# Top

**URL:** https://discuss.elastic.co/top.md?page=1558&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1559

---

## [Removal of @timestamp field](https://discuss.elastic.co/t/removal-of-timestamp-field/62149)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [October 4, 2016, 12:37pm UTC](https://discuss.elastic.co/t/removal-of-timestamp-field/62149 "2016-10-04T12:37:32Z")

</div>

Hi, I have added custom field eventLogTime which shows the time of logs generated. At the same time I want to remove @timestamp field. However I am getting error when I tyr to remove @timestamp in logstash filter. Lo…

---

## [Kibana Dev environment does not start](https://discuss.elastic.co/t/kibana-dev-environment-does-not-start/43600)

<div class="topic-metadata">

**Author:** [@dlumbrer](https://discuss.elastic.co/u/dlumbrer)\
**Replies:** 1\
**Last updated:** [March 6, 2016, 8:51pm UTC](https://discuss.elastic.co/t/kibana-dev-environment-does-not-start/43600 "2016-03-06T20:51:18Z")

</div>

Hello, Im triying to setup a Development Environment of the latest version of Kibana (following this steps: https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md) and I have an error when I try to start a Kibana…

---

## [Need help with filter on array](https://discuss.elastic.co/t/need-help-with-filter-on-array/9850)

<div class="topic-metadata">

**Author:** [@Alexey](https://discuss.elastic.co/u/Alexey)\
**Replies:** 7\
**Last updated:** [November 28, 2012, 10:29am UTC](https://discuss.elastic.co/t/need-help-with-filter-on-array/9850 "2012-11-28T10:29:26Z")

</div>

Hello everyone, I have a problem with filter queries. Here is my piece of index: broadcasting\_regions: \[ - { - region: { - id: 26, - name: \[ …

---

## [Unable to find valid certification path to requested target while trying to implement HTTPS](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target-while-trying-to-implement-https/274644)

<div class="topic-metadata">

**Author:** [@riccardo\_centropaghe](https://discuss.elastic.co/u/riccardo_centropaghe)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 2:10pm UTC](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target-while-trying-to-implement-https/274644 "2021-06-01T14:10:44Z")

</div>

Hi, I am using a ELK stack in docker for pfSense, from here GitHub - pfelk/docker: Deploy pfelk with docker-compose All went fine, I even implement https with my own domain certificate. Navigating on the KIBANA dashboar…

---

## [How to deduplicate and perform aggregations using single Elastic search query?](https://discuss.elastic.co/t/how-to-deduplicate-and-perform-aggregations-using-single-elastic-search-query/229650)

<div class="topic-metadata">

**Author:** [@bhaveshpatel640](https://discuss.elastic.co/u/bhaveshpatel640)\
**Replies:** 0\
**Last updated:** [April 24, 2020, 12:15pm UTC](https://discuss.elastic.co/t/how-to-deduplicate-and-perform-aggregations-using-single-elastic-search-query/229650 "2020-04-24T12:15:38Z")

</div>

I have an index where employee details data is stored. I have feedback field per employee integer values (0-10). I want to get the count of feedback, avg rating of the feedbacks and avg rating per employee of the feedb…

---

## [Is "ip\_range" a real bucket aggregation?](https://discuss.elastic.co/t/is-ip-range-a-real-bucket-aggregation/219446)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 5\
**Last updated:** [March 25, 2020, 10:38am UTC](https://discuss.elastic.co/t/is-ip-range-a-real-bucket-aggregation/219446 "2020-03-25T10:38:16Z")

</div>

I'm getting a weird error when running the following ip\_range aggs with a buckets\_path: GET ecs-net-7\*/\_search { "size": 0, "aggs": { "1-bucket": { "ip\_range": { "field": "destination.ip", …

---

## [Kibana can with other geoip with create maps?](https://discuss.elastic.co/t/kibana-can-with-other-geoip-with-create-maps/126494)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 5\
**Last updated:** [April 5, 2018, 7:59am UTC](https://discuss.elastic.co/t/kibana-can-with-other-geoip-with-create-maps/126494 "2018-04-05T07:59:41Z")

</div>

kibana can with other geoip with create maps(Select buckets type)? the is only Geo coordinates \[image\] i add the ip2location filter with logstash the data is also in es 5.6.8 how can use it? there is only can choose …

---

## [Installation Elasticsearch](https://discuss.elastic.co/t/installation-elasticsearch/126319)

<div class="topic-metadata">

**Author:** [@Ibti\_Ssem](https://discuss.elastic.co/u/Ibti_Ssem)\
**Replies:** 5\
**Last updated:** [March 31, 2018, 3:19pm UTC](https://discuss.elastic.co/t/installation-elasticsearch/126319 "2018-03-31T15:19:47Z")

</div>

un message d'erreur "le service spécifié n'existe pas en tant que service installé Unabele to open the service 'elasticsearch-service-mgr'" lore de l'installation de elasticsearch service manager pourquoi ?

---

## [Documentation for the raw field](https://discuss.elastic.co/t/documentation-for-the-raw-field/111137)

<div class="topic-metadata">

**Author:** [@Paul\_D\_Ambra](https://discuss.elastic.co/u/Paul_D_Ambra)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 9:34am UTC](https://discuss.elastic.co/t/documentation-for-the-raw-field/111137 "2017-12-12T09:34:10Z")

</div>

I've found some code where applications are purposefully logging JSON instead of a message and inside that JSON logging a string into a field called raw. My understanding is that raw is normally autocreated and we're li…

---

## [Error in XPACK elasicsearch](https://discuss.elastic.co/t/error-in-xpack-elasicsearch/110428)

<div class="topic-metadata">

**Author:** [@Vivek\_Nigam](https://discuss.elastic.co/u/Vivek_Nigam)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 1:21am UTC](https://discuss.elastic.co/t/error-in-xpack-elasicsearch/110428 "2017-12-06T01:21:47Z")

</div>

While running XPack elasicserch getting following error: ./elasticsearch \[2017-12-06T03:18:26,851\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2017-12-06T03:18:26,883\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExce…

---

## [ItemsAPI - ask for feedback](https://discuss.elastic.co/t/itemsapi-ask-for-feedback/55000)

<div class="topic-metadata">

**Author:** [@cigolpl](https://discuss.elastic.co/u/cigolpl)\
**Replies:** 2\
**Last updated:** [July 8, 2016, 5:46am UTC](https://discuss.elastic.co/t/itemsapi-ask-for-feedback/55000 "2016-07-08T05:46:00Z")

</div>

Hi everyone, I am working on open source project itemsapi. That project is based on elasticsearch and node.js. My goal is to simplify and reduce time significantly for creating search web applications from weeks to ho…

---

## [Counting results by a value](https://discuss.elastic.co/t/counting-results-by-a-value/354256)

<div class="topic-metadata">

**Author:** [@user-27022024](https://discuss.elastic.co/u/user-27022024)\
**Replies:** 2\
**Last updated:** [February 27, 2024, 8:18pm UTC](https://discuss.elastic.co/t/counting-results-by-a-value/354256 "2024-02-27T20:18:10Z")

</div>

We store our load balancer logs in elasticsarch and use kibana for querying. In Kibana - Discover I can add a filter for IP address which will display the IP address from each request. But is it possible to just count e…

---

## [Logstash 7.9 not writing to output file](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260)

<div class="topic-metadata">

**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\
**Replies:** 2\
**Last updated:** [January 8, 2021, 8:25pm UTC](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260 "2021-01-08T20:25:43Z")

</div>

I have logstash 7.9 running in centos hosts. I'm facing a strange behavior. Logstash is not writing to a file in the given path. I want to make sure logstash is working or not so I provided a path in output section but …

---

## [Filebeat MISP module error](https://discuss.elastic.co/t/filebeat-misp-module-error/233882)

<div class="topic-metadata">

**Author:** [@flxdan](https://discuss.elastic.co/u/flxdan)\
**Replies:** 2\
**Last updated:** [June 2, 2020, 10:57pm UTC](https://discuss.elastic.co/t/filebeat-misp-module-error/233882 "2020-06-02T22:57:35Z")

</div>

Previously had the MISP module working although not used frequently. Recently I've noticed that it seems to be broken, I've updated to Filebeat (7.7) recently. The logs say "key not found". Filebeat logs: May 22 …

---

## ["repository-s3" plugin is missing in 7.3.0](https://discuss.elastic.co/t/repository-s3-plugin-is-missing-in-7-3-0/197048)

<div class="topic-metadata">

**Author:** [@mohamamd](https://discuss.elastic.co/u/mohamamd)\
**Replies:** 2\
**Last updated:** [September 2, 2019, 1:58pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-is-missing-in-7-3-0/197048 "2019-09-02T13:58:04Z")

</div>

Hello, I am deploying elasticsearch v7.3.0 according to the following documentation - https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html However, in the docker image for elasticsearch, the plugin…

---

## [Elasticsearch crashed suddenly with 7.1.1](https://discuss.elastic.co/t/elasticsearch-crashed-suddenly-with-7-1-1/191613)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-crashed-suddenly-with-7-1-1/191613 "2019-07-22T10:35:31Z")

</div>

Elasticsearch version bin/elasticsearch --version 7.1.1 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Environment (build 1.8.0\_91-…

---

## [Bulk from python doesn't parse datetime type](https://discuss.elastic.co/t/bulk-from-python-doesnt-parse-datetime-type/185719)

<div class="topic-metadata">

**Author:** [@Jobdelac](https://discuss.elastic.co/u/Jobdelac)\
**Replies:** 2\
**Last updated:** [June 14, 2019, 6:18pm UTC](https://discuss.elastic.co/t/bulk-from-python-doesnt-parse-datetime-type/185719 "2019-06-14T18:18:54Z")

</div>

Hello, Elastic community! I'm trying to load a bulk to Elasticsearch from a large dataset using a python script to parse. My data source file is made up of several columns with float type values and a last one with date…

---

## [Kibana not showing index](https://discuss.elastic.co/t/kibana-not-showing-index/161479)

<div class="topic-metadata">

**Author:** [@dfoley84](https://discuss.elastic.co/u/dfoley84)\
**Replies:** 2\
**Last updated:** [December 19, 2018, 9:07pm UTC](https://discuss.elastic.co/t/kibana-not-showing-index/161479 "2018-12-19T21:07:29Z")

</div>

Hi All, I created an new installation of Elk Stack 6.5 I created a Test Apache Server to ship logs to Logstash, but when i try to configure the index for this, it seems that I am unable to do so as i cannot see the ind…

---

## [Heartbeat monitor.status watch giving "Fielddata is disabled on text fields by default."](https://discuss.elastic.co/t/heartbeat-monitor-status-watch-giving-fielddata-is-disabled-on-text-fields-by-default/140196)

<div class="topic-metadata">

**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\
**Replies:** 2\
**Last updated:** [July 17, 2018, 6:56am UTC](https://discuss.elastic.co/t/heartbeat-monitor-status-watch-giving-fielddata-is-disabled-on-text-fields-by-default/140196 "2018-07-17T06:56:53Z")

</div>

I had to remove my elasticsearch data folder to get by a Kibana issue that's not allowing me to get back into the Watches management section. After getting back into the Watches management section, I copy-pasted in the …

---

## [ECE Installation Fail](https://discuss.elastic.co/t/ece-installation-fail/137072)

<div class="topic-metadata">

**Author:** [@pravekal](https://discuss.elastic.co/u/pravekal)\
**Replies:** 2\
**Last updated:** [June 22, 2018, 7:27pm UTC](https://discuss.elastic.co/t/ece-installation-fail/137072 "2018-06-22T19:27:49Z")

</div>

Checking internal ip connectivity... FAILED Can't connect $RUNNER\_HOST\_IP \[173.38.50.21:20000\]: Host is unreachable Errors have caused Elastic Cloud Enterprise installation to fail Some of the prerequisites failed: \[in…

---

## [New field doesn't appear in Kibana](https://discuss.elastic.co/t/new-field-doesnt-appear-in-kibana/121631)

<div class="topic-metadata">

**Author:** [@soukaina](https://discuss.elastic.co/u/soukaina)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 10:58am UTC](https://discuss.elastic.co/t/new-field-doesnt-appear-in-kibana/121631 "2018-02-28T10:58:50Z")

</div>

Hi, i created a new field, it exists in my index mapping but doesn't appear when i visualize all fields. Any help? Thank you.

---

## [Reading from ES using spark issues (colon in options)](https://discuss.elastic.co/t/reading-from-es-using-spark-issues-colon-in-options/117503)

<div class="topic-metadata">

**Author:** [@Sonny\_Heer](https://discuss.elastic.co/u/Sonny_Heer)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 10:23pm UTC](https://discuss.elastic.co/t/reading-from-es-using-spark-issues-colon-in-options/117503 "2018-01-31T22:23:34Z")

</div>

We ran into various issues with empty arrays etc. after reading through the forums - we go past those. Currently when using "es.read.field.as.array.include" and the field happens to have a colon in it (e.g. a:b) - this…

---

## [Role to use grok debugger, and console granular access control](https://discuss.elastic.co/t/role-to-use-grok-debugger-and-console-granular-access-control/109619)

<div class="topic-metadata">

**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 4:30pm UTC](https://discuss.elastic.co/t/role-to-use-grok-debugger-and-console-granular-access-control/109619 "2017-12-05T16:30:58Z")

</div>

We are using Shield (Security) and created some power user accounts. They have the following roles assigned: kibana\_user monitoring\_user reporting\_user logstash\_admin read\_all Those are all built in roles from http…

---

## [Cann't use custom fields as a condition to drop fields](https://discuss.elastic.co/t/cannt-use-custom-fields-as-a-condition-to-drop-fields/94304)

<div class="topic-metadata">

**Author:** [@Yaohua](https://discuss.elastic.co/u/Yaohua)\
**Replies:** 2\
**Last updated:** [July 25, 2017, 1:49am UTC](https://discuss.elastic.co/t/cannt-use-custom-fields-as-a-condition-to-drop-fields/94304 "2017-07-25T01:49:43Z")

</div>

This is my config filebeat.prospectors: - input\_type: log paths: - /var/log/xaa fields: Host: ${HOSTNAME} fields\_under\_root: true document\_type: nginx tags: test exclude\_lines: \['GET / HTTP/1.1"'\] pr…

---

## [Hi,i have a problem with NoClassDefFoundError: org/elasticsearch/xpack/XPackPlugin](https://discuss.elastic.co/t/hi-i-have-a-problem-with-noclassdeffounderror-org-elasticsearch-xpack-xpackplugin/72425)

<div class="topic-metadata">

**Author:** [@syf](https://discuss.elastic.co/u/syf)\
**Replies:** 2\
**Last updated:** [January 23, 2017, 9:20am UTC](https://discuss.elastic.co/t/hi-i-have-a-problem-with-noclassdeffounderror-org-elasticsearch-xpack-xpackplugin/72425 "2017-01-23T09:20:57Z")

</div>

java.lang.NoClassDefFoundError: org/elasticsearch/xpack/XPackPlugin,i try to solve it ,but i can't ,anyone could help me

---

## [Sqs output errors cause blocked input pipelines](https://discuss.elastic.co/t/sqs-output-errors-cause-blocked-input-pipelines/52741)

<div class="topic-metadata">

**Author:** [@NoumanSaleem](https://discuss.elastic.co/u/NoumanSaleem)\
**Replies:** 2\
**Last updated:** [June 20, 2016, 1:30pm UTC](https://discuss.elastic.co/t/sqs-output-errors-cause-blocked-input-pipelines/52741 "2016-06-20T13:30:34Z")

</div>

It's become a daily occurrence in the last week where we see a drop in logs in Elasticsearch caused by blocked pipelines in our logstash stack. We utilize a cluster of logstash for accepting and pushing logs into an SQ…

---

## [Question about matchPhraseQuery](https://discuss.elastic.co/t/question-about-matchphrasequery/11731)

<div class="topic-metadata">

**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\
**Replies:** 2\
**Last updated:** [May 1, 2013, 12:24am UTC](https://discuss.elastic.co/t/question-about-matchphrasequery/11731 "2013-05-01T00:24:10Z")

</div>

Hi all, I want to create PhraseQuery for two fields as follows: QueryBuilder queryBuilder1 = QueryBuilders.matchPhraseQuery(field1,termExact); QueryBuilder queryBuilder2 = QueryBuilders.matchPhraseQuery(fiel…

---

## [Co-ordinate map not working](https://discuss.elastic.co/t/co-ordinate-map-not-working/183230)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 8\
**Last updated:** [May 29, 2019, 6:41am UTC](https://discuss.elastic.co/t/co-ordinate-map-not-working/183230 "2019-05-29T06:41:39Z")

</div>

Unable to use co-ordinate map function in kibana. It doesn't shows any error. Even in my elasticsearch indices all the fields are available but still still it doesn't plot..I am attaching the scrrenchot of indices and ma…

---

## [Elascticsearch count api returning improper count](https://discuss.elastic.co/t/elascticsearch-count-api-returning-improper-count/138897)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 8\
**Last updated:** [July 6, 2018, 4:26pm UTC](https://discuss.elastic.co/t/elascticsearch-count-api-returning-improper-count/138897 "2018-07-06T16:26:46Z")

</div>

Hi All, Could someone please help me on the below issue. I have some thousands of documents in my index. When I am hitting count api with a condition where i am providing term query with ten thousand values for a parti…

---

## [Elasticsearch monitoring by metricbeat creating index with pattern .ds-.monitoring-es-8-mb-yyyy.mm.dd-\*](https://discuss.elastic.co/t/elasticsearch-monitoring-by-metricbeat-creating-index-with-pattern-ds-monitoring-es-8-mb-yyyy-mm-dd/326084)

<div class="topic-metadata">

**Author:** [@ramdas](https://discuss.elastic.co/u/ramdas)\
**Replies:** 0\
**Last updated:** [February 21, 2023, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-by-metricbeat-creating-index-with-pattern-ds-monitoring-es-8-mb-yyyy-mm-dd/326084 "2023-02-21T14:55:58Z")

</div>

Hi, I have recently started testing to use metricbeat for elasticsearch's monitoring. i have elasticsearch deployed as statefulset and metricbeat as daemonset on azure kubernetes services cluster. i have configured met…

---

## [Ecs, metricbeat, docker, apache, stdout where am I going wrong?](https://discuss.elastic.co/t/ecs-metricbeat-docker-apache-stdout-where-am-i-going-wrong/172440)

<div class="topic-metadata">

**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\
**Replies:** 3\
**Last updated:** [March 15, 2019, 3:30pm UTC](https://discuss.elastic.co/t/ecs-metricbeat-docker-apache-stdout-where-am-i-going-wrong/172440 "2019-03-15T15:30:48Z")

</div>

Running metricbeat on ECS cluster in it's own docker container. running my application (including apache with the application) on another container. Both my app and apache log to STDOUT. have metricbeats setup for auto d…

---

## [Java High Level Rest Client response time is lower than Transport client](https://discuss.elastic.co/t/java-high-level-rest-client-response-time-is-lower-than-transport-client/167809)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 10:26am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-response-time-is-lower-than-transport-client/167809 "2019-02-11T10:26:55Z")

</div>

I have upgraded code from transport client to High Level client. Java: JDK 8 ES version: 6.5.4 When api response time of transport client is compared to High Level client, there is a difference, especially EXTERNAL-CA…

---

## [Get Logstash PID](https://discuss.elastic.co/t/get-logstash-pid/161339)

<div class="topic-metadata">

**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 1:56pm UTC](https://discuss.elastic.co/t/get-logstash-pid/161339 "2018-12-18T13:56:02Z")

</div>

Hi, I trying to get the process id of the logstash service running on my server. What to do? Thanks in Advance!! Elango

---

## [Eroor setting up SSL on multi node ES cluster - no cipher suites in common](https://discuss.elastic.co/t/eroor-setting-up-ssl-on-multi-node-es-cluster-no-cipher-suites-in-common/54519)

<div class="topic-metadata">

**Author:** [@sscsju](https://discuss.elastic.co/u/sscsju)\
**Replies:** 0\
**Last updated:** [July 1, 2016, 8:54am UTC](https://discuss.elastic.co/t/eroor-setting-up-ssl-on-multi-node-es-cluster-no-cipher-suites-in-common/54519 "2016-07-01T08:54:59Z")

</div>

I have Elasticsearch cluster of two nodes (loggerdb2.dev.gep and datanode3.dev.gep). After enabling ssl/tls I am getting following error on elastic search startup. Stacktrace of datanode3 \[2016-07-01 07:16:04,877\]\[WA…

---

## [ES 2.0.0 + ES-Hadoop 2.1.1 | 2.2.0-m1 usecase & issues](https://discuss.elastic.co/t/es-2-0-0-es-hadoop-2-1-1-2-2-0-m1-usecase-issues/33233)

<div class="topic-metadata">

**Author:** [@jbigdata.fr](https://discuss.elastic.co/u/jbigdata.fr)\
**Replies:** 3\
**Last updated:** [October 30, 2015, 3:49pm UTC](https://discuss.elastic.co/t/es-2-0-0-es-hadoop-2-1-1-2-2-0-m1-usecase-issues/33233 "2015-10-30T15:49:02Z")

</div>

Hello, 0/ HEAD vs HQ Always the same problem with HEAD plugin (connect button -\> error "\_status"), anyway I use now HQ and everything is find. 1/ node.mater, node.data vs node.name In previous release (1.7.X) I use t…

---

## [Problems with visualizing netsted types in kibana](https://discuss.elastic.co/t/problems-with-visualizing-netsted-types-in-kibana/24944)

<div class="topic-metadata">

**Author:** [@Yulias\_Stolin](https://discuss.elastic.co/u/Yulias_Stolin)\
**Replies:** 3\
**Last updated:** [July 6, 2015, 5:10pm UTC](https://discuss.elastic.co/t/problems-with-visualizing-netsted-types-in-kibana/24944 "2015-07-06T17:10:50Z")

</div>

Hi, I've created a following mapping: { "mappings":{ "smalltype":{ "properties":{ "top\_domains":{ "properties":{ "num":{"type":"integer"}, "va…

---

## [Intermittently search slow response](https://discuss.elastic.co/t/intermittently-search-slow-response/14644)

<div class="topic-metadata">

**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\
**Replies:** 3\
**Last updated:** [November 30, 2013, 5:22pm UTC](https://discuss.elastic.co/t/intermittently-search-slow-response/14644 "2013-11-30T17:22:35Z")

</div>

Hi, we are experience a strange issue, it happen intermittently. we have three elasticsearch nodes running version 0.90.7 and started a new cluster. Then as data coming in, we query one of the nodes, sometime the res…

---

## [Synonym token graphs and Shingles don't play well together](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 12:41pm UTC](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713 "2020-05-07T12:41:34Z")

</div>

Hi I know I'm not the first one to touch on this issue, but no solution seems to have been provided. Expected behavior: With the synonym \[world,earth\] and the phrase "hello world", sending them through a shingle filte…

---

## [Facing issue in elasticsearch - /usr/share/elasticsearch/config/elasticsearch.keystore: Device or resource busy](https://discuss.elastic.co/t/facing-issue-in-elasticsearch-usr-share-elasticsearch-config-elasticsearch-keystore-device-or-resource-busy/350905)

<div class="topic-metadata">

**Author:** [@Akshay04](https://discuss.elastic.co/u/Akshay04)\
**Replies:** 1\
**Last updated:** [January 12, 2024, 2:23pm UTC](https://discuss.elastic.co/t/facing-issue-in-elasticsearch-usr-share-elasticsearch-config-elasticsearch-keystore-device-or-resource-busy/350905 "2024-01-12T14:23:49Z")

</div>

Hello, I'm trying to enable Google OAuth with Elasticsearch using - Set up OpenID Connect with Azure, Google, or Okta | Elasticsearch Service Documentation | Elastic I'm deploying this to Kubernetes and using Elastic …

---

## [Cleanup: How to delete unused saved searches, visualizations and dashboards?](https://discuss.elastic.co/t/cleanup-how-to-delete-unused-saved-searches-visualizations-and-dashboards/242232)

<div class="topic-metadata">

**Author:** [@igorgatis](https://discuss.elastic.co/u/igorgatis)\
**Replies:** 1\
**Last updated:** [July 22, 2020, 11:21pm UTC](https://discuss.elastic.co/t/cleanup-how-to-delete-unused-saved-searches-visualizations-and-dashboards/242232 "2020-07-22T23:21:36Z")

</div>

We've been using Kibana in production for a while now and we accumulated saved searches, visualizations and dashboards we're not used are actually being in use. Is there a way to figure out which saved objects are used …

---

## [Writing a regex to find substring in kibana discover search bar](https://discuss.elastic.co/t/writing-a-regex-to-find-substring-in-kibana-discover-search-bar/228956)

<div class="topic-metadata">

**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 5:53am UTC](https://discuss.elastic.co/t/writing-a-regex-to-find-substring-in-kibana-discover-search-bar/228956 "2020-04-21T05:53:30Z")

</div>

Hi All, I was just playing with kibana discover page , I wanted to search a string using regex expression but somehow was not able to do. Need some help over this. I only want to use KQL not Lucene. I want to search …

---

## [Elastic app search(Self-managed) and bonsai.io integration](https://discuss.elastic.co/t/elastic-app-search-self-managed-and-bonsai-io-integration/209580)

<div class="topic-metadata">

**Author:** [@111249](https://discuss.elastic.co/u/111249)\
**Replies:** 1\
**Last updated:** [November 26, 2019, 9:43pm UTC](https://discuss.elastic.co/t/elastic-app-search-self-managed-and-bonsai-io-integration/209580 "2019-11-26T21:43:39Z")

</div>

I have an Elastic cluster on bonsai.io, I want to use it to work with elastic app search locally on my computer. In app-search.yaml I added elasticsearch.host, elasticsearch.username and elasticsearch.password, but when …

---

## [How to use custom BG Image for kibana dashboards](https://discuss.elastic.co/t/how-to-use-custom-bg-image-for-kibana-dashboards/189989)

<div class="topic-metadata">

**Author:** [@madhan8](https://discuss.elastic.co/u/madhan8)\
**Replies:** 1\
**Last updated:** [July 12, 2019, 4:16pm UTC](https://discuss.elastic.co/t/how-to-use-custom-bg-image-for-kibana-dashboards/189989 "2019-07-12T16:16:41Z")

</div>

I'm just trying to add custom Image to Kibana dashboard as a background just out of curiosity. Can someone please help me out?

---

## [Integration Of ELK Stack With Salt Stack](https://discuss.elastic.co/t/integration-of-elk-stack-with-salt-stack/154155)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 1\
**Last updated:** [October 26, 2018, 12:35pm UTC](https://discuss.elastic.co/t/integration-of-elk-stack-with-salt-stack/154155 "2018-10-26T12:35:59Z")

</div>

Hi All, I have working ELK Stack in PROD . We now have a requirement to Manage ELK Stack via Salt Stack . Operations like , Installation , configuration and management of ELK need to be done by SALT STACK . I have be…

---

## [Getting logs from pods via filebeat](https://discuss.elastic.co/t/getting-logs-from-pods-via-filebeat/150274)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 1\
**Last updated:** [September 28, 2018, 2:19pm UTC](https://discuss.elastic.co/t/getting-logs-from-pods-via-filebeat/150274 "2018-09-28T14:19:59Z")

</div>

Im hoping to get logs from my k8 pods (which are writing to stdout/stderr) via filebeat. At this point all Im seeing are what's being written to /var/log/messages on the k8 host. Ive started the daemonset sample from ht…

---

## [SystemCallError: Unknown error (SystemCallError) - No message available](https://discuss.elastic.co/t/systemcallerror-unknown-error-systemcallerror-no-message-available/148185)

<div class="topic-metadata">

**Author:** [@isaacsanders](https://discuss.elastic.co/u/isaacsanders)\
**Replies:** 1\
**Last updated:** [September 11, 2018, 7:56pm UTC](https://discuss.elastic.co/t/systemcallerror-unknown-error-systemcallerror-no-message-available/148185 "2018-09-11T19:56:28Z")

</div>

I am getting an error: "SystemCallError: Unknown error (SystemCallError) - No message available" This is from the TCP Output: https://github.com/logstash-plugins/logstash-output-tcp/blob/master/lib/logstash/outputs/tcp.…

---

## [ES-hadoop怎么不支持Python语言啊？](https://discuss.elastic.co/t/es-hadoop-python/132920)

<div class="topic-metadata">

**Author:** [@liujie40](https://discuss.elastic.co/u/liujie40)\
**Replies:** 1\
**Last updated:** [June 5, 2018, 2:41pm UTC](https://discuss.elastic.co/t/es-hadoop-python/132920 "2018-06-05T14:41:01Z")

</div>

我的开发语言都是python，但是ES-Hadoop项目只提供Java和scale两种语言。ES查询的数据必须保存到本地，然后再读进去spark，没法左到无缝衔接。请问各位大神怎么处理这种问题啊？

---

## [Kibana \*index pattern grayed out unable to able to fetch mapping](https://discuss.elastic.co/t/kibana-index-pattern-grayed-out-unable-to-able-to-fetch-mapping/92383)

<div class="topic-metadata">

**Author:** [@honor6x5](https://discuss.elastic.co/u/honor6x5)\
**Replies:** 1\
**Last updated:** [July 10, 2017, 2:13pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-grayed-out-unable-to-able-to-fetch-mapping/92383 "2017-07-10T14:13:24Z")

</div>

hey guys, I am using winlog beat to send my windows logs to logstash and from there to elasticsearch. Everything looks good till index pattern as once i give winlog beat as index pattern in kibana , I can see field aski…

---

## [Packetbeat is not running on SUSE Linux Enterprise Server 11](https://discuss.elastic.co/t/packetbeat-is-not-running-on-suse-linux-enterprise-server-11/89551)

<div class="topic-metadata">

**Author:** [@spry\_free](https://discuss.elastic.co/u/spry_free)\
**Replies:** 1\
**Last updated:** [June 15, 2017, 2:11pm UTC](https://discuss.elastic.co/t/packetbeat-is-not-running-on-suse-linux-enterprise-server-11/89551 "2017-06-15T14:11:13Z")

</div>

Hi! Can u help me pls? Why is it not starting? SUSE Linux Enterprise Server 11 SP3 (x86\_64) On other system (Debian) packetbeat is running with same configuration. vpn1:~ # service packetbeat start /etc/init.d/packe…

---

## ["Failed to derive xcontent" - elasticsearch-ruby/dsl](https://discuss.elastic.co/t/failed-to-derive-xcontent-elasticsearch-ruby-dsl/68770)

<div class="topic-metadata">

**Author:** [@jay-snee](https://discuss.elastic.co/u/jay-snee)\
**Replies:** 1\
**Last updated:** [December 14, 2016, 12:49am UTC](https://discuss.elastic.co/t/failed-to-derive-xcontent-elasticsearch-ruby-dsl/68770 "2016-12-14T00:49:24Z")

</div>

Hello! I'm getting the following error when attempting to a run a query from a Rails app - 2016-12-12T17:33:08.461564758Z app\[web.4\]: --\> GET my-lovely-index/\_search {} {"aggregations":{"items":{"nested":{"path":"it…

[Previous page](https://discuss.elastic.co/top.md?page=1557&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1559&per_page=50&period=all)
