# Top

**URL:** https://discuss.elastic.co/top.md?page=1579&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1580

---

## [How to Get all mapping type of an index](https://discuss.elastic.co/t/how-to-get-all-mapping-type-of-an-index/41589)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 2\
**Last updated:** [November 22, 2016, 6:52am UTC](https://discuss.elastic.co/t/how-to-get-all-mapping-type-of-an-index/41589 "2016-11-22T06:52:50Z")

</div>

Team is any way to get all Mapping type of an index ( only type ) not mapping definitions.

---

## [Configuring Logstash Sylog (v2.1.4) Output plugin for to use ssl-tcp](https://discuss.elastic.co/t/configuring-logstash-sylog-v2-1-4-output-plugin-for-to-use-ssl-tcp/55998)

<div class="topic-metadata">

**Author:** [@Hatitye\_Chindove](https://discuss.elastic.co/u/Hatitye_Chindove)\
**Replies:** 2\
**Last updated:** [July 22, 2016, 6:07pm UTC](https://discuss.elastic.co/t/configuring-logstash-sylog-v2-1-4-output-plugin-for-to-use-ssl-tcp/55998 "2016-07-22T18:07:19Z")

</div>

I have been trying to setup logstash to output plugin to work with ssl-tcp but I can't seem to get any community documentation on how to do this. A vendor provided me with their public certificate but I simply can't find…

---

## [ES 2.x Tarball URL change](https://discuss.elastic.co/t/es-2-x-tarball-url-change/33218)

<div class="topic-metadata">

**Author:** [@vkhatri](https://discuss.elastic.co/u/vkhatri)\
**Replies:** 2\
**Last updated:** [October 30, 2015, 10:36am UTC](https://discuss.elastic.co/t/es-2-x-tarball-url-change/33218 "2015-10-30T10:36:29Z")

</div>

hello! Tarball Download URL has been changed in ES 2.0.0 from ES 1.7.3: 1.7.3: https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.3.tar.gz 2.0.0 https://download.elasticsearch.org/elasticse…

---

## [Node does not join the cluster](https://discuss.elastic.co/t/node-does-not-join-the-cluster/9415)

<div class="topic-metadata">

**Author:** [@Michael\_Smolyak](https://discuss.elastic.co/u/Michael_Smolyak)\
**Replies:** 2\
**Last updated:** [October 21, 2012, 1:16am UTC](https://discuss.elastic.co/t/node-does-not-join-the-cluster/9415 "2012-10-21T01:16:37Z")

</div>

I am trying to implement failover in cluster with two nodes. When I test the configuration of two nodes (two tomcat servers, each running a Web app that starts an embedded ES server) running on the same machine, the r…

---

## [How to call transform api using python](https://discuss.elastic.co/t/how-to-call-transform-api-using-python/287072)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 1\
**Last updated:** [October 26, 2021, 7:55am UTC](https://discuss.elastic.co/t/how-to-call-transform-api-using-python/287072 "2021-10-26T07:55:06Z")

</div>

I am trying to develop a python script since the max frequency parameter for transform api ranges from 1s to 1h. I am using: python verison 3.6.8 Elasticsearch python api: python -m pip install elasticsearch UPDATE…

---

## [Differences between light\_spanish and spanish stemmers](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366)

<div class="topic-metadata">

**Author:** [@Daniel\_Rojas](https://discuss.elastic.co/u/Daniel_Rojas)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 9:07am UTC](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366 "2021-08-04T09:07:08Z")

</div>

We're using the light\_spanish stemmer, but we've had some issues with some specific words, for example, if I search "papa", it doesn't show results that contain "papas". So, I tested the spanish stemmer, and it solves th…

---

## [APM No services found on Kibana](https://discuss.elastic.co/t/apm-no-services-found-on-kibana/265368)

<div class="topic-metadata">

**Author:** [@79g](https://discuss.elastic.co/u/79g)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 9:33am UTC](https://discuss.elastic.co/t/apm-no-services-found-on-kibana/265368 "2021-02-25T09:33:26Z")

</div>

Hello, I'm trying to get metrics from my python application using the APM solution. I have deployed three docker containers (APM-server, Elasticsearch and Kibana - versions 7.11.1) using the docker-compose from Quick s…

---

## [Elasticsearch|Grafana|Variable Templates](https://discuss.elastic.co/t/elasticsearch-grafana-variable-templates/199323)

<div class="topic-metadata">

**Author:** [@chinmay.parkar](https://discuss.elastic.co/u/chinmay.parkar)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-grafana-variable-templates/199323 "2019-09-14T10:19:43Z")

</div>

How can I make a Grafana template with a variable reference another variable using Elasticsearch as a datasource? I have a Grafana dashboard with template variables for fields and terms . When I select a field how ca…

---

## [Failed to execute fetch phase - Field does not support custom formats](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-field-does-not-support-custom-formats/170201)

<div class="topic-metadata">

**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\
**Replies:** 1\
**Last updated:** [February 27, 2019, 4:46pm UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-field-does-not-support-custom-formats/170201 "2019-02-27T16:46:11Z")

</div>

We just added winlogbeat data to our elasticsearch setup. But now kibana will not show any results for the winlogbeat-\* index pattern. Dury the query elasticsearch reports: \[2019-02-27T07:56:51,417\]\[DEBUG\]\[o.e.a.s.Tra…

---

## [How to get the metrics of daily open tickets count from open and closed date and create bar chart](https://discuss.elastic.co/t/how-to-get-the-metrics-of-daily-open-tickets-count-from-open-and-closed-date-and-create-bar-chart/121737)

<div class="topic-metadata">

**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\
**Replies:** 1\
**Last updated:** [March 3, 2018, 6:45pm UTC](https://discuss.elastic.co/t/how-to-get-the-metrics-of-daily-open-tickets-count-from-open-and-closed-date-and-create-bar-chart/121737 "2018-03-03T18:45:52Z")

</div>

Not sure if elasticsearch and kibana support this use case. We have a DevOp ticket status dashboard to show the number of IT help desk tickets in the pipeline and the status of the ticket. I want to create a bar chart t…

---

## [Logstash 5.3.\* could not start due to Log4j](https://discuss.elastic.co/t/logstash-5-3-could-not-start-due-to-log4j/110502)

<div class="topic-metadata">

**Author:** [@HelloUniverse](https://discuss.elastic.co/u/HelloUniverse)\
**Replies:** 1\
**Last updated:** [December 12, 2017, 5:54am UTC](https://discuss.elastic.co/t/logstash-5-3-could-not-start-due-to-log4j/110502 "2017-12-12T05:54:07Z")

</div>

Hi There, JDK 1.8.66, Logstash 5.3.1 So far we encountered a weired problem. The error information is as the following: LoadError: load error: logstash/environment -- java.lang.IllegalAccessError: class org.apache.lo…

---

## [Confguracion de xpack -ElasticSearch](https://discuss.elastic.co/t/confguracion-de-xpack-elasticsearch/105673)

<div class="topic-metadata">

**Author:** [@Erick\_Garcia\_Perez](https://discuss.elastic.co/u/Erick_Garcia_Perez)\
**Replies:** 1\
**Last updated:** [November 6, 2017, 10:42am UTC](https://discuss.elastic.co/t/confguracion-de-xpack-elasticsearch/105673 "2017-11-06T10:42:40Z")

</div>

Buenos dias,espero puedan ayudarme... Como configuro xpack para que pueda analizar los documentos que tiene mi instancia de elasticsearch, el mensaje es el siguiente: 17.1.1.2 - - \[25/Aug/2017:00:38:48 -0500\] "GET /un…

---

## [Importing and Exporting dashboards either from script or command line](https://discuss.elastic.co/t/importing-and-exporting-dashboards-either-from-script-or-command-line/91220)

<div class="topic-metadata">

**Author:** [@gargraghav](https://discuss.elastic.co/u/gargraghav)\
**Replies:** 1\
**Last updated:** [June 29, 2017, 2:48pm UTC](https://discuss.elastic.co/t/importing-and-exporting-dashboards-either-from-script-or-command-line/91220 "2017-06-29T14:48:26Z")

</div>

I have exported my dashboard into a .json file in my local machine. Now I have deleted the particular saved dashboard from Kibana and trying to import it back using the same .json file with the help of command line throu…

---

## [About Updating Documents in Replica Shards](https://discuss.elastic.co/t/about-updating-documents-in-replica-shards/43577)

<div class="topic-metadata">

**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\
**Replies:** 1\
**Last updated:** [March 5, 2016, 6:42pm UTC](https://discuss.elastic.co/t/about-updating-documents-in-replica-shards/43577 "2016-03-05T18:42:51Z")

</div>

In Chapter 4 of this book 'Elasticsearch: The Definitive Guide", In part "Partial Updates to a Document", I am confused about the document-basesd replication: It is said that If Node 3(the primary shard is in Node 3) h…

---

## [How to break down a multiline entry with nested json - File input plugin](https://discuss.elastic.co/t/how-to-break-down-a-multiline-entry-with-nested-json-file-input-plugin/303245)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 4\
**Last updated:** [April 26, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-to-break-down-a-multiline-entry-with-nested-json-file-input-plugin/303245 "2022-04-26T18:28:03Z")

</div>

Hi All, I have the following multiline log in json. My setup is that I read from a file (where my events are in embedded json) and the events gets broken down (each row is a treated as a single entry) wrongly. How can…

---

## [Handle big numbers in elasticsearch](https://discuss.elastic.co/t/handle-big-numbers-in-elasticsearch/302535)

<div class="topic-metadata">

**Author:** [@max4b](https://discuss.elastic.co/u/max4b)\
**Replies:** 4\
**Last updated:** [April 17, 2022, 6:34am UTC](https://discuss.elastic.co/t/handle-big-numbers-in-elasticsearch/302535 "2022-04-17T06:34:31Z")

</div>

Hi, I need to store big ints that can have more than 20 numbers. I tried with long and double in the mappings for my numeric fields, but none of them work. I can't put them in text fields either, because that doesn't al…

---

## [Can Elasticsearch aggregate logs in a "live" manner and meet our needs at scale?](https://discuss.elastic.co/t/can-elasticsearch-aggregate-logs-in-a-live-manner-and-meet-our-needs-at-scale/282352)

<div class="topic-metadata">

**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Replies:** 4\
**Last updated:** [August 24, 2021, 4:52pm UTC](https://discuss.elastic.co/t/can-elasticsearch-aggregate-logs-in-a-live-manner-and-meet-our-needs-at-scale/282352 "2021-08-24T16:52:50Z")

</div>

My team is new to Elasticsearch and is considering it for log analysis. I need to be able to tell my manager whether the technology can scale to meet our needs. So that's my question: Can Elasticsearch meet our goals at …

---

## [Expected \[SRART\_OBJECT\] but found \[START\_ARRAY\]](https://discuss.elastic.co/t/expected-srart-object-but-found-start-array/278667)

<div class="topic-metadata">

**Author:** [@Eran1](https://discuss.elastic.co/u/Eran1)\
**Replies:** 4\
**Last updated:** [July 18, 2021, 12:23pm UTC](https://discuss.elastic.co/t/expected-srart-object-but-found-start-array/278667 "2021-07-18T12:23:13Z")

</div>

Hi, I'm using python to connect to elastic as following: import urllib3 from elasticsearch import Elasticsearch from elasticsearch.connection import create\_ssl\_context import configparser def get\_es\_session(es\_u…

---

## [Problem when splitting a nested JSON array](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864)

<div class="topic-metadata">

**Author:** [@pedro\_gonzalez](https://discuss.elastic.co/u/pedro_gonzalez)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 5:59pm UTC](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864 "2021-04-22T17:59:15Z")

</div>

Hi, I have seen multiple thread talking about this problem but with some differences. I have the following log schema: "messageId": 123, "timestamp": "2020-09-14T03:35:37", "extra": { "name": "typefood", "food\_…

---

## [Kibana plugin. Is it possible to use joi validation in router?](https://discuss.elastic.co/t/kibana-plugin-is-it-possible-to-use-joi-validation-in-router/255438)

<div class="topic-metadata">

**Author:** [@16318a22907f3cbfa04b](https://discuss.elastic.co/u/16318a22907f3cbfa04b)\
**Replies:** 4\
**Last updated:** [December 1, 2020, 7:20am UTC](https://discuss.elastic.co/t/kibana-plugin-is-it-possible-to-use-joi-validation-in-router/255438 "2020-12-01T07:20:18Z")

</div>

the schema from @kibana/config-schema has too few features

---

## [How to see system host missing value on kibana dashboard](https://discuss.elastic.co/t/how-to-see-system-host-missing-value-on-kibana-dashboard/174474)

<div class="topic-metadata">

**Author:** [@Pradnya](https://discuss.elastic.co/u/Pradnya)\
**Replies:** 4\
**Last updated:** [April 25, 2019, 8:03am UTC](https://discuss.elastic.co/t/how-to-see-system-host-missing-value-on-kibana-dashboard/174474 "2019-04-25T08:03:07Z")

</div>

I am using metricbeat to get system metrics, currently having 20-30 system on kibana dashborad, but if my metribeat.service goes down on client machine obviously i wont get that system data on kibana. But how to identif…

---

## [Logstash goes down with ruby in filter](https://discuss.elastic.co/t/logstash-goes-down-with-ruby-in-filter/88073)

<div class="topic-metadata">

**Author:** [@abrejuin](https://discuss.elastic.co/u/abrejuin)\
**Replies:** 4\
**Last updated:** [June 2, 2017, 2:05pm UTC](https://discuss.elastic.co/t/logstash-goes-down-with-ruby-in-filter/88073 "2017-06-02T14:05:07Z")

</div>

Hello, I have a filter which were worked when I was in logstash version 2. Now Logstash is in version 5 and something goes wrong with a ruby part (I know there is a new behaviour since the v5). If I activate the part a…

---

## [How to debug why memory is not locking in ES5?](https://discuss.elastic.co/t/how-to-debug-why-memory-is-not-locking-in-es5/74344)

<div class="topic-metadata">

**Author:** [@Aivars\_Irmejs](https://discuss.elastic.co/u/Aivars_Irmejs)\
**Replies:** 4\
**Last updated:** [February 8, 2017, 1:16pm UTC](https://discuss.elastic.co/t/how-to-debug-why-memory-is-not-locking-in-es5/74344 "2017-02-08T13:16:07Z")

</div>

I was forced to change a server recently and I upgraded to ES5.2.0 in process. I'm trying to lock memory and although there are no errors in the log, the memory does not seem to be locked at all. Process command line l…

---

## [Quels analyzer pour une recherche?](https://discuss.elastic.co/t/quels-analyzer-pour-une-recherche/73348)

<div class="topic-metadata">

**Author:** [@Karel\_SUEDILE](https://discuss.elastic.co/u/Karel_SUEDILE)\
**Replies:** 4\
**Last updated:** [February 1, 2017, 11:05am UTC](https://discuss.elastic.co/t/quels-analyzer-pour-une-recherche/73348 "2017-02-01T11:05:52Z")

</div>

Bonjour, je souhaiterai mettre en place une recherche un peu spécifique sur mes documents. Actuellement, j'utilise query\_string sur des documents indexés avec l'analyzer french. Ca me permet d'avoir des résultats cohér…

---

## [Adding a date filter to CSV](https://discuss.elastic.co/t/adding-a-date-filter-to-csv/61663)

<div class="topic-metadata">

**Author:** [@setlem](https://discuss.elastic.co/u/setlem)\
**Replies:** 4\
**Last updated:** [September 28, 2016, 7:37am UTC](https://discuss.elastic.co/t/adding-a-date-filter-to-csv/61663 "2016-09-28T07:37:47Z")

</div>

hi magnus, I am new to ELk.i have used the same date filter but index file is not generating in elastic search and am unable to see data in kibana. here is my config file and my input is date, count sep 03 2016,55

---

## [Runtime/cgo: pthread\_create failed: Operation not permitted SIGABRT: abort PC=0x7f46dd713a7c m=2 sigcode=18446744073709551610](https://discuss.elastic.co/t/runtime-cgo-pthread-create-failed-operation-not-permitted-sigabrt-abort-pc-0x7f46dd713a7c-m-2-sigcode-18446744073709551610/340253)

<div class="topic-metadata">

**Author:** [@linxx](https://discuss.elastic.co/u/linxx)\
**Replies:** 0\
**Last updated:** [August 7, 2023, 10:11am UTC](https://discuss.elastic.co/t/runtime-cgo-pthread-create-failed-operation-not-permitted-sigabrt-abort-pc-0x7f46dd713a7c-m-2-sigcode-18446744073709551610/340253 "2023-08-07T10:11:06Z")

</div>

linxx@ubuntu:~/module/filebeat-6.8.13-linux-x86\_64$ ./filebeat -e 2023-08-07T11:29:18.205+0800 INFO instance/beat.go:611 Home path: \[/home/linxx/module/filebeat-6.8.13-linux-x86\_64\] Config path: \[/home/linxx/mo…

---

## [Ignore Spring Boot MVC endpoint and switch to @CaptureTransaction](https://discuss.elastic.co/t/ignore-spring-boot-mvc-endpoint-and-switch-to-capturetransaction/254948)

<div class="topic-metadata">

**Author:** [@ecostanzi](https://discuss.elastic.co/u/ecostanzi)\
**Replies:** 3\
**Last updated:** [November 30, 2020, 4:27pm UTC](https://discuss.elastic.co/t/ignore-spring-boot-mvc-endpoint-and-switch-to-capturetransaction/254948 "2020-11-30T16:27:03Z")

</div>

Kibana version: 7.4 Elasticsearch version: APM Server version: 7.4 APM Agent language and version: 1.18.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: deb Fresh install …

---

## [Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758)

<div class="topic-metadata">

**Author:** [@bob1985](https://discuss.elastic.co/u/bob1985)\
**Replies:** 3\
**Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758 "2020-11-04T08:32:16Z")

</div>

Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods Hi, Can you please help on below error: "message": "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and \[ \] is empty on this n…

---

## [Image comparaison in ES](https://discuss.elastic.co/t/image-comparaison-in-es/180427)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 3\
**Last updated:** [May 12, 2019, 11:21pm UTC](https://discuss.elastic.co/t/image-comparaison-in-es/180427 "2019-05-12T23:21:49Z")

</div>

i can diplay image texte in kibana using fscrawler and teseract, but now i want to compare images and serach if a part in an image appears in the indexed images (like comparaison); is there any way to do that

---

## [ElasticSearch Logstash JDBC: How to aggregate into different column names](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-how-to-aggregate-into-different-column-names/162323)

<div class="topic-metadata">

**Author:** [@mpssantos](https://discuss.elastic.co/u/mpssantos)\
**Replies:** 3\
**Last updated:** [December 28, 2018, 12:31pm UTC](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-how-to-aggregate-into-different-column-names/162323 "2018-12-28T12:31:08Z")

</div>

I am new to Elasticsearch and I am trying to use Logstash to load data to an index. Following is a partial of my losgstash config: filter { aggregate { task\_id =\> "%{code}" code =\> " map\['campaignId'\] = …

---

## [Data loss frequently](https://discuss.elastic.co/t/data-loss-frequently/147201)

<div class="topic-metadata">

**Author:** [@manish\_jaiswal](https://discuss.elastic.co/u/manish_jaiswal)\
**Replies:** 3\
**Last updated:** [September 5, 2018, 10:59am UTC](https://discuss.elastic.co/t/data-loss-frequently/147201 "2018-09-05T10:59:25Z")

</div>

we have more than 135 filebeat running on different instance. each sending data to more than 10 pipeline. getting error on most of the filebeat(Failed to publish events: temporary bulk send failure): 2018-09-04T17:39:2…

---

## [I can not view sensor data](https://discuss.elastic.co/t/i-can-not-view-sensor-data/67672)

<div class="topic-metadata">

**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\
**Replies:** 3\
**Last updated:** [December 1, 2016, 5:34pm UTC](https://discuss.elastic.co/t/i-can-not-view-sensor-data/67672 "2016-12-01T17:34:10Z")

</div>

Hi, I receive this logstash data but I do not know how to visualize them together, in the same vizulization. With the concrete data that gives me id\_secret:408425467 raw:noraw parser\_type:1 frame\_type:128 frame\_n…

---

## [Error installing Sense Plugin](https://discuss.elastic.co/t/error-installing-sense-plugin/59163)

<div class="topic-metadata">

**Author:** [@ash.vaidya94](https://discuss.elastic.co/u/ash.vaidya94)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 11:03am UTC](https://discuss.elastic.co/t/error-installing-sense-plugin/59163 "2016-08-30T11:03:54Z")

</div>

Hi, I've installed elasticsearch 2.3.5 and kibana 4.5.4 I manually downloaded the sense beta7 tar file, and tried installing using the command bin/kibana plugin -i sense -u file:///PATH\_TO\_SENSE\_TAR\_FILE However, i get a…

---

## [Remote log file](https://discuss.elastic.co/t/remote-log-file/53725)

<div class="topic-metadata">

**Author:** [@franzwong](https://discuss.elastic.co/u/franzwong)\
**Replies:** 3\
**Last updated:** [June 24, 2016, 7:19am UTC](https://discuss.elastic.co/t/remote-log-file/53725 "2016-06-24T07:19:49Z")

</div>

I have a URL pointing to a log file. I can write a cron job to download (http get) this log file periodically. But I am just thinking whether filebeat will reset its cursor to the file after download. Also will it send d…

---

## [Aggregate fields from different event](https://discuss.elastic.co/t/aggregate-fields-from-different-event/44078)

<div class="topic-metadata">

**Author:** [@rbkumar88](https://discuss.elastic.co/u/rbkumar88)\
**Replies:** 3\
**Last updated:** [April 5, 2016, 7:07pm UTC](https://discuss.elastic.co/t/aggregate-fields-from-different-event/44078 "2016-04-05T19:07:48Z")

</div>

Hi, Please help me setting the filter plugin for the following scenario. Say I have the following scenario INFO - 12345 - TASK\_START - start INFO - 12345 - SQL - sqlQuery1 - 12 INFO - 12345 - SQL - sqlQuery2 - 34 …

---

## [Managing ES servers with differing data disk sizes](https://discuss.elastic.co/t/managing-es-servers-with-differing-data-disk-sizes/18953)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 3\
**Last updated:** [July 29, 2014, 9:29pm UTC](https://discuss.elastic.co/t/managing-es-servers-with-differing-data-disk-sizes/18953 "2014-07-29T21:29:50Z")

</div>

Hello ES users, I have a question about how to manage an ES cluster where the servers have different sized data disks. I have 4 servers with 1 x 1TB disks for ES data, and I am planning on adding an additional 2 se…

---

## [Trying to calculate MTTD (Mean Time To Detect)](https://discuss.elastic.co/t/trying-to-calculate-mttd-mean-time-to-detect/384517)

<div class="topic-metadata">

**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\
**Replies:** 4\
**Last updated:** [June 18, 2026, 12:00pm UTC](https://discuss.elastic.co/t/trying-to-calculate-mttd-mean-time-to-detect/384517 "2026-06-18T12:00:58Z")

</div>

Hello all, I have been trying to calculate the MTTD, which consists of the difference between the case creation date and the first update of the case. However, when updating the case, the updated\_at field gets updated a…

---

## [Cannot Edit the configuration of Logs Stream on Kibana UI](https://discuss.elastic.co/t/cannot-edit-the-configuration-of-logs-stream-on-kibana-ui/339981)

<div class="topic-metadata">

**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\
**Replies:** 7\
**Last updated:** [February 8, 2024, 11:45am UTC](https://discuss.elastic.co/t/cannot-edit-the-configuration-of-logs-stream-on-kibana-ui/339981 "2024-02-08T11:45:02Z")

</div>

Does anyone know how to solve this? It seems I can't change the settings of Logs Stream. The input field not clickable. I just want to change the Log indices. I tried to restart my elastic and kibana but it's still…

---

## [Convert json nested fields into integer](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 7\
**Last updated:** [July 8, 2022, 4:23pm UTC](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167 "2022-07-08T16:23:35Z")

</div>

Hi. I am trying to convert a field read by a json filter in logstash. I am used to convert fields from other sources, but with this nested field from a json log file, I cannot convert a quoted number string to a integer. …

---

## [Kibana not splitting fields by dot anymore](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826)

<div class="topic-metadata">

**Author:** [@fredsted](https://discuss.elastic.co/u/fredsted)\
**Replies:** 7\
**Last updated:** [February 9, 2022, 10:01am UTC](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826 "2022-02-09T10:01:01Z")

</div>

Hello, I'm wondering why Kibana has stopped splitting fields. For example, we used to have separate fields for "cloud.provider", "cloud.machine.type", but now it's just a single "cloud" field. It's interesting that …

---

## [Attempting to reconnect to backoff(async(tcp://localhost:5044)) with 11 reconnect attempt(s)](https://discuss.elastic.co/t/attempting-to-reconnect-to-backoff-async-tcp-localhost-5044-with-11-reconnect-attempt-s/205842)

<div class="topic-metadata">

**Author:** [@kavindu\_manaram](https://discuss.elastic.co/u/kavindu_manaram)\
**Replies:** 1\
**Last updated:** [October 30, 2019, 1:41pm UTC](https://discuss.elastic.co/t/attempting-to-reconnect-to-backoff-async-tcp-localhost-5044-with-11-reconnect-attempt-s/205842 "2019-10-30T13:41:06Z")

</div>

My filebeat, logstash and kibana works perfectly and I set logstash as a windows service usiing Nssm.exe after that filebeat refuse to connect logstash with error Attempting to reconnect to backoff(async(tcp://localhos…

---

## [How to send Query output as an Email](https://discuss.elastic.co/t/how-to-send-query-output-as-an-email/180268)

<div class="topic-metadata">

**Author:** [@jskharay](https://discuss.elastic.co/u/jskharay)\
**Replies:** 1\
**Last updated:** [May 9, 2019, 10:01am UTC](https://discuss.elastic.co/t/how-to-send-query-output-as-an-email/180268 "2019-05-09T10:01:43Z")

</div>

Hi Everyone, I'm stuck at an simple query. Thing is that we need to send an alert email to administrator if there are more than 3 exception came into process. Exceptions are covered under TransactionStatus key in json. …

---

## [Index READONLY](https://discuss.elastic.co/t/index-readonly/178802)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 1\
**Last updated:** [April 28, 2019, 2:28pm UTC](https://discuss.elastic.co/t/index-readonly/178802 "2019-04-28T14:28:26Z")

</div>

I am having a weird issue where my index keeps going into a readonly status. I understand that when the disk space is low, the index does this as a safety measure. The disk was getting full up to a certain point and then…

---

## [Filebeat Startup (version 1.2)](https://discuss.elastic.co/t/filebeat-startup-version-1-2/52216)

<div class="topic-metadata">

**Author:** [@Atul\_Patel](https://discuss.elastic.co/u/Atul_Patel)\
**Replies:** 1\
**Last updated:** [June 9, 2016, 10:32am UTC](https://discuss.elastic.co/t/filebeat-startup-version-1-2/52216 "2016-06-09T10:32:46Z")

</div>

Hi all, we are using version 1.2.while starting the filebeat using sudo service filebeat start|stop|restart from the command it is saying OK but when i greap for ps-ef | grep filebeat the process is not started. Pls …

---

## [Deep Pagination vs Scroll API](https://discuss.elastic.co/t/deep-pagination-vs-scroll-api/29782)

<div class="topic-metadata">

**Author:** [@siddharth\_gupta](https://discuss.elastic.co/u/siddharth_gupta)\
**Replies:** 1\
**Last updated:** [September 22, 2015, 12:54pm UTC](https://discuss.elastic.co/t/deep-pagination-vs-scroll-api/29782 "2015-09-22T12:54:47Z")

</div>

Hello, We are dealing with around 500k documents. Should I use Deep Pagination or Scroll API to display the search results to the user in production ? Can someone please suggest something ? Thanks Siddharth

---

## [Fwd: Connect Rails app to elasticsearch server](https://discuss.elastic.co/t/fwd-connect-rails-app-to-elasticsearch-server/25985)

<div class="topic-metadata">

**Author:** [@Ankit\_Agarwal](https://discuss.elastic.co/u/Ankit_Agarwal)\
**Replies:** 1\
**Last updated:** [July 21, 2015, 2:46pm UTC](https://discuss.elastic.co/t/fwd-connect-rails-app-to-elasticsearch-server/25985 "2015-07-21T14:46:08Z")

</div>

I am using logstash+elasticsearch to index server logs. The Elasticsearch server is running at localhost:9200 with millions of server log docs. I also have a Rails app running at localhost:3000. I need to connect this ra…

---

## [Pattern analyzer regex help](https://discuss.elastic.co/t/pattern-analyzer-regex-help/310694)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 2\
**Last updated:** [July 27, 2022, 12:31pm UTC](https://discuss.elastic.co/t/pattern-analyzer-regex-help/310694 "2022-07-27T12:31:10Z")

</div>

Got a question regarding the pattern analyzer. Example text: S6UlZgYCJaSIQcy03OOA==Ieuwc7Ix/CQfwoDSOVJl== 2oZjflRSRkcj4/OHcp78== It's encrypted (each letter is hashed to 20 characters ending with == sign). I would like…

---

## [“Cache Management: Insecure Policy” vulnerability detected after version upgrade](https://discuss.elastic.co/t/cache-management-insecure-policy-vulnerability-detected-after-version-upgrade/344627)

<div class="topic-metadata">

**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\
**Replies:** 2\
**Last updated:** [October 13, 2023, 9:08am UTC](https://discuss.elastic.co/t/cache-management-insecure-policy-vulnerability-detected-after-version-upgrade/344627 "2023-10-13T09:08:16Z")

</div>

After I upgraded the elastic stack to 8.6.0 and carried out a vulnerability scan on Kibana using the microfocus tool, there were vulnerabilities as follows: I have made changes to the Kibana configuration, namely cha…

---

## [Transaction trace incomplete](https://discuss.elastic.co/t/transaction-trace-incomplete/295269)

<div class="topic-metadata">

**Author:** [@benjaminCDV](https://discuss.elastic.co/u/benjaminCDV)\
**Replies:** 2\
**Last updated:** [January 31, 2022, 9:02am UTC](https://discuss.elastic.co/t/transaction-trace-incomplete/295269 "2022-01-31T09:02:55Z")

</div>

Kibana version: 7.16 Elasticsearch version: 7.16 APM Server version: 7.16 APM Agent language and version: PHP v1.4 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and versi…

---

## [How to pass parameters to a datavisualisation through a dashboard URL](https://discuss.elastic.co/t/how-to-pass-parameters-to-a-datavisualisation-through-a-dashboard-url/246767)

<div class="topic-metadata">

**Author:** [@Ted1](https://discuss.elastic.co/u/Ted1)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 2:42pm UTC](https://discuss.elastic.co/t/how-to-pass-parameters-to-a-datavisualisation-through-a-dashboard-url/246767 "2020-08-28T14:42:48Z")

</div>

Hi folks, I'm quite new to Kibana and can't find a solution to my problem. I got a visualisation (based on the "enhanced table" plugin) and I'm able to pass parameters through its URL (rf {{col0}} and {{col1}} in the c…

[Previous page](https://discuss.elastic.co/top.md?page=1578&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1580&per_page=50&period=all)
