# Top **URL:** https://discuss.elastic.co/top.md?page=1495&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1496 --- ## [Kibana: docker environment variable translation for xpack.task\_manager.index](https://discuss.elastic.co/t/kibana-docker-environment-variable-translation-for-xpack-task-manager-index/260624)
**Author:** [@ade.syseng](https://discuss.elastic.co/u/ade.syseng)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-docker-environment-variable-translation-for-xpack-task-manager-index/260624 "2021-01-14T14:12:56Z")
Hi, I'm just learning to implement Elastic Stack on Docker swarm configuration. I have an issue to rename index default name ".kibana\_task\_manager" using "xpack.task\_manager.index". According to this documentation all … --- ## [Additional filters in Canvas](https://discuss.elastic.co/t/additional-filters-in-canvas/257711)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 3:46am UTC](https://discuss.elastic.co/t/additional-filters-in-canvas/257711 "2020-12-16T03:46:30Z")
Hello everybody, We have created a canvas with several “dropdown select” as well as “data table” elements. The “dropdown select” elements are working as filters for the details presented in the “data table” elements. O… --- ## [How to get a continuous transform to write to multiple indexes](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 3:35am UTC](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391 "2020-06-25T03:35:11Z")
When I load my data through logstash I specify an index name pattern, to split the index up by time. I now have a continuous transform running, grouping by a 1 hour date histogram, against that data. Problem is it's wr… --- ## [\[Use Case\] Last Login Time for User](https://discuss.elastic.co/t/use-case-last-login-time-for-user/213700)
**Author:** [@rohus24](https://discuss.elastic.co/u/rohus24)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 12:35pm UTC](https://discuss.elastic.co/t/use-case-last-login-time-for-user/213700 "2020-01-06T12:35:00Z")
Hi, I have created an index which is populated with event logs from my application. I would like to attempt to do the following using logstash: Determine all user login events (using pre-defined tags in logstash confi… --- ## [Too many buckets error on Monitoring page indices](https://discuss.elastic.co/t/too-many-buckets-error-on-monitoring-page-indices/206251)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 10:31am UTC](https://discuss.elastic.co/t/too-many-buckets-error-on-monitoring-page-indices/206251 "2019-11-29T10:31:31Z")
I upgraded my cluster to 7.4.0. Metricbeat , Logstash, Elasticsearch and Kibana all were upgraded. After the upgrade, on the monitoring page, when I try to visit the Logstash pipelines page, I am getting the following er… --- ## [Waiting for admin cluster to become reachable, after OS upgrade from rhek 7.6 to rhel 7.7](https://discuss.elastic.co/t/waiting-for-admin-cluster-to-become-reachable-after-os-upgrade-from-rhek-7-6-to-rhel-7-7/207343)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 7:49am UTC](https://discuss.elastic.co/t/waiting-for-admin-cluster-to-become-reachable-after-os-upgrade-from-rhek-7-6-to-rhel-7-7/207343 "2019-11-12T07:49:32Z")
Hi there, I had to upgrade the OS and for this I deleted the ECE completely like mentioned in the docs. It worked and I reinstalled and rejoined the node. In the UI I can see the runner and configure the roles. But it s… --- ## [Configure filebeat to send only required fields](https://discuss.elastic.co/t/configure-filebeat-to-send-only-required-fields/181479)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 2\ **Last updated:** [May 16, 2019, 9:43pm UTC](https://discuss.elastic.co/t/configure-filebeat-to-send-only-required-fields/181479 "2019-05-16T21:43:07Z")
Hi My filebeat send the following data to ES. I don't need all the fields Is there a way I can configure filebeat to send only required fields. Supporse I only need few fileds from the below data to be sent to ES. { … --- ## [Get logs from docker containers in filebeat](https://discuss.elastic.co/t/get-logs-from-docker-containers-in-filebeat/155180)
**Author:** [@bertolis](https://discuss.elastic.co/u/bertolis)\ **Replies:** 2\ **Last updated:** [November 8, 2018, 11:37am UTC](https://discuss.elastic.co/t/get-logs-from-docker-containers-in-filebeat/155180 "2018-11-08T11:37:03Z")
Hi, lets say i have an elastic stack running in docker. In another pc i have an Alfresco running in docker as well. In the same pc i also have filebeat that is running in docker too. The Alfresco image has tomcat and pos… --- ## [Visualization: Controls - Dropdown limited to 10 entries](https://discuss.elastic.co/t/visualization-controls-dropdown-limited-to-10-entries/152060)
**Author:** [@faulander](https://discuss.elastic.co/u/faulander)\ **Replies:** 2\ **Last updated:** [October 11, 2018, 2:13pm UTC](https://discuss.elastic.co/t/visualization-controls-dropdown-limited-to-10-entries/152060 "2018-10-11T14:13:21Z")
documentation mentions a size field, but it doesn't show for me and i am stuck with 10 entries in the dropdown, even i know i have 20+ for that given filter. --- ## [Troubleshooting / cleaning up pending reports](https://discuss.elastic.co/t/troubleshooting-cleaning-up-pending-reports/149561)
**Author:** [@Horaci\_Macias](https://discuss.elastic.co/u/Horaci_Macias)\ **Replies:** 2\ **Last updated:** [September 25, 2018, 8:18pm UTC](https://discuss.elastic.co/t/troubleshooting-cleaning-up-pending-reports/149561 "2018-09-25T20:18:36Z")
I've been testing with Report generation, both manual and automatic through Watcher. Things were working initially but 3-4 days ago reports started failing. Now none of the reports seem to work anymore, both manual and … --- ## [Apm econnrefused](https://discuss.elastic.co/t/apm-econnrefused/145178)
**Author:** [@Scott\_Newby](https://discuss.elastic.co/u/Scott_Newby)\ **Replies:** 2\ **Last updated:** [August 21, 2018, 12:57pm UTC](https://discuss.elastic.co/t/apm-econnrefused/145178 "2018-08-21T12:57:24Z")
Error: connect ECONNREFUSED \:8200 at Object.\_errnoException (util.js:992:11) at \_exceptionWithHostPort (util.js:1014:20) at TCPConnectWrap.afterConnect \[as oncomplete\] (net.js:1186:14) Trying to setup and connect … --- ## [Стоп-слова](https://discuss.elastic.co/t/topic/144889)
**Author:** [@mfiyalka](https://discuss.elastic.co/u/mfiyalka)\ **Replies:** 2\ **Last updated:** [August 17, 2018, 5:25pm UTC](https://discuss.elastic.co/t/topic/144889 "2018-08-17T17:25:28Z")
Я использую elasticsearch php. $this-\>client-\>indices()-\>create(\[ 'index' =\> 'kmr', 'body' =\> \[ 'mappings' =\> \[ 'deputy' =\> \[ '\_source'… --- ## [Trying to create a pie chart but Im a bit lost](https://discuss.elastic.co/t/trying-to-create-a-pie-chart-but-im-a-bit-lost/124559)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 2\ **Last updated:** [March 19, 2018, 1:41pm UTC](https://discuss.elastic.co/t/trying-to-create-a-pie-chart-but-im-a-bit-lost/124559 "2018-03-19T13:41:09Z")
I've managed to get some data from Jboss Fuse into my Kibana, and now I want to create a Pie chart displaying log level. It can either be TRACE, DEBUG, INFO, WARN, ERROR or FATAL. I've studied some tutorials on YouTube … --- ## [Why Logstash reload the same data many times?](https://discuss.elastic.co/t/why-logstash-reload-the-same-data-many-times/106833)
**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\ **Replies:** 2\ **Last updated:** [November 8, 2017, 10:25am UTC](https://discuss.elastic.co/t/why-logstash-reload-the-same-data-many-times/106833 "2017-11-08T10:25:02Z")
Hello, I have an issue with Logstash, it loads the same data many times. this is my config, Logstash is running as a service on Windows. input { file { path =\>\["D:/exploit/tmp/nuitAppELK/annuel/C… --- ## [Web Performance Visualizations](https://discuss.elastic.co/t/web-performance-visualizations/59450)
**Author:** [@fp5885](https://discuss.elastic.co/u/fp5885)\ **Replies:** 2\ **Last updated:** [September 2, 2016, 11:50am UTC](https://discuss.elastic.co/t/web-performance-visualizations/59450 "2016-09-02T11:50:09Z")
New to ELK. I have started to index our company's web performance data. I'm currently using the metric visualization to show average page load time. This works but I'm looking for a better way to visualize it in comparis… --- ## [Elastic and Kibana, indexing al Json with an field array looks like a plain String](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433)
**Author:** [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\ **Replies:** 2\ **Last updated:** [February 18, 2015, 3:20am UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433 "2015-02-18T03:20:10Z")
I'm starting working with Elastic and Kibana. I have indexed some JSON but I think that there're something that I'm missing. My JSONs have some simple fields and another field that it's an array, the schema is: … --- ## [Painless script with GeoShape type query](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647)
**Author:** [@kindchri](https://discuss.elastic.co/u/kindchri)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 2:40pm UTC](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647 "2022-05-25T14:40:21Z")
I'm trying to create a runtime field in a search request Link to documentation. In the script for the field I need to check if a geo point (lat, lng) in a field on the document is within a poiygon/bounding box that is p… --- ## [Modify Kibana Embeds to improve UX](https://discuss.elastic.co/t/modify-kibana-embeds-to-improve-ux/301054)
**Author:** [@msanz-acclaro](https://discuss.elastic.co/u/msanz-acclaro)\ **Replies:** 5\ **Last updated:** [April 6, 2022, 3:32pm UTC](https://discuss.elastic.co/t/modify-kibana-embeds-to-improve-ux/301054 "2022-04-06T15:32:38Z")
Hi there, We have some dashboards from Kibana that we are injecting in our app through iframes. We do not want to allow filters to display because we still have to do some cleanup in our indexes and also name the fields… --- ## [TSVB table results greater than 12 hours results in an error](https://discuss.elastic.co/t/tsvb-table-results-greater-than-12-hours-results-in-an-error/284253)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 5\ **Last updated:** [October 1, 2021, 4:05am UTC](https://discuss.elastic.co/t/tsvb-table-results-greater-than-12-hours-results-in-an-error/284253 "2021-10-01T04:05:52Z")
Hi All, I have a bit of a strange issue - I have created a TSVB table with 8 columns. 3 are normal count columns. The remaining 5 are filter ratios. The weird scenario is that if we keep the time to "Last 12 hours",… --- ## [Repeat testing/simulation with fixed log scenarios](https://discuss.elastic.co/t/repeat-testing-simulation-with-fixed-log-scenarios/194386)
**Author:** [@Kevin\_Taylor](https://discuss.elastic.co/u/Kevin_Taylor)\ **Replies:** 5\ **Last updated:** [August 9, 2019, 3:10pm UTC](https://discuss.elastic.co/t/repeat-testing-simulation-with-fixed-log-scenarios/194386 "2019-08-09T15:10:11Z")
Hi All, I'm fairly new to the elastic stack but I've successfully created various sandbox environments (using docker compose) chaining FileBeat, WinLogBeat and PacketBeat to LogStash for example. I've worked a lot with … --- ## [Index in key and value form](https://discuss.elastic.co/t/index-in-key-and-value-form/107128)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 5\ **Last updated:** [November 13, 2017, 8:24am UTC](https://discuss.elastic.co/t/index-in-key-and-value-form/107128 "2017-11-13T08:24:12Z")
How can I get result like this..."search\_data": \[ .... "string\_facet": \[ { "facet-name": "manufacturer", "facet-value": "Fortis" }, { "facet-name": "hammer\_weight", "facet-value": "1000" } \], "number\_facet": … --- ## [Select document from Elasticsearch](https://discuss.elastic.co/t/select-document-from-elasticsearch/66829)
**Author:** [@hatienkma](https://discuss.elastic.co/u/hatienkma)\ **Replies:** 5\ **Last updated:** [November 25, 2016, 4:14am UTC](https://discuss.elastic.co/t/select-document-from-elasticsearch/66829 "2016-11-25T04:14:16Z")
Hello all, I have a problem when select document. { "database" : { "mappings" : { "tables" : { "properties" : { "sex" : { "type" : "string" }, "name" : { … --- ## [Facet search over a field containing a hyphen/dash/- kills elasticserch with big data volumes, but not with small](https://discuss.elastic.co/t/facet-search-over-a-field-containing-a-hyphen-dash-kills-elasticserch-with-big-data-volumes-but-not-with-small/10337)
**Author:** [@SimonJohansson](https://discuss.elastic.co/u/SimonJohansson)\ **Replies:** 5\ **Last updated:** [January 18, 2013, 7:37pm UTC](https://discuss.elastic.co/t/facet-search-over-a-field-containing-a-hyphen-dash-kills-elasticserch-with-big-data-volumes-but-not-with-small/10337 "2013-01-18T19:37:16Z")
Elasticsearch 0.20.1, 2 cluster nodes. 12 shards for the index, 134000000 documents, datasize of 74Gb We have added a couple of fields called x\_y1, x\_y2..x\_y6 to our mappings where y1-y6 can either contains a hypn… --- ## [Elastic pipeline processors grok for question!](https://discuss.elastic.co/t/elastic-pipeline-processors-grok-for-question/333852)
**Author:** [@Teresajw](https://discuss.elastic.co/u/Teresajw)\ **Replies:** 0\ **Last updated:** [May 19, 2023, 9:13am UTC](https://discuss.elastic.co/t/elastic-pipeline-processors-grok-for-question/333852 "2023-05-19T09:13:51Z")
When I parsed the nginx log using Filebeat pipeline, a user\_agent field in the log failed to be parsed. The following error is displayed. {"type":"mapper\_parsing\_exception","reason":"object mapping for \[user\_agent\] trie… --- ## [SearchRequest source timeout not working for Java HighLevelRESTClient](https://discuss.elastic.co/t/searchrequest-source-timeout-not-working-for-java-highlevelrestclient/304507)
**Author:** [@Constantine\_Cheng](https://discuss.elastic.co/u/Constantine_Cheng)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:39pm UTC](https://discuss.elastic.co/t/searchrequest-source-timeout-not-working-for-java-highlevelrestclient/304507 "2022-05-11T21:39:01Z")
Hello, I am trying to parse a timeout parameter to searchRequest.source().timeout() in Kotlin and run HighLevelRestClient.search(searchRequest). The timeout interval in my case is set to be 1 ms for testing if the timeo… --- ## [Shard allocation does not cause shards to move (ES 2.2.1)](https://discuss.elastic.co/t/shard-allocation-does-not-cause-shards-to-move-es-2-2-1/48896)
**Author:** [@swturner](https://discuss.elastic.co/u/swturner)\ **Replies:** 7\ **Last updated:** [May 1, 2016, 10:56pm UTC](https://discuss.elastic.co/t/shard-allocation-does-not-cause-shards-to-move-es-2-2-1/48896 "2016-05-01T22:56:37Z")
I have two active nodes, and I want to move all shards off of one of them, prior to taking it out of service. Because I'm cheap, and not too worried about data loss, I have 0 replicas configured. So I want to use shard… --- ## [\[Metricbeat 7.9\] x509: certificate is valid for instance, not localhost](https://discuss.elastic.co/t/metricbeat-7-9-x509-certificate-is-valid-for-instance-not-localhost/266849)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 8:00pm UTC](https://discuss.elastic.co/t/metricbeat-7-9-x509-certificate-is-valid-for-instance-not-localhost/266849 "2021-03-16T20:00:27Z")
Hello, I'm trying to send data from Metricbeat 7.9 to an already-tls-working Elasticsearch 7.9 but without success...It is a test environment, everything on same server(Elasticsearch, Kibana and Metricbeat) my metricbe… --- ## [Unable to create Index Patterns](https://discuss.elastic.co/t/unable-to-create-index-patterns/147688)
**Author:** [@aash\_dhariya](https://discuss.elastic.co/u/aash_dhariya)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 11:21am UTC](https://discuss.elastic.co/t/unable-to-create-index-patterns/147688 "2018-09-07T11:21:11Z")
I am setting up kibana on local that connects to remote elasticsearch. I changed the url in data/kibana.conf. However, when I want to create index pattern to start visualising the data, I get an error Index pattern url … --- ## [Elasticsearch get results only appeared in last 30 seconds](https://discuss.elastic.co/t/elasticsearch-get-results-only-appeared-in-last-30-seconds/145299)
**Author:** [@yolo\_1900](https://discuss.elastic.co/u/yolo_1900)\ **Replies:** 1\ **Last updated:** [August 22, 2018, 1:27am UTC](https://discuss.elastic.co/t/elasticsearch-get-results-only-appeared-in-last-30-seconds/145299 "2018-08-22T01:27:47Z")
I have two Python client code. One runs each 30 seconds and submits data to elasticsearch. The other one runs each 30 seconds, download the data that is submitted by the first program and analyze the data. In the second… --- ## [Custom Label for Percentile in Line Graph](https://discuss.elastic.co/t/custom-label-for-percentile-in-line-graph/90343)
**Author:** [@tidu](https://discuss.elastic.co/u/tidu)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 11:10pm UTC](https://discuss.elastic.co/t/custom-label-for-percentile-in-line-graph/90343 "2017-06-21T23:10:39Z")
I am trying to remove the prefix label "Xth Percentile of" when I am aggregating using percentiles on a field. Is there a way to make this change because right now if I add the custom Label it updates the custom label t… --- ## [Logstash-5.4-Executing multiple conf files throws errors](https://discuss.elastic.co/t/logstash-5-4-executing-multiple-conf-files-throws-errors/89179)
**Author:** [@riddhijit\_roy](https://discuss.elastic.co/u/riddhijit_roy)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 1:09pm UTC](https://discuss.elastic.co/t/logstash-5-4-executing-multiple-conf-files-throws-errors/89179 "2017-06-13T13:09:26Z")
In the previous versions of Logstash one could run multiple conf files and it would run without any errors. For instance , "abc-test.conf" and "abc-dev.conf" would run simultaneously . However in logstash-5.4 running t… --- ## [Holding onto handles of deleted files](https://discuss.elastic.co/t/holding-onto-handles-of-deleted-files/72340)
**Author:** [@justinyeh3112](https://discuss.elastic.co/u/justinyeh3112)\ **Replies:** 1\ **Last updated:** [January 23, 2017, 12:11pm UTC](https://discuss.elastic.co/t/holding-onto-handles-of-deleted-files/72340 "2017-01-23T12:11:51Z")
Hi, Is there a good way to have filebeat let go of the filehandle for a file after a certain amount of inactivity to the file? We are running into the following problem: Filebeat is tracking FileA The output target … --- ## [Precision\_threshold in Timelion visualization](https://discuss.elastic.co/t/precision-threshold-in-timelion-visualization/117136)
**Author:** [@geoff\_yalo](https://discuss.elastic.co/u/geoff_yalo)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 3:06pm UTC](https://discuss.elastic.co/t/precision-threshold-in-timelion-visualization/117136 "2018-01-26T15:06:33Z")
Is it possible to add a precision\_threshold to a Timelion visualization? I don't see an option to add JSON input to this type of visualization. Tagging @Marius\_Dragomir and @Dallas\_Toth based on this thread --- ## [Difference between Standalone and Cluster Environment of Elastic Stack](https://discuss.elastic.co/t/difference-between-standalone-and-cluster-environment-of-elastic-stack/160185)
**Author:** [@Havoc45](https://discuss.elastic.co/u/Havoc45)\ **Replies:** 0\ **Last updated:** [December 10, 2018, 1:41pm UTC](https://discuss.elastic.co/t/difference-between-standalone-and-cluster-environment-of-elastic-stack/160185 "2018-12-10T13:41:41Z")
Hi. I'm an intern to a company and one of the managers asks me to evaluate Elastic Stack as an possible option for their use to ease the hassle of analyzing logs. I'm new to Elastic Stack and to the whole log analysis an… --- ## [SearchResponse as JSON and back to SearchResponse](https://discuss.elastic.co/t/searchresponse-as-json-and-back-to-searchresponse/138058)
**Author:** [@muecke87](https://discuss.elastic.co/u/muecke87)\ **Replies:** 0\ **Last updated:** [June 30, 2018, 10:16am UTC](https://discuss.elastic.co/t/searchresponse-as-json-and-back-to-searchresponse/138058 "2018-06-30T10:16:12Z")
Hi We are using a Java RestHighLevelClient (v. 5.6.9) to get a SearchResponse. For testing purpose we store this SearchResponse as JSON to our file system and read it from there to test our search (so that we don't nee… --- ## [Is the precision of cardinality aggregation decided by total unique value count or filtered unique value count?](https://discuss.elastic.co/t/is-the-precision-of-cardinality-aggregation-decided-by-total-unique-value-count-or-filtered-unique-value-count/349073)
**Author:** [@henrhoi](https://discuss.elastic.co/u/henrhoi)\ **Replies:** 4\ **Last updated:** [December 13, 2023, 1:07pm UTC](https://discuss.elastic.co/t/is-the-precision-of-cardinality-aggregation-decided-by-total-unique-value-count-or-filtered-unique-value-count/349073 "2023-12-13T13:07:14Z")
Hi, We have an index with a field containing ~30,000 unique values. When doing a filtered cardinality aggregation on this field, which should return ~650 unique values, we experience non-deterministic results (±25). W… --- ## [\[elastic\_agent\]\[error\] Cannot checkin in with fleet-server, retrying](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046)
**Author:** [@samy\_guest](https://discuss.elastic.co/u/samy_guest)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 8:38am UTC](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046 "2024-07-17T08:38:22Z")
I have an elk on-promise cluster on which I have deployed fleet server and elastic agent nodes following an upgrade of ELK from 8.12.1 to 8.14.1 then .2 I had a problem with elastic agent managed by fleet the problem … --- ## [Exists query for field that has only 1 nested child not working](https://discuss.elastic.co/t/exists-query-for-field-that-has-only-1-nested-child-not-working/268897)
**Author:** [@MiDe](https://discuss.elastic.co/u/MiDe)\ **Replies:** 4\ **Last updated:** [April 19, 2021, 7:39am UTC](https://discuss.elastic.co/t/exists-query-for-field-that-has-only-1-nested-child-not-working/268897 "2021-04-19T07:39:20Z")
Trying to query entries based on a mapping like this: {"top": { "properties": { "doc": { "properties": { "A": { "properties": { "B": { "type… --- ## [Can index.query.default\_field exclude certain fields if no field is provided in the query string](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 4\ **Last updated:** [December 6, 2019, 1:09am UTC](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630 "2019-12-06T01:09:12Z")
I am trying to ignore certain fields if no field is provided in the query string. index.query.default\_field can whitelist all the fields in an array. is there a way to blacklist certain fields, e.g. by name or by type? W… --- ## [Unable to parse json log to Kibana](https://discuss.elastic.co/t/unable-to-parse-json-log-to-kibana/202620)
**Author:** [@marek.vesely](https://discuss.elastic.co/u/marek.vesely)\ **Replies:** 4\ **Last updated:** [October 29, 2019, 8:02am UTC](https://discuss.elastic.co/t/unable-to-parse-json-log-to-kibana/202620 "2019-10-29T08:02:17Z")
Hello, I have json log like this: {"thread":"http-nio-8943-exec-9","level":"INFO","loggerName":"cz.direct.common.restapi.interceptor.LoggingFilter","message":{"requestNumber":140,"responseCode":200,"contentType":"appli… --- ## [Mapper\_parsing\_exception string](https://discuss.elastic.co/t/mapper-parsing-exception-string/157739)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 2:48pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-string/157739 "2018-11-28T14:48:03Z")
I use logstash 6.5.0 and elasticsearch 6.4.2 When I try to index some events this is the result: \[2018-11-21T16:27:55,156\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, … --- ## [Kibana 5.2.1: documentation mismatch](https://discuss.elastic.co/t/kibana-5-2-1-documentation-mismatch/73112)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 4\ **Last updated:** [January 30, 2017, 10:00pm UTC](https://discuss.elastic.co/t/kibana-5-2-1-documentation-mismatch/73112 "2017-01-30T22:00:18Z")
Hello, I am following tutorial at https://www.elastic.co/guide/en/kibana/current/tutorial-define-index.html I have ELK stack installed at version 5.1.2 (current). The documentation says: " For this tutorial, any pa… --- ## [Elasticsearch on Cloudlinux Crashes](https://discuss.elastic.co/t/elasticsearch-on-cloudlinux-crashes/21805)
**Author:** [@Max\_B\_2](https://discuss.elastic.co/u/Max_B_2)\ **Replies:** 4\ **Last updated:** [January 29, 2015, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-on-cloudlinux-crashes/21805 "2015-01-29T12:09:16Z")
Hey all, I use elasticsearch for the forum software known as xenforo to index all the posts and all that good stuff. We recently converted the server to cloudlinux and when ever anyone tries to rebuild the sear… --- ## [Inconsistent search cluster status and search results after long GC run](https://discuss.elastic.co/t/inconsistent-search-cluster-status-and-search-results-after-long-gc-run/16638)
**Author:** [@Thomas\_S](https://discuss.elastic.co/u/Thomas_S)\ **Replies:** 4\ **Last updated:** [March 27, 2014, 10:13pm UTC](https://discuss.elastic.co/t/inconsistent-search-cluster-status-and-search-results-after-long-gc-run/16638 "2014-03-27T22:13:07Z")
Hi, Multiple times we ran into a problem where our search cluster was in an inconsistent state. We have 3 nodes (all running 1.0.1), where nodes 2+3 hold the data (all the shards each, i.e. one replica per shard).… --- ## [Signs of too few shards? Number of documents per shard?](https://discuss.elastic.co/t/signs-of-too-few-shards-number-of-documents-per-shard/276972)
**Author:** [@egalpin](https://discuss.elastic.co/u/egalpin)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 1:13pm UTC](https://discuss.elastic.co/t/signs-of-too-few-shards-number-of-documents-per-shard/276972 "2021-06-25T13:13:49Z")
Hi all, I'm experiencing performance challenges with an ES cluster. The cluster consists of 6 data nodes (3 hot w/ ~30GB heap, 3 warm w/ ~15GB heap). The cluster holds around 4TB of data total, with a total of 20,000,00… --- ## [How can I install a specific kibana version in homebrew?](https://discuss.elastic.co/t/how-can-i-install-a-specific-kibana-version-in-homebrew/284785)
**Author:** [@PatrickZhang](https://discuss.elastic.co/u/PatrickZhang)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 4:34pm UTC](https://discuss.elastic.co/t/how-can-i-install-a-specific-kibana-version-in-homebrew/284785 "2021-09-22T16:34:28Z")
I installed a specific Elasticsearch version (7.9.3) in homebrew. That's the pinned version we run. As a result I have to install a matching kibana version. Doing homebrew search kibana, I only got kibana-full(7.14), ki… --- ## [Using Swiftype site search and faceting with crawler](https://discuss.elastic.co/t/using-swiftype-site-search-and-faceting-with-crawler/272091)
**Author:** [@karl\_st](https://discuss.elastic.co/u/karl_st)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 7:14pm UTC](https://discuss.elastic.co/t/using-swiftype-site-search-and-faceting-with-crawler/272091 "2021-05-12T19:14:06Z")
Hi, I had a question - I am working with an outside vendor who is building a Salesforce commerce cloud implementation. We currently use site search via crawler to index both our current marketing site and also our cart … --- ## [Error running Kibana docker-compose](https://discuss.elastic.co/t/error-running-kibana-docker-compose/184349)
**Author:** [@dbranco](https://discuss.elastic.co/u/dbranco)\ **Replies:** 2\ **Last updated:** [June 5, 2019, 1:59pm UTC](https://discuss.elastic.co/t/error-running-kibana-docker-compose/184349 "2019-06-05T13:59:35Z")
Hello everyone, I am trying to run elk stack in a machine using docker: OS: Ubuntu 18.04.2 LTS (GNU/Linux 4.15.0-45-generic x86\_64) I have installed docker and docker-compose in it. Then run: docker run -d -p 9200:… --- ## [Visualizing a workflow](https://discuss.elastic.co/t/visualizing-a-workflow/175234)
**Author:** [@gbisada](https://discuss.elastic.co/u/gbisada)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 6:16am UTC](https://discuss.elastic.co/t/visualizing-a-workflow/175234 "2019-04-10T06:16:31Z")
Hello - Require advice or guidance on how I can deliver the requirement below. First, the input: I have several ascii logs that contain a series of steps that a user performed, each in a single line. For instance, for… --- ## [Filebeat does not correctly resolve container IP](https://discuss.elastic.co/t/filebeat-does-not-correctly-resolve-container-ip/115803)
**Author:** [@grantcurell](https://discuss.elastic.co/u/grantcurell)\ **Replies:** 2\ **Last updated:** [January 19, 2018, 7:31pm UTC](https://discuss.elastic.co/t/filebeat-does-not-correctly-resolve-container-ip/115803 "2018-01-19T19:31:38Z")
I'm setting up a Filebeat container with Kafka output to another container on the same back end docker network. I can confirm the container itself appropriately resolve the kafka container with: \[root@rocksensor1 ~\]# do… [Previous page](https://discuss.elastic.co/top.md?page=1494&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1496&per_page=50&period=all)