# Top

**URL:** https://discuss.elastic.co/top.md?page=1535&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1536

---

## [Logstash cannot run config file on window](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 5\
**Last updated:** [September 10, 2018, 10:12am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922 "2018-09-10T10:12:25Z")

</div>

Dear All, I try to run a config file in window but fail. As the log is very long, I attach some of the log. Please advice. 2018-09-10 16:47:45,885 main ERROR Null object returned for RollingFile in Appenders. 2018-09-…

---

## [Multiple views (IndexReader/IndexCommit) of one index in ES](https://discuss.elastic.co/t/multiple-views-indexreader-indexcommit-of-one-index-in-es/16871)

<div class="topic-metadata">

**Author:** [@David\_Causse](https://discuss.elastic.co/u/David_Causse)\
**Replies:** 5\
**Last updated:** [April 9, 2014, 5:34pm UTC](https://discuss.elastic.co/t/multiple-views-indexreader-indexcommit-of-one-index-in-es/16871 "2014-04-09T17:34:05Z")

</div>

Hi, I'm evaluating ES features by reading the doc. Here is the missing usecase I was not able to find in the documentation. I want to perform query in an index from 2 differents applications. One applicatio…

---

## [Want to parse multiline json logs using filebeat and logstash except non-josn logs without any failure](https://discuss.elastic.co/t/want-to-parse-multiline-json-logs-using-filebeat-and-logstash-except-non-josn-logs-without-any-failure/230665)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 5:41am UTC](https://discuss.elastic.co/t/want-to-parse-multiline-json-logs-using-filebeat-and-logstash-except-non-josn-logs-without-any-failure/230665 "2020-05-01T05:41:20Z")

</div>

my json log file { "a":{ "se":"NA", "event":"158", "sys":"NA", "Id":"149", "ma":"o", "ab":"Pod", "source": "Application", "eq":"NA", "pr":"NA", "sev":"CRIT" }, "b":{ "total\_memory":"10GB", "memory\_usage":"8GB", "memory\_…

---

## [Unable to test output with Filebeat to Elasticsearch](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654)

<div class="topic-metadata">

**Author:** [@jhaos](https://discuss.elastic.co/u/jhaos)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 9:38am UTC](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654 "2021-09-06T09:38:56Z")

</div>

Hi there, I'm trying to send the logs from Filebeat to Elasticsearch but I'm stuck with a problem regarding credentials or certification. I have the following configuration in filebeat.yml filebeat.modules: -…

---

## [Rally for ECK](https://discuss.elastic.co/t/rally-for-eck/246912)

<div class="topic-metadata">

**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\
**Replies:** 1\
**Last updated:** [September 3, 2020, 2:58pm UTC](https://discuss.elastic.co/t/rally-for-eck/246912 "2020-09-03T14:58:43Z")

</div>

Hi, Can anyone please help me the Rally yaml files ? Need to run some benchmark on my existing ECK cluster. Also, please guide for any documentation of Rally on ECK. Thanks in advance. Kailas

---

## [Winlogbeat index pattern not showing up on kibana](https://discuss.elastic.co/t/winlogbeat-index-pattern-not-showing-up-on-kibana/237608)

<div class="topic-metadata">

**Author:** [@norup](https://discuss.elastic.co/u/norup)\
**Replies:** 1\
**Last updated:** [June 22, 2020, 7:51am UTC](https://discuss.elastic.co/t/winlogbeat-index-pattern-not-showing-up-on-kibana/237608 "2020-06-22T07:51:26Z")

</div>

I can see the index has been made here, but it looks like theres 0 documents in it. But for some reason its not showing up here I have run the command .\\winlogbeat.exe setup --index-management -E output.logstash.en…

---

## [Import .tsv file through logstash](https://discuss.elastic.co/t/import-tsv-file-through-logstash/146489)

<div class="topic-metadata">

**Author:** [@dipti47](https://discuss.elastic.co/u/dipti47)\
**Replies:** 1\
**Last updated:** [August 29, 2018, 12:02pm UTC](https://discuss.elastic.co/t/import-tsv-file-through-logstash/146489 "2018-08-29T12:02:40Z")

</div>

Can i import .tsv file through logstash?

---

## [Filebeat installation (without rpm/deb) and running without root](https://discuss.elastic.co/t/filebeat-installation-without-rpm-deb-and-running-without-root/139678)

<div class="topic-metadata">

**Author:** [@scheuri](https://discuss.elastic.co/u/scheuri)\
**Replies:** 1\
**Last updated:** [July 12, 2018, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-installation-without-rpm-deb-and-running-without-root/139678 "2018-07-12T14:41:53Z")

</div>

Hello all I am tasked to install and configure filebeat (yet rather unknown to me) on several servers in order to forward application logs to ELK. The server themselves will not use anything from ELK (except filebeat to…

---

## [Secure Settings Keystore vs. Config File](https://discuss.elastic.co/t/secure-settings-keystore-vs-config-file/113977)

<div class="topic-metadata">

**Author:** [@mattdonders](https://discuss.elastic.co/u/mattdonders)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 8:14pm UTC](https://discuss.elastic.co/t/secure-settings-keystore-vs-config-file/113977 "2018-01-04T20:14:41Z")

</div>

We are running ECE 1.1.1 and are facing an issue regarding the secure settings moved from the configuration to the keystore in ES5.5x and above. We hit these issues when migrating a cluster (from ES5.6.4 to ES6.0.0) or w…

---

## [How we can send updated mysql record to elastic using logstash](https://discuss.elastic.co/t/how-we-can-send-updated-mysql-record-to-elastic-using-logstash/105224)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 1\
**Last updated:** [October 25, 2017, 12:07pm UTC](https://discuss.elastic.co/t/how-we-can-send-updated-mysql-record-to-elastic-using-logstash/105224 "2017-10-25T12:07:39Z")

</div>

How we can chnage logstash config, so that when any updated record found in mysql database, logstash fetch only that. Is it possible. my config. file is like this... input { jdbc { jdbc\_driver\_library =\> "/root/mysql…

---

## [Logrotate problems (I think)](https://discuss.elastic.co/t/logrotate-problems-i-think/76840)

<div class="topic-metadata">

**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\
**Replies:** 1\
**Last updated:** [March 1, 2017, 8:38am UTC](https://discuss.elastic.co/t/logrotate-problems-i-think/76840 "2017-03-01T08:38:49Z")

</div>

I have a fairly high-volume log file source (Varnish) that I'm trying to push into ES. What I'm seeing, is FileBeat seems to start logging every hour, roughly on the hour, but only for a few minutes (seems to vary betwe…

---

## [Document Level Security in Kibana](https://discuss.elastic.co/t/document-level-security-in-kibana/72765)

<div class="topic-metadata">

**Author:** [@gsb](https://discuss.elastic.co/u/gsb)\
**Replies:** 1\
**Last updated:** [January 25, 2017, 8:14pm UTC](https://discuss.elastic.co/t/document-level-security-in-kibana/72765 "2017-01-25T20:14:14Z")

</div>

There is a native user configured in elasticshield with document level security configured for associated role with that user. When query data from elasticsearch using curl with this user it returns data and works perf…

---

## [Visualize Windows Eventlog Auditing](https://discuss.elastic.co/t/visualize-windows-eventlog-auditing/65866)

<div class="topic-metadata">

**Author:** [@Juergen\_Kerner](https://discuss.elastic.co/u/Juergen_Kerner)\
**Replies:** 1\
**Last updated:** [November 15, 2016, 11:29pm UTC](https://discuss.elastic.co/t/visualize-windows-eventlog-auditing/65866 "2016-11-15T23:29:27Z")

</div>

Hi guys, I am new to the elastic community and need a little help. I implemented the ELK stack and I am indexing windows event logs with winlogbeat. For demo purposes I turned on audit logging for file shares and…

---

## [Use Graph for document classification](https://discuss.elastic.co/t/use-graph-for-document-classification/60239)

<div class="topic-metadata">

**Author:** [@michelmooren](https://discuss.elastic.co/u/michelmooren)\
**Replies:** 1\
**Last updated:** [September 12, 2016, 7:48am UTC](https://discuss.elastic.co/t/use-graph-for-document-classification/60239 "2016-09-12T07:48:45Z")

</div>

The Graph introduction video mentions that vertices in a graph could be used to construct a percolate query. These queries then could be used to classify a document. The example given is that of names of death metal band…

---

## [Kibana4 slow response using weekly indexes](https://discuss.elastic.co/t/kibana4-slow-response-using-weekly-indexes/44588)

<div class="topic-metadata">

**Author:** [@lalitr](https://discuss.elastic.co/u/lalitr)\
**Replies:** 1\
**Last updated:** [March 16, 2016, 6:29pm UTC](https://discuss.elastic.co/t/kibana4-slow-response-using-weekly-indexes/44588 "2016-03-16T18:29:10Z")

</div>

Hello, We are using Kibana 4.3.1 with Elasticsearch 2.1.0 and considering moving from a single index (5 shards) of 40gb to partition the index on per week basis i.e. 52 weekly indices (1 shard) holding varing size 0.2 …

---

## [How to create message.raw field to be analyzed](https://discuss.elastic.co/t/how-to-create-message-raw-field-to-be-analyzed/28213)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 1\
**Last updated:** [August 28, 2015, 2:54am UTC](https://discuss.elastic.co/t/how-to-create-message-raw-field-to-be-analyzed/28213 "2015-08-28T02:54:14Z")

</div>

Hi All, I create two index pattern in elasticsearch, one of the index patterns has message.raw field (logstash-, system default template?), but cannot found on the other one (miki-, created by myself), Jason

---

## [Error indexing data in Elasticsearch](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416)

<div class="topic-metadata">

**Author:** [@Matheus26](https://discuss.elastic.co/u/Matheus26)\
**Replies:** 2\
**Last updated:** [February 17, 2022, 1:55pm UTC](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416 "2022-02-17T13:55:50Z")

</div>

Hi, I'm trying to index datas in Elasticsearch, but I'm getting an error. I'm using the latest Nest release (7.17.0) in C# The error is "Failed to serialize anonymous type". This error message is from an exception af…

---

## [Process 별 DISK IO 및 Network IO 를 볼수 있을까요?](https://discuss.elastic.co/t/process-disk-io-network-io/251698)

<div class="topic-metadata">

**Author:** [@jongpyo.lee](https://discuss.elastic.co/u/jongpyo.lee)\
**Replies:** 2\
**Last updated:** [October 13, 2020, 9:56am UTC](https://discuss.elastic.co/t/process-disk-io-network-io/251698 "2020-10-13T09:56:14Z")

</div>

안녕하세요. Kibana 에서 Process 별 DISK IO 값과 Process 별 Network IO 값을 표시하고 싶습니다. Top N 차트에 Process 별 cpu 사용률은 구할수 있는데, Process 별 DISK IO 값과 Network IO 값을 알수 있는 방법은 없을까요? metricbeat.yml 이나 수정해야하는 파일이 있는것인지요? 수집 대상 OS는 Windows …

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:26pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733 "2020-09-04T14:26:46Z")

</div>

I'm trying to deal with an index that the Upgrade Assistant has said needs to be reindexed before an upgrade to Elasticsearch 7. The index was created with 5.6.14 and the cluster currently runs 6.8.9. Due to an issue wit…

---

## [Tracking user time that is spent on kibana](https://discuss.elastic.co/t/tracking-user-time-that-is-spent-on-kibana/241512)

<div class="topic-metadata">

**Author:** [@Michael\_Tsikerdekis](https://discuss.elastic.co/u/Michael_Tsikerdekis)\
**Replies:** 2\
**Last updated:** [August 3, 2020, 10:14am UTC](https://discuss.elastic.co/t/tracking-user-time-that-is-spent-on-kibana/241512 "2020-08-03T10:14:57Z")

</div>

Is there any way that I can track the amount of user time that is spent on kibana? Even indirectly through events or actions? If this is possible to be stored in elasticsearch and navigated through kibana, then even bet…

---

## [Parallel execution of bulk request](https://discuss.elastic.co/t/parallel-execution-of-bulk-request/205030)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 3:03am UTC](https://discuss.elastic.co/t/parallel-execution-of-bulk-request/205030 "2019-10-25T03:03:44Z")

</div>

As it is known that the order of execution of requests in a bulk request is not guaranteed, reason being the execution can happen on different nodes. But I'm curious to know what would happen in a case when the bulk requ…

---

## [Delete older than days indices .wtacher-history-7](https://discuss.elastic.co/t/delete-older-than-days-indices-wtacher-history-7/157755)

<div class="topic-metadata">

**Author:** [@sasikumar](https://discuss.elastic.co/u/sasikumar)\
**Replies:** 2\
**Last updated:** [November 24, 2018, 5:46am UTC](https://discuss.elastic.co/t/delete-older-than-days-indices-wtacher-history-7/157755 "2018-11-24T05:46:42Z")

</div>

Dear Team, We are running ECE1.1.4 in production environment. All the cluster having the watcher history indices for last 6 months which eating system space and reducing the cluster performance. is there any way to set…

---

## [Multiple pipelines with distributor pattern](https://discuss.elastic.co/t/multiple-pipelines-with-distributor-pattern/152210)

<div class="topic-metadata">

**Author:** [@Kamen\_MacKay](https://discuss.elastic.co/u/Kamen_MacKay)\
**Replies:** 2\
**Last updated:** [October 30, 2018, 4:46pm UTC](https://discuss.elastic.co/t/multiple-pipelines-with-distributor-pattern/152210 "2018-10-30T16:46:25Z")

</div>

I've just started working with multiple pipelines and the distributor pattern. Am I correct in my understanding that I have to copy'n'paste my individual logstash config contents for each pipeline into pipelines.yml in o…

---

## [Пусто в pipeline viewer](https://discuss.elastic.co/t/pipeline-viewer/111358)

<div class="topic-metadata">

**Author:** [@11116](https://discuss.elastic.co/u/11116)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 10:08am UTC](https://discuss.elastic.co/t/pipeline-viewer/111358 "2017-12-13T10:08:37Z")

</div>

Добрый день! Обновил кластер до 6й версии. Захожу в pipelines в мониторинге, но там пусто. В логах логстэша из подозрительного вижу только: \[2017-12-12T17:17:06,413\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring…

---

## [Any ETA on the "coming" Azure ARM Discovery plugin?](https://discuss.elastic.co/t/any-eta-on-the-coming-azure-arm-discovery-plugin/84051)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 2\
**Last updated:** [May 1, 2017, 9:44pm UTC](https://discuss.elastic.co/t/any-eta-on-the-coming-azure-arm-discovery-plugin/84051 "2017-05-01T21:44:39Z")

</div>

Hi, I'm just checking in again to see if there is an ETA for the "coming" Azure ARM Discovery plugin referred to here: https://www.elastic.co/guide/en/elasticsearch/plugins/current/discovery-azure-classic.html. In No…

---

## [Need Color Tile Map in Dark Theme Dashboard kibana](https://discuss.elastic.co/t/need-color-tile-map-in-dark-theme-dashboard-kibana/76984)

<div class="topic-metadata">

**Author:** [@Vikas\_Reddy\_Aravabhu](https://discuss.elastic.co/u/Vikas_Reddy_Aravabhu)\
**Replies:** 2\
**Last updated:** [March 2, 2017, 1:29pm UTC](https://discuss.elastic.co/t/need-color-tile-map-in-dark-theme-dashboard-kibana/76984 "2017-03-02T13:29:25Z")

</div>

After changing the dashboard theme from white to dark, map color is in black and white format. But I want the map in color format. Please help me. Normal Kibana Dashboard: https://i.stack.imgur.com/bT2YH.png Dark Th…

---

## [Automatically creating index in Kibana5](https://discuss.elastic.co/t/automatically-creating-index-in-kibana5/70920)

<div class="topic-metadata">

**Author:** [@mgz](https://discuss.elastic.co/u/mgz)\
**Replies:** 2\
**Last updated:** [January 10, 2017, 12:00am UTC](https://discuss.elastic.co/t/automatically-creating-index-in-kibana5/70920 "2017-01-10T00:00:06Z")

</div>

Is there a way to create index in Kibana 5 automatically? Currently it's manual process to create index in Kibana. Does Kibana have any API to allow creating index automatically?

---

## [Does putting more config files into config\_dir require restart?](https://discuss.elastic.co/t/does-putting-more-config-files-into-config-dir-require-restart/37394)

<div class="topic-metadata">

**Author:** [@Thomas\_Larsson\_Kron](https://discuss.elastic.co/u/Thomas_Larsson_Kron)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 8:25pm UTC](https://discuss.elastic.co/t/does-putting-more-config-files-into-config-dir-require-restart/37394 "2015-12-16T20:25:25Z")

</div>

Hi, If I place more configuration files in the config\_dir while filebeat is running, does it require a restart to pick up the new config? If so, is there any plan to change this? As far as I remember, the logstash ag…

---

## [Fragment\_size not used for simple queries](https://discuss.elastic.co/t/fragment-size-not-used-for-simple-queries/16005)

<div class="topic-metadata">

**Author:** [@Neamar\_Tucote](https://discuss.elastic.co/u/Neamar_Tucote)\
**Replies:** 2\
**Last updated:** [February 25, 2014, 2:02pm UTC](https://discuss.elastic.co/t/fragment-size-not-used-for-simple-queries/16005 "2014-02-25T14:02:41Z")

</div>

Hello, Using the highlight API for a simple query like this: curl localhost:9200/company\_52fb7b90c8318c4dc800006b/\_search -d'{ "fields": \[\], "query": { "filtered": { "query": { "match": {…

---

## [Configure a search load balancer node](https://discuss.elastic.co/t/configure-a-search-load-balancer-node/12512)

<div class="topic-metadata">

**Author:** [@vannya](https://discuss.elastic.co/u/vannya)\
**Replies:** 2\
**Last updated:** [June 24, 2013, 2:46pm UTC](https://discuss.elastic.co/t/configure-a-search-load-balancer-node/12512 "2013-06-24T14:46:32Z")

</div>

Hi all, I have 2 instances of elasticsearch in 2 different machines in different networks (ip-A and ip-B). They have the same cluster name, but I don't want them to replicate data between them, so I disabled all d…

---

## [Doubt about Coordinating Node Resources](https://discuss.elastic.co/t/doubt-about-coordinating-node-resources/345394)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 8\
**Last updated:** [October 24, 2023, 1:22pm UTC](https://discuss.elastic.co/t/doubt-about-coordinating-node-resources/345394 "2023-10-24T13:22:03Z")

</div>

Hi, everyone I have a couple of questions about coordinating nodes: What are the minimum resources (RAM, CPU, disk) for a coordinating node? What do I need to do in order to estimate the resources for this kind of nod…

---

## [How to match lines in unstructured log starting with specific string](https://discuss.elastic.co/t/how-to-match-lines-in-unstructured-log-starting-with-specific-string/284112)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 7:18pm UTC](https://discuss.elastic.co/t/how-to-match-lines-in-unstructured-log-starting-with-specific-string/284112 "2021-09-13T19:18:35Z")

</div>

I have a very big unstructured file. Firstly, I want to parse all lines that starts with ABC or CDE and store them as one document in Elasticsearch. One file should be one document in index, so @message should look like …

---

## [Logstash error after updating to 7.9.1](https://discuss.elastic.co/t/logstash-error-after-updating-to-7-9-1/255366)

<div class="topic-metadata">

**Author:** [@noobman2logstash](https://discuss.elastic.co/u/noobman2logstash)\
**Replies:** 8\
**Last updated:** [November 16, 2020, 6:46pm UTC](https://discuss.elastic.co/t/logstash-error-after-updating-to-7-9-1/255366 "2020-11-16T18:46:07Z")

</div>

\[2020-11-13T16:36:21,302\]\[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:default, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create, acti…

---

## [Can not connect to Elasticsearch using Spark and elasticsearch-hadoop](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-using-spark-and-elasticsearch-hadoop/255077)

<div class="topic-metadata">

**Author:** [@swafa](https://discuss.elastic.co/u/swafa)\
**Replies:** 0\
**Last updated:** [November 11, 2020, 2:01pm UTC](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-using-spark-and-elasticsearch-hadoop/255077 "2020-11-11T14:01:04Z")

</div>

We are trying to index our Elasticsearch cluster (version: 7.6.1) from Databricks using the elasticsearch-hadoop library (version: 7.9.3). Due to corporate compliance reasons, our Elasticsearch cluster can only be acces…

---

## [Elasticsearch randomly switched initial master node](https://discuss.elastic.co/t/elasticsearch-randomly-switched-initial-master-node/234790)

<div class="topic-metadata">

**Author:** [@jon-behnken](https://discuss.elastic.co/u/jon-behnken)\
**Replies:** 3\
**Last updated:** [May 28, 2020, 5:45pm UTC](https://discuss.elastic.co/t/elasticsearch-randomly-switched-initial-master-node/234790 "2020-05-28T17:45:20Z")

</div>

I'm rather inexperienced with the deeper workings of Elasticsearch, but I've been able to establish a two-node cluster with a small (~20gb) index of text files. I'm running Elasticsearch 7.6.2 on Windows Server 2012. Pri…

---

## [Snapshot repository shows error in Cerebro tool](https://discuss.elastic.co/t/snapshot-repository-shows-error-in-cerebro-tool/214022)

<div class="topic-metadata">

**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\
**Replies:** 3\
**Last updated:** [January 8, 2020, 5:55am UTC](https://discuss.elastic.co/t/snapshot-repository-shows-error-in-cerebro-tool/214022 "2020-01-08T05:55:31Z")

</div>

Unable to create repository using cerebro tool. Please find the attached screenshot for the error. Let us know your feedback on this error & help us to resolve the same. Thanks in advance !!!

---

## [How to Plot key value pairs with scatter plot in kibana](https://discuss.elastic.co/t/how-to-plot-key-value-pairs-with-scatter-plot-in-kibana/200431)

<div class="topic-metadata">

**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\
**Replies:** 3\
**Last updated:** [September 24, 2019, 9:20pm UTC](https://discuss.elastic.co/t/how-to-plot-key-value-pairs-with-scatter-plot-in-kibana/200431 "2019-09-24T21:20:23Z")

</div>

Hi Everyone, I am looking for a solution to plot the key value pairs with scatter plot in kibana. It seems there is no any solution to this issue. I have following data: "field\_name" : \[ { …

---

## [Config file \[D:\\kibana\\.kbnconfig\] was not found](https://discuss.elastic.co/t/config-file-d-kibana-kbnconfig-was-not-found/168397)

<div class="topic-metadata">

**Author:** [@tuohaibei](https://discuss.elastic.co/u/tuohaibei)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 12:54am UTC](https://discuss.elastic.co/t/config-file-d-kibana-kbnconfig-was-not-found/168397 "2019-02-20T00:54:18Z")

</div>

When i execute "yarn kbn bootstrap",it has following error: Could someone help me?

---

## [Elastic search time out error frequently when we do 'mget' operation for bulk records](https://discuss.elastic.co/t/elastic-search-time-out-error-frequently-when-we-do-mget-operation-for-bulk-records/166512)

<div class="topic-metadata">

**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\
**Replies:** 3\
**Last updated:** [February 2, 2019, 2:35am UTC](https://discuss.elastic.co/t/elastic-search-time-out-error-frequently-when-we-do-mget-operation-for-bulk-records/166512 "2019-02-02T02:35:38Z")

</div>

I have written python code to get the data from elasticsearch using 'mget' function, but soon after my index count is reached to 360k docs, I'm getting elasticsearch timeout error frequently though I keep request\_timeout…

---

## [ML Job Failed: Error opening config file](https://discuss.elastic.co/t/ml-job-failed-error-opening-config-file/138170)

<div class="topic-metadata">

**Author:** [@vkemp](https://discuss.elastic.co/u/vkemp)\
**Replies:** 3\
**Last updated:** [July 2, 2018, 12:34pm UTC](https://discuss.elastic.co/t/ml-job-failed-error-opening-config-file/138170 "2018-07-02T12:34:57Z")

</div>

After I submit a straightforward Single Metric Job, it fails to run. No details in the UI. Elasticsearch and Kibana run on seperate hosts, both Windows Server 2016. The main error from the elasticsearch log after submitt…

---

## [(Solved) One Elastic Stack for multiple Clients](https://discuss.elastic.co/t/solved-one-elastic-stack-for-multiple-clients/115721)

<div class="topic-metadata">

**Author:** [@FRoodt](https://discuss.elastic.co/u/FRoodt)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 7:11am UTC](https://discuss.elastic.co/t/solved-one-elastic-stack-for-multiple-clients/115721 "2018-01-26T07:11:04Z")

</div>

HI there, is it possible to setup one elastic stack and use it for more than one client. (each client log on to one Kibana but can only see their logs)

---

## [Head plugin don't work after installing xpack](https://discuss.elastic.co/t/head-plugin-dont-work-after-installing-xpack/93491)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 3\
**Last updated:** [July 22, 2017, 9:29am UTC](https://discuss.elastic.co/t/head-plugin-dont-work-after-installing-xpack/93491 "2017-07-22T09:29:13Z")

</div>

Coz security, head do not display data after I install xpack, is there a method to solve the issue?

---

## [Elapsed filter is not working](https://discuss.elastic.co/t/elapsed-filter-is-not-working/91530)

<div class="topic-metadata">

**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\
**Replies:** 3\
**Last updated:** [July 2, 2017, 9:08pm UTC](https://discuss.elastic.co/t/elapsed-filter-is-not-working/91530 "2017-07-02T21:08:09Z")

</div>

Hello, I am trying to use Elapsed filter to get the duration between two timestamps, here's a snap of my logfile: 2017-01-01 07:53:44 \[utils.py\] WARNING: enable\_proxy must have atleast one http 2017-01-01 07:53:45 \[pro…

---

## [OpenShift vm.max\_map\_count](https://discuss.elastic.co/t/openshift-vm-max-map-count/90487)

<div class="topic-metadata">

**Author:** [@faustool](https://discuss.elastic.co/u/faustool)\
**Replies:** 0\
**Last updated:** [June 22, 2017, 3:20pm UTC](https://discuss.elastic.co/t/openshift-vm-max-map-count/90487 "2017-06-22T15:20:31Z")

</div>

Have someone been able to pass this bootstrap check bumper in Elasticsearch 5? I have tried different strategies to change the vm.max\_map\_count in the container, but nothing seems to change it. I get a "sysctl: settin…

---

## [Search times out and incurs high CPU](https://discuss.elastic.co/t/search-times-out-and-incurs-high-cpu/84759)

<div class="topic-metadata">

**Author:** [@Guoxing\_Li](https://discuss.elastic.co/u/Guoxing_Li)\
**Replies:** 3\
**Last updated:** [May 12, 2017, 5:55pm UTC](https://discuss.elastic.co/t/search-times-out-and-incurs-high-cpu/84759 "2017-05-12T17:55:37Z")

</div>

Hi, Our es node is experiencing a search performance problem. A single search query to es (with no other load) could easily time out (30s) and the CPU can go \> 100%. Is it because of the hardware problem? Here are some i…

---

## [Terms Faceting on multi-valued field](https://discuss.elastic.co/t/terms-faceting-on-multi-valued-field/10010)

<div class="topic-metadata">

**Author:** [@Felipe\_Hummel](https://discuss.elastic.co/u/Felipe_Hummel)\
**Replies:** 3\
**Last updated:** [December 10, 2012, 6:16pm UTC](https://discuss.elastic.co/t/terms-faceting-on-multi-valued-field/10010 "2012-12-10T18:16:38Z")

</div>

Hi, we're thinking of implementing a new feature on top of terms facets. For each document we have a list of "keywords", similar to tags. Each document may have from a few (3, 4, 5 keywords) to more than 20 keywords…

---

## [Elastic Agent Imperva Integration](https://discuss.elastic.co/t/elastic-agent-imperva-integration/356718)

<div class="topic-metadata">

**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\
**Replies:** 0\
**Last updated:** [April 3, 2024, 8:01pm UTC](https://discuss.elastic.co/t/elastic-agent-imperva-integration/356718 "2024-04-03T20:01:15Z")

</div>

I am attempting to migrate from GitHub - imperva/incapsula-logs-downloader: A Python script for downloading log files from Incapsula to the Elastic Agent Imperva integration to collect Imperva WAF logs. I'm using the AP…

---

## [Dec 11th, 2023: \[EN\] Relevant Search Combining ELSER and BM25 Text Queries](https://discuss.elastic.co/t/dec-11th-2023-en-relevant-search-combining-elser-and-bm25-text-queries/348153)

<div class="topic-metadata">

**Author:** [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\
**Replies:** 0\
**Last updated:** [December 11, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2023-en-relevant-search-combining-elser-and-bm25-text-queries/348153 "2023-12-11T08:00:21Z")

</div>

The Elastic Learned Spare EncodeR (ELSER) allows you to perform semantic search for more relevant search results. Sometimes, however, it’s more useful to combine semantic search results with regular keyword search res…

---

## [Memory usage of completion/context suggester](https://discuss.elastic.co/t/memory-usage-of-completion-context-suggester/309186)

<div class="topic-metadata">

**Author:** [@mpinho](https://discuss.elastic.co/u/mpinho)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 9:20am UTC](https://discuss.elastic.co/t/memory-usage-of-completion-context-suggester/309186 "2022-07-08T09:20:35Z")

</div>

Hello, I have a question regarding the context suggester implementation, on Elasticsearch 8.3.1. I have this mapping: { "mappings": { "properties": { "suggest": { "type": "completion", "contexts": \[ …

---

## [Search for different kind of service](https://discuss.elastic.co/t/search-for-different-kind-of-service/187781)

<div class="topic-metadata">

**Author:** [@Alexandre\_Piel](https://discuss.elastic.co/u/Alexandre_Piel)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 8:30am UTC](https://discuss.elastic.co/t/search-for-different-kind-of-service/187781 "2019-06-27T08:30:38Z")

</div>

I am trying to find the best way to structure my index(es). I have different kind of services for pets: "veterinarian", "pet grooming", "pet caring" and so on. This services have some common property like name, address, …

[Previous page](https://discuss.elastic.co/top.md?page=1534&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1536&per_page=50&period=all)
