# Top **URL:** https://discuss.elastic.co/top.md?page=296&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 297 --- ## [Unrecognized VM option 'UseConcMarkSweepGC](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/254534)
**Author:** [@seePyou](https://discuss.elastic.co/u/seePyou)\ **Replies:** 4\ **Last updated:** [November 9, 2020, 4:37pm UTC](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/254534 "2020-11-09T16:37:47Z")
Hello I'm trying to use logstash in Windows 10 but I am stuck at this error: PS C:\\logstash-7.9.3\\bin\> .\\logstash -e 'input {stdin{}} output {stdout{}}' Unrecognized VM option 'UseConcMarkSweepGC' Error: Could not crea… --- ## [Elastic User Group Organizer's Guide](https://discuss.elastic.co/t/elastic-user-group-organizers-guide/1297)
**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\ **Replies:** 0\ **Last updated:** [May 26, 2015, 10:01am UTC](https://discuss.elastic.co/t/elastic-user-group-organizers-guide/1297 "2015-05-26T10:01:25Z")
At last count, there were more than 100 user groups worldwide to talk about the Elastic stack. We're always thrilled to support meetups and can do so in a variety of ways, including attendee gifts, budget for refreshment… --- ## [cosineSimilarity: script score query returned an invalid score for doc:](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931)
**Author:** [@lok63](https://discuss.elastic.co/u/lok63)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 6:09pm UTC](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931 "2020-01-09T18:09:04Z")
I have a strange issue with the \_search API. I saw other people in this forum which had similar issues and the problem for them was that they had negative values. However in my case I am using dense vectors. Moreover my … --- ## [Is there a way to export the CSV report of a dashboard in Kibana programmatically?](https://discuss.elastic.co/t/is-there-a-way-to-export-the-csv-report-of-a-dashboard-in-kibana-programmatically/230340)
**Author:** [@adarsh.venugopal](https://discuss.elastic.co/u/adarsh.venugopal)\ **Replies:** 6\ **Last updated:** [June 4, 2020, 9:24am UTC](https://discuss.elastic.co/t/is-there-a-way-to-export-the-csv-report-of-a-dashboard-in-kibana-programmatically/230340 "2020-06-04T09:24:03Z")
I understand that Kibana dashboard allows us to show logs data in a table like structure. It also allows us to download this data in a csv file. I can also see two download links provided in the dashboard which says 'Exp… --- ## [Reverse proxy issue(Using Nginx) with Kibana 7.5](https://discuss.elastic.co/t/reverse-proxy-issue-using-nginx-with-kibana-7-5/216602)
**Author:** [@ksareddy](https://discuss.elastic.co/u/ksareddy)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 3:36pm UTC](https://discuss.elastic.co/t/reverse-proxy-issue-using-nginx-with-kibana-7-5/216602 "2020-01-28T15:36:06Z")
Continuing the discussion from Nginx reverse proxy setup for Kibana: I am using Kibana 7.5 version I have faced this issue with Nginx. I have added configuration for following entries in the Nginx configuration file. It… --- ## [Curl command to set the number of replicas](https://discuss.elastic.co/t/curl-command-to-set-the-number-of-replicas/76962)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 8\ **Last updated:** [March 8, 2017, 2:02pm UTC](https://discuss.elastic.co/t/curl-command-to-set-the-number-of-replicas/76962 "2017-03-08T14:02:14Z")
Hi All , Please help me with the CURL command to change the "number\_of\_replicas" on Elasticsearch 5.0, the below command is not currently working with same- curl -XPUT http://localhost:9200/\_settings -d {"number\_of\_rep… --- ## [Getting "parser not found" error on a filter date range aggregation](https://discuss.elastic.co/t/getting-parser-not-found-error-on-a-filter-date-range-aggregation/103399)
**Author:** [@pdesoyres](https://discuss.elastic.co/u/pdesoyres)\ **Replies:** 4\ **Last updated:** [October 10, 2017, 3:40pm UTC](https://discuss.elastic.co/t/getting-parser-not-found-error-on-a-filter-date-range-aggregation/103399 "2017-10-10T15:40:48Z")
I have the following mapping : { "my\_index": { "mappings": { "my\_type": { "properties": { "date": { "type": "date", "format": "strict\_date\_optional\_time||epoch\_milli… --- ## [Exact Match in String field](https://discuss.elastic.co/t/exact-match-in-string-field/9560)
**Author:** [@shannu](https://discuss.elastic.co/u/shannu)\ **Replies:** 2\ **Last updated:** [November 6, 2012, 9:43am UTC](https://discuss.elastic.co/t/exact-match-in-string-field/9560 "2012-11-06T09:43:39Z")
Hello All, I would like to perform EXACT Match (Example Search : "Firstname Lastname") in a String field "ArticleBody" where the \*value of the field is a big chunk of text\* and within in this text I would like to … --- ## [Identity/Autonumber ID's](https://discuss.elastic.co/t/identity-autonumber-ids/7973)
**Author:** [@Daniel\_Duarte\_Figuei](https://discuss.elastic.co/u/Daniel_Duarte_Figuei)\ **Replies:** 6\ **Last updated:** [January 16, 2015, 8:44pm UTC](https://discuss.elastic.co/t/identity-autonumber-ids/7973 "2015-01-16T20:44:58Z")
Is there a way of using identity/autonumber ids in ES similar to a traditional relational database? I have an index called post\_index with "post" documents and I want to assign unique numeric ids to them (1, 2, 3..)… --- ## [ES5.2 - Can't bind to 0.0.0.0](https://discuss.elastic.co/t/es5-2-cant-bind-to-0-0-0-0/77797)
**Author:** [@idanhagai](https://discuss.elastic.co/u/idanhagai)\ **Replies:** 2\ **Last updated:** [March 8, 2017, 1:16pm UTC](https://discuss.elastic.co/t/es5-2-cant-bind-to-0-0-0-0/77797 "2017-03-08T13:16:06Z")
I'm using ES 5.2 on ubuntu 14.04 My yml contains: network.host: 0.0.0.0 http.port: 9200 transport.tcp.port: 9300 transport.host: 0.0.0.0 transport.bind\_host: 0.0.0.0 transport.publish\_host: 0.0.0.0 From the log th… --- ## [Max\_open\_scroll\_context, scroll\_ids, and shards](https://discuss.elastic.co/t/max-open-scroll-context-scroll-ids-and-shards/253872)
**Author:** [@Michael\_Cayanan](https://discuss.elastic.co/u/Michael_Cayanan)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 1:39pm UTC](https://discuss.elastic.co/t/max-open-scroll-context-scroll-ids-and-shards/253872 "2020-11-06T13:39:03Z")
Hi. I'm making a query across several indices with 8 shards per index. To be specific it ends up being about 752 shards in total. When I make a scroll query, I initially get that Trying to create too many scroll contex… --- ## [Elasticsearch Certificate Requirements](https://discuss.elastic.co/t/elasticsearch-certificate-requirements/188143)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 6\ **Last updated:** [July 3, 2019, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-certificate-requirements/188143 "2019-07-03T14:14:12Z")
I'm trying to figure out what types of certificates Elasticsearch will work with. I'd like to minimize the number of certs and the process for maintaining those certs for the Elastic Stack. I see that pem and PKCS12 ar… --- ## [How do I enable mlockall on Linux?](https://discuss.elastic.co/t/how-do-i-enable-mlockall-on-linux/97)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 9:58am UTC](https://discuss.elastic.co/t/how-do-i-enable-mlockall-on-linux/97 "2017-02-16T09:58:01Z")
As a precursor, see the mlockall section in http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/setup-configuration.html#setup-configuration-memory The location of some of the files below may vary dep… --- ## [How can kibana compare two fields?](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 7\ **Last updated:** [September 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918 "2021-09-03T06:51:22Z")
hello! I want to compare two fields in the query bar. is it posible to do it in kibana ? example: field\_1 == value\_1 field\_2 == value\_2 thanks in advance! --- ## [Querying for a empty array](https://discuss.elastic.co/t/querying-for-a-empty-array/303813)
**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 12:54pm UTC](https://discuss.elastic.co/t/querying-for-a-empty-array/303813 "2022-05-04T12:54:24Z")
I have a ES index with a nested field called “relations”. In the mapping, it is defined as: "relations": { "type": "nested", "properties": { "primaryWordIndex": { "type": "… --- ## [How to kill completely the kibana process?](https://discuss.elastic.co/t/how-to-kill-completely-the-kibana-process/83063)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 5\ **Last updated:** [April 21, 2017, 12:20pm UTC](https://discuss.elastic.co/t/how-to-kill-completely-the-kibana-process/83063 "2017-04-21T12:20:28Z")
I tried this ps -ef | grep kibana and find the process but even though i killed by using kill -9 \but still it is running in different pid's. admin@kibana:/var/log$ ps -ef | grep kibana root 41202 1 0 04… --- ## [Should there be a Painless section of the forum?](https://discuss.elastic.co/t/should-there-be-a-painless-section-of-the-forum/115132)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 3\ **Last updated:** [January 13, 2018, 2:16pm UTC](https://discuss.elastic.co/t/should-there-be-a-painless-section-of-the-forum/115132 "2018-01-13T14:16:37Z")
I'm wondering if the forum could use a dedicated Painless section. I'm working on learning Painless but having a lot of trouble since there isn't a ton of easy ways (from what I understand) of debugging. I think it would… --- ## [Conditional statement in output](https://discuss.elastic.co/t/conditional-statement-in-output/74672)
**Author:** [@andrew-waters](https://discuss.elastic.co/u/andrew-waters)\ **Replies:** 5\ **Last updated:** [February 18, 2017, 9:46am UTC](https://discuss.elastic.co/t/conditional-statement-in-output/74672 "2017-02-18T09:46:55Z")
I have a logstash configuration file (5.2:alpine) and want to use the same file for development and production environments. I have loaded in environment variables and confirmed they exist. However, when trying to ch… --- ## [JSON query in Kibana 4](https://discuss.elastic.co/t/json-query-in-kibana-4/26128)
**Author:** [@Surbhi\_Agarwal](https://discuss.elastic.co/u/Surbhi_Agarwal)\ **Replies:** 4\ **Last updated:** [May 11, 2016, 9:48am UTC](https://discuss.elastic.co/t/json-query-in-kibana-4/26128 "2016-05-11T09:48:33Z")
I want to know how can one write JSON queries in Kibana 4 . --- ## [X-pack 5.1.1 error in kibana](https://discuss.elastic.co/t/x-pack-5-1-1-error-in-kibana/70397)
**Author:** [@Lucifer\_hbp](https://discuss.elastic.co/u/Lucifer_hbp)\ **Replies:** 8\ **Last updated:** [January 10, 2017, 10:45am UTC](https://discuss.elastic.co/t/x-pack-5-1-1-error-in-kibana/70397 "2017-01-10T10:45:59Z")
Hi, I have elasticsearch 5.1.1 & kibana 5.1.1, I installed x-pack 5.1.1 in both, but after restarting kibana i am getting following message in kibana: \[06:52:32.441\] \[info\]\[status\]\[ui settings\] Status changed fro… --- ## [Packetbeat 7.13.3 Error parsing handshake message](https://discuss.elastic.co/t/packetbeat-7-13-3-error-parsing-handshake-message/278903)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 9:52pm UTC](https://discuss.elastic.co/t/packetbeat-7-13-3-error-parsing-handshake-message/278903 "2021-07-22T21:52:08Z")
Hello, I am using packetbeat version 7.13.3, I run it since 3 days and it was working, and today I went to check and found out that it stopped since 12 hours, with some warning at the end of the logs and error. Packetb… --- ## [Multiple Custom Sorting in Elastic Search](https://discuss.elastic.co/t/multiple-custom-sorting-in-elastic-search/98331)
**Author:** [@tenaciousd93](https://discuss.elastic.co/u/tenaciousd93)\ **Replies:** 3\ **Last updated:** [August 25, 2017, 11:19am UTC](https://discuss.elastic.co/t/multiple-custom-sorting-in-elastic-search/98331 "2017-08-25T11:19:11Z")
Hello everyone, I’m new in Elastic Search and before I getting started and learn it I would like to know if Elastic Search is what I need. I already have a Solr DB server with an index of documents. I need to show the… --- ## [How to load csv file into elasticsearch for visualizaion in kibana](https://discuss.elastic.co/t/how-to-load-csv-file-into-elasticsearch-for-visualizaion-in-kibana/61501)
**Author:** [@Jaishil\_Dhal](https://discuss.elastic.co/u/Jaishil_Dhal)\ **Replies:** 7\ **Last updated:** [September 27, 2016, 6:01am UTC](https://discuss.elastic.co/t/how-to-load-csv-file-into-elasticsearch-for-visualizaion-in-kibana/61501 "2016-09-27T06:01:04Z")
I have csv file that i attached with this. I have already try with logstash, with this i can able to open that file but can not do the visualization in kibana. its shows some error. I m using the following code for logs… --- ## [Can I filter the Output data separately?!](https://discuss.elastic.co/t/can-i-filter-the-output-data-separately/36064)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 8\ **Last updated:** [August 31, 2018, 8:11pm UTC](https://discuss.elastic.co/t/can-i-filter-the-output-data-separately/36064 "2018-08-31T20:11:33Z")
We have the following env: LS 2.0.x; ES 2.0.x and K 4.2.x The input comes from the trace logs that an application produces, we filter the data and then wish to populate two separate (but related) indices: orders and… --- ## [Is it possible to perform calculations using multiple fields in a document](https://discuss.elastic.co/t/is-it-possible-to-perform-calculations-using-multiple-fields-in-a-document/28220)
**Author:** [@spiral\_circ](https://discuss.elastic.co/u/spiral_circ)\ **Replies:** 3\ **Last updated:** [August 29, 2015, 3:28pm UTC](https://discuss.elastic.co/t/is-it-possible-to-perform-calculations-using-multiple-fields-in-a-document/28220 "2015-08-29T15:28:29Z")
I am new to elasticsearch, and trying to evaluate if my sql query can be migrated to elastic search. Is it possible to write an elasticsearch query that returns calculations performed using multiple fields in a docume… --- ## [Scroll API(C# NEST) fails](https://discuss.elastic.co/t/scroll-api-c-nest-fails/129320)
**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\ **Replies:** 7\ **Last updated:** [May 5, 2018, 5:17pm UTC](https://discuss.elastic.co/t/scroll-api-c-nest-fails/129320 "2018-05-05T17:17:51Z")
Hello guys, I am using scan and scroll api for ES nest 5.5 to retrieve documents over 1.3 million in size(6 fields/document) my scroll api works fine if I retrieve less number of documents(around 800000) but when I want… --- ## [Action \[indices:admin/create\] is unauthorized for user \[kibana\]](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958)
**Author:** [@RakshaChoudhary](https://discuss.elastic.co/u/RakshaChoudhary)\ **Replies:** 3\ **Last updated:** [June 7, 2018, 1:14pm UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958 "2018-06-07T13:14:39Z")
Hi, I am new to ElasticSearch and Kibana. Installed elasticsearch and Kibana at my laptop. Installed xpack also. I ran elasticsearch and kibana batch. And the trying to run below line in Dev Tools of Kibana. PUT /scho… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 9.0 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-9-0-released/379098)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 11, 2025, 2:28pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-9-0-released/379098 "2025-06-11T14:28:52Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-9.0 release! Elasticsearch beyonder provides automatic index, mapping, alias, template creation, index lifecycle policies and data when … --- ## [Set my passwords using x-pack/setup-passwords from script?](https://discuss.elastic.co/t/set-my-passwords-using-x-pack-setup-passwords-from-script/123324)
**Author:** [@sbu](https://discuss.elastic.co/u/sbu)\ **Replies:** 7\ **Last updated:** [March 16, 2018, 9:32am UTC](https://discuss.elastic.co/t/set-my-passwords-using-x-pack-setup-passwords-from-script/123324 "2018-03-16T09:32:21Z")
Hi, I'm trying to build a Terraform script (could be anything though) to install ES and Kibana, it's almost working. But when it comes to ... /usr/share/elasticsearch/bin/x-pack/setup-passwords interactive Setting th… --- ## [Getting XML into ES efficiently](https://discuss.elastic.co/t/getting-xml-into-es-efficiently/23075)
**Author:** [@James\_3](https://discuss.elastic.co/u/James_3)\ **Replies:** 6\ **Last updated:** [April 5, 2015, 12:34pm UTC](https://discuss.elastic.co/t/getting-xml-into-es-efficiently/23075 "2015-04-05T12:34:39Z")
Hi, Currently I am using scrapy to parse an XML file from an ftp server into elasticsearch. It works but seems quite a heavy weight solution and it uses a lot of memory too. I am wondering if I am better off writin… --- ## [Can't connect to Elasticsearch from logstash version8.2](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-from-logstash-version8-2/305785)
**Author:** [@oga](https://discuss.elastic.co/u/oga)\ **Replies:** 7\ **Last updated:** [May 29, 2022, 5:08am UTC](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-from-logstash-version8-2/305785 "2022-05-29T05:08:51Z")
I want to use Elasticsearch and Logstash(ver 8.2). After installed Elasticsearch and Kibana, I installed logstash. But I got error.It seems logstash can't connect to Elasticsearch. But Elasticsearch is runnning correc… --- ## [How to display Json on a Kibana Dashboard?](https://discuss.elastic.co/t/how-to-display-json-on-a-kibana-dashboard/56168)
**Author:** [@mbagatini](https://discuss.elastic.co/u/mbagatini)\ **Replies:** 6\ **Last updated:** [July 27, 2016, 3:37pm UTC](https://discuss.elastic.co/t/how-to-display-json-on-a-kibana-dashboard/56168 "2016-07-27T15:37:11Z")
I have a field on my elasticsearch index which is a raw Json, like this for example: { "id": 1234, "title": "Nice Title" } And I’m trying to display it in a nice user friendly way. Since the information is coming f… --- ## [Regex in Kibana Search bar?](https://discuss.elastic.co/t/regex-in-kibana-search-bar/255944)
**Author:** [@cskowronnek](https://discuss.elastic.co/u/cskowronnek)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 9:51am UTC](https://discuss.elastic.co/t/regex-in-kibana-search-bar/255944 "2020-11-19T09:51:37Z")
Hi all, I have a text field which I want to query for values containing only digits. This search works just fine: "query": { "regexp":{ "Overall State": "\[0-9\]\*" } } When I try to p… --- ## [Synonyms filter doesn't work in all modes when indexing](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071)
**Author:** [@yohanesss](https://discuss.elastic.co/u/yohanesss)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 9:21am UTC](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071 "2020-03-12T09:21:52Z")
Hi, I have a problem when I tried to index data with a synonyms that read from file, that is an mapper\_exception which giving me error like this: { "error" : { "root\_cause" : \[ { "type" : "mapper\_exception", "reaso… --- ## [Logstash Duplicate message](https://discuss.elastic.co/t/logstash-duplicate-message/26096)
**Author:** [@Junior\_Burleon](https://discuss.elastic.co/u/Junior_Burleon)\ **Replies:** 3\ **Last updated:** [July 27, 2015, 2:06pm UTC](https://discuss.elastic.co/t/logstash-duplicate-message/26096 "2015-07-27T14:06:59Z")
Hi, I really need your help. I use LogStash-Forwarder on a server to send my log on another server that use LogStash. And I Visualize all of my logs with Kibana. (Of course a use ElasticSearch for the analyze but I th… --- ## [Kibana High Availability](https://discuss.elastic.co/t/kibana-high-availability/210521)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 8\ **Last updated:** [December 9, 2019, 3:13pm UTC](https://discuss.elastic.co/t/kibana-high-availability/210521 "2019-12-09T15:13:25Z")
Dear All, Been looking for achieving HA for Kibana service alone however did not come across any. In a traditional way assigning a VIP for multiple instance behind it will do the job but am not sure whether this will wo… --- ## [FileBeats -Are there any ways we can delete the log files after file beat harvest the data to logstash](https://discuss.elastic.co/t/filebeats-are-there-any-ways-we-can-delete-the-log-files-after-file-beat-harvest-the-data-to-logstash/177997)
**Author:** [@prabhat\_ranjan](https://discuss.elastic.co/u/prabhat_ranjan)\ **Replies:** 5\ **Last updated:** [April 29, 2019, 7:35am UTC](https://discuss.elastic.co/t/filebeats-are-there-any-ways-we-can-delete-the-log-files-after-file-beat-harvest-the-data-to-logstash/177997 "2019-04-29T07:35:41Z")
FileBeats -Are there any ways we can delete the log files after file beat harvest the data to logstash. I am using window machine. I have json files(multiple) which is having application analyticsinfo's. I am reading th… --- ## [Unable to change elastic user password](https://discuss.elastic.co/t/unable-to-change-elastic-user-password/122887)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 12:41pm UTC](https://discuss.elastic.co/t/unable-to-change-elastic-user-password/122887 "2018-03-08T12:41:28Z")
I recently upgraded from 6.1 to 6.2. Until I installed x-pack plugin on elasticsearch and kibana I was able to query elastic using elastic user and empty password. I tried following this documentation (https://www.elast… --- ## [How to combine multiple fields and aggregate docs from it?](https://discuss.elastic.co/t/how-to-combine-multiple-fields-and-aggregate-docs-from-it/40463)
**Author:** [@dynamicscope](https://discuss.elastic.co/u/dynamicscope)\ **Replies:** 1\ **Last updated:** [January 29, 2016, 10:45am UTC](https://discuss.elastic.co/t/how-to-combine-multiple-fields-and-aggregate-docs-from-it/40463 "2016-01-29T10:45:36Z")
I am trying to combine two fields and aggregate for doc count from the combined field. Let's say I have two fields as following. { "width": 320, "height": 480 } I would like to combine these two fields and create… --- ## [Use CIDR masks from Discover tab?](https://discuss.elastic.co/t/use-cidr-masks-from-discover-tab/26504)
**Author:** [@Rob\_Buhler](https://discuss.elastic.co/u/Rob_Buhler)\ **Replies:** 5\ **Last updated:** [December 23, 2015, 11:12pm UTC](https://discuss.elastic.co/t/use-cidr-masks-from-discover-tab/26504 "2015-12-23T23:12:19Z")
I know there is the ability in Kibana to search by an IP range ex: ip:\["128.0.0.0" TO "191.255.255.255"\] and there is also the ability to use CIDR masks when creating a new aggregation (Visualization tab). My quest… --- ## [Split source value and create a custom field with splitted one](https://discuss.elastic.co/t/split-source-value-and-create-a-custom-field-with-splitted-one/110334)
**Author:** [@platso588](https://discuss.elastic.co/u/platso588)\ **Replies:** 4\ **Last updated:** [December 5, 2017, 1:37pm UTC](https://discuss.elastic.co/t/split-source-value-and-create-a-custom-field-with-splitted-one/110334 "2017-12-05T13:37:54Z")
Hi All, I have merged few Yarn logs in elasticsearch and in Kibana. source=/data06/yarn/logs/application\_1510757389739\_0634/container\_e15\_1510757554319\_0034\_01\_000001/hive2kafka-export29.log From source, I want to ext… --- ## [Can't query for date or date range](https://discuss.elastic.co/t/cant-query-for-date-or-date-range/134378)
**Author:** [@Erik\_M](https://discuss.elastic.co/u/Erik_M)\ **Replies:** 5\ **Last updated:** [June 7, 2018, 7:24am UTC](https://discuss.elastic.co/t/cant-query-for-date-or-date-range/134378 "2018-06-07T07:24:36Z")
Hey, I have a problem concerning querying the dates in kibana. The raw data is in the following format: 2018-03-16 00:00:00 The dates are formatted in the mapping as follows: "starts": { "type": "date", … --- ## [Exclude\_lines regex isn't working](https://discuss.elastic.co/t/exclude-lines-regex-isnt-working/112723)
**Author:** [@robscott27](https://discuss.elastic.co/u/robscott27)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 11:02pm UTC](https://discuss.elastic.co/t/exclude-lines-regex-isnt-working/112723 "2018-01-03T23:02:09Z")
I'm trying to exclude lines from apache log that contain /server-status?auto= within the line. It's a standard apache combined log file. exclude\_lines expressions I've tried: \['(?i:/server-status?auto=)'\] \['.server-st… --- ## [How to convert string field to number and then apply rang](https://discuss.elastic.co/t/how-to-convert-string-field-to-number-and-then-apply-rang/112785)
**Author:** [@joe\_print](https://discuss.elastic.co/u/joe_print)\ **Replies:** 7\ **Last updated:** [December 21, 2017, 11:31am UTC](https://discuss.elastic.co/t/how-to-convert-string-field-to-number-and-then-apply-rang/112785 "2017-12-21T11:31:18Z")
Hi, I have a field in Elastic that its type is number but its saved as string, now I want to know is it possible to treat it as number and apply range operation on that? --- ## [Config.reload.automatic for logstash docker container](https://discuss.elastic.co/t/config-reload-automatic-for-logstash-docker-container/153727)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [November 9, 2018, 1:38pm UTC](https://discuss.elastic.co/t/config-reload-automatic-for-logstash-docker-container/153727 "2018-11-09T13:38:53Z")
Hi I've added: config.reload.automatic: true config.reload.interval: 300 to my config/logstash/logstash.yml which points to /usr/share/logstash/config/logstash.yml in the running logstash docker container. I also tr… --- ## [Which web ui is mostly used for ElasticSearch?](https://discuss.elastic.co/t/which-web-ui-is-mostly-used-for-elasticsearch/15119)
**Author:** [@11139](https://discuss.elastic.co/u/11139)\ **Replies:** 4\ **Last updated:** [January 7, 2014, 9:06am UTC](https://discuss.elastic.co/t/which-web-ui-is-mostly-used-for-elasticsearch/15119 "2014-01-07T09:06:25Z")
I was a newer to ElasticSearch. As far as I konw that ElasticSearch has no web UI interface. So if I want to use a web UI to search ElasticSearch, which one is fit for. I know one of web UI called ElasticSearch-Head.… --- ## [Best way to analyze Event Correlation Sequence detections](https://discuss.elastic.co/t/best-way-to-analyze-event-correlation-sequence-detections/320497)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 5\ **Last updated:** [December 7, 2022, 8:20pm UTC](https://discuss.elastic.co/t/best-way-to-analyze-event-correlation-sequence-detections/320497 "2022-12-07T20:20:57Z")
Hey, I want to analyse an Event Correlation rule detection (EQL) in Elastic SIEM. However, for sequence-type EQL queries, the alert details and SIEM app don't show me all the information I need to do my analysis. Consid… --- ## [Best practices for related and hierarchical data](https://discuss.elastic.co/t/best-practices-for-related-and-hierarchical-data/63895)
**Author:** [@ianj](https://discuss.elastic.co/u/ianj)\ **Replies:** 3\ **Last updated:** [October 25, 2016, 5:15pm UTC](https://discuss.elastic.co/t/best-practices-for-related-and-hierarchical-data/63895 "2016-10-25T17:15:17Z")
I'm new to elastic search and am grappling with how best to structure or not structure my model. For Example 1000's of users belong to a few hundred parent users and I want to record an indefinite amount of activity o… --- ## [Remove trailing white space in logstash filter](https://discuss.elastic.co/t/remove-trailing-white-space-in-logstash-filter/110819)
**Author:** [@platso588](https://discuss.elastic.co/u/platso588)\ **Replies:** 6\ **Last updated:** [December 8, 2017, 12:25pm UTC](https://discuss.elastic.co/t/remove-trailing-white-space-in-logstash-filter/110819 "2017-12-08T12:25:53Z")
I am trying to add filter for the below log format: \[24/Oct/2017 15:04:53 \] cluster WARNING Picking RM HA: ha The filter I have added is: \[%{MONTHDAY:logDate}/%{MONTH:logMonth}/%{YEAR:logYear} %{TIME:logTime} \]%… --- ## [After X-pack Installation : Failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/after-x-pack-installation-failed-to-authenticate-user-elastic/224416)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 6\ **Last updated:** [March 20, 2020, 2:58pm UTC](https://discuss.elastic.co/t/after-x-pack-installation-failed-to-authenticate-user-elastic/224416 "2020-03-20T14:58:10Z")
Hello Guys, as i wanted to implement security in my Cluster, i followed along This Guide - an it all went well until Step 6. Set the passwords for all built-in users. When i try to execute the command: bin/elasti… [Previous page](https://discuss.elastic.co/top.md?page=295&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=297&per_page=50&period=all)