# Top

**URL:** https://discuss.elastic.co/top.md?page=1582&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1583

---

## [How to configure the anonymous login to kibana](https://discuss.elastic.co/t/how-to-configure-the-anonymous-login-to-kibana/347208)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 6\
**Last updated:** [November 17, 2023, 10:15am UTC](https://discuss.elastic.co/t/how-to-configure-the-anonymous-login-to-kibana/347208 "2023-11-17T10:15:52Z")

</div>

Hi Team, After deploying elasticsearch and kibana throgh eck, how to configure anonymous login to kibana 8.5.3 Thanks, SM

---

## [Filebeat 7.17 is not logging to files under Ubuntu](https://discuss.elastic.co/t/filebeat-7-17-is-not-logging-to-files-under-ubuntu/313671)

<div class="topic-metadata">

**Author:** [@andreycha](https://discuss.elastic.co/u/andreycha)\
**Replies:** 6\
**Last updated:** [September 5, 2022, 12:55pm UTC](https://discuss.elastic.co/t/filebeat-7-17-is-not-logging-to-files-under-ubuntu/313671 "2022-09-05T12:55:39Z")

</div>

Hi, I have a question similar to this one: Filebeat not logging to /var/log/filebeat With the exception that the version I'm using (7.17.6, DEB package) does not use "-e" by default according to documentation: Filebeat…

---

## [Synonyms relevance help](https://discuss.elastic.co/t/synonyms-relevance-help/290172)

<div class="topic-metadata">

**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\
**Replies:** 6\
**Last updated:** [November 29, 2021, 5:38am UTC](https://discuss.elastic.co/t/synonyms-relevance-help/290172 "2021-11-29T05:38:40Z")

</div>

HI, I am trying to configured synonyms in Elasticsearch and done the sample configuration as well. But not getting expected relevancy when i am searching data. Below is index Mapping configuration: PUT /test\_index { …

---

## [Trouble Mutating](https://discuss.elastic.co/t/trouble-mutating/255598)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 6\
**Last updated:** [November 17, 2020, 5:36pm UTC](https://discuss.elastic.co/t/trouble-mutating/255598 "2020-11-17T17:36:19Z")

</div>

I am having trouble performing a mutate. I thought I had it working with a more simplified version of this config but cannot seem to get it going in this new one (though everything else seems to be working much better). …

---

## [CVS export](https://discuss.elastic.co/t/cvs-export/215859)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [January 28, 2020, 2:42pm UTC](https://discuss.elastic.co/t/cvs-export/215859 "2020-01-28T14:42:08Z")

</div>

Hello, I have to export a saved search from a dashboard. The CSV is correct but the format of the @timestamp is not OK for my customer because excel does not accept 2020-01-21T07:52:51.000Z which is the format I get I …

---

## [Help with Winlogbeat yaml config](https://discuss.elastic.co/t/help-with-winlogbeat-yaml-config/210041)

<div class="topic-metadata">

**Author:** [@xxstyler20xx](https://discuss.elastic.co/u/xxstyler20xx)\
**Replies:** 6\
**Last updated:** [December 2, 2019, 1:56pm UTC](https://discuss.elastic.co/t/help-with-winlogbeat-yaml-config/210041 "2019-12-02T13:56:56Z")

</div>

Hello I'm new to this and I just can't find the rigt answer for my problem.. I'm stuck with my winlogbeat yaml conf. // event\_logs: name: Security event\_id: 4625, 4624 processors: drop\_fields: fields: \["message"\] …

---

## [Error Config send log from Windows client to ELK Server Ubuntu](https://discuss.elastic.co/t/error-config-send-log-from-windows-client-to-elk-server-ubuntu/148423)

<div class="topic-metadata">

**Author:** [@trunght2](https://discuss.elastic.co/u/trunght2)\
**Replies:** 6\
**Last updated:** [September 20, 2018, 7:38am UTC](https://discuss.elastic.co/t/error-config-send-log-from-windows-client-to-elk-server-ubuntu/148423 "2018-09-20T07:38:35Z")

</div>

Hi everypeople, I setup LAB for my room. I has been finished setup lab. but config send log from windows 10 to ELK Ubuntu has problem. 2018-09-13T15:44:20.359+0700 ERROR pipeline/output.go:91 Failed to connect: read…

---

## [Elasticalert Version](https://discuss.elastic.co/t/elasticalert-version/70938)

<div class="topic-metadata">

**Author:** [@reachpratr](https://discuss.elastic.co/u/reachpratr)\
**Replies:** 6\
**Last updated:** [January 9, 2017, 9:29pm UTC](https://discuss.elastic.co/t/elasticalert-version/70938 "2017-01-09T21:29:55Z")

</div>

How can I know the Elastic Search Version running in the server ?

---

## [Before I upgrade](https://discuss.elastic.co/t/before-i-upgrade/34448)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 6\
**Last updated:** [November 12, 2015, 11:01pm UTC](https://discuss.elastic.co/t/before-i-upgrade/34448 "2015-11-12T23:01:20Z")

</div>

So I have a sweet setup currently of ES 1.7.3, LS 1.5.5, and KB 3. Last time I checked, you couldn't do colors with KB 4, nor did Discovery work with Firefox. Have these issues been resolved? Also, for all, how did yo…

---

## [Using search\_after instead of scroll API .NET client](https://discuss.elastic.co/t/using-search-after-instead-of-scroll-api-net-client/361099)

<div class="topic-metadata">

**Author:** [@AMElastic](https://discuss.elastic.co/u/AMElastic)\
**Replies:** 3\
**Last updated:** [June 10, 2024, 12:10pm UTC](https://discuss.elastic.co/t/using-search-after-instead-of-scroll-api-net-client/361099 "2024-06-10T12:10:25Z")

</div>

I am migrating from NEST client to .NET client version 8. I want to get all the ids that I have in elasticsearch, which is a large amount, larger than 10000. In the .NEST client, I did this by using the scroll API, but…

---

## [Kibana savej object giving error on import: migrating from 7.9.1 to 8.7.1 version full elk stack](https://discuss.elastic.co/t/kibana-savej-object-giving-error-on-import-migrating-from-7-9-1-to-8-7-1-version-full-elk-stack/338220)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 8\
**Last updated:** [July 13, 2023, 6:35pm UTC](https://discuss.elastic.co/t/kibana-savej-object-giving-error-on-import-migrating-from-7-9-1-to-8-7-1-version-full-elk-stack/338220 "2023-07-13T18:35:47Z")

</div>

Hello All, I'm migrating my full elk stack stack from 7.9.1 to 8.7.1 and facing issues while importing saved object in 8.7.1,below is the error in second image: How do I save saved object and download -shown below 1st …

---

## [Regex kibana](https://discuss.elastic.co/t/regex-kibana/287362)

<div class="topic-metadata">

**Author:** [@nehaltrivedi96](https://discuss.elastic.co/u/nehaltrivedi96)\
**Replies:** 3\
**Last updated:** [October 22, 2021, 11:46am UTC](https://discuss.elastic.co/t/regex-kibana/287362 "2021-10-22T11:46:06Z")

</div>

Hello, I am trying to create a regex query in kibana. I want to get a result which has sanitation followed by access meaning I am trying to find sanitation access\*. I am entering the following query but I am not getting…

---

## [Unable to add remote cluster for CCS](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/284519)

<div class="topic-metadata">

**Author:** [@Tosh](https://discuss.elastic.co/u/Tosh)\
**Replies:** 3\
**Last updated:** [September 20, 2021, 8:27pm UTC](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/284519 "2021-09-20T20:27:24Z")

</div>

Hi , I have configured the remote cluster using configure the remote cluster GET /\_cluster/settings {"persistent":{"cluster":{"remote":{"cluster\_one":{"seeds":\["127.0.0.1:9300"\]}}}},"transient":{}} But when i do get …

---

## [Performance of outside Query vs filter inside aggregation while aggregating](https://discuss.elastic.co/t/performance-of-outside-query-vs-filter-inside-aggregation-while-aggregating/266726)

<div class="topic-metadata">

**Author:** [@the\_nemo](https://discuss.elastic.co/u/the_nemo)\
**Replies:** 3\
**Last updated:** [March 10, 2021, 8:24am UTC](https://discuss.elastic.co/t/performance-of-outside-query-vs-filter-inside-aggregation-while-aggregating/266726 "2021-03-10T08:24:16Z")

</div>

Is there any performance difference between the below two quires assuming "type" is a keyword? { "size": 0, "aggs": { "t\_shirts": { "filter": { "term": { "type…

---

## [Vega-liteでjoin aggregateを用いてフィルタすると何もプロットされない](https://discuss.elastic.co/t/vega-lite-join-aggregate/230787)

<div class="topic-metadata">

**Author:** [@masahiro](https://discuss.elastic.co/u/masahiro)\
**Replies:** 3\
**Last updated:** [May 3, 2020, 11:23pm UTC](https://discuss.elastic.co/t/vega-lite-join-aggregate/230787 "2020-05-03T23:23:30Z")

</div>

下のように、"b"の値が第一四分位値を超えるものを散布図にしようとしていますが、なにもプロットされなくなります。フィルタを外すとすべてプロットされます。 Kibana7.6.0です。 { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "data": { "values": \[ {"a": 20, "b": 28}, {"a": 25, "b": 5…

---

## [Can I import data from my index into App search?](https://discuss.elastic.co/t/can-i-import-data-from-my-index-into-app-search/216809)

<div class="topic-metadata">

**Author:** [@111249](https://discuss.elastic.co/u/111249)\
**Replies:** 3\
**Last updated:** [January 28, 2020, 11:54am UTC](https://discuss.elastic.co/t/can-i-import-data-from-my-index-into-app-search/216809 "2020-01-28T11:54:58Z")

</div>

Hello all! I have index in elasticsearch cluster. When I start using app search it suggest me to paste some data in several ways. But I want add data from my index. How I can do it?

---

## [How to dynamically create scriting parameters based on another query?](https://discuss.elastic.co/t/how-to-dynamically-create-scriting-parameters-based-on-another-query/195126)

<div class="topic-metadata">

**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\
**Replies:** 3\
**Last updated:** [August 15, 2019, 7:13am UTC](https://discuss.elastic.co/t/how-to-dynamically-create-scriting-parameters-based-on-another-query/195126 "2019-08-15T07:13:09Z")

</div>

I have a query which contains a script for supporting sorting operation on an index, The script requires few parameters, which I'm currently constructing in code These parameters are being fetched from another index …

---

## [Percolator QueryのIDFのパラメータが必ず1になってしまう](https://discuss.elastic.co/t/percolator-query-idf-1/172290)

<div class="topic-metadata">

**Author:** [@po3rin](https://discuss.elastic.co/u/po3rin)\
**Replies:** 3\
**Last updated:** [March 15, 2019, 7:11am UTC](https://discuss.elastic.co/t/percolator-query-idf-1/172290 "2019-03-15T07:11:40Z")

</div>

基本的な質問なのですが、Percolator Queryのidf計算において必ずdocFreqとdocCountが両方とも1になってしまいます。これをindexのドキュメント全体に対しての値に変更することは可能ですが？というのも、Percolator QueryのscoreとSearch API のスコアのソート結果を一致させたいという背景がある為です。ElasticsearchのバージョンはElasticsearch5.6と6.6で試…

---

## [How to issue \_optimize on Elastic Cloud](https://discuss.elastic.co/t/how-to-issue-optimize-on-elastic-cloud/131235)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 3\
**Last updated:** [May 13, 2018, 2:11am UTC](https://discuss.elastic.co/t/how-to-issue-optimize-on-elastic-cloud/131235 "2018-05-13T02:11:27Z")

</div>

I am trying to issue an \_optimize command via curl. I've tried both of the below styles: $ curl --user username:password -XPOST "https://redacted.us-east-1.aws.found.io:9243/foo/\_optimize?max\_num\_segments=1" {"error":{"…

---

## [Logs event order mismatch](https://discuss.elastic.co/t/logs-event-order-mismatch/114896)

<div class="topic-metadata">

**Author:** [@yoga-sara](https://discuss.elastic.co/u/yoga-sara)\
**Replies:** 3\
**Last updated:** [January 18, 2018, 1:59pm UTC](https://discuss.elastic.co/t/logs-event-order-mismatch/114896 "2018-01-18T13:59:03Z")

</div>

Am using 5LK 5.6.4. Beats =\> Logstash =\> ElasticSearch =\>Kibana I am collets server logs(using grok and mutate filter) and another one, I parse the whole XML in ELK(using multiline and XML filter plugin). For Log: Whi…

---

## [HEAD request to \[indexname\]/\_alias/\[aliasname\] seems to always return 200 OK](https://discuss.elastic.co/t/head-request-to-indexname--alias-aliasname-seems-to-always-return-200-ok/91183)

<div class="topic-metadata">

**Author:** [@chronolinq](https://discuss.elastic.co/u/chronolinq)\
**Replies:** 3\
**Last updated:** [June 30, 2017, 4:34pm UTC](https://discuss.elastic.co/t/head-request-to-indexname--alias-aliasname-seems-to-always-return-200-ok/91183 "2017-06-30T16:34:43Z")

</div>

Elasticsearch version: 5.4.2 Kibana version: 5.4.2 Elasticsearch.Net + NEST version 5.4.0 When making a head request to check for the existence of an alias in an index, it appears to always return 200 OK even if there …

---

## [Logstash input-\>file](https://discuss.elastic.co/t/logstash-input-file/47671)

<div class="topic-metadata">

**Author:** [@birdbiubiubiu](https://discuss.elastic.co/u/birdbiubiubiu)\
**Replies:** 3\
**Last updated:** [April 19, 2016, 2:57am UTC](https://discuss.elastic.co/t/logstash-input-file/47671 "2016-04-19T02:57:52Z")

</div>

My log file is generated per day , similar to the file name access-2016-04-17.log、access-2016-04-18.log，How can I write input, read these files can be generic.

---

## [Supprimer le \_ttl sur un objet](https://discuss.elastic.co/t/supprimer-le--ttl-sur-un-objet/26723)

<div class="topic-metadata">

**Author:** [@jbng](https://discuss.elastic.co/u/jbng)\
**Replies:** 3\
**Last updated:** [August 3, 2015, 5:30pm UTC](https://discuss.elastic.co/t/supprimer-le--ttl-sur-un-objet/26723 "2015-08-03T17:30:14Z")

</div>

Bonjour, Est-ce que quelqu'un aurait une réponse claire à ce problème mais sans activer l'exécution dynamique de script? http://stackoverflow.com/questions/27453155/clearing-ttl-from-an-object-in-elasticsearch J'ess…

---

## [Pattern Assistance ##](https://discuss.elastic.co/t/pattern-assistance/276)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 3\
**Last updated:** [May 7, 2015, 6:54am UTC](https://discuss.elastic.co/t/pattern-assistance/276 "2015-05-07T06:54:50Z")

</div>

I would like to ask assistance with the following pattern to arrange them into different fields. The main challenge is the two # before each different field and then in the fields there are spaces as well. I tried to use …

---

## [Collecting logs via VMware vSphere integration](https://discuss.elastic.co/t/collecting-logs-via-vmware-vsphere-integration/327165)

<div class="topic-metadata">

**Author:** [@tumbl3w33d](https://discuss.elastic.co/u/tumbl3w33d)\
**Replies:** 0\
**Last updated:** [March 7, 2023, 10:38am UTC](https://discuss.elastic.co/t/collecting-logs-via-vmware-vsphere-integration/327165 "2023-03-07T10:38:28Z")

</div>

Disclaimer: I don't know much about VMware, so I'd be glad if you enlighten me when necessary. Hello, I am trying to understand how to use this agent integration to collect logs and metrics from a vSphere setup. Metric…

---

## [Kibana creates invalid index(.kibana instead of .kibana\_1)](https://discuss.elastic.co/t/kibana-creates-invalid-index-kibana-instead-of-kibana-1/217964)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 5\
**Last updated:** [March 10, 2020, 12:34pm UTC](https://discuss.elastic.co/t/kibana-creates-invalid-index-kibana-instead-of-kibana-1/217964 "2020-03-10T12:34:59Z")

</div>

Hi, To validate some scenario, I had to delete .kibana\_1 index. Now I try to access kibana UI and a kibana index named .kibana gets created. After this I am not able to create any new index pattern or view any logs on k…

---

## [Options for getting curator logs into elasticsearch without using filebeat?](https://discuss.elastic.co/t/options-for-getting-curator-logs-into-elasticsearch-without-using-filebeat/149886)

<div class="topic-metadata">

**Author:** [@jonassteinberg1](https://discuss.elastic.co/u/jonassteinberg1)\
**Replies:** 5\
**Last updated:** [September 26, 2018, 11:26pm UTC](https://discuss.elastic.co/t/options-for-getting-curator-logs-into-elasticsearch-without-using-filebeat/149886 "2018-09-26T23:26:50Z")

</div>

@theuntergeek I'd like to pump my curator logs to ES and I don't want to use Filebeat. What are my architectural options, if any? I've been trying to work it out in my head, but no joy. I have read this but I belie…

---

## [Error When loading Logstash](https://discuss.elastic.co/t/error-when-loading-logstash/115639)

<div class="topic-metadata">

**Author:** [@Methsri\_Wickramarath](https://discuss.elastic.co/u/Methsri_Wickramarath)\
**Replies:** 5\
**Last updated:** [January 16, 2018, 9:38am UTC](https://discuss.elastic.co/t/error-when-loading-logstash/115639 "2018-01-16T09:38:00Z")

</div>

Hi All, Am getting the following error with Logstash Blockquote \[2018-01-16T11:32:17,216\]\[ERROR\]\[logstash.agent \] Cannot load an invalid configuration {:reason=\>"Expected one of #, input, filter, output at …

---

## [Kibana not filtering specific visulization](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360)

<div class="topic-metadata">

**Author:** [@thibdeb](https://discuss.elastic.co/u/thibdeb)\
**Replies:** 6\
**Last updated:** [June 30, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360 "2021-06-30T15:33:20Z")

</div>

Hello everyone, I'm working on a project on Kibana to do a dashboard with specifics visualizations from 2 files, a .log file and a .csv file, I have two index patterns too. I use a panel to select what kind of data I w…

---

## [Surprised by deprecation of common\_terms query. What about its relevance features?](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416 "2021-04-20T14:21:00Z")

</div>

Hi all, I was actually excited to dig into an experiment at work using the common terms query. I see however, it's been deprecated as the performance benefits are seen now in the match query, as mentioned in this issue. …

---

## [Signed Search Key via API](https://discuss.elastic.co/t/signed-search-key-via-api/215457)

<div class="topic-metadata">

**Author:** [@malik\_aditya](https://discuss.elastic.co/u/malik_aditya)\
**Replies:** 4\
**Last updated:** [January 23, 2020, 5:25am UTC](https://discuss.elastic.co/t/signed-search-key-via-api/215457 "2020-01-23T05:25:43Z")

</div>

Hi, I was trying to use SignedSearchKey approach via API but the search and result settings are applied to the whole engine instead for that specifc key. Is there any workaround for that? Like creating keys with predefin…

---

## [LOGSTASH, simple code unable to get output in elasticsearch and kibana](https://discuss.elastic.co/t/logstash-simple-code-unable-to-get-output-in-elasticsearch-and-kibana/206848)

<div class="topic-metadata">

**Author:** [@santhosh\_l](https://discuss.elastic.co/u/santhosh_l)\
**Replies:** 4\
**Last updated:** [November 6, 2019, 9:40pm UTC](https://discuss.elastic.co/t/logstash-simple-code-unable-to-get-output-in-elasticsearch-and-kibana/206848 "2019-11-06T21:40:59Z")

</div>

Hello all, I am a beginner in elk, i am trying to execute logstash ( through power shell). when ever i execute the fallowing command :- C:\\siem\> .\\logstash-7.4.1\\bin\\logstash.bat -f .\\myfirst.conf the output on the p…

---

## [Filebeats creating the incorrect datatype in index](https://discuss.elastic.co/t/filebeats-creating-the-incorrect-datatype-in-index/196849)

<div class="topic-metadata">

**Author:** [@mbradsher](https://discuss.elastic.co/u/mbradsher)\
**Replies:** 4\
**Last updated:** [September 5, 2019, 5:40pm UTC](https://discuss.elastic.co/t/filebeats-creating-the-incorrect-datatype-in-index/196849 "2019-09-05T17:40:07Z")

</div>

I find this perplexing but it seems as though filebeats has decided to take an input that is always a text object with no numerals in it and index it as a date object. As a result the filebeats data is rejected by ES be…

---

## [Parsing stacktraces in log files](https://discuss.elastic.co/t/parsing-stacktraces-in-log-files/114272)

<div class="topic-metadata">

**Author:** [@anjali](https://discuss.elastic.co/u/anjali)\
**Replies:** 4\
**Last updated:** [January 8, 2018, 8:33am UTC](https://discuss.elastic.co/t/parsing-stacktraces-in-log-files/114272 "2018-01-08T08:33:03Z")

</div>

Hello, I'm new to the Elastic Stack and I'm trying to parse the following log- 06:40:13,339 ERROR \[org.hornetq.core.client\] (Thread-29 (HornetQ-server-HornetQServerImpl::serverUUID=3a64b874-09b1-11e7-af28-998b43be6a2d-7…

---

## [Trying to separate fields from logs using GROK](https://discuss.elastic.co/t/trying-to-separate-fields-from-logs-using-grok/112375)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 4\
**Last updated:** [December 20, 2017, 10:34am UTC](https://discuss.elastic.co/t/trying-to-separate-fields-from-logs-using-grok/112375 "2017-12-20T10:34:25Z")

</div>

Hi am trying to separate fields from the log message below. 127.0.0.1 - - \[25/Sep/2017:06:13:23 -0500\] 4 "GET /CacheManager/HCD\_CLIENTS/BN\_HS HTTP/1.1" 200 118 \*\*\*:9090 "-" "-" I have been trying to parse / separate th…

---

## [Build Kibana options](https://discuss.elastic.co/t/build-kibana-options/83690)

<div class="topic-metadata">

**Author:** [@Sebastien\_ROUL](https://discuss.elastic.co/u/Sebastien_ROUL)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 11:14pm UTC](https://discuss.elastic.co/t/build-kibana-options/83690 "2017-04-26T23:14:09Z")

</div>

Hi, Is it possible to specify only one OS and/or only archive in the command "npm run build" ? We work with Kibana 5.3. Ex npm run build -- --os=linux-x86\_64 --only-archive Thanks

---

## [Multi-fields and dynamic mapping](https://discuss.elastic.co/t/multi-fields-and-dynamic-mapping/79171)

<div class="topic-metadata">

**Author:** [@Shira\_Bendor](https://discuss.elastic.co/u/Shira_Bendor)\
**Replies:** 4\
**Last updated:** [March 19, 2017, 6:47pm UTC](https://discuss.elastic.co/t/multi-fields-and-dynamic-mapping/79171 "2017-03-19T18:47:54Z")

</div>

Hi, I'm getting started with ES and wrote a small test that indexes a few example documents. Some of my documents have fields which have several types (e.g. long and text). Before I go ahead and change the documents th…

---

## [Static visualization in a dashboard](https://discuss.elastic.co/t/static-visualization-in-a-dashboard/75845)

<div class="topic-metadata">

**Author:** [@GautamP](https://discuss.elastic.co/u/GautamP)\
**Replies:** 4\
**Last updated:** [February 21, 2017, 9:53am UTC](https://discuss.elastic.co/t/static-visualization-in-a-dashboard/75845 "2017-02-21T09:53:02Z")

</div>

Hi all, I have a dashboard where I have multiple visualizations. When I select a filter, it ends up being applied to all the visualizations on the dashboard. I want the filter to be applied to only certain visualizatio…

---

## [NPE on DeleteByQuery](https://discuss.elastic.co/t/npe-on-deletebyquery/65480)

<div class="topic-metadata">

**Author:** [@alpetric](https://discuss.elastic.co/u/alpetric)\
**Replies:** 4\
**Last updated:** [November 9, 2016, 1:14pm UTC](https://discuss.elastic.co/t/npe-on-deletebyquery/65480 "2016-11-09T13:14:32Z")

</div>

I'm trying to migrate to elasticsearch 5.0.0 and I'm stuck with DeleteByQuery which is used in our project. According to the documentation \[1\], the java plugin is no longer needed as it moved to the core in elasticsear…

---

## [Elasticsearch mapping update](https://discuss.elastic.co/t/elasticsearch-mapping-update/63470)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 4\
**Last updated:** [October 20, 2016, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-update/63470 "2016-10-20T10:50:15Z")

</div>

Hi, I indexed my mysql datas with ES but my "year" field mapping was wrong. How do I update my mapping? My mapping: PUT my\_index/my\_type/\_mapping { "properties" : { "Year" : { "type" : "date", "format" : "yyyy-MM-d…

---

## [Accelerate search scroll?](https://discuss.elastic.co/t/accelerate-search-scroll/63064)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 4\
**Last updated:** [October 17, 2016, 10:11am UTC](https://discuss.elastic.co/t/accelerate-search-scroll/63064 "2016-10-17T10:11:11Z")

</div>

Hello, I want to export elasticsearch index to HDFS, via let's say PIG. It's working fine, but it's slow, index with 3 shards, cluster with 3 nodes BUT a single client node (access point). Before, I was using a small…

---

## [Parsing syslog data: Need help understanding documentation example](https://discuss.elastic.co/t/parsing-syslog-data-need-help-understanding-documentation-example/37416)

<div class="topic-metadata">

**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\
**Replies:** 4\
**Last updated:** [December 17, 2015, 8:01pm UTC](https://discuss.elastic.co/t/parsing-syslog-data-need-help-understanding-documentation-example/37416 "2015-12-17T20:01:58Z")

</div>

Hello All, I am referring logstash example of parsing syslog data : https://www.elastic.co/guide/en/logstash/current/config-examples.html#\_processing\_syslog\_messages My input line is : Dec 3 01:22:48 arista1.lab Pr…

---

## [Should I raid0 fusion io cards?](https://discuss.elastic.co/t/should-i-raid0-fusion-io-cards/2694)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 4\
**Last updated:** [June 16, 2015, 2:54am UTC](https://discuss.elastic.co/t/should-i-raid0-fusion-io-cards/2694 "2015-06-16T02:54:14Z")

</div>

I have 2 fusion io cards for a single server. Mainly for capacity... Running Windows 2008... Yes I know fusion cards are quite reliable... The question here is for convenience/elasticsearch configuration... Should I …

---

## [Tenable.io integration - missing FIXED vulnerabilities](https://discuss.elastic.co/t/tenable-io-integration-missing-fixed-vulnerabilities/328351)

<div class="topic-metadata">

**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\
**Replies:** 2\
**Last updated:** [March 24, 2023, 11:39am UTC](https://discuss.elastic.co/t/tenable-io-integration-missing-fixed-vulnerabilities/328351 "2023-03-24T11:39:42Z")

</div>

Hello, I started to test tenable.io integration (great work BTW) and found a little issue. Vulnerabilities with state FIXED are missing in logs-tenable\_io.vulnerability indexes, I can only find OPEN and REOPENED event…

---

## [Unable to get Term Aggregations using Java RestHighLevelClient](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246)

<div class="topic-metadata">

**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 4:43am UTC](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246 "2022-06-28T04:43:38Z")

</div>

I'm using Java 8 and Elasticsearch 7.12.0 I want term aggregations, as I want all the words and the doc\_count, of all the words available in indexed documents. I did it using kibana, but i'm unable to do it using Java. …

---

## [How to deploy and setup a Fleet cluster?](https://discuss.elastic.co/t/how-to-deploy-and-setup-a-fleet-cluster/298285)

<div class="topic-metadata">

**Author:** [@Danny\_Dumenigo](https://discuss.elastic.co/u/Danny_Dumenigo)\
**Replies:** 2\
**Last updated:** [March 1, 2022, 3:07pm UTC](https://discuss.elastic.co/t/how-to-deploy-and-setup-a-fleet-cluster/298285 "2022-03-01T15:07:07Z")

</div>

Hello community! I have two environments of ELK v7.17 deployed on-prem (test and prod), so I decided to try Fleet. Im still testing things, so, In my test env I was able to setup a Fleet server (with certificates genera…

---

## [A file written by master to the store cannot be accessed on the node](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247)

<div class="topic-metadata">

**Author:** [@mihai.prichindel](https://discuss.elastic.co/u/mihai.prichindel)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 12:18pm UTC](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247 "2022-01-13T12:18:43Z")

</div>

I am using Elasticsearch 7.8.0. When I want to make backups, most of the time everything is working fine, but from time to time I am getting the following error and backup fails: \[2021-06-02T09:50:25,297\]\[WARN \]\[r.supp…

---

## [Почему Эластик не выводит документы, в которых другой падеж](https://discuss.elastic.co/t/topic/283759)

<div class="topic-metadata">

**Author:** [@SkaaRJ](https://discuss.elastic.co/u/SkaaRJ)\
**Replies:** 2\
**Last updated:** [September 10, 2021, 3:47am UTC](https://discuss.elastic.co/t/topic/283759 "2021-09-10T03:47:48Z")

</div>

У меня на интересующие поля привязан плагин русской морфологии. Маппинги на индекс выглядят следующим образом: PUT reg-document { "settings" : { "index" : { "analysis" : { "filter" : { …

---

## [Elastalert plugin in ELK 7.9.0](https://discuss.elastic.co/t/elastalert-plugin-in-elk-7-9-0/247778)

<div class="topic-metadata">

**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 2:14pm UTC](https://discuss.elastic.co/t/elastalert-plugin-in-elk-7-9-0/247778 "2020-09-08T14:14:22Z")

</div>

Hi people, I have an ELK 7.9.0 / Debian 10 cluster running OK. I wanna test Elastalert plugin in order to set alert rules and get feedback by email. Is it possible to put to work Elastalert for this ELK 7.9.0 version? …

---

## [Geoip to geopoint](https://discuss.elastic.co/t/geoip-to-geopoint/236218)

<div class="topic-metadata">

**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\
**Replies:** 2\
**Last updated:** [June 9, 2020, 7:51am UTC](https://discuss.elastic.co/t/geoip-to-geopoint/236218 "2020-06-09T07:51:51Z")

</div>

geoip{ source =\> "IP" } how can i covert geo ip to geo point, as map is not accepting geoip what i need to add in logstash or fields.yml, i am using elk stack 7.X Need help

[Previous page](https://discuss.elastic.co/top.md?page=1581&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1583&per_page=50&period=all)
