# Top

**URL:** https://discuss.elastic.co/top.md?page=1578&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1579

---

## [Channel closed while still aggregating message](https://discuss.elastic.co/t/channel-closed-while-still-aggregating-message/363295)

<div class="topic-metadata">

**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\
**Replies:** 3\
**Last updated:** [July 29, 2024, 9:54pm UTC](https://discuss.elastic.co/t/channel-closed-while-still-aggregating-message/363295 "2024-07-29T21:54:08Z")

</div>

Hello I have a project related to the elasticsearch database and I want to upload data to the database, but I am facing this problem: \[WARN\]\[o.e.h.AbstractHttpServerTransport\]\[node-1\] caught exception while handling cl…

---

## [Cisco Umbrella selfhosted s3 the queue is not processing](https://discuss.elastic.co/t/cisco-umbrella-selfhosted-s3-the-queue-is-not-processing/263152)

<div class="topic-metadata">

**Author:** [@YegorKovylyayev](https://discuss.elastic.co/u/YegorKovylyayev)\
**Replies:** 8\
**Last updated:** [February 10, 2021, 6:52pm UTC](https://discuss.elastic.co/t/cisco-umbrella-selfhosted-s3-the-queue-is-not-processing/263152 "2021-02-10T18:52:46Z")

</div>

Hello, can not connect Cisco Umbrella from self hosted s3 to filebeat on cisco.yml is have: - module: cisco umbrella: enabled: true var.input: s3 var.queue\_url: https://sqs.eu-west-1.amazonaws.com/111111111…

---

## [Latest value in a gauge](https://discuss.elastic.co/t/latest-value-in-a-gauge/262659)

<div class="topic-metadata">

**Author:** [@luc.c](https://discuss.elastic.co/u/luc.c)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 4:42pm UTC](https://discuss.elastic.co/t/latest-value-in-a-gauge/262659 "2021-02-01T16:42:03Z")

</div>

Hi, I'm having trouble building a gauge based on two relevant fields: requestID and Status. My goal is to show the number of requestID for each status; it is not a cumulative count though, as the same requestID can ass…

---

## [Logstash Issue in finding the filter](https://discuss.elastic.co/t/logstash-issue-in-finding-the-filter/247683)

<div class="topic-metadata">

**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\
**Replies:** 3\
**Last updated:** [September 6, 2020, 6:40pm UTC](https://discuss.elastic.co/t/logstash-issue-in-finding-the-filter/247683 "2020-09-06T18:40:38Z")

</div>

Hi Team, I am trying to get the logstash configured but I am unable to start the logstash with the below error. The file exists but still the logstash fails to open/read it. \[2020-09-06T12:50:11,299\]\[INFO \]\[org.reflec…

---

## [Image recognition in kibana and ES](https://discuss.elastic.co/t/image-recognition-in-kibana-and-es/180070)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 3\
**Last updated:** [May 8, 2019, 12:24pm UTC](https://discuss.elastic.co/t/image-recognition-in-kibana-and-es/180070 "2019-05-08T12:24:55Z")

</div>

hi dears, i want to do image recognition , i have many images and now i want to compare images with each other for example i want to see if a person appears in an image. is it possible to do that and what tool can be use…

---

## [Expected behavior for many concurrent create index requests](https://discuss.elastic.co/t/expected-behavior-for-many-concurrent-create-index-requests/178335)

<div class="topic-metadata">

**Author:** [@arvinds94](https://discuss.elastic.co/u/arvinds94)\
**Replies:** 3\
**Last updated:** [April 26, 2019, 1:40am UTC](https://discuss.elastic.co/t/expected-behavior-for-many-concurrent-create-index-requests/178335 "2019-04-26T01:40:09Z")

</div>

Pretty much as the question states. What is the expected behavior when many concurrent identical create index requests are made to the elasticsearch cluster?

---

## [Timelion and ISO Week](https://discuss.elastic.co/t/timelion-and-iso-week/115238)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 3\
**Last updated:** [January 15, 2018, 1:39pm UTC](https://discuss.elastic.co/t/timelion-and-iso-week/115238 "2018-01-15T13:39:50Z")

</div>

Hi there, I would like to compare two weeks with: .es(index=my-index, metric="sum:sessions").label('past week'), .es(index=my-index, metric="sum:sessions", offset=-1w).label('prev week') At the moment with offset=-1w I…

---

## [Elasticsearch Version Supported with Rally](https://discuss.elastic.co/t/elasticsearch-version-supported-with-rally/105983)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 3\
**Last updated:** [November 6, 2017, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-version-supported-with-rally/105983 "2017-11-06T08:04:25Z")

</div>

Does all features of Rally work with Elasticsearch 2.3.x or 5.0.0 is the minimum ES version for rally? I could not find anything related to this in the doc

---

## [Not able to install latest x-pack with kibana 5.3.2](https://discuss.elastic.co/t/not-able-to-install-latest-x-pack-with-kibana-5-3-2/90521)

<div class="topic-metadata">

**Author:** [@pmisra19](https://discuss.elastic.co/u/pmisra19)\
**Replies:** 3\
**Last updated:** [June 23, 2017, 1:31pm UTC](https://discuss.elastic.co/t/not-able-to-install-latest-x-pack-with-kibana-5-3-2/90521 "2017-06-23T13:31:48Z")

</div>

Hi I was trying to install x-pack on my local for a POC i am doing and it seems the latest version will not work. tried to find the exact x-pack version but failed. Please help Below is the message C:\\Users\\zx12160\\Doc…

---

## [Index Name pattern](https://discuss.elastic.co/t/index-name-pattern/89623)

<div class="topic-metadata">

**Author:** [@rahul.dhammy](https://discuss.elastic.co/u/rahul.dhammy)\
**Replies:** 3\
**Last updated:** [June 15, 2017, 8:30pm UTC](https://discuss.elastic.co/t/index-name-pattern/89623 "2017-06-15T20:30:13Z")

</div>

I am trying to give a name to my index, surprisingly the supported pattern is not working as well. When I give the name in format appName-%{+YYYY.MM} - This works When I try to append the week of the year by using a…

---

## [Groovy scripts to painless](https://discuss.elastic.co/t/groovy-scripts-to-painless/75471)

<div class="topic-metadata">

**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\
**Replies:** 3\
**Last updated:** [February 17, 2017, 1:23pm UTC](https://discuss.elastic.co/t/groovy-scripts-to-painless/75471 "2017-02-17T13:23:13Z")

</div>

I wrote this script using groovy language (datediff.groovy): (doc\[secondDateField\].date.millis - doc\[firstDateField\].date.millis) / 3600000 It works fine. Nevertheless, I'm intended to move these script to painless (d…

---

## [Should i replace the bool query with filter query?](https://discuss.elastic.co/t/should-i-replace-the-bool-query-with-filter-query/70048)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 3\
**Last updated:** [December 27, 2016, 9:27am UTC](https://discuss.elastic.co/t/should-i-replace-the-bool-query-with-filter-query/70048 "2016-12-27T09:27:27Z")

</div>

i'm reading the es document,one chapter says filter will be cached and filter clause not be calculated in score.in my business scenario, i use es to search some eligible data then sorting them by date ,so i need't the s…

---

## [Inline script in an update or \_reindex call](https://discuss.elastic.co/t/inline-script-in-an-update-or--reindex-call/60336)

<div class="topic-metadata">

**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\
**Replies:** 3\
**Last updated:** [September 13, 2016, 9:05pm UTC](https://discuss.elastic.co/t/inline-script-in-an-update-or--reindex-call/60336 "2016-09-13T21:05:23Z")

</div>

I think I'm testing the limits of what can be done in a reindex/update w/ an inline script, but I figured I'd ask. One of the properties I've mapped in the past is a serialized hash w/ string keys & values. The hash is…

---

## [Beats cant send data suddenly to ES with errors pop up](https://discuss.elastic.co/t/beats-cant-send-data-suddenly-to-es-with-errors-pop-up/55668)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 3\
**Last updated:** [July 19, 2016, 3:57am UTC](https://discuss.elastic.co/t/beats-cant-send-data-suddenly-to-es-with-errors-pop-up/55668 "2016-07-19T03:57:53Z")

</div>

I am using ES 5.0, Kibana 5.0 alpha4 and various beats to send data to ES. Everything runs fine and smooth at first. However, after a day, the beats suddenly cannot send the beats to the ES. I have been using different b…

---

## [Disallow Dynamic mapping in ElasticSearch](https://discuss.elastic.co/t/disallow-dynamic-mapping-in-elasticsearch/53995)

<div class="topic-metadata">

**Author:** [@ramkchirra](https://discuss.elastic.co/u/ramkchirra)\
**Replies:** 3\
**Last updated:** [June 28, 2016, 7:36pm UTC](https://discuss.elastic.co/t/disallow-dynamic-mapping-in-elasticsearch/53995 "2016-06-28T19:36:58Z")

</div>

Hi, I have a Explicit mapping defined on Elasticsearch and i want to post data in the exact format (not allowing additional properties/fields ). eg: I have the following template defined with name biodata whic…

---

## [Which beat runs? How do i know it?](https://discuss.elastic.co/t/which-beat-runs-how-do-i-know-it/333286)

<div class="topic-metadata">

**Author:** [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\
**Replies:** 2\
**Last updated:** [May 20, 2023, 8:06am UTC](https://discuss.elastic.co/t/which-beat-runs-how-do-i-know-it/333286 "2023-05-20T08:06:46Z")

</div>

I was trying to make a new beat that collects k6 metrics via rest api and then send them into Elasticsearch. I follow the 7.17 Dev Guide " Creating a Beat based on Metricbeat" documentation. But it's like my beat doesn't…

---

## [How to avoid incomplete garbage collection by G1GC causing high cpu usage on Elasticsearch nodes?](https://discuss.elastic.co/t/how-to-avoid-incomplete-garbage-collection-by-g1gc-causing-high-cpu-usage-on-elasticsearch-nodes/357032)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 6\
**Last updated:** [April 9, 2024, 12:30pm UTC](https://discuss.elastic.co/t/how-to-avoid-incomplete-garbage-collection-by-g1gc-causing-high-cpu-usage-on-elasticsearch-nodes/357032 "2024-04-09T12:30:05Z")

</div>

This was an issue I encountered before: I asked the same question on another forum, and someone replied as follows: In the ThreadLocal's ThreadLocalMap, there is a table. Excessive usage can result in most Entry eleme…

---

## [Keyword subfield mapping causes unexpected querying results](https://discuss.elastic.co/t/keyword-subfield-mapping-causes-unexpected-querying-results/334655)

<div class="topic-metadata">

**Author:** [@Hryhorii](https://discuss.elastic.co/u/Hryhorii)\
**Replies:** 6\
**Last updated:** [May 30, 2023, 6:38pm UTC](https://discuss.elastic.co/t/keyword-subfield-mapping-causes-unexpected-querying-results/334655 "2023-05-30T18:38:48Z")

</div>

We have an index mapping schema with a lot of text fields. To be able to sort and filter them we added keyword subfield mapping with lowercase normalizer. Here is a short part of our schema: { "mappings": { "dynam…

---

## [APM host on Standalone Elastic Agent](https://discuss.elastic.co/t/apm-host-on-standalone-elastic-agent/317695)

<div class="topic-metadata">

**Author:** [@juliana\_cg](https://discuss.elastic.co/u/juliana_cg)\
**Replies:** 6\
**Last updated:** [November 3, 2022, 9:25am UTC](https://discuss.elastic.co/t/apm-host-on-standalone-elastic-agent/317695 "2022-11-03T09:25:01Z")

</div>

Hello, I'm using Standalone Elastic agent on version 7.17.7. Tested it on docker and kubernetes, but in both cases can get to connect my APM agent to Elastic's agent APM, always getting connection refused error. When go…

---

## [Winlogbeat keystore windows](https://discuss.elastic.co/t/winlogbeat-keystore-windows/268769)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 6\
**Last updated:** [March 31, 2021, 11:12am UTC](https://discuss.elastic.co/t/winlogbeat-keystore-windows/268769 "2021-03-31T11:12:29Z")

</div>

I have created a keystore for winlogbeats as the administrator and modified winlogbeat.yml When i try and start the service it fails (running as local system) if i run winlogbeat manually it starts I can see the issue…

---

## [How can I call "extended\_stats" in Elasticsearch 6.4.0 SQL syntax](https://discuss.elastic.co/t/how-can-i-call-extended-stats-in-elasticsearch-6-4-0-sql-syntax/145941)

<div class="topic-metadata">

**Author:** [@jam1142](https://discuss.elastic.co/u/jam1142)\
**Replies:** 6\
**Last updated:** [September 10, 2018, 6:03pm UTC](https://discuss.elastic.co/t/how-can-i-call-extended-stats-in-elasticsearch-6-4-0-sql-syntax/145941 "2018-09-10T18:03:33Z")

</div>

I am excited to hear elasticsearch giving option to write query in SQL syntax but just curious about how can we achieve elasticsearch features like aggregate "extended\_stats" through SQL syntax. I am looking for standard…

---

## [Logstash S3 input slow ingestion](https://discuss.elastic.co/t/logstash-s3-input-slow-ingestion/327653)

<div class="topic-metadata">

**Author:** [@true64gurus](https://discuss.elastic.co/u/true64gurus)\
**Replies:** 5\
**Last updated:** [March 14, 2023, 3:55pm UTC](https://discuss.elastic.co/t/logstash-s3-input-slow-ingestion/327653 "2023-03-14T15:55:12Z")

</div>

I have setup where logstash reads Kubernetes logs from 20 different buckets and send them to ELK. The logs seems to be coming 3-5 minutes late to ELK. The logstash running docker on VM with 31GB Xms/Xmx. I am using one …

---

## [Watcher webhook to create a OTRS ticket](https://discuss.elastic.co/t/watcher-webhook-to-create-a-otrs-ticket/323855)

<div class="topic-metadata">

**Author:** [@M\_S](https://discuss.elastic.co/u/M_S)\
**Replies:** 5\
**Last updated:** [January 25, 2023, 4:27pm UTC](https://discuss.elastic.co/t/watcher-webhook-to-create-a-otrs-ticket/323855 "2023-01-25T16:27:22Z")

</div>

I can curl and make an OTRS ticket by using the following : curl "http://myotrs.com/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket?UserLogin=username&Password=password" -H "Content-Type: app…

---

## [RuleDataWriteDisabledError ELK v8.5](https://discuss.elastic.co/t/ruledatawritedisablederror-elk-v8-5/320031)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 5\
**Last updated:** [December 16, 2022, 5:05am UTC](https://discuss.elastic.co/t/ruledatawritedisablederror-elk-v8-5/320031 "2022-12-16T05:05:54Z")

</div>

getting this error Bulk Indexing of signals failed: RuleDataWriteDisabledError: Rule registry writing is disabled due to an error during Rule Data Client initialization. After I updated ELK from 8.4 to 8.5

---

## [The list of transactions no longer appears after a few seconds](https://discuss.elastic.co/t/the-list-of-transactions-no-longer-appears-after-a-few-seconds/308658)

<div class="topic-metadata">

**Author:** [@btsinfo](https://discuss.elastic.co/u/btsinfo)\
**Replies:** 5\
**Last updated:** [August 4, 2022, 5:44pm UTC](https://discuss.elastic.co/t/the-list-of-transactions-no-longer-appears-after-a-few-seconds/308658 "2022-08-04T17:44:04Z")

</div>

hello, i used 8.2.3, i use observability . In my case, I'm using pipelines to customize transaction.name. since the upgrade to 8.3, the list of service.name transactions is displayed correctly at first, then after a few…

---

## [Logstash Json Split Filter](https://discuss.elastic.co/t/logstash-json-split-filter/303955)

<div class="topic-metadata">

**Author:** [@elknick](https://discuss.elastic.co/u/elknick)\
**Replies:** 5\
**Last updated:** [May 4, 2022, 4:17pm UTC](https://discuss.elastic.co/t/logstash-json-split-filter/303955 "2022-05-04T16:17:12Z")

</div>

I am trying to use the Split filter in Logstash to separate my Json data into separate documents in elastic. I have used this same Split filter in another case and did not have this problem. I have tried targeting a few …

---

## [Elastic search Bulk Delete Java HighLevelClient](https://discuss.elastic.co/t/elastic-search-bulk-delete-java-highlevelclient/199866)

<div class="topic-metadata">

**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Replies:** 5\
**Last updated:** [September 17, 2019, 6:09pm UTC](https://discuss.elastic.co/t/elastic-search-bulk-delete-java-highlevelclient/199866 "2019-09-17T18:09:52Z")

</div>

I am using Java High level client i have done delete index by using indices and by id but i need to delete more than one document using condition. HOW DO I PERFORM THIS. there is any methods to do this?

---

## [Custom Elasticsearch plugin error not displaying in kibana 6.8](https://discuss.elastic.co/t/custom-elasticsearch-plugin-error-not-displaying-in-kibana-6-8/195951)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 5\
**Last updated:** [August 21, 2019, 10:51am UTC](https://discuss.elastic.co/t/custom-elasticsearch-plugin-error-not-displaying-in-kibana-6-8/195951 "2019-08-21T10:51:16Z")

</div>

Hello I have a custom elasticsearch plugin that returns a custom error message. Usually of type 400 In previous version of kibana 6.3\> This error would get passed to the client and be displayed. :smiley: I have recentl…

---

## [Clear my system](https://discuss.elastic.co/t/clear-my-system/111826)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 11:03am UTC](https://discuss.elastic.co/t/clear-my-system/111826 "2017-12-18T11:03:43Z")

</div>

Hi, Have been trying ELK for a while now...still not in production and a lot of things aren't working. I've a feeling that something is a bit screwy. I have stopped everything send data to my ELK stack and cleared all…

---

## [How to setup a connection between VMs and ELK?](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899)

<div class="topic-metadata">

**Author:** [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\
**Replies:** 5\
**Last updated:** [March 26, 2015, 9:01pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899 "2015-03-26T21:01:04Z")

</div>

This is a beginner question but how would you get virtual machines to connect to ELK so you can see the logs of those VMs on Kibana? Is there a place to input the IP of the VMs so it is displayed in Kibana? -- Y…

---

## [Fleet & Docker - How to maintain state?](https://discuss.elastic.co/t/fleet-docker-how-to-maintain-state/311156)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 2\
**Last updated:** [August 2, 2022, 11:55am UTC](https://discuss.elastic.co/t/fleet-docker-how-to-maintain-state/311156 "2022-08-02T11:55:05Z")

</div>

I am running Fleet 8.3.3 in a Docker Container, using the docs found here: It appears that every time the container is destroyed and a new one created, a new Fleet server is registered, even if I set the container hostn…

---

## [APM Java agent not working with Vert.x](https://discuss.elastic.co/t/apm-java-agent-not-working-with-vert-x/287186)

<div class="topic-metadata">

**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 1:09pm UTC](https://discuss.elastic.co/t/apm-java-agent-not-working-with-vert-x/287186 "2021-10-20T13:09:52Z")

</div>

Hi! I am not being able to audit the transactions against my Vert.x application using the Java agent for this purpose. According to the documentation: there is an experimental support for Vert.x since version 1.0.24 …

---

## [Csv header skip\_header =\> "true" not working](https://discuss.elastic.co/t/csv-header-skip-header-true-not-working/273100)

<div class="topic-metadata">

**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\
**Replies:** 2\
**Last updated:** [May 21, 2021, 4:50pm UTC](https://discuss.elastic.co/t/csv-header-skip-header-true-not-working/273100 "2021-05-21T16:50:31Z")

</div>

hello all, Im trying to use skip\_header =\> "true", this is because in kibana/discover the header is also coming out as a value. so i tried to add this parameter and it does not seem to working. In my case, this header…

---

## [Stack Monitoring not working properly](https://discuss.elastic.co/t/stack-monitoring-not-working-properly/242516)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 2\
**Last updated:** [August 10, 2020, 12:38pm UTC](https://discuss.elastic.co/t/stack-monitoring-not-working-properly/242516 "2020-08-10T12:38:58Z")

</div>

I am working currently on getting the stack monitoring up and running. According to what I have read so far, all I need to do for that is set the xpack.monitoring.collection.enabled to true. So like that: apiVersion: e…

---

## [Old stale shards in path.data](https://discuss.elastic.co/t/old-stale-shards-in-path-data/240637)

<div class="topic-metadata">

**Author:** [@asmith](https://discuss.elastic.co/u/asmith)\
**Replies:** 2\
**Last updated:** [July 10, 2020, 9:39am UTC](https://discuss.elastic.co/t/old-stale-shards-in-path-data/240637 "2020-07-10T09:39:39Z")

</div>

Hello, I just noticed that we have a massive shard imbalance in our 7.1.0 cluster. I'm assuming it must've happened due to many partial/failed recoveries or similar, and it seems that a lot of data must've just been lef…

---

## [Term Query on Keyword type which is part of a completion context did not work](https://discuss.elastic.co/t/term-query-on-keyword-type-which-is-part-of-a-completion-context-did-not-work/232197)

<div class="topic-metadata">

**Author:** [@alexisvisco](https://discuss.elastic.co/u/alexisvisco)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 2:00pm UTC](https://discuss.elastic.co/t/term-query-on-keyword-type-which-is-part-of-a-completion-context-did-not-work/232197 "2020-05-12T14:00:41Z")

</div>

Hi community, I have a problem with a property named "hash" which is of type "keyword". This property is also used for a completion category context. ElasticSearch Version: docker.elastic.co/elasticsearch/elasticsearch-…

---

## [How to calculate combinating different index with different mapping in order to show a histogram in Kibana](https://discuss.elastic.co/t/how-to-calculate-combinating-different-index-with-different-mapping-in-order-to-show-a-histogram-in-kibana/230140)

<div class="topic-metadata">

**Author:** [@Juanjo\_Herrero\_Berme](https://discuss.elastic.co/u/Juanjo_Herrero_Berme)\
**Replies:** 2\
**Last updated:** [May 7, 2020, 11:43am UTC](https://discuss.elastic.co/t/how-to-calculate-combinating-different-index-with-different-mapping-in-order-to-show-a-histogram-in-kibana/230140 "2020-05-07T11:43:03Z")

</div>

Hi, I have a question about Kibana and how to do calculates combinating different index with different mapping. I want to create a graphic using TSVB or just a line chart that calculates a "Rate", but the problem is i …

---

## [While concatenating two large text field using scripted field, if string length are long not able to concatenate](https://discuss.elastic.co/t/while-concatenating-two-large-text-field-using-scripted-field-if-string-length-are-long-not-able-to-concatenate/227905)

<div class="topic-metadata">

**Author:** [@vivek996](https://discuss.elastic.co/u/vivek996)\
**Replies:** 2\
**Last updated:** [April 15, 2020, 3:18am UTC](https://discuss.elastic.co/t/while-concatenating-two-large-text-field-using-scripted-field-if-string-length-are-long-not-able-to-concatenate/227905 "2020-04-15T03:18:55Z")

</div>

Not able to concatenating two string fields in kibana using the painless script, having a very large string. My scripts are as follow :-: ''' if (doc\['ERROR'\].size() != 0 && doc\['ABORT'\].size() != 0 && doc\['FAIL'\].size…

---

## [Canvas dropdownControl default value](https://discuss.elastic.co/t/canvas-dropdowncontrol-default-value/193114)

<div class="topic-metadata">

**Author:** [@BennyInc](https://discuss.elastic.co/u/BennyInc)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 7:06pm UTC](https://discuss.elastic.co/t/canvas-dropdowncontrol-default-value/193114 "2019-07-31T19:06:37Z")

</div>

I am using the dropdownControl to select which of our stages I want to see data on: csv data="stage prod stg int test" | dropdownControl valueColumn="stage" filterColumn="fields.stage" | render Now I want to set a def…

---

## [Line not shown in line chart using percentiles aggregation](https://discuss.elastic.co/t/line-not-shown-in-line-chart-using-percentiles-aggregation/178421)

<div class="topic-metadata">

**Author:** [@nickpollard](https://discuss.elastic.co/u/nickpollard)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 12:56pm UTC](https://discuss.elastic.co/t/line-not-shown-in-line-chart-using-percentiles-aggregation/178421 "2019-04-25T12:56:56Z")

</div>

I've just upgraded from Elasticsearch / Kibana 6.6.1 -\> 7.0.0. I had an existing line chart using percentiles aggration on the Y-axis and date histogram on the x-axis. In 6.6.1 lines were drawn between the points per p…

---

## [Questions about shadow replica](https://discuss.elastic.co/t/questions-about-shadow-replica/175146)

<div class="topic-metadata">

**Author:** [@zhichen1](https://discuss.elastic.co/u/zhichen1)\
**Replies:** 2\
**Last updated:** [April 3, 2019, 12:01pm UTC](https://discuss.elastic.co/t/questions-about-shadow-replica/175146 "2019-04-03T12:01:09Z")

</div>

We are researching elasticsearch computing storage separation, and very interested in shadow replica, I would like to ask a few questions Under the premise of using shared storage NFS, when the primary shard loses comm…

---

## [Syscall/dll\_windows.go Error With all Beats](https://discuss.elastic.co/t/syscall-dll-windows-go-error-with-all-beats/163781)

<div class="topic-metadata">

**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\
**Replies:** 2\
**Last updated:** [January 31, 2019, 8:50pm UTC](https://discuss.elastic.co/t/syscall-dll-windows-go-error-with-all-beats/163781 "2019-01-31T20:50:38Z")

</div>

Hello! I need to install MetricBeat, WinlogBeat, and a beat of mine in a Windows Server 2003 R2 Service Pack 2 x86 machine, but i still getting this error. It's urgent to have those beats installed, changing SO is not a…

---

## [Functionbeat failing to deploy due to Alphanumeric Error](https://discuss.elastic.co/t/functionbeat-failing-to-deploy-due-to-alphanumeric-error/159650)

<div class="topic-metadata">

**Author:** [@musayev-io](https://discuss.elastic.co/u/musayev-io)\
**Replies:** 2\
**Last updated:** [December 11, 2018, 4:52pm UTC](https://discuss.elastic.co/t/functionbeat-failing-to-deploy-due-to-alphanumeric-error/159650 "2018-12-11T16:52:17Z")

</div>

I'm trying to deploy Functionbeat with CloudWatch triggers that have dashes and underscores. I'm unable to do so, as I get an error message saying: Function: elasticfunctionbeat, could not deploy, error: ValidationError…

---

## [Connecting ElasticSearch with Intellij](https://discuss.elastic.co/t/connecting-elasticsearch-with-intellij/155038)

<div class="topic-metadata">

**Author:** [@eri](https://discuss.elastic.co/u/eri)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 11:32am UTC](https://discuss.elastic.co/t/connecting-elasticsearch-with-intellij/155038 "2018-11-05T11:32:58Z")

</div>

Hello everyone! I am new to ElasticSearch so I have a 'beginner question'... I have created an index and populated it with data. So I am using ElasticSearch only to store data. Now I need to somehow make a connection w…

---

## [SAML Issues with Sales Force IPd](https://discuss.elastic.co/t/saml-issues-with-sales-force-ipd/145056)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 2\
**Last updated:** [August 19, 2018, 2:34pm UTC](https://discuss.elastic.co/t/saml-issues-with-sales-force-ipd/145056 "2018-08-19T14:34:27Z")

</div>

Hi there, I am getting the following error when I use salesforce.com for SAML: Elasticsearch Logs: \[2018-08-19T13:11:37,693\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[MYtrM5v\] Authentication to realm saml1 failed - Pro…

---

## [Issues with stability in mixed (Physical/Virtual) Environment](https://discuss.elastic.co/t/issues-with-stability-in-mixed-physical-virtual-environment/136000)

<div class="topic-metadata">

**Author:** [@jcspino](https://discuss.elastic.co/u/jcspino)\
**Replies:** 2\
**Last updated:** [June 14, 2018, 8:29pm UTC](https://discuss.elastic.co/t/issues-with-stability-in-mixed-physical-virtual-environment/136000 "2018-06-14T20:29:48Z")

</div>

Hello, I have an ELK stack that has been up and running for a few years now. Until recently the cluster was made up of all VMWare VMs, 3 master/data nodes and 2 data only nodes for older log data. We use the hot/cold ar…

---

## [Ruby code calculate problem](https://discuss.elastic.co/t/ruby-code-calculate-problem/117763)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 8:31am UTC](https://discuss.elastic.co/t/ruby-code-calculate-problem/117763 "2018-01-31T08:31:01Z")

</div>

Hello,we now want to do Arithmetic in logstash ruby code. The ruby code is: ruby { init =\> "@@count = -1" code =\> " event.set('\[test\]', @@count) event.set('\[test2\]', event.get('\[layers\]\[frame\_time\_relative\]').to\_f …

---

## [Change in trend detection in elasticsearch](https://discuss.elastic.co/t/change-in-trend-detection-in-elasticsearch/105881)

<div class="topic-metadata">

**Author:** [@eng.behjati](https://discuss.elastic.co/u/eng.behjati)\
**Replies:** 2\
**Last updated:** [November 14, 2017, 3:26pm UTC](https://discuss.elastic.co/t/change-in-trend-detection-in-elasticsearch/105881 "2017-11-14T15:26:35Z")

</div>

Hi everyone! I have a few questions. can you help me? I have an Elasticsearch db engine that holds posts gathered from social networks and websites contents. I use percolate these posts to match some queries and I wan…

---

## [Security - how to add a user to multiple clusters](https://discuss.elastic.co/t/security-how-to-add-a-user-to-multiple-clusters/73279)

<div class="topic-metadata">

**Author:** [@adamaanderson](https://discuss.elastic.co/u/adamaanderson)\
**Replies:** 2\
**Last updated:** [January 31, 2017, 8:05pm UTC](https://discuss.elastic.co/t/security-how-to-add-a-user-to-multiple-clusters/73279 "2017-01-31T20:05:16Z")

</div>

Is there an efficient way to add a user (or group of users) to multiple clusters? For example, there is a need to add a support team to 4 different clusters. Can this be done without executing the same "add users" action…

---

## [Why minimun\_should\_match must not be lower than 1?](https://discuss.elastic.co/t/why-minimun-should-match-must-not-be-lower-than-1/70342)

<div class="topic-metadata">

**Author:** [@Florian\_Wilhelm](https://discuss.elastic.co/u/Florian_Wilhelm)\
**Replies:** 2\
**Last updated:** [January 2, 2017, 1:19pm UTC](https://discuss.elastic.co/t/why-minimun-should-match-must-not-be-lower-than-1/70342 "2017-01-02T13:19:35Z")

</div>

In the documentation of the minimum\_should\_match parameter of the bool query it is stated ... the minimum number of required matches will never be lower than 1 or greater than the number of clauses. Why is this restr…

[Previous page](https://discuss.elastic.co/top.md?page=1577&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1579&per_page=50&period=all)
