# Top **URL:** https://discuss.elastic.co/top.md?page=1509&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1510 --- ## [How to create Multiple trend chart in single line graph using Custom Field in Y-axis](https://discuss.elastic.co/t/how-to-create-multiple-trend-chart-in-single-line-graph-using-custom-field-in-y-axis/85457)
**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 7:28pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-trend-chart-in-single-line-graph-using-custom-field-in-y-axis/85457 "2017-05-17T19:28:04Z")
Hi I have a requirement to show the status of my Apache instances from the http\_status code from server. I have multiple Apache instance - for each http instance I need the trend graph in a single Line chart using time-i… --- ## [Synonyms and relevance](https://discuss.elastic.co/t/synonyms-and-relevance/58582)
**Author:** [@richetdan](https://discuss.elastic.co/u/richetdan)\ **Replies:** 3\ **Last updated:** [August 23, 2016, 3:36pm UTC](https://discuss.elastic.co/t/synonyms-and-relevance/58582 "2016-08-23T15:36:19Z")
I am testing the usage of a custom analyzer with a Synonym token filter. At search time I would like to have more relevance on documents which match the original term rather than the synonym. Which approach I have to us… --- ## [Failed to query elasticsearch for previous event](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event/48409)
**Author:** [@linhntt41](https://discuss.elastic.co/u/linhntt41)\ **Replies:** 0\ **Last updated:** [April 26, 2016, 9:47am UTC](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event/48409 "2016-04-26T09:47:37Z")
Hi all, I'm using logstash 2.3 elasticsearch 2.3 I use filter-plugin-elasticsearch to query previous event This is file log: 2016-04-26 16:30:00 userA in 2016-04-26 16:35:00 userA out This is file config: input{ … --- ## [Filebeat: Error on FD](https://discuss.elastic.co/t/filebeat-error-on-fd/173616)
**Author:** [@chitraj8](https://discuss.elastic.co/u/chitraj8)\ **Replies:** 2\ **Last updated:** [March 25, 2019, 11:12am UTC](https://discuss.elastic.co/t/filebeat-error-on-fd/173616 "2019-03-25T11:12:19Z")
We recently started using filebeat and its on latest version 6.6 After initiating filebeat daemon process, we are able to push messages to kafka topics Also we started seeing some errors around the metric data in the l… --- ## [Journalbeat on Kubernetes](https://discuss.elastic.co/t/journalbeat-on-kubernetes/160603)
**Author:** [@przemek\_danysz](https://discuss.elastic.co/u/przemek_danysz)\ **Replies:** 2\ **Last updated:** [March 12, 2019, 4:21pm UTC](https://discuss.elastic.co/t/journalbeat-on-kubernetes/160603 "2019-03-12T16:21:31Z")
Dears, I'm trying to run Journalbeat on Kubernetes cluster and almost all works fine :slight\_smile: I run pod with Privileges and access to /var/log/journal directory, so Journalbeat is reading it correctly, but.... B… --- ## [How to create vertical bar graph with sum of \[number\] per day, and break the bar with count of "fails"](https://discuss.elastic.co/t/how-to-create-vertical-bar-graph-with-sum-of-number-per-day-and-break-the-bar-with-count-of-fails/157374)
**Author:** [@guibarati](https://discuss.elastic.co/u/guibarati)\ **Replies:** 2\ **Last updated:** [November 20, 2018, 4:28pm UTC](https://discuss.elastic.co/t/how-to-create-vertical-bar-graph-with-sum-of-number-per-day-and-break-the-bar-with-count-of-fails/157374 "2018-11-20T16:28:40Z")
Hi, I have a database with logs and each log has a "repeat" field. I'd like to create a vertical graph that has one bar for each day. the bar metric will be the sum of "repeats" of all logs, and I want to break the bar w… --- ## [Monitor the state - JSON data - body mismatch](https://discuss.elastic.co/t/monitor-the-state-json-data-body-mismatch/156916)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 2\ **Last updated:** [November 16, 2018, 6:22pm UTC](https://discuss.elastic.co/t/monitor-the-state-json-data-body-mismatch/156916 "2018-11-16T18:22:25Z")
heartbeat.yml heartbeat.monitors: type: http urls: \["https://x.x.x.x:xxx/x/x/x"\] ssl.verification\_mode: none check.request: method: GET headers: 'x-auth-token': 'xxxxx' check.response: status: 200 body: '{"st… --- ## [Logstash aggregated error](https://discuss.elastic.co/t/logstash-aggregated-error/138031)
**Author:** [@andradedb](https://discuss.elastic.co/u/andradedb)\ **Replies:** 2\ **Last updated:** [July 4, 2018, 11:20pm UTC](https://discuss.elastic.co/t/logstash-aggregated-error/138031 "2018-07-04T23:20:43Z")
I'm trying to aggregated some results from my statement and i was following this example over here: https://www.javacodegeeks.com/2017/10/aggregate-index-data-elasticsearch-using-logstash-jdbc.html But I'm getting some … --- ## [Xpack.monitoring.history.duration](https://discuss.elastic.co/t/xpack-monitoring-history-duration/120732)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 10:09pm UTC](https://discuss.elastic.co/t/xpack-monitoring-history-duration/120732 "2018-02-20T22:09:52Z")
Hi, I am using ES 5.2.2 with X-Pack 5.2.2. I am having main cluster and monitoring cluster where I export monitoring data from main cluster. Refer release docs https://www.elastic.co/guide/en/x-pack/5.… --- ## [Elasticsearch changed the field type automacatilly](https://discuss.elastic.co/t/elasticsearch-changed-the-field-type-automacatilly/112424)
**Author:** [@joao](https://discuss.elastic.co/u/joao)\ **Replies:** 2\ **Last updated:** [December 19, 2017, 7:02pm UTC](https://discuss.elastic.co/t/elasticsearch-changed-the-field-type-automacatilly/112424 "2017-12-19T19:02:44Z")
Hello, Today I saw a strange behavior in Elasticsearch. Yesterday I did this configuration: This is my log: LIBIA|42383595187|IPASGO|10.240.0.108|2017-12-18|11:23:30|LF I use this Grok: %{WORD:hostname}|%{WORD:user… --- ## [Filter results where given geopint is in an indexed polygon](https://discuss.elastic.co/t/filter-results-where-given-geopint-is-in-an-indexed-polygon/28960)
**Author:** [@Bobby\_Pilot](https://discuss.elastic.co/u/Bobby_Pilot)\ **Replies:** 2\ **Last updated:** [September 9, 2015, 9:44pm UTC](https://discuss.elastic.co/t/filter-results-where-given-geopint-is-in-an-indexed-polygon/28960 "2015-09-09T21:44:00Z")
I'm working on a use case where the index includes documents that have a polygon geoshape. I want to be able to query those documents passing a single geopoint and return only results which have polygons where the given … --- ## [Perform division of two fields in a Kibana visualisation](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772)
**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\ **Replies:** 5\ **Last updated:** [March 1, 2021, 1:19pm UTC](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772 "2021-03-01T13:19:54Z")
I'm unable to perform a basic division of two fields on Kibana. First, I tried to do so in a Line Chart bu using the Advanced Json Input section with this script: {"script": "if(doc\['kpi.abc'\].value \> 0) then {(doc\['kpi… --- ## [Terms list may be incomplete becasue the request is taking to long 7.8.0 autocompleteTerminate after not working](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201)
**Author:** [@madison](https://discuss.elastic.co/u/madison)\ **Replies:** 5\ **Last updated:** [September 28, 2020, 3:32pm UTC](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201 "2020-09-28T15:32:53Z")
We upgraded from 7.6.2 to 7.8.0 recently. The number of documents/shards have not change, but the controls visualization is now showing the error saying "Terms list may be incomplete because the request is taking too lon… --- ## [Kibana loading slowly after x-pack-security enabled](https://discuss.elastic.co/t/kibana-loading-slowly-after-x-pack-security-enabled/189907)
**Author:** [@Wayne\_Shen](https://discuss.elastic.co/u/Wayne_Shen)\ **Replies:** 5\ **Last updated:** [July 23, 2019, 5:03am UTC](https://discuss.elastic.co/t/kibana-loading-slowly-after-x-pack-security-enabled/189907 "2019-07-23T05:03:22Z")
Kibana is extremly slow after x-pack-security enabled. Loading multiple times of index.light.css and it took almost 3 seconds each time. Chrome network: --- ## [I want to remove "" in pipeline](https://discuss.elastic.co/t/i-want-to-remove-in-pipeline/150024)
**Author:** [@Rkiers](https://discuss.elastic.co/u/Rkiers)\ **Replies:** 5\ **Last updated:** [October 8, 2018, 7:31am UTC](https://discuss.elastic.co/t/i-want-to-remove-in-pipeline/150024 "2018-10-08T07:31:59Z")
I got a file I want to import into Kibana using elasticsearch but in one of the fields it uses "" how can i remove them? Roedolf --- ## [Difference between queries](https://discuss.elastic.co/t/difference-between-queries/118106)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 7:35am UTC](https://discuss.elastic.co/t/difference-between-queries/118106 "2018-02-02T07:35:45Z")
"query": { "range": { createTime: { "gte": "1483142400000" } } } "filtered": { "query": { "match\_all": {} }, "filter": { "range": { "createTime": { "gte": "1483142400000" }}} } } Can you please let me kn… --- ## [Trouble understanding mlockall behaviour](https://discuss.elastic.co/t/trouble-understanding-mlockall-behaviour/15473)
**Author:** [@briche\_arnaud](https://discuss.elastic.co/u/briche_arnaud)\ **Replies:** 5\ **Last updated:** [January 30, 2014, 10:24am UTC](https://discuss.elastic.co/t/trouble-understanding-mlockall-behaviour/15473 "2014-01-30T10:24:09Z")
Hi, Following the advice on different blog post on production setup for Elasticsearch, I'm using -Xms256m -Xmx256 and set bootstrap.mlockall to True. My guess was that the after restart, my Elasticsearch process… --- ## [Private IP addresses are logged in as client.ip](https://discuss.elastic.co/t/private-ip-addresses-are-logged-in-as-client-ip/236531)
**Author:** [@akosanovic](https://discuss.elastic.co/u/akosanovic)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 8:57am UTC](https://discuss.elastic.co/t/private-ip-addresses-are-logged-in-as-client-ip/236531 "2020-06-12T08:57:13Z")
Hi, we are experiencing strange issue with the APM error logs since ~9AM UTC. We are getting Private IP addresses logged inside client.ip They seem to be coming from Amazon but are not our machines. What could be causi… --- ## [Scroll replay doesn't work due to constant scroll id](https://discuss.elastic.co/t/scroll-replay-doesnt-work-due-to-constant-scroll-id/152384)
**Author:** [@PANKAJ\_SAINI](https://discuss.elastic.co/u/PANKAJ_SAINI)\ **Replies:** 1\ **Last updated:** [October 22, 2018, 5:03pm UTC](https://discuss.elastic.co/t/scroll-replay-doesnt-work-due-to-constant-scroll-id/152384 "2018-10-22T17:03:30Z")
Hi, Basically, I am using scan-and-scroll to pull some metadata from documents (fields which are light-weight E.g., Name, Hash, RegistrationNumber and these fields are mapped as 'stored = true'). Scenario: say while fe… --- ## [Mercifully killing Logstash instance](https://discuss.elastic.co/t/mercifully-killing-logstash-instance/133291)
**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\ **Replies:** 1\ **Last updated:** [May 25, 2018, 9:27am UTC](https://discuss.elastic.co/t/mercifully-killing-logstash-instance/133291 "2018-05-25T09:27:36Z")
Hello, I just started using Logstash to migrate MySQL data to ES. Wrote my own configuration, but it has certain problems which I'm currently debugging. The thing is, every time I run LS with myconfig.conf and get an er… --- ## [How to calculate elapsedtime using logstash](https://discuss.elastic.co/t/how-to-calculate-elapsedtime-using-logstash/114481)
**Author:** [@klymptzic](https://discuss.elastic.co/u/klymptzic)\ **Replies:** 1\ **Last updated:** [January 8, 2018, 12:09pm UTC](https://discuss.elastic.co/t/how-to-calculate-elapsedtime-using-logstash/114481 "2018-01-08T12:09:54Z")
Hi Everyone, I need to extract response time of an event by calculating elapsedtime from start and end time excerpts from log: 08-12-17 04:38:17:090 \[INFO\] \[thread-1\] \[User1\] c.s.s.i.a.t.JavaClass1 - Loading Data from … --- ## [Merges.total\_size too large?](https://discuss.elastic.co/t/merges-total-size-too-large/84452)
**Author:** [@npow](https://discuss.elastic.co/u/npow)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 8:05pm UTC](https://discuss.elastic.co/t/merges-total-size-too-large/84452 "2017-05-03T20:05:46Z")
I'm looking at my shard stats for one of my indices, and it says that the merge size is way larger than the store size, which seems wrong. Am I supposed to be concerned about this? I have set the refresh\_interval to 30s. … --- ## [Elastic search ports](https://discuss.elastic.co/t/elastic-search-ports/28266)
**Author:** [@Arvind\_Kumar\_Chigura](https://discuss.elastic.co/u/Arvind_Kumar_Chigura)\ **Replies:** 1\ **Last updated:** [August 29, 2015, 12:06am UTC](https://discuss.elastic.co/t/elastic-search-ports/28266 "2015-08-29T00:06:36Z")
I am running a elastic search server, apart from 9200/9300 ports. Elastic search opens lot of ports like below , where is the config for these ports elasticsearch-service-x64.exe 11036 TCP Mymachine 52377 loc… --- ## [Facing connection refused issue while starting metricbeat](https://discuss.elastic.co/t/facing-connection-refused-issue-while-starting-metricbeat/186716)
**Author:** [@krish2](https://discuss.elastic.co/u/krish2)\ **Replies:** 0\ **Last updated:** [June 20, 2019, 2:52pm UTC](https://discuss.elastic.co/t/facing-connection-refused-issue-while-starting-metricbeat/186716 "2019-06-20T14:52:38Z")
Hi , I have installed elk stack on some server A with IP: x.x.x.x. I have installed metricbeat on another server B with IP: y.y.y.y I have configured metricbeat.yml as below ####### Metricbeat Configuration Example … --- ## [Dec 24th, 2018: \[EN\]\[Kibana\] Region maps in Kibana](https://discuss.elastic.co/t/dec-24th-2018-en-kibana-region-maps-in-kibana/161898)
**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Replies:** 0\ **Last updated:** [December 21, 2018, 9:27pm UTC](https://discuss.elastic.co/t/dec-24th-2018-en-kibana-region-maps-in-kibana/161898 "2018-12-21T21:27:30Z")
Maps in Kibana are getting awesomer day by day. We have added a ton of features to our existing region and co-ordinate maps. In region maps, the list of vector maps have gotten longer in our core Kibana: User will al… --- ## [Running Logstash on cloud](https://discuss.elastic.co/t/running-logstash-on-cloud/279678)
**Author:** [@Rickenson\_Robert](https://discuss.elastic.co/u/Rickenson_Robert)\ **Replies:** 6\ **Last updated:** [July 27, 2021, 6:56pm UTC](https://discuss.elastic.co/t/running-logstash-on-cloud/279678 "2021-07-27T18:56:53Z")
Hi all, I am new to Logstash and was wondering if there was a way to use the program in a hosted environment? It’s my understanding that the binaries must be downloaded to a machine and executed from it. Is there a way … --- ## [XML parsing error nil:NilClass \[2020-04-22T16:13:54,199\]\[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred: undefined method](https://discuss.elastic.co/t/xml-parsing-error-nil-nilclass-2020-04-22t1654-199-error-logstash-filters-ruby-main-ruby-exception-occurred-undefined-method/230201)
**Author:** [@yagoza](https://discuss.elastic.co/u/yagoza)\ **Replies:** 6\ **Last updated:** [April 28, 2020, 7:54pm UTC](https://discuss.elastic.co/t/xml-parsing-error-nil-nilclass-2020-04-22t1654-199-error-logstash-filters-ruby-main-ruby-exception-occurred-undefined-method/230201 "2020-04-28T19:54:19Z")
Hi I am getting this error while parsing XML data using logstash \[2020-04-22T16:13:54,092\]\[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred: undefined method \[\]' for nil:NilClass \[2020-04-22T16:13:54,199\]\[E… --- ## [Secure\_Password in ES Keystore for HTTP Exporters](https://discuss.elastic.co/t/secure-password-in-es-keystore-for-http-exporters/136489)
**Author:** [@Dietmar](https://discuss.elastic.co/u/Dietmar)\ **Replies:** 6\ **Last updated:** [June 21, 2018, 5:32am UTC](https://discuss.elastic.co/t/secure-password-in-es-keystore-for-http-exporters/136489 "2018-06-21T05:32:13Z")
When I set the passphrase for the parameter xpack.monitoring.exporters.admincluster.ssl.keystore.secure\_password in ES-Keestore, an error occurs when starting ES: java.lang.IllegalStateException: password has been cleare… --- ## [Error when creating a index template for a Time Serie](https://discuss.elastic.co/t/error-when-creating-a-index-template-for-a-time-serie/344002)
**Author:** [@Mubolio](https://discuss.elastic.co/u/Mubolio)\ **Replies:** 8\ **Last updated:** [September 28, 2023, 4:06pm UTC](https://discuss.elastic.co/t/error-when-creating-a-index-template-for-a-time-serie/344002 "2023-09-28T16:06:33Z")
Hello, I'm trying to use a timeserie datastream, for that I try to create an index template, note that the bellow example it is almost the same as the one in the documentation: PUT \_index\_template/my-weather-sensor-i… --- ## [How to get logstash pipeline UI within Kibana](https://discuss.elastic.co/t/how-to-get-logstash-pipeline-ui-within-kibana/161569)
**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\ **Replies:** 8\ **Last updated:** [December 20, 2018, 5:40pm UTC](https://discuss.elastic.co/t/how-to-get-logstash-pipeline-ui-within-kibana/161569 "2018-12-20T17:40:59Z")
Hello, I recently installed logstash and connected it to my elasticsearch. I have not been able to get the logstash and pipeline UI option to show up from within Kibana, is there a setting I need to enable in order to g… --- ## [Micro Analysis in Kibana](https://discuss.elastic.co/t/micro-analysis-in-kibana/16795)
**Author:** [@P\_lva](https://discuss.elastic.co/u/P_lva)\ **Replies:** 8\ **Last updated:** [August 27, 2014, 12:27am UTC](https://discuss.elastic.co/t/micro-analysis-in-kibana/16795 "2014-08-27T00:27:39Z")
Hello everyone, I'm using kibana and would like to add a panel that basically counts the values in column. (Similar to micro analysis when you select the field). value 1 value 2 value 2 value 3 value 1 R… --- ## [EQL cidrmatch issue](https://discuss.elastic.co/t/eql-cidrmatch-issue/274885)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 1:46pm UTC](https://discuss.elastic.co/t/eql-cidrmatch-issue/274885 "2021-06-07T13:46:28Z")
hello guys, I created an eql rule for ssh access I wanna match multiple IP ranges but I get this error that the destination.ip field is text and not IP can you please suggest me another way to do that. here's my query { … --- ## [Difference between two aggregations in Kibana. Error](https://discuss.elastic.co/t/difference-between-two-aggregations-in-kibana-error/234988)
**Author:** [@vdalvi](https://discuss.elastic.co/u/vdalvi)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 5:35pm UTC](https://discuss.elastic.co/t/difference-between-two-aggregations-in-kibana-error/234988 "2020-06-09T17:35:28Z")
Hi, I am trying to perform simple difference between the values in two aggregations but unable to do so... Kibana Query { "\_source": false, "query": { "range": { "timestamp": { "gte": "now-90m/m"… --- ## [Understanding Elasticsearch TF/IDF score in 6.8](https://discuss.elastic.co/t/understanding-elasticsearch-tf-idf-score-in-6-8/224009)
**Author:** [@AV7](https://discuss.elastic.co/u/AV7)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 3:59am UTC](https://discuss.elastic.co/t/understanding-elasticsearch-tf-idf-score-in-6-8/224009 "2020-03-19T03:59:22Z")
Hi, I was looking at the lucene TF/IDF practical scoring function vs what is reported in the ES explain API. For ES 6.8, it used lucence 7.x for calculating the TF/IDF score which has a squared IDF term However, when… --- ## [Добавление нод в кластер](https://discuss.elastic.co/t/topic/213037)
**Author:** [@romixart](https://discuss.elastic.co/u/romixart)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 1:55pm UTC](https://discuss.elastic.co/t/topic/213037 "2019-12-30T13:55:58Z")
Добрый день. Мы используем elasticsearch для полнотекстового поиска. При этом основным хранилищем для данных является MS SQL. Так повелось, что в проект используется MS стек, поэтому и база MS SQL. ES используем уже бол… --- ## [Logstash Grok Issue with Multi-Line Events](https://discuss.elastic.co/t/logstash-grok-issue-with-multi-line-events/173756)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 1:46pm UTC](https://discuss.elastic.co/t/logstash-grok-issue-with-multi-line-events/173756 "2019-04-01T13:46:56Z")
We have the following multi-line log file: INFO | jvm 1 | srvmain | 2019/03/25 15:17:00.333 | ERROR \[aaa\] 200\] \[bbb\] foo INFO | jvm 1 | srvmain | 2019/03/25 15:17:00.333 | Mar 05, 2019 2:54:39 PM bar FileBeat… --- ## [Curator problem, ES 6.1.3 / SG](https://discuss.elastic.co/t/curator-problem-es-6-1-3-sg/121257)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 3\ **Last updated:** [February 26, 2018, 9:52am UTC](https://discuss.elastic.co/t/curator-problem-es-6-1-3-sg/121257 "2018-02-26T09:52:05Z")
Hello, I have recently upgraded the cluster to use 6.1.3 rather than 5.x and unfortunately curator is no longer working. Unfortunately the only error I receive is: elasticsearch.exceptions.ElasticsearchException: Unable… --- ## [Multiplu keys for filebeat redis output plugin is no work](https://discuss.elastic.co/t/multiplu-keys-for-filebeat-redis-output-plugin-is-no-work/89908)
**Author:** [@zacker330](https://discuss.elastic.co/u/zacker330)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 9:12am UTC](https://discuss.elastic.co/t/multiplu-keys-for-filebeat-redis-output-plugin-is-no-work/89908 "2017-06-20T09:12:34Z")
output.redis: hosts: \["localhost"\] keys: - key: "info\_list" # send to info\_list if \`message\` field contains INFO when.contains: message: "INFO" - key: "debug\_list" # send to debug\_list if \`m… --- ## [newResponse returning failed shard responses](https://discuss.elastic.co/t/newresponse-returning-failed-shard-responses/80520)
**Author:** [@m6800](https://discuss.elastic.co/u/m6800)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 3:34pm UTC](https://discuss.elastic.co/t/newresponse-returning-failed-shard-responses/80520 "2017-03-30T15:34:14Z")
I am experimenting with custom Action plugins in Elasticsearch 2.4.4 using Java. I'm creating an index with 10000 documents spread out over 5 shards. I am trying to generate a list of documents at the shard level, and th… --- ## [Elasticsearch 5.0](https://discuss.elastic.co/t/elasticsearch-5-0/65250)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 3\ **Last updated:** [November 22, 2016, 11:40pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0/65250 "2016-11-22T23:40:15Z")
Hi there I have a issue, I have installed elasticsearch 5.0, if I run for example curl -XGET 'http://192.168.1.19:9200/\_cluster/health?pretty=true' It gives me the elasticsearch status from the same server (192.1… --- ## [Snapshot of indices Fails](https://discuss.elastic.co/t/snapshot-of-indices-fails/45197)
**Author:** [@vino](https://discuss.elastic.co/u/vino)\ **Replies:** 0\ **Last updated:** [March 23, 2016, 9:22am UTC](https://discuss.elastic.co/t/snapshot-of-indices-fails/45197 "2016-03-23T09:22:21Z")
We have a production elasticsearch cluster with 3 Nodes. Settings of an Index: { "logstash-2016.03.17" : { "settings" : { "index" : { "number\_of\_shards" : "5", "number\_of\_replicas" : "2" … --- ## [Enabling Live/Live Disaster Recovery while avoiding split brain](https://discuss.elastic.co/t/enabling-live-live-disaster-recovery-while-avoiding-split-brain/21217)
**Author:** [@David\_Artus](https://discuss.elastic.co/u/David_Artus)\ **Replies:** 3\ **Last updated:** [December 11, 2014, 10:38pm UTC](https://discuss.elastic.co/t/enabling-live-live-disaster-recovery-while-avoiding-split-brain/21217 "2014-12-11T22:38:18Z")
My understanding is that recovery from Split Brain situations is troublesome and we are encourages to ensure that a cluster is only active if there is a quorum of candidate masters , we do that by setting \*discove… --- ## [Transport client TTL, seconds or milliseconds](https://discuss.elastic.co/t/transport-client-ttl-seconds-or-milliseconds/21149)
**Author:** [@burtonator](https://discuss.elastic.co/u/burtonator)\ **Replies:** 3\ **Last updated:** [December 8, 2014, 7:17pm UTC](https://discuss.elastic.co/t/transport-client-ttl-seconds-or-milliseconds/21149 "2014-12-08T19:17:49Z")
I'm performing writes with the transport client. I can't find documentation for whether the ttl is in seconds or milliseconds. I know if you send documents via json the TTL is a strong so you can say "1s" but… --- ## [Breakdown metric by formula result](https://discuss.elastic.co/t/breakdown-metric-by-formula-result/328954)
**Author:** [@Nithin\_Ramesh](https://discuss.elastic.co/u/Nithin_Ramesh)\ **Replies:** 2\ **Last updated:** [April 11, 2023, 5:59pm UTC](https://discuss.elastic.co/t/breakdown-metric-by-formula-result/328954 "2023-04-11T17:59:00Z")
Hey, I am trying to visualize some data, but I have a feeling that I may be trying to do something that is impossible in Kibana currently. I have data that logs each event in a shipment process that consists of moving 1… --- ## [How to edit the query of a lens?](https://discuss.elastic.co/t/how-to-edit-the-query-of-a-lens/321467)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [December 18, 2022, 2:30am UTC](https://discuss.elastic.co/t/how-to-edit-the-query-of-a-lens/321467 "2022-12-18T02:30:54Z")
Packetbeat made this lens for me: But it's not clear to me what constructed the query under Inspect\>Requests\>Data\>Requests and how I am supposed to edit it, see this image: I looked through all the other panel se… --- ## [How to create a segment/line chart visualization with well-defined time intervals in a dashboard?](https://discuss.elastic.co/t/how-to-create-a-segment-line-chart-visualization-with-well-defined-time-intervals-in-a-dashboard/283881)
**Author:** [@Mario\_Sabetta](https://discuss.elastic.co/u/Mario_Sabetta)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 8:49am UTC](https://discuss.elastic.co/t/how-to-create-a-segment-line-chart-visualization-with-well-defined-time-intervals-in-a-dashboard/283881 "2021-09-24T08:49:10Z")
Hello everyone, I have to make a segment chart with the time intervals as shown in the figure (first picture below). I started doing something similar by doing a simple trapezoidal function with integers on the abscissa… --- ## [Prefix of special character on the id](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 9:58am UTC](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567 "2021-07-19T09:58:49Z")
I have inadvertently loaded some documents without sanitising the field that was meant to be the id. So some records now have an id that begins with the ascii 09 i.e. the tab character I can extract an individual recor… --- ## [Add a vertical Threshold line into a line plot](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252)
**Author:** [@TH89](https://discuss.elastic.co/u/TH89)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 7:02am UTC](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252 "2020-06-29T07:02:10Z")
Hallo together, Is there a way to print into a line plot a vertical threshold line? A document of me looks like this: In the lineplot I print the field value on the x-Axis and the y-Axis are the Unique count of max\_… --- ## [Security/Basic Authentication/Transport TLS - One node failing No Subject Alternative names present](https://discuss.elastic.co/t/security-basic-authentication-transport-tls-one-node-failing-no-subject-alternative-names-present/196841)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 3:08pm UTC](https://discuss.elastic.co/t/security-basic-authentication-transport-tls-one-node-failing-no-subject-alternative-names-present/196841 "2019-08-27T15:08:19Z")
Four node cluster, not sure if best setup but another time. node1 - LS + ES, master eligible node2 - LS + ES, master eligible node3 - LS + ES, master eligible node4 - KB + ES, ingest(?) only node Following the secur… --- ## [Reverting to basic license after upgrading to 6.8](https://discuss.elastic.co/t/reverting-to-basic-license-after-upgrading-to-6-8/188953)
**Author:** [@Popman](https://discuss.elastic.co/u/Popman)\ **Replies:** 2\ **Last updated:** [July 5, 2019, 5:19am UTC](https://discuss.elastic.co/t/reverting-to-basic-license-after-upgrading-to-6-8/188953 "2019-07-05T05:19:15Z")
Good day, We had an ES6.7 cluster we were trialling RBAC on. We were happy with the results with the intent to purchase and used the cluster in production. In the interim it was announced that the auth functionality wou… [Previous page](https://discuss.elastic.co/top.md?page=1508&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1510&per_page=50&period=all)