# Top

**URL:** https://discuss.elastic.co/top.md?page=322&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 323

---

## ["reason"=\>"object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value"](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 5\
**Last updated:** [April 21, 2021, 10:09am UTC](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790 "2021-04-21T10:09:36Z")

</div>

Please how to do resolve. Logstash outputs below error log. \[2021-04-21T15:31:47,803\]\[WARN \]\[logstash.outputs.elasticsearch\]\[＜pipeline.id＞\]\[b0981f4f69ba05c595e4bfce70b5e813c0b082207400c67bd72b366d2d36ba65\] Could not in…

---

## [Filebeat host ip address in Logstash](https://discuss.elastic.co/t/filebeat-host-ip-address-in-logstash/37655)

<div class="topic-metadata">

**Author:** [@sqshq](https://discuss.elastic.co/u/sqshq)\
**Replies:** 5\
**Last updated:** [June 8, 2016, 11:28am UTC](https://discuss.elastic.co/t/filebeat-host-ip-address-in-logstash/37655 "2016-06-08T11:28:51Z")

</div>

Hello, I've configured Filebeat on application host and ELK stack on another. Everything working good, but i have just beat.hostname and beat.name fileds in Logstash. Is there a way to retrieve IP address of my appli…

---

## [Aggregate over an array](https://discuss.elastic.co/t/aggregate-over-an-array/49716)

<div class="topic-metadata">

**Author:** [@rcompton](https://discuss.elastic.co/u/rcompton)\
**Replies:** 8\
**Last updated:** [May 12, 2016, 8:38pm UTC](https://discuss.elastic.co/t/aggregate-over-an-array/49716 "2016-05-12T20:38:03Z")

</div>

I have an array field, strArray: \['browser:IE', 'device:PC', 'country:USA', 'state:CA'\] I'd like to draw a bar chart in kibana showing the most common entries in position 0 of that field. I'm entering into the Adva…

---

## [Kibana server is not ready yet in Ubuntu](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-ubuntu/172455)

<div class="topic-metadata">

**Author:** [@muralasandeep](https://discuss.elastic.co/u/muralasandeep)\
**Replies:** 6\
**Last updated:** [March 16, 2019, 4:50am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-ubuntu/172455 "2019-03-16T04:50:08Z")

</div>

Hi , i have installed kibana 6.5.4 in the last month ,it was working good some days but now i am getting this error "kibana server is not ready yet" when i am trying to open my kibana in my browser using this loca…

---

## [Multiple Date fields in logstash](https://discuss.elastic.co/t/multiple-date-fields-in-logstash/25213)

<div class="topic-metadata">

**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\
**Replies:** 8\
**Last updated:** [October 25, 2015, 9:34am UTC](https://discuss.elastic.co/t/multiple-date-fields-in-logstash/25213 "2015-10-25T09:34:35Z")

</div>

Hi, I have a small query regarding date field. In my data file there are two date fields like submit\_date : 2012-12-22 12:53:30.000 release\_date: 2012-12-31 12:53:30.000 for this I tried using the following in the…

---

## [Filebeat not sending data to Elasticsearch or Logstash](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-or-logstash/126794)

<div class="topic-metadata">

**Author:** [@Brandonmcgr](https://discuss.elastic.co/u/Brandonmcgr)\
**Replies:** 2\
**Last updated:** [April 4, 2018, 5:48pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-or-logstash/126794 "2018-04-04T17:48:41Z")

</div>

Hello, Forgive me if this is an issue that is repeated on here. Originally, I had this working with what must be the exact same process. But, since I rebuilt the virtual machines something is no longer working and data …

---

## [How to increase max message size?](https://discuss.elastic.co/t/how-to-increase-max-message-size/43165)

<div class="topic-metadata">

**Author:** [@Junyan](https://discuss.elastic.co/u/Junyan)\
**Replies:** 5\
**Last updated:** [March 8, 2016, 9:38pm UTC](https://discuss.elastic.co/t/how-to-increase-max-message-size/43165 "2016-03-08T21:38:02Z")

</div>

I am using below logstash.conf. I am using all default settings. The max size of http requests that can be processed correctly is around 130 kb. If the request is larger than 130kb, LogStash does not output to stdout, an…

---

## [Filebeat s3 output?](https://discuss.elastic.co/t/filebeat-s3-output/59058)

<div class="topic-metadata">

**Author:** [@tmarthal](https://discuss.elastic.co/u/tmarthal)\
**Replies:** 3\
**Last updated:** [August 29, 2016, 4:48am UTC](https://discuss.elastic.co/t/filebeat-s3-output/59058 "2016-08-29T04:48:07Z")

</div>

Hi, I was looking to setup a log shipping system from our servers to s3 for storage. However, looking at the current (5.0/master) version of filebeat, it seems that there is no output mechanism to load the logs into s3 d…

---

## [Max content length issue](https://discuss.elastic.co/t/max-content-length-issue/125016)

<div class="topic-metadata">

**Author:** [@Ramon\_Zaro](https://discuss.elastic.co/u/Ramon_Zaro)\
**Replies:** 5\
**Last updated:** [March 27, 2018, 3:33am UTC](https://discuss.elastic.co/t/max-content-length-issue/125016 "2018-03-27T03:33:48Z")

</div>

Hi, I am getting http 413 error on trying to push large documents to ES 5.5. I tried setting http.max\_content\_length : 500mb in ES YML file but I am still getting the same error saying '... entity content too long for …

---

## [Another Kibana instance appears to be migrating the index](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145)

<div class="topic-metadata">

**Author:** [@Jambo80](https://discuss.elastic.co/u/Jambo80)\
**Replies:** 8\
**Last updated:** [January 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145 "2021-01-26T15:27:06Z")

</div>

Hi I am relatively new to ELK and recently upgraded from 6.X to 6.8.13. When I start Kibana I now see the following error: "tags":\["warning","migrations"\],"pid":15615,"message":"Another Kibana instance appears to be mi…

---

## [Scroll id is not changing while querying](https://discuss.elastic.co/t/scroll-id-is-not-changing-while-querying/106202)

<div class="topic-metadata">

**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\
**Replies:** 1\
**Last updated:** [November 10, 2017, 7:43pm UTC](https://discuss.elastic.co/t/scroll-id-is-not-changing-while-querying/106202 "2017-11-10T19:43:02Z")

</div>

I written this code to test scroll api. As mentioned in docs the scroll id will change for every request. But in my case it is same for all requests. The initial search request and each subsequent scroll request retur…

---

## [Shard relocation progress](https://discuss.elastic.co/t/shard-relocation-progress/14940)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 4\
**Last updated:** [December 30, 2013, 7:04am UTC](https://discuss.elastic.co/t/shard-relocation-progress/14940 "2013-12-30T07:04:15Z")

</div>

What's the best way to monitor shard relocation that occurrs when one add new nodes? Is there a way to control the relocation and do it manually with few shards at a time? What are the best practices for cluster …

---

## [Ingest Node Versus Logstash](https://discuss.elastic.co/t/ingest-node-versus-logstash/61720)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 5\
**Last updated:** [September 28, 2016, 5:23pm UTC](https://discuss.elastic.co/t/ingest-node-versus-logstash/61720 "2016-09-28T17:23:56Z")

</div>

When ingest nodes are made available, why would I choose to use an ingest node to process my data as opposed to my already existing logstash pipeline?? Is there a performance increase by doing processing operations at th…

---

## [Kibana filter query in visualization](https://discuss.elastic.co/t/kibana-filter-query-in-visualization/31959)

<div class="topic-metadata">

**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\
**Replies:** 5\
**Last updated:** [October 11, 2015, 5:28pm UTC](https://discuss.elastic.co/t/kibana-filter-query-in-visualization/31959 "2015-10-11T17:28:41Z")

</div>

i want to execute a query in filter from kibana visualization. My requirement is as follows. I am getting response code from apachelog. I want to draw lines for response code-200 and response code not equal to 200. How c…

---

## [Retryer: send unwait signal to consumer. Logstash overload?](https://discuss.elastic.co/t/retryer-send-unwait-signal-to-consumer-logstash-overload/250366)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [October 13, 2020, 11:00am UTC](https://discuss.elastic.co/t/retryer-send-unwait-signal-to-consumer-logstash-overload/250366 "2020-10-13T11:00:04Z")

</div>

Hi everybody, I have a 3 cluster node used to collect logs from several services (received using Filebeat clients). On those nodes, I have installed also Logstash (for each node) with the same configuration and pipelin…

---

## [Initial heap size not equal to maximum heap size](https://discuss.elastic.co/t/initial-heap-size-not-equal-to-maximum-heap-size/50499)

<div class="topic-metadata">

**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\
**Replies:** 3\
**Last updated:** [May 20, 2016, 2:24am UTC](https://discuss.elastic.co/t/initial-heap-size-not-equal-to-maximum-heap-size/50499 "2016-05-20T02:24:10Z")

</div>

I'm trying to start elasticsearch v5 alpha 2 on an AWS EC2 instance with 8GB memory, and keep getting this error on startup: initial heap size \[268435456\] not equal to maximum heap size \[1073741824\] Then elasticsearc…

---

## [How to import a config file into Docker Container of Logstash?](https://discuss.elastic.co/t/how-to-import-a-config-file-into-docker-container-of-logstash/203099)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 4\
**Last updated:** [October 15, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-import-a-config-file-into-docker-container-of-logstash/203099 "2019-10-15T07:46:27Z")

</div>

Hi Logstash Ninja Masters, I recently spun up a Logstash docker container (v 7.4.0), to replace a local-app version of LS on the same Ubuntu box. I‘m confused how to instruct the Docker LS to use the configuration that…

---

## [\#! Deprecation: Deprecated field \[template\] used, replaced by \[index\_patterns\]](https://discuss.elastic.co/t/deprecation-deprecated-field-template-used-replaced-by-index-patterns/129943)

<div class="topic-metadata">

**Author:** [@Yaasar\_Shaikh](https://discuss.elastic.co/u/Yaasar_Shaikh)\
**Replies:** 7\
**Last updated:** [May 11, 2018, 1:54pm UTC](https://discuss.elastic.co/t/deprecation-deprecated-field-template-used-replaced-by-index-patterns/129943 "2018-05-11T13:54:05Z")

</div>

iam trying to create a new index but this error occurs

---

## [Osquery Manager Feedback - Linux AARCH64 - Raspberry Pi](https://discuss.elastic.co/t/osquery-manager-feedback-linux-aarch64-raspberry-pi/274003)

<div class="topic-metadata">

**Author:** [@n3k0](https://discuss.elastic.co/u/n3k0)\
**Replies:** 1\
**Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/osquery-manager-feedback-linux-aarch64-raspberry-pi/274003 "2021-05-26T12:59:18Z")

</div>

I used Linux AARCH64 successfully to install the elastic agent on two of my raspberry pi's. Which is fantastic. I wasn't expecting it to work. However, osquery searches don't appear to be working against both raspberry …

---

## [Kibana not starting after making service account changes for upgrade to 8](https://discuss.elastic.co/t/kibana-not-starting-after-making-service-account-changes-for-upgrade-to-8/297406)

<div class="topic-metadata">

**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\
**Replies:** 6\
**Last updated:** [February 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/kibana-not-starting-after-making-service-account-changes-for-upgrade-to-8/297406 "2022-02-21T15:49:20Z")

</div>

Hello, Running into an issue upgrading to elasticsearch/kibana 8. The upgrade assistant had me switch from username/password authentication to service accounts via: https://www.elastic.co/guide/en/elasticsearch//refere…

---

## [Can ES return only the part of an array that match the query](https://discuss.elastic.co/t/can-es-return-only-the-part-of-an-array-that-match-the-query/10069)

<div class="topic-metadata">

**Author:** [@Margaret\_2](https://discuss.elastic.co/u/Margaret_2)\
**Replies:** 4\
**Last updated:** [December 19, 2012, 11:18pm UTC](https://discuss.elastic.co/t/can-es-return-only-the-part-of-an-array-that-match-the-query/10069 "2012-12-19T23:18:38Z")

</div>

I have documents like this: { ... ..., "id":"abc001", "nominations":\[ { "comment":"test", "events":\[ { "name":"aaa", "…

---

## [How to disable TF/IDF completely](https://discuss.elastic.co/t/how-to-disable-tf-idf-completely/123518)

<div class="topic-metadata">

**Author:** [@ahmadazimi](https://discuss.elastic.co/u/ahmadazimi)\
**Replies:** 6\
**Last updated:** [March 13, 2018, 7:59am UTC](https://discuss.elastic.co/t/how-to-disable-tf-idf-completely/123518 "2018-03-13T07:59:19Z")

</div>

I'm trying to query small pieces of sentences in about 500k records and TF/IDF makes results so bad. I wanna disable it at index time or query time (without using constant\_score). Has anyone has any idea?!

---

## [Pass multiple inputs in logstash config. file](https://discuss.elastic.co/t/pass-multiple-inputs-in-logstash-config-file/180293)

<div class="topic-metadata">

**Author:** [@hemantkhokhar](https://discuss.elastic.co/u/hemantkhokhar)\
**Replies:** 2\
**Last updated:** [May 9, 2019, 8:11am UTC](https://discuss.elastic.co/t/pass-multiple-inputs-in-logstash-config-file/180293 "2019-05-09T08:11:30Z")

</div>

Is this the right way to give multiple input..because i am not geeting logs on kibana. due to this i have to restart logstash after some interval continuously. input { beats { port =\> 5044 } } input { cloudwatch\_…

---

## [Elasticsearch: total term frequency and doc count from given set of documents](https://discuss.elastic.co/t/elasticsearch-total-term-frequency-and-doc-count-from-given-set-of-documents/115223)

<div class="topic-metadata">

**Author:** [@prasoonkirar](https://discuss.elastic.co/u/prasoonkirar)\
**Replies:** 4\
**Last updated:** [January 12, 2018, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-total-term-frequency-and-doc-count-from-given-set-of-documents/115223 "2018-01-12T08:36:48Z")

</div>

I am trying to get total term frequency and document count from given set of documents, but \_termvectors in elasticsearch returns ttf and doc\_count from all documents within the index. Is there any way so that I can spec…

---

## [Kibana timestamp in browser local time, but incoming logs UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501)

<div class="topic-metadata">

**Author:** [@filebeat\_win](https://discuss.elastic.co/u/filebeat_win)\
**Replies:** 1\
**Last updated:** [August 8, 2016, 5:00pm UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501 "2016-08-08T17:00:42Z")

</div>

Hi There, We have incoming IIS logs configured for UTC (currently 16:21 at the time of this writing). If I look at the logs in Kibana, since my browser is in PST (9:21 AM), it is showing the UTC logs from 9:21, not th…

---

## [Storing images in an index](https://discuss.elastic.co/t/storing-images-in-an-index/44409)

<div class="topic-metadata">

**Author:** [@marko1](https://discuss.elastic.co/u/marko1)\
**Replies:** 3\
**Last updated:** [March 20, 2016, 8:37am UTC](https://discuss.elastic.co/t/storing-images-in-an-index/44409 "2016-03-20T08:37:43Z")

</div>

Hi, I'm indexing data in ES 2.x and each indexed object will have an associated image that I'd need to store (indexing is not required) somewhere. It would appear logical to store the images also in ES to avoid introdu…

---

## [Using Grok with KV filter](https://discuss.elastic.co/t/using-grok-with-kv-filter/170136)

<div class="topic-metadata">

**Author:** [@spadhi](https://discuss.elastic.co/u/spadhi)\
**Replies:** 5\
**Last updated:** [February 27, 2019, 11:23am UTC](https://discuss.elastic.co/t/using-grok-with-kv-filter/170136 "2019-02-27T11:23:34Z")

</div>

Hi, I am pretty new to ELK stack. Currently I am trying to parse my application log using grok pattern. But since my logs are not structured i may have to write too many grok conditions, which will not scale well. Sampl…

---

## [Object mapping for \[configurationItems.configuration.state\] tried to parse field \[state\] as object, but found a concrete value](https://discuss.elastic.co/t/object-mapping-for-configurationitems-configuration-state-tried-to-parse-field-state-as-object-but-found-a-concrete-value/80995)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 4\
**Last updated:** [April 12, 2017, 1:46pm UTC](https://discuss.elastic.co/t/object-mapping-for-configurationitems-configuration-state-tried-to-parse-field-state-as-object-but-found-a-concrete-value/80995 "2017-04-12T13:46:22Z")

</div>

Hi..... i am trying to parse aws config data into elasticsearch here is my configuration for logstash input { s3 { access\_key\_id =\> "XXXXXXXXXXXXXX" secret\_access\_key =\> "XXXXXXXXXXXXXXXXXX" bucket…

---

## [SSL Alert Number 46 in Kibana.log](https://discuss.elastic.co/t/ssl-alert-number-46-in-kibana-log/186405)

<div class="topic-metadata">

**Author:** [@vsalunkhe](https://discuss.elastic.co/u/vsalunkhe)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 1:58pm UTC](https://discuss.elastic.co/t/ssl-alert-number-46-in-kibana-log/186405 "2019-08-01T13:58:02Z")

</div>

Hi, I am seeing the below issue in kiabna.log {"type":"error","@timestamp":"2019-06-19T07:47:31Z","tags":\["connection","client","error"\],"pid":122332,"level":"error","error":{"message":"139992275834752:error:14094416:S…

---

## [Human names searching - how to improve results](https://discuss.elastic.co/t/human-names-searching-how-to-improve-results/233902)

<div class="topic-metadata">

**Author:** [@p.dakov](https://discuss.elastic.co/u/p.dakov)\
**Replies:** 7\
**Last updated:** [June 3, 2020, 3:24pm UTC](https://discuss.elastic.co/t/human-names-searching-how-to-improve-results/233902 "2020-06-03T15:24:58Z")

</div>

Hello colleagues, I would like some help. :slight\_smile: I am trying to develop a Search query for human names (two or three) in around 100k records. I am using a 14 days trial period for cloud Elastic for my research…

---

## [ElasticSearch 5.1.1 - java.lang.OutOfMemoryError: Java heap space - Ubuntu 16.04](https://discuss.elastic.co/t/elasticsearch-5-1-1-java-lang-outofmemoryerror-java-heap-space-ubuntu-16-04/71530)

<div class="topic-metadata">

**Author:** [@tomekit](https://discuss.elastic.co/u/tomekit)\
**Replies:** 6\
**Last updated:** [January 16, 2017, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-java-lang-outofmemoryerror-java-heap-space-ubuntu-16-04/71530 "2017-01-16T13:24:25Z")

</div>

Hi, I've experienced this error during heavy bulk index. My node is 4GB RAM, 2 vCPUs. Heap size is set to 1GB (/etc/elasticsearch/jvm.options): -Xms1g -Xmx1g bootstrap.memory\_lock is not set to true. However I am n…

---

## [How to override logstash @timestamp value with my date time field from the logs](https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026)

<div class="topic-metadata">

**Author:** [@ankkha](https://discuss.elastic.co/u/ankkha)\
**Replies:** 6\
**Last updated:** [January 10, 2017, 7:58am UTC](https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026 "2017-01-10T07:58:37Z")

</div>

My logs Dec 12 13:45:43 \[0x80000001\]\[xsltmsg\]\[notice\]|6583|3018|0x00000000-0x00000000|235| Dec 12 14:45:43 \[0x80000001\]\[xsltmsg\]\[notice\]|6583|3018|0x00000000-0x00000000|205| My logstash config filter { grok { mat…

---

## [Unassigned replica shards with reason as INDEX\_CREATED](https://discuss.elastic.co/t/unassigned-replica-shards-with-reason-as-index-created/237845)

<div class="topic-metadata">

**Author:** [@Aliasgar\_Choolawala](https://discuss.elastic.co/u/Aliasgar_Choolawala)\
**Replies:** 4\
**Last updated:** [June 24, 2020, 1:48pm UTC](https://discuss.elastic.co/t/unassigned-replica-shards-with-reason-as-index-created/237845 "2020-06-24T13:48:28Z")

</div>

can anyone please help me ? i have a 7 data node elasticsearch cluster(5 master nodes) for an index, i have the following settings for routing: "routing" : { "allocation" : { "require" : { …

---

## [Parsing XML log file with logstash](https://discuss.elastic.co/t/parsing-xml-log-file-with-logstash/167306)

<div class="topic-metadata">

**Author:** [@Skwilly](https://discuss.elastic.co/u/Skwilly)\
**Replies:** 6\
**Last updated:** [February 7, 2019, 3:27pm UTC](https://discuss.elastic.co/t/parsing-xml-log-file-with-logstash/167306 "2019-02-07T15:27:22Z")

</div>

Hello, I am completely new to ElasticSearch. I did successfully set it up and explore some test data but warning: I am a newbie. I am trying to index an XML log file through logstash and I am lost as to how to procede …

---

## [Expected one of #, {, ,, \] Error](https://discuss.elastic.co/t/expected-one-of-error/117140)

<div class="topic-metadata">

**Author:** [@Prakash\_Punj](https://discuss.elastic.co/u/Prakash_Punj)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 3:06pm UTC](https://discuss.elastic.co/t/expected-one-of-error/117140 "2018-01-26T15:06:17Z")

</div>

Getting below error: \[2018-01-25T21:29:32,237\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message…

---

## [Diff between two date fields in kibana](https://discuss.elastic.co/t/diff-between-two-date-fields-in-kibana/130952)

<div class="topic-metadata">

**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 1:13pm UTC](https://discuss.elastic.co/t/diff-between-two-date-fields-in-kibana/130952 "2018-05-08T13:13:45Z")

</div>

A document with several date fields. How can I determine the delta of time in days, for example, between several dates in this document? Dates can be different years, i.e. It is necessary to minus the older date. For …

---

## [Bootstrap failure: Failed to bind address](https://discuss.elastic.co/t/bootstrap-failure-failed-to-bind-address/67570)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 4\
**Last updated:** [December 1, 2016, 2:53am UTC](https://discuss.elastic.co/t/bootstrap-failure-failed-to-bind-address/67570 "2016-12-01T02:53:12Z")

</div>

Following is the error I am getting: org.elasticsearch.transport.BindTransportException: Failed to bind to \[9300-9400\] at org.elasticsearch.transport.TcpTransport.bindToPort(TcpTransport.java:626) ~\[elasticsearch-5.0.…

---

## [Is it possible to make a query based on another query](https://discuss.elastic.co/t/is-it-possible-to-make-a-query-based-on-another-query/9596)

<div class="topic-metadata">

**Author:** [@Eugene\_Nikolaev](https://discuss.elastic.co/u/Eugene_Nikolaev)\
**Replies:** 6\
**Last updated:** [November 8, 2012, 5:47am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-a-query-based-on-another-query/9596 "2012-11-08T05:47:26Z")

</div>

Hi! Is it possible in elastic to make one request with two linked queries - so a first one returns some values and second one uses these values as parameters? For example - search for users based on some input parame…

---

## [Analyzer not found](https://discuss.elastic.co/t/analyzer-not-found/7421)

<div class="topic-metadata">

**Author:** [@bgossey](https://discuss.elastic.co/u/bgossey)\
**Replies:** 4\
**Last updated:** [April 19, 2013, 1:30am UTC](https://discuss.elastic.co/t/analyzer-not-found/7421 "2013-04-19T01:30:08Z")

</div>

Hello, I've defined an analyzer in my settings and updated the index with this new settings: {"settings": { "analysis" :{ "analyzer": { "exact\_analyzer": { "type": "custom", "tokenizer…

---

## [Can FileBeat parse csv file and send the data in fields to elastic search directly?](https://discuss.elastic.co/t/can-filebeat-parse-csv-file-and-send-the-data-in-fields-to-elastic-search-directly/68507)

<div class="topic-metadata">

**Author:** [@dnafication](https://discuss.elastic.co/u/dnafication)\
**Replies:** 4\
**Last updated:** [December 9, 2016, 8:37am UTC](https://discuss.elastic.co/t/can-filebeat-parse-csv-file-and-send-the-data-in-fields-to-elastic-search-directly/68507 "2016-12-09T08:37:32Z")

</div>

I am listening to a log file (which is a CSV file) using FileBeat and sending the data to elasticsearch instance. I am using the default configurations for FileBeat as well as elasticsearch. It works but my data is shown…

---

## [Visualizing Nested Objects in Kibana](https://discuss.elastic.co/t/visualizing-nested-objects-in-kibana/221617)

<div class="topic-metadata">

**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\
**Replies:** 2\
**Last updated:** [March 25, 2020, 1:21pm UTC](https://discuss.elastic.co/t/visualizing-nested-objects-in-kibana/221617 "2020-03-25T13:21:01Z")

</div>

I have indexed a docs with nested objects which appear to have the correct mappings for aggregation in the index pattern But when i attempt to visualize the data to filter, I do not see the fields on the left column…

---

## [Add maxFileSize and maxBackupIndex in logging.yml but won't work](https://discuss.elastic.co/t/add-maxfilesize-and-maxbackupindex-in-logging-yml-but-wont-work/43333)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 1\
**Last updated:** [March 3, 2016, 9:54am UTC](https://discuss.elastic.co/t/add-maxfilesize-and-maxbackupindex-in-logging-yml-but-wont-work/43333 "2016-03-03T09:54:52Z")

</div>

my logging.yml looks like below: file: type: dailyRollingFile file: ${path.logs}/${cluster.name}.log datePattern: "'.'yyyy-MM-dd" maxFileSize: 1GB maxBackupIndex: 15 layout: type: pattern …

---

## [Add the current date in mapping elasticsearch](https://discuss.elastic.co/t/add-the-current-date-in-mapping-elasticsearch/55983)

<div class="topic-metadata">

**Author:** [@ericpietro](https://discuss.elastic.co/u/ericpietro)\
**Replies:** 7\
**Last updated:** [August 1, 2016, 7:25am UTC](https://discuss.elastic.co/t/add-the-current-date-in-mapping-elasticsearch/55983 "2016-08-01T07:25:02Z")

</div>

Hi, I want to add - as a new field - the current date (now) in my index thus, i'll keep the elasticsearch indexing time in my index. How can I do it in the mapping settings ? I saw that the '\_timestamp' is deprecated... …

---

## [Any plans for a visual Logstash pipeline editor?](https://discuss.elastic.co/t/any-plans-for-a-visual-logstash-pipeline-editor/54574)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 4\
**Last updated:** [March 23, 2017, 7:26pm UTC](https://discuss.elastic.co/t/any-plans-for-a-visual-logstash-pipeline-editor/54574 "2017-03-23T19:26:24Z")

</div>

I was wondering if there were any plans of providing a visual pipeline editor for Logstash at some point? After writing tons of Logstash configuration files in many different projects over the past few years, I started f…

---

## [Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/168527)

<div class="topic-metadata">

**Author:** [@Nithin\_Sridhar](https://discuss.elastic.co/u/Nithin_Sridhar)\
**Replies:** 1\
**Last updated:** [February 15, 2019, 7:18am UTC](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/168527 "2019-02-15T07:18:00Z")

</div>

I'm using elasticsearch-6.6.0, Ubuntu 18.04 and Java verison as 10 details are below: java -version java version "10.0.2" 2018-07-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.2+13) Java HotSpot(TM) 64-Bit Serv…

---

## [Kibana incorrect time shown](https://discuss.elastic.co/t/kibana-incorrect-time-shown/190521)

<div class="topic-metadata">

**Author:** [@nfccas](https://discuss.elastic.co/u/nfccas)\
**Replies:** 4\
**Last updated:** [July 16, 2019, 1:02pm UTC](https://discuss.elastic.co/t/kibana-incorrect-time-shown/190521 "2019-07-16T13:02:39Z")

</div>

Hello, I'm having a long fight with Kibana/Logstash (7.2.0 and 7.0.0) due to this "issue" that occurs with other people too. After reading other topics/discussions i've done some corrections to my Logstash configuratio…

---

## [Stop filter problem: enablePositionIncrements=false is not supported anymore as of Lucene 4.4 as it can create broken token streams](https://discuss.elastic.co/t/stop-filter-problem-enablepositionincrements-false-is-not-supported-anymore-as-of-lucene-4-4-as-it-can-create-broken-token-streams/13457)

<div class="topic-metadata">

**Author:** [@Jondow](https://discuss.elastic.co/u/Jondow)\
**Replies:** 6\
**Last updated:** [February 21, 2017, 7:59am UTC](https://discuss.elastic.co/t/stop-filter-problem-enablepositionincrements-false-is-not-supported-anymore-as-of-lucene-4-4-as-it-can-create-broken-token-streams/13457 "2017-02-21T07:59:49Z")

</div>

I setup a stop filter as follows: "filter\_stop": { "type": "stop", "enable\_position\_increments":"false" } However when I try run my application th…

---

## [Searching for exactly a hyphenated word](https://discuss.elastic.co/t/searching-for-exactly-a-hyphenated-word/161216)

<div class="topic-metadata">

**Author:** [@Daverino](https://discuss.elastic.co/u/Daverino)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 3:50pm UTC](https://discuss.elastic.co/t/searching-for-exactly-a-hyphenated-word/161216 "2018-12-18T15:50:01Z")

</div>

So this problem has stumped me. I would like to search for instances of (for example) "hyper-space" but not find "hyper space". All traditional tokenizers except whitespace are going to split on the hyphen and it will …

---

## [Does kibana support fuzzy search?](https://discuss.elastic.co/t/does-kibana-support-fuzzy-search/167568)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 5\
**Last updated:** [February 11, 2019, 10:03pm UTC](https://discuss.elastic.co/t/does-kibana-support-fuzzy-search/167568 "2019-02-11T22:03:26Z")

</div>

Does Kibana support fuzziness in the search input box on the top of the Discover page? I tried as what shows in the https://www.elastic.co/guide/en/elasticsearch/reference/6.5/query-dsl-query-string-query.html#query-str…

---

## [\[Resolved\]Join data cross two index based on common field](https://discuss.elastic.co/t/resolved-join-data-cross-two-index-based-on-common-field/195458)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 7\
**Last updated:** [August 22, 2019, 6:59am UTC](https://discuss.elastic.co/t/resolved-join-data-cross-two-index-based-on-common-field/195458 "2019-08-22T06:59:32Z")

</div>

Hi Team, In my local elk stack, below two index are created. kvaudit\* This one is index customer behavior data. Example data: \` module=SCM fa=TS at=SCM.TS.MODIFY\_SEARCH si=4C3D8709E51DDC4EE879A9E30729B512.mo-569…

[Previous page](https://discuss.elastic.co/top.md?page=321&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=323&per_page=50&period=all)
