# Top

**URL:** https://discuss.elastic.co/top.md?page=1645&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1646

---

## [Indexing and searching for documents which contain field values as file paths](https://discuss.elastic.co/t/indexing-and-searching-for-documents-which-contain-field-values-as-file-paths/47456)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 2\
**Last updated:** [April 19, 2016, 6:53am UTC](https://discuss.elastic.co/t/indexing-and-searching-for-documents-which-contain-field-values-as-file-paths/47456 "2016-04-19T06:53:09Z")

</div>

Hello, We have a field indexed in ES called as fullpath with the value as “\\zl\_allen-p\_000.pst\\Top of Personal Folders\\allen-p\\All documents-- no subject --.msg\\ID00000173.ppt”, as per ES documentation below are the li…

---

## [Get field names in "flat" format](https://discuss.elastic.co/t/get-field-names-in-flat-format/39877)

<div class="topic-metadata">

**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\
**Replies:** 2\
**Last updated:** [January 25, 2016, 8:12am UTC](https://discuss.elastic.co/t/get-field-names-in-flat-format/39877 "2016-01-25T08:12:49Z")

</div>

Is there a possibility to get the leaf field names in the mappings from an ES index in a flat format? E.g. "message.author.firstname" : { properties... } instead of {"message": { "author" : { "firstname" (very simpli…

---

## [Selective FIltering](https://discuss.elastic.co/t/selective-filtering/29019)

<div class="topic-metadata">

**Author:** [@haresh\_srm](https://discuss.elastic.co/u/haresh_srm)\
**Replies:** 2\
**Last updated:** [September 12, 2015, 5:24am UTC](https://discuss.elastic.co/t/selective-filtering/29019 "2015-09-12T05:24:01Z")

</div>

Hi, I am new to Kibana and have been playing with it for a while creating visualizations and dashboards. However I am trying to understand if Kibana can be leveraged for the following usecase, In a dashboard page if …

---

## [Indexing in Hadoop](https://discuss.elastic.co/t/indexing-in-hadoop/5914)

<div class="topic-metadata">

**Author:** [@camechis](https://discuss.elastic.co/u/camechis)\
**Replies:** 2\
**Last updated:** [November 21, 2011, 2:01pm UTC](https://discuss.elastic.co/t/indexing-in-hadoop/5914 "2011-11-21T14:01:18Z")

</div>

I am attempting to create a M/R job that reads data from Hbase, creates indexes via lucene and save the index to hdfs/local. I am trying to figure out the integration point with elastic search. Do I have to do somet…

---

## [Elasticsearch 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-37)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:27pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185 "2025-12-18T21:27:04Z")

</div>

Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-37) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore priv…

---

## [Gem/Bundler errors while installing a new logstash filter](https://discuss.elastic.co/t/gem-bundler-errors-while-installing-a-new-logstash-filter/280797)

<div class="topic-metadata">

**Author:** [@lionaneesh](https://discuss.elastic.co/u/lionaneesh)\
**Replies:** 0\
**Last updated:** [August 9, 2021, 11:23am UTC](https://discuss.elastic.co/t/gem-bundler-errors-while-installing-a-new-logstash-filter/280797 "2021-08-09T11:23:01Z")

</div>

I am trying to install the logstash-filter-goaudit plugin on my kubernetes pod running logstash image: docker.elastic.co/logstash/logstash-oss:6.4.1 . We are still on ES 6.6 and am currently trying to onboard goaudit log…

---

## [Elasticsearch 5.2 None of the configured nodes are available](https://discuss.elastic.co/t/elasticsearch-5-2-none-of-the-configured-nodes-are-available/75223)

<div class="topic-metadata">

**Author:** [@sina309](https://discuss.elastic.co/u/sina309)\
**Replies:** 0\
**Last updated:** [February 15, 2017, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-none-of-the-configured-nodes-are-available/75223 "2017-02-15T16:07:10Z")

</div>

I know this question has been asked in different forms in the community, but I have a different use case. I have the following client init: Settings settings = Settings.settingsBuilder() .put("cluster.name", "myclust…

---

## [ElasticSearch Instance is going down periodically with no errors in logs](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133)

<div class="topic-metadata">

**Author:** [@nandeeswara](https://discuss.elastic.co/u/nandeeswara)\
**Replies:** 7\
**Last updated:** [November 7, 2022, 5:24pm UTC](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133 "2022-11-07T17:24:31Z")

</div>

We have an application in Liferay portal and it is using Elasticsearch service as remote server. Elasticsearch on a remote server is going down periodically even though the memory , CPU are highly available. Currently …

---

## [Canvas Expression Syntax NewLine & Comments](https://discuss.elastic.co/t/canvas-expression-syntax-newline-comments/299796)

<div class="topic-metadata">

**Author:** [@GoncaloCarvalho](https://discuss.elastic.co/u/GoncaloCarvalho)\
**Replies:** 1\
**Last updated:** [March 16, 2022, 1:59pm UTC](https://discuss.elastic.co/t/canvas-expression-syntax-newline-comments/299796 "2022-03-16T13:59:34Z")

</div>

Greetings, I need help with two specific features, would greatly appreciate any help you could hand me. I'm setting up a canvas Workpad and I wanted to add some sort of documentation through comments in my code, so oth…

---

## [How to debug relevance in DSL queries](https://discuss.elastic.co/t/how-to-debug-relevance-in-dsl-queries/241357)

<div class="topic-metadata">

**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Replies:** 1\
**Last updated:** [July 15, 2020, 8:09pm UTC](https://discuss.elastic.co/t/how-to-debug-relevance-in-dsl-queries/241357 "2020-07-15T20:09:33Z")

</div>

Hi, I'm working on my first set of queries, but I wish to 'debug' and see: which part of my query match what is the computed score for anything involved in the computation of the final score. For the first, it seems …

---

## [Compare 2 fields in Search - Kibana](https://discuss.elastic.co/t/compare-2-fields-in-search-kibana/237362)

<div class="topic-metadata">

**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\
**Replies:** 7\
**Last updated:** [June 21, 2020, 4:52am UTC](https://discuss.elastic.co/t/compare-2-fields-in-search-kibana/237362 "2020-06-21T04:52:35Z")

</div>

Hi Team, We were asked a question by business whether we can produce a search result comparing 2 fields. For Ex: submitted\_amt \> paid\_amt Usually In Kibana we can do submitted\_amt \>= or \<= 1000 on a value. The req…

---

## [Performance issue in my elastic search cluster](https://discuss.elastic.co/t/performance-issue-in-my-elastic-search-cluster/196948)

<div class="topic-metadata">

**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\
**Replies:** 7\
**Last updated:** [August 29, 2019, 9:39pm UTC](https://discuss.elastic.co/t/performance-issue-in-my-elastic-search-cluster/196948 "2019-08-29T21:39:42Z")

</div>

Hi Team I am running a simple bool term query on an index in ES. It took 33152ms to respond. Request - POST http://elastic\_server\_dns/index\_name/\_doc/\_search Body { "query": { "bool": { "mu…

---

## [List query must contain all elements](https://discuss.elastic.co/t/list-query-must-contain-all-elements/194297)

<div class="topic-metadata">

**Author:** [@jiboxiv](https://discuss.elastic.co/u/jiboxiv)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:12am UTC](https://discuss.elastic.co/t/list-query-must-contain-all-elements/194297 "2019-08-09T06:12:32Z")

</div>

Hi all, I have a question regarding a query I am attempting to do. Lets say we have a document: { "array": \["value1", "value2", "value3"\] } And I have two queries: Query 1: "array": \["value1", "value2", "value3", "v…

---

## [No results obtained using query with Bool must and filter](https://discuss.elastic.co/t/no-results-obtained-using-query-with-bool-must-and-filter/189137)

<div class="topic-metadata">

**Author:** [@Ugen](https://discuss.elastic.co/u/Ugen)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 4:04pm UTC](https://discuss.elastic.co/t/no-results-obtained-using-query-with-bool-must-and-filter/189137 "2019-07-05T16:04:10Z")

</div>

Field Description is a Text field, Field Year is a long field. Query 1 result is wrong it returns nothing ("total": {"value": 0,"relation": "eq"}) Since there are documents with the word "Amour" in the Description fiel…

---

## [How can we install elastic as windows service](https://discuss.elastic.co/t/how-can-we-install-elastic-as-windows-service/162918)

<div class="topic-metadata">

**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\
**Replies:** 7\
**Last updated:** [January 4, 2019, 4:17pm UTC](https://discuss.elastic.co/t/how-can-we-install-elastic-as-windows-service/162918 "2019-01-04T16:17:55Z")

</div>

I know how to host kibana & ES on command prompt . But we need to install ES & Kibana on servers , and ensure that they start automatically when the server restarts . I hosted ES/Kibana on servers using command prompt…

---

## [How do I get kibana to do month over month visualizations](https://discuss.elastic.co/t/how-do-i-get-kibana-to-do-month-over-month-visualizations/161597)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 1\
**Last updated:** [December 20, 2018, 6:42pm UTC](https://discuss.elastic.co/t/how-do-i-get-kibana-to-do-month-over-month-visualizations/161597 "2018-12-20T18:42:08Z")

</div>

Hello, I am trying to get a graph in kibana to show month over month data. I am trying to get the average for a field for the current month graphed in the same chart as the previous months data. I was trying to use TS…

---

## [Dark mode](https://discuss.elastic.co/t/dark-mode/157958)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 10:45am UTC](https://discuss.elastic.co/t/dark-mode/157958 "2018-11-23T10:45:01Z")

</div>

Is there a way to enable "dark mode"? Kibana in general definitely should be more "dark mode" friendly for sure...

---

## [NEST async VS sync](https://discuss.elastic.co/t/nest-async-vs-sync/156427)

<div class="topic-metadata">

**Author:** [@yoav](https://discuss.elastic.co/u/yoav)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 12:23am UTC](https://discuss.elastic.co/t/nest-async-vs-sync/156427 "2018-11-20T00:23:28Z")

</div>

Using NEST in .net core 2.1 Is there any reason not to use async calls? For example (SearchAsync, DeleteIndexAsync, BulkAsync) Should we always prefer async NEST methods over sync methods? Thanks

---

## [Logstash is not picking config file under /etc/logstash/conf.d/ directory](https://discuss.elastic.co/t/logstash-is-not-picking-config-file-under-etc-logstash-conf-d-directory/98987)

<div class="topic-metadata">

**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 2:44pm UTC](https://discuss.elastic.co/t/logstash-is-not-picking-config-file-under-etc-logstash-conf-d-directory/98987 "2017-09-01T14:44:15Z")

</div>

Hi… I am running Logstash as a service on Redhat distribution with the command “sudo initctl start logstash” and when I checked the status, it says Logstash is running. But the problem is it’s not using the config file …

---

## [1TB index. Setup question](https://discuss.elastic.co/t/1tb-index-setup-question/79080)

<div class="topic-metadata">

**Author:** [@Kazama](https://discuss.elastic.co/u/Kazama)\
**Replies:** 1\
**Last updated:** [March 17, 2017, 8:18pm UTC](https://discuss.elastic.co/t/1tb-index-setup-question/79080 "2017-03-17T20:18:44Z")

</div>

I've got a physical node with 384G RAM and a 1TB index to put it on. I've read into this https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html and this piece looks like my situation: Are you doi…

---

## [Reporting not working with shield, getting indices:data/read/mget error is unauthorised for user](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252)

<div class="topic-metadata">

**Author:** [@upendra](https://discuss.elastic.co/u/upendra)\
**Replies:** 1\
**Last updated:** [October 10, 2016, 7:54pm UTC](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252 "2016-10-10T19:54:20Z")

</div>

I am trying to run reporting with shield but when I try to do this, I get the following error in Kibana (4.6.1) and ES (2.4.0) with latest reporting plugin. FInd the error image below. The roles.yml file is as follow…

---

## [Boost bool query 2](https://discuss.elastic.co/t/boost-bool-query-2/46211)

<div class="topic-metadata">

**Author:** [@BlueMagicBE](https://discuss.elastic.co/u/BlueMagicBE)\
**Replies:** 1\
**Last updated:** [April 4, 2016, 8:28am UTC](https://discuss.elastic.co/t/boost-bool-query-2/46211 "2016-04-04T08:28:49Z")

</div>

I would like to search a document in two fields : name + words. I want to boost the score if the word searched is in the field name. I search the word "google". As you can see, the second result has a better score tha…

---

## [Https://discuss.elastic.co/t/logstash-not-working-with-jdk-11-0-16/315105/5](https://discuss.elastic.co/t/https-discuss-elastic-co-t-logstash-not-working-with-jdk-11-0-16-315105-5/317480)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 4\
**Last updated:** [November 18, 2022, 6:27am UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-logstash-not-working-with-jdk-11-0-16-315105-5/317480 "2022-11-18T06:27:11Z")

</div>

Hi, This is in continuation of my prev query that got auto-closed. Summary: Logstash 7.17.3 is not working with jdk \>= 11.0.16 As per @stephenb 's response, I've checked LS\_JAVA\_HOME is properly set. I see that th…

---

## [I would like to add new date range picker in kibana dashboard, my kibana setup is in developement mode in ubuntu 16.04](https://discuss.elastic.co/t/i-would-like-to-add-new-date-range-picker-in-kibana-dashboard-my-kibana-setup-is-in-developement-mode-in-ubuntu-16-04/289264)

<div class="topic-metadata">

**Author:** [@Swapnil\_Jadhav](https://discuss.elastic.co/u/Swapnil_Jadhav)\
**Replies:** 4\
**Last updated:** [November 26, 2021, 11:40am UTC](https://discuss.elastic.co/t/i-would-like-to-add-new-date-range-picker-in-kibana-dashboard-my-kibana-setup-is-in-developement-mode-in-ubuntu-16-04/289264 "2021-11-26T11:40:25Z")

</div>

Anyone knows that can help me to add this.. Thanks in advanced

---

## [Logstash KV filter - Wrong parsing](https://discuss.elastic.co/t/logstash-kv-filter-wrong-parsing/282333)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 4\
**Last updated:** [August 24, 2021, 12:37pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-wrong-parsing/282333 "2021-08-24T12:37:26Z")

</div>

Hello, I'm using KV filter in Logstash. Logstash configuration: filter { #PARSING LOG #------------------------------------------ grok { patterns\_dir =\> \["/etc/logstash/grok-patterns"\] break\_on\_mat…

---

## [Migration from Elastic Cloud to Elastic on Docker](https://discuss.elastic.co/t/migration-from-elastic-cloud-to-elastic-on-docker/275132)

<div class="topic-metadata">

**Author:** [@Danigrail](https://discuss.elastic.co/u/Danigrail)\
**Replies:** 4\
**Last updated:** [June 9, 2021, 1:41pm UTC](https://discuss.elastic.co/t/migration-from-elastic-cloud-to-elastic-on-docker/275132 "2021-06-09T13:41:15Z")

</div>

Hi community, im using ES on my Docker, i try to migrate data from my other Elasticsearch on Cloud, i tried to aim to my Elasticsearch ID but on Dev Tools doesn't work. I restarted container also, and added to the white…

---

## [Set service environment from apm-server.yml](https://discuss.elastic.co/t/set-service-environment-from-apm-server-yml/274582)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [June 2, 2021, 5:26am UTC](https://discuss.elastic.co/t/set-service-environment-from-apm-server-yml/274582 "2021-06-02T05:26:14Z")

</div>

Hi, I have elk stack 7.11.1 setup with apm as central server. Have configured apm for java microservice and getting data in elasticsearch properly. Have 2 questions I haven't set service environment variable in ag…

---

## [Metricbeat "Failed due to panic.{"panic": "runtime error: index out of range \[0\]"](https://discuss.elastic.co/t/metricbeat-failed-due-to-panic-panic-runtime-error-index-out-of-range-0/267047)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 4\
**Last updated:** [March 16, 2021, 4:41pm UTC](https://discuss.elastic.co/t/metricbeat-failed-due-to-panic-panic-runtime-error-index-out-of-range-0/267047 "2021-03-16T16:41:18Z")

</div>

I am using the Metricbeat AWS module while starting Metricbeat, I am facing the following error. I went through Git issues but seems it's fixed in the version I am using. I am pasting my aws.yml as well for reference. E…

---

## [Filebeat Autodiscover appenders - configuration not applied](https://discuss.elastic.co/t/filebeat-autodiscover-appenders-configuration-not-applied/252588)

<div class="topic-metadata">

**Author:** [@solarwinds](https://discuss.elastic.co/u/solarwinds)\
**Replies:** 4\
**Last updated:** [October 20, 2020, 10:53am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-appenders-configuration-not-applied/252588 "2020-10-20T10:53:33Z")

</div>

Hi everyone, before opening an issue on Github, I will try here. As subject states, Filebeat Autodiscover appenders are not working as expected - configuration is not being applied. If I configure add\_docker\_metadata as …

---

## [Service start fail after Upgrade 5.6.12 to latest](https://discuss.elastic.co/t/service-start-fail-after-upgrade-5-6-12-to-latest/166968)

<div class="topic-metadata">

**Author:** [@Ronny\_Preiss](https://discuss.elastic.co/u/Ronny_Preiss)\
**Replies:** 4\
**Last updated:** [February 5, 2019, 7:43am UTC](https://discuss.elastic.co/t/service-start-fail-after-upgrade-5-6-12-to-latest/166968 "2019-02-05T07:43:08Z")

</div>

Hi @ all, :slight\_smile: I've updated ES from 5.6.12 to the latest version and can't start the service anymore. I've done this with the following steps: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | …

---

## [Super user Role not working for SAML users](https://discuss.elastic.co/t/super-user-role-not-working-for-saml-users/153651)

<div class="topic-metadata">

**Author:** [@Hanciv](https://discuss.elastic.co/u/Hanciv)\
**Replies:** 4\
**Last updated:** [October 25, 2018, 1:17pm UTC](https://discuss.elastic.co/t/super-user-role-not-working-for-saml-users/153651 "2018-10-25T13:17:13Z")

</div>

Hi, We are in the process of setting up SAML authentication with ELK. From Elastic Search, we are integrating with OneLogin, The integreation is successful and I am able to login with SAML user. I have given the role of…

---

## [Event forecast using Kibana ML](https://discuss.elastic.co/t/event-forecast-using-kibana-ml/128872)

<div class="topic-metadata">

**Author:** [@ashay.dhavale](https://discuss.elastic.co/u/ashay.dhavale)\
**Replies:** 4\
**Last updated:** [May 4, 2018, 1:41pm UTC](https://discuss.elastic.co/t/event-forecast-using-kibana-ml/128872 "2018-05-04T13:41:42Z")

</div>

Hi I have a use case where i expect certain files to be received within a particular week of the month. As soon as the file is received an entry is made to a mySQL DB and i read that using logstash. I have also created …

---

## [GeoPoint boost at mapping time](https://discuss.elastic.co/t/geopoint-boost-at-mapping-time/16650)

<div class="topic-metadata">

**Author:** [@Kina\_Shah](https://discuss.elastic.co/u/Kina_Shah)\
**Replies:** 4\
**Last updated:** [March 30, 2014, 8:32pm UTC](https://discuss.elastic.co/t/geopoint-boost-at-mapping-time/16650 "2014-03-30T20:32:06Z")

</div>

Hi, What's the best way to give a GeoPoint boost at the mapping time? I added a boost to List of GeoPoint field at the mapping time, but I don't see it doing anything with the score returned when I search on that…

---

## [Separating HTTPJSON array to separate log entries](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030)

<div class="topic-metadata">

**Author:** [@isa\_slngr](https://discuss.elastic.co/u/isa_slngr)\
**Replies:** 3\
**Last updated:** [February 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030 "2022-02-16T00:37:33Z")

</div>

Good evening all, Does anyone in the community know how I can create separate log entries using an ingest pipeline for JSON results pulled via the HTTPJSON integration? We are pulling events via an API and the results …

---

## [Kibana dashboards disapper after elastic restart and new cert creation](https://discuss.elastic.co/t/kibana-dashboards-disapper-after-elastic-restart-and-new-cert-creation/278644)

<div class="topic-metadata">

**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\
**Replies:** 3\
**Last updated:** [July 15, 2021, 6:01pm UTC](https://discuss.elastic.co/t/kibana-dashboards-disapper-after-elastic-restart-and-new-cert-creation/278644 "2021-07-15T18:01:30Z")

</div>

Hello Team, We are using elasticsearch 7.11.2 and Kibana version 7.11.2 Our older self signed certificate expired today. (after 90d) We created again following steps given in - Set up basic security for the Elastic S…

---

## [Snapshot & Restore on Windows can not access directory](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472)

<div class="topic-metadata">

**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\
**Replies:** 3\
**Last updated:** [December 17, 2020, 8:04am UTC](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472 "2020-12-17T08:04:23Z")

</div>

We've got a 3 Node Elastic Cluster on Windows 10 (Customer Request) and i would like to configure the snapshot restore ability for the cluster. What i've done is to create a share on one of the Node (seperate Harddisk),…

---

## [Filebeat config - USER system env variable](https://discuss.elastic.co/t/filebeat-config-user-system-env-variable/232428)

<div class="topic-metadata">

**Author:** [@Johny](https://discuss.elastic.co/u/Johny)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 9:26pm UTC](https://discuss.elastic.co/t/filebeat-config-user-system-env-variable/232428 "2020-06-11T21:26:12Z")

</div>

Hello, i am trying read logs from currently logged user folder. In filebeat config i have: paths: - /home/${USERNAME}/logs/foo.log, this does not even compile. But it work when i hardcode name like this: paths: - /ho…

---

## [How to store a file to elastic search from kibana plugin server](https://discuss.elastic.co/t/how-to-store-a-file-to-elastic-search-from-kibana-plugin-server/228969)

<div class="topic-metadata">

**Author:** [@dorioued](https://discuss.elastic.co/u/dorioued)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-store-a-file-to-elastic-search-from-kibana-plugin-server/228969 "2020-04-23T15:21:21Z")

</div>

Hi Team, I am developing a kibana plugin that generate a file containing the data selected by the user on the plugin interface. After that I should be able to generate a link that the user can use to download the crea…

---

## [Is there a way to implement a keep last N docs per id in a specific index?](https://discuss.elastic.co/t/is-there-a-way-to-implement-a-keep-last-n-docs-per-id-in-a-specific-index/217249)

<div class="topic-metadata">

**Author:** [@kostistsaprailis](https://discuss.elastic.co/u/kostistsaprailis)\
**Replies:** 3\
**Last updated:** [January 31, 2020, 11:34am UTC](https://discuss.elastic.co/t/is-there-a-way-to-implement-a-keep-last-n-docs-per-id-in-a-specific-index/217249 "2020-01-31T11:34:33Z")

</div>

Hello all, I have a weird question, I would like to know if there's some way to implement a grouping filter on a index. E.g. Say for example that we have an index where each doc is one customer purchase, and we keep al…

---

## [Heartbeat | Problem installing on Windows](https://discuss.elastic.co/t/heartbeat-problem-installing-on-windows/204686)

<div class="topic-metadata">

**Author:** [@andrezenun](https://discuss.elastic.co/u/andrezenun)\
**Replies:** 3\
**Last updated:** [October 25, 2019, 6:55pm UTC](https://discuss.elastic.co/t/heartbeat-problem-installing-on-windows/204686 "2019-10-25T18:55:36Z")

</div>

Hi, I'm trying to install heartbeat on a Windows 2012 Server and I got this error: The install script seams to be the same as the other beats. I have installed metricbeat and packetbeat on this same server! Any one g…

---

## [Could not index event to Elasticsearch eror](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-eror/159086)

<div class="topic-metadata">

**Author:** [@rcbart](https://discuss.elastic.co/u/rcbart)\
**Replies:** 3\
**Last updated:** [December 3, 2018, 4:28pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-eror/159086 "2018-12-03T16:28:16Z")

</div>

I am getting the following error when parsing an apache log: \[2018-12-02T21:11:37,512\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index…

---

## [Kubernetes Master pods get into splitbrain](https://discuss.elastic.co/t/kubernetes-master-pods-get-into-splitbrain/138609)

<div class="topic-metadata">

**Author:** [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 11:53pm UTC](https://discuss.elastic.co/t/kubernetes-master-pods-get-into-splitbrain/138609 "2018-07-04T23:53:31Z")

</div>

We had this happen few times with different versions of Elasticsearch 5.x Our setup is 5 es-masters and minimum\_master\_nodes set to 3 The initial Logs: \[2018-07-04T13:17:33,571\]\[INFO \]\[o.e.c.s.ClusterService \] \[es-m…

---

## [Syslog Dashboard Timezone Issue?](https://discuss.elastic.co/t/syslog-dashboard-timezone-issue/126114)

<div class="topic-metadata">

**Author:** [@copenlc](https://discuss.elastic.co/u/copenlc)\
**Replies:** 3\
**Last updated:** [April 2, 2018, 2:55pm UTC](https://discuss.elastic.co/t/syslog-dashboard-timezone-issue/126114 "2018-04-02T14:55:56Z")

</div>

Hey guys would appreciate any help. I've been trying to setup my Syslog dashboard for the last few days and I think i finally narrowed down my issue but I cannot seem to figure out how to correct it. The issue looks li…

---

## [Saving and loading setup data](https://discuss.elastic.co/t/saving-and-loading-setup-data/99556)

<div class="topic-metadata">

**Author:** [@jeffrey](https://discuss.elastic.co/u/jeffrey)\
**Replies:** 3\
**Last updated:** [September 29, 2017, 8:43am UTC](https://discuss.elastic.co/t/saving-and-loading-setup-data/99556 "2017-09-29T08:43:09Z")

</div>

I have been investigating how to export setup data - elastic (indices, mappings) and kibana (visualisations, dashboards, searches, index patterns) then import it on a fresh installation. I have found several useful art…

---

## [Timestamp problem - SOLVED](https://discuss.elastic.co/t/timestamp-problem-solved/82519)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 3\
**Last updated:** [April 17, 2017, 3:46am UTC](https://discuss.elastic.co/t/timestamp-problem-solved/82519 "2017-04-17T03:46:19Z")

</div>

Dear Logstash Users, Sorry, i've seen many threads but they didn't seem to solve my problem. Specifically: 1) Using Logstash 5.3.0 / ES hosted 5.3.0 2) Logstash is running locally on my machine (Mac : maybe this is …

---

## [Field and Document Level Security](https://discuss.elastic.co/t/field-and-document-level-security/73423)

<div class="topic-metadata">

**Author:** [@adamaanderson](https://discuss.elastic.co/u/adamaanderson)\
**Replies:** 3\
**Last updated:** [February 2, 2017, 1:18am UTC](https://discuss.elastic.co/t/field-and-document-level-security/73423 "2017-02-02T01:18:04Z")

</div>

Does ECE support field and document level security? I cannot tell from the ECE documentation whether document and field level security are supported (it links back to Shield documentation and I know that it is supported …

---

## [Azure AD SSO setting behind a proxy not working](https://discuss.elastic.co/t/azure-ad-sso-setting-behind-a-proxy-not-working/346654)

<div class="topic-metadata">

**Author:** [@Ilter\_Sag](https://discuss.elastic.co/u/Ilter_Sag)\
**Replies:** 5\
**Last updated:** [December 6, 2023, 5:28am UTC](https://discuss.elastic.co/t/azure-ad-sso-setting-behind-a-proxy-not-working/346654 "2023-12-06T05:28:36Z")

</div>

Hello, I am trying to integrate Azure AD to Elasticsearch cluster behind a proxy. I tried the proxy parameter settings below but could not succeeded. You can find the log behind that post. It say it cannot access to mic…

---

## [Snapshot](https://discuss.elastic.co/t/snapshot/273692)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 5\
**Last updated:** [May 29, 2021, 12:46pm UTC](https://discuss.elastic.co/t/snapshot/273692 "2021-05-29T12:46:26Z")

</div>

Hi team, is there any sizing guidelines for snapshots and restore? If I wanted take snapshot of upto 10 TB of indexing data. Is there any limitations on the number of CPU and memory for better performance?

---

## [Problem with master-nodes after resizing underlying instances (EC2 AWS)](https://discuss.elastic.co/t/problem-with-master-nodes-after-resizing-underlying-instances-ec2-aws/232167)

<div class="topic-metadata">

**Author:** [@Mathgox](https://discuss.elastic.co/u/Mathgox)\
**Replies:** 5\
**Last updated:** [June 4, 2020, 6:04am UTC](https://discuss.elastic.co/t/problem-with-master-nodes-after-resizing-underlying-instances-ec2-aws/232167 "2020-06-04T06:04:45Z")

</div>

Hi, we're running a Cluster with 3 dedicated Master on AWS EC2 Instances and changed the instance type. Every node got a clean and graceful shutdown and everything worked fine until we changed the elected master node. =…

---

## [Write curl code in Larval or Linux terminal](https://discuss.elastic.co/t/write-curl-code-in-larval-or-linux-terminal/208147)

<div class="topic-metadata">

**Author:** [@masoud\_fathi](https://discuss.elastic.co/u/masoud_fathi)\
**Replies:** 5\
**Last updated:** [November 16, 2019, 8:38am UTC](https://discuss.elastic.co/t/write-curl-code-in-larval-or-linux-terminal/208147 "2019-11-16T08:38:30Z")

</div>

write want this codes in terminal or laravel PUT \_settings { "index": { "blocks": { "read\_only\_allow\_delete": "false" } } } PUT your\_index\_name/\_settings { "index": { "block…

[Previous page](https://discuss.elastic.co/top.md?page=1644&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1646&per_page=50&period=all)
