# Top **URL:** https://discuss.elastic.co/top.md?page=273&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 274 --- ## [Exporting Saved Search Data](https://discuss.elastic.co/t/exporting-saved-search-data/90843)
**Author:** [@JoeyMarinello](https://discuss.elastic.co/u/JoeyMarinello)\ **Replies:** 4\ **Last updated:** [June 26, 2017, 10:02pm UTC](https://discuss.elastic.co/t/exporting-saved-search-data/90843 "2017-06-26T22:02:53Z")
Hi everyone, I am currently working on an excel export tool. I am fairly new to elasticsearch, and right now I am trying to figure out how to programmatically export the data tied to my saved searches in kibana. Does a… --- ## [Index document only if document does not exist](https://discuss.elastic.co/t/index-document-only-if-document-does-not-exist/67385)
**Author:** [@EuclideanSearch](https://discuss.elastic.co/u/EuclideanSearch)\ **Replies:** 1\ **Last updated:** [November 28, 2016, 8:14pm UTC](https://discuss.elastic.co/t/index-document-only-if-document-does-not-exist/67385 "2016-11-28T20:14:53Z")
Hi, Is there a way to index a document only if the document does not already exist? For instance, if I have a setup where I have configured the UUID (a field in my document) to be the document identifier, is there a fl… --- ## [Problem with SQL Query with special character in field and table name](https://discuss.elastic.co/t/problem-with-sql-query-with-special-character-in-field-and-table-name/146359)
**Author:** [@stef35340](https://discuss.elastic.co/u/stef35340)\ **Replies:** 4\ **Last updated:** [August 29, 2018, 7:59am UTC](https://discuss.elastic.co/t/problem-with-sql-query-with-special-character-in-field-and-table-name/146359 "2018-08-29T07:59:20Z")
Hello, I've an issue when I try to use fields and table names with some special characters. My indexes are named like the following xxxxxx-prod-2018.08.28 and the fact that there is a "dash" in the index name. As worka… --- ## [Dec 14th, 2020 \[CN\] 如何成为一名 Elastic 认证工程师](https://discuss.elastic.co/t/dec-14th-2020-cn-elastic/257010)
**Author:** [@xiaoguo.liu](https://discuss.elastic.co/u/xiaoguo.liu)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 3:01am UTC](https://discuss.elastic.co/t/dec-14th-2020-cn-elastic/257010 "2021-01-19T03:01:32Z")
Elasticsearch 无疑是是目前世界上最为流行的大数据搜索引擎。世界上很多著名的 IT 公司都是我们的客户。这些客户包括微软，甲骨文，Adobe，Salesforce, Uber，苹果，沃尔玛等等这些跨国公司。在中国也有很多的用户，比如腾讯，阿里，360，滴滴，抖音，美团，联想，CCTV，银行公司，保险公司，电信公司，汽车制造商，手机制造商等等。我们常用到的 github，linkedin，wikipedia 等上面的搜索都是使… --- ## [Composite aggregation max bucket size](https://discuss.elastic.co/t/composite-aggregation-max-bucket-size/155663)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 1\ **Last updated:** [November 12, 2018, 3:42pm UTC](https://discuss.elastic.co/t/composite-aggregation-max-bucket-size/155663 "2018-11-12T15:42:58Z")
I have a query that I need to run every 30s to check if there are any docs matching the params. { "version": true, "size": 0, "sort": \[ { "@timestamp": { "order": "desc", "unmapped\_type":… --- ## [How to change logstash default timezone](https://discuss.elastic.co/t/how-to-change-logstash-default-timezone/157304)
**Author:** [@Manoj\_Hettiarachchi](https://discuss.elastic.co/u/Manoj_Hettiarachchi)\ **Replies:** 3\ **Last updated:** [November 19, 2018, 11:47am UTC](https://discuss.elastic.co/t/how-to-change-logstash-default-timezone/157304 "2018-11-19T11:47:24Z")
Hello, In my system, I use filebeat and logstash. The data written to the log files are sent to logstash via filebeat. Some fields in the logs are filtered and saved in csv format using logstash. Problem: When saving… --- ## [java.io.IOException: listener timeout after waiting for \[60000\] ms](https://discuss.elastic.co/t/java-io-ioexception-listener-timeout-after-waiting-for-60000-ms/117281)
**Author:** [@rupanjanbaidya](https://discuss.elastic.co/u/rupanjanbaidya)\ **Replies:** 0\ **Last updated:** [January 27, 2018, 3:49am UTC](https://discuss.elastic.co/t/java-io-ioexception-listener-timeout-after-waiting-for-60000-ms/117281 "2018-01-27T03:49:40Z")
I am getting the exception everytime while starting the server, java.io.IOException: listener timeout after waiting for \[60000\] ms at org.elasticsearch.client.RestClient$SyncResponseListener.get(RestClient.java:661) ~\[… --- ## [Timelion: Multiple Queries in One String](https://discuss.elastic.co/t/timelion-multiple-queries-in-one-string/117882)
**Author:** [@JWR](https://discuss.elastic.co/u/JWR)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 7:57pm UTC](https://discuss.elastic.co/t/timelion-multiple-queries-in-one-string/117882 "2018-01-31T19:57:12Z")
Hello, I'm using TL to look at monetary transactions and am able to add two different variables from the same field for a query, like this: .es(index=somedata\*, q='Mode:(02 OR 04)', timefield=Date) ...but I'm having a… --- ## [Security rule exception not working](https://discuss.elastic.co/t/security-rule-exception-not-working/294811)
**Author:** [@masual](https://discuss.elastic.co/u/masual)\ **Replies:** 4\ **Last updated:** [January 21, 2022, 10:20am UTC](https://discuss.elastic.co/t/security-rule-exception-not-working/294811 "2022-01-21T10:20:31Z")
Hi everyone, We are using Elasticsearch and Kibana version 7.16.3. We have defined a security rule and added some exceptions to this rule. Some of the exceptions are working fine, filtering the events that match the e… --- ## [Result window is too large, from + size must be less than or equal to: \[10000\] but was \[11001\]](https://discuss.elastic.co/t/result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000-but-was-11001/63070)
**Author:** [@toxaco](https://discuss.elastic.co/u/toxaco)\ **Replies:** 4\ **Last updated:** [October 18, 2016, 1:40pm UTC](https://discuss.elastic.co/t/result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000-but-was-11001/63070 "2016-10-18T13:40:45Z")
Hi! I'm trying to loop through all documents in a certain index using pagination (size,from) once ES limits the total documents returned to 10k, then this is my initial search (what I increase by 10k the from parameter… --- ## [Elasticsearch json logs with filebeat module and ingest pipeline](https://discuss.elastic.co/t/elasticsearch-json-logs-with-filebeat-module-and-ingest-pipeline/213376)
**Author:** [@jeffspahr](https://discuss.elastic.co/u/jeffspahr)\ **Replies:** 5\ **Last updated:** [January 24, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elasticsearch-json-logs-with-filebeat-module-and-ingest-pipeline/213376 "2020-01-24T17:08:17Z")
Hello, Elasticsearch writes json logs by default in 7.x (thanks!). When configuring Filebeat's Elasticsearch module, I was thinking I could ignore the ingest pipeline part since it's already shipping structured logs, bu… --- ## [Elasticsearch 8.8.2, 7.17.11 Security Update](https://discuss.elastic.co/t/elasticsearch-8-8-2-7-17-11-security-update/337205)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [June 29, 2023, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-8-8-2-7-17-11-security-update/337205 "2023-06-29T14:08:31Z")
Elasticsearch Denial of Service (DoS) issue (ESA-2023-10) This issue only affects users that have at least one OpenID Connect authentication realm or at least one JWT authentication realm configured. A denial of servic… --- ## [How to monitor kibana from CLI(command line interface)](https://discuss.elastic.co/t/how-to-monitor-kibana-from-cli-command-line-interface/50906)
**Author:** [@sreenivasu](https://discuss.elastic.co/u/sreenivasu)\ **Replies:** 5\ **Last updated:** [June 3, 2016, 8:22am UTC](https://discuss.elastic.co/t/how-to-monitor-kibana-from-cli-command-line-interface/50906 "2016-06-03T08:22:40Z")
Dear Team, Please share how to monitor kibana and Logstash from CLI . For Example: In case of Elasticsearch it shows 200 OK, root@BLR-SOFT-203:~# curl -I http://localhost:9200 HTTP/1.1 200 OK Content-Type: tex… --- ## [Concatenate field and String](https://discuss.elastic.co/t/concatenate-field-and-string/43239)
**Author:** [@jobobabas](https://discuss.elastic.co/u/jobobabas)\ **Replies:** 1\ **Last updated:** [March 2, 2016, 1:25pm UTC](https://discuss.elastic.co/t/concatenate-field-and-string/43239 "2016-03-02T13:25:39Z")
First Sry for my bad englisch I am using logstash since 2 days I want to concatenate a field and a String in the field Like the field is "Test" and i want to add a "\_NR1" to the end Thanks for help --- ## [Search for a non empty field](https://discuss.elastic.co/t/search-for-a-non-empty-field/107736)
**Author:** [@fernandoblalves](https://discuss.elastic.co/u/fernandoblalves)\ **Replies:** 2\ **Last updated:** [November 16, 2017, 3:23pm UTC](https://discuss.elastic.co/t/search-for-a-non-empty-field/107736 "2017-11-16T15:23:08Z")
Hi, For each event I collect on logstash, I add a field called "tags" that always exists, and contains an array that may be empty. On kibana, I want to search for events that do not contain an empty array. I tried with … --- ## [Can ES support to add a new item into the nested objects of existing document?](https://discuss.elastic.co/t/can-es-support-to-add-a-new-item-into-the-nested-objects-of-existing-document/27646)
**Author:** [@gin](https://discuss.elastic.co/u/gin)\ **Replies:** 8\ **Last updated:** [August 25, 2015, 1:11am UTC](https://discuss.elastic.co/t/can-es-support-to-add-a-new-item-into-the-nested-objects-of-existing-document/27646 "2015-08-25T01:11:22Z")
Hi all, I have a ES document like: { "title": "Nest eggs", "comments": \[ { "name": "John Smith", "comment": "Great article", }, { "name": "Alice White", "comment": "Mor… --- ## [Visualizing Analysed fields](https://discuss.elastic.co/t/visualizing-analysed-fields/71211)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 2\ **Last updated:** [January 12, 2017, 7:51am UTC](https://discuss.elastic.co/t/visualizing-analysed-fields/71211 "2017-01-12T07:51:04Z")
Hi. I finally started the arduous task of upgrading/porting to Elastic Stack 5.0 (from ES 1.7 & Kibana 4.1) ... needless to say theres been some issues , mostly with my elasticsearch mappings etc., but finally seem to … --- ## [Restarting Kibana](https://discuss.elastic.co/t/restarting-kibana/41017)
**Author:** [@w0lverine](https://discuss.elastic.co/u/w0lverine)\ **Replies:** 5\ **Last updated:** [February 18, 2017, 3:56am UTC](https://discuss.elastic.co/t/restarting-kibana/41017 "2017-02-18T03:56:41Z")
I have installed sense and now I need to restart kibana and besides finding the process and killing it I can not find a command to restart the service. sudo service kibana restart I feel like doesn't actually restart… --- ## [Elasticsearch 6 and the disappearing \_all field](https://discuss.elastic.co/t/elasticsearch-6-and-the-disappearing--all-field/85871)
**Author:** [@Roeland](https://discuss.elastic.co/u/Roeland)\ **Replies:** 6\ **Last updated:** [May 17, 2017, 7:56am UTC](https://discuss.elastic.co/t/elasticsearch-6-and-the-disappearing--all-field/85871 "2017-05-17T07:56:10Z")
Hello, I've read the following link Breaking changes in 6.0 about the disappearing \_all field, but I was searching for more information about this. Why are you guys doing this? Is there documentation so we can under… --- ## [Foreach - Painless](https://discuss.elastic.co/t/foreach-painless/86164)
**Author:** [@thiago.eti](https://discuss.elastic.co/u/thiago.eti)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 7:06pm UTC](https://discuss.elastic.co/t/foreach-painless/86164 "2017-05-19T19:06:14Z")
Oi não estou conseguindo executar LOOP em subdocumentos no Painless. Este é apenas um exemplo um cenário criado para executar LOOP o cenário é outro (este caso poderia ser executado filtro mas o problema é o Loop em subd… --- ## [Ansible roles being deprecated and to support Version 8.0.0?](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233)
**Author:** [@Andrew\_DeMarsh](https://discuss.elastic.co/u/Andrew_DeMarsh)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 7:38pm UTC](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233 "2022-01-13T19:38:11Z")
Hey I've found notices in Elastic's git repos inside the Ansible roles that I currently use for rolling out Elasticsearch in our different environments saying: This Ansible role is being deprecated and will not be upda… --- ## [O365beat v1.2.0 released - Office 365 log shipper](https://discuss.elastic.co/t/o365beat-v1-2-0-released-office-365-log-shipper/197985)
**Author:** [@chris-counteractive](https://discuss.elastic.co/u/chris-counteractive)\ **Replies:** 8\ **Last updated:** [April 11, 2020, 9:46am UTC](https://discuss.elastic.co/t/o365beat-v1-2-0-released-office-365-log-shipper/197985 "2020-04-11T09:46:09Z")
The first production release of o365beat is now available as v1.2.0 on github. O365beat is an open source log shipper used to fetch Office 365 audit logs from the Office 365 Management Activity API and forward them with… --- ## [CircuitBreakingException: \[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-for-transport-request/143486)
**Author:** [@Guigoz](https://discuss.elastic.co/u/Guigoz)\ **Replies:** 6\ **Last updated:** [August 8, 2018, 12:54pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-for-transport-request/143486 "2018-08-08T12:54:37Z")
Hi, I'm working on a 6.2.4 ES cluster with 8 VMs (2 physical servers). Each VM has 28Go of memory, and 15Go are dedicated to ES. My cluster contains 80 billions documents ( Store size = 16.11 TB / Fielddata size = 21.… --- ## [Dec 5th, 2021: \[ko\] Elastic Agent, 어떻게 사용하는건가요?](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012)
**Author:** [@JongminKim](https://discuss.elastic.co/u/JongminKim)\ **Replies:** 0\ **Last updated:** [December 5, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012 "2021-12-05T08:00:17Z")
소문만 무성하고 얼굴을 잘 보여주지 않았던 Elastic Agent 가 7.8 버전에서 드디어 출시가 되었고 GA 가 되었습니다. 그런데 아직 많이들 사용 해 보지 않으셨죠? 그래서, 오늘 한번 Elastic Agent 를 어떻게 사용하는지 한번 살펴보려고 합니다. 예전에는 Elasticsearch 로 데이터 수집을 위해서는 Logstash 그리고 Beats 를 활용했습니다. 물론 지금도… --- ## [Compile and Run from source](https://discuss.elastic.co/t/compile-and-run-from-source/44868)
**Author:** [@jaxoncreed](https://discuss.elastic.co/u/jaxoncreed)\ **Replies:** 2\ **Last updated:** [October 4, 2016, 9:38am UTC](https://discuss.elastic.co/t/compile-and-run-from-source/44868 "2016-10-04T09:38:23Z")
Hi, I'm having trouble compiling and running ElasticSearch from source. I've cloned the repo and tried the following things with no avail: https://github.com/elastic/elasticsearch - I ran "gradle build," but target fo… --- ## [How to restart Filebeat after adding a new prospector to filebeat.yml?](https://discuss.elastic.co/t/how-to-restart-filebeat-after-adding-a-new-prospector-to-filebeat-yml/79742)
**Author:** [@rohitC](https://discuss.elastic.co/u/rohitC)\ **Replies:** 7\ **Last updated:** [April 13, 2017, 1:11pm UTC](https://discuss.elastic.co/t/how-to-restart-filebeat-after-adding-a-new-prospector-to-filebeat-yml/79742 "2017-04-13T13:11:02Z")
I downloaded Filebeat from (https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.2.2-linux-x86\_64.tar.gz) and extracted the tar on my Ubuntu 14.04 machine. I run Filebeat on my Ubuntu terminal with the follow… --- ## [Following the quickstart guide: getting "Kibana server is not ready yet."](https://discuss.elastic.co/t/following-the-quickstart-guide-getting-kibana-server-is-not-ready-yet/338938)
**Author:** [@chadleywilson](https://discuss.elastic.co/u/chadleywilson)\ **Replies:** 6\ **Last updated:** [July 25, 2023, 3:58pm UTC](https://discuss.elastic.co/t/following-the-quickstart-guide-getting-kibana-server-is-not-ready-yet/338938 "2023-07-25T15:58:32Z")
Hi I have followed the 2.8.0 quickstart guide to the letter I have used the own certificate method and the sites are secure, I am happy with that. I have configured DNS and load balancing, and the pods and services lo… --- ## [Filebeat with grok,javascript and AVRO codec](https://discuss.elastic.co/t/filebeat-with-grok-javascript-and-avro-codec/147890)
**Author:** [@Lieven\_Merckx](https://discuss.elastic.co/u/Lieven_Merckx)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 8:25pm UTC](https://discuss.elastic.co/t/filebeat-with-grok-javascript-and-avro-codec/147890 "2018-09-11T20:25:30Z")
In our company we unified our logging system in a single AVRO schema pushed through Kafka. As we needed a logshipper in combination with our ELK stack, we looked at filebeat. As each application decided in the past on t… --- ## [How to mitigate "\[routing\] is missing for join field \[join\_field\]](https://discuss.elastic.co/t/how-to-mitigate-routing-is-missing-for-join-field-join-field/128145)
**Author:** [@modalikasi](https://discuss.elastic.co/u/modalikasi)\ **Replies:** 1\ **Last updated:** [April 17, 2018, 4:55am UTC](https://discuss.elastic.co/t/how-to-mitigate-routing-is-missing-for-join-field-join-field/128145 "2018-04-17T04:55:05Z")
Getting the following exception "\[routing\] is missing for join field \[join\_field\]" while reindexing data from 1.x to 6.x and 2.4 to 6.x. How to resolve this kind of issue. Actually we have 3 document types in that one is… --- ## [Bucket Script Aggregation on Range Aggregation](https://discuss.elastic.co/t/bucket-script-aggregation-on-range-aggregation/38512)
**Author:** [@Sandeep\_Krishnankutt](https://discuss.elastic.co/u/Sandeep_Krishnankutt)\ **Replies:** 6\ **Last updated:** [January 12, 2016, 3:44pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-on-range-aggregation/38512 "2016-01-12T15:44:20Z")
I am trying to do a bucket script aggregation on a range aggregation (Date Histogram being the parent) and is ending up with an exception. The query that I am trying is { "aggs": { "perhour": { "date\_histogr… --- ## [Geo\_Point Field Exists, But Kibana Can't Find It](https://discuss.elastic.co/t/geo-point-field-exists-but-kibana-cant-find-it/32776)
**Author:** [@lando](https://discuss.elastic.co/u/lando)\ **Replies:** 1\ **Last updated:** [October 26, 2015, 6:46pm UTC](https://discuss.elastic.co/t/geo-point-field-exists-but-kibana-cant-find-it/32776 "2015-10-26T18:46:34Z")
Hi All, I'm having a problem similiar to other problems i've seen on the forums here with kibana not seeing the geo\_point field in elasticsearch. I'm using logstash to ship IIS log data to ES: filter { ... … --- ## [Rename multiple fields in Logstash?](https://discuss.elastic.co/t/rename-multiple-fields-in-logstash/48069)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 4\ **Last updated:** [April 21, 2016, 3:49pm UTC](https://discuss.elastic.co/t/rename-multiple-fields-in-logstash/48069 "2016-04-21T15:49:16Z")
Hi All, I'm using Logstash 2.3.0 to receive and process Netflow data. Average indexing is about 50K events per minute, but as I put the mutate block to rename fields, throughput drops to 15K per minute. ## Rename al… --- ## [Concurrent search request to elasticsearch](https://discuss.elastic.co/t/concurrent-search-request-to-elasticsearch/21539)
**Author:** [@vipins](https://discuss.elastic.co/u/vipins)\ **Replies:** 6\ **Last updated:** [January 8, 2015, 2:01pm UTC](https://discuss.elastic.co/t/concurrent-search-request-to-elasticsearch/21539 "2015-01-08T14:01:47Z")
What is the maximum limit on the concurrent search requests with default Elastic search server settings. I am able to perform only 5 parallel search requests in my application with default settings. how can we … --- ## [Filebeat :- Failed to publish events caused by: client is not connected](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-caused-by-client-is-not-connected/217603)
**Author:** [@ragur](https://discuss.elastic.co/u/ragur)\ **Replies:** 8\ **Last updated:** [February 20, 2020, 3:20pm UTC](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-caused-by-client-is-not-connected/217603 "2020-02-20T15:20:59Z")
Filebeat throws the following error message: Failed to publish events caused by: read tcp 127.0.0.1:53380-\>127.0.0.1:5044: i/o timeout 2020-02-03T15:45:46.987+0530 ERROR logstash/async.go:256 Failed to publish events c… --- ## [Export data from kibana dashboard in CSV/Excel](https://discuss.elastic.co/t/export-data-from-kibana-dashboard-in-csv-excel/342106)
**Author:** [@HiteshSingh](https://discuss.elastic.co/u/HiteshSingh)\ **Replies:** 8\ **Last updated:** [September 6, 2023, 2:21pm UTC](https://discuss.elastic.co/t/export-data-from-kibana-dashboard-in-csv-excel/342106 "2023-09-06T14:21:25Z")
I want to export the records from the kibana dashboard in CSV/Excel. I have added a table in the dashboard from discover which contains millions of records. I want to download/export these records into CSV/Excel. Let m… --- ## [ES Cluster State Red - cannot allocate because allocation is not permitted to any of the nodes that hold an in-sync shard copy](https://discuss.elastic.co/t/es-cluster-state-red-cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/98219)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 4\ **Last updated:** [August 24, 2017, 5:13pm UTC](https://discuss.elastic.co/t/es-cluster-state-red-cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/98219 "2017-08-24T17:13:07Z")
JVM version: java version “1.8.0\_05” ES version :5.5.1 Plugins installed: \[repository-gcs, repository-s3, x-pack, repository-azure\] I have a cluster of 106 nodes. One of the shards suddenly went to red state. Master… --- ## [How to do case-insensitive search for a field value?](https://discuss.elastic.co/t/how-to-do-case-insensitive-search-for-a-field-value/120002)
**Author:** [@Jeremy\_C](https://discuss.elastic.co/u/Jeremy_C)\ **Replies:** 7\ **Last updated:** [February 16, 2018, 2:18pm UTC](https://discuss.elastic.co/t/how-to-do-case-insensitive-search-for-a-field-value/120002 "2018-02-16T14:18:11Z")
In Kibana's Discover page search, if I just type "server1" then it does a case-insensitive search. But if I do "beat.hostname: server1" then that's a case-sensitive search. How do I do I make that case-insensitive? I'… --- ## [Using painless script split(string) don't work](https://discuss.elastic.co/t/using-painless-script-split-string-dont-work/90215)
**Author:** [@fatyaha](https://discuss.elastic.co/u/fatyaha)\ **Replies:** 6\ **Last updated:** [July 6, 2017, 5:15am UTC](https://discuss.elastic.co/t/using-painless-script-split-string-dont-work/90215 "2017-07-06T05:15:25Z")
I use kibana script filed to split domain. The result is not good. My code is The result follow: However, the code can run in restful format normaly. like this result: So what is the reason, if possible, … --- ## [🎉 What’s new in Elastic 8.15](https://discuss.elastic.co/t/what-s-new-in-elastic-8-15/364628)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 8, 2024, 7:58pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-15/364628 "2024-08-08T19:58:07Z")
Learn about Elastic 8.15 which includes better semantic search, new OTel distribution, SIEM data import, and more. The 8.15 release includes: semantic\_text: making RAG development much easier with simplified mappin… --- ## [No handler found for uri curl -XPOST](https://discuss.elastic.co/t/no-handler-found-for-uri-curl-xpost/57920)
**Author:** [@dev\_tomas](https://discuss.elastic.co/u/dev_tomas)\ **Replies:** 4\ **Last updated:** [August 15, 2016, 11:19am UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-curl-xpost/57920 "2016-08-15T11:19:48Z")
Hi, I'm having problems closing snapshot. I'm going by https://github.com/elastic/examples/tree/master/kibana\_nyc\_restaurants The command curl -XPOST "localhost:9200/\_snapshot/restaurants\_backup/snapshot\_1/\_restore" … --- ## [How to change color in Visualization](https://discuss.elastic.co/t/how-to-change-color-in-visualization/91974)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 2\ **Last updated:** [July 5, 2017, 8:26pm UTC](https://discuss.elastic.co/t/how-to-change-color-in-visualization/91974 "2017-07-05T20:26:49Z")
Hi, I want to change visualization color. There is few colors available, I want to change color as per my Hex code. Please help me... Thanks! --- ## [Can't disable security](https://discuss.elastic.co/t/cant-disable-security/95939)
**Author:** [@IvanBiv](https://discuss.elastic.co/u/IvanBiv)\ **Replies:** 3\ **Last updated:** [August 6, 2017, 10:05am UTC](https://discuss.elastic.co/t/cant-disable-security/95939 "2017-08-06T10:05:11Z")
If I set (in elasticsearch.yml and kibana.yml): xpack.security.enabled: false than call sudo service elasticsearch restart sudo service elasticsearch status sudo service kibana restart sudo service kibana status … --- ## [Logstash installation error on ELK - Could not find logstash.yml](https://discuss.elastic.co/t/logstash-installation-error-on-elk-could-not-find-logstash-yml/68042)
**Author:** [@dasteven86](https://discuss.elastic.co/u/dasteven86)\ **Replies:** 2\ **Last updated:** [December 6, 2016, 8:12pm UTC](https://discuss.elastic.co/t/logstash-installation-error-on-elk-could-not-find-logstash-yml/68042 "2016-12-06T20:12:10Z")
hi i'm a total newbie regarding to ELK. i have setup a new debian system and installed the ELK Services with the official Documentation from here: https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic… --- ## [Kibana - '?\_g=' and '&\_a=' Parameters in the Dashboards URL String](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 4:40pm UTC](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642 "2021-02-18T16:40:51Z")
I'm struggling to find documentation on this, if I load up a dashboard their appears to be two query parameters we can add: '?\_g=' and '&\_a=' Currently I have a string like this on the end of my Kibana URL: /app/dashb… --- ## [Can you Trigger Watch action for each unique result returned](https://discuss.elastic.co/t/can-you-trigger-watch-action-for-each-unique-result-returned/25539)
**Author:** [@crayy8](https://discuss.elastic.co/u/crayy8)\ **Replies:** 3\ **Last updated:** [November 17, 2015, 8:12pm UTC](https://discuss.elastic.co/t/can-you-trigger-watch-action-for-each-unique-result-returned/25539 "2015-11-17T20:12:23Z")
Hi, I am wondering if it is possible to have the trigger block execute multiple times. In my example below I would like to have the webhook trigger execute for each unique hostname returned from my query results (all f… --- ## [How to print events and fields in Logstash using Ruby code?](https://discuss.elastic.co/t/how-to-print-events-and-fields-in-logstash-using-ruby-code/185305)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 2:34pm UTC](https://discuss.elastic.co/t/how-to-print-events-and-fields-in-logstash-using-ruby-code/185305 "2019-06-12T14:34:33Z")
Is there anyway I can print the events with ruby in Logstash? Logstash.conf file: input { http { port =\> 9600 id =\> "my\_plugin\_id" } } filter { ruby { code =\> "puts event\['message'\]… --- ## [Nested Filter Aggregation](https://discuss.elastic.co/t/nested-filter-aggregation/82639)
**Author:** [@arsi](https://discuss.elastic.co/u/arsi)\ **Replies:** 1\ **Last updated:** [April 18, 2017, 8:18pm UTC](https://discuss.elastic.co/t/nested-filter-aggregation/82639 "2017-04-18T20:18:19Z")
Hi, Let's say I have an index with multiple documents in it. Documents could have a field called "points" that is a list of objects. For example, say I have 2 documents in my\_index my\_index/type/doc1: "points": \[{"x"… --- ## [Kibana error \[ FATAL Error: \[config validation of \[elasticsearch\].username\]: value of "elastic" is forbidden.\]](https://discuss.elastic.co/t/kibana-error-fatal-error-config-validation-of-elasticsearch-username-value-of-elastic-is-forbidden/297956)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 6\ **Last updated:** [February 23, 2022, 10:11am UTC](https://discuss.elastic.co/t/kibana-error-fatal-error-config-validation-of-elasticsearch-username-value-of-elastic-is-forbidden/297956 "2022-02-23T10:11:13Z")
i had upgraded to verison 8.0 , my ELK stack is on POC (proof of concept) for now, so its on http and xpack features are disabled . I found this in the error log line Feb 22 21:13:37 dev-elk-app01 kibana\[23561\]: FATAL… --- ## [Painless: Collection.contains() not working](https://discuss.elastic.co/t/painless-collection-contains-not-working/178944)
**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\ **Replies:** 4\ **Last updated:** [April 30, 2019, 9:24am UTC](https://discuss.elastic.co/t/painless-collection-contains-not-working/178944 "2019-04-30T09:24:20Z")
I have a simple test object indexed. It has a collection "IntCollection" and the indexed object has this property set to the array {1, 2, 3, 4, 5}. Here is the (simplified) indexed object: "\_source": { // ... "IntC… --- ## [Unable to setup SSL connection from Filebeat to Logstash](https://discuss.elastic.co/t/unable-to-setup-ssl-connection-from-filebeat-to-logstash/118655)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 0\ **Last updated:** [February 6, 2018, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-setup-ssl-connection-from-filebeat-to-logstash/118655 "2018-02-06T13:44:39Z")
I've generated the necessary certificates on Logstash and copied the public key to Filebeat. However SSL connection is getting failed with the below error. Any help is greatly appreciated. Filebeat: 2018-02-06T13:24:3… [Previous page](https://discuss.elastic.co/top.md?page=272&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=274&per_page=50&period=all)