# Top

**URL:** https://discuss.elastic.co/top.md?page=1604&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1605

---

## [Custom Beats vs. Scripts](https://discuss.elastic.co/t/custom-beats-vs-scripts/60791)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 3\
**Last updated:** [September 19, 2016, 7:44am UTC](https://discuss.elastic.co/t/custom-beats-vs-scripts/60791 "2016-09-19T07:44:48Z")

</div>

Working on a project that will be querying a number of data sources and inserting the resulting data into ES. The data sources include: Bing API, Twitter, Instagram, Facebook, and more social media platforms. Thoughts …

---

## [Working with child fields](https://discuss.elastic.co/t/working-with-child-fields/50353)

<div class="topic-metadata">

**Author:** [@ronwest99](https://discuss.elastic.co/u/ronwest99)\
**Replies:** 3\
**Last updated:** [May 19, 2016, 5:35am UTC](https://discuss.elastic.co/t/working-with-child-fields/50353 "2016-05-19T05:35:56Z")

</div>

My log looks something like this. "request": { "hostip": "10.7.37.74", "enduserip": "", } Obviously "enduserip": "" is not a valid IP address. I would like to delete the field in this case. This syntax isn…

---

## [What happens new data is created during reindexing procedure?](https://discuss.elastic.co/t/what-happens-new-data-is-created-during-reindexing-procedure/37608)

<div class="topic-metadata">

**Author:** [@fastae](https://discuss.elastic.co/u/fastae)\
**Replies:** 3\
**Last updated:** [December 19, 2015, 7:46am UTC](https://discuss.elastic.co/t/what-happens-new-data-is-created-during-reindexing-procedure/37608 "2015-12-19T07:46:45Z")

</div>

I have ran across re-indexing the data with zero-down time. However, what happens if new data comes in? Does the re-indexed index reflect the changes? We recently changed the mapping which required us to reindex the da…

---

## [Transport Client hangs in my web application during search](https://discuss.elastic.co/t/transport-client-hangs-in-my-web-application-during-search/15131)

<div class="topic-metadata">

**Author:** [@search](https://discuss.elastic.co/u/search)\
**Replies:** 3\
**Last updated:** [September 26, 2014, 7:41am UTC](https://discuss.elastic.co/t/transport-client-hangs-in-my-web-application-during-search/15131 "2014-09-26T07:41:51Z")

</div>

I have a web application in which I create a Transport Client using Spring (singleton) and inject it into my service. When I receive a request in my controller, controller calls the service and service uses the trans…

---

## [ElasticSearch JAVA API](https://discuss.elastic.co/t/elasticsearch-java-api/9595)

<div class="topic-metadata">

**Author:** [@Vinay](https://discuss.elastic.co/u/Vinay)\
**Replies:** 8\
**Last updated:** [November 8, 2012, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-java-api/9595 "2012-11-08T09:31:07Z")

</div>

Hi, I am in doubt choosing between ElasticSearch Java HttpServer (org.elasticsearch.http.\*) or other JAVA Servers like Vert.x Java Server? --

---

## [Using MongoDB IDs as ES document IDs](https://discuss.elastic.co/t/using-mongodb-ids-as-es-document-ids/8157)

<div class="topic-metadata">

**Author:** [@James\_Carr](https://discuss.elastic.co/u/James_Carr)\
**Replies:** 3\
**Last updated:** [June 22, 2012, 4:25am UTC](https://discuss.elastic.co/t/using-mongodb-ids-as-es-document-ids/8157 "2012-06-22T04:25:21Z")

</div>

Hi All, I recently have been working on a Mongoose plugin to index MongoDB documents in Elasticsearch and wanted to use the same IDs across both but ran into some errors. I'll be able to investigate further when I…

---

## [Index missing!](https://discuss.elastic.co/t/index-missing/6078)

<div class="topic-metadata">

**Author:** [@qwerty1411](https://discuss.elastic.co/u/qwerty1411)\
**Replies:** 0\
**Last updated:** [December 6, 2011, 2:51pm UTC](https://discuss.elastic.co/t/index-missing/6078 "2011-12-06T14:51:06Z")

</div>

hello, i am attempting to get ES working on an EC2 instance with a couchdb back end. I have encounter 3 problems that i am getting no where with. My first problem is that that i was able to get a river up and…

---

## [CustomLogs integration turns unhealthy with simple wildcard change](https://discuss.elastic.co/t/customlogs-integration-turns-unhealthy-with-simple-wildcard-change/345423)

<div class="topic-metadata">

**Author:** [@CiscoMT](https://discuss.elastic.co/u/CiscoMT)\
**Replies:** 7\
**Last updated:** [October 26, 2023, 4:34pm UTC](https://discuss.elastic.co/t/customlogs-integration-turns-unhealthy-with-simple-wildcard-change/345423 "2023-10-26T16:34:53Z")

</div>

Hello y'all, I am trying to break down the different paths I have for app logs in my server into different customLogs integrations. Originally I was using a single integration of the CustomLog type with path : C:\\ine…

---

## [Data in app search](https://discuss.elastic.co/t/data-in-app-search/304781)

<div class="topic-metadata">

**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\
**Replies:** 7\
**Last updated:** [May 16, 2022, 12:51pm UTC](https://discuss.elastic.co/t/data-in-app-search/304781 "2022-05-16T12:51:53Z")

</div>

Hi everyone, I'm kindda new to app search, so would anyone be able to tell me where is data that is indexed and collected by spp searxh stored?? Is it stored on elasticsearch's cluster and nodes? Or does it have it's o…

---

## [Esrally running the same track by giving multiple laps not working](https://discuss.elastic.co/t/esrally-running-the-same-track-by-giving-multiple-laps-not-working/279035)

<div class="topic-metadata">

**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\
**Replies:** 7\
**Last updated:** [July 21, 2021, 10:22am UTC](https://discuss.elastic.co/t/esrally-running-the-same-track-by-giving-multiple-laps-not-working/279035 "2021-07-21T10:22:11Z")

</div>

I want to run the same track repeatedly in a loop , because I want to do the benchmark performance testing for 3 hours. When I ran without lap count, it get completed within 30 minutes. However, even when I ran with…

---

## [How to visualize Metricbeat Prometheus histograms](https://discuss.elastic.co/t/how-to-visualize-metricbeat-prometheus-histograms/232074)

<div class="topic-metadata">

**Author:** [@iulian7](https://discuss.elastic.co/u/iulian7)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-visualize-metricbeat-prometheus-histograms/232074 "2020-05-11T16:38:24Z")

</div>

Hello, Elastic offers a Prometheus Metricbeat (https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-prometheus.html) module that scrapes a Prometheus /metrics endpoint and pushes the metrics to an …

---

## [I'm getting error of 'x of y shards failed' try to open in kibana visualization dashboard](https://discuss.elastic.co/t/im-getting-error-of-x-of-y-shards-failed-try-to-open-in-kibana-visualization-dashboard/227755)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 1\
**Last updated:** [April 13, 2020, 3:24pm UTC](https://discuss.elastic.co/t/im-getting-error-of-x-of-y-shards-failed-try-to-open-in-kibana-visualization-dashboard/227755 "2020-04-13T15:24:14Z")

</div>

Hi Team, In my production environment kibana i am trying to open the kibana visualization dashboard , I'm getting error of '1 of 3 shards failed' in kibana UI right side corner. could please help us how to trace this…

---

## [Error: no repository definition for http://helm.elastic.co/](https://discuss.elastic.co/t/error-no-repository-definition-for-http-helm-elastic-co/206220)

<div class="topic-metadata">

**Author:** [@pedro.pacm](https://discuss.elastic.co/u/pedro.pacm)\
**Replies:** 1\
**Last updated:** [November 6, 2019, 4:42am UTC](https://discuss.elastic.co/t/error-no-repository-definition-for-http-helm-elastic-co/206220 "2019-11-06T04:42:16Z")

</div>

Hi, I have a kubernetes cluster managed by a default Gitlab account. All services are deployed through Gitlabs's CI/CD, so I'm not able to hand Helm directly. I created a custom Helm chart and added the Elasticsearch c…

---

## [How to generates the query based on the users input](https://discuss.elastic.co/t/how-to-generates-the-query-based-on-the-users-input/198837)

<div class="topic-metadata">

**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\
**Replies:** 1\
**Last updated:** [September 10, 2019, 11:37am UTC](https://discuss.elastic.co/t/how-to-generates-the-query-based-on-the-users-input/198837 "2019-09-10T11:37:55Z")

</div>

Dear All. I having issue while searching with multiple fields condition in elastic search. i want know how can we run elastic search query based on user input (provided fields). Very Thanks HadoopHelp

---

## [Scripted fields in canvas](https://discuss.elastic.co/t/scripted-fields-in-canvas/159909)

<div class="topic-metadata">

**Author:** [@hashitha](https://discuss.elastic.co/u/hashitha)\
**Replies:** 1\
**Last updated:** [December 7, 2018, 10:56pm UTC](https://discuss.elastic.co/t/scripted-fields-in-canvas/159909 "2018-12-07T22:56:12Z")

</div>

I have created a scripted field to calculate the total based on items in an array in the document int total= 0; for(int i = 0; i \< params.\_source\['ServiceItemList'\].size(); i++) { total+= params.\_source\['ServiceIt…

---

## [Watcher Sending Slack dynamic Attachments](https://discuss.elastic.co/t/watcher-sending-slack-dynamic-attachments/120786)

<div class="topic-metadata">

**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\
**Replies:** 1\
**Last updated:** [February 21, 2018, 8:35am UTC](https://discuss.elastic.co/t/watcher-sending-slack-dynamic-attachments/120786 "2018-02-21T08:35:13Z")

</div>

I'm setting a watcher on ELK 6.2 to send dynamic attachments. I just want to extract string in the key message of all the hits. Below is the actions defined on my watcher. It's not working. The text is coming fine in th…

---

## [Dynamically match and rename json fields](https://discuss.elastic.co/t/dynamically-match-and-rename-json-fields/77220)

<div class="topic-metadata">

**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\
**Replies:** 1\
**Last updated:** [March 6, 2017, 9:31am UTC](https://discuss.elastic.co/t/dynamically-match-and-rename-json-fields/77220 "2017-03-06T09:31:36Z")

</div>

Hoping I can get some ideas on how to go about fixing this issue I'm running into. I'm on elastic 2.3.5, and it doesn't allow for fields to contain a .. I'm using the JSON filter in log stash to parse this data: "net…

---

## [Logstash not indexing s3 input](https://discuss.elastic.co/t/logstash-not-indexing-s3-input/68068)

<div class="topic-metadata">

**Author:** [@nixmind](https://discuss.elastic.co/u/nixmind)\
**Replies:** 1\
**Last updated:** [December 7, 2016, 1:36pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-s3-input/68068 "2016-12-07T13:36:04Z")

</div>

Hi, I have an issue diffucult to troubleshoot. I had set up an architecture with filebeat as forwarder on my web APIs, a logstash listening to filebeat on port 5044 on a dedicated machine, and indexing log messages on …

---

## [Pushing data to elasticsearch using java api](https://discuss.elastic.co/t/pushing-data-to-elasticsearch-using-java-api/67190)

<div class="topic-metadata">

**Author:** [@aniketpatil](https://discuss.elastic.co/u/aniketpatil)\
**Replies:** 1\
**Last updated:** [November 25, 2016, 2:32pm UTC](https://discuss.elastic.co/t/pushing-data-to-elasticsearch-using-java-api/67190 "2016-11-25T14:32:25Z")

</div>

I have installed elasticsearch 2.4.2 and trying to push data to it using previous code Settings settings = ImmutableSettings.settingsBuilder() .put("cluster.name", clusterName ).build(); Client client = new TransportC…

---

## [Is there is a way to sort terms aggregation by string field?](https://discuss.elastic.co/t/is-there-is-a-way-to-sort-terms-aggregation-by-string-field/37926)

<div class="topic-metadata">

**Author:** [@eliskovets](https://discuss.elastic.co/u/eliskovets)\
**Replies:** 1\
**Last updated:** [December 24, 2015, 12:59pm UTC](https://discuss.elastic.co/t/is-there-is-a-way-to-sort-terms-aggregation-by-string-field/37926 "2015-12-24T12:59:00Z")

</div>

I would like to know if we have possibility to use string field to order buckets of aggregated results. At the beginning we had an index without duplicates and had a query like that to get all required results: es\_que…

---

## [Terms vs should](https://discuss.elastic.co/t/terms-vs-should/84007)

<div class="topic-metadata">

**Author:** [@gsouf](https://discuss.elastic.co/u/gsouf)\
**Replies:** 0\
**Last updated:** [April 28, 2017, 11:45am UTC](https://discuss.elastic.co/t/terms-vs-should/84007 "2017-04-28T11:45:58Z")

</div>

Hi, I wonder if there is a difference between using multiple value in a "terms" filter and using multiple "term" queries in a should filter. With example, is there a difference between this query: { "query": { …

---

## [Curator not can find indecies](https://discuss.elastic.co/t/curator-not-can-find-indecies/333465)

<div class="topic-metadata">

**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\
**Replies:** 6\
**Last updated:** [May 16, 2023, 12:28pm UTC](https://discuss.elastic.co/t/curator-not-can-find-indecies/333465 "2023-05-16T12:28:27Z")

</div>

I have an issue with deleting indexes! this is my Action file: actions: 1: action: delete\_indices description: \>- Delete indices. Find which to delete by first limiting the list to logstash- prefi…

---

## [How to load balance data coming from various applications to logstash](https://discuss.elastic.co/t/how-to-load-balance-data-coming-from-various-applications-to-logstash/319989)

<div class="topic-metadata">

**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\
**Replies:** 6\
**Last updated:** [November 30, 2022, 7:32pm UTC](https://discuss.elastic.co/t/how-to-load-balance-data-coming-from-various-applications-to-logstash/319989 "2022-11-30T19:32:23Z")

</div>

Hi All, I need some suggestions on how/what can be used to balance the data that is coming from 1000 of applications to logstash. Architecture looks like this: We have various sources who's logs needs to be integrated…

---

## [Dockerizing a working ELK project, 'Dead ES instance'](https://discuss.elastic.co/t/dockerizing-a-working-elk-project-dead-es-instance/243639)

<div class="topic-metadata">

**Author:** [@kl29](https://discuss.elastic.co/u/kl29)\
**Replies:** 6\
**Last updated:** [August 9, 2020, 10:18pm UTC](https://discuss.elastic.co/t/dockerizing-a-working-elk-project-dead-es-instance/243639 "2020-08-09T22:18:09Z")

</div>

My setup works without Dockerizing. Now, making a Dockerized project, logstash cannot connect to the ES instance. I set http.host: "0.0.0.0" in logstash.yml, and my pipeline.conf is: input { exec { command =\> "loc…

---

## [Logstash failing and restarting every 13 seconds](https://discuss.elastic.co/t/logstash-failing-and-restarting-every-13-seconds/161571)

<div class="topic-metadata">

**Author:** [@WilliamG](https://discuss.elastic.co/u/WilliamG)\
**Replies:** 6\
**Last updated:** [December 27, 2018, 7:54pm UTC](https://discuss.elastic.co/t/logstash-failing-and-restarting-every-13-seconds/161571 "2018-12-27T19:54:49Z")

</div>

The following error is occurring on one node in a three node elasticsearch/logstash cluster. It was functioning normally and apparently something changed recently (unaware of any work on the server at that time and not …

---

## [Unresolved or ambiguous specs during Gem::Specification.reset: date (\>= 0), but cannot run gem command to resolve](https://discuss.elastic.co/t/unresolved-or-ambiguous-specs-during-gem-specification-reset-date-0-but-cannot-run-gem-command-to-resolve/351931)

<div class="topic-metadata">

**Author:** [@hughjarse](https://discuss.elastic.co/u/hughjarse)\
**Replies:** 2\
**Last updated:** [February 15, 2024, 1:17am UTC](https://discuss.elastic.co/t/unresolved-or-ambiguous-specs-during-gem-specification-reset-date-0-but-cannot-run-gem-command-to-resolve/351931 "2024-02-15T01:17:52Z")

</div>

Running the logstash-plugin list or logstash-plugin install commands cause the following error. How can I troubleshoot and resolve this problem with the gem command that is built into Logstash? WARN: Unresolved or ambig…

---

## [Error saving watch \[1:234\] \[script\] unknown field \[query\]](https://discuss.elastic.co/t/error-saving-watch-1-234-script-unknown-field-query/296989)

<div class="topic-metadata">

**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\
**Replies:** 2\
**Last updated:** [February 11, 2022, 4:26pm UTC](https://discuss.elastic.co/t/error-saving-watch-1-234-script-unknown-field-query/296989 "2022-02-11T16:26:32Z")

</div>

{ "trigger": { "schedule": { "interval": "10s" } }, "input": { "chain": { "inputs": \[ { "first": { "http": { "request": { "scheme": "https", "host": "", "port": , "method": "get", "path": "llm\_full\_addre…

---

## [Unable to expand persistent volumes used by Elasticsearch on Oracle Cloud](https://discuss.elastic.co/t/unable-to-expand-persistent-volumes-used-by-elasticsearch-on-oracle-cloud/292114)

<div class="topic-metadata">

**Author:** [@Pranay\_Reddy](https://discuss.elastic.co/u/Pranay_Reddy)\
**Replies:** 2\
**Last updated:** [December 21, 2021, 8:03am UTC](https://discuss.elastic.co/t/unable-to-expand-persistent-volumes-used-by-elasticsearch-on-oracle-cloud/292114 "2021-12-21T08:03:17Z")

</div>

I am using block volumes on oracle cloud infrastructure for persistent storage of Elasticsearch(ECK). I wanted to increase the amount of storage of persistent volume. So, I increased the storage value in volume claim te…

---

## [Working on Playground EUI Live Documentation](https://discuss.elastic.co/t/working-on-playground-eui-live-documentation/223838)

<div class="topic-metadata">

**Author:** [@Ishaan28malik](https://discuss.elastic.co/u/Ishaan28malik)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 5:50pm UTC](https://discuss.elastic.co/t/working-on-playground-eui-live-documentation/223838 "2020-03-17T17:50:41Z")

</div>

Hey Greg, I am very much interested to work on Playground EUI live documentation project, I have previous experience in Front-end. I just wanted to know a few details related to the project from you, Are we planning to …

---

## [Ingestnodeのエラー処理について](https://discuss.elastic.co/t/ingestnode/214924)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 12:27am UTC](https://discuss.elastic.co/t/ingestnode/214924 "2020-02-07T00:27:35Z")

</div>

お世話になっております。 Ingest node Pipelineのon\_failureの設定方法について質問させて頂きます。 下記のようにPipelineAからPipelineB、PipelineBからPipelineCを呼び出す処理を検討しています。 PUT /\_ingest/pipeline/PipelineA { "processors": \[ { "pipeline": { "if…

---

## [‼ Why is metricbeat contacting metadata.tencentyun.com?](https://discuss.elastic.co/t/why-is-metricbeat-contacting-metadata-tencentyun-com/200059)

<div class="topic-metadata">

**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\
**Replies:** 2\
**Last updated:** [September 19, 2019, 9:01am UTC](https://discuss.elastic.co/t/why-is-metricbeat-contacting-metadata-tencentyun-com/200059 "2019-09-19T09:01:48Z")

</div>

Following some issues with our 6.x Elastic stack deployment, I deployed a new cluster to Google Cloud Platform in Belgium running Elasticsearch 7.3.2. I also updated our Filebeat deployment on our Kubernetes cluster to v…

---

## [How to add/rename fields recursively instead using mutate or instead doing one by one?](https://discuss.elastic.co/t/how-to-add-rename-fields-recursively-instead-using-mutate-or-instead-doing-one-by-one/181688)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 2\
**Last updated:** [May 18, 2019, 5:07pm UTC](https://discuss.elastic.co/t/how-to-add-rename-fields-recursively-instead-using-mutate-or-instead-doing-one-by-one/181688 "2019-05-18T17:07:14Z")

</div>

Hi All How to add/rename fields recursively, instead doing one by one Here is my dataset with message value as \[{ "Row ID" : 201, "Order ID" : "CA-2017-105074", "Order Date" : "6/24/2017", "Segment" : "Consumer", …

---

## [Strict dynamic mapping exception when importing visualizations and dashboards to kibana via curl](https://discuss.elastic.co/t/strict-dynamic-mapping-exception-when-importing-visualizations-and-dashboards-to-kibana-via-curl/132152)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 2\
**Last updated:** [May 17, 2018, 6:54am UTC](https://discuss.elastic.co/t/strict-dynamic-mapping-exception-when-importing-visualizations-and-dashboards-to-kibana-via-curl/132152 "2018-05-17T06:54:26Z")

</div>

Hi, After a long and painful journey, I was able to write a script that changes the index id on imported visualizations/searchs/dashboard from kibana index into one of kibana's indeces that the user wants. What I try t…

---

## [\[6.1\] BulkProcessor and HighLevelRestClient](https://discuss.elastic.co/t/6-1-bulkprocessor-and-highlevelrestclient/114754)

<div class="topic-metadata">

**Author:** [@macgngsta](https://discuss.elastic.co/u/macgngsta)\
**Replies:** 2\
**Last updated:** [January 9, 2018, 9:05pm UTC](https://discuss.elastic.co/t/6-1-bulkprocessor-and-highlevelrestclient/114754 "2018-01-09T21:05:41Z")

</div>

In the documentation Using Bulk Processor, the following snippet is provided: BulkProcessor bulkProcessor = BulkProcessor.builder(client, new BulkProcessor.Listener() { /\* Listener methods \*/ }) .setBulkActions(10000) .…

---

## [No hit in full text search](https://discuss.elastic.co/t/no-hit-in-full-text-search/99969)

<div class="topic-metadata">

**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\
**Replies:** 2\
**Last updated:** [September 11, 2017, 12:57pm UTC](https://discuss.elastic.co/t/no-hit-in-full-text-search/99969 "2017-09-11T12:57:57Z")

</div>

Hi All, I have an odd issue on full text search with Kibana. I just installed my ES and Kibana by default and am injecting data in two ways, REST and java application using ES java client. One interesting thing is tha…

---

## [Customize kibana visualize and dashboard](https://discuss.elastic.co/t/customize-kibana-visualize-and-dashboard/97337)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 2\
**Last updated:** [August 20, 2017, 4:30am UTC](https://discuss.elastic.co/t/customize-kibana-visualize-and-dashboard/97337 "2017-08-20T04:30:44Z")

</div>

Kibana, Elasticsearch and Logstash version 5.5.1 I create a verticat bar visualize . its works well. its show @timestamp per 5 minutes. How can I change @timestamp per 10 minute? my another data table visualize.…

---

## [Disk usage problem?](https://discuss.elastic.co/t/disk-usage-problem/71981)

<div class="topic-metadata">

**Author:** [@wrkilu](https://discuss.elastic.co/u/wrkilu)\
**Replies:** 2\
**Last updated:** [January 18, 2017, 11:48am UTC](https://discuss.elastic.co/t/disk-usage-problem/71981 "2017-01-18T11:48:53Z")

</div>

Hi, I have cluster with 4 nodes: 2 data, 1 master and 1 coordinating only: # curl -XGET localhost:9200/\_cat/nodes?v host ip heap.percent ram.percent load node.role master name 10.209.3.135 10.209.3…

---

## [How do i make mapping for geo\_point?](https://discuss.elastic.co/t/how-do-i-make-mapping-for-geo-point/62139)

<div class="topic-metadata">

**Author:** [@Tal\_Bar\_Or](https://discuss.elastic.co/u/Tal_Bar_Or)\
**Replies:** 2\
**Last updated:** [October 9, 2016, 1:24pm UTC](https://discuss.elastic.co/t/how-do-i-make-mapping-for-geo-point/62139 "2016-10-09T13:24:41Z")

</div>

Hello, I am using Logstash to index (index name "ids\_sensors")Snort syslog events to Elsticsearch , all seems to work fine In the logstash I have following input regarding "Geioip " input below , the stdout of log sta…

---

## [How to stop return of Null properties(fields)](https://discuss.elastic.co/t/how-to-stop-return-of-null-properties-fields/59463)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 2\
**Last updated:** [September 13, 2016, 2:30pm UTC](https://discuss.elastic.co/t/how-to-stop-return-of-null-properties-fields/59463 "2016-09-13T14:30:38Z")

</div>

I have a set of documents that I'm getting from SQL Server that have a lot of fields that were never used and hence Null. I cannot change the schema however when I query these docs in ElasticSearch the number of empty f…

---

## [Sorting es results based on a Json field value of type date](https://discuss.elastic.co/t/sorting-es-results-based-on-a-json-field-value-of-type-date/48950)

<div class="topic-metadata">

**Author:** [@mohigupt](https://discuss.elastic.co/u/mohigupt)\
**Replies:** 2\
**Last updated:** [May 3, 2016, 6:33am UTC](https://discuss.elastic.co/t/sorting-es-results-based-on-a-json-field-value-of-type-date/48950 "2016-05-03T06:33:58Z")

</div>

Hi, i have recently started using elasticsearch and am completely lost on how to sort the documents based on a field value for which I have defined the type as "date" and a custom format as "yyyy-MM-dd HH:mm:ss -HHmm". I…

---

## [Filebeat failed to load](https://discuss.elastic.co/t/filebeat-failed-to-load/319749)

<div class="topic-metadata">

**Author:** [@shubham.s](https://discuss.elastic.co/u/shubham.s)\
**Replies:** 4\
**Last updated:** [November 25, 2022, 8:03am UTC](https://discuss.elastic.co/t/filebeat-failed-to-load/319749 "2022-11-25T08:03:22Z")

</div>

● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/usr/lib/systemd/system/filebeat.service; disabled; vendor preset: disabled) Active: failed (Result: start-lim…

---

## [Kibana Title rename](https://discuss.elastic.co/t/kibana-title-rename/313147)

<div class="topic-metadata">

**Author:** [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Replies:** 4\
**Last updated:** [September 6, 2022, 7:49am UTC](https://discuss.elastic.co/t/kibana-title-rename/313147 "2022-09-06T07:49:03Z")

</div>

Hello Does anybody know how to change Kibana Title? I need to work together with two Elastic cluster. Test and Production cluster's. Create/Edit on Test cluster and push changes after cheking to production cluster. B…

---

## [How can I create my own APM Client for \[Insert Language\]](https://discuss.elastic.co/t/how-can-i-create-my-own-apm-client-for-insert-language/311166)

<div class="topic-metadata">

**Author:** [@psilospore](https://discuss.elastic.co/u/psilospore)\
**Replies:** 1\
**Last updated:** [August 2, 2022, 12:22am UTC](https://discuss.elastic.co/t/how-can-i-create-my-own-apm-client-for-insert-language/311166 "2022-08-02T00:22:48Z")

</div>

Hi is there any guidance on how I could make my own APM Client? I am attempting to create one for Haskell. I attempted to browse some of the existing implementations but they can be quite large. It also seems that some c…

---

## [Date\_histogram with date range date type is text](https://discuss.elastic.co/t/date-histogram-with-date-range-date-type-is-text/190501)

<div class="topic-metadata">

**Author:** [@nitingarg](https://discuss.elastic.co/u/nitingarg)\
**Replies:** 4\
**Last updated:** [July 15, 2019, 1:50pm UTC](https://discuss.elastic.co/t/date-histogram-with-date-range-date-type-is-text/190501 "2019-07-15T13:50:27Z")

</div>

{ "query": { "range": { "created\_ts": { "from": "2018-03-28", "to": "2019-07-28" } } }, "aggs": { "group\_by\_created\_ts": { "date\_histogram": { "field": "created\_ts", "interval": "day", "format": "yyyy-MM-dd…

---

## [Multiple terms query match with pagination](https://discuss.elastic.co/t/multiple-terms-query-match-with-pagination/179514)

<div class="topic-metadata">

**Author:** [@Deepak\_Jaganath](https://discuss.elastic.co/u/Deepak_Jaganath)\
**Replies:** 4\
**Last updated:** [May 3, 2019, 1:19pm UTC](https://discuss.elastic.co/t/multiple-terms-query-match-with-pagination/179514 "2019-05-03T13:19:16Z")

</div>

I am using elastic search in my node js projec, version of elastic search is 6.2 .I have used NPM package mongosastic for searching the index.During a multiple terms query search the pagination is not working.The same re…

---

## [Applying Fields Parsed From a Few Logs to Many Logs](https://discuss.elastic.co/t/applying-fields-parsed-from-a-few-logs-to-many-logs/175261)

<div class="topic-metadata">

**Author:** [@ShaqFanClub](https://discuss.elastic.co/u/ShaqFanClub)\
**Replies:** 4\
**Last updated:** [April 22, 2019, 12:59pm UTC](https://discuss.elastic.co/t/applying-fields-parsed-from-a-few-logs-to-many-logs/175261 "2019-04-22T12:59:48Z")

</div>

Hello! I am working with Nessus scan results, and have been using Logstash to parse out additional fields based on specific logs that are ingested. For example, a "mac\_address" field is parsed out IF the "name" field is…

---

## [Realtime data Integration between salesforce and elastic](https://discuss.elastic.co/t/realtime-data-integration-between-salesforce-and-elastic/166105)

<div class="topic-metadata">

**Author:** [@Reena\_Roseline](https://discuss.elastic.co/u/Reena_Roseline)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 8:28am UTC](https://discuss.elastic.co/t/realtime-data-integration-between-salesforce-and-elastic/166105 "2019-01-29T08:28:54Z")

</div>

My Requirement is to get real-time data from Salesforce and ingest it to Elastic and visualize them in kibana, Currently, I am importing a .csv file from salesforce and logstashing it to elastic, But I am doing it man…

---

## [Still have problem Region Map](https://discuss.elastic.co/t/still-have-problem-region-map/150623)

<div class="topic-metadata">

**Author:** [@Alberto\_Sironi](https://discuss.elastic.co/u/Alberto_Sironi)\
**Replies:** 4\
**Last updated:** [October 4, 2018, 10:41pm UTC](https://discuss.elastic.co/t/still-have-problem-region-map/150623 "2018-10-04T22:41:07Z")

</div>

Hi evrybody, i got a bit confused about configuration of region map. I download a shape file from a site elastic configuration region map page a file geojson of Brasil. the file looks like: {"type": "FeatureCollection…

---

## [Pattern matching in Logstash](https://discuss.elastic.co/t/pattern-matching-in-logstash/95622)

<div class="topic-metadata">

**Author:** [@Deepthi\_V](https://discuss.elastic.co/u/Deepthi_V)\
**Replies:** 4\
**Last updated:** [August 7, 2017, 7:03pm UTC](https://discuss.elastic.co/t/pattern-matching-in-logstash/95622 "2017-08-07T19:03:50Z")

</div>

Hi All, I am calling Logstash using stdin like shown below: /opt/logstash/bin/logstash agent -e ‘input { file { path =\> “/home/dv/Desktop/log\_output/input/\*\*/\*.log” codec =\> multiline { pattern =\> “^\\s” what =\> “previo…

---

## [Script template to manipulate records using parameters](https://discuss.elastic.co/t/script-template-to-manipulate-records-using-parameters/88429)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [June 8, 2017, 2:35pm UTC](https://discuss.elastic.co/t/script-template-to-manipulate-records-using-parameters/88429 "2017-06-08T14:35:52Z")

</div>

Hi, actually, into different indexes, I have duplicated records which have the same field's values but, obviously, different \_id value. so, trying to remove these duplicated records this is what I would like to do: q…

[Previous page](https://discuss.elastic.co/top.md?page=1603&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1605&per_page=50&period=all)
