# Top

**URL:** https://discuss.elastic.co/top.md?page=1635&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1636

---

## [Export a csv from ElasticSearch 6.8 kibana](https://discuss.elastic.co/t/export-a-csv-from-elasticsearch-6-8-kibana/260873)

<div class="topic-metadata">

**Author:** [@Biran\_Redlinger](https://discuss.elastic.co/u/Biran_Redlinger)\
**Replies:** 1\
**Last updated:** [January 12, 2021, 9:50pm UTC](https://discuss.elastic.co/t/export-a-csv-from-elasticsearch-6-8-kibana/260873 "2021-01-12T21:50:33Z")

</div>

I'm trying to export csv file from kibana es (6.8) But this is what I see: How can I import to csv file? Thanks!

---

## [How to hide default space on Kibana for users (basic license)](https://discuss.elastic.co/t/how-to-hide-default-space-on-kibana-for-users-basic-license/230799)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 7:50pm UTC](https://discuss.elastic.co/t/how-to-hide-default-space-on-kibana-for-users-basic-license/230799 "2020-05-02T19:50:33Z")

</div>

Hello all, i am playing arund roles, spaces & users and i am not be able to hide default space to users. Default space is always present. Is that possible? elastic version: 7.5.0 Thanks

---

## [Timestamps filter](https://discuss.elastic.co/t/timestamps-filter/219648)

<div class="topic-metadata">

**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\
**Replies:** 7\
**Last updated:** [February 19, 2020, 8:48pm UTC](https://discuss.elastic.co/t/timestamps-filter/219648 "2020-02-19T20:48:03Z")

</div>

I cant get the "Time" field to match the message log filter { mutate { replace =\> { "type" =\> "logs" } } grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:timestamp}%{DATA}%{YEAR}\]%{DATA}%{SYSLOG5424SD:Alert}%{DATA}%…

---

## [How to generate alert for specific host name](https://discuss.elastic.co/t/how-to-generate-alert-for-specific-host-name/186252)

<div class="topic-metadata">

**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\
**Replies:** 1\
**Last updated:** [June 21, 2019, 9:37am UTC](https://discuss.elastic.co/t/how-to-generate-alert-for-specific-host-name/186252 "2019-06-21T09:37:37Z")

</div>

Hi, I want to set a trigger when cpu usage reached more than 90% on beat.hostname is elsearchdv1 below are my watcher.json { "trigger": { "schedule": { "interval": "1s" } }, "input": { "searc…

---

## [ScriptEngine - ScoreScript : cosine similarity](https://discuss.elastic.co/t/scriptengine-scorescript-cosine-similarity/162229)

<div class="topic-metadata">

**Author:** [@YoniN](https://discuss.elastic.co/u/YoniN)\
**Replies:** 1\
**Last updated:** [December 27, 2018, 11:48pm UTC](https://discuss.elastic.co/t/scriptengine-scorescript-cosine-similarity/162229 "2018-12-27T23:48:15Z")

</div>

HI, using an updated version (running on 6.5.4) of: when running on a single index, all the scores are "correct" between 0-1 (double) as cosine similarity should be, but if running over 2+ indexes by using alias or …

---

## [Using @timestamp in a SQL Query](https://discuss.elastic.co/t/using-timestamp-in-a-sql-query/160471)

<div class="topic-metadata">

**Author:** [@mickmill54](https://discuss.elastic.co/u/mickmill54)\
**Replies:** 1\
**Last updated:** [December 12, 2018, 8:17am UTC](https://discuss.elastic.co/t/using-timestamp-in-a-sql-query/160471 "2018-12-12T08:17:31Z")

</div>

I am trying the following and can't figure it out. POST \_xpack/sql?format=txt { "query":"select @timestamp, metricset.module, metricset.name FROM metricbeat" } This does not work and returns below. Is there a trip …

---

## [How to color the data table for showing severity](https://discuss.elastic.co/t/how-to-color-the-data-table-for-showing-severity/108851)

<div class="topic-metadata">

**Author:** [@Vignesh\_Kumar](https://discuss.elastic.co/u/Vignesh_Kumar)\
**Replies:** 1\
**Last updated:** [November 23, 2017, 11:08am UTC](https://discuss.elastic.co/t/how-to-color-the-data-table-for-showing-severity/108851 "2017-11-23T11:08:35Z")

</div>

Is there anyway we can color the data table for the showing the severity using script or any external plugin. Please let me know.

---

## [Csv output date with mm/dd/yyyy hh:mm AM format](https://discuss.elastic.co/t/csv-output-date-with-mm-dd-yyyy-hh-mm-am-format/97308)

<div class="topic-metadata">

**Author:** [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 8:09pm UTC](https://discuss.elastic.co/t/csv-output-date-with-mm-dd-yyyy-hh-mm-am-format/97308 "2017-08-18T20:09:11Z")

</div>

Hi, My input is elasticsearch and I want to output to csv. A date field by default is outputted as - 2017-08-11T18:50:42.000-07:100. I want it to output as 08/11/2017 06:50 PM My current conf file - input { elast…

---

## [Is it possible to change the legend color and text in Kibna](https://discuss.elastic.co/t/is-it-possible-to-change-the-legend-color-and-text-in-kibna/32159)

<div class="topic-metadata">

**Author:** [@deepesh.jain](https://discuss.elastic.co/u/deepesh.jain)\
**Replies:** 1\
**Last updated:** [October 14, 2015, 8:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-legend-color-and-text-in-kibna/32159 "2015-10-14T20:46:48Z")

</div>

Hello I am trying to change the legend color of my chart. I am not finding how to do it. Do we have any option where we can change the legend color in Kibana 4.

---

## [Segmented Fetch: SearchPhaseExecutionException](https://discuss.elastic.co/t/segmented-fetch-searchphaseexecutionexception/28669)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [September 5, 2015, 11:41pm UTC](https://discuss.elastic.co/t/segmented-fetch-searchphaseexecutionexception/28669 "2015-09-05T23:41:01Z")

</div>

Hello I am using kibana 4 with ES 1.5.2. When I start kibana and hit the url, I get below error. This does not happen if there is no index. please guide on this. Segmented Fetch: SearchPhaseExecutionException\[Failed t…

---

## [KIbana - telemetry disabled - notice](https://discuss.elastic.co/t/kibana-telemetry-disabled-notice/335866)

<div class="topic-metadata">

**Author:** [@fkurucz](https://discuss.elastic.co/u/fkurucz)\
**Replies:** 2\
**Last updated:** [June 13, 2023, 12:41pm UTC](https://discuss.elastic.co/t/kibana-telemetry-disabled-notice/335866 "2023-06-13T12:41:38Z")

</div>

Hi, I have telemetry disabled and i get this "Help us improve the Elastic Stack" notice on Kibana. Is there any way to permanently disable the above notice in Kibana? It becomes very annoying to dismiss it each time i …

---

## [Dell iDrac Syslog Grok Logstash](https://discuss.elastic.co/t/dell-idrac-syslog-grok-logstash/320198)

<div class="topic-metadata">

**Author:** [@rcraigncs](https://discuss.elastic.co/u/rcraigncs)\
**Replies:** 2\
**Last updated:** [December 1, 2022, 5:32pm UTC](https://discuss.elastic.co/t/dell-idrac-syslog-grok-logstash/320198 "2022-12-01T17:32:24Z")

</div>

I am looking for help to grok Syslog from Dell idrac I am having problems taking the grok below and making it work with a Logstash. Your help is deeply appreciated! Extracting additional fields from iDRAC logs I found o…

---

## [No alert on missing data - Kibana](https://discuss.elastic.co/t/no-alert-on-missing-data-kibana/305792)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 2\
**Last updated:** [June 8, 2022, 2:16pm UTC](https://discuss.elastic.co/t/no-alert-on-missing-data-kibana/305792 "2022-06-08T14:16:09Z")

</div>

Hello, I have set up alerts on the metric threshold like the one below. But when I stop the metricbeat on a server the state from "Active" changes to "Recovered" and no missing data alert is created. I was testin…

---

## [DataNode内のシャード再配置時の動作対象について](https://discuss.elastic.co/t/datanode/304883)

<div class="topic-metadata">

**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\
**Replies:** 2\
**Last updated:** [May 26, 2022, 5:38am UTC](https://discuss.elastic.co/t/datanode/304883 "2022-05-26T05:38:11Z")

</div>

・ElasticsearchはDataNode内のディスク使用率が以下の閾値を超えると保管しているシャードを別のNodeに再配置しようと働きかけます。 cluster.routing.allocation.disk.watermark.high その際に以下の基準があるかご存じでしょうか。 DataNode内のどのシャードが再配置の対象となるのか どのNodeが再配置先の対象となるのか ディスクベースのシャード割り当て|弾力…

---

## [winlog.event\_data.Image.keyword not populated](https://discuss.elastic.co/t/winlog-event-data-image-keyword-not-populated/287342)

<div class="topic-metadata">

**Author:** [@mcreedjr](https://discuss.elastic.co/u/mcreedjr)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 6:53pm UTC](https://discuss.elastic.co/t/winlog-event-data-image-keyword-not-populated/287342 "2021-10-21T18:53:12Z")

</div>

I am shipping logs from a Windows 10 machine with Process auditing enabled in the Windows using 7.15 version of winlogbeats to logstash, and then in turn Elasticsearch. As an example, I am trying to use a detection rule…

---

## [Can't Get Raw Request Payload in Flask with APM](https://discuss.elastic.co/t/cant-get-raw-request-payload-in-flask-with-apm/250258)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 9:42pm UTC](https://discuss.elastic.co/t/cant-get-raw-request-payload-in-flask-with-apm/250258 "2020-10-07T21:42:14Z")

</div>

Normally, I'm able to access the raw request payload in my Flask app using request.get\_data() but I get an empty string when the APM agent is used. In Flask, I would need to call request.get\_data() before accessing anyth…

---

## [Canvas sql throwing syntax error](https://discuss.elastic.co/t/canvas-sql-throwing-syntax-error/237642)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 2\
**Last updated:** [July 15, 2020, 1:43pm UTC](https://discuss.elastic.co/t/canvas-sql-throwing-syntax-error/237642 "2020-07-15T13:43:50Z")

</div>

I am trying create canvas line chart with following sql SELECT avg(beat.system.cpu.user.norm.pct) as avg1 , beat.hostname, MINUTE\_OF\_HOUR("@timestamp") as min FROM "all\_metric\*" group by beat.hostname, MINUTE\_OF\_HOU…

---

## [Handle Failures in Bulk Processor](https://discuss.elastic.co/t/handle-failures-in-bulk-processor/189755)

<div class="topic-metadata">

**Author:** [@GPT](https://discuss.elastic.co/u/GPT)\
**Replies:** 2\
**Last updated:** [July 14, 2019, 7:03am UTC](https://discuss.elastic.co/t/handle-failures-in-bulk-processor/189755 "2019-07-14T07:03:08Z")

</div>

Hi All I need to handle failures and retry for failures in Bulk Processor. BulkProcessor listener has afterBulk methods. For the below method, the response provides a way to extract failures for individual items but it …

---

## [Quickstart Example - AWS Persistent Storage](https://discuss.elastic.co/t/quickstart-example-aws-persistent-storage/185212)

<div class="topic-metadata">

**Author:** [@tomseddon](https://discuss.elastic.co/u/tomseddon)\
**Replies:** 2\
**Last updated:** [June 17, 2019, 12:39pm UTC](https://discuss.elastic.co/t/quickstart-example-aws-persistent-storage/185212 "2019-06-17T12:39:36Z")

</div>

Hi, I've been trying out the example on my kops K8s setup on AWS (not EKS). I can get the first example to work but when I move on to trying to allocate a PersistentVolumeClaim I run into difficulties. The example given…

---

## [\[KIBANA\] Error generate pdf reporting](https://discuss.elastic.co/t/kibana-error-generate-pdf-reporting/177976)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 5:39am UTC](https://discuss.elastic.co/t/kibana-error-generate-pdf-reporting/177976 "2019-04-24T05:39:13Z")

</div>

Hi there, I'm trying to generate a pdf report of a Kibana dashboard, but I've got this error Unable to generate report Error: Error spawning Chromium browser: \[object Object\] I'm running with two Kibana 6.7.1 instance…

---

## [Dashboard Backups](https://discuss.elastic.co/t/dashboard-backups/158382)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 7:15pm UTC](https://discuss.elastic.co/t/dashboard-backups/158382 "2018-11-27T19:15:41Z")

</div>

Can anyone recommend a programmatic way to import/export custom dashboards in Kibana? I realize that I can go into the UI and manually do this but would like to have a way to automate it, or, at minimum, make daily backu…

---

## [How to send all the content of the files as well as the creation time?](https://discuss.elastic.co/t/how-to-send-all-the-content-of-the-files-as-well-as-the-creation-time/110160)

<div class="topic-metadata">

**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 7:15pm UTC](https://discuss.elastic.co/t/how-to-send-all-the-content-of-the-files-as-well-as-the-creation-time/110160 "2017-12-13T19:15:08Z")

</div>

I would like to configure Filebeat so it would send the whole content of all files of a specific folder (the log files appear in this folder, one file per new event). I have some problems configuring this use case becau…

---

## [Unable to fetch mappings - BRO IDS + ELK Stack](https://discuss.elastic.co/t/unable-to-fetch-mappings-bro-ids-elk-stack/83128)

<div class="topic-metadata">

**Author:** [@adam2](https://discuss.elastic.co/u/adam2)\
**Replies:** 2\
**Last updated:** [April 24, 2017, 5:22am UTC](https://discuss.elastic.co/t/unable-to-fetch-mappings-bro-ids-elk-stack/83128 "2017-04-24T05:22:43Z")

</div>

Hello Everyone, i'll start by saying...newbe here and i'm lost. I'm trying to setup BRO and ELK stack. I'm following https://github.com/BrashEndeavours/bro-elk-IDS. I have my BRO ids and ELK stack on the same server …

---

## [Adding a date independent Visualize in Kibana Dashboard](https://discuss.elastic.co/t/adding-a-date-independent-visualize-in-kibana-dashboard/50897)

<div class="topic-metadata">

**Author:** [@Jonghun\_Park](https://discuss.elastic.co/u/Jonghun_Park)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 9:23am UTC](https://discuss.elastic.co/t/adding-a-date-independent-visualize-in-kibana-dashboard/50897 "2016-05-25T09:23:42Z")

</div>

Hi. I'm finding a way to add a visualize in Kibana Dashboard. But it seems to be affacted by date-based fields only. I just want to add an independent visualize without the date of events occured. The metric in above v…

---

## [Searching across multiple ES clusters](https://discuss.elastic.co/t/searching-across-multiple-es-clusters/31546)

<div class="topic-metadata">

**Author:** [@echerno21](https://discuss.elastic.co/u/echerno21)\
**Replies:** 2\
**Last updated:** [October 2, 2015, 8:23pm UTC](https://discuss.elastic.co/t/searching-across-multiple-es-clusters/31546 "2015-10-02T20:23:45Z")

</div>

Hello Folks, I am evaluating the ELK stack as a replacement for an existing tool. The existing tool allows us to have multiple indexes, each living in it's own datacenter. Logs get sent to a specific index that lives …

---

## [Failure starting elasticsearch server and java client on same FreeBSD machine](https://discuss.elastic.co/t/failure-starting-elasticsearch-server-and-java-client-on-same-freebsd-machine/5228)

<div class="topic-metadata">

**Author:** [@Andrew\_Delpha](https://discuss.elastic.co/u/Andrew_Delpha)\
**Replies:** 2\
**Last updated:** [August 24, 2011, 6:25pm UTC](https://discuss.elastic.co/t/failure-starting-elasticsearch-server-and-java-client-on-same-freebsd-machine/5228 "2011-08-24T18:25:40Z")

</div>

I've successfully have elasticsearch running on my Linux dev box which is Elastic search server running in it's own process Tomcat server running a webapp that connects to the cluster as a client (node.data=false) I …

---

## [Percolate Query Issues after Upgrading to Elasticsearch 8.6.2 with REST High-Level Client 7.17.9](https://discuss.elastic.co/t/percolate-query-issues-after-upgrading-to-elasticsearch-8-6-2-with-rest-high-level-client-7-17-9/336359)

<div class="topic-metadata">

**Author:** [@ulysse42](https://discuss.elastic.co/u/ulysse42)\
**Replies:** 5\
**Last updated:** [June 20, 2023, 2:16pm UTC](https://discuss.elastic.co/t/percolate-query-issues-after-upgrading-to-elasticsearch-8-6-2-with-rest-high-level-client-7-17-9/336359 "2023-06-20T14:16:35Z")

</div>

Hello Elasticsearch community, I'm currently experiencing an issue with the Percolate Query after upgrading my Elasticsearch version to 8.6.2. I'm still using the REST High-Level Client 7.17.9. Here's the exception I'm…

---

## [How to create mapping for special characters and autocomplete search](https://discuss.elastic.co/t/how-to-create-mapping-for-special-characters-and-autocomplete-search/324115)

<div class="topic-metadata">

**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\
**Replies:** 5\
**Last updated:** [February 3, 2023, 2:14pm UTC](https://discuss.elastic.co/t/how-to-create-mapping-for-special-characters-and-autocomplete-search/324115 "2023-02-03T14:14:06Z")

</div>

Hi, In my project, I need to search data with special characters like č,ć,ž,đ, ?, !. What is the best practice for searching special characters in version 8.5? Also, how to create a mapping for autocomplete search? Ho…

---

## [Filebeat AWS Module No found](https://discuss.elastic.co/t/filebeat-aws-module-no-found/280119)

<div class="topic-metadata">

**Author:** [@mibfb23](https://discuss.elastic.co/u/mibfb23)\
**Replies:** 5\
**Last updated:** [July 31, 2021, 11:49pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-no-found/280119 "2021-07-31T23:49:02Z")

</div>

Hello, having the need to store the cloudtrail logs in elasticsearch, I used the appropriate filebeat module providing it with all the options in this way: - module: aws cloudtrail: enabled: true # AWS SQS q…

---

## [Elastic Agent stopped sending certain data streams](https://discuss.elastic.co/t/elastic-agent-stopped-sending-certain-data-streams/267109)

<div class="topic-metadata">

**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Replies:** 5\
**Last updated:** [April 6, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elastic-agent-stopped-sending-certain-data-streams/267109 "2021-04-06T14:44:55Z")

</div>

Hi, I have deployed the agent along with the windows intergration. As part of this I wanted to collect Powershell logs. This was working fine however at 20:31:49.750 yestarday I received my last powershell log on the "…

---

## [Elasticsearch problem (java)](https://discuss.elastic.co/t/elasticsearch-problem-java/212374)

<div class="topic-metadata">

**Author:** [@Labidi\_Ayoub](https://discuss.elastic.co/u/Labidi_Ayoub)\
**Replies:** 5\
**Last updated:** [December 19, 2019, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-problem-java/212374 "2019-12-19T09:41:31Z")

</div>

Hi, Can someone help me resolve this issue please. Thanks in advance ! so Weird !!! graylog server (version 2.5, os centos7) has been in production for a year !! I I didn’t understand this error !!!

---

## [How to monitor ICE framework?](https://discuss.elastic.co/t/how-to-monitor-ice-framework/189284)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 5\
**Last updated:** [July 9, 2019, 5:40am UTC](https://discuss.elastic.co/t/how-to-monitor-ice-framework/189284 "2019-07-09T05:40:52Z")

</div>

Kibana version:6.5.1 Elasticsearch version:6.5.1 APM Server version:6.5.1 APM Agent language and version:java 1.7 I want to monitor a method that invoke another service

---

## [Watcher email file size limit seems inaccurate](https://discuss.elastic.co/t/watcher-email-file-size-limit-seems-inaccurate/355379)

<div class="topic-metadata">

**Author:** [@dc\_3](https://discuss.elastic.co/u/dc_3)\
**Replies:** 6\
**Last updated:** [April 25, 2024, 7:04pm UTC](https://discuss.elastic.co/t/watcher-email-file-size-limit-seems-inaccurate/355379 "2024-04-25T19:04:21Z")

</div>

Hello again. I've got a fairly straightforward use case, where I'd like to send a CSV file with data from Discover at a certain time every day. I've got several other emails already automated and sending successfully i…

---

## [Error: unrecognized arguments: refresh\_interval: -1](https://discuss.elastic.co/t/error-unrecognized-arguments-refresh-interval-1/305058)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 6\
**Last updated:** [May 21, 2022, 1:00am UTC](https://discuss.elastic.co/t/error-unrecognized-arguments-refresh-interval-1/305058 "2022-05-21T01:00:41Z")

</div>

getting below error while benchmarking with geonames track esrally: error: unrecognized arguments: refresh\_interval: -1}} esrally race --offline --track-params=number\_of\_shards:${ES\_NO\_OF\_SHARDS} --track-params=number\_…

---

## [Alert query for kubernetes](https://discuss.elastic.co/t/alert-query-for-kubernetes/265003)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 6\
**Last updated:** [February 23, 2021, 3:21pm UTC](https://discuss.elastic.co/t/alert-query-for-kubernetes/265003 "2021-02-23T15:21:43Z")

</div>

Hi all. I use elastic cloud 7.11.0 and we have filebeat and metricbeat running on a k8s cluster. I also have an alert on watcher to send and aletr when a POD in the kubernetes cluster goes down. Now the query it's fine…

---

## [Filter Grok](https://discuss.elastic.co/t/filter-grok/130788)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 6\
**Last updated:** [May 7, 2018, 9:36am UTC](https://discuss.elastic.co/t/filter-grok/130788 "2018-05-07T09:36:46Z")

</div>

Please, is there any body who has an example of filter grok or fils .conf that can be use with logs that came from firwalls, I want him to separate all the fields.

---

## [How to create index for a attachment of pdf by using elasticsearch-river-couchdb(1.2.0) (don't have any hits)](https://discuss.elastic.co/t/how-to-create-index-for-a-attachment-of-pdf-by-using-elasticsearch-river-couchdb-1-2-0-dont-have-any-hits/12455)

<div class="topic-metadata">

**Author:** [@Jordon](https://discuss.elastic.co/u/Jordon)\
**Replies:** 6\
**Last updated:** [June 20, 2013, 10:53am UTC](https://discuss.elastic.co/t/how-to-create-index-for-a-attachment-of-pdf-by-using-elasticsearch-river-couchdb-1-2-0-dont-have-any-hits/12455 "2013-06-20T10:53:04Z")

</div>

Dear All, I am new to elasticsearch. I have tried to follow the different tutorials and post on index and mapping attached document in a couchdb database for days without success. After running the codes below i don…

---

## [Shuffle sorted documents](https://discuss.elastic.co/t/shuffle-sorted-documents/335255)

<div class="topic-metadata">

**Author:** [@Novel\_one](https://discuss.elastic.co/u/Novel_one)\
**Replies:** 3\
**Last updated:** [June 6, 2023, 10:10am UTC](https://discuss.elastic.co/t/shuffle-sorted-documents/335255 "2023-06-06T10:10:22Z")

</div>

Hi, I want to create a promotional box in my marketplace, with the top rated articles. I dont want always to be the same articles, so i want them be shuffled a little by multiplying the article avg rate by a random num…

---

## [MongoDB-SSPL-1.0 license issue](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317)

<div class="topic-metadata">

**Author:** [@xliu](https://discuss.elastic.co/u/xliu)\
**Replies:** 3\
**Last updated:** [August 17, 2022, 8:38pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317 "2022-08-17T20:38:33Z")

</div>

We use elasticsearch 7.17.4. Nexus-iq reports 'Banned' license threat group ('MongoDB-SSPL-1.0'). Nexus IQ Server is Sonatype's policy engine. Sonatype has MongoDB-SSPL-1.0 in Banned list. The policy error comes out f…

---

## [Spans outside request scope (distributed tracing / forkJoinpool)](https://discuss.elastic.co/t/spans-outside-request-scope-distributed-tracing-forkjoinpool/256533)

<div class="topic-metadata">

**Author:** [@nicoo](https://discuss.elastic.co/u/nicoo)\
**Replies:** 3\
**Last updated:** [December 3, 2020, 9:20am UTC](https://discuss.elastic.co/t/spans-outside-request-scope-distributed-tracing-forkjoinpool/256533 "2020-12-03T09:20:36Z")

</div>

logstash version: 7.9.2 APM server version: 7.9.2 APM java agent version: 1.18.1 / 1.19.0 Hi! I'm facing a strange case related to distributed tracing: There are two apps deployed on a k8s cluster, both using elastic…

---

## [Heartbeat Use json with secret store in check.request.body](https://discuss.elastic.co/t/heartbeat-use-json-with-secret-store-in-check-request-body/247869)

<div class="topic-metadata">

**Author:** [@pawarrchetan](https://discuss.elastic.co/u/pawarrchetan)\
**Replies:** 3\
**Last updated:** [September 9, 2020, 11:24am UTC](https://discuss.elastic.co/t/heartbeat-use-json-with-secret-store-in-check-request-body/247869 "2020-09-09T11:24:46Z")

</div>

I need help to figure out the correct json payload for my http monitor to test an authenticated endpoint. Monitor YAML : name: test-xyz-abc-io enabled: true schedule: '@every 1m' # every 10 minutes from start of…

---

## [Ignore date offset in logstash](https://discuss.elastic.co/t/ignore-date-offset-in-logstash/123419)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 3\
**Last updated:** [March 11, 2018, 7:34pm UTC](https://discuss.elastic.co/t/ignore-date-offset-in-logstash/123419 "2018-03-11T19:34:00Z")

</div>

HI, I have the following date format: "2017-12-01 04:39:34-04:000" Currently, I use this configuration: date{ match =\> \["\[documentsList\]\[0\]\[commandTimestamp\]","yyyy-MM-dd HH:mm:ssZZ'0'"\] …

---

## [Netflow and type long (fwd\_flow\_delta\_bytes)](https://discuss.elastic.co/t/netflow-and-type-long-fwd-flow-delta-bytes/122716)

<div class="topic-metadata">

**Author:** [@adankert](https://discuss.elastic.co/u/adankert)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 9:56am UTC](https://discuss.elastic.co/t/netflow-and-type-long-fwd-flow-delta-bytes/122716 "2018-03-09T09:56:43Z")

</div>

I have an issue where data passed from logstash to es is to big for type long: Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"elastiflow-2018.03.06", :\_type=\>"doc", :\_ro…

---

## [Filter when field is missing](https://discuss.elastic.co/t/filter-when-field-is-missing/116719)

<div class="topic-metadata">

**Author:** [@grants](https://discuss.elastic.co/u/grants)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 5:17pm UTC](https://discuss.elastic.co/t/filter-when-field-is-missing/116719 "2018-02-01T17:17:03Z")

</div>

I need to be able to build a drop rule when a filed is missing from the event, I'm not currently able to filter and do not see any conditions that would help with this. Example: processors: - drop\_event.when: and: …

---

## [TransportClient NoNodeAvailableException](https://discuss.elastic.co/t/transportclient-nonodeavailableexception/104990)

<div class="topic-metadata">

**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\
**Replies:** 3\
**Last updated:** [October 25, 2017, 3:08am UTC](https://discuss.elastic.co/t/transportclient-nonodeavailableexception/104990 "2017-10-25T03:08:34Z")

</div>

Hi, I have a problem but no luck. I use Elasticsearch v5.4.0 and v5.4.2 on Linux server. Here is the situation, when my application start and construct using TransportClient tc = new PrebuiltTransportClient() At this…

---

## [Displaying search results with snippets](https://discuss.elastic.co/t/displaying-search-results-with-snippets/94065)

<div class="topic-metadata">

**Author:** [@antman1p](https://discuss.elastic.co/u/antman1p)\
**Replies:** 3\
**Last updated:** [July 22, 2017, 2:13am UTC](https://discuss.elastic.co/t/displaying-search-results-with-snippets/94065 "2017-07-22T02:13:16Z")

</div>

In Kibana, is there a way to display content search results with only the keyword searched and, maybe 20 words before and 20 words after the keyword? Sort of like Google returns a search?

---

## [How to create a customized plugin for aggFilter](https://discuss.elastic.co/t/how-to-create-a-customized-plugin-for-aggfilter/90064)

<div class="topic-metadata">

**Author:** [@chie](https://discuss.elastic.co/u/chie)\
**Replies:** 3\
**Last updated:** [June 23, 2017, 2:32am UTC](https://discuss.elastic.co/t/how-to-create-a-customized-plugin-for-aggfilter/90064 "2017-06-23T02:32:42Z")

</div>

I want to know users motion. By using a line chart, For example, I want to display the time on the X axis and the value of the selectbook on the Y axis from the log of the book selection history for each user. For exa…

---

## [Connect logstash, elasticsearch, kibana and filebeats](https://discuss.elastic.co/t/connect-logstash-elasticsearch-kibana-and-filebeats/84293)

<div class="topic-metadata">

**Author:** [@Bouali\_Inass](https://discuss.elastic.co/u/Bouali_Inass)\
**Replies:** 3\
**Last updated:** [May 4, 2017, 7:04pm UTC](https://discuss.elastic.co/t/connect-logstash-elasticsearch-kibana-and-filebeats/84293 "2017-05-04T19:04:41Z")

</div>

Hello i'm new on elastic-stack i just installed logstash, elasticsearch, kibana and filebeats. but i dont know what to do to connect them together and what should i do to test them with a log file because i wanna read f…

---

## [BulkUpdate elasticsearch issue](https://discuss.elastic.co/t/bulkupdate-elasticsearch-issue/62930)

<div class="topic-metadata">

**Author:** [@Amit\_Sharma1](https://discuss.elastic.co/u/Amit_Sharma1)\
**Replies:** 3\
**Last updated:** [October 24, 2016, 10:31am UTC](https://discuss.elastic.co/t/bulkupdate-elasticsearch-issue/62930 "2016-10-24T10:31:02Z")

</div>

I am using elasticsearch version1.7.3. I am running 3 node es cluster on 16gb ram and 4 core machine. 8gb ram is allocated to es process. I am using mongoriver to sync data from mongo db. Some bulk update happened to …

---

## [Circuit breaker while using sampler?](https://discuss.elastic.co/t/circuit-breaker-while-using-sampler/59066)

<div class="topic-metadata">

**Author:** [@MaJaHa95](https://discuss.elastic.co/u/MaJaHa95)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 8:11am UTC](https://discuss.elastic.co/t/circuit-breaker-while-using-sampler/59066 "2016-08-30T08:11:33Z")

</div>

Hey there, I've got an Elasticsearch cluster with three nodes (each 28 GB of RAM with ~14 GB for the heap), running version 2.3.4. I'm trying to run a significant\_terms aggregation against a full-text field with a sign…

[Previous page](https://discuss.elastic.co/top.md?page=1634&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1636&per_page=50&period=all)
