# Top

**URL:** https://discuss.elastic.co/top.md?page=395&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 396

---

## [Multi match query boosting](https://discuss.elastic.co/t/multi-match-query-boosting/89258)

<div class="topic-metadata">

**Author:** [@Yur\_Gasparyan](https://discuss.elastic.co/u/Yur_Gasparyan)\
**Replies:** 2\
**Last updated:** [June 20, 2017, 9:01pm UTC](https://discuss.elastic.co/t/multi-match-query-boosting/89258 "2017-06-20T21:01:08Z")

</div>

Hi all . Today I am going to use elasticsearch as I have sql query converted to es query, but there is an error associated with boosting. So I can not create multi match query where I can boost a filed result. I am doin…

---

## [To find all the correlation id where response is not send back to the consumer](https://discuss.elastic.co/t/to-find-all-the-correlation-id-where-response-is-not-send-back-to-the-consumer/251896)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 5\
**Last updated:** [October 14, 2020, 10:12am UTC](https://discuss.elastic.co/t/to-find-all-the-correlation-id-where-response-is-not-send-back-to-the-consumer/251896 "2020-10-14T10:12:55Z")

</div>

Hi All, In our logs; For a transaction , two legs will get generated "Consumer to backend" and "Backend to Consumer" .However in case of failure , only one leg "Consumer to backend" will get generated. Unique correlati…

---

## [S3 Input not working](https://discuss.elastic.co/t/s3-input-not-working/58267)

<div class="topic-metadata">

**Author:** [@Zorlin](https://discuss.elastic.co/u/Zorlin)\
**Replies:** 5\
**Last updated:** [August 8, 2018, 7:09pm UTC](https://discuss.elastic.co/t/s3-input-not-working/58267 "2018-08-08T19:09:39Z")

</div>

Hey there, We have a Logstash setup processing a bunch of different inputs successfully. Unfortunately, the S3 input is not working. Here is the current config I'm working with: input { s3 { bucket =\> "prod…

---

## [How can i filter on my suggest list](https://discuss.elastic.co/t/how-can-i-filter-on-my-suggest-list/140989)

<div class="topic-metadata">

**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\
**Replies:** 1\
**Last updated:** [July 22, 2018, 10:49am UTC](https://discuss.elastic.co/t/how-can-i-filter-on-my-suggest-list/140989 "2018-07-22T10:49:40Z")

</div>

I have read quite a few articles saying that you can not combine queries with suggesters. https://github.com/elastic/elasticsearch/issues/19143 is this still true? (old) If so, what would be the best way to filter on t…

---

## [Drill-down to different dashboard](https://discuss.elastic.co/t/drill-down-to-different-dashboard/90886)

<div class="topic-metadata">

**Author:** [@xwang1](https://discuss.elastic.co/u/xwang1)\
**Replies:** 3\
**Last updated:** [June 27, 2017, 1:40am UTC](https://discuss.elastic.co/t/drill-down-to-different-dashboard/90886 "2017-06-27T01:40:56Z")

</div>

I know Splunk has the feature that by clicking on a part of a visualization you can "drill-down" or redirect to a different dashboard which can contain more detailed information about that specific part of the visualizat…

---

## [Kibana error: Unable to retrieve version information from Elasticsearch nodes. socket hang up](https://discuss.elastic.co/t/kibana-error-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/318421)

<div class="topic-metadata">

**Author:** [@grigoryevandrey](https://discuss.elastic.co/u/grigoryevandrey)\
**Replies:** 3\
**Last updated:** [November 15, 2022, 6:07am UTC](https://discuss.elastic.co/t/kibana-error-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/318421 "2022-11-15T06:07:31Z")

</div>

I am getting this error inside the kibana container, therefore ingress returns 503 error and container is never ready. When i am doing curl to elasticsearch from inside the kibana container, it successfully returns a re…

---

## [How to make terms aggregation case insensitive?](https://discuss.elastic.co/t/how-to-make-terms-aggregation-case-insensitive/100746)

<div class="topic-metadata">

**Author:** [@patrickian](https://discuss.elastic.co/u/patrickian)\
**Replies:** 1\
**Last updated:** [September 18, 2017, 5:05am UTC](https://discuss.elastic.co/t/how-to-make-terms-aggregation-case-insensitive/100746 "2017-09-18T05:05:14Z")

</div>

I have a field called user\_name. Examples of entries are "user", "User" and "someuser". When I aggrrgate by terms, the result treats "user" and "User" as 2 different results. Rightly so, for obvious reasons. However, is …

---

## [File Beat performance - How to check if file beat is keeping up while reading files](https://discuss.elastic.co/t/file-beat-performance-how-to-check-if-file-beat-is-keeping-up-while-reading-files/102899)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 6\
**Last updated:** [October 9, 2017, 12:24pm UTC](https://discuss.elastic.co/t/file-beat-performance-how-to-check-if-file-beat-is-keeping-up-while-reading-files/102899 "2017-10-09T12:24:18Z")

</div>

We have an ELK 5.5.2 environment where we have 3 master enable nodes, 3 coordinating nodes and 8 data nodes. The servers in this environment have 8 cores, 64gb ram and 200gb of storage on the data nodes. We are sendin…

---

## [Image and document upload/download in Elasticsearch](https://discuss.elastic.co/t/image-and-document-upload-download-in-elasticsearch/110222)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 12:26am UTC](https://discuss.elastic.co/t/image-and-document-upload-download-in-elasticsearch/110222 "2017-12-05T00:26:06Z")

</div>

I'm looking to build an app around Elasticsearch with image and file upload/download. So a user uploads an image or document (PDF, Word, etc.), the image gets stored, and retrieved later by users and admin. It looks like…

---

## [Line chart with date histogram, split series and filter](https://discuss.elastic.co/t/line-chart-with-date-histogram-split-series-and-filter/221804)

<div class="topic-metadata">

**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 12:20am UTC](https://discuss.elastic.co/t/line-chart-with-date-histogram-split-series-and-filter/221804 "2020-03-05T00:20:50Z")

</div>

Hi, It seems clear to me that I'm obviously misunderstanding how filters are used in Kibana's visualizations and/or am using them incorrectly. Brief background. Each document contains a unique identifier and let's say …

---

## [Kibana URL is not working in browser](https://discuss.elastic.co/t/kibana-url-is-not-working-in-browser/133046)

<div class="topic-metadata">

**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\
**Replies:** 2\
**Last updated:** [May 24, 2018, 8:00am UTC](https://discuss.elastic.co/t/kibana-url-is-not-working-in-browser/133046 "2018-05-24T08:00:16Z")

</div>

I have kibana-5.0.1-1.x86\_64 installed in Redhat server. The services are up and running and i could see lsof -i :5601 has process but it is not working in browser. The configuration are copied below. server.port: 560…

---

## [Visualize: Request Timeout after 30000ms](https://discuss.elastic.co/t/visualize-request-timeout-after-30000ms/95976)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 2\
**Last updated:** [August 7, 2017, 2:51am UTC](https://discuss.elastic.co/t/visualize-request-timeout-after-30000ms/95976 "2017-08-07T02:51:51Z")

</div>

ELK version: 5.5.1 How to modify 30000ms to a larger value?

---

## [First time queries (not filters) to Elasticsearch takes lot of time](https://discuss.elastic.co/t/first-time-queries-not-filters-to-elasticsearch-takes-lot-of-time/69658)

<div class="topic-metadata">

**Author:** [@Abhilash\_Bolla](https://discuss.elastic.co/u/Abhilash_Bolla)\
**Replies:** 6\
**Last updated:** [January 4, 2017, 4:00am UTC](https://discuss.elastic.co/t/first-time-queries-not-filters-to-elasticsearch-takes-lot-of-time/69658 "2017-01-04T04:00:12Z")

</div>

First time elasticsearch "query" time is too high on a collection with 25 million documents. Our end users are empowered with free text search and ability to search by synonyms. The problem basically is "first time query…

---

## [\[bug\] filebeat can't send data to kafka cluster when one kafka can't connect because of network](https://discuss.elastic.co/t/bug-filebeat-cant-send-data-to-kafka-cluster-when-one-kafka-cant-connect-because-of-network/56184)

<div class="topic-metadata">

**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\
**Replies:** 5\
**Last updated:** [August 19, 2016, 3:57pm UTC](https://discuss.elastic.co/t/bug-filebeat-cant-send-data-to-kafka-cluster-when-one-kafka-cant-connect-because-of-network/56184 "2016-08-19T15:57:17Z")

</div>

Filebeat version: 5.0.0-alpha4 Operating System: debian 8 I use filebeat get log from computer A, and then send to a kafka cluster group by two kafka run at two computers named B and C. Today, I test the high avaliabi…

---

## [Filebeat logs not making it to Logstash](https://discuss.elastic.co/t/filebeat-logs-not-making-it-to-logstash/252941)

<div class="topic-metadata">

**Author:** [@allieg](https://discuss.elastic.co/u/allieg)\
**Replies:** 4\
**Last updated:** [November 13, 2020, 1:43pm UTC](https://discuss.elastic.co/t/filebeat-logs-not-making-it-to-logstash/252941 "2020-11-13T13:43:37Z")

</div>

Hi, for some reason remote server that has Filebeat setup on it is not being able to successfully send logs to my elk server that has logstash running on it. I ran filebeat -e -d "publish,logstash and got the following w…

---

## [Java.lang.OutOfMemoryError: GC overhead limit exceeded](https://discuss.elastic.co/t/java-lang-outofmemoryerror-gc-overhead-limit-exceeded/14044)

<div class="topic-metadata">

**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\
**Replies:** 4\
**Last updated:** [October 22, 2013, 5:49am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-gc-overhead-limit-exceeded/14044 "2013-10-22T05:49:54Z")

</div>

Hi All, I am getting below error on indexing records into ES cluster. Exception in thread "elasticsearch\[Ghost\]\[transport\_client\_worker\]\[T#8\]{New I/O worker #93}" java.lang.OutOfMemoryError: GC overhead limit exce…

---

## [Action \[indices:admin/mappings/get\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-mappings-get-is-unauthorized-for-user/152857)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 4:04pm UTC](https://discuss.elastic.co/t/action-indices-admin-mappings-get-is-unauthorized-for-user/152857 "2018-10-17T16:04:18Z")

</div>

i created a user with only read/write permission to .kibana and someindex-\* but i get that error when connecting grafana, what permissions are required for user to get mappings?

---

## [In Kibana, Is there any way to hide "Add Filter" in external Embedded iframe, so that user could not modify the data, Please help out in this. or can we hide through css in source code, if so, where we can](https://discuss.elastic.co/t/in-kibana-is-there-any-way-to-hide-add-filter-in-external-embedded-iframe-so-that-user-could-not-modify-the-data-please-help-out-in-this-or-can-we-hide-through-css-in-source-code-if-so-where-we-can/239245)

<div class="topic-metadata">

**Author:** [@Sravya\_Peddi](https://discuss.elastic.co/u/Sravya_Peddi)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 11:28am UTC](https://discuss.elastic.co/t/in-kibana-is-there-any-way-to-hide-add-filter-in-external-embedded-iframe-so-that-user-could-not-modify-the-data-please-help-out-in-this-or-can-we-hide-through-css-in-source-code-if-so-where-we-can/239245 "2020-07-01T11:28:30Z")

</div>

Continuing the discussion from Embed dashboard or visualization on an external web page with specified filters:

---

## [Elasticsearch input plugin not working over ssl](https://discuss.elastic.co/t/elasticsearch-input-plugin-not-working-over-ssl/59051)

<div class="topic-metadata">

**Author:** [@marke72](https://discuss.elastic.co/u/marke72)\
**Replies:** 2\
**Last updated:** [September 9, 2016, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-not-working-over-ssl/59051 "2016-09-09T14:34:15Z")

</div>

So I have Logstash outputting to Elasticsearch through SSL. It's working great. Haven't had an issue with that. I am currently trying to redo an index (reindex) using Logstash where you use both the elasticsearch input p…

---

## [How to set up website crawl with ElasticSearch](https://discuss.elastic.co/t/how-to-set-up-website-crawl-with-elasticsearch/72507)

<div class="topic-metadata">

**Author:** [@Arul\_Krishnamoorthy](https://discuss.elastic.co/u/Arul_Krishnamoorthy)\
**Replies:** 6\
**Last updated:** [January 24, 2017, 9:43am UTC](https://discuss.elastic.co/t/how-to-set-up-website-crawl-with-elasticsearch/72507 "2017-01-24T09:43:45Z")

</div>

My understanding is that even with latest version of ElasticSearch (5.1.2) there is no build-in functionality for crawling a website. What are the options and any recommendations among preferred options.

---

## [Elasticsearch.url does not work as an environment variable inside docker-compose](https://discuss.elastic.co/t/elasticsearch-url-does-not-work-as-an-environment-variable-inside-docker-compose/138209)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 3\
**Last updated:** [July 3, 2018, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-url-does-not-work-as-an-environment-variable-inside-docker-compose/138209 "2018-07-03T17:15:42Z")

</div>

I am running Kibana 6.3.0 inside docker. However the elasticsearch.url value specified as an environment variable is not picked up when it is specified in docker-compose.yml. In this case Kibana tries to connect to loca…

---

## [Change default \[max\_docvalue\_fields\_search\] value](https://discuss.elastic.co/t/change-default-max-docvalue-fields-search-value/230525)

<div class="topic-metadata">

**Author:** [@WAFA\_Mardiney](https://discuss.elastic.co/u/WAFA_Mardiney)\
**Replies:** 1\
**Last updated:** [May 4, 2020, 1:34pm UTC](https://discuss.elastic.co/t/change-default-max-docvalue-fields-search-value/230525 "2020-05-04T13:34:39Z")

</div>

I'm using kibana and was encountering an issue that was solved by setting the \[max\_docvalue\_fields\_search\] setting to a greater value like this: PUT /index\_name\_log-\*/\_settings { "index.max\_docvalue\_fields\_search" : "1…

---

## [Ingest attachment Plugin exception :](https://discuss.elastic.co/t/ingest-attachment-plugin-exception/69167)

<div class="topic-metadata">

**Author:** [@Ajay1](https://discuss.elastic.co/u/Ajay1)\
**Replies:** 7\
**Last updated:** [December 22, 2016, 10:42am UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-exception/69167 "2016-12-22T10:42:25Z")

</div>

I have installed Ingest attachment plugin to push the csv data to Kibana monitoring. However i got some errors while creating pipeline PUT \_ingest/pipeline/attachment { "description": "Reports", "processors": \[ { …

---

## [Best Beat for Apache Tomcat Log with dashboard in Kibana](https://discuss.elastic.co/t/best-beat-for-apache-tomcat-log-with-dashboard-in-kibana/138527)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 5\
**Last updated:** [July 4, 2018, 2:19pm UTC](https://discuss.elastic.co/t/best-beat-for-apache-tomcat-log-with-dashboard-in-kibana/138527 "2018-07-04T14:19:02Z")

</div>

Hi, Which is the best beat for configuring the apache tomcat logs to get parsed using kibana . I have tried with filebeat, metricbeat(jolokia - but no dashboards :frowning: ) but nothing was successfull. Request to ad…

---

## [Elasticsearch stops working, says failed to update shard information](https://discuss.elastic.co/t/elasticsearch-stops-working-says-failed-to-update-shard-information/188617)

<div class="topic-metadata">

**Author:** [@subhas](https://discuss.elastic.co/u/subhas)\
**Replies:** 4\
**Last updated:** [July 24, 2019, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-working-says-failed-to-update-shard-information/188617 "2019-07-24T12:27:27Z")

</div>

I am running elasticsearch 6.8.1 on centos 7. Out of a sudden, elasticsearch service stopped working giving the following error in the elasticsearch.log file. I restarted the service then it is working normally. But how …

---

## [How to change \_id as GUID during reindex](https://discuss.elastic.co/t/how-to-change-id-as-guid-during-reindex/182552)

<div class="topic-metadata">

**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\
**Replies:** 4\
**Last updated:** [May 29, 2019, 3:43am UTC](https://discuss.elastic.co/t/how-to-change-id-as-guid-during-reindex/182552 "2019-05-29T03:43:34Z")

</div>

I have two different elastic search nodes.I need to reindex 10 indices from one node to 1 index in another node.But there is not unique id's in the 10 indices, so i need to generate \_id as GUID while reindexing

---

## [Parsing on a field in Kibana](https://discuss.elastic.co/t/parsing-on-a-field-in-kibana/121923)

<div class="topic-metadata">

**Author:** [@tonyz](https://discuss.elastic.co/u/tonyz)\
**Replies:** 4\
**Last updated:** [March 3, 2018, 10:49pm UTC](https://discuss.elastic.co/t/parsing-on-a-field-in-kibana/121923 "2018-03-03T22:49:59Z")

</div>

Hi, I am trying to parse out values from a field in Kibana to get a unique count of IDs, but I am unable to parse out this information. Field Value: I, \[2018-02-28T14:50:57.606764 #9\] INFO -- : \[71f1707b-f78b-4112-a7ae…

---

## [Filebeat 5.4 module system and audit not work](https://discuss.elastic.co/t/filebeat-5-4-module-system-and-audit-not-work/84648)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 7\
**Last updated:** [May 18, 2017, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-5-4-module-system-and-audit-not-work/84648 "2017-05-18T14:13:03Z")

</div>

im trying to install newest version of filebeat and i enabled module system + auditd. (New template installed with ""template": "fb-\*",") ES : 5.3.2, Kibana 5.3.2 , LS 5.3.2 ingest node enabled by default! This is my…

---

## [Is it possible to run custom shell script using Topbeat?](https://discuss.elastic.co/t/is-it-possible-to-run-custom-shell-script-using-topbeat/52613)

<div class="topic-metadata">

**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\
**Replies:** 8\
**Last updated:** [June 15, 2016, 10:44am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-custom-shell-script-using-topbeat/52613 "2016-06-15T10:44:17Z")

</div>

Hi guys, I am using topbeat to monitor server resource utilization, now i want to attach some custom shell script in topbeat to collect addition resource utilization data of servers. The custom script output should b…

---

## [Why my script transform failed with "No such property: org for class: Script8"](https://discuss.elastic.co/t/why-my-script-transform-failed-with-no-such-property-org-for-class-script8/32560)

<div class="topic-metadata">

**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\
**Replies:** 7\
**Last updated:** [October 26, 2015, 8:02am UTC](https://discuss.elastic.co/t/why-my-script-transform-failed-with-no-such-property-org-for-class-script8/32560 "2015-10-26T08:02:25Z")

</div>

curl -XGET 'http://localhost:9200/.watch\_history\*/\_search?pretty' -d '{ "sort" : \[ { "result.execution\_time" : "desc" } \]}': "condition": { "type": "script", "status": "succe…

---

## [How to visualize a customized aggregation in Kibana4?](https://discuss.elastic.co/t/how-to-visualize-a-customized-aggregation-in-kibana4/60151)

<div class="topic-metadata">

**Author:** [@oscarb](https://discuss.elastic.co/u/oscarb)\
**Replies:** 1\
**Last updated:** [September 9, 2016, 10:00am UTC](https://discuss.elastic.co/t/how-to-visualize-a-customized-aggregation-in-kibana4/60151 "2016-09-09T10:00:20Z")

</div>

I am using elasticsearch 2.3.5 and Kibana 4.5.4. I have an index which gives me information of events, and the duration of them, with the following schema: "\_index": "test", "\_type": "sometype", "\_id": "754d…

---

## [Watcher 1.0.0 GA release!](https://discuss.elastic.co/t/watcher-1-0-0-ga-release/24353)

<div class="topic-metadata">

**Author:** [@uboness](https://discuss.elastic.co/u/uboness)\
**Replies:** 6\
**Last updated:** [June 26, 2015, 1:00pm UTC](https://discuss.elastic.co/t/watcher-1-0-0-ga-release/24353 "2015-06-26T13:00:46Z")

</div>

After a few of Beta and RC releases, we're thrilled to release 1.0.0 GA. This release comes with a few additional enhancements on top of RC1. If you haven't participated in our beta program or didn't have time to check i…

---

## [Elastic Cloud Enterprise security update](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [July 20, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180 "2021-07-20T15:17:20Z")

</div>

Elastic Cloud Enterprise security update (ESA-2021-17) Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no perm…

---

## [Loop through fields using ruby resource?](https://discuss.elastic.co/t/loop-through-fields-using-ruby-resource/55557)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 3\
**Last updated:** [July 18, 2016, 9:51am UTC](https://discuss.elastic.co/t/loop-through-fields-using-ruby-resource/55557 "2016-07-18T09:51:02Z")

</div>

Hi there! I want to apply a gsub to ALL fields in my logstash object arbitrarily. I know logstash has no tool for loops like that, but I thought I could perhaps do it in a ruby resource?? Something like: code =\> " ev…

---

## [Unable to get Date Range Control to filter dates in Kibana Dashboard](https://discuss.elastic.co/t/unable-to-get-date-range-control-to-filter-dates-in-kibana-dashboard/228791)

<div class="topic-metadata">

**Author:** [@ChintanCParekh](https://discuss.elastic.co/u/ChintanCParekh)\
**Replies:** 3\
**Last updated:** [May 15, 2020, 12:32pm UTC](https://discuss.elastic.co/t/unable-to-get-date-range-control-to-filter-dates-in-kibana-dashboard/228791 "2020-05-15T12:32:53Z")

</div>

Hi Team, I am working on visualization and dashboard in kibana. We have field called created\_date with format datetime in an index pattern and so as in document. Hence we are trying to filter in visualization and dashbo…

---

## [RE: calculating amount of disk space used](https://discuss.elastic.co/t/re-calculating-amount-of-disk-space-used/10686)

<div class="topic-metadata">

**Author:** [@Elastic\_Noob](https://discuss.elastic.co/u/Elastic_Noob)\
**Replies:** 5\
**Last updated:** [February 17, 2013, 6:31am UTC](https://discuss.elastic.co/t/re-calculating-amount-of-disk-space-used/10686 "2013-02-17T06:31:14Z")

</div>

Hi good day, I was wondering how can i calculate the amount of disk space used by Elastic Search? Here's an example: I collected 1 million tweets, using the index "tweets" and I indexed the "text" and "user…

---

## [Elastic Cloud Enterprise 1.0.2 security update](https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [September 12, 2017, 6:20pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247 "2017-09-12T18:20:46Z")

</div>

Elastic Cloud Enterprise unsecured communication (ESA-2017-13) The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the …

---

## [Logstash fail to start - Error: Mainclass logstash-core\\lib\\jars\\animal-sniffer-annotations-1.14.jar](https://discuss.elastic.co/t/logstash-fail-to-start-error-mainclass-logstash-core-lib-jars-animal-sniffer-annotations-1-14-jar/149298)

<div class="topic-metadata">

**Author:** [@MrElastic](https://discuss.elastic.co/u/MrElastic)\
**Replies:** 3\
**Last updated:** [October 18, 2018, 11:13am UTC](https://discuss.elastic.co/t/logstash-fail-to-start-error-mainclass-logstash-core-lib-jars-animal-sniffer-annotations-1-14-jar/149298 "2018-10-18T11:13:54Z")

</div>

Hi Everybody! I Downloaded Logstash and tried to run a test "logststash.conf" to gather data from my sql server. Oh, I am using Windows 10. When i try to run logstash -f logststash.conf i get the following error: c…

---

## [Can't merge a non object mapping with an object mapping](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/264066)

<div class="topic-metadata">

**Author:** [@Infoxd](https://discuss.elastic.co/u/Infoxd)\
**Replies:** 2\
**Last updated:** [February 22, 2021, 10:25am UTC](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/264066 "2021-02-22T10:25:43Z")

</div>

Hello, When I'm trying to import this json: { "data": { "args": \["v7.0/4529900134935424/feed", { "limit": 100 }\] }, "@timestamp": "2021-02-11T11:07:02.189Z", "@version": "1" } I'm getting this error: can't…

---

## [How can I convert to geo\_point a field extracted with translate filter?](https://discuss.elastic.co/t/how-can-i-convert-to-geo-point-a-field-extracted-with-translate-filter/35141)

<div class="topic-metadata">

**Author:** [@adellarocca](https://discuss.elastic.co/u/adellarocca)\
**Replies:** 8\
**Last updated:** [November 24, 2015, 1:19pm UTC](https://discuss.elastic.co/t/how-can-i-convert-to-geo-point-a-field-extracted-with-translate-filter/35141 "2015-11-24T13:19:43Z")

</div>

Hi! I have extracted geo information with translate filter using a dictionary file YAML as follow location1: 42.1497, -74.9384 location2: 34.5677, -32.8393 ......................................... The logstash conf fil…

---

## [How to disable Kibana 5.0.0 plugins like Management , Dev Tools?](https://discuss.elastic.co/t/how-to-disable-kibana-5-0-0-plugins-like-management-dev-tools/64536)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 4\
**Last updated:** [May 9, 2017, 7:06am UTC](https://discuss.elastic.co/t/how-to-disable-kibana-5-0-0-plugins-like-management-dev-tools/64536 "2017-05-09T07:06:20Z")

</div>

Hi Experts, I was checking new Kibana version that is 5.0.0 . I was curious to know if I can disable plugin like Dev tools , management . So the idea is not to show these to the user or to restrict him to the dashboard…

---

## [Visualize Data from JSON](https://discuss.elastic.co/t/visualize-data-from-json/42310)

<div class="topic-metadata">

**Author:** [@Francesco\_Marchioni](https://discuss.elastic.co/u/Francesco_Marchioni)\
**Replies:** 4\
**Last updated:** [February 21, 2016, 9:57pm UTC](https://discuss.elastic.co/t/visualize-data-from-json/42310 "2016-02-21T21:57:45Z")

</div>

Hi all, I'd like to visualize graphically the following sample data which is extracted by LogStash: {"component-class-name" : "DemoEJB", "declared-roles" : \[\], "execution-time" : 0, "invocations" : 0, "methods" : {}, "…

---

## [Does elasticsearch have any query/aggregation equivalent to Splunk's streamstats search command?](https://discuss.elastic.co/t/does-elasticsearch-have-any-query-aggregation-equivalent-to-splunks-streamstats-search-command/24498)

<div class="topic-metadata">

**Author:** [@frank\_van](https://discuss.elastic.co/u/frank_van)\
**Replies:** 5\
**Last updated:** [June 30, 2015, 12:36pm UTC](https://discuss.elastic.co/t/does-elasticsearch-have-any-query-aggregation-equivalent-to-splunks-streamstats-search-command/24498 "2015-06-30T12:36:38Z")

</div>

Hi, Splunk has a very handy out-of-box streamstats search command (http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/streamstats) which calculates "rolling" statistics for each event at the time the eve…

---

## [Simple CPU alert](https://discuss.elastic.co/t/simple-cpu-alert/159975)

<div class="topic-metadata">

**Author:** [@devops\_mike](https://discuss.elastic.co/u/devops_mike)\
**Replies:** 6\
**Last updated:** [December 20, 2018, 7:15pm UTC](https://discuss.elastic.co/t/simple-cpu-alert/159975 "2018-12-20T19:15:40Z")

</div>

I have been trying to create a CPU alert in Watcher. I tried both the advanced option as well as the threshold. I can get pretty close, but invariably something goes wrong, despite following many examples in these forums…

---

## [Date type in Java API](https://discuss.elastic.co/t/date-type-in-java-api/7477)

<div class="topic-metadata">

**Author:** [@thinusp](https://discuss.elastic.co/u/thinusp)\
**Replies:** 2\
**Last updated:** [April 27, 2012, 11:21am UTC](https://discuss.elastic.co/t/date-type-in-java-api/7477 "2012-04-27T11:21:31Z")

</div>

Hey community... I've been struggling with the Date type in ElasticSearch. Let me first explain what I need, then I'll explain to you how I'm trying to get there... I have a field in ES, configured as (copied fr…

---

## [Painless flatten](https://discuss.elastic.co/t/painless-flatten/155582)

<div class="topic-metadata">

**Author:** [@HU\_Jun](https://discuss.elastic.co/u/HU_Jun)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 9:01pm UTC](https://discuss.elastic.co/t/painless-flatten/155582 "2018-11-08T21:01:41Z")

</div>

Working on a watcher, similar to Flatten nested aggregation but as I am still using ES 5.5, no composition agg avaiable :frowning: in my query, i have a cascade of aggregations: { aggs: { A aggs: …

---

## [Old shards not deleted upon relocation](https://discuss.elastic.co/t/old-shards-not-deleted-upon-relocation/71161)

<div class="topic-metadata">

**Author:** [@uday](https://discuss.elastic.co/u/uday)\
**Replies:** 7\
**Last updated:** [January 25, 2017, 10:31am UTC](https://discuss.elastic.co/t/old-shards-not-deleted-upon-relocation/71161 "2017-01-25T10:31:04Z")

</div>

Hi, Our Elasticsearch cluster has two data directories. We recently restarted all the nodes in the cluster. After the successful restart process, we observed increased disk space usage on few nodes. When we examined th…

---

## [Shield LDAPS Integration Error](https://discuss.elastic.co/t/shield-ldaps-integration-error/26451)

<div class="topic-metadata">

**Author:** [@ccrivelli](https://discuss.elastic.co/u/ccrivelli)\
**Replies:** 6\
**Last updated:** [July 31, 2015, 11:11am UTC](https://discuss.elastic.co/t/shield-ldaps-integration-error/26451 "2015-07-31T11:11:35Z")

</div>

Hi all, I'm testing shield with ldaps. I'm testing ldap over SSL/TLS to: - hostname1.domain.com:636 - domain.com:636 domain.com is the load balancer and redirects the traffic to hostname1.domain.com, hostname2.doma…

---

## [Java.lang.IllegalArgumentException: Invalid format: "Fri Oct 09 02:06:12 +0000 2015"](https://discuss.elastic.co/t/java-lang-illegalargumentexception-invalid-format-fri-oct-09-02-06-12-0000-2015/32679)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 8\
**Last updated:** [December 16, 2015, 7:35pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-invalid-format-fri-oct-09-02-06-12-0000-2015/32679 "2015-12-16T19:35:49Z")

</div>

Hi: I am running ES 1.5.2 with the es-hadoop and es-spark versions 2.1.1 (with Spark 1.5.1 running in Local mode. ) My application can "successfully" connect and read the content. However when I try to do this : (Th…

---

## ["environment: - xpack.security.enabled=true" does not work with docker-compose](https://discuss.elastic.co/t/environment-xpack-security-enabled-true-does-not-work-with-docker-compose/290389)

<div class="topic-metadata">

**Author:** [@tadashi.oya](https://discuss.elastic.co/u/tadashi.oya)\
**Replies:** 2\
**Last updated:** [December 1, 2021, 5:20am UTC](https://discuss.elastic.co/t/environment-xpack-security-enabled-true-does-not-work-with-docker-compose/290389 "2021-12-01T05:20:49Z")

</div>

Hi, I'm trying to specify xpack.security.enabled as an environment variable for the Elasticsearch container in the docker-compose configuration of T-Pot, a honeypot framework. However, the following statement does not w…

[Previous page](https://discuss.elastic.co/top.md?page=394&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=396&per_page=50&period=all)
