have in my feed as mentioned in the comment: My response would look something like: "buckets": \[ { "key": "color\_family", "doc\_count": 2, "value": { "doc\_count\_error… --- ## [How can I get Logstash host name in filbeat for ELK docker container](https://discuss.elastic.co/t/how-can-i-get-logstash-host-name-in-filbeat-for-elk-docker-container/61640)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 2\ **Last updated:** [September 28, 2016, 6:25pm UTC](https://discuss.elastic.co/t/how-can-i-get-logstash-host-name-in-filbeat-for-elk-docker-container/61640 "2016-09-28T18:25:52Z")
I have created a docker container for ELK stack (mean ELK components are running on same container) and another docker container for filebeat and both containers are running on different physical machines. My question is… --- ## [Which node types need the Watcher plugin?](https://discuss.elastic.co/t/which-node-types-need-the-watcher-plugin/27699)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 2\ **Last updated:** [August 24, 2015, 3:07pm UTC](https://discuss.elastic.co/t/which-node-types-need-the-watcher-plugin/27699 "2015-08-24T15:07:30Z")
Hello all, In a split role cluster, which node types need the Watcher plugin installed? Masters/Clients/Data, or some combination of the three? Many thanks! Chris --- ## [Sharding Best Practices for Binary Non-Indexed Data](https://discuss.elastic.co/t/sharding-best-practices-for-binary-non-indexed-data/1892)
**Author:** [@ryan](https://discuss.elastic.co/u/ryan)\ **Replies:** 2\ **Last updated:** [June 4, 2015, 1:29pm UTC](https://discuss.elastic.co/t/sharding-best-practices-for-binary-non-indexed-data/1892 "2015-06-04T13:29:18Z")
Hello, I'm looking for some architectural best practice advice from someone with more experience(read wisdom) than myself with ES. We are testing a new ES 1.5.2 cluster with 3 nodes(8 core/16gb ram/1.5 tb es datastor… --- ## [How to use 'exists' filter on no indexed objects/fields](https://discuss.elastic.co/t/how-to-use-exists-filter-on-no-indexed-objects-fields/16112)
**Author:** [@Han\_JU](https://discuss.elastic.co/u/Han_JU)\ **Replies:** 2\ **Last updated:** [March 3, 2014, 8:53pm UTC](https://discuss.elastic.co/t/how-to-use-exists-filter-on-no-indexed-objects-fields/16112 "2014-03-03T20:53:54Z")
Hi, I have some object type like: { 'person': { 'properties': { 'age': {'index': 'no', 'type': 'long'}, 'name': {'index': 'no', 'type': 'string'} } } } So in fa… --- ## [Speed Tuning ES 5.4 for Unit Tests (Ruby)](https://discuss.elastic.co/t/speed-tuning-es-5-4-for-unit-tests-ruby/89295)
**Author:** [@srd](https://discuss.elastic.co/u/srd)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 11:02am UTC](https://discuss.elastic.co/t/speed-tuning-es-5-4-for-unit-tests-ruby/89295 "2017-06-14T11:02:41Z")
I have a bunch of unit tests where I test my implemented search logic, and the test setup is rather slow - ~1.1 seconds per test. Basically what is happening is: - Build test data to feed to ES ( ~70ms) - Set up the ES… --- ## [Threadpool cluster persistent settings 1.7.3](https://discuss.elastic.co/t/threadpool-cluster-persistent-settings-1-7-3/36496)
**Author:** [@anishek](https://discuss.elastic.co/u/anishek)\ **Replies:** 5\ **Last updated:** [December 7, 2015, 8:30am UTC](https://discuss.elastic.co/t/threadpool-cluster-persistent-settings-1-7-3/36496 "2015-12-07T08:30:05Z")
Hello, We are using ES 1.7.3 - primarily as an execution engine using percolation. Rules we have uses significant CPU resources and hence we have powerful 40 core machines. Looking at the default threadpool settings us… --- ## [Hive write data to elastic search](https://discuss.elastic.co/t/hive-write-data-to-elastic-search/18532)
**Author:** [@David\_Zabner](https://discuss.elastic.co/u/David_Zabner)\ **Replies:** 5\ **Last updated:** [November 29, 2014, 5:53am UTC](https://discuss.elastic.co/t/hive-write-data-to-elastic-search/18532 "2014-11-29T05:53:03Z")
Hi all, I am trying to write data to elastic search from hive and whenever I try I get this error: org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: No resource \['es.resource'\] (index/query/location) s… --- ## [Discovery.ec2.host\_type:public\_dns not working as expected](https://discuss.elastic.co/t/discovery-ec2-host-type-public-dns-not-working-as-expected/3452)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 5\ **Last updated:** [October 18, 2010, 11:43pm UTC](https://discuss.elastic.co/t/discovery-ec2-host-type-public-dns-not-working-as-expected/3452 "2010-10-18T23:43:34Z")
I have two nodes up in ec2 configured as follows: discovery: type: ec2 initial\_state\_timeout: 120s ec2: host\_type: public\_dns ports: 9300 groups: dev\_private I cannot connect to them… --- ## [ElasticSearch in WordPress headless setup](https://discuss.elastic.co/t/elasticsearch-in-wordpress-headless-setup/349237)
**Author:** [@andreasdiehl](https://discuss.elastic.co/u/andreasdiehl)\ **Replies:** 2\ **Last updated:** [December 14, 2023, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-in-wordpress-headless-setup/349237 "2023-12-14T15:34:24Z")
We are setting up a headless frontend (Nuxt, Vue) for our WordPress site. We pull data via GraphQL. Now we explore if / hot to make use of Elasticsearch. Any experiences / recommendations how to do the setup? So far we… --- ## [Referenced config files FileBeat (Windows)](https://discuss.elastic.co/t/referenced-config-files-filebeat-windows/317310)
**Author:** [@Remco1985](https://discuss.elastic.co/u/Remco1985)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 1:15pm UTC](https://discuss.elastic.co/t/referenced-config-files-filebeat-windows/317310 "2022-10-26T13:15:20Z")
Hi, Recently we have successfully installed Filebeat on our (test) Windows server. Right now I’m investigating to find out the best deployment strategy for Filebeat agents on all of our Windows Server systems. We would… --- ## [Canvas from minutes to hours](https://discuss.elastic.co/t/canvas-from-minutes-to-hours/270686)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 3:16pm UTC](https://discuss.elastic.co/t/canvas-from-minutes-to-hours/270686 "2021-04-21T15:16:25Z")
Hi, in Canvas I have a SQL query that returns me a time value in minutes. How do I turn it into "hours, days, months, etc"? filters | essql query="SELECT uptime FROM \\"device\_data\_bridgenuzoo\\" ORDER BY date DESC L… --- ## [Http filter plugin authorization as parameter values](https://discuss.elastic.co/t/http-filter-plugin-authorization-as-parameter-values/232085)
**Author:** [@alxsss](https://discuss.elastic.co/u/alxsss)\ **Replies:** 6\ **Last updated:** [May 12, 2020, 12:00am UTC](https://discuss.elastic.co/t/http-filter-plugin-authorization-as-parameter-values/232085 "2020-05-12T00:00:42Z")
Hello, I try to pass user and password to http filter plugin as parameter values like. user =\> "%{user\_value}" password =\> "%{password\_value}" both values come from an input plugin as tag values. However, I get http… --- ## [Vega array coloring (scatterplot)](https://discuss.elastic.co/t/vega-array-coloring-scatterplot/207261)
**Author:** [@layeghy](https://discuss.elastic.co/u/layeghy)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 12:09am UTC](https://discuss.elastic.co/t/vega-array-coloring-scatterplot/207261 "2019-11-20T00:09:05Z")
I have created a scatter-plot using Vega. My index has a few fields that contain an array of values rather than a single value. for the purpose of simplification, let's assume my index is something like this: A = { f1 =… --- ## [Look at more than one sampled trace](https://discuss.elastic.co/t/look-at-more-than-one-sampled-trace/203920)
**Author:** [@Evgeni\_Dzhelyov](https://discuss.elastic.co/u/Evgeni_Dzhelyov)\ **Replies:** 6\ **Last updated:** [October 24, 2019, 7:26pm UTC](https://discuss.elastic.co/t/look-at-more-than-one-sampled-trace/203920 "2019-10-24T19:26:37Z")
In the Kibana interface, is there a way to browse all traces for a given bucket? The only way to select individual traces, that I've found, is to filter by "transaction.id" and then select a specific ID from the autocom… --- ## [CPUs at 100%, but no disk I/O - ES 7.3](https://discuss.elastic.co/t/cpus-at-100-but-no-disk-i-o-es-7-3/196408)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 6\ **Last updated:** [August 23, 2019, 5:40pm UTC](https://discuss.elastic.co/t/cpus-at-100-but-no-disk-i-o-es-7-3/196408 "2019-08-23T17:40:50Z")
ES Version 7.3 Various node sizes (hot/warm) (25+ nodes) SSDs on all nodes JDK 11 X-Pack Document level security (thank you for fixing the bitset issue in 7.3) Periodically our warm nodes that are sitting at 0% CPU uti… --- ## [Requests Containing an Array of Custom Routing Values](https://discuss.elastic.co/t/requests-containing-an-array-of-custom-routing-values/159435)
**Author:** [@Chinmaya\_Poswalia](https://discuss.elastic.co/u/Chinmaya_Poswalia)\ **Replies:** 6\ **Last updated:** [December 5, 2018, 3:54am UTC](https://discuss.elastic.co/t/requests-containing-an-array-of-custom-routing-values/159435 "2018-12-05T03:54:05Z")
Hi Guys, We have a cluster partitioned by a certain key for which we are using custom routing. We now are having a use-case where we have to request data across different key with the key list to be large. So wanted to … --- ## [Terms facet calculation path (random vs sequential disk access)](https://discuss.elastic.co/t/terms-facet-calculation-path-random-vs-sequential-disk-access/11564)
**Author:** [@Ahmet\_Akyol](https://discuss.elastic.co/u/Ahmet_Akyol)\ **Replies:** 6\ **Last updated:** [April 15, 2013, 8:05am UTC](https://discuss.elastic.co/t/terms-facet-calculation-path-random-vs-sequential-disk-access/11564 "2013-04-15T08:05:57Z")
Hi, When calculating terms facet, does ES have to look actual data( aka source which means random access), other than internal index (which may offer sequential read, I guess). So, my real intention is to understa… --- ## [APM agent php issue](https://discuss.elastic.co/t/apm-agent-php-issue/314998)
**Author:** [@Pragadeeswar\_Padmana](https://discuss.elastic.co/u/Pragadeeswar_Padmana)\ **Replies:** 4\ **Last updated:** [December 5, 2022, 2:27pm UTC](https://discuss.elastic.co/t/apm-agent-php-issue/314998 "2022-12-05T14:27:07Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Run detetion rules backwards](https://discuss.elastic.co/t/run-detetion-rules-backwards/311420)
**Author:** [@arturo.mj](https://discuss.elastic.co/u/arturo.mj)\ **Replies:** 4\ **Last updated:** [August 9, 2022, 12:54pm UTC](https://discuss.elastic.co/t/run-detetion-rules-backwards/311420 "2022-08-09T12:54:14Z")
Hi there, This is the situation: During a cybersecurity incident we use Elastic Agent to send Windows Events to Elastic Cloud. We send all the past events from that host that are available. As the detection rules run … [Previous page](https://discuss.elastic.co/top.md?page=1484&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1486&per_page=50&period=all)