# Top

**URL:** https://discuss.elastic.co/top.md?page=1640&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1641

---

## [ElasticsearchのReduce Search Phase Exceptionについて](https://discuss.elastic.co/t/elasticsearch-reduce-search-phase-exception/95070)

<div class="topic-metadata">

**Author:** [@sho130](https://discuss.elastic.co/u/sho130)\
**Replies:** 2\
**Last updated:** [July 31, 2017, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-reduce-search-phase-exception/95070 "2017-07-31T08:02:51Z")

</div>

ReduceSearchPhaseException\[Failed to execute phase \[query\], \[reduce\] \]; nested: ClassCastException\[java.lang.Long cannot be cast to org.apache.lucene.util.BytesRef\]; Elasticsearchへのクエリ発行で上記エラーが発生するようになりました。 キャッシュのクリア…

---

## [Does all the data type in elasticsearch indexed by invert index?](https://discuss.elastic.co/t/does-all-the-data-type-in-elasticsearch-indexed-by-invert-index/70633)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 2\
**Last updated:** [January 6, 2017, 3:21am UTC](https://discuss.elastic.co/t/does-all-the-data-type-in-elasticsearch-indexed-by-invert-index/70633 "2017-01-06T03:21:01Z")

</div>

i'd read es index structure from the es'doc and other invert index documents ,i am interesting about the range query,does it only using invert index to achieve?

---

## [Visualisation Kibana sur deux array](https://discuss.elastic.co/t/visualisation-kibana-sur-deux-array/68456)

<div class="topic-metadata">

**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\
**Replies:** 2\
**Last updated:** [December 12, 2016, 1:45pm UTC](https://discuss.elastic.co/t/visualisation-kibana-sur-deux-array/68456 "2016-12-12T13:45:00Z")

</div>

Bonjour ! Je viens vers vous car je n'arrive pas à m'en sortir pour créer une visualisation sous Kibana. Voici le log que je dois parser: Perf for replay step 0 sending 20 messages : 15 Perf for replay step 1 sending…

---

## [Logstash not preserving mappings when copying docs from one index to another](https://discuss.elastic.co/t/logstash-not-preserving-mappings-when-copying-docs-from-one-index-to-another/42815)

<div class="topic-metadata">

**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\
**Replies:** 2\
**Last updated:** [February 26, 2016, 7:02am UTC](https://discuss.elastic.co/t/logstash-not-preserving-mappings-when-copying-docs-from-one-index-to-another/42815 "2016-02-26T07:02:48Z")

</div>

I am using the following pipeline to copy data from index to another. input { elasticsearch { hosts =\> \["sourcehost:9200"\] index =\> "source-index" query =\> '{"query":{"match\_all":{}}}' size =\> 500 scro…

---

## [Winlogbeats](https://discuss.elastic.co/t/winlogbeats/42120)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 2\
**Last updated:** [February 19, 2016, 12:44am UTC](https://discuss.elastic.co/t/winlogbeats/42120 "2016-02-19T00:44:10Z")

</div>

I am concern with the winlogbeats sending information in the uncompressed form. Is there a way to set it to apply compression for sending information to elastic search?

---

## [\[version 8.9\] Kibana server is not ready yet](https://discuss.elastic.co/t/version-8-9-kibana-server-is-not-ready-yet/340316)

<div class="topic-metadata">

**Author:** [@SageJustus](https://discuss.elastic.co/u/SageJustus)\
**Replies:** 1\
**Last updated:** [August 8, 2023, 7:21am UTC](https://discuss.elastic.co/t/version-8-9-kibana-server-is-not-ready-yet/340316 "2023-08-08T07:21:31Z")

</div>

Kibana version: 8.9 Elasticsearch version: 8.9 Server OS version: Windows10 Describe the bug: Unable to start kibana. Steps to reproduce: start Elasticsearch, browser access http://localhost:9200/, get the followi…

---

## [Unable to generate csv report from discover](https://discuss.elastic.co/t/unable-to-generate-csv-report-from-discover/293623)

<div class="topic-metadata">

**Author:** [@nfxitglobal](https://discuss.elastic.co/u/nfxitglobal)\
**Replies:** 1\
**Last updated:** [January 12, 2022, 10:27am UTC](https://discuss.elastic.co/t/unable-to-generate-csv-report-from-discover/293623 "2022-01-12T10:27:33Z")

</div>

Hi Pressing the generate csv report failing with the below error...any idea? Service Unavailable http\_fetch\_error\_HttpFetchError@http://localhost:5601/46307/bundles/core/core.entry.js:8:52683 fetchResponse@http://loca…

---

## [Elastic Agent TLS Auth Handshake Failed - Internal Error](https://discuss.elastic.co/t/elastic-agent-tls-auth-handshake-failed-internal-error/285816)

<div class="topic-metadata">

**Author:** [@millap](https://discuss.elastic.co/u/millap)\
**Replies:** 1\
**Last updated:** [October 6, 2021, 9:35am UTC](https://discuss.elastic.co/t/elastic-agent-tls-auth-handshake-failed-internal-error/285816 "2021-10-06T09:35:37Z")

</div>

Hi all, I wonder if anyone's able to offer some advice, or pointers on troubleshooting an issue we have with a number of clients managed by Fleet. We're running 7.13.0, and have just started deploying to Windows endpoi…

---

## [ECE and monitoring: Remote exporters indicate a possible misconfiguration - misleading](https://discuss.elastic.co/t/ece-and-monitoring-remote-exporters-indicate-a-possible-misconfiguration-misleading/215128)

<div class="topic-metadata">

**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\
**Replies:** 1\
**Last updated:** [January 15, 2020, 4:10pm UTC](https://discuss.elastic.co/t/ece-and-monitoring-remote-exporters-indicate-a-possible-misconfiguration-misleading/215128 "2020-01-15T16:10:45Z")

</div>

I have ECE hosting a cluster and would like to enable monitoring. I'm not sure if I am looking at the right documentation or possibly conflating some separate features. https://www.elastic.co/guide/en/cloud-enterprise/cu…

---

## [Support for Istio service mesh](https://discuss.elastic.co/t/support-for-istio-service-mesh/210829)

<div class="topic-metadata">

**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\
**Replies:** 1\
**Last updated:** [December 6, 2019, 2:05pm UTC](https://discuss.elastic.co/t/support-for-istio-service-mesh/210829 "2019-12-06T14:05:11Z")

</div>

Elastic Search Version: 7.3.1 APM Server Version: 7.3.1 APM Client Version: APM Java Agent: 1.x (current) APM Agent language and version: Java 1.8 Is there any plan to provide integration with Istio for distributed t…

---

## [Filtering from default Javascript](https://discuss.elastic.co/t/filtering-from-default-javascript/203265)

<div class="topic-metadata">

**Author:** [@DeDev](https://discuss.elastic.co/u/DeDev)\
**Replies:** 1\
**Last updated:** [October 22, 2019, 7:57pm UTC](https://discuss.elastic.co/t/filtering-from-default-javascript/203265 "2019-10-22T19:57:40Z")

</div>

Is there any way to filter results using the Javascript snippet below? Instead of creating a lot of files for my project. (function(w,d,t,u,n,s,e){w\['SwiftypeObject'\]=n;w\[n\]=w\[n\]||function(){(w\[n\].q=w\[n\].q||\[\]).push(arg…

---

## [Add field with the length of value of other field](https://discuss.elastic.co/t/add-field-with-the-length-of-value-of-other-field/149249)

<div class="topic-metadata">

**Author:** [@alfonso.viso](https://discuss.elastic.co/u/alfonso.viso)\
**Replies:** 1\
**Last updated:** [September 20, 2018, 8:48am UTC](https://discuss.elastic.co/t/add-field-with-the-length-of-value-of-other-field/149249 "2018-09-20T08:48:52Z")

</div>

Hi all, I'm trying to create a new field which value must be the length of the string of another field. I have found an advice using ruby code, like this: //ruby { // code =\> "event.set\['http\_user\_agent\_length'\] = …

---

## [Java rest client: update single field within an (sub)object](https://discuss.elastic.co/t/java-rest-client-update-single-field-within-an-sub-object/115241)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 10:09am UTC](https://discuss.elastic.co/t/java-rest-client-update-single-field-within-an-sub-object/115241 "2018-01-12T10:09:34Z")

</div>

Hi all, I would like to update a single field from with java highlevel client. If possible I don't want to create the json by myself. Updating a field located in document root is working. But if I would like to update …

---

## [MySQL Like](https://discuss.elastic.co/t/mysql-like/100376)

<div class="topic-metadata">

**Author:** [@Michael\_Gartner](https://discuss.elastic.co/u/Michael_Gartner)\
**Replies:** 1\
**Last updated:** [September 13, 2017, 3:21pm UTC](https://discuss.elastic.co/t/mysql-like/100376 "2017-09-13T15:21:00Z")

</div>

We would like to achieve this result WHERE text LIKE "%quick%" AND text LIKE "%brown%" AND text LIKE "%fox%" Example Searching for 'fein multi master' should product the same results as 'fein multimaster' It seems …

---

## [Failed to execute pipeline for a bulk request,butiostat ,iotop,loadavage,cpu is low](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request-butiostat-iotop-loadavage-cpu-is-low/99978)

<div class="topic-metadata">

**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\
**Replies:** 1\
**Last updated:** [September 10, 2017, 6:09pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request-butiostat-iotop-loadavage-cpu-is-low/99978 "2017-09-10T18:09:56Z")

</div>

hi I am using ES5.5 failed to execute pipeline for a bulk request,butiostat ,iotop,loadavage,cpu is low, what is es doing,? \[2017-09-11T00:50:54,198\]\[ERROR\]\[o.e.a.b.TransportBulkAction\] \[tVsCQ08\] failed to execute pipe…

---

## [Multiple Issues Parsing a CSV file with Logstash such as Multiline and Orphan Quotes](https://discuss.elastic.co/t/multiple-issues-parsing-a-csv-file-with-logstash-such-as-multiline-and-orphan-quotes/61443)

<div class="topic-metadata">

**Author:** [@Logstash-lover](https://discuss.elastic.co/u/Logstash-lover)\
**Replies:** 1\
**Last updated:** [September 26, 2016, 8:06pm UTC](https://discuss.elastic.co/t/multiple-issues-parsing-a-csv-file-with-logstash-such-as-multiline-and-orphan-quotes/61443 "2016-09-26T20:06:56Z")

</div>

Using a Windows implementation of the most current versiom of Logstash, i am importing a CSV file with log events, originally from a windows .evtx file. I noticed there appear to be several issues with the .csv file th…

---

## [Log Correlation](https://discuss.elastic.co/t/log-correlation/57187)

<div class="topic-metadata">

**Author:** [@NicoYUE](https://discuss.elastic.co/u/NicoYUE)\
**Replies:** 1\
**Last updated:** [August 4, 2016, 8:13am UTC](https://discuss.elastic.co/t/log-correlation/57187 "2016-08-04T08:13:31Z")

</div>

Hello, I'm currently trying to use Logstash filter to correlate logs before outputting the result into Elasticsearch. I thought about using aggregate when the logs are in a good order like a b c into "abc". But…

---

## [UX - better field searching](https://discuss.elastic.co/t/ux-better-field-searching/49909)

<div class="topic-metadata">

**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\
**Replies:** 1\
**Last updated:** [May 12, 2016, 4:33pm UTC](https://discuss.elastic.co/t/ux-better-field-searching/49909 "2016-05-12T16:33:24Z")

</div>

Just some feedback - selecting fields to include in the Kibana Graph viz is pretty painful. Would be great if it could take from Kibana's Discover field list, with popular fields and searchable function. Or at the ver…

---

## [How to read a huge file, tens of GB](https://discuss.elastic.co/t/how-to-read-a-huge-file-tens-of-gb/28236)

<div class="topic-metadata">

**Author:** [@pemby](https://discuss.elastic.co/u/pemby)\
**Replies:** 1\
**Last updated:** [August 28, 2015, 9:51am UTC](https://discuss.elastic.co/t/how-to-read-a-huge-file-tens-of-gb/28236 "2015-08-28T09:51:28Z")

</div>

I am capturing a huge file from Suricata, it is incrementing at multi MB per minute. I just can't read it fast enough with a single server, is it possible to process a single file with more then one server? I have SAN th…

---

## [ElasticSearch-NEST Query String Phrase](https://discuss.elastic.co/t/elasticsearch-nest-query-string-phrase/27902)

<div class="topic-metadata">

**Author:** [@stormcloak](https://discuss.elastic.co/u/stormcloak)\
**Replies:** 1\
**Last updated:** [August 23, 2015, 8:14pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-string-phrase/27902 "2015-08-23T20:14:55Z")

</div>

I have a problem with ElasticSearch query phrases. My index document is; var person = new Person { Id = "4", Firstname = "ali ahmet", Lastname = "yazıcı" }; var index = client.Index…

---

## [Setting up security in elasticsearch](https://discuss.elastic.co/t/setting-up-security-in-elasticsearch/258751)

<div class="topic-metadata">

**Author:** [@joret](https://discuss.elastic.co/u/joret)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 11:03pm UTC](https://discuss.elastic.co/t/setting-up-security-in-elasticsearch/258751 "2020-12-15T23:03:28Z")

</div>

I have Elasticsearch set up in server and Java in another server. the java application communicates with Elasticsearch . I need to implement SSL certificate between JAVA and Elasticsearch communication

---

## [Kibana web interface won't load](https://discuss.elastic.co/t/kibana-web-interface-wont-load/234202)

<div class="topic-metadata">

**Author:** [@Danny51](https://discuss.elastic.co/u/Danny51)\
**Replies:** 4\
**Last updated:** [May 26, 2020, 11:55am UTC](https://discuss.elastic.co/t/kibana-web-interface-wont-load/234202 "2020-05-26T11:55:51Z")

</div>

Hello guys, I'm trying to spin up my own ELK stack for a project in cyber security course. I've got everything running with Virtualbox on 3 networks I have a PfSense Router set up with rules set up. This is the kiba…

---

## [Nested range aggregation misbehaving](https://discuss.elastic.co/t/nested-range-aggregation-misbehaving/190055)

<div class="topic-metadata">

**Author:** [@dinamic](https://discuss.elastic.co/u/dinamic)\
**Replies:** 4\
**Last updated:** [July 12, 2019, 4:27pm UTC](https://discuss.elastic.co/t/nested-range-aggregation-misbehaving/190055 "2019-07-12T16:27:33Z")

</div>

Hey guys, I have posted my question on Github and was told it's not a bug. It behaves like a bug to me. Environment: Docker Desktop Edge 2.0.5.0 ElasticSearch 5.6.13 (docker image, docker.elastic.co/elasticsearch/ela…

---

## [FileBeat 6.4.0 on Windows as non-service app and environment variables](https://discuss.elastic.co/t/filebeat-6-4-0-on-windows-as-non-service-app-and-environment-variables/146677)

<div class="topic-metadata">

**Author:** [@prwillmot](https://discuss.elastic.co/u/prwillmot)\
**Replies:** 4\
**Last updated:** [September 10, 2018, 5:37am UTC](https://discuss.elastic.co/t/filebeat-6-4-0-on-windows-as-non-service-app-and-environment-variables/146677 "2018-09-10T05:37:29Z")

</div>

With FileBeat 6.4.0 on Windows (running as a stand-alone app from command line, not a service) we are trying to use various environment variable string values as custom field values per reference document content at http…

---

## [How to get access time of filename and set it in every log message?](https://discuss.elastic.co/t/how-to-get-access-time-of-filename-and-set-it-in-every-log-message/99378)

<div class="topic-metadata">

**Author:** [@chros425](https://discuss.elastic.co/u/chros425)\
**Replies:** 4\
**Last updated:** [September 7, 2017, 3:28am UTC](https://discuss.elastic.co/t/how-to-get-access-time-of-filename-and-set-it-in-every-log-message/99378 "2017-09-07T03:28:06Z")

</div>

We need to sort message in Web, but the log messages are in different log files，so we want get the access time of log file ,then use the access time and offset to sort log message in different log files. How to it with f…

---

## [Execute a script on GET requests](https://discuss.elastic.co/t/execute-a-script-on-get-requests/98461)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 4\
**Last updated:** [August 28, 2017, 4:47pm UTC](https://discuss.elastic.co/t/execute-a-script-on-get-requests/98461 "2017-08-28T16:47:06Z")

</div>

I have fairly large documents and I’d like to execute a script on GET to return a subset of it (can’t do with just specifying fields unfortunately). Is this possible ? Thanks

---

## [Explain me what is all wrong in Devtool?](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 4\
**Last updated:** [August 17, 2017, 11:25am UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975 "2017-08-17T11:25:35Z")

</div>

Hello, I upload lots of data in my els cluster. When i display indice in kibana (GET indices) i find anormal result no ? It’s normal for you ? : green open cra-2017.08.14 eu\_NMngAQrmySQVz7\_XWqA 3 1 690924 173436 295.…

---

## [Search Trend with ElasticSearch API](https://discuss.elastic.co/t/search-trend-with-elasticsearch-api/91254)

<div class="topic-metadata">

**Author:** [@kashi\_mn](https://discuss.elastic.co/u/kashi_mn)\
**Replies:** 4\
**Last updated:** [July 3, 2017, 7:04am UTC](https://discuss.elastic.co/t/search-trend-with-elasticsearch-api/91254 "2017-07-03T07:04:15Z")

</div>

Does ElasticSearch provide any API which gives the trend of the searched items. For example : top 10 recently searched items, top 10 most searched items? Please can anybody help me on this? I have been looking into top …

---

## [Manage the search context of underlying "scroll" during reindex api call](https://discuss.elastic.co/t/manage-the-search-context-of-underlying-scroll-during-reindex-api-call/64994)

<div class="topic-metadata">

**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\
**Replies:** 4\
**Last updated:** [November 4, 2016, 1:42pm UTC](https://discuss.elastic.co/t/manage-the-search-context-of-underlying-scroll-during-reindex-api-call/64994 "2016-11-04T13:42:34Z")

</div>

Hi ! I got search context loss errors during a reindex. I imagine the reindex api uses a underlying scroll that fails, can I tune it when calling the reindex api ? Something similar to the scroll parameter https://www…

---

## [Difference between 2.3.2 and 2.4.1](https://discuss.elastic.co/t/difference-between-2-3-2-and-2-4-1/62810)

<div class="topic-metadata">

**Author:** [@banu](https://discuss.elastic.co/u/banu)\
**Replies:** 4\
**Last updated:** [October 12, 2016, 2:11pm UTC](https://discuss.elastic.co/t/difference-between-2-3-2-and-2-4-1/62810 "2016-10-12T14:11:09Z")

</div>

what is the Major difference between 2.3.2 and 2.4.1?could somebody provide a detailed report on it

---

## [Elasticsearch Query to Return Results in a Common Number of Fields](https://discuss.elastic.co/t/elasticsearch-query-to-return-results-in-a-common-number-of-fields/42969)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 4\
**Last updated:** [February 29, 2016, 11:56pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-return-results-in-a-common-number-of-fields/42969 "2016-02-29T23:56:38Z")

</div>

Is there a way to return result with a common set of fields E.g. I have two records or documents. 1st Record ID: 001 Price: 12 2nd Record ID:002 Price: 20 Remarks: Do not store outdoors I am looking at for match-…

---

## [How to store email address and username without the part search](https://discuss.elastic.co/t/how-to-store-email-address-and-username-without-the-part-search/9698)

<div class="topic-metadata">

**Author:** [@paul\_cdf](https://discuss.elastic.co/u/paul_cdf)\
**Replies:** 4\
**Last updated:** [November 15, 2012, 10:34am UTC](https://discuss.elastic.co/t/how-to-store-email-address-and-username-without-the-part-search/9698 "2012-11-15T10:34:00Z")

</div>

Hi, I'm new to elasticsearch, and am having issues setting up document mapping, i have set up multiple indexes, one per language, and have the same document mapping set up per index (see below) i'm trying to set i…

---

## [OpenAI connect with elastic search datasource](https://discuss.elastic.co/t/openai-connect-with-elastic-search-datasource/347901)

<div class="topic-metadata">

**Author:** [@Saurabh\_Agrawal2](https://discuss.elastic.co/u/Saurabh_Agrawal2)\
**Replies:** 5\
**Last updated:** [November 28, 2023, 9:59am UTC](https://discuss.elastic.co/t/openai-connect-with-elastic-search-datasource/347901 "2023-11-28T09:59:18Z")

</div>

I am trying call openAI with my custom index created on Elastic search but when I try to run it I am getting following error: openai.BadRequestError: Error code: 400 - {'error': {'requestid': 'aaa-bbb-404d-8a12-3da23608…

---

## [Error building metricbeat 7.12.0](https://discuss.elastic.co/t/error-building-metricbeat-7-12-0/268425)

<div class="topic-metadata">

**Author:** [@Anna\_Yan](https://discuss.elastic.co/u/Anna_Yan)\
**Replies:** 5\
**Last updated:** [March 29, 2021, 4:47pm UTC](https://discuss.elastic.co/t/error-building-metricbeat-7-12-0/268425 "2021-03-29T16:47:59Z")

</div>

Hi, I'm trying to build metricbeat v7.12.0 and I'm getting this error: ~/beats/metricbeat PLATFORMS=linux/amd64 make release  2 ↵  10463  17:5…

---

## [Kibana is way too slow. and failed to load response data](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888)

<div class="topic-metadata">

**Author:** [@nugg](https://discuss.elastic.co/u/nugg)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 4:29am UTC](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888 "2021-03-02T04:29:07Z")

</div>

I want to know the reason why kibana is way too slow. when i refresh the dashboard and canvas. I run kibana on 2 cpu core and 4Gi memory pod. I didn't use any custom plugins. what could be the problem?

---

## [Filter don't filter and don't drop events in MongoDB log](https://discuss.elastic.co/t/filter-dont-filter-and-dont-drop-events-in-mongodb-log/146061)

<div class="topic-metadata">

**Author:** [@gabberoid](https://discuss.elastic.co/u/gabberoid)\
**Replies:** 5\
**Last updated:** [September 3, 2018, 6:03am UTC](https://discuss.elastic.co/t/filter-dont-filter-and-dont-drop-events-in-mongodb-log/146061 "2018-09-03T06:03:29Z")

</div>

Hi. I want to filter all events from MongoDB log except ACCESS component. My config file is: filter { if \[document\_type\] == "windows-mongodb" { if \[mongodb.log.component\] != "ACCESS" { drop{} } grok { match =\> { …

---

## [Create different new nodes](https://discuss.elastic.co/t/create-different-new-nodes/102520)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 5\
**Last updated:** [October 3, 2017, 9:36am UTC](https://discuss.elastic.co/t/create-different-new-nodes/102520 "2017-10-03T09:36:40Z")

</div>

Greetings, I am new to ELK I am not getting it through the tutorials please help me in it. As I want to monitor different servers(5 Servers) So I want to know as to observe the servers live do i Need more than 1 Node? an…

---

## [Errors running logstash, bit of a newb](https://discuss.elastic.co/t/errors-running-logstash-bit-of-a-newb/80269)

<div class="topic-metadata">

**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\
**Replies:** 5\
**Last updated:** [April 3, 2017, 11:25pm UTC](https://discuss.elastic.co/t/errors-running-logstash-bit-of-a-newb/80269 "2017-04-03T23:25:58Z")

</div>

Trying to set logstash up properly but I'm getting the following message after running it with my config file: Attempting to install template {:manage\_template=\>{"template"=\>"logstash-", "settings"=\>{"index.refresh\_inte…

---

## [HTTPS with XPUT](https://discuss.elastic.co/t/https-with-xput/35974)

<div class="topic-metadata">

**Author:** [@brock](https://discuss.elastic.co/u/brock)\
**Replies:** 5\
**Last updated:** [December 4, 2015, 3:09am UTC](https://discuss.elastic.co/t/https-with-xput/35974 "2015-12-04T03:09:22Z")

</div>

Just starting out with elastic. I can't seem to get this json endpoint to go into elastic. curl -XPUT 'https://fluidsealdev.crm.dynamics.com/XRMServices/2011/OrganizationData.svc/ProductSet?$select=adx\_brand,adx\_model…

---

## [Architecture for site recovery](https://discuss.elastic.co/t/architecture-for-site-recovery/191855)

<div class="topic-metadata">

**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\
**Replies:** 8\
**Last updated:** [July 29, 2019, 2:44pm UTC](https://discuss.elastic.co/t/architecture-for-site-recovery/191855 "2019-07-29T14:44:59Z")

</div>

Hello, I want to install an elasticsearch cluster on two servers. The servers are separated by a few kilometers. I think create a master/data node on the server 1 and a master/data node on the server 2. Thus, if a si…

---

## [Does search Autocomplete works in Kibana 4.6.x](https://discuss.elastic.co/t/does-search-autocomplete-works-in-kibana-4-6-x/121245)

<div class="topic-metadata">

**Author:** [@ekane95](https://discuss.elastic.co/u/ekane95)\
**Replies:** 8\
**Last updated:** [February 23, 2018, 4:06pm UTC](https://discuss.elastic.co/t/does-search-autocomplete-works-in-kibana-4-6-x/121245 "2018-02-23T16:06:18Z")

</div>

I want to have an autocomplete search on kibana 4.6.x Is that possible?

---

## [Reading Wazuh data from kafka, write to Elasticsearch using Filebeat and pipeline](https://discuss.elastic.co/t/reading-wazuh-data-from-kafka-write-to-elasticsearch-using-filebeat-and-pipeline/270078)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 0\
**Last updated:** [April 14, 2021, 6:24am UTC](https://discuss.elastic.co/t/reading-wazuh-data-from-kafka-write-to-elasticsearch-using-filebeat-and-pipeline/270078 "2021-04-14T06:24:50Z")

</div>

Hi, community. I want to read Wazuh data from kafka and write it to Elasticsearch. All way looks like: wazuh-manager-\>filebeat-\>logstash-\>nifi-\>kafka\_\>filebeat-\>elasticsearch. I try to write to elasticsearch using nati…

---

## [Logstach SSL issue](https://discuss.elastic.co/t/logstach-ssl-issue/102019)

<div class="topic-metadata">

**Author:** [@fouzmtl](https://discuss.elastic.co/u/fouzmtl)\
**Replies:** 0\
**Last updated:** [September 27, 2017, 6:59pm UTC](https://discuss.elastic.co/t/logstach-ssl-issue/102019 "2017-09-27T18:59:28Z")

</div>

Hello, I m new to Logstach/ElasticSearch. I m trying to configure the system to use SSL: I have downloaded xpack to create the SSL documentation . I m having hard time to configure it. Logstach is logstach-5.6.1. I h…

---

## [Map numeric data to float , integer, long and double datatype](https://discuss.elastic.co/t/map-numeric-data-to-float-integer-long-and-double-datatype/96185)

<div class="topic-metadata">

**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 5:17am UTC](https://discuss.elastic.co/t/map-numeric-data-to-float-integer-long-and-double-datatype/96185 "2017-08-08T05:17:39Z")

</div>

I’d like to use template and map fields accordingly to field’s name suffix to : interger, long, float and double. I use the following template: “dynamic\_templates”: \[ { “integer\_fields”: { “match”: “\_i\_en", “match\_…

---

## [Adding Leading Zeros To Lens Metric](https://discuss.elastic.co/t/adding-leading-zeros-to-lens-metric/313210)

<div class="topic-metadata">

**Author:** [@rblob](https://discuss.elastic.co/u/rblob)\
**Replies:** 7\
**Last updated:** [September 11, 2022, 1:55pm UTC](https://discuss.elastic.co/t/adding-leading-zeros-to-lens-metric/313210 "2022-09-11T13:55:08Z")

</div>

Could anyone enlighten me as to whether it is possible to add leading zeros to the Metric Visualisation? I am trying to get the count of all records from a specific query and I would like to add zeros before that value …

---

## ["Unable to save document" while indexing document](https://discuss.elastic.co/t/unable-to-save-document-while-indexing-document/289809)

<div class="topic-metadata">

**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-save-document-while-indexing-document/289809 "2021-11-22T14:37:55Z")

</div>

HI, Using app search and Elasticsearch version 7.10 A few ids have got corrupted while indexing appsearch, now when i am trying to index them even v through Postman i get \[ { "id": "123456a2-e619-43f9-98c2…

---

## [Apache module bad timestamp from error log file](https://discuss.elastic.co/t/apache-module-bad-timestamp-from-error-log-file/149893)

<div class="topic-metadata">

**Author:** [@Aurelien\_Bras](https://discuss.elastic.co/u/Aurelien_Bras)\
**Replies:** 1\
**Last updated:** [September 26, 2018, 9:13pm UTC](https://discuss.elastic.co/t/apache-module-bad-timestamp-from-error-log-file/149893 "2018-09-26T21:13:25Z")

</div>

Hi here, Using lastest filebeat/elasticsearch/kibana (6.4.1), when sending apache error log, it read timestamp writted in local time from log file and override timestamp in UTC format (sended by filebeat), then all logs…

---

## [Kibana Vega Lite Tooltips](https://discuss.elastic.co/t/kibana-vega-lite-tooltips/148266)

<div class="topic-metadata">

**Author:** [@pgianf](https://discuss.elastic.co/u/pgianf)\
**Replies:** 1\
**Last updated:** [September 14, 2018, 2:43am UTC](https://discuss.elastic.co/t/kibana-vega-lite-tooltips/148266 "2018-09-14T02:43:10Z")

</div>

Hi someone knows why tooltips, that appear using Vega-editor (see picture) , dont appear using Kibana editor for Vega? is there any mistake in my graph specification or is it a known limitation and there are plans to …

---

## [Specify timeframe](https://discuss.elastic.co/t/specify-timeframe/97154)

<div class="topic-metadata">

**Author:** [@Bondo](https://discuss.elastic.co/u/Bondo)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 8:58am UTC](https://discuss.elastic.co/t/specify-timeframe/97154 "2017-09-01T08:58:06Z")

</div>

I don’t see anywhere that I can specify a time frame (i.e. last 5 minutes) on the data I added to my Graph Work space. Is that not possible with the Graph component? Or can I specify the the time frame in my search after…

---

## [Grok filter sequence](https://discuss.elastic.co/t/grok-filter-sequence/79881)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 1:08pm UTC](https://discuss.elastic.co/t/grok-filter-sequence/79881 "2017-03-24T13:08:36Z")

</div>

Hi, I am using below 3 filters in my test configuration. grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:eventTime}" } tag\_on\_failure =\> \[ "\_grok\_match\_fail\_1" \] } grok { match =\> …

[Previous page](https://discuss.elastic.co/top.md?page=1639&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1641&per_page=50&period=all)
