# Top **URL:** https://discuss.elastic.co/top.md?page=1633&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1634 --- ## [Multiline log parsing from redis to logstash](https://discuss.elastic.co/t/multiline-log-parsing-from-redis-to-logstash/76588)
**Author:** [@prosenjit](https://discuss.elastic.co/u/prosenjit)\ **Replies:** 3\ **Last updated:** [February 27, 2017, 9:25am UTC](https://discuss.elastic.co/t/multiline-log-parsing-from-redis-to-logstash/76588 "2017-02-27T09:25:37Z")
Hi Everyone, I have multiline custom logs which I am processing as a single line by the filebeat multiline keyword. Now this includes \\n at the end of each line. This however causes grok parse failure in my logstsash con… --- ## [ES: Ways to work with frequently updated fields of document](https://discuss.elastic.co/t/es-ways-to-work-with-frequently-updated-fields-of-document/22865)
**Author:** [@11181](https://discuss.elastic.co/u/11181)\ **Replies:** 3\ **Last updated:** [March 25, 2015, 6:27am UTC](https://discuss.elastic.co/t/es-ways-to-work-with-frequently-updated-fields-of-document/22865 "2015-03-25T06:27:15Z")
I have forum. And every topic has such field as viewCount - how many times topic was viewed by forum users. I wanted that all fields of topics were taken from ES (id,date,title,content and viewCount). However, this c… --- ## [Apache Benchmark Connection reset by peer](https://discuss.elastic.co/t/apache-benchmark-connection-reset-by-peer/6834)
**Author:** [@haarts](https://discuss.elastic.co/u/haarts)\ **Replies:** 3\ **Last updated:** [February 29, 2012, 2:05pm UTC](https://discuss.elastic.co/t/apache-benchmark-connection-reset-by-peer/6834 "2012-02-29T14:05:56Z")
All, In our never ending quest to break ES we let loose Apache Benchmark on our ES install: $ ab -n20 http://foobar.com:9200/pictures/picture/some\_random\_id Nearly always we get: apr\_socket\_recv: Connection re… --- ## [co.elastic.clients.json.JsonpMappingException: Error deserializing co.elastic.clients.elasticsearch.\_types.query\_dsl.MatchQuery: Invalid enum 'NONE'](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-query-dsl-matchquery-invalid-enum-none/350660)
**Author:** [@MADHAV\_JHA\_Govind](https://discuss.elastic.co/u/MADHAV_JHA_Govind)\ **Replies:** 7\ **Last updated:** [January 9, 2024, 5:13pm UTC](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-query-dsl-matchquery-invalid-enum-none/350660 "2024-01-09T17:13:09Z")
Hi Team, I am facing issue while sending the query as json to Elasticsearch using latest client which is 8.11.1 please help me if i Iam trying anything wrong. StringReader queryJson = new StringReader(query); SearchRes… --- ## [SearchUI get all results from autocomplete](https://discuss.elastic.co/t/searchui-get-all-results-from-autocomplete/336564)
**Author:** [@adrian\_es](https://discuss.elastic.co/u/adrian_es)\ **Replies:** 7\ **Last updated:** [June 28, 2023, 3:53pm UTC](https://discuss.elastic.co/t/searchui-get-all-results-from-autocomplete/336564 "2023-06-28T15:53:03Z")
Hello! I'm trying to replace my current search bar, located in the header of my React app, using SearchBox from SearchUI. When a user clicks a match I use onSelectAutocomplete to apply some custom logic to decide what … --- ## [ILM: empty indices didn't age-out](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980)
**Author:** [@Adam\_Lin](https://discuss.elastic.co/u/Adam_Lin)\ **Replies:** 7\ **Last updated:** [February 4, 2023, 2:40pm UTC](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980 "2023-02-04T14:40:29Z")
Hi, I create an ILM policy and apply it to my index template, everything works fine at first until after a day, there will be an empty index left Here is my ILM policy { "test-policy" : { "version" : 4, "mod… --- ## [Recorded Future Integration Package Setup Stack Traces](https://discuss.elastic.co/t/recorded-future-integration-package-setup-stack-traces/303559)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 7\ **Last updated:** [May 25, 2022, 9:52pm UTC](https://discuss.elastic.co/t/recorded-future-integration-package-setup-stack-traces/303559 "2022-05-25T21:52:01Z")
Setting up the Recorded Future integration package. Package installed smoothly and I was setting up feeds for domain, hash, url, ip. When setting up the url feed, I got an error when clicking Save. Believe it was from c… --- ## [Same Snap Repository, Less Snaps](https://discuss.elastic.co/t/same-snap-repository-less-snaps/269364)
**Author:** [@glimmbo](https://discuss.elastic.co/u/glimmbo)\ **Replies:** 7\ **Last updated:** [April 8, 2021, 5:48pm UTC](https://discuss.elastic.co/t/same-snap-repository-less-snaps/269364 "2021-04-08T17:48:50Z")
Using AWS ES Service, with repository-s3 plugin, I have two instances, launched with the same settings. I register the same snap repo successfully, but when I GET /\_cat/snapshots/repo\_name?v the second instance (created … --- ## [Complex SQL query calculated field generation in kibana](https://discuss.elastic.co/t/complex-sql-query-calculated-field-generation-in-kibana/259356)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 7\ **Last updated:** [December 23, 2020, 7:19am UTC](https://discuss.elastic.co/t/complex-sql-query-calculated-field-generation-in-kibana/259356 "2020-12-23T07:19:56Z")
Hello, We want to created a visualization based on regular user in every month. Here is the requirement: "The visualization would display the number of regular users every month, regular users are those who have logg… --- ## [How to select data from multiple indicess](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772 "2020-08-27T08:04:40Z")
Hi Everyone, I am new to ELK stack, and I am facing an issue with searching data from multiple indices in single query. I am able to do this from Dev tool but not from Discover or visualization. Can anyone please help … --- ## [Stop all nodes while stopping master node](https://discuss.elastic.co/t/stop-all-nodes-while-stopping-master-node/229218)
**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 11:08am UTC](https://discuss.elastic.co/t/stop-all-nodes-while-stopping-master-node/229218 "2020-04-22T11:08:55Z")
Hi, I have configured my elasticsearch cluster configuration like below Node 1 : Master Node only Node 2: Master/data Node 3: data node only I have configured master eligible node Node1 and node2 When i stopped nod… --- ## [Вопрос по визуализации](https://discuss.elastic.co/t/topic/222443)
**Author:** [@kubatura](https://discuss.elastic.co/u/kubatura)\ **Replies:** 7\ **Last updated:** [March 11, 2020, 2:59pm UTC](https://discuss.elastic.co/t/topic/222443 "2020-03-11T14:59:59Z")
Добрый день! У меня есть вот такой график (строится из данных из одной таблицы) На оси Y располагаются id наименований, текстовое значение которых находится в другой таблице. Вопрос: как мне "вытащить" наименования, ч… --- ## [Watcher send mail if it doesn't meet the requirement](https://discuss.elastic.co/t/watcher-send-mail-if-it-doesnt-meet-the-requirement/177973)
**Author:** [@yasin](https://discuss.elastic.co/u/yasin)\ **Replies:** 7\ **Last updated:** [May 15, 2019, 11:48am UTC](https://discuss.elastic.co/t/watcher-send-mail-if-it-doesnt-meet-the-requirement/177973 "2019-05-15T11:48:42Z")
Dear Team, I want to setup a advanced watcher with: If it doesn't get the total hits or text message then it needs to send a mail(if possible within a timeframe). Please help me out with this one. --- ## [Create index questions](https://discuss.elastic.co/t/create-index-questions/156771)
**Author:** [@liuuu](https://discuss.elastic.co/u/liuuu)\ **Replies:** 7\ **Last updated:** [November 16, 2018, 4:27am UTC](https://discuss.elastic.co/t/create-index-questions/156771 "2018-11-16T04:27:22Z")
PUT test { "settings" : { "number\_of\_shards" : 1 }, "mappings" : { "\_doc" : { "properties" : { "field1" : { "type" : "text" } } } } } what … --- ## [Capturing clear text beats traffic with wireshark](https://discuss.elastic.co/t/capturing-clear-text-beats-traffic-with-wireshark/260590)
**Author:** [@qbui](https://discuss.elastic.co/u/qbui)\ **Replies:** 1\ **Last updated:** [January 10, 2021, 10:00pm UTC](https://discuss.elastic.co/t/capturing-clear-text-beats-traffic-with-wireshark/260590 "2021-01-10T22:00:23Z")
Hello, Has anyone tried to capture and analyze the "clear text" beats traffic (FileBeat, Winlogbeats, etc.) as it is being sent to Logstash or Elasticsearch? In its default configuration, the traffic is being sent unenc… --- ## [Import CVS to Kibana using filebeat](https://discuss.elastic.co/t/import-cvs-to-kibana-using-filebeat/166686)
**Author:** [@Sergejs\_Kuznecovs](https://discuss.elastic.co/u/Sergejs_Kuznecovs)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 8:51am UTC](https://discuss.elastic.co/t/import-cvs-to-kibana-using-filebeat/166686 "2019-02-01T08:51:35Z")
Hello! I'm a beginner in this theme. Maybe someone can help me. I need to import csv file to kibana, to build some graph using filebeat. I did filebeat conf like that: filebeat.prospectors: type: log enabled: true … --- ## [Report 2.4 to kibana version 4.?](https://discuss.elastic.co/t/report-2-4-to-kibana-version-4/59619)
**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\ **Replies:** 1\ **Last updated:** [September 2, 2016, 5:56am UTC](https://discuss.elastic.co/t/report-2-4-to-kibana-version-4/59619 "2016-09-02T05:56:59Z")
we use kibana 4.4.1 but ./kibana plugin --install kibana/reporting/latest is unsuccessful, error: Plugin installation was unsuccessful due to error "/home/ec2-user/kibana-4.4.1-linux-x64/installedPlugins/reporting/node\_m… --- ## [로그스태시를 통해 mysql에서 elasticsearch로 업데이트 데이터 가져오기 ](https://discuss.elastic.co/t/mysql-elasticsearch/124066)
**Author:** [@songhee](https://discuss.elastic.co/u/songhee)\ **Replies:** 0\ **Last updated:** [March 15, 2018, 10:13am UTC](https://discuss.elastic.co/t/mysql-elasticsearch/124066 "2018-03-15T10:13:20Z")
안녕하세요 최근에 엘라스틱서치를 배우고 있는 초보 개발자 입니다. 저는 최근에 mysql드라이버에 연결하는데 성공하여 엘라스틱서치에 테이블 데이터를 집어 넣는데 성공했습니다. 로그스태시 덕분입니다. 근데 처음에 bulk insert 데이터 말고도 추후 updata/delete된 데이터도 elasticsearch에 적용시키고 싶습니다. 이를 위한 통삭적인 플로우를 설명해주세요 … --- ## [IPv4 and IPv6](https://discuss.elastic.co/t/ipv4-and-ipv6/57795)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 0\ **Last updated:** [August 11, 2016, 10:34am UTC](https://discuss.elastic.co/t/ipv4-and-ipv6/57795 "2016-08-11T10:34:35Z")
Hi, Scenario: The input i'm receiving in Logstash is sometimes IPv4 and sometimes IPv6, on the same column. It differs sometimes from time to time. Right now, I have an IPv4 GROK pattern. Problem: When an IPv6 addres… --- ## [Fleet with own artifact registry fails cause of external GPG validation](https://discuss.elastic.co/t/fleet-with-own-artifact-registry-fails-cause-of-external-gpg-validation/345904)
**Author:** [@xtruthx](https://discuss.elastic.co/u/xtruthx)\ **Replies:** 5\ **Last updated:** [November 3, 2023, 1:51pm UTC](https://discuss.elastic.co/t/fleet-with-own-artifact-registry-fails-cause-of-external-gpg-validation/345904 "2023-11-03T13:51:42Z")
I have in an environment as described here Air Gapped Env artifacts hosted my own artifact registry. This is also cleanly queried during upgrade see log. However, a GPG validation is attempted externally. But why? Wher… --- ## [Simple question about Index Rollover](https://discuss.elastic.co/t/simple-question-about-index-rollover/327999)
**Author:** [@Mark\_S](https://discuss.elastic.co/u/Mark_S)\ **Replies:** 5\ **Last updated:** [March 20, 2023, 8:07am UTC](https://discuss.elastic.co/t/simple-question-about-index-rollover/327999 "2023-03-20T08:07:19Z")
I have a simple policy for index rollover every day (or every 1gb). I use an index template -\> index pattern-\>index alias (see bellow). However it does not seem to rotate. Any ideas why (or how to test it? E.g if I send… --- ## [How to check elasticsearch current version after login to linux ? How to upgrade it with new version?](https://discuss.elastic.co/t/how-to-check-elasticsearch-current-version-after-login-to-linux-how-to-upgrade-it-with-new-version/310865)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 5\ **Last updated:** [July 29, 2022, 6:23am UTC](https://discuss.elastic.co/t/how-to-check-elasticsearch-current-version-after-login-to-linux-how-to-upgrade-it-with-new-version/310865 "2022-07-29T06:23:33Z")
Hi , I am new to elk in linux. How to check elasticsearch current version after login to linux ? I want to upgrade it with new version also . --- ## [Outils import export collection en python pour elasticsearch 2.3.x](https://discuss.elastic.co/t/outils-import-export-collection-en-python-pour-elasticsearch-2-3-x/263359)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 5\ **Last updated:** [February 5, 2021, 8:14pm UTC](https://discuss.elastic.co/t/outils-import-export-collection-en-python-pour-elasticsearch-2-3-x/263359 "2021-02-05T20:14:45Z")
Bonjour, Je cherche un outil en python pour faire un export import de collection sur un elastic 2.3.1, pour faire un backup, pas du npm, j'ai du python installé partout, c'est pas le cas du npm Est ce quelqu'un en co… --- ## [How can I stop cluster from filling my cold nodes with hot data?](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 5\ **Last updated:** [January 19, 2021, 1:11am UTC](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044 "2021-01-19T01:11:56Z")
title really says it all. I just added two cold nodes to my cluster -- these have slow disks and I don't want active indexes on them but I find that ES is treating them the same as the other nodes. both nodes have node… --- ## [Installing things on ES startup](https://discuss.elastic.co/t/installing-things-on-es-startup/226913)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 1:14pm UTC](https://discuss.elastic.co/t/installing-things-on-es-startup/226913 "2020-04-09T13:14:22Z")
How to make sure something gets installed into ES on startup? Just right now I'm looking at users and roles, but there are probably other things we want to get in through the HTTP API after ES has started up but before c… --- ## [IOException\[Read past EOF\]](https://discuss.elastic.co/t/ioexception-read-past-eof/4187)
**Author:** [@jacorob](https://discuss.elastic.co/u/jacorob)\ **Replies:** 5\ **Last updated:** [April 5, 2011, 8:08pm UTC](https://discuss.elastic.co/t/ioexception-read-past-eof/4187 "2011-04-05T20:08:51Z")
I'm periodically getting this exception when searching my indices. I'm using 0.15.2. The full error I see is: QueryPhaseExecutionException\[\[transaction\_index\_uvvasrpetuucrfnbbvsqbcbevvwqucat\] \[0\]: query\[+\_entityForm… --- ## [SQL Return Malformed (ignored\_field\_values)](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418)
**Author:** [@T\_Eckmann](https://discuss.elastic.co/u/T_Eckmann)\ **Replies:** 6\ **Last updated:** [January 18, 2023, 5:29pm UTC](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418 "2023-01-18T17:29:49Z")
Hopefully I am not missing anything stupid. But I am working on trying to return some data using the Elasticsearch SQL functions. So far no luck. The data I am trying to get can be found in the raw data as well as when … --- ## [Machine Learning 1 Day Bucket Span and Alerts](https://discuss.elastic.co/t/machine-learning-1-day-bucket-span-and-alerts/317825)
**Author:** [@edang](https://discuss.elastic.co/u/edang)\ **Replies:** 6\ **Last updated:** [November 10, 2022, 2:23pm UTC](https://discuss.elastic.co/t/machine-learning-1-day-bucket-span-and-alerts/317825 "2022-11-10T14:23:21Z")
Hi All, I have unique data coming in once a day for a field and set up an advanced ML job with a bucket span of one day accordingly. The configured detector is a summation of a unique number field partitioned by another… --- ## [Filter by one filed and all documents and visualizations they be filter](https://discuss.elastic.co/t/filter-by-one-filed-and-all-documents-and-visualizations-they-be-filter/90844)
**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\ **Replies:** 6\ **Last updated:** [July 1, 2017, 6:56am UTC](https://discuss.elastic.co/t/filter-by-one-filed-and-all-documents-and-visualizations-they-be-filter/90844 "2017-07-01T06:56:13Z")
Hello everyone, I have one index and two documents. If i want create new dashboard with two visualizations. How can I do to see all documents? delete test put test { "mappings" : { "test" : { "properties" : … --- ## [Upgrading locally?](https://discuss.elastic.co/t/upgrading-locally/56192)
**Author:** [@Steve\_Suh](https://discuss.elastic.co/u/Steve_Suh)\ **Replies:** 6\ **Last updated:** [July 22, 2016, 5:43pm UTC](https://discuss.elastic.co/t/upgrading-locally/56192 "2016-07-22T17:43:17Z")
I'm on Elasticsearch 2.3.1 locally but on the 2.3.4 on ElasticCloud. I want to keep all my indices and other data. What's involved in upgrading locally to 2.3.4? --- ## [HTML autocomplete vs Completion suggestor](https://discuss.elastic.co/t/html-autocomplete-vs-completion-suggestor/31603)
**Author:** [@siddharth\_gupta](https://discuss.elastic.co/u/siddharth_gupta)\ **Replies:** 6\ **Last updated:** [October 5, 2015, 4:33am UTC](https://discuss.elastic.co/t/html-autocomplete-vs-completion-suggestor/31603 "2015-10-05T04:33:04Z")
Hello, When we already have auto complete functionality in HTML then why should I use Completion Suggester of elastic search ? Can anybody please help to solve the confusion ? Thanks Siddharth --- ## [How many available disk space need for normal system running?](https://discuss.elastic.co/t/how-many-available-disk-space-need-for-normal-system-running/16603)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 6\ **Last updated:** [March 26, 2014, 8:16pm UTC](https://discuss.elastic.co/t/how-many-available-disk-space-need-for-normal-system-running/16603 "2014-03-26T20:16:29Z")
Hi all, I am using ES 1.0.1. I am wondering how many un-used disk space needed for the ES's system running? Because I ran into the error: \[2014-03-26 03:30:52,713\]\[WARN \]\[index.merge.scheduler \] \[Rick Jones\] \[qu… --- ## ["TTL value must be \> 0. Illegal value provided" when updating document with \_ttl set](https://discuss.elastic.co/t/ttl-value-must-be-0-illegal-value-provided-when-updating-document-with--ttl-set/12557)
**Author:** [@Brad\_Cavanagh](https://discuss.elastic.co/u/Brad_Cavanagh)\ **Replies:** 6\ **Last updated:** [June 27, 2013, 9:14pm UTC](https://discuss.elastic.co/t/ttl-value-must-be-0-illegal-value-provided-when-updating-document-with--ttl-set/12557 "2013-06-27T21:14:33Z")
I'm using ES 0.90.1. I've run into a little race condition-ish problem concerning sending an update request for a document after its TTL has expired but before ES has run the TTL cleanup. Here are the replication … --- ## [shardFailures in SearchResponse showing from previous query](https://discuss.elastic.co/t/shardfailures-in-searchresponse-showing-from-previous-query/8616)
**Author:** [@Lar\_Mader](https://discuss.elastic.co/u/Lar_Mader)\ **Replies:** 6\ **Last updated:** [August 8, 2012, 5:33pm UTC](https://discuss.elastic.co/t/shardfailures-in-searchresponse-showing-from-previous-query/8616 "2012-08-08T17:33:38Z")
I am confused about how to interpret the SearchResponse.shardFailures array, as this is showing failures from a previous failed query in the SearchResponse from a new successful query, as follows: 1) First execute… --- ## [Can I use an existing field in the event to create the columns for a CSV filter?](https://discuss.elastic.co/t/can-i-use-an-existing-field-in-the-event-to-create-the-columns-for-a-csv-filter/244258)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 2\ **Last updated:** [August 8, 2020, 5:10pm UTC](https://discuss.elastic.co/t/can-i-use-an-existing-field-in-the-event-to-create-the-columns-for-a-csv-filter/244258 "2020-08-08T17:10:27Z")
I've been struugling with this for far too long and I'm giving up and asking for help. I am being sent data via a Kafka topic which contains a field called 'headers' which is a CSV string of column headers, and a field c… --- ## [Datestamp to timestamp](https://discuss.elastic.co/t/datestamp-to-timestamp/241550)
**Author:** [@merlock](https://discuss.elastic.co/u/merlock)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 11:12pm UTC](https://discuss.elastic.co/t/datestamp-to-timestamp/241550 "2020-07-16T23:12:35Z")
hello all, i have the next format of log 06/17/2020 00:00:00 - 1.6.250.107 o00044696e20022001200940005 my filter match =\> { "message" =\> ".%{DATESTAMP:LOGTIME}.-.\*%{IP}.\*w(?.{10})(?\.{5})(?.{3})(?\ **Author:** [@Susmit07](https://discuss.elastic.co/u/Susmit07)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 7:16am UTC](https://discuss.elastic.co/t/elastic-aem-not-showing-full-trace/236978 "2020-06-17T07:16:43Z") The yellow highlighted portion is empty, it should be tracing other operation Hi Team, I am using AEM server to upload my system metric and visualize it in Kibana, I used few annotation like @CaptureSpan and @Captur… --- ## [Kibana Maps Service Custom Icons in the Layer Style Section](https://discuss.elastic.co/t/kibana-maps-service-custom-icons-in-the-layer-style-section/205304)
**Author:** [@14kporter](https://discuss.elastic.co/u/14kporter)\ **Replies:** 2\ **Last updated:** [January 5, 2024, 8:37pm UTC](https://discuss.elastic.co/t/kibana-maps-service-custom-icons-in-the-layer-style-section/205304 "2024-01-05T20:37:37Z")
Currently I am using Kibana Map Service and plotting Geopoints. I want to change the icons of the points to something that is not one of the pre-selected Maiki icons and import another icon in the SVG format. Is this … --- ## [Copy only Index Mapping from one cluster to another without the data](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411)
**Author:** [@dadiasish](https://discuss.elastic.co/u/dadiasish)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 6:37am UTC](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411 "2023-02-06T06:37:11Z")
Hi, I have a cluster which has index mappings and data in it. I'm currently creating a new cluster where I have different set of data which need to be ingested with the same mappings like in the previous cluster. So, … --- ## [Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggregation \[3\] must have min\_doc\_count of 0;](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033)
**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:54pm UTC](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033 "2021-06-07T20:54:24Z")
Greetings everyone Yesterday we updated elastic from 7.4.x to 7.10.1 and some of our grafana dashboards broke with the following error: Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggrega… --- ## [java.lang.StackOverflowError: null](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 8:35am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295 "2020-12-03T08:35:37Z")
elasticsearch version : 6.7.1 \[search\]\[T#65\]\], exiting java.lang.StackOverflowError: null at java.util.stream.StreamOpFlag.fromCharacteristics(StreamOpFlag.java:733) ~\[?:1.8.0\_201\] at java.util.stream.StreamSupport.st… --- ## [Error during elasticsearch upgrade 6.8 to 7.4.2 unassigned shards IllegalArgumentException failed to parse date field](https://discuss.elastic.co/t/error-during-elasticsearch-upgrade-6-8-to-7-4-2-unassigned-shards-illegalargumentexception-failed-to-parse-date-field/209452)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 7:59am UTC](https://discuss.elastic.co/t/error-during-elasticsearch-upgrade-6-8-to-7-4-2-unassigned-shards-illegalargumentexception-failed-to-parse-date-field/209452 "2019-11-27T07:59:42Z")
ERROR: (IllegalArgumentException\[failed to parse date field \[1574755226.3741724\] with format \[strict\_date\_optional\_time||epoch\_millis\]\]) During upgrade after I upgraded one node and reenabled shard allocation PUT \_clu… --- ## [LS intermittently shows zero EPS received/emitted](https://discuss.elastic.co/t/ls-intermittently-shows-zero-eps-received-emitted/175727)
**Author:** [@millap](https://discuss.elastic.co/u/millap)\ **Replies:** 2\ **Last updated:** [April 7, 2019, 7:19pm UTC](https://discuss.elastic.co/t/ls-intermittently-shows-zero-eps-received-emitted/175727 "2019-04-07T19:19:21Z")
Hi All, Looking for a little advice in trying to narrow down the source of a problem we have with our ELK instance. Intermittently, we're seeing the received, and emitted EPS on an LS node drop to zero and we can't fig… --- ## [Acquiring a Token using Advanced REST client](https://discuss.elastic.co/t/acquiring-a-token-using-advanced-rest-client/163939)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [January 18, 2019, 7:46pm UTC](https://discuss.elastic.co/t/acquiring-a-token-using-advanced-rest-client/163939 "2019-01-18T19:46:51Z")
When using Advanced REST client to acquire a token, should I set authentication to basic, just to obtain the token, then my next request should be OAUTH2? or do I start with OAUTH2 with the GRANT TYPE set to "password" … --- ## [How access nested array field from wmibeat](https://discuss.elastic.co/t/how-access-nested-array-field-from-wmibeat/154707)
**Author:** [@fionamacd](https://discuss.elastic.co/u/fionamacd)\ **Replies:** 2\ **Last updated:** [October 30, 2018, 10:20pm UTC](https://discuss.elastic.co/t/how-access-nested-array-field-from-wmibeat/154707 "2018-10-30T22:20:12Z")
Hi, I am sending wmibeat to logstash and want to change the value of the field returned from string to number. I would normally do this with a mutate or grok in filter section, but I can't seem to get the field parsed c… --- ## [How can I use previously calculated Data Table columns to calculate a new column?](https://discuss.elastic.co/t/how-can-i-use-previously-calculated-data-table-columns-to-calculate-a-new-column/138962)
**Author:** [@Kredit](https://discuss.elastic.co/u/Kredit)\ **Replies:** 2\ **Last updated:** [July 6, 2018, 6:22pm UTC](https://discuss.elastic.co/t/how-can-i-use-previously-calculated-data-table-columns-to-calculate-a-new-column/138962 "2018-07-06T18:22:42Z")
Hello! I am trying to create a Data Table visualization that shows the total time between the minimum and maximum dates, grouping by another column. Here's an example of what I'm trying to do, where I have manually edi… --- ## [Mysql-Module Grok-Parsing Error](https://discuss.elastic.co/t/mysql-module-grok-parsing-error/125561)
**Author:** [@strowi](https://discuss.elastic.co/u/strowi)\ **Replies:** 2\ **Last updated:** [March 26, 2018, 5:07pm UTC](https://discuss.elastic.co/t/mysql-module-grok-parsing-error/125561 "2018-03-26T17:07:10Z")
Hi, trying to get percona slow-logs into es with the mysql-module. But it seems there is some pattern mismatch? Version: 6.2.3 Operating System: Ubuntu 16.04.3 LTS Steps to Reproduce: filebeat.prospectors: filebeat.… --- ## [Seeing periods of seemingly no activity in APM monitoring using Django](https://discuss.elastic.co/t/seeing-periods-of-seemingly-no-activity-in-apm-monitoring-using-django/117783)
**Author:** [@Henrik\_Ossipoff\_Hans](https://discuss.elastic.co/u/Henrik_Ossipoff_Hans)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 12:02pm UTC](https://discuss.elastic.co/t/seeing-periods-of-seemingly-no-activity-in-apm-monitoring-using-django/117783 "2018-01-31T12:02:49Z")
We've been trying out APM with Django today, and so far are quite happy with the results. However, we're seeing traces having large periods of time, where nothing is seemingly happening (at least, no data is being collec… --- ## [Logstash geoIP and dissect issues](https://discuss.elastic.co/t/logstash-geoip-and-dissect-issues/104944)
**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 10:02pm UTC](https://discuss.elastic.co/t/logstash-geoip-and-dissect-issues/104944 "2017-10-23T22:02:58Z")
I'm having a couple issues, not sure if its syntax or what. End result is that I want to read in a 24 hour old .txt file, mimic it being read in as live data, extract an outside IP address from the message field (greedyd… --- ## [How to get a random search reporting](https://discuss.elastic.co/t/how-to-get-a-random-search-reporting/88157)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [June 7, 2017, 11:24am UTC](https://discuss.elastic.co/t/how-to-get-a-random-search-reporting/88157 "2017-06-07T11:24:06Z")
Hi All, Am trying to schedule reporting using Xpack,is it possible to get the reporting in random orders instead of count of documents for example in visualize --\> data table Top 5 can be A,BC,D,E based on count o… [Previous page](https://discuss.elastic.co/top.md?page=1632&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1634&per_page=50&period=all)