# Top **URL:** https://discuss.elastic.co/top.md?page=1647&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1648 --- ## [How to control/limit ELK disk usage](https://discuss.elastic.co/t/how-to-control-limit-elk-disk-usage/274755)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 1:20pm UTC](https://discuss.elastic.co/t/how-to-control-limit-elk-disk-usage/274755 "2021-06-02T13:20:05Z")
Hi, Running ELK 7.11.2 Standalone on Debian 10 My ELK machine has 500 GB of disk space. This is the second time the machine runs out of disk space (100% usage). When this happens, I am not able to log into Kibana, as E… --- ## [Multiple csv with different columns](https://discuss.elastic.co/t/multiple-csv-with-different-columns/271794)
**Author:** [@dpb\_2000](https://discuss.elastic.co/u/dpb_2000)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 5:04pm UTC](https://discuss.elastic.co/t/multiple-csv-with-different-columns/271794 "2021-04-30T17:04:57Z")
Hi, I am trying to parse multiple csv with different columns based on autodetect\_column\_names =\> true argument. The main problem is that when I upload the data the columns get repeated and only the columns of the first c… --- ## [Queuing tasks and snapshot operation not working](https://discuss.elastic.co/t/queuing-tasks-and-snapshot-operation-not-working/258286)
**Author:** [@afonsoavr](https://discuss.elastic.co/u/afonsoavr)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 5:02pm UTC](https://discuss.elastic.co/t/queuing-tasks-and-snapshot-operation-not-working/258286 "2020-12-10T17:02:17Z")
Hi, I has the cluster elasticsearch with 6 data nodes and 3 master. When execute the snapshot I receive the error "process\_cluster\_event\_timeout\_exception". I look in my cluster "/\_cat/pending\_tasks" it has 69 tasks w… --- ## [How to access / address nested fields on Logstash](https://discuss.elastic.co/t/how-to-access-address-nested-fields-on-logstash/241861)
**Author:** [@Yoorae\_Kim](https://discuss.elastic.co/u/Yoorae_Kim)\ **Replies:** 3\ **Last updated:** [July 21, 2020, 6:17am UTC](https://discuss.elastic.co/t/how-to-access-address-nested-fields-on-logstash/241861 "2020-07-21T06:17:18Z")
Hello, I am currently trying to convert a nested sub field that contains hexadecimal string to an int type field using Logstash filter ruby{ code =\> 'event.set("\[transactions\]\[gasprice\_int\]", event.get("\[transaction… --- ## [How to convert EST time into UTC and add it as a field](https://discuss.elastic.co/t/how-to-convert-est-time-into-utc-and-add-it-as-a-field/241878)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 3\ **Last updated:** [July 21, 2020, 5:08am UTC](https://discuss.elastic.co/t/how-to-convert-est-time-into-utc-and-add-it-as-a-field/241878 "2020-07-21T05:08:21Z")
All, I am getting field called date with EST time, but i need to convert this date time into UTC and add it as a @timestamp through ingest pipelines. Please help me what is the correct way to do it. Thanks --- ## [Watcher with JSON objects](https://discuss.elastic.co/t/watcher-with-json-objects/223151)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 3:45pm UTC](https://discuss.elastic.co/t/watcher-with-json-objects/223151 "2020-03-12T15:45:13Z")
I have a watcher alert i to alert on HTTP status 422 or 500. i populate request body and response body in my API upon failures and that gets ingested in my index. (basically life of entire api transaction) so watcher is… --- ## [Kibana monitoring - recent log entries lost timezone](https://discuss.elastic.co/t/kibana-monitoring-recent-log-entries-lost-timezone/217889)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 3\ **Last updated:** [February 5, 2020, 8:06pm UTC](https://discuss.elastic.co/t/kibana-monitoring-recent-log-entries-lost-timezone/217889 "2020-02-05T20:06:08Z")
Just noticed that on the Monitoring overview screen, "recent log entries" have the wrong timestamp by our timezone offset. The same log entry in Discover has the correct timestamp. Everything involved is 7.5.2, filebea… --- ## [How to Get a specific Field Id from JSON Index using Low Level Rest Client API](https://discuss.elastic.co/t/how-to-get-a-specific-field-id-from-json-index-using-low-level-rest-client-api/189318)
**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\ **Replies:** 3\ **Last updated:** [July 8, 2019, 1:53pm UTC](https://discuss.elastic.co/t/how-to-get-a-specific-field-id-from-json-index-using-low-level-rest-client-api/189318 "2019-07-08T13:53:34Z")
Hello Folks, i have this JSON DATA in Elasticsearch , and i want to get a specific "id" from it using Low Level Rest Clien API in java. this is the JSON DATA , { "took": 2, "timed\_out": false, "\_shards": { "total": 5… --- ## [Carousel in kibana canvas](https://discuss.elastic.co/t/carousel-in-kibana-canvas/188627)
**Author:** [@Vartika\_Srivastava](https://discuss.elastic.co/u/Vartika_Srivastava)\ **Replies:** 3\ **Last updated:** [July 3, 2019, 5:21pm UTC](https://discuss.elastic.co/t/carousel-in-kibana-canvas/188627 "2019-07-03T17:21:25Z")
Hi, can we create carousel or kind of slideshow using markdown in kibana canvas ? eg. --- ## [Catenate two fields as message](https://discuss.elastic.co/t/catenate-two-fields-as-message/157243)
**Author:** [@Anton1](https://discuss.elastic.co/u/Anton1)\ **Replies:** 3\ **Last updated:** [November 19, 2018, 10:57am UTC](https://discuss.elastic.co/t/catenate-two-fields-as-message/157243 "2018-11-19T10:57:35Z")
I got the logs ui working with my own index. However, message and loglevel are two different fields. Is it possible to catenate level and message so that both are shown in logs ui? --- ## [APM Server Offline Retention / Synchronization](https://discuss.elastic.co/t/apm-server-offline-retention-synchronization/137155)
**Author:** [@hayden.ball](https://discuss.elastic.co/u/hayden.ball)\ **Replies:** 3\ **Last updated:** [June 26, 2018, 12:44pm UTC](https://discuss.elastic.co/t/apm-server-offline-retention-synchronization/137155 "2018-06-26T12:44:57Z")
Hello. The APM system looks really promising, and I'm hoping we'll be able to use it to solve our needs. We've a slightly difficult situation as we've an app that runs in the cloud, but also on client operated site box… --- ## [How to set umask in metricbeat?](https://discuss.elastic.co/t/how-to-set-umask-in-metricbeat/103068)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 9:35pm UTC](https://discuss.elastic.co/t/how-to-set-umask-in-metricbeat/103068 "2017-10-06T21:35:41Z")
Hi, how can i configure the umask for metricbeat logs? I build from source on arm system. When I start metricbeat it sets 600 as permission, but I would like to give other users than the beat process the permission to… --- ## [How can I updated the a sub-field within an index to be not\_analyzed?](https://discuss.elastic.co/t/how-can-i-updated-the-a-sub-field-within-an-index-to-be-not-analyzed/63939)
**Author:** [@kpam](https://discuss.elastic.co/u/kpam)\ **Replies:** 3\ **Last updated:** [October 27, 2016, 4:11pm UTC](https://discuss.elastic.co/t/how-can-i-updated-the-a-sub-field-within-an-index-to-be-not-analyzed/63939 "2016-10-27T16:11:08Z")
I have an index with a sub-filed that I want to set to be not analyzed? How can I change this? Additionally, this indexes are patterned for the day using Filebeat -- is there a way to ensure when new indices are creat… --- ## [Please help to describe indexing buffer related parameters' workflow](https://discuss.elastic.co/t/please-help-to-describe-indexing-buffer-related-parameters-workflow/37927)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 3\ **Last updated:** [December 24, 2015, 11:23am UTC](https://discuss.elastic.co/t/please-help-to-describe-indexing-buffer-related-parameters-workflow/37927 "2015-12-24T11:23:27Z")
let's assume below parameters are all default and index.refresh\_interval set -1: indices.memory.index\_buffer\_size (10%) indices.memory.min\_index\_buffer\_size (48mb) indices.memory.max\_index\_buffer\_size (unbounded) indices… --- ## [My elasticsearch runs - but....look current index](https://discuss.elastic.co/t/my-elasticsearch-runs-but-look-current-index/22406)
**Author:** [@jan99](https://discuss.elastic.co/u/jan99)\ **Replies:** 3\ **Last updated:** [February 27, 2015, 10:13am UTC](https://discuss.elastic.co/t/my-elasticsearch-runs-but-look-current-index/22406 "2015-02-27T10:13:12Z")
Hi ! my elasticsearch runs but in my mediawiki the results are the same like before. is there a possiblity to look into the index ? regards Jan -- You received this message because you are subscribed t… --- ## [Search sort using a field with an "index\_name" results in "No mapping found"](https://discuss.elastic.co/t/search-sort-using-a-field-with-an-index-name-results-in-no-mapping-found/21224)
**Author:** [@Dave\_Reed](https://discuss.elastic.co/u/Dave_Reed)\ **Replies:** 3\ **Last updated:** [December 17, 2014, 2:39am UTC](https://discuss.elastic.co/t/search-sort-using-a-field-with-an-index-name-results-in-no-mapping-found/21224 "2014-12-17T02:39:53Z")
I ran into this problem, and discovered this StackOverflow post (with no answer): http://stackoverflow.com/questions/23348172/elasticsearch-index-name-with-multi-field That original poster included a gist that repr… --- ## [Commercial plugins](https://discuss.elastic.co/t/commercial-plugins/10075)
**Author:** [@Mathias\_Herberts](https://discuss.elastic.co/u/Mathias_Herberts)\ **Replies:** 3\ **Last updated:** [December 15, 2012, 12:09pm UTC](https://discuss.elastic.co/t/commercial-plugins/10075 "2012-12-15T12:09:21Z")
I know there are some commercial analyzers for Solr, is there such an ecosystem around Elastic Search, in the form of commercial pluging maybe? -- --- ## [\[Autocomplete\] Cleo or ElasticSearch with NGram](https://discuss.elastic.co/t/autocomplete-cleo-or-elasticsearch-with-ngram/9736)
**Author:** [@zkidkid](https://discuss.elastic.co/u/zkidkid)\ **Replies:** 8\ **Last updated:** [November 20, 2012, 11:58am UTC](https://discuss.elastic.co/t/autocomplete-cleo-or-elasticsearch-with-ngram/9736 "2012-11-20T11:58:47Z")
Hi All, Currently, I am running searching with ES. We use 3 server with 24 cores and 30GB Ram for each server. I want to build a index with NGram for auto complete but my friend tells me to use CLeo. I try t… --- ## [Query not returning expected result](https://discuss.elastic.co/t/query-not-returning-expected-result/5858)
**Author:** [@Tyler\_Schroeder](https://discuss.elastic.co/u/Tyler_Schroeder)\ **Replies:** 3\ **Last updated:** [November 15, 2011, 7:02am UTC](https://discuss.elastic.co/t/query-not-returning-expected-result/5858 "2011-11-15T07:02:44Z")
I have the following query: {"filtered":{"query":{"query\_string":{"query":"\*"}},"filter":{"and":\[{"term":{"active":true}},{"term":{"tenant":"4e669ec4139ad42bb8428031"}}\]}}} Which accurately returns the following resu… --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/277142)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 2:08pm UTC](https://discuss.elastic.co/t/logstash-error/277142 "2021-06-27T14:08:13Z")
Hello team, I am getting following error on logstash pipeline. can you please help me to identify exact issue. Logstash version: 7.9 C:\\Users\\mangeshsuresh.jadhav\\Downloads\\EKL\\logstash-7.9.0\>bin\\logstash -f wubsprod.… --- ## [How to externalise painless scripts and call it](https://discuss.elastic.co/t/how-to-externalise-painless-scripts-and-call-it/245497)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 10:31am UTC](https://discuss.elastic.co/t/how-to-externalise-painless-scripts-and-call-it/245497 "2020-08-19T10:31:30Z")
hi I have looked into the few examples, of painless script https://www.elastic.co/guide/en/elasticsearch/painless/current/painless-execute-api.html A current example shown is POST /\_scripts/painless/\_execute { "scr… --- ## [Not able to create new user in kibana dashboard by the help of api](https://discuss.elastic.co/t/not-able-to-create-new-user-in-kibana-dashboard-by-the-help-of-api/199296)
**Author:** [@GRV](https://discuss.elastic.co/u/GRV)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 2:16am UTC](https://discuss.elastic.co/t/not-able-to-create-new-user-in-kibana-dashboard-by-the-help-of-api/199296 "2019-09-13T02:16:04Z")
I am using kibana version 7.3, elastic search version 7.3 I am trying to create user through API. PUT /\_security/user/jacknich { "password" : "j@rV1s", "roles" : \[ "admin", "other\_role1" \], "full\_name" : "Jack Nich… --- ## [\[7.0.1\] Journalbeat not processing Elasticsearch Log4j ESJsonLayout logs properly?](https://discuss.elastic.co/t/7-0-1-journalbeat-not-processing-elasticsearch-log4j-esjsonlayout-logs-properly/184673)
**Author:** [@naisanza](https://discuss.elastic.co/u/naisanza)\ **Replies:** 2\ **Last updated:** [June 7, 2019, 9:05pm UTC](https://discuss.elastic.co/t/7-0-1-journalbeat-not-processing-elasticsearch-log4j-esjsonlayout-logs-properly/184673 "2019-06-07T21:05:20Z")
This entire code block is from the "message" field that journalbeat has shipped from an elasticsearch node, and it ends with a comma { "type": "server", "timestamp": "2019-06-06T22:50:40,854+0000", "level": "DEBUG", "co… --- ## [Can't change the label of the x-axis when using filter aggregation](https://discuss.elastic.co/t/cant-change-the-label-of-the-x-axis-when-using-filter-aggregation/181485)
**Author:** [@Kagerou](https://discuss.elastic.co/u/Kagerou)\ **Replies:** 2\ **Last updated:** [May 17, 2019, 3:04pm UTC](https://discuss.elastic.co/t/cant-change-the-label-of-the-x-axis-when-using-filter-aggregation/181485 "2019-05-17T15:04:11Z")
Hello I have attached two screenshots. In the first you can see where I am able to change the name of the x-axis. In the second the option does not exist. Is it hidden somewhere or is there no way to change the x-axis la… --- ## [How ES schema is determined while reading using hadoop](https://discuss.elastic.co/t/how-es-schema-is-determined-while-reading-using-hadoop/167694)
**Author:** [@Sonny\_Heer](https://discuss.elastic.co/u/Sonny_Heer)\ **Replies:** 2\ **Last updated:** [February 11, 2019, 11:06pm UTC](https://discuss.elastic.co/t/how-es-schema-is-determined-while-reading-using-hadoop/167694 "2019-02-11T23:06:20Z")
Env: using this jar: elasticsearch-spark-13\_2.10-5.1.1.jar sqlContext.read.format("org.elasticsearch.spark.sql").option("es.nodes",es\_url).option("es.port", "443").option("es.nodes.wan.only", "true").option("es.net.ssl… --- ## [Want to add duration (in seconds) to timestamp](https://discuss.elastic.co/t/want-to-add-duration-in-seconds-to-timestamp/125003)
**Author:** [@MarBel78](https://discuss.elastic.co/u/MarBel78)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 12:00pm UTC](https://discuss.elastic.co/t/want-to-add-duration-in-seconds-to-timestamp/125003 "2018-03-22T12:00:44Z")
Dear all, i want to add a given durations (in seconds) to timestamp into a new field. In the end, i have the start time (timestamp) and the end time. What is the easiest way during import by logstash ? Thanks a lot! --- ## [Kibana 6.2.2 doesn't find alias name](https://discuss.elastic.co/t/kibana-6-2-2-doesnt-find-alias-name/120924)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 7:05pm UTC](https://discuss.elastic.co/t/kibana-6-2-2-doesnt-find-alias-name/120924 "2018-02-22T19:05:41Z")
Hello, I am using Kibana and Elasticsearch 6.2.2. I have created a few aliases to do some testing. However, none of the alias names are displayed or found by Kibana when I try to "Create a new Index Pattern". I can u… --- ## [Display array fields with carriage return?](https://discuss.elastic.co/t/display-array-fields-with-carriage-return/118032)
**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 6:55am UTC](https://discuss.elastic.co/t/display-array-fields-with-carriage-return/118032 "2018-02-02T06:55:46Z")
Is it possible to display array fields with carriage return ? i have a field which looks like this in json : "ca\_FieldsChanges":\[ "string1", "String2", "String3" \] Is it possible to Display these Values in a verti… --- ## [Scripted fileds label](https://discuss.elastic.co/t/scripted-fileds-label/94731)
**Author:** [@Mehran\_Arefkhani](https://discuss.elastic.co/u/Mehran_Arefkhani)\ **Replies:** 2\ **Last updated:** [July 29, 2017, 3:20am UTC](https://discuss.elastic.co/t/scripted-fileds-label/94731 "2017-07-29T03:20:17Z")
Hi :slight\_smile: as you can see in above picture i have to use "doc\['server.id'\].value" in script to use it in url. but in label i want to show server.name to be more user friendly.how can i show server.name in lab… --- ## [Unbalanced Elasticsearch Cluster Performance](https://discuss.elastic.co/t/unbalanced-elasticsearch-cluster-performance/92377)
**Author:** [@MohammadMazraeh](https://discuss.elastic.co/u/MohammadMazraeh)\ **Replies:** 2\ **Last updated:** [July 9, 2017, 4:21am UTC](https://discuss.elastic.co/t/unbalanced-elasticsearch-cluster-performance/92377 "2017-07-09T04:21:30Z")
We have an Elasticsearch cluster with 9 nodes with the following settings: Elasticsearch Version 5.1.2 One Index in Cluster Primary Shard Storage Size: 3GB Number of Shards: 5 Number of Replica: 3 Node-1, Node-2 and… --- ## [Modifying document metadata in an ingest pipeline](https://discuss.elastic.co/t/modifying-document-metadata-in-an-ingest-pipeline/92143)
**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 8:58pm UTC](https://discuss.elastic.co/t/modifying-document-metadata-in-an-ingest-pipeline/92143 "2017-07-06T20:58:00Z")
Is it possible to modify the incoming document \_id or destination index values in an ingest pipeline? I did not find anything in the docs to indicate either way. Thanks, Dan --- ## [Bool query retrun incorrect result when using "filter" and "should" in same time](https://discuss.elastic.co/t/bool-query-retrun-incorrect-result-when-using-filter-and-should-in-same-time/52805)
**Author:** [@Jin\_Guo](https://discuss.elastic.co/u/Jin_Guo)\ **Replies:** 2\ **Last updated:** [June 23, 2016, 5:49am UTC](https://discuss.elastic.co/t/bool-query-retrun-incorrect-result-when-using-filter-and-should-in-same-time/52805 "2016-06-23T05:49:58Z")
Dear all, My ES version is 2.3.3 and here is the sample index: { "took": 1, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "failed": 0 }, "hits": { "total": 3, "max\_score"… --- ## ["reason": "current license is non-compliant for \[shield\]",](https://discuss.elastic.co/t/reason-current-license-is-non-compliant-for-shield/46926)
**Author:** [@boreal](https://discuss.elastic.co/u/boreal)\ **Replies:** 2\ **Last updated:** [April 11, 2016, 12:24am UTC](https://discuss.elastic.co/t/reason-current-license-is-non-compliant-for-shield/46926 "2016-04-11T00:24:54Z")
Hi, we were using Shield with our cluster and the 30-day license expired so we are getting limited access to the cluster (no health etc) per ES document. It turns out that we didn't need Shield after all, so we uninstall… --- ## [What charset to use?](https://discuss.elastic.co/t/what-charset-to-use/34722)
**Author:** [@fares](https://discuss.elastic.co/u/fares)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 9:00am UTC](https://discuss.elastic.co/t/what-charset-to-use/34722 "2015-11-17T09:00:24Z")
Hi, Im trying to read non UTF-8 file, it's IBM 500 file but i can't find it in the charset list provided with the plugin so i tried "US-ASCII". Here is my config file: input{ file { path =\>..… --- ## [How to create the best index/type for my particular situation](https://discuss.elastic.co/t/how-to-create-the-best-index-type-for-my-particular-situation/26463)
**Author:** [@Erik](https://discuss.elastic.co/u/Erik)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 12:52pm UTC](https://discuss.elastic.co/t/how-to-create-the-best-index-type-for-my-particular-situation/26463 "2015-07-29T12:52:08Z")
"\_index": "crm", "\_type": "employee", "\_id": "1", "\_score": 1, "\_source": { "type": null, "account": { "firstname": null, "accountAddress": { "street": null, } } I'm currently working… --- ## [Changing Kibana-int based on context](https://discuss.elastic.co/t/changing-kibana-int-based-on-context/18098)
**Author:** [@cotcs](https://discuss.elastic.co/u/cotcs)\ **Replies:** 2\ **Last updated:** [June 24, 2014, 8:29pm UTC](https://discuss.elastic.co/t/changing-kibana-int-based-on-context/18098 "2014-06-24T20:29:03Z")
I am a newbie to Computer science in general and at present I am working on a project which involves Elasticsearch, logstash, and Kibana and we are using this to build up a centralized Logging system. In kibana co… --- ## [Parametric Search with aggregations](https://discuss.elastic.co/t/parametric-search-with-aggregations/16959)
**Author:** [@Cheyne\_Rood](https://discuss.elastic.co/u/Cheyne_Rood)\ **Replies:** 2\ **Last updated:** [April 16, 2014, 2:04pm UTC](https://discuss.elastic.co/t/parametric-search-with-aggregations/16959 "2014-04-16T14:04:54Z")
I've been working on advanced parametric search with elasticsearch v1.1 and am having trouble getting aggregations to work in the way I'd like. I've scoured the documentation and tried a couple different approaches … --- ## [Security\_exception: unable to authenticate user \[me\] for REST request \[/\_nodes?filter\_path=nodes.\*.version%2Cnodes.\*.http.publish\_address%2Cnodes.\*.ip\]](https://discuss.elastic.co/t/security-exception-unable-to-authenticate-user-me-for-rest-request-nodes-filter-path-nodes-version-2cnodes-http-publish-address-2cnodes-ip/358442)
**Author:** [@clarac1996](https://discuss.elastic.co/u/clarac1996)\ **Replies:** 5\ **Last updated:** [April 30, 2024, 2:43am UTC](https://discuss.elastic.co/t/security-exception-unable-to-authenticate-user-me-for-rest-request-nodes-filter-path-nodes-version-2cnodes-http-publish-address-2cnodes-ip/358442 "2024-04-30T02:43:21Z")
Hello! I really need some help, been struggling with this. I am trying to set up Kibana and Elasticsearch using docker-compose, and I have already generated a service account user (left it as my name clara), but the kib… --- ## [Multiple index search. One with routing](https://discuss.elastic.co/t/multiple-index-search-one-with-routing/272204)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 5\ **Last updated:** [May 6, 2021, 7:20am UTC](https://discuss.elastic.co/t/multiple-index-search-one-with-routing/272204 "2021-05-06T07:20:06Z")
Hello, Is it possible to query multiple indices at the same time, where one of them requires routing? For example if index1 requires routing but index 2 doesn't. Get index1,index2/\_search?routing=..? Thanks --- ## [Trying external-plugin-test on "real setup" fails with "Cannot resolve type description for co.elastic.apm.agent.bci.classloading.LookupExposer"](https://discuss.elastic.co/t/trying-external-plugin-test-on-real-setup-fails-with-cannot-resolve-type-description-for-co-elastic-apm-agent-bci-classloading-lookupexposer/260923)
**Author:** [@mputz86](https://discuss.elastic.co/u/mputz86)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 1:20pm UTC](https://discuss.elastic.co/t/trying-external-plugin-test-on-real-setup-fails-with-cannot-resolve-type-description-for-co-elastic-apm-agent-bci-classloading-lookupexposer/260923 "2021-02-15T13:20:24Z")
Hey there, when I try out the external-plugin-test from integration-tests, it fails with "Cannot resolve type description for co.elastic.apm.agent.bci.classloading.LookupExposer". So probably something is missing / not… --- ## [Kibana showing error](https://discuss.elastic.co/t/kibana-showing-error/251705)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 5\ **Last updated:** [October 12, 2020, 12:15pm UTC](https://discuss.elastic.co/t/kibana-showing-error/251705 "2020-10-12T12:15:48Z")
Hi, I've installed kibana on linux. i've assign 5601 port as external host(log.gurukul.ninja). but when i run ./bin/kibana command in linux putty terminal i got this error. log \[03:03:35.042\] \[warning\]\[plugins-dis… --- ## [\[BUG\] When "log" field is missing in docker container's log line, filebeat immediately exited with Go routine panic](https://discuss.elastic.co/t/bug-when-log-field-is-missing-in-docker-containers-log-line-filebeat-immediately-exited-with-go-routine-panic/173880)
**Author:** [@Debashis](https://discuss.elastic.co/u/Debashis)\ **Replies:** 5\ **Last updated:** [March 27, 2019, 5:49am UTC](https://discuss.elastic.co/t/bug-when-log-field-is-missing-in-docker-containers-log-line-filebeat-immediately-exited-with-go-routine-panic/173880 "2019-03-27T05:49:53Z")
Objective: Verifying the filebeat behavior when json field "log" is missing from container's log line but "stream" and "time" fields are present. Version: 6.4, 6.7 Execution Steps: Create a docker container … --- ## [Failed to execute bulk item in ES](https://discuss.elastic.co/t/failed-to-execute-bulk-item-in-es/143898)
**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\ **Replies:** 0\ **Last updated:** [August 10, 2018, 4:11pm UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-in-es/143898 "2018-08-10T16:11:37Z")
Hello, Can someone explain what does it mean? We're using ES 5.6 and in ES logs I see a bunch of records like: \[2018-08-10T15:59:14,212\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[data-001\] \[logstash-2018.08.10\]\[0\] fa… --- ## [Regular expressions and non-analyzed fields](https://discuss.elastic.co/t/regular-expressions-and-non-analyzed-fields/35617)
**Author:** [@firepants](https://discuss.elastic.co/u/firepants)\ **Replies:** 0\ **Last updated:** [November 26, 2015, 2:21am UTC](https://discuss.elastic.co/t/regular-expressions-and-non-analyzed-fields/35617 "2015-11-26T02:21:14Z")
What is the default behaviour for a regexp query against a non-analyzed field? Also, is that the same answer when dealing with .raw fields? After everything i've read, i understand the following. 1. RegExp queries w… --- ## [Post-processing aggregations data](https://discuss.elastic.co/t/post-processing-aggregations-data/1261)
**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 0\ **Last updated:** [May 25, 2015, 5:56pm UTC](https://discuss.elastic.co/t/post-processing-aggregations-data/1261 "2015-05-25T17:56:06Z")
Good day, I have a (simplified) mapping that stores throughput metrics every second: { "sample": { "properties": { "timestamp": { "type": "date" }, "throughput": { "type": "long" } … --- ## [Dynamic URL input in Logstash](https://discuss.elastic.co/t/dynamic-url-input-in-logstash/310605)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 7:55am UTC](https://discuss.elastic.co/t/dynamic-url-input-in-logstash/310605 "2022-07-26T07:55:46Z")
Hello, I am trying to insert a URL as an input in Logstash, but the content of the URL is too large for Logstash to take in all at once with http\_poller (memory error), so what I can do is add arguments such as "PageNo"… --- ## [Netflow codec. Wrong data](https://discuss.elastic.co/t/netflow-codec-wrong-data/238029)
**Author:** [@swb](https://discuss.elastic.co/u/swb)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 7:52am UTC](https://discuss.elastic.co/t/netflow-codec-wrong-data/238029 "2020-06-22T07:52:21Z")
Hello friends, We want to replace our old system for viewing Netflow (Nfsen) information with ELK. For this, we used the netflow module for Logstash. But we see fewer packets and bytes than it actually is. For example: … --- ## [How can i apply index template and ilm to existing index?](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 11:03pm UTC](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529 "2022-11-09T23:03:48Z")
Now, i have 'test' index in elasticsearch. Documents are written in 'test' index every day, and every seconds. In this case, i want to apply index template to 'test' index. For example, 'test-0000001', 'test-0000002'.… --- ## [Unable to use RESTful API in Elastic Cloud with curl](https://discuss.elastic.co/t/unable-to-use-restful-api-in-elastic-cloud-with-curl/299358)
**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\ **Replies:** 1\ **Last updated:** [March 11, 2022, 8:28am UTC](https://discuss.elastic.co/t/unable-to-use-restful-api-in-elastic-cloud-with-curl/299358 "2022-03-11T08:28:10Z")
Hi, I have a deployment on Elastic Cloud with an endpoint of the form: https://my\_host\_name.es.westusa.azure.elastic-cloud.com I wish to use the api to edit the extensions, specifically to add a synonyms file, using c… --- ## [How can I check logstash throughput(event per second)?](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340 "2021-02-25T13:33:33Z")
I am sending data from Logstash to Elasticsearch. (filebeat -\> kafka -\> logstash -\> elasticsearch) I want to know the Logstash Event Per Second(EPS) (it is assumed that the environment of Elasticsearch is the same.) P… [Previous page](https://discuss.elastic.co/top.md?page=1646&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1648&per_page=50&period=all)