# Top **URL:** https://discuss.elastic.co/top.md?page=388&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 389 --- ## [Merging multi search from 2 elasticsearch indexes](https://discuss.elastic.co/t/merging-multi-search-from-2-elasticsearch-indexes/10168)
**Author:** [@jagdeep](https://discuss.elastic.co/u/jagdeep)\ **Replies:** 3\ **Last updated:** [December 27, 2012, 8:30am UTC](https://discuss.elastic.co/t/merging-multi-search-from-2-elasticsearch-indexes/10168 "2012-12-27T08:30:37Z")
Hi, I have been using ES for various scenarios and use cases, some of these even include text mining. In all these scenarios there is one or the other need for \*data join condition or merging response\* requirement… --- ## [Quick Count feature](https://discuss.elastic.co/t/quick-count-feature/27423)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 5\ **Last updated:** [March 14, 2016, 10:25am UTC](https://discuss.elastic.co/t/quick-count-feature/27423 "2016-03-14T10:25:43Z")
In the quick count feature of kibana, it shows you stats based on buckets on a field. Usually it is limited to 500 or whatever the system is configured to use. If the search returned 1 million records, it is only showing… --- ## [Pre release v9 UX Feedback](https://discuss.elastic.co/t/pre-release-v9-ux-feedback/374970)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [February 24, 2025, 10:25pm UTC](https://discuss.elastic.co/t/pre-release-v9-ux-feedback/374970 "2025-02-24T22:25:41Z")
I would like to preface that I am big supporter of Elastic, I am just providing constructive criticism. So, I was able to explore a bit with the pre-release. I actually being waiting for v9 after hearing how much improv… --- ## [Memory confusion in Ubuntu 16.04](https://discuss.elastic.co/t/memory-confusion-in-ubuntu-16-04/50961)
**Author:** [@maziyar](https://discuss.elastic.co/u/maziyar)\ **Replies:** 3\ **Last updated:** [May 26, 2016, 9:43am UTC](https://discuss.elastic.co/t/memory-confusion-in-ubuntu-16-04/50961 "2016-05-26T09:43:14Z")
Hello, I am upgrading my Elasticsearch cluster with 4 nodes from 14.04 (ES 2.3.2) to Ubuntu 16.04 (ES 2.3.3). I upgraded the ES first to the latest 2.3.3 on Ubuntu 14.04 to see what happens and everything is green and … --- ## [Grok an IP address and username](https://discuss.elastic.co/t/grok-an-ip-address-and-username/194325)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [August 8, 2019, 2:39am UTC](https://discuss.elastic.co/t/grok-an-ip-address-and-username/194325 "2019-08-08T02:39:01Z")
Hi, I have the following text below that I'm trying to parse just the IP and username. I've tried adding all the text prior to the IP but still nothing. Even if I just put 1.1.1.1 into the Grok Debugger and %{IP} as the … --- ## [Add\_kubernetes\_metadata should work in "/var/log/containers"](https://discuss.elastic.co/t/add-kubernetes-metadata-should-work-in-var-log-containers/97945)
**Author:** [@Sven\_Woltmann](https://discuss.elastic.co/u/Sven_Woltmann)\ **Replies:** 7\ **Last updated:** [August 25, 2017, 8:31am UTC](https://discuss.elastic.co/t/add-kubernetes-metadata-should-work-in-var-log-containers/97945 "2017-08-25T08:31:44Z")
I'm following up on this topic: The "add\_kubernetes\_metadata" processor works only if logs are read from /var/lib/docker/containers/\*/\*.log, it doesn't work with logs from /var/log/containers/\*.log. This is caused by … --- ## [Create mapping for nested json](https://discuss.elastic.co/t/create-mapping-for-nested-json/23054)
**Author:** [@secsubs](https://discuss.elastic.co/u/secsubs)\ **Replies:** 6\ **Last updated:** [April 8, 2015, 8:16pm UTC](https://discuss.elastic.co/t/create-mapping-for-nested-json/23054 "2015-04-08T20:16:22Z")
Hi, Noob at ElasticSearch, I am trying to push some nested json to Elasticsearch and have the nested objects parsed out as facets. If I use dynamic mapping then elasticsearch does not seem to parse out the interna… --- ## [Kibana 4.1 Field Formatting ,how to Replace value with Actual Value at Runtime](https://discuss.elastic.co/t/kibana-4-1-field-formatting-how-to-replace-value-with-actual-value-at-runtime/26672)
**Author:** [@Vikash\_Singh](https://discuss.elastic.co/u/Vikash_Singh)\ **Replies:** 7\ **Last updated:** [September 10, 2015, 1:56pm UTC](https://discuss.elastic.co/t/kibana-4-1-field-formatting-how-to-replace-value-with-actual-value-at-runtime/26672 "2015-09-10T13:56:11Z")
Hi, I am Trying to use new Features of Kibana 4.1 Field Formating I just Edited the One Of Field called applicant\_name whose value is "vikash" ,and gave Type As Link,Provide URL As http://localhost:9012/getid?id={{… --- ## [Can't install Logstash on Ubuntu](https://discuss.elastic.co/t/cant-install-logstash-on-ubuntu/73294)
**Author:** [@darthbinks911](https://discuss.elastic.co/u/darthbinks911)\ **Replies:** 8\ **Last updated:** [January 31, 2017, 5:02pm UTC](https://discuss.elastic.co/t/cant-install-logstash-on-ubuntu/73294 "2017-01-31T17:02:03Z")
I've followed all the steps on the installation guide for Logstash but I keep getting this error: Setting up nginx-core (1.10.0-0ubuntu0.16.04.4) ... Job for nginx.service failed because the control process exited with… --- ## [Logstash Pipeline Main Started, yet no output](https://discuss.elastic.co/t/logstash-pipeline-main-started-yet-no-output/55375)
**Author:** [@Rohit\_Shukla](https://discuss.elastic.co/u/Rohit_Shukla)\ **Replies:** 4\ **Last updated:** [July 13, 2016, 9:09am UTC](https://discuss.elastic.co/t/logstash-pipeline-main-started-yet-no-output/55375 "2016-07-13T09:09:33Z")
Hi, Yesterday I was able to read the file sent it to Elasticsearch and view it in Kibana using below config: input { file { path =\> "C:/ELK/logstash/bin/data/TestSysData" start\_position =\> beginni… --- ## [Generate Kafka Topic dynamically with Modules \[Filebeat 7.5\]](https://discuss.elastic.co/t/generate-kafka-topic-dynamically-with-modules-filebeat-7-5/230126)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 5:09am UTC](https://discuss.elastic.co/t/generate-kafka-topic-dynamically-with-modules-filebeat-7-5/230126 "2020-04-29T05:09:05Z")
Hi, everyone I use Filebeat in order to send all my data to Apache Kafka. Moreover, I use parameter fields in order to generate Kafka Topic dynamically. Here you are an example: filebeat.inputs: - type: log paths: … --- ## [ES 2.1 : High bulk.rejected count. Default Bulk Queue Size](https://discuss.elastic.co/t/es-2-1-high-bulk-rejected-count-default-bulk-queue-size/40160)
**Author:** [@dparkar](https://discuss.elastic.co/u/dparkar)\ **Replies:** 7\ **Last updated:** [February 2, 2016, 2:25am UTC](https://discuss.elastic.co/t/es-2-1-high-bulk-rejected-count-default-bulk-queue-size/40160 "2016-02-02T02:25:08Z")
What is the default bulk queue size in ES 2.1 ? As per the documentation (https://www.elastic.co/guide/en/elasticsearch/reference/2.1/modules-threadpool.html) , it is suppose to be unbounded (-1). But when I use the cat … --- ## [Search on Multiple Indices](https://discuss.elastic.co/t/search-on-multiple-indices/307105)
**Author:** [@QuanMinhTran](https://discuss.elastic.co/u/QuanMinhTran)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:31am UTC](https://discuss.elastic.co/t/search-on-multiple-indices/307105 "2022-06-17T03:31:05Z")
I doing a query to search for multiple indices on Elasticsearch. The problem here is the priority of the result doesn't follow what I think. For example, I have 2 indices: index\_1 and index\_2 In Index\_1 have ~80 docs, … --- ## [My ES has some problems "Failed to execute fetch phase "](https://discuss.elastic.co/t/my-es-has-some-problems-failed-to-execute-fetch-phase/118960)
**Author:** [@hadogen](https://discuss.elastic.co/u/hadogen)\ **Replies:** 2\ **Last updated:** [February 8, 2018, 9:33am UTC](https://discuss.elastic.co/t/my-es-has-some-problems-failed-to-execute-fetch-phase/118960 "2018-02-08T09:33:03Z")
heIp me ! I have temporarily used two nodes to deploy elasticsearch-5.2.2 ， Now I have such a problem, I how to deal with this issue？ \[2018-02-08T09:23:09,357\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[node-110\] \[1957377… --- ## [Add Logstash host name to JSON formatted logstream](https://discuss.elastic.co/t/add-logstash-host-name-to-json-formatted-logstream/140567)
**Author:** [@Hrast](https://discuss.elastic.co/u/Hrast)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 9:31am UTC](https://discuss.elastic.co/t/add-logstash-host-name-to-json-formatted-logstream/140567 "2018-07-24T09:31:20Z")
I've got a pipeline: JSON formatted log file -\> Filebeat -\> Logstash -\> ES. I'd like to add the Logstash host name to the document before they are sent along to ES. I took a stab at it: default-pipeline.conf input { … --- ## [\--insecure flag in fleet/elastic agent deployment to solve X509: certificate signed by unknown authority](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 8\ **Last updated:** [July 16, 2024, 3:45pm UTC](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122 "2024-07-16T15:45:04Z")
hello everyone, hope you're doing well i really love the elk stack and its community, much love to you guys !! i have a question : while deploying fleet or elastic agents i get this error message x509 to solved it I f… --- ## [Elastic search 2.3.2 Java Transport Client NoNodeAvailableException](https://discuss.elastic.co/t/elastic-search-2-3-2-java-transport-client-nonodeavailableexception/49183)
**Author:** [@mephicide](https://discuss.elastic.co/u/mephicide)\ **Replies:** 4\ **Last updated:** [November 16, 2016, 9:05am UTC](https://discuss.elastic.co/t/elastic-search-2-3-2-java-transport-client-nonodeavailableexception/49183 "2016-11-16T09:05:51Z")
I looked through this discussion group for a long time to see if anyone had posted a similar issue, and fond a few, but both the problems and the solutions for those issues differed from what I am experiencing. I posted… --- ## [Watcher multiple queries/ query within range field](https://discuss.elastic.co/t/watcher-multiple-queries-query-within-range-field/66413)
**Author:** [@epe](https://discuss.elastic.co/u/epe)\ **Replies:** 7\ **Last updated:** [November 21, 2016, 2:55pm UTC](https://discuss.elastic.co/t/watcher-multiple-queries-query-within-range-field/66413 "2016-11-21T14:55:04Z")
Hi, I am trying to find a way to use two different queries (on different indices) in the same watcher. My case: I have two indices: index1 - contains the documents I need to count index2 - here I will store the… --- ## [Trouble sending Winlogbeat data to Logstash](https://discuss.elastic.co/t/trouble-sending-winlogbeat-data-to-logstash/50438)
**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\ **Replies:** 8\ **Last updated:** [May 20, 2016, 3:41pm UTC](https://discuss.elastic.co/t/trouble-sending-winlogbeat-data-to-logstash/50438 "2016-05-20T15:41:20Z")
After updating to Winlogbeat 5 Alpha 2 and finally updating the template on my ELK stack I have ran Winlogbeats using the ./winlogbeat -e -d "publish" command. Whilst I see a list of scrolling events I also see sync.… --- ## [java.lang.ClassNotFoundException: org.elasticsearch.common.transport.InetSocketTransportAddress](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-common-transport-inetsockettransportaddress/114074)
**Author:** [@b7e5eceffd46f9453deb](https://discuss.elastic.co/u/b7e5eceffd46f9453deb)\ **Replies:** 2\ **Last updated:** [January 29, 2018, 11:44am UTC](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-common-transport-inetsockettransportaddress/114074 "2018-01-29T11:44:40Z")
I learn es6.1 by https://www.elastic.co/guide/en/elasticsearch/client/java-api/6.1/java-docs-index.html but test case error. my build.gradle: dependencies { compile 'org.springframework.boot:spring-boot-starter-actuat… --- ## [Case Sensitive Query for Text fields in Elasticsearch](https://discuss.elastic.co/t/case-sensitive-query-for-text-fields-in-elasticsearch/264015)
**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\ **Replies:** 6\ **Last updated:** [February 21, 2021, 9:01pm UTC](https://discuss.elastic.co/t/case-sensitive-query-for-text-fields-in-elasticsearch/264015 "2021-02-21T21:01:44Z")
I have a requirement of case sensitive search where I need to search for particular word(case sensitive ) in message field which is of type text. I am using Java Rest High level client. My search word is ERROR , query… --- ## [Offline plugin installation?](https://discuss.elastic.co/t/offline-plugin-installation/29062)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 6\ **Last updated:** [January 5, 2016, 6:12am UTC](https://discuss.elastic.co/t/offline-plugin-installation/29062 "2016-01-05T06:12:33Z")
I have transferred the http\_poller.gem file to my non-internet-connected intranet machine but when I run plugin install /pathToPlugin it times out trying to connect to the rubygems site. I saw some mention of --local fla… --- ## [Issue Upgrading from 2.3.1 to 6.1.0](https://discuss.elastic.co/t/issue-upgrading-from-2-3-1-to-6-1-0/117063)
**Author:** [@Sam\_Schlaak](https://discuss.elastic.co/u/Sam_Schlaak)\ **Replies:** 6\ **Last updated:** [February 5, 2018, 12:23pm UTC](https://discuss.elastic.co/t/issue-upgrading-from-2-3-1-to-6-1-0/117063 "2018-02-05T12:23:50Z")
Hello. My application uses the Elasticsearch Java API to communicate with the cluster. Previously, when creating an index and assigning a mapping, it was done as follows: create: client.admin().indices().prepareCreate… --- ## [SQL Plugin - Last Input Value Tracking](https://discuss.elastic.co/t/sql-plugin-last-input-value-tracking/36264)
**Author:** [@inzanez](https://discuss.elastic.co/u/inzanez)\ **Replies:** 5\ **Last updated:** [December 3, 2015, 11:44am UTC](https://discuss.elastic.co/t/sql-plugin-last-input-value-tracking/36264 "2015-12-03T11:44:30Z")
Hi! I've been playing around with logstash and I'm fowarding syslog data to my ES cluster, which works great. Now I wanted to collect logdata that's stored in SQL databases as well, and found something about a SQL plug… --- ## [AWS ElasticSearch Service MetricBeats](https://discuss.elastic.co/t/aws-elasticsearch-service-metricbeats/227028)
**Author:** [@vennemp](https://discuss.elastic.co/u/vennemp)\ **Replies:** 6\ **Last updated:** [April 14, 2020, 4:44pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-service-metricbeats/227028 "2020-04-14T16:44:53Z")
I am trying to set up MetricBeats with AWS hosted ElasticSearch service. However, in the metricbeats.yml file it asks for a user name and password.. and there isn't a user name and password in AWS ElasticSearch/Kibana f… --- ## [Unknown key for a START\_OBJECT in \[runtime\_mappings\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-runtime-mappings/270317)
**Author:** [@plm](https://discuss.elastic.co/u/plm)\ **Replies:** 2\ **Last updated:** [April 16, 2021, 6:20pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-runtime-mappings/270317 "2021-04-16T18:20:05Z")
Hi, I am getting the following error: upload completely sent off: 426 out of 426 bytes \< HTTP/1.1 400 Bad Request \< content-type: application/json; charset=UTF-8 \< content-length: 374 \< { “error” : { “ro… --- ## [How to variables in log stash http output](https://discuss.elastic.co/t/how-to-variables-in-log-stash-http-output/71706)
**Author:** [@dineshangari](https://discuss.elastic.co/u/dineshangari)\ **Replies:** 7\ **Last updated:** [January 17, 2017, 3:57am UTC](https://discuss.elastic.co/t/how-to-variables-in-log-stash-http-output/71706 "2017-01-17T03:57:55Z")
I have configuration file where input as csv and output as http. I want to pass this csv columns as variable to http output. Please suggest me way how to do that. Thanks in Advance.... --- ## [ElasticSearch Index: Type defaults to long instead of float](https://discuss.elastic.co/t/elasticsearch-index-type-defaults-to-long-instead-of-float/221694)
**Author:** [@neumicha](https://discuss.elastic.co/u/neumicha)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-index-type-defaults-to-long-instead-of-float/221694 "2020-03-04T10:35:34Z")
Hi, I am absolutely new to ELK and don't get my problem solved by Google... I already figured out where the problem is. But some basic knowledge is missing to solve it... My problem: I can not filter for a float-Number… --- ## [Pod has unbound immediate PersistentVolumeClaims](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/274057)
**Author:** [@jaispirit](https://discuss.elastic.co/u/jaispirit)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 10:07am UTC](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/274057 "2021-05-28T10:07:45Z")
Hello, I'm trying to deploy ECK quickstart into my Cluster. Unfortunately I'm getting the message 'pod has unbound immediate PersistentVolumeClaims (repeated 2 times)'. Why doesn't the claim access the volume? … --- ## [How to disable auto index creation in Elasticsearch?](https://discuss.elastic.co/t/how-to-disable-auto-index-creation-in-elasticsearch/92)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 1\ **Last updated:** [March 6, 2017, 8:32am UTC](https://discuss.elastic.co/t/how-to-disable-auto-index-creation-in-elasticsearch/92 "2017-03-06T08:32:41Z")
Set this in your elasticsearch.yml configs for the cluster: action.auto\_create\_index: false That will prevent indices from being automatically created. --- ## [Logstash HeapDumpOnOutOfMemoryError](https://discuss.elastic.co/t/logstash-heapdumponoutofmemoryerror/76161)
**Author:** [@higee](https://discuss.elastic.co/u/higee)\ **Replies:** 8\ **Last updated:** [March 2, 2017, 8:37am UTC](https://discuss.elastic.co/t/logstash-heapdumponoutofmemoryerror/76161 "2017-03-02T08:37:14Z")
Hi. I'm using Logstash to extract data from Database and send data to Elasticsearch. Everything works fine; data is well processed and sent to Elasticsearch without loss. The problem, however, is burden on the server. … --- ## [Logstash service not starting ,it is in paused status](https://discuss.elastic.co/t/logstash-service-not-starting-it-is-in-paused-status/29581)
**Author:** [@Dilip\_Dwivedi](https://discuss.elastic.co/u/Dilip_Dwivedi)\ **Replies:** 5\ **Last updated:** [December 4, 2015, 4:46am UTC](https://discuss.elastic.co/t/logstash-service-not-starting-it-is-in-paused-status/29581 "2015-12-04T04:46:55Z")
logstash service is in paused status and when I am trying to restart or resume logstash service ,attached message pops up --- ## [Error running Spring Boot Application in IntelliJ IDEA after adding dependencies](https://discuss.elastic.co/t/error-running-spring-boot-application-in-intellij-idea-after-adding-dependencies/158574)
**Author:** [@Jordy\_Swinnen](https://discuss.elastic.co/u/Jordy_Swinnen)\ **Replies:** 6\ **Last updated:** [November 28, 2018, 2:38pm UTC](https://discuss.elastic.co/t/error-running-spring-boot-application-in-intellij-idea-after-adding-dependencies/158574 "2018-11-28T14:38:57Z")
I'm trying to index documents from a Spring Boot application to a local Elasticsearch Docker container using the these gradle dependencies. compile('org.elasticsearch:elasticsearch:6.5.1') compile('org.elasticsearch.cl… --- ## [Handle big result set?](https://discuss.elastic.co/t/handle-big-result-set/25010)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 6\ **Last updated:** [July 7, 2015, 9:13pm UTC](https://discuss.elastic.co/t/handle-big-result-set/25010 "2015-07-07T21:13:52Z")
Hello Elastic experts, Suppose a query matches a large volumes of records (saying a few million records), what is the best way to handle (I want to store the results on local disk) the results? Is there a way to stream… --- ## [Logstash + Get DateTime from filename](https://discuss.elastic.co/t/logstash-get-datetime-from-filename/49808)
**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\ **Replies:** 5\ **Last updated:** [June 8, 2016, 10:08pm UTC](https://discuss.elastic.co/t/logstash-get-datetime-from-filename/49808 "2016-06-08T22:08:39Z")
Hello All, I am facing a issue to fetch the DateTime from filename. Input File name : ServerInfo\_04022016 1204.csv Expected output to Fetch DateTime : 04/02/2016 12:04 input { file { path =\> "C:\\logstash-2.3.1\\CS… --- ## [Beats 5.6.4 security update](https://discuss.elastic.co/t/beats-5-6-4-security-update/106739)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 7:02pm UTC](https://discuss.elastic.co/t/beats-5-6-4-security-update/106739 "2017-11-07T19:02:16Z")
Packetbeat denial of service (ESA-2017-21) Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is … --- ## [Unable to reset the elastic and kibana user password](https://discuss.elastic.co/t/unable-to-reset-the-elastic-and-kibana-user-password/306464)
**Author:** [@manish6.rai](https://discuss.elastic.co/u/manish6.rai)\ **Replies:** 7\ **Last updated:** [June 14, 2022, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-reset-the-elastic-and-kibana-user-password/306464 "2022-06-14T13:41:14Z")
Hi Elastic Team, I am unable to reset the elastic and Kibana passwords. Please help getting below error. using command for changing the passwords:/usr/share/Elasticsearch/bin/Elasticsearch-reset-password -i -u elastic … --- ## [APM and AWS Elasticsearch](https://discuss.elastic.co/t/apm-and-aws-elasticsearch/131361)
**Author:** [@Tim\_Heizer](https://discuss.elastic.co/u/Tim_Heizer)\ **Replies:** 1\ **Last updated:** [May 14, 2018, 2:01pm UTC](https://discuss.elastic.co/t/apm-and-aws-elasticsearch/131361 "2018-05-14T14:01:19Z")
Has anyone setup an APM server to connect to AWS ES? Is it compatible? If so, help a newbie out with the output configuration? --- ## [Use multiple index in a chart](https://discuss.elastic.co/t/use-multiple-index-in-a-chart/44653)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 1:40pm UTC](https://discuss.elastic.co/t/use-multiple-index-in-a-chart/44653 "2016-03-17T13:40:19Z")
Hi How can I draw charts from multiple index ? Thanks --- ## [FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index: Unable to complete the OUTDATED\_DOCUMENTS\_SEARCH\_OPEN\_PIT step after 15 attempts, terminating](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-unable-to-complete-the-outdated-documents-search-open-pit-step-after-15-attempts-terminating/292210)
**Author:** [@user23](https://discuss.elastic.co/u/user23)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 5:17am UTC](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-unable-to-complete-the-outdated-documents-search-open-pit-step-after-15-attempts-terminating/292210 "2021-12-21T05:17:39Z")
HI!HOW CAN I SOLVE THIS PROBLEM? WHEN I OPEN KIBANA 7.15 VERSION FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index: Unable to complete the OUTDATED\_DOCUMENTS\_SEARCH\_OPEN\_PIT step after 15 … --- ## [Understanding off-heap usage](https://discuss.elastic.co/t/understanding-off-heap-usage/97176)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 5\ **Last updated:** [August 18, 2017, 2:21am UTC](https://discuss.elastic.co/t/understanding-off-heap-usage/97176 "2017-08-18T02:21:14Z")
After upgrading a cluster from 2.3 to 5.5, I’m noticing an increase in total memory. I don’t have enough data yet, but it also looks to grow (slowly) unbounded until OOM. I’ve read other accounts (not strictly elastics… --- ## [Geo point in logstash](https://discuss.elastic.co/t/geo-point-in-logstash/73851)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 8\ **Last updated:** [February 6, 2017, 9:52am UTC](https://discuss.elastic.co/t/geo-point-in-logstash/73851 "2017-02-06T09:52:53Z")
My input as CSV and output as elastic search. in my csv file having one column location which is holding value latitude and longitude information. for example-72.8799,32.46567(attitude,longitude) i am using below fil… --- ## [How do I determine the difference between two indices?](https://discuss.elastic.co/t/how-do-i-determine-the-difference-between-two-indices/131814)
**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 9:28am UTC](https://discuss.elastic.co/t/how-do-i-determine-the-difference-between-two-indices/131814 "2018-05-18T09:28:04Z")
I have two indices that should be identical, but have a slightly different document count. I'd like to determine which documents only exist in one of the indexes. What I initially tried failed and I'll get to that in a … --- ## [Create a cumulative graph in Kibana by using the sum of the document count](https://discuss.elastic.co/t/create-a-cumulative-graph-in-kibana-by-using-the-sum-of-the-document-count/31418)
**Author:** [@hougvw](https://discuss.elastic.co/u/hougvw)\ **Replies:** 2\ **Last updated:** [October 6, 2015, 3:49am UTC](https://discuss.elastic.co/t/create-a-cumulative-graph-in-kibana-by-using-the-sum-of-the-document-count/31418 "2015-10-06T03:49:01Z")
Hi, Is it possible to create a cumulative line graph using the document count that is returned for a search. This is already aggregated by date so I was wondering if you can just sum up the count somehow and then creat… --- ## [Windows filebeat SSL to Logstash](https://discuss.elastic.co/t/windows-filebeat-ssl-to-logstash/68557)
**Author:** [@dasteven86](https://discuss.elastic.co/u/dasteven86)\ **Replies:** 7\ **Last updated:** [December 14, 2016, 1:13pm UTC](https://discuss.elastic.co/t/windows-filebeat-ssl-to-logstash/68557 "2016-12-14T13:13:15Z")
hi i have a linux vm with theELK stack installed and a windows machine with the filebeat Agent running. everything runs great but it uses an unsecure connection no i wanted to secure the connection between those two m… --- ## [Start with filter or query](https://discuss.elastic.co/t/start-with-filter-or-query/117319)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 5\ **Last updated:** [March 15, 2018, 3:33pm UTC](https://discuss.elastic.co/t/start-with-filter-or-query/117319 "2018-03-15T15:33:33Z")
How do I perform a search in Kibana so that douments starting with a string match? I've done a ton of Googling and come up with nothing. I am searching a typical Apache log line in the request field. --- ## [After reindex, new index has same documents but data size is much less](https://discuss.elastic.co/t/after-reindex-new-index-has-same-documents-but-data-size-is-much-less/243068)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [July 31, 2020, 4:45am UTC](https://discuss.elastic.co/t/after-reindex-new-index-has-same-documents-but-data-size-is-much-less/243068 "2020-07-31T04:45:26Z")
As part of preparation for moving from Elasticsearch 6 to 7, I've reindexed an index which the Kibana Upgade Assistant flagged as "Index has more than one mapping type". The reindex completed without apparent error, the… --- ## [Filebeat harvester never stops running and doesn't detect file changes](https://discuss.elastic.co/t/filebeat-harvester-never-stops-running-and-doesnt-detect-file-changes/77069)
**Author:** [@colinmcintosh](https://discuss.elastic.co/u/colinmcintosh)\ **Replies:** 5\ **Last updated:** [March 11, 2017, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-harvester-never-stops-running-and-doesnt-detect-file-changes/77069 "2017-03-11T16:29:27Z")
We have beats running and watching a single log file that is updated a few times per second constantly. The log file is generated by the Python3.6 logging.handlers.WatchedFileHandler and is rotated by logrotate once it r… --- ## [Is export/import of Saved Objects broken?](https://discuss.elastic.co/t/is-export-import-of-saved-objects-broken/100958)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 7\ **Last updated:** [October 10, 2017, 4:46pm UTC](https://discuss.elastic.co/t/is-export-import-of-saved-objects-broken/100958 "2017-10-10T16:46:28Z")
Hi, I have Saved Searches, Visualizations, Dashboards created on older Elastic + Kibana version 5.5.0. I have brought up another setup with latest version 5.6.0. I want to export all the Saved Objects from 5.5.0 to 5.… --- ## [Alert to contain link to Kibana search results](https://discuss.elastic.co/t/alert-to-contain-link-to-kibana-search-results/57750)
**Author:** [@andrey81inmd](https://discuss.elastic.co/u/andrey81inmd)\ **Replies:** 3\ **Last updated:** [August 11, 2016, 3:08pm UTC](https://discuss.elastic.co/t/alert-to-contain-link-to-kibana-search-results/57750 "2016-08-11T15:08:24Z")
Hello, Is there an easy way to have a Watcher action (let's say webhook) that can generate a link to Kibana with the query matching the data that triggered the alert? The idea being, I want to send a notification of n… [Previous page](https://discuss.elastic.co/top.md?page=387&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=389&per_page=50&period=all)