# Top

**URL:** https://discuss.elastic.co/top.md?page=1504&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1505

---

## [Ingest processor for sending email gives \`access denied ("java.lang.RuntimePermission" "setFactory")\`](https://discuss.elastic.co/t/ingest-processor-for-sending-email-gives-access-denied-java-lang-runtimepermission-setfactory/262594)

<div class="topic-metadata">

**Author:** [@Ripu\_Sudan](https://discuss.elastic.co/u/Ripu_Sudan)\
**Replies:** 4\
**Last updated:** [January 29, 2021, 7:05am UTC](https://discuss.elastic.co/t/ingest-processor-for-sending-email-gives-access-denied-java-lang-runtimepermission-setfactory/262594 "2021-01-29T07:05:06Z")

</div>

I was making an ingest processor that would send an email on a particular condition, i'm using "compile 'javax.mail:javax.mail-api:1.5.3'" while running "gradle check" if gives permisson error. REPRODUCE WITH: ./gradle…

---

## [How to compile Vega-Lite project to Vega?](https://discuss.elastic.co/t/how-to-compile-vega-lite-project-to-vega/259837)

<div class="topic-metadata">

**Author:** [@Ganymede](https://discuss.elastic.co/u/Ganymede)\
**Replies:** 4\
**Last updated:** [January 1, 2021, 6:50pm UTC](https://discuss.elastic.co/t/how-to-compile-vega-lite-project-to-vega/259837 "2021-01-01T18:50:18Z")

</div>

Hello all, Literally title. I have a working project in Vega-Lite and want to add "Vega only features" ontop of it. Is it possible to compile the Vega-Lite script and look at the resulting Vega output? As far as I'm …

---

## [How to connect Java program in elastic search 7.3.1?](https://discuss.elastic.co/t/how-to-connect-java-program-in-elastic-search-7-3-1/198825)

<div class="topic-metadata">

**Author:** [@Velliyangiri](https://discuss.elastic.co/u/Velliyangiri)\
**Replies:** 4\
**Last updated:** [September 10, 2019, 11:01am UTC](https://discuss.elastic.co/t/how-to-connect-java-program-in-elastic-search-7-3-1/198825 "2019-09-10T11:01:42Z")

</div>

Is this above code is not compile successfully.I use elastic search 7.3.1.. So please give me the proper solution to connect elastic search 7.3.1 using java.

---

## [Environment variable error](https://discuss.elastic.co/t/environment-variable-error/156709)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 4\
**Last updated:** [November 21, 2018, 2:35pm UTC](https://discuss.elastic.co/t/environment-variable-error/156709 "2018-11-21T14:35:49Z")

</div>

Hi! There isn't too many documents or threads on this issue and I reckon it isn't used too much. I've several external configuration files to make updating more dynamic. I'd like to add environment variables to these w…

---

## [Search query for multivalue field in Kibana Search Box](https://discuss.elastic.co/t/search-query-for-multivalue-field-in-kibana-search-box/138464)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 4\
**Last updated:** [July 5, 2018, 2:16am UTC](https://discuss.elastic.co/t/search-query-for-multivalue-field-in-kibana-search-box/138464 "2018-07-05T02:16:03Z")

</div>

I am using Elasticsearch 5.1 and Kibana 5.1 I need to search multivalue field in Kibana. For example I have an index with a multivalued field named "tags". I have 2 documents in the index { "tags" : \["search"\] } { "…

---

## [Install custom plugin](https://discuss.elastic.co/t/install-custom-plugin/99188)

<div class="topic-metadata">

**Author:** [@Achi](https://discuss.elastic.co/u/Achi)\
**Replies:** 4\
**Last updated:** [September 3, 2017, 6:57pm UTC](https://discuss.elastic.co/t/install-custom-plugin/99188 "2017-09-03T18:57:55Z")

</div>

Hello, I would like to install a custom plugin (LTR : https://github.com/o19s/elasticsearch-learning-to-rank). I use Elastic Cloud. Apparently I have to upgrade to a premium subscription. I’ve just requested info at ht…

---

## [Logstash.service unable to access Keystore](https://discuss.elastic.co/t/logstash-service-unable-to-access-keystore/353628)

<div class="topic-metadata">

**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\
**Replies:** 7\
**Last updated:** [February 20, 2024, 11:48am UTC](https://discuss.elastic.co/t/logstash-service-unable-to-access-keystore/353628 "2024-02-20T11:48:06Z")

</div>

Hello everyone, while trying to setup a test Logstash instance, i struggle to get it running. The following error appears, viewable via journalctl: ERROR: Failed to load settings file from "path.settings". Aborting...…

---

## [java.lang.IllegalArgumentException: Setting \[xpack.security.transport.ssl.keystore.path\] is a non-secure setting and must be stored inside elasticsearch.yml, but was found inside the Elasticsearch keystore](https://discuss.elastic.co/t/java-lang-illegalargumentexception-setting-xpack-security-transport-ssl-keystore-path-is-a-non-secure-setting-and-must-be-stored-inside-elasticsearch-yml-but-was-found-inside-the-elasticsearch-keystore/333700)

<div class="topic-metadata">

**Author:** [@tungnx1](https://discuss.elastic.co/u/tungnx1)\
**Replies:** 1\
**Last updated:** [May 29, 2023, 12:38am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-setting-xpack-security-transport-ssl-keystore-path-is-a-non-secure-setting-and-must-be-stored-inside-elasticsearch-yml-but-was-found-inside-the-elasticsearch-keystore/333700 "2023-05-29T00:38:18Z")

</div>

Why after run: ./bin/elasticsearch-certutil http folder master: total 12 -rwxr-xr-x 1 root elasticsearch 3620 May 17 17:24 http.p12 -rwxr-xr-x 1 root elasticsearch 1365 May 17 17:24 README.txt -rwxr-xr-x 1 root elast…

---

## [Fleet and Suricata for Elastic Security](https://discuss.elastic.co/t/fleet-and-suricata-for-elastic-security/295455)

<div class="topic-metadata">

**Author:** [@Limoelou](https://discuss.elastic.co/u/Limoelou)\
**Replies:** 1\
**Last updated:** [January 26, 2022, 5:16pm UTC](https://discuss.elastic.co/t/fleet-and-suricata-for-elastic-security/295455 "2022-01-26T17:16:26Z")

</div>

Hello, I am a junior Cybersecurity Engineer and I have to build from scratch a SIEM that needs to monitor many hosts. Until now, I had several agents (filebeat, auditbeat, winlogbeat, suricata) installed on several ho…

---

## [Host isolation](https://discuss.elastic.co/t/host-isolation/286745)

<div class="topic-metadata">

**Author:** [@wmacleodstrath](https://discuss.elastic.co/u/wmacleodstrath)\
**Replies:** 7\
**Last updated:** [October 18, 2021, 8:12am UTC](https://discuss.elastic.co/t/host-isolation/286745 "2021-10-18T08:12:09Z")

</div>

7.14 - when I go to a case, with an alert on it , and click to get the fly out, I'm not seeing an option to "Take Action" and isolate a host. Do you only see the "Take Action" button if there is a certain alert in the ca…

---

## [Index health status coming as 'red\*'](https://discuss.elastic.co/t/index-health-status-coming-as-red/259049)

<div class="topic-metadata">

**Author:** [@NinjaMonkey](https://discuss.elastic.co/u/NinjaMonkey)\
**Replies:** 7\
**Last updated:** [December 22, 2020, 9:27am UTC](https://discuss.elastic.co/t/index-health-status-coming-as-red/259049 "2020-12-22T09:27:39Z")

</div>

Using ES 6.5.4 I am using NEST query that basically looks for cat indices for my client and gets health status for all the indices. The expected health statuses are green, yellow and red. However, for one of my lower e…

---

## [If enable ILM in config file, then cannot set custom elastic output index](https://discuss.elastic.co/t/if-enable-ilm-in-config-file-then-cannot-set-custom-elastic-output-index/251307)

<div class="topic-metadata">

**Author:** [@tonysue](https://discuss.elastic.co/u/tonysue)\
**Replies:** 7\
**Last updated:** [October 10, 2020, 5:45pm UTC](https://discuss.elastic.co/t/if-enable-ilm-in-config-file-then-cannot-set-custom-elastic-output-index/251307 "2020-10-10T17:45:24Z")

</div>

setup.template.overwrite: true output.elasticsearch.index: "winlogbeat=%{\[agent.version\]}"-city-firm-hostname-%{+yyyy,MM,dd}-000001" setup.template.name: "winlogbeat" setup.template.pattern: "winlogbeat-\*" setup.ilm.…

---

## [ElasticSearch index template from 6.8 to 7.4 need some help](https://discuss.elastic.co/t/elasticsearch-index-template-from-6-8-to-7-4-need-some-help/203907)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 6:49pm UTC](https://discuss.elastic.co/t/elasticsearch-index-template-from-6-8-to-7-4-need-some-help/203907 "2019-10-16T18:49:05Z")

</div>

Hello guys/girls, I am trying to upgrade from ElasticSearch 6.8 to 7.4 and need some help with my ElasticSearch index template. My current template { "template" : "logstash-\*", "version" : 60001, "settings" : { …

---

## [Kibana Canvas Pie Chart showing data from two different queries](https://discuss.elastic.co/t/kibana-canvas-pie-chart-showing-data-from-two-different-queries/199791)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 1\
**Last updated:** [September 17, 2019, 1:52pm UTC](https://discuss.elastic.co/t/kibana-canvas-pie-chart-showing-data-from-two-different-queries/199791 "2019-09-17T13:52:39Z")

</div>

Hi everybody! I have two tables where I have opposite results that I'd like to see together in some chart (Pie Chart if possible :smiley: ) The queries are almost the same: | essql query="select num1.keyword from data…

---

## [Ingesting Offline Windows Event Logs](https://discuss.elastic.co/t/ingesting-offline-windows-event-logs/131627)

<div class="topic-metadata">

**Author:** [@steved](https://discuss.elastic.co/u/steved)\
**Replies:** 1\
**Last updated:** [May 13, 2018, 7:02pm UTC](https://discuss.elastic.co/t/ingesting-offline-windows-event-logs/131627 "2018-05-13T19:02:40Z")

</div>

Hello all, there's a fair amount of information around for live shipping of Windows event logs, Winlogbeat which is great in "live" but to the best of my knowledge doesn't support "offline" processing. So I'm struggling …

---

## [Kibana X Pack installation failed](https://discuss.elastic.co/t/kibana-x-pack-installation-failed/125537)

<div class="topic-metadata">

**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\
**Replies:** 1\
**Last updated:** [March 26, 2018, 5:07am UTC](https://discuss.elastic.co/t/kibana-x-pack-installation-failed/125537 "2018-03-26T05:07:20Z")

</div>

$ bin/kibana-plugin install x-pack Attempting to transfer from x-pack Attempting to transfer from https://artifacts.elastic.co/downloads/kibana-plugins/x-pack/x-pack-6.2.1.zip Error: Client request error: getaddrinfo …

---

## [Kibana Authentication](https://discuss.elastic.co/t/kibana-authentication/118162)

<div class="topic-metadata">

**Author:** [@bhagyashree\_sarkar](https://discuss.elastic.co/u/bhagyashree_sarkar)\
**Replies:** 7\
**Last updated:** [February 2, 2018, 11:23am UTC](https://discuss.elastic.co/t/kibana-authentication/118162 "2018-02-02T11:23:39Z")

</div>

I want to know how I can secure the data set based on what a user has access in. I'm using kibana 7.0.0-alpha1 downloaded from https://github.com/elastic/kibana. Solely i want to implement authentication in kibana.

---

## [Machine Learning - Lab 1 - login error](https://discuss.elastic.co/t/machine-learning-lab-1-login-error/115104)

<div class="topic-metadata">

**Author:** [@mrauch](https://discuss.elastic.co/u/mrauch)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 2:29pm UTC](https://discuss.elastic.co/t/machine-learning-lab-1-login-error/115104 "2018-01-11T14:29:30Z")

</div>

Hello, I got a problem logging in on localhost:9200 (step 7 in Lab 1) even I followed all instructions for installing elasticsearch and x-pack. This error occurs: {"error":{"root\_cause":\[{"type":"security\_exception","r…

---

## [Rank results by sorting the matched field](https://discuss.elastic.co/t/rank-results-by-sorting-the-matched-field/70588)

<div class="topic-metadata">

**Author:** [@leeavital](https://discuss.elastic.co/u/leeavital)\
**Replies:** 1\
**Last updated:** [January 5, 2017, 12:52pm UTC](https://discuss.elastic.co/t/rank-results-by-sorting-the-matched-field/70588 "2017-01-05T12:52:30Z")

</div>

I often have Elasticsearch results searching across multiple fields. Some fields are more important than others, so I use a combination of query weighting and result post-processing to sort results based on the importanc…

---

## [Deleting indices does not give back disk space](https://discuss.elastic.co/t/deleting-indices-does-not-give-back-disk-space/24251)

<div class="topic-metadata">

**Author:** [@jayem](https://discuss.elastic.co/u/jayem)\
**Replies:** 1\
**Last updated:** [June 26, 2015, 11:25pm UTC](https://discuss.elastic.co/t/deleting-indices-does-not-give-back-disk-space/24251 "2015-06-26T23:25:24Z")

</div>

hi all We are running, Logstash, Elastic Search and Kibana all on the same server. We use it to review log/alert data. We only care about the last 7 days worth of data. As our hard disk is starting to fill up I'd li…

---

## [How to send Jaeger traces to Elastic Cloud](https://discuss.elastic.co/t/how-to-send-jaeger-traces-to-elastic-cloud/264820)

<div class="topic-metadata">

**Author:** [@srneodani](https://discuss.elastic.co/u/srneodani)\
**Replies:** 5\
**Last updated:** [February 22, 2021, 8:44am UTC](https://discuss.elastic.co/t/how-to-send-jaeger-traces-to-elastic-cloud/264820 "2021-02-22T08:44:47Z")

</div>

I have Jaeger working inside Kubernetes and I would like to know if it is possible to send the traces to Elastic Cloud, but I have not found much information about it, almost all the examples were with local elastic inst…

---

## [Index templates lifecycle management](https://discuss.elastic.co/t/index-templates-lifecycle-management/254950)

<div class="topic-metadata">

**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\
**Replies:** 5\
**Last updated:** [November 12, 2020, 4:38pm UTC](https://discuss.elastic.co/t/index-templates-lifecycle-management/254950 "2020-11-12T16:38:24Z")

</div>

I created an Index lifecycle policy to delete logs file entries older than 93 days to help with disk space and retention policies. I noticed that I need to create an index template to link to the policy, so I create…

---

## [Node does not match global include filters](https://discuss.elastic.co/t/node-does-not-match-global-include-filters/237303)

<div class="topic-metadata">

**Author:** [@secumind](https://discuss.elastic.co/u/secumind)\
**Replies:** 5\
**Last updated:** [June 17, 2020, 1:18pm UTC](https://discuss.elastic.co/t/node-does-not-match-global-include-filters/237303 "2020-06-17T13:18:02Z")

</div>

I have a cluster of albeit older 2.4.6 Elasticsearch. We're upgrading soon but for right now we need to keep this version running. We have 3 master nodes, 1 search node, 6 data nodes. There are a couple of billion docum…

---

## [NFS Mount for Solaris Server](https://discuss.elastic.co/t/nfs-mount-for-solaris-server/231738)

<div class="topic-metadata">

**Author:** [@kawalec](https://discuss.elastic.co/u/kawalec)\
**Replies:** 5\
**Last updated:** [May 11, 2020, 2:11pm UTC](https://discuss.elastic.co/t/nfs-mount-for-solaris-server/231738 "2020-05-11T14:11:03Z")

</div>

I have loaded up an Ubuntu Server. NFS mounted directory that hold logs of our glassfish application servers that run on solaris. added filebeats and point to the location of the logs. #=========================== Fi…

---

## [Advanced ML job, transforming data](https://discuss.elastic.co/t/advanced-ml-job-transforming-data/142645)

<div class="topic-metadata">

**Author:** [@palace](https://discuss.elastic.co/u/palace)\
**Replies:** 5\
**Last updated:** [August 2, 2018, 4:16pm UTC](https://discuss.elastic.co/t/advanced-ml-job-transforming-data/142645 "2018-08-02T16:16:17Z")

</div>

Hello, I am making an advanced ML job in X-pack that will be partitioned by a certain job-type. At the moment, the data in the field job-type that is in ES includes the version number as: "job\_cats:release-4" (this is a…

---

## [No custom module fields in Kibana](https://discuss.elastic.co/t/no-custom-module-fields-in-kibana/137319)

<div class="topic-metadata">

**Author:** [@mvasilenko](https://discuss.elastic.co/u/mvasilenko)\
**Replies:** 5\
**Last updated:** [July 3, 2018, 12:51pm UTC](https://discuss.elastic.co/t/no-custom-module-fields-in-kibana/137319 "2018-07-03T12:51:35Z")

</div>

Hello, I'm interested in creating custom Filebeat module, to parse our app log, so I've followed this guide https://www.elastic.co/elasticon/conf/2018/sf/build-your-own-filebeat-module, simulated pipeline, grok patte…

---

## [Can we get geographical location by hosted IP address from Beats?](https://discuss.elastic.co/t/can-we-get-geographical-location-by-hosted-ip-address-from-beats/92584)

<div class="topic-metadata">

**Author:** [@mahadevaprasadap](https://discuss.elastic.co/u/mahadevaprasadap)\
**Replies:** 5\
**Last updated:** [July 11, 2017, 8:59am UTC](https://discuss.elastic.co/t/can-we-get-geographical-location-by-hosted-ip-address-from-beats/92584 "2017-07-11T08:59:04Z")

</div>

I have a requirement to get the Geographical location of the servers using IP address. Kindly help me.

---

## [Multiple Heartbeat In One Windows Server](https://discuss.elastic.co/t/multiple-heartbeat-in-one-windows-server/306249)

<div class="topic-metadata">

**Author:** [@Nicole1](https://discuss.elastic.co/u/Nicole1)\
**Replies:** 6\
**Last updated:** [June 2, 2022, 10:47pm UTC](https://discuss.elastic.co/t/multiple-heartbeat-in-one-windows-server/306249 "2022-06-02T22:47:57Z")

</div>

can we have multiple heartbeats in one windows server because we want to monitor 3 different series of endpoints(appcodes).with 3 different heartbeat.yml

---

## [Filebeat : resource 'filebeat' exists, but it is not an alias](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228)

<div class="topic-metadata">

**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\
**Replies:** 2\
**Last updated:** [November 22, 2021, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228 "2021-11-22T21:10:32Z")

</div>

I have ELB set up running in kubernetes. But seeing following logs in filebeats 2021-11-15T18:08:27.786Z ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://elasti…

---

## [Error starting kibana win 10 - events.js:174](https://discuss.elastic.co/t/error-starting-kibana-win-10-events-js-174/190530)

<div class="topic-metadata">

**Author:** [@Elmo\_Heyns](https://discuss.elastic.co/u/Elmo_Heyns)\
**Replies:** 2\
**Last updated:** [July 16, 2019, 6:29am UTC](https://discuss.elastic.co/t/error-starting-kibana-win-10-events-js-174/190530 "2019-07-16T06:29:20Z")

</div>

Hi All ELK NOOB here. Been on google for some time now but im unable to get the issue sorted. SYSTEM: Windows 10 FULLY updated 64x Latest java JDK 12.0.1 64x JAVA\_HOME is set the c:\\Java\\jdk-12.0.1 PATH: c:\\Java\\jd…

---

## [Multiple pipelines for ingest Node](https://discuss.elastic.co/t/multiple-pipelines-for-ingest-node/167427)

<div class="topic-metadata">

**Author:** [@mylyo](https://discuss.elastic.co/u/mylyo)\
**Replies:** 2\
**Last updated:** [February 7, 2019, 1:15pm UTC](https://discuss.elastic.co/t/multiple-pipelines-for-ingest-node/167427 "2019-02-07T13:15:39Z")

</div>

Hello, I created a filebeat where i defined multiple sources for input as this way : filebeat.input: .... paths: -"my\_path\\\*.log In order to obtain the appropriate data, i set a pipeline that concerns one among t…

---

## [Elastic ssl certificate api](https://discuss.elastic.co/t/elastic-ssl-certificate-api/159779)

<div class="topic-metadata">

**Author:** [@misomij](https://discuss.elastic.co/u/misomij)\
**Replies:** 2\
**Last updated:** [December 10, 2018, 5:13am UTC](https://discuss.elastic.co/t/elastic-ssl-certificate-api/159779 "2018-12-10T05:13:05Z")

</div>

Hi all, I'm on 6.3.2, trying to configure SSL. I used certutil to create the keystores for ca and nodes. Trying the certificate api I get this information from my node: \[ { "path": "/etc/elasticsearch/certs/m2-…

---

## [Lostash Plugins Failing with some Dependency error](https://discuss.elastic.co/t/lostash-plugins-failing-with-some-dependency-error/136258)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 2\
**Last updated:** [June 18, 2018, 8:28am UTC](https://discuss.elastic.co/t/lostash-plugins-failing-with-some-dependency-error/136258 "2018-06-18T08:28:43Z")

</div>

Hello- I cloned many logstash plugins and executed the specs, but I get the jars dependency issues. An error occurred while loading ./spec/unit/outputs/elasticsearch\_spec.rb. Failure/Error: require "logstash/devutils/r…

---

## [Elasticsearch container doesn't start after ingest-geo-ip](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321)

<div class="topic-metadata">

**Author:** [@AJ\_NOURI](https://discuss.elastic.co/u/AJ_NOURI)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321 "2018-04-10T08:16:28Z")

</div>

I am starting with ELK and following the official doc on how to use filebeat with modules: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-quickstart.html I am using separate containers for Elas…

---

## [Security of Keystores](https://discuss.elastic.co/t/security-of-keystores/121884)

<div class="topic-metadata">

**Author:** [@Lazarbeam](https://discuss.elastic.co/u/Lazarbeam)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 7:15pm UTC](https://discuss.elastic.co/t/security-of-keystores/121884 "2018-02-28T19:15:59Z")

</div>

Team -- I'm running Filebeat and Metricbeat versions 6.2.2 on RHEL 5.11 I've followed the instructions on creating keystores for Filebeat and Metricbeat from the guides listed here and here. Everything works dandy - th…

---

## [Using filebeat to pass log files to logstash error](https://discuss.elastic.co/t/using-filebeat-to-pass-log-files-to-logstash-error/72860)

<div class="topic-metadata">

**Author:** [@brianwong](https://discuss.elastic.co/u/brianwong)\
**Replies:** 2\
**Last updated:** [January 31, 2017, 2:51am UTC](https://discuss.elastic.co/t/using-filebeat-to-pass-log-files-to-logstash-error/72860 "2017-01-31T02:51:24Z")

</div>

Hi I have setup both logstash and filebeat such that filebeat will send logs to localhost:5043 while logstash will listen for input on port 5043. However I keep getting the error " ERR Connecting error publishing events…

---

## [Timelion, dated indices and the time picker](https://discuss.elastic.co/t/timelion-dated-indices-and-the-time-picker/65583)

<div class="topic-metadata">

**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\
**Replies:** 2\
**Last updated:** [November 11, 2016, 10:04pm UTC](https://discuss.elastic.co/t/timelion-dated-indices-and-the-time-picker/65583 "2016-11-11T22:04:23Z")

</div>

We have a lot of large indices indices, separated daily as eg ourindex-YYYY.MM.DD Timelion appears to be a bit insensitive to the dates. I want to create a dashboard (for people who don't want to edit timelion config) …

---

## [Can i apply a KQL query that works on all indices present?](https://discuss.elastic.co/t/can-i-apply-a-kql-query-that-works-on-all-indices-present/301008)

<div class="topic-metadata">

**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\
**Replies:** 3\
**Last updated:** [March 30, 2022, 4:12pm UTC](https://discuss.elastic.co/t/can-i-apply-a-kql-query-that-works-on-all-indices-present/301008 "2022-03-30T16:12:58Z")

</div>

Scenario: I have a dashboard which displays info from two indices, a & b both a& b have a field (which acts as a primary key would in sql) called id i want to type into the search/query bar a filter that searches for d…

---

## [Dynamically passing to query](https://discuss.elastic.co/t/dynamically-passing-to-query/290471)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 3\
**Last updated:** [December 1, 2021, 4:29pm UTC](https://discuss.elastic.co/t/dynamically-passing-to-query/290471 "2021-12-01T16:29:52Z")

</div>

Hi Team, I have below similar logs. I have created dummy index and created mapping like below, PUT new { "mappings": { "properties": { "@timestamp": { "type": "date", "format": "yyyy-MM-d…

---

## [Update documents and field mapping](https://discuss.elastic.co/t/update-documents-and-field-mapping/280277)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 3\
**Last updated:** [August 3, 2021, 10:11am UTC](https://discuss.elastic.co/t/update-documents-and-field-mapping/280277 "2021-08-03T10:11:26Z")

</div>

I am using elasticsearch for some batch processing. The general gist of steps involved are: 1 Fetche each document from index A 2 Search index B by filtering data using attributes of document returned in step 1. 3. P…

---

## [Better French and German stemming?](https://discuss.elastic.co/t/better-french-and-german-stemming/236283)

<div class="topic-metadata">

**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\
**Replies:** 3\
**Last updated:** [June 18, 2020, 2:12pm UTC](https://discuss.elastic.co/t/better-french-and-german-stemming/236283 "2020-06-18T14:12:32Z")

</div>

Hello, I'm using cloud.elastic.co to index metadata about German and French baroque vocal music. I need to treat inflected and uninflected forms as equivalent, so someone can search "schlummer" and find the lovely Bach …

---

## [Failed to flush export bulks \[default\_local\]](https://discuss.elastic.co/t/failed-to-flush-export-bulks-default-local/198606)

<div class="topic-metadata">

**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\
**Replies:** 0\
**Last updated:** [September 9, 2019, 6:18am UTC](https://discuss.elastic.co/t/failed-to-flush-export-bulks-default-local/198606 "2019-09-09T06:18:19Z")

</div>

Caused by: org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flush export bulk \[default\_local\] monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flu…

---

## [Making User Recommendations](https://discuss.elastic.co/t/making-user-recommendations/121316)

<div class="topic-metadata">

**Author:** [@andrewzc](https://discuss.elastic.co/u/andrewzc)\
**Replies:** 3\
**Last updated:** [February 27, 2018, 6:42pm UTC](https://discuss.elastic.co/t/making-user-recommendations/121316 "2018-02-27T18:42:09Z")

</div>

Hi, I am new to Elasticsearch and am trying to use Elasticsearch to create a simple recommendation engine that recommends friends to users. I have an index consisting of users which have the properties like so: "id": …

---

## [Unsearchable keyword mapping (version 2.x -\> 5.x migration)](https://discuss.elastic.co/t/unsearchable-keyword-mapping-version-2-x-5-x-migration/87138)

<div class="topic-metadata">

**Author:** [@markwalsh-liverpool](https://discuss.elastic.co/u/markwalsh-liverpool)\
**Replies:** 3\
**Last updated:** [May 25, 2017, 9:56pm UTC](https://discuss.elastic.co/t/unsearchable-keyword-mapping-version-2-x-5-x-migration/87138 "2017-05-25T21:56:54Z")

</div>

Hello, I'm storing data by language in multiple indexes, one English index and multiple foreign languages. I store the same document in multiple indexes and I run aggregations across them, but I only want to aggregat…

---

## [Asa-5-304001](https://discuss.elastic.co/t/asa-5-304001/82394)

<div class="topic-metadata">

**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Replies:** 3\
**Last updated:** [April 16, 2017, 8:21am UTC](https://discuss.elastic.co/t/asa-5-304001/82394 "2017-04-16T08:21:29Z")

</div>

Anyone with working pattern for this message "message" =\> "\<181\>Apr 14 2017 23:00:41 ha-fw1 : %ASA-5-304001: src\_ip Accessed URL 216.58.203.109:http://accounts.google.com/\\n", thanks in advance ....

---

## [Bouncing Kibana-\>Elasticsearch connection?](https://discuss.elastic.co/t/bouncing-kibana-elasticsearch-connection/65235)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 4:30pm UTC](https://discuss.elastic.co/t/bouncing-kibana-elasticsearch-connection/65235 "2016-12-05T16:30:37Z")

</div>

.4Kibana 4.5.4 ES v2.4.1 I have an AWS instance with Kibana and ES on it set up as a client node, and is part of a 3-node ES cluster. Kibana's connection bounces, that is, goes from green-\>red-\>gren.... and I see these…

---

## [Multiple indexes output and ilm coliision](https://discuss.elastic.co/t/multiple-indexes-output-and-ilm-coliision/202481)

<div class="topic-metadata">

**Author:** [@Aviad\_Hadida](https://discuss.elastic.co/u/Aviad_Hadida)\
**Replies:** 1\
**Last updated:** [October 9, 2019, 6:30pm UTC](https://discuss.elastic.co/t/multiple-indexes-output-and-ilm-coliision/202481 "2019-10-09T18:30:01Z")

</div>

Hi. I have a use case where i have several index i would like to use. But it seems that index name are not affected when using ilm. Look on the linked discussion: Is there a way to achieve this behavior with ilm? How…

---

## [Assign weightage for every document on the basis of sum of all document](https://discuss.elastic.co/t/assign-weightage-for-every-document-on-the-basis-of-sum-of-all-document/163723)

<div class="topic-metadata">

**Author:** [@bharatbhushan](https://discuss.elastic.co/u/bharatbhushan)\
**Replies:** 3\
**Last updated:** [January 10, 2019, 1:46pm UTC](https://discuss.elastic.co/t/assign-weightage-for-every-document-on-the-basis-of-sum-of-all-document/163723 "2019-01-10T13:46:35Z")

</div>

HI all, Please help me out below mentioned problem. I want to give weightage for every document on the basis of sum of point value in a elasticsearch query. Suppose i have 3 document and then i want to get sum of all…

---

## [Update by query in ES with option conflicts=proceed](https://discuss.elastic.co/t/update-by-query-in-es-with-option-conflicts-proceed/353169)

<div class="topic-metadata">

**Author:** [@sdv](https://discuss.elastic.co/u/sdv)\
**Replies:** 1\
**Last updated:** [February 15, 2024, 12:58pm UTC](https://discuss.elastic.co/t/update-by-query-in-es-with-option-conflicts-proceed/353169 "2024-02-15T12:58:54Z")

</div>

Hi Team, I have below two questions for 'update\_by\_query' API with option 'conflicts=proceed'. Basically if we allow processing documents with 'conflicts=proceed' option and still have a retry based on 'VersionConfli…

---

## [Elastic Search - how to create index with mapping](https://discuss.elastic.co/t/elastic-search-how-to-create-index-with-mapping/340925)

<div class="topic-metadata">

**Author:** [@Krzysztof\_Lempicki](https://discuss.elastic.co/u/Krzysztof_Lempicki)\
**Replies:** 1\
**Last updated:** [August 16, 2023, 2:08pm UTC](https://discuss.elastic.co/t/elastic-search-how-to-create-index-with-mapping/340925 "2023-08-16T14:08:09Z")

</div>

elasticsearch:8.7.1 I am creating index this way: return new CreateIndexRequest.Builder() .index(name) .aliases(alias, new Alias.Builder().build()) .settings(new Inde…

[Previous page](https://discuss.elastic.co/top.md?page=1503&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1505&per_page=50&period=all)
