# Top **URL:** https://discuss.elastic.co/top.md?page=1581&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1582 --- ## [Filebeat input paths](https://discuss.elastic.co/t/filebeat-input-paths/86809)
**Author:** [@kalman](https://discuss.elastic.co/u/kalman)\ **Replies:** 3\ **Last updated:** [May 26, 2017, 5:49am UTC](https://discuss.elastic.co/t/filebeat-input-paths/86809 "2017-05-26T05:49:57Z")
I'm working on a system that is monitoring logs files from a about 10 network paths. both the log files and the elastic will be running on windows mentions. I wanted to know if filebeat can handle the number of network p… --- ## [Search after with default sort (\_score)?](https://discuss.elastic.co/t/search-after-with-default-sort--score/77780)
**Author:** [@Nowhy](https://discuss.elastic.co/u/Nowhy)\ **Replies:** 0\ **Last updated:** [March 8, 2017, 7:28am UTC](https://discuss.elastic.co/t/search-after-with-default-sort--score/77780 "2017-03-08T07:28:02Z")
search\_after seems can only be used conjunction with sort I tried with sort: {"\_score": 'desc'}, it worked, but what if I just want the default sort \_score:asc ? It would be "Sort must contain at least one field". --- ## [Quick question. Logstash Multiple output to ES](https://discuss.elastic.co/t/quick-question-logstash-multiple-output-to-es/57521)
**Author:** [@gh0stid](https://discuss.elastic.co/u/gh0stid)\ **Replies:** 3\ **Last updated:** [August 10, 2016, 4:33pm UTC](https://discuss.elastic.co/t/quick-question-logstash-multiple-output-to-es/57521 "2016-08-10T16:33:48Z")
Hello, once again, its me ! ( yeah .. i know .. ) anyway! I would like to know how would someone succeed in re-indexing to a second index only part of the "logs" that match XY filter. lemme give you an exemple... … --- ## [Kibana filter-bar now longer shows](https://discuss.elastic.co/t/kibana-filter-bar-now-longer-shows/28287)
**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\ **Replies:** 3\ **Last updated:** [September 1, 2015, 2:55am UTC](https://discuss.elastic.co/t/kibana-filter-bar-now-longer-shows/28287 "2015-09-01T02:55:10Z")
When a user clicks on an item to create a filter the "filter-bar" used to appear. That section of the UI no longer shows. The filter, however, is applied correctly. This is not happening in other instances of Kiban… --- ## [Error in Kibana "xpack =\> unable to get local issuer certificate"](https://discuss.elastic.co/t/error-in-kibana-xpack-unable-to-get-local-issuer-certificate/249226)
**Author:** [@Abhishek\_Kumar7](https://discuss.elastic.co/u/Abhishek_Kumar7)\ **Replies:** 1\ **Last updated:** [September 21, 2020, 12:24am UTC](https://discuss.elastic.co/t/error-in-kibana-xpack-unable-to-get-local-issuer-certificate/249226 "2020-09-21T00:24:47Z")
I have a single node server with ES and Kibana hosted on it. I have put them behind an ELB , under a domain name . Assume :- kibana.xyz.com and elasticsearch.xyz.com I have enabled http ssl in elasticsearch and copy pa… --- ## [Searching and indexing priority](https://discuss.elastic.co/t/searching-and-indexing-priority/248166)
**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:56pm UTC](https://discuss.elastic.co/t/searching-and-indexing-priority/248166 "2020-09-10T19:56:11Z")
Hello, generally speaking, how does Elasticsearch handles searching "priority" while indexing ? I noticed that when someone performs a query with a timerange of multiple weeks, indexing almost halts while the query is … --- ## [Unable to use es-hadoop with TLS enabled on my ES cluster](https://discuss.elastic.co/t/unable-to-use-es-hadoop-with-tls-enabled-on-my-es-cluster/197225)
**Author:** [@mstarensier](https://discuss.elastic.co/u/mstarensier)\ **Replies:** 1\ **Last updated:** [September 6, 2019, 4:16pm UTC](https://discuss.elastic.co/t/unable-to-use-es-hadoop-with-tls-enabled-on-my-es-cluster/197225 "2019-09-06T16:16:38Z")
I'm having trouble configuring TLS for es-hadoop. Running 7.2 Elasticsearch in a 3 node cluster (1 data, 1 master, 1 coordinating which hosts kibana). Running Spark on an EMR cluster in the same vpn. Before enabling xp… --- ## [\[elasticsearch-py\] problem update array of json](https://discuss.elastic.co/t/elasticsearch-py-problem-update-array-of-json/110163)
**Author:** [@tab](https://discuss.elastic.co/u/tab)\ **Replies:** 1\ **Last updated:** [December 5, 2017, 11:32am UTC](https://discuss.elastic.co/t/elasticsearch-py-problem-update-array-of-json/110163 "2017-12-05T11:32:53Z")
Hello, this is my first post but I spent a lot of time for searching a solution to my problem. I have a document of this type: doc = { "id": 1, "sites": { "google.com": \[{ "date": "01/01/1970", "last\_visit": "30/… --- ## [Kibana 5.5 Metrics Visualization Hyperlink Customization?](https://discuss.elastic.co/t/kibana-5-5-metrics-visualization-hyperlink-customization/96475)
**Author:** [@huy7070](https://discuss.elastic.co/u/huy7070)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 11:19pm UTC](https://discuss.elastic.co/t/kibana-5-5-metrics-visualization-hyperlink-customization/96475 "2017-08-09T23:19:40Z")
Hi. I was wondering if there was documentation for how the Metrics plugin works as there are a lot of injections/dependencies? I need to add an option to make the label a hyperlink. I managed to customize the metrics vis… --- ## [Logstash : run at periodical interval](https://discuss.elastic.co/t/logstash-run-at-periodical-interval/79625)
**Author:** [@Lemec\_Cinq](https://discuss.elastic.co/u/Lemec_Cinq)\ **Replies:** 1\ **Last updated:** [March 22, 2017, 5:39pm UTC](https://discuss.elastic.co/t/logstash-run-at-periodical-interval/79625 "2017-03-22T17:39:32Z")
I would like to launch my logstash task at periodical interval: Do you know if there is a way and if i should add some stuffs to my conf file bellow ? input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver:/… --- ## [Question about logrotate with gzip](https://discuss.elastic.co/t/question-about-logrotate-with-gzip/69414)
**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\ **Replies:** 1\ **Last updated:** [December 20, 2016, 8:53am UTC](https://discuss.elastic.co/t/question-about-logrotate-with-gzip/69414 "2016-12-20T08:53:08Z")
Hi, I have a question about the behavior of filebeat with logrotate and gzip. I had a problem with my logstash server that takes all filebeats events. This logstash was stopped so all filebeats could send logs to it. … --- ## [How to config network.host in elasticsearch.yml?](https://discuss.elastic.co/t/how-to-config-network-host-in-elasticsearch-yml/67733)
**Author:** [@lvctao](https://discuss.elastic.co/u/lvctao)\ **Replies:** 1\ **Last updated:** [December 1, 2016, 9:07am UTC](https://discuss.elastic.co/t/how-to-config-network-host-in-elasticsearch-yml/67733 "2016-12-01T09:07:58Z")
elasticsearch version: 5.0.2 java version: jdk-8u111 issue: I install my elasticsearch on the server and I want to visit it from localhost. How can I config the network.host. I get some solutions from website, config n… --- ## [Nested Aggregations : grouper par attribut d'un parent](https://discuss.elastic.co/t/nested-aggregations-grouper-par-attribut-dun-parent/32020)
**Author:** [@t.choquet](https://discuss.elastic.co/u/t.choquet)\ **Replies:** 1\ **Last updated:** [October 14, 2015, 9:30am UTC](https://discuss.elastic.co/t/nested-aggregations-grouper-par-attribut-dun-parent/32020 "2015-10-14T09:30:32Z")
Bonjour, je cale pour récupérer les résultats d'une agrégation avec des objets imbriqués. Soit le mapping suivant : { "mappings":{ "client":{ "\_all":{ "enabled":false },… --- ## [Can I setup an index as "read-only" in just a few nodes, and expect ES to route correctly?](https://discuss.elastic.co/t/can-i-setup-an-index-as-read-only-in-just-a-few-nodes-and-expect-es-to-route-correctly/9211)
**Author:** [@anon44344346](https://discuss.elastic.co/u/anon44344346)\ **Replies:** 1\ **Last updated:** [October 2, 2012, 5:55pm UTC](https://discuss.elastic.co/t/can-i-setup-an-index-as-read-only-in-just-a-few-nodes-and-expect-es-to-route-correctly/9211 "2012-10-02T17:55:48Z")
Say I have 5 nodes, and one one index with the standard 1 shard - 5 replicas configuration. Can I configure the index, on a per node basis, as "read-only" in , say, 4 of those nodes, and expect that when an inde… --- ## [Different Version Elasticsearch, Kibana, Metricbeat](https://discuss.elastic.co/t/different-version-elasticsearch-kibana-metricbeat/327136)
**Author:** [@Tw1cUser](https://discuss.elastic.co/u/Tw1cUser)\ **Replies:** 2\ **Last updated:** [March 7, 2023, 5:47am UTC](https://discuss.elastic.co/t/different-version-elasticsearch-kibana-metricbeat/327136 "2023-03-07T05:47:01Z")
is it ok if use Elasticsearch, Kibana, Metricbeat version 8.6.1 to connect to version 8.6.2? --- ## [How to hot change EUI distributed CSS file?](https://discuss.elastic.co/t/how-to-hot-change-eui-distributed-css-file/275000)
**Author:** [@danburi](https://discuss.elastic.co/u/danburi)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 8:40pm UTC](https://discuss.elastic.co/t/how-to-hot-change-eui-distributed-css-file/275000 "2021-06-08T20:40:52Z")
I have Kibana v7.10.2 on linux system. Kibana loads CSS resource http://localhost:5601/36136/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.v7.light.css the only relevant file can be found at: ./node\_modules/@kbn/ui-s… --- ## [키바나 대시보드 데이터 접근](https://discuss.elastic.co/t/topic/199597)
**Author:** [@111208](https://discuss.elastic.co/u/111208)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 8:30am UTC](https://discuss.elastic.co/t/topic/199597 "2019-09-18T08:30:37Z")
키바나에 표시되는 각 카드별 데이터에 접근하는 방법이 있나요? 예를 들어, REST API가 있다면, 카드의 id 넘겨서 해당 카드에 표시되는 데이터 관련 테이블 및 컬럼 카드의 id 넘겨서 해당 카드에 표시되는 데이터 자체. 방법이 없다면, 카드 Inspector 의 Request Query 에 표시되는 정보라도 programmatic 하게 얻어오는 방법을 알고자 합니다. 키바나… --- ## [Delete syslog fields from logstream](https://discuss.elastic.co/t/delete-syslog-fields-from-logstream/157891)
**Author:** [@Gegi\_K](https://discuss.elastic.co/u/Gegi_K)\ **Replies:** 2\ **Last updated:** [November 23, 2018, 7:27am UTC](https://discuss.elastic.co/t/delete-syslog-fields-from-logstream/157891 "2018-11-23T07:27:42Z")
Hi there, Sorry if this question is being stupid, but I'm trying to get something weitrd working... the deal is I have some Firewalls which send some data to ElasticSearch via LogStash. all works fine, except the only f… --- ## [How to ingest multiple files](https://discuss.elastic.co/t/how-to-ingest-multiple-files/131615)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 2\ **Last updated:** [May 13, 2018, 11:11pm UTC](https://discuss.elastic.co/t/how-to-ingest-multiple-files/131615 "2018-05-13T23:11:27Z")
Hello, I need to ingest multiple files with the same categorty in the {index, document\_type} so i tried to use "\*" to do that but it dosen't work (the pipline is runinng but it dosen't ingest the data). this is my con… --- ## [Spring data elasticsearch and @JsonRootName](https://discuss.elastic.co/t/spring-data-elasticsearch-and-jsonrootname/109072)
**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\ **Replies:** 2\ **Last updated:** [November 24, 2017, 10:41pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-and-jsonrootname/109072 "2017-11-24T22:41:26Z")
Hi, I use spring-boot-starter-data-elasticsearch dependency in my Java spring project to query ES 2.4.0 My json's look like this, { "event":{ "eventName":"Man U vs Arsenal", "eventDateTime":"Mon 24 Oct … --- ## [ESRally Metrics Definition](https://discuss.elastic.co/t/esrally-metrics-definition/101850)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 2\ **Last updated:** [September 29, 2017, 9:29am UTC](https://discuss.elastic.co/t/esrally-metrics-definition/101850 "2017-09-29T09:29:57Z")
I am working with ESRally and would like to understand what the various metrics mean. I tried reading the documentation provided here: http://esrally.readthedocs.io/en/latest/summary\_report.html, but it does not convey d… --- ## [TimeLion Question](https://discuss.elastic.co/t/timelion-question/87799)
**Author:** [@ppierce01](https://discuss.elastic.co/u/ppierce01)\ **Replies:** 2\ **Last updated:** [June 1, 2017, 11:16am UTC](https://discuss.elastic.co/t/timelion-question/87799 "2017-06-01T11:16:06Z")
I have an index that I can use to filter my data using this: agencyid:1 AND \_type:FooBar. This works and shows the expected data Now I have a Timelion visualization that I would like to use and apply the same filter. … --- ## [Logstash adds fields to JSON by parsing another field](https://discuss.elastic.co/t/logstash-adds-fields-to-json-by-parsing-another-field/84032)
**Author:** [@Li\_Cao](https://discuss.elastic.co/u/Li_Cao)\ **Replies:** 2\ **Last updated:** [April 28, 2017, 5:28pm UTC](https://discuss.elastic.co/t/logstash-adds-fields-to-json-by-parsing-another-field/84032 "2017-04-28T17:28:41Z")
Hi! I am trying to set up a pipeline to ingest some logs from Kafka cluster using LogStash and into elasticsearch. The message on Kafka is a JSON string like: {"a"="123", "b"="456", msg="this is a test"} Sometim… --- ## [Kibana displays Unix default date](https://discuss.elastic.co/t/kibana-displays-unix-default-date/60850)
**Author:** [@Mahdy\_S](https://discuss.elastic.co/u/Mahdy_S)\ **Replies:** 2\ **Last updated:** [September 26, 2016, 7:54am UTC](https://discuss.elastic.co/t/kibana-displays-unix-default-date/60850 "2016-09-26T07:54:59Z")
I have uploaded some logs using logstash where I have read the @timestamp field from the logs timestamp using the date filter. I needed to make a histogram based on the hour of the day for all days (i.e. to have values f… --- ## [Bad File descriptor error with Large dictionary file (\>10MB) in Logstash](https://discuss.elastic.co/t/bad-file-descriptor-error-with-large-dictionary-file-10mb-in-logstash/56225)
**Author:** [@nishant\_goel](https://discuss.elastic.co/u/nishant_goel)\ **Replies:** 2\ **Last updated:** [July 24, 2016, 6:31pm UTC](https://discuss.elastic.co/t/bad-file-descriptor-error-with-large-dictionary-file-10mb-in-logstash/56225 "2016-07-24T18:31:12Z")
I have multiple log messages in a file which I am processing using logstash filter plugins. Then, the filtered logs are getting sent to elasticsearch. There is one field called addID in a log message. I want to drop al… --- ## [Elastic search 2.2 and HTTP delete api?](https://discuss.elastic.co/t/elastic-search-2-2-and-http-delete-api/44637)
**Author:** [@asharif](https://discuss.elastic.co/u/asharif)\ **Replies:** 2\ **Last updated:** [March 17, 2016, 3:47pm UTC](https://discuss.elastic.co/t/elastic-search-2-2-and-http-delete-api/44637 "2016-03-17T15:47:46Z")
curl -XDELETE "localhost:9200/{index}/{type}/\_query?q={k}:{v}" use to delete documents from the index that matched the query. I tried this on 2.2 and it doesn't work. I tried to find it in the documentation and coul… --- ## [What does this warning mean? Selector return prematurely](https://discuss.elastic.co/t/what-does-this-warning-mean-selector-return-prematurely/191171)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 9:33am UTC](https://discuss.elastic.co/t/what-does-this-warning-mean-selector-return-prematurely/191171 "2019-07-18T09:33:23Z")
I have nodejs server that is trying to push alot of docs into elasticsearch (single node). I get these messages in my elastic log: \[2019-07-18T12:36:50,705\]\[WARN \]\[i.n.c.n.NioEventLoop \] Selector.select() returned … --- ## [Snort Integration With Elastic Stack](https://discuss.elastic.co/t/snort-integration-with-elastic-stack/116158)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 0\ **Last updated:** [January 19, 2018, 4:37am UTC](https://discuss.elastic.co/t/snort-integration-with-elastic-stack/116158 "2018-01-19T04:37:55Z")
Hello Team, I want to integrate Snort IDS with Elastic Stack if any documentation is their for this integration please suggest me. Thnks & Regards, Krunal K. --- ## [Logstash Shutdownwatcher](https://discuss.elastic.co/t/logstash-shutdownwatcher/97228)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 0\ **Last updated:** [August 16, 2017, 10:00am UTC](https://discuss.elastic.co/t/logstash-shutdownwatcher/97228 "2017-08-16T10:00:34Z")
Hello, I noticed lots of warning in the logs of Logstash. 11:54:50,698\]\[WARN \]\[logstash.shutdownwatcher \] {"inflight\_count"=\>3864... 11:54:55,706\]\[WARN \]\[logstash.shutdownwatcher \] {"inflight\_count"=\>4250... 11:55:00,8… --- ## [Cannot consume elasticsearch client in angular application](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029)
**Author:** [@Ola\_Aboamer](https://discuss.elastic.co/u/Ola_Aboamer)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 8:00pm UTC](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029 "2021-12-15T20:00:39Z")
Hi There I am using Angular10 and "@elastic/Elasticsearch": "^7.15.0", and getting the following dependency errors, ERROR in ./node\_modules/@elastic/elasticsearch/lib/Connection.js Module not found: Error: Can't re… --- ## [Error trying to setup filebeat](https://discuss.elastic.co/t/error-trying-to-setup-filebeat/257011)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 12:26pm UTC](https://discuss.elastic.co/t/error-trying-to-setup-filebeat/257011 "2020-11-30T12:26:26Z")
i'm geting this error trying to setup Filebeat 7.10 on a 7.10 Elasticsearch cluster: ➜ filebeat ./filebeat setup Overwriting ILM policy is disabled. Set \`setup.ilm.overwrite: true… --- ## [Filebeat Threat Intel module, multiple Anomali filesets](https://discuss.elastic.co/t/filebeat-threat-intel-module-multiple-anomali-filesets/297761)
**Author:** [@Rob3](https://discuss.elastic.co/u/Rob3)\ **Replies:** 7\ **Last updated:** [February 21, 2022, 5:20pm UTC](https://discuss.elastic.co/t/filebeat-threat-intel-module-multiple-anomali-filesets/297761 "2022-02-21T17:20:15Z")
How can multiple Anomali filsets be enabled? For example, if I want to enable both collections 135 and 136 as per below, seems that the last read wins and only collection 136 will be configured. Is this possible? Can'… --- ## [Kibana DevTools autocomplete refresh cause circuit breaker\\ OOM on coordinators nodes](https://discuss.elastic.co/t/kibana-devtools-autocomplete-refresh-cause-circuit-breaker-oom-on-coordinators-nodes/275723)
**Author:** [@val16384](https://discuss.elastic.co/u/val16384)\ **Replies:** 7\ **Last updated:** [June 14, 2021, 8:19pm UTC](https://discuss.elastic.co/t/kibana-devtools-autocomplete-refresh-cause-circuit-breaker-oom-on-coordinators-nodes/275723 "2021-06-14T20:19:21Z")
Hey guys, We have issue with constantly increasing of Old gen part in JVM heap on coordinator nodes till OOM. As I can understand the issue - memory leaking\\OOM precisely correlated with requests to ES that gene… --- ## [Filters set not impacting graph?](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 10:56am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512 "2021-04-06T10:56:05Z")
I have two filters on a workpad, one for time and one for customer in this case. timefilterControl compact=true column="startTime" filterGroup="perfGroup" | render esdocs index="dynatrace-problems-" fields="customer" … --- ## [How to enforce accepting one specific index mapping type?](https://discuss.elastic.co/t/how-to-enforce-accepting-one-specific-index-mapping-type/232522)
**Author:** [@jmong](https://discuss.elastic.co/u/jmong)\ **Replies:** 7\ **Last updated:** [May 19, 2020, 9:58pm UTC](https://discuss.elastic.co/t/how-to-enforce-accepting-one-specific-index-mapping-type/232522 "2020-05-19T21:58:30Z")
We have a daily generic logstash-YYYY.mm.dd index that many clients insert various documents into. However, one client was using meta-field “{\_type: posts}” while others' documents were being rejected because they used “… --- ## [Single field object to Elasticsearch using Logstash](https://discuss.elastic.co/t/single-field-object-to-elasticsearch-using-logstash/215735)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 9:31am UTC](https://discuss.elastic.co/t/single-field-object-to-elasticsearch-using-logstash/215735 "2020-02-13T09:31:17Z")
Hi Support, I have group concat field values like :slight\_smile: Document\_Type 1,2,3,4,5,6 In Elasticsearch field mapping with object type "Document\_Type": { "properties": { "d": { "typ… --- ## [Watcher mutilple actions and conditions](https://discuss.elastic.co/t/watcher-mutilple-actions-and-conditions/202951)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 7\ **Last updated:** [October 14, 2019, 6:57pm UTC](https://discuss.elastic.co/t/watcher-mutilple-actions-and-conditions/202951 "2019-10-14T18:57:31Z")
Hi Team , I am using watcher for calling webhook and email , it is working perfectly fine . But i need to apply one more condition and depending on that condition i want to call different email which is different from … --- ## [Add duration ( seconds \> 2 digits ) to timestamp with ruby filter](https://discuss.elastic.co/t/add-duration-seconds-2-digits-to-timestamp-with-ruby-filter/164666)
**Author:** [@Isilve28](https://discuss.elastic.co/u/Isilve28)\ **Replies:** 1\ **Last updated:** [January 17, 2019, 6:43pm UTC](https://discuss.elastic.co/t/add-duration-seconds-2-digits-to-timestamp-with-ruby-filter/164666 "2019-01-17T18:43:41Z")
Hi , I checked this topic, this one and also this one and any of them resolved my problem. I have start\_time and I want to add duration (in seconds) in order to get end\_time I have duration in seconds like this : 540… --- ## [Are there case studies about using intermediate queries in a search?](https://discuss.elastic.co/t/are-there-case-studies-about-using-intermediate-queries-in-a-search/161018)
**Author:** [@AlexisWilke](https://discuss.elastic.co/u/AlexisWilke)\ **Replies:** 7\ **Last updated:** [December 18, 2018, 6:14am UTC](https://discuss.elastic.co/t/are-there-case-studies-about-using-intermediate-queries-in-a-search/161018 "2018-12-18T06:14:47Z")
I want to allow my users to filter their search results by various tags. Imagine a WordPress like website where each blog post has a set of tags. When my users go to the advanced search page, they can select a number o… --- ## [Kibana 6.4.3 on windows can't create index pattern](https://discuss.elastic.co/t/kibana-6-4-3-on-windows-cant-create-index-pattern/159282)
**Author:** [@Joe\_Forex](https://discuss.elastic.co/u/Joe_Forex)\ **Replies:** 1\ **Last updated:** [December 4, 2018, 3:23pm UTC](https://discuss.elastic.co/t/kibana-6-4-3-on-windows-cant-create-index-pattern/159282 "2018-12-04T15:23:22Z")
I install kibana 6.4.3 on windows. It can't create index pattern.It show error POST http://localhost:5601/api/saved\_objects/index-pattern 403 (Forbidden) Detected an unhandled Promise rejection. Error: Forbidden comm… --- ## [Watcher: \[parse\_exception\] could not parse action \[Monitor/webhook\]. unknown action type \[method\]](https://discuss.elastic.co/t/watcher-parse-exception-could-not-parse-action-monitor-webhook-unknown-action-type-method/120621)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 1:20pm UTC](https://discuss.elastic.co/t/watcher-parse-exception-could-not-parse-action-monitor-webhook-unknown-action-type-method/120621 "2018-02-20T13:20:39Z")
"actions": { "log\_error": { "logging": { "text": "Service Down" } }, "webhook" : { "method" : "POST", "url" : "https://servicenow.com/api/incidents?actionUser=user", "body" : "{{ctx.watch\_id}}:{{ctx.payload.hits… --- ## [Class org.elasticsearch.spark.sql.SparkSQLCompatibilityLevel not found](https://discuss.elastic.co/t/class-org-elasticsearch-spark-sql-sparksqlcompatibilitylevel-not-found/76857)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 1\ **Last updated:** [March 12, 2017, 8:31pm UTC](https://discuss.elastic.co/t/class-org-elasticsearch-spark-sql-sparksqlcompatibilitylevel-not-found/76857 "2017-03-12T20:31:21Z")
Playing with es4Hadoop 5.2.1 and Spark, I built a Java application with Maven deps: \ \ \org.apache.spark\ \spark-core\_2.10\ \ **Author:** [@Robert\_Walter](https://discuss.elastic.co/u/Robert_Walter)\ **Replies:** 1\ **Last updated:** [August 17, 2016, 1:17pm UTC](https://discuss.elastic.co/t/snapshot-api-failed-to-derive-xcontent-from-offset-0-length-0/23152 "2016-08-17T13:17:45Z") Hi, unfortunately during the easter holidays the backup space of our ES cluster was running out of diskspace. We added some diskspace to the backup location, but we are getting this error when ES is trying to a… --- ## [How do I use kibana filter and graph on my website](https://discuss.elastic.co/t/how-do-i-use-kibana-filter-and-graph-on-my-website/53059)
**Author:** [@wldbs0508](https://discuss.elastic.co/u/wldbs0508)\ **Replies:** 1\ **Last updated:** [June 17, 2016, 5:11pm UTC](https://discuss.elastic.co/t/how-do-i-use-kibana-filter-and-graph-on-my-website/53059 "2016-06-17T17:11:25Z")
Hi, I would like to embed Kibana graphs and filtering option to my own webpage. I want that my website users have ability to change filter option such as date range and see different graph depends on the filter. In other… --- ## [Missing .kibana index in kibana 4.0](https://discuss.elastic.co/t/missing-kibana-index-in-kibana-4-0/52266)
**Author:** [@abhi.kedari](https://discuss.elastic.co/u/abhi.kedari)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 11:55pm UTC](https://discuss.elastic.co/t/missing-kibana-index-in-kibana-4-0/52266 "2016-06-08T23:55:28Z")
Is it possible to have .kibna index in kibana 4.0.\*? I need this because I would like to create visualization in kibana from my java code. If not is there any other way by which i can create new visualization from java c… --- ## [S3 v4 signatures for logstash input plugin](https://discuss.elastic.co/t/s3-v4-signatures-for-logstash-input-plugin/46390)
**Author:** [@Abey\_Thomas](https://discuss.elastic.co/u/Abey_Thomas)\ **Replies:** 1\ **Last updated:** [April 5, 2016, 11:08pm UTC](https://discuss.elastic.co/t/s3-v4-signatures-for-logstash-input-plugin/46390 "2016-04-05T23:08:04Z")
Hi , I was trying to collect all my AWS config logs from S3 via logstash and could see it list the filenames fine but once listing is complete it starts to download the S3 file and that fails with an error "Error: Requ… --- ## [I use mmapfs storage type, but es cluster doesn't use available memory](https://discuss.elastic.co/t/i-use-mmapfs-storage-type-but-es-cluster-doesnt-use-available-memory/35261)
**Author:** [@t7s](https://discuss.elastic.co/u/t7s)\ **Replies:** 7\ **Last updated:** [November 23, 2015, 9:03am UTC](https://discuss.elastic.co/t/i-use-mmapfs-storage-type-but-es-cluster-doesnt-use-available-memory/35261 "2015-11-23T09:03:37Z")
I have a es cluster with 70gb data, using mmapfs. There is a lot of available memory, but es cluster don't use so performance is not good 5 servers -Xms32g -Xmx32g -XX:PermSize=1000m -XX:MaxPermSize=1000m -XX:NewSize… --- ## [Performance issues when flagging a document in Elasticsearch](https://discuss.elastic.co/t/performance-issues-when-flagging-a-document-in-elasticsearch/21191)
**Author:** [@Dror\_Atariah](https://discuss.elastic.co/u/Dror_Atariah)\ **Replies:** 7\ **Last updated:** [December 10, 2014, 4:05pm UTC](https://discuss.elastic.co/t/performance-issues-when-flagging-a-document-in-elasticsearch/21191 "2014-12-10T16:05:52Z")
Assume that I want to be able to flag documents in an index according to their attributes: isFoo and isBar \[1\]. As far as I understand, there are two approaches: 1) Use dedicated fields for the flags: If the docum… --- ## [Search Periodically Failing ... Even After Many Refresh Intervals](https://discuss.elastic.co/t/search-periodically-failing-even-after-many-refresh-intervals/10962)
**Author:** [@amos\_wood](https://discuss.elastic.co/u/amos_wood)\ **Replies:** 7\ **Last updated:** [March 1, 2013, 4:12pm UTC](https://discuss.elastic.co/t/search-periodically-failing-even-after-many-refresh-intervals/10962 "2013-03-01T16:12:01Z")
Here is my search use case which seems to be failing periodically: 1. Create an index with a 500ms refresh interval 2. Write a document to an index 3. Pause for between 500ms and 5s 4. Attempt to search… --- ## [Getting VersionConflictEngineException exception?](https://discuss.elastic.co/t/getting-versionconflictengineexception-exception/7159)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 1\ **Last updated:** [March 28, 2012, 10:51am UTC](https://discuss.elastic.co/t/getting-versionconflictengineexception-exception/7159 "2012-03-28T10:51:22Z")
Hi All I am using rabbitmq river to index document. Also i have read following document http://www.elasticsearch.org/guide/reference/api/bulk.html\> prepared message format: After publishing message on ES ser… [Previous page](https://discuss.elastic.co/top.md?page=1580&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1582&per_page=50&period=all)