# Top **URL:** https://discuss.elastic.co/top.md?page=1602&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1603 --- ## [Create/Delete index speedup for integration tests](https://discuss.elastic.co/t/create-delete-index-speedup-for-integration-tests/25766)
**Author:** [@nizsheanez](https://discuss.elastic.co/u/nizsheanez)\ **Replies:** 4\ **Last updated:** [July 18, 2015, 7:28am UTC](https://discuss.elastic.co/t/create-delete-index-speedup-for-integration-tests/25766 "2015-07-18T07:28:29Z")
Hello. We have integration tests which do lot's of Create/Delete index operations. Can you suggest which settings can i use for improve speed of tests? Current my settings are: { "index": { "warmer.enabled": tr… --- ## [Ingesting alarm lists from an external system](https://discuss.elastic.co/t/ingesting-alarm-lists-from-an-external-system/391225)
**Author:** [@RavuAlHemio](https://discuss.elastic.co/u/RavuAlHemio)\ **Replies:** 6\ **Last updated:** [November 13, 2026, 9:02pm UTC](https://discuss.elastic.co/t/ingesting-alarm-lists-from-an-external-system/391225 "2026-11-13T21:02:12Z")
Greetings, we are currently centralizing our logging and monitoring infrastructure around a central ELK stack. Processing log messages has been a breeze, of course, and we have also had a quick primer on how to tackle t… --- ## [Elasticsearch S3 Snapshot Repository - Is s3:DeleteObject Mandatory for S3 Repository and SLM?](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-repository-is-s3-deleteobject-mandatory-for-s3-repository-and-slm/388588)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 5\ **Last updated:** [July 22, 2026, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-repository-is-s3-deleteobject-mandatory-for-s3-repository-and-slm/388588 "2026-07-22T15:18:44Z")
Hi Team, We are configuring Elasticsearch 9.1.3 snapshots to an AWS S3 bucket using the repository-s3 plugin and would like to clarify whether s3:DeleteObject permission is mandatory. Environment Elasticsearch Version… --- ## [Problem with centos 7 install](https://discuss.elastic.co/t/problem-with-centos-7-install/261941)
**Author:** [@cyrduf](https://discuss.elastic.co/u/cyrduf)\ **Replies:** 1\ **Last updated:** [January 24, 2021, 11:56pm UTC](https://discuss.elastic.co/t/problem-with-centos-7-install/261941 "2021-01-24T23:56:41Z")
Hello, I have some problems after elasticsearch installation on centos 7 VM. There is the log and if you can help me to solve. Best Regards \[root@localhost log\]# sudo yum install -y elasticsearch Modules complémenta… --- ## [Raspberry Pi 4's CPU temperature monitoring](https://discuss.elastic.co/t/raspberry-pi-4s-cpu-temperature-monitoring/227874)
**Author:** [@ralones](https://discuss.elastic.co/u/ralones)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 12:47pm UTC](https://discuss.elastic.co/t/raspberry-pi-4s-cpu-temperature-monitoring/227874 "2020-05-11T12:47:49Z")
Hello, Is there a metric set or a way to send the Raspberry Pi's CPU temperature to an ES based Grafana platform using Metricbeat? --- ## [How to filter based on the count of terms in a field](https://discuss.elastic.co/t/how-to-filter-based-on-the-count-of-terms-in-a-field/204947)
**Author:** [@pschinis](https://discuss.elastic.co/u/pschinis)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 4:06pm UTC](https://discuss.elastic.co/t/how-to-filter-based-on-the-count-of-terms-in-a-field/204947 "2019-10-25T16:06:23Z")
So I have a field that's basically just an array of tags and what I want to do is filter out any documents where the length of that tags array (i.e. the number of tags in the field) is greater than some specific number. … --- ## [Unable to install Elastic search with Open distro](https://discuss.elastic.co/t/unable-to-install-elastic-search-with-open-distro/202326)
**Author:** [@vejibeta](https://discuss.elastic.co/u/vejibeta)\ **Replies:** 1\ **Last updated:** [October 4, 2019, 10:31am UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-with-open-distro/202326 "2019-10-04T10:31:45Z")
Unable to install Elastic search with Open distro. commands(from official website of open distro): wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss-7.2.0-amd64.deb sudo dpkg -i elasticsearch-… --- ## [Logstash/Elastic slow indexing](https://discuss.elastic.co/t/logstash-elastic-slow-indexing/192388)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 10:47am UTC](https://discuss.elastic.co/t/logstash-elastic-slow-indexing/192388 "2019-07-29T10:47:57Z")
Hello, I am new to ELK and maybe my problem is dumm, but i cant get over it. I have very slow indexing( approx: 4k docs per min. sometimes its 8k) My setup - Centos 7 - Logstash 7.2 - Elastic 7.2 - Kibana 7.2 - (ELK a… --- ## [Elasticsearch group by and max on a text field of type Keyword](https://discuss.elastic.co/t/elasticsearch-group-by-and-max-on-a-text-field-of-type-keyword/190818)
**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\ **Replies:** 1\ **Last updated:** [July 19, 2019, 12:29pm UTC](https://discuss.elastic.co/t/elasticsearch-group-by-and-max-on-a-text-field-of-type-keyword/190818 "2019-07-19T12:29:16Z")
I am using the Elasticsearch 6.5. I am looking to find the documents with some filter condition (working fine) and then I need to take only docs which has the MAX timestamp (field in the doc). Basically when I search th… --- ## [How to access nested message in logstash KV filter](https://discuss.elastic.co/t/how-to-access-nested-message-in-logstash-kv-filter/175087)
**Author:** [@Vincent\_Chen](https://discuss.elastic.co/u/Vincent_Chen)\ **Replies:** 1\ **Last updated:** [April 3, 2019, 1:44pm UTC](https://discuss.elastic.co/t/how-to-access-nested-message-in-logstash-kv-filter/175087 "2019-04-03T13:44:06Z")
Hi everyone, I want to use KV filter to parse a nested message field, see below for my sample json: { "\_index": "myindex", "\_type": "doc", "\_id": "myid", "\_score": 5.339951, "\_source": { "ms… --- ## [Store text with hiphens and dot](https://discuss.elastic.co/t/store-text-with-hiphens-and-dot/140622)
**Author:** [@shashank123hr](https://discuss.elastic.co/u/shashank123hr)\ **Replies:** 1\ **Last updated:** [July 20, 2018, 12:37pm UTC](https://discuss.elastic.co/t/store-text-with-hiphens-and-dot/140622 "2018-07-20T12:37:26Z")
I am trying to come up with a query for elastic search to search for strings with hiphen and dots example : "PN-8100.0500-070, PN-8100.0500, PN-8100.0500-180". The search should be able to match exact strings like "PN-81… --- ## [Source ip is not showing in kibana map](https://discuss.elastic.co/t/source-ip-is-not-showing-in-kibana-map/135162)
**Author:** [@naggappan](https://discuss.elastic.co/u/naggappan)\ **Replies:** 1\ **Last updated:** [June 8, 2018, 8:28pm UTC](https://discuss.elastic.co/t/source-ip-is-not-showing-in-kibana-map/135162 "2018-06-08T20:28:18Z")
I have a a Cloud Trial log and which is sent to logstash -\> Elastic search -\> Kibana In logs I have the following field "Records.sourceIPAddress " Now I tried to visualize the data in Region map and there I have select… --- ## [Not able to create PreBuiltTransportClient intsance](https://discuss.elastic.co/t/not-able-to-create-prebuilttransportclient-intsance/82162)
**Author:** [@rMethre](https://discuss.elastic.co/u/rMethre)\ **Replies:** 1\ **Last updated:** [April 18, 2017, 8:31am UTC](https://discuss.elastic.co/t/not-able-to-create-prebuilttransportclient-intsance/82162 "2017-04-18T08:31:54Z")
java.lang.NoSuchMethodError: org.elasticsearch.transport.client.PreBuiltTransportClient.addPlugins(Ljava/util/Collection;Ljava/util/Collection;)Ljava/util/Collection; at org.elasticsearch.transport.client.PreBuiltTransp… --- ## [Unassigned shards при создании индекса](https://discuss.elastic.co/t/unassigned-shards/35031)
**Author:** [@11116](https://discuss.elastic.co/u/11116)\ **Replies:** 1\ **Last updated:** [November 19, 2015, 2:45pm UTC](https://discuss.elastic.co/t/unassigned-shards/35031 "2015-11-19T14:45:32Z")
Добрый день! Сейчас у меня каждый час создается новый индекс, при этом кластер становится желтым на некоторое время, пока новый индекс не зареплицируется. В мониторинге поставил задержку на появление алерта, но все так… --- ## [Can you confirm this is false positive?](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119)
**Author:** [@ThiruKumaran](https://discuss.elastic.co/u/ThiruKumaran)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 3:09pm UTC](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119 "2021-03-03T15:09:05Z")
Hi, Could you please check this file, as I think it is a false detection. his file has been falsely detected as malware link for the issue : https://www.virustotal.com/gui/file/4f8248e9f80ce5c367f75956a2f6b77262e72964… --- ## [Modsecurity on IIS and Winlogbeat PLEASE HELP! lol](https://discuss.elastic.co/t/modsecurity-on-iis-and-winlogbeat-please-help-lol/210586)
**Author:** [@SigmazGFX](https://discuss.elastic.co/u/SigmazGFX)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 10:32pm UTC](https://discuss.elastic.co/t/modsecurity-on-iis-and-winlogbeat-please-help-lol/210586 "2019-12-06T22:32:00Z")
Hey Gang, I'm really hoping for some help on this one. Previously we have been struggling on getting our Sophos XG working as a WAF solution, this has proven to be a bit daunting due to the fact that Sophos has basicall… --- ## [Getting "failed to parse field \[response.body\] of type \[keyword\] in document..."](https://discuss.elastic.co/t/getting-failed-to-parse-field-response-body-of-type-keyword-in-document/210196)
**Author:** [@zhelezovas](https://discuss.elastic.co/u/zhelezovas)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 2:16pm UTC](https://discuss.elastic.co/t/getting-failed-to-parse-field-response-body-of-type-keyword-in-document/210196 "2019-12-02T14:16:55Z")
Hello, I'm trying to parse json logs with filebeat processor. In general it works fine, but sometimes I get "failed to parse field \[response.body\] of type \[keyword\] in document..." error. This is my filebeat config file… --- ## [Scoring Problem with words of one letter](https://discuss.elastic.co/t/scoring-problem-with-words-of-one-letter/134167)
**Author:** [@Youssef1](https://discuss.elastic.co/u/Youssef1)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 11:32am UTC](https://discuss.elastic.co/t/scoring-problem-with-words-of-one-letter/134167 "2018-06-05T11:32:45Z")
Hi Everyone , i'm a beginner in ElasticSearch, i have an application that use elasticSearch to look for ingredients in a given food or fruit... i'm facing a problem with scoring if the user for example tape : "Vitamine… --- ## [Combining Filters ES 2.1.1](https://discuss.elastic.co/t/combining-filters-es-2-1-1/54217)
**Author:** [@basharz](https://discuss.elastic.co/u/basharz)\ **Replies:** 3\ **Last updated:** [July 7, 2016, 3:47am UTC](https://discuss.elastic.co/t/combining-filters-es-2-1-1/54217 "2016-07-07T03:47:02Z")
i have ES version 2.1.1 i tried the below sample query as per the link https://www.elastic.co/guide/en/elasticsearch/guide/current/combining-filters.html but i did not get any results, could anybody explain why, please G… --- ## [Hierarchical relationships..?](https://discuss.elastic.co/t/hierarchical-relationships/302)
**Author:** [@squalli2008](https://discuss.elastic.co/u/squalli2008)\ **Replies:** 3\ **Last updated:** [May 6, 2015, 7:07pm UTC](https://discuss.elastic.co/t/hierarchical-relationships/302 "2015-05-06T19:07:13Z")
Hi All, Does anyone have any experience in storing deep, hierarchical relationships in ES? We are trying to model something along the lines of: Food -\> Fruit -\> Green -\> Apple Doc Food -\> Fruit -\> Round -\> Apple Doc F… --- ## [Adding 1mln+ aliases is really slow](https://discuss.elastic.co/t/adding-1mln-aliases-is-really-slow/16208)
**Author:** [@Michal\_Zgliczynski](https://discuss.elastic.co/u/Michal_Zgliczynski)\ **Replies:** 3\ **Last updated:** [March 7, 2014, 3:16am UTC](https://discuss.elastic.co/t/adding-1mln-aliases-is-really-slow/16208 "2014-03-07T03:16:26Z")
First of all, thank you for building ElasticSearch. It is a truly awesome product. I am trying to use the "User data flow". For this, I create a single index and multiple aliases inside of it. In my use case, I ha… --- ## [Custom\_score query](https://discuss.elastic.co/t/custom-score-query/11613)
**Author:** [@Fadel\_Chafai](https://discuss.elastic.co/u/Fadel_Chafai)\ **Replies:** 3\ **Last updated:** [April 25, 2013, 12:17pm UTC](https://discuss.elastic.co/t/custom-score-query/11613 "2013-04-25T12:17:24Z")
Hello, I have a strange behavior with a custom\_score query ( normally the script applied to the score of the documents returned by the query ) here is my prob: I have a total of 440 hits with "script": "if (d… --- ## [Supply ElasticSearch Keystore password to start ElasticSearch Service](https://discuss.elastic.co/t/supply-elasticsearch-keystore-password-to-start-elasticsearch-service/346160)
**Author:** [@ChrisMannix](https://discuss.elastic.co/u/ChrisMannix)\ **Replies:** 2\ **Last updated:** [November 1, 2023, 6:38pm UTC](https://discuss.elastic.co/t/supply-elasticsearch-keystore-password-to-start-elasticsearch-service/346160 "2023-11-01T18:38:12Z")
Hi, I have been building my Elasticsearch cluster and I was playing around with the Elasticsearch keystore. If I change the Elasticsearch keystore password, the Elasticsearch service does not start anymore. This makes… --- ## [Transport data to remote networks via fleet / Beats](https://discuss.elastic.co/t/transport-data-to-remote-networks-via-fleet-beats/282507)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 12:13pm UTC](https://discuss.elastic.co/t/transport-data-to-remote-networks-via-fleet-beats/282507 "2021-08-26T12:13:00Z")
Hi, This is not a question about a specific setup, it's more or less me trying to understand the intended use of Beats / Fleet in distributed setup. In the past I built several setups where I used Logstash to transport… --- ## [Custom headers](https://discuss.elastic.co/t/custom-headers/234669)
**Author:** [@vincent.arnaud90](https://discuss.elastic.co/u/vincent.arnaud90)\ **Replies:** 2\ **Last updated:** [May 28, 2020, 7:13am UTC](https://discuss.elastic.co/t/custom-headers/234669 "2020-05-28T07:13:06Z")
Hello, I have a custom elasticsearch plugin that requires custom HTTP headers. So I'd like to know if there's a way for rally to passe custom headers other than using raw-request (exemple using --client-options or a head… --- ## [How to sort split group of metric visualization](https://discuss.elastic.co/t/how-to-sort-split-group-of-metric-visualization/222924)
**Author:** [@SrHades](https://discuss.elastic.co/u/SrHades)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 11:13am UTC](https://discuss.elastic.co/t/how-to-sort-split-group-of-metric-visualization/222924 "2020-03-12T11:13:02Z")
Is there a way to sort a bucket splitted group of metrics descending? --- ## [SIEM - Any overlap between filbeat ingesting syslog, auditlog, authlog and auditbeat (with auditd, system and FI modules)?](https://discuss.elastic.co/t/siem-any-overlap-between-filbeat-ingesting-syslog-auditlog-authlog-and-auditbeat-with-auditd-system-and-fi-modules/210235)
**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 10:26pm UTC](https://discuss.elastic.co/t/siem-any-overlap-between-filbeat-ingesting-syslog-auditlog-authlog-and-auditbeat-with-auditd-system-and-fi-modules/210235 "2019-12-05T22:26:14Z")
We are currently ingesting syslog, auditlog, authlog from our ubuntu systems via filebeat to Elasticsearch 7.4.2 as a part of build our SIEM. We are planning to add auditbeat with auditd, system and file integrity module… --- ## [JDBC input and JDBC output in one config](https://discuss.elastic.co/t/jdbc-input-and-jdbc-output-in-one-config/184753)
**Author:** [@fesenych](https://discuss.elastic.co/u/fesenych)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 7:43am UTC](https://discuss.elastic.co/t/jdbc-input-and-jdbc-output-in-one-config/184753 "2019-06-11T07:43:45Z")
Hi, I am trying to configure JDBC input and JDBC output in one configuration file. When in the configuration file is configured only on JDBC input or JDBC output, then everything works well when I try to combine them in … --- ## [Matching/Finding keywords in an already parsed field via GROK](https://discuss.elastic.co/t/matching-finding-keywords-in-an-already-parsed-field-via-grok/171999)
**Author:** [@WarriorHarb](https://discuss.elastic.co/u/WarriorHarb)\ **Replies:** 2\ **Last updated:** [March 15, 2019, 9:28am UTC](https://discuss.elastic.co/t/matching-finding-keywords-in-an-already-parsed-field-via-grok/171999 "2019-03-15T09:28:02Z")
Hello, So i have an unstructured log, after applying a GROK filter, i was able to parse it into seperate fields. The problem is that the last field which is {GREEDYDATA:Message} contains some keywords like "userID", "F… --- ## [Custom Transaction and MongoDB Spans](https://discuss.elastic.co/t/custom-transaction-and-mongodb-spans/150503)
**Author:** [@Henrique\_Marques\_Fer](https://discuss.elastic.co/u/Henrique_Marques_Fer)\ **Replies:** 2\ **Last updated:** [October 1, 2018, 8:00pm UTC](https://discuss.elastic.co/t/custom-transaction-and-mongodb-spans/150503 "2018-10-01T20:00:45Z")
Hi, I started integrating my project with the nodejs agent, which is f\* awesome by the way, it's working perfect with my express routes, giving me all the database action inside it and everything... Now i'm trying to ma… --- ## [Visualbuilder - Change data shown "per x minutes"?](https://discuss.elastic.co/t/visualbuilder-change-data-shown-per-x-minutes/144259)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [August 15, 2018, 1:48am UTC](https://discuss.elastic.co/t/visualbuilder-change-data-shown-per-x-minutes/144259 "2018-08-15T01:48:32Z")
Hi, I have some data coming in at 5 minute intervals and some visualbuilder graphs to display the data. However once I show more than 12 hours of data, the title below the graph goes from "per 5 minutes" to "per 10 minu… --- ## [How to retrieve field statistics now that \_field\_stats is deprecated](https://discuss.elastic.co/t/how-to-retrieve-field-statistics-now-that-field-stats-is-deprecated/104803)
**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\ **Replies:** 2\ **Last updated:** [October 26, 2017, 9:53am UTC](https://discuss.elastic.co/t/how-to-retrieve-field-statistics-now-that-field-stats-is-deprecated/104803 "2017-10-26T09:53:06Z")
Hi I read that \_field\_stats is deprecated and that I should use \_field\_caps or min/max aggregations. I use this API today to retrieve field statistics such as sum\_ttf and sum\_docfreq. From \_field\_caps docs, I don't see … --- ## [Help changing Bro logs Epoch time to readable](https://discuss.elastic.co/t/help-changing-bro-logs-epoch-time-to-readable/96338)
**Author:** [@Blaxican707](https://discuss.elastic.co/u/Blaxican707)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 4:53pm UTC](https://discuss.elastic.co/t/help-changing-bro-logs-epoch-time-to-readable/96338 "2017-08-10T16:53:42Z")
Hey all, thanks for the add. I’ve developed my config file that uses filebeat to push bro logs to logstash. Logstash parses pretty well, but my only problem that im running into is that I cannot change the epoch time a … --- ## [Elasticsearch performs slowly when data size increased](https://discuss.elastic.co/t/elasticsearch-performs-slowly-when-data-size-increased/75782)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 9:06am UTC](https://discuss.elastic.co/t/elasticsearch-performs-slowly-when-data-size-increased/75782 "2017-02-21T09:06:42Z")
We have a cluster with following details: 1. OS: Windows 7 (64 bit) 2. Number of nodes: 2 (i7 processor, 8Gb RAM) 3. ES version: 2.4.4 We have created an index with following details: 1. Index size: 86 Gb 2. Number of … --- ## [Issue while compiling beats](https://discuss.elastic.co/t/issue-while-compiling-beats/74886)
**Author:** [@jerome\_tan](https://discuss.elastic.co/u/jerome_tan)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 1:16pm UTC](https://discuss.elastic.co/t/issue-while-compiling-beats/74886 "2017-02-14T13:16:34Z")
I want to extend packetbeat to support more protocols, while I compiled the beats, it reported an error: ....... ok github.com/elastic/beats/libbeat/logp 0.124s coverage: 30.5% of statements command \[go test -cover -… --- ## [ES Recommended Configuration?](https://discuss.elastic.co/t/es-recommended-configuration/4109)
**Author:** [@srrin](https://discuss.elastic.co/u/srrin)\ **Replies:** 2\ **Last updated:** [March 17, 2011, 11:11am UTC](https://discuss.elastic.co/t/es-recommended-configuration/4109 "2011-03-17T11:11:01Z")
Hi Shay, We are planning to load a huge dataset up in the end of this week. What would be your recommendation for loading 10 Million documents with 200 GB of Index size? We are not planning to have Replica and Gateway … --- ## [How to Retrieve More Than 10K Records in EQL (\_eql/search)? (Elasticsearch 7.10.1)](https://discuss.elastic.co/t/how-to-retrieve-more-than-10k-records-in-eql-eql-search-elasticsearch-7-10-1/374264)
**Author:** [@Gkayy](https://discuss.elastic.co/u/Gkayy)\ **Replies:** 1\ **Last updated:** [February 11, 2025, 4:21pm UTC](https://discuss.elastic.co/t/how-to-retrieve-more-than-10k-records-in-eql-eql-search-elasticsearch-7-10-1/374264 "2025-02-11T16:21:18Z")
There is a limitation on Elastic search when doing a search for over 10k+ records, is there a way to retrieve records over 10k+? Note that I am using EQL query to retrieve records over endpoint \_EQL, I am aware that pagi… --- ## [Pie chart from a single event](https://discuss.elastic.co/t/pie-chart-from-a-single-event/236095)
**Author:** [@GilKor](https://discuss.elastic.co/u/GilKor)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 10:04am UTC](https://discuss.elastic.co/t/pie-chart-from-a-single-event/236095 "2020-06-14T10:04:54Z")
Hi, Is it possible to make a pie chart using the value itself in the top hit event? for example, I have in my top hit event : passCount: 3 failCount: 1 skipCount: 0 I want to make a pie chart from that information,… --- ## [How to pass the aggs top 1 value to the query](https://discuss.elastic.co/t/how-to-pass-the-aggs-top-1-value-to-the-query/329496)
**Author:** [@vrviji](https://discuss.elastic.co/u/vrviji)\ **Replies:** 6\ **Last updated:** [April 6, 2023, 4:38pm UTC](https://discuss.elastic.co/t/how-to-pass-the-aggs-top-1-value-to-the-query/329496 "2023-04-06T16:38:35Z")
I am trying to create an alert using ElasticDSL 7.17 query. I need to filter the documents based on certain condition and group the documents on a field and get the top first group. My query should match only the top gro… --- ## [Logstash - do not starts when jdbc filter fails connection](https://discuss.elastic.co/t/logstash-do-not-starts-when-jdbc-filter-fails-connection/267545)
**Author:** [@cesar.hernandez.a3se](https://discuss.elastic.co/u/cesar.hernandez.a3se)\ **Replies:** 6\ **Last updated:** [March 23, 2021, 8:59pm UTC](https://discuss.elastic.co/t/logstash-do-not-starts-when-jdbc-filter-fails-connection/267545 "2021-03-23T20:59:04Z")
Hi I've created a logstash input filter: filter { jdbc\_static { loaders =\> \[ { id =\> "remote-ipsservers" query =\> "select address, display\_name from host\_list'" … --- ## [Monitoring-es indices more than 10g a day](https://discuss.elastic.co/t/monitoring-es-indices-more-than-10g-a-day/185114)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 6\ **Last updated:** [June 12, 2019, 8:31am UTC](https://discuss.elastic.co/t/monitoring-es-indices-more-than-10g-a-day/185114 "2019-06-12T08:31:16Z")
Hello, I have a question. I have several cluster running and everything works except one cluster. The monitoring for elasticsearch is enabled with all default values, but my 3 node Cluster (7.1.0) uses 10g a day. My o… --- ## [Elasticsearch halting when multiple indices are created](https://discuss.elastic.co/t/elasticsearch-halting-when-multiple-indices-are-created/57715)
**Author:** [@bstascavage](https://discuss.elastic.co/u/bstascavage)\ **Replies:** 6\ **Last updated:** [August 10, 2016, 9:35pm UTC](https://discuss.elastic.co/t/elasticsearch-halting-when-multiple-indices-are-created/57715 "2016-08-10T21:35:00Z")
I have a cluster of 3 master nodes and 10 data nodes, 31k shards. We use this as a centralized logging platform supporting multiple products (53, to be exact), with logstash creating an index-per-day-per-product. (ie. … --- ## [Elasticsearch service fails in Microsoft Team Foundation Server after upgrade from TFS 2017 to 2018](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731)
**Author:** [@PaulNovelli](https://discuss.elastic.co/u/PaulNovelli)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731 "2019-09-09T15:34:36Z")
Posting here at Elissa J's request after initial email exchange. We recently upgraded an installation of Microsoft Team Foundation Server (TFS) running on Windows Server 2016 Standard from TFS 2017 to TFS 2018. The upg… --- ## [Connection could not be made because the target machine actively refused it](https://discuss.elastic.co/t/connection-could-not-be-made-because-the-target-machine-actively-refused-it/126111)
**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 3:10pm UTC](https://discuss.elastic.co/t/connection-could-not-be-made-because-the-target-machine-actively-refused-it/126111 "2018-03-29T15:10:04Z")
Hi, I am facing some issue with metricbeats connection Failed to connect: Get http://ipaddress:9200: proxy connect tcp: dial tcp 127.0.0.1:3128: connectex: No connection could be made because the target machine activel… --- ## [Elastic Agent / Endpoint no longer can connect to fleet server](https://discuss.elastic.co/t/elastic-agent-endpoint-no-longer-can-connect-to-fleet-server/316702)
**Author:** [@Ting\_sf](https://discuss.elastic.co/u/Ting_sf)\ **Replies:** 1\ **Last updated:** [October 17, 2022, 8:07pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-no-longer-can-connect-to-fleet-server/316702 "2022-10-17T20:07:44Z")
I had elastic agent / end point installed on about 10 computers, they were working for pass months, I just noted today that all pcs are showing offline status, and I check logs, all show following error: \[elastic\_agent\]… --- ## [Поиск по началу строки](https://discuss.elastic.co/t/topic/305784)
**Author:** [@yemcoder](https://discuss.elastic.co/u/yemcoder)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 7:25pm UTC](https://discuss.elastic.co/t/topic/305784 "2022-06-10T19:25:25Z")
Здравствуйте Исходные данные POST test/\_bulk { "index" : { "\_id" : "1" } } {"localizedName": {"name": "iPhone 12"} } { "index" : { "\_id" : "2" } } {"localizedName": {"name": "Чехол для iPhone 12 Pro"} } Поисковый за… --- ## [Sparkline chart](https://discuss.elastic.co/t/sparkline-chart/229162)
**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 3:16pm UTC](https://discuss.elastic.co/t/sparkline-chart/229162 "2020-04-22T15:16:22Z")
Hi, In Kibana visualization, is it possible to create a result with sparkline chart as one of the columns in the result? Ideally to combine the trend line in one column and aggregated values in all other columns in the … --- ## [Dynamic field visualization](https://discuss.elastic.co/t/dynamic-field-visualization/221248)
**Author:** [@laureli](https://discuss.elastic.co/u/laureli)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 4:58pm UTC](https://discuss.elastic.co/t/dynamic-field-visualization/221248 "2020-02-27T16:58:37Z")
Hi! Is it possible to appearance dynamic added filed in Kibana dashboard? For example, I have a new field in index and I want to see this field on some (existing or even a new one) chart. Can it happen automatically wit… --- ## [Exact Match with Synonyms](https://discuss.elastic.co/t/exact-match-with-synonyms/216735)
**Author:** [@plawler92](https://discuss.elastic.co/u/plawler92)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 9:24pm UTC](https://discuss.elastic.co/t/exact-match-with-synonyms/216735 "2020-01-30T21:24:45Z")
Hi, I have a field containing city names that I would like to get the exact city name out of while still utilizing synonyms. So If I searched for either "St Louis" or "Saint Louis" I would get back "Saint Louis" but no… --- ## [Can't configure a multi-node cluster using Elastic-Kubernetes](https://discuss.elastic.co/t/cant-configure-a-multi-node-cluster-using-elastic-kubernetes/188562)
**Author:** [@Chaitanya\_Kaul](https://discuss.elastic.co/u/Chaitanya_Kaul)\ **Replies:** 1\ **Last updated:** [July 2, 2019, 7:22pm UTC](https://discuss.elastic.co/t/cant-configure-a-multi-node-cluster-using-elastic-kubernetes/188562 "2019-07-02T19:22:36Z")
Hello guys, I was trying to configure a multi node cluster using cloud-on-k8s but I'm unable to achieve that. Basically I created a NFS server as a pod and created two seperate PVs to mount the same end-point so that my… [Previous page](https://discuss.elastic.co/top.md?page=1601&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1603&per_page=50&period=all)