# Top

**URL:** https://discuss.elastic.co/top.md?page=1592&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1593

---

## [How to monitor APIs (SOAP, Rest Full )](https://discuss.elastic.co/t/how-to-monitor-apis-soap-rest-full/206506)

<div class="topic-metadata">

**Author:** [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-monitor-apis-soap-rest-full/206506 "2019-11-05T06:19:26Z")

</div>

hi guys I Want see all APIs and monitor APIs (SOAP, Rest Full ) and also see and check state ( Run, up, performance, security ) please guide me

---

## [Content-type for importing tab delimited file into Elasticsearch](https://discuss.elastic.co/t/content-type-for-importing-tab-delimited-file-into-elasticsearch/185249)

<div class="topic-metadata">

**Author:** [@KathyTheGreat](https://discuss.elastic.co/u/KathyTheGreat)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 5:51pm UTC](https://discuss.elastic.co/t/content-type-for-importing-tab-delimited-file-into-elasticsearch/185249 "2019-06-11T17:51:26Z")

</div>

I'm trying to import tab-delimited logs into Elasticsearch and I don't want to use logstash. Would the content-type header be text/tab-separated-values? I tried application/text and it gave an error, "content-type applic…

---

## [Create a Custom Docker Image](https://discuss.elastic.co/t/create-a-custom-docker-image/150765)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 2\
**Last updated:** [October 4, 2018, 2:37am UTC](https://discuss.elastic.co/t/create-a-custom-docker-image/150765 "2018-10-04T02:37:18Z")

</div>

I was looking at this very informative post to create a custom kibana image. However, there's a small twist in our requirements. As part of the build process when we are trying to install our plugin it requires these tw…

---

## [Questions on basic license which will allow me to use watcher service](https://discuss.elastic.co/t/questions-on-basic-license-which-will-allow-me-to-use-watcher-service/133411)

<div class="topic-metadata">

**Author:** [@arundeepreddy](https://discuss.elastic.co/u/arundeepreddy)\
**Replies:** 2\
**Last updated:** [May 27, 2018, 8:00am UTC](https://discuss.elastic.co/t/questions-on-basic-license-which-will-allow-me-to-use-watcher-service/133411 "2018-05-27T08:00:33Z")

</div>

Hi Guys, I got the basic version x-pack license today, when I checked my trial\_status it shows that I'm not eligible to start a free trail. Can I get some help on the same ? I wanted to play around with the watcher ser…

---

## [X-pack license node count](https://discuss.elastic.co/t/x-pack-license-node-count/116254)

<div class="topic-metadata">

**Author:** [@elasticus](https://discuss.elastic.co/u/elasticus)\
**Replies:** 2\
**Last updated:** [January 19, 2018, 3:20pm UTC](https://discuss.elastic.co/t/x-pack-license-node-count/116254 "2018-01-19T15:20:45Z")

</div>

Hi does anyone know if the x-pack license node count includes ONLY elasticsearch cluster nodes or must I also count kibana instances and logstash instances?

---

## [Configure Logstash to accept data from one host location to another host location](https://discuss.elastic.co/t/configure-logstash-to-accept-data-from-one-host-location-to-another-host-location/75563)

<div class="topic-metadata">

**Author:** [@Mani2451](https://discuss.elastic.co/u/Mani2451)\
**Replies:** 2\
**Last updated:** [February 22, 2017, 6:36am UTC](https://discuss.elastic.co/t/configure-logstash-to-accept-data-from-one-host-location-to-another-host-location/75563 "2017-02-22T06:36:21Z")

</div>

Hi, i am trying to configure logstash by accepting data from one host location i.e xyz1.com to xyz2.com and the xyz 1 has a log which needs to be sent to xyz2 and then it should be parsed . Since i'm able to see that inp…

---

## [Spring Elastic search Configuration in properties](https://discuss.elastic.co/t/spring-elastic-search-configuration-in-properties/14320)

<div class="topic-metadata">

**Author:** [@paul1](https://discuss.elastic.co/u/paul1)\
**Replies:** 2\
**Last updated:** [November 8, 2013, 9:13am UTC](https://discuss.elastic.co/t/spring-elastic-search-configuration-in-properties/14320 "2013-11-08T09:13:57Z")

</div>

\*Spring.xml\* properties="esproperties" /\> \*Properties file entry\* cluster.name=abccluster With the above configuration my client is connecting to cluster called "abccluster", how is it getting injected,…

---

## [Error while building from the source](https://discuss.elastic.co/t/error-while-building-from-the-source/8473)

<div class="topic-metadata">

**Author:** [@yett](https://discuss.elastic.co/u/yett)\
**Replies:** 2\
**Last updated:** [July 20, 2012, 7:09am UTC](https://discuss.elastic.co/t/error-while-building-from-the-source/8473 "2012-07-20T07:09:43Z")

</div>

Hi Folks, I am trying build es from source as guided in http://www.elasticsearch.org/guide/appendix/building-from-source.html. I downloaded the zipped and extracted to elasticsearch-elasticsearch-v0.19.8-37-g2…

---

## [Updating the documents through the Ingest Pipeline](https://discuss.elastic.co/t/updating-the-documents-through-the-ingest-pipeline/353583)

<div class="topic-metadata">

**Author:** [@ksaimohan2k](https://discuss.elastic.co/u/ksaimohan2k)\
**Replies:** 0\
**Last updated:** [February 19, 2024, 11:45am UTC](https://discuss.elastic.co/t/updating-the-documents-through-the-ingest-pipeline/353583 "2024-02-19T11:45:10Z")

</div>

Is there any way to update documents using the ingest pipeline? We are trying to ingest documents using a custom API through the Ingest pipeline. We are looking to identify the duplicate records. We used the "fingerprin…

---

## [Dec 3rd, 2023: \[EN\] Serverless Observability: How Beats alerts help you save Christmas](https://discuss.elastic.co/t/dec-3rd-2023-en-serverless-observability-how-beats-alerts-help-you-save-christmas/347284)

<div class="topic-metadata">

**Author:** [@virginiadiana.todea](https://discuss.elastic.co/u/virginiadiana.todea)\
**Replies:** 0\
**Last updated:** [December 3, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-3rd-2023-en-serverless-observability-how-beats-alerts-help-you-save-christmas/347284 "2023-12-03T08:00:49Z")

</div>

This post is also available in Espagnol. This post is also available in Romanian. Winter holidays are near and as some of us are cozying next to the fire or looking for the calm breeze of the sea, we have one thing …

---

## [Stack Monitoring only viewing current index](https://discuss.elastic.co/t/stack-monitoring-only-viewing-current-index/232604)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 6\
**Last updated:** [May 15, 2020, 1:44pm UTC](https://discuss.elastic.co/t/stack-monitoring-only-viewing-current-index/232604 "2020-05-15T13:44:37Z")

</div>

Hi, I am using ILM with metricbeat, within stack monitoring it seems i cannot view data beyond the current index, the previous indexs are available. My ILM policy is simply hot, 30 days or 50GB, no move to warm. I am …

---

## [Time based indices query strategy](https://discuss.elastic.co/t/time-based-indices-query-strategy/162087)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 6\
**Last updated:** [December 30, 2018, 8:11am UTC](https://discuss.elastic.co/t/time-based-indices-query-strategy/162087 "2018-12-30T08:11:13Z")

</div>

Hi I'm curious to know how Elasticsearch handles queries on time based indices. ex. If I have 5 years of time based indices named eventdata-{dd-MM-yyyy} and I am querying them using eventdata-\*, does that lead to the o…

---

## [Warning Messages](https://discuss.elastic.co/t/warning-messages/121952)

<div class="topic-metadata">

**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\
**Replies:** 6\
**Last updated:** [March 1, 2018, 11:01pm UTC](https://discuss.elastic.co/t/warning-messages/121952 "2018-03-01T23:01:32Z")

</div>

Newbie here. Tried to search all google but not sure where to get solution. Could you please let me know what went wrong. Here is the part of the Warning I am getting. Blockquote T22:05:16.847Z\] \[2018-02-28T17:05:1…

---

## [Filebeat (google\_workspace module) retrieving partial events on initial startup](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 7\
**Last updated:** [April 8, 2022, 10:23am UTC](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180 "2022-04-08T10:23:35Z")

</div>

Hello I would like to ask question related to below topic. I want to retrieve events backtracking up to 96 h for drive events . However, I was only able to retrieve partial of them . Looking at DEBUG log , the start…

---

## [Multiline json over TCP is not parsed](https://discuss.elastic.co/t/multiline-json-over-tcp-is-not-parsed/249438)

<div class="topic-metadata">

**Author:** [@cristi.mitroi](https://discuss.elastic.co/u/cristi.mitroi)\
**Replies:** 7\
**Last updated:** [September 24, 2020, 2:56pm UTC](https://discuss.elastic.co/t/multiline-json-over-tcp-is-not-parsed/249438 "2020-09-24T14:56:40Z")

</div>

I have the following multiline json: " {"businessId":"335","technicId":"41180883","teller":"progr\_1 ","pid":"0024444930","timestamp":"16:03:31.0664","sursa":"test.mbv","nr\_linie":"391","mesaj":"MESSAGE PUT TIME IS 16…

---

## [Logstash always restart](https://discuss.elastic.co/t/logstash-always-restart/248854)

<div class="topic-metadata">

**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\
**Replies:** 7\
**Last updated:** [September 16, 2020, 4:47pm UTC](https://discuss.elastic.co/t/logstash-always-restart/248854 "2020-09-16T16:47:49Z")

</div>

logstash version:6.0, jdk version: 1.8.0, but no error log for the logstash service, the /var/log/message log is that: Sep 16 23:17:20 localhost.localdomain systemd\[1\]: Started logstash. Sep 16 23:17:30 localhost.local…

---

## [Metricbeat fails to connect to elastisearch and ignores fields in yaml](https://discuss.elastic.co/t/metricbeat-fails-to-connect-to-elastisearch-and-ignores-fields-in-yaml/233409)

<div class="topic-metadata">

**Author:** [@syost](https://discuss.elastic.co/u/syost)\
**Replies:** 1\
**Last updated:** [May 19, 2020, 11:43pm UTC](https://discuss.elastic.co/t/metricbeat-fails-to-connect-to-elastisearch-and-ignores-fields-in-yaml/233409 "2020-05-19T23:43:54Z")

</div>

ENVIRONMENT: Amazon EC2 Instance ELK has been installed XPACK has been enabled Passwords have been set for built-in users metricbeat has been untar'd ISSUE: When I start metricbeat it gives the following output in…

---

## [Elasticsearch restart causes error unable to find script \[q\_checkitem\] in cluster state](https://discuss.elastic.co/t/elasticsearch-restart-causes-error-unable-to-find-script-q-checkitem-in-cluster-state/223000)

<div class="topic-metadata">

**Author:** [@sa1212](https://discuss.elastic.co/u/sa1212)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-restart-causes-error-unable-to-find-script-q-checkitem-in-cluster-state/223000 "2020-03-12T10:49:27Z")

</div>

Hi, After Elasticsearch cluster containers restarted we get resource not found exception when a search is attempted. { "error" : { "root\_cause" : \[ { "type" : "resource\_not\_found\_exception", …

---

## [Backup/restore options for ES 7.0 installed from ES helm chart](https://discuss.elastic.co/t/backup-restore-options-for-es-7-0-installed-from-es-helm-chart/183549)

<div class="topic-metadata">

**Author:** [@Rimantas\_Mocevicius](https://discuss.elastic.co/u/Rimantas_Mocevicius)\
**Replies:** 1\
**Last updated:** [May 31, 2019, 12:16pm UTC](https://discuss.elastic.co/t/backup-restore-options-for-es-7-0-installed-from-es-helm-chart/183549 "2019-05-31T12:16:15Z")

</div>

Is any backup/restore option e.g. to GCS bucket supported in https://github.com/elastic/helm-charts/tree/master/elasticsearch?

---

## [Java High Level Rest Client - typed\_keys parameter](https://discuss.elastic.co/t/java-high-level-rest-client-typed-keys-parameter/144544)

<div class="topic-metadata">

**Author:** [@Oktaz](https://discuss.elastic.co/u/Oktaz)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 9:19am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-typed-keys-parameter/144544 "2018-08-17T09:19:11Z")

</div>

Using the High Level REST Client, I'm unable to find a way of setting the "typed\_keys" parameter on a search post. I am using the SearchRequest object and RestHighLevelClient.

---

## [Default Value for IP data type](https://discuss.elastic.co/t/default-value-for-ip-data-type/124547)

<div class="topic-metadata">

**Author:** [@Patricia\_Narvasa](https://discuss.elastic.co/u/Patricia_Narvasa)\
**Replies:** 1\
**Last updated:** [March 19, 2018, 3:31pm UTC](https://discuss.elastic.co/t/default-value-for-ip-data-type/124547 "2018-03-19T15:31:52Z")

</div>

Hi, I have this object with this mapping, "IpAddress": { "type": "ip", "index": "true", "null\_value": "NULL" }, I tried to persist a document with this value: Ex: ipAddress="" It successfully persisted but I have…

---

## [Unable to resovle the dependence for Hight Level rest client 5.x](https://discuss.elastic.co/t/unable-to-resovle-the-dependence-for-hight-level-rest-client-5-x/94029)

<div class="topic-metadata">

**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 6:46am UTC](https://discuss.elastic.co/t/unable-to-resovle-the-dependence-for-hight-level-rest-client-5-x/94029 "2017-07-28T06:46:52Z")

</div>

5.x has both high level and low level rest client. According to the doc. Here are maven depdenceis but I cannot resolve it. Are they acutally released? \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<a…

---

## [Sql server to Elasticsearch](https://discuss.elastic.co/t/sql-server-to-elasticsearch/74511)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 4:18pm UTC](https://discuss.elastic.co/t/sql-server-to-elasticsearch/74511 "2017-02-09T16:18:24Z")

</div>

Hi, We have one use case where we need to get ETL logs to elasticsearch ETL stores logs to SQL DB. How to get these sql data to ES and how to index that? br, Sunil

---

## [Re-index api on hot nodes -](https://discuss.elastic.co/t/re-index-api-on-hot-nodes/72373)

<div class="topic-metadata">

**Author:** [@astro](https://discuss.elastic.co/u/astro)\
**Replies:** 1\
**Last updated:** [January 21, 2017, 5:50pm UTC](https://discuss.elastic.co/t/re-index-api-on-hot-nodes/72373 "2017-01-21T17:50:21Z")

</div>

Hi everyone , We are trying to implement hot warm architecture using ELK stack 5.x.x .( Current cluster is 2.x) We need to move data from old to this new cluster . As we have made heavy duty of indexing on hot node…

---

## [Grok pattern all match but still grokparsefailure](https://discuss.elastic.co/t/grok-pattern-all-match-but-still-grokparsefailure/65979)

<div class="topic-metadata">

**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\
**Replies:** 1\
**Last updated:** [November 14, 2016, 2:47pm UTC](https://discuss.elastic.co/t/grok-pattern-all-match-but-still-grokparsefailure/65979 "2016-11-14T14:47:25Z")

</div>

Hey, so im parsing multiline logs using filebeat and logstash. The multline pattern is made in filebeat like this: multiline: pattern: '^Offset' negate: true match: after one complete log look…

---

## [Is there a way to find out if response returned from Scroll request is last page?](https://discuss.elastic.co/t/is-there-a-way-to-find-out-if-response-returned-from-scroll-request-is-last-page/43539)

<div class="topic-metadata">

**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\
**Replies:** 1\
**Last updated:** [March 5, 2016, 5:06pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-find-out-if-response-returned-from-scroll-request-is-last-page/43539 "2016-03-05T17:06:21Z")

</div>

Hey all, I'm using Scroll request extensively in my application. Do we have any way to find out if response from Scroll request is going to be the last page? For example: Suppose my first request with scrolling enabl…

---

## [Marvel 2.0.0 on Kibana 4.3](https://discuss.elastic.co/t/marvel-2-0-0-on-kibana-4-3/41094)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 1\
**Last updated:** [February 5, 2016, 8:37pm UTC](https://discuss.elastic.co/t/marvel-2-0-0-on-kibana-4-3/41094 "2016-02-05T20:37:18Z")

</div>

Hi : I am trying to get marvel installed on Kibana 4.3.1 I am running ES2.1.1 which is described as being compatible with Kibana 4.3. During the optimization stage of the installation, it fails giving the followin…

---

## [How can i rename the legends available in x-axis and y-axis in Kibana Vertical charts?](https://discuss.elastic.co/t/how-can-i-rename-the-legends-available-in-x-axis-and-y-axis-in-kibana-vertical-charts/27503)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 10:20pm UTC](https://discuss.elastic.co/t/how-can-i-rename-the-legends-available-in-x-axis-and-y-axis-in-kibana-vertical-charts/27503 "2015-08-17T22:20:20Z")

</div>

Hi All How can i rename the legends available in x-axis and y-axis in Kibana Vertical charts? This is a very basic feature, I hope this is available but i didn't found it. Please let me know Regards Ritesh

---

## [256GB worth of logs accumulate over 24 hs](https://discuss.elastic.co/t/256gb-worth-of-logs-accumulate-over-24-hs/309904)

<div class="topic-metadata">

**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\
**Replies:** 4\
**Last updated:** [July 18, 2022, 6:22pm UTC](https://discuss.elastic.co/t/256gb-worth-of-logs-accumulate-over-24-hs/309904 "2022-07-18T18:22:52Z")

</div>

I'm running a honeypot in a sandbox environment for testing purposes before I expose it to the Internet. Both the honeypot and Elastic seem to run fine on all fronts. The main issue I'm having is that despite the fair am…

---

## [Install Kibana 7.16 fails with parse mapping](https://discuss.elastic.co/t/install-kibana-7-16-fails-with-parse-mapping/300946)

<div class="topic-metadata">

**Author:** [@Karel\_Cech](https://discuss.elastic.co/u/Karel_Cech)\
**Replies:** 4\
**Last updated:** [March 30, 2022, 9:44pm UTC](https://discuss.elastic.co/t/install-kibana-7-16-fails-with-parse-mapping/300946 "2022-03-30T21:44:14Z")

</div>

Hi, we try to install Kibana 7.16.3 in our Openshift environment, but it fails with "Failed to parse mapping \[\_doc\]" : {"type":"log","@timestamp":"2022-03-29T12:09:24+02:00","tags":\["info","savedobjects-service"\],"pid"…

---

## [A Question on whether to use a Nested Datatype](https://discuss.elastic.co/t/a-question-on-whether-to-use-a-nested-datatype/208394)

<div class="topic-metadata">

**Author:** [@matthew.whill](https://discuss.elastic.co/u/matthew.whill)\
**Replies:** 4\
**Last updated:** [November 21, 2019, 8:36pm UTC](https://discuss.elastic.co/t/a-question-on-whether-to-use-a-nested-datatype/208394 "2019-11-21T20:36:46Z")

</div>

Hello All. I wanted to ask for peoples thoughts around whether to use nested datatypes in a particular scenario. The scenario: I am wanting to store into an index the contents of files and each file contains reference…

---

## [Unable to Change Timezone](https://discuss.elastic.co/t/unable-to-change-timezone/197158)

<div class="topic-metadata">

**Author:** [@MR551](https://discuss.elastic.co/u/MR551)\
**Replies:** 4\
**Last updated:** [August 28, 2019, 4:45pm UTC](https://discuss.elastic.co/t/unable-to-change-timezone/197158 "2019-08-28T16:45:38Z")

</div>

Hello, Trying to configure logstash to ingest error logs into elastic from a txt file, so far its working and data gets delivered into elastic, but the date plugin won't get convert it to Eastern time. Sample error fro…

---

## [Putting server time in the request http poller body logstash](https://discuss.elastic.co/t/putting-server-time-in-the-request-http-poller-body-logstash/184010)

<div class="topic-metadata">

**Author:** [@Hiven](https://discuss.elastic.co/u/Hiven)\
**Replies:** 4\
**Last updated:** [June 6, 2019, 6:59am UTC](https://discuss.elastic.co/t/putting-server-time-in-the-request-http-poller-body-logstash/184010 "2019-06-06T06:59:15Z")

</div>

Hello, I have a logstash confg with uses http poller. The big problem I have is that, I need the current date sent in the body so the API knows what data to return. It doesn't work with relative dates, it needs the exac…

---

## [Forcing only a particular template on index?](https://discuss.elastic.co/t/forcing-only-a-particular-template-on-index/171810)

<div class="topic-metadata">

**Author:** [@exocore123](https://discuss.elastic.co/u/exocore123)\
**Replies:** 4\
**Last updated:** [March 11, 2019, 6:43pm UTC](https://discuss.elastic.co/t/forcing-only-a-particular-template-on-index/171810 "2019-03-11T18:43:37Z")

</div>

Hello elasticsearch community, I've encountered a particular annoying issue. I have a particular template that I want to force onto my index logstash-transaction-\*. And there exists another template called logstash-\* t…

---

## [Match phrase prefix in set of documents](https://discuss.elastic.co/t/match-phrase-prefix-in-set-of-documents/160570)

<div class="topic-metadata">

**Author:** [@Ozymandy](https://discuss.elastic.co/u/Ozymandy)\
**Replies:** 4\
**Last updated:** [December 13, 2018, 9:34pm UTC](https://discuss.elastic.co/t/match-phrase-prefix-in-set-of-documents/160570 "2018-12-13T21:34:17Z")

</div>

Hi all, I am using multi match phrase\_prefix for matching my documents. And it works fine when I need to extract matched documents by whole index. But it does not work properly for case when I need to query by prefix in…

---

## [Painless: Generating a scripted field thats an exact copy of another field](https://discuss.elastic.co/t/painless-generating-a-scripted-field-thats-an-exact-copy-of-another-field/116135)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 4\
**Last updated:** [January 18, 2018, 10:45pm UTC](https://discuss.elastic.co/t/painless-generating-a-scripted-field-thats-an-exact-copy-of-another-field/116135 "2018-01-18T22:45:36Z")

</div>

Hi I'm trying to generate a scripted field that returns only certain tokens of a derived field. For example, if I have a field with possible combination of tokens "Movies, pg13, Drama, comedy, etc" I want to generate a …

---

## [Multiple passwords for redis output on filebeat](https://discuss.elastic.co/t/multiple-passwords-for-redis-output-on-filebeat/111284)

<div class="topic-metadata">

**Author:** [@aboullaite](https://discuss.elastic.co/u/aboullaite)\
**Replies:** 4\
**Last updated:** [December 15, 2017, 9:50am UTC](https://discuss.elastic.co/t/multiple-passwords-for-redis-output-on-filebeat/111284 "2017-12-15T09:50:46Z")

</div>

Hello all, I'm sending data collected by filebeats to 2 different redis, and I'm enabling load balancer! My config file look something like this: output.redis: hosts: - IP1 - IP2 password: redis\_password key: "f…

---

## [Search query not doing fetches](https://discuss.elastic.co/t/search-query-not-doing-fetches/101947)

<div class="topic-metadata">

**Author:** [@toka](https://discuss.elastic.co/u/toka)\
**Replies:** 4\
**Last updated:** [October 11, 2017, 7:40am UTC](https://discuss.elastic.co/t/search-query-not-doing-fetches/101947 "2017-10-11T07:40:29Z")

</div>

Hi guys, I'm checking through the field search.fetch\_total of the \_nodes/stats API how many fetches a search query is triggering, but it's not triggering any fetch. I tried to add different filters with random values t…

---

## [Error logstash setup](https://discuss.elastic.co/t/error-logstash-setup/68191)

<div class="topic-metadata">

**Author:** [@bob-bza](https://discuss.elastic.co/u/bob-bza)\
**Replies:** 4\
**Last updated:** [December 6, 2016, 8:18pm UTC](https://discuss.elastic.co/t/error-logstash-setup/68191 "2016-12-06T20:18:59Z")

</div>

I was trying to configure logstash on my instance i was getting facing issue. i dont know if i was doing anything wrong I tried on both ubuntu & centos i was facing same issue with 5.0.1 but 2.4 works for me.I wan't to…

---

## [After Upgrade ES I cannot restart ES service](https://discuss.elastic.co/t/after-upgrade-es-i-cannot-restart-es-service/49009)

<div class="topic-metadata">

**Author:** [@tommoholmes10](https://discuss.elastic.co/u/tommoholmes10)\
**Replies:** 4\
**Last updated:** [May 4, 2016, 12:17pm UTC](https://discuss.elastic.co/t/after-upgrade-es-i-cannot-restart-es-service/49009 "2016-05-04T12:17:47Z")

</div>

After Upgrade ES I cannot restart ES service please help me

---

## [TransportClient hangs on addTransportClient](https://discuss.elastic.co/t/transportclient-hangs-on-addtransportclient/4671)

<div class="topic-metadata">

**Author:** [@Rob\_Young](https://discuss.elastic.co/u/Rob_Young)\
**Replies:** 4\
**Last updated:** [June 22, 2011, 7:42am UTC](https://discuss.elastic.co/t/transportclient-hangs-on-addtransportclient/4671 "2011-06-22T07:42:35Z")

</div>

I have set up and started an elastic search node and confirmed it's working with a couple of Python scripts. I have indexed a bunch of documents and am able to search over them. However, I am having trouble getting th…

---

## [Elastic App Search UI - Group by field](https://discuss.elastic.co/t/elastic-app-search-ui-group-by-field/366144)

<div class="topic-metadata">

**Author:** [@b3t](https://discuss.elastic.co/u/b3t)\
**Replies:** 3\
**Last updated:** [September 6, 2024, 2:02pm UTC](https://discuss.elastic.co/t/elastic-app-search-ui-group-by-field/366144 "2024-09-06T14:02:04Z")

</div>

Hi everyone, I'm working on implementing a group-by functionality in my React app using Elastic's search-ui and running into some roadblocks. I've tried multiple approaches to achieve grouping and aggregations, but none…

---

## [Re-Allow Write After Index Shrink](https://discuss.elastic.co/t/re-allow-write-after-index-shrink/351568)

<div class="topic-metadata">

**Author:** [@ktbishop](https://discuss.elastic.co/u/ktbishop)\
**Replies:** 3\
**Last updated:** [January 22, 2024, 6:36pm UTC](https://discuss.elastic.co/t/re-allow-write-after-index-shrink/351568 "2024-01-22T18:36:57Z")

</div>

Hello all! Currently on Elasticsearch 7.17. I have a data stream with an ILM policy that rolls data over from Hot to Warm after a period of time. Once an index rolls over to the Warm phase it is shrunk, which I understa…

---

## [SSL certificate - x509: certificate signed by unknown authority (Solved)](https://discuss.elastic.co/t/ssl-certificate-x509-certificate-signed-by-unknown-authority-solved/328011)

<div class="topic-metadata">

**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\
**Replies:** 0\
**Last updated:** [March 19, 2023, 8:15am UTC](https://discuss.elastic.co/t/ssl-certificate-x509-certificate-signed-by-unknown-authority-solved/328011 "2023-03-19T08:15:24Z")

</div>

I've deployed a standalone elastic-agent on my host machine where ELK is running. I've add the MISP integration policy to this standalone agent with https://localhost as MISP url variable. It's self signed certificate. …

---

## [Vega Boxplot - referencing properties in \_source (infinite extent error)](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 3\
**Last updated:** [May 18, 2022, 5:16pm UTC](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696 "2022-05-18T17:16:52Z")

</div>

Hello - In an effort to build a boxplot against my real elastic data, I have started by following this documentation to create a simple boxplot using Vega (v5) in Kibana (v8.0) Instead of using the pre-canned penguins.…

---

## [Labels / characters / texts are not visible properly for Legend Position in Kibana Dashboard](https://discuss.elastic.co/t/labels-characters-texts-are-not-visible-properly-for-legend-position-in-kibana-dashboard/299686)

<div class="topic-metadata">

**Author:** [@hitnalli\_praveen](https://discuss.elastic.co/u/hitnalli_praveen)\
**Replies:** 3\
**Last updated:** [March 16, 2022, 3:19pm UTC](https://discuss.elastic.co/t/labels-characters-texts-are-not-visible-properly-for-legend-position-in-kibana-dashboard/299686 "2022-03-16T15:19:33Z")

</div>

I've setup a Visualization with few Required fields for the different systems with Split Series in Kibana. (for e.g. systems are numbered like SU01, SU02 ... SU013) and each system is installed with different Software (S…

---

## [Search for unused fields](https://discuss.elastic.co/t/search-for-unused-fields/292060)

<div class="topic-metadata">

**Author:** [@hamzahda](https://discuss.elastic.co/u/hamzahda)\
**Replies:** 3\
**Last updated:** [December 16, 2021, 2:04am UTC](https://discuss.elastic.co/t/search-for-unused-fields/292060 "2021-12-16T02:04:10Z")

</div>

I have an index pttern that has a huge number of fields and I want to clean it up by removing the unused fields. The way that I'm using to find out if a field is used or not is by searching for the field in the available…

---

## [Negative epoch\_millis sometimes throw error while indexing](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239)

<div class="topic-metadata">

**Author:** [@JulienNemo](https://discuss.elastic.co/u/JulienNemo)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 9:15am UTC](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239 "2021-01-06T09:15:43Z")

</div>

Hi, version: 7.10.1 Have a"dateOfBirth": { "type": "date" } field. I can't index the document with the dateOfBirth:-1555200000 error : “reason”:“date\_time\_exception: Invalid value for Year (vali…

---

## [Specifying types in bulk requests is deprecated: No data at Elasticsearch 7.6.0 - Logstash is still sending data:](https://discuss.elastic.co/t/specifying-types-in-bulk-requests-is-deprecated-no-data-at-elasticsearch-7-6-0-logstash-is-still-sending-data/221496)

<div class="topic-metadata">

**Author:** [@m.a\_farazuddin](https://discuss.elastic.co/u/m.a_farazuddin)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 10:49pm UTC](https://discuss.elastic.co/t/specifying-types-in-bulk-requests-is-deprecated-no-data-at-elasticsearch-7-6-0-logstash-is-still-sending-data/221496 "2020-02-28T22:49:56Z")

</div>

I am using Elastic stack container set up to monitor database There is no data at elasticsearch after the below error - logs on elastic - logstash version - 7.6.0 elasticsearch - 7.6.0 kibana - 7.6.0 What do I need …

---

## [Kibana: Range based on count](https://discuss.elastic.co/t/kibana-range-based-on-count/199431)

<div class="topic-metadata">

**Author:** [@megakoresh](https://discuss.elastic.co/u/megakoresh)\
**Replies:** 3\
**Last updated:** [September 16, 2019, 8:27am UTC](https://discuss.elastic.co/t/kibana-range-based-on-count/199431 "2019-09-16T08:27:04Z")

</div>

Hey. We have some host vulnerability data that we'd like to visualize and I am not sure how to do that. The data is in following format: { "id": "5e7473a8-1eda-4a4e-a640-650db8f3c129", "timestamp": "2019-09-13T1…

[Previous page](https://discuss.elastic.co/top.md?page=1591&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1593&per_page=50&period=all)
