# Top **URL:** https://discuss.elastic.co/top.md?page=257&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 258 --- ## [Match an empty field in kibana](https://discuss.elastic.co/t/match-an-empty-field-in-kibana/178002)
**Author:** [@desai\_sheetal28](https://discuss.elastic.co/u/desai_sheetal28)\ **Replies:** 3\ **Last updated:** [April 24, 2019, 3:18pm UTC](https://discuss.elastic.co/t/match-an-empty-field-in-kibana/178002 "2019-04-24T15:18:03Z")
Hi I am trying to query kibana for empty value i.e. in the scenario where the field is present but the value sent is empty. I used the operator "is" and matched it with different values such as ''/'\*' but that returns 0… --- ## [Elastic APM for Meteor.JS](https://discuss.elastic.co/t/elastic-apm-for-meteor-js/186669)
**Author:** [@kschingiz](https://discuss.elastic.co/u/kschingiz)\ **Replies:** 2\ **Last updated:** [June 23, 2019, 11:38am UTC](https://discuss.elastic.co/t/elastic-apm-for-meteor-js/186669 "2019-06-23T11:38:48Z")
Hi everybody! I am glad to announce today I have completed developing Elastic APM for Meteor.js. It can monitor: Pub/sub Meteor calls Async executions Database queries Cursor methods Exceptions: meteor method/pub-sub … --- ## [\[Feedback wanted\] New time comparison feature in APM 7.13](https://discuss.elastic.co/t/feedback-wanted-new-time-comparison-feature-in-apm-7-13/274146)
**Author:** [@casper](https://discuss.elastic.co/u/casper)\ **Replies:** 3\ **Last updated:** [June 4, 2021, 2:39pm UTC](https://discuss.elastic.co/t/feedback-wanted-new-time-comparison-feature-in-apm-7-13/274146 "2021-06-04T14:39:42Z")
Hello community :wave: The entire team is excited to introduce time comparison into the APM Service overview in 7.13 and we'd love to hear what you think of it? Here's a short summary of what it's all about; Time c… --- ## [Unable to retrieve version information from Elasticsearch node](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-node/288717)
**Author:** [@slashlinux](https://discuss.elastic.co/u/slashlinux)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 1:39pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-node/288717 "2021-11-09T13:39:33Z")
After I've enabled the xpack security for integrating the Keycloak SSO on Kibana/Elasticsearch, now my kibana says - Kibana server is not ready yet and the kibana logs showing :slight\_smile: {"type":"log","@timestamp":"… --- ## [How do I access term vector in painless scripting?](https://discuss.elastic.co/t/how-do-i-access-term-vector-in-painless-scripting/84579)
**Author:** [@Noppanit\_Charassinvi](https://discuss.elastic.co/u/Noppanit_Charassinvi)\ **Replies:** 0\ **Last updated:** [May 4, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-do-i-access-term-vector-in-painless-scripting/84579 "2017-05-04T14:35:48Z")
We're trying to replicate this ES plugin https://github.com/MLnick/elasticsearch-vector-scoring. The reason is AWS ES doesn't allow any custom plugin to be installed. The plugin is just doing dot product and cosine simil… --- ## [Uninstall elsticsearch on centOS](https://discuss.elastic.co/t/uninstall-elsticsearch-on-centos/42864)
**Author:** [@Vatsal\_Patel](https://discuss.elastic.co/u/Vatsal_Patel)\ **Replies:** 4\ **Last updated:** [February 26, 2016, 9:05pm UTC](https://discuss.elastic.co/t/uninstall-elsticsearch-on-centos/42864 "2016-02-26T21:05:14Z")
Hi, I have install elasticsearch 2.2.0 but then i realize that there is not couch-base transport plugin for this version.How can i uninstall this version so i can install ES-2.1.1. Thank you. I have removed all the dir… --- ## [🎉 What’s new in Elastic 8.19/9.1](https://discuss.elastic.co/t/what-s-new-in-elastic-8-19-9-1/380552)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [July 29, 2025, 4:37pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-19-9-1/380552 "2025-07-29T16:37:13Z")
:tada: What’s new in Elastic 8.19/9.1 Elastic 9.1 and 8.19 are here! We have extended the 8.x series one final time to 8.19, so those who are still waiting to upgrade to 9.x can already benefit from the new features in 9… --- ## [Dec 6th, 2023: \[EN\] "He's making a list 🎶" and now needs to sort it — with Elasticsearch](https://discuss.elastic.co/t/dec-6th-2023-en-hes-making-a-list-and-now-needs-to-sort-it-with-elasticsearch/348128)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 6, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2023-en-hes-making-a-list-and-now-needs-to-sort-it-with-elasticsearch/348128 "2023-12-06T08:00:49Z")
While you might be picturing Santa Claus when singing this song, European folklore, particularly in the Alpine regions, has the two legendary figures Saint Nicholas and Krampus. Saint Nicholas, symbolizing generosity … --- ## [Unable to start elasticsearch on CentOs](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/64107)
**Author:** [@umir](https://discuss.elastic.co/u/umir)\ **Replies:** 7\ **Last updated:** [October 27, 2016, 9:36am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/64107 "2016-10-27T09:36:17Z")
initially elastic search was working but due to some update its stop working and giving such error message while checking status. systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded… --- ## [\[ATTENTION\] Logstash 6.0.0 - Known Issue Indexing to Elasticsearch 6.0](https://discuss.elastic.co/t/attention-logstash-6-0-0-known-issue-indexing-to-elasticsearch-6-0/108789)
**Author:** [@alvin](https://discuss.elastic.co/u/alvin)\ **Replies:** 0\ **Last updated:** [November 22, 2017, 8:16pm UTC](https://discuss.elastic.co/t/attention-logstash-6-0-0-known-issue-indexing-to-elasticsearch-6-0/108789 "2017-11-22T20:16:15Z")
This issue affects Logstash 6.0.0 users indexing to Elasticsearch 6.0 when multiple “type” field values are present in Logstash events. It affects both new users on Logstash 6.0.0, and existing users upgrading to Logstas… --- ## [How to create a string scripted field with else if condition?](https://discuss.elastic.co/t/how-to-create-a-string-scripted-field-with-else-if-condition/79845)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [March 24, 2017, 1:10pm UTC](https://discuss.elastic.co/t/how-to-create-a-string-scripted-field-with-else-if-condition/79845 "2017-03-24T13:10:14Z")
Hi, I am using ELK GA 5.0.0 . In Kibana, I have created a string type scripted field 'err\_type\` like below; if (doc\['error'\].value == 'NONE') { return 'typea'; }else if (doc\['error'\].value == 'ERRX') { return … --- ## [Automatically creating index versions and alias](https://discuss.elastic.co/t/automatically-creating-index-versions-and-alias/26819)
**Author:** [@marcelog](https://discuss.elastic.co/u/marcelog)\ **Replies:** 0\ **Last updated:** [August 4, 2015, 5:09pm UTC](https://discuss.elastic.co/t/automatically-creating-index-versions-and-alias/26819 "2015-08-04T17:09:40Z")
Hello, As described here in Index Aliases and Zero Downtime, we're creating our indices in the form "thing-2015\_08\_v1" and then we access them through an alias like "thing-2015\_08", so we can later on reindex or have r… --- ## [A question about how to show the average rate per second](https://discuss.elastic.co/t/a-question-about-how-to-show-the-average-rate-per-second/92728)
**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\ **Replies:** 5\ **Last updated:** [August 8, 2017, 8:47am UTC](https://discuss.elastic.co/t/a-question-about-how-to-show-the-average-rate-per-second/92728 "2017-08-08T08:47:52Z")
Hi, I have a number of documents, each document with information of number of bytes has been transferred. Each document also has its timestamp. I would like to show a metric that average the total bytes by time range… --- ## [How do I increase or reduce the shard count of an existing index?](https://discuss.elastic.co/t/how-do-i-increase-or-reduce-the-shard-count-of-an-existing-index/242704)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 7:37am UTC](https://discuss.elastic.co/t/how-do-i-increase-or-reduce-the-shard-count-of-an-existing-index/242704 "2020-07-27T07:37:17Z")
Traditionally, once you created an index with a given number of primary shards, it was set until you reindexed your data. That meant that if you hit the limit of documents in a shard, you might have been caught in a bit … --- ## [Sorting a terms aggregation by keys case insensitive but display the original value](https://discuss.elastic.co/t/sorting-a-terms-aggregation-by-keys-case-insensitive-but-display-the-original-value/270087)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [April 14, 2021, 8:05am UTC](https://discuss.elastic.co/t/sorting-a-terms-aggregation-by-keys-case-insensitive-but-display-the-original-value/270087 "2021-04-14T08:05:31Z")
When you normalize a keyword field with a lowercase normalizer it becomes case insensitive but what if you want to display the "original" text? Here is a way to do that by using a top\_hits aggregation to fetch the text … --- ## [Logstash Pipeline Tester 2.0 - Now more user friendly](https://discuss.elastic.co/t/logstash-pipeline-tester-2-0-now-more-user-friendly/319984)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 0\ **Last updated:** [November 28, 2022, 10:05pm UTC](https://discuss.elastic.co/t/logstash-pipeline-tester-2-0-now-more-user-friendly/319984 "2022-11-28T22:05:57Z")
Hi there! A few years ago I wrote a a tool for testing logstash pipelines. This year I did a complete redesign of the web interface using Material UI making it more user friendly. Basically it's a tool that: Gives yo… --- ## [ElasticSearch ES\_TMPDIR issue](https://discuss.elastic.co/t/elasticsearch-es-tmpdir-issue/216953)
**Author:** [@Rahul.Bali](https://discuss.elastic.co/u/Rahul.Bali)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-es-tmpdir-issue/216953 "2020-01-29T07:57:04Z")
Facing issue with ElasticSearch on WIndows Server 2016 Stranded When i check the TEMP folder there is a folder named \*C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\2\* but there is no folder named like \*\*C:\\Users\\ADMINI~1\\AppDa… --- ## [Filter messages that contains some specific text](https://discuss.elastic.co/t/filter-messages-that-contains-some-specific-text/288853)
**Author:** [@dardar4](https://discuss.elastic.co/u/dardar4)\ **Replies:** 4\ **Last updated:** [November 14, 2021, 7:51am UTC](https://discuss.elastic.co/t/filter-messages-that-contains-some-specific-text/288853 "2021-11-14T07:51:47Z")
Hi all we got a lot of logs that look like that: "Health check took 00:00:00.0057867 and resulted with status: Healthy" "Health check took 00:00:00.0035042 and resulted with status: Healthy" Is there a way to tell ki… --- ## [Pagination in aggregation](https://discuss.elastic.co/t/pagination-in-aggregation/79423)
**Author:** [@rijvan\_khan\_mogia](https://discuss.elastic.co/u/rijvan_khan_mogia)\ **Replies:** 1\ **Last updated:** [March 21, 2017, 2:59pm UTC](https://discuss.elastic.co/t/pagination-in-aggregation/79423 "2017-03-21T14:59:05Z")
How to Use pagination (size and from) in elastic search aggregation? --- ## [How could I set index & type at logstash?](https://discuss.elastic.co/t/how-could-i-set-index-type-at-logstash/985)
**Author:** [@Ducheol\_Kim](https://discuss.elastic.co/u/Ducheol_Kim)\ **Replies:** 4\ **Last updated:** [May 21, 2015, 2:29pm UTC](https://discuss.elastic.co/t/how-could-i-set-index-type-at-logstash/985 "2015-05-21T14:29:38Z")
Hi All. I'm switching current river to logstash and want to keep the same mapping that I used at river. I test logstash to set in the logstash config and it work fine.But, how I could set type ? output { elastics… --- ## [Escaping Special Characters in Wildcard Query](https://discuss.elastic.co/t/escaping-special-characters-in-wildcard-query/5819)
**Author:** [@dawi](https://discuss.elastic.co/u/dawi)\ **Replies:** 5\ **Last updated:** [November 9, 2011, 2:22pm UTC](https://discuss.elastic.co/t/escaping-special-characters-in-wildcard-query/5819 "2011-11-09T14:22:43Z")
Hi, my question is how to escape special characters in a wildcard query. The elasticsearch documentation says that "The wildcard query maps to lucene WildcardQuery". http://www.elasticsearch.org/guide/reference/… --- ## [7.12.1 Security Update](https://discuss.elastic.co/t/7-12-1-security-update/271433)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 7:28pm UTC](https://discuss.elastic.co/t/7-12-1-security-update/271433 "2021-04-27T19:28:03Z")
Kibana denial of service issue (ESA-2021-10) A denial of service vulnerability was found in the Kibana webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webh… --- ## [Kibana Filter for a specific time range](https://discuss.elastic.co/t/kibana-filter-for-a-specific-time-range/105169)
**Author:** [@kavierkoo](https://discuss.elastic.co/u/kavierkoo)\ **Replies:** 2\ **Last updated:** [October 26, 2017, 2:13am UTC](https://discuss.elastic.co/t/kibana-filter-for-a-specific-time-range/105169 "2017-10-26T02:13:34Z")
Hi, I am new to Elastic that are trying it out, i am looking forward to generate report to display windows users logon after office hour via elastic cloud with only 1 winlogbeat in VM. However i am currently stuck with… --- ## [Multi Index Search - Multiple Queries within the query](https://discuss.elastic.co/t/multi-index-search-multiple-queries-within-the-query/119564)
**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\ **Replies:** 4\ **Last updated:** [February 13, 2018, 4:00am UTC](https://discuss.elastic.co/t/multi-index-search-multiple-queries-within-the-query/119564 "2018-02-13T04:00:32Z")
Hello, I was wondering if there was a way to do one call with multiple indexes but also have individual queries for each index? Currently i am specifying all of my indexes that i need above the body \> index:\[index1, in… --- ## [Email-Only Interaction with the Forums](https://discuss.elastic.co/t/email-only-interaction-with-the-forums/106)
**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\ **Replies:** 0\ **Last updated:** [May 1, 2015, 12:22pm UTC](https://discuss.elastic.co/t/email-only-interaction-with-the-forums/106 "2015-05-01T12:22:24Z")
Some users would prefer to interact with the forums solely via email and not via the web interface. No worries, we've got you covered. You can decide how often to receive email and from which categories in your user pr… --- ## [Dec 19th, 2019 \[EN\]\[Elasticsearch\] Simplifying Ingest Pipelines with the new Enrich Processor](https://discuss.elastic.co/t/dec-19th-2019-en-elasticsearch-simplifying-ingest-pipelines-with-the-new-enrich-processor/211026)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2019-en-elasticsearch-simplifying-ingest-pipelines-with-the-new-enrich-processor/211026 "2019-12-19T08:00:03Z")
When ingesting data through a regular Elasticsearch ingest pipeline (e.g. with dissect, rename, or remove processors) we can now add an Enrich Processor. This allows us to do lookups on other Elasticsearch’s indices and… --- ## [Possible to set default refresh\_interval for all new indices?](https://discuss.elastic.co/t/possible-to-set-default-refresh-interval-for-all-new-indices/57993)
**Author:** [@jstultz](https://discuss.elastic.co/u/jstultz)\ **Replies:** 2\ **Last updated:** [August 15, 2016, 2:10am UTC](https://discuss.elastic.co/t/possible-to-set-default-refresh-interval-for-all-new-indices/57993 "2016-08-15T02:10:26Z")
After running into some scaiing problems with our Elasticsearch cluster (running as part of an ELK stack), I read up on refreshes, and in particular, the refresh interval. I set it from 1s to 30s (which should be totally… --- ## [Dec 13th, 2021: \[en\] Accessibility in Kibana](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579)
**Author:** [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579 "2021-12-13T08:00:00Z")
Web Accessibility When was the last time you visited a website and got frustrated because you had trouble using it? Maybe the site was using WebGL technology that your browser didn’t support, you couldn’t read its text d… --- ## [Elastic .NET Agent and Java Agent](https://discuss.elastic.co/t/elastic-net-agent-and-java-agent/112958)
**Author:** [@AjayOptym](https://discuss.elastic.co/u/AjayOptym)\ **Replies:** 1\ **Last updated:** [December 22, 2017, 8:29am UTC](https://discuss.elastic.co/t/elastic-net-agent-and-java-agent/112958 "2017-12-22T08:29:50Z")
Hello, Any tentative plan for Elastic APM .NET Agent / Java Agent? Regards, AM --- ## [What is difference between master node and data node etc](https://discuss.elastic.co/t/what-is-difference-between-master-node-and-data-node-etc/109896)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 5\ **Last updated:** [December 1, 2017, 9:32am UTC](https://discuss.elastic.co/t/what-is-difference-between-master-node-and-data-node-etc/109896 "2017-12-01T09:32:37Z")
Hi everyone, I have refer the website: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#data-node But I still have a question that what are the difference between master node, data node… --- ## [Parsing audit log SAP](https://discuss.elastic.co/t/parsing-audit-log-sap/271373)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 12:41pm UTC](https://discuss.elastic.co/t/parsing-audit-log-sap/271373 "2021-04-27T12:41:20Z")
hello team, there was a need to analyze SAP audit logs. A filebeat was installed on the machines to transfer logs from to logstash. Format of audit logs - a file is created every day and data is written in one line (me… --- ## [Using ES 6.3.0: Where is the RequestOptions class?](https://discuss.elastic.co/t/using-es-6-3-0-where-is-the-requestoptions-class/136758)
**Author:** [@gmarshall56](https://discuss.elastic.co/u/gmarshall56)\ **Replies:** 3\ **Last updated:** [July 2, 2018, 3:13pm UTC](https://discuss.elastic.co/t/using-es-6-3-0-where-is-the-requestoptions-class/136758 "2018-07-02T15:13:52Z")
I am trying to migrate my code to the ES version 6.30. According to this documentation page: ... In my java class I am to instantiate a IndexResponse opject like this: IndexResponse response = client.index(request, … --- ## [Elasticsearch service failing](https://discuss.elastic.co/t/elasticsearch-service-failing/93447)
**Author:** [@wdennis](https://discuss.elastic.co/u/wdennis)\ **Replies:** 3\ **Last updated:** [July 18, 2017, 2:37am UTC](https://discuss.elastic.co/t/elasticsearch-service-failing/93447 "2017-07-18T02:37:28Z")
Hi all, ELK n00b here, with a problem that I need someone more knowledgable's assistance in solving... I have a single-node v5.4.1 ELK cluster running on Ubuntu 16.04.2. I went to use Kibana after a long time, and Kiban… --- ## [Cannot Access Kibana remotely](https://discuss.elastic.co/t/cannot-access-kibana-remotely/45363)
**Author:** [@eso](https://discuss.elastic.co/u/eso)\ **Replies:** 2\ **Last updated:** [September 28, 2016, 1:32am UTC](https://discuss.elastic.co/t/cannot-access-kibana-remotely/45363 "2016-09-28T01:32:21Z")
I set up Kibana on a Windows server to run locally (http://127.0.0.1:5601). However, when I tried to access Kibana remotely from another Windows machine by entering (http://server:5601/), it failed (This page can not be … --- ## [Scripted fields vs runtime fields](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 10:57pm UTC](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962 "2021-02-11T22:57:45Z")
Hello, i have read the introduction of runtime fields under And i'm wondering where the differences to the "old" scripted fields are beside the ability define them in a mapping and not only in a query? Is it simply a… --- ## [Best practice index naming](https://discuss.elastic.co/t/best-practice-index-naming/38007)
**Author:** [@Igor\_Samusenko](https://discuss.elastic.co/u/Igor_Samusenko)\ **Replies:** 1\ **Last updated:** [December 27, 2015, 3:03pm UTC](https://discuss.elastic.co/t/best-practice-index-naming/38007 "2015-12-27T15:03:28Z")
Hi everyone, I started learning about Elasticsearch last week and I found it great. I noticed that by default Logstash ( yes we want to use elastic for storing logs, but I guess we will go further than storing logs) na… --- ## [What does the field in Grok "message" do?](https://discuss.elastic.co/t/what-does-the-field-in-grok-message-do/2253)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 5\ **Last updated:** [June 10, 2015, 3:48am UTC](https://discuss.elastic.co/t/what-does-the-field-in-grok-message-do/2253 "2015-06-10T03:48:47Z")
Hi first post and new to the ELK system. So I am working on parsing through log4j logs and I cannot find what is the purpose of the "message" field. For example: filter { grok { match =\> {"message =\> I am so con… --- ## [Dec 4th, 2019: \[EN\] Explore Elastic Common Schema (ECS) with Elasticsearch and Kibana](https://discuss.elastic.co/t/dec-4th-2019-en-explore-elastic-common-schema-ecs-with-elasticsearch-and-kibana/209867)
**Author:** [@webmat](https://discuss.elastic.co/u/webmat)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2019-en-explore-elastic-common-schema-ecs-with-elasticsearch-and-kibana/209867 "2019-12-04T08:00:04Z")
Introduction Lire la version française Many resources are already available to learn about ECS. Of course, there's the official documentation. Some users also use the CSV export, located at generated/csv/fields.csv. Thi… --- ## [🎉 Elastic Stack 8.8 released](https://discuss.elastic.co/t/elastic-stack-8-8-released/334691)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 1, 2023, 8:45am UTC](https://discuss.elastic.co/t/elastic-stack-8-8-released/334691 "2023-06-01T08:45:33Z")
:tada: What’s new in Elastic 8.8 Building modern search experiences, observing distributed systems, and protecting against complex threats has never been easier with Elastic. Discover the broad set of new capabilities in… --- ## [Is i possible to set kibana to use multiple elasticsearch nodes?](https://discuss.elastic.co/t/is-i-possible-to-set-kibana-to-use-multiple-elasticsearch-nodes/66475)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [November 19, 2016, 1:26am UTC](https://discuss.elastic.co/t/is-i-possible-to-set-kibana-to-use-multiple-elasticsearch-nodes/66475 "2016-11-19T01:26:59Z")
Hi, I have setup a 3 node elasticsearch cluster with setting; node.master: true node.data: true I have 3 IPs 192.168.0.1, 192.168.0.2 and 192.168.0.3, and the ports allocated for elasticsearch are 9200, 9210 and 922… --- ## [Get Difference between two date field with ruby filter](https://discuss.elastic.co/t/get-difference-between-two-date-field-with-ruby-filter/97100)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 1:40am UTC](https://discuss.elastic.co/t/get-difference-between-two-date-field-with-ruby-filter/97100 "2017-08-16T01:40:48Z")
Hi All I have been trying the ruby code to get the difference between 2 dates Start Date : 2017-06-13T01:17:07.000Z End Date : 2017-07-13T01:17:10.000Z I need difference between these 2 dates. I have dried this but i… --- ## [Howto Use Elasticsearch with PiHole DNS](https://discuss.elastic.co/t/howto-use-elasticsearch-with-pihole-dns/157240)
**Author:** [@FredM](https://discuss.elastic.co/u/FredM)\ **Replies:** 1\ **Last updated:** [November 18, 2018, 7:40pm UTC](https://discuss.elastic.co/t/howto-use-elasticsearch-with-pihole-dns/157240 "2018-11-18T19:40:04Z")
PiHole is a free utility for monitoring and blocking adware and malware, and also in providing you with insight on the type of traffic on your network. Getting this data into Elasticsearch is the purpose for our post : … --- ## [Process Ghosting Tool - 64 bits Only!](https://discuss.elastic.co/t/process-ghosting-tool-64-bits-only/276826)
**Author:** [@Iker](https://discuss.elastic.co/u/Iker)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 11:32pm UTC](https://discuss.elastic.co/t/process-ghosting-tool-64-bits-only/276826 "2021-06-24T23:32:27Z")
Based in the excellent article published by Gabriel Landau (Process Ghosting a New Executable Image Tampering Attack, I have developed a tool for Process Ghosting, this should be of help for the detection of such behavio… --- ## [Timelion: Error: Max buckets exceeded: 10080 of 2000 allowed. Choose a larger interval or a shorter time span](https://discuss.elastic.co/t/timelion-error-max-buckets-exceeded-10080-of-2000-allowed-choose-a-larger-interval-or-a-shorter-time-span/112502)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [December 19, 2017, 8:39pm UTC](https://discuss.elastic.co/t/timelion-error-max-buckets-exceeded-10080-of-2000-allowed-choose-a-larger-interval-or-a-shorter-time-span/112502 "2017-12-19T20:39:37Z")
My Elastic Stack environment: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.4 (Maipo) # rpm -q elasticsearch kibana metricbeat elasticsearch-6.1.0-1.noarch kibana-6.1.0-1.x86\_64 metricbeat-6.1.0-1… --- ## [Query much faster against timestamp in seconds than milliseconds](https://discuss.elastic.co/t/query-much-faster-against-timestamp-in-seconds-than-milliseconds/58767)
**Author:** [@pricj004](https://discuss.elastic.co/u/pricj004)\ **Replies:** 5\ **Last updated:** [December 8, 2016, 10:56am UTC](https://discuss.elastic.co/t/query-much-faster-against-timestamp-in-seconds-than-milliseconds/58767 "2016-12-08T10:56:39Z")
I have a query which is significantly faster if I run it against a field containing a timestamp in seconds instead of milliseconds. Query 1- uses timestampMilliseconds, averages 500ms to execute: { index: 'events'… --- ## [Filebeats - Multiple and different file types](https://discuss.elastic.co/t/filebeats-multiple-and-different-file-types/35995)
**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 5:13am UTC](https://discuss.elastic.co/t/filebeats-multiple-and-different-file-types/35995 "2015-12-03T05:13:54Z")
I am trying to figure out how to deal with different types of log files using Filebeats as the the forwarder. Basically I have several different log files I want to monitor, and then I actually want to put an extra f… --- ## [Which side of CAP theorem Elasticsearch satisfy?](https://discuss.elastic.co/t/which-side-of-cap-theorem-elasticsearch-satisfy/177810)
**Author:** [@adnanbutt050](https://discuss.elastic.co/u/adnanbutt050)\ **Replies:** 1\ **Last updated:** [April 22, 2019, 11:52am UTC](https://discuss.elastic.co/t/which-side-of-cap-theorem-elasticsearch-satisfy/177810 "2019-04-22T11:52:12Z")
Hello Everyone, I hope everyone is fine, I'm new to this Elasticsearch and I just wanted to know which side of CAP theorem Elasticsearch satisfy?. I am very thankful to you. Kind Regards, adnan --- ## [Dashboard search parameter via URL](https://discuss.elastic.co/t/dashboard-search-parameter-via-url/84385)
**Author:** [@jameshcooper](https://discuss.elastic.co/u/jameshcooper)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 6:41pm UTC](https://discuss.elastic.co/t/dashboard-search-parameter-via-url/84385 "2017-05-03T18:41:35Z")
Greetings, I am loading a dashboard via an iFrame using the 'Share saved dashboard'. How can I pass a search parameter in via the URL? I can see how to do this using a 'Share Snapshot' though is this possible with th… --- ## [How to construct geo\_point field from separate fields of latitude and longitude for Kibana 5.4?](https://discuss.elastic.co/t/how-to-construct-geo-point-field-from-separate-fields-of-latitude-and-longitude-for-kibana-5-4/91755)
**Author:** [@monai](https://discuss.elastic.co/u/monai)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 12:59am UTC](https://discuss.elastic.co/t/how-to-construct-geo-point-field-from-separate-fields-of-latitude-and-longitude-for-kibana-5-4/91755 "2017-07-05T00:59:40Z")
From input data I have 2 fields of location - latitude and longitude. How can I construct a geo\_point location field to create map visualization in logstash config (version 5.4)? Thank you. Updated - Summarize of the … --- ## [Encryption Options](https://discuss.elastic.co/t/encryption-options/178832)
**Author:** [@dbarros](https://discuss.elastic.co/u/dbarros)\ **Replies:** 7\ **Last updated:** [April 30, 2019, 2:45am UTC](https://discuss.elastic.co/t/encryption-options/178832 "2019-04-30T02:45:46Z")
I have a few questions around what encryption options are available in Elasticsearch: • Does Elasticsearch offer encryption of data at rest (in other words, of all the data it is storing)? • Does it offer encryption at… [Previous page](https://discuss.elastic.co/top.md?page=256&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=258&per_page=50&period=all)