# Top

**URL:** https://discuss.elastic.co/top.md?page=367&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 368

---

## [Red cluster states and search query response codes](https://discuss.elastic.co/t/red-cluster-states-and-search-query-response-codes/41275)

<div class="topic-metadata">

**Author:** [@Andrew\_Stoker](https://discuss.elastic.co/u/Andrew_Stoker)\
**Replies:** 3\
**Last updated:** [February 10, 2016, 11:11am UTC](https://discuss.elastic.co/t/red-cluster-states-and-search-query-response-codes/41275 "2016-02-10T11:11:48Z")

</div>

As described https://www.elastic.co/guide/en/elasticsearch/guide/current/\_cluster\_health.html when a cluster is in RED state search queries will return partial results, and indexing into that shard will return an excepti…

---

## [Create a filter in metrics](https://discuss.elastic.co/t/create-a-filter-in-metrics/35299)

<div class="topic-metadata">

**Author:** [@v.montaldo](https://discuss.elastic.co/u/v.montaldo)\
**Replies:** 2\
**Last updated:** [November 30, 2015, 1:02pm UTC](https://discuss.elastic.co/t/create-a-filter-in-metrics/35299 "2015-11-30T13:02:14Z")

</div>

hi, I'm approaching to study Kibana. How can I write a filter in the metrics visualization? Ex: count of type:"cliente" thanks a lot Valentina

---

## [Iterator over whole result set (Java API)](https://discuss.elastic.co/t/iterator-over-whole-result-set-java-api/3203)

<div class="topic-metadata">

**Author:** [@Tomislav\_Poljak](https://discuss.elastic.co/u/Tomislav_Poljak)\
**Replies:** 4\
**Last updated:** [August 10, 2010, 5:47pm UTC](https://discuss.elastic.co/t/iterator-over-whole-result-set-java-api/3203 "2010-08-10T17:47:08Z")

</div>

Hi, I need to iterate over whole result set, meaning all of hits.getTotalHits() results from response (for some query). Required 'size' is not defined before I execute query (I need all matches), so I can not use que…

---

## [Basic logstash example for CSV](https://discuss.elastic.co/t/basic-logstash-example-for-csv/83554)

<div class="topic-metadata">

**Author:** [@hgpit](https://discuss.elastic.co/u/hgpit)\
**Replies:** 5\
**Last updated:** [April 25, 2017, 1:28pm UTC](https://discuss.elastic.co/t/basic-logstash-example-for-csv/83554 "2017-04-25T13:28:06Z")

</div>

Hi I am trying to get my head around the ELK stack "thing" but being defeated! I have installed all the latest v5.x components (ELK) onto CentOS 7. Now, I have tonnes of 100mb files being FTP'd to the server, which I…

---

## [Logstash 6.x & type](https://discuss.elastic.co/t/logstash-6-x-type/159655)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [December 10, 2018, 11:28am UTC](https://discuss.elastic.co/t/logstash-6-x-type/159655 "2018-12-10T11:28:30Z")

</div>

Hello. I'm tired of the warnings in my Logstash log file and would like to fix it: \[2018-12-06T16:34:17,200\]\[WARN \]\[logstash.outputs.elasticsearch\] Detected a 6.x and above cluster: the type event field won't be used …

---

## [Syslog Severity and Priority not being parsed by syslog plugin](https://discuss.elastic.co/t/syslog-severity-and-priority-not-being-parsed-by-syslog-plugin/40055)

<div class="topic-metadata">

**Author:** [@avamore](https://discuss.elastic.co/u/avamore)\
**Replies:** 4\
**Last updated:** [January 26, 2016, 1:49pm UTC](https://discuss.elastic.co/t/syslog-severity-and-priority-not-being-parsed-by-syslog-plugin/40055 "2016-01-26T13:49:57Z")

</div>

Hi all I've upgrade to Kibana 4.3, which required Elastic 2.3 which required logstash 2.1 After I upgrade to 2.1, the syslog input is no loner parsing out priority, severity and facility properly. I receive the erro…

---

## [Choosing the Correct AWS EC2 Servers](https://discuss.elastic.co/t/choosing-the-correct-aws-ec2-servers/105902)

<div class="topic-metadata">

**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\
**Replies:** 5\
**Last updated:** [November 2, 2017, 2:03pm UTC](https://discuss.elastic.co/t/choosing-the-correct-aws-ec2-servers/105902 "2017-11-02T14:03:54Z")

</div>

Hello everyone. I'm in the process of creating my newest cluster that will eventually be the basis for my production cluster. My question, what types of servers would you recommend to run the master nodes, data nodes, an…

---

## [Search all subfields](https://discuss.elastic.co/t/search-all-subfields/11206)

<div class="topic-metadata">

**Author:** [@Pat\_3](https://discuss.elastic.co/u/Pat_3)\
**Replies:** 8\
**Last updated:** [March 22, 2013, 10:35am UTC](https://discuss.elastic.co/t/search-all-subfields/11206 "2013-03-22T10:35:30Z")

</div>

Hi, probably this question has been asked before, but I couldn't find an appropriate answer. I have a document structure like this { "broadcast": { "type": "nested", "properties": { "date": { "t…

---

## [Specify field you want to sort by in asc or desc order](https://discuss.elastic.co/t/specify-field-you-want-to-sort-by-in-asc-or-desc-order/27587)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 4:33am UTC](https://discuss.elastic.co/t/specify-field-you-want-to-sort-by-in-asc-or-desc-order/27587 "2015-08-20T04:33:57Z")

</div>

Is it possible to specify the column you wish to sort by in the search field under the Kibana Discover page? I'd like to specify the column to sort in the query rather than having to click in the column manually.

---

## [Inserting a document that already exists. Exception?](https://discuss.elastic.co/t/inserting-a-document-that-already-exists-exception/136084)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 6:33pm UTC](https://discuss.elastic.co/t/inserting-a-document-that-already-exists-exception/136084 "2018-06-15T18:33:44Z")

</div>

Hi I will need to add documents to an elasticsearch index i already have. I want to validate if the document i an adding already exists in this index, and if thats the case, dont add it Is elasticsearch controlling tha…

---

## [Ruby exception occurred: undefined method \`\[\]' for #\<LogStash::Event:0x1f8ee438](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-logstash-0x1f8ee438/228521)

<div class="topic-metadata">

**Author:** [@Jaikumar\_Ganesan](https://discuss.elastic.co/u/Jaikumar_Ganesan)\
**Replies:** 6\
**Last updated:** [April 18, 2020, 2:25am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-logstash-0x1f8ee438/228521 "2020-04-18T02:25:10Z")

</div>

I'm using logstash 7.5.1. I would like to parse through all fields of my logstash and convert field starting with the word "time" to float. Please find below my configuration: filter { # Parse Search Logs grok { …

---

## [Got response code '401' contacting Elasticsearch at URL 7.4](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url-7-4/205850)

<div class="topic-metadata">

**Author:** [@Ivan\_D](https://discuss.elastic.co/u/Ivan_D)\
**Replies:** 1\
**Last updated:** [November 2, 2019, 7:45pm UTC](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url-7-4/205850 "2019-11-02T19:45:56Z")

</div>

Hi, i have enabled xpack and facing in issues with logstash connection elasticsearch.yml xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.audit.enabled: true output.conf in logsta…

---

## [Differentiate between logs based on log.file.path](https://discuss.elastic.co/t/differentiate-between-logs-based-on-log-file-path/180496)

<div class="topic-metadata">

**Author:** [@rplus](https://discuss.elastic.co/u/rplus)\
**Replies:** 8\
**Last updated:** [May 23, 2019, 5:27am UTC](https://discuss.elastic.co/t/differentiate-between-logs-based-on-log-file-path/180496 "2019-05-23T05:27:59Z")

</div>

Hi, I've a server hosting several sites containing multiple IIS logs from each site in structure like this: D:\\IISLogs\\Customer1\\logs D:\\IISLogs\\Customer2\\logs D:\\IISLogs\\Customer3\\logs I'm using filebeat with IIS m…

---

## [Logstash Private IP Address - geoip](https://discuss.elastic.co/t/logstash-private-ip-address-geoip/75989)

<div class="topic-metadata">

**Author:** [@Bondo](https://discuss.elastic.co/u/Bondo)\
**Replies:** 8\
**Last updated:** [February 23, 2017, 8:26am UTC](https://discuss.elastic.co/t/logstash-private-ip-address-geoip/75989 "2017-02-23T08:26:24Z")

</div>

I can successfully get geo-location data from my IIS weblogs into Elastic if it's a public IP, but there are some private IP addresses that I want to explicitly set to a certain geo-locations and it's not working quite r…

---

## [Kibana visualize filter](https://discuss.elastic.co/t/kibana-visualize-filter/107872)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 4\
**Last updated:** [November 17, 2017, 1:57am UTC](https://discuss.elastic.co/t/kibana-visualize-filter/107872 "2017-11-17T01:57:14Z")

</div>

Hello We now create a data table in visualize. Now we need to filter two data keyword in the same column. For example,the content of table is: cloumn count data1 1 data2 …

---

## [Difference between 'rebalance.enable' and 'allocation.enable'](https://discuss.elastic.co/t/difference-between-rebalance-enable-and-allocation-enable/115994)

<div class="topic-metadata">

**Author:** [@Fhoenix](https://discuss.elastic.co/u/Fhoenix)\
**Replies:** 3\
**Last updated:** [January 19, 2018, 7:44am UTC](https://discuss.elastic.co/t/difference-between-rebalance-enable-and-allocation-enable/115994 "2018-01-19T07:44:44Z")

</div>

I was looking for a setting to stop the big old shards that contain data from moving, when a new node is added. I found on this page https://www.elastic.co/guide/en/elasticsearch/reference/current/shards-allocation.html …

---

## [Snmp trap alert action](https://discuss.elastic.co/t/snmp-trap-alert-action/139975)

<div class="topic-metadata">

**Author:** [@MikaelLindstrom](https://discuss.elastic.co/u/MikaelLindstrom)\
**Replies:** 3\
**Last updated:** [July 17, 2018, 6:55am UTC](https://discuss.elastic.co/t/snmp-trap-alert-action/139975 "2018-07-17T06:55:14Z")

</div>

Has anyone implemented an SNMP trap action for the X-pack watcher to allow SNMP traps to be sent out if thresholds are crossed? Our customer uses HP openview and traps to monitor all nodes and would like to integrate th…

---

## [Filebeat does not send logs to logstash](https://discuss.elastic.co/t/filebeat-does-not-send-logs-to-logstash/144465)

<div class="topic-metadata">

**Author:** [@mhyousefi](https://discuss.elastic.co/u/mhyousefi)\
**Replies:** 8\
**Last updated:** [August 17, 2018, 7:32pm UTC](https://discuss.elastic.co/t/filebeat-does-not-send-logs-to-logstash/144465 "2018-08-17T19:32:14Z")

</div>

So here's the big picture: my objective is to index large amounts of (.txt) data using the ELK stack + filebeat. Basically, my problem is that filebeat seems to be unable to send logs to logstash. My guess is, some dock…

---

## [JSON file parsing](https://discuss.elastic.co/t/json-file-parsing/94861)

<div class="topic-metadata">

**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\
**Replies:** 6\
**Last updated:** [August 11, 2017, 5:57am UTC](https://discuss.elastic.co/t/json-file-parsing/94861 "2017-08-11T05:57:31Z")

</div>

I have a JSON file from Netscope REST API that I would like to bring into Elastic. I see outout when I use the stdout plugin with rubydebug but when I use elastic output I am getting one entry that really isn't parsed. …

---

## [Elastic Stack 7.4.0 security update](https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [October 1, 2019, 3:03pm UTC](https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831 "2019-10-01T15:03:11Z")

</div>

Elastic Code local file disclosure flaw (ESA-2019-12) A local file disclosure flaw was found in Elastic Code. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local fi…

---

## [Vector Scoring](https://discuss.elastic.co/t/vector-scoring/85227)

<div class="topic-metadata">

**Author:** [@lior-k](https://discuss.elastic.co/u/lior-k)\
**Replies:** 5\
**Last updated:** [May 21, 2017, 6:14pm UTC](https://discuss.elastic.co/t/vector-scoring/85227 "2017-05-21T18:14:18Z")

</div>

Hi guys, I want to run K-Nearest-Nighbors on feature-vectors stored at ES. I wrote a plugin based on this plugin: https://github.com/MLnick/elasticsearch-vector-scoring I'm seeking to improve the query performance. righ…

---

## [Logstash::Event and Ruby code for dynamic tags with Logstash 2.3.4](https://discuss.elastic.co/t/logstash-event-and-ruby-code-for-dynamic-tags-with-logstash-2-3-4/71458)

<div class="topic-metadata">

**Author:** [@LogBabel](https://discuss.elastic.co/u/LogBabel)\
**Replies:** 8\
**Last updated:** [January 24, 2017, 7:21pm UTC](https://discuss.elastic.co/t/logstash-event-and-ruby-code-for-dynamic-tags-with-logstash-2-3-4/71458 "2017-01-24T19:21:02Z")

</div>

Hi. I use Logstash 2.3.4 to read events from Kafka broker and have a problem with the filtering. I am trying to flatten the uniq\_log\_name1 object and turn uniq\_log\_name1 into a tag. My problem is not knowing what d…

---

## [Not able to search Upper case values](https://discuss.elastic.co/t/not-able-to-search-upper-case-values/23704)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 7\
**Last updated:** [May 28, 2015, 2:32pm UTC](https://discuss.elastic.co/t/not-able-to-search-upper-case-values/23704 "2015-05-28T14:32:35Z")

</div>

Hi Experts, In my log I have a field "Customer". It has all the values in capital latter like "VIKAS". Now when I fire query in Kibana like Customer:"vikas" or Customer:"VIK\*" I got nothing . It works only when I …

---

## [Problem when reindexing large index](https://discuss.elastic.co/t/problem-when-reindexing-large-index/117421)

<div class="topic-metadata">

**Author:** [@Juris\_Rats](https://discuss.elastic.co/u/Juris_Rats)\
**Replies:** 4\
**Last updated:** [January 29, 2018, 2:49pm UTC](https://discuss.elastic.co/t/problem-when-reindexing-large-index/117421 "2018-01-29T14:49:00Z")

</div>

Hi, I have a 200GB 190M document one shard index and want to reindex it to the 5 shard index. I created the new index and launched reindexing with batch size=2000. Refresh interval for the new index was set to 600s. The…

---

## [Taking array of matching values for one pattern out of Logstash grok](https://discuss.elastic.co/t/taking-array-of-matching-values-for-one-pattern-out-of-logstash-grok/119026)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 2:23pm UTC](https://discuss.elastic.co/t/taking-array-of-matching-values-for-one-pattern-out-of-logstash-grok/119026 "2018-02-09T14:23:28Z")

</div>

Hi all, I was wondering, is there any way to take an array of matching values out of Grok plugin. let's explain more with an example: I have a message like "message" = "whatever 0.0.0.0 whatever 1.1.1.1 something 2.2.2…

---

## [Cluster taking a long time to open closed indices](https://discuss.elastic.co/t/cluster-taking-a-long-time-to-open-closed-indices/169692)

<div class="topic-metadata">

**Author:** [@bpiper](https://discuss.elastic.co/u/bpiper)\
**Replies:** 5\
**Last updated:** [February 27, 2019, 3:01am UTC](https://discuss.elastic.co/t/cluster-taking-a-long-time-to-open-closed-indices/169692 "2019-02-27T03:01:33Z")

</div>

I'm running a 3 x m5.xlarge cluster (all nodes data & master) at version 6.4.2 on EC2, with 9000 baseline IOPS GP2 storage and essentially default config (apart from obligatory discovery config for EC2). We have a lot o…

---

## [Avg/Min/Max/Total Count per minute/hour/day](https://discuss.elastic.co/t/avg-min-max-total-count-per-minute-hour-day/35529)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 2\
**Last updated:** [November 27, 2015, 11:55am UTC](https://discuss.elastic.co/t/avg-min-max-total-count-per-minute-hour-day/35529 "2015-11-27T11:55:48Z")

</div>

Use Case: Real time application transactions logs metrics analysis & monitoring Environment: File Beat (1.0.0-rc2) --\> Log Stash (2.0.0)--\> Elastic Search (2.0.0)--\> Kibana (4.2.1) Description: In my use case each ES do…

---

## [Kibana integration with Active directory](https://discuss.elastic.co/t/kibana-integration-with-active-directory/162648)

<div class="topic-metadata">

**Author:** [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\
**Replies:** 4\
**Last updated:** [January 2, 2019, 12:58pm UTC](https://discuss.elastic.co/t/kibana-integration-with-active-directory/162648 "2019-01-02T12:58:51Z")

</div>

I need to integrate MS AD with Kibana only and not with other products. After integration i will map the AD group and/or users to available x-pack roles. Now, while going through the doc "https://www.elastic.co/guide/en…

---

## [Gracefully trigger re-election of master node](https://discuss.elastic.co/t/gracefully-trigger-re-election-of-master-node/79587)

<div class="topic-metadata">

**Author:** [@munnerz](https://discuss.elastic.co/u/munnerz)\
**Replies:** 6\
**Last updated:** [March 23, 2017, 5:20pm UTC](https://discuss.elastic.co/t/gracefully-trigger-re-election-of-master-node/79587 "2017-03-23T17:20:06Z")

</div>

I'm currently working on some automation for running Elasticsearch in a clustered fashion on top of Kubernetes, and would love to be able to manually trigger a master re-election (or alternatively, disallow the current m…

---

## [{"statusCode":403,"error":"Forbidden","message":"Forbidden"}to open kibana with AD authentication](https://discuss.elastic.co/t/statuscode-403-error-forbidden-message-forbidden-to-open-kibana-with-ad-authentication/220326)

<div class="topic-metadata">

**Author:** [@Jhansi](https://discuss.elastic.co/u/Jhansi)\
**Replies:** 5\
**Last updated:** [February 25, 2020, 1:02pm UTC](https://discuss.elastic.co/t/statuscode-403-error-forbidden-message-forbidden-to-open-kibana-with-ad-authentication/220326 "2020-02-25T13:02:28Z")

</div>

I am trying to login kibana by using Active Directory users.I am done with settings in elasticsearch.yml file and I am able to login kibana page by using Ad users but it shows the {"statusCode":403,"error":"Forbidden","…

---

## [Is there any other way of indexing data into elasticsearch other than json](https://discuss.elastic.co/t/is-there-any-other-way-of-indexing-data-into-elasticsearch-other-than-json/57905)

<div class="topic-metadata">

**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\
**Replies:** 4\
**Last updated:** [August 13, 2016, 12:01am UTC](https://discuss.elastic.co/t/is-there-any-other-way-of-indexing-data-into-elasticsearch-other-than-json/57905 "2016-08-13T00:01:26Z")

</div>

json format can be given by \_BULK API 1.To index into ES is there any other way or format(not json) which is read by elasticsearch 2.Also i dont require logstash as it can send csv format. Only elastic search and its …

---

## [Elastic Stack 7.14.0 Security Update](https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [August 3, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344 "2021-08-03T15:44:59Z")

</div>

Elasticsearch Document/Field Level Security issue (ESA-2021-18) A flaw was discovered in Elasticsearch where document and field level security was not applied to searchable snapshots. This could lead to an authenticated…

---

## [How to split URL in kibana](https://discuss.elastic.co/t/how-to-split-url-in-kibana/64873)

<div class="topic-metadata">

**Author:** [@florentmair](https://discuss.elastic.co/u/florentmair)\
**Replies:** 3\
**Last updated:** [December 13, 2016, 8:27pm UTC](https://discuss.elastic.co/t/how-to-split-url-in-kibana/64873 "2016-12-13T20:27:09Z")

</div>

Hello Is it possible to parse URL, keep the first argument and graph it. For example, i have some datas like this : site1/page1.html site1/page2.html site1/dir/index.html site2/index.php site3/index.php i want visua…

---

## [Curl: (7) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/154256)

<div class="topic-metadata">

**Author:** [@gentitope](https://discuss.elastic.co/u/gentitope)\
**Replies:** 5\
**Last updated:** [October 29, 2018, 1:28am UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/154256 "2018-10-29T01:28:31Z")

</div>

Someone help! $ curl -XGET http://localhost:9200/\_cluster/health?pretty curl: (7) Failed to connect to localhost port 9200: Connection refused Logs: \[2018-10-26T21:16:10,548\]\[DEBUG\]\[o.e.t.ThreadPool \] \[ops\_es…

---

## [What is the status of resiliency with the latest ES version?](https://discuss.elastic.co/t/what-is-the-status-of-resiliency-with-the-latest-es-version/116490)

<div class="topic-metadata">

**Author:** [@ddmichael](https://discuss.elastic.co/u/ddmichael)\
**Replies:** 1\
**Last updated:** [January 26, 2018, 1:42pm UTC](https://discuss.elastic.co/t/what-is-the-status-of-resiliency-with-the-latest-es-version/116490 "2018-01-26T13:42:49Z")

</div>

I found this, but didn't figure much out. How safe is it (in terms of data loss) to use ES 6.1.2 as primary data store?

---

## [Fleet-server: dial tcp x.x.x.x:8220: connect: connection refused](https://discuss.elastic.co/t/fleet-server-dial-tcp-x-x-x-x-connect-connection-refused/309768)

<div class="topic-metadata">

**Author:** [@thiavs](https://discuss.elastic.co/u/thiavs)\
**Replies:** 5\
**Last updated:** [July 19, 2022, 3:49pm UTC](https://discuss.elastic.co/t/fleet-server-dial-tcp-x-x-x-x-connect-connection-refused/309768 "2022-07-19T15:49:33Z")

</div>

Guys, how are you? Good afternoon!! I'm having a little problem here setting for TLS stack, Elastic-Agent, Fleet and Elasticsearch, I can't close the connection with the fleet, I also see that the port is not listed in k…

---

## [Export/Import Dashboards and Associated visualization's](https://discuss.elastic.co/t/export-import-dashboards-and-associated-visualizations/139351)

<div class="topic-metadata">

**Author:** [@karthik13](https://discuss.elastic.co/u/karthik13)\
**Replies:** 8\
**Last updated:** [July 12, 2018, 1:24pm UTC](https://discuss.elastic.co/t/export-import-dashboards-and-associated-visualizations/139351 "2018-07-12T13:24:09Z")

</div>

I am trying to write a python script that pulls all the dashboards, Saved searches, Index and Visualization's from the .kibana index and then store it as a JSON file in my local system. My question is what is the query t…

---

## [Logstash filter conditional if tags or](https://discuss.elastic.co/t/logstash-filter-conditional-if-tags-or/102479)

<div class="topic-metadata">

**Author:** [@ktella](https://discuss.elastic.co/u/ktella)\
**Replies:** 2\
**Last updated:** [October 3, 2017, 7:16pm UTC](https://discuss.elastic.co/t/logstash-filter-conditional-if-tags-or/102479 "2017-10-03T19:16:47Z")

</div>

Am i doing something wrong here ? Logs with tag dcsaghosts are the ones only processed by the filter and ignoring the logs with tag pcwsaghosts filter { if "dcsaghosts" in \[tags\] or "pcwsaghosts" in \[tags\] { if "dc-i…

---

## [How to remove certain Filebeat output fields](https://discuss.elastic.co/t/how-to-remove-certain-filebeat-output-fields/87825)

<div class="topic-metadata">

**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\
**Replies:** 2\
**Last updated:** [June 1, 2017, 5:11pm UTC](https://discuss.elastic.co/t/how-to-remove-certain-filebeat-output-fields/87825 "2017-06-01T17:11:16Z")

</div>

Hello, I started to play with filebeat, just set it up on my local box. I have a newbie question. I set the output to be local file right now, eventually i would like to set it to kafka. While I examined the output fr…

---

## [Is the missing value option officially supported in Date Range aggregations?](https://discuss.elastic.co/t/is-the-missing-value-option-officially-supported-in-date-range-aggregations/45855)

<div class="topic-metadata">

**Author:** [@MattQuinn4](https://discuss.elastic.co/u/MattQuinn4)\
**Replies:** 7\
**Last updated:** [April 7, 2016, 3:53pm UTC](https://discuss.elastic.co/t/is-the-missing-value-option-officially-supported-in-date-range-aggregations/45855 "2016-04-07T15:53:42Z")

</div>

Terms and Histogram aggregations support a missing value option, which will default any missing or null values to a specified value. But the documentation does not mention this option for Date Range aggregations. It l…

---

## [How can Watchers be tested?](https://discuss.elastic.co/t/how-can-watchers-be-tested/65384)

<div class="topic-metadata">

**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\
**Replies:** 6\
**Last updated:** [November 18, 2016, 4:21pm UTC](https://discuss.elastic.co/t/how-can-watchers-be-tested/65384 "2016-11-18T16:21:26Z")

</div>

Hi, We use a large number of watchers to monitor the health of our VMs and services (RAM usage, failed services, etc.). Unfortunately, it's extremely prone to false-negatives; we often have problems that are ongoing bu…

---

## [Not all primary shards of \[.geoip\_databases\] index are active](https://discuss.elastic.co/t/not-all-primary-shards-of-geoip-databases-index-are-active/324401)

<div class="topic-metadata">

**Author:** [@LiuJintao](https://discuss.elastic.co/u/LiuJintao)\
**Replies:** 4\
**Last updated:** [February 3, 2023, 8:51am UTC](https://discuss.elastic.co/t/not-all-primary-shards-of-geoip-databases-index-are-active/324401 "2023-02-03T08:51:36Z")

</div>

When I start elasticsearch cluster with a single node,it throw an error: \[2023-02-01T15:34:09,249\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node1\] exception during geoip databases updateorg.elasticsearch.ElasticsearchExceptio…

---

## [Delete from index](https://discuss.elastic.co/t/delete-from-index/25543)

<div class="topic-metadata">

**Author:** [@israel](https://discuss.elastic.co/u/israel)\
**Replies:** 8\
**Last updated:** [June 19, 2017, 6:24pm UTC](https://discuss.elastic.co/t/delete-from-index/25543 "2017-06-19T18:24:42Z")

</div>

Hi, How can I issue delete operations from RDD? Can I create a Connector instance and use it ? Thanks, Israel

---

## [Sending to data to Elasticsearch using logstash?](https://discuss.elastic.co/t/sending-to-data-to-elasticsearch-using-logstash/76354)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 6\
**Last updated:** [February 27, 2017, 7:07am UTC](https://discuss.elastic.co/t/sending-to-data-to-elasticsearch-using-logstash/76354 "2017-02-27T07:07:22Z")

</div>

Hi ES 2.4.1 Logstash 2.4.0 I am sending data to elasticsearch from local to create a index "pica".I used the below conf file. input { file { path =\> "C:\\Output\\Receive.txt" start\_position =\> "be…

---

## [What are Kibana Index and Kibana Task Manager?](https://discuss.elastic.co/t/what-are-kibana-index-and-kibana-task-manager/208107)

<div class="topic-metadata">

**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\
**Replies:** 4\
**Last updated:** [November 29, 2019, 2:13pm UTC](https://discuss.elastic.co/t/what-are-kibana-index-and-kibana-task-manager/208107 "2019-11-29T14:13:58Z")

</div>

I've been playing around with the new Kibana and Elasticsearch 7. I spun each up and noticed that kibana added two new indices, .kibana\_1 and .kibana\_task\_manager\_1. What has happened to the old .kibana index, and I can'…

---

## [How to Change Date Format in Logstash](https://discuss.elastic.co/t/how-to-change-date-format-in-logstash/115603)

<div class="topic-metadata">

**Author:** [@Saman.KH](https://discuss.elastic.co/u/Saman.KH)\
**Replies:** 7\
**Last updated:** [January 19, 2018, 7:48am UTC](https://discuss.elastic.co/t/how-to-change-date-format-in-logstash/115603 "2018-01-19T07:48:13Z")

</div>

I use ELK 6.1.1 and File beat to send some applications log files to logstash. Logstash automatically, try to changing some of my fields type to Date and this change is not suitable for me. I need just numbers in date…

---

## [Can beats be embedded in Android?](https://discuss.elastic.co/t/can-beats-be-embedded-in-android/76146)

<div class="topic-metadata">

**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\
**Replies:** 8\
**Last updated:** [March 13, 2017, 1:41am UTC](https://discuss.elastic.co/t/can-beats-be-embedded-in-android/76146 "2017-03-13T01:41:55Z")

</div>

Hi, Thank you for the amazing works! My goal is to send GPS data from android app to elasticsearch. I made a collecting server which is getting GPS data from android using socket communication and send it to ES using…

---

## [Multiple dashboards in Kibana](https://discuss.elastic.co/t/multiple-dashboards-in-kibana/49173)

<div class="topic-metadata">

**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\
**Replies:** 6\
**Last updated:** [May 4, 2016, 1:54pm UTC](https://discuss.elastic.co/t/multiple-dashboards-in-kibana/49173 "2016-05-04T13:54:23Z")

</div>

Hello All. Is it possible to create multiple dashboards in Kibana? How to do it? Tnx in advance Vadim

---

## [Percentage of matched terms in Elasticsearch](https://discuss.elastic.co/t/percentage-of-matched-terms-in-elasticsearch/56342)

<div class="topic-metadata">

**Author:** [@sau.sharma](https://discuss.elastic.co/u/sau.sharma)\
**Replies:** 0\
**Last updated:** [July 25, 2016, 9:45pm UTC](https://discuss.elastic.co/t/percentage-of-matched-terms-in-elasticsearch/56342 "2016-07-25T21:45:22Z")

</div>

I am using elasticsearch to find similar documents. Below is the query I am using: { "query": { "more\_like\_this":{ "like": { "\_index": "docs", "\_type": "pdfs", …

---

## [Kibana JSON input to calculate the percentage of two fields and display in metric visualisatio](https://discuss.elastic.co/t/kibana-json-input-to-calculate-the-percentage-of-two-fields-and-display-in-metric-visualisatio/160136)

<div class="topic-metadata">

**Author:** [@raghav1107](https://discuss.elastic.co/u/raghav1107)\
**Replies:** 3\
**Last updated:** [December 14, 2018, 12:07am UTC](https://discuss.elastic.co/t/kibana-json-input-to-calculate-the-percentage-of-two-fields-and-display-in-metric-visualisatio/160136 "2018-12-14T00:07:56Z")

</div>

Hi, I am using the below code in the json input to calculate the overall percentage of two fields and display in metric visualisation. But i am getting empty value in the metric display. Here i want to calculate the su…

[Previous page](https://discuss.elastic.co/top.md?page=366&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=368&per_page=50&period=all)
