# Top **URL:** https://discuss.elastic.co/top.md?page=1516&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1517 --- ## [Logstash.filters.elasticsearch "Read timed out"](https://discuss.elastic.co/t/logstash-filters-elasticsearch-read-timed-out/297537)
**Author:** [@gregorys](https://discuss.elastic.co/u/gregorys)\ **Replies:** 1\ **Last updated:** [February 20, 2022, 12:45pm UTC](https://discuss.elastic.co/t/logstash-filters-elasticsearch-read-timed-out/297537 "2022-02-20T12:45:37Z")
Hi, I'm using Logstash 7.17 against Elasticsearch 7.16 cluster. The filter is working for about 9/10 events, but sometimes it fails with this error: "Failed to query Elasticsearch for previous event", "Read timed out" … --- ## [Custom label Date Range or Custom date](https://discuss.elastic.co/t/custom-label-date-range-or-custom-date/239181)
**Author:** [@importasapo](https://discuss.elastic.co/u/importasapo)\ **Replies:** 1\ **Last updated:** [July 1, 2020, 6:17pm UTC](https://discuss.elastic.co/t/custom-label-date-range-or-custom-date/239181 "2020-07-01T18:17:04Z")
there is any way to add a custom label for each Date Range? (Any workaround?) OR Instead of that, any possibility to remove the "@00:00:00" date format of my legend? --- ## [Snapshot based on the age of the index](https://discuss.elastic.co/t/snapshot-based-on-the-age-of-the-index/231144)
**Author:** [@harish\_gopi](https://discuss.elastic.co/u/harish_gopi)\ **Replies:** 1\ **Last updated:** [May 5, 2020, 6:33pm UTC](https://discuss.elastic.co/t/snapshot-based-on-the-age-of-the-index/231144 "2020-05-05T18:33:30Z")
We have daily log indexed in elastic search with logs-%m-%d-%y format, so we need to create the snapshot for indices greater than 30 days and archive it in amazon s3. I came across way to create snapshot using cron sched… --- ## [org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[Failed to create native process factories for Machine Learning\]; nested: FileNotFoundException\[\\\\.\\pipe\\controller\_log\_13044 (The system cannot find the file specified)\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-nested-filenotfoundexception-pipe-controller-log-13044-the-system-cannot-find-the-file-specified/166264)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 1:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-nested-filenotfoundexception-pipe-controller-log-13044-the-system-cannot-find-the-file-specified/166264 "2019-02-01T13:45:13Z")
I am new to Elastic search and facing an issue while installing it. I am getting below exception: org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[Failed to create native process factories for Machi… --- ## [How I can Create pivot in kibana...? IMP](https://discuss.elastic.co/t/how-i-can-create-pivot-in-kibana-imp/138854)
**Author:** [@Raju.Chavan](https://discuss.elastic.co/u/Raju.Chavan)\ **Replies:** 1\ **Last updated:** [July 6, 2018, 11:31am UTC](https://discuss.elastic.co/t/how-i-can-create-pivot-in-kibana-imp/138854 "2018-07-06T11:31:45Z")
How I can Create pivot in kibana...? IMP --- ## [DataTable column to aggregate if field exists](https://discuss.elastic.co/t/datatable-column-to-aggregate-if-field-exists/108658)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 7:44pm UTC](https://discuss.elastic.co/t/datatable-column-to-aggregate-if-field-exists/108658 "2017-11-22T19:44:35Z")
Hello! First time posting here, I've been looking around but haven't found anything to point me towards the right direction to solve my issue. I'm creating a Data Table with a Date Histogram as a bucket, and i need to … --- ## [Painless maxLoopCounter](https://discuss.elastic.co/t/painless-maxloopcounter/96692)
**Author:** [@nlds](https://discuss.elastic.co/u/nlds)\ **Replies:** 1\ **Last updated:** [August 11, 2017, 8:20am UTC](https://discuss.elastic.co/t/painless-maxloopcounter/96692 "2017-08-11T08:20:15Z")
Hi guys, I’m trying to build funnel using scripted\_metric aggregation. I got the error “painless script loop maximum number of statements limit”. I have to iterate through large number of events to count and calculate… --- ## [New Java API with Credentials and SSL certificates](https://discuss.elastic.co/t/new-java-api-with-credentials-and-ssl-certificates/301173)
**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 11:33am UTC](https://discuss.elastic.co/t/new-java-api-with-credentials-and-ssl-certificates/301173 "2022-03-31T11:33:55Z")
To connect to new Java API, this url: https://www.elastic.co/guide/en/elasticsearch/client/java-api-client/8.1/connecting.html explains to do this : // Create the low-level client RestClient restClient = RestClient.bu… --- ## [Search\_phase\_execution\_exception error: rejected execution of org.elasticsearch.common.util.concurrent.TimedRunnable@ on QueueResizingEsThreadPoolExecutor](https://discuss.elastic.co/t/search-phase-execution-exception-error-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable-on-queueresizingesthreadpoolexecutor/294008)
**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 8:18am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-error-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable-on-queueresizingesthreadpoolexecutor/294008 "2022-01-12T08:18:08Z")
Sometimes I got this error from my client node, is there any ideas to fix this? search\_phase\_execution\_exception: \\n at onBody (/var/server/app/node\_modules/es7/lib/Transport.js:367:23)\\n at IncomingMessage.onEnd … --- ## [Apollo-server-express with Typescript Unknown route](https://discuss.elastic.co/t/apollo-server-express-with-typescript-unknown-route/272586)
**Author:** [@yulrizka](https://discuss.elastic.co/u/yulrizka)\ **Replies:** 2\ **Last updated:** [May 10, 2021, 5:16pm UTC](https://discuss.elastic.co/t/apollo-server-express-with-typescript-unknown-route/272586 "2021-05-10T17:16:33Z")
APM Agent language and version: "elastic-apm-node": "^3.14.0", with "apollo-server-express": "^2.0.4", "graphql": "^15.5.0", I managed to get the integration working between the graphql server and APM. But it seems t… --- ## [Daily comparison in kibana data table](https://discuss.elastic.co/t/daily-comparison-in-kibana-data-table/223462)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 2:41am UTC](https://discuss.elastic.co/t/daily-comparison-in-kibana-data-table/223462 "2020-03-16T02:41:16Z")
Hi community, Is there any way to create daily comparison data table or any plot in kibana. eg: I can not use custom plugin because I use kibana with aws elasticsearch. :sweat\_smile: Appreciate for any idea. --- ## [Creating a Vertical bar from json](https://discuss.elastic.co/t/creating-a-vertical-bar-from-json/195994)
**Author:** [@aayushg](https://discuss.elastic.co/u/aayushg)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 6:36pm UTC](https://discuss.elastic.co/t/creating-a-vertical-bar-from-json/195994 "2019-08-23T18:36:49Z")
Hi - I want to create a Vertical bar depicting count on Y-axis and State/status of files in X-axis. Hovering/Drilling down/Clicking on each bar should show files names. The state of files would be updated every hour. I… --- ## [SMTP failed exception 500 bad request](https://discuss.elastic.co/t/smtp-failed-exception-500-bad-request/194161)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 12:03pm UTC](https://discuss.elastic.co/t/smtp-failed-exception-500-bad-request/194161 "2019-08-09T12:03:52Z")
xpack.notification.email.account: mail1: profile: standard smtp.host: ##### smtp.port: 80 smtp.auth: true smtp.starttls.enable: true smtp.user: #### smtp.password: #### Exception- \[o.e.x.… --- ## [FIPS 140-2](https://discuss.elastic.co/t/fips-140-2/160624)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 5:38pm UTC](https://discuss.elastic.co/t/fips-140-2/160624 "2018-12-19T17:38:28Z")
Assuming Elastic Stack 6.4.0+ is running within ECE, can it be configured for FIPS 140-2? Configuring Elasticsearch in a FIPS 140-2 Environment | Elastic FIPS 140-2 | Elasticsearch Reference \[6.5\] | Elastic Please adv… --- ## [Logstash template not used if Elasticsearch not ready?](https://discuss.elastic.co/t/logstash-template-not-used-if-elasticsearch-not-ready/90556)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 11:21pm UTC](https://discuss.elastic.co/t/logstash-template-not-used-if-elasticsearch-not-ready/90556 "2017-06-28T23:21:09Z")
I am supplying a template file with my Logstash job using: template =\> "/conf/myindex-mapping-template.json" template\_name =\> "myindex" template\_overwrite =\> true This works well, and I see: 12:27:19.383 \[\[main\]-pip… --- ## [\[2.2.0\] CLOSE\_WAIT sockets/file descriptors multiplying until system crash](https://discuss.elastic.co/t/2-2-0-close-wait-sockets-file-descriptors-multiplying-until-system-crash/41235)
**Author:** [@erikanderson753](https://discuss.elastic.co/u/erikanderson753)\ **Replies:** 2\ **Last updated:** [February 15, 2016, 8:25pm UTC](https://discuss.elastic.co/t/2-2-0-close-wait-sockets-file-descriptors-multiplying-until-system-crash/41235 "2016-02-15T20:25:22Z")
We are currently testing out Elasticsearch 2.2.0, Logstash 2.2.0, and Kibana 4.4.0 on Ubuntu 14.04 In the past few days we have begun to have an issue with too many file descriptors being opened with the Logstash proce… --- ## [How to use the AWS S3 plugin on ES 2.x?](https://discuss.elastic.co/t/how-to-use-the-aws-s3-plugin-on-es-2-x/32383)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 2\ **Last updated:** [October 16, 2015, 12:11pm UTC](https://discuss.elastic.co/t/how-to-use-the-aws-s3-plugin-on-es-2-x/32383 "2015-10-16T12:11:33Z")
Hello, I am trying to use S3 for my ES 2.x data snapshots. The plugin is installed: # ls /usr/share/elasticsearch/plugins/cloud-aws aws-java-sdk-core-1.10.12.jar aws-java-sdk-s3-1.10.12.jar commons-logging-1.1.3.ja… --- ## [Mappings get messed up - Any way to enforce mappings](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 12:41pm UTC](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449 "2019-08-27T12:41:45Z")
I create my indices with a nice tidy mapping where most fields are keywords but, over time, the mapping mutates into a monster of text fields with a ".keyword" property. How can this happen and is there any way to stop i… --- ## [LS2 'stuck'?](https://discuss.elastic.co/t/ls2-stuck/35270)
**Author:** [@mad\_min](https://discuss.elastic.co/u/mad_min)\ **Replies:** 6\ **Last updated:** [November 24, 2015, 1:59pm UTC](https://discuss.elastic.co/t/ls2-stuck/35270 "2015-11-24T13:59:35Z")
Hi group, I have a LS2 setup taking input from Redis and sending output to remote ES2. LS2 has multiple multiline filters and two outputs: debug and ES2. LS2 seems to be 'stuck'/'frozen' after going through several e… --- ## [Searching for geo\_circles as geo\_shapes](https://discuss.elastic.co/t/searching-for-geo-circles-as-geo-shapes/16719)
**Author:** [@Viktor\_Nordling](https://discuss.elastic.co/u/Viktor_Nordling)\ **Replies:** 6\ **Last updated:** [October 4, 2014, 2:23am UTC](https://discuss.elastic.co/t/searching-for-geo-circles-as-geo-shapes/16719 "2014-10-04T02:23:51Z")
This commitadds support for indexing circles as geo\_shapes, which is something I'd like to do (rather than approximating circles with polygons). However, searching for intersection between a point and a circle (is t… --- ## [Winlog Beats installation with SCCM](https://discuss.elastic.co/t/winlog-beats-installation-with-sccm/98782)
**Author:** [@aerys\_targaryen](https://discuss.elastic.co/u/aerys_targaryen)\ **Replies:** 0\ **Last updated:** [August 30, 2017, 4:31am UTC](https://discuss.elastic.co/t/winlog-beats-installation-with-sccm/98782 "2017-08-30T04:31:12Z")
Hello Is it possible to install Winlog Beats for collecting windows logs from Desktops and Servers with SCCM? Because as i understand winlog beats has to be manualy configured in each host. What i mean is just intall t… --- ## [How can I prevent Cloud APM server from flattening my OpenTelemetry tag hierarchy?](https://discuss.elastic.co/t/how-can-i-prevent-cloud-apm-server-from-flattening-my-opentelemetry-tag-hierarchy/342814)
**Author:** [@Annxii](https://discuss.elastic.co/u/Annxii)\ **Replies:** 5\ **Last updated:** [September 14, 2023, 9:08am UTC](https://discuss.elastic.co/t/how-can-i-prevent-cloud-apm-server-from-flattening-my-opentelemetry-tag-hierarchy/342814 "2023-09-14T09:08:33Z")
We have recently made a deployment to Elastic Cloud with APM (currently running v8.9.1). We are sending OpenTelemetry traces directly from dotnet applications to the APM endpoint. This is working fine, but we are having … --- ## [Unwanted metrics](https://discuss.elastic.co/t/unwanted-metrics/336885)
**Author:** [@rchmiel\_fp](https://discuss.elastic.co/u/rchmiel_fp)\ **Replies:** 5\ **Last updated:** [June 27, 2023, 6:02pm UTC](https://discuss.elastic.co/t/unwanted-metrics/336885 "2023-06-27T18:02:38Z")
Hello, I have a working .NET based system utilizing APM 7.17.9 and data streams. Lastly we implemented filter to remove logging transactions for \[OPTION\] requests which works but we still get metrics logged for those re… --- ## [Elastic Search Transport Client(6.8.23) not able to connect to ES 7.17.10](https://discuss.elastic.co/t/elastic-search-transport-client-6-8-23-not-able-to-connect-to-es-7-17-10/336637)
**Author:** [@Abhilashsr2008](https://discuss.elastic.co/u/Abhilashsr2008)\ **Replies:** 5\ **Last updated:** [June 22, 2023, 6:06pm UTC](https://discuss.elastic.co/t/elastic-search-transport-client-6-8-23-not-able-to-connect-to-es-7-17-10/336637 "2023-06-22T18:06:18Z")
Hi Team My application is using the Elastic Search Transport Client(6.8.23) and am trying to connect to an Elasticsearch server which is 7.17.10 version. And am getting the below exception. Caused by: NoNodeAvailableEx… --- ## [Shards are going to Intialized state againa and again, like in every 15 mins](https://discuss.elastic.co/t/shards-are-going-to-intialized-state-againa-and-again-like-in-every-15-mins/335902)
**Author:** [@priyankaMS](https://discuss.elastic.co/u/priyankaMS)\ **Replies:** 5\ **Last updated:** [June 14, 2023, 6:59am UTC](https://discuss.elastic.co/t/shards-are-going-to-intialized-state-againa-and-again-like-in-every-15-mins/335902 "2023-06-14T06:59:02Z")
My Elasticsearch cluster is going to yellow state in about every 15 min, becuase 2 replica shards are going to initialization state. After 5 mins or so, cluster is going back to green state. Error Logs: \[o.e.t.Outbou… --- ## [Java multiline stack trace log shipping with filebeat](https://discuss.elastic.co/t/java-multiline-stack-trace-log-shipping-with-filebeat/304170)
**Author:** [@Alireza\_Zabihi](https://discuss.elastic.co/u/Alireza_Zabihi)\ **Replies:** 5\ **Last updated:** [May 9, 2022, 2:43pm UTC](https://discuss.elastic.co/t/java-multiline-stack-trace-log-shipping-with-filebeat/304170 "2022-05-09T14:43:56Z")
Hi, Please help me for creating a pattern for this log \[2022-05-07 13:20:53,621\] \[WARN\] \[gateway\_service\] \[reactor.util.Loggers$Slf4JLogger\] \[warn:295\] message: \[b17d8e8c-1, L:/192.168.149.185:33094 - R:orderscl.sepanta… --- ## [JSON parser error](https://discuss.elastic.co/t/json-parser-error/271283)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 5\ **Last updated:** [April 30, 2021, 3:50pm UTC](https://discuss.elastic.co/t/json-parser-error/271283 "2021-04-30T15:50:17Z")
Hello, This is my logstash configuration below: filter { grok { match =\> { "message" =\> "%{SYSLOG5424PRI:syslog\_index}-\\s\*%{SYSLOGHOST:syslog\_hostname} %{GREEDYDATA:syslog\_message}" } } json { source =\> "syslog\_me… --- ## [Elasticsearch 7.8.1， shards allocation failed](https://discuss.elastic.co/t/elasticsearch-7-8-1-shards-allocation-failed/259352)
**Author:** [@wzhanw](https://discuss.elastic.co/u/wzhanw)\ **Replies:** 5\ **Last updated:** [December 24, 2020, 5:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-shards-allocation-failed/259352 "2020-12-24T05:23:34Z")
Hi all, I'm running the ealsticsearch 7.8.1 single node cluster on my server, I got a critical error when the logstash insert document to the es. I tried to clean up the data directory and restarted the es, the error … --- ## [Parsing XML data with Xpath](https://discuss.elastic.co/t/parsing-xml-data-with-xpath/201213)
**Author:** [@Hawkeye148](https://discuss.elastic.co/u/Hawkeye148)\ **Replies:** 5\ **Last updated:** [September 27, 2019, 11:29am UTC](https://discuss.elastic.co/t/parsing-xml-data-with-xpath/201213 "2019-09-27T11:29:51Z")
Hello, I am new to Logstash and the whole Elasticsearch stack. I am trying to make a Logstash config file to ingest Cisco Telemetry data. This is the structure of the data I am trying to ingest: \[host 10.10.20.30 sessi… --- ## [Advice for Cluster configuration](https://discuss.elastic.co/t/advice-for-cluster-configuration/53291)
**Author:** [@it2](https://discuss.elastic.co/u/it2)\ **Replies:** 5\ **Last updated:** [June 21, 2016, 9:24am UTC](https://discuss.elastic.co/t/advice-for-cluster-configuration/53291 "2016-06-21T09:24:39Z")
Hello guys, I need your advice I have next cluster http://prntscr.com/bilh2s As you can see two nodes have a 32TB hard disk. I want to relocate 80% of data to this nodes and 20% to other 4 nodes. How can I make it? It's … --- ## [Elastic Cisco Duo Integration](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703)
**Author:** [@suraj.srinivasa](https://discuss.elastic.co/u/suraj.srinivasa)\ **Replies:** 4\ **Last updated:** [August 30, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703 "2022-08-30T13:28:36Z")
Hi, I am trying to fetch Cisco Duo logs with the elastic agent integration. The Duo setup in my organization is a managed service by a vendor, so I have received the Integration Key, api hostname and secret key and conf… --- ## [No data showing in SIEM Detection tab](https://discuss.elastic.co/t/no-data-showing-in-siem-detection-tab/293712)
**Author:** [@subham](https://discuss.elastic.co/u/subham)\ **Replies:** 4\ **Last updated:** [January 11, 2022, 6:03am UTC](https://discuss.elastic.co/t/no-data-showing-in-siem-detection-tab/293712 "2022-01-11T06:03:26Z")
Hi Everyone, We have create a detection rule threshold in SIEM but it's not showing any output or alerts. We can see the results in Preview Results but no alert is scene. Please check the image below for reference and su… --- ## [Creating an email connector](https://discuss.elastic.co/t/creating-an-email-connector/275904)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 4\ **Last updated:** [June 23, 2021, 6:06pm UTC](https://discuss.elastic.co/t/creating-an-email-connector/275904 "2021-06-23T18:06:33Z")
What exactly needs to be created for this action ? I am reviewing the documentation listed here: Email connector and action | Kibana Guide \[7.13\] | Elastic. --- ## [Kibana APM without installing APM agents](https://discuss.elastic.co/t/kibana-apm-without-installing-apm-agents/268791)
**Author:** [@elk\_novice](https://discuss.elastic.co/u/elk_novice)\ **Replies:** 4\ **Last updated:** [April 1, 2021, 5:53am UTC](https://discuss.elastic.co/t/kibana-apm-without-installing-apm-agents/268791 "2021-04-01T05:53:27Z")
Hi All, I am newbie. Please let me know if its possible to use KIBANA APM, without having APM server and APM agent. Can we use kibana APM just by doing ECS mapping in logstash and storing the index in elasticsearch. OR… --- ## [Rename snmp dynamic fields](https://discuss.elastic.co/t/rename-snmp-dynamic-fields/208236)
**Author:** [@richard\_N](https://discuss.elastic.co/u/richard_N)\ **Replies:** 4\ **Last updated:** [November 23, 2019, 1:44am UTC](https://discuss.elastic.co/t/rename-snmp-dynamic-fields/208236 "2019-11-23T01:44:54Z")
How can I strip off everything after the . in my fields. Using SNMP the field names a very dynamic across devices and interfaces. ifDescr.27 to IfDescr ifInOctects.50 to IfInOctects IfInErrors.19 to IfInErrors --- ## [How many shard should i have for index size 450gb](https://discuss.elastic.co/t/how-many-shard-should-i-have-for-index-size-450gb/199392)
**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\ **Replies:** 1\ **Last updated:** [September 13, 2019, 9:53am UTC](https://discuss.elastic.co/t/how-many-shard-should-i-have-for-index-size-450gb/199392 "2019-09-13T09:53:51Z")
Hi Currently we have one index with following cofiguration. No of primary shard = 10 no of replica shard = 1 size of index = 450 apporox no of doc count = 1 billion rotation of index = weekly Cluster info:- no o… --- ## [Logging Fundamentals Course : Elastic 6.4 no longer a install option](https://discuss.elastic.co/t/logging-fundamentals-course-elastic-6-4-no-longer-a-install-option/189588)
**Author:** [@jasonfed](https://discuss.elastic.co/u/jasonfed)\ **Replies:** 4\ **Last updated:** [July 9, 2019, 4:39pm UTC](https://discuss.elastic.co/t/logging-fundamentals-course-elastic-6-4-no-longer-a-install-option/189588 "2019-07-09T16:39:30Z")
Hello, Working on the Elastic logging fundamentals course and in Lab1 when you install Elastic - v6.4 is no longer a install option. I proceeded to install the latest v7.2. In Lab2 when I go to download a copy of the fi… --- ## [Visualization based on two queries](https://discuss.elastic.co/t/visualization-based-on-two-queries/167131)
**Author:** [@The](https://discuss.elastic.co/u/The)\ **Replies:** 4\ **Last updated:** [February 6, 2019, 2:26pm UTC](https://discuss.elastic.co/t/visualization-based-on-two-queries/167131 "2019-02-06T14:26:24Z")
In my index I have entries like: entry 1: id: A, quantity: 70 entry 2: id: A, cost: 23 entry 3: id: B, quantity: 50 entry 4: id: B, cost: 24 Is there a way to make a cost vs quantity plot, where corresponding qu… --- ## [Date Format is Malformed](https://discuss.elastic.co/t/date-format-is-malformed/150832)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 4\ **Last updated:** [October 3, 2018, 8:49am UTC](https://discuss.elastic.co/t/date-format-is-malformed/150832 "2018-10-03T08:49:07Z")
I'm indexing logs from a server to elastic search. The timestamp of the logs is the format 2018-09-18 11:41:01,648160559 The grok which I am using to match it is %{TIMESTAMP\_ISO8601:logTimestamp} Since I want the log… --- ## [PHP client: Check input before indexing](https://discuss.elastic.co/t/php-client-check-input-before-indexing/119511)
**Author:** [@syiannop](https://discuss.elastic.co/u/syiannop)\ **Replies:** 4\ **Last updated:** [February 16, 2018, 4:49pm UTC](https://discuss.elastic.co/t/php-client-check-input-before-indexing/119511 "2018-02-16T16:49:39Z")
I am trying to use the PHP client to check if the user's input already exists before indexing it. Here is the code I tried. My idea was: Check if the variables are set (I have four required fields: titel, thema, type… --- ## [Changing columns based on first character](https://discuss.elastic.co/t/changing-columns-based-on-first-character/112560)
**Author:** [@Errors](https://discuss.elastic.co/u/Errors)\ **Replies:** 4\ **Last updated:** [December 20, 2017, 9:03am UTC](https://discuss.elastic.co/t/changing-columns-based-on-first-character/112560 "2017-12-20T09:03:57Z")
I'm trying to pass a csv file which doesn't have column names. Each row in the file is also different (different variables, as well as varying row lengths), and would need more personalized column names. What I want to … --- ## [Update by query warning in documentations](https://discuss.elastic.co/t/update-by-query-warning-in-documentations/83847)
**Author:** [@yoav](https://discuss.elastic.co/u/yoav)\ **Replies:** 4\ **Last updated:** [April 27, 2017, 5:17pm UTC](https://discuss.elastic.co/t/update-by-query-warning-in-documentations/83847 "2017-04-27T17:17:13Z")
Why update-by-query documentations still have a warning saying - "The update-by-query API is new and should still be considered experimental" https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update-b… --- ## [Analyzer tokenizer in search mode](https://discuss.elastic.co/t/analyzer-tokenizer-in-search-mode/53108)
**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\ **Replies:** 4\ **Last updated:** [June 20, 2016, 10:42am UTC](https://discuss.elastic.co/t/analyzer-tokenizer-in-search-mode/53108 "2016-06-20T10:42:00Z")
Hi, i have i problem...in my project i need to set an analyzer-filter-tokenizer based on the language choose by the user, before executing query. So i need to set this parameters in real time and only when a search is … --- ## [Hybrid search by using knn and query in java client](https://discuss.elastic.co/t/hybrid-search-by-using-knn-and-query-in-java-client/346594)
**Author:** [@wshan13](https://discuss.elastic.co/u/wshan13)\ **Replies:** 1\ **Last updated:** [November 8, 2023, 12:18pm UTC](https://discuss.elastic.co/t/hybrid-search-by-using-knn-and-query-in-java-client/346594 "2023-11-08T12:18:50Z")
Hello. I want the hybrid search by using both the knn option and a query on the page below with java client. With spring-boot 3.1.5 and elasticsarch-java 8.7.1 environment, I made some codes as below, but seems like… --- ## [Elasticsearch License](https://discuss.elastic.co/t/elasticsearch-license/344471)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 7\ **Last updated:** [October 6, 2023, 10:10am UTC](https://discuss.elastic.co/t/elasticsearch-license/344471 "2023-10-06T10:10:36Z")
Hi Team, Could you please help me to understand the licensing part of Elasticsearch. Because I had installed Elasticsearch from below link and now while using Kibana dashboard today it is showing License related error.… --- ## [How to add an alias to index by using filebeat?](https://discuss.elastic.co/t/how-to-add-an-alias-to-index-by-using-filebeat/308640)
**Author:** [@busishe](https://discuss.elastic.co/u/busishe)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 3:10am UTC](https://discuss.elastic.co/t/how-to-add-an-alias-to-index-by-using-filebeat/308640 "2022-07-04T03:10:15Z")
i want to use ilm to delete outdated logs.the ilm policy is configured for rollover ,means the index need an alias.filebeat will create an index automatically (if you configured in filebeat.yml and the index not existed)… --- ## [Unable to send logs to elasticsearch due to max\_bytes\_length\_exceeded\_exception](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-due-to-max-bytes-length-exceeded-exception/307892)
**Author:** [@Gihan\_Indrajith](https://discuss.elastic.co/u/Gihan_Indrajith)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 5:50pm UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-due-to-max-bytes-length-exceeded-exception/307892 "2022-06-22T17:50:00Z")
Observing below log in Fluentd with max\_bytes\_length\_exceeded\_exception. Please help to identify the root cause and fix 2022-06-22 22:18:30 +0800 \[error\]: #0 Could not push log to Elasticsearch: {"took"=\>30, "errors"=\>t… --- ## [New filebeat module - how to move to production? Template not loading](https://discuss.elastic.co/t/new-filebeat-module-how-to-move-to-production-template-not-loading/285775)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 7\ **Last updated:** [October 8, 2021, 8:18pm UTC](https://discuss.elastic.co/t/new-filebeat-module-how-to-move-to-production-template-not-loading/285775 "2021-10-08T20:18:37Z")
I have created a new module to Filebeat. To be honest I have been struggling with this for a long time, perhaps a blog post somewhere (creating a new filebeat start to finish) I could find could help me immensely. Anyw… --- ## [Facet Sorting](https://discuss.elastic.co/t/facet-sorting/247144)
**Author:** [@Joe\_Stark](https://discuss.elastic.co/u/Joe_Stark)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 8:57pm UTC](https://discuss.elastic.co/t/facet-sorting/247144 "2020-09-01T20:57:13Z")
I need some help sorting facets alphabetically rather than by count. I am using the reference UI react project but I am struggling to find where I can set the sort option. I found that you can do it directly in the API … --- ## [Adding extra data](https://discuss.elastic.co/t/adding-extra-data/143854)
**Author:** [@Olha1](https://discuss.elastic.co/u/Olha1)\ **Replies:** 7\ **Last updated:** [August 10, 2018, 12:48pm UTC](https://discuss.elastic.co/t/adding-extra-data/143854 "2018-08-10T12:48:46Z")
Help me! Why my logstash with this config file adding the same data repeatedly input { jdbc { jdbc\_connection\_string =\> "connection\_string" jdbc\_user =\> "user" jdbc\_password =\> "password" jdbc\_driver\_library =\> "dr… [Previous page](https://discuss.elastic.co/top.md?page=1515&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1517&per_page=50&period=all)