# Top **URL:** https://discuss.elastic.co/top.md?page=406&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 407 --- ## [Elasticsearch readiness probe failures](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581)
**Author:** [@Janos\_Csorvasi](https://discuss.elastic.co/u/Janos_Csorvasi)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581 "2021-04-21T12:58:18Z")
Hi, tl;dr: Elasticsearch ingest nodes are exhibiting frequent readiness probe failures e.g. {"timestamp": "2021-04-19T09:58:01+00:00", "message": "readiness probe failed", "curl\_rc": "28"}. We would like to understand w… --- ## [How to separate Winlogbeat logs to different ES indexes](https://discuss.elastic.co/t/how-to-separate-winlogbeat-logs-to-different-es-indexes/71529)
**Author:** [@ufomen](https://discuss.elastic.co/u/ufomen)\ **Replies:** 2\ **Last updated:** [January 13, 2017, 8:59pm UTC](https://discuss.elastic.co/t/how-to-separate-winlogbeat-logs-to-different-es-indexes/71529 "2017-01-13T20:59:00Z")
Hello all! And sorry for my english... I have tons of security logs on my elasticsearch. Now I wanna store Windows security logs for 2 weeks, and other (app, system) logs for 3-6 month. So, I think easiest way to do th… --- ## [Reindex java API](https://discuss.elastic.co/t/reindex-java-api/45923)
**Author:** [@kjknilsen](https://discuss.elastic.co/u/kjknilsen)\ **Replies:** 4\ **Last updated:** [April 16, 2016, 11:53am UTC](https://discuss.elastic.co/t/reindex-java-api/45923 "2016-04-16T11:53:24Z")
Hi. Is the java API updated with the new reindex API? --- ## [Grok timestamp field](https://discuss.elastic.co/t/grok-timestamp-field/33883)
**Author:** [@beorn107](https://discuss.elastic.co/u/beorn107)\ **Replies:** 3\ **Last updated:** [November 5, 2015, 8:24pm UTC](https://discuss.elastic.co/t/grok-timestamp-field/33883 "2015-11-05T20:24:35Z")
Hi I am trying to import a JSON file into ElasticSearch to use with Kibana. I am able to pull the file into ElasticSearch using Logstash but I am getting stuck on this one issue. The json has the timestamp for the r… --- ## [How to store currency datatype in elasticsearch?](https://discuss.elastic.co/t/how-to-store-currency-datatype-in-elasticsearch/65002)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 3\ **Last updated:** [November 5, 2016, 5:39am UTC](https://discuss.elastic.co/t/how-to-store-currency-datatype-in-elasticsearch/65002 "2016-11-05T05:39:38Z")
Can any one tell what is the mapping to store the dollar value in elasticsearch --- ## [Disabling Elasticsearch Inverse Document Frequency scoring on ES relevance score](https://discuss.elastic.co/t/disabling-elasticsearch-inverse-document-frequency-scoring-on-es-relevance-score/75145)
**Author:** [@patlola](https://discuss.elastic.co/u/patlola)\ **Replies:** 6\ **Last updated:** [February 16, 2017, 1:25am UTC](https://discuss.elastic.co/t/disabling-elasticsearch-inverse-document-frequency-scoring-on-es-relevance-score/75145 "2017-02-16T01:25:09Z")
Am getting irrelevant results when doing a simple match query on the documents. My documents have a lot of duplicates words but all words are important like. Documents are: Doc\_1) Nestle Doc\_2) Nestle Kitkat DOc\_3)… --- ## [Error registering Kibana Privileges with Elasticsearch for kibana-.kibana: \[exception\] Trying to create too many scroll contexts](https://discuss.elastic.co/t/error-registering-kibana-privileges-with-elasticsearch-for-kibana-kibana-exception-trying-to-create-too-many-scroll-contexts/257117)
**Author:** [@libbkmz](https://discuss.elastic.co/u/libbkmz)\ **Replies:** 4\ **Last updated:** [December 15, 2020, 8:31am UTC](https://discuss.elastic.co/t/error-registering-kibana-privileges-with-elasticsearch-for-kibana-kibana-exception-trying-to-create-too-many-scroll-contexts/257117 "2020-12-15T08:31:32Z")
Hello, I'm running many clusters of ElasticSearch with Kibana, we have version 7.6.2, this is version info: { "name" : "CLUSTER\_NAME...", "cluster\_name" : "CLUSTER\_NAME", "cluster\_uuid" : "4zR...", "version" : … --- ## [Can't find elasticsearch.yml](https://discuss.elastic.co/t/cant-find-elasticsearch-yml/304177)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 4\ **Last updated:** [May 9, 2022, 1:17pm UTC](https://discuss.elastic.co/t/cant-find-elasticsearch-yml/304177 "2022-05-09T13:17:57Z")
i installed elk using docker compose my kibana works well but elasticsarch and logstash doesn't work and i cant find Elasticsearch.yml and logstash.yml to chande configuration and see what's the probleme --- ## [Unable to use allow\_insecure\_settings with elasticsearch 6.6.0](https://discuss.elastic.co/t/unable-to-use-allow-insecure-settings-with-elasticsearch-6-6-0/194420)
**Author:** [@umarshaik5](https://discuss.elastic.co/u/umarshaik5)\ **Replies:** 6\ **Last updated:** [August 22, 2019, 10:59am UTC](https://discuss.elastic.co/t/unable-to-use-allow-insecure-settings-with-elasticsearch-6-6-0/194420 "2019-08-22T10:59:46Z")
When i am adding the allow\_insecure\_settings: true and try to resgister a repo with s3. i am getting service unavailable. It complains that allow\_insecure\_settings is not but i have added the setting to the elasticsearc… --- ## [Hive (HDP 2.3) and ES-Hadoop Integration Issue](https://discuss.elastic.co/t/hive-hdp-2-3-and-es-hadoop-integration-issue/34209)
**Author:** [@vinodp](https://discuss.elastic.co/u/vinodp)\ **Replies:** 8\ **Last updated:** [November 16, 2015, 4:26pm UTC](https://discuss.elastic.co/t/hive-hdp-2-3-and-es-hadoop-integration-issue/34209 "2015-11-16T16:26:35Z")
Hi, I'm just trying to integrate Hive running on Hortonworks 2.3 with Elasticsearch 2.0, Kibana 4.2.0 and ES-Hadoop connector (2.2.0 beta1) and ran into the following issues: Performing a map-reduce job using Tez ex… --- ## [Uknown error while parsing user agent data](https://discuss.elastic.co/t/uknown-error-while-parsing-user-agent-data/90743)
**Author:** [@karthikg](https://discuss.elastic.co/u/karthikg)\ **Replies:** 6\ **Last updated:** [July 8, 2017, 7:11am UTC](https://discuss.elastic.co/t/uknown-error-while-parsing-user-agent-data/90743 "2017-07-08T07:11:05Z")
I'm trying to parse some iis logs and i'm seeing this error in my logstash logs, which is leading me to lot of \_grokparsefailure error any idea how to mitigate this Logstash Logs \[2017-06-25T09:49:02,075\]\[ERROR\]\[logsta… --- ## [Elasticsearch 8.13.0 / 7.17.19 Security Update (ESA-2024-06)](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 "2024-03-27T16:53:36Z")
Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-06) A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch… --- ## [Configuring Logstash to filter docker logs](https://discuss.elastic.co/t/configuring-logstash-to-filter-docker-logs/124633)
**Author:** [@aysala](https://discuss.elastic.co/u/aysala)\ **Replies:** 3\ **Last updated:** [March 26, 2018, 6:49pm UTC](https://discuss.elastic.co/t/configuring-logstash-to-filter-docker-logs/124633 "2018-03-26T18:49:57Z")
Hi, I have an ELK stack for logging a DCOS cluster. I am trying to parse the container logs from one of the nodes and I would like to ship only the required container logs form the node. Here, I am trying to figure out … --- ## [X-Pack LDAP testing](https://discuss.elastic.co/t/x-pack-ldap-testing/84119)
**Author:** [@vijayramachandran](https://discuss.elastic.co/u/vijayramachandran)\ **Replies:** 3\ **Last updated:** [May 3, 2017, 12:20am UTC](https://discuss.elastic.co/t/x-pack-ldap-testing/84119 "2017-05-03T00:20:31Z")
Hi Team, I have placed LDAP entries in elasticsearch.yml file, but how do I check whether or not the LDAP integration is working? Should I check something else? I have tried to login with the user which is already … --- ## [Kibana is running,but connection refused](https://discuss.elastic.co/t/kibana-is-running-but-connection-refused/147893)
**Author:** [@DavisDxb](https://discuss.elastic.co/u/DavisDxb)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 1:37am UTC](https://discuss.elastic.co/t/kibana-is-running-but-connection-refused/147893 "2018-09-12T01:37:33Z")
My Kibans is running, but not able to load on browser. I checked in /var/log.Kibana folde not see in logs, what is the solution for this issue. reinstall Kibana again or any suggestion have please reply. --- ## [Kibana via nginx proxy](https://discuss.elastic.co/t/kibana-via-nginx-proxy/103920)
**Author:** [@artem2017](https://discuss.elastic.co/u/artem2017)\ **Replies:** 3\ **Last updated:** [October 18, 2017, 10:13am UTC](https://discuss.elastic.co/t/kibana-via-nginx-proxy/103920 "2017-10-18T10:13:00Z")
Hello, i have ELK stack in one container and it's working (accessible via container port). I wanna set up access to kibana interface via nginx (proxy\_pass directive), but when i enter url, i've got the followong error m… --- ## [termQuery - how does it work?](https://discuss.elastic.co/t/termquery-how-does-it-work/10176)
**Author:** [@Janusz\_Dalecki](https://discuss.elastic.co/u/Janusz_Dalecki)\ **Replies:** 5\ **Last updated:** [December 27, 2012, 2:47pm UTC](https://discuss.elastic.co/t/termquery-how-does-it-work/10176 "2012-12-27T14:47:03Z")
Hi, I am still puzzled by the behaviour of the termQuery. The best way to explain it is by showing you an example: I have created a record in elasticsearch db using an example of tutorial “ElasticSearch in 5… --- ## [Elasticsearch单节点写入并发多少算是正常的?](https://discuss.elastic.co/t/elasticsearch/86550)
**Author:** [@willdx](https://discuss.elastic.co/u/willdx)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch/86550 "2017-05-29T15:02:52Z")
环境 ELK 5 机器性能: 4核/16GB/SSD硬盘 问题1: Elasticsearch单节点写入速度(并发量)多少算是正常的? 我先把日志写到redis, 再用logstash转存到Elasticsearch, 并发量大概在1500-2000每秒的样子, 感觉单节点的Elasticsearch支持的并发量并不是很大, 这样是正常的么? 问题2: 另外, 如果我要提升写入Elastic的性能, 是否只能用集群的方式… --- ## [Dashboard Table doesn't Refresh](https://discuss.elastic.co/t/dashboard-table-doesnt-refresh/45627)
**Author:** [@npross](https://discuss.elastic.co/u/npross)\ **Replies:** 4\ **Last updated:** [March 30, 2016, 3:48pm UTC](https://discuss.elastic.co/t/dashboard-table-doesnt-refresh/45627 "2016-03-30T15:48:45Z")
I am very new to Elasticsearch and Kibana. I have setup an index with a number of documents that I want to monitor as a table on the dashboard. The JSON documents stored in elastic search simply have four fields. I c… --- ## [Query Syntax for proximity searches](https://discuss.elastic.co/t/query-syntax-for-proximity-searches/23140)
**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\ **Replies:** 3\ **Last updated:** [April 9, 2015, 3:26am UTC](https://discuss.elastic.co/t/query-syntax-for-proximity-searches/23140 "2015-04-09T03:26:43Z")
Can some one help me getting these query syntax for below queries how to find documents that has united and states but not with in 30 words ?(united AND states NOT WITHIN 30 WORDS)? how to find the documents tha… --- ## [Multiple document- types in filebeat](https://discuss.elastic.co/t/multiple-document-types-in-filebeat/44897)
**Author:** [@valjohn1647](https://discuss.elastic.co/u/valjohn1647)\ **Replies:** 2\ **Last updated:** [March 28, 2016, 10:10am UTC](https://discuss.elastic.co/t/multiple-document-types-in-filebeat/44897 "2016-03-28T10:10:05Z")
Hi All I need to set the multiple document\_type for each log path, blow is the configuration that i used . After that filebeat only send lastly defined log files to the server ( document\_type with cucum-cdr) , not… --- ## [RequestError: RequestError(400, 'parsing\_exception', '\[terms\] query does not support \[country\]')](https://discuss.elastic.co/t/requesterror-requesterror-400-parsing-exception-terms-query-does-not-support-country/230841)
**Author:** [@TanmoyP](https://discuss.elastic.co/u/TanmoyP)\ **Replies:** 1\ **Last updated:** [May 3, 2020, 4:35am UTC](https://discuss.elastic.co/t/requesterror-requesterror-400-parsing-exception-terms-query-does-not-support-country/230841 "2020-05-03T04:35:58Z")
I am new to Elasticsearch and getting error while running this: for brand in extract\['brand'\].values: s\_names = Search() \\ .query('multi\_match', type = "cross\_fields", … --- ## [Kibana 7.1.1 Error registering Kibana Privileges with Elasticsearch](https://discuss.elastic.co/t/kibana-7-1-1-error-registering-kibana-privileges-with-elasticsearch/183370)
**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\ **Replies:** 3\ **Last updated:** [May 29, 2019, 8:30pm UTC](https://discuss.elastic.co/t/kibana-7-1-1-error-registering-kibana-privileges-with-elasticsearch/183370 "2019-05-29T20:30:32Z")
Hi, If I start kibana from docker image then I got permanalty the flowing exception. {"type":"log","@timestamp":"2019-05-29T15:10:20Z","tags":\["security","error"\],"pid":1,"message":"Error registering Kibana Privileges … --- ## [Recommendation for indexing a large size document \< 1G](https://discuss.elastic.co/t/recommendation-for-indexing-a-large-size-document-1g/28880)
**Author:** [@pmukherji](https://discuss.elastic.co/u/pmukherji)\ **Replies:** 3\ **Last updated:** [June 4, 2016, 10:09pm UTC](https://discuss.elastic.co/t/recommendation-for-indexing-a-large-size-document-1g/28880 "2016-06-04T22:09:24Z")
Hi ES Team, This question may have been asked earlier. I am looking for ways to index really large documents like PDF, Word using ES. Our application crawls enterprise Active Directory system and we have hit some reall… --- ## [ES not creating indexes based on template](https://discuss.elastic.co/t/es-not-creating-indexes-based-on-template/152851)
**Author:** [@jlixfeld](https://discuss.elastic.co/u/jlixfeld)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 3:42pm UTC](https://discuss.elastic.co/t/es-not-creating-indexes-based-on-template/152851 "2018-10-17T15:42:30Z")
Hi there! I have a daily index that is created from an index template, but I made changes to the index template (increased the number of shards from 3 to 4) however the new indexes are still created with only 3 shards. … --- ## [Logstash listening on tcp6 only](https://discuss.elastic.co/t/logstash-listening-on-tcp6-only/82026)
**Author:** [@Drew\_Rogers](https://discuss.elastic.co/u/Drew_Rogers)\ **Replies:** 4\ **Last updated:** [April 11, 2017, 7:39pm UTC](https://discuss.elastic.co/t/logstash-listening-on-tcp6-only/82026 "2017-04-11T19:39:27Z")
I upgraded my stack to 5.3.0. I noticed that for all my inputs, logstash is only listening on tcp6 and not tcp4. For instance my input for beats is: and when logstash starts here are my listening ports: --- ## [Failed to get docker stats: request returned Not Found for API route and version](https://discuss.elastic.co/t/failed-to-get-docker-stats-request-returned-not-found-for-api-route-and-version/230720)
**Author:** [@daz1761](https://discuss.elastic.co/u/daz1761)\ **Replies:** 8\ **Last updated:** [May 18, 2020, 3:52pm UTC](https://discuss.elastic.co/t/failed-to-get-docker-stats-request-returned-not-found-for-api-route-and-version/230720 "2020-05-18T15:52:06Z")
I am using metricbeat in conjunction with Docker to get metrics from a given container via hints autodiscovery. I don't think its working properly as I am getting an error, in the error message key: failed to get docke… --- ## [Failed to get node info for {#transport#-1}{52.43.xx.xxx}{52.43.xx.xxx:9243}, disconnecting](https://discuss.elastic.co/t/failed-to-get-node-info-for-transport-1-52-43-xx-xxx-52-43-xx-xxx-9243-disconnecting/136969)
**Author:** [@e0813e449f09f8d5fbe7](https://discuss.elastic.co/u/e0813e449f09f8d5fbe7)\ **Replies:** 5\ **Last updated:** [June 29, 2018, 7:37pm UTC](https://discuss.elastic.co/t/failed-to-get-node-info-for-transport-1-52-43-xx-xxx-52-43-xx-xxx-9243-disconnecting/136969 "2018-06-29T19:37:17Z")
Trying to connect to cloud elastic search, getting below error. \[\]\[generic\]\[T#2\]\] org.elasticsearch.client.transport : \[Jimaine Szardos\] failed to get node info for {#transport#-1}{52.43.xx.xxx}{52.43.xx.xxx:9243}, disc… --- ## [Filebeat Error publishing events (retrying): EOF](https://discuss.elastic.co/t/filebeat-error-publishing-events-retrying-eof/53484)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 4\ **Last updated:** [June 23, 2016, 6:41am UTC](https://discuss.elastic.co/t/filebeat-error-publishing-events-retrying-eof/53484 "2016-06-23T06:41:39Z")
Hi, I am getitng below logs in filebeat log file. 2016-06-21T14:04:31+03:00 DBG Not harvesting, file didn't change: /opt/apache-tomee-jaxrs-1.6.0/logs/localhost\_access\_log.2016-06-17.txt 2016-06-21T14:04:31+03:00 DB… --- ## [Tribe nodes and ML](https://discuss.elastic.co/t/tribe-nodes-and-ml/85076)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 1\ **Last updated:** [May 11, 2017, 4:00pm UTC](https://discuss.elastic.co/t/tribe-nodes-and-ml/85076 "2017-05-11T16:00:47Z")
I just wanted to post this bug I ran into earlier with 5.4.0 to help other users with a workaround. When using the tribe node ML will throw exceptions as soon as xpack is installed. These are attached at the bottom of … --- ## [Running eck in production best practices](https://discuss.elastic.co/t/running-eck-in-production-best-practices/324248)
**Author:** [@elastic-db-user](https://discuss.elastic.co/u/elastic-db-user)\ **Replies:** 2\ **Last updated:** [January 31, 2023, 4:59pm UTC](https://discuss.elastic.co/t/running-eck-in-production-best-practices/324248 "2023-01-31T16:59:09Z")
I am about to go for running multiple Elasticsearch clusters managed by an eck operator on k8 in production. eIasticsearch, kibana, curator and all other deployments are working as expected. I am wondering if there's any… --- ## [How to logstash geoip database file update?](https://discuss.elastic.co/t/how-to-logstash-geoip-database-file-update/91359)
**Author:** [@TaeSung\_Kim](https://discuss.elastic.co/u/TaeSung_Kim)\ **Replies:** 2\ **Last updated:** [July 5, 2017, 8:55am UTC](https://discuss.elastic.co/t/how-to-logstash-geoip-database-file-update/91359 "2017-07-05T08:55:11Z")
Hello, I'm TaeSung Kim. I'm sorry. I'm not used to English. Now, I use 5.2.2 ES, logstash, kibana. I find GeoLite2-City.mmdb file. /usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-filter-geoip-4.0.4-java/v… --- ## [Constant JSON parse errors in logstash output log](https://discuss.elastic.co/t/constant-json-parse-errors-in-logstash-output-log/79515)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 2\ **Last updated:** [March 22, 2017, 5:17pm UTC](https://discuss.elastic.co/t/constant-json-parse-errors-in-logstash-output-log/79515 "2017-03-22T17:17:10Z")
This may be more of a general question on how to deal with mixed inputs of normal logs and JSON. I'm working on upgrading our stack to 5.2. As part of this process I've built a new ELK server and I have it up and runn… --- ## [How to calculate duration in aggregation?](https://discuss.elastic.co/t/how-to-calculate-duration-in-aggregation/53644)
**Author:** [@ruival](https://discuss.elastic.co/u/ruival)\ **Replies:** 3\ **Last updated:** [June 22, 2016, 3:07pm UTC](https://discuss.elastic.co/t/how-to-calculate-duration-in-aggregation/53644 "2016-06-22T15:07:29Z")
Hi all, first posts here in elasticsearch forum and new to this exciting technology. working on a proof of concept and already loaded/indexed some data into elastic. Data is structured like the sample bellow: SIG… --- ## [Elasticsearch 5.2.2 - Out of memory - while indexing](https://discuss.elastic.co/t/elasticsearch-5-2-2-out-of-memory-while-indexing/78457)
**Author:** [@tomekit](https://discuss.elastic.co/u/tomekit)\ **Replies:** 5\ **Last updated:** [March 16, 2017, 12:15pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-2-out-of-memory-while-indexing/78457 "2017-03-16T12:15:26Z")
I am running a cluster of 3 Elasticsearch 5.2.2 nodes. Each of the node is 4GB Memory, 2 vCPU, t2.medium EC2 node and running in different geo-located DCs EU, AP, US (not recommended setup). They're connected to each ot… --- ## [Date Custom Field Timezone](https://discuss.elastic.co/t/date-custom-field-timezone/108673)
**Author:** [@MaikLinnemann](https://discuss.elastic.co/u/MaikLinnemann)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 3:10pm UTC](https://discuss.elastic.co/t/date-custom-field-timezone/108673 "2017-11-22T15:10:53Z")
Dear Forum, i have a config which is as follows: filter { if \[type\] == "nginx-default" { grok { patterns\_dir =\> "/etc/logstash/patterns" match =\> \[ "message", "%{COMBINEDAPACHELOG}" \] } date {… --- ## [Snapshot using Azure plugin not starting](https://discuss.elastic.co/t/snapshot-using-azure-plugin-not-starting/172506)
**Author:** [@djsowa](https://discuss.elastic.co/u/djsowa)\ **Replies:** 0\ **Last updated:** [March 15, 2019, 10:23am UTC](https://discuss.elastic.co/t/snapshot-using-azure-plugin-not-starting/172506 "2019-03-15T10:23:17Z")
Hi I try to create snapshot using azure plugin. We are using Elasticsearch version 6.2. When I run: curl -X PUT "localhost:9200/\_snapshot/oldbackup2" -H 'Content-Type: application/json' -d' { "type": "azure", … --- ## [How to use timelion to get a ratio](https://discuss.elastic.co/t/how-to-use-timelion-to-get-a-ratio/105457)
**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\ **Replies:** 3\ **Last updated:** [October 27, 2017, 3:10pm UTC](https://discuss.elastic.co/t/how-to-use-timelion-to-get-a-ratio/105457 "2017-10-27T15:10:52Z")
Hello, I want to write a script in Timelion to get a ratio. The idea is : count(field\_name) is not null divided by count(field\_name) The index name: call The field name I want to count : drop\_rate The value of drop\_… --- ## [Combine term and terms in visualization](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499)
**Author:** [@Radostina\_Radi](https://discuss.elastic.co/u/Radostina_Radi)\ **Replies:** 3\ **Last updated:** [February 16, 2018, 2:19pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499 "2018-02-16T14:19:52Z")
Hello, I want to create visualization for specific field 'dataType'. When a search is performed, this field can be in query as array (terms) or as a string (term). How can I combine these both in one visualization? For e… --- ## [Kibana Alerts accessing fields](https://discuss.elastic.co/t/kibana-alerts-accessing-fields/280789)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 1\ **Last updated:** [August 23, 2021, 12:39pm UTC](https://discuss.elastic.co/t/kibana-alerts-accessing-fields/280789 "2021-08-23T12:39:41Z")
Hi All, Is it possible to access specific fields within Action boxes under Alerts in Kibana. For example, I want to alert when the field "host.status" equals down. This is easy using the Elasticsearch Query. After this… --- ## [Score is lower if text is longer](https://discuss.elastic.co/t/score-is-lower-if-text-is-longer/6007)
**Author:** [@Robert](https://discuss.elastic.co/u/Robert)\ **Replies:** 8\ **Last updated:** [December 7, 2011, 11:14am UTC](https://discuss.elastic.co/t/score-is-lower-if-text-is-longer/6007 "2011-12-07T11:14:51Z")
Hi! I indexed a lot of documents. Two are very similar as they have the same name and the same city. The only difference is that on of these two has some fields with a lot of text in it. When I do a search over \_a… --- ## [Error with SSL keystore when trying to do remote reindex](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 4\ **Last updated:** [November 4, 2022, 7:53am UTC](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800 "2022-11-04T07:53:06Z")
Hi, I'm trying to perform a remote reindex and the remote ES has been configured with SSL by someone else. I was able to get the abc.p12 cert of the remote ES, as well as the password that was auto-generated (an alpha-n… --- ## [Kibana start and its status is yellow but can't accessible from browser](https://discuss.elastic.co/t/kibana-start-and-its-status-is-yellow-but-cant-accessible-from-browser/97918)
**Author:** [@qrshat\_gl](https://discuss.elastic.co/u/qrshat_gl)\ **Replies:** 3\ **Last updated:** [September 12, 2017, 2:49pm UTC](https://discuss.elastic.co/t/kibana-start-and-its-status-is-yellow-but-cant-accessible-from-browser/97918 "2017-09-12T14:49:59Z")
Hello When i started kibana, followed logs are in log file. I understand kibana is working fine from the logs. But i cant’t access kibana from the browser. Installed elasticsearch and kibana releases are the same and … --- ## [Why elasticsearch does not come with a CLI?](https://discuss.elastic.co/t/why-elasticsearch-does-not-come-with-a-cli/99485)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 7\ **Last updated:** [September 7, 2017, 6:48am UTC](https://discuss.elastic.co/t/why-elasticsearch-does-not-come-with-a-cli/99485 "2017-09-07T06:48:05Z")
It has been 2-3 months I have been using elasticsearch. I often wonder why we elasticsearch has its own CLI ? Almost all other databases have a shell. I am not looking for a CLI. I just want to know why ? Is it not pos… --- ## [Pulling logs from remote machine](https://discuss.elastic.co/t/pulling-logs-from-remote-machine/43309)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 6\ **Last updated:** [March 2, 2016, 11:06pm UTC](https://discuss.elastic.co/t/pulling-logs-from-remote-machine/43309 "2016-03-02T23:06:57Z")
How can I configure logstash to read from a particular log file on a remote location of a server? In other words, how can I pull logs from remote machines? Please provide me with couple of options.. --- ## [How to disable \_all field in production mode?](https://discuss.elastic.co/t/how-to-disable-all-field-in-production-mode/110945)
**Author:** [@majid\_zarrin](https://discuss.elastic.co/u/majid_zarrin)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 2:51pm UTC](https://discuss.elastic.co/t/how-to-disable-all-field-in-production-mode/110945 "2017-12-21T14:51:06Z")
Hello I had Elasticsearh v5.6.2 and I do upgrade to v6.0.1. I expected Elasticsearch removes \_all field because I didn't explicitly declare it as true on the mapping but it didn't. Is there any way that I disable \_all… --- ## [Installing Logstash Plugins failing on Windows 10](https://discuss.elastic.co/t/installing-logstash-plugins-failing-on-windows-10/93287)
**Author:** [@patrickian](https://discuss.elastic.co/u/patrickian)\ **Replies:** 8\ **Last updated:** [July 20, 2017, 10:15pm UTC](https://discuss.elastic.co/t/installing-logstash-plugins-failing-on-windows-10/93287 "2017-07-20T22:15:40Z")
Hi, I'm using logstash 5.5 running on Windows 10 and I'm trying to install the logstash elapsed filter by running the command ./logstash-plugin install logstash-filter-elapsed in the bin folder of my logstash instal… --- ## [Elasticsearch 2.1: Cannot install Marvel into Kibana](https://discuss.elastic.co/t/elasticsearch-2-1-cannot-install-marvel-into-kibana/38587)
**Author:** [@blattmann](https://discuss.elastic.co/u/blattmann)\ **Replies:** 6\ **Last updated:** [January 11, 2016, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-2-1-cannot-install-marvel-into-kibana/38587 "2016-01-11T16:25:57Z")
Hello! I am a newbie to the ES world and just trying to get my local environment set up. I am using a Mac and I used Homebrew to install Elasticsearch and Kibana. Now I want to add Marvel to Kibana but it fails with … --- ## [How to check the filebeat logs](https://discuss.elastic.co/t/how-to-check-the-filebeat-logs/93132)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 2\ **Last updated:** [July 19, 2017, 1:52am UTC](https://discuss.elastic.co/t/how-to-check-the-filebeat-logs/93132 "2017-07-19T01:52:30Z")
How will I know if I the filebeat already started without errors and ready to ship data logs to logstash? I check the services, and the filebeat is currently running. I also check the logs in C:/ProgramData/filebeat/re… --- ## [Cannot start Elasticsearch when using repository-s3 plugin](https://discuss.elastic.co/t/cannot-start-elasticsearch-when-using-repository-s3-plugin/96318)
**Author:** [@ps\_tom](https://discuss.elastic.co/u/ps_tom)\ **Replies:** 7\ **Last updated:** [August 17, 2017, 3:13pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-when-using-repository-s3-plugin/96318 "2017-08-17T15:13:40Z")
I am using ES 5.5.1 running within Docker containers spread across 3 AWS EC2 instances. These are run based on the official Elastic Docker image from docker.elastic.co/elasticsearch/elasticsearch:5.5.1, with the reposito… [Previous page](https://discuss.elastic.co/top.md?page=405&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=407&per_page=50&period=all)