# Top

**URL:** https://discuss.elastic.co/top.md?page=1663&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1664

---

## [Logstash::ConfigurationError:message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 3, column 1 (byte 3) after \\n\\n"](https://discuss.elastic.co/t/logstash-message-expected-one-of-t-r-n-input-filter-output-at-line-3-column-1-byte-3-after-n-n/218723)

<div class="topic-metadata">

**Author:** [@Varun\_Saraf](https://discuss.elastic.co/u/Varun_Saraf)\
**Replies:** 0\
**Last updated:** [February 11, 2020, 7:31am UTC](https://discuss.elastic.co/t/logstash-message-expected-one-of-t-r-n-input-filter-output-at-line-3-column-1-byte-3-after-n-n/218723 "2020-02-11T07:31:59Z")

</div>

logstash shows the following error. what is the error in configuration file? VARSARAF-M-PAPE:~ varsaraf$ logstash -f /usr/local/etc/logstash/conf.d/syslog.conf Thread.exclusive is deprecated, use Thread::Mutex Sending…

---

## [\[ANNOUNCEMENT\] - Elasticsearch File System Crawler 2.4 released](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-4-released/96801)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [August 11, 2017, 4:14pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-4-released/96801 "2017-08-11T16:14:20Z")

</div>

The Elasticsearch File System Crawler team is pleased to announce the fscrawler-2.4 release! FS Crawler offers a simple way to index local files into elasticsearch. Changes in this version include: New features: Add…

---

## [Cluster.initial\_master\_nodes for ElasticSearch on EC2 with Auto Scaling](https://discuss.elastic.co/t/cluster-initial-master-nodes-for-elasticsearch-on-ec2-with-auto-scaling/340784)

<div class="topic-metadata">

**Author:** [@cockroachmondays](https://discuss.elastic.co/u/cockroachmondays)\
**Replies:** 6\
**Last updated:** [August 16, 2023, 10:56pm UTC](https://discuss.elastic.co/t/cluster-initial-master-nodes-for-elasticsearch-on-ec2-with-auto-scaling/340784 "2023-08-16T22:56:12Z")

</div>

Trying to upgrade ES from 6.8 to 8.9 for ES running on EC2 AWS instances. The issue is within cluster.initial\_master\_nodes. I see that I set fixed values for node.name. However, the instances are created by Auto Scaling…

---

## [Below logstash file is not creating the index with the name i specified](https://discuss.elastic.co/t/below-logstash-file-is-not-creating-the-index-with-the-name-i-specified/63986)

<div class="topic-metadata">

**Author:** [@asac2](https://discuss.elastic.co/u/asac2)\
**Replies:** 6\
**Last updated:** [October 26, 2016, 8:35pm UTC](https://discuss.elastic.co/t/below-logstash-file-is-not-creating-the-index-with-the-name-i-specified/63986 "2016-10-26T20:35:22Z")

</div>

input { stdin { type =\> "stdin-type" } file { path =\> "D:/Attachments/plunk-results.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \["IHS\_URL","count","90Percentile","Average","Minimum","Maximum"\] sepa…

---

## [Which type of Load Balancer for use with pool of fleet servers](https://discuss.elastic.co/t/which-type-of-load-balancer-for-use-with-pool-of-fleet-servers/347727)

<div class="topic-metadata">

**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\
**Replies:** 0\
**Last updated:** [November 22, 2023, 11:38am UTC](https://discuss.elastic.co/t/which-type-of-load-balancer-for-use-with-pool-of-fleet-servers/347727 "2023-11-22T11:38:51Z")

</div>

I am deploying a pool of fleet servers to support my agents. As is recommended i am goi g to place these behind a load balancer and to have all agents communicate via the load balancer. My initial thought is to go with…

---

## [Merge different index in function two fields and paste eleement of fields](https://discuss.elastic.co/t/merge-different-index-in-function-two-fields-and-paste-eleement-of-fields/293363)

<div class="topic-metadata">

**Author:** [@Vivian](https://discuss.elastic.co/u/Vivian)\
**Replies:** 8\
**Last updated:** [January 4, 2022, 7:06pm UTC](https://discuss.elastic.co/t/merge-different-index-in-function-two-fields-and-paste-eleement-of-fields/293363 "2022-01-04T19:06:46Z")

</div>

Hello, I have an index of this shape : { "\_index": "df\_extrait", "\_type": "\_doc", "\_id": "27685", "\_version": 1, "\_seq\_no": 0, "\_primary\_term": 1, "\_score": 1, "\_source": { "source": "avatar", "…

---

## [Backing Up ES](https://discuss.elastic.co/t/backing-up-es/6971)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 8\
**Last updated:** [March 25, 2012, 10:18am UTC](https://discuss.elastic.co/t/backing-up-es/6971 "2012-03-25T10:18:29Z")

</div>

Hello, I'm planning to use very nice script by Karussell https://gist.github.com/1074906 for backing up my ES. But I have a cluster of currently 2 machines running the ES. I want to make sure, that this is enough to…

---

## [C# client 8.4 filter by date range](https://discuss.elastic.co/t/c-client-8-4-filter-by-date-range/323411)

<div class="topic-metadata">

**Author:** [@matres](https://discuss.elastic.co/u/matres)\
**Replies:** 3\
**Last updated:** [January 23, 2023, 9:12am UTC](https://discuss.elastic.co/t/c-client-8-4-filter-by-date-range/323411 "2023-01-23T09:12:31Z")

</div>

Hi. How can I filter results by date range using .net client v8.4? I can't find that option

---

## [ElasticSearch Inline script compilation circuit breaker triggered on static script code](https://discuss.elastic.co/t/elasticsearch-inline-script-compilation-circuit-breaker-triggered-on-static-script-code/277228)

<div class="topic-metadata">

**Author:** [@Anver\_S](https://discuss.elastic.co/u/Anver_S)\
**Replies:** 3\
**Last updated:** [July 6, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-inline-script-compilation-circuit-breaker-triggered-on-static-script-code/277228 "2021-07-06T14:48:33Z")

</div>

Using java rest api I submit bulk update requests with painless script for (entry in params.entrySet()) {ctx.\_source\[entry.getKey()\] = entry.getValue();} Occasionally I get dynamic compilation circuit breaker triggerin…

---

## [Automatically create role based on index](https://discuss.elastic.co/t/automatically-create-role-based-on-index/199693)

<div class="topic-metadata">

**Author:** [@sthomps](https://discuss.elastic.co/u/sthomps)\
**Replies:** 3\
**Last updated:** [September 26, 2019, 1:25pm UTC](https://discuss.elastic.co/t/automatically-create-role-based-on-index/199693 "2019-09-26T13:25:14Z")

</div>

Hi, In my setup I'll be creating indexes where the index is the id = an associated group of applications. This id will be in an LDAP tree where the user has access to a # of id's. Is there a way to automatically setup…

---

## [How to return only inner hits in nested field](https://discuss.elastic.co/t/how-to-return-only-inner-hits-in-nested-field/198842)

<div class="topic-metadata">

**Author:** [@salihklc](https://discuss.elastic.co/u/salihklc)\
**Replies:** 0\
**Last updated:** [September 10, 2019, 7:53am UTC](https://discuss.elastic.co/t/how-to-return-only-inner-hits-in-nested-field/198842 "2019-09-10T07:53:24Z")

</div>

Hi everyone, Just like I mention in the title, I have data set with the mapping below which has nested field. I am trying to get data with inner hits which are match with the written query. If I write "\_source":false a…

---

## [ECE 2.2 Unable to upload self-signed certificates](https://discuss.elastic.co/t/ece-2-2-unable-to-upload-self-signed-certificates/189564)

<div class="topic-metadata">

**Author:** [@Alpha\_Bravo](https://discuss.elastic.co/u/Alpha_Bravo)\
**Replies:** 3\
**Last updated:** [July 11, 2019, 2:32pm UTC](https://discuss.elastic.co/t/ece-2-2-unable-to-upload-self-signed-certificates/189564 "2019-07-11T14:32:01Z")

</div>

Has anyone tried uploading self-signed tls certs on ECE deployments? We are trying to use self signed certificates on our internal deployment. Continuing the discussion from ECE 2.0.1 Unable to upload Letsencrypt TLS ce…

---

## [Filebeat держит файлы во время архивирования](https://discuss.elastic.co/t/filebeat/170846)

<div class="topic-metadata">

**Author:** [@inDosFreelancer](https://discuss.elastic.co/u/inDosFreelancer)\
**Replies:** 3\
**Last updated:** [March 7, 2019, 2:30pm UTC](https://discuss.elastic.co/t/filebeat/170846 "2019-03-07T14:30:15Z")

</div>

Добрый день, Коллеги, столкнулся с проблемой: во время архивирования файла лога и одновременном чтении данных filebeat'ом файл блокируется. Кто-нибудь сталкивался с подобной проблемой?

---

## [Logstash rolling log file](https://discuss.elastic.co/t/logstash-rolling-log-file/152957)

<div class="topic-metadata">

**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\
**Replies:** 0\
**Last updated:** [October 18, 2018, 8:09am UTC](https://discuss.elastic.co/t/logstash-rolling-log-file/152957 "2018-10-18T08:09:33Z")

</div>

Hi, I am new to ES and in the process of learning it. Currently, I need to roll out the log file on size based (100MB each), not more than 2 files to be created in a day and need to preserve the log file only for 4 days…

---

## [Beat or Metricbeat?](https://discuss.elastic.co/t/beat-or-metricbeat/111162)

<div class="topic-metadata">

**Author:** [@shanim](https://discuss.elastic.co/u/shanim)\
**Replies:** 3\
**Last updated:** [December 17, 2017, 1:50am UTC](https://discuss.elastic.co/t/beat-or-metricbeat/111162 "2017-12-17T01:50:54Z")

</div>

Hi, A noob question here. I am trying to integrate metric generated by an application that we have built with ES. We currently use filebeat to parse the statistics files generated by the application but would like to co…

---

## [Logstash JSON conversion can we control](https://discuss.elastic.co/t/logstash-json-conversion-can-we-control/107379)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 3\
**Last updated:** [November 14, 2017, 7:45am UTC](https://discuss.elastic.co/t/logstash-json-conversion-can-we-control/107379 "2017-11-14T07:45:00Z")

</div>

When logstash fetch data from mysql....then it convert into json kv form....Can I control this conversion and what field I want it make in nested json form....is this possible in logstash.... Bcz I want some fields of m…

---

## [Running multiple nodes in development mode](https://discuss.elastic.co/t/running-multiple-nodes-in-development-mode/103396)

<div class="topic-metadata">

**Author:** [@bamboomy](https://discuss.elastic.co/u/bamboomy)\
**Replies:** 3\
**Last updated:** [October 13, 2017, 9:22am UTC](https://discuss.elastic.co/t/running-multiple-nodes-in-development-mode/103396 "2017-10-13T09:22:58Z")

</div>

Dear all, we use elastic for very few users (2 people that understand that the environment can be down), so the setup doesn't require to meet production demands. But we do have some limitations, Our first node, that …

---

## [Change interval of date histogram to 20hto20h](https://discuss.elastic.co/t/change-interval-of-date-histogram-to-20hto20h/102735)

<div class="topic-metadata">

**Author:** [@Charlotte31](https://discuss.elastic.co/u/Charlotte31)\
**Replies:** 3\
**Last updated:** [October 9, 2017, 11:04pm UTC](https://discuss.elastic.co/t/change-interval-of-date-histogram-to-20hto20h/102735 "2017-10-09T23:04:03Z")

</div>

Hello, I want to change the interval on my X-axis by an interval of 20h to 20h. In fact, indeed to have a day that it is 00h00 to 00h00, I want to change this configuration, just for one visualisation (no my entire Kib…

---

## [Elasticsearch on Hadoop VERTEX FAILURE](https://discuss.elastic.co/t/elasticsearch-on-hadoop-vertex-failure/98622)

<div class="topic-metadata">

**Author:** [@thesynapses](https://discuss.elastic.co/u/thesynapses)\
**Replies:** 0\
**Last updated:** [August 29, 2017, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-on-hadoop-vertex-failure/98622 "2017-08-29T03:20:33Z")

</div>

I have integrated my ES with hadoop. Using HIVE “Select \* from EXTERNAL\_ES\_TABLE limit 100” works great with external elasticsearch cluster. I have LLAP enabled and am using TEZ. I have also listed webhcat.proxyuser.a…

---

## [Best practice to increase memory for containerized logstash](https://discuss.elastic.co/t/best-practice-to-increase-memory-for-containerized-logstash/79007)

<div class="topic-metadata">

**Author:** [@hust](https://discuss.elastic.co/u/hust)\
**Replies:** 0\
**Last updated:** [March 17, 2017, 11:09am UTC](https://discuss.elastic.co/t/best-practice-to-increase-memory-for-containerized-logstash/79007 "2017-03-17T11:09:46Z")

</div>

We are running logstash within a Docker Container to monitor RabbitMQ. Due to some huge messages we have to increase the memory with which logstash is operating. According to https://www.elastic.co/guide/en/logstash/cu…

---

## [Logs are not collecting](https://discuss.elastic.co/t/logs-are-not-collecting/56348)

<div class="topic-metadata">

**Author:** [@disalassalyjose](https://discuss.elastic.co/u/disalassalyjose)\
**Replies:** 3\
**Last updated:** [July 26, 2016, 4:43am UTC](https://discuss.elastic.co/t/logs-are-not-collecting/56348 "2016-07-26T04:43:46Z")

</div>

Hi, I am able to get the logs from one client server which is windows 12 r2 but not able to get the logs from another client server, below are the configuration that are done in both server side. Server :Ubuntu 14.04 cli…

---

## [Unable to run Java TransportClient for ES 2.2.0](https://discuss.elastic.co/t/unable-to-run-java-transportclient-for-es-2-2-0/43719)

<div class="topic-metadata">

**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\
**Replies:** 3\
**Last updated:** [March 8, 2016, 7:45pm UTC](https://discuss.elastic.co/t/unable-to-run-java-transportclient-for-es-2-2-0/43719 "2016-03-08T19:45:53Z")

</div>

Hi, I am trying to write a very simple TransportClient based application in Java. But am not able to get it to work. Here is a stack-overflow question on the same: http://stackoverflow.com/questions/35856832/unable-t…

---

## [How to access a specific array object via object property in mvel?](https://discuss.elastic.co/t/how-to-access-a-specific-array-object-via-object-property-in-mvel/7003)

<div class="topic-metadata">

**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\
**Replies:** 3\
**Last updated:** [March 17, 2012, 11:29am UTC](https://discuss.elastic.co/t/how-to-access-a-specific-array-object-via-object-property-in-mvel/7003 "2012-03-17T11:29:56Z")

</div>

I'm attempting to use the new update function and attachment plugin to update a specific file object with the contents of the attachment. My mapping looks like this: https://gist.github.com/2037762 where "files…

---

## [How use metricbeat for logstash logs files in docker container](https://discuss.elastic.co/t/how-use-metricbeat-for-logstash-logs-files-in-docker-container/275540)

<div class="topic-metadata">

**Author:** [@Atesrin](https://discuss.elastic.co/u/Atesrin)\
**Replies:** 1\
**Last updated:** [June 11, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-use-metricbeat-for-logstash-logs-files-in-docker-container/275540 "2021-06-11T21:08:37Z")

</div>

Hi everyone, My first post, so sorry if I made some mistakes. I'm trying to use metricbeat to monitor Logstash. I have elastic, kibana, metricbeat and logstash running in docker containers with 2 docker-compose files …

---

## [Losing finishing lines of a terminating / crashing container](https://discuss.elastic.co/t/losing-finishing-lines-of-a-terminating-crashing-container/267763)

<div class="topic-metadata">

**Author:** [@AndD](https://discuss.elastic.co/u/AndD)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:14am UTC](https://discuss.elastic.co/t/losing-finishing-lines-of-a-terminating-crashing-container/267763 "2021-03-22T09:14:50Z")

</div>

Hello, We are trying to setup Elastic Cloud on Kubernetes 1.4, using Filebeat 7.11.1 to harvest logs of all containers running on our Kubernetes cluster. Since giving an annotation to all Pods we could potentially be i…

---

## [Detailed user audit logs for Kibana Dev tools](https://discuss.elastic.co/t/detailed-user-audit-logs-for-kibana-dev-tools/219340)

<div class="topic-metadata">

**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Replies:** 1\
**Last updated:** [February 14, 2020, 10:45am UTC](https://discuss.elastic.co/t/detailed-user-audit-logs-for-kibana-dev-tools/219340 "2020-02-14T10:45:32Z")

</div>

ES version: 7.3.2 X-pack: Platinum We have OpenID based user authentication in Elasticsearch. We need to check the activity done by users after they sign-in, especially the activity which involves running queries on D…

---

## [Caused by: org.apache.spark.SparkException: Data of type java.util.GregorianCalendar cannot be used](https://discuss.elastic.co/t/caused-by-org-apache-spark-sparkexception-data-of-type-java-util-gregoriancalendar-cannot-be-used/194471)

<div class="topic-metadata">

**Author:** [@Mayukh](https://discuss.elastic.co/u/Mayukh)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 7:25pm UTC](https://discuss.elastic.co/t/caused-by-org-apache-spark-sparkexception-data-of-type-java-util-gregoriancalendar-cannot-be-used/194471 "2019-08-14T19:25:51Z")

</div>

Hi, I am trying to write a PySpark RDD into Elasticsearch, however I am getting the GregorianCalendar error. Any suggestions or help would be appreciated. es\_fault\_df = sqlContext.sql("select \* from fault\_search\_all li…

---

## [Strigo Lab Session Won't Start (again)](https://discuss.elastic.co/t/strigo-lab-session-wont-start-again/172417)

<div class="topic-metadata">

**Author:** [@rudyamid](https://discuss.elastic.co/u/rudyamid)\
**Replies:** 1\
**Last updated:** [March 14, 2019, 10:07pm UTC](https://discuss.elastic.co/t/strigo-lab-session-wont-start-again/172417 "2019-03-14T22:07:11Z")

</div>

I had this problem with the on-demand training session before. I paused my "Log Pipeline Workflows" training in Lab 1, and when I go into Lab 2 a couple of days later, the Strigo session keeps saying "My Course Has Ende…

---

## [Running Curator causes missing shards for indices with reason NO\_VALID\_SHARD\_COPY](https://discuss.elastic.co/t/running-curator-causes-missing-shards-for-indices-with-reason-no-valid-shard-copy/147497)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 10:46am UTC](https://discuss.elastic.co/t/running-curator-causes-missing-shards-for-indices-with-reason-no-valid-shard-copy/147497 "2018-09-06T10:46:55Z")

</div>

Hi, Since last week we've been getting that our ELK cluster status is RED after we've been running curator. The curator job is set to forcemerge indices older than 2 days and shrink indices older than 7 days and then se…

---

## [Watcher alerting for winlogbeat](https://discuss.elastic.co/t/watcher-alerting-for-winlogbeat/122096)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 1\
**Last updated:** [March 1, 2018, 11:15pm UTC](https://discuss.elastic.co/t/watcher-alerting-for-winlogbeat/122096 "2018-03-01T23:15:20Z")

</div>

Hi, I need to have watcher enabled or machine learning enabled for this specific function. I have a saved search in kibana named as – Windows Event ID - 4740 - Account Lockout It is a filter for only the event id 474…

---

## [Keyword search with phonetic](https://discuss.elastic.co/t/keyword-search-with-phonetic/102069)

<div class="topic-metadata">

**Author:** [@Davood1659](https://discuss.elastic.co/u/Davood1659)\
**Replies:** 1\
**Last updated:** [September 28, 2017, 8:32am UTC](https://discuss.elastic.co/t/keyword-search-with-phonetic/102069 "2017-09-28T08:32:36Z")

</div>

Hi, I have a search case that I want to find documents that a specific term(word) has been repeated twice or more in a specific field of those documents. Some queries like Match query doesn't work in such a this situati…

---

## [Logstash getting wrong hostname?](https://discuss.elastic.co/t/logstash-getting-wrong-hostname/80161)

<div class="topic-metadata">

**Author:** [@scutdk](https://discuss.elastic.co/u/scutdk)\
**Replies:** 1\
**Last updated:** [March 28, 2017, 2:29am UTC](https://discuss.elastic.co/t/logstash-getting-wrong-hostname/80161 "2017-03-28T02:29:08Z")

</div>

Hi, my current logstash setup always return localhost for host field. My system is CentOS 6.x. I' ve set hostname in /etc/sysconfig/network and also in hostname command. from Google, it says logstash use gethostname f…

---

## [Cannot see snapshots from another cluster using S3 storage](https://discuss.elastic.co/t/cannot-see-snapshots-from-another-cluster-using-s3-storage/55614)

<div class="topic-metadata">

**Author:** [@lobsterdore](https://discuss.elastic.co/u/lobsterdore)\
**Replies:** 1\
**Last updated:** [July 16, 2016, 8:22am UTC](https://discuss.elastic.co/t/cannot-see-snapshots-from-another-cluster-using-s3-storage/55614 "2016-07-16T08:22:41Z")

</div>

Hello, I've got two clusters sitting in different VPCs in AWS, both are on the same version (2.3.3) and both are using the AWS plugin for discovery and snapshots. I've created several snapshots in cluster 1, I can se…

---

## [Multi Level Aggregation](https://discuss.elastic.co/t/multi-level-aggregation/40195)

<div class="topic-metadata">

**Author:** [@Mohit\_Gupta](https://discuss.elastic.co/u/Mohit_Gupta)\
**Replies:** 1\
**Last updated:** [January 27, 2016, 6:44pm UTC](https://discuss.elastic.co/t/multi-level-aggregation/40195 "2016-01-27T18:44:36Z")

</div>

Hello, I've evaluating Elasticsearch/Kibana for our specifics. I've a requirement where we are putting hourly reports data in elasticsearch and want to visualize say daily averages for last week. It requires multi leve…

---

## [Error http traffic with ElastiSearch and C# driver](https://discuss.elastic.co/t/error-http-traffic-with-elastisearch-and-c-driver/26429)

<div class="topic-metadata">

**Author:** [@laecia](https://discuss.elastic.co/u/laecia)\
**Replies:** 1\
**Last updated:** [July 29, 2015, 4:19pm UTC](https://discuss.elastic.co/t/error-http-traffic-with-elastisearch-and-c-driver/26429 "2015-07-29T16:19:09Z")

</div>

Hello to all! I set up an elasticSearch to push my log services into on two server (dev + prod with same config) Since 2 weeks i have this error : \[2015-07-28 17:44:03,056\]\[DEBUG\]\[action.index \] \[3-D Man…

---

## [Can I aggregate ElasticSearch results by geo\_polygon?](https://discuss.elastic.co/t/can-i-aggregate-elasticsearch-results-by-geo-polygon/2077)

<div class="topic-metadata">

**Author:** [@ariutk](https://discuss.elastic.co/u/ariutk)\
**Replies:** 1\
**Last updated:** [June 8, 2015, 7:42am UTC](https://discuss.elastic.co/t/can-i-aggregate-elasticsearch-results-by-geo-polygon/2077 "2015-06-08T07:42:29Z")

</div>

I have an ElasticSearch query that returns stats about items in a single geo\_polygon (number of matches, averages/totals etc.) Is it possible to modify the query to send a list of polygons, with the results aggregated …

---

## [How to do exact match](https://discuss.elastic.co/t/how-to-do-exact-match/11422)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\
**Replies:** 1\
**Last updated:** [April 3, 2013, 5:34am UTC](https://discuss.elastic.co/t/how-to-do-exact-match/11422 "2013-04-03T05:34:44Z")

</div>

Hey, Thanks for answering all my other questions, getting close to actually releasing this, but I'm running into this issue trying to recreate some MySQL behaviour. Currenty people expect nothing to be fuzzy. If…

---

## [Elasticsearch multi match](https://discuss.elastic.co/t/elasticsearch-multi-match/121380)

<div class="topic-metadata">

**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\
**Replies:** 2\
**Last updated:** [March 1, 2018, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-multi-match/121380 "2018-03-01T08:56:29Z")

</div>

I have index with dynamic mapping 'mappings' =\> \[ 'index\_type' =\> \[ 'dynamic\_templates' =\> \[ \[ 'property\_name' =\> \[ 'match\_mapping\_type' =\> '\*', 'match' =\> 'name\_property\_\*', 'mapping' =\> …

---

## [Charger des données de mysql vers Elasticsearch en presque temps réel](https://discuss.elastic.co/t/charger-des-donnees-de-mysql-vers-elasticsearch-en-presque-temps-reel/262471)

<div class="topic-metadata">

**Author:** [@joseph\_vdsmart](https://discuss.elastic.co/u/joseph_vdsmart)\
**Replies:** 4\
**Last updated:** [February 18, 2021, 9:32am UTC](https://discuss.elastic.co/t/charger-des-donnees-de-mysql-vers-elasticsearch-en-presque-temps-reel/262471 "2021-02-18T09:32:43Z")

</div>

Salut à tous, j'aimerais recupérer les données de mysql et les envoyer dans elasticsearch. Je dois mettre à jour les donnée d'elasticsearch a chaque nouvelle entrée en base de donnée. Est-ce que je peux détecter des m…

---

## [What point in time relates to @timestamp?](https://discuss.elastic.co/t/what-point-in-time-relates-to-timestamp/241140)

<div class="topic-metadata">

**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\
**Replies:** 4\
**Last updated:** [July 15, 2020, 2:28pm UTC](https://discuss.elastic.co/t/what-point-in-time-relates-to-timestamp/241140 "2020-07-15T14:28:57Z")

</div>

Hi, I am using the RUM agent in combination with a Python agent to monitor the performance of our app. In the backend I have reliable timestamps that are not available for the clients. The only info I have is the @times…

---

## [\_grokparsefailure even though the right patterns are there](https://discuss.elastic.co/t/-grokparsefailure-even-though-the-right-patterns-are-there/92153)

<div class="topic-metadata">

**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\
**Replies:** 4\
**Last updated:** [July 20, 2017, 10:15am UTC](https://discuss.elastic.co/t/-grokparsefailure-even-though-the-right-patterns-are-there/92153 "2017-07-20T10:15:24Z")

</div>

Hey, iam trying to build a syslog solution for my firewall. I had built this two patterns: CISCOFW710006 %{WORD:protocol} (?:request|access) %{CISCO\_ACTION:action} from %{IP:src\_ip} to %{DATA:dst\_interface}:%{IP:ds…

---

## [Kibana 4.01 Settings - Indices - Fields - Controls column missing](https://discuss.elastic.co/t/kibana-4-01-settings-indices-fields-controls-column-missing/29769)

<div class="topic-metadata">

**Author:** [@tom\_jonge](https://discuss.elastic.co/u/tom_jonge)\
**Replies:** 4\
**Last updated:** [September 23, 2015, 8:03am UTC](https://discuss.elastic.co/t/kibana-4-01-settings-indices-fields-controls-column-missing/29769 "2015-09-23T08:03:14Z")

</div>

Running Kibana 4.01 The settings -\> Indices -\> Fields -\> Control column that allows field formatting is missing for me. I only get Name, Type, Analyzed, Indexed and Popularity. How do I get the Control column to displa…

---

## [Range query over dates period](https://discuss.elastic.co/t/range-query-over-dates-period/11838)

<div class="topic-metadata">

**Author:** [@avairet](https://discuss.elastic.co/u/avairet)\
**Replies:** 4\
**Last updated:** [May 7, 2013, 5:07pm UTC](https://discuss.elastic.co/t/range-query-over-dates-period/11838 "2013-05-07T17:07:18Z")

</div>

Hi, I need to exclude some documents of my resultset considering dates period. My search engine is for apartments rental, so I would like to exclude from resultset, the apartments that are allready booked for the c…

---

## [Copying data between clusters](https://discuss.elastic.co/t/copying-data-between-clusters/7106)

<div class="topic-metadata">

**Author:** [@Rafal\_Kuc\_3](https://discuss.elastic.co/u/Rafal_Kuc_3)\
**Replies:** 4\
**Last updated:** [March 24, 2012, 6:10pm UTC](https://discuss.elastic.co/t/copying-data-between-clusters/7106 "2012-03-24T18:10:39Z")

</div>

Hello, We have two clusters we want to copy data between. We want to copy data from cluster1 (0.18.5) to cluster2 (0.19.1). Is this possible ? Thanks, Rafał Kuć Sematext :: http://sematext.com/ :: Solr - …

---

## [Migrating plugin from kibana 7.4.2 to 7.12](https://discuss.elastic.co/t/migrating-plugin-from-kibana-7-4-2-to-7-12/280155)

<div class="topic-metadata">

**Author:** [@ggolpur](https://discuss.elastic.co/u/ggolpur)\
**Replies:** 3\
**Last updated:** [August 1, 2021, 2:25pm UTC](https://discuss.elastic.co/t/migrating-plugin-from-kibana-7-4-2-to-7-12/280155 "2021-08-01T14:25:39Z")

</div>

Hi everyone. I developed a local plugin to kibana 7.4.2, work and running without any issues. Currently I am trying to migrate this plugin to kibana 7.12 but there is not enough explanation regarding this subject. Mig…

---

## [Calculate the maximum number of requests per second for the same IP](https://discuss.elastic.co/t/calculate-the-maximum-number-of-requests-per-second-for-the-same-ip/272842)

<div class="topic-metadata">

**Author:** [@CHIAWEI\_WU](https://discuss.elastic.co/u/CHIAWEI_WU)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-the-maximum-number-of-requests-per-second-for-the-same-ip/272842 "2021-05-13T14:56:44Z")

</div>

I have logs with the fields: . IP . Timestamp how to use visualize calculation the same ip per second ? I have calculated with csv, but due to the maximum length limit ...

---

## [What does this "Attention" banner mean on my Kibana site?](https://discuss.elastic.co/t/what-does-this-attention-banner-mean-on-my-kibana-site/253328)

<div class="topic-metadata">

**Author:** [@sdtbone](https://discuss.elastic.co/u/sdtbone)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 1:26pm UTC](https://discuss.elastic.co/t/what-does-this-attention-banner-mean-on-my-kibana-site/253328 "2020-10-30T13:26:17Z")

</div>

I'm not finding anything in the logs. Everything seems to be working fine. What does this mean?

---

## [Filter Ratio in metric not showing results as expected](https://discuss.elastic.co/t/filter-ratio-in-metric-not-showing-results-as-expected/226049)

<div class="topic-metadata">

**Author:** [@Be1](https://discuss.elastic.co/u/Be1)\
**Replies:** 2\
**Last updated:** [April 2, 2020, 7:55am UTC](https://discuss.elastic.co/t/filter-ratio-in-metric-not-showing-results-as-expected/226049 "2020-04-02T07:55:02Z")

</div>

Hi All, I am using the TSVB to use filter ratio to divide two values I need to divide the sum of tcv of just presales stage closed / win with the total tcv Below is the configuration I used The filter used in numer…

---

## [No "logs-hot-warm-policy" in Kibana](https://discuss.elastic.co/t/no-logs-hot-warm-policy-in-kibana/212618)

<div class="topic-metadata">

**Author:** [@Andrew\_Pouckatch](https://discuss.elastic.co/u/Andrew_Pouckatch)\
**Replies:** 2\
**Last updated:** [December 20, 2019, 9:45am UTC](https://discuss.elastic.co/t/no-logs-hot-warm-policy-in-kibana/212618 "2019-12-20T09:45:06Z")

</div>

I'm fulfilling Engineer-II lab 5.3 ILM. I've copy-pasted and run: But in Kibana I don't see this new policy: What should I do to get the policy in Kibana? BR, Andrew

---

## [Can't get webhook to work when CURL does](https://discuss.elastic.co/t/cant-get-webhook-to-work-when-curl-does/174896)

<div class="topic-metadata">

**Author:** [@dpresbit](https://discuss.elastic.co/u/dpresbit)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 5:21am UTC](https://discuss.elastic.co/t/cant-get-webhook-to-work-when-curl-does/174896 "2019-04-02T05:21:07Z")

</div>

Trying to get a very simple watcher to execute as a "hello world" test to an external REST API and it does not working. Tried a CURL from the underlying elastic linux host and it works perfectly. Note: Destination RES…

[Previous page](https://discuss.elastic.co/top.md?page=1662&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1664&per_page=50&period=all)
