# Top

**URL:** https://discuss.elastic.co/top.md?page=1566&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1567

---

## [Subtle scoring issue with multi-value fields' fieldNorm being calculated as if they are one concatenated value](https://discuss.elastic.co/t/subtle-scoring-issue-with-multi-value-fields-fieldnorm-being-calculated-as-if-they-are-one-concatenated-value/6752)

<div class="topic-metadata">

**Author:** [@Tal\_Rotbart](https://discuss.elastic.co/u/Tal_Rotbart)\
**Replies:** 4\
**Last updated:** [February 20, 2012, 10:16pm UTC](https://discuss.elastic.co/t/subtle-scoring-issue-with-multi-value-fields-fieldnorm-being-calculated-as-if-they-are-one-concatenated-value/6752 "2012-02-20T22:16:44Z")

</div>

Hi all, I'm facing a subtle scoring issue, which is no doubt Lucene related but I'm wondering if there's a good ES solution to it. A similar problem is summed up for 'that other Lucene search engine' in this well…

---

## [How to use ssl\_certificate\_authorities in Logstash?](https://discuss.elastic.co/t/how-to-use-ssl-certificate-authorities-in-logstash/379517)

<div class="topic-metadata">

**Author:** [@HarimbolaSantatra](https://discuss.elastic.co/u/HarimbolaSantatra)\
**Replies:** 6\
**Last updated:** [June 30, 2025, 6:56am UTC](https://discuss.elastic.co/t/how-to-use-ssl-certificate-authorities-in-logstash/379517 "2025-06-30T06:56:47Z")

</div>

I have the same issue discussed in this question. The error log is: sept. 12 14:57:47 local logstash\[45016\]: # File does not exist or cannot be opened /etc/logstash/certs/http\_ca.crt sept. 12 14:57:47 local logsta…

---

## [ELK stack elasticsearch FIPS Keytool Certificates](https://discuss.elastic.co/t/elk-stack-elasticsearch-fips-keytool-certificates/343088)

<div class="topic-metadata">

**Author:** [@Kris\_U](https://discuss.elastic.co/u/Kris_U)\
**Replies:** 6\
**Last updated:** [September 21, 2023, 11:51pm UTC](https://discuss.elastic.co/t/elk-stack-elasticsearch-fips-keytool-certificates/343088 "2023-09-21T23:51:41Z")

</div>

I am setting up an ELK stack version 7.17.12. We have a separate instance for Elasticsearch, Kibana, and Logstash - but only one instance for each. We are using it with a Wazuh Manager instance as well with a Logstash an…

---

## [Пустые поля](https://discuss.elastic.co/t/topic/250335)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 6\
**Last updated:** [October 2, 2020, 6:44am UTC](https://discuss.elastic.co/t/topic/250335 "2020-10-02T06:44:12Z")

</div>

Всем добрый день, есть пустые поля, которые нужно заполнить например нулями, вот только как сделать условие проверки на пустое поле? Поля не все пустые, тип поля number. Пробовал разные проверки - ничего не выходит... …

---

## [Add array items as prefixes for another array](https://discuss.elastic.co/t/add-array-items-as-prefixes-for-another-array/121134)

<div class="topic-metadata">

**Author:** [@Maher\_Ben\_Taleb\_Ali](https://discuss.elastic.co/u/Maher_Ben_Taleb_Ali)\
**Replies:** 6\
**Last updated:** [February 24, 2018, 1:33am UTC](https://discuss.elastic.co/t/add-array-items-as-prefixes-for-another-array/121134 "2018-02-24T01:33:47Z")

</div>

Hi, I am trying to push articles into the corresponding Kafka Topics. article : { "topics": \[ "Barclays", "Companies", "Government", "Warrant" \], "categories": \[ "economy", …

---

## [Group several different indexes](https://discuss.elastic.co/t/group-several-different-indexes/118581)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 6\
**Last updated:** [February 8, 2018, 8:14am UTC](https://discuss.elastic.co/t/group-several-different-indexes/118581 "2018-02-08T08:14:01Z")

</div>

Hello ELK community. I have been using ELK for a few days now and I have a question that I can not solve, I will try to explain to you so that you can better understand: I schematize: I have a switch, configured to se…

---

## [Removing second S3 repository causes "Connection Pool Shutdown" in 8.13.2](https://discuss.elastic.co/t/removing-second-s3-repository-causes-connection-pool-shutdown-in-8-13-2/364797)

<div class="topic-metadata">

**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\
**Replies:** 8\
**Last updated:** [August 29, 2024, 2:08pm UTC](https://discuss.elastic.co/t/removing-second-s3-repository-causes-connection-pool-shutdown-in-8-13-2/364797 "2024-08-29T14:08:45Z")

</div>

We upgraded to 8.13.2 after having issues in 8.10 with Elasticsearch does not refresh AWS Web Identity Token file when changed on disk · Issue #101828 · elastic/elasticsearch · GitHub We just had a cluster running 8.13.…

---

## [How to add user / group permission to search Workplace Search using Network data connector as data source](https://discuss.elastic.co/t/how-to-add-user-group-permission-to-search-workplace-search-using-network-data-connector-as-data-source/330157)

<div class="topic-metadata">

**Author:** [@aldol](https://discuss.elastic.co/u/aldol)\
**Replies:** 8\
**Last updated:** [April 20, 2023, 1:45pm UTC](https://discuss.elastic.co/t/how-to-add-user-group-permission-to-search-workplace-search-using-network-data-connector-as-data-source/330157 "2023-04-20T13:45:54Z")

</div>

I can add user to have access to Workplace search and search documents from the index created by Network Drive Connector. Basically I add user SID and email in identity\_mappings.csv file and run ees\_network\_drive permis…

---

## [Query suggest not working on app search - elastic index backed engines](https://discuss.elastic.co/t/query-suggest-not-working-on-app-search-elastic-index-backed-engines/313583)

<div class="topic-metadata">

**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\
**Replies:** 8\
**Last updated:** [September 20, 2022, 1:08am UTC](https://discuss.elastic.co/t/query-suggest-not-working-on-app-search-elastic-index-backed-engines/313583 "2022-09-20T01:08:00Z")

</div>

Hi, I am running 8.4.1 of App Search and see that query\_suggest does not work for engines created by elastic backends (i.e. non app search engines) No results return Can you please advise / provide a workaround ? Tha…

---

## [Search query / analyzer issue dealing with spaces](https://discuss.elastic.co/t/search-query-analyzer-issue-dealing-with-spaces/20488)

<div class="topic-metadata">

**Author:** [@Jarrod\_C](https://discuss.elastic.co/u/Jarrod_C)\
**Replies:** 8\
**Last updated:** [October 30, 2014, 8:49pm UTC](https://discuss.elastic.co/t/search-query-analyzer-issue-dealing-with-spaces/20488 "2014-10-30T20:49:16Z")

</div>

Hello, I am trying to run a query that distinguishes between spaces in values. Let's say I have a field called 'color' in my index. Record 1 has "color" : "metallic red" whereas Record 2 has "color": "metallic" …

---

## [Percolating a document that includes range](https://discuss.elastic.co/t/percolating-a-document-that-includes-range/11517)

<div class="topic-metadata">

**Author:** [@Ali\_3](https://discuss.elastic.co/u/Ali_3)\
**Replies:** 8\
**Last updated:** [April 10, 2013, 7:43pm UTC](https://discuss.elastic.co/t/percolating-a-document-that-includes-range/11517 "2013-04-10T19:43:41Z")

</div>

Hi, I am using ES percolator to save queries, which include ranges. Everything works great. I was just told that some of the documents that I will be percolating will contain ranges since these are summary documen…

---

## [Logstash stopped processing because of an error](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/357956)

<div class="topic-metadata">

**Author:** [@cariinaar](https://discuss.elastic.co/u/cariinaar)\
**Replies:** 3\
**Last updated:** [April 24, 2024, 3:27am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/357956 "2024-04-24T03:27:06Z")

</div>

I have followed solutions to similar topics, but none of the solutions seem to be working for my case. I have tried numerous solutions but the results when i tail logstash-plain.log is always the same which is like below…

---

## [Configure limit.conf for ElasticSearch server](https://discuss.elastic.co/t/configure-limit-conf-for-elasticsearch-server/336930)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [June 27, 2023, 12:43pm UTC](https://discuss.elastic.co/t/configure-limit-conf-for-elasticsearch-server/336930 "2023-06-27T12:43:19Z")

</div>

The Elasticsearch documentation says that I should configure nofile and nproc for better performance. But the documentation is a bit confusing. First, do I set it to the "elastic" user that was created by Elasticsearch…

---

## [Heartbeat monitoring not work](https://discuss.elastic.co/t/heartbeat-monitoring-not-work/316271)

<div class="topic-metadata">

**Author:** [@cheching](https://discuss.elastic.co/u/cheching)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 9:44am UTC](https://discuss.elastic.co/t/heartbeat-monitoring-not-work/316271 "2022-10-14T09:44:44Z")

</div>

Hi All, I've encountered an issue when finished setup Uptime monitor under Observability. I'm not sure is that my configuration was incorrect or somewhere wrongly config, there're always show 0 monitors Please see b…

---

## [Http\_poller skip SSL validation](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 3\
**Last updated:** [August 8, 2021, 6:41pm UTC](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713 "2021-08-08T18:41:22Z")

</div>

Is there a way to skip SSL server certificate validation? I'm trying to hit a local server with a self-signed cert but i get errors of course. I saw for other plugins that this was added as an option but nothing for ht…

---

## [Kibana field type and Elasticsearch mapping don't match](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528)

<div class="topic-metadata">

**Author:** [@egray](https://discuss.elastic.co/u/egray)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 1:15pm UTC](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528 "2020-09-04T13:15:13Z")

</div>

I spent a long time today trying to apply a new index template, to change the type of a field from a string to an integer. Then I used the GET Mapping API and saw this : "response\_time" : { "type" : "integer" },…

---

## [Multi-String search not working as expeced](https://discuss.elastic.co/t/multi-string-search-not-working-as-expeced/240457)

<div class="topic-metadata">

**Author:** [@ksarkar](https://discuss.elastic.co/u/ksarkar)\
**Replies:** 3\
**Last updated:** [July 9, 2020, 2:23pm UTC](https://discuss.elastic.co/t/multi-string-search-not-working-as-expeced/240457 "2020-07-09T14:23:22Z")

</div>

While executing following query, GET /rm\_inventory\_details\*/\_search { "query": { "query\_string": { "default\_field": "usage", "query": "(XYZ)" } } } Getting result. again GET /rm\_inven…

---

## [Cross tabulation Visualization between two categorical columns where both column are in different indexes](https://discuss.elastic.co/t/cross-tabulation-visualization-between-two-categorical-columns-where-both-column-are-in-different-indexes/219955)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 2:41pm UTC](https://discuss.elastic.co/t/cross-tabulation-visualization-between-two-categorical-columns-where-both-column-are-in-different-indexes/219955 "2020-02-20T14:41:44Z")

</div>

Hi All, Can we create cross tabultion visulaization(like stacked Vertical bar or stacked Pie Chart) between 2 categorical fields where both fields are in two different indexes having some common primary id. one index n…

---

## [Logstash S3 Output Plugin not working](https://discuss.elastic.co/t/logstash-s3-output-plugin-not-working/171000)

<div class="topic-metadata">

**Author:** [@hiteshs](https://discuss.elastic.co/u/hiteshs)\
**Replies:** 3\
**Last updated:** [March 6, 2019, 4:28pm UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-not-working/171000 "2019-03-06T16:28:08Z")

</div>

My goal is to send all of the logs from all the remote servers to a S3 bucket. I decided to go with Logstash S3 output plugin since we're already running a ELK setup. So each remote server is sending the log files to the…

---

## [Group/count/average consecutive buckets](https://discuss.elastic.co/t/group-count-average-consecutive-buckets/123868)

<div class="topic-metadata">

**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Replies:** 3\
**Last updated:** [March 14, 2018, 10:39am UTC](https://discuss.elastic.co/t/group-count-average-consecutive-buckets/123868 "2018-03-14T10:39:32Z")

</div>

Suppose I have a date/time field for each document. Now suppose that I group my documents into hourly buckets using a date\_histogram aggregation. Now suppose that there are some hours with no documents. So the document c…

---

## [Strange shard routing behavior with index templates and shrink in a hot/warm architecture](https://discuss.elastic.co/t/strange-shard-routing-behavior-with-index-templates-and-shrink-in-a-hot-warm-architecture/122401)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 3\
**Last updated:** [March 6, 2018, 6:20pm UTC](https://discuss.elastic.co/t/strange-shard-routing-behavior-with-index-templates-and-shrink-in-a-hot-warm-architecture/122401 "2018-03-06T18:20:33Z")

</div>

Hi I have an issue with Curator that I would like an opinion on. This is elk 6.2.0 with curator 5.4, but also happens on 6.1.2. I hope I am missing somethng obvious. I have a cluster , that implements the hot/warm arch…

---

## [Avoid buffer flush when no multiline pattern matches](https://discuss.elastic.co/t/avoid-buffer-flush-when-no-multiline-pattern-matches/110367)

<div class="topic-metadata">

**Author:** [@d32d7320202863361efe](https://discuss.elastic.co/u/d32d7320202863361efe)\
**Replies:** 3\
**Last updated:** [December 6, 2017, 1:50pm UTC](https://discuss.elastic.co/t/avoid-buffer-flush-when-no-multiline-pattern-matches/110367 "2017-12-06T13:50:15Z")

</div>

I encountered a certain problem when trying to create the multiline features in filebeat. I dont have online access to the examples right now, so I'll just present an abstraction of the situation. I have a certain log f…

---

## [What is the last\_time field supposed to represent?](https://discuss.elastic.co/t/what-is-the-last-time-field-supposed-to-represent/96644)

<div class="topic-metadata">

**Author:** [@wmathews](https://discuss.elastic.co/u/wmathews)\
**Replies:** 3\
**Last updated:** [August 15, 2017, 7:53pm UTC](https://discuss.elastic.co/t/what-is-the-last-time-field-supposed-to-represent/96644 "2017-08-15T19:53:59Z")

</div>

The documentation says “The time, the most recent processed packet for the flow has been seen.”, however for all of the entries in my cluster, this is always exactly the same as the start\_time field even when the flow wa…

---

## [Kibana restrictions on management tab using xpack](https://discuss.elastic.co/t/kibana-restrictions-on-management-tab-using-xpack/77668)

<div class="topic-metadata">

**Author:** [@adityajain19](https://discuss.elastic.co/u/adityajain19)\
**Replies:** 3\
**Last updated:** [March 9, 2017, 5:20pm UTC](https://discuss.elastic.co/t/kibana-restrictions-on-management-tab-using-xpack/77668 "2017-03-09T17:20:32Z")

</div>

Hi, Can anyone help me understand how to restrict access to management tab or specifically advanced settings and still that user can access discover tab? We need to create roles that can access indexes for logs but no …

---

## [Logstash 5.1.2 connecting to elasticsearch in cloud apparantly has no template](https://discuss.elastic.co/t/logstash-5-1-2-connecting-to-elasticsearch-in-cloud-apparantly-has-no-template/74132)

<div class="topic-metadata">

**Author:** [@walbag](https://discuss.elastic.co/u/walbag)\
**Replies:** 3\
**Last updated:** [February 7, 2017, 9:27pm UTC](https://discuss.elastic.co/t/logstash-5-1-2-connecting-to-elasticsearch-in-cloud-apparantly-has-no-template/74132 "2017-02-07T21:27:43Z")

</div>

When logstash initializes it shows no mapping template in the logs. When it goes to send data there are "can't convert nil to Array" errors. Note that this is using stunnel for https to the elastic cloud node. Here is …

---

## [Slow to Get Feedback During Kibana Development](https://discuss.elastic.co/t/slow-to-get-feedback-during-kibana-development/68498)

<div class="topic-metadata">

**Author:** [@Shahriyar\_Nasir](https://discuss.elastic.co/u/Shahriyar_Nasir)\
**Replies:** 3\
**Last updated:** [December 12, 2016, 6:30pm UTC](https://discuss.elastic.co/t/slow-to-get-feedback-during-kibana-development/68498 "2016-12-12T18:30:21Z")

</div>

Hi, I'm new to this community and excited to join. I'm trying to get acquainted with the Kibana code-base so that I can contribute. When I make a change, for example to a view's HTML, I am refreshing the app on the bro…

---

## [NouchFieldError causes elasticsearch Java library to quit working \[java.lang.NoSuchFieldError: LUCENE\_31\]](https://discuss.elastic.co/t/nouchfielderror-causes-elasticsearch-java-library-to-quit-working-java-lang-nosuchfielderror-lucene-31/4338)

<div class="topic-metadata">

**Author:** [@niiamon](https://discuss.elastic.co/u/niiamon)\
**Replies:** 3\
**Last updated:** [May 4, 2011, 8:32am UTC](https://discuss.elastic.co/t/nouchfielderror-causes-elasticsearch-java-library-to-quit-working-java-lang-nosuchfielderror-lucene-31/4338 "2011-05-04T08:32:48Z")

</div>

Hi, I recently moved up from 0.15.2 to 0.16.0. I am testing out my old code using the new 0.16.0 Java library in my Play application. I am able to create indices, add a mapping and index some stuff but when I am se…

---

## [o.e.c.c.ClusterFormationFailureHelper failed to resolve host](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-failed-to-resolve-host/299251)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 2:16pm UTC](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-failed-to-resolve-host/299251 "2022-03-10T14:16:44Z")

</div>

Hi On the beginning I have a problem with configuration of two nodes on the same host. As first I need to create a cluster so at I've started from create network and swarm cluster. I don't know why the host name is …

---

## [Search documents with apostrophes in fields](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162)

<div class="topic-metadata">

**Author:** [@Gabriel\_DE\_RAMECOURT](https://discuss.elastic.co/u/Gabriel_DE_RAMECOURT)\
**Replies:** 2\
**Last updated:** [December 17, 2021, 1:47pm UTC](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162 "2021-12-17T13:47:00Z")

</div>

Hello, I am quite new to Elascticsearch and try to write and search documents. I have no problem writing documents, but I have one when I try searching for documents using a word that is stored in a field with an apost…

---

## [Email and Slack alerts based on logs in Elasticsearch](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888)

<div class="topic-metadata">

**Author:** [@pks](https://discuss.elastic.co/u/pks)\
**Replies:** 2\
**Last updated:** [March 11, 2021, 5:29pm UTC](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888 "2021-03-11T17:29:42Z")

</div>

Hi! I am unable to figure out from the pricing page whether or not alerting from Kibana based on patterns found in Elasticsearch logs is free. I want to create alerts from Kibana to monitor application logs and send aler…

---

## [No results in Kibana but data present in index](https://discuss.elastic.co/t/no-results-in-kibana-but-data-present-in-index/190678)

<div class="topic-metadata">

**Author:** [@jdomsic](https://discuss.elastic.co/u/jdomsic)\
**Replies:** 2\
**Last updated:** [July 23, 2019, 10:01am UTC](https://discuss.elastic.co/t/no-results-in-kibana-but-data-present-in-index/190678 "2019-07-23T10:01:37Z")

</div>

Hi, I have 100+ indices with 40+ GB of daily data matched to single kibana index pattern. When I open discover tab (no filters, last 6months) i get "No results". However, recreating the same query with curl I get all …

---

## [Using static image in home-made plugin](https://discuss.elastic.co/t/using-static-image-in-home-made-plugin/183922)

<div class="topic-metadata">

**Author:** [@Dasko](https://discuss.elastic.co/u/Dasko)\
**Replies:** 2\
**Last updated:** [June 6, 2019, 7:16am UTC](https://discuss.elastic.co/t/using-static-image-in-home-made-plugin/183922 "2019-06-06T07:16:14Z")

</div>

Hi there, I'm quite new in the plugin development field, and I'm having trouble displaying a static image. All I want to do is write a bunch of text (as for now), and display an image right after. I've set the public/…

---

## [I need help writing a simple custom scoring function](https://discuss.elastic.co/t/i-need-help-writing-a-simple-custom-scoring-function/171644)

<div class="topic-metadata">

**Author:** [@Teddis](https://discuss.elastic.co/u/Teddis)\
**Replies:** 2\
**Last updated:** [March 11, 2019, 12:05am UTC](https://discuss.elastic.co/t/i-need-help-writing-a-simple-custom-scoring-function/171644 "2019-03-11T00:05:41Z")

</div>

I want to implement my own scoring algorithm for a use case that requires finding one distinct document from a query result set. This requires access to two key pieces of information: The number of query terms as analy…

---

## [Very large segments - Do I need to worry?](https://discuss.elastic.co/t/very-large-segments-do-i-need-to-worry/163317)

<div class="topic-metadata">

**Author:** [@Martin\_Becker](https://discuss.elastic.co/u/Martin_Becker)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 8:59am UTC](https://discuss.elastic.co/t/very-large-segments-do-i-need-to-worry/163317 "2019-01-08T08:59:52Z")

</div>

We run many dashboards based on our data. As requests were getting slow a year ago we came up with the idea of merging segments in our indices and had a performance boost of around 20%. After visiting an Elastic training…

---

## [Are there any good tools used to sync data from oracle to mongodb?](https://discuss.elastic.co/t/are-there-any-good-tools-used-to-sync-data-from-oracle-to-mongodb/79259)

<div class="topic-metadata">

**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\
**Replies:** 2\
**Last updated:** [March 25, 2017, 1:23pm UTC](https://discuss.elastic.co/t/are-there-any-good-tools-used-to-sync-data-from-oracle-to-mongodb/79259 "2017-03-25T13:23:08Z")

</div>

I want to sync data from oracle to mongodb. I already parse the oracle database table by table and copy data into mongodb using java. But the method does not common to use, When I added new tables into oracle, …

---

## [Checking Cluster Health in Elastic Search](https://discuss.elastic.co/t/checking-cluster-health-in-elastic-search/52203)

<div class="topic-metadata">

**Author:** [@arjun\_gulyani](https://discuss.elastic.co/u/arjun_gulyani)\
**Replies:** 2\
**Last updated:** [June 8, 2016, 12:35pm UTC](https://discuss.elastic.co/t/checking-cluster-health-in-elastic-search/52203 "2016-06-08T12:35:48Z")

</div>

I am Running Windows 7. First I Clicked "ElasticSearch.bat" file to Start a Cluster with One Node. Now I Check the Cluster Health in another Command Window by curl 'localhost:9200/\_cat/health?v' and It Returns curl:…

---

## [Windows source grok match](https://discuss.elastic.co/t/windows-source-grok-match/40778)

<div class="topic-metadata">

**Author:** [@sd\_karthik](https://discuss.elastic.co/u/sd_karthik)\
**Replies:** 2\
**Last updated:** [February 3, 2016, 4:16pm UTC](https://discuss.elastic.co/t/windows-source-grok-match/40778 "2016-02-03T16:16:44Z")

</div>

How do I write a grok for source in windows file My source is -- "T:\\pricelinelogs\\tripair\\Xml.16-02-02.log" How do i grok for "tripair" and the log file name in the source?

---

## [Date\_histogram not returning key\_as\_string](https://discuss.elastic.co/t/date-histogram-not-returning-key-as-string/17935)

<div class="topic-metadata">

**Author:** [@Tim\_Heikell](https://discuss.elastic.co/u/Tim_Heikell)\
**Replies:** 2\
**Last updated:** [June 16, 2014, 3:21pm UTC](https://discuss.elastic.co/t/date-histogram-not-returning-key-as-string/17935 "2014-06-16T15:21:10Z")

</div>

Sorry for the noob question, but is there some setting I am missing? It's not clear to me why I'm not getting a key\_as\_string field in my results. I'm running v1.1.0, here is my search: GET /\_all/\_search { "ag…

---

## [Use data view or direct index](https://discuss.elastic.co/t/use-data-view-or-direct-index/330239)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [April 19, 2023, 9:22pm UTC](https://discuss.elastic.co/t/use-data-view-or-direct-index/330239 "2023-04-19T21:22:00Z")

</div>

I have 1000+ index myindex-\<date\>-00000x ( this is all rollover using ILM) in my REST calll should I use myindex-\* or use latest index by it's name like "myindex-\<date\>-00000x" most everytime I retrive data using @…

---

## [How can I access elasticsearch cluster created by docker compose by using actual ip address?](https://discuss.elastic.co/t/how-can-i-access-elasticsearch-cluster-created-by-docker-compose-by-using-actual-ip-address/326037)

<div class="topic-metadata">

**Author:** [@LongKang\_Fan](https://discuss.elastic.co/u/LongKang_Fan)\
**Replies:** 1\
**Last updated:** [February 21, 2023, 9:36am UTC](https://discuss.elastic.co/t/how-can-i-access-elasticsearch-cluster-created-by-docker-compose-by-using-actual-ip-address/326037 "2023-02-21T09:36:26Z")

</div>

Hi Community. I am following the instructions in this tutorial -- Start a multi-node cluster with Docker: I could access Elasticsearch by using this command "curl --cacert ca.crt -u elastic:rogerfan https://localhost:…

---

## [Logstash Aggregate Problem tag in subdirectories Please Help](https://discuss.elastic.co/t/logstash-aggregate-problem-tag-in-subdirectories-please-help/295116)

<div class="topic-metadata">

**Author:** [@melorium](https://discuss.elastic.co/u/melorium)\
**Replies:** 7\
**Last updated:** [January 23, 2022, 3:20pm UTC](https://discuss.elastic.co/t/logstash-aggregate-problem-tag-in-subdirectories-please-help/295116 "2022-01-23T15:20:04Z")

</div>

Hi i trying to use logstash aggregate to tag all log events i main and sub folders. I want all logs in APP1 folders and subfolders to have tag "APP1" and all logs in app2 folders to have APP2 etc. My friend did some ki…

---

## [Issue with number of values being displayed for vertical and horizontal bars in kibana](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222)

<div class="topic-metadata">

**Author:** [@revati-chawla](https://discuss.elastic.co/u/revati-chawla)\
**Replies:** 7\
**Last updated:** [October 21, 2021, 11:51am UTC](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222 "2021-10-21T11:51:57Z")

</div>

Hello, We are facing issues while visualising using vertical bars where the number of values being displayed on the x-axis are exceeding the limit defined in the size parameter. Version: 7.14.2 PFB a screenshot for yo…

---

## [Disk resize with eck vs helm](https://discuss.elastic.co/t/disk-resize-with-eck-vs-helm/228689)

<div class="topic-metadata">

**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\
**Replies:** 1\
**Last updated:** [April 19, 2020, 7:14am UTC](https://discuss.elastic.co/t/disk-resize-with-eck-vs-helm/228689 "2020-04-19T07:14:33Z")

</div>

ECK is very easy to use so I chose it but it has one downside compared helm, I could do disk resize with some hack in helm installed ES. But with operator installed ES this isn't possible, because as soon as I delete th…

---

## [Удаление дубликатов документов в индексе](https://discuss.elastic.co/t/topic/209199)

<div class="topic-metadata">

**Author:** [@111229](https://discuss.elastic.co/u/111229)\
**Replies:** 1\
**Last updated:** [November 24, 2019, 10:10pm UTC](https://discuss.elastic.co/t/topic/209199 "2019-11-24T22:10:03Z")

</div>

Коллеги, доброго! Есть SQL-запрос, который добавляет в индекс значения посредством Logstash jdbc{} результат запроса помещается в индекс. Запрос может выводить одинаковые строчки - в результате у меня в индексе дублиро…

---

## [Startup error ("already been instantiated") using Full Framework Elastic APM Agent](https://discuss.elastic.co/t/startup-error-already-been-instantiated-using-full-framework-elastic-apm-agent/207707)

<div class="topic-metadata">

**Author:** [@NeoX](https://discuss.elastic.co/u/NeoX)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 1:40pm UTC](https://discuss.elastic.co/t/startup-error-already-been-instantiated-using-full-framework-elastic-apm-agent/207707 "2019-11-13T13:40:32Z")

</div>

APM Agent language and version: Full Framework 1.1.2 Browser version: Chrome 78.0.3904.97 Original install method: From source Description of the problem including expected versus actual behavior.: I have followed th…

---

## [Painless Script on Top Hit of Average Aggregation](https://discuss.elastic.co/t/painless-script-on-top-hit-of-average-aggregation/181849)

<div class="topic-metadata">

**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 2:59pm UTC](https://discuss.elastic.co/t/painless-script-on-top-hit-of-average-aggregation/181849 "2019-05-20T14:59:11Z")

</div>

I want to do some scripting on a top hit average aggregation. (I think the images are pretty much self-explanatory. Script is just an example). But when I do so I get an "Internal Server Error". What am I doing wrong? …

---

## [Kibana not starting (Inactive or dead)](https://discuss.elastic.co/t/kibana-not-starting-inactive-or-dead/132495)

<div class="topic-metadata">

**Author:** [@raman3.0](https://discuss.elastic.co/u/raman3.0)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 3:36pm UTC](https://discuss.elastic.co/t/kibana-not-starting-inactive-or-dead/132495 "2018-05-18T15:36:00Z")

</div>

Kibana not starting on running sudo systemctl status Kibana It shows: ● Kibana.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) With command sudo systemctl start Kibana it sho…

---

## [Kibana not showing letters, but will show numbers](https://discuss.elastic.co/t/kibana-not-showing-letters-but-will-show-numbers/115804)

<div class="topic-metadata">

**Author:** [@motts](https://discuss.elastic.co/u/motts)\
**Replies:** 7\
**Last updated:** [January 18, 2018, 3:36pm UTC](https://discuss.elastic.co/t/kibana-not-showing-letters-but-will-show-numbers/115804 "2018-01-18T15:36:20Z")

</div>

Hello, As the title describes, I can query all data that is number related, but I cannot query any data that has letters as data. This just happened earlier today. I can go into Discover tab and see the data, but for so…

---

## [Aggregate filter - calculate difference between timestamps](https://discuss.elastic.co/t/aggregate-filter-calculate-difference-between-timestamps/111958)

<div class="topic-metadata">

**Author:** [@Jon\_D](https://discuss.elastic.co/u/Jon_D)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 11:04am UTC](https://discuss.elastic.co/t/aggregate-filter-calculate-difference-between-timestamps/111958 "2017-12-20T11:04:20Z")

</div>

Hello, I'm using the following filters in my pipeline : filter { xml { id =\> "xmlparsing\_agg" source =\> "message" target =\> "doc" force\_array =\> false re…

---

## [How to get around payload in Elasticsearch 5.0](https://discuss.elastic.co/t/how-to-get-around-payload-in-elasticsearch-5-0/73633)

<div class="topic-metadata">

**Author:** [@sumo7](https://discuss.elastic.co/u/sumo7)\
**Replies:** 1\
**Last updated:** [February 2, 2017, 11:17am UTC](https://discuss.elastic.co/t/how-to-get-around-payload-in-elasticsearch-5-0/73633 "2017-02-02T11:17:12Z")

</div>

I'm in the process to upgrade my old Elasticsearch cluster to Elasticsearch 5.0. I noticed that they removed payload from Elasticsearch 5.0 and that's been preventing me from successfully upgrading Elasticsearch. I r…

[Previous page](https://discuss.elastic.co/top.md?page=1565&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1567&per_page=50&period=all)
