# Top **URL:** https://discuss.elastic.co/top.md?page=313&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 314 --- ## [About user authentication: action \[indices:data/read/search\] is unauthorized for user](https://discuss.elastic.co/t/about-user-authentication-action-indices-data-read-search-is-unauthorized-for-user/100506)
**Author:** [@Chu\_Jun](https://discuss.elastic.co/u/Chu_Jun)\ **Replies:** 3\ **Last updated:** [September 15, 2017, 8:48am UTC](https://discuss.elastic.co/t/about-user-authentication-action-indices-data-read-search-is-unauthorized-for-user/100506 "2017-09-15T08:48:15Z")
Hi, I used kibana -\> management -\> (security) user to created an user 'test' with role 'kibana\_user', but I won't able to see any index and perform GET indexname/\_search for all the index when I logged in as user test. … --- ## [Index Patterns: Please specify a default index pattern](https://discuss.elastic.co/t/index-patterns-please-specify-a-default-index-pattern/140310)
**Author:** [@Aziz\_Sahnoun](https://discuss.elastic.co/u/Aziz_Sahnoun)\ **Replies:** 7\ **Last updated:** [July 17, 2018, 11:38am UTC](https://discuss.elastic.co/t/index-patterns-please-specify-a-default-index-pattern/140310 "2018-07-17T11:38:49Z")
hello i'm using ELK on my virtual machine centos 7 using vSphere client i have some logs to visualise /var/log/secure i've connected my kibana via inginx and its working fine ! i've set this configuration for /etc/lo… --- ## [Bootstrap checks failed & the default discovery settings are unsuitable for production use; at least one of \[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842)
**Author:** [@nkrshna](https://discuss.elastic.co/u/nkrshna)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 7:01pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842 "2020-07-03T19:01:03Z")
Hi I have my Elasticsearch up and running but when I'm trying to configure xpack security feature under basic license mode is see issue and elasticsearch service does not restart. Below is my elasticsearch.yml file. c… --- ## [Has anyone bundled ELK as an OVA?](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova/76556)
**Author:** [@bubba198](https://discuss.elastic.co/u/bubba198)\ **Replies:** 7\ **Last updated:** [March 6, 2017, 10:57pm UTC](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova/76556 "2017-03-06T22:57:04Z")
Has anyone bundled ELK as an OVA? One which can be deployed to VM Ware or another hypervisor in a matter of minutes so that trying out the ELK stack becomes more accessible to everyone? Thank you ~B --- ## [Wildcard with exact phrase search using query\_string](https://discuss.elastic.co/t/wildcard-with-exact-phrase-search-using-query-string/102631)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 6\ **Last updated:** [October 9, 2017, 4:10pm UTC](https://discuss.elastic.co/t/wildcard-with-exact-phrase-search-using-query-string/102631 "2017-10-09T16:10:37Z")
I have issue, I need to run exact search with wildcard using "query\_string". how can i do so? the query looks like this. this query returns "0" results { "query":{ "bool":{ "must":\[ { "match\_phrase":{ "docproperti… --- ## [Is it possible to give LS\_HEAP\_SIZE (-Xms and -Xmx) while starting logstash 1.4.2 or .15.2 like elasticsearch?](https://discuss.elastic.co/t/is-it-possible-to-give-ls-heap-size-xms-and-xmx-while-starting-logstash-1-4-2-or-15-2-like-elasticsearch/39493)
**Author:** [@thiruna](https://discuss.elastic.co/u/thiruna)\ **Replies:** 7\ **Last updated:** [January 21, 2016, 10:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-give-ls-heap-size-xms-and-xmx-while-starting-logstash-1-4-2-or-15-2-like-elasticsearch/39493 "2016-01-21T22:09:25Z")
Hi, Is it possible to give LS\_HEAP\_SIZE (-Xms and -Xmx) while starting logstash 1.4.2 or .15.2 like elasticsearch? instead of changing the logstash.sh (We don't have permission on the logstash installation folder). … --- ## [Kibana Sharing - Short URL - Kibana did not load properly](https://discuss.elastic.co/t/kibana-sharing-short-url-kibana-did-not-load-properly/103258)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 8\ **Last updated:** [October 11, 2017, 5:48pm UTC](https://discuss.elastic.co/t/kibana-sharing-short-url-kibana-did-not-load-properly/103258 "2017-10-11T17:48:57Z")
Kibana v5.6.2, generic, fresh install with x-pack. No reverse proxy front-end or any When I try to generate a short URL from Kibana, it generates without error. \[image\] However when I attempt to navigate to that URL, … --- ## [Using Regex in Kibana Query DSL (filter-option in discover mode)](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937)
**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\ **Replies:** 4\ **Last updated:** [May 5, 2022, 5:45am UTC](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937 "2022-05-05T05:45:38Z")
Good day everyone, I am relatively new to the use of Kibana. And I have the following problem: I want to filter out all numbers and special characters like "\_" or "-" in a field in Discover mode, so that I only have Le… --- ## [How to implement SQL 'group by' on multiple fields using aggregations?](https://discuss.elastic.co/t/how-to-implement-sql-group-by-on-multiple-fields-using-aggregations/1361)
**Author:** [@Barak\_Yaish](https://discuss.elastic.co/u/Barak_Yaish)\ **Replies:** 2\ **Last updated:** [May 27, 2015, 8:21pm UTC](https://discuss.elastic.co/t/how-to-implement-sql-group-by-on-multiple-fields-using-aggregations/1361 "2015-05-27T20:21:29Z")
Hi all, I'm trying to implement the following kind of SQL using ES aggs: select id1, id2, count(\*) from mytable group by id1, id2; From what I read this can only accomplished using copy\_to during indexing. Is it in… --- ## [Http Cors Setting](https://discuss.elastic.co/t/http-cors-setting/20687)
**Author:** [@Reza\_Samee](https://discuss.elastic.co/u/Reza_Samee)\ **Replies:** 4\ **Last updated:** [January 15, 2015, 12:10pm UTC](https://discuss.elastic.co/t/http-cors-setting/20687 "2015-01-15T12:10:54Z")
Hello to all! Note: I'm new to ELK :) I'm using elasticsearch 1.4.0 and I'm trying to enable "http.cors" feature in elasticsearch. When I set "http.cors.enabled: true" and "http.cors.allow-origin: \*" in config … --- ## [Docker container exiting with code 0 & no logs](https://discuss.elastic.co/t/docker-container-exiting-with-code-0-no-logs/109390)
**Author:** [@hughmp](https://discuss.elastic.co/u/hughmp)\ **Replies:** 7\ **Last updated:** [November 30, 2017, 1:51pm UTC](https://discuss.elastic.co/t/docker-container-exiting-with-code-0-no-logs/109390 "2017-11-30T13:51:50Z")
I have elasticsearch up and running in a Docker container and accessible from other containers with http://elasticsearch. I'm trying to connect up Kibana and no matter what I try, the container simply exits with error co… --- ## [Percentage label inside pie chart](https://discuss.elastic.co/t/percentage-label-inside-pie-chart/31277)
**Author:** [@alvarezdaniel](https://discuss.elastic.co/u/alvarezdaniel)\ **Replies:** 1\ **Last updated:** [September 29, 2015, 12:30pm UTC](https://discuss.elastic.co/t/percentage-label-inside-pie-chart/31277 "2015-09-29T12:30:30Z")
Continuing the discussion from Displaying percentages in Vertical Bar chart with Group mode: My need is to show each percentage value inside the pie chart graph, without a mouse-over. This is an example of what I need: … --- ## [Is kibana supports dynamic filters to a URL?](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613)
**Author:** [@kibana\_anil](https://discuss.elastic.co/u/kibana_anil)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 11:58am UTC](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613 "2020-08-12T11:58:58Z")
Is kibana supports dynamic filters to a URL ? Example - create a filter on an index and saved this search. copy the URL This search URL is associated to the one of the field in Index Pattern. But, I couldn't add diff… --- ## [Connection to localhost:9200 refused](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [May 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040 "2022-05-05T14:28:10Z")
Hello all, I am running a three node cluster with version 8.0.0. I start Elasticsearch nodes, they start without any errors. but when I load data from Logstash it gives me following errors. \[2022-05-04T14:54:41,780\]\[I… --- ## [How to create a dynamic url for kibana discover](https://discuss.elastic.co/t/how-to-create-a-dynamic-url-for-kibana-discover/204152)
**Author:** [@rockyadi](https://discuss.elastic.co/u/rockyadi)\ **Replies:** 5\ **Last updated:** [October 28, 2019, 7:58pm UTC](https://discuss.elastic.co/t/how-to-create-a-dynamic-url-for-kibana-discover/204152 "2019-10-28T19:58:04Z")
Hi we have a daily report we publish in which we would like to provide a dynamic link (URL) to kibana with a dynamic search term string query say "Error Fetching, Shipping Details" and in a particular dynamic time frame… --- ## [How to use a load balancer with Elasticsearch?](https://discuss.elastic.co/t/how-to-use-a-load-balancer-with-elasticsearch/72)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 2\ **Last updated:** [May 25, 2017, 2:56pm UTC](https://discuss.elastic.co/t/how-to-use-a-load-balancer-with-elasticsearch/72 "2017-05-25T14:56:48Z")
For load balancing, there are actually a few out of the box solutions available without having to use an external load balancer. Elasticsearch also provides a light weight load balancer in the form of what we call a c… --- ## [How to add a condition to filter out count greater than some value in Timelion?](https://discuss.elastic.co/t/how-to-add-a-condition-to-filter-out-count-greater-than-some-value-in-timelion/86213)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [May 19, 2017, 7:10am UTC](https://discuss.elastic.co/t/how-to-add-a-condition-to-filter-out-count-greater-than-some-value-in-timelion/86213 "2017-05-19T07:10:26Z")
Hi, I am using ELK GA 5.0.0 and I have the below timelion code; .es(index=mylogs-\*, q='response:error',metric=count,split=username:10).divide(.es(index=mylogs-\*, q='response:success',metric=count).if("eq", 0, .es(ind… --- ## [Using regex grouping and logical OR in a Grok Pattern](https://discuss.elastic.co/t/using-regex-grouping-and-logical-or-in-a-grok-pattern/53069)
**Author:** [@cb2015](https://discuss.elastic.co/u/cb2015)\ **Replies:** 2\ **Last updated:** [June 20, 2016, 6:15pm UTC](https://discuss.elastic.co/t/using-regex-grouping-and-logical-or-in-a-grok-pattern/53069 "2016-06-20T18:15:15Z")
Hi Everyone, I am trying to parse a log which has two formats in it. They are: Timestamp loglevel thread blahblahblah Timestamp thread loglevel blahblahblah I am currently trying to use a | and ()'s to cover for b… --- ## [Date format with timezone offset](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576)
**Author:** [@Xavier\_Romero](https://discuss.elastic.co/u/Xavier_Romero)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 6:07pm UTC](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576 "2020-05-07T18:07:41Z")
Hi there, Having a hard time to parse a date with zone offset. I need to parse dates like this: "2020-05-07 13:16:44+00:00" So far, I've tried: PUT /\_template/test { "index\_patterns": \["test"\], "mappings": { "p… --- ## [Search.max\_async\_search\_response\_size](https://discuss.elastic.co/t/search-max-async-search-response-size/317202)
**Author:** [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\ **Replies:** 7\ **Last updated:** [October 23, 2022, 5:17am UTC](https://discuss.elastic.co/t/search-max-async-search-response-size/317202 "2022-10-23T05:17:45Z")
Hi all, I am new to Elasticsearch stack. Any suggestions or help is greatly appreciated please. I encountered this error after doing a http\_poller in Logstash. {"@timestamp":"2022-10-21T13:17:56.029Z", "log.level":"ERR… --- ## [Query on numeric data type](https://discuss.elastic.co/t/query-on-numeric-data-type/78313)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 5\ **Last updated:** [March 16, 2017, 8:21am UTC](https://discuss.elastic.co/t/query-on-numeric-data-type/78313 "2017-03-16T08:21:28Z")
Is it possible to do a wildcard search in a long or a numeric field in elasticsearch ? --- ## [\[ANNOUNCEMENT\] New release of logstashbeat](https://discuss.elastic.co/t/announcement-new-release-of-logstashbeat/54504)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 1\ **Last updated:** [July 1, 2016, 12:33pm UTC](https://discuss.elastic.co/t/announcement-new-release-of-logstashbeat/54504 "2016-07-01T12:33:03Z")
Logstash 5.0.0-alpha4 has been released yesterday with a good deal of new features and the Monitoring API has been beefed up quite a bit. The previous version of logstashbeat used to gather events, jvm and process node s… --- ## [Error Provisioning Index Pattern](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 6\ **Last updated:** [June 22, 2021, 6:42pm UTC](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172 "2021-06-22T18:42:03Z")
Hi, I'm trying to create an index pattern from the following json file: { "index\_pattern": { "id": "\" "version": "0.1" "title": "test-\*", "timeFieldName": "@timestamp", "fieldFormats":… --- ## [ElasticSearch JAVA API gives error after short time](https://discuss.elastic.co/t/elasticsearch-java-api-gives-error-after-short-time/26574)
**Author:** [@Fisa](https://discuss.elastic.co/u/Fisa)\ **Replies:** 4\ **Last updated:** [September 21, 2015, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-gives-error-after-short-time/26574 "2015-09-21T22:05:55Z")
Hi Everybody, I am new Elastic-search. I started using elastic-search and now reading from writing to elastic-search through Java code. for that i used elasticsearch-1.5.2.jar. I successfully gets connected to elastic-… --- ## [Elasticsearch bulk indexing issue](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-issue/217830)
**Author:** [@giorgio](https://discuss.elastic.co/u/giorgio)\ **Replies:** 8\ **Last updated:** [February 4, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-issue/217830 "2020-02-04T20:20:44Z")
I had issue that elasticsearch would become not responsive after few bulk index calls. I solved it by setting refresh\_interval to -1 before I call bulk api and set to 1s after i'm done ( https://discuss.elastic.co/t/stra… --- ## [How can I set current time in field](https://discuss.elastic.co/t/how-can-i-set-current-time-in-field/157542)
**Author:** [@2501492a6edd02b1386b](https://discuss.elastic.co/u/2501492a6edd02b1386b)\ **Replies:** 3\ **Last updated:** [November 21, 2018, 10:19am UTC](https://discuss.elastic.co/t/how-can-i-set-current-time-in-field/157542 "2018-11-21T10:19:44Z")
Hi, Could you please share with me info how I can to set current system time in field "@timestamp". In my case, I successfully copy field with @timestamp in filed "real\_timestamp". And then I would like to set @times… --- ## [Keep Logstash from Crashing](https://discuss.elastic.co/t/keep-logstash-from-crashing/90392)
**Author:** [@allenfin](https://discuss.elastic.co/u/allenfin)\ **Replies:** 5\ **Last updated:** [July 12, 2017, 8:03pm UTC](https://discuss.elastic.co/t/keep-logstash-from-crashing/90392 "2017-07-12T20:03:42Z")
Been having a hell of a time with logstash. Right now I setup a few different nginx instances to pump access and error logs into logstash to funnel into elasticsearch, but now I'm getting crashes and I have no idea how t… --- ## [DIsable Logstash Console Logs](https://discuss.elastic.co/t/disable-logstash-console-logs/185669)
**Author:** [@Mohit\_Ruke](https://discuss.elastic.co/u/Mohit_Ruke)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 2:31pm UTC](https://discuss.elastic.co/t/disable-logstash-console-logs/185669 "2019-06-13T14:31:22Z")
Hi everyone, I am trying to disable the logstash from writing all the console logs because due to a lot off i/o activity the ec2 throws error too much work for irq4 output { amazon\_es { hosts =\> \[""\] region =\> "us-e… --- ## [How many CPUs should be allocated to an Elasticsearch node that doesn't store data?](https://discuss.elastic.co/t/how-many-cpus-should-be-allocated-to-an-elasticsearch-node-that-doesnt-store-data/118729)
**Author:** [@shanim](https://discuss.elastic.co/u/shanim)\ **Replies:** 5\ **Last updated:** [February 7, 2018, 12:33am UTC](https://discuss.elastic.co/t/how-many-cpus-should-be-allocated-to-an-elasticsearch-node-that-doesnt-store-data/118729 "2018-02-07T00:33:38Z")
I raised this question on stackoverflow. Would you be able to help answer this? The Elasticsearch documentation recommends using multi-core processors for Elasticsearch nodes but doesn't recommend the number of CPU core… --- ## [Spark tuning for Elasticsearch - how to increase Index/Ingest throughput](https://discuss.elastic.co/t/spark-tuning-for-elasticsearch-how-to-increase-index-ingest-throughput/55922)
**Author:** [@dreamer](https://discuss.elastic.co/u/dreamer)\ **Replies:** 2\ **Last updated:** [December 1, 2016, 11:44pm UTC](https://discuss.elastic.co/t/spark-tuning-for-elasticsearch-how-to-increase-index-ingest-throughput/55922 "2016-12-01T23:44:28Z")
Hello everyone, I would like to know the relation between Spark executors, cores with Elasticsearch batch size and how to tune Spark job optimally to get better index throughput. I have around 3.5B documents stored in … --- ## ["index" : "not\_analyzed"](https://discuss.elastic.co/t/index-not-analyzed/126606)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 1\ **Last updated:** [April 3, 2018, 4:58pm UTC](https://discuss.elastic.co/t/index-not-analyzed/126606 "2018-04-03T16:58:41Z")
In current releases of Elasticsearch, can a template be configured to not analyze an index? In a 4-year old blog post I saw someone had used: "index" : "not\_analyzed". Does this functionality still exist? I can not fin… --- ## [Running elasticsearch 5.0.0 on a raspberry PI 3](https://discuss.elastic.co/t/running-elasticsearch-5-0-0-on-a-raspberry-pi-3/64208)
**Author:** [@glagidse](https://discuss.elastic.co/u/glagidse)\ **Replies:** 8\ **Last updated:** [April 13, 2017, 3:06pm UTC](https://discuss.elastic.co/t/running-elasticsearch-5-0-0-on-a-raspberry-pi-3/64208 "2017-04-13T15:06:42Z")
How can I run elasticsearch on a Raspberry Pi 3 over a network? If I try to run it on a localhost it works, but if I try to run it over a network I get the following error: \[2016-10-27T23:09:39,941\]\[INFO \]\[o.e.t.Transp… --- ## [Aggregation of more than 10000 records](https://discuss.elastic.co/t/aggregation-of-more-than-10000-records/145575)
**Author:** [@sanjeebkdeka](https://discuss.elastic.co/u/sanjeebkdeka)\ **Replies:** 4\ **Last updated:** [August 23, 2018, 3:58pm UTC](https://discuss.elastic.co/t/aggregation-of-more-than-10000-records/145575 "2018-08-23T15:58:18Z")
Hi, My requirement needs retrieval of at least 10000 matching distinct entries from Elasticsearch. Each distinct entry could in turn be referring to multiple records grouped by a particular field. Lets say, at an averag… --- ## [New install can't access http port 9200](https://discuss.elastic.co/t/new-install-cant-access-http-port-9200/86114)
**Author:** [@kevinp512](https://discuss.elastic.co/u/kevinp512)\ **Replies:** 4\ **Last updated:** [May 17, 2017, 4:42pm UTC](https://discuss.elastic.co/t/new-install-cant-access-http-port-9200/86114 "2017-05-17T16:42:06Z")
I am doing my first ever install of elastic search and I appear to have hit an issue right out of the gate. I can't seem to get to http://:9200 from a browser. I performed an rpm install of version 5.4 on my CentOS 7 v… --- ## [What is a recommended healthcheck to use for Logstash?](https://discuss.elastic.co/t/what-is-a-recommended-healthcheck-to-use-for-logstash/27691)
**Author:** [@kvick](https://discuss.elastic.co/u/kvick)\ **Replies:** 4\ **Last updated:** [September 1, 2015, 3:54pm UTC](https://discuss.elastic.co/t/what-is-a-recommended-healthcheck-to-use-for-logstash/27691 "2015-09-01T15:54:13Z")
I'm in the process of upgrading from 1.4.2 to 1.5.2. In 1.4.2, I ran Logstash with the 'web' option which I could then use in my ELB healthcheck. \/logstash agent -f /etc/logstash.conf -l /\/logstas… --- ## [Http compression enabled but response not compressed](https://discuss.elastic.co/t/http-compression-enabled-but-response-not-compressed/103513)
**Author:** [@Slade](https://discuss.elastic.co/u/Slade)\ **Replies:** 8\ **Last updated:** [October 12, 2017, 12:03pm UTC](https://discuss.elastic.co/t/http-compression-enabled-but-response-not-compressed/103513 "2017-10-12T12:03:34Z")
I set http.compression: true and http.compression\_level: 3 in the elasticsearch.yml file of each node in the cluster. Viewing the \_nodes/settings?pretty shows that it is indeed enabled. The problem is that the response… --- ## [How to work with a json array](https://discuss.elastic.co/t/how-to-work-with-a-json-array/67042)
**Author:** [@AussiePete2015](https://discuss.elastic.co/u/AussiePete2015)\ **Replies:** 8\ **Last updated:** [November 28, 2016, 9:36pm UTC](https://discuss.elastic.co/t/how-to-work-with-a-json-array/67042 "2016-11-28T21:36:50Z")
Hi all, Environment Windows 7 64bit Elasticsearch, kibana, Logstash (5.0.0) I have been trying to work with an example of a json array in the Elastic documentation but being new I'm not able to load it. Attach json … --- ## [How does everyone feel about Amazon's prerolled ES service and how they have forked Elasticsearch?](https://discuss.elastic.co/t/how-does-everyone-feel-about-amazons-prerolled-es-service-and-how-they-have-forked-elasticsearch/281417)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 9:02pm UTC](https://discuss.elastic.co/t/how-does-everyone-feel-about-amazons-prerolled-es-service-and-how-they-have-forked-elasticsearch/281417 "2021-08-16T21:02:49Z")
First, I wanted to get other's opinions on Amazon's Elasticsearch service. While they do provide some nice features like nightly snapshots, etc. -- I'm discovering each day more annoying issues with their service. There… --- ## [Use dynamic Index name based on nested field](https://discuss.elastic.co/t/use-dynamic-index-name-based-on-nested-field/36362)
**Author:** [@alexander.rabenstein](https://discuss.elastic.co/u/alexander.rabenstein)\ **Replies:** 4\ **Last updated:** [May 2, 2016, 4:36am UTC](https://discuss.elastic.co/t/use-dynamic-index-name-based-on-nested-field/36362 "2016-05-02T04:36:06Z")
Hi, I am using the current versions of logstash, elasticsearch and filebeat. In my beats configuration I create a custom field: fields: type: wildfly product: lisa enviroment: test In logstash I wa… --- ## [\[ERROR\] timed out when collecting data](https://discuss.elastic.co/t/error-timed-out-when-collecting-data/146908)
**Author:** [@msina](https://discuss.elastic.co/u/msina)\ **Replies:** 0\ **Last updated:** [August 31, 2018, 7:06pm UTC](https://discuss.elastic.co/t/error-timed-out-when-collecting-data/146908 "2018-08-31T19:06:55Z")
Hi , version: 6.3.0 We have installed trial version of ELK and it was working fine but recently we observed below error in ELK nodes and no data is showing in kibana dashboard. In elk-master-node we are getting below … --- ## [Permission to generate CSV report](https://discuss.elastic.co/t/permission-to-generate-csv-report/270443)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 7:21am UTC](https://discuss.elastic.co/t/permission-to-generate-csv-report/270443 "2021-04-19T07:21:13Z")
How can I add access to generating CSV? Reporting error You don't have permission to generate this report. But I can't find such privilege... --- ## [Logstash Configuration file is not working its giving error](https://discuss.elastic.co/t/logstash-configuration-file-is-not-working-its-giving-error/119911)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 4\ **Last updated:** [February 17, 2018, 8:45pm UTC](https://discuss.elastic.co/t/logstash-configuration-file-is-not-working-its-giving-error/119911 "2018-02-17T20:45:34Z")
Hello All, I am using Elastic Stack 6.2.0. Elasticsearch and Kibana working fine but When i run any logstash config file then its giving following error: WARNING: Could not find logstash.yml which is typically located… --- ## [Splunk API monitor - Logstash pipeline question?](https://discuss.elastic.co/t/splunk-api-monitor-logstash-pipeline-question/153502)
**Author:** [@bloke](https://discuss.elastic.co/u/bloke)\ **Replies:** 0\ **Last updated:** [October 23, 2018, 12:43am UTC](https://discuss.elastic.co/t/splunk-api-monitor-logstash-pipeline-question/153502 "2018-10-23T00:43:22Z")
Hi Folks, I built a logstash pipeline to monitor splunk via the splunk API by doing the following. Build multi-file logstash pipeline like such 100-input-exec.conf input { exec { id =\> "cur… --- ## [Issue with KQL string query that has colon](https://discuss.elastic.co/t/issue-with-kql-string-query-that-has-colon/203912)
**Author:** [@thethomp](https://discuss.elastic.co/u/thethomp)\ **Replies:** 4\ **Last updated:** [October 18, 2019, 12:23am UTC](https://discuss.elastic.co/t/issue-with-kql-string-query-that-has-colon/203912 "2019-10-18T00:23:02Z")
I'm trying to construct a simple query to match all logs lines that start with "Error: ", but when I try to search for this string, all lines that include the word 'error' (not case sensitive) anywhere in the string are … --- ## [Error "Unknown setting 'protocol' for elasticsearch"](https://discuss.elastic.co/t/error-unknown-setting-protocol-for-elasticsearch/49264)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 8\ **Last updated:** [May 5, 2016, 8:27am UTC](https://discuss.elastic.co/t/error-unknown-setting-protocol-for-elasticsearch/49264 "2016-05-05T08:27:08Z")
Hi, I have installed Logstash 2.3.1 and logstash-output-elasticsearch\_java.gem because I would like to use the options: protocol, cluster and node\_name in my output. When Logstash starts I receive the next error: {… --- ## [Error start Logstash 5](https://discuss.elastic.co/t/error-start-logstash-5/63965)
**Author:** [@axil\_76](https://discuss.elastic.co/u/axil_76)\ **Replies:** 3\ **Last updated:** [December 7, 2016, 4:47pm UTC](https://discuss.elastic.co/t/error-start-logstash-5/63965 "2016-12-07T16:47:52Z")
Hello, I just installed logstash 5 and when I run it with the following configuration I have an error message /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d -l /var/log/logstash --verbose --path.settings=/et… --- ## [Mutate filter plugin: convert to keyword and text?](https://discuss.elastic.co/t/mutate-filter-plugin-convert-to-keyword-and-text/66936)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [November 25, 2016, 8:21am UTC](https://discuss.elastic.co/t/mutate-filter-plugin-convert-to-keyword-and-text/66936 "2016-11-25T08:21:36Z")
From the current mutate convert documentation: Valid conversion targets are: integer, float, string, and boolean. I expected to see the new-for-5.0 keyword and text types in that list. And perhaps a note about the st… --- ## [Calculation over aggregation results](https://discuss.elastic.co/t/calculation-over-aggregation-results/25929)
**Author:** [@Andrei\_Grigorev](https://discuss.elastic.co/u/Andrei_Grigorev)\ **Replies:** 2\ **Last updated:** [July 21, 2015, 8:24am UTC](https://discuss.elastic.co/t/calculation-over-aggregation-results/25929 "2015-07-21T08:24:31Z")
I am using ES 1.6.0. Suppose we have following documents indexed under type "t" in index "test": \[ { // ... "\_source": { "id": "t2", "ts": "2015… --- ## [Change date format "visualize"](https://discuss.elastic.co/t/change-date-format-visualize/67731)
**Author:** [@emanuele](https://discuss.elastic.co/u/emanuele)\ **Replies:** 1\ **Last updated:** [December 1, 2016, 8:22pm UTC](https://discuss.elastic.co/t/change-date-format-visualize/67731 "2016-12-01T20:22:55Z")
Hi, I have date term on index (YYYY-MM-DD). It's possible change date format "visualize" bars, line, ecc.. from "2014-07-01 01:00:00" to "01-07-2014" I have change settings (dateFormat : DD-MM-YYYY) but nothing... … --- ## [Force shard reallocation](https://discuss.elastic.co/t/force-shard-reallocation/36839)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 7\ **Last updated:** [January 5, 2016, 12:26pm UTC](https://discuss.elastic.co/t/force-shard-reallocation/36839 "2016-01-05T12:26:53Z")
Also if I know I have a node I want to take down - can I force all the primaries to migrate to other machines before hand to minimize any effect. This become more crucial when sometimes we have indices without replicat… [Previous page](https://discuss.elastic.co/top.md?page=312&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=314&per_page=50&period=all)