# Top

**URL:** https://discuss.elastic.co/top.md?page=331&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 332

---

## [Visio Stencils for Elastic](https://discuss.elastic.co/t/visio-stencils-for-elastic/184565)

<div class="topic-metadata">

**Author:** [@rahulkumar1](https://discuss.elastic.co/u/rahulkumar1)\
**Replies:** 3\
**Last updated:** [June 6, 2019, 1:19pm UTC](https://discuss.elastic.co/t/visio-stencils-for-elastic/184565 "2019-06-06T13:19:15Z")

</div>

Where can I find Visio Stencils for Elastic -- for all components like Logstash, Kibana, Master Nodes, Data Nodes, etc..

---

## [java.security.cert.CertificateException: No subject alternative names present while connecting to domain names](https://discuss.elastic.co/t/java-security-cert-certificateexception-no-subject-alternative-names-present-while-connecting-to-domain-names/114804)

<div class="topic-metadata">

**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Replies:** 4\
**Last updated:** [January 12, 2018, 10:25am UTC](https://discuss.elastic.co/t/java-security-cert-certificateexception-no-subject-alternative-names-present-while-connecting-to-domain-names/114804 "2018-01-12T10:25:14Z")

</div>

I test the installation of elasticsearch + xpack on one single machine. I am having 3 nodes - es1.local, es2.local, es3.local, each node with different ports. I use discovery zen unicast hosts in form es1.local:PORT1, es…

---

## [Import json through python](https://discuss.elastic.co/t/import-json-through-python/113766)

<div class="topic-metadata">

**Author:** [@ACJ](https://discuss.elastic.co/u/ACJ)\
**Replies:** 6\
**Last updated:** [January 2, 2018, 2:58pm UTC](https://discuss.elastic.co/t/import-json-through-python/113766 "2018-01-02T14:58:09Z")

</div>

Hello, I am trying to import a file through this code but I am getting the following error. Code: \[26234134\_931691430322178\_2132873039\_n\]! Error: \[26553240\_931691493655505\_697954895\_n\] I think it's due to my movies…

---

## [Can Apache Nutch be used with Elasticsearch to index web crawl content?](https://discuss.elastic.co/t/can-apache-nutch-be-used-with-elasticsearch-to-index-web-crawl-content/93)

<div class="topic-metadata">

**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Replies:** 1\
**Last updated:** [July 15, 2015, 9:42am UTC](https://discuss.elastic.co/t/can-apache-nutch-be-used-with-elasticsearch-to-index-web-crawl-content/93 "2015-07-15T09:42:12Z")

</div>

In general, you are free to use any web crawl product to fetch URL content. Apache Nutch is certainly one of the more popular open source web crawl products in the market. In the case of Apache Nutch (starting in Nutch…

---

## [Elasticsearch malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/206050)

<div class="topic-metadata">

**Author:** [@111230](https://discuss.elastic.co/u/111230)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/206050 "2019-11-05T07:09:36Z")

</div>

My query looks like this { "query": { "bool": { "must": \[ { "has\_parent": { "parent\_type": "doc", "query": { "bool": { "must": \[ { "terms": { "id": \[ 713 \]}}, { "range": { "created": { "lte": "now/d" …

---

## [Simple arithmetic in a Kibana visualization](https://discuss.elastic.co/t/simple-arithmetic-in-a-kibana-visualization/86000)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 7\
**Last updated:** [May 17, 2017, 6:21pm UTC](https://discuss.elastic.co/t/simple-arithmetic-in-a-kibana-visualization/86000 "2017-05-17T18:21:12Z")

</div>

I'm using Kibana's "Metric" visualization to get a count of all my docs (literally the simplest thing). But I want to multiple that value by 100 so the value the visualization displays is the count \* 100. I tried to us…

---

## [Starting elasticsearch: which: no java in (/sbin:/usr/sbin:/bin:/usr/bin) Could not find any executable java binary. Please install java in your PATH or set JAVA\_HOME](https://discuss.elastic.co/t/starting-elasticsearch-which-no-java-in-sbin-usr-sbin-bin-usr-bin-could-not-find-any-executable-java-binary-please-install-java-in-your-path-or-set-java-home/96546)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 8:16am UTC](https://discuss.elastic.co/t/starting-elasticsearch-which-no-java-in-sbin-usr-sbin-bin-usr-bin-could-not-find-any-executable-java-binary-please-install-java-in-your-path-or-set-java-home/96546 "2017-08-10T08:16:45Z")

</div>

Hi, I am installing elasticsearch 5.5.1 on Linux 64 bit machine without root access. After installation, When I run following command to start service : sudo -i service elasticsearch start I get this error message: S…

---

## [No data sent to configured output](https://discuss.elastic.co/t/no-data-sent-to-configured-output/113338)

<div class="topic-metadata">

**Author:** [@code-chris](https://discuss.elastic.co/u/code-chris)\
**Replies:** 5\
**Last updated:** [December 29, 2017, 11:06am UTC](https://discuss.elastic.co/t/no-data-sent-to-configured-output/113338 "2017-12-29T11:06:49Z")

</div>

Hi, I created a Metricbeat instance with Docker on Linux, but Metricbeat does not emit any error messages, metric results or something else. Only the internal metric-message "INFO Non-zero metrics in the last 30s" is sh…

---

## [Network.host vs http.host in the elasticsearch.yml](https://discuss.elastic.co/t/network-host-vs-http-host-in-the-elasticsearch-yml/156242)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 6\
**Last updated:** [November 12, 2018, 11:20am UTC](https://discuss.elastic.co/t/network-host-vs-http-host-in-the-elasticsearch-yml/156242 "2018-11-12T11:20:48Z")

</div>

hello all, when I configured (http.host: 192.168.170.146) in the elasticsearch.yml file, and comment the network.host part, elasticsearch can be started with no problem. And, I can see all the logs that filebeat ships t…

---

## [Web crawler for elastic leatest versions](https://discuss.elastic.co/t/web-crawler-for-elastic-leatest-versions/112260)

<div class="topic-metadata">

**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\
**Replies:** 3\
**Last updated:** [December 20, 2017, 3:47pm UTC](https://discuss.elastic.co/t/web-crawler-for-elastic-leatest-versions/112260 "2017-12-20T15:47:24Z")

</div>

Hi guys, i have been looking around for a solution to replace the now dead ,google on premise solution. i really want to use a solution based on ES. though i can’t seem to find a crawler for the job. i saw a few proje…

---

## [Flatten nested json array](https://discuss.elastic.co/t/flatten-nested-json-array/196192)

<div class="topic-metadata">

**Author:** [@rokitpower](https://discuss.elastic.co/u/rokitpower)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 9:34pm UTC](https://discuss.elastic.co/t/flatten-nested-json-array/196192 "2019-08-21T21:34:07Z")

</div>

I'm trying to flatten this json object with nested arrays into individual objects at the top level. It's a little weird because the array elements have different elements { "MyData": { "identifier" : "ab…

---

## [Performance issues in large bool filter query](https://discuss.elastic.co/t/performance-issues-in-large-bool-filter-query/153473)

<div class="topic-metadata">

**Author:** [@luise](https://discuss.elastic.co/u/luise)\
**Replies:** 1\
**Last updated:** [October 23, 2018, 8:29am UTC](https://discuss.elastic.co/t/performance-issues-in-large-bool-filter-query/153473 "2018-10-23T08:29:47Z")

</div>

I am trying to obtain a list of up to two million results through the following scrolled query, of each hit I only need a couple of fields: GET alerts-\*/\_search { "query": { "bool": { "filter": \[ { …

---

## [Logstash won't read 1 line input file (and might miss last line of data in any file)](https://discuss.elastic.co/t/logstash-wont-read-1-line-input-file-and-might-miss-last-line-of-data-in-any-file/51855)

<div class="topic-metadata">

**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\
**Replies:** 4\
**Last updated:** [June 14, 2016, 6:27am UTC](https://discuss.elastic.co/t/logstash-wont-read-1-line-input-file-and-might-miss-last-line-of-data-in-any-file/51855 "2016-06-14T06:27:15Z")

</div>

I spent a lot of time on this issue until I found the problem: Like many people who start using logstash, I have created 1 demo input file with 1 line of data. When I used stdin() for the same input line, everything work…

---

## [Heap issue - OutofMemory](https://discuss.elastic.co/t/heap-issue-outofmemory/291432)

<div class="topic-metadata">

**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\
**Replies:** 7\
**Last updated:** [January 10, 2022, 12:23pm UTC](https://discuss.elastic.co/t/heap-issue-outofmemory/291432 "2022-01-10T12:23:12Z")

</div>

With the latest version of Elasticsearch, the HEAP is automatically defined by Elasticsearch... So I upgraded my elk system from 7.7.0 to 7.15.2 with rpm I tried to leave jvm.options config file as a default (i mean, I…

---

## [Using elasticsearch-spark to write data to elasticsearch throws exception](https://discuss.elastic.co/t/using-elasticsearch-spark-to-write-data-to-elasticsearch-throws-exception/113600)

<div class="topic-metadata">

**Author:** [@hanbj](https://discuss.elastic.co/u/hanbj)\
**Replies:** 0\
**Last updated:** [December 29, 2017, 3:22pm UTC](https://discuss.elastic.co/t/using-elasticsearch-spark-to-write-data-to-elasticsearch-throws-exception/113600 "2017-12-29T15:22:18Z")

</div>

Hi, all. Using elasticsearch-spark to write data to elasticsearch throws exception: There are 8 nodes in my cluster. Through monitoring, we see that the pressure of the cluster is not large and the machine load is goo…

---

## [Mapping date field as multifiled to provide date query and full text search](https://discuss.elastic.co/t/mapping-date-field-as-multifiled-to-provide-date-query-and-full-text-search/80691)

<div class="topic-metadata">

**Author:** [@fachhoch](https://discuss.elastic.co/u/fachhoch)\
**Replies:** 0\
**Last updated:** [March 30, 2017, 1:53pm UTC](https://discuss.elastic.co/t/mapping-date-field-as-multifiled-to-provide-date-query-and-full-text-search/80691 "2017-03-30T13:53:34Z")

</div>

How to represent date as multifiled to keep actual date and do full text search. My mapping "createdOn":{ "type":"date", "fields":{ "str": { …

---

## [Filebeats for syslog](https://discuss.elastic.co/t/filebeats-for-syslog/106421)

<div class="topic-metadata">

**Author:** [@Cen\_giz](https://discuss.elastic.co/u/Cen_giz)\
**Replies:** 5\
**Last updated:** [November 8, 2017, 11:11pm UTC](https://discuss.elastic.co/t/filebeats-for-syslog/106421 "2017-11-08T23:11:30Z")

</div>

Hi All, I am looking into using FileBeats with Logstash. Isntalling Filebeats into each client server is not scalable if the number goes high and at one time filebeat agents need version upgrades. Thus, I am looking in…

---

## [Поиск по нескольким полям с разными типами](https://discuss.elastic.co/t/topic/84695)

<div class="topic-metadata">

**Author:** [@symbios-zi](https://discuss.elastic.co/u/symbios-zi)\
**Replies:** 8\
**Last updated:** [May 7, 2017, 6:26pm UTC](https://discuss.elastic.co/t/topic/84695 "2017-05-07T18:26:49Z")

</div>

Здравствуйте. Как правильно организовать поиск по разным полям? У меня есть индекс orders - order\_number (long) - domain\_id (long) - first\_name (string) - last\_name (string) 1.К примеру если поисковый…

---

## [Logstash endless loop with starting and stopping](https://discuss.elastic.co/t/logstash-endless-loop-with-starting-and-stopping/69913)

<div class="topic-metadata">

**Author:** [@JoeLi](https://discuss.elastic.co/u/JoeLi)\
**Replies:** 1\
**Last updated:** [December 23, 2016, 2:12pm UTC](https://discuss.elastic.co/t/logstash-endless-loop-with-starting-and-stopping/69913 "2016-12-23T14:12:57Z")

</div>

Logstash 5.x keeps starting and stopping.... Here is my conf: input { tcp { port =\> 4560 codec =\> json\_lines } beats { port =\> 5044 codec =\> "json" } } output { if \[type\] …

---

## [No shard avaliable for \[get \[.kibana\]\[\_doc\]\[space:default\]\]: routing \[null\]](https://discuss.elastic.co/t/no-shard-avaliable-for-get-kibana-doc-space-default-routing-null/182874)

<div class="topic-metadata">

**Author:** [@Hengheng1](https://discuss.elastic.co/u/Hengheng1)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 6:34am UTC](https://discuss.elastic.co/t/no-shard-avaliable-for-get-kibana-doc-space-default-routing-null/182874 "2019-06-05T06:34:55Z")

</div>

---

## [Kibanaで前回の値との差分表示](https://discuss.elastic.co/t/kibana/69230)

<div class="topic-metadata">

**Author:** [@kanekotky](https://discuss.elastic.co/u/kanekotky)\
**Replies:** 6\
**Last updated:** [December 20, 2016, 12:58pm UTC](https://discuss.elastic.co/t/kibana/69230 "2016-12-20T12:58:55Z")

</div>

単調増加する値のデルタ値（前回の値との差分）をkibanaでグラフ表示したいのですが、可能でしょうか。 logstash等でそのような別フィールドを作って計算して入れておくしかないでしょうか。 kibanaのバージョンは、4.2.6 or 5.1.1で検討しています。よろしく御願いいたします。

---

## [Elastic-Agent - Non-zero metrics in the last 30s](https://discuss.elastic.co/t/elastic-agent-non-zero-metrics-in-the-last-30s/302052)

<div class="topic-metadata">

**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 11:47am UTC](https://discuss.elastic.co/t/elastic-agent-non-zero-metrics-in-the-last-30s/302052 "2022-10-13T11:47:24Z")

</div>

Running 8.1.2, is there a way to disable the metrics logging of this within the Elastic-Agent ? This without disabling "Collect Agent Logs"... I want the logs but not the metrics logging. You normally could do this …

---

## [Kibana JavaScript heap out of memory](https://discuss.elastic.co/t/kibana-javascript-heap-out-of-memory/228365)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 6\
**Last updated:** [May 6, 2020, 6:48am UTC](https://discuss.elastic.co/t/kibana-javascript-heap-out-of-memory/228365 "2020-05-06T06:48:47Z")

</div>

Hi, While generating report in kibana am getting below error. How can i increase the heap memory for kibana. log \[13:01:39.659\] \[info\]\[queue-job\]\[reporting\] Successfully queued job: k92rw1ad0xuh4e318d6raay8 log \[1…

---

## [Failed to load resource: the server responded with a status of 405 (Method Not Allowed)](https://discuss.elastic.co/t/failed-to-load-resource-the-server-responded-with-a-status-of-405-method-not-allowed/183955)

<div class="topic-metadata">

**Author:** [@vipulnewaskar7](https://discuss.elastic.co/u/vipulnewaskar7)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 4:14pm UTC](https://discuss.elastic.co/t/failed-to-load-resource-the-server-responded-with-a-status-of-405-method-not-allowed/183955 "2019-06-04T16:14:09Z")

</div>

Hello Guys, While connecting elasticsearch from kibana, Under Management tab, At "Create Index Pattern" I am getting error "Failed to load Indices" And In browser console, I get Failed to load resource: the server re…

---

## [Elastic Stack 7.17.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 9:24pm UTC](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447 "2022-02-28T21:24:04Z")

</div>

Elasticsearch privilege escalation issue (ESA-2022-02) A flaw was discovered in elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security …

---

## [Unknown setting \[cluster.initial\_master\_nodes\]](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes/174102)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 5\
**Last updated:** [March 28, 2019, 7:12am UTC](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes/174102 "2019-03-28T07:12:31Z")

</div>

Hello, Just updated 1 of my DV Elastic clusters to 6.7. Tried running the 7.0 Upgrade Assistant. The 7.0 Upgrade Assistant suggested I need to fix 'discovery configuration' After looking into https://www.elastic.co/g…

---

## [How to Configure X-Pack for Active Directory](https://discuss.elastic.co/t/how-to-configure-x-pack-for-active-directory/73193)

<div class="topic-metadata">

**Author:** [@arianayay](https://discuss.elastic.co/u/arianayay)\
**Replies:** 6\
**Last updated:** [February 3, 2017, 7:34am UTC](https://discuss.elastic.co/t/how-to-configure-x-pack-for-active-directory/73193 "2017-02-03T07:34:56Z")

</div>

Hi All, I'm having a problem configuring Active Directory in X-pack for elasticsearch and kibana. May I know if there is a video tutorial or detailed steps for this? Currently, I have this setup. but this is the erro…

---

## [How to search with special character in search bar](https://discuss.elastic.co/t/how-to-search-with-special-character-in-search-bar/253572)

<div class="topic-metadata">

**Author:** [@beam5544](https://discuss.elastic.co/u/beam5544)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 10:46am UTC](https://discuss.elastic.co/t/how-to-search-with-special-character-in-search-bar/253572 "2020-11-02T10:46:22Z")

</div>

Now, I already have data "reqBody" in String format ... but it look like JSON somehow. FYI, {"masterStagingId":"PAYROLL72e6972d84b047af88e62258dbaea998","paymentProductId":"PAYROLL","batchReferenceId":"PAY201028df78…

---

## [Indexing RDF datasets](https://discuss.elastic.co/t/indexing-rdf-datasets/84281)

<div class="topic-metadata">

**Author:** [@AZammit](https://discuss.elastic.co/u/AZammit)\
**Replies:** 6\
**Last updated:** [May 8, 2017, 11:47am UTC](https://discuss.elastic.co/t/indexing-rdf-datasets/84281 "2017-05-08T11:47:57Z")

</div>

Hi all, I am new to ElasticSearch and currently I am doing research and implementing a concept for a small project. I would like to index the DBpedia RDF datasets using ElasticSearch. The RDF datasets will be stored in A…

---

## [XpackSecurity](https://discuss.elastic.co/t/xpacksecurity/87917)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 6\
**Last updated:** [June 2, 2017, 8:34am UTC](https://discuss.elastic.co/t/xpacksecurity/87917 "2017-06-02T08:34:02Z")

</div>

Hi All, I registered for Xpack security Elearning video ,I followed exactly how they demonstrated and I created a same regular use for testing purpose to check if it works for me I created a regular role with only inde…

---

## [Not Able to load template manually for logstach!](https://discuss.elastic.co/t/not-able-to-load-template-manually-for-logstach/108543)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 8\
**Last updated:** [November 23, 2017, 11:13am UTC](https://discuss.elastic.co/t/not-able-to-load-template-manually-for-logstach/108543 "2017-11-23T11:13:12Z")

</div>

Hi All , I am not able to load template manually from filebeat as i am using logstach as outpout . getting below error :- ./filebeat -setup filebeat.template.json Exiting: Dashboard loading requested but the Elastic…

---

## [How should i setup logstash to collect from multiple machines?](https://discuss.elastic.co/t/how-should-i-setup-logstash-to-collect-from-multiple-machines/52750)

<div class="topic-metadata">

**Author:** [@dal](https://discuss.elastic.co/u/dal)\
**Replies:** 8\
**Last updated:** [October 1, 2016, 3:38pm UTC](https://discuss.elastic.co/t/how-should-i-setup-logstash-to-collect-from-multiple-machines/52750 "2016-10-01T15:38:05Z")

</div>

I am new to ES and Logstash and I was trying to setup logstash to collect logs from specific directories and forward them to my Elasticsearch instance. My ES node runs on my local machine and the logs are located in diff…

---

## [Elasticsearch 5.4 - steps to delete field from only one type](https://discuss.elastic.co/t/elasticsearch-5-4-steps-to-delete-field-from-only-one-type/88121)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 1\
**Last updated:** [June 9, 2017, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-5-4-steps-to-delete-field-from-only-one-type/88121 "2017-06-09T11:22:16Z")

</div>

Hello, thank you for your responses, it is really helpful. I have a question but may be it is similar to other. I have one index with a lot of types with different mapping. At some moment i need to delete one field on…

---

## ["Standalone Cluster" for Logstash monitoring](https://discuss.elastic.co/t/standalone-cluster-for-logstash-monitoring/233898)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 7\
**Last updated:** [June 1, 2020, 2:05pm UTC](https://discuss.elastic.co/t/standalone-cluster-for-logstash-monitoring/233898 "2020-06-01T14:05:33Z")

</div>

Hi, I'm trying to setup a single node with Elasticsearch, Kibana and Logstash. After adding some filebeat agents to some servers I wanted to start centralizing logs, a new cluster was created under Kibana "monitoring". …

---

## [Store dense vectors of size more than 2048](https://discuss.elastic.co/t/store-dense-vectors-of-size-more-than-2048/239438)

<div class="topic-metadata">

**Author:** [@techytushar](https://discuss.elastic.co/u/techytushar)\
**Replies:** 4\
**Last updated:** [July 3, 2020, 9:26am UTC](https://discuss.elastic.co/t/store-dense-vectors-of-size-more-than-2048/239438 "2020-07-03T09:26:55Z")

</div>

I am trying to build a semantic text search using ElasticSearch. For this I have decided to use the cosine similarity between the embeddings of the query paragraph and the embeddings of the search paragraphs. The proble…

---

## [Divide aggregated metrics to new custom metric](https://discuss.elastic.co/t/divide-aggregated-metrics-to-new-custom-metric/115500)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 4\
**Last updated:** [January 21, 2018, 6:56pm UTC](https://discuss.elastic.co/t/divide-aggregated-metrics-to-new-custom-metric/115500 "2018-01-21T18:56:04Z")

</div>

Hi there, is it possible to do basic arithmetic operations in Kibana? Let's say: I've got two metrics aggregated by sum and would like to divide them for a third aggregated custom metric. In the metrics layer there's a p…

---

## [Filebeats missing last line when used with multi line](https://discuss.elastic.co/t/filebeats-missing-last-line-when-used-with-multi-line/47053)

<div class="topic-metadata">

**Author:** [@sdaruna](https://discuss.elastic.co/u/sdaruna)\
**Replies:** 1\
**Last updated:** [April 12, 2016, 5:38am UTC](https://discuss.elastic.co/t/filebeats-missing-last-line-when-used-with-multi-line/47053 "2016-04-12T05:38:17Z")

</div>

I have set up filebeat and used multi line pattern to get the full file content as below. My requirement is to move whole file content of the file as a single event. I used multiline to achieve it. multiline: …

---

## [How to use Metric to display a group of values](https://discuss.elastic.co/t/how-to-use-metric-to-display-a-group-of-values/89256)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 5\
**Last updated:** [June 14, 2017, 5:45pm UTC](https://discuss.elastic.co/t/how-to-use-metric-to-display-a-group-of-values/89256 "2017-06-14T17:45:13Z")

</div>

I am trying to use Kibana Visualize to do what I normally do with DataDog’s gauges: showing the last known value of a specific variable. My data looks like this: What I would like it the Visualize: Metric to do is: …

---

## [Set custom document ids on bulk insert](https://discuss.elastic.co/t/set-custom-document-ids-on-bulk-insert/258455)

<div class="topic-metadata">

**Author:** [@dmabuada](https://discuss.elastic.co/u/dmabuada)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 8:22pm UTC](https://discuss.elastic.co/t/set-custom-document-ids-on-bulk-insert/258455 "2020-12-29T20:22:53Z")

</div>

I'm attempting to bulk insert generated data from the track generator (I created my own custom track), but I'd like to disable auto-generated IDs on insert. I modified my data files to include the \_id prop on each docume…

---

## [Contains unrecognized parameter: \[ignore\_unavailable\]](https://discuss.elastic.co/t/contains-unrecognized-parameter-ignore-unavailable/64922)

<div class="topic-metadata">

**Author:** [@guillaumeCSA](https://discuss.elastic.co/u/guillaumeCSA)\
**Replies:** 3\
**Last updated:** [November 3, 2016, 8:09pm UTC](https://discuss.elastic.co/t/contains-unrecognized-parameter-ignore-unavailable/64922 "2016-11-03T20:09:29Z")

</div>

On logstash (5.0) i use the geoip filter but the type of geoip.location is number and kibana expect an geo\_point type. so i try to apply a custom mapping on my index it'works if a use the name of the index PUT/mail-20…

---

## [Sorting for IDs query or filter using the ID's list](https://discuss.elastic.co/t/sorting-for-ids-query-or-filter-using-the-ids-list/12236)

<div class="topic-metadata">

**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\
**Replies:** 3\
**Last updated:** [June 12, 2013, 10:52am UTC](https://discuss.elastic.co/t/sorting-for-ids-query-or-filter-using-the-ids-list/12236 "2013-06-12T10:52:16Z")

</div>

Hi there, I want to query ES with a specific list of document ID's ( http://www.elasticsearch.org/guide/reference/query-dsl/ids-query/), but the results are sorted in a strange way - they all have a score of 1 bu…

---

## [JSon Response returned by ES to SearchReponse Java object](https://discuss.elastic.co/t/json-response-returned-by-es-to-searchreponse-java-object/28114)

<div class="topic-metadata">

**Author:** [@Charles\_Moulliard](https://discuss.elastic.co/u/Charles_Moulliard)\
**Replies:** 4\
**Last updated:** [August 26, 2015, 3:08pm UTC](https://discuss.elastic.co/t/json-response-returned-by-es-to-searchreponse-java-object/28114 "2015-08-26T15:08:17Z")

</div>

Hi, I use this code (based on my search) to convert JSon String response returned by a query issued against ES 1.3.2 to a SearchResponse object in order to navigate with the java objects (total, hits, ...) InputStrea…

---

## [Avoiding session timeout](https://discuss.elastic.co/t/avoiding-session-timeout/204658)

<div class="topic-metadata">

**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\
**Replies:** 8\
**Last updated:** [October 24, 2019, 6:29am UTC](https://discuss.elastic.co/t/avoiding-session-timeout/204658 "2019-10-24T06:29:17Z")

</div>

Hello, we are running in some issues and we dont know why. Kibana 7.3 Kibana session timeout 60 minutes When we running a dashboard from the default space and refresh this dashboard every 15 minutes, we dont run into…

---

## [Scripting field combining 2 fields](https://discuss.elastic.co/t/scripting-field-combining-2-fields/103630)

<div class="topic-metadata">

**Author:** [@Rajinia](https://discuss.elastic.co/u/Rajinia)\
**Replies:** 3\
**Last updated:** [October 13, 2017, 8:31am UTC](https://discuss.elastic.co/t/scripting-field-combining-2-fields/103630 "2017-10-13T08:31:06Z")

</div>

HI I want to create a scripting field with the combination of two fields and use in a Visualise graph. so that I can use two fields in one bucket. columns (A & B) are togeather unique trying to achive Logic like :- s…

---

## [How to set "\_id" value in elasticsearch document as my custom document id](https://discuss.elastic.co/t/how-to-set-id-value-in-elasticsearch-document-as-my-custom-document-id/144644)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 5\
**Last updated:** [August 17, 2018, 12:31pm UTC](https://discuss.elastic.co/t/how-to-set-id-value-in-elasticsearch-document-as-my-custom-document-id/144644 "2018-08-17T12:31:50Z")

</div>

Hi All, We are developing a customized beats for the monitoring tool and we are capturing metrics like cpu, memory, disk etc.. Data was sending it through output logstash which is configured in beat.yml file as like bel…

---

## [Kibana not running in background in unix](https://discuss.elastic.co/t/kibana-not-running-in-background-in-unix/43650)

<div class="topic-metadata">

**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\
**Replies:** 6\
**Last updated:** [March 8, 2016, 12:29am UTC](https://discuss.elastic.co/t/kibana-not-running-in-background-in-unix/43650 "2016-03-08T00:29:52Z")

</div>

I am using kibana 4.3.1 on unix host. I have started Kibana from the install directory: bin/kibana. But when I close my current session of unix box or connection is lost kibana is not running in background. It is gett…

---

## [Access to now() in watcher painless script. How to pass current time in as param?](https://discuss.elastic.co/t/access-to-now-in-watcher-painless-script-how-to-pass-current-time-in-as-param/79776)

<div class="topic-metadata">

**Author:** [@Dan\_Gardner](https://discuss.elastic.co/u/Dan_Gardner)\
**Replies:** 3\
**Last updated:** [April 4, 2017, 9:39am UTC](https://discuss.elastic.co/t/access-to-now-in-watcher-painless-script-how-to-pass-current-time-in-as-param/79776 "2017-04-04T09:39:45Z")

</div>

I'm converting watches to be compatible with elastic cloud 5.2.2 and moving from groovy to painless in the process. Our current watches have an inline script field in the query that does the following: doc\['@timestamp'…

---

## [Dec 4th, 2021: \[it\] Trucchi e consigli avanzati per Lens](https://discuss.elastic.co/t/dec-4th-2021-it-trucchi-e-consigli-avanzati-per-lens/290689)

<div class="topic-metadata">

**Author:** [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)\
**Replies:** 0\
**Last updated:** [December 4, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2021-it-trucchi-e-consigli-avanzati-per-lens/290689 "2021-12-04T08:00:26Z")

</div>

Questo articolo è disponibile anche in inglese. Lens è uno strumento relativamente nuovo in Kibana, rilasciato in versione stabile meno di un anno fa come strumento universale per visualizzazioni, ma ha già attratto mol…

---

## [ElasticsearchError error="400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/220474)

<div class="topic-metadata">

**Author:** [@Midhun\_K](https://discuss.elastic.co/u/Midhun_K)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/220474 "2020-03-11T14:22:40Z")

</div>

Hello guys getting below error while shipping logs from fluentd to elasticsearch , hope you guys can give some clue. fluentd running as deamonset in openshift Elastcisearch & kibana running in standalone server. How t…

---

## [Kibana Document download limit at 10,000](https://discuss.elastic.co/t/kibana-document-download-limit-at-10-000/300010)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [March 18, 2022, 11:35am UTC](https://discuss.elastic.co/t/kibana-document-download-limit-at-10-000/300010 "2022-03-18T11:35:55Z")

</div>

Hi all, I'm trying to download discover search data with some of my filters. However, When i download I see that document limit in CSV is at 10,000 documents. Any way or setting to increase document download limit?

[Previous page](https://discuss.elastic.co/top.md?page=330&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=332&per_page=50&period=all)
