# Top

**URL:** https://discuss.elastic.co/top.md?page=1668&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1669

---

## [Results ranking on empty query ""](https://discuss.elastic.co/t/results-ranking-on-empty-query/325225)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 3\
**Last updated:** [February 13, 2023, 9:52pm UTC](https://discuss.elastic.co/t/results-ranking-on-empty-query/325225 "2023-02-13T21:52:09Z")

</div>

Hi there :wave: I wanted to know how EAP ranks / orders results when we perform a search with an empty query, for example, like so: POST /api/as/v1/engines/my-engine/search.json {"query":"", "page":{"size":50}} From…

---

## [Is elastic.co site down?](https://discuss.elastic.co/t/is-elastic-co-site-down/275282)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 11:19am UTC](https://discuss.elastic.co/t/is-elastic-co-site-down/275282 "2021-06-08T11:19:54Z")

</div>

I'm unable to see the elastic website. :strange

---

## [Trying to create too many scroll contexts for .security index](https://discuss.elastic.co/t/trying-to-create-too-many-scroll-contexts-for-security-index/243188)

<div class="topic-metadata">

**Author:** [@munkyu](https://discuss.elastic.co/u/munkyu)\
**Replies:** 0\
**Last updated:** [July 30, 2020, 8:59am UTC](https://discuss.elastic.co/t/trying-to-create-too-many-scroll-contexts-for-security-index/243188 "2020-07-30T08:59:19Z")

</div>

Hello, I'm using elastic stack 7.6.2 My Kibana failed to log in with superuser which was done until yesterday. I checked kibana and elasticsearch verbose log. Here's the log messages in kibana {"type":"log","@times…

---

## [Kibana visualization: Enhanced data table plugin](https://discuss.elastic.co/t/kibana-visualization-enhanced-data-table-plugin/229763)

<div class="topic-metadata">

**Author:** [@kimjavier43](https://discuss.elastic.co/u/kimjavier43)\
**Replies:** 3\
**Last updated:** [April 25, 2020, 4:13pm UTC](https://discuss.elastic.co/t/kibana-visualization-enhanced-data-table-plugin/229763 "2020-04-25T16:13:38Z")

</div>

Hello, Is there any way to add average aggregation column on split column? Thanks,

---

## [Kv filtering problem](https://discuss.elastic.co/t/kv-filtering-problem/206277)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 8\
**Last updated:** [November 6, 2019, 11:30am UTC](https://discuss.elastic.co/t/kv-filtering-problem/206277 "2019-11-06T11:30:55Z")

</div>

message" =\> "SENT =\> Status : \[SENT\] | CID/GID : \[20799461/ABC\] | OBID : \[08824\] | SID : \[02471\] | StatusMsg : \[null\]", I wish the following fields Status =\> SENT, CID/GID =\> 20799461/ABC, OBID =\> 08824, SID =\> 024…

---

## [6.6.1 FGenerate Report failure - Headless browser failed to log in - waitForSelector timeout](https://discuss.elastic.co/t/6-6-1-fgenerate-report-failure-headless-browser-failed-to-log-in-waitforselector-timeout/186520)

<div class="topic-metadata">

**Author:** [@gonzjose](https://discuss.elastic.co/u/gonzjose)\
**Replies:** 3\
**Last updated:** [June 26, 2019, 5:54pm UTC](https://discuss.elastic.co/t/6-6-1-fgenerate-report-failure-headless-browser-failed-to-log-in-waitforselector-timeout/186520 "2019-06-26T17:54:18Z")

</div>

I have yet to be able to use the Reporting tool successfully. Whenever I try to generate report (PDF or PNG) I get an error saying // TimeoutError: waiting for selector "\[data-test-subj="euiToastHeader"\]" failed: timeou…

---

## [Using API calls to Export and Import Kibana Dashbords](https://discuss.elastic.co/t/using-api-calls-to-export-and-import-kibana-dashbords/140981)

<div class="topic-metadata">

**Author:** [@gurdipe](https://discuss.elastic.co/u/gurdipe)\
**Replies:** 3\
**Last updated:** [August 14, 2018, 12:52pm UTC](https://discuss.elastic.co/t/using-api-calls-to-export-and-import-kibana-dashbords/140981 "2018-08-14T12:52:20Z")

</div>

I am using Elastic stack version 6.2 with xPack and want to know what api calls I need to make to export and import the custom kibana dashboards that have been created. Kind Regards Gurdipe

---

## [采集信息重复](https://discuss.elastic.co/t/topic/140322)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 0\
**Last updated:** [July 17, 2018, 11:45am UTC](https://discuss.elastic.co/t/topic/140322 "2018-07-17T11:45:53Z")

</div>

日志背景描述： 日志是java程序的日志，每天按天自动分割成一个单独的日志文件。 用filebeat采集日志信息到elasticsearch后，在Kibana端查看时，发现采集上来的日志信息条数和日志源文件里的条数不一致（有重复的）， 查看filebeat采集日志，发现只采集了一次，并非重复采集，但是不知道为什么到elasticsearch里面，日志信息就重复了？ kibana端截图 linux 命令过滤后的行数信息 f…

---

## [ELK on AWS](https://discuss.elastic.co/t/elk-on-aws/134162)

<div class="topic-metadata">

**Author:** [@sos](https://discuss.elastic.co/u/sos)\
**Replies:** 8\
**Last updated:** [June 7, 2018, 6:53am UTC](https://discuss.elastic.co/t/elk-on-aws/134162 "2018-06-07T06:53:14Z")

</div>

I have setup Elasticsearch kibana and logstash on different aws ec2 instances (All instances are on linux ). Both my elasticserach and kiaban instance are in green state. Also i am able to send logs from logstash into el…

---

## [How can I remove duplicated keyword with the same category in ElasticSearch?](https://discuss.elastic.co/t/how-can-i-remove-duplicated-keyword-with-the-same-category-in-elasticsearch/125477)

<div class="topic-metadata">

**Author:** [@nutanek1](https://discuss.elastic.co/u/nutanek1)\
**Replies:** 3\
**Last updated:** [March 25, 2018, 6:37pm UTC](https://discuss.elastic.co/t/how-can-i-remove-duplicated-keyword-with-the-same-category-in-elasticsearch/125477 "2018-03-25T18:37:17Z")

</div>

I want to build completion suggester in ElasticSearch. I have data look like this. { "suggest": { "input": \["iphone", "iphone x"\] }, "category\_id": 1 }, { "suggest": { "input": \["iphone…

---

## [Logstash 5.6.4: Fluent parse error, original data now in message field: undefined method merge for nil:NilClass](https://discuss.elastic.co/t/logstash-5-6-4-fluent-parse-error-original-data-now-in-message-field-undefined-method-merge-for-nil-nilclass/122442)

<div class="topic-metadata">

**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\
**Replies:** 0\
**Last updated:** [March 5, 2018, 6:33am UTC](https://discuss.elastic.co/t/logstash-5-6-4-fluent-parse-error-original-data-now-in-message-field-undefined-method-merge-for-nil-nilclass/122442 "2018-03-05T06:33:13Z")

</div>

Hello everyone! When updating td-agent from 2.3.4 to 2.3.6 logs in elasticsearch ceased to arrive. Logstash swears at \[2018-02-24T19:28:04,478\]\[ERROR\]\[logstash.codecs.fluent \] Fluent parse error, original data now in…

---

## [Metricbeat authentication problem with kibana](https://discuss.elastic.co/t/metricbeat-authentication-problem-with-kibana/115898)

<div class="topic-metadata">

**Author:** [@ijazadm](https://discuss.elastic.co/u/ijazadm)\
**Replies:** 3\
**Last updated:** [January 19, 2018, 2:45pm UTC](https://discuss.elastic.co/t/metricbeat-authentication-problem-with-kibana/115898 "2018-01-19T14:45:03Z")

</div>

hi i have installed 6.1.1 versions of both elastic and kibana and configured the client with metricbeat , i can see the data is comming and index is create , i can curl it with username nad password , everything is fine…

---

## [Recover shard failed](https://discuss.elastic.co/t/recover-shard-failed/104501)

<div class="topic-metadata">

**Author:** [@Canappeco](https://discuss.elastic.co/u/Canappeco)\
**Replies:** 0\
**Last updated:** [October 19, 2017, 6:57am UTC](https://discuss.elastic.co/t/recover-shard-failed/104501 "2017-10-19T06:57:54Z")

</div>

Last night my cluster suffered blackout and all the nodes were down. My cluster consists of 1 master node and 2 data nodes. The number of replica is 1. Today I try to recover my cluster but Exceptions happen. This is wha…

---

## [Metricbeat and availables metrics](https://discuss.elastic.co/t/metricbeat-and-availables-metrics/83092)

<div class="topic-metadata">

**Author:** [@matt-dee](https://discuss.elastic.co/u/matt-dee)\
**Replies:** 3\
**Last updated:** [April 21, 2017, 8:46pm UTC](https://discuss.elastic.co/t/metricbeat-and-availables-metrics/83092 "2017-04-21T20:46:43Z")

</div>

HI, I just installed metricbeat and I see that there are about 326 fields available for the metricbeat indexes on the kibana dashboard. I'm only seeing 71 fields that are being populated. I'm particulary interested i…

---

## [\_id field restrictions + parallel indexing conflicts](https://discuss.elastic.co/t/-id-field-restrictions-parallel-indexing-conflicts/48104)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 3\
**Last updated:** [April 22, 2016, 8:24pm UTC](https://discuss.elastic.co/t/-id-field-restrictions-parallel-indexing-conflicts/48104 "2016-04-22T20:24:11Z")

</div>

All, Below are couple of areas where I need more clarification. Any help is appreciated. We are indexing data from multiple threads in parallel and different threads could try to index the data with same id. The reas…

---

## [Specify results fields with Kibana](https://discuss.elastic.co/t/specify-results-fields-with-kibana/44342)

<div class="topic-metadata">

**Author:** [@klaastyl](https://discuss.elastic.co/u/klaastyl)\
**Replies:** 3\
**Last updated:** [March 15, 2016, 2:25am UTC](https://discuss.elastic.co/t/specify-results-fields-with-kibana/44342 "2016-03-15T02:25:11Z")

</div>

Hi community, I'm wondering how it is possible to specify the returned fields for my query with Kibana Discover. Actually I'm looking for doing the same thing as this Elasticsearch query: curl -XGET 'http://localhos…

---

## [Unicast instead of Multicast?](https://discuss.elastic.co/t/unicast-instead-of-multicast/2832)

<div class="topic-metadata">

**Author:** [@Philippe\_2](https://discuss.elastic.co/u/Philippe_2)\
**Replies:** 3\
**Last updated:** [March 1, 2010, 3:26pm UTC](https://discuss.elastic.co/t/unicast-instead-of-multicast/2832 "2010-03-01T15:26:24Z")

</div>

I am attempting to configure a unicast (probably TCP) cluster instead of auto discovery with multicast. I am not familiar with JGroups at all so this is all new to me. I've probably got it completely wrong but I've …

---

## [Unable to deploy functionbeat on S3](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-on-s3/285621)

<div class="topic-metadata">

**Author:** [@Priyam\_Maheshwari](https://discuss.elastic.co/u/Priyam_Maheshwari)\
**Replies:** 1\
**Last updated:** [October 7, 2021, 12:28pm UTC](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-on-s3/285621 "2021-10-07T12:28:32Z")

</div>

I keep getting the following error Function: cloudwatchlogging, could not deploy, error: bucket 'functionbeat-advertising' already exist and you don't have permission to access it: unknown endpoint, could not resolve en…

---

## [The problem with getting a lot of logs](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291)

<div class="topic-metadata">

**Author:** [@DenisGr](https://discuss.elastic.co/u/DenisGr)\
**Replies:** 5\
**Last updated:** [May 3, 2023, 6:30am UTC](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291 "2023-05-03T06:30:03Z")

</div>

Hey guys. I'm new here and I apologize in advance if I opened a thread in the wrong section. I have the task of handling a large number of logs, generating up to 100,000 per minute or even more. I currently have elk mas…

---

## [Split data and convert to json](https://discuss.elastic.co/t/split-data-and-convert-to-json/179083)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 5\
**Last updated:** [April 30, 2019, 3:19pm UTC](https://discuss.elastic.co/t/split-data-and-convert-to-json/179083 "2019-04-30T15:19:20Z")

</div>

I want to split a text ,based on a pattern and parse each split separate and combine last to make final json. I am new to log-stash and wants to find the best solution for my problem. Input: @CM003352018053013591473247…

---

## [Anyway to add some flag for request from dashboard or visualize](https://discuss.elastic.co/t/anyway-to-add-some-flag-for-request-from-dashboard-or-visualize/88411)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 5\
**Last updated:** [June 9, 2017, 9:32am UTC](https://discuss.elastic.co/t/anyway-to-add-some-flag-for-request-from-dashboard-or-visualize/88411 "2017-06-09T09:32:59Z")

</div>

anyway to add some flag for request from dashboard or visualize. then I can identify the request is from visualize or dashboard in my proxy layer. I guess its something about searchSource or courier, i am not sure. any…

---

## [It is a WEB search engine?](https://discuss.elastic.co/t/it-is-a-web-search-engine/2152)

<div class="topic-metadata">

**Author:** [@Stra](https://discuss.elastic.co/u/Stra)\
**Replies:** 5\
**Last updated:** [June 9, 2015, 12:00am UTC](https://discuss.elastic.co/t/it-is-a-web-search-engine/2152 "2015-06-09T00:00:05Z")

</div>

Hi, Does Elasticsearch do research on the web? I post this question because all demos that i have seen don't treat the web serach ! Thanks

---

## [Phrase suggester and non-existing terms](https://discuss.elastic.co/t/phrase-suggester-and-non-existing-terms/14642)

<div class="topic-metadata">

**Author:** [@Christoph\_Haas\_2](https://discuss.elastic.co/u/Christoph_Haas_2)\
**Replies:** 5\
**Last updated:** [November 30, 2013, 6:19pm UTC](https://discuss.elastic.co/t/phrase-suggester-and-non-existing-terms/14642 "2013-11-30T18:19:08Z")

</div>

Dear list, I'm about to implement a full-text search for a web site and am a bit stuck on a "did you mean"-like functionality. If no results were found I would like to point the visitor to more promising search q…

---

## [Date filter dateparsefailure](https://discuss.elastic.co/t/date-filter-dateparsefailure/214668)

<div class="topic-metadata">

**Author:** [@DevOP](https://discuss.elastic.co/u/DevOP)\
**Replies:** 1\
**Last updated:** [January 10, 2020, 9:21pm UTC](https://discuss.elastic.co/t/date-filter-dateparsefailure/214668 "2020-01-10T21:21:30Z")

</div>

Hello... I've been experimenting with logstash capabilities lately, and no matter which direction I take with the date filter, I seem to end up with \_dateparsefailure. So to save myself the frustration, I was wondering …

---

## [Logstash if condition](https://discuss.elastic.co/t/logstash-if-condition/250689)

<div class="topic-metadata">

**Author:** [@Yotam\_Mazurik](https://discuss.elastic.co/u/Yotam_Mazurik)\
**Replies:** 4\
**Last updated:** [October 1, 2020, 10:04pm UTC](https://discuss.elastic.co/t/logstash-if-condition/250689 "2020-10-01T22:04:45Z")

</div>

Hey, i'm new to logstash and got stuck while trying to create an if condition... The structure of my if condition: if (\[process\]\[executable\] not in \[processes\]\["%{\[process\]\[hash\]\[md5\]}"\]\[paths\]) { .... } w…

---

## [Logstash - Elasticsearch 7.4 ILM](https://discuss.elastic.co/t/logstash-elasticsearch-7-4-ilm/223389)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 4\
**Last updated:** [May 7, 2020, 8:22pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-7-4-ilm/223389 "2020-05-07T20:22:21Z")

</div>

Hi Im trying to set up ILM for my indices. But just want to confirm that what Im doing is ok. First we have 4 locations in differents parts of the world. We use filebeat to get the logs and send it to a kafka cluster un…

---

## [Issue while Downgrading Elasticsearch from 1.7.3 to 1.5.2](https://discuss.elastic.co/t/issue-while-downgrading-elasticsearch-from-1-7-3-to-1-5-2/195920)

<div class="topic-metadata">

**Author:** [@Harsh\_Vadodaria](https://discuss.elastic.co/u/Harsh_Vadodaria)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 4:52am UTC](https://discuss.elastic.co/t/issue-while-downgrading-elasticsearch-from-1-7-3-to-1-5-2/195920 "2019-08-21T04:52:42Z")

</div>

Hello mates, I am having Elasticsearch 1.7.3 installed in production server. Due to compatibility issue I am trying to downgrade the elasticsearch to 1.5.2 using debian on ubuntu, but it fails every time. I uninstalled …

---

## [Multi\_match query issue](https://discuss.elastic.co/t/multi-match-query-issue/136988)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 4\
**Last updated:** [July 9, 2018, 4:02pm UTC](https://discuss.elastic.co/t/multi-match-query-issue/136988 "2018-07-09T16:02:38Z")

</div>

Hi Team, I'm using ES 1.7 I have an index containing a field named proceedingslanguage which contains a language EN, FR or DE. The following script using Curl is giving me an empty result : curl -XGET 'http://localho…

---

## [Static field kibana](https://discuss.elastic.co/t/static-field-kibana/134581)

<div class="topic-metadata">

**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\
**Replies:** 4\
**Last updated:** [June 6, 2018, 12:13pm UTC](https://discuss.elastic.co/t/static-field-kibana/134581 "2018-06-06T12:13:36Z")

</div>

I am creating a visualisation that needs a static threeshold Can you provide me examples of script fields of static values thanks

---

## [The test gives different result from the real installation](https://discuss.elastic.co/t/the-test-gives-different-result-from-the-real-installation/113275)

<div class="topic-metadata">

**Author:** [@vgindin](https://discuss.elastic.co/u/vgindin)\
**Replies:** 4\
**Last updated:** [January 19, 2018, 11:55am UTC](https://discuss.elastic.co/t/the-test-gives-different-result-from-the-real-installation/113275 "2018-01-19T11:55:22Z")

</div>

Hi all. I've written a simple plugin, that implements custom scoring logic and extending Explanation. I have some real index data that looks like this: "\_source": { "price": 10000, "params\_model": "Дверь за…

---

## [Kibana 5.x - visualizing counts with nested? data: any guidance appreciated](https://discuss.elastic.co/t/kibana-5-x-visualizing-counts-with-nested-data-any-guidance-appreciated/75394)

<div class="topic-metadata">

**Author:** [@durantto](https://discuss.elastic.co/u/durantto)\
**Replies:** 4\
**Last updated:** [February 17, 2017, 6:21pm UTC](https://discuss.elastic.co/t/kibana-5-x-visualizing-counts-with-nested-data-any-guidance-appreciated/75394 "2017-02-17T18:21:42Z")

</div>

Hello all, I have been at this for a few hours now, seemingly simple task, and I am not sure of the best way to visualize the data we are working with and I was hoping I could reach out for help for guidance: We have…

---

## [Java API - strange behavior on first time index creation](https://discuss.elastic.co/t/java-api-strange-behavior-on-first-time-index-creation/4502)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 4\
**Last updated:** [June 1, 2011, 4:37am UTC](https://discuss.elastic.co/t/java-api-strange-behavior-on-first-time-index-creation/4502 "2011-06-01T04:37:53Z")

</div>

Hi, Tried to create index on clean elasticsearch 0.16.1 and got exception: The code : IndexResponse indexRes = client.prepareIndex("test", "contacts", "1") .setSource(jsonBuilder() .startOb…

---

## [Help on: Error creating runner from config: Can only start an input when all related states are finished](https://discuss.elastic.co/t/help-on-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/176240)

<div class="topic-metadata">

**Author:** [@bikoumba](https://discuss.elastic.co/u/bikoumba)\
**Replies:** 0\
**Last updated:** [April 10, 2019, 2:28pm UTC](https://discuss.elastic.co/t/help-on-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/176240 "2019-04-10T14:28:14Z")

</div>

Hello, I have an issue with my filebeat configuration. I have an api running on k8s, logs are written to stdout and requests-logs to stderr in order to get them both in my ES Cluster. I m using filebeat 6.7.1 OSS with …

---

## [Pagination on logstash http filter](https://discuss.elastic.co/t/pagination-on-logstash-http-filter/352320)

<div class="topic-metadata">

**Author:** [@Johnson\_will](https://discuss.elastic.co/u/Johnson_will)\
**Replies:** 7\
**Last updated:** [February 2, 2024, 6:40pm UTC](https://discuss.elastic.co/t/pagination-on-logstash-http-filter/352320 "2024-02-02T18:40:15Z")

</div>

I am generating a token by using http\_poller input plugin, using the generated token in http filter part and splitting the fields from results, Can anyone please suggest me on Pagination. As the api results are around 4…

---

## [Upgrading Elasticsearch](https://discuss.elastic.co/t/upgrading-elasticsearch/289319)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 7\
**Last updated:** [November 28, 2021, 1:34am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch/289319 "2021-11-28T01:34:02Z")

</div>

Dear team, I want to upgrade my ES cluster to a newer version. This is the version I\`m using: According to the bellow page: I just want to know can I upgrade my cluster with Rolling Upgrade ? Or which way should …

---

## [Setting an ingest pipeline in Machine learning](https://discuss.elastic.co/t/setting-an-ingest-pipeline-in-machine-learning/252029)

<div class="topic-metadata">

**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\
**Replies:** 7\
**Last updated:** [October 15, 2020, 10:44am UTC](https://discuss.elastic.co/t/setting-an-ingest-pipeline-in-machine-learning/252029 "2020-10-15T10:44:35Z")

</div>

Hi all, Hoping this is an easy question! I have created an enrichment policy that adds an additional field to documents based on whether the geo-point within the document is within a geo-shape from the source index. T…

---

## [Kibana 7.8.1 exports CSV file with time field minus 5 hours in Reporting](https://discuss.elastic.co/t/kibana-7-8-1-exports-csv-file-with-time-field-minus-5-hours-in-reporting/247743)

<div class="topic-metadata">

**Author:** [@Saadan](https://discuss.elastic.co/u/Saadan)\
**Replies:** 1\
**Last updated:** [September 7, 2020, 7:35pm UTC](https://discuss.elastic.co/t/kibana-7-8-1-exports-csv-file-with-time-field-minus-5-hours-in-reporting/247743 "2020-09-07T19:35:36Z")

</div>

I recently installed Elastic Stack 7.8.1 on a CentOS machine. The problem I am facing is that whenever I export CSV through reporting, the time fields get subtracted by 5 hours in output file. I faced this issue in prev…

---

## [Multiple syslog input from different Device to Logstash](https://discuss.elastic.co/t/multiple-syslog-input-from-different-device-to-logstash/188672)

<div class="topic-metadata">

**Author:** [@IGSLXW](https://discuss.elastic.co/u/IGSLXW)\
**Replies:** 1\
**Last updated:** [July 3, 2019, 1:21pm UTC](https://discuss.elastic.co/t/multiple-syslog-input-from-different-device-to-logstash/188672 "2019-07-03T13:21:47Z")

</div>

We are having a logstash receiving syslog from multiple sources/hosts. Changing the syslog remote port from 514 to other is not our option. Is there any practice to separate / route the log from syslog to different pip…

---

## [Metricbeat data missing from Infrastructure UI - when using Logstash](https://discuss.elastic.co/t/metricbeat-data-missing-from-infrastructure-ui-when-using-logstash/175295)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 8:44am UTC](https://discuss.elastic.co/t/metricbeat-data-missing-from-infrastructure-ui-when-using-logstash/175295 "2019-04-05T08:44:33Z")

</div>

Hi All, previously we were using metricbeat to ship directly to ES - but recently added logstash listener in middle. This is beats 6.3.2 with Elastic 6.7 After doing so the filebeat data is loading with no issues and sh…

---

## [VisualStudio using .Nest with hierarchy](https://discuss.elastic.co/t/visualstudio-using-nest-with-hierarchy/158158)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:59pm UTC](https://discuss.elastic.co/t/visualstudio-using-nest-with-hierarchy/158158 "2018-11-26T21:59:13Z")

</div>

Hi all!! First of all, sorry if this topic is an wrong thread. I am using the nest to update or get the documents in ElasticSearch, but now I have a problem and I don't know if is possible solved it I have these class…

---

## [Dynamic scoring based on doc field](https://discuss.elastic.co/t/dynamic-scoring-based-on-doc-field/151458)

<div class="topic-metadata">

**Author:** [@guess11](https://discuss.elastic.co/u/guess11)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 12:47pm UTC](https://discuss.elastic.co/t/dynamic-scoring-based-on-doc-field/151458 "2018-10-12T12:47:58Z")

</div>

Hi I am using elasticsearch 6.4 and I was trying to find any workable solution for my problem. So my problem is I have doc and I am trying to score depending on id from query: { "rates": \[ { "id": 1, "score\_rate": 4.0}…

---

## [Has MultiMatch's BestFields functionality changed?](https://discuss.elastic.co/t/has-multimatchs-bestfields-functionality-changed/134420)

<div class="topic-metadata">

**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\
**Replies:** 7\
**Last updated:** [June 5, 2018, 11:37am UTC](https://discuss.elastic.co/t/has-multimatchs-bestfields-functionality-changed/134420 "2018-06-05T11:37:57Z")

</div>

Hi all, How can I tune this query so that the 4th result (see below) which matches on both words ('A61' & 'roundabout') appears first in the list? Or is there a better way to query for this altogether (note the mapping…

---

## [Kibana role management granted fields not working](https://discuss.elastic.co/t/kibana-role-management-granted-fields-not-working/103552)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 4:41pm UTC](https://discuss.elastic.co/t/kibana-role-management-granted-fields-not-working/103552 "2017-10-11T16:41:28Z")

</div>

Hi, I am using kibana to create roles. I want only specific fields to show in visualisation. I am putting that fields in granted fields. But in visualisation granted fields not reflected. Even all fields not reflected. …

---

## [Upgrading License X-Pack Failed](https://discuss.elastic.co/t/upgrading-license-x-pack-failed/70894)

<div class="topic-metadata">

**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\
**Replies:** 1\
**Last updated:** [January 8, 2017, 8:40pm UTC](https://discuss.elastic.co/t/upgrading-license-x-pack-failed/70894 "2017-01-08T20:40:05Z")

</div>

i got this message : Your Trial license is active i try to upgrade it. i know im not yet a subscription user of xpack. so i try to upgrade the license using basic license. i got the license.json i run this comman…

---

## [Filebeat -\> @timestamp as eventtime](https://discuss.elastic.co/t/filebeat-timestamp-as-eventtime/68471)

<div class="topic-metadata">

**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\
**Replies:** 1\
**Last updated:** [December 9, 2016, 12:00am UTC](https://discuss.elastic.co/t/filebeat-timestamp-as-eventtime/68471 "2016-12-09T00:00:11Z")

</div>

Hi, I have the following source log: 2016-12-08 18:56:49,666 INFO Field1="x" Field1="x1" Field3="3" Field4="4" Field5="5" Field6="x6" ............. Fieldn="xn" It is shipped by filebeat to elasticsearch. How ca…

---

## [Logstash multiline Bug](https://discuss.elastic.co/t/logstash-multiline-bug/38483)

<div class="topic-metadata">

**Author:** [@KarouiMourad](https://discuss.elastic.co/u/KarouiMourad)\
**Replies:** 1\
**Last updated:** [January 6, 2016, 11:28am UTC](https://discuss.elastic.co/t/logstash-multiline-bug/38483 "2016-01-06T11:28:34Z")

</div>

Hello, I have a problem to parse this type of log : 2015-12-05 20:08:17,689 INFO applicationhistoryservice.ApplicationHistoryServer (LogAdapter.java:info(45)) - STARTUP\_MSG: /\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*…

---

## [Elasticsearch2.0/Docker - install a plugin from file problem](https://discuss.elastic.co/t/elasticsearch2-0-docker-install-a-plugin-from-file-problem/35293)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 1\
**Last updated:** [November 23, 2015, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch2-0-docker-install-a-plugin-from-file-problem/35293 "2015-11-23T10:43:33Z")

</div>

Hi, I am writing a Dockerfile for our internal ELK environment and I am stuck on installing a plugin from file. I have a command in the Dockerfile of; RUN \[ "/usr/share/elasticsearch/bin/plugin", "install", "file:doc…

---

## [Indexed documents disappearing randomly within a short time after indexing](https://discuss.elastic.co/t/indexed-documents-disappearing-randomly-within-a-short-time-after-indexing/321560)

<div class="topic-metadata">

**Author:** [@bob22](https://discuss.elastic.co/u/bob22)\
**Replies:** 6\
**Last updated:** [December 20, 2022, 9:29am UTC](https://discuss.elastic.co/t/indexed-documents-disappearing-randomly-within-a-short-time-after-indexing/321560 "2022-12-20T09:29:51Z")

</div>

Hello, I'm having a weird issue with elasticsearch when indexed documents would disappear from the index within a short time after indexing. My application is indexing a couple of thousands documents (not a huge batch) …

---

## [Anomaly detection in Machine learning kibana](https://discuss.elastic.co/t/anomaly-detection-in-machine-learning-kibana/290018)

<div class="topic-metadata">

**Author:** [@MAHALAKSHMI\_S](https://discuss.elastic.co/u/MAHALAKSHMI_S)\
**Replies:** 6\
**Last updated:** [November 25, 2021, 5:28am UTC](https://discuss.elastic.co/t/anomaly-detection-in-machine-learning-kibana/290018 "2021-11-25T05:28:57Z")

</div>

I created a "Categorization" based anomaly detection job and explored the job results in Kibana. I have used "Payload"(i.e String) field for categorization. Here I'm not sure what does "typical" value in anomaly explor…

---

## [Aggs command does not return all the index values expected](https://discuss.elastic.co/t/aggs-command-does-not-return-all-the-index-values-expected/218367)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 6\
**Last updated:** [February 12, 2020, 8:55am UTC](https://discuss.elastic.co/t/aggs-command-does-not-return-all-the-index-values-expected/218367 "2020-02-12T08:55:00Z")

</div>

Hello i execute the following command in kibana console in order to get the values for the windows.service.name.keyword field: GET /metricbeat-sdok-\*/\_search { "size": 0, "aggs": { "sasasa": { "terms": { …

[Previous page](https://discuss.elastic.co/top.md?page=1667&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1669&per_page=50&period=all)
