# Top

**URL:** https://discuss.elastic.co/top.md?page=329&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 330

---

## [What does "now/d" mean in elasticsearch](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928)

<div class="topic-metadata">

**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 7:42am UTC](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928 "2020-05-11T07:42:41Z")

</div>

GET test\_index/\_search { "query": { "bool": { "must": \[ { "range": { "timestamp": { "gte": "now-1d/d", "lte": "now" } } } \] } } } I'am now able to understand what does query means.What does now-1d/d mean…

---

## [How to limit the Memory used by ElasticSearch](https://discuss.elastic.co/t/how-to-limit-the-memory-used-by-elasticsearch/25825)

<div class="topic-metadata">

**Author:** [@Ningjun](https://discuss.elastic.co/u/Ningjun)\
**Replies:** 7\
**Last updated:** [July 22, 2015, 6:49pm UTC](https://discuss.elastic.co/t/how-to-limit-the-memory-used-by-elasticsearch/25825 "2015-07-22T18:49:07Z")

</div>

I am using ElasticSearch 1.6.0 on Windows 2008 R2 server. I want to limit the Memory used by the ElasticSearch servers. I set the following and start the server set ES\_HEAP\_SIZE=4g The windows resource Monitor shows th…

---

## [Query with multiple AND and OR clauses in a filter context?](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678)

<div class="topic-metadata">

**Author:** [@jyridevelopingsw](https://discuss.elastic.co/u/jyridevelopingsw)\
**Replies:** 7\
**Last updated:** [October 31, 2019, 12:28pm UTC](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678 "2019-10-31T12:28:37Z")

</div>

Is it possible to perform a complex query in just filter context? In my case scoring does not matter at all. The documentation states that in a bool query filter and must\_not are performed in a filter context. So can I …

---

## [How to increase the number of shard in an exsisting index](https://discuss.elastic.co/t/how-to-increase-the-number-of-shard-in-an-exsisting-index/206320)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 4:44am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-shard-in-an-exsisting-index/206320 "2019-11-05T04:44:19Z")

</div>

Dear all, i have an elastic to collect log when i read the document they say that the default number of shard per index are 5 but when i create the index there are only one index, so how can i increate the number of sh…

---

## ['invalid\_index\_name\_exception' when create a user for kibana server](https://discuss.elastic.co/t/invalid-index-name-exception-when-create-a-user-for-kibana-server/68019)

<div class="topic-metadata">

**Author:** [@minhyuk](https://discuss.elastic.co/u/minhyuk)\
**Replies:** 4\
**Last updated:** [December 7, 2016, 7:53am UTC](https://discuss.elastic.co/t/invalid-index-name-exception-when-create-a-user-for-kibana-server/68019 "2016-12-07T07:53:08Z")

</div>

Hi all, Currently, I'm trying to use Kibana with shield, but when I execute the command: curl -u es\_admin -XPOST 'http://localhost:9200/logstash-\*/user/kibana-server' -d '{"password" : "mypassword", "roles" : \[ "kibana4\_…

---

## [Endless loop while logging to Kibana with X-pack](https://discuss.elastic.co/t/endless-loop-while-logging-to-kibana-with-x-pack/67727)

<div class="topic-metadata">

**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\
**Replies:** 6\
**Last updated:** [December 7, 2016, 10:51am UTC](https://discuss.elastic.co/t/endless-loop-while-logging-to-kibana-with-x-pack/67727 "2016-12-07T10:51:57Z")

</div>

Hi, I have a elasticsearch v5 cluster of 10 nodes, running in docker swarm mode. All Elasticsearch containers are running the same image with X-pack installed. X-pack is installed in Kibana v5 as well, and Kibana is a…

---

## [How to load xml file using logstash in es?](https://discuss.elastic.co/t/how-to-load-xml-file-using-logstash-in-es/40839)

<div class="topic-metadata">

**Author:** [@shankarananth.th](https://discuss.elastic.co/u/shankarananth.th)\
**Replies:** 6\
**Last updated:** [February 3, 2016, 12:36pm UTC](https://discuss.elastic.co/t/how-to-load-xml-file-using-logstash-in-es/40839 "2016-02-03T12:36:20Z")

</div>

Hi , I'm very new to elk. Kindly find my data sample in attachment. How can i load that xml data using logstash. I used the below mentioned code to load it. input { stdin { type =\> "stdin-type" } file { type =\> …

---

## [Performance degradation after ES upgrade (v1.7 -\> v2.4)](https://discuss.elastic.co/t/performance-degradation-after-es-upgrade-v1-7-v2-4/61025)

<div class="topic-metadata">

**Author:** [@telendt](https://discuss.elastic.co/u/telendt)\
**Replies:** 8\
**Last updated:** [September 28, 2016, 12:28pm UTC](https://discuss.elastic.co/t/performance-degradation-after-es-upgrade-v1-7-v2-4/61025 "2016-09-28T12:28:16Z")

</div>

We recently did a test migration of one of ours Elasticsearch clusters from 1.7.3 to 2.4.0 which involved a lot of changes in pretty much every component of our core search infrastructure - system provisioning, indexing …

---

## [Help: FATAL Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/help-fatal-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/77950)

<div class="topic-metadata">

**Author:** [@johnhrburns](https://discuss.elastic.co/u/johnhrburns)\
**Replies:** 1\
**Last updated:** [March 9, 2017, 12:40pm UTC](https://discuss.elastic.co/t/help-fatal-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/77950 "2017-03-09T12:40:50Z")

</div>

I have update my versions of elasticsearch and kibana, and installed with no problems using brew on my mac. However, when I try to execute 'bin/kibana' I get the following: Johns-MacBook-Pro:kibana-5.2.2-darwin-x86\_64 …

---

## [Filter in kibana visualization JSON input \[Solved\]](https://discuss.elastic.co/t/filter-in-kibana-visualization-json-input-solved/95482)

<div class="topic-metadata">

**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 4:46pm UTC](https://discuss.elastic.co/t/filter-in-kibana-visualization-json-input-solved/95482 "2017-08-02T16:46:58Z")

</div>

Hello, I'am presenting my data in a table in Kibana in this way : I want to show just those which the field Durée \> 5 s I've tried this JSON but it doesn't work { "script" : "doc\['Durée'\].value \> 5.00" } Can you …

---

## [maxClauseCount error on Multi Match after Upgrade to 7.10.1](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160)

<div class="topic-metadata">

**Author:** [@dwhite44](https://discuss.elastic.co/u/dwhite44)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:39pm UTC](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160 "2021-03-04T21:39:20Z")

</div>

We are in the process of upgrading from Elasticsearch 6.5.4 to 7.10.1. We have some searches that worked fine against 6.5.4 but are getting "failed to create query: maxClauseCount is set to 1024" errors against 7.10.1. H…

---

## [Delete a Kibana index from CLI](https://discuss.elastic.co/t/delete-a-kibana-index-from-cli/169280)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 8:40pm UTC](https://discuss.elastic.co/t/delete-a-kibana-index-from-cli/169280 "2019-02-20T20:40:21Z")

</div>

Hi there, I've tried to create an Index Pattern in Kibana to match an Elasticsearch index, but after trying no data displays even through Elasticsearch reports 32k+ documents. When trying to view the index in Kibana, I …

---

## [Add an array using Mutate's add\_field](https://discuss.elastic.co/t/add-an-array-using-mutates-add-field/200946)

<div class="topic-metadata">

**Author:** [@buch11](https://discuss.elastic.co/u/buch11)\
**Replies:** 4\
**Last updated:** [October 1, 2019, 1:06am UTC](https://discuss.elastic.co/t/add-an-array-using-mutates-add-field/200946 "2019-10-01T01:06:25Z")

</div>

Hi Guys, I have a logstash pipeline where I am receiving a JSON file as HTTP input and forwarding it to output plugin. I want to introduce below structure to input JSON : "parentField": { "field0": "value0", "arrayN…

---

## [Search for documents matching all terms in a nested array](https://discuss.elastic.co/t/search-for-documents-matching-all-terms-in-a-nested-array/118577)

<div class="topic-metadata">

**Author:** [@mayur822](https://discuss.elastic.co/u/mayur822)\
**Replies:** 2\
**Last updated:** [February 6, 2018, 10:28am UTC](https://discuss.elastic.co/t/search-for-documents-matching-all-terms-in-a-nested-array/118577 "2018-02-06T10:28:40Z")

</div>

I am learning to use Elasticsearch as a basic recommender engine. My elasticsearch document contains records with nested entities as follows PUT recs/user/1 { "name" : "Brad Pitt", "movies\_liked": \[ { "nam…

---

## [JSON Input vs. Scripted Fields](https://discuss.elastic.co/t/json-input-vs-scripted-fields/218788)

<div class="topic-metadata">

**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\
**Replies:** 1\
**Last updated:** [February 11, 2020, 3:48pm UTC](https://discuss.elastic.co/t/json-input-vs-scripted-fields/218788 "2020-02-11T15:48:52Z")

</div>

Hello, I have a requirement to get the average of the sum of two fields in all document and visualize it, something like this: avg("field 1" + "field 2") I have found two ways to do this and curious what the differenc…

---

## [Extract string from message field kibana](https://discuss.elastic.co/t/extract-string-from-message-field-kibana/116549)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 4\
**Last updated:** [January 24, 2018, 5:20pm UTC](https://discuss.elastic.co/t/extract-string-from-message-field-kibana/116549 "2018-01-24T17:20:13Z")

</div>

I am using kibana-5.6.3 I have messages populating in kibana. I have the message in kibana as bleow 1330207 Backup host-44 Done \*\*0\*\* 2 fit-dev host-44 01/11/2018 18:00:02 01/11/2018 18:03:28 000:03:26 I want to extr…

---

## [\[ES 5.0\] PUT/POST are forbidden if enable CORS](https://discuss.elastic.co/t/es-5-0-put-post-are-forbidden-if-enable-cors/67996)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 4\
**Last updated:** [December 6, 2016, 1:36am UTC](https://discuss.elastic.co/t/es-5-0-put-post-are-forbidden-if-enable-cors/67996 "2016-12-06T01:36:06Z")

</div>

I set up an ES 5.0 cluster. To allow HEAD to access ES cluster, I enabled the CORS with following configs: http.cors.enabled: true http.cors.allow-origin: /https?:\\/\\/.+?(:\[0-9\]+)?/ After cors is enabled, all GET met…

---

## [License is not available](https://discuss.elastic.co/t/license-is-not-available/304149)

<div class="topic-metadata">

**Author:** [@Onsrm](https://discuss.elastic.co/u/Onsrm)\
**Replies:** 5\
**Last updated:** [May 8, 2022, 11:46pm UTC](https://discuss.elastic.co/t/license-is-not-available/304149 "2022-05-08T23:46:26Z")

</div>

hello , when I use Elasticsearch with kibana they work together but when I add xpack.security.enabled: true in Elasticsearch.yml they stop working and I get this message : license is not available

---

## [Logstash on Windows requires drive letter in the path variable of the file input plugin](https://discuss.elastic.co/t/logstash-on-windows-requires-drive-letter-in-the-path-variable-of-the-file-input-plugin/28969)

<div class="topic-metadata">

**Author:** [@jamo3](https://discuss.elastic.co/u/jamo3)\
**Replies:** 3\
**Last updated:** [September 10, 2015, 1:44pm UTC](https://discuss.elastic.co/t/logstash-on-windows-requires-drive-letter-in-the-path-variable-of-the-file-input-plugin/28969 "2015-09-10T13:44:26Z")

</div>

If you leave of the drive letter logstash won't process files on windows, i.e: input { file { type =\> "cfcidnelog" path =\> \["c:/Temp/logstash-cidne/REDNE.log"\] start\_position =\> "beginning" …

---

## [Filebeat Configuration for Apache Logs](https://discuss.elastic.co/t/filebeat-configuration-for-apache-logs/81085)

<div class="topic-metadata">

**Author:** [@vortex](https://discuss.elastic.co/u/vortex)\
**Replies:** 2\
**Last updated:** [April 4, 2017, 11:53am UTC](https://discuss.elastic.co/t/filebeat-configuration-for-apache-logs/81085 "2017-04-04T11:53:33Z")

</div>

Hi all, I'am trying to configure filebeat to send apache logs to ELK ,but something goes wrong. My set up is the following : Server : Centos7 Elasticsearch : 2.4.4 Logstash : 2.3.4 Kibana : 4.5.4 …

---

## [Single huge index v/s daily or weekly index, which is better?](https://discuss.elastic.co/t/single-huge-index-v-s-daily-or-weekly-index-which-is-better/73366)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 5\
**Last updated:** [January 31, 2017, 7:15pm UTC](https://discuss.elastic.co/t/single-huge-index-v-s-daily-or-weekly-index-which-is-better/73366 "2017-01-31T19:15:34Z")

</div>

Hi There, We have an indexing which is growing around 500 TB per week. Currently, we have the size of 2 TB and have the 3 replicas, which is taking around 20-30 mins for indexing a 750 MB document. And lot of files …

---

## [Extract subfields in JSON Field](https://discuss.elastic.co/t/extract-subfields-in-json-field/133111)

<div class="topic-metadata">

**Author:** [@Alessio\_Frabotta](https://discuss.elastic.co/u/Alessio_Frabotta)\
**Replies:** 7\
**Last updated:** [May 25, 2018, 8:45am UTC](https://discuss.elastic.co/t/extract-subfields-in-json-field/133111 "2018-05-25T08:45:46Z")

</div>

I have this JSON log message (from logstash-logback-encoder): { "@version" =\> "1", "@timestamp" =\> 2018-05-24T09:49:43.336Z, "message" =\> "{ "@timestamp":"2018-05-24T11:49:40.521+02:00", "thr…

---

## [Using the LENGTH string function to limit search](https://discuss.elastic.co/t/using-the-length-string-function-to-limit-search/214382)

<div class="topic-metadata">

**Author:** [@TinkoBinko](https://discuss.elastic.co/u/TinkoBinko)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 12:32pm UTC](https://discuss.elastic.co/t/using-the-length-string-function-to-limit-search/214382 "2020-01-10T12:32:40Z")

</div>

Hello everyone, I use the 'query\_string' command to count members, where I want to limit the results to only those documents where the length in the 'membIdentificNumb' field is exactly 7 characters. I entered the foll…

---

## [Exclude searching on specific fields](https://discuss.elastic.co/t/exclude-searching-on-specific-fields/51434)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 3\
**Last updated:** [June 1, 2016, 1:53pm UTC](https://discuss.elastic.co/t/exclude-searching-on-specific-fields/51434 "2016-06-01T13:53:23Z")

</div>

Hello, Is there any way to NOT search on a specific field while performing a full text based search using the Query DSL / Query String Query syntax, following is the index i am creating. { "e3c95a54-2971-47ec-b177-1…

---

## [How to Send the alerts to opsgenie from kibana](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631)

<div class="topic-metadata">

**Author:** [@Bala\_Kumaar\_1653](https://discuss.elastic.co/u/Bala_Kumaar_1653)\
**Replies:** 7\
**Last updated:** [September 17, 2020, 11:44am UTC](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631 "2020-09-17T11:44:52Z")

</div>

Hi all, Can anyone help me out on sending the alerts to opsgenie from kibana. In actions i selected Webhook and pasted the Opsgenie webhook url, but still its not working..!!

---

## [Date filter not working for AM/PM](https://discuss.elastic.co/t/date-filter-not-working-for-am-pm/89253)

<div class="topic-metadata">

**Author:** [@wlin](https://discuss.elastic.co/u/wlin)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 6:30pm UTC](https://discuss.elastic.co/t/date-filter-not-working-for-am-pm/89253 "2017-06-13T18:30:11Z")

</div>

I have some log file for example this: ... {"timestamp":"Jun 12, 2017 6:19:31 PM","ip":"0:0:0:0:0:0:0:1"} ... As I want to use the timestamp in the log file, I use a data filter to match it input { beats { po…

---

## [Logstash is creating a directory literally called ${sys:ls.logs}](https://discuss.elastic.co/t/logstash-is-creating-a-directory-literally-called-sys-ls-logs/100126)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 6\
**Last updated:** [November 1, 2017, 7:26pm UTC](https://discuss.elastic.co/t/logstash-is-creating-a-directory-literally-called-sys-ls-logs/100126 "2017-11-01T19:26:15Z")

</div>

When I run logstash 5.5.1 I am used to getting an error ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. Followed by the message Sending Logst…

---

## [How to index PDF file data and search data from attachment PDF file](https://discuss.elastic.co/t/how-to-index-pdf-file-data-and-search-data-from-attachment-pdf-file/265565)

<div class="topic-metadata">

**Author:** [@genero](https://discuss.elastic.co/u/genero)\
**Replies:** 6\
**Last updated:** [March 1, 2021, 10:32am UTC](https://discuss.elastic.co/t/how-to-index-pdf-file-data-and-search-data-from-attachment-pdf-file/265565 "2021-03-01T10:32:29Z")

</div>

Hello, I want to index PDF file data in Elastic App Search and search data from PDF file. Please suggested is it possible to handle attachment PDF in Elastic App search? Regards

---

## [Path does not chain with any of the trust anchors](https://discuss.elastic.co/t/path-does-not-chain-with-any-of-the-trust-anchors/322688)

<div class="topic-metadata">

**Author:** [@chris3](https://discuss.elastic.co/u/chris3)\
**Replies:** 3\
**Last updated:** [January 15, 2023, 11:37pm UTC](https://discuss.elastic.co/t/path-does-not-chain-with-any-of-the-trust-anchors/322688 "2023-01-15T23:37:00Z")

</div>

Hi All, Appreciate if you could help. I have tried to follow the elastic documentation here to setup internode communication using certificates: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-…

---

## [Best way to search a field for a large set of values](https://discuss.elastic.co/t/best-way-to-search-a-field-for-a-large-set-of-values/76518)

<div class="topic-metadata">

**Author:** [@brandont](https://discuss.elastic.co/u/brandont)\
**Replies:** 5\
**Last updated:** [March 13, 2017, 5:05pm UTC](https://discuss.elastic.co/t/best-way-to-search-a-field-for-a-large-set-of-values/76518 "2017-03-13T17:05:15Z")

</div>

I'm creating a visualization in Kibana and want to filter a url.keyword field so that only a subset of about 50 urls are included in the search. In addition, I want to filter everything on a second field field2.keyword:t…

---

## [Error response from daemon: manifest for docker.elastic.co/elasticsearch/elasticsearch-platinum:6.2.2 not found](https://discuss.elastic.co/t/error-response-from-daemon-manifest-for-docker-elastic-co-elasticsearch-elasticsearch-platinum-6-2-2-not-found/119900)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [February 22, 2018, 6:55pm UTC](https://discuss.elastic.co/t/error-response-from-daemon-manifest-for-docker-elastic-co-elasticsearch-elasticsearch-platinum-6-2-2-not-found/119900 "2018-02-22T18:55:43Z")

</div>

Per: 6.2.2 Release Notes | Elasticsearch Reference \[6.2\] | Elastic Yet; # docker pull docker.elastic.co/elasticsearch/elasticsearch-platinum:6.2.2 Error response from daemon: manifest for docker.elastic.co/elasticsearc…

---

## [Service elasticsearch start ができません。以下詳細あり。](https://discuss.elastic.co/t/service-elasticsearch-start/1910)

<div class="topic-metadata">

**Author:** [@hase\_gawa](https://discuss.elastic.co/u/hase_gawa)\
**Replies:** 4\
**Last updated:** [June 5, 2015, 9:35am UTC](https://discuss.elastic.co/t/service-elasticsearch-start/1910 "2015-06-05T09:35:21Z")

</div>

elasticsearchの環境構築でつまづいております。 service elasticsearch start をしたいのですが、以下のエラーが表示されます。 Starting Elasticsearch... Waiting for Elasticsearch.................. WARNING: Elasticsearch may have failed to start. 尚、java や elasti…

---

## [How to get the counts of log messages based on the error type in Elasticsearch visualization](https://discuss.elastic.co/t/how-to-get-the-counts-of-log-messages-based-on-the-error-type-in-elasticsearch-visualization/171213)

<div class="topic-metadata">

**Author:** [@vampire](https://discuss.elastic.co/u/vampire)\
**Replies:** 5\
**Last updated:** [March 9, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-to-get-the-counts-of-log-messages-based-on-the-error-type-in-elasticsearch-visualization/171213 "2019-03-09T07:58:47Z")

</div>

I have some sample data on the Elasticsearch, which looks like the following: I am using the data table in the Visualize section to get the counts for each error type, for example: it should output Error: Update fai…

---

## [Multiple data path for elasticsearch data node](https://discuss.elastic.co/t/multiple-data-path-for-elasticsearch-data-node/82373)

<div class="topic-metadata">

**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\
**Replies:** 3\
**Last updated:** [April 14, 2017, 7:22am UTC](https://discuss.elastic.co/t/multiple-data-path-for-elasticsearch-data-node/82373 "2017-04-14T07:22:28Z")

</div>

Is it possible to have multiple data paths for elasticsearch data node? e.g. in elasticsearch.yml path.data: \[/path1/for/data, /path2/for/data\] So that it first fills up path1 and when path1 is full to its capacity …

---

## [Count and unique count](https://discuss.elastic.co/t/count-and-unique-count/163076)

<div class="topic-metadata">

**Author:** [@Apple23](https://discuss.elastic.co/u/Apple23)\
**Replies:** 4\
**Last updated:** [January 22, 2019, 1:52pm UTC](https://discuss.elastic.co/t/count-and-unique-count/163076 "2019-01-22T13:52:50Z")

</div>

i want a metric visualisation that finds the difference of count and unique count that is to get the count of duplicates in an index

---

## [This Beat requires the default distribution of Elasticsearch](https://discuss.elastic.co/t/this-beat-requires-the-default-distribution-of-elasticsearch/182490)

<div class="topic-metadata">

**Author:** [@Maurya\_M](https://discuss.elastic.co/u/Maurya_M)\
**Replies:** 6\
**Last updated:** [May 27, 2019, 5:50am UTC](https://discuss.elastic.co/t/this-beat-requires-the-default-distribution-of-elasticsearch/182490 "2019-05-27T05:50:41Z")

</div>

Using Filebeat image : docker.elastic.co/beats/filebeat:7.0.0 Elastic Search image : k8s.gcr.io/elasticsearch:v6.2.5 EDIT: Now have changed to docker.elastic.co/elasticsearch/elasticsearch-oss:6.4.0, but in the fileb…

---

## [ES cluster in Docker containers : AlreadyClosedException Underlying file changed by an external force](https://discuss.elastic.co/t/es-cluster-in-docker-containers-alreadyclosedexception-underlying-file-changed-by-an-external-force/48874)

<div class="topic-metadata">

**Author:** [@twnone](https://discuss.elastic.co/u/twnone)\
**Replies:** 8\
**Last updated:** [March 2, 2017, 2:40pm UTC](https://discuss.elastic.co/t/es-cluster-in-docker-containers-alreadyclosedexception-underlying-file-changed-by-an-external-force/48874 "2017-03-02T14:40:52Z")

</div>

Hello everyone, I have this exception when trying to update some documents in one of my indexes. I will post some of my elasticsearch cluster configuration (es version, index state) in next post. \[2016-04-28 08:51:57…

---

## [SSL "wrong version number"](https://discuss.elastic.co/t/ssl-wrong-version-number/361352)

<div class="topic-metadata">

**Author:** [@ebates](https://discuss.elastic.co/u/ebates)\
**Replies:** 4\
**Last updated:** [June 13, 2024, 12:30pm UTC](https://discuss.elastic.co/t/ssl-wrong-version-number/361352 "2024-06-13T12:30:52Z")

</div>

I had a working elasticsearch 7.x with SSL configured. I upgraded to elasticsearch 8.14 and now whenever I attempt to connect via curl I get an error message from the OpenSSL lib: # curl -vvv --cacert /etc/elasticsearc…

---

## [Unable to install elasticsearch with apt](https://discuss.elastic.co/t/unable-to-install-elasticsearch-with-apt/40870)

<div class="topic-metadata">

**Author:** [@nralbers](https://discuss.elastic.co/u/nralbers)\
**Replies:** 5\
**Last updated:** [February 3, 2016, 10:31pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-with-apt/40870 "2016-02-03T22:31:28Z")

</div>

I've followed the instructions on https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-repositories.html but when I run apt-get update followed by apt-get install elasticsearch, I get a 'Unable to locate…

---

## ["You do not have permission to access the requested page" error when accessing Kibana from Enterprise Search](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-the-requested-page-error-when-accessing-kibana-from-enterprise-search/280470)

<div class="topic-metadata">

**Author:** [@Rich\_Kuzsma](https://discuss.elastic.co/u/Rich_Kuzsma)\
**Replies:** 0\
**Last updated:** [August 4, 2021, 7:27pm UTC](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-the-requested-page-error-when-accessing-kibana-from-enterprise-search/280470 "2021-08-04T19:27:50Z")

</div>

I'm asking-and-answering this question in case others run into the same issue. I'm running Enterprise Search, Elasticsearch, and Kibana 7.14.0. I created an Elasticsearch native user using the Elasticsearch API (I did n…

---

## [Root mapping definition has unsupported parameters when creating custom index](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-creating-custom-index/240690)

<div class="topic-metadata">

**Author:** [@vinci](https://discuss.elastic.co/u/vinci)\
**Replies:** 1\
**Last updated:** [July 10, 2020, 12:09pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-creating-custom-index/240690 "2020-07-10T12:09:02Z")

</div>

Hello, I'm following an elasticsearch course on linux academy where the instruction creates a custom index in the dev tools of kibana. He's using version 6, but I'm using version 7, so I'm not sure if the problem is re…

---

## [Using The Advanced JSON Input For Filtering Data and Then Using The Intermediate Result As Part Of Calculations](https://discuss.elastic.co/t/using-the-advanced-json-input-for-filtering-data-and-then-using-the-intermediate-result-as-part-of-calculations/237556)

<div class="topic-metadata">

**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\
**Replies:** 7\
**Last updated:** [June 24, 2020, 3:26pm UTC](https://discuss.elastic.co/t/using-the-advanced-json-input-for-filtering-data-and-then-using-the-intermediate-result-as-part-of-calculations/237556 "2020-06-24T15:26:22Z")

</div>

Hi, I made an earlier post on filtering the data within +/-300. I want to Do an on-the-spot filtering of values that are within +/-300mm per data bucket. Log this as a count per data bucket. Do a percentage calcula…

---

## [Elastic search cluster with 3 nodes](https://discuss.elastic.co/t/elastic-search-cluster-with-3-nodes/144076)

<div class="topic-metadata">

**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\
**Replies:** 8\
**Last updated:** [August 13, 2018, 8:03am UTC](https://discuss.elastic.co/t/elastic-search-cluster-with-3-nodes/144076 "2018-08-13T08:03:05Z")

</div>

Hi, 1.How to configure elasticsearch cluster with 3 nodes 2.How many master nodes i need to configure if i had only 3 nodes to avoid split brain. 3.If had 3 nodes, which node I need to configure in logstash

---

## [Master not discovery exception](https://discuss.elastic.co/t/master-not-discovery-exception/188344)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 7\
**Last updated:** [July 10, 2019, 9:45am UTC](https://discuss.elastic.co/t/master-not-discovery-exception/188344 "2019-07-10T09:45:18Z")

</div>

Using elastic search 7.1.0 My eck crd configuration : apiVersion: elasticsearch.k8s.elastic.co/v1alpha1 kind: Elasticsearch metadata: labels: controller-tools.k8s.io: "1.0" name: moss-es-cluster spec: version: "…

---

## [Kibana behind Nginx - Discover : Not Found](https://discuss.elastic.co/t/kibana-behind-nginx-discover-not-found/60899)

<div class="topic-metadata">

**Author:** [@m0tek](https://discuss.elastic.co/u/m0tek)\
**Replies:** 8\
**Last updated:** [September 23, 2016, 2:56am UTC](https://discuss.elastic.co/t/kibana-behind-nginx-discover-not-found/60899 "2016-09-23T02:56:44Z")

</div>

Hi guys , Have a Kibana behind Nginx , Keep receiving this kind of messages from time to time - trying to understand how to debug it :S Most of the times i receive data , but sometimes i receive the following error (us…

---

## [Is it possible and how to create trend line in kibana](https://discuss.elastic.co/t/is-it-possible-and-how-to-create-trend-line-in-kibana/57288)

<div class="topic-metadata">

**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\
**Replies:** 4\
**Last updated:** [August 4, 2016, 11:28pm UTC](https://discuss.elastic.co/t/is-it-possible-and-how-to-create-trend-line-in-kibana/57288 "2016-08-04T23:28:59Z")

</div>

I have few bar graphs where the time is on the X - count on the Y - would like to have trend line for the whole graph; Is that possible? Could not find it in kibana, looked at options under graph too. Thanks in advance …

---

## [Rebalancing a cluster](https://discuss.elastic.co/t/rebalancing-a-cluster/8821)

<div class="topic-metadata">

**Author:** [@James\_Bardin](https://discuss.elastic.co/u/James_Bardin)\
**Replies:** 5\
**Last updated:** [January 16, 2013, 9:43pm UTC](https://discuss.elastic.co/t/rebalancing-a-cluster/8821 "2013-01-16T21:43:10Z")

</div>

I have a cluster with one index which is much more heavily used than the rest. My problem is keeping the busy index distributed across all nodes. For example, do to recent changes in the the cluster, I now have 1 nod…

---

## [Timelion - documentation](https://discuss.elastic.co/t/timelion-documentation/47722)

<div class="topic-metadata">

**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\
**Replies:** 5\
**Last updated:** [March 8, 2017, 2:44pm UTC](https://discuss.elastic.co/t/timelion-documentation/47722 "2017-03-08T14:44:17Z")

</div>

Hello, I can't find any documentation for timelion besides https://www.elastic.co/fr/blog/timelion-timeline Is there any? thank you!

---

## [How to match multiple should clauses?](https://discuss.elastic.co/t/how-to-match-multiple-should-clauses/204066)

<div class="topic-metadata">

**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\
**Replies:** 5\
**Last updated:** [October 17, 2019, 2:50pm UTC](https://discuss.elastic.co/t/how-to-match-multiple-should-clauses/204066 "2019-10-17T14:50:21Z")

</div>

Hello, I'm looking for a way of matching multiple should cases. To explain this better, lets use this example: "query": { "bool": { "must": \[ ... \] "should": \[ { "terms" …

---

## [Overall average line in a chart](https://discuss.elastic.co/t/overall-average-line-in-a-chart/63304)

<div class="topic-metadata">

**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\
**Replies:** 5\
**Last updated:** [October 18, 2016, 7:35pm UTC](https://discuss.elastic.co/t/overall-average-line-in-a-chart/63304 "2016-10-18T19:35:58Z")

</div>

Hi, I am creating a chart in Timelion to show a bar chart with the amount of docs (requests) per day. In this chart I would like to add a horizontal line with the average of docs per day over all buckets. I can determine…

[Previous page](https://discuss.elastic.co/top.md?page=328&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=330&per_page=50&period=all)
