# Top

**URL:** https://discuss.elastic.co/top.md?page=1546&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1547

---

## [AD User and AD Group in Single Role Mapping](https://discuss.elastic.co/t/ad-user-and-ad-group-in-single-role-mapping/244088)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 5\
**Last updated:** [August 6, 2020, 9:32pm UTC](https://discuss.elastic.co/t/ad-user-and-ad-group-in-single-role-mapping/244088 "2020-08-06T21:32:42Z")

</div>

Is it possible to have a role mapping that targets an AD group as well as a single AD user? I am trying the following code from DEV Tools, but can't get it work. I have only been able to get a list of groups to work and…

---

## [Snapshot from GCS to AWS Cluster (repository\_missing\_exception)](https://discuss.elastic.co/t/snapshot-from-gcs-to-aws-cluster-repository-missing-exception/165373)

<div class="topic-metadata">

**Author:** [@Abhishek\_Wahi](https://discuss.elastic.co/u/Abhishek_Wahi)\
**Replies:** 5\
**Last updated:** [January 24, 2019, 10:23am UTC](https://discuss.elastic.co/t/snapshot-from-gcs-to-aws-cluster-repository-missing-exception/165373 "2019-01-24T10:23:43Z")

</div>

Hi All, We are migrating our ES cluster from GCP to AWS. Now the repository we were using for snapshot and restore is of type gcs. My new ES cluster on AWS is running. And I want to restore the data that was snapshot by…

---

## [Error in wrapper query builder, java api, Highlevel client](https://discuss.elastic.co/t/error-in-wrapper-query-builder-java-api-highlevel-client/130984)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 5\
**Last updated:** [May 11, 2018, 12:15pm UTC](https://discuss.elastic.co/t/error-in-wrapper-query-builder-java-api-highlevel-client/130984 "2018-05-11T12:15:34Z")

</div>

I got a error when passing a json query in WrapperQueryBuilder() method in java api. code as below SearchResponse response = client.search(new SearchRequest(index) .source( new SearchSourceBuilder() .query(new Wrappe…

---

## [Reindexing failure - "all shards failed" - "arraycopy: length -9 is negative"](https://discuss.elastic.co/t/reindexing-failure-all-shards-failed-arraycopy-length-9-is-negative/344401)

<div class="topic-metadata">

**Author:** [@tpolera](https://discuss.elastic.co/u/tpolera)\
**Replies:** 3\
**Last updated:** [October 11, 2023, 2:11pm UTC](https://discuss.elastic.co/t/reindexing-failure-all-shards-failed-arraycopy-length-9-is-negative/344401 "2023-10-11T14:11:41Z")

</div>

Hello, we're having a recent issue with reindexing that is failing after a short period of time. We recently discovered a mistake with our original index that only had 1 shard set upon creation when we should've had 20. …

---

## [Semantic search on more than 10k documents](https://discuss.elastic.co/t/semantic-search-on-more-than-10k-documents/343362)

<div class="topic-metadata">

**Author:** [@Denis\_Stefan](https://discuss.elastic.co/u/Denis_Stefan)\
**Replies:** 3\
**Last updated:** [September 20, 2023, 7:44am UTC](https://discuss.elastic.co/t/semantic-search-on-more-than-10k-documents/343362 "2023-09-20T07:44:47Z")

</div>

Hello. I am currently developing a semantic search solution and I have to work with more than 10k documents (more than the maximum number of candidates which is 10k for the kNN algorithm). I am trying to find a solution…

---

## [Cacert can not access credentials logstash](https://discuss.elastic.co/t/cacert-can-not-access-credentials-logstash/302536)

<div class="topic-metadata">

**Author:** [@darguello](https://discuss.elastic.co/u/darguello)\
**Replies:** 0\
**Last updated:** [April 16, 2022, 7:07am UTC](https://discuss.elastic.co/t/cacert-can-not-access-credentials-logstash/302536 "2022-04-16T07:07:19Z")

</div>

Hi! I am trying to deploy a cluster with 3 Elasticsearch nodes and both Kibana and Logstash. Moreover, the communication between them must be protected. In order to do so, I have followed the tutorial where it is descri…

---

## [Machine Learning Functionality Across Clusters](https://discuss.elastic.co/t/machine-learning-functionality-across-clusters/302514)

<div class="topic-metadata">

**Author:** [@Datt\_Mamon](https://discuss.elastic.co/u/Datt_Mamon)\
**Replies:** 3\
**Last updated:** [April 15, 2022, 7:33pm UTC](https://discuss.elastic.co/t/machine-learning-functionality-across-clusters/302514 "2022-04-15T19:33:07Z")

</div>

Hello Elastic Community! Running into an issue in my environment that I was hoping y'all could help with. My current architecture is divided into 3 clusters: RED1, BLUE1, and my Cross Cluster Search (CCS) cluster that h…

---

## [Filebeat output file permission](https://discuss.elastic.co/t/filebeat-output-file-permission/247793)

<div class="topic-metadata">

**Author:** [@Mostafa\_Hamdy](https://discuss.elastic.co/u/Mostafa_Hamdy)\
**Replies:** 3\
**Last updated:** [September 14, 2020, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793 "2020-09-14T12:46:35Z")

</div>

These are my configuration for filebeat output.file: path: "/var/lib/filebeat-logs" filename: filebeat permissions: 0664 This is the permission is see when i use ls -l -rw-r----- 1 root root 269219 Sep 7 17:01…

---

## [Sophos module not working](https://discuss.elastic.co/t/sophos-module-not-working/245629)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 8:13am UTC](https://discuss.elastic.co/t/sophos-module-not-working/245629 "2020-08-24T08:13:23Z")

</div>

So I have been waiting for the Sophos XG module for some time since we use Sophos XG FW and when I got to know that 7.9 was released I quickly updated my filebeat and tried setting up the ingest pipeline for sophos but t…

---

## [Best way to do log retention](https://discuss.elastic.co/t/best-way-to-do-log-retention/236190)

<div class="topic-metadata">

**Author:** [@arixmf](https://discuss.elastic.co/u/arixmf)\
**Replies:** 3\
**Last updated:** [June 9, 2020, 4:01am UTC](https://discuss.elastic.co/t/best-way-to-do-log-retention/236190 "2020-06-09T04:01:45Z")

</div>

What would be the best way to do log retention in Open Source Elasticsearch? I'm using Elasticsearch 7.6 and I was reading about lifecycle management, but as far as I understand, it's part of X-Pack. What is the best w…

---

## [How to transform fields but dont insert them into elasticsearch](https://discuss.elastic.co/t/how-to-transform-fields-but-dont-insert-them-into-elasticsearch/189504)

<div class="topic-metadata">

**Author:** [@Josep\_Soler](https://discuss.elastic.co/u/Josep_Soler)\
**Replies:** 3\
**Last updated:** [July 9, 2019, 12:49pm UTC](https://discuss.elastic.co/t/how-to-transform-fields-but-dont-insert-them-into-elasticsearch/189504 "2019-07-09T12:49:15Z")

</div>

I would like to insert the document name into de index value via variable but i need to lowercase it, so i have to create a new field, also i would like to change the @timestamp to get %{+YYYY.MM.dd} variable. The probl…

---

## [Ingest (from filebeat): How to include date from log file header in each log line?](https://discuss.elastic.co/t/ingest-from-filebeat-how-to-include-date-from-log-file-header-in-each-log-line/180797)

<div class="topic-metadata">

**Author:** [@sockit](https://discuss.elastic.co/u/sockit)\
**Replies:** 3\
**Last updated:** [May 13, 2019, 9:40pm UTC](https://discuss.elastic.co/t/ingest-from-filebeat-how-to-include-date-from-log-file-header-in-each-log-line/180797 "2019-05-13T21:40:00Z")

</div>

I am using filebeat to send data directly to an elasticsearch ingest pipeline. The (daily) log files each have a date for the file in a header line at the beginning of the file: \` \*\* Application log \*\* Current day: 02/…

---

## [Kibana AVG last hour](https://discuss.elastic.co/t/kibana-avg-last-hour/119958)

<div class="topic-metadata">

**Author:** [@User\_2\_Guest\_Incomin](https://discuss.elastic.co/u/User_2_Guest_Incomin)\
**Replies:** 3\
**Last updated:** [February 16, 2018, 2:19pm UTC](https://discuss.elastic.co/t/kibana-avg-last-hour/119958 "2018-02-16T14:19:46Z")

</div>

Hi there, I'm trying to create a line chart that shows the average of field1(number field) in the last hour but showing an interval in minutes from field2 (date field), when I try to do with "Date Histogram", field2, i…

---

## [Elasticsearch 5.3.0 unstable nodes on VMWare](https://discuss.elastic.co/t/elasticsearch-5-3-0-unstable-nodes-on-vmware/85731)

<div class="topic-metadata">

**Author:** [@Laurent\_LG](https://discuss.elastic.co/u/Laurent_LG)\
**Replies:** 3\
**Last updated:** [May 15, 2017, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-0-unstable-nodes-on-vmware/85731 "2017-05-15T13:54:33Z")

</div>

We recently had a similar issue with a very unstable ES node 3 data nodes (master set to false ) 1 master node The 4 of them are running on a RHEL virtual machine 8Gb RAM. 2.6.32-504.el6.x86\_64 GNU/Linux Running on …

---

## [Reindex from remote error](https://discuss.elastic.co/t/reindex-from-remote-error/80023)

<div class="topic-metadata">

**Author:** [@kubik\_rubic](https://discuss.elastic.co/u/kubik_rubic)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 2:41pm UTC](https://discuss.elastic.co/t/reindex-from-remote-error/80023 "2017-03-28T14:41:54Z")

</div>

Hello everybody. I need to upgrade Elasticsearch version from 0.90.13 to 5.2.2. I've created new index on another server to satisfy Elastic requirements. When I trying to run reindex from remote, I getting the following …

---

## [Create vis. plugin displaying all dashboards](https://discuss.elastic.co/t/create-vis-plugin-displaying-all-dashboards/58659)

<div class="topic-metadata">

**Author:** [@Danndy355](https://discuss.elastic.co/u/Danndy355)\
**Replies:** 3\
**Last updated:** [August 23, 2016, 7:53pm UTC](https://discuss.elastic.co/t/create-vis-plugin-displaying-all-dashboards/58659 "2016-08-23T19:53:49Z")

</div>

Hello. I would like to ask simple question. I would like to create visualization plugin that will show up list of all dashboards (dashboards menu). Is there some way how to to get from .bikana index list of all dash…

---

## [Size support in elasticsearch \_suggest](https://discuss.elastic.co/t/size-support-in-elasticsearch--suggest/52795)

<div class="topic-metadata">

**Author:** [@sahas](https://discuss.elastic.co/u/sahas)\
**Replies:** 3\
**Last updated:** [June 15, 2016, 4:52am UTC](https://discuss.elastic.co/t/size-support-in-elasticsearch--suggest/52795 "2016-06-15T04:52:50Z")

</div>

By default elastisearch \_suggest returns 5 suggestions matching the criteria.Is it possible to extend that to more than 5, atleast 10 suggestions. I tried size just like in other queries and seeing below error. any thoug…

---

## [Default analyzer in ES 2.1.1](https://discuss.elastic.co/t/default-analyzer-in-es-2-1-1/41277)

<div class="topic-metadata">

**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\
**Replies:** 3\
**Last updated:** [March 4, 2016, 9:08pm UTC](https://discuss.elastic.co/t/default-analyzer-in-es-2-1-1/41277 "2016-03-04T21:08:04Z")

</div>

How does default analyzer(index\_analyzer and search\_analyzer) works in Elastic Search 2.1.1 ?? What is the difference between default analyzer compared to 1.x?

---

## [Can i join 2 fields in Kibana](https://discuss.elastic.co/t/can-i-join-2-fields-in-kibana/35506)

<div class="topic-metadata">

**Author:** [@mathews.lintu](https://discuss.elastic.co/u/mathews.lintu)\
**Replies:** 3\
**Last updated:** [November 26, 2015, 8:34pm UTC](https://discuss.elastic.co/t/can-i-join-2-fields-in-kibana/35506 "2015-11-26T20:34:18Z")

</div>

I have two types of Tables in one index Table A- \> Internal IP Address, External IP Address, User Name, Connection Reason Table B -\> External IP Address, User Name, Session Transfer, Duration I want to create "match …

---

## [Time for apm data to show up in kibana apm interface](https://discuss.elastic.co/t/time-for-apm-data-to-show-up-in-kibana-apm-interface/316253)

<div class="topic-metadata">

**Author:** [@Peter\_Li](https://discuss.elastic.co/u/Peter_Li)\
**Replies:** 6\
**Last updated:** [October 17, 2022, 5:46pm UTC](https://discuss.elastic.co/t/time-for-apm-data-to-show-up-in-kibana-apm-interface/316253 "2022-10-17T17:46:29Z")

</div>

I am wondering what is the expected time for a transaction/span data to show up in kibana ? I noticed that it is taking 1-2 minutes after the close of transaction before data shows up in kibana. I am running 8.4.2 (ela…

---

## [Exception in Ingest using NEST.Attachment after upgrade to 8.2.2](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800)

<div class="topic-metadata">

**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\
**Replies:** 6\
**Last updated:** [June 10, 2022, 6:23am UTC](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800 "2022-06-10T06:23:29Z")

</div>

Hi! I have upgraded Elasticsearch to 8.2.2 from 7.17.3, we are still using Elasticsearch.Net and NEST 7.17.2. To this we use Ingest for file search and we have a field of type NEST.Attachment on our model. Then we have…

---

## [How to check Microsoft 365 service health](https://discuss.elastic.co/t/how-to-check-microsoft-365-service-health/290089)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 6\
**Last updated:** [January 11, 2022, 7:53am UTC](https://discuss.elastic.co/t/how-to-check-microsoft-365-service-health/290089 "2022-01-11T07:53:08Z")

</div>

Hello experts! I have a question - How to check Microsoft 365 service health? As far as I know, there is a module for auditing logs in the filebeat. But I would like to get the status of o365 services. Is there such a …

---

## [How to test EUI changes in Kibana(7.10.x) during development?](https://discuss.elastic.co/t/how-to-test-eui-changes-in-kibana-7-10-x-during-development/266114)

<div class="topic-metadata">

**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\
**Replies:** 6\
**Last updated:** [March 12, 2021, 6:18am UTC](https://discuss.elastic.co/t/how-to-test-eui-changes-in-kibana-7-10-x-during-development/266114 "2021-03-12T06:18:36Z")

</div>

I want to integrate eui with my local kibana, Is there any way to integrate eui with link e.g @elastic/eui": "link:\<eui repo path\> in package.json in kibana 7.10.x version ? I have tried it. It's not working. Can anyon…

---

## [Create visualization using response from Search API](https://discuss.elastic.co/t/create-visualization-using-response-from-search-api/258103)

<div class="topic-metadata">

**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\
**Replies:** 6\
**Last updated:** [December 10, 2020, 11:04am UTC](https://discuss.elastic.co/t/create-visualization-using-response-from-search-api/258103 "2020-12-10T11:04:20Z")

</div>

Is it possible to create visualizations in Kibana using response received in SearchAPI in Dev Tools?

---

## [How to query fields using script that are under nested structure and are disabled for indexing](https://discuss.elastic.co/t/how-to-query-fields-using-script-that-are-under-nested-structure-and-are-disabled-for-indexing/213884)

<div class="topic-metadata">

**Author:** [@michael\_cutling](https://discuss.elastic.co/u/michael_cutling)\
**Replies:** 6\
**Last updated:** [January 10, 2020, 12:47pm UTC](https://discuss.elastic.co/t/how-to-query-fields-using-script-that-are-under-nested-structure-and-are-disabled-for-indexing/213884 "2020-01-10T12:47:56Z")

</div>

how to query fields using script that are under nested structure and are disabled for indexing ? For example, my mappings: PUT test { "mappings": { "doc": { "properties": { "id": { "type": "keyword" }, …

---

## [ES 6.5 unassigned\_shards":1000 do not get assigned - status yellow](https://discuss.elastic.co/t/es-6-5-unassigned-shards-1000-do-not-get-assigned-status-yellow/187478)

<div class="topic-metadata">

**Author:** [@Stefan\_Bauer](https://discuss.elastic.co/u/Stefan_Bauer)\
**Replies:** 6\
**Last updated:** [June 26, 2019, 8:54am UTC](https://discuss.elastic.co/t/es-6-5-unassigned-shards-1000-do-not-get-assigned-status-yellow/187478 "2019-06-26T08:54:32Z")

</div>

Hi, for unknown reasons after the last restart, elasticsearch has unassigned shards that do not get assigned and cluster status stays yellow. It's a single node host with no further adjustments. root@kibana03:/# curl -…

---

## [Geoshape orientation right-hand-rule for indexation](https://discuss.elastic.co/t/geoshape-orientation-right-hand-rule-for-indexation/173041)

<div class="topic-metadata">

**Author:** [@jnick1982](https://discuss.elastic.co/u/jnick1982)\
**Replies:** 6\
**Last updated:** [March 19, 2019, 9:55pm UTC](https://discuss.elastic.co/t/geoshape-orientation-right-hand-rule-for-indexation/173041 "2019-03-19T21:55:50Z")

</div>

I am having problem with indexing geoshape polygon data some of my polygon don't want to index. From what I understant from this article : http://mapster.me/right-hand-rule-geojson-fixer/ In 2016, the geoJSON specific…

---

## [Getting Started (6.4) - problems](https://discuss.elastic.co/t/getting-started-6-4-problems/148877)

<div class="topic-metadata">

**Author:** [@PhilipPeake](https://discuss.elastic.co/u/PhilipPeake)\
**Replies:** 6\
**Last updated:** [September 19, 2018, 5:49pm UTC](https://discuss.elastic.co/t/getting-started-6-4-problems/148877 "2018-09-19T17:49:27Z")

</div>

Trying to follow the Getting Started tutorial for the 6.4 stack. I have followed the instructions as described, except that I configured and used yum for the install rather than download and install the rpm files by han…

---

## [Native vs DaemonSet Deployment for Integrations Defend, Kubernetes, KSPM](https://discuss.elastic.co/t/native-vs-daemonset-deployment-for-integrations-defend-kubernetes-kspm/323535)

<div class="topic-metadata">

**Author:** [@mag-mkorn](https://discuss.elastic.co/u/mag-mkorn)\
**Replies:** 4\
**Last updated:** [August 26, 2024, 6:46pm UTC](https://discuss.elastic.co/t/native-vs-daemonset-deployment-for-integrations-defend-kubernetes-kspm/323535 "2024-08-26T18:46:12Z")

</div>

Hi everyone, I have a question regarding deployment of the Agent on Kubernetes environment. I want to use the following Integrations for monitoring our clusters: Elastic Defend for Cloud Workloads Kubernetes Kubernet…

---

## [Reindex remote cluster connection timeout](https://discuss.elastic.co/t/reindex-remote-cluster-connection-timeout/356922)

<div class="topic-metadata">

**Author:** [@neoaddix](https://discuss.elastic.co/u/neoaddix)\
**Replies:** 4\
**Last updated:** [April 8, 2024, 6:19am UTC](https://discuss.elastic.co/t/reindex-remote-cluster-connection-timeout/356922 "2024-04-08T06:19:02Z")

</div>

I'm trying to reindex an index from a remote cluster POST \_reindex?wait\_for\_completion=false { "source": { "remote": { "host": "https://remote-cluster.eu-west-1.aws.found.io:9200", "username": "xxx", …

---

## [Lens - Metric Visualization - Date Histogram Support](https://discuss.elastic.co/t/lens-metric-visualization-date-histogram-support/310667)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 4\
**Last updated:** [August 12, 2022, 1:11pm UTC](https://discuss.elastic.co/t/lens-metric-visualization-date-histogram-support/310667 "2022-08-12T13:11:01Z")

</div>

Hi All, I was wondering if there was a way to use a date histogram function within the Metric visualization. I'm trying to transfer a visualization from Grafana to Kibana, but I'm unable to find the correct way to do t…

---

## [How to Ingest data into Elasticsearch with URL Callback?](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003)

<div class="topic-metadata">

**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\
**Replies:** 4\
**Last updated:** [September 25, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003 "2021-09-25T12:10:33Z")

</div>

Hello, thanks for your great community I want to logging some data from some mobile app attribution service (such as Adjust or Appsflyer) into Elasticsearch the admin panel of attribution service allow me to set an url…

---

## [S3 Filebeat Input error](https://discuss.elastic.co/t/s3-filebeat-input-error/246654)

<div class="topic-metadata">

**Author:** [@haseev](https://discuss.elastic.co/u/haseev)\
**Replies:** 4\
**Last updated:** [October 12, 2020, 9:09pm UTC](https://discuss.elastic.co/t/s3-filebeat-input-error/246654 "2020-10-12T21:09:10Z")

</div>

There is an error within filebeat plugin after integrating aws sqs with filebeat. The error occured after receivng this message: handleSQSMessage failed: json unmarshal sqs message body failed: invalid character 'e' in …

---

## [Postgres output from json type doesn't work, writes null values](https://discuss.elastic.co/t/postgres-output-from-json-type-doesnt-work-writes-null-values/218548)

<div class="topic-metadata">

**Author:** [@ActionAdi83](https://discuss.elastic.co/u/ActionAdi83)\
**Replies:** 4\
**Last updated:** [February 11, 2020, 10:22am UTC](https://discuss.elastic.co/t/postgres-output-from-json-type-doesnt-work-writes-null-values/218548 "2020-02-11T10:22:25Z")

</div>

Hello, I need a little help, I'm trying to write from a kafka topic to a postgres table only specific fields and it doesn't work, it writes nulls. I haven't figured out how to post jsons to kafka topic so I'm getting t…

---

## [Kibana retention rate metric](https://discuss.elastic.co/t/kibana-retention-rate-metric/194871)

<div class="topic-metadata">

**Author:** [@Richard\_Bao](https://discuss.elastic.co/u/Richard_Bao)\
**Replies:** 4\
**Last updated:** [August 15, 2019, 1:18pm UTC](https://discuss.elastic.co/t/kibana-retention-rate-metric/194871 "2019-08-15T13:18:12Z")

</div>

My case is show user use an app retention rate in last 30 day. value = app opened count / total installed app count How to do this by using Kibana? The user schema is as follow, me…

---

## [Topbeat logs not showed in kibana](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 4\
**Last updated:** [May 31, 2017, 8:05am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536 "2017-05-31T08:05:27Z")

</div>

Hi, This is weird because yesterday i could see a graphic with topbeat metrics. However, sinoce 02:00 am i can't se anything coming from topbeat i kibana. Although the logs are received in elasticsearch. What can i do …

---

## [Optimizing access log query](https://discuss.elastic.co/t/optimizing-access-log-query/66806)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 4\
**Last updated:** [November 22, 2016, 11:51am UTC](https://discuss.elastic.co/t/optimizing-access-log-query/66806 "2016-11-22T11:51:13Z")

</div>

Hello all! I'm looking for ways to optimize the current query for my access log. I'm trying to get all non-static reuqests to my dashboard as fast as possible. At the moment I'm just looking for ways to get the query a…

---

## [How to make anonymous work for Kibana with shield?](https://discuss.elastic.co/t/how-to-make-anonymous-work-for-kibana-with-shield/63897)

<div class="topic-metadata">

**Author:** [@Loren18m](https://discuss.elastic.co/u/Loren18m)\
**Replies:** 4\
**Last updated:** [October 28, 2016, 2:58am UTC](https://discuss.elastic.co/t/how-to-make-anonymous-work-for-kibana-with-shield/63897 "2016-10-28T02:58:40Z")

</div>

I set the anonymous by following the page https://www.elastic.co/guide/en/shield/current/anonymous-access.html, and it did work with the elasticsearch queries. However, when I access the Kibana, it still asks for a usern…

---

## [Beta2 Java Client: java.nio.channels.UnresolvedAddressException](https://discuss.elastic.co/t/beta2-java-client-java-nio-channels-unresolvedaddressexception/15129)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 4\
**Last updated:** [January 14, 2014, 5:14pm UTC](https://discuss.elastic.co/t/beta2-java-client-java-nio-channels-unresolvedaddressexception/15129 "2014-01-14T17:14:22Z")

</div>

Hi, I'm having difficulty connecting with the Java client to 1.0.0.Beta2, the cluster is up and health, monitoring is fine using elasticsearch Head, elasticsearch HQ etc. This is the stack trace I am getting: …

---

## [KIBANA - discover- share\[CSV Report\]](https://discuss.elastic.co/t/kibana-discover-share-csv-report/268041)

<div class="topic-metadata">

**Author:** [@ycseol](https://discuss.elastic.co/u/ycseol)\
**Replies:** 1\
**Last updated:** [April 5, 2021, 7:08am UTC](https://discuss.elastic.co/t/kibana-discover-share-csv-report/268041 "2021-04-05T07:08:32Z")

</div>

안녕하세요 KIBANA 사용에 문의가 있습니다. 인덱스 생성 후 discover에서 filter를 걸어 데이터를 정상적으로 확인하였습니다. 이 데이터들을 discover- share\[CSV Report\] 로 추출해봤는데 한글이 깨지는 현상이 나옵니다. 옵션을 주는 부분이 있는거 같은데 어느 부분을 살펴 봐야 할까요?

---

## [Auditbeat Connection Issue ElasticSearch](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186)

<div class="topic-metadata">

**Author:** [@dcho99](https://discuss.elastic.co/u/dcho99)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 3:20pm UTC](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186 "2020-04-28T15:20:57Z")

</div>

I'm fairly new to Elastic. When configuring my auditbeats.yml file and testing it I get this error: Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: \[Error connection to Elasticsearch http…

---

## [Nginx & Kibana 7.0.0 setup woes](https://discuss.elastic.co/t/nginx-kibana-7-0-0-setup-woes/176931)

<div class="topic-metadata">

**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 4:28pm UTC](https://discuss.elastic.co/t/nginx-kibana-7-0-0-setup-woes/176931 "2019-04-15T16:28:50Z")

</div>

Hi, I'm trying to set up a nginx reverse proxy to sit in front of my Kibana box. Both instances (nginx and kibana) are running in a docker environment on one host. The kibana container is named "kibana" - the nginx cont…

---

## [How to GET xml field data from Elasticsearch using Elasticsearch\_DSL?](https://discuss.elastic.co/t/how-to-get-xml-field-data-from-elasticsearch-using-elasticsearch-dsl/154254)

<div class="topic-metadata">

**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\
**Replies:** 1\
**Last updated:** [October 27, 2018, 12:03am UTC](https://discuss.elastic.co/t/how-to-get-xml-field-data-from-elasticsearch-using-elasticsearch-dsl/154254 "2018-10-27T00:03:28Z")

</div>

I have log file which has XML data and I am using XML filter to insert it into Elasticsearch. Now i want to retrieve data from Elasticsearch using Elasticsearch\_DSL python library. I am not able to retrieve it. The JSON …

---

## [Remote monitoring cluster, no ES data](https://discuss.elastic.co/t/remote-monitoring-cluster-no-es-data/130743)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 1:50pm UTC](https://discuss.elastic.co/t/remote-monitoring-cluster-no-es-data/130743 "2018-05-06T13:50:41Z")

</div>

Hi All, I have followed this guide: monitoring-production to setup my elasticsearch / logstash / kibana monitoring and when I look on my monitor cluster trough kibana -\> monitoring I have an overview of elasticsearch, k…

---

## [Failed to execute on node Caused by: org.apache.lucene.store.AlreadyClosedException: this IndexReader is closed](https://discuss.elastic.co/t/failed-to-execute-on-node-caused-by-org-apache-lucene-store-alreadyclosedexception-this-indexreader-is-closed/114818)

<div class="topic-metadata">

**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 8:00pm UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-caused-by-org-apache-lucene-store-alreadyclosedexception-this-indexreader-is-closed/114818 "2018-01-10T20:00:06Z")

</div>

It seems to be an internal error in elsticsearch.I'm using 2.3.2 and one shard can not recover from the restart.Cluster yellow all the day.The log says RemoteTransportException\[\[10.10.3.16\]\[10.10.3.16:9300\]\[cluster:moni…

---

## [Topbeat not sending accurate proc.user\_p data](https://discuss.elastic.co/t/topbeat-not-sending-accurate-proc-user-p-data/53169)

<div class="topic-metadata">

**Author:** [@shubham\_deodia](https://discuss.elastic.co/u/shubham_deodia)\
**Replies:** 1\
**Last updated:** [June 20, 2016, 7:38am UTC](https://discuss.elastic.co/t/topbeat-not-sending-accurate-proc-user-p-data/53169 "2016-06-20T07:38:29Z")

</div>

Hi, I have been working with topbeat for last few weeks, but suddenly CPU Disk usage per process begin to show no data. When i checked, i found out topbeat is not sending accurate data for all top process. "proc": { …

---

## [Sorting string value stored in field 'message'](https://discuss.elastic.co/t/sorting-string-value-stored-in-field-message/42140)

<div class="topic-metadata">

**Author:** [@ben92](https://discuss.elastic.co/u/ben92)\
**Replies:** 1\
**Last updated:** [February 23, 2016, 11:54am UTC](https://discuss.elastic.co/t/sorting-string-value-stored-in-field-message/42140 "2016-02-23T11:54:19Z")

</div>

Hello, I'm currently parsing our logs using using Logstash's multiline filter to combine entries with the same reference e,g, P1-hrrnjee8 Message Field Value: example 1 2016-02-15 00:00:05 P1-hrrnjee8:None processMe…

---

## [Function score query fails with field\_value\_factor on not (yet) existing field](https://discuss.elastic.co/t/function-score-query-fails-with-field-value-factor-on-not-yet-existing-field/23466)

<div class="topic-metadata">

**Author:** [@Tobias\_Schubotz](https://discuss.elastic.co/u/Tobias_Schubotz)\
**Replies:** 1\
**Last updated:** [April 30, 2015, 8:05am UTC](https://discuss.elastic.co/t/function-score-query-fails-with-field-value-factor-on-not-yet-existing-field/23466 "2015-04-30T08:05:18Z")

</div>

Hi, My ES function score query contains several different functions based on a set of different fields. I'm having problems with field\_value\_factor on not existing fields. I'm not sure if that's existing behavior…

---

## [Resthighlevel client unit test is not working](https://discuss.elastic.co/t/resthighlevel-client-unit-test-is-not-working/311897)

<div class="topic-metadata">

**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\
**Replies:** 2\
**Last updated:** [August 18, 2022, 6:05am UTC](https://discuss.elastic.co/t/resthighlevel-client-unit-test-is-not-working/311897 "2022-08-18T06:05:23Z")

</div>

I have written a method, below @Inject private RestHighLevelClient esClient; public SearchResponse getData(SearchRequest searchRequest) { try { SearchResponse searchResponse = esClient.s…

---

## [Top 10 in bar graph in kibana](https://discuss.elastic.co/t/top-10-in-bar-graph-in-kibana/275301)

<div class="topic-metadata">

**Author:** [@abhishek30](https://discuss.elastic.co/u/abhishek30)\
**Replies:** 2\
**Last updated:** [June 9, 2021, 6:11am UTC](https://discuss.elastic.co/t/top-10-in-bar-graph-in-kibana/275301 "2021-06-09T06:11:10Z")

</div>

Hi, I have a small setup of elk stack of 7.12.1. I have ingested some data related to candidate examination. I wanted to show top 10 questions for which candidate answered correct. This is shown as such in tag cloud. …

[Previous page](https://discuss.elastic.co/top.md?page=1545&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1547&per_page=50&period=all)
