# Top

**URL:** https://discuss.elastic.co/top.md?page=316&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 317

---

## [Best option for archiving logs](https://discuss.elastic.co/t/best-option-for-archiving-logs/130453)

<div class="topic-metadata">

**Author:** [@petehaley](https://discuss.elastic.co/u/petehaley)\
**Replies:** 4\
**Last updated:** [May 4, 2018, 12:09pm UTC](https://discuss.elastic.co/t/best-option-for-archiving-logs/130453 "2018-05-04T12:09:03Z")

</div>

Hello all, I am in the process of building a log analysis environment based on Elastic Stack in a classic setup: Beats/Syslog -\> Logstash -\> Elasticsearch However, there is a requirement for some of the logs to be sto…

---

## [Count of values on array field](https://discuss.elastic.co/t/count-of-values-on-array-field/13039)

<div class="topic-metadata">

**Author:** [@Perry](https://discuss.elastic.co/u/Perry)\
**Replies:** 2\
**Last updated:** [August 2, 2013, 10:09am UTC](https://discuss.elastic.co/t/count-of-values-on-array-field/13039 "2013-08-02T10:09:19Z")

</div>

Hi, I have an index like this, { "id":1, "time":\["2013-03-04", "2013-03-05"\] }, { "id":2, "time":\["2013-03-05"\] } I want to do a query based on two conditions: 1. range on time field to…

---

## [Unable to create document within an index](https://discuss.elastic.co/t/unable-to-create-document-within-an-index/105314)

<div class="topic-metadata">

**Author:** [@Aisha1990](https://discuss.elastic.co/u/Aisha1990)\
**Replies:** 6\
**Last updated:** [October 28, 2017, 11:19pm UTC](https://discuss.elastic.co/t/unable-to-create-document-within-an-index/105314 "2017-10-28T23:19:34Z")

</div>

I am using command prompt on Windows 10 and trying to create a document in an index however, getting an error. Tried double quotes and single quotes however, still getting the same error. Kindly assist. curl -XPUT "http…

---

## [The \[action.auto\_create\_index\] setting value \[.security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*,.ml\*\] is too restrictive. disable \[action.auto\_create\_index\] or set it to \[.security,.security-6\]](https://discuss.elastic.co/t/the-action-auto-create-index-setting-value-security-monitoring-watches-triggered-watches-watcher-history-ml-is-too-restrictive-disable-action-auto-create-index-or-set-it-to-security-security-6/114822)

<div class="topic-metadata">

**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 8:10am UTC](https://discuss.elastic.co/t/the-action-auto-create-index-setting-value-security-monitoring-watches-triggered-watches-watcher-history-ml-is-too-restrictive-disable-action-auto-create-index-or-set-it-to-security-security-6/114822 "2018-01-11T08:10:44Z")

</div>

when i install elasticsearch,then install x-pack,restart elasticsearch will be errrs Caused by: java.lang.IllegalArgumentException: the \[action.auto\_create\_index\] setting value \[.security,.monitoring\*,.watches,.triggere…

---

## [Scripted Field: getting first index of a substring](https://discuss.elastic.co/t/scripted-field-getting-first-index-of-a-substring/81418)

<div class="topic-metadata">

**Author:** [@vishalkin](https://discuss.elastic.co/u/vishalkin)\
**Replies:** 1\
**Last updated:** [April 6, 2017, 7:45pm UTC](https://discuss.elastic.co/t/scripted-field-getting-first-index-of-a-substring/81418 "2017-04-06T19:45:19Z")

</div>

Hi. I have a following string field string\_value.keyword The following code gives the last part that comes after / (slash). How can I get only the first part that comes before /? def path = doc\['string\_value.keyword…

---

## [Need Query for delete last 30 days date](https://discuss.elastic.co/t/need-query-for-delete-last-30-days-date/111579)

<div class="topic-metadata">

**Author:** [@Naresh](https://discuss.elastic.co/u/Naresh)\
**Replies:** 7\
**Last updated:** [December 14, 2017, 2:58pm UTC](https://discuss.elastic.co/t/need-query-for-delete-last-30-days-date/111579 "2017-12-14T14:58:32Z")

</div>

Need Query for delete before 30 days date curl -u userid:password -XDELETE 'http://elasticsearch.\*' -d ' { "query": { "filtered" : { "query" : { }, "filter" : { "range" : { "@timestamp" : { "lt" : "now-30d" }} } …

---

## [How to handle dot in field names in ES 7.0](https://discuss.elastic.co/t/how-to-handle-dot-in-field-names-in-es-7-0/176511)

<div class="topic-metadata">

**Author:** [@shanky1997](https://discuss.elastic.co/u/shanky1997)\
**Replies:** 7\
**Last updated:** [April 23, 2019, 7:40am UTC](https://discuss.elastic.co/t/how-to-handle-dot-in-field-names-in-es-7-0/176511 "2019-04-23T07:40:12Z")

</div>

I was recently hit by the fieldname-with-dots issue in ES. I search on google but found the answer for ES 2.X version while for other version none of the option work for me. execution.command = /bin/bash execution.com…

---

## [Cannot index event publisher.Event](https://discuss.elastic.co/t/cannot-index-event-publisher-event/167898)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 6\
**Last updated:** [March 11, 2019, 3:37pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-event/167898 "2019-03-11T15:37:24Z")

</div>

Hello World! I'm using Elastic stack 6.6.1/6.7.1 and while following Enroll Beats in central management | Filebeat Reference \[6.6\] | Elastic, I've noticed few of beats have following WARN in /var/logfilebeat/filebeat: 2…

---

## [Is there a way to allow dots in the fieldname?](https://discuss.elastic.co/t/is-there-a-way-to-allow-dots-in-the-fieldname/90134)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 6\
**Last updated:** [June 21, 2017, 3:15pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-allow-dots-in-the-fieldname/90134 "2017-06-21T15:15:11Z")

</div>

The title says it all. We are using ES 5.3.

---

## [Delete documents of an index older than 7 days](https://discuss.elastic.co/t/delete-documents-of-an-index-older-than-7-days/148056)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 3\
**Last updated:** [September 11, 2018, 7:30am UTC](https://discuss.elastic.co/t/delete-documents-of-an-index-older-than-7-days/148056 "2018-09-11T07:30:23Z")

</div>

I want to delete documents from my index ''index\_name" which are older than 7 days. The field I want to use is not @timestamp and is another field "date" in that index. I am not sure of the DELETE QUERY. Please help

---

## [Logstash input from tcp/udp protocol](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 7\
**Last updated:** [August 2, 2016, 11:48pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055 "2016-08-02T23:48:44Z")

</div>

Hi, I am trying to send some JSON formatted logs to elasticsearch over tcp/udp protocol for visualizations in Kibana. I have the config file below: input { tcp { host =\> "http://nimhts23.hm230.org" port =\> 89…

---

## [\[SOLVED\] Grok and Greedydata regex](https://discuss.elastic.co/t/solved-grok-and-greedydata-regex/71552)

<div class="topic-metadata">

**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\
**Replies:** 8\
**Last updated:** [January 16, 2017, 4:17pm UTC](https://discuss.elastic.co/t/solved-grok-and-greedydata-regex/71552 "2017-01-16T16:17:59Z")

</div>

Hi all, I have an issue with my grok patterns. Some lines in my grok patterns contains GREEDYDATA regex. So they match before other lines and I cannot match logs with the fields that I want. Could you tell me please …

---

## [License information could not be obtained from Elasticsearch](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch/224500)

<div class="topic-metadata">

**Author:** [@mathiznogoud](https://discuss.elastic.co/u/mathiznogoud)\
**Replies:** 4\
**Last updated:** [March 23, 2020, 7:12pm UTC](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch/224500 "2020-03-23T19:12:07Z")

</div>

Greetings, I've just set up ElasticSearch successfully. Later I install Kibana and I encountered this error, the Kibana doesn't go online. I'm using ElasticSearch 7.5.1 with Kibana 7.5.1. I setup both on my virtual Ce…

---

## [Cannot detect ES version - typically this happens when accessing a WAN/Cloud instance without the proper setting 'es.nodes.wan.only' on Docker Deployment](https://discuss.elastic.co/t/cannot-detect-es-version-typically-this-happens-when-accessing-a-wan-cloud-instance-without-the-proper-setting-es-nodes-wan-only-on-docker-deployment/48374)

<div class="topic-metadata">

**Author:** [@Amir](https://discuss.elastic.co/u/Amir)\
**Replies:** 4\
**Last updated:** [May 18, 2016, 6:56am UTC](https://discuss.elastic.co/t/cannot-detect-es-version-typically-this-happens-when-accessing-a-wan-cloud-instance-without-the-proper-setting-es-nodes-wan-only-on-docker-deployment/48374 "2016-05-18T06:56:22Z")

</div>

I am using dockers for spark and elasticsearch. I wrote the following code from tutorial: import org.apache.spark.SparkConf import org.elasticsearch.spark.\_ val conf = sc.getConf conf.setMaster("local") conf.set("es.in…

---

## [Seeing Frequent NodeNotConnectedException errors](https://discuss.elastic.co/t/seeing-frequent-nodenotconnectedexception-errors/21542)

<div class="topic-metadata">

**Author:** [@Ranga\_2](https://discuss.elastic.co/u/Ranga_2)\
**Replies:** 3\
**Last updated:** [September 30, 2015, 9:11am UTC](https://discuss.elastic.co/t/seeing-frequent-nodenotconnectedexception-errors/21542 "2015-09-30T09:11:26Z")

</div>

Hi, I have a cluster of 3-node cluster in EC2 - and am seeing frequent NodeNotConnectedException related errors which cause intermittent failures during indexing. I'm hoping some one knows what this is able and ca…

---

## [Grok filter is not working](https://discuss.elastic.co/t/grok-filter-is-not-working/48702)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 3\
**Last updated:** [June 2, 2016, 4:15am UTC](https://discuss.elastic.co/t/grok-filter-is-not-working/48702 "2016-06-02T04:15:52Z")

</div>

Hello Guys, I have Filebeat installed in a Windows server, this Filebeat send data from files in this Windows server to server with Logstash, here are the files config: logstash.conf, be careful I did cut the match fil…

---

## [Logstash Windows Service Filling up C:\\Windows\\Temp](https://discuss.elastic.co/t/logstash-windows-service-filling-up-c-windows-temp/162437)

<div class="topic-metadata">

**Author:** [@saravanan\_palanivel](https://discuss.elastic.co/u/saravanan_palanivel)\
**Replies:** 3\
**Last updated:** [January 4, 2019, 4:15am UTC](https://discuss.elastic.co/t/logstash-windows-service-filling-up-c-windows-temp/162437 "2019-01-04T04:15:40Z")

</div>

Hi Team, I'm running Logstash 6.5.0 as Windows service (and i installed that using NSSM), whenever Logstash service running in the background, it creating temp jar files into C:\\Windows\\Temp directory, eventually C:\\ dr…

---

## [High CPU consumption](https://discuss.elastic.co/t/high-cpu-consumption/25289)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 7\
**Last updated:** [May 29, 2017, 1:13am UTC](https://discuss.elastic.co/t/high-cpu-consumption/25289 "2017-05-29T01:13:01Z")

</div>

Hello, I'm experiencing very high CPU usage, nearly 100%. The documentation says that ES is light on CPU. I assume that it could be some heavy queries. But how can I prove it and find what queries are eating CPU? I've ra…

---

## [Elastic term filter not working when term contains /](https://discuss.elastic.co/t/elastic-term-filter-not-working-when-term-contains/107301)

<div class="topic-metadata">

**Author:** [@Amarnadh\_Meda](https://discuss.elastic.co/u/Amarnadh_Meda)\
**Replies:** 2\
**Last updated:** [November 18, 2017, 6:38pm UTC](https://discuss.elastic.co/t/elastic-term-filter-not-working-when-term-contains/107301 "2017-11-18T18:38:22Z")

</div>

Hi Team, I have some problem when I am doing filtering with term. Say for Example I have a field in my index called "customer\_id" the value is : LC/2089011 When I give to search for some other customer id like bool:{…

---

## [How to add Markdown visualize background color and styles](https://discuss.elastic.co/t/how-to-add-markdown-visualize-background-color-and-styles/208454)

<div class="topic-metadata">

**Author:** [@Gnanendra](https://discuss.elastic.co/u/Gnanendra)\
**Replies:** 5\
**Last updated:** [November 20, 2019, 5:11am UTC](https://discuss.elastic.co/t/how-to-add-markdown-visualize-background-color-and-styles/208454 "2019-11-20T05:11:07Z")

</div>

Hi All, I have created Kibana Markdown Visualize.but how to add styles for that visualize. Example: backgroud-color, text-align etc. Note : Now i am using kibana,elasticsearch versions 7.3.0 please help me. Thanks…

---

## [Kibana 4.5.1 cannot start because of "permission denied"](https://discuss.elastic.co/t/kibana-4-5-1-cannot-start-because-of-permission-denied/50392)

<div class="topic-metadata">

**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Replies:** 4\
**Last updated:** [May 19, 2016, 1:31pm UTC](https://discuss.elastic.co/t/kibana-4-5-1-cannot-start-because-of-permission-denied/50392 "2016-05-19T13:31:02Z")

</div>

I install kibana on Ubuntu Server 14.04.4 LTS. But when I upgrade kibana from 4.5.0 to 4.5.1, it cannot startup any more. Here is the /var/log/kibana/kibana.stderr: FATAL { \[Error: EACCES: permission denied, open …

---

## [How to rotate logstash.log in ELK](https://discuss.elastic.co/t/how-to-rotate-logstash-log-in-elk/32925)

<div class="topic-metadata">

**Author:** [@kartikelastic](https://discuss.elastic.co/u/kartikelastic)\
**Replies:** 7\
**Last updated:** [October 29, 2015, 2:25pm UTC](https://discuss.elastic.co/t/how-to-rotate-logstash-log-in-elk/32925 "2015-10-29T14:25:05Z")

</div>

Hi team, How to rotate /var/log/logstash/logstash.log? It fills up the drive and then everything breaks. Simply doing a server# \> /var/log/logstash/logstash.log does not work What I have done is downloaded "curator" h…

---

## [How to export search results to csv / excel?](https://discuss.elastic.co/t/how-to-export-search-results-to-csv-excel/103590)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 9:58am UTC](https://discuss.elastic.co/t/how-to-export-search-results-to-csv-excel/103590 "2017-10-12T09:58:19Z")

</div>

Hi, I know, that there is the possibility to export the data of a visualization to csv / excel. But is there also the possibility to export the data of a search? I don't find the export buttons there. I am currently o…

---

## [Spring Data ElasticSearch Can't Connect with ElasticSearch 5.5.0](https://discuss.elastic.co/t/spring-data-elasticsearch-cant-connect-with-elasticsearch-5-5-0/94235)

<div class="topic-metadata">

**Author:** [@halogeek](https://discuss.elastic.co/u/halogeek)\
**Replies:** 2\
**Last updated:** [July 23, 2017, 7:22pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-cant-connect-with-elasticsearch-5-5-0/94235 "2017-07-23T19:22:45Z")

</div>

Am new to ElasticSearch... Really love the API (especially ElasticsearchTemplate & supporting Unit Tests)... Was following this example using ElasticSearch 5.5.0 (the following link has the full code inline and also…

---

## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/280423)

<div class="topic-metadata">

**Author:** [@Gotze\_des\_Pobels](https://discuss.elastic.co/u/Gotze_des_Pobels)\
**Replies:** 4\
**Last updated:** [August 5, 2021, 2:31pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/280423 "2021-08-05T14:31:08Z")

</div>

Im not able to connect Kibana with elasticsearch. Both running in seperate docker containers in plesk obsidian. Elasticsearch is running and a GET request to "mydomain.com:9200/\_cluster/health?pretty" is giving me foll…

---

## [Grok - Skipping Line](https://discuss.elastic.co/t/grok-skipping-line/50605)

<div class="topic-metadata">

**Author:** [@anil\_varghese](https://discuss.elastic.co/u/anil_varghese)\
**Replies:** 8\
**Last updated:** [May 27, 2016, 7:42pm UTC](https://discuss.elastic.co/t/grok-skipping-line/50605 "2016-05-27T19:42:30Z")

</div>

Good Evening Everyone, I am a beginner in logstash. I was trying to parse a log file which have 159 lines in it. I am interested only in the first ,second and last line. Is there any way to skip or omit these lines wit…

---

## [Kibana regex search with range or number](https://discuss.elastic.co/t/kibana-regex-search-with-range-or-number/71012)

<div class="topic-metadata">

**Author:** [@quangtranhong](https://discuss.elastic.co/u/quangtranhong)\
**Replies:** 2\
**Last updated:** [January 10, 2017, 11:11am UTC](https://discuss.elastic.co/t/kibana-regex-search-with-range-or-number/71012 "2017-01-10T11:11:37Z")

</div>

I have a log already indexed in to field like below cs\_uri\_stem: /book-music cs\_uri\_query: p=119 recently, my website has been crawled with a very deep page number ( ask you can see in the example, page 119), and that…

---

## [Filebeat, send log file again](https://discuss.elastic.co/t/filebeat-send-log-file-again/78750)

<div class="topic-metadata">

**Author:** [@hurg](https://discuss.elastic.co/u/hurg)\
**Replies:** 3\
**Last updated:** [March 15, 2017, 8:08pm UTC](https://discuss.elastic.co/t/filebeat-send-log-file-again/78750 "2017-03-15T20:08:06Z")

</div>

Hello guys. Can someone help me? I've tested with a new log. After testing I've removed all this data from elasticsearch. So how I can re-send this log files? Thanks for the help!

---

## [Need to convert string into date\_time format](https://discuss.elastic.co/t/need-to-convert-string-into-date-time-format/100153)

<div class="topic-metadata">

**Author:** [@vipinkumar](https://discuss.elastic.co/u/vipinkumar)\
**Replies:** 4\
**Last updated:** [September 12, 2017, 6:03am UTC](https://discuss.elastic.co/t/need-to-convert-string-into-date-time-format/100153 "2017-09-12T06:03:18Z")

</div>

Hi All I am working on csv files and in that file there is a column as DATE/TIME in which the date and time is coming in following format. 2017-09-12-0915 YYYY-mm-dd-HHmm I tried to convert this to DATE/TIME to date\_t…

---

## [Timestamp operation in http\_poller input](https://discuss.elastic.co/t/timestamp-operation-in-http-poller-input/65033)

<div class="topic-metadata">

**Author:** [@eclionast](https://discuss.elastic.co/u/eclionast)\
**Replies:** 0\
**Last updated:** [November 4, 2016, 5:24pm UTC](https://discuss.elastic.co/t/timestamp-operation-in-http-poller-input/65033 "2016-11-04T17:24:11Z")

</div>

Hello, We are trying to pull timed data from a server with logstash's http\_poller input plugin with an interval of one hour. The server need a header named "start" which should be the time when the request is sent min…

---

## [Elasticsearch data nodes total size](https://discuss.elastic.co/t/elasticsearch-data-nodes-total-size/61800)

<div class="topic-metadata">

**Author:** [@sundar1](https://discuss.elastic.co/u/sundar1)\
**Replies:** 5\
**Last updated:** [October 19, 2016, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes-total-size/61800 "2016-10-19T14:48:08Z")

</div>

How to get total/average data nodes size through API's? The below api to get the data nodes allocation each data nodes but i need average or total size of data nodes. Please help me how to get this. http://localhost:…

---

## [Invalid format for date](https://discuss.elastic.co/t/invalid-format-for-date/56375)

<div class="topic-metadata">

**Author:** [@shivkumar](https://discuss.elastic.co/u/shivkumar)\
**Replies:** 3\
**Last updated:** [August 3, 2016, 5:27pm UTC](https://discuss.elastic.co/t/invalid-format-for-date/56375 "2016-08-03T17:27:29Z")

</div>

Hello , I am trying to use Index Template. The following is my template { "template": "te\*", "settings": { "number\_of\_shards": 1 }, "mappings": { "log": { …

---

## [GET latest value for each unique value?](https://discuss.elastic.co/t/get-latest-value-for-each-unique-value/123196)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 5\
**Last updated:** [March 9, 2018, 8:42am UTC](https://discuss.elastic.co/t/get-latest-value-for-each-unique-value/123196 "2018-03-09T08:42:59Z")

</div>

Hi, I have the query below which will provide me with the latest error for a certain location. However I have multiple locations and I would like to pull the latest error for each location (without having to put in a wh…

---

## [Listing available analyzers via API](https://discuss.elastic.co/t/listing-available-analyzers-via-api/16472)

<div class="topic-metadata">

**Author:** [@Kevin\_Blaisdell](https://discuss.elastic.co/u/Kevin_Blaisdell)\
**Replies:** 2\
**Last updated:** [March 19, 2014, 10:16pm UTC](https://discuss.elastic.co/t/listing-available-analyzers-via-api/16472 "2014-03-19T22:16:21Z")

</div>

The scenario I have is driving some index builds from an external application. As part of this an analyzer would be chosen in the external application. The intent here would be that a choice could be made from a l…

---

## [Rally 2.0.0 released](https://discuss.elastic.co/t/rally-2-0-0-released/231477)

<div class="topic-metadata">

**Author:** [@dliappis](https://discuss.elastic.co/u/dliappis)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 7:44am UTC](https://discuss.elastic.co/t/rally-2-0-0-released/231477 "2020-05-07T07:44:46Z")

</div>

Almost two years after the release of Rally 1.0.0 we are excited to announce Rally 2.0.0 today as a collaboration from 40 contributors. Many thanks to all our community contributors for the numerous discussions, bug repo…

---

## [Index pattern for Grafana](https://discuss.elastic.co/t/index-pattern-for-grafana/162919)

<div class="topic-metadata">

**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\
**Replies:** 7\
**Last updated:** [January 4, 2019, 10:16am UTC](https://discuss.elastic.co/t/index-pattern-for-grafana/162919 "2019-01-04T10:16:18Z")

</div>

Hello I am not sure whether i can ask this here. Just trying my luck here. I am integrating Grafana with ElasticSearch. In the Grafana screen, i need to give the ElasticSearch details. What is the value for Index? Th…

---

## [Check value exists in params array using ElasticSearch painless script](https://discuss.elastic.co/t/check-value-exists-in-params-array-using-elasticsearch-painless-script/158254)

<div class="topic-metadata">

**Author:** [@CEJ](https://discuss.elastic.co/u/CEJ)\
**Replies:** 3\
**Last updated:** [November 30, 2018, 12:50pm UTC](https://discuss.elastic.co/t/check-value-exists-in-params-array-using-elasticsearch-painless-script/158254 "2018-11-30T12:50:57Z")

</div>

I am new to ElasticSearch. I am working on a project where I have to search listings which matches the input http://foo.bar/search?listing=123,456 . I have built an array which key and value are the same and representin…

---

## [Is there any method to set content security policy only in Kibana plugin code?](https://discuss.elastic.co/t/is-there-any-method-to-set-content-security-policy-only-in-kibana-plugin-code/193899)

<div class="topic-metadata">

**Author:** [@sunminxuan](https://discuss.elastic.co/u/sunminxuan)\
**Replies:** 1\
**Last updated:** [August 6, 2019, 3:40pm UTC](https://discuss.elastic.co/t/is-there-any-method-to-set-content-security-policy-only-in-kibana-plugin-code/193899 "2019-08-06T15:40:08Z")

</div>

Currently, I am developing a kibana plugin that uses iframe to load remote website. Here is the content of plugins/query\_ai/public/components/main/main.js: import React from 'react'; export class Main extends React.Co…

---

## [Kibana iframe with Token (Authentication purpose)](https://discuss.elastic.co/t/kibana-iframe-with-token-authentication-purpose/207744)

<div class="topic-metadata">

**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\
**Replies:** 8\
**Last updated:** [November 27, 2019, 7:19am UTC](https://discuss.elastic.co/t/kibana-iframe-with-token-authentication-purpose/207744 "2019-11-27T07:19:45Z")

</div>

Hello Team, I have integrated the Kibana dashboard "iframe" with my react application. But, each time I have to log-in to see the Kibana dashboard. (FYI: My Kibana version 7.4.0) So, I have followed a few paths to bypa…

---

## [Display IP of hosts in Kibana](https://discuss.elastic.co/t/display-ip-of-hosts-in-kibana/54203)

<div class="topic-metadata">

**Author:** [@thiagotrm](https://discuss.elastic.co/u/thiagotrm)\
**Replies:** 7\
**Last updated:** [June 29, 2016, 2:24pm UTC](https://discuss.elastic.co/t/display-ip-of-hosts-in-kibana/54203 "2016-06-29T14:24:03Z")

</div>

How can I view the IP addresses of hosts in Kibana? I'm sorry if already have a topic. But I not found.

---

## [Error response from daemon: Get https://docker.elastic.co/v2/: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/error-response-from-daemon-get-https-docker-elastic-co-v2-x509-certificate-signed-by-unknown-authority/281754)

<div class="topic-metadata">

**Author:** [@Benli](https://discuss.elastic.co/u/Benli)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 11:23pm UTC](https://discuss.elastic.co/t/error-response-from-daemon-get-https-docker-elastic-co-v2-x509-certificate-signed-by-unknown-authority/281754 "2021-08-18T23:23:26Z")

</div>

// ISSUE // From my test VM, pull image from elastic docker registry failed, returning "x509: certificate signed by unknown authority" # docker pull docker.elastic.co/elasticsearch/elasticsearch:7.14.0 Error response f…

---

## [Schema error: extra keys not allowed @ data\['actions'\]](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-actions/102583)

<div class="topic-metadata">

**Author:** [@wgnc](https://discuss.elastic.co/u/wgnc)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 7:37am UTC](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-actions/102583 "2017-10-04T07:37:03Z")

</div>

Hello, I have problem with basic curator configuration. I'm trying to run delete\_indices example: with no success. I run exactly the same code from example mentioned above (saved in .curator/curator.yml) $ curator…

---

## [Beats and Composable Templates](https://discuss.elastic.co/t/beats-and-composable-templates/334325)

<div class="topic-metadata">

**Author:** [@johncollaros](https://discuss.elastic.co/u/johncollaros)\
**Replies:** 6\
**Last updated:** [June 1, 2023, 11:15am UTC](https://discuss.elastic.co/t/beats-and-composable-templates/334325 "2023-06-01T11:15:22Z")

</div>

Hi, I am in the process of upgrading our Elastic Stack instance from 7.5 -\> 8, and am going through all of the migration tasks. It looks like migration to component templates is going to be a pain. Currently, I am usi…

---

## [How to handle multiple match in logstash filter](https://discuss.elastic.co/t/how-to-handle-multiple-match-in-logstash-filter/96647)

<div class="topic-metadata">

**Author:** [@ankeet.jain](https://discuss.elastic.co/u/ankeet.jain)\
**Replies:** 5\
**Last updated:** [August 11, 2017, 1:36pm UTC](https://discuss.elastic.co/t/how-to-handle-multiple-match-in-logstash-filter/96647 "2017-08-11T13:36:41Z")

</div>

I want to know what is the best way to handle multiple logs pattern single file. I have created below filter for the my logs. filter { if\[type\] =='AppLog' { grok { break\_on\_match =\> false match =\> { "message" =\> …

---

## [Elasticsearch failed to execute on node](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-on-node/34497)

<div class="topic-metadata">

**Author:** [@shravankodipaka](https://discuss.elastic.co/u/shravankodipaka)\
**Replies:** 4\
**Last updated:** [November 23, 2015, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-on-node/34497 "2015-11-23T09:36:45Z")

</div>

Hi all, I am getting a "failed to execute on node". In elasticsearch log file its showing below error.... org.elasticsearch.transport.NodeDisconnectedException: \[Clearcut\]\[inet\[/10.129.52.27:9301\]\]\[indices:monitor/stat…

---

## [Kibana 8.14.0 Security Update (ESA-2024-15)](https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887)

<div class="topic-metadata">

**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\
**Replies:** 0\
**Last updated:** [June 5, 2024, 8:45pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887 "2024-06-05T20:45:40Z")

</div>

Kibana Broken Access Control issue (ESA-2024-15) A flaw was discovered in Kibana, allowing view-only users of alerting to use the run\_soon API making the alerting rule run continuously, potentially affecting the system …

---

## [Input Json file](https://discuss.elastic.co/t/input-json-file/107781)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 5\
**Last updated:** [November 15, 2017, 6:21pm UTC](https://discuss.elastic.co/t/input-json-file/107781 "2017-11-15T18:21:50Z")

</div>

Hi I am trying to ingest some of inventory data from JSON files using the following logstash config. input { file { type =\> "json" path =\> "/opt/uploaddata/\*.json" start\_position =\> "beginning" } } filter { jso…

---

## [Search phone number](https://discuss.elastic.co/t/search-phone-number/32771)

<div class="topic-metadata">

**Author:** [@kodermax](https://discuss.elastic.co/u/kodermax)\
**Replies:** 5\
**Last updated:** [October 22, 2015, 2:50pm UTC](https://discuss.elastic.co/t/search-phone-number/32771 "2015-10-22T14:50:46Z")

</div>

I have type contact : { 'phone':\[79037767523,79037767523\] } How can i search 9037767523?

---

## [Backup repository size is much bigger than indices size](https://discuss.elastic.co/t/backup-repository-size-is-much-bigger-than-indices-size/47469)

<div class="topic-metadata">

**Author:** [@Faye](https://discuss.elastic.co/u/Faye)\
**Replies:** 8\
**Last updated:** [April 18, 2016, 6:05am UTC](https://discuss.elastic.co/t/backup-repository-size-is-much-bigger-than-indices-size/47469 "2016-04-18T06:05:28Z")

</div>

I have an Elasticsearch backup per hour, after about 370 times of backup (about 15 days) , my backup repository is more than 15G !!! But the total indices size is just about 500M !! Elasticsearch is incremental backup, b…

---

## [Increase Snapshotting Speed while taking a snapshot in Amazon S3 Bucket](https://discuss.elastic.co/t/increase-snapshotting-speed-while-taking-a-snapshot-in-amazon-s3-bucket/101597)

<div class="topic-metadata">

**Author:** [@adityajindal](https://discuss.elastic.co/u/adityajindal)\
**Replies:** 8\
**Last updated:** [September 26, 2017, 2:26pm UTC](https://discuss.elastic.co/t/increase-snapshotting-speed-while-taking-a-snapshot-in-amazon-s3-bucket/101597 "2017-09-26T14:26:22Z")

</div>

Hi We are currently having a very large cluster with about 100 TB data in it. We want our snapshot in Amazon S3 Bucket to complete as fast as possible. With reference from this https://www.elastic.co/guide/en/elastics…

[Previous page](https://discuss.elastic.co/top.md?page=315&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=317&per_page=50&period=all)
