# Top

**URL:** https://discuss.elastic.co/top.md?page=338&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 339

---

## [Is it possible to use comma-separated-list-data as terms in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-use-comma-separated-list-data-as-terms-in-kibana/92499)

<div class="topic-metadata">

**Author:** [@Igor123](https://discuss.elastic.co/u/Igor123)\
**Replies:** 5\
**Last updated:** [July 12, 2017, 9:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-comma-separated-list-data-as-terms-in-kibana/92499 "2017-07-12T09:18:19Z")

</div>

Hi, I've tried searching, but can't find a way around what seems to be a rather basic usecase, so please send me to a suitable thread if there is one, but if not, here is my problem: I want to use the ELK stack to …

---

## [How to filter date field by days and hours separately](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/193946)

<div class="topic-metadata">

**Author:** [@Guylot](https://discuss.elastic.co/u/Guylot)\
**Replies:** 5\
**Last updated:** [August 6, 2019, 9:33pm UTC](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/193946 "2019-08-06T21:33:19Z")

</div>

Hi, I want to create a query that returns all the data from last 3 days and only between 09:00 AM - 18:00 PM. My date field contains both the date and the time of the day (For example "time" : "2019-08-06T06:40:55Z"). …

---

## [LDA/Topic modeling](https://discuss.elastic.co/t/lda-topic-modeling/53989)

<div class="topic-metadata">

**Author:** [@kausik93](https://discuss.elastic.co/u/kausik93)\
**Replies:** 4\
**Last updated:** [November 30, 2017, 11:24pm UTC](https://discuss.elastic.co/t/lda-topic-modeling/53989 "2017-11-30T23:24:43Z")

</div>

Has anyone tried doing LDA/Topic modeling with elasticsearch? I'm using elasticsearch to index all my documents and was hoping to find a way to extract all the words per doc. So far only term\_vectors might possibly be he…

---

## [How to explore transaction history for every request?](https://discuss.elastic.co/t/how-to-explore-transaction-history-for-every-request/161495)

<div class="topic-metadata">

**Author:** [@shinebayar](https://discuss.elastic.co/u/shinebayar)\
**Replies:** 5\
**Last updated:** [December 24, 2018, 8:57am UTC](https://discuss.elastic.co/t/how-to-explore-transaction-history-for-every-request/161495 "2018-12-24T08:57:22Z")

</div>

Hi, I'm new to elastic search stack. We're trying to improve performance of our nodejs application with APM. As you see on the picture we're using graphql. Means every request goes to /graphql path on server. Let's g…

---

## [Elastic stack hardware requirements](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/243521)

<div class="topic-metadata">

**Author:** [@Gomeisa](https://discuss.elastic.co/u/Gomeisa)\
**Replies:** 3\
**Last updated:** [August 4, 2020, 11:16am UTC](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/243521 "2020-08-04T11:16:04Z")

</div>

Hi I want to set up a cluster and I have these scenarios: I'm using ES, Kibana, filebeat(for logs) \[basic license\], a custom project instead of logstash Index heavy data, Not very frequent querying Monthly index with …

---

## [Compatibility with Elasticsearch](https://discuss.elastic.co/t/compatibility-with-elasticsearch/159714)

<div class="topic-metadata">

**Author:** [@igorc](https://discuss.elastic.co/u/igorc)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 11:47am UTC](https://discuss.elastic.co/t/compatibility-with-elasticsearch/159714 "2018-12-06T11:47:32Z")

</div>

Hi, Just wonder if Kibana 6.5 is compatible with Elasticsearch 6.3? Is it expected to work or am I going to hit some issues? Thanks

---

## [Unwanted Upgrade ElasticSearch version](https://discuss.elastic.co/t/unwanted-upgrade-elasticsearch-version/191841)

<div class="topic-metadata">

**Author:** [@pred](https://discuss.elastic.co/u/pred)\
**Replies:** 6\
**Last updated:** [July 24, 2019, 10:02am UTC](https://discuss.elastic.co/t/unwanted-upgrade-elasticsearch-version/191841 "2019-07-24T10:02:19Z")

</div>

I made a mistake by trying to upgrade my elasticsearch version from 6.3.2 to 7.2.0. I launched my container with the new version but I realized that kibana does not work anymore. So I decided to downgrade elasticsearch…

---

## [S3 repository exception](https://discuss.elastic.co/t/s3-repository-exception/178071)

<div class="topic-metadata">

**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\
**Replies:** 5\
**Last updated:** [April 24, 2019, 4:13pm UTC](https://discuss.elastic.co/t/s3-repository-exception/178071 "2019-04-24T16:13:14Z")

</div>

Hi all, I am trying to setup elastic search (5.6.x) using S3 compatible storage such as minio as the backend. I am following the steps mentioned at below link: I am unable to create the repository (Step-6). {"error…

---

## [Response code in kibana](https://discuss.elastic.co/t/response-code-in-kibana/176722)

<div class="topic-metadata">

**Author:** [@vishalhare](https://discuss.elastic.co/u/vishalhare)\
**Replies:** 2\
**Last updated:** [April 16, 2019, 7:21am UTC](https://discuss.elastic.co/t/response-code-in-kibana/176722 "2019-04-16T07:21:25Z")

</div>

Hi, I Have configured ELK stack which is working perfect. but I cant see the response code in kibana so that I can make dashboard that how may 200 or 300 request came. anybody can help me about that. I am using fil…

---

## [What is the difference between hot. cold and warm indices when we use ILM on Elasticsearch?](https://discuss.elastic.co/t/what-is-the-difference-between-hot-cold-and-warm-indices-when-we-use-ilm-on-elasticsearch/222678)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 6\
**Last updated:** [March 23, 2020, 12:26pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-hot-cold-and-warm-indices-when-we-use-ilm-on-elasticsearch/222678 "2020-03-23T12:26:09Z")

</div>

Hi, i need more deep explanation the difference between phase on ILM. In documentation it is said: hot : The index is actively being written to warm: The index is generally not being written to, but is still queried co…

---

## [Large file to elasticsearch index in fast](https://discuss.elastic.co/t/large-file-to-elasticsearch-index-in-fast/50616)

<div class="topic-metadata">

**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 8:04am UTC](https://discuss.elastic.co/t/large-file-to-elasticsearch-index-in-fast/50616 "2016-05-25T08:04:58Z")

</div>

Hi. In many case we do indexing from files sometimes very large file. GBs. What is your favorite way to index large json file to elasticsearch? Logstash-file is very good and easy way to do that. But logstash-file…

---

## [Linking Kibana and Elasticsearch with docker-compose](https://discuss.elastic.co/t/linking-kibana-and-elasticsearch-with-docker-compose/179040)

<div class="topic-metadata">

**Author:** [@isemaj](https://discuss.elastic.co/u/isemaj)\
**Replies:** 4\
**Last updated:** [May 1, 2019, 6:56am UTC](https://discuss.elastic.co/t/linking-kibana-and-elasticsearch-with-docker-compose/179040 "2019-05-01T06:56:53Z")

</div>

I read this docs about installing elasticsearch. And run the command docker pull docker.elastic.co/elasticsearch/elasticsearch:7.0.0 And this on for kibana docker pull docker.elastic.co/kibana/kibana:7.0.0 Then I cre…

---

## [Problem starting Elasticsearch process](https://discuss.elastic.co/t/problem-starting-elasticsearch-process/77078)

<div class="topic-metadata">

**Author:** [@adityajain19](https://discuss.elastic.co/u/adityajain19)\
**Replies:** 4\
**Last updated:** [March 2, 2017, 9:38pm UTC](https://discuss.elastic.co/t/problem-starting-elasticsearch-process/77078 "2017-03-02T21:38:34Z")

</div>

Hi, we are trying to start out elasticsearch process sudo service elasticsearch start sudo service elasticsearch status gives following \[root@efkkibapp31d x-pack\]# sudo service elasticsearch status -l ● elasticsea…

---

## [Grok - how to add field with values from existing fields?](https://discuss.elastic.co/t/grok-how-to-add-field-with-values-from-existing-fields/114277)

<div class="topic-metadata">

**Author:** [@qubusp](https://discuss.elastic.co/u/qubusp)\
**Replies:** 5\
**Last updated:** [January 6, 2018, 9:58am UTC](https://discuss.elastic.co/t/grok-how-to-add-field-with-values-from-existing-fields/114277 "2018-01-06T09:58:20Z")

</div>

The following is a pull of metrics from a jmx application. The question is how to build a grok pattern, which will use the metric\_path: as field name(it's changing constantly) and use metric\_value\_number as the numeric …

---

## [Ingress for Kibana in ECK](https://discuss.elastic.co/t/ingress-for-kibana-in-eck/211163)

<div class="topic-metadata">

**Author:** [@francesc.recasens](https://discuss.elastic.co/u/francesc.recasens)\
**Replies:** 1\
**Last updated:** [December 10, 2019, 9:31am UTC](https://discuss.elastic.co/t/ingress-for-kibana-in-eck/211163 "2019-12-10T09:31:25Z")

</div>

Good afternoon, I'm trying to deploy an Elasticsearch cluster (v1.16.3) using ECK on premise. I'm using OpenEBS for StorageClass. I created a one-node Elasticsearch cluster and also a Kibana, so I can test if it's work…

---

## [Connection pooling in Python](https://discuss.elastic.co/t/connection-pooling-in-python/189725)

<div class="topic-metadata">

**Author:** [@ssharma7884](https://discuss.elastic.co/u/ssharma7884)\
**Replies:** 7\
**Last updated:** [July 21, 2019, 12:45pm UTC](https://discuss.elastic.co/t/connection-pooling-in-python/189725 "2019-07-21T12:45:45Z")

</div>

Hi, I am using python to connect to elastic search DB cluster. No. of nodes = 3, each node has a user id and password I am trying to implement connection pooling, referred the documentation for python api at: https:/…

---

## [How to add geo\_point type data to elasticsearch?](https://discuss.elastic.co/t/how-to-add-geo-point-type-data-to-elasticsearch/2768)

<div class="topic-metadata">

**Author:** [@Eric](https://discuss.elastic.co/u/Eric)\
**Replies:** 5\
**Last updated:** [July 4, 2016, 9:22pm UTC](https://discuss.elastic.co/t/how-to-add-geo-point-type-data-to-elasticsearch/2768 "2016-07-04T21:22:56Z")

</div>

Hi, I'm a newbie for ELK. I want to add some custom geo search functions to my program. How do I filter custom lat and lng (now i have %{lat} and %{lng}) into elasticsearch geo\_type formated data so that I can visualize …

---

## [How to ignore empty values on Bar Chart (displaying percentage)](https://discuss.elastic.co/t/how-to-ignore-empty-values-on-bar-chart-displaying-percentage/146764)

<div class="topic-metadata">

**Author:** [@obaid](https://discuss.elastic.co/u/obaid)\
**Replies:** 7\
**Last updated:** [August 31, 2018, 1:45pm UTC](https://discuss.elastic.co/t/how-to-ignore-empty-values-on-bar-chart-displaying-percentage/146764 "2018-08-31T13:45:42Z")

</div>

Hi, Is there a way to ignore empty values, such that Kibana don't display the Bars (highlighted) for empty values in the screen shot below? Actually, if on the left I select 'normal' instead of 'percentage', it gives m…

---

## [Error: The setting \`host\` in plugin \`elasticsearch\` is obsolete and is no longer available. Please use the 'hosts' setting instead. You can specify multiple entries separated by comma in 'host:port' format](https://discuss.elastic.co/t/error-the-setting-host-in-plugin-elasticsearch-is-obsolete-and-is-no-longer-available-please-use-the-hosts-setting-instead-you-can-specify-multiple-entries-separated-by-comma-in-host-port-format/33489)

<div class="topic-metadata">

**Author:** [@reject](https://discuss.elastic.co/u/reject)\
**Replies:** 2\
**Last updated:** [November 2, 2015, 9:51am UTC](https://discuss.elastic.co/t/error-the-setting-host-in-plugin-elasticsearch-is-obsolete-and-is-no-longer-available-please-use-the-hosts-setting-instead-you-can-specify-multiple-entries-separated-by-comma-in-host-port-format/33489 "2015-11-02T09:51:52Z")

</div>

/opt/logstash/bin/logstash -f /etc/logstash/conf.d/logstash\_test.conf test.conf: input { stdin{} } output { elasticsearch { host =\> localhost } stdout { codec =\> rubydebug } } why this error?plz.thank…

---

## [Conditional filtering by source with IP addresses](https://discuss.elastic.co/t/conditional-filtering-by-source-with-ip-addresses/78351)

<div class="topic-metadata">

**Author:** [@rayl7786](https://discuss.elastic.co/u/rayl7786)\
**Replies:** 6\
**Last updated:** [March 14, 2017, 5:36pm UTC](https://discuss.elastic.co/t/conditional-filtering-by-source-with-ip-addresses/78351 "2017-03-14T17:36:11Z")

</div>

Hello, First, I would like to apologize if I do not add enough data but can add more if needed. I have created logstash filters to check if the source has the source IP in it. (ex. /var/log/XX.XX.XX.XX/\*.log) but I a…

---

## [How to understand the error of reindex (request body is required)?](https://discuss.elastic.co/t/how-to-understand-the-error-of-reindex-request-body-is-required/300278)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 7\
**Last updated:** [March 24, 2022, 9:02am UTC](https://discuss.elastic.co/t/how-to-understand-the-error-of-reindex-request-body-is-required/300278 "2022-03-24T09:02:05Z")

</div>

use reindex and want to rename iotmessages-000001 to iot\_prd\_iotmessage-000001. There are so many raw data. POST \_reindex?slices=5&refresh { "conflicts": "proceed", "source": { "index": "iotmessages-000001" …

---

## [Error after upgrading to 7.15](https://discuss.elastic.co/t/error-after-upgrading-to-7-15/285890)

<div class="topic-metadata">

**Author:** [@Mads\_Lundegaard](https://discuss.elastic.co/u/Mads_Lundegaard)\
**Replies:** 7\
**Last updated:** [October 5, 2021, 9:13am UTC](https://discuss.elastic.co/t/error-after-upgrading-to-7-15/285890 "2021-10-05T09:13:49Z")

</div>

I am getting errors after I upgraded my client from 7.13.4 to 7.15. I suspect this is due to incompatible versions between server and client, but I am not sure. I tried upgrading the server, running in AWS but could not …

---

## [ML Kibana: difference between by\_field\_name and partition\_field\_name](https://discuss.elastic.co/t/ml-kibana-difference-between-by-field-name-and-partition-field-name/193385)

<div class="topic-metadata">

**Author:** [@rnd](https://discuss.elastic.co/u/rnd)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 7:30pm UTC](https://discuss.elastic.co/t/ml-kibana-difference-between-by-field-name-and-partition-field-name/193385 "2019-08-01T19:30:47Z")

</div>

Hi, I am confused with terminology and would like to please clarify it with an example if possible. I'd like to use time\_of\_week function and I don't understand the difference between by\_field\_name and partition\_field\_…

---

## [Cluster yellow reason: \[shards started \[\[.kibana\]\[0\]\]](https://discuss.elastic.co/t/cluster-yellow-reason-shards-started-kibana-0/93034)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 1\
**Last updated:** [July 21, 2017, 2:15pm UTC](https://discuss.elastic.co/t/cluster-yellow-reason-shards-started-kibana-0/93034 "2017-07-21T14:15:46Z")

</div>

I have cluster yellow because this line, but dont know what is wrong, any idea? \[2017-07-13T16:21:39,946\]\[INFO \]\[o.e.c.r.a.AllocationService\] \[elastic01\] Cluster health status changed from \[RED\] to \[YELLOW\] (reason: \[s…

---

## [How to auto delete the old data](https://discuss.elastic.co/t/how-to-auto-delete-the-old-data/1053)

<div class="topic-metadata">

**Author:** [@JulianZhang](https://discuss.elastic.co/u/JulianZhang)\
**Replies:** 1\
**Last updated:** [May 21, 2015, 2:02am UTC](https://discuss.elastic.co/t/how-to-auto-delete-the-old-data/1053 "2015-05-21T02:02:06Z")

</div>

We want use LEK for the application log search. But there are two question I don't find answer in the docs. 1, We just need search the log which generate in 30 days, How can I setting in the config file? 2, How to c…

---

## [Connection refused on Ubuntu](https://discuss.elastic.co/t/connection-refused-on-ubuntu/36418)

<div class="topic-metadata">

**Author:** [@taq](https://discuss.elastic.co/u/taq)\
**Replies:** 2\
**Last updated:** [December 5, 2015, 1:43pm UTC](https://discuss.elastic.co/t/connection-refused-on-ubuntu/36418 "2015-12-05T13:43:55Z")

</div>

Guys, I had an old install and it was not working. I got a "Connection refused" when trying $ curl -X GET http://localhost:9200 So, I purged my install and installed it again (now with 2.x). After that, I must go…

---

## [Tried to start filebeat error was generated](https://discuss.elastic.co/t/tried-to-start-filebeat-error-was-generated/44194)

<div class="topic-metadata">

**Author:** [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\
**Replies:** 4\
**Last updated:** [March 11, 2016, 10:39pm UTC](https://discuss.elastic.co/t/tried-to-start-filebeat-error-was-generated/44194 "2016-03-11T22:39:35Z")

</div>

I installed the components of ELK and when I tried to start the service filebeat I received this error: outputs.go:113: ERR failed to initialize elasticsearch plugin as output: no host configuration found Error Initial…

---

## [Date filter is applying an extra hour to the timestamp](https://discuss.elastic.co/t/date-filter-is-applying-an-extra-hour-to-the-timestamp/25524)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 6\
**Last updated:** [September 23, 2015, 2:27pm UTC](https://discuss.elastic.co/t/date-filter-is-applying-an-extra-hour-to-the-timestamp/25524 "2015-09-23T14:27:47Z")

</div>

It seems the locale or timezone I'm using for the date filter is applying an extra hour to the timestamp. The date filter is applied to the log\_timestamp field and results in an extra hour applied: I've tried both of…

---

## [Kibana stack trace log use case](https://discuss.elastic.co/t/kibana-stack-trace-log-use-case/99601)

<div class="topic-metadata">

**Author:** [@jcfiorenzano](https://discuss.elastic.co/u/jcfiorenzano)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 7:18pm UTC](https://discuss.elastic.co/t/kibana-stack-trace-log-use-case/99601 "2017-09-06T19:18:26Z")

</div>

Hi community I have a question, I recently started using Elastic Stack for report my logs that basically are exceptions with stack trace information, like 2017-09-05 11:58:53 JFIORENZANO iisexpress Error System.Exceptio…

---

## [Kafka input unable to create consumer after setting session timeout](https://discuss.elastic.co/t/kafka-input-unable-to-create-consumer-after-setting-session-timeout/61956)

<div class="topic-metadata">

**Author:** [@retzkek](https://discuss.elastic.co/u/retzkek)\
**Replies:** 3\
**Last updated:** [February 4, 2017, 1:48am UTC](https://discuss.elastic.co/t/kafka-input-unable-to-create-consumer-after-setting-session-timeout/61956 "2017-02-04T01:48:51Z")

</div>

I'm trying to setup logstash (5.0.0-beta1) to process events from a Kafka (0.10.0.0) topic and index them into a fairly busy Elasticsearch cluster (we've been using Logstash and Elasticsearch for a while, Kafka is the ne…

---

## [How can I fix error: ConfigurationError: Missing node(s) option for winston-elasticsearch?](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478)

<div class="topic-metadata">

**Author:** [@steinko](https://discuss.elastic.co/u/steinko)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 5:51pm UTC](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478 "2019-10-14T17:51:59Z")

</div>

How do I fix an error ConfigurationError: Missing node(s) option . Se the discripton here https://stackoverflow.com/q/58371284/8236354

---

## [How does sql\_last\_value parameter work in jdbc input plugin?](https://discuss.elastic.co/t/how-does-sql-last-value-parameter-work-in-jdbc-input-plugin/101624)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 8\
**Last updated:** [September 26, 2017, 3:55pm UTC](https://discuss.elastic.co/t/how-does-sql-last-value-parameter-work-in-jdbc-input-plugin/101624 "2017-09-26T15:55:30Z")

</div>

Hi, I am using JDBC input plugin with use\_column\_value =\> true tracking\_column =\> "id". But the problem is that my id column is not an incremental all the time. For example it may be as 1,2,3,5,6,7,10,9,8. So what do…

---

## [\[error\]\[status\]\[ui settings\] Status changed from uninitialized to red - Elasticsearch plugin is red](https://discuss.elastic.co/t/error-status-ui-settings-status-changed-from-uninitialized-to-red-elasticsearch-plugin-is-red/77144)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 7\
**Last updated:** [March 3, 2017, 7:53am UTC](https://discuss.elastic.co/t/error-status-ui-settings-status-changed-from-uninitialized-to-red-elasticsearch-plugin-is-red/77144 "2017-03-03T07:53:19Z")

</div>

Hi. @elasticsearch @Kibana I want to disable the Xpack in elasticsearch 5.2 when define that code in elasticsearch.yml im facing issue to start elasticsearch, please help me to correct this error xpack.security.enabl…

---

## [Sort by date not working](https://discuss.elastic.co/t/sort-by-date-not-working/121145)

<div class="topic-metadata">

**Author:** [@kunde](https://discuss.elastic.co/u/kunde)\
**Replies:** 2\
**Last updated:** [February 23, 2018, 6:47pm UTC](https://discuss.elastic.co/t/sort-by-date-not-working/121145 "2018-02-23T18:47:27Z")

</div>

I have a nested date field like this: { "nestedField": { "type": "nested", "properties": { "sellableDate": { "properties": { "US": { …

---

## [How to enable symlinks?](https://discuss.elastic.co/t/how-to-enable-symlinks/126852)

<div class="topic-metadata">

**Author:** [@ayrodrig](https://discuss.elastic.co/u/ayrodrig)\
**Replies:** 7\
**Last updated:** [April 9, 2018, 6:21am UTC](https://discuss.elastic.co/t/how-to-enable-symlinks/126852 "2018-04-09T06:21:35Z")

</div>

Hi there! I'm pretty much interested in enabling the symlinks option for the reason already stated at the documentation https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html#\_literal…

---

## [CSV Filter - Quote character causing \_csvparsefailure](https://discuss.elastic.co/t/csv-filter-quote-character-causing-csvparsefailure/121273)

<div class="topic-metadata">

**Author:** [@perry29](https://discuss.elastic.co/u/perry29)\
**Replies:** 5\
**Last updated:** [February 26, 2018, 4:14pm UTC](https://discuss.elastic.co/t/csv-filter-quote-character-causing-csvparsefailure/121273 "2018-02-26T16:14:49Z")

</div>

The context is logstash and bro http logs. Both logstash and bro are minimally configured, just enough to test. Bro is generating tsv files and logstash is using the csv filter to process. In testing, logstash ocasion…

---

## [Kibana not showing the data due to time stamp field issue](https://discuss.elastic.co/t/kibana-not-showing-the-data-due-to-time-stamp-field-issue/29155)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 8\
**Last updated:** [September 18, 2015, 6:33am UTC](https://discuss.elastic.co/t/kibana-not-showing-the-data-due-to-time-stamp-field-issue/29155 "2015-09-18T06:33:18Z")

</div>

Hi, I tried to parse old logs and set timestamp what present on logs. example log : 2015-09-11 20:06:03; - - "GET / HTTP/1.0" 302 311 "-" "-" logstash-server date config: .......... date { locale =\> "en" …

---

## [PUT Index mapping via curl result an error (Content-Type header fix does not working)](https://discuss.elastic.co/t/put-index-mapping-via-curl-result-an-error-content-type-header-fix-does-not-working/111445)

<div class="topic-metadata">

**Author:** [@toshi78](https://discuss.elastic.co/u/toshi78)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 9:02pm UTC](https://discuss.elastic.co/t/put-index-mapping-via-curl-result-an-error-content-type-header-fix-does-not-working/111445 "2017-12-13T21:02:05Z")

</div>

Hi everyone ! I migrated from ES 5 to ES 6, and I've tried to push the following mapping with curl as usual: "mappings" : { "mee": { "properties" : { "ind1" : { "type" : "float" }, "ind2" : { "type"…

---

## [Parse nested json](https://discuss.elastic.co/t/parse-nested-json/46114)

<div class="topic-metadata">

**Author:** [@ajays](https://discuss.elastic.co/u/ajays)\
**Replies:** 8\
**Last updated:** [April 4, 2016, 5:12pm UTC](https://discuss.elastic.co/t/parse-nested-json/46114 "2016-04-04T17:12:48Z")

</div>

Hello, I have an input line as given below {"dwo":"0","rs":{"$date":"2016-02-11T00:52:50.348Z"},"first":\[{"timestamp":"2016-02-11T00:52:51Z","a":"abc","b":"243253456","c":"fdsfg444323fef"},{"timestamp":"2016-02-11T00…

---

## [Viewing Metrics -- 500 Internal Server Error](https://discuss.elastic.co/t/viewing-metrics-500-internal-server-error/225501)

<div class="topic-metadata">

**Author:** [@eugeneswalker](https://discuss.elastic.co/u/eugeneswalker)\
**Replies:** 4\
**Last updated:** [May 5, 2020, 12:44pm UTC](https://discuss.elastic.co/t/viewing-metrics-500-internal-server-error/225501 "2020-05-05T12:44:27Z")

</div>

I'm using ELK 7.6.1, all running on the same physical node as docker containers, launched via a docker-compose file. The only shipper setup so far is Filebeat for sending system logs. I can view these in Kibana. The prob…

---

## [Include\_in\_all still works or not?](https://discuss.elastic.co/t/include-in-all-still-works-or-not/154092)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 6\
**Last updated:** [November 21, 2018, 8:00am UTC](https://discuss.elastic.co/t/include-in-all-still-works-or-not/154092 "2018-11-21T08:00:14Z")

</div>

Hi All, In my use case of Elasticsearch for my project, for free\_text\_search I want search to be done on not all field and I also not want to send list of field on search is to be done because I have almost 100 fields a…

---

## [How to create autoincrement id in ES using java\_api in storm?](https://discuss.elastic.co/t/how-to-create-autoincrement-id-in-es-using-java-api-in-storm/28832)

<div class="topic-metadata">

**Author:** [@SachinBigdata](https://discuss.elastic.co/u/SachinBigdata)\
**Replies:** 6\
**Last updated:** [September 10, 2015, 1:32pm UTC](https://discuss.elastic.co/t/how-to-create-autoincrement-id-in-es-using-java-api-in-storm/28832 "2015-09-10T13:32:18Z")

</div>

Hi, I am trying to create autoincrement id in ES in storm using TransportClient client. first i am checking the max id present in ES and then inserting existing max id +1 . But, its replicating same id for 3-4 times. P…

---

## [\[Filebeat\] Changing filebeat's path for it's configuration module](https://discuss.elastic.co/t/filebeat-changing-filebeats-path-for-its-configuration-module/236243)

<div class="topic-metadata">

**Author:** [@gonzalo2kx](https://discuss.elastic.co/u/gonzalo2kx)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 7:56pm UTC](https://discuss.elastic.co/t/filebeat-changing-filebeats-path-for-its-configuration-module/236243 "2020-06-26T19:56:22Z")

</div>

Good day, I am currently experiencing a problem to load the system module on filebeat. The system module has been enabled and verified using "filebeat modules list". When I launch filebeat 7.6.2 in publish mode I get th…

---

## [Elasticsearch Installation: gpg: no valid OpenPGP](https://discuss.elastic.co/t/elasticsearch-installation-gpg-no-valid-openpgp/133223)

<div class="topic-metadata">

**Author:** [@am159](https://discuss.elastic.co/u/am159)\
**Replies:** 5\
**Last updated:** [May 29, 2018, 3:25pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-gpg-no-valid-openpgp/133223 "2018-05-29T15:25:05Z")

</div>

Hello All, When trying to install new instance of elasticsearch, I keep getting the below error message. $ wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - gpg: no valid OpenPGP data …

---

## [Best way to find the length of array in elasticsearch](https://discuss.elastic.co/t/best-way-to-find-the-length-of-array-in-elasticsearch/120645)

<div class="topic-metadata">

**Author:** [@Amit\_khanduri](https://discuss.elastic.co/u/Amit_khanduri)\
**Replies:** 7\
**Last updated:** [February 21, 2018, 9:25am UTC](https://discuss.elastic.co/t/best-way-to-find-the-length-of-array-in-elasticsearch/120645 "2018-02-21T09:25:01Z")

</div>

\> "asst\_re": \[ \> { \> "rep\_type": 345, \> "repo\_id": 7144220 \> } \> , \> { \> "rep\_type": 545, \> "repo\_id": 7084555 \> }\] I have to filter the "asst\_re" array on the basis of length of the array. What is the best and optimis…

---

## [Calculation in mutate field](https://discuss.elastic.co/t/calculation-in-mutate-field/2703)

<div class="topic-metadata">

**Author:** [@Ankit\_Pradhan](https://discuss.elastic.co/u/Ankit_Pradhan)\
**Replies:** 2\
**Last updated:** [June 17, 2015, 2:25pm UTC](https://discuss.elastic.co/t/calculation-in-mutate-field/2703 "2015-06-17T14:25:09Z")

</div>

I have filed TIME field and I would like to convert HHmmss to only Seconds. e.g. "duration": \[ \[ "0:00:00" \] \], "HOUR": \[ \[ "0" \] \], "MINUTE": \[ \[ "00" \] \], "SECON…

---

## [ES Query to sort data on Timestamp](https://discuss.elastic.co/t/es-query-to-sort-data-on-timestamp/78394)

<div class="topic-metadata">

**Author:** [@saggarsunil](https://discuss.elastic.co/u/saggarsunil)\
**Replies:** 1\
**Last updated:** [March 13, 2017, 8:00pm UTC](https://discuss.elastic.co/t/es-query-to-sort-data-on-timestamp/78394 "2017-03-13T20:00:47Z")

</div>

I have a very basic requirement. I am indexing the records based on timestamp. E.g { "temperature": \[value\], "deviceID":\[value\] , Timestamp: \[ts\]} { "temperature": \[value\], "deviceID":\[value\],Timestamp: \[ts\] } { "t…

---

## [Separate Input, Filter and Output Configurations](https://discuss.elastic.co/t/separate-input-filter-and-output-configurations/26030)

<div class="topic-metadata">

**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\
**Replies:** 4\
**Last updated:** [July 22, 2015, 8:54am UTC](https://discuss.elastic.co/t/separate-input-filter-and-output-configurations/26030 "2015-07-22T08:54:56Z")

</div>

I have multiple configuration files for Logstash, each file contains inputs, filters & outputs. Is this the recommended method or should I have separate files containing only 1 of the above? For example: 1-input.conf, 2…

---

## [Node client cannot connect to cluster](https://discuss.elastic.co/t/node-client-cannot-connect-to-cluster/13770)

<div class="topic-metadata">

**Author:** [@peter2](https://discuss.elastic.co/u/peter2)\
**Replies:** 8\
**Last updated:** [May 6, 2014, 4:28pm UTC](https://discuss.elastic.co/t/node-client-cannot-connect-to-cluster/13770 "2014-05-06T16:28:09Z")

</div>

I'm trying to configure node client to connect to an elasticsearch cluster that does not use multicast, but I'm running into problems. Also I'm providing all settings programmatically to the NodeClient as I cannot us…

---

## [Force a Master Node to be the primary](https://discuss.elastic.co/t/force-a-master-node-to-be-the-primary/61688)

<div class="topic-metadata">

**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\
**Replies:** 6\
**Last updated:** [September 29, 2016, 6:02pm UTC](https://discuss.elastic.co/t/force-a-master-node-to-be-the-primary/61688 "2016-09-29T18:02:20Z")

</div>

Hi! I would like to know if there is any way/configuration that forces a Master Node to be the primary, even when a secondary Master Node already was elected to be the Master of the cluster. A configuration that verif…

[Previous page](https://discuss.elastic.co/top.md?page=337&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=339&per_page=50&period=all)
