# Top

**URL:** https://discuss.elastic.co/top.md?page=416&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 417

---

## [What's wrong with my permissions?](https://discuss.elastic.co/t/whats-wrong-with-my-permissions/154880)

<div class="topic-metadata">

**Author:** [@monk](https://discuss.elastic.co/u/monk)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 11:03pm UTC](https://discuss.elastic.co/t/whats-wrong-with-my-permissions/154880 "2018-10-31T23:03:50Z")

</div>

I installed elasticsearch using the APT instructions here. What follows is the fun I've had since. ubuntu@machine-es:~$ sudo elasticsearch \[2018-10-31T15:30:44,020\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\]…

---

## [How do you do a match query with and operator?](https://discuss.elastic.co/t/how-do-you-do-a-match-query-with-and-operator/97295)

<div class="topic-metadata">

**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 10:30am UTC](https://discuss.elastic.co/t/how-do-you-do-a-match-query-with-and-operator/97295 "2017-08-18T10:30:57Z")

</div>

I’m finding the documentation on elasticsearch 5.5 to be sparse, inaccurate and overall frustrating. I have a simple match query. When I try to use the “and” operator. It returns no results. Older google searches for “mu…

---

## [X-pack failed to initialize a TrustManagerFactory](https://discuss.elastic.co/t/x-pack-failed-to-initialize-a-trustmanagerfactory/66845)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 2\
**Last updated:** [November 22, 2016, 12:56pm UTC](https://discuss.elastic.co/t/x-pack-failed-to-initialize-a-trustmanagerfactory/66845 "2016-11-22T12:56:14Z")

</div>

I have set up Elasticsearch, Kibana and X-pack according to installation guidelines and made sure that it worked as expected. Now I want to send a Kibana report using Watchers in X-Pack. I have followed this tutorial to …

---

## [Displaying Geo data on Tile Map](https://discuss.elastic.co/t/displaying-geo-data-on-tile-map/29528)

<div class="topic-metadata">

**Author:** [@ashwintumma](https://discuss.elastic.co/u/ashwintumma)\
**Replies:** 1\
**Last updated:** [September 18, 2015, 1:34am UTC](https://discuss.elastic.co/t/displaying-geo-data-on-tile-map/29528 "2015-09-18T01:34:35Z")

</div>

I have the following logstash filter configuration, wherein the input is a JSON file which already has latitude and longitude data. When I index the data, in the document, I do find attributes of longitude, and latitude.…

---

## [No Compatible Fields: The "logstash-\*" index pattern does not contain any of the following field types: geo\_point](https://discuss.elastic.co/t/no-compatible-fields-the-logstash-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/110473)

<div class="topic-metadata">

**Author:** [@bianchi74](https://discuss.elastic.co/u/bianchi74)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 9:31am UTC](https://discuss.elastic.co/t/no-compatible-fields-the-logstash-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/110473 "2017-12-13T09:31:52Z")

</div>

Hi all, when I try to create a "Coordinate Map" I receive the following error message: No Compatible Fields: The "logstash-\*" index pattern does not contain any of the following field types: geo\_point My coordinates…

---

## [Logstash and elasticsearch behind HA-proxy](https://discuss.elastic.co/t/logstash-and-elasticsearch-behind-ha-proxy/66744)

<div class="topic-metadata">

**Author:** [@pdesoyres](https://discuss.elastic.co/u/pdesoyres)\
**Replies:** 2\
**Last updated:** [November 21, 2016, 4:52pm UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-behind-ha-proxy/66744 "2016-11-21T16:52:38Z")

</div>

Hello, I am trying to output events to elasticsearch : input { heartbeat { interval =\> 5 message =\> 'Hello from Logstash' } } output {elasticsearch {hosts =\> \[ 'http://registry.marathon.…

---

## [Elastic doesn't start again after I shut it down](https://discuss.elastic.co/t/elastic-doesnt-start-again-after-i-shut-it-down/143056)

<div class="topic-metadata">

**Author:** [@AmrMostafa](https://discuss.elastic.co/u/AmrMostafa)\
**Replies:** 6\
**Last updated:** [August 7, 2018, 9:17am UTC](https://discuss.elastic.co/t/elastic-doesnt-start-again-after-i-shut-it-down/143056 "2018-08-07T09:17:39Z")

</div>

\-\>Elasticsearch version:- 6.3.2 -\>JVM version (java -version): java version "10.0.2" 2018-07-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.2+13) Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10.0.2+13, mixed mo…

---

## [Is there a way to rebalance data nodes by disk space and not shards?](https://discuss.elastic.co/t/is-there-a-way-to-rebalance-data-nodes-by-disk-space-and-not-shards/274799)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 4\
**Last updated:** [June 3, 2021, 9:39pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-rebalance-data-nodes-by-disk-space-and-not-shards/274799 "2021-06-03T21:39:47Z")

</div>

Is there a way to rebalance data nodes by disk space and not shards? I have a cluster that has a total of 846 indices but 273 of them have KBs of data while the rest have around 7GBs each since they rollover at 7GB. Thi…

---

## [How to process messages strictly in the order they arrive?](https://discuss.elastic.co/t/how-to-process-messages-strictly-in-the-order-they-arrive/56790)

<div class="topic-metadata">

**Author:** [@peter\_rietzler](https://discuss.elastic.co/u/peter_rietzler)\
**Replies:** 4\
**Last updated:** [July 30, 2016, 4:45pm UTC](https://discuss.elastic.co/t/how-to-process-messages-strictly-in-the-order-they-arrive/56790 "2016-07-30T16:45:47Z")

</div>

Hi everybody. I've got an inputfile that contains data in the following format (one json object per line) {id: "1", status: "Running"} {id: "1", status: "Finished"} I'm shipping this via Filebeat to Logstash and then …

---

## [How can I specify size unlimited in Curl command?](https://discuss.elastic.co/t/how-can-i-specify-size-unlimited-in-curl-command/96916)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 1:00pm UTC](https://discuss.elastic.co/t/how-can-i-specify-size-unlimited-in-curl-command/96916 "2017-08-14T13:00:48Z")

</div>

Currently, when we write search query (match all) it will return first 10 hits but I want to print all records but in query I can specify size till 10,000 how can set size =unlimited.

---

## [Load Elasticsearch from mongoDB backup](https://discuss.elastic.co/t/load-elasticsearch-from-mongodb-backup/42145)

<div class="topic-metadata">

**Author:** [@MrMSilvey](https://discuss.elastic.co/u/MrMSilvey)\
**Replies:** 6\
**Last updated:** [February 18, 2016, 8:26pm UTC](https://discuss.elastic.co/t/load-elasticsearch-from-mongodb-backup/42145 "2016-02-18T20:26:41Z")

</div>

I have been provided a mongoDB export .json file by a client, and they want o load this into elasticsearch (ES) to perform testing. They have a process currently in place to extract data from MySQL and load it into mong…

---

## [Tracking user activity](https://discuss.elastic.co/t/tracking-user-activity/142765)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 3\
**Last updated:** [August 9, 2018, 9:07am UTC](https://discuss.elastic.co/t/tracking-user-activity/142765 "2018-08-09T09:07:55Z")

</div>

Hello, I am wondering if it is possible to track a users activity to see who they are communicating with using Kibana?

---

## [Date field timezone](https://discuss.elastic.co/t/date-field-timezone/146947)

<div class="topic-metadata">

**Author:** [@oms1226](https://discuss.elastic.co/u/oms1226)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 8:38am UTC](https://discuss.elastic.co/t/date-field-timezone/146947 "2018-09-04T08:38:13Z")

</div>

I don't use @timestamp. but I have own date-type field. The field name is execTime. my datas only upload under offline. For example, all the datas move to elastic server using USB memory and so on. Recently I found t…

---

## [Guidance on partial keyword search](https://discuss.elastic.co/t/guidance-on-partial-keyword-search/351094)

<div class="topic-metadata">

**Author:** [@Sandip\_Maniar](https://discuss.elastic.co/u/Sandip_Maniar)\
**Replies:** 4\
**Last updated:** [January 16, 2024, 4:06pm UTC](https://discuss.elastic.co/t/guidance-on-partial-keyword-search/351094 "2024-01-16T16:06:57Z")

</div>

Hi, What is the most effective approach for implementing partial keyword search in the context of lengthy search texts, exceeding 5000 characters? For instance, if the keyword is "Exclusive," searching with "clus" shoul…

---

## [Mustache transform script throwing "Failed to compile inline script" error](https://discuss.elastic.co/t/mustache-transform-script-throwing-failed-to-compile-inline-script-error/127364)

<div class="topic-metadata">

**Author:** [@singrahu](https://discuss.elastic.co/u/singrahu)\
**Replies:** 4\
**Last updated:** [April 10, 2018, 1:18pm UTC](https://discuss.elastic.co/t/mustache-transform-script-throwing-failed-to-compile-inline-script-error/127364 "2018-04-10T13:18:22Z")

</div>

Elastic stack: 6.2.2 I am trying to convert the payload to JSON and then pass it to a Webhook action. My Watcher transform script looks like: { "trigger": { "schedule": { "interval": "1m" } }, "inp…

---

## [Add fields in an existing Kibana Index Pattern](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096)

<div class="topic-metadata">

**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\
**Replies:** 3\
**Last updated:** [December 2, 2020, 9:41am UTC](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096 "2020-12-02T09:41:20Z")

</div>

Hello everyone, I would like to know if it's possible to add new fields to an existing index pattern in Kibana. I've had new parameters to existings logs recently but they haven't been ingested well (sort of ?) because…

---

## [LogStash multiple files in single location](https://discuss.elastic.co/t/logstash-multiple-files-in-single-location/92490)

<div class="topic-metadata">

**Author:** [@ShashiK](https://discuss.elastic.co/u/ShashiK)\
**Replies:** 4\
**Last updated:** [July 12, 2017, 6:01pm UTC](https://discuss.elastic.co/t/logstash-multiple-files-in-single-location/92490 "2017-07-12T18:01:57Z")

</div>

Logstash works for me when i have a direct file reference - When I use the single file reference in the logstash config- path =\> "C:\\LogRepository\\transaction\\Web\\HttpUser\_1312.csv" It works for me. However when i put …

---

## [I am getting this error in fluentd pods , i have a efk setup in eks cluster , can someone help me with this please - error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch" location=nil tag="ku](https://discuss.elastic.co/t/i-am-getting-this-error-in-fluentd-pods-i-have-a-efk-setup-in-eks-cluster-can-someone-help-me-with-this-please-error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch-location-nil-tag-ku/333040)

<div class="topic-metadata">

**Author:** [@jatinarora0](https://discuss.elastic.co/u/jatinarora0)\
**Replies:** 2\
**Last updated:** [May 16, 2023, 4:48am UTC](https://discuss.elastic.co/t/i-am-getting-this-error-in-fluentd-pods-i-have-a-efk-setup-in-eks-cluster-can-someone-help-me-with-this-please-error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch-location-nil-tag-ku/333040 "2023-05-16T04:48:24Z")

</div>

error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch" location=nil tag="kubernetes.var.log.containers.fluentd

---

## [How to configure APM of elastic search in ASP.NET Framework?](https://discuss.elastic.co/t/how-to-configure-apm-of-elastic-search-in-asp-net-framework/216086)

<div class="topic-metadata">

**Author:** [@joao\_vitor](https://discuss.elastic.co/u/joao_vitor)\
**Replies:** 7\
**Last updated:** [February 6, 2020, 9:17am UTC](https://discuss.elastic.co/t/how-to-configure-apm-of-elastic-search-in-asp-net-framework/216086 "2020-02-06T09:17:55Z")

</div>

i need a config of apm in .net framework. I'm trying different approaches, but without success.. Help us!!!!!!

---

## [Distinct count of 2 fields](https://discuss.elastic.co/t/distinct-count-of-2-fields/53278)

<div class="topic-metadata">

**Author:** [@T3rm1](https://discuss.elastic.co/u/T3rm1)\
**Replies:** 3\
**Last updated:** [June 21, 2016, 3:47pm UTC](https://discuss.elastic.co/t/distinct-count-of-2-fields/53278 "2016-06-21T15:47:09Z")

</div>

My index can have several entries that are equal in two fields. Is it possible to count these as one in the given time interval? Example: One field is id, another field is action. The same action can be logged for the sa…

---

## [Filtering for apostrophes and single quotes confusion?](https://discuss.elastic.co/t/filtering-for-apostrophes-and-single-quotes-confusion/12102)

<div class="topic-metadata">

**Author:** [@phill](https://discuss.elastic.co/u/phill)\
**Replies:** 2\
**Last updated:** [May 24, 2013, 6:27pm UTC](https://discuss.elastic.co/t/filtering-for-apostrophes-and-single-quotes-confusion/12102 "2013-05-24T18:27:48Z")

</div>

Recently a customer of ours confused himself and us when he discovered his corpus of documents contains (at least) two different characters used for the apostrophe. I didn't recognize the issue at first. For thos…

---

## [Failed to execute fetch phase](https://discuss.elastic.co/t/failed-to-execute-fetch-phase/65502)

<div class="topic-metadata">

**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\
**Replies:** 4\
**Last updated:** [November 10, 2016, 8:47am UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase/65502 "2016-11-10T08:47:40Z")

</div>

I've got following lines constantly in my logs for elasticsearch 5: \[2016-11-09T14:58:45,189\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[elasticsearch01dev\] \[6702157\] Failed to execute fetch phase org.elasticsearch.transpo…

---

## [Elasticsearch cluster replace ca file](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703)

<div class="topic-metadata">

**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 2:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703 "2020-08-28T02:45:55Z")

</div>

How to replace CA files in cluster without downtime I referred to this article Encrypting communications in an Elasticsearch Docker Containeredit when building a cluster Now that I have a new node that wants to join th…

---

## [This version of Kibana requires Elasticsearch v6.2.3 on all nodes](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v6-2-3-on-all-nodes/131024)

<div class="topic-metadata">

**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\
**Replies:** 7\
**Last updated:** [May 9, 2018, 6:41am UTC](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v6-2-3-on-all-nodes/131024 "2018-05-09T06:41:32Z")

</div>

Hello, Still new to the Elastic stack, investigating, learning.. but occasionally I run into problems which take me hours without any sight of a solution, but in the end it's always some minor bug (yeah, I might have th…

---

## [Setting Filebeat 5 with Kafka 0.10 over TLS](https://discuss.elastic.co/t/setting-filebeat-5-with-kafka-0-10-over-tls/59550)

<div class="topic-metadata">

**Author:** [@Tsury](https://discuss.elastic.co/u/Tsury)\
**Replies:** 4\
**Last updated:** [September 4, 2016, 12:25pm UTC](https://discuss.elastic.co/t/setting-filebeat-5-with-kafka-0-10-over-tls/59550 "2016-09-04T12:25:24Z")

</div>

I have a perfectly working Filebeat 5.0.0-alpha5 and Kafka 0.10 setup. They reside in different physical servers, each as a Docker container. I am trying to set them up to use SSL(TLS) instead of PLAINTEXT. I am just…

---

## [Error \[Manticore::ResolutionFailure\] elasticsearch: Name or service not known"} at docker-compose](https://discuss.elastic.co/t/error-manticore-resolutionfailure-elasticsearch-name-or-service-not-known-at-docker-compose/184384)

<div class="topic-metadata">

**Author:** [@freelanseod](https://discuss.elastic.co/u/freelanseod)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 3:53pm UTC](https://discuss.elastic.co/t/error-manticore-resolutionfailure-elasticsearch-name-or-service-not-known-at-docker-compose/184384 "2019-06-05T15:53:11Z")

</div>

Hello to everyone! Can anyone help with this? \[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://localhost:9200/", :error\_type=\>LogStash::Out…

---

## [Visualize date range with hourly buckets 1 - 24](https://discuss.elastic.co/t/visualize-date-range-with-hourly-buckets-1-24/44638)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 2\
**Last updated:** [March 19, 2016, 7:11pm UTC](https://discuss.elastic.co/t/visualize-date-range-with-hourly-buckets-1-24/44638 "2016-03-19T19:11:57Z")

</div>

Hi I want to visualize the data based on date ranges. The x-axis will be from 1 to 24. It shows the traffic count during each hour over the time period (the period is specified via the time filter). For example, bucket …

---

## [Migrating from Serilog.Sinks.Elasticsearch to Elastic.Serilog.Sinks](https://discuss.elastic.co/t/migrating-from-serilog-sinks-elasticsearch-to-elastic-serilog-sinks/361736)

<div class="topic-metadata">

**Author:** [@rudolf13](https://discuss.elastic.co/u/rudolf13)\
**Replies:** 7\
**Last updated:** [April 18, 2025, 2:34pm UTC](https://discuss.elastic.co/t/migrating-from-serilog-sinks-elasticsearch-to-elastic-serilog-sinks/361736 "2025-04-18T14:34:36Z")

</div>

public static IHostBuilder ConfigureLogging(this IHostBuilder hostBuilder) { return hostBuilder.UseSerilog((context, services, configuration) =\> { configuration.WriteTo.Console() .WriteTo.Debug() .WriteTo…

---

## [Unable to install Kibana Plugin?](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/146699)

<div class="topic-metadata">

**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\
**Replies:** 6\
**Last updated:** [September 3, 2018, 10:26am UTC](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/146699 "2018-09-03T10:26:04Z")

</div>

I am trying to install enhanced table Plugin in Kibana. When trying to install the plugin using $KIBANA\_HOME/bin/kibana-plugin install https://github.com/fbaligand/kibana-enhanced-table/releases/download/vX.Y.Z/enhanc…

---

## [Invalid sequence of tokens near](https://discuss.elastic.co/t/invalid-sequence-of-tokens-near/200184)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 5\
**Last updated:** [September 24, 2019, 8:27am UTC](https://discuss.elastic.co/t/invalid-sequence-of-tokens-near/200184 "2019-09-24T08:27:22Z")

</div>

Hi All, I am working on a watcher where I am getting the following error: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) \[?:1.8.0\_222\] at java.util.concurrent.ThreadPoolExecutor$Wo…

---

## [Problem in integrating external script in Kibana Plugin](https://discuss.elastic.co/t/problem-in-integrating-external-script-in-kibana-plugin/214170)

<div class="topic-metadata">

**Author:** [@RaghibHuda](https://discuss.elastic.co/u/RaghibHuda)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 7:53pm UTC](https://discuss.elastic.co/t/problem-in-integrating-external-script-in-kibana-plugin/214170 "2020-01-09T19:53:58Z")

</div>

I am developing a plugin in Kibana with React. I need google map API for that. But when I render my component with mp API script it gives an error. I searched and found that and the reason behind it is the content securi…

---

## [Create Indices pattern through commnadline](https://discuss.elastic.co/t/create-indices-pattern-through-commnadline/54180)

<div class="topic-metadata">

**Author:** [@bharat](https://discuss.elastic.co/u/bharat)\
**Replies:** 1\
**Last updated:** [June 28, 2016, 5:08pm UTC](https://discuss.elastic.co/t/create-indices-pattern-through-commnadline/54180 "2016-06-28T17:08:38Z")

</div>

Hi. Iam using Kibana-4.5 and Elasticseach 2.3. I know to register the indices pattern in Kibana via UI, @settings tab. But I want it to do through curl commands any Help

---

## [Elasticsearch working fine on localhost but not from remote client](https://discuss.elastic.co/t/elasticsearch-working-fine-on-localhost-but-not-from-remote-client/172751)

<div class="topic-metadata">

**Author:** [@Roshan\_Karwalkar](https://discuss.elastic.co/u/Roshan_Karwalkar)\
**Replies:** 5\
**Last updated:** [March 18, 2019, 12:51pm UTC](https://discuss.elastic.co/t/elasticsearch-working-fine-on-localhost-but-not-from-remote-client/172751 "2019-03-18T12:51:14Z")

</div>

Hi , I am new to ELK stack and I have installed ElasticSearch,Kibana and Logstash on my amazon ec2 instance.Currently I have started only kibana and elasticsearch.I am able to access elasticsearch from localhost but no…

---

## [How to add a new Kibana 5 data source besides elasticsearch?](https://discuss.elastic.co/t/how-to-add-a-new-kibana-5-data-source-besides-elasticsearch/86792)

<div class="topic-metadata">

**Author:** [@Muhammad-Ezzat](https://discuss.elastic.co/u/Muhammad-Ezzat)\
**Replies:** 2\
**Last updated:** [May 23, 2017, 2:51pm UTC](https://discuss.elastic.co/t/how-to-add-a-new-kibana-5-data-source-besides-elasticsearch/86792 "2017-05-23T14:51:36Z")

</div>

I'm attempting to add a new data source for Kibana to read from. Does it all it take is to only add a new plugin to the source code or there are other areas where I should take into consideration?

---

## [New user can't login kibana](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810)

<div class="topic-metadata">

**Author:** [@lonelyleaf](https://discuss.elastic.co/u/lonelyleaf)\
**Replies:** 6\
**Last updated:** [November 26, 2019, 10:42am UTC](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810 "2019-11-26T10:42:57Z")

</div>

I setup eck and login by default "elastic" account successfully.But I or logstash can't login by new account created in kibana. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authe…

---

## [New Elasticsearch 8 Java API - Sort by](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352)

<div class="topic-metadata">

**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\
**Replies:** 4\
**Last updated:** [August 4, 2022, 1:33pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352 "2022-08-04T13:33:28Z")

</div>

I am using the new Elasticsearch 8 Java client API to query data and sort by one field. esClient.search(s -\> { return s .index("employee") .query(q -\> q …

---

## [Elasticsearch doesn't start anymore after x-pack settings](https://discuss.elastic.co/t/elasticsearch-doesnt-start-anymore-after-x-pack-settings/119200)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 4\
**Last updated:** [February 12, 2018, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-anymore-after-x-pack-settings/119200 "2018-02-12T08:53:41Z")

</div>

Hello, I try to install X-pack in Elasticsearch following this link : Configure TLS | Elasticsearch Guide \[8.11\] | Elastic When I add these 5 lines (See photo) to my elasticsearch.yml configuration file, elasticsearch c…

---

## [혹 data node에서 master를 못찾는 문제가 가끔있어요](https://discuss.elastic.co/t/data-node-master/24389)

<div class="topic-metadata">

**Author:** [@Se\_Choi](https://discuss.elastic.co/u/Se_Choi)\
**Replies:** 1\
**Last updated:** [June 30, 2015, 9:03am UTC](https://discuss.elastic.co/t/data-node-master/24389 "2015-06-30T09:03:25Z")

</div>

마스터노드는 멀쩡한데 내렸다가 다시 올린 데이터노드가 못 붙는 경우가 있어요. 마스터가 바뻐서 그런거 같은데 혹 이럴 경우 없으신지요 ?

---

## [Create a visualization with a metric expressing the ratio between two other aggregations](https://discuss.elastic.co/t/create-a-visualization-with-a-metric-expressing-the-ratio-between-two-other-aggregations/118686)

<div class="topic-metadata">

**Author:** [@Carlo\_Arnaboldi](https://discuss.elastic.co/u/Carlo_Arnaboldi)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 7:56am UTC](https://discuss.elastic.co/t/create-a-visualization-with-a-metric-expressing-the-ratio-between-two-other-aggregations/118686 "2018-02-12T07:56:30Z")

</div>

Greetings. Let's say that I have this very simple index, where each document is made by 3 columns: Col.A -\> can be 1,2 or 3 Col.B -\> contains a number between 1 and 1000 Col.C -\> like Col.B, it contains a number betw…

---

## [Elasticsearch search is not working](https://discuss.elastic.co/t/elasticsearch-search-is-not-working/117917)

<div class="topic-metadata">

**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 8:51am UTC](https://discuss.elastic.co/t/elasticsearch-search-is-not-working/117917 "2018-02-01T08:51:27Z")

</div>

This search returns the correct document in kibana. date:"18-01-29" AND time:"00:59:58,809" AND EventType:"ERROR" How do I search the same document in elasticsearch? I get an error with this search. curl -XGET 'ip:92…

---

## [Embedding Kibana dashboard into react application](https://discuss.elastic.co/t/embedding-kibana-dashboard-into-react-application/173944)

<div class="topic-metadata">

**Author:** [@Ji\_Ho\_Choi](https://discuss.elastic.co/u/Ji_Ho_Choi)\
**Replies:** 1\
**Last updated:** [March 26, 2019, 2:34pm UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-into-react-application/173944 "2019-03-26T14:34:20Z")

</div>

I need to embed kibana dashboard into react application but depending on the user, the data that user is able to view have to be restricted e.g. if user id is 9983 -\> data with only userId:9983 should be available on the…

---

## [Elasticsearch - can not run elasticsearch as root](https://discuss.elastic.co/t/elasticsearch-can-not-run-elasticsearch-as-root/91616)

<div class="topic-metadata">

**Author:** [@vivekam79](https://discuss.elastic.co/u/vivekam79)\
**Replies:** 1\
**Last updated:** [July 3, 2017, 10:48am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-run-elasticsearch-as-root/91616 "2017-07-03T10:48:20Z")

</div>

All, I have installed elasticsearch as mentioned in guide. However, when I try to run ./bin/elasticsearch it errors as below: Please advise how to resolve this issue. \[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler…

---

## [How to change the loading logo and text](https://discuss.elastic.co/t/how-to-change-the-loading-logo-and-text/75686)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 3\
**Last updated:** [February 21, 2017, 6:34pm UTC](https://discuss.elastic.co/t/how-to-change-the-loading-logo-and-text/75686 "2017-02-21T18:34:42Z")

</div>

how to change the loading logo and text by no changing the source code, use hack.js instead?

---

## [Elasticsearch-dsl python connection timeout](https://discuss.elastic.co/t/elasticsearch-dsl-python-connection-timeout/293762)

<div class="topic-metadata">

**Author:** [@maph](https://discuss.elastic.co/u/maph)\
**Replies:** 6\
**Last updated:** [March 7, 2022, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-python-connection-timeout/293762 "2022-03-07T10:19:42Z")

</div>

Hi all, Fairly new to Elasticsearch and hoping that some of you might be able to help me troubleshoot an attempt to use the python Elasticsearch-dsl to perform a search in a public database? I am able to access the dat…

---

## [Convert a json nested string array to a flat string](https://discuss.elastic.co/t/convert-a-json-nested-string-array-to-a-flat-string/116731)

<div class="topic-metadata">

**Author:** [@hmed](https://discuss.elastic.co/u/hmed)\
**Replies:** 3\
**Last updated:** [January 25, 2018, 10:08am UTC](https://discuss.elastic.co/t/convert-a-json-nested-string-array-to-a-flat-string/116731 "2018-01-25T10:08:59Z")

</div>

Hello, I have this JSON { "users":"\[{"id":1,"name":"bob"},{"id":2,"name":"alice"},{"id":3,"name":"david"}\]", "date":"23/01/2017" } even if I'm using the logstash filter: filter { split { field =\> "users" } } t…

---

## [Docs Count vs Index\_total](https://discuss.elastic.co/t/docs-count-vs-index-total/113511)

<div class="topic-metadata">

**Author:** [@jonessmithville](https://discuss.elastic.co/u/jonessmithville)\
**Replies:** 1\
**Last updated:** [January 2, 2018, 5:36pm UTC](https://discuss.elastic.co/t/docs-count-vs-index-total/113511 "2018-01-02T17:36:24Z")

</div>

I am trying to find a way to determine how fast or if all documents are getting indexed timely. I checked the previous days index --- GET indexname-2017.12.27/\_stats and noticed that docs": { "count": 19695896, Is…

---

## [How to restrict access to specific indices when the user get the space privilege](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876)

<div class="topic-metadata">

**Author:** [@empire](https://discuss.elastic.co/u/empire)\
**Replies:** 3\
**Last updated:** [March 19, 2021, 11:39am UTC](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876 "2021-03-19T11:39:19Z")

</div>

Hi, I have a role defined as below. would like to know if the indices restriction still work when the user is allowed to get access to the "vulcano" space. e.g will the user in this role still be restricted to only hav…

---

## [Logstash Parsing for tags](https://discuss.elastic.co/t/logstash-parsing-for-tags/94703)

<div class="topic-metadata">

**Author:** [@jayden.kim](https://discuss.elastic.co/u/jayden.kim)\
**Replies:** 4\
**Last updated:** [July 28, 2017, 2:39pm UTC](https://discuss.elastic.co/t/logstash-parsing-for-tags/94703 "2017-07-28T14:39:14Z")

</div>

I am using rsyslog to send selected logs to a server with ELK. It is hard to manage the list of logs through rsyslog.d conf, thus I want to send all logs from a certain directory in /var/log. The problem I encounter is t…

---

## [SQL Server stream into Elastic Search](https://discuss.elastic.co/t/sql-server-stream-into-elastic-search/46908)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 7\
**Last updated:** [May 17, 2017, 11:13pm UTC](https://discuss.elastic.co/t/sql-server-stream-into-elastic-search/46908 "2017-05-17T23:13:19Z")

</div>

Sorry if this has been mentioned before I am looking to stream in data from Microsoft SQL Server, I looked at Rivers and then found out it was deprecated, so wasted a little time. So then I looked at what next, so …

---

## [How to delete index through curl on a secure cluster](https://discuss.elastic.co/t/how-to-delete-index-through-curl-on-a-secure-cluster/158578)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 2\
**Last updated:** [November 28, 2018, 3:47pm UTC](https://discuss.elastic.co/t/how-to-delete-index-through-curl-on-a-secure-cluster/158578 "2018-11-28T15:47:12Z")

</div>

I know this is probably a basic question. I just cant seem to find the answer. I know I need to include the username and password -u:p but I am not sure of the exact format for the command. I am trying to delete the .…

[Previous page](https://discuss.elastic.co/top.md?page=415&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=417&per_page=50&period=all)
