# Top

**URL:** https://discuss.elastic.co/top.md?page=254&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 255

---

## [What's appropriate value at "retry on conflict"?](https://discuss.elastic.co/t/whats-appropriate-value-at-retry-on-conflict/54312)

<div class="topic-metadata">

**Author:** [@happyprg](https://discuss.elastic.co/u/happyprg)\
**Replies:** 4\
**Last updated:** [July 5, 2016, 7:20am UTC](https://discuss.elastic.co/t/whats-appropriate-value-at-retry-on-conflict/54312 "2016-07-05T07:20:55Z")

</div>

Hello Dear Members I want to know an appropriate value of retry on conflict param. It's related below links. - https://www.elastic.co/guide/en/elasticsearch/guide/current/partial-updates.html - VersionConflictEngineExc…

---

## [Logstash Logging to /var/log/messages](https://discuss.elastic.co/t/logstash-logging-to-var-log-messages/186085)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 2\
**Last updated:** [June 19, 2019, 4:52pm UTC](https://discuss.elastic.co/t/logstash-logging-to-var-log-messages/186085 "2019-06-19T16:52:23Z")

</div>

Logstash is logging a duplicate of all data being logged to /var/log/logstash/logstash-plain.log to /var/log/messages. It appears that many others have experienced the same issue, and that the culprit is often the follow…

---

## [Dec 25th, 2019 \[EN\]\[Kibana\] A Santa Claus Tale](https://discuss.elastic.co/t/dec-25th-2019-en-kibana-a-santa-claus-tale/212706)

<div class="topic-metadata">

**Author:** [@tamara](https://discuss.elastic.co/u/tamara)\
**Replies:** 0\
**Last updated:** [December 25, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2019-en-kibana-a-santa-claus-tale/212706 "2019-12-25T08:00:15Z")

</div>

A Santa Claus Tale Here I was at home and out of nowhere I heard a voice, when I looked back all I could see was multicolored smoke. When it started to fade out a figure started to take shape. I could not believe my ey…

---

## [Submitting False Positives](https://discuss.elastic.co/t/submitting-false-positives/232322)

<div class="topic-metadata">

**Author:** [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 8:43pm UTC](https://discuss.elastic.co/t/submitting-false-positives/232322 "2020-05-12T20:43:13Z")

</div>

We welcome your False Positive (FP) report for Elastic’s malware detection engine. These FP reports help us improve our security products. Please note that as of June 5, 2024 we have updated our False Positive review pr…

---

## [Logstash output for multiple elasticsearch instance](https://discuss.elastic.co/t/logstash-output-for-multiple-elasticsearch-instance/2194)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 8\
**Last updated:** [October 23, 2016, 5:09pm UTC](https://discuss.elastic.co/t/logstash-output-for-multiple-elasticsearch-instance/2194 "2016-10-23T17:09:56Z")

</div>

hello i m working to collect logs from 3000 server I installed 2 servers with ElasticSearch and logstash indexer 2 with redis , logstash shipper ans elasticsearch So i have 4 instance for ElasticSearch I tried to find e…

---

## [Filebeat and GLIBC Errors on Ubuntu 22.04](https://discuss.elastic.co/t/filebeat-and-glibc-errors-on-ubuntu-22-04/306653)

<div class="topic-metadata">

**Author:** [@mibeyki](https://discuss.elastic.co/u/mibeyki)\
**Replies:** 2\
**Last updated:** [June 8, 2022, 8:13pm UTC](https://discuss.elastic.co/t/filebeat-and-glibc-errors-on-ubuntu-22-04/306653 "2022-06-08T20:13:26Z")

</div>

Hello, We just deployed filebeat both Ubuntu 22.04 server and Ubuntu 22.04 desktop. However, we cannot be able to get Filebeat connect to Elasticsearch. Both versions of Filebeat and ES is 7.10.1; When you run; file…

---

## [Timelion not showing any data](https://discuss.elastic.co/t/timelion-not-showing-any-data/92995)

<div class="topic-metadata">

**Author:** [@Filip\_M](https://discuss.elastic.co/u/Filip_M)\
**Replies:** 4\
**Last updated:** [July 17, 2017, 6:41am UTC](https://discuss.elastic.co/t/timelion-not-showing-any-data/92995 "2017-07-17T06:41:10Z")

</div>

Hi everyone, I have an issue with timelion and visual builder which are not showing any data ( q:\* \> count(0.0) ) even thou I have indexes in elasticsearch and other dashboards/visualizations works fine. I am running …

---

## [Get data from visualize/ dashboard using the API](https://discuss.elastic.co/t/get-data-from-visualize-dashboard-using-the-api/83684)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 8\
**Last updated:** [May 3, 2017, 8:58am UTC](https://discuss.elastic.co/t/get-data-from-visualize-dashboard-using-the-api/83684 "2017-05-03T08:58:12Z")

</div>

Hi, I want to fetch my visualize/ dashboard data in Kibana from the API How do I approach this issue ? I need is to get the data from, e.g., data table 10x in advance

---

## [Search DISTINCT field](https://discuss.elastic.co/t/search-distinct-field/92423)

<div class="topic-metadata">

**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\
**Replies:** 4\
**Last updated:** [July 12, 2017, 7:18am UTC](https://discuss.elastic.co/t/search-distinct-field/92423 "2017-07-12T07:18:28Z")

</div>

Hello, I want to load some healthcare data in my index, but i have some problems to visualize the data. I have some jsons about the same patient, every json have different information but always all json have any fie…

---

## [How do i list all stored scripts? GET \_scripts/ doesn't work](https://discuss.elastic.co/t/how-do-i-list-all-stored-scripts-get--scripts-doesnt-work/83055)

<div class="topic-metadata">

**Author:** [@mbje-saxo](https://discuss.elastic.co/u/mbje-saxo)\
**Replies:** 1\
**Last updated:** [April 27, 2017, 10:43am UTC](https://discuss.elastic.co/t/how-do-i-list-all-stored-scripts-get--scripts-doesnt-work/83055 "2017-04-27T10:43:08Z")

</div>

We are using filebeats with ingest node and stored scripts to ingest thousand of seperate log files into elastic - we have 100's of pipelines with stored painless scripts - i can list the pipelines easily and see the scr…

---

## [Setting @timestamp in filebeat](https://discuss.elastic.co/t/setting-timestamp-in-filebeat/136224)

<div class="topic-metadata">

**Author:** [@michas](https://discuss.elastic.co/u/michas)\
**Replies:** 2\
**Last updated:** [June 20, 2018, 2:10pm UTC](https://discuss.elastic.co/t/setting-timestamp-in-filebeat/136224 "2018-06-20T14:10:27Z")

</div>

Recent versions of filebeat allow to dissect log messages directly. (Without the need of logstash or an ingestion pipeline.) Therefore I would like to avoid any overhead and send the dissected fields directly to ES. Cu…

---

## [LogStash JDBC plugin - Issues with last\_run\_metadata\_path](https://discuss.elastic.co/t/logstash-jdbc-plugin-issues-with-last-run-metadata-path/89137)

<div class="topic-metadata">

**Author:** [@mulgar](https://discuss.elastic.co/u/mulgar)\
**Replies:** 1\
**Last updated:** [June 22, 2017, 1:02am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-issues-with-last-run-metadata-path/89137 "2017-06-22T01:02:08Z")

</div>

I'm having some problems with the last\_run\_metadata\_path in the LogStash JDBC Input plugin (ref: Jdbc input plugin | Logstash Reference \[8.11\] | Elastic ). I have the sql\_last\_value parameter working as expected previou…

---

## [Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/cant-get-text-on-a-start-object/244340)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 1\
**Last updated:** [June 1, 2022, 11:18pm UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object/244340 "2022-06-01T23:18:06Z")

</div>

This error will be logged when Elasticsearch tries to index data that is an object, into a field that is not mapped as one. Or in reverse, if you try to index something that isn't an object into a field that is mapped as…

---

## [My experiences setting up Metricbeat for monitoring an Elastic cluster](https://discuss.elastic.co/t/my-experiences-setting-up-metricbeat-for-monitoring-an-elastic-cluster/297395)

<div class="topic-metadata">

**Author:** [@jacknl](https://discuss.elastic.co/u/jacknl)\
**Replies:** 0\
**Last updated:** [February 16, 2022, 4:21pm UTC](https://discuss.elastic.co/t/my-experiences-setting-up-metricbeat-for-monitoring-an-elastic-cluster/297395 "2022-02-16T16:21:26Z")

</div>

For those who are interested here is my experience deploying Metricbeat with a monitoring cluster ("Stack Monitoring"). In a nutshell: When you monitor a non-trivial Elasticsearch cluster, be sure to add scope: cluste…

---

## [Query the last 5 minutes](https://discuss.elastic.co/t/query-the-last-5-minutes/80043)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 1\
**Last updated:** [March 26, 2017, 2:13pm UTC](https://discuss.elastic.co/t/query-the-last-5-minutes/80043 "2017-03-26T14:13:44Z")

</div>

Hi, I am trying to look for a solution to query the last 5 minutes, depending on what time is it. That means I dont want to manually enter the time such as: GET filebeat-\*/log/\_search {"query" : { "range" : { …

---

## [Need help with scan/scroll using elasticsearch-py client](https://discuss.elastic.co/t/need-help-with-scan-scroll-using-elasticsearch-py-client/78548)

<div class="topic-metadata">

**Author:** [@ksnerd](https://discuss.elastic.co/u/ksnerd)\
**Replies:** 1\
**Last updated:** [March 14, 2017, 7:53pm UTC](https://discuss.elastic.co/t/need-help-with-scan-scroll-using-elasticsearch-py-client/78548 "2017-03-14T19:53:21Z")

</div>

I'm using elasticsearch 5.2.1 and elasticsearch-py 5.2.0. My index.max\_result\_window is set to the default (10,000). I'd like to have the option in my script to return all matching documents for a query. When I execut…

---

## [Dec 2nd, 2019: \[EN\]\[Auditbeat\] Monitoring Linux Command Execution](https://discuss.elastic.co/t/dec-2nd-2019-en-auditbeat-monitoring-linux-command-execution/209125)

<div class="topic-metadata">

**Author:** [@json](https://discuss.elastic.co/u/json)\
**Replies:** 0\
**Last updated:** [December 2, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2019-en-auditbeat-monitoring-linux-command-execution/209125 "2019-12-02T08:00:00Z")

</div>

The Auditbeat Auditd module can be used to capture all shell commands executed on system for all users. Monitoring shell commands is often desired on servers where end user shell activity is normally minimal. This examp…

---

## [Beats: How to report an issue](https://discuss.elastic.co/t/beats-how-to-report-an-issue/38301)

<div class="topic-metadata">

**Author:** [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Replies:** 0\
**Last updated:** [January 4, 2016, 9:50am UTC](https://discuss.elastic.co/t/beats-how-to-report-an-issue/38301 "2016-01-04T09:50:10Z")

</div>

This forum is intended for all discussions and issues related to the beats projects. Each Beat has its own subforum, so for beat specific issues, please use the specific forum. In case you have issue with the installat…

---

## [Dec 16th, 2020: \[EN\] Monitoring Tekton Tasks and Pipelines with Elastic Observability](https://discuss.elastic.co/t/dec-16th-2020-en-monitoring-tekton-tasks-and-pipelines-with-elastic-observability/257567)

<div class="topic-metadata">

**Author:** [@mgreau](https://discuss.elastic.co/u/mgreau)\
**Replies:** 0\
**Last updated:** [December 16, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2020-en-monitoring-tekton-tasks-and-pipelines-with-elastic-observability/257567 "2020-12-16T08:00:05Z")

</div>

Do you know that Elastic performed 21 releases in 2020? Each time a release is promoted, this is 500+ artifacts published to multiple public places (bucket, Docker registries, Maven Central, Rubygems, and so on) and ava…

---

## [Dec 6th, 2017: \[KR\]\[Elasticsearch\] Cross Cluster Search로 할 수 있는 것들](https://discuss.elastic.co/t/dec-6th-2017-kr-elasticsearch-cross-cluster-search/110077)

<div class="topic-metadata">

**Author:** [@kimjmin](https://discuss.elastic.co/u/kimjmin)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 1:00pm UTC](https://discuss.elastic.co/t/dec-6th-2017-kr-elasticsearch-cross-cluster-search/110077 "2017-12-05T13:00:07Z")

</div>

여러개의 클러스터를 묶어서 검색하고자 할때 예전에는 Tribe Node를 사용했지만, Elasticsearch 5.3 부터는 Cross Cluster Search 기능의 사용이 가능합니다. Tribe Node와 비교하여 Cross Cluster Search 가 갖는 장점들은 다음과 같습니다. 클러스터간의 버전이 달라도 됩니다. 이는 5.X 버전과 6.X 버전을 묶어서 검색할 수 있습니다…

---

## [Invalid Frame Type, received: 69/84](https://discuss.elastic.co/t/invalid-frame-type-received-69-84/130234)

<div class="topic-metadata">

**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\
**Replies:** 3\
**Last updated:** [May 2, 2018, 3:43pm UTC](https://discuss.elastic.co/t/invalid-frame-type-received-69-84/130234 "2018-05-02T15:43:52Z")

</div>

Hi Guy, I always encounter below issue from logstash when shipping log from filebeat to logstash, but if can ship to elasticsearch by filebeat directly. Handling exception: org.logstash.beats.BeatsParser$InvalidFrameP…

---

## [Unavailable\_shards\_exception, reason: primary shard is not active](https://discuss.elastic.co/t/unavailable-shards-exception-reason-primary-shard-is-not-active/56590)

<div class="topic-metadata">

**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\
**Replies:** 1\
**Last updated:** [June 5, 2017, 6:50am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-primary-shard-is-not-active/56590 "2017-06-05T06:50:16Z")

</div>

Anyone can help me on that? It's pretty weird. I'm using a simple architecture: Filebeat -\> Logstash -\> Elasticsearch. Besides, only one instance of logstash and elasticsearch. When I started them, they worked well. Ho…

---

## [Unique Array Elements in Painless Script](https://discuss.elastic.co/t/unique-array-elements-in-painless-script/66519)

<div class="topic-metadata">

**Author:** [@LeFinc](https://discuss.elastic.co/u/LeFinc)\
**Replies:** 2\
**Last updated:** [November 18, 2016, 10:49am UTC](https://discuss.elastic.co/t/unique-array-elements-in-painless-script/66519 "2016-11-18T10:49:02Z")

</div>

Hello! I'm looking for a way to use Update API with painless script to turn the following record: { "foo": \[6,3,4,4,8,4,2,1\] } into { "foo": \[1,2,3,4,6,8\] } In other words, I would like to extract unique ele…

---

## [Painless lowercase of a keyword field](https://discuss.elastic.co/t/painless-lowercase-of-a-keyword-field/132470)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 11:01am UTC](https://discuss.elastic.co/t/painless-lowercase-of-a-keyword-field/132470 "2018-05-18T11:01:23Z")

</div>

Hi All, I have a index with a field which is of type keyword. The data is stored in upper case. I want to use \_update\_by\_query and convert it to lowercase using Painless. Could you please help. sample document { "fi…

---

## [Logstash SSL File does not contain a valid private key with Beats](https://discuss.elastic.co/t/logstash-ssl-file-does-not-contain-a-valid-private-key-with-beats/173229)

<div class="topic-metadata">

**Author:** [@kharvey](https://discuss.elastic.co/u/kharvey)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 11:24pm UTC](https://discuss.elastic.co/t/logstash-ssl-file-does-not-contain-a-valid-private-key-with-beats/173229 "2019-03-20T23:24:42Z")

</div>

I am trying to setup filebeat to use SSL, but I keep getting errors on the logstash server. I keep receiving an error when I have my input on logstash set to Beats. java.lang.IllegalArgumentException: File does not con…

---

## [Elasticsearch delete\_by\_query 409 version conflict](https://discuss.elastic.co/t/elasticsearch-delete-by-query-409-version-conflict/174150)

<div class="topic-metadata">

**Author:** [@Rahul\_Kumar3](https://discuss.elastic.co/u/Rahul_Kumar3)\
**Replies:** 8\
**Last updated:** [March 30, 2019, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-delete-by-query-409-version-conflict/174150 "2019-03-30T07:48:50Z")

</div>

According to ES documentation document indexing/deletion happens as follows: Request received at one of the nodes. Request forwarded to the document's primary shard. The operation performed on the primary shard and par…

---

## [Dec 24th, 2017 - \[DE\]\[Elastic Stack\] Daten-Exploration mit Elasticsearch und Kibana](https://discuss.elastic.co/t/dec-24th-2017-de-elastic-stack-daten-exploration-mit-elasticsearch-und-kibana/113066)

<div class="topic-metadata">

**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 7:10am UTC](https://discuss.elastic.co/t/dec-24th-2017-de-elastic-stack-daten-exploration-mit-elasticsearch-und-kibana/113066 "2018-01-08T07:10:25Z")

</div>

Welche Informationen verbergen sich eigentlich hinter einer API? In der reinen Textausgabe sieht man oft den Wald vor lauter Bäumen nicht — eine sinnvolle Visualisierung muss her. Dazu kann man entweder selbst ein Progra…

---

## [Logstash basic grok field types description](https://discuss.elastic.co/t/logstash-basic-grok-field-types-description/109690)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 8:40am UTC](https://discuss.elastic.co/t/logstash-basic-grok-field-types-description/109690 "2017-11-30T08:40:39Z")

</div>

Hi, From this link, we can have a reference at the different types supported in Logstash grok pattern. I am listing down some basic types in it; USERNAME USER INT BASE10NUM NUMBER BASE16NUM BASE16FLOAT POSINT NONNEGIN…

---

## [Dec 9th, 2020: \[EN\] Don't let your Christmas tree Rust in a corner](https://discuss.elastic.co/t/dec-9th-2020-en-dont-let-your-christmas-tree-rust-in-a-corner/257377)

<div class="topic-metadata">

**Author:** [@swallez](https://discuss.elastic.co/u/swallez)\
**Replies:** 0\
**Last updated:** [December 9, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2020-en-dont-let-your-christmas-tree-rust-in-a-corner/257377 "2020-12-09T08:00:04Z")

</div>

Christmas trees are part of what makes this time of the year so unique and brings sparkles in the eyes of children and adults alike. But what do you do with the tree once the party’s over? The best is to make sure it’s r…

---

## [How to set passwords for built-in users with docker-compose setup](https://discuss.elastic.co/t/how-to-set-passwords-for-built-in-users-with-docker-compose-setup/198096)

<div class="topic-metadata">

**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 4:59pm UTC](https://discuss.elastic.co/t/how-to-set-passwords-for-built-in-users-with-docker-compose-setup/198096 "2019-09-12T16:59:49Z")

</div>

Hey there, I am running an Elasticsearch 7.3.0 cluster with three nodes (on three different machines) via a docker-compose setup. Here is my elasticsearch and kibana service defined in docker-compose.yml: services: e…

---

## [How to completely uninstall elasticsearch?](https://discuss.elastic.co/t/how-to-completely-uninstall-elasticsearch/35832)

<div class="topic-metadata">

**Author:** [@Connor0308](https://discuss.elastic.co/u/Connor0308)\
**Replies:** 3\
**Last updated:** [November 30, 2015, 8:07pm UTC](https://discuss.elastic.co/t/how-to-completely-uninstall-elasticsearch/35832 "2015-11-30T20:07:30Z")

</div>

I am trying to get the ELK stack installed on a CentOS 6.X VPS including WHM. As I needed to start again from scratch, I uninstalled the elasticsearch using the package manager. After doing so, my expectation would have …

---

## [Dec 9th, 2021: \[en\] Getting started with security enabled by default in three easy steps](https://discuss.elastic.co/t/dec-9th-2021-en-getting-started-with-security-enabled-by-default-in-three-easy-steps/289280)

<div class="topic-metadata">

**Author:** [@Fabio\_Busatto](https://discuss.elastic.co/u/Fabio_Busatto)\
**Replies:** 0\
**Last updated:** [December 9, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2021-en-getting-started-with-security-enabled-by-default-in-three-easy-steps/289280 "2021-12-09T08:00:45Z")

</div>

Elasticsearch 8.0 will come with security features enabled by default. This is a huge step forward to ensure that deployments are not unintentionally exposed to the world. We already saw that too many times in the past.…

---

## [📢 Announcing: Kibana MCP Server - Control Kibana using Claude AI](https://discuss.elastic.co/t/announcing-kibana-mcp-server-control-kibana-using-claude-ai/377757)

<div class="topic-metadata">

**Author:** [@azmatjan139](https://discuss.elastic.co/u/azmatjan139)\
**Replies:** 4\
**Last updated:** [February 12, 2026, 12:16am UTC](https://discuss.elastic.co/t/announcing-kibana-mcp-server-control-kibana-using-claude-ai/377757 "2026-02-12T00:16:33Z")

</div>

Project Introduction I'm excited to announce Kibana MCP Server, a new open-source implementation based on the Model Context Protocol (MCP) that allows any MCP-compatible AI client (such as Claude Desktop) to access and m…

---

## [How to integrate Service now with ELK stack?](https://discuss.elastic.co/t/how-to-integrate-service-now-with-elk-stack/91779)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 0\
**Last updated:** [July 4, 2017, 1:19pm UTC](https://discuss.elastic.co/t/how-to-integrate-service-now-with-elk-stack/91779 "2017-07-04T13:19:16Z")

</div>

Hi ELK Experts, I want to integrate ELK stack with Service now . So plan is to get data from service now (Ticketing tool ) and display in kiaban dashboard , like total p1,p2 tickets etc. Also I want to open a ticket fr…

---

## [The aggregations key is missing from the response error in Kibana dashboard](https://discuss.elastic.co/t/the-aggregations-key-is-missing-from-the-response-error-in-kibana-dashboard/114198)

<div class="topic-metadata">

**Author:** [@chayapon1219](https://discuss.elastic.co/u/chayapon1219)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 4:36pm UTC](https://discuss.elastic.co/t/the-aggregations-key-is-missing-from-the-response-error-in-kibana-dashboard/114198 "2018-01-08T16:36:32Z")

</div>

Hello, We have 1 kibana 6.0 and 1 elasticsearch 6.0 node. When we tried to view our dashboard with the Visual Builder visualize, sometime we got "The request for this panel failed. The aggregations key is missing from th…

---

## [Default Number Of Replicas for new indices](https://discuss.elastic.co/t/default-number-of-replicas-for-new-indices/22612)

<div class="topic-metadata">

**Author:** [@Matt\_Stibbs](https://discuss.elastic.co/u/Matt_Stibbs)\
**Replies:** 3\
**Last updated:** [April 3, 2017, 5:26pm UTC](https://discuss.elastic.co/t/default-number-of-replicas-for-new-indices/22612 "2017-04-03T17:26:55Z")

</div>

Hi there - I have searched all manner of online resources but can't seem to find an answer to: \*How do I change the default number of replicas for new indices in my ES cluster?\* I am running a single node clust…

---

## [Why is Logstash not part of Elastic Cloud?](https://discuss.elastic.co/t/why-is-logstash-not-part-of-elastic-cloud/119893)

<div class="topic-metadata">

**Author:** [@lfk](https://discuss.elastic.co/u/lfk)\
**Replies:** 1\
**Last updated:** [February 15, 2018, 12:07am UTC](https://discuss.elastic.co/t/why-is-logstash-not-part-of-elastic-cloud/119893 "2018-02-15T00:07:27Z")

</div>

I'm planning to start using ELK for logging and I've opened a trial Elastic Cloud account. However, I've noticed that Logstash is not included. I thought the idea behind using Elastic Cloud was so that we wouldn't need t…

---

## [Dec 17th, 2019: \[EN\] IoT: Christmas tree lights with Elasticsearch and Micro:bit](https://discuss.elastic.co/t/dec-17th-2019-en-iot-christmas-tree-lights-with-elasticsearch-and-micro-bit/211659)

<div class="topic-metadata">

**Author:** [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 9:00am UTC](https://discuss.elastic.co/t/dec-17th-2019-en-iot-christmas-tree-lights-with-elasticsearch-and-micro-bit/211659 "2019-12-17T09:00:06Z")

</div>

We are getting closer to Christmas and it's time to setup and decorate the Christmas tree. Lights are an important part of it and as geek Elastician we decided to try something different this year. What if Christmas tre…

---

## [Dec 9th, 2018: \[EN\]\[Elastic Stack\] Ubiquiti metrics in the Elastic Stack](https://discuss.elastic.co/t/dec-9th-2018-en-elastic-stack-ubiquiti-metrics-in-the-elastic-stack/159986)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 1\
**Last updated:** [December 9, 2018, 9:48am UTC](https://discuss.elastic.co/t/dec-9th-2018-en-elastic-stack-ubiquiti-metrics-in-the-elastic-stack/159986 "2018-12-09T09:48:24Z")

</div>

The Ubiquiti Unifi kit is pretty amazing for its price point. I use it extensively at home to replace a bunch of Google Wifi, power line and wifi extenders and other devices that just never really worked for me. Other th…

---

## [Change index name in Visualization](https://discuss.elastic.co/t/change-index-name-in-visualization/100394)

<div class="topic-metadata">

**Author:** [@Mandar\_Shinde](https://discuss.elastic.co/u/Mandar_Shinde)\
**Replies:** 6\
**Last updated:** [September 13, 2017, 7:48pm UTC](https://discuss.elastic.co/t/change-index-name-in-visualization/100394 "2017-09-13T19:48:47Z")

</div>

Hi All, Is there a better way to change the index name for a Visualization? Say I have created a Visualization with index name "test1" and now I have update the index name to "test2". One way I found is to go to Setti…

---

## [Dec 22nd, 2021 \[KO\] Eland: 데이터 분석을 위한 Python client](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954)

<div class="topic-metadata">

**Author:** [@Jihyun\_Jeong](https://discuss.elastic.co/u/Jihyun_Jeong)\
**Replies:** 0\
**Last updated:** [December 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954 "2021-12-22T08:00:48Z")

</div>

파이썬(python) 은 데이터 분석을 위한 가장 보편적인 프로그래밍 언어로 자리 잡았습니다. 데이터 분석을 위해 NumPy, Pandas, SciPy, scikit-learn 등 파이썬의 주요 패키지를 주로 사용합니다. 특히, 판다스(Pandas) 는 데이터 분석에 있어서 가장 많이 사용하는 피이썬 라이브러리 중 하나 입니다. 데이터를 분석할 때 NumPy(넘파이), Pandas(판다…

---

## [PHP support?](https://discuss.elastic.co/t/php-support/124053)

<div class="topic-metadata">

**Author:** [@jamiegood](https://discuss.elastic.co/u/jamiegood)\
**Replies:** 3\
**Last updated:** [March 15, 2018, 12:20pm UTC](https://discuss.elastic.co/t/php-support/124053 "2018-03-15T12:20:23Z")

</div>

Hi, we use Kibana/ELK etc. We are currently looking at new relic etc for APM. However if Elastic APM had support for PHP then it would be a no brainer for us. Any plans to support PHP in the near future?

---

## [Painless string to int](https://discuss.elastic.co/t/painless-string-to-int/172963)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 4:00pm UTC](https://discuss.elastic.co/t/painless-string-to-int/172963 "2019-03-19T16:00:02Z")

</div>

Hi All, Due to a mapping mistake I have a number field mapped as a string. I have updated my mapping already to integer so that is fixed. Due to the amount of indices and the amount of data is re-indexing not an option.…

---

## [How do you change the default number of shards?](https://discuss.elastic.co/t/how-do-you-change-the-default-number-of-shards/1508)

<div class="topic-metadata">

**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\
**Replies:** 5\
**Last updated:** [June 11, 2016, 12:43am UTC](https://discuss.elastic.co/t/how-do-you-change-the-default-number-of-shards/1508 "2016-06-11T00:43:51Z")

</div>

I'm trying to reduce my logstash shards per index down from 5 to 2. (Due to this conversation) I've downloaded my template. curl -XGET $ELK/\_template/logstash \> logstash-template.json Then I've modified the setting…

---

## [What is Greedydata](https://discuss.elastic.co/t/what-is-greedydata/122078)

<div class="topic-metadata">

**Author:** [@Srikanth\_FT](https://discuss.elastic.co/u/Srikanth_FT)\
**Replies:** 1\
**Last updated:** [March 1, 2018, 2:33pm UTC](https://discuss.elastic.co/t/what-is-greedydata/122078 "2018-03-01T14:33:29Z")

</div>

Hi, Can someone explain me what is greedydata. Best Mudireddy

---

## [A watch alert example based on two different searches using CHAIN input and Painless script condition](https://discuss.elastic.co/t/a-watch-alert-example-based-on-two-different-searches-using-chain-input-and-painless-script-condition/113829)

<div class="topic-metadata">

**Author:** [@joedissmeyer](https://discuss.elastic.co/u/joedissmeyer)\
**Replies:** 4\
**Last updated:** [January 4, 2018, 12:22pm UTC](https://discuss.elastic.co/t/a-watch-alert-example-based-on-two-different-searches-using-chain-input-and-painless-script-condition/113829 "2018-01-04T12:22:51Z")

</div>

Good afternoon! I wanted to share this solution with the community. This is an example of a watch where you need to run two searches against the same data index looking for two different strings (such as "ERROR" and "TI…

---

## [Dec 22nd, 2017: \[EN\]\[X-Pack\] I lost/forgot the "elastic" user password! Am I locked out forever?](https://discuss.elastic.co/t/dec-22nd-2017-en-x-pack-i-lost-forgot-the-elastic-user-password-am-i-locked-out-forever/110075)

<div class="topic-metadata">

**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\
**Replies:** 0\
**Last updated:** [December 22, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-22nd-2017-en-x-pack-i-lost-forgot-the-elastic-user-password-am-i-locked-out-forever/110075 "2017-12-22T00:00:03Z")

</div>

Situation: You are using X-Pack Security and you lost/forgot the "elastic" superuser password. Don't panic! You can workaround this problem by adding a temporary superuser user: Provision a new coordinating-only node…

---

## [Elasticsearch 패치시 간략한 팁 & 인덱스를 하나씩 날짜의 역순으로 오픈하는 스크립트](https://discuss.elastic.co/t/elasticsearch/24766)

<div class="topic-metadata">

**Author:** [@godway](https://discuss.elastic.co/u/godway)\
**Replies:** 0\
**Last updated:** [July 2, 2015, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch/24766 "2015-07-02T05:40:29Z")

</div>

어제 meetup 에서 cluster 재기동시에 replica 를 재사용하지 않게 될때 부하가 너무 많이 걸린다고 하신 분이 계셨습니다. 저도 동일한 문제를 겪고 있습니다. 재기동시 방법을 조금이나마 더 안전하게 하는 방법을 공유하려고 합니다. 오늘 날짜에 대한 인덱싱 작업을 멈춥니다. cluster 를 shutdown 하기 전에 오늘 날짜의 인덱스를 제외하고 모든 인덱스를 clos…

---

## [What is the difference between elasticsearch-oss and elasticsearch images?](https://discuss.elastic.co/t/what-is-the-difference-between-elasticsearch-oss-and-elasticsearch-images/145372)

<div class="topic-metadata">

**Author:** [@usherfu](https://discuss.elastic.co/u/usherfu)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 12:23pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-elasticsearch-oss-and-elasticsearch-images/145372 "2018-08-21T12:23:42Z")

</div>

hi, I saw there are two different docker image for elasticsearch: docker.elastic.co/elasticsearch/elasticsearch docker.elastic.co/elasticsearch/elasticsearch-oss Is there any document explaining the difference? Than…

---

## [S3 output plugin - no way to change the file names](https://discuss.elastic.co/t/s3-output-plugin-no-way-to-change-the-file-names/75425)

<div class="topic-metadata">

**Author:** [@FlorinAndrei](https://discuss.elastic.co/u/FlorinAndrei)\
**Replies:** 0\
**Last updated:** [February 17, 2017, 2:19am UTC](https://discuss.elastic.co/t/s3-output-plugin-no-way-to-change-the-file-names/75425 "2017-02-17T02:19:29Z")

</div>

logstash-5.2.1 on Ubuntu 16.04 s3 { access\_key\_id =\> "XXXXXXXXXXXXXXXX" secret\_access\_key =\> "XXXXXXXXXXXXXXXXX" region =\> "us-west-2" bucket =\> "some-bucket" time\_file =\> 5 size\_file =\> 1000000000000 pre…

[Previous page](https://discuss.elastic.co/top.md?page=253&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=255&per_page=50&period=all)
