# Top

**URL:** https://discuss.elastic.co/top.md?page=1690&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1691

---

## [Timeseries with Kibana and number in the index name](https://discuss.elastic.co/t/timeseries-with-kibana-and-number-in-the-index-name/49555)

<div class="topic-metadata">

**Author:** [@helen](https://discuss.elastic.co/u/helen)\
**Replies:** 2\
**Last updated:** [May 20, 2016, 10:08am UTC](https://discuss.elastic.co/t/timeseries-with-kibana-and-number-in-the-index-name/49555 "2016-05-20T10:08:34Z")

</div>

I'm using Elasticsearch 2.3 and Kibana 4.5. I'm generating data using as index and index pattern with MM-DD-YYYY. Similar to tenant1name-2016.05.09 Kibana is able to detect the index, but unable to discover any data.…

---

## [Pharse suggester with field search in query syntax](https://discuss.elastic.co/t/pharse-suggester-with-field-search-in-query-syntax/48926)

<div class="topic-metadata">

**Author:** [@litalk](https://discuss.elastic.co/u/litalk)\
**Replies:** 2\
**Last updated:** [May 2, 2016, 11:50am UTC](https://discuss.elastic.co/t/pharse-suggester-with-field-search-in-query-syntax/48926 "2016-05-02T11:50:17Z")

</div>

I am trying to implement "did you mean" feature using the elasticsearch phrase suggester. It works OK, except when using field search in query syntax. The query syntax I use is Query String Query Here is an example of…

---

## [NEST 2.2 Limit Fields returned](https://discuss.elastic.co/t/nest-2-2-limit-fields-returned/47653)

<div class="topic-metadata">

**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\
**Replies:** 2\
**Last updated:** [April 19, 2016, 11:22am UTC](https://discuss.elastic.co/t/nest-2-2-limit-fields-returned/47653 "2016-04-19T11:22:12Z")

</div>

Hello, I am trying to limit the fields that are returned from a query but i cant seem to get the .Fields() part of the query detecting the objects in my class: var result = client.Search\<MyClass\>(s =\> s …

---

## [Issues with kibana](https://discuss.elastic.co/t/issues-with-kibana/43810)

<div class="topic-metadata">

**Author:** [@dkota](https://discuss.elastic.co/u/dkota)\
**Replies:** 2\
**Last updated:** [March 9, 2016, 10:03pm UTC](https://discuss.elastic.co/t/issues-with-kibana/43810 "2016-03-09T22:03:17Z")

</div>

I'm running kibana 4.4.1. Whenever I try to load kibana, I keep getting the below error HAs anyone seen this before? Any leads will be appreciated.

---

## [Create Data table with condition](https://discuss.elastic.co/t/create-data-table-with-condition/43261)

<div class="topic-metadata">

**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\
**Replies:** 2\
**Last updated:** [March 3, 2016, 9:10am UTC](https://discuss.elastic.co/t/create-data-table-with-condition/43261 "2016-03-03T09:10:31Z")

</div>

Hi , I want to create a Data table with conditions. I have 2 fields that I want to create a query between them , for example the fields are: status and message. I want all the records that status = 'failed' or message…

---

## [Cat logs in when using logstash as service](https://discuss.elastic.co/t/cat-logs-in-when-using-logstash-as-service/43151)

<div class="topic-metadata">

**Author:** [@dkota](https://discuss.elastic.co/u/dkota)\
**Replies:** 2\
**Last updated:** [March 1, 2016, 9:16pm UTC](https://discuss.elastic.co/t/cat-logs-in-when-using-logstash-as-service/43151 "2016-03-01T21:16:41Z")

</div>

how can we cat/redirect logs when using logstash as service.? I am not able to locate the command to cat logs as input while running logstash as service. similar to cat filename|bin/logstash -f logstash-syslog.conf

---

## [Mapping -\> Champs invalide -\> ignorer le champ](https://discuss.elastic.co/t/mapping-champs-invalide-ignorer-le-champ/35329)

<div class="topic-metadata">

**Author:** [@Stephane\_B](https://discuss.elastic.co/u/Stephane_B)\
**Replies:** 2\
**Last updated:** [November 24, 2015, 9:29am UTC](https://discuss.elastic.co/t/mapping-champs-invalide-ignorer-le-champ/35329 "2015-11-24T09:29:27Z")

</div>

Hello, J'ai crée un mapping qui permet de typer un champ JSON string vers un type double, comme suit: { "mappings": { "events": { "properties": { "@fields": { "properties": { …

---

## [Creating new dashboards with existing one by changing type/index](https://discuss.elastic.co/t/creating-new-dashboards-with-existing-one-by-changing-type-index/32941)

<div class="topic-metadata">

**Author:** [@Vamsi](https://discuss.elastic.co/u/Vamsi)\
**Replies:** 2\
**Last updated:** [October 26, 2015, 1:39pm UTC](https://discuss.elastic.co/t/creating-new-dashboards-with-existing-one-by-changing-type-index/32941 "2015-10-26T13:39:21Z")

</div>

I am using ELK stack to collect and store the performance data of my application.My application is running on different sites/environments. Data set is same for all the sites, my requirement is to create a dashboard for …

---

## [SSL encryption and nodes authentication without using shield](https://discuss.elastic.co/t/ssl-encryption-and-nodes-authentication-without-using-shield/29770)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 2\
**Last updated:** [September 23, 2015, 4:57am UTC](https://discuss.elastic.co/t/ssl-encryption-and-nodes-authentication-without-using-shield/29770 "2015-09-23T04:57:07Z")

</div>

Any possible way to implement SSL encryption and nodes authentication through certificates other than using shield ?.

---

## [JVM uptime less than JAVA process uptime?](https://discuss.elastic.co/t/jvm-uptime-less-than-java-process-uptime/16597)

<div class="topic-metadata">

**Author:** [@Nelson\_Jeppesen](https://discuss.elastic.co/u/Nelson_Jeppesen)\
**Replies:** 2\
**Last updated:** [March 26, 2014, 3:46am UTC](https://discuss.elastic.co/t/jvm-uptime-less-than-java-process-uptime/16597 "2014-03-26T03:46:32Z")

</div>

I'll keep this short and I hope its just a misunderstanding of java on my part. All my Elasticsearch nodes are reporting a JVM uptime between 1 and 25 hours. The strange part is all the JAVA process have a start d…

---

## [Elastic Search on Azure Kubernetes Service - Readiness Probe fails for Kibana](https://discuss.elastic.co/t/elastic-search-on-azure-kubernetes-service-readiness-probe-fails-for-kibana/332558)

<div class="topic-metadata">

**Author:** [@patkoch](https://discuss.elastic.co/u/patkoch)\
**Replies:** 1\
**Last updated:** [May 29, 2023, 6:39pm UTC](https://discuss.elastic.co/t/elastic-search-on-azure-kubernetes-service-readiness-probe-fails-for-kibana/332558 "2023-05-29T18:39:35Z")

</div>

Hi, I'm sorry, this questions occurs several times - but some answers were closed without a solution - and maybe my approach is different. I try to deploy Elastic Search on my Azure Kubernetes Cluster and unfortunately…

---

## [Filebeat iis module time taken field](https://discuss.elastic.co/t/filebeat-iis-module-time-taken-field/275504)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 1\
**Last updated:** [June 10, 2021, 3:35am UTC](https://discuss.elastic.co/t/filebeat-iis-module-time-taken-field/275504 "2021-06-10T03:35:49Z")

</div>

Using the filebeat iis module in v7.13, I cannot explicitly see the time taken field. Am I missing something or has it been replaced with event duration? The iis logs exports all fields.

---

## [How to use Elasticsearch SQL { XPACK } in Logstash](https://discuss.elastic.co/t/how-to-use-elasticsearch-sql-xpack-in-logstash/250995)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 7\
**Last updated:** [October 6, 2020, 5:29am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-sql-xpack-in-logstash/250995 "2020-10-06T05:29:19Z")

</div>

Hello I am using Logstash 7.8.0 with Elasticsearch v7.8.0. I am using Logstash to extract data from ES Index-1 and inserting into ES Index-2. I am not finding a way to use Elasticsearch SQL a part of xpack into Logsta…

---

## [Can't setup kibana dashboards](https://discuss.elastic.co/t/cant-setup-kibana-dashboards/225286)

<div class="topic-metadata">

**Author:** [@chimeno](https://discuss.elastic.co/u/chimeno)\
**Replies:** 1\
**Last updated:** [June 1, 2020, 10:16pm UTC](https://discuss.elastic.co/t/cant-setup-kibana-dashboards/225286 "2020-06-01T22:16:45Z")

</div>

Debian 10 journalbeat 7.6.1 installed with apt when configured with: setup.dashboards.enabled: true journalbeat says: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing dire…

---

## [Addition of new elasticsearch nodes and security (SSL / TLS / HTTPS configuration)](https://discuss.elastic.co/t/addition-of-new-elasticsearch-nodes-and-security-ssl-tls-https-configuration/213285)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [December 29, 2019, 11:39pm UTC](https://discuss.elastic.co/t/addition-of-new-elasticsearch-nodes-and-security-ssl-tls-https-configuration/213285 "2019-12-29T23:39:13Z")

</div>

I have a question about configuring additional new Elasticsearch nodes (SSL / TLS / HTTPS issue) and adding them to an existing cluster. Earlier I secured the cluster according to the description: Is it enough to cr…

---

## [Unable to export to csv from Kibana](https://discuss.elastic.co/t/unable-to-export-to-csv-from-kibana/206467)

<div class="topic-metadata">

**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\
**Replies:** 1\
**Last updated:** [November 11, 2019, 6:42am UTC](https://discuss.elastic.co/t/unable-to-export-to-csv-from-kibana/206467 "2019-11-11T06:42:04Z")

</div>

We are using Kibana as a tool to create dashboards. One of our use-case is to be able to export filtered data from elasticsearch index as a CSV file. We are using oss version of Kibana 7.2 So is this export to csv fea…

---

## [ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-127-0-0-1-getsockopt-connection-refused/196933)

<div class="topic-metadata">

**Author:** [@subhasmita\_mishra](https://discuss.elastic.co/u/subhasmita_mishra)\
**Replies:** 1\
**Last updated:** [August 27, 2019, 5:38pm UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-127-0-0-1-getsockopt-connection-refused/196933 "2019-08-27T17:38:37Z")

</div>

ERROR pipeline/output.go:100 Failed to connect to backoff(async(tcp://localhost:5044)): dial tcp localhost:5044: connect: connection refused/etc filebeat.yml file: ilebeat.prospectors: - paths: - /var/log/\*.log inp…

---

## [Secure communications?](https://discuss.elastic.co/t/secure-communications/141458)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 7\
**Last updated:** [July 25, 2018, 8:19am UTC](https://discuss.elastic.co/t/secure-communications/141458 "2018-07-25T08:19:17Z")

</div>

Hi, How do I apply ssl/https secure communications on elastic cloud? I have a Kibana instance running on a EC2 instance connecting to a elastic instance in the elastic cloud. kibana.yml on the EC2 instance: elastics…

---

## [Filebeat modules doesn't parse the logs](https://discuss.elastic.co/t/filebeat-modules-doesnt-parse-the-logs/140973)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 9:56am UTC](https://discuss.elastic.co/t/filebeat-modules-doesnt-parse-the-logs/140973 "2018-07-23T09:56:38Z")

</div>

Hello Community, I have installed filebeat and Nginx module is enabled \[root@ip-10-1-247-159 filebeat\]# ./filebeat modules list Enabled: nginx Filebeat templates are loaded manually. I can see the logs in kibana …

---

## [Cannot use env variables in filebeat!](https://discuss.elastic.co/t/cannot-use-env-variables-in-filebeat/94270)

<div class="topic-metadata">

**Author:** [@Yaohua](https://discuss.elastic.co/u/Yaohua)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 5:40am UTC](https://discuss.elastic.co/t/cannot-use-env-variables-in-filebeat/94270 "2017-07-24T05:40:40Z")

</div>

My filebeat version is 5.5.0 and OS is CentOS7 ###The config as following: filebeat.prospectors: - input\_type: log paths: - /var/log/xaa fields: docker: ${HOSTNAME} fields\_under\_root: true document\_type…

---

## [Exactly how to map geoip.location to geo\_point](https://discuss.elastic.co/t/exactly-how-to-map-geoip-location-to-geo-point/92917)

<div class="topic-metadata">

**Author:** [@Leon1](https://discuss.elastic.co/u/Leon1)\
**Replies:** 1\
**Last updated:** [July 13, 2017, 6:55pm UTC](https://discuss.elastic.co/t/exactly-how-to-map-geoip-location-to-geo-point/92917 "2017-07-13T18:55:01Z")

</div>

Here is my template { "template" : "cisco-asa\*", "settings" : { "index.refresh\_interval" : "5s" }, "mappings" : { "default" : { "\_all" : {"enabled" : true}, "dynamic\_templates" : \[ { …

---

## [Sorting "children" aggregations](https://discuss.elastic.co/t/sorting-children-aggregations/89944)

<div class="topic-metadata">

**Author:** [@blaineparker](https://discuss.elastic.co/u/blaineparker)\
**Replies:** 1\
**Last updated:** [June 19, 2017, 3:00pm UTC](https://discuss.elastic.co/t/sorting-children-aggregations/89944 "2017-06-19T15:00:03Z")

</div>

I am looking to aggregate children based on parent fields, but I want to filter on both children and parent fields. The problem is when I do this, I get results where parents match the criteria but no children match the …

---

## [How to grant superuser permission to ladp user](https://discuss.elastic.co/t/how-to-grant-superuser-permission-to-ladp-user/78443)

<div class="topic-metadata">

**Author:** [@Bhavik\_Shah](https://discuss.elastic.co/u/Bhavik_Shah)\
**Replies:** 1\
**Last updated:** [March 14, 2017, 3:36pm UTC](https://discuss.elastic.co/t/how-to-grant-superuser-permission-to-ladp-user/78443 "2017-03-14T15:36:33Z")

</div>

Hello, I installed x-pack plugin to elasticsearch as well as kibana. I setup ldap realm for authentication purpose. The ldap user is able to login to kibana but unable to perform any other activity such as clicking on …

---

## [Can I close an index while it is being reallocated to a "cold" node?](https://discuss.elastic.co/t/can-i-close-an-index-while-it-is-being-reallocated-to-a-cold-node/59986)

<div class="topic-metadata">

**Author:** [@bblank](https://discuss.elastic.co/u/bblank)\
**Replies:** 1\
**Last updated:** [September 7, 2016, 5:58pm UTC](https://discuss.elastic.co/t/can-i-close-an-index-while-it-is-being-reallocated-to-a-cold-node/59986 "2016-09-07T17:58:53Z")

</div>

Can I close an index while it is being reallocated to a "cold" node? Or, do I have to wait till the re-allocation is complete?

---

## [Setting missing field to default value based on a master template](https://discuss.elastic.co/t/setting-missing-field-to-default-value-based-on-a-master-template/39317)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 1\
**Last updated:** [January 15, 2016, 10:43am UTC](https://discuss.elastic.co/t/setting-missing-field-to-default-value-based-on-a-master-template/39317 "2016-01-15T10:43:47Z")

</div>

Setting missing field to default value based on a master template I will put my example in non elasticsearh language. I have two tables table\_a and table\_b table\_a Field1 Field2 table\_b field, field3 How do I m…

---

## [Creating custom fields in indexed records of elastic search](https://discuss.elastic.co/t/creating-custom-fields-in-indexed-records-of-elastic-search/27315)

<div class="topic-metadata">

**Author:** [@Sar82](https://discuss.elastic.co/u/Sar82)\
**Replies:** 1\
**Last updated:** [August 13, 2015, 8:32pm UTC](https://discuss.elastic.co/t/creating-custom-fields-in-indexed-records-of-elastic-search/27315 "2015-08-13T20:32:49Z")

</div>

Hi, I have the following setup on red hat linux, Fluentd (data collector) --\> Elasticsearch (Indexing data) --\> Kibana (Visualization) Fluentd is collecting data from some resource which I want to reform. Say for exa…

---

## [How to look for geocodes in Germany only? (PLZ or Postleitzahl)](https://discuss.elastic.co/t/how-to-look-for-geocodes-in-germany-only-plz-or-postleitzahl/19771)

<div class="topic-metadata">

**Author:** [@Jahn](https://discuss.elastic.co/u/Jahn)\
**Replies:** 1\
**Last updated:** [September 13, 2014, 6:54pm UTC](https://discuss.elastic.co/t/how-to-look-for-geocodes-in-germany-only-plz-or-postleitzahl/19771 "2014-09-13T18:54:08Z")

</div>

Not sure whether I am in the right forum, so I apologize if this is not the place to post! I would like to switch from US "zip" codes to PLZ (Postleitzahlen) in Germany. If I enter a German "zip" or "PLZ" code int…

---

## [Possible bug with monitoring creating thousands of elasticsearch.index.recovery duplicate docs](https://discuss.elastic.co/t/possible-bug-with-monitoring-creating-thousands-of-elasticsearch-index-recovery-duplicate-docs/324673)

<div class="topic-metadata">

**Author:** [@sparrowt](https://discuss.elastic.co/u/sparrowt)\
**Replies:** 5\
**Last updated:** [February 28, 2023, 1:41pm UTC](https://discuss.elastic.co/t/possible-bug-with-monitoring-creating-thousands-of-elasticsearch-index-recovery-duplicate-docs/324673 "2023-02-28T13:41:19Z")

</div>

Since upgrading to 8.x and (via cloud.elastic.co) enabling Monitoring \> Logs and metrics \> Ship to a deployment, I was surprised at the volume of data arriving into the .monitoring-es-8-mb datastream. On investigation i…

---

## [Filebeats cannot push events to logstash](https://discuss.elastic.co/t/filebeats-cannot-push-events-to-logstash/285249)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 5\
**Last updated:** [September 28, 2021, 8:33pm UTC](https://discuss.elastic.co/t/filebeats-cannot-push-events-to-logstash/285249 "2021-09-28T20:33:22Z")

</div>

Dear team, could you please give me a hint what to do? We have all Elasticstack on version 7.9.2 (ELS, Logstash, Filebeats, Kibana). From filebeats towards logstash no TLS is used. Here is the error found in logstash…

---

## [Connections Graph](https://discuss.elastic.co/t/connections-graph/253214)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 5\
**Last updated:** [November 3, 2020, 4:32pm UTC](https://discuss.elastic.co/t/connections-graph/253214 "2020-11-03T16:32:56Z")

</div>

It is possible some easy way (I know that are there some special possibilites but it is too much for me) to create in Kibana network connections graph? Something like:

---

## [Emails stopped sending today with SMTP error](https://discuss.elastic.co/t/emails-stopped-sending-today-with-smtp-error/168424)

<div class="topic-metadata">

**Author:** [@jgburks](https://discuss.elastic.co/u/jgburks)\
**Replies:** 5\
**Last updated:** [February 14, 2019, 6:51pm UTC](https://discuss.elastic.co/t/emails-stopped-sending-today-with-smtp-error/168424 "2019-02-14T18:51:58Z")

</div>

Watcher emails have been working up until this morning. Every email attempt throws this error: \[ALERT Monetra Daily Ping\] via account \[work\]\]; nested: MessagingException\[Could not connect to SMTP host: dockerhost, port:…

---

## [Doubt in conflicting version behavior](https://discuss.elastic.co/t/doubt-in-conflicting-version-behavior/166924)

<div class="topic-metadata">

**Author:** [@joaquim](https://discuss.elastic.co/u/joaquim)\
**Replies:** 5\
**Last updated:** [February 4, 2019, 11:28am UTC](https://discuss.elastic.co/t/doubt-in-conflicting-version-behavior/166924 "2019-02-04T11:28:28Z")

</div>

Hi, I'am having conflit's and just wanna know internal behavior of elastic that cause conflit's. I'am using Java API 5.1.1 for load of documents to elastic. I use bulk upsert and after a cicle with update with a scrip…

---

## [GET /\_cat/shards](https://discuss.elastic.co/t/get-cat-shards/147530)

<div class="topic-metadata">

**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\
**Replies:** 5\
**Last updated:** [September 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/get-cat-shards/147530 "2018-09-06T10:29:44Z")

</div>

Hi, When I run GET /\_cat/shards I get the next output: .kibana 0 p STARTED 21 60.6kb xxx.xx.x.xxx elk-1 What the zero means? Thanks

---

## [Computation on aggregation fileds](https://discuss.elastic.co/t/computation-on-aggregation-fileds/98320)

<div class="topic-metadata">

**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\
**Replies:** 5\
**Last updated:** [August 25, 2017, 8:37am UTC](https://discuss.elastic.co/t/computation-on-aggregation-fileds/98320 "2017-08-25T08:37:14Z")

</div>

HI Input state,days johar,2 johar,1 johar,3 johar,7 johar,6 johar,12 pk,2 pk,4 pk,9 have data as above from this want to compute fields like days which are \<=3 days and \<=10 days computed fields for that i cr…

---

## [Couldn't find any input plugin named 'google\_pubsub'. Are you sure this is correct?](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218)

<div class="topic-metadata">

**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\
**Replies:** 3\
**Last updated:** [August 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218 "2021-08-03T06:51:50Z")

</div>

Hello, I noticed Kibana is no longer having Google cloud Stackdriver logs. So I started my troubleshooting with logstash and debug the .conf file, here's what I got: \[2021-08-02T20:08:44,540\]\[DEBUG\]\[logstash.plugins.re…

---

## [Adding static legend in Kibana dashboards](https://discuss.elastic.co/t/adding-static-legend-in-kibana-dashboards/273759)

<div class="topic-metadata">

**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\
**Replies:** 3\
**Last updated:** [May 24, 2021, 8:01am UTC](https://discuss.elastic.co/t/adding-static-legend-in-kibana-dashboards/273759 "2021-05-24T08:01:44Z")

</div>

I'm trying to add a static legend to my Kibana dashboard in order to mark things in TSVB visualization. I'm using color in the TSVB visualization and am trying to explain the colors in a static legend: I want it to b…

---

## [Showing Specific Country states on Map](https://discuss.elastic.co/t/showing-specific-country-states-on-map/202958)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 3\
**Last updated:** [October 11, 2019, 5:54pm UTC](https://discuss.elastic.co/t/showing-specific-country-states-on-map/202958 "2019-10-11T17:54:05Z")

</div>

Hi can anyone please let me now how to show a certain country states on map and not the whole world countries ? Kibana version 7.2 Thanks.

---

## [Getting started with XPack features in basic licesne](https://discuss.elastic.co/t/getting-started-with-xpack-features-in-basic-licesne/200197)

<div class="topic-metadata">

**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\
**Replies:** 3\
**Last updated:** [September 20, 2019, 7:36am UTC](https://discuss.elastic.co/t/getting-started-with-xpack-features-in-basic-licesne/200197 "2019-09-20T07:36:48Z")

</div>

Hello Team I am using docker image of elasticsearch mentioned in https://www.elastic.co/guide/en/elasticsearch/reference/6.6/docker.html As mentioned in the above, These images are free to use under the Elastic license…

---

## [Elastic Search Certification](https://discuss.elastic.co/t/elastic-search-certification/186903)

<div class="topic-metadata">

**Author:** [@sirichandana](https://discuss.elastic.co/u/sirichandana)\
**Replies:** 3\
**Last updated:** [June 25, 2019, 9:09am UTC](https://discuss.elastic.co/t/elastic-search-certification/186903 "2019-06-25T09:09:50Z")

</div>

Hello All, Had anyone done Elastic Search Certification, Please Let me know. If Possible Help in Exam Pattern and the required material and Links. Thanks

---

## [Kibana dashboard every day its getting reduce to display number of counts and log information from elastic search](https://discuss.elastic.co/t/kibana-dashboard-every-day-its-getting-reduce-to-display-number-of-counts-and-log-information-from-elastic-search/184913)

<div class="topic-metadata">

**Author:** [@inamaddod](https://discuss.elastic.co/u/inamaddod)\
**Replies:** 3\
**Last updated:** [June 11, 2019, 2:48pm UTC](https://discuss.elastic.co/t/kibana-dashboard-every-day-its-getting-reduce-to-display-number-of-counts-and-log-information-from-elastic-search/184913 "2019-06-11T14:48:41Z")

</div>

In build server i can see the logs are getting logged. but on the kibana dashboard the visualization of logs and request counts are not showing, every day the counts getting reduced. Every day we get request more then 1…

---

## [IdP Recommendations for SAML Auth](https://discuss.elastic.co/t/idp-recommendations-for-saml-auth/153619)

<div class="topic-metadata">

**Author:** [@dcam](https://discuss.elastic.co/u/dcam)\
**Replies:** 3\
**Last updated:** [October 25, 2018, 2:26am UTC](https://discuss.elastic.co/t/idp-recommendations-for-saml-auth/153619 "2018-10-25T02:26:08Z")

</div>

We are planning to move from Basic Auth to SAML Authentication. Do you have any recomendations about which framework to use as SAML Client? PingFederate Keycloak SAML Passport etc We would like to build the client in…

---

## [NextCloud + OnlyOffice + ElasticSearch (FullTextSearch)](https://discuss.elastic.co/t/nextcloud-onlyoffice-elasticsearch-fulltextsearch/125722)

<div class="topic-metadata">

**Author:** [@hadgy](https://discuss.elastic.co/u/hadgy)\
**Replies:** 0\
**Last updated:** [March 27, 2018, 9:31am UTC](https://discuss.elastic.co/t/nextcloud-onlyoffice-elasticsearch-fulltextsearch/125722 "2018-03-27T09:31:52Z")

</div>

Hi guys, I have a docker deployed NextCloud 13 + OnlyOffice and I am trying to make Elasticsearch work with PDF, DOCX files uploaded to NextCloud. NextCloud version 13 OnlyOffice version 1.2.0 Elasticsearch version …

---

## [Metricbeat Perfmon metrics monitroing](https://discuss.elastic.co/t/metricbeat-perfmon-metrics-monitroing/110697)

<div class="topic-metadata">

**Author:** [@dilip](https://discuss.elastic.co/u/dilip)\
**Replies:** 3\
**Last updated:** [December 12, 2017, 3:11pm UTC](https://discuss.elastic.co/t/metricbeat-perfmon-metrics-monitroing/110697 "2017-12-12T15:11:52Z")

</div>

Hello Team, could you please help me in providing the information on Metricbeat Perfmon Counter. can metricbeat monitor all the Counters available in Perfmon like-MS SQL Server Metrics/Exchange server metrics/IIS Count…

---

## [Begginers help grok and check if data is making it into elastic search](https://discuss.elastic.co/t/begginers-help-grok-and-check-if-data-is-making-it-into-elastic-search/106099)

<div class="topic-metadata">

**Author:** [@burntfaceman](https://discuss.elastic.co/u/burntfaceman)\
**Replies:** 3\
**Last updated:** [November 3, 2017, 6:28am UTC](https://discuss.elastic.co/t/begginers-help-grok-and-check-if-data-is-making-it-into-elastic-search/106099 "2017-11-03T06:28:03Z")

</div>

Hi, I have just started to play with elasticstack for the first time. My objective to create a simple to use system for firewall rule log aggregation/searching. I have followed the basic guide to setup logstash, Elastic…

---

## [How can i embed just visualization rather Dashboard?](https://discuss.elastic.co/t/how-can-i-embed-just-visualization-rather-dashboard/81685)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 3\
**Last updated:** [April 13, 2017, 7:56pm UTC](https://discuss.elastic.co/t/how-can-i-embed-just-visualization-rather-dashboard/81685 "2017-04-13T19:56:08Z")

</div>

How can i embed just visualization rather Dashboard? I know that we can embed Dashboard by using Share option. Is there any way, i can embed only visualization ( like only one chart in my html page)

---

## [Aggregating using sum always yields me zero even when there is a value associated to it](https://discuss.elastic.co/t/aggregating-using-sum-always-yields-me-zero-even-when-there-is-a-value-associated-to-it/60638)

<div class="topic-metadata">

**Author:** [@Akshay\_Iyangar](https://discuss.elastic.co/u/Akshay_Iyangar)\
**Replies:** 3\
**Last updated:** [September 19, 2016, 11:02pm UTC](https://discuss.elastic.co/t/aggregating-using-sum-always-yields-me-zero-even-when-there-is-a-value-associated-to-it/60638 "2016-09-19T23:02:45Z")

</div>

As you can see i can see values in my discover tab. The problem arises when i try using aggregation trying to sum the value. It is always zero for some reason. The response returned is zero by elasticsearch for the ag…

---

## [Using ELK to create a unified logging system with large log input](https://discuss.elastic.co/t/using-elk-to-create-a-unified-logging-system-with-large-log-input/53261)

<div class="topic-metadata">

**Author:** [@rvu95](https://discuss.elastic.co/u/rvu95)\
**Replies:** 3\
**Last updated:** [June 20, 2016, 4:48am UTC](https://discuss.elastic.co/t/using-elk-to-create-a-unified-logging-system-with-large-log-input/53261 "2016-06-20T04:48:21Z")

</div>

Hello, I'm still a newbie, I want to ask about the tradeoff of using ELK for unified logging syste, with large log input. I'm planning on using HAProxy, redis, and ELK. What wanna I ask is how's the performance of this k…

---

## [Meaning of \*\* in filter input context](https://discuss.elastic.co/t/meaning-of-in-filter-input-context/37348)

<div class="topic-metadata">

**Author:** [@nerdstrike](https://discuss.elastic.co/u/nerdstrike)\
**Replies:** 3\
**Last updated:** [December 16, 2015, 2:16pm UTC](https://discuss.elastic.co/t/meaning-of-in-filter-input-context/37348 "2015-12-16T14:16:33Z")

</div>

While attempting to sort out my recalcitrant ELK setup, I am finding scattered examples of logstash filter patterns like: file { path =\> "/var/log/\*\*/\*" } Does this have any specific meaning? The problem at han…

---

## [HELP! My production is dead](https://discuss.elastic.co/t/help-my-production-is-dead/8271)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 8\
**Last updated:** [July 4, 2012, 8:08pm UTC](https://discuss.elastic.co/t/help-my-production-is-dead/8271 "2012-07-04T20:08:16Z")

</div>

Hello, Suddenly, ES start being unresponsive from time to time. I've decided to restart it. But it stack at initializing: \[2012-06-30 21:01:49,080\]\[INFO \]\[bootstrap \] max\_open\_files \[29977\] \[2012-06…

---

## [Strip\_html](https://discuss.elastic.co/t/strip-html/3777)

<div class="topic-metadata">

**Author:** [@Andrew\_Degtiariov](https://discuss.elastic.co/u/Andrew_Degtiariov)\
**Replies:** 3\
**Last updated:** [January 15, 2011, 1:11pm UTC](https://discuss.elastic.co/t/strip-html/3777 "2011-01-15T13:11:49Z")

</div>

Hi! I'm using html\_strip for striping all HTML tags from some fields. But when I search messages with "img" in its body then ES finds messages with \[image\] tag too. Where I'm wrong? There is the query: {'quer…

[Previous page](https://discuss.elastic.co/top.md?page=1689&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1691&per_page=50&period=all)
