# Top **URL:** https://discuss.elastic.co/top.md?page=272&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 273 --- ## [Visualization with unique count of fields combination](https://discuss.elastic.co/t/visualization-with-unique-count-of-fields-combination/191107)
**Author:** [@henrix](https://discuss.elastic.co/u/henrix)\ **Replies:** 2\ **Last updated:** [July 18, 2019, 5:20pm UTC](https://discuss.elastic.co/t/visualization-with-unique-count-of-fields-combination/191107 "2019-07-18T17:20:15Z")
Hi everyone, I'm trying to create a visualization of a cardinality aggregation on two fields but haven't found a proper way to do it yet. I'm fairly new to the Elastic stack so bear with me :slight\_smile: I have this q… --- ## [How do people typically handle shard failures in their results?](https://discuss.elastic.co/t/how-do-people-typically-handle-shard-failures-in-their-results/18176)
**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\ **Replies:** 5\ **Last updated:** [July 4, 2014, 9:38am UTC](https://discuss.elastic.co/t/how-do-people-typically-handle-shard-failures-in-their-results/18176 "2014-07-04T09:38:11Z")
If I understand correctly, we can get an OK response from elastic (ie no error) but if there are shard failures in the response, it potentially means that results are incomplete/incorrect. From my observation, we can… --- ## [Logtrail : Kibana plugin to view, search and tail logs in realtime](https://discuss.elastic.co/t/logtrail-kibana-plugin-to-view-search-and-tail-logs-in-realtime/60489)
**Author:** [@sivasamyk](https://discuss.elastic.co/u/sivasamyk)\ **Replies:** 8\ **Last updated:** [December 12, 2016, 3:28pm UTC](https://discuss.elastic.co/t/logtrail-kibana-plugin-to-view-search-and-tail-logs-in-realtime/60489 "2016-12-12T15:28:14Z")
All, Good day! I have written a Kibana plugin to view, search and tail logs in developer/sysadmin friendly interface ( inspired by Papertrailapp). Installation and configuration instructions is at https://github.c… --- ## [How to show percentage and counts (both at the same time) in bar graphs](https://discuss.elastic.co/t/how-to-show-percentage-and-counts-both-at-the-same-time-in-bar-graphs/204398)
**Author:** [@Ssingh12](https://discuss.elastic.co/u/Ssingh12)\ **Replies:** 8\ **Last updated:** [October 25, 2019, 5:42am UTC](https://discuss.elastic.co/t/how-to-show-percentage-and-counts-both-at-the-same-time-in-bar-graphs/204398 "2019-10-25T05:42:13Z")
Hello, I am new to Kibana. I am using Kibana 7.4. and I am unable to figure out a way to show percentage and count (both) on every bar of my simple bar graph. I could show either the percentage or the count on the bar c… --- ## [Dec 15th, 2023: \[EN\] Mapping Christmas places with Elasticsearch and MapLibre](https://discuss.elastic.co/t/dec-15th-2023-en-mapping-christmas-places-with-elasticsearch-and-maplibre/346727)
**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Replies:** 0\ **Last updated:** [December 15, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2023-en-mapping-christmas-places-with-elasticsearch-and-maplibre/346727 "2023-12-15T08:00:37Z")
This post is also available in Spanish Introduction One of the most well-known security practices is to never expose your Elasticsearch cluster to the Internet. But we are in the Christmas season, and we like to be f… --- ## [Dec 10th, 2025: \[EN\] A new color palette for data visualisation in Kibana - how and why we created it](https://discuss.elastic.co/t/dec-10th-2025-en-a-new-color-palette-for-data-visualisation-in-kibana-how-and-why-we-created-it/383837)
**Author:** [@Giovanni\_Magni](https://discuss.elastic.co/u/Giovanni_Magni)\ **Replies:** 0\ **Last updated:** [December 10, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2025-en-a-new-color-palette-for-data-visualisation-in-kibana-how-and-why-we-created-it/383837 "2025-12-10T08:00:34Z")
A new color palette for data visualisation was tested in advance in Serverless in November 2024 and introduced as the default settings in Kibana 9.0 in April 2025. This is part of a larger effort to visually refresh … --- ## [Timelion -- filtering within query and choosing different indexes as a source](https://discuss.elastic.co/t/timelion-filtering-within-query-and-choosing-different-indexes-as-a-source/48705)
**Author:** [@arthur-y](https://discuss.elastic.co/u/arthur-y)\ **Replies:** 4\ **Last updated:** [May 2, 2016, 9:48pm UTC](https://discuss.elastic.co/t/timelion-filtering-within-query-and-choosing-different-indexes-as-a-source/48705 "2016-05-02T21:48:24Z")
Hello! We are testing right now Timelion, and despite its syntax is a bit complicated to get to used to at a first glance, we do love this plugin! My question is if it's possible to build a graph by referring to differ… --- ## [How to find a unique count exact value](https://discuss.elastic.co/t/how-to-find-a-unique-count-exact-value/105018)
**Author:** [@piotr.dela](https://discuss.elastic.co/u/piotr.dela)\ **Replies:** 7\ **Last updated:** [October 30, 2017, 4:59pm UTC](https://discuss.elastic.co/t/how-to-find-a-unique-count-exact-value/105018 "2017-10-30T16:59:33Z")
Hello, I'm working on Kibana visualizations at my current project at work and we have found an issue with this unique count metric. We already know that this metric is only an approximation and it doesn't get an exact … --- ## [Elasticsearch throwing number of documents in the index cannot exceed 2147483519](https://discuss.elastic.co/t/elasticsearch-throwing-number-of-documents-in-the-index-cannot-exceed-2147483519/242512)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [July 24, 2020, 2:17pm UTC](https://discuss.elastic.co/t/elasticsearch-throwing-number-of-documents-in-the-index-cannot-exceed-2147483519/242512 "2020-07-24T14:17:27Z")
HI Team, I'm using monthly index to store all my data in elasticsearch. i have enabled DLQ to capture the unformatted log information and in that im getting capture below error. elasticsearch ±Could not index event t… --- ## [X-pack Failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/x-pack-failed-to-authenticate-user-elastic/126179)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 7\ **Last updated:** [March 30, 2018, 7:28am UTC](https://discuss.elastic.co/t/x-pack-failed-to-authenticate-user-elastic/126179 "2018-03-30T07:28:54Z")
Hi everyone, after installing x-pack, I know I need to modify the elasticsearch password.But when I use the command on ES bin/x-pack/setup-passwords interactive it show me an error: Failed to authenticate user 'elasti… --- ## [Export all document to either JSON or CSV](https://discuss.elastic.co/t/export-all-document-to-either-json-or-csv/88322)
**Author:** [@jorzallan](https://discuss.elastic.co/u/jorzallan)\ **Replies:** 0\ **Last updated:** [June 5, 2017, 7:27pm UTC](https://discuss.elastic.co/t/export-all-document-to-either-json-or-csv/88322 "2017-06-05T19:27:11Z")
Hello, I know this might be a basic question, but I believe everybody has to learn from some point. I am trying hard to learn Elasticsearch and as I was going through the documentation at this page https://www.elasti… --- ## [Elasticsearch json response to SearchResponse object](https://discuss.elastic.co/t/elasticsearch-json-response-to-searchresponse-object/124394)
**Author:** [@Monte\_A](https://discuss.elastic.co/u/Monte_A)\ **Replies:** 5\ **Last updated:** [March 18, 2018, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-json-response-to-searchresponse-object/124394 "2018-03-18T15:14:43Z")
Hi There, Could someone help to get it working? So far I got the solution below. This works for simple queries, however it doesn't work for aggregations and I am getting exception ParsingException "Could not parse aggr… --- ## [How to add a tag based on input data](https://discuss.elastic.co/t/how-to-add-a-tag-based-on-input-data/214713)
**Author:** [@debojyoti\_bandyopadh](https://discuss.elastic.co/u/debojyoti_bandyopadh)\ **Replies:** 4\ **Last updated:** [January 12, 2020, 5:15pm UTC](https://discuss.elastic.co/t/how-to-add-a-tag-based-on-input-data/214713 "2020-01-12T17:15:52Z")
Hello, I am a beginner in logstash and currently learning the basics. I am stuck while solving a problem. Basically my input(to logstash) can be a series of Alphabets like below: a b a c d I want to add a tag "A" i… --- ## [Nest Connection : Mock 2 in-memory response in elastic search in c#](https://discuss.elastic.co/t/nest-connection-mock-2-in-memory-response-in-elastic-search-in-c/159565)
**Author:** [@piyush\_kumar](https://discuss.elastic.co/u/piyush_kumar)\ **Replies:** 0\ **Last updated:** [December 5, 2018, 3:34pm UTC](https://discuss.elastic.co/t/nest-connection-mock-2-in-memory-response-in-elastic-search-in-c/159565 "2018-12-05T15:34:28Z")
I have to unit test a function that have 2 elastic search query and need to mock 2 responses for it. I am able to mock single response using below code . var responseBytes = Encoding.UTF8.GetBytes(JsonConvert.SerializeO… --- ## [Elastic Cloud Enterprise 3.4.0 Security Update](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 3:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825 "2022-08-24T15:42:00Z")
Elastic Cloud Enterprise Sensitive information disclosure issue (ESA-2022-10) A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch… --- ## [What does sum\_other\_doc\_count mean exactly?](https://discuss.elastic.co/t/what-does-sum-other-doc-count-mean-exactly/159687)
**Author:** [@nayun\_oh](https://discuss.elastic.co/u/nayun_oh)\ **Replies:** 2\ **Last updated:** [December 24, 2018, 6:13am UTC](https://discuss.elastic.co/t/what-does-sum-other-doc-count-mean-exactly/159687 "2018-12-24T06:13:09Z")
When I use aggregate, I can see sum\_other\_doc\_count in the result. What does this mean? Thank you in advance! --- ## [Remote access elasticsearch 9200 fails](https://discuss.elastic.co/t/remote-access-elasticsearch-9200-fails/37969)
**Author:** [@djougue\_basso](https://discuss.elastic.co/u/djougue_basso)\ **Replies:** 4\ **Last updated:** [May 29, 2017, 4:10pm UTC](https://discuss.elastic.co/t/remote-access-elasticsearch-9200-fails/37969 "2017-05-29T16:10:37Z")
Hi guy, I have a problem that i am facing but i didn't found solution in the forum and into elasticsearch official documentation. I have successfully installed elasticsearch 1.7.3 in OVH cloud machin and being able to co… --- ## [Counting occurrence of two events and then displaying the percentage](https://discuss.elastic.co/t/counting-occurrence-of-two-events-and-then-displaying-the-percentage/96040)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 8\ **Last updated:** [August 18, 2017, 5:09pm UTC](https://discuss.elastic.co/t/counting-occurrence-of-two-events-and-then-displaying-the-percentage/96040 "2017-08-18T17:09:17Z")
I got through many visualizations until I came across seemingly a very simple one. I am trying various options but I feel it should not be that complicated and I am missing a trick. My ask is simple, I have Request and R… --- ## [How to filter the metric 'count' values in kibana?](https://discuss.elastic.co/t/how-to-filter-the-metric-count-values-in-kibana/232)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [April 5, 2017, 12:47pm UTC](https://discuss.elastic.co/t/how-to-filter-the-metric-count-values-in-kibana/232 "2017-04-05T12:47:39Z")
I have created a visualization data table, wherein i got 2 columns Region Count(this is metric) North 2 East 3 South 1 West 5 In the above table, i want to filter the m… --- ## [Kibana - Unable to connect to Elasticsearch at http://localhost:9200](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200/115455)
**Author:** [@syiannop](https://discuss.elastic.co/u/syiannop)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 2:29pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200/115455 "2018-01-15T14:29:56Z")
Hey everybody, I am new here and with Elasticsearch and Kibana! :slight\_smile: I installed both Elasticsearch and kibana on my Linux Mint 19 and tried the steps described in this tutorial. I did all the steps and got … --- ## [What is the best way of getting MongoDB data into Elasticsearch?](https://discuss.elastic.co/t/what-is-the-best-way-of-getting-mongodb-data-into-elasticsearch/40840)
**Author:** [@wozza.lowe](https://discuss.elastic.co/u/wozza.lowe)\ **Replies:** 7\ **Last updated:** [May 17, 2017, 9:39pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-of-getting-mongodb-data-into-elasticsearch/40840 "2017-05-17T21:39:14Z")
Hi All, Now that rivers are being deprecated, I need a more future proof easy way of replicating MongoDB data to our Elasticsearch cluster, what would be the best solution for this? We don't need to transform the dat… --- ## [This field is present in your elasticsearch mapping but not in any documents in the search results. You may still be able to visualize or search on it](https://discuss.elastic.co/t/this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/59818)
**Author:** [@gentitope](https://discuss.elastic.co/u/gentitope)\ **Replies:** 1\ **Last updated:** [September 5, 2016, 2:22pm UTC](https://discuss.elastic.co/t/this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/59818 "2016-09-05T14:22:54Z")
This can be frustrating! i have googled this all my day without a solution. I trying to parse grok field into ES and i have this message "This field is present in your elasticsearch mapping but not in any documents in th… --- ## [Cannot be changed from type \[float\] to \[long\]](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long/147710)
**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\ **Replies:** 6\ **Last updated:** [September 21, 2018, 12:18pm UTC](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long/147710 "2018-09-21T12:18:31Z")
Hi, I've got an issue with logstash/Elasticsearch... I'm getting the messages in my logstash log: \[2018-09-07T02:00:01,438\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400,… --- ## [Geopoint using Latitude and Longitude using Logstash](https://discuss.elastic.co/t/geopoint-using-latitude-and-longitude-using-logstash/43857)
**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 7:05am UTC](https://discuss.elastic.co/t/geopoint-using-latitude-and-longitude-using-logstash/43857 "2017-03-15T07:05:33Z")
Hi, I am trying to plot data on Tile Map using geo-point coordinates from ES. Logstash data will have Latitude and Longitude. I also followed http://david.pilato.fr/blog/2015/04/28/exploring-capitaine-train-dataset/ but… --- ## [Fatal alert: bad\_certificate](https://discuss.elastic.co/t/fatal-alert-bad-certificate/271277)
**Author:** [@mirko.spezie](https://discuss.elastic.co/u/mirko.spezie)\ **Replies:** 5\ **Last updated:** [April 30, 2021, 8:17am UTC](https://discuss.elastic.co/t/fatal-alert-bad-certificate/271277 "2021-04-30T08:17:06Z")
Hi all, I've enabled 1 year ago a cluster with X-Pack security enabled. Everything was fine and the cluster went in production. From a couple of days I'm receiving an error regarding a bad\_certificate only for the secon… --- ## [Painless Script for Index Action](https://discuss.elastic.co/t/painless-script-for-index-action/87800)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 1\ **Last updated:** [May 31, 2017, 9:19pm UTC](https://discuss.elastic.co/t/painless-script-for-index-action/87800 "2017-05-31T21:19:09Z")
Hi, I am trying to create index action and push aggregated result back into elasticsearch much like this post. Below is the painless script that I wrote for this purpose. Once I run this watch, I am getting all the a… --- ## [Create filter with time query for the last 3 days](https://discuss.elastic.co/t/create-filter-with-time-query-for-the-last-3-days/40576)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 8\ **Last updated:** [February 8, 2016, 9:01am UTC](https://discuss.elastic.co/t/create-filter-with-time-query-for-the-last-3-days/40576 "2016-02-08T09:01:03Z")
Hi , How can I create a query for results from the last 3 days ? I saw that I can create a filter with query like this: @timestamp = \[now-72H to now\] But it's not working . How can I create this term ? BR, Chen --- ## [Logstash, An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception](https://discuss.elastic.co/t/logstash-an-exceptioncaught-event-was-fired-and-it-reached-at-the-tail-of-the-pipeline-it-usually-means-the-last-handler-in-the-pipeline-did-not-handle-the-exception/180515)
**Author:** [@faba47305d2d194daaea](https://discuss.elastic.co/u/faba47305d2d194daaea)\ **Replies:** 4\ **Last updated:** [May 15, 2019, 4:10am UTC](https://discuss.elastic.co/t/logstash-an-exceptioncaught-event-was-fired-and-it-reached-at-the-tail-of-the-pipeline-it-usually-means-the-last-handler-in-the-pipeline-did-not-handle-the-exception/180515 "2019-05-15T04:10:15Z")
Hello, I am trying set up ELK stack on my server. I installed ELK on my server. now I am trying to connect Filebeat with Logstash. However I am having trouble with Logstash. On my logstash log, \[WARN \] 2019-05-10 16… --- ## [Trying to return \_source and script\_fields](https://discuss.elastic.co/t/trying-to-return--source-and-script-fields/70614)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 2\ **Last updated:** [January 5, 2017, 3:38pm UTC](https://discuss.elastic.co/t/trying-to-return--source-and-script-fields/70614 "2017-01-05T15:38:35Z")
\[Solved\] \[2.4.3\] Here's my query. It's only returning the script\_field, new\_sales, and forgets about returning the source. What can I do to return my \_source document as well as the calculated field. Thanks! GE… --- ## [How can I delete unnassigned shards?](https://discuss.elastic.co/t/how-can-i-delete-unnassigned-shards/327433)
**Author:** [@frankmehlhop.com](https://discuss.elastic.co/u/frankmehlhop.com)\ **Replies:** 1\ **Last updated:** [March 10, 2023, 10:56am UTC](https://discuss.elastic.co/t/how-can-i-delete-unnassigned-shards/327433 "2023-03-10T10:56:03Z")
In my cluster there are unassigned shards which are not primary shards. I don't know why I have these secondary shards in my cluster. I didn't create them intentionally and I use the default configuration (elasticsearch… --- ## [401 Unauthorized](https://discuss.elastic.co/t/401-unauthorized/118943)
**Author:** [@jamest23](https://discuss.elastic.co/u/jamest23)\ **Replies:** 2\ **Last updated:** [February 8, 2018, 3:18am UTC](https://discuss.elastic.co/t/401-unauthorized/118943 "2018-02-08T03:18:49Z")
I upgraded to 6.2 installed x-pack and i can't seem to find the cause. I have installed ELK many times-- I must have missed a config parameter. It is all running on the same machine. logstash cant connect :error=\>"G… --- ## [Cannot search double quotes](https://discuss.elastic.co/t/cannot-search-double-quotes/123429)
**Author:** [@Hayk\_Hovhanisyan](https://discuss.elastic.co/u/Hayk_Hovhanisyan)\ **Replies:** 2\ **Last updated:** [March 12, 2018, 7:45am UTC](https://discuss.elastic.co/t/cannot-search-double-quotes/123429 "2018-03-12T07:45:44Z")
Hi folk, Elastic Search version 2.4 Java version 1.8 Following error when search via " java.lang.IllegalArgumentException: expected '"' at position 7. Search via double quotes query body --- ## [Why do i need Logstash if filebeat can send data to Elasticsearch](https://discuss.elastic.co/t/why-do-i-need-logstash-if-filebeat-can-send-data-to-elasticsearch/70965)
**Author:** [@sezanawa](https://discuss.elastic.co/u/sezanawa)\ **Replies:** 5\ **Last updated:** [January 10, 2017, 10:22am UTC](https://discuss.elastic.co/t/why-do-i-need-logstash-if-filebeat-can-send-data-to-elasticsearch/70965 "2017-01-10T10:22:29Z")
Hallo Everybody If i want to centralized the logs in my application Environment. I have installed ELK (Eleasticsearch, Logstash and Kibana) and using Grok file input filter which is working fine on my local machine. W… --- ## [Run Kibana as a service on Windows](https://discuss.elastic.co/t/run-kibana-as-a-service-on-windows/42359)
**Author:** [@arianayay](https://discuss.elastic.co/u/arianayay)\ **Replies:** 6\ **Last updated:** [March 1, 2016, 5:51pm UTC](https://discuss.elastic.co/t/run-kibana-as-a-service-on-windows/42359 "2016-03-01T17:51:08Z")
How can I run Kibana on my machine as a service so that I don't keep on pointing the folder and running it manually? I want to use a cURL syntax since it is what I'm using. --- ## [Elasticsearch put mapping not working](https://discuss.elastic.co/t/elasticsearch-put-mapping-not-working/92956)
**Author:** [@Saurabh\_Jinturkar](https://discuss.elastic.co/u/Saurabh_Jinturkar)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 6:11am UTC](https://discuss.elastic.co/t/elasticsearch-put-mapping-not-working/92956 "2017-07-21T06:11:06Z")
Hi, I am trying to stream logs from logstash to elasticsearch. I am using filebeat to send logs to logstash. I have not defined any index; it is defined automatically (say "test1") when data is pushed for the first ti… --- ## [ECK elasticsearch pod not starting on AKS : max virtual memory areas vm.max\_map\_count \[65530\] is too low, increase to at least \[262144\]](https://discuss.elastic.co/t/eck-elasticsearch-pod-not-starting-on-aks-max-virtual-memory-areas-vm-max-map-count-65530-is-too-low-increase-to-at-least-262144/305788)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 6\ **Last updated:** [June 1, 2022, 10:05am UTC](https://discuss.elastic.co/t/eck-elasticsearch-pod-not-starting-on-aks-max-virtual-memory-areas-vm-max-map-count-65530-is-too-low-increase-to-at-least-262144/305788 "2022-06-01T10:05:53Z")
When starting new eck cluster on AKS Elasticsearch pod doesnt start ERROR: \[1\] bootstrap checks failed. You must address the points described in the following \[1\] lines before starting Elasticsearch. bootstrap check fa… --- ## [How do I sort buckets by Term Aggregation's doc\_count?](https://discuss.elastic.co/t/how-do-i-sort-buckets-by-term-aggregations-doc-count/145453)
**Author:** [@kriyate](https://discuss.elastic.co/u/kriyate)\ **Replies:** 1\ **Last updated:** [August 21, 2018, 8:21pm UTC](https://discuss.elastic.co/t/how-do-i-sort-buckets-by-term-aggregations-doc-count/145453 "2018-08-21T20:21:45Z")
Hi everyone: I have an index, invoices, that I need to aggregate into yearly buckets, then sort. I have succeeded in using Bucket Sort to sort my buckets by simple sum values (revenue and tax). However, I am struggling… --- ## [ES 6.x: Frequent and Long Garbage Collection](https://discuss.elastic.co/t/es-6-x-frequent-and-long-garbage-collection/127541)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 4\ **Last updated:** [April 10, 2018, 11:49pm UTC](https://discuss.elastic.co/t/es-6-x-frequent-and-long-garbage-collection/127541 "2018-04-10T23:49:09Z")
I'm having a variety of performance issues w/ ES 6.1.1 since upgrading from ES 1.7.5 and I'm trying to break them down and see what I can shake out in terms of a primary cause. ES 6.1.1 NEST 6.0.1 3 node cluster: 34 i… --- ## [Too\_many\_clauses: maxClauseCount is set to 1024 & index.query.bool.max\_clause\_count](https://discuss.elastic.co/t/too-many-clauses-maxclausecount-is-set-to-1024-index-query-bool-max-clause-count/181443)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [May 17, 2019, 9:30pm UTC](https://discuss.elastic.co/t/too-many-clauses-maxclausecount-is-set-to-1024-index-query-bool-max-clause-count/181443 "2019-05-17T21:30:15Z")
Hello World! I'm running into following error: { "type": "too\_many\_clauses", "reason": "too\_many\_clauses: maxClauseCount is set to 1024" }, I found index.query.bool.max\_clause\_count needs to be tweaked. … --- ## [Fleet automatic import visualizations and dashboards by default](https://discuss.elastic.co/t/fleet-automatic-import-visualizations-and-dashboards-by-default/297915)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 3:00pm UTC](https://discuss.elastic.co/t/fleet-automatic-import-visualizations-and-dashboards-by-default/297915 "2022-02-22T15:00:25Z")
Hi, everyone I have just upgraded from Kibana 7.9.2 to Kibana 7.16.3 and I have realised that Kibana has imported some index-patterns, visualizations and dashboards after entering in Fleet section. Index Pattern screen… --- ## [Elasticsearch python log handler (github)](https://discuss.elastic.co/t/elasticsearch-python-log-handler-github/43320)
**Author:** [@cmanaha](https://discuss.elastic.co/u/cmanaha)\ **Replies:** 2\ **Last updated:** [June 3, 2016, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-python-log-handler-github/43320 "2016-06-03T16:30:43Z")
Hi All, I just released a couple of days ago a python log handler extension that allows storing LogRecords and instrumentation coming directly from Python standard logging framework. The handler is also easy to integra… --- ## [ERROR: X-Pack Security is disabled by configuration](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration/175497)
**Author:** [@huzefabootwala](https://discuss.elastic.co/u/huzefabootwala)\ **Replies:** 7\ **Last updated:** [April 9, 2019, 11:26pm UTC](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration/175497 "2019-04-09T23:26:34Z")
Hello, I have installed Elastic Search version number 6.5.4. It says xpack is available by default in this version. I have upgraded from Basic Licence to Trial Licence but I am not able to get xpack running. It gives… --- ## [Logstash mutate - convert empty string to null](https://discuss.elastic.co/t/logstash-mutate-convert-empty-string-to-null/91263)
**Author:** [@selivan](https://discuss.elastic.co/u/selivan)\ **Replies:** 3\ **Last updated:** [June 29, 2017, 11:04am UTC](https://discuss.elastic.co/t/logstash-mutate-convert-empty-string-to-null/91263 "2017-06-29T11:04:27Z")
There is a field in log file, which contains IP address or empty string if IP address is not available. Elasticsearch index has mapping, that maps "ip" type to this field. When field value is empty string, logstash can n… --- ## [Encryption at rest support](https://discuss.elastic.co/t/encryption-at-rest-support/113537)
**Author:** [@jiali](https://discuss.elastic.co/u/jiali)\ **Replies:** 1\ **Last updated:** [December 29, 2017, 6:51am UTC](https://discuss.elastic.co/t/encryption-at-rest-support/113537 "2017-12-29T06:51:00Z")
In X-Pack platinum, "Encryption at rest support" was introduced in 5.3.0 Released. As there's no documentation about it and I understand it is about filesystem encryption on the actual host running Elasticsearch. I woul… --- ## [Change Index on Visualisations](https://discuss.elastic.co/t/change-index-on-visualisations/113835)
**Author:** [@Schizo](https://discuss.elastic.co/u/Schizo)\ **Replies:** 1\ **Last updated:** [January 2, 2018, 9:47pm UTC](https://discuss.elastic.co/t/change-index-on-visualisations/113835 "2018-01-02T21:47:15Z")
Unfortunately this topic is closed, so i couldn't add a comment or response to it. (Bad Usability!) Where do I have to go to "Settings \> Objects". I don't see this options neither in the Visualize section nor in the M… --- ## [Filebeat Helm chart 8.x requires \`elasticsearch-master-certs\`](https://discuss.elastic.co/t/filebeat-helm-chart-8-x-requires-elasticsearch-master-certs/325049)
**Author:** [@Roman\_Kournjaev](https://discuss.elastic.co/u/Roman_Kournjaev)\ **Replies:** 3\ **Last updated:** [March 8, 2023, 2:15pm UTC](https://discuss.elastic.co/t/filebeat-helm-chart-8-x-requires-elasticsearch-master-certs/325049 "2023-03-08T14:15:55Z")
We are using beats to ship our logs from k8s to the elastic cloud. I would like to upgrade our beats helm chart version from 7.x to 8.x and it introduces a breaking change where i would have to create a secret with elas… --- ## [How To change text or numbers color conditionally in Kibana Data Table](https://discuss.elastic.co/t/how-to-change-text-or-numbers-color-conditionally-in-kibana-data-table/81468)
**Author:** [@rrr123](https://discuss.elastic.co/u/rrr123)\ **Replies:** 6\ **Last updated:** [February 22, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-change-text-or-numbers-color-conditionally-in-kibana-data-table/81468 "2018-02-22T15:18:01Z")
Is there any way to change text or numbers color based on the content in Kibana Data Table. --- ## [Grok pattern/expression for "YYYY/MM/dd HH:mm:ss"](https://discuss.elastic.co/t/grok-pattern-expression-for-yyyy-mm-dd-hh-mm-ss/122821)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 2\ **Last updated:** [March 23, 2018, 4:53am UTC](https://discuss.elastic.co/t/grok-pattern-expression-for-yyyy-mm-dd-hh-mm-ss/122821 "2018-03-23T04:53:23Z")
Hi, Issue regarding grok patter. I need to create a grok pattern for following log. But I'm having problems with 2018/03/06 10:21:49 (YYYY/MM/dd HH:mm:ss) date format. Can anyone please help Sample log: INFO | jvm 1… --- ## [Sonicwall (Syslog) + Logstash](https://discuss.elastic.co/t/sonicwall-syslog-logstash/141251)
**Author:** [@weyderfs](https://discuss.elastic.co/u/weyderfs)\ **Replies:** 2\ **Last updated:** [August 3, 2018, 3:13pm UTC](https://discuss.elastic.co/t/sonicwall-syslog-logstash/141251 "2018-08-03T15:13:20Z")
Hi, I research on web about how to configure Sonicwall send your syslogs to Logstash or Filebeat, practically did not find anything.. I would like if possible configure this? In side of SonicWall I already configured. … --- ## [Logstash - Beats input: The circuit breaker has detected a slowdown](https://discuss.elastic.co/t/logstash-beats-input-the-circuit-breaker-has-detected-a-slowdown/41398)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 0\ **Last updated:** [February 10, 2016, 4:04pm UTC](https://discuss.elastic.co/t/logstash-beats-input-the-circuit-breaker-has-detected-a-slowdown/41398 "2016-02-10T16:04:20Z")
Hi all, im trying to ship some file logs with this setup filebeat(host1) -\> logstash(host1) --+-\> elasticsearch | filebeat(host2) -\> logstash(host2) --+ … [Previous page](https://discuss.elastic.co/top.md?page=271&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=273&per_page=50&period=all)