# Top

**URL:** https://discuss.elastic.co/top.md?page=1528&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1529

---

## [Sending azure\_event\_hub messages to Elasticsearch, Logstash failing](https://discuss.elastic.co/t/sending-azure-event-hub-messages-to-elasticsearch-logstash-failing/171448)

<div class="topic-metadata">

**Author:** [@Abereham](https://discuss.elastic.co/u/Abereham)\
**Replies:** 0\
**Last updated:** [March 8, 2019, 8:00am UTC](https://discuss.elastic.co/t/sending-azure-event-hub-messages-to-elasticsearch-logstash-failing/171448 "2019-03-08T08:00:31Z")

</div>

I am new to Azure and Elasticsearch. While I am trying to send event hub messages to elastic search, nothing is showing up in kibana and my console shows me exception which I do no how to solve it. I followed this doc \[e…

---

## [Thread\_pool/bulk node\_stat replaced by?](https://discuss.elastic.co/t/thread-pool-bulk-node-stat-replaced-by/160219)

<div class="topic-metadata">

**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\
**Replies:** 1\
**Last updated:** [December 10, 2018, 9:11pm UTC](https://discuss.elastic.co/t/thread-pool-bulk-node-stat-replaced-by/160219 "2018-12-10T21:11:53Z")

</div>

We were monitoring node\_stats on GET /\_nodes/node\_ip/stats/thread\_pool/bulk before we've updated to ES 6.3.1 and it seems that the metric does not exists anymore. Was this metric replaced by another one so I can modify m…

---

## [Import kibana dashboard using ansible playbook](https://discuss.elastic.co/t/import-kibana-dashboard-using-ansible-playbook/317965)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 4\
**Last updated:** [November 9, 2022, 6:03am UTC](https://discuss.elastic.co/t/import-kibana-dashboard-using-ansible-playbook/317965 "2022-11-09T06:03:55Z")

</div>

Hi, I have created a kibana dashboard and exported it. This have a .ndjson file with me. Now I want to import this dashboard to kibana (other severs) using ansible playbook using the .ndjson file i already have. How can…

---

## [Cannot search new documents after reindexing](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911)

<div class="topic-metadata">

**Author:** [@Andrey2](https://discuss.elastic.co/u/Andrey2)\
**Replies:** 4\
**Last updated:** [May 26, 2021, 3:10am UTC](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911 "2021-05-26T03:10:11Z")

</div>

Hi all, I'm having a problem with reindexing. I have an index called emails, after reindexing, I can get/post documents to this index normally. But for new documents, I cannot get these when search by property or show…

---

## [Ignoring certain HTTP verbs from APM](https://discuss.elastic.co/t/ignoring-certain-http-verbs-from-apm/214286)

<div class="topic-metadata">

**Author:** [@David\_Mkheyan](https://discuss.elastic.co/u/David_Mkheyan)\
**Replies:** 4\
**Last updated:** [January 30, 2020, 1:17pm UTC](https://discuss.elastic.co/t/ignoring-certain-http-verbs-from-apm/214286 "2020-01-30T13:17:17Z")

</div>

Is there any way to not trace the certain HTTP verbs,for example OPTIONS request before each CORS request?

---

## [Elasticsearch 6.5.4 - Kibana Coord Nodes OutOfMemory Errors And General Cluster Improvement Questions](https://discuss.elastic.co/t/elasticsearch-6-5-4-kibana-coord-nodes-outofmemory-errors-and-general-cluster-improvement-questions/187676)

<div class="topic-metadata">

**Author:** [@jstubbington](https://discuss.elastic.co/u/jstubbington)\
**Replies:** 4\
**Last updated:** [July 19, 2019, 9:20pm UTC](https://discuss.elastic.co/t/elasticsearch-6-5-4-kibana-coord-nodes-outofmemory-errors-and-general-cluster-improvement-questions/187676 "2019-07-19T21:20:05Z")

</div>

I have tried my best to solve these issues myself and have learned a lot in trying to do so, but I'm having trouble knowing what to tackle first and the best way to go about it. I believe that the cluster setup below is…

---

## [Login is currently dissabled. Administrator should consult the Kibana Log](https://discuss.elastic.co/t/login-is-currently-dissabled-administrator-should-consult-the-kibana-log/128946)

<div class="topic-metadata">

**Author:** [@shsh](https://discuss.elastic.co/u/shsh)\
**Replies:** 4\
**Last updated:** [April 21, 2018, 5:58pm UTC](https://discuss.elastic.co/t/login-is-currently-dissabled-administrator-should-consult-the-kibana-log/128946 "2018-04-21T17:58:12Z")

</div>

I'M unable to start Kibana. The Main pages display "Login Is currently Disable. Administrator should consult kibana log". The setup is installed with X-pack. I have disable the security in Elasticsearch.yml and Kibana.…

---

## [Status Server Down](https://discuss.elastic.co/t/status-server-down/85654)

<div class="topic-metadata">

**Author:** [@Me\_Cloud](https://discuss.elastic.co/u/Me_Cloud)\
**Replies:** 4\
**Last updated:** [May 14, 2017, 10:02am UTC](https://discuss.elastic.co/t/status-server-down/85654 "2017-05-14T10:02:53Z")

</div>

Hello, i have a question can elk stack cek status from server down? like nagios doing

---

## [Getting Score while running percolate](https://discuss.elastic.co/t/getting-score-while-running-percolate/65346)

<div class="topic-metadata">

**Author:** [@Nisar\_Adappadathil](https://discuss.elastic.co/u/Nisar_Adappadathil)\
**Replies:** 4\
**Last updated:** [November 28, 2016, 6:07am UTC](https://discuss.elastic.co/t/getting-score-while-running-percolate/65346 "2016-11-28T06:07:14Z")

</div>

Hi I am running percolation POST http://localhost:9200/abcd/xyz/\_mpercolate -d '{"percolate" : {"index" : "abcd", "type" : "xyz", "id" : "AVXe7oZSVXJ\_HQBQwl6O" } } {} {"percolate" : {"index" : "abcd", "type" : "xyz",…

---

## [The trouble of Elasticsearch5.0\_beta](https://discuss.elastic.co/t/the-trouble-of-elasticsearch5-0-beta/60955)

<div class="topic-metadata">

**Author:** [@k3-ota](https://discuss.elastic.co/u/k3-ota)\
**Replies:** 4\
**Last updated:** [September 29, 2016, 12:18am UTC](https://discuss.elastic.co/t/the-trouble-of-elasticsearch5-0-beta/60955 "2016-09-29T00:18:04Z")

</div>

Hi, I'm Kazuhide Ota. Today, I encoutered the trouble on Elasticsearch ver5.0(Beta)... I succeeded in registration of index, "psaux". However, when I try to register series of data, console displayed the following erro…

---

## [UDP Listener Died](https://discuss.elastic.co/t/udp-listener-died/314339)

<div class="topic-metadata">

**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\
**Replies:** 2\
**Last updated:** [September 14, 2022, 12:37pm UTC](https://discuss.elastic.co/t/udp-listener-died/314339 "2022-09-14T12:37:51Z")

</div>

I'm seeing this error in my logstash-plain.log file and I ham not sure where to start looking: \[2022-09-13T17:25:47,905\]\[ERROR\]\[logstash.inputs.udp \]\[main\]\[8a46caaeb3cca4377e6163891fd9b8dd48405025c4a31918ce883ba824…

---

## [Fielddata error indexing string fields](https://discuss.elastic.co/t/fielddata-error-indexing-string-fields/289105)

<div class="topic-metadata">

**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\
**Replies:** 2\
**Last updated:** [November 16, 2021, 4:18pm UTC](https://discuss.elastic.co/t/fielddata-error-indexing-string-fields/289105 "2021-11-16T16:18:25Z")

</div>

In notes of Part 5 of crash course I see By default, every string gets mapped twice as a text field and as a keyword multi-field. Each field type is primed for different types of requests. However, when I try to aggr…

---

## [How to change the field type in an ElasticSearch Index?](https://discuss.elastic.co/t/how-to-change-the-field-type-in-an-elasticsearch-index/258457)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 2\
**Last updated:** [December 16, 2020, 2:34am UTC](https://discuss.elastic.co/t/how-to-change-the-field-type-in-an-elasticsearch-index/258457 "2020-12-16T02:34:18Z")

</div>

I have index\_A, which includes a number field "foo". I copy the mapping for index\_A, and make a dev tools call PUT /index\_B with the field foo changed to text, so the mapping portion of that is: "foo": { "type": …

---

## [X-Pack / Elastic - Cannot read security-version string in index .security](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595)

<div class="topic-metadata">

**Author:** [@luffy937](https://discuss.elastic.co/u/luffy937)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 8:28am UTC](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595 "2020-12-04T08:28:15Z")

</div>

Hello All, I'm coming to you because I think I checked all possibilities to correct my issue... I run an Elastic stack in a docker-compose file, the stack run well but I have a lot of error message in my docker-compose…

---

## [Is it possible to get stack trace info on SQL spans from ruby agents?](https://discuss.elastic.co/t/is-it-possible-to-get-stack-trace-info-on-sql-spans-from-ruby-agents/235829)

<div class="topic-metadata">

**Author:** [@adnanrh](https://discuss.elastic.co/u/adnanrh)\
**Replies:** 2\
**Last updated:** [June 30, 2020, 12:12am UTC](https://discuss.elastic.co/t/is-it-possible-to-get-stack-trace-info-on-sql-spans-from-ruby-agents/235829 "2020-06-30T00:12:15Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.6…

---

## [Config for Monitoring Windows Services by heartbeat error](https://discuss.elastic.co/t/config-for-monitoring-windows-services-by-heartbeat-error/226999)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 2\
**Last updated:** [April 14, 2020, 2:08am UTC](https://discuss.elastic.co/t/config-for-monitoring-windows-services-by-heartbeat-error/226999 "2020-04-14T02:08:08Z")

</div>

I have my elasticsearch, logstash, kibana running inside docker. The files filebeat ships are from another server. Firstly, I just want to see if up/down status is provided for windows services. Can I install heartbeat…

---

## [Filebeatのmoduleファイルのリロードについて](https://discuss.elastic.co/t/filebeat-module/202089)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 2\
**Last updated:** [October 3, 2019, 6:48am UTC](https://discuss.elastic.co/t/filebeat-module/202089 "2019-10-03T06:48:02Z")

</div>

filebeatのmoduleファイル(apache.yml等)の内容を変更し、filebeatの停止を伴わずにリロードしたいです。 マニュアルを見てもリロード方法が分からず、もし方法があればご教示いただけないでしょうか

---

## [Import API path 404 error](https://discuss.elastic.co/t/import-api-path-404-error/186355)

<div class="topic-metadata">

**Author:** [@cuzzo333](https://discuss.elastic.co/u/cuzzo333)\
**Replies:** 2\
**Last updated:** [June 27, 2019, 9:44pm UTC](https://discuss.elastic.co/t/import-api-path-404-error/186355 "2019-06-27T21:44:19Z")

</div>

Hello. We're attempting to begin using the Kibana export/import API to develop some automation around backing up our Kibana dashboards. While I'm able to reach the export API the import API path is returning the 404 er…

---

## [Filter indices for range query in time based indices](https://discuss.elastic.co/t/filter-indices-for-range-query-in-time-based-indices/149913)

<div class="topic-metadata">

**Author:** [@Ha\_Truong](https://discuss.elastic.co/u/Ha_Truong)\
**Replies:** 2\
**Last updated:** [September 26, 2018, 5:39pm UTC](https://discuss.elastic.co/t/filter-indices-for-range-query-in-time-based-indices/149913 "2018-09-26T17:39:56Z")

</div>

We are using Index Roll Over api to create new index based on size. We are having 1 alias for write and another alias for read. Read alias is obviously pointing to all indices. For range query, we want to limit search t…

---

## [Scripted field with count value](https://discuss.elastic.co/t/scripted-field-with-count-value/148578)

<div class="topic-metadata">

**Author:** [@Miguel\_Angel\_Chuecos](https://discuss.elastic.co/u/Miguel_Angel_Chuecos)\
**Replies:** 2\
**Last updated:** [September 14, 2018, 8:20am UTC](https://discuss.elastic.co/t/scripted-field-with-count-value/148578 "2018-09-14T08:20:54Z")

</div>

I need to do a list visualization in Kibana that use a count metric. It allows me to know if any record has a value that is repeated. The problem is that I can not use that metric because it is not a field but I want t…

---

## [Manual creation of an index with the date pattern name-YYYY.MM.DD](https://discuss.elastic.co/t/manual-creation-of-an-index-with-the-date-pattern-name-yyyy-mm-dd/128730)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [April 19, 2018, 4:22pm UTC](https://discuss.elastic.co/t/manual-creation-of-an-index-with-the-date-pattern-name-yyyy-mm-dd/128730 "2018-04-19T16:22:07Z")

</div>

I have an application that will be feeding data to my cluster via the API. I would like to have the index rolled like a logstash feed, index-YYYY.MM.DD. I cannot figure out how to create the index for that pattern? I don…

---

## [What all Open Source plugins are available For Reporting in PDF/PNG/XLS?](https://discuss.elastic.co/t/what-all-open-source-plugins-are-available-for-reporting-in-pdf-png-xls/97854)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 5:09am UTC](https://discuss.elastic.co/t/what-all-open-source-plugins-are-available-for-reporting-in-pdf-png-xls/97854 "2017-08-23T05:09:57Z")

</div>

Please suggest reporting tools or plugin for: creating reports of Kibana Dashboards which can be downloaded in PDF/PNG/XLS format send reports via email Thanks

---

## [Filter based on a truncated string of caharacters](https://discuss.elastic.co/t/filter-based-on-a-truncated-string-of-caharacters/81761)

<div class="topic-metadata">

**Author:** [@Tictac](https://discuss.elastic.co/u/Tictac)\
**Replies:** 2\
**Last updated:** [April 20, 2017, 9:10am UTC](https://discuss.elastic.co/t/filter-based-on-a-truncated-string-of-caharacters/81761 "2017-04-20T09:10:23Z")

</div>

Hello everybody I need help regarding the filter. I'd like to know if we can use a query based on a truncated string of characters. In order to correctly use a specific filter I'm supposed to add the following term: "…

---

## [Do I need to backup cluster global metadata?](https://discuss.elastic.co/t/do-i-need-to-backup-cluster-global-metadata/46303)

<div class="topic-metadata">

**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\
**Replies:** 2\
**Last updated:** [April 5, 2016, 9:00am UTC](https://discuss.elastic.co/t/do-i-need-to-backup-cluster-global-metadata/46303 "2016-04-05T09:00:34Z")

</div>

If yes, then how? I'm thinking about scenario where all my master nodes are lost. I did some tests here to check what happens when masters are lost; and I see that ES can recover from whatever is left on data nodes pre…

---

## [Other client nodes not showing up](https://discuss.elastic.co/t/other-client-nodes-not-showing-up/37574)

<div class="topic-metadata">

**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\
**Replies:** 2\
**Last updated:** [December 18, 2015, 8:34pm UTC](https://discuss.elastic.co/t/other-client-nodes-not-showing-up/37574 "2015-12-18T20:34:57Z")

</div>

Noticed something weird in my new cluster of 3x master nodes, 6x data nodes and 2x client nodes. All nodes are in the cluster and if I use the cat api for nodes on client node 1 I do not get the utilization of the othe…

---

## [File input not working - again](https://discuss.elastic.co/t/file-input-not-working-again/31773)

<div class="topic-metadata">

**Author:** [@Fabio\_Rocha](https://discuss.elastic.co/u/Fabio_Rocha)\
**Replies:** 2\
**Last updated:** [October 7, 2015, 2:05pm UTC](https://discuss.elastic.co/t/file-input-not-working-again/31773 "2015-10-07T14:05:02Z")

</div>

Hello folks, I've got issues when tried to read syslog-ng files with file input. It simply doesn't work. Here is my config: input { file { path =\> \[ "/var/log/10-SWITCH/\*" \] …

---

## [Generate murmur3 (hyperloglog) hash outside of ES](https://discuss.elastic.co/t/generate-murmur3-hyperloglog-hash-outside-of-es/29490)

<div class="topic-metadata">

**Author:** [@jaikit](https://discuss.elastic.co/u/jaikit)\
**Replies:** 2\
**Last updated:** [September 22, 2015, 6:58am UTC](https://discuss.elastic.co/t/generate-murmur3-hyperloglog-hash-outside-of-es/29490 "2015-09-22T06:58:51Z")

</div>

Hello, Is there any way to provide murmur3 hash as part of document while indexing ? Here is my usecase and only reason I want to generate outside of ES is because of scale. Appreciate any hints. I have.. user1 docum…

---

## [Lower case all fields](https://discuss.elastic.co/t/lower-case-all-fields/359791)

<div class="topic-metadata">

**Author:** [@han\_fatzot](https://discuss.elastic.co/u/han_fatzot)\
**Replies:** 8\
**Last updated:** [May 21, 2024, 7:44am UTC](https://discuss.elastic.co/t/lower-case-all-fields/359791 "2024-05-21T07:44:20Z")

</div>

hello :blush: I want to create visualizations on lowercase fields. Text type can not work because it can be aggerated. example: I want to create a visualization that shows the top ten process.executable but i want to…

---

## [How to parse and index xml in ES7](https://discuss.elastic.co/t/how-to-parse-and-index-xml-in-es7/245269)

<div class="topic-metadata">

**Author:** [@azer\_gorai](https://discuss.elastic.co/u/azer_gorai)\
**Replies:** 8\
**Last updated:** [August 18, 2020, 2:38pm UTC](https://discuss.elastic.co/t/how-to-parse-and-index-xml-in-es7/245269 "2020-08-18T14:38:50Z")

</div>

I need to index and parse xml in elasticsearsh. I need one field to store the xml as raw data and another field that will contain a fvalue retrieved from xpath in the same xml

---

## [APM agent for java is not working](https://discuss.elastic.co/t/apm-agent-for-java-is-not-working/238679)

<div class="topic-metadata">

**Author:** [@gijo](https://discuss.elastic.co/u/gijo)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 10:48am UTC](https://discuss.elastic.co/t/apm-agent-for-java-is-not-working/238679 "2020-06-26T10:48:01Z")

</div>

HI, I attached the elastic apm agent to my spring boot application as per https://www.elastic.co/guide/en/apm/agent/java/current/setup-javaagent.html . I created a deployment for APM server in elastic cloud console as w…

---

## [Field case sensitivity and detection rules not triggering 'clear-eventlog'](https://discuss.elastic.co/t/field-case-sensitivity-and-detection-rules-not-triggering-clear-eventlog/230167)

<div class="topic-metadata">

**Author:** [@jimmburton](https://discuss.elastic.co/u/jimmburton)\
**Replies:** 3\
**Last updated:** [April 29, 2020, 2:57pm UTC](https://discuss.elastic.co/t/field-case-sensitivity-and-detection-rules-not-triggering-clear-eventlog/230167 "2020-04-29T14:57:44Z")

</div>

I have an new on-prem deployment of ELK 7.6.2, and have been working the the SIEM tool and like in another post about not seeing a signal get triggered when clearing logs I had the same issue. I worked through the winlog…

---

## [Kibana - Data Table - Filtering - Grouping Data](https://discuss.elastic.co/t/kibana-data-table-filtering-grouping-data/167670)

<div class="topic-metadata">

**Author:** [@dimah](https://discuss.elastic.co/u/dimah)\
**Replies:** 3\
**Last updated:** [February 22, 2019, 2:55pm UTC](https://discuss.elastic.co/t/kibana-data-table-filtering-grouping-data/167670 "2019-02-22T14:55:51Z")

</div>

Hi Kibana group, I am trying to create a Data Table visualization where random text from a search string is grouped to show the count of how many times it has occurred. As a simplified example my saved search returns: …

---

## [Kibana monitoring errors](https://discuss.elastic.co/t/kibana-monitoring-errors/168704)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 5:15pm UTC](https://discuss.elastic.co/t/kibana-monitoring-errors/168704 "2019-02-19T17:15:40Z")

</div>

The first problem, I have a cluster with 14 nodes, when I go to the nodes monitoring screen I get "no items found" at the default 1 hour period. Changing to 30 minutes or less shows the nodes. Second, on logstash pipel…

---

## [Windows 10 - Not capturing HTTP traffic](https://discuss.elastic.co/t/windows-10-not-capturing-http-traffic/89896)

<div class="topic-metadata">

**Author:** [@commonman.net](https://discuss.elastic.co/u/commonman.net)\
**Replies:** 3\
**Last updated:** [June 21, 2017, 9:27am UTC](https://discuss.elastic.co/t/windows-10-not-capturing-http-traffic/89896 "2017-06-21T09:27:17Z")

</div>

Dears, I have successfully installed packetbeat-5.4.0 and pointing to Elastic search. I kept the default configs as it is. However I'm getting "INFO No non-zero metrics in the last 30s" in the log. My intention is to g…

---

## [Curator's delete by disk space doesn't remove logs](https://discuss.elastic.co/t/curators-delete-by-disk-space-doesnt-remove-logs/79778)

<div class="topic-metadata">

**Author:** [@Wojter](https://discuss.elastic.co/u/Wojter)\
**Replies:** 3\
**Last updated:** [March 27, 2017, 4:45pm UTC](https://discuss.elastic.co/t/curators-delete-by-disk-space-doesnt-remove-logs/79778 "2017-03-27T16:45:53Z")

</div>

Hi there! There is one thing that worries me about Curator tool. I'd want to create a cap of disk space for elasticsearch. There exists really great filter for it which is space. Now I don't know if I use it properly, …

---

## [Retiring indexes from SSDs to HDDs](https://discuss.elastic.co/t/retiring-indexes-from-ssds-to-hdds/67851)

<div class="topic-metadata">

**Author:** [@wptq](https://discuss.elastic.co/u/wptq)\
**Replies:** 3\
**Last updated:** [December 12, 2016, 9:14am UTC](https://discuss.elastic.co/t/retiring-indexes-from-ssds-to-hdds/67851 "2016-12-12T09:14:51Z")

</div>

Hi all, We've got a ELK cluster running ES 5.0 for logs indexing, collecting them from Kafka using Logstash. Each node has 1TB in SSDs and 2TB in HDDs. At the moment, we're only using SSD volumes with Elasticsearch. H…

---

## [PagerDuty Action - key setting instructions incorrect?](https://discuss.elastic.co/t/pagerduty-action-key-setting-instructions-incorrect/65965)

<div class="topic-metadata">

**Author:** [@cgspohn](https://discuss.elastic.co/u/cgspohn)\
**Replies:** 3\
**Last updated:** [November 30, 2016, 5:20pm UTC](https://discuss.elastic.co/t/pagerduty-action-key-setting-instructions-incorrect/65965 "2016-11-30T17:20:10Z")

</div>

In setting up a Watcher alarm with a PagerDuty action (we are using elasticsearch 5.0) looks like the instructions for setting up PagerDuty are incorrect based on my results. I followed these instructions: https://www.el…

---

## [Is there a way to search terms lower cased?](https://discuss.elastic.co/t/is-there-a-way-to-search-terms-lower-cased/3056)

<div class="topic-metadata">

**Author:** [@sezgin\_kucukkaraasla](https://discuss.elastic.co/u/sezgin_kucukkaraasla)\
**Replies:** 8\
**Last updated:** [July 7, 2010, 11:25am UTC](https://discuss.elastic.co/t/is-there-a-way-to-search-terms-lower-cased/3056 "2010-07-07T11:25:43Z")

</div>

Hi, When using with default configuration and with no mapping, fields are analyzed with lowercase token filter. So when I index a field with value, let's say "ABC", it is tokenized as "abc". When I try to search it as…

---

## [Is it necessary to delete a PIT?](https://discuss.elastic.co/t/is-it-necessary-to-delete-a-pit/277752)

<div class="topic-metadata">

**Author:** [@zhiyazw](https://discuss.elastic.co/u/zhiyazw)\
**Replies:** 1\
**Last updated:** [July 8, 2021, 10:33am UTC](https://discuss.elastic.co/t/is-it-necessary-to-delete-a-pit/277752 "2021-07-08T10:33:17Z")

</div>

In search after section, ELasticsearch said, "When you’re finished, you should delete your PIT". Is this necessary? Does a PIT get deleted automatically after timeout? Just as "Scroll" does. It's not easy to find a goo…

---

## [How to sort an elasticsearch query based on the size of nested objects that match a condition?](https://discuss.elastic.co/t/how-to-sort-an-elasticsearch-query-based-on-the-size-of-nested-objects-that-match-a-condition/277810)

<div class="topic-metadata">

**Author:** [@EmilieM](https://discuss.elastic.co/u/EmilieM)\
**Replies:** 1\
**Last updated:** [July 7, 2021, 2:55pm UTC](https://discuss.elastic.co/t/how-to-sort-an-elasticsearch-query-based-on-the-size-of-nested-objects-that-match-a-condition/277810 "2021-07-07T14:55:55Z")

</div>

I try to sort my elastic search query based on the size of nested objects that match a condition (here: size of boosters with a specific status) Here is my mapping : { "companies" : { "mappings" : { "dynami…

---

## [Elasticsearch giving query\_shard\_exception for query\_string](https://discuss.elastic.co/t/elasticsearch-giving-query-shard-exception-for-query-string/268556)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 1\
**Last updated:** [March 31, 2021, 8:01am UTC](https://discuss.elastic.co/t/elasticsearch-giving-query-shard-exception-for-query-string/268556 "2021-03-31T08:01:47Z")

</div>

I am storing URL in the elastic search and I making the following request to get a result for elastic search: { "query\_string": { "query": "\*http://localhost:8000/v3/a…

---

## [Is there any way to disbale Kibana News and Help buttons?](https://discuss.elastic.co/t/is-there-any-way-to-disbale-kibana-news-and-help-buttons/252084)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [October 14, 2020, 8:30pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-disbale-kibana-news-and-help-buttons/252084 "2020-10-14T20:30:24Z")

</div>

Hi, I am using Elastic Stack 7.9.2 and I would like to disable Help and News Feed buttons from Kibana; I have alrady disabled newsfeed system configuration in kibana.yml file; newsfeed.enabled: false but still, I a…

---

## [Errors after updating plugins in 6.8](https://discuss.elastic.co/t/errors-after-updating-plugins-in-6-8/241331)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 1\
**Last updated:** [July 17, 2020, 8:40am UTC](https://discuss.elastic.co/t/errors-after-updating-plugins-in-6-8/241331 "2020-07-17T08:40:24Z")

</div>

I'm using Logstash 6.8 and am using some updated versions of plugins which have been updated with the command: logstash-plugin update logstash-filter-kv logstash-input-s3 logstash-filter-json This has worked fine for a…

---

## [Could not index event to Elasticsearch after upgrade to 7.0.1](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641)

<div class="topic-metadata">

**Author:** [@strom18](https://discuss.elastic.co/u/strom18)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 12:00pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641 "2019-06-20T12:00:09Z")

</div>

Hello, I have this following error since upgrade from 6.7.1 to 7.0.1 : \[2019-06-20T11:21:04,154\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>n…

---

## [Shards Failed](https://discuss.elastic.co/t/shards-failed/164067)

<div class="topic-metadata">

**Author:** [@epjp](https://discuss.elastic.co/u/epjp)\
**Replies:** 1\
**Last updated:** [January 16, 2019, 10:22am UTC](https://discuss.elastic.co/t/shards-failed/164067 "2019-01-16T10:22:11Z")

</div>

I have created a Data Table Visualization that gives me the "system.uptime.duration.ms" for 4 Windows servers running Metricbeat 6.5.4. Unfortunately, no matter what timeframe I query, I get "20 Shards out of X Failed" …

---

## ["INFO Non-zero metrics in the last 30s" with Winlogbeat](https://discuss.elastic.co/t/info-non-zero-metrics-in-the-last-30s-with-winlogbeat/163760)

<div class="topic-metadata">

**Author:** [@gaglimax](https://discuss.elastic.co/u/gaglimax)\
**Replies:** 1\
**Last updated:** [January 10, 2019, 3:08pm UTC](https://discuss.elastic.co/t/info-non-zero-metrics-in-the-last-30s-with-winlogbeat/163760 "2019-01-10T15:08:19Z")

</div>

Hi ! I'm trying to send Forwarded Events logs with Winlogbeat to a Logstash instance. Here is my winlogbeat.yml file : winlogbeat.event\_logs: - name: ForwardedEvents setup.kibana: host: "192.168.101.119:5601" ou…

---

## [Is email action through SENDGRID supported?](https://discuss.elastic.co/t/is-email-action-through-sendgrid-supported/139137)

<div class="topic-metadata">

**Author:** [@SanyamJ-info](https://discuss.elastic.co/u/SanyamJ-info)\
**Replies:** 1\
**Last updated:** [July 9, 2018, 12:42pm UTC](https://discuss.elastic.co/t/is-email-action-through-sendgrid-supported/139137 "2018-07-09T12:42:03Z")

</div>

Just as we can integrate Gmail,Outlook,SES,Exchange as email actions for our ElasticSearch watcher.....Is there any way of integrating SENDGRID? Since it's not given in the official documentation(https://www.elastic.co/…

---

## [Stalled pipeline help](https://discuss.elastic.co/t/stalled-pipeline-help/137949)

<div class="topic-metadata">

**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 2:32pm UTC](https://discuss.elastic.co/t/stalled-pipeline-help/137949 "2018-06-29T14:32:04Z")

</div>

Hi, I have a logstash 6.1.1 running in a docker container, and am trying to understand why one our pipeline is not sending data. I stopped the instance and noticed that in the log it mentionned the pipeline was stalled: …

---

## [Filebeat is skipping lines randomly](https://discuss.elastic.co/t/filebeat-is-skipping-lines-randomly/101498)

<div class="topic-metadata">

**Author:** [@Hermes\_Vazquez\_Figue](https://discuss.elastic.co/u/Hermes_Vazquez_Figue)\
**Replies:** 1\
**Last updated:** [September 22, 2017, 6:49pm UTC](https://discuss.elastic.co/t/filebeat-is-skipping-lines-randomly/101498 "2017-09-22T18:49:51Z")

</div>

Hello, I'm shipping my logs directly to ES with filebeat and is skipping some lines from the logs randomly. My filebeat version is 5.4.2 on Debian GNU/Linux 8 (jessie) The following is the configuration file that I'm u…

---

## [Completion field does not support null value](https://discuss.elastic.co/t/completion-field-does-not-support-null-value/76618)

<div class="topic-metadata">

**Author:** [@Andarius](https://discuss.elastic.co/u/Andarius)\
**Replies:** 1\
**Last updated:** [February 27, 2017, 3:20pm UTC](https://discuss.elastic.co/t/completion-field-does-not-support-null-value/76618 "2017-02-27T15:20:11Z")

</div>

Hi, I'm trying to set up a completion field for query-as-you-type search in ES 2.4 . However, for some fields the content can be empty and I keep getting MapperParsingException. How could I do it without replacing the…

[Previous page](https://discuss.elastic.co/top.md?page=1527&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1529&per_page=50&period=all)
