# Top **URL:** https://discuss.elastic.co/top.md?page=328&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 329 --- ## [How do I make a Kibana histogram that plots the distribution of the average of key A for each distinct value of key B?](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541)
**Author:** [@eric4](https://discuss.elastic.co/u/eric4)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 9:36pm UTC](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541 "2021-01-28T21:36:32Z")
This applies to any Kibana graph but the one I am interested in is a Histogram. My data is structured like this: \[ { "user\_id" : 3, "score" : 10 }, { "user\_id" : 1, "score" : 20 }, { "user\_id" : 2, "score" : 60 }… --- ## [How to query for the most current timestamp](https://discuss.elastic.co/t/how-to-query-for-the-most-current-timestamp/134746)
**Author:** [@yks](https://discuss.elastic.co/u/yks)\ **Replies:** 6\ **Last updated:** [June 8, 2018, 1:33am UTC](https://discuss.elastic.co/t/how-to-query-for-the-most-current-timestamp/134746 "2018-06-08T01:33:00Z")
Hi, Would like to know how to query for the most current timestamp and display on dashboard. Best regards --- ## [Setting https for Kibana with NGINX and a FQDN](https://discuss.elastic.co/t/setting-https-for-kibana-with-nginx-and-a-fqdn/205010)
**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\ **Replies:** 4\ **Last updated:** [October 29, 2019, 2:58pm UTC](https://discuss.elastic.co/t/setting-https-for-kibana-with-nginx-and-a-fqdn/205010 "2019-10-29T14:58:58Z")
I have a Droplet on Digital Ocean which runs CentOS 7 and I run an ELK stack on it. I've also successfully configured an NGINX web server with a FQDN (got one from namecheap.com ) and I also have an SSL certificate manag… --- ## [File plugin doesn't read file](https://discuss.elastic.co/t/file-plugin-doesnt-read-file/49052)
**Author:** [@noemie](https://discuss.elastic.co/u/noemie)\ **Replies:** 6\ **Last updated:** [June 28, 2016, 8:21am UTC](https://discuss.elastic.co/t/file-plugin-doesnt-read-file/49052 "2016-06-28T08:21:30Z")
Hello, I just upgraded logstash version to 2.3.2. My config file worked fine on the previous version I had (2.3.1 i think) but since I upgraded, it seems like the log files I specified for the file plugin aren't read. … --- ## [Score depending on position in the term on the field](https://discuss.elastic.co/t/score-depending-on-position-in-the-term-on-the-field/15357)
**Author:** [@Nikolay\_Chankov](https://discuss.elastic.co/u/Nikolay_Chankov)\ **Replies:** 7\ **Last updated:** [January 24, 2014, 6:14pm UTC](https://discuss.elastic.co/t/score-depending-on-position-in-the-term-on-the-field/15357 "2014-01-24T18:14:34Z")
I am playing with elasticsearch so far, and i noticed something: If I search for a word in a string, the \_score is equal no matter where is placed the word. Here I have prepared a test case: curl -XDELETE 'http:/… --- ## [How do I get proper mapping for haproxy grok](https://discuss.elastic.co/t/how-do-i-get-proper-mapping-for-haproxy-grok/28406)
**Author:** [@Sam\_Saffron](https://discuss.elastic.co/u/Sam_Saffron)\ **Replies:** 7\ **Last updated:** [September 1, 2015, 6:32pm UTC](https://discuss.elastic.co/t/how-do-i-get-proper-mapping-for-haproxy-grok/28406 "2015-09-01T18:32:31Z")
I have a rather simple logstash setup. Our haproxy server ships logs via lumberjack to the logstash/kibana/elastic server. The configration is pretty trivial: input { lumberjack { port =\> 5150 type =\> "logs"… --- ## [How to implement a "is not one of " filter by using Query DSL](https://discuss.elastic.co/t/how-to-implement-a-is-not-one-of-filter-by-using-query-dsl/112830)
**Author:** [@jeremyasm](https://discuss.elastic.co/u/jeremyasm)\ **Replies:** 5\ **Last updated:** [January 3, 2018, 9:21am UTC](https://discuss.elastic.co/t/how-to-implement-a-is-not-one-of-filter-by-using-query-dsl/112830 "2018-01-03T09:21:36Z")
Hi, We'd like to implement a "is not one of " filter by using Query DSL because there're so many items in "is not one of" List. And we want to reuse the filter in many other dashboards, so writing Query DSL would be mu… --- ## [How to make Logstash write internal logs to a file? (--path.logs fails)](https://discuss.elastic.co/t/how-to-make-logstash-write-internal-logs-to-a-file-path-logs-fails/126822)
**Author:** [@CDuv](https://discuss.elastic.co/u/CDuv)\ **Replies:** 5\ **Last updated:** [June 7, 2018, 1:53pm UTC](https://discuss.elastic.co/t/how-to-make-logstash-write-internal-logs-to-a-file-path-logs-fails/126822 "2018-06-07T13:53:29Z")
Context I am building a program that will pass an Apache log file into Logstash and output the result (after parsing and filtering) to an external database (Elastic, MongoDB, etc.). Basically, the program will execute f… --- ## [Connection Refused Docker Kibana](https://discuss.elastic.co/t/connection-refused-docker-kibana/100945)
**Author:** [@scottf](https://discuss.elastic.co/u/scottf)\ **Replies:** 6\ **Last updated:** [September 20, 2017, 11:30pm UTC](https://discuss.elastic.co/t/connection-refused-docker-kibana/100945 "2017-09-20T23:30:07Z")
Kibana connection refused, (1) Plain vanilla linux ubuntu 17. Docker 1.12.6 (I've got similar behavior on centos 7 / docker 17) (2.1) using docker elasticsearch 5.6.1. This command to start es sudo docker run -d -p 92… --- ## [Import Saved Windows Event Logs](https://discuss.elastic.co/t/import-saved-windows-event-logs/85302)
**Author:** [@Gregory\_Green](https://discuss.elastic.co/u/Gregory_Green)\ **Replies:** 4\ **Last updated:** [May 16, 2017, 9:47pm UTC](https://discuss.elastic.co/t/import-saved-windows-event-logs/85302 "2017-05-16T21:47:30Z")
Hello, I have .evtx logs saved to CD/DVDs that I would like elasticsearch to ingest. Is there a way to change the path that winlogbeat uses to check for logs? I've tried converting them to .csv files and utilizing file… --- ## [Large string fields](https://discuss.elastic.co/t/large-string-fields/71818)
**Author:** [@Emrah](https://discuss.elastic.co/u/Emrah)\ **Replies:** 5\ **Last updated:** [January 18, 2017, 9:29am UTC](https://discuss.elastic.co/t/large-string-fields/71818 "2017-01-18T09:29:42Z")
Hi there, Anyone experienced compressing large strings (gzip or 7zip) and then store it on Elasticsearch or does it make any sense to compress large strings like 100k chars (not \>1 mb) ? --- ## [Filebeat parse json](https://discuss.elastic.co/t/filebeat-parse-json/130834)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 7\ **Last updated:** [May 10, 2018, 6:47am UTC](https://discuss.elastic.co/t/filebeat-parse-json/130834 "2018-05-10T06:47:12Z")
Filebeat 6.2.1 I don't think filebeat is seeing my json document inside of an array \[\]. This causes json parse failures. Is there something I should be doing different to process this document? Original document: \[{… --- ## [Timelion- assign a time series to a variable and then refer to it using that variable](https://discuss.elastic.co/t/timelion-assign-a-time-series-to-a-variable-and-then-refer-to-it-using-that-variable/111086)
**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\ **Replies:** 1\ **Last updated:** [December 11, 2017, 8:39pm UTC](https://discuss.elastic.co/t/timelion-assign-a-time-series-to-a-variable-and-then-refer-to-it-using-that-variable/111086 "2017-12-11T20:39:10Z")
Hey there! I am creating time-series forecast using holt() and other functions. The thing is, my conditions and query are too long and for every function I have to add the same time-series as an arguments again. Is it p… --- ## [How to divide two fields for visualization?](https://discuss.elastic.co/t/how-to-divide-two-fields-for-visualization/221009)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 5\ **Last updated:** [February 27, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-divide-two-fields-for-visualization/221009 "2020-02-27T09:12:19Z")
Hello, I have been experimenting with visualizations and wanted to know if there is a way to divide the value of a field? I would prefer not to have to write a script. I am looking for a simple "calculation" or "divisi… --- ## [Maximum size limit of payload to be sent to elasticSearch for a search query](https://discuss.elastic.co/t/maximum-size-limit-of-payload-to-be-sent-to-elasticsearch-for-a-search-query/99802)
**Author:** [@NavalKK](https://discuss.elastic.co/u/NavalKK)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 6:54am UTC](https://discuss.elastic.co/t/maximum-size-limit-of-payload-to-be-sent-to-elasticsearch-for-a-search-query/99802 "2017-09-08T06:54:33Z")
I want to know if there is any limit to size of the request payload in search query to be sent to elasticsearch. --- ## [Installing Kibana on a Raspberry Pi 4 using Raspbian Buster](https://discuss.elastic.co/t/installing-kibana-on-a-raspberry-pi-4-using-raspbian-buster/202612)
**Author:** [@glassman](https://discuss.elastic.co/u/glassman)\ **Replies:** 6\ **Last updated:** [November 11, 2019, 3:10pm UTC](https://discuss.elastic.co/t/installing-kibana-on-a-raspberry-pi-4-using-raspbian-buster/202612 "2019-11-11T15:10:31Z")
I have ES and logstash 7.4 installed on a RPi 4B. I understand that Kibana no longer supports 32-bit operating systems, but I found another thread where someone installed 64-bit Kibana on a 32-bit OS. I figured I could … --- ## [\[logstash.outputs.elasticsearch\] UNEXPECTED POOL ERROR](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-unexpected-pool-error/109513)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 2\ **Last updated:** [December 1, 2017, 5:07am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-unexpected-pool-error/109513 "2017-12-01T05:07:24Z")
Hello, i have an issue with my logstash when i am running my configuration file then some logs are coming then automatically its giving some error like \[2017-11-29T11:20:51,023\]\[WARN \]\[logstash.outputs.elasticsearch\] … --- ## [Removing node from cluster and replacing it with a new one](https://discuss.elastic.co/t/removing-node-from-cluster-and-replacing-it-with-a-new-one/152996)
**Author:** [@matisku](https://discuss.elastic.co/u/matisku)\ **Replies:** 6\ **Last updated:** [October 22, 2018, 5:45pm UTC](https://discuss.elastic.co/t/removing-node-from-cluster-and-replacing-it-with-a-new-one/152996 "2018-10-22T17:45:41Z")
Hello, My setup contains 3 master nodes and 9 data nodes. Each index have 9 shards and 1 replica. ES Cluster is setup in AWS. I wanted to upgrade from Ubuntu 14.04 to 16.04. It means that I have to delete instance an… --- ## [After creating API key attempting to use it results in: missing authentication credentials for REST request](https://discuss.elastic.co/t/after-creating-api-key-attempting-to-use-it-results-in-missing-authentication-credentials-for-rest-request/217266)
**Author:** [@scarby](https://discuss.elastic.co/u/scarby)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 8:19am UTC](https://discuss.elastic.co/t/after-creating-api-key-attempting-to-use-it-results-in-missing-authentication-credentials-for-rest-request/217266 "2020-02-03T08:19:40Z")
Hope someone can help here i'm attempting to create api keys for a user and utilize them as documented here: https://www.elastic.co/guide/en/elasticsearch/reference/7.5/security-api-create-api-key.html i have successf… --- ## [Filebeat setup: "Exiting: module system is configured but has no enabled filesets"](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584)
**Author:** [@JoeShabadu2000](https://discuss.elastic.co/u/JoeShabadu2000)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 11:41pm UTC](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584 "2022-08-07T23:41:43Z")
I'm trying to set up filebeat on Ubuntu, to send system log data to Logstash. I am having issues setting up the "filebeat system" module. Upon running: sudo filebeat setup --pipelines --modules system I receive the er… --- ## [How to search for exact matches in either one of two fields?](https://discuss.elastic.co/t/how-to-search-for-exact-matches-in-either-one-of-two-fields/137338)
**Author:** [@rajeevrmenon97](https://discuss.elastic.co/u/rajeevrmenon97)\ **Replies:** 7\ **Last updated:** [June 27, 2018, 4:14am UTC](https://discuss.elastic.co/t/how-to-search-for-exact-matches-in-either-one-of-two-fields/137338 "2018-06-27T04:14:48Z")
I have two fields field\_1 and field\_2. I have a to find exact match for my query in either field\_1 or field\_2. multi\_match is not giving me exact matches. And constant\_score does not support multi\_match. The elasticsear… --- ## [Where does logstash store the log files that it has read](https://discuss.elastic.co/t/where-does-logstash-store-the-log-files-that-it-has-read/24695)
**Author:** [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\ **Replies:** 3\ **Last updated:** [July 1, 2015, 9:52am UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-log-files-that-it-has-read/24695 "2015-07-01T09:52:28Z")
Hi! I was wondering where Logstash is storing the log files that it has read and indexed. I was reading up a little on github and apparently the default folder for this is var/log/syslog but when I jump into the log fo… --- ## [Splitting a data field into two](https://discuss.elastic.co/t/splitting-a-data-field-into-two/89421)
**Author:** [@Will\_Farrell](https://discuss.elastic.co/u/Will_Farrell)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 6:23pm UTC](https://discuss.elastic.co/t/splitting-a-data-field-into-two/89421 "2017-06-14T18:23:48Z")
Hello, i need to split a certain datafield I have into two separate fields. The field goes like this, xx-xx0000:XXXXXxxx where x's are letters and 0's are numbers. I need to separate the field where the semicolon … --- ## [Load Epoch time](https://discuss.elastic.co/t/load-epoch-time/44410)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 8\ **Last updated:** [March 16, 2016, 7:14am UTC](https://discuss.elastic.co/t/load-epoch-time/44410 "2016-03-16T07:14:19Z")
Hi , I'm trying to convert epoch time to human date. In my json file I tried to put the value of the field with "" and without "". I saw some answers about this in the web but in my case it doesn't work. The name of t… --- ## [Filter by date field in Kibana](https://discuss.elastic.co/t/filter-by-date-field-in-kibana/149252)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 3\ **Last updated:** [September 20, 2018, 2:10pm UTC](https://discuss.elastic.co/t/filter-by-date-field-in-kibana/149252 "2018-09-20T14:10:59Z")
Hi, I have a field correctly mapped as a datetime. For example, a possible value could be August 21st 2018, 20:00:00.000 Now I would like to filter documents in Kibana by selecting a particular date/time or an interva… --- ## [Error creating input: Can only start an input when all related states are finished](https://discuss.elastic.co/t/error-creating-input-can-only-start-an-input-when-all-related-states-are-finished/157249)
**Author:** [@Hoon\_Cho](https://discuss.elastic.co/u/Hoon_Cho)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 2:55pm UTC](https://discuss.elastic.co/t/error-creating-input-can-only-start-an-input-when-all-related-states-are-finished/157249 "2018-11-20T14:55:10Z")
I run filebeat with system module enabled and filebeat log like this.. 2018-11-19T07:18:31.662+0900 INFO log/input.go:138 Configured paths: \[/var/log/secure\*\] 2018-11-19T07:18:31.666+0900 ERROR fileset/factory.go:105 … --- ## [Set a nested field with a variable](https://discuss.elastic.co/t/set-a-nested-field-with-a-variable/258153)
**Author:** [@dwatbmc](https://discuss.elastic.co/u/dwatbmc)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 4:00pm UTC](https://discuss.elastic.co/t/set-a-nested-field-with-a-variable/258153 "2020-12-09T16:00:29Z")
Can't find a way to do this with Mutate, so I am attempting it in Ruby, but still failing: I have two fields: \[log\]\[group\] = "panos" \[log\]\[type\] = "threat" Based on these two field values, I want to copy the JSON Obj… --- ## [Best practices to delete / mark for delete specific documents in an index?](https://discuss.elastic.co/t/best-practices-to-delete-mark-for-delete-specific-documents-in-an-index/194385)
**Author:** [@Ariel\_B](https://discuss.elastic.co/u/Ariel_B)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 2:12pm UTC](https://discuss.elastic.co/t/best-practices-to-delete-mark-for-delete-specific-documents-in-an-index/194385 "2019-08-08T14:12:20Z")
Hello, In my use cases i use a monthly indexes, which store large amount of documents. When user adds some kind of configuration, some of those documents need to be deleted. I understand that it's not efficient to keep… --- ## [Increase queue size in AWS elasticsearch](https://discuss.elastic.co/t/increase-queue-size-in-aws-elasticsearch/105019)
**Author:** [@patricia022](https://discuss.elastic.co/u/patricia022)\ **Replies:** 8\ **Last updated:** [October 26, 2017, 8:56am UTC](https://discuss.elastic.co/t/increase-queue-size-in-aws-elasticsearch/105019 "2017-10-26T08:56:26Z")
I wasn't able to modify queue size in aws elasticsearch I am getting this error { "Message": "Your request: '/\_cluster/settings' payload is not allowed." } Elasticsearch query: PUT \_cluster/settings { "persistent… --- ## [Can't create lock file when sharing data.path folder between docker and host](https://discuss.elastic.co/t/cant-create-lock-file-when-sharing-data-path-folder-between-docker-and-host/81617)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 8\ **Last updated:** [April 9, 2017, 10:50am UTC](https://discuss.elastic.co/t/cant-create-lock-file-when-sharing-data-path-folder-between-docker-and-host/81617 "2017-04-09T10:50:33Z")
My elasticsearch container works fine when using default data.path I start it like this: docker run -d --rm --net=host --name=elasticsearch elasticsearch2 But when I create a folder on my host machine and share this… --- ## [Kibana Discover: User regexp/wildcard in search bar](https://discuss.elastic.co/t/kibana-discover-user-regexp-wildcard-in-search-bar/90592)
**Author:** [@Pavlo\_Ivanchyshyn](https://discuss.elastic.co/u/Pavlo_Ivanchyshyn)\ **Replies:** 5\ **Last updated:** [July 4, 2017, 1:09pm UTC](https://discuss.elastic.co/t/kibana-discover-user-regexp-wildcard-in-search-bar/90592 "2017-07-04T13:09:37Z")
I'm using Kibana's Discover page to find some data in my application. It's working find, but when I want to find something like this: app\_message: "You are the /\\d/ user in our system" I can't catch it properly. I … --- ## [How to integrate elk with log4.net and mssql](https://discuss.elastic.co/t/how-to-integrate-elk-with-log4-net-and-mssql/52282)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 4\ **Last updated:** [November 18, 2016, 6:09pm UTC](https://discuss.elastic.co/t/how-to-integrate-elk-with-log4-net-and-mssql/52282 "2016-11-18T18:09:10Z")
I want to integrate log4.net with elk, such that the data from log4.net can be displayed on the kibana. How can we do? what should installed on the clients? I want to send the MS SQL data to elk, how can we send the d… --- ## [ssl.SSLError: \[SSL\] PEM lib (\_ssl.c:3845)](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392)
**Author:** [@lioramilbaum](https://discuss.elastic.co/u/lioramilbaum)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 1:38pm UTC](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392 "2019-10-14T13:38:13Z")
The following function execution throws an error. The same command in bash works like a charm. def set\_kibana\_password(): headers = {"Content-Type": "application/json"} payload = {"password": os.getenv('ELASTIC\_PASSWORD… --- ## [Designing a massive multi-tenant elasticsearch architecture](https://discuss.elastic.co/t/designing-a-massive-multi-tenant-elasticsearch-architecture/185736)
**Author:** [@haroutk](https://discuss.elastic.co/u/haroutk)\ **Replies:** 5\ **Last updated:** [June 18, 2019, 5:21am UTC](https://discuss.elastic.co/t/designing-a-massive-multi-tenant-elasticsearch-architecture/185736 "2019-06-18T05:21:52Z")
I have done a lot of reading on the "Definitive Elastic Guide", read many of the suggestions on the web and in this community... but yet, I still have a handful of questions and concerns about the Index and sharding appr… --- ## [Elastic agent failing to enroll on a fresh install](https://discuss.elastic.co/t/elastic-agent-failing-to-enroll-on-a-fresh-install/298895)
**Author:** [@epheria](https://discuss.elastic.co/u/epheria)\ **Replies:** 3\ **Last updated:** [March 13, 2022, 6:50am UTC](https://discuss.elastic.co/t/elastic-agent-failing-to-enroll-on-a-fresh-install/298895 "2022-03-13T06:50:03Z")
Hello! I am having trouble getting an elastic agent to enroll on a host for monitoring (more specific details to come below). As an overview, here's what I'm working with: Freshly installed Elasticsearch and kibana (… --- ## [Set permission view specific dashboard only](https://discuss.elastic.co/t/set-permission-view-specific-dashboard-only/123177)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [March 9, 2018, 4:55am UTC](https://discuss.elastic.co/t/set-permission-view-specific-dashboard-only/123177 "2018-03-09T04:55:18Z")
Hi, Im using Elastic stack V6.2.2 I have new rule : group INDEX\_A have permission in index INDEX\_A-\*. Dashboard called AUDIT - show all visualization of index INDEX\_A-\* Im setting for user A with permission "kibana\_d… --- ## [When restarting my machine Kibana pid file is removed automatically](https://discuss.elastic.co/t/when-restarting-my-machine-kibana-pid-file-is-removed-automatically/143686)
**Author:** [@TheSmartMonkey](https://discuss.elastic.co/u/TheSmartMonkey)\ **Replies:** 7\ **Last updated:** [August 14, 2018, 11:22am UTC](https://discuss.elastic.co/t/when-restarting-my-machine-kibana-pid-file-is-removed-automatically/143686 "2018-08-14T11:22:34Z")
I installed ELK version 6.3.2 on a centos 7 machine The issue is when i restart this machine I have no more /var/run/kibana.pid file Each time i restart the machine I have to do this commands : touch /var/run/kibana.p… --- ## [ElasticSearch - Searching partial text in String](https://discuss.elastic.co/t/elasticsearch-searching-partial-text-in-string/316649)
**Author:** [@Sachin\_Sharma](https://discuss.elastic.co/u/Sachin_Sharma)\ **Replies:** 3\ **Last updated:** [October 16, 2022, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-searching-partial-text-in-string/316649 "2022-10-16T11:59:59Z")
What is the best way to use Elasticsearch to search exact partial text in String? In SQL the method would be: %PARTIAL TEXT%, %ARTIAL TEX% In Elastic Search current method being used: { "query": { "match\_p… --- ## [Running with Supervisor via command line](https://discuss.elastic.co/t/running-with-supervisor-via-command-line/28798)
**Author:** [@mikesparr](https://discuss.elastic.co/u/mikesparr)\ **Replies:** 3\ **Last updated:** [September 8, 2015, 5:56am UTC](https://discuss.elastic.co/t/running-with-supervisor-via-command-line/28798 "2015-09-08T05:56:22Z")
I would like to start/run ES nodes using Supervisor on Ubuntu 14.04.2 LTS. Using ES 1.7.1 and planning upgrade to 2.x when complete. Currently we use the package install and ES installed in /usr/share/elasticsearch/bin/ … --- ## [\[Solved\]How to convert a json format string to json object for only one field of a full log text in ruby filter?](https://discuss.elastic.co/t/solved-how-to-convert-a-json-format-string-to-json-object-for-only-one-field-of-a-full-log-text-in-ruby-filter/180312)
**Author:** [@Adminstrator](https://discuss.elastic.co/u/Adminstrator)\ **Replies:** 6\ **Last updated:** [May 15, 2019, 7:41am UTC](https://discuss.elastic.co/t/solved-how-to-convert-a-json-format-string-to-json-object-for-only-one-field-of-a-full-log-text-in-ruby-filter/180312 "2019-05-15T07:41:38Z")
I use filebeat to collcet log.Then push log to kafka ,then use logstash to parse every log record.then push to another kafka again.then use another logstash push the log to elasticsearch. And the log is splited by '\\t'.… --- ## [Small vs Large indices](https://discuss.elastic.co/t/small-vs-large-indices/56880)
**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\ **Replies:** 6\ **Last updated:** [May 16, 2017, 1:23pm UTC](https://discuss.elastic.co/t/small-vs-large-indices/56880 "2017-05-16T13:23:09Z")
I'm testing some scenarios of daily vs monthly indices and noticed something that might be counter intuitive, I have 1 index with 69,000,000 documents 8.4GB and another monthly index (same data, but across many days in… --- ## [Visualize multiple fields in vertical bar chart](https://discuss.elastic.co/t/visualize-multiple-fields-in-vertical-bar-chart/55028)
**Author:** [@rudo](https://discuss.elastic.co/u/rudo)\ **Replies:** 3\ **Last updated:** [July 11, 2016, 6:49pm UTC](https://discuss.elastic.co/t/visualize-multiple-fields-in-vertical-bar-chart/55028 "2016-07-11T18:49:51Z")
Hello, is there any possibility in Kibana to visualize multiple fields in single vertical bar chart? Suppose I have 3 fields of the same type (date) and I would like to display count aggregation on y axis for them like… --- ## [Metricbeat : Error fetching data for metricset elasticsearch](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-elasticsearch/298792)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 3\ **Last updated:** [March 4, 2022, 3:49pm UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-elasticsearch/298792 "2022-03-04T15:49:08Z")
I have setup metricbeat in kubernetes with following deployment manifest DaemonSet--- apiVersion: v1 kind: ServiceAccount metadata: name: metricbeat namespace: kube-logging labels: app: metricbeat --- apiVe… --- ## [Converting a string date (epoch) to a Date field using scripted fields in kibana](https://discuss.elastic.co/t/converting-a-string-date-epoch-to-a-date-field-using-scripted-fields-in-kibana/173013)
**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\ **Replies:** 5\ **Last updated:** [April 10, 2019, 5:26pm UTC](https://discuss.elastic.co/t/converting-a-string-date-epoch-to-a-date-field-using-scripted-fields-in-kibana/173013 "2019-04-10T17:26:04Z")
Hi! I have a date in the form of a string (epoch) like below: "1553012442470" Now I want to use scripted fields in kibana to convert the string date time to a date field. Also perform multiple operations with t… --- ## [How do I disable interactivity of Kibana Visualization](https://discuss.elastic.co/t/how-do-i-disable-interactivity-of-kibana-visualization/25446)
**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\ **Replies:** 6\ **Last updated:** [June 24, 2016, 9:54am UTC](https://discuss.elastic.co/t/how-do-i-disable-interactivity-of-kibana-visualization/25446 "2016-06-24T09:54:38Z")
Versions Windows 7 elasticsearch v1.6.0 logstash v1.5.2 kibana v4.1.1 Background I really like that a user can interact with a Kibana Visualization. Example click on a bar chart and highlight, zoom in on a certain dat… --- ## [What is mean "cluster\_uuid" : "\_na\_" in ES v2.4.1?](https://discuss.elastic.co/t/what-is-mean-cluster-uuid--na--in-es-v2-4-1/61825)
**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\ **Replies:** 0\ **Last updated:** [September 29, 2016, 2:42pm UTC](https://discuss.elastic.co/t/what-is-mean-cluster-uuid--na--in-es-v2-4-1/61825 "2016-09-29T14:42:08Z")
Hello. I have updated ElasticSearch to v2.4.1 and now I see a new response attribute "cluster\_uuid". Why it has "na" value and what is mean? curl localhost:9200 { "name" : "test1", "cluster\_name" : "elka\_test", "… --- ## [Sum Size of All Index](https://discuss.elastic.co/t/sum-size-of-all-index/27572)
**Author:** [@tanveer3](https://discuss.elastic.co/u/tanveer3)\ **Replies:** 1\ **Last updated:** [April 13, 2016, 2:40pm UTC](https://discuss.elastic.co/t/sum-size-of-all-index/27572 "2016-04-13T14:40:30Z")
Hi All, I am trying to find the sum of all the index, i got the query which displays the size of all indexes in Elasticsearch. I want to sum up the size of all the index, how could i achieve it ? curl 'localhost:9… --- ## [How to get only newest records by name?](https://discuss.elastic.co/t/how-to-get-only-newest-records-by-name/64016)
**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\ **Replies:** 6\ **Last updated:** [October 31, 2016, 12:53pm UTC](https://discuss.elastic.co/t/how-to-get-only-newest-records-by-name/64016 "2016-10-31T12:53:33Z")
Hello, In I'm using kibana 4.4.1 and in elasticsearch I store the status of PC, only when PC status is changed (open, closed, warings, etc) My data looks like: { "status\_id":1 , "pc":"lpt001" , "date":"2016-10-25T17:4… --- ## [Filebeats is re-processing logs once it restarts](https://discuss.elastic.co/t/filebeats-is-re-processing-logs-once-it-restarts/124292)
**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\ **Replies:** 5\ **Last updated:** [March 21, 2018, 8:28am UTC](https://discuss.elastic.co/t/filebeats-is-re-processing-logs-once-it-restarts/124292 "2018-03-21T08:28:22Z")
Hi, I am using Nginx as my app server. I have installed filebeat where Nginx is installed. Filebeat pushes these logs to Logstash. Then logstash pushes forward to elasticsearch. But whenever I do a deployment the previ… --- ## [Failed to start elasticsearch when enable CORS](https://discuss.elastic.co/t/failed-to-start-elasticsearch-when-enable-cors/38702)
**Author:** [@Weizhen\_Yan](https://discuss.elastic.co/u/Weizhen_Yan)\ **Replies:** 6\ **Last updated:** [January 8, 2016, 10:28am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-when-enable-cors/38702 "2016-01-08T10:28:37Z")
Tried to enable HTTP CORS on ES, but after I added http.cors.enabled: true http.cors.allow-origin: "\*" to elasticsearch.yml, ES can't start and I got this error: Exception in thread "main" SettingsException\[Failed … [Previous page](https://discuss.elastic.co/top.md?page=327&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=329&per_page=50&period=all)