# Top **URL:** https://discuss.elastic.co/top.md?page=455&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 456 --- ## [Kibana 8.12.1, 7.17.18 Security Update (ESA-2024-04)](https://discuss.elastic.co/t/kibana-8-12-1-7-17-18-security-update-esa-2024-04/352805)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 7, 2024, 10:07pm UTC](https://discuss.elastic.co/t/kibana-8-12-1-7-17-18-security-update-esa-2024-04/352805 "2024-02-07T22:07:29Z")
Kibana heap buffer overflow vulnerability (ESA-2024-04) This issue requires authenticated access to Kibana. On Dec 21, 2023, Google Chrome announced CVE-2023-7024, described as “Heap buffer overflow in WebRTC in Google… --- ## [Elastic Stack 5.5.1 and Kibana 4.6.5 security update](https://discuss.elastic.co/t/elastic-stack-5-5-1-and-kibana-4-6-5-security-update/94513)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [July 25, 2017, 4:20pm UTC](https://discuss.elastic.co/t/elastic-stack-5-5-1-and-kibana-4-6-5-security-update/94513 "2017-07-25T16:20:13Z")
Kibana Node.js security flaw (ESA-2017-14) The version of Node.js shipped in all versions of Kibana prior to 5.5.1 contains a Denial of Service flaw in it's HashTable random seed. This flaw could allow a remote attacke… --- ## [Troubles with different file types using ingest attachment processor plugin](https://discuss.elastic.co/t/troubles-with-different-file-types-using-ingest-attachment-processor-plugin/72819)
**Author:** [@rshake](https://discuss.elastic.co/u/rshake)\ **Replies:** 7\ **Last updated:** [January 26, 2017, 9:56pm UTC](https://discuss.elastic.co/t/troubles-with-different-file-types-using-ingest-attachment-processor-plugin/72819 "2017-01-26T21:56:58Z")
I'm having multiple problems with the ingest attachment plugin. I'm on ES version 5.1.1 The ingest attachment plugin has been installed I've created my pipeline processor(s) I have successfully ingested some simple te… --- ## [Script field with Datefield API fails after 7.0.1 update](https://discuss.elastic.co/t/script-field-with-datefield-api-fails-after-7-0-1-update/180256)
**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\ **Replies:** 2\ **Last updated:** [May 9, 2019, 6:44am UTC](https://discuss.elastic.co/t/script-field-with-datefield-api-fails-after-7-0-1-update/180256 "2019-05-09T06:44:20Z")
Hi, I was using the datefield API to create an hour of day scriptfield - (doc\['date'\].date.hourOfDay + 2). Since upgrading yo 7.0.1 this now fails and i had to delete the field to load items in the discover tab. Error… --- ## [Watcher with foreach and aggregation](https://discuss.elastic.co/t/watcher-with-foreach-and-aggregation/214579)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 4\ **Last updated:** [January 13, 2020, 2:03pm UTC](https://discuss.elastic.co/t/watcher-with-foreach-and-aggregation/214579 "2020-01-13T14:03:46Z")
Hi, I have a watcher with an aggregation query. The result of the aggregation is e.g: "min\_docs" : { "value" : 17.0, "keys" : \[ "CID1","CID2" \] } I have defined the watcher condition and action defined as: "condi… --- ## [Loading a CSV file](https://discuss.elastic.co/t/loading-a-csv-file/113760)
**Author:** [@Rahul\_Pm](https://discuss.elastic.co/u/Rahul_Pm)\ **Replies:** 5\ **Last updated:** [January 4, 2018, 9:04am UTC](https://discuss.elastic.co/t/loading-a-csv-file/113760 "2018-01-04T09:04:34Z")
Hi, I'm trying to load a csv file (stored on my windows machine) into elasticsearch via logstash. I need to visualize it on Kibana. I have everything installed on my windows machine. P.S. It's my first time using Logst… --- ## ["numHits must be \> 0; please use TotalHitCountCollector if you just need the total hit count" following upgrade to ES 7.7](https://discuss.elastic.co/t/numhits-must-be-0-please-use-totalhitcountcollector-if-you-just-need-the-total-hit-count-following-upgrade-to-es-7-7/233174)
**Author:** [@toby\_jn](https://discuss.elastic.co/u/toby_jn)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 8:41pm UTC](https://discuss.elastic.co/t/numhits-must-be-0-please-use-totalhitcountcollector-if-you-just-need-the-total-hit-count-following-upgrade-to-es-7-7/233174 "2020-05-20T20:41:05Z")
Following an upgrade from 7.5.1 to 7.7.0 we've started seeing an unusual error with queries used to count the number of documents in an index. In 7.7.0 this query now returns an error: curl -X POST '127.0.0.1:9200/v33.… --- ## [Dec 12th, 2023: \[EN\] Retrieval Augmented Generation (RAG) for Improving Support](https://discuss.elastic.co/t/dec-12th-2023-en-retrieval-augmented-generation-rag-for-improving-support/347291)
**Author:** [@corymangini](https://discuss.elastic.co/u/corymangini)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2023-en-retrieval-augmented-generation-rag-for-improving-support/347291 "2023-12-12T08:00:39Z")
In previous articles on the Elastic blog and the December 7th Advent calendar, you have seen how to set up a simple semantic search to find topics without using the exact keyword. Elastic runs its own Support Hub on t… --- ## [Synonym using a file is not working: malformed\_input\_exception](https://discuss.elastic.co/t/synonym-using-a-file-is-not-working-malformed-input-exception/60487)
**Author:** [@valerioorfano](https://discuss.elastic.co/u/valerioorfano)\ **Replies:** 6\ **Last updated:** [September 16, 2016, 1:28pm UTC](https://discuss.elastic.co/t/synonym-using-a-file-is-not-working-malformed-input-exception/60487 "2016-09-16T13:28:24Z")
Hi i m trying to use synonym file in ES 2.3.4. from the documentation i used the following command in SENSE: POST /mise/ { "index" : { "analysis" : { "analyzer" : { "synonym" :… --- ## [0.16.1 to 0.16.2 upgrade causes "Validation Failed: 1: mapping type is missing" when adding dynamic template](https://discuss.elastic.co/t/0-16-1-to-0-16-2-upgrade-causes-validation-failed-1-mapping-type-is-missing-when-adding-dynamic-template/4624)
**Author:** [@jacorob](https://discuss.elastic.co/u/jacorob)\ **Replies:** 2\ **Last updated:** [June 14, 2011, 11:34pm UTC](https://discuss.elastic.co/t/0-16-1-to-0-16-2-upgrade-causes-validation-failed-1-mapping-type-is-missing-when-adding-dynamic-template/4624 "2011-06-14T23:34:25Z")
I'm adding a dynamic template so that, by default, string types are not analyzed in my index. The code worked fine in 0.16.1, but when I upgraded to 0.16.2 I get an ActionRequestValidationException: Caused by: org.ela… --- ## [How to change the color of visualization based on error?](https://discuss.elastic.co/t/how-to-change-the-color-of-visualization-based-on-error/2800)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 1\ **Last updated:** [June 17, 2015, 12:31am UTC](https://discuss.elastic.co/t/how-to-change-the-color-of-visualization-based-on-error/2800 "2015-06-17T00:31:17Z")
In Dashboards im getting 404 errors. In visualizations i want where ever 404 error is there, i want red color in graphs for visualization. How can i achieve this. Where i have to make changes. If yes where i have to chan… --- ## [How to query object array?](https://discuss.elastic.co/t/how-to-query-object-array/95961)
**Author:** [@Red](https://discuss.elastic.co/u/Red)\ **Replies:** 4\ **Last updated:** [August 7, 2017, 9:37am UTC](https://discuss.elastic.co/t/how-to-query-object-array/95961 "2017-08-07T09:37:42Z")
here is the document { "2": { "20170804" :{ "7": \[{"loc":\[1, 2\], "ts":1}\], "5": \[{"loc":\[1, 2\], "ts":1}\] } } } how to query ts field? --- ## [Elasticsearch search last 5 minutes](https://discuss.elastic.co/t/elasticsearch-search-last-5-minutes/16703)
**Author:** [@sirkubax](https://discuss.elastic.co/u/sirkubax)\ **Replies:** 1\ **Last updated:** [March 31, 2014, 8:33pm UTC](https://discuss.elastic.co/t/elasticsearch-search-last-5-minutes/16703 "2014-03-31T20:33:50Z")
Hi I'm looking for querry that will A. Display all messages registered in defined period time ( in this case - most recent 5 minutes) - there is such search in kibana B. Search for some querry in defined time… --- ## [Intersection aggregation](https://discuss.elastic.co/t/intersection-aggregation/89963)
**Author:** [@martingrayson](https://discuss.elastic.co/u/martingrayson)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 4:21pm UTC](https://discuss.elastic.co/t/intersection-aggregation/89963 "2017-06-19T16:21:56Z")
Hi, I've been struggling to write a query to do the following, any help would be greatly appreciated. My index contains one document per transaction. I'm looking to find: - Number of customers that have purchased pr… --- ## [Traffic light: Red, yellow, green](https://discuss.elastic.co/t/traffic-light-red-yellow-green/43435)
**Author:** [@blake](https://discuss.elastic.co/u/blake)\ **Replies:** 1\ **Last updated:** [March 3, 2016, 8:14pm UTC](https://discuss.elastic.co/t/traffic-light-red-yellow-green/43435 "2016-03-03T20:14:08Z")
I found reference to creating a red/yellow/green traffic light to give a quick status check at http://logz.io/blog/kibana-visualizations/. Is there a quick and dirty (or clean) way to have a pie chart alternate colors ba… --- ## [Terms query not working for me](https://discuss.elastic.co/t/terms-query-not-working-for-me/130918)
**Author:** [@Fish](https://discuss.elastic.co/u/Fish)\ **Replies:** 4\ **Last updated:** [May 18, 2018, 4:27pm UTC](https://discuss.elastic.co/t/terms-query-not-working-for-me/130918 "2018-05-18T16:27:07Z")
I am pretty new to Easticsearch. So, if my question is stupid, I apologize. This is my question: I want search documents that have some fields. I have provided code snippet below. I have a field called "reference numbe… --- ## [Logstash windows version 6.3.2 wont start](https://discuss.elastic.co/t/logstash-windows-version-6-3-2-wont-start/141664)
**Author:** [@jiawang](https://discuss.elastic.co/u/jiawang)\ **Replies:** 5\ **Last updated:** [August 2, 2018, 10:24pm UTC](https://discuss.elastic.co/t/logstash-windows-version-6-3-2-wont-start/141664 "2018-08-02T22:24:36Z")
I am new to elastic. Just downloaded the version of logstash 6.3.2, and want to try it with other components (beat, elasticsearch, kibana). So far, beat, elasticsearch and kibanna are working. However, when i followed th… --- ## [Ignoring old files](https://discuss.elastic.co/t/ignoring-old-files/158372)
**Author:** [@tryptych](https://discuss.elastic.co/u/tryptych)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 9:43am UTC](https://discuss.elastic.co/t/ignoring-old-files/158372 "2018-11-30T09:43:46Z")
I'm new to beats. I am having a lot of trouble getting filebeat to ignore old files. I have ignore\_older: 48h in my filebeats.yml but it does not seem to be working. Why? My folder contains millions of files and it's imp… --- ## [Visualize only the values of the fields](https://discuss.elastic.co/t/visualize-only-the-values-of-the-fields/91793)
**Author:** [@kartikeya\_sharma\_13](https://discuss.elastic.co/u/kartikeya_sharma_13)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 9:18am UTC](https://discuss.elastic.co/t/visualize-only-the-values-of-the-fields/91793 "2017-07-05T09:18:38Z")
Hi , I need to visualize only the values of the fields by some other field . I dont want to perform any sought of aggregation like Avg,Sum, Max,Min, Count on the values . I need to visualize it in Vertical Barchart . … --- ## [Fleet Server - Error - x509: certificate is valid for 127.0.0.1, not x.x.x.x](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-is-valid-for-127-0-0-1-not-x-x-x-x/305226)
**Author:** [@Carlos\_Vinicius](https://discuss.elastic.co/u/Carlos_Vinicius)\ **Replies:** 2\ **Last updated:** [May 30, 2022, 5:23pm UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-is-valid-for-127-0-0-1-not-x-x-x-x/305226 "2022-05-30T17:23:14Z")
Dear, good afternoon! I would like to ask for your support to solve a problem that I have been facing in the configuration of a fleet server in self mode, I created the CA, my Elasticsearch responds to HTTPS, I created … --- ## [Docker Logstash to Elastic: connection refused](https://discuss.elastic.co/t/docker-logstash-to-elastic-connection-refused/135583)
**Author:** [@Adrien\_Renaud](https://discuss.elastic.co/u/Adrien_Renaud)\ **Replies:** 2\ **Last updated:** [June 13, 2018, 10:27am UTC](https://discuss.elastic.co/t/docker-logstash-to-elastic-connection-refused/135583 "2018-06-13T10:27:04Z")
I use the following official dockers: docker run -d -p 9200:9200 -p 9300:9300 --name myel \\ -e "discovery.type=single-node" \\ -e "XPACK\_SECURITY\_ENABLED=false" \\ -e "XPACK\_REPORTING\_E… --- ## [Set up the Kibana dashboards for Metricbeat](https://discuss.elastic.co/t/set-up-the-kibana-dashboards-for-metricbeat/124950)
**Author:** [@Bit\_Addict](https://discuss.elastic.co/u/Bit_Addict)\ **Replies:** 2\ **Last updated:** [March 21, 2018, 2:45pm UTC](https://discuss.elastic.co/t/set-up-the-kibana-dashboards-for-metricbeat/124950 "2018-03-21T14:45:45Z")
Hi all... I am very new to ELK and still learning, so please be forbearing with my probably stupid questions. I tried to find my issue within the search here, did not find it, so I guess it might be a very small issue. … --- ## [Output to Logstash - connection was forcibly closed by the remote host](https://discuss.elastic.co/t/output-to-logstash-connection-was-forcibly-closed-by-the-remote-host/110194)
**Author:** [@rudee](https://discuss.elastic.co/u/rudee)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 9:05pm UTC](https://discuss.elastic.co/t/output-to-logstash-connection-was-forcibly-closed-by-the-remote-host/110194 "2017-12-05T21:05:02Z")
Hi I am trying to test the winlogbeat and Elasticsearch the version is 5.6.4 I am new to Elastic, so still finding my way around. (I have managed to get filebeat working and can see syslogs so the setup is working) W… --- ## [This version of Kibana (v8.4.0) is incompatible](https://discuss.elastic.co/t/this-version-of-kibana-v8-4-0-is-incompatible/307531)
**Author:** [@Emir\_Sener](https://discuss.elastic.co/u/Emir_Sener)\ **Replies:** 3\ **Last updated:** [June 21, 2022, 9:04am UTC](https://discuss.elastic.co/t/this-version-of-kibana-v8-4-0-is-incompatible/307531 "2022-06-21T09:04:53Z")
Hi, i forked kibana 8.2 from repo and installed on my ubuntu 22.04 LTS. When I try to run kibana with "yarn start" it gives error written below. I tried to upgrade my elastic from 8.2 to 8.4 but couldn't find it. What… --- ## [Setup: master and no-data node](https://discuss.elastic.co/t/setup-master-and-no-data-node/27764)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 3\ **Last updated:** [August 20, 2015, 9:18pm UTC](https://discuss.elastic.co/t/setup-master-and-no-data-node/27764 "2015-08-20T21:18:19Z")
Hi guys, I have 2 powerful servers with 256 GB of memory and ~1 TB of SSD each. So am gonna have 2 elastic search instances on each server configured to use 31 GB of memory. Either as a separate process or as Docker co… --- ## [Is xpack installed or not by default in elastic search cluster](https://discuss.elastic.co/t/is-xpack-installed-or-not-by-default-in-elastic-search-cluster/139345)
**Author:** [@avner](https://discuss.elastic.co/u/avner)\ **Replies:** 5\ **Last updated:** [July 11, 2018, 7:15am UTC](https://discuss.elastic.co/t/is-xpack-installed-or-not-by-default-in-elastic-search-cluster/139345 "2018-07-11T07:15:40Z")
The documentation on the site is not clear. The documentation leads you around in circles. I'm trying to configure some automation to create dedicated data, coordinator, and master nodes and I'm having trouble understan… --- ## [Force Merge API Status](https://discuss.elastic.co/t/force-merge-api-status/66020)
**Author:** [@cheruvian](https://discuss.elastic.co/u/cheruvian)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 12:12am UTC](https://discuss.elastic.co/t/force-merge-api-status/66020 "2016-11-16T00:12:32Z")
Is there a way to check progress of a force merge? Or a way to see if one is running in the cluster? On an index? on a shard? I saw that clintongormley@ was directing similar github issues to this: https://github.com/e… --- ## [Elastic client in Delphi](https://discuss.elastic.co/t/elastic-client-in-delphi/81624)
**Author:** [@chuacw](https://discuss.elastic.co/u/chuacw)\ **Replies:** 1\ **Last updated:** [April 14, 2017, 1:37pm UTC](https://discuss.elastic.co/t/elastic-client-in-delphi/81624 "2017-04-14T13:37:36Z")
Hi everyone, I've started an Elastic client in Delphi a few months ago. It's currently Elastic client in Delphi on Github. --- ## [Add iframe to Kibana Dashboard](https://discuss.elastic.co/t/add-iframe-to-kibana-dashboard/196973)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 7:43pm UTC](https://discuss.elastic.co/t/add-iframe-to-kibana-dashboard/196973 "2019-08-27T19:43:49Z")
I have a user who wants to add an iframe into a Kibana dashboard to display some data from a dashboard in his application alongside the Kibana dashboard. For various reasons, he can export the specific data in an iframe,… --- ## [What causes JVM memory to be high?](https://discuss.elastic.co/t/what-causes-jvm-memory-to-be-high/54062)
**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\ **Replies:** 8\ **Last updated:** [July 4, 2016, 2:33pm UTC](https://discuss.elastic.co/t/what-causes-jvm-memory-to-be-high/54062 "2016-07-04T14:33:40Z")
Whenever I look at the stats of my cluster on Marvel, over time, JVM usage gets really high. I have a few questions: What causes the JVM memory usage to gradually increase? Why does the cluster tend to become unrespo… --- ## [Bulk Indexing performance questions](https://discuss.elastic.co/t/bulk-indexing-performance-questions/92593)
**Author:** [@jakesjohn](https://discuss.elastic.co/u/jakesjohn)\ **Replies:** 7\ **Last updated:** [July 11, 2017, 9:19pm UTC](https://discuss.elastic.co/t/bulk-indexing-performance-questions/92593 "2017-07-11T21:19:59Z")
I am trying to send a bulk of 10k requests of 1.5 kb each using python elasticsearch from 20 separate client threads to a single ES node. I am seeing that my requests timed out with the following error. ConnectionTimeo… --- ## [Error installing plugin contrib](https://discuss.elastic.co/t/error-installing-plugin-contrib/58633)
**Author:** [@scosta](https://discuss.elastic.co/u/scosta)\ **Replies:** 5\ **Last updated:** [August 23, 2016, 5:33pm UTC](https://discuss.elastic.co/t/error-installing-plugin-contrib/58633 "2016-08-23T17:33:51Z")
I'm having trouble installing the plugin contrib in logstash . It returns me the following error: plugin contrib does not exist. Can someone help me? Thank you. --- ## [Increase queue size](https://discuss.elastic.co/t/increase-queue-size/31756)
**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\ **Replies:** 2\ **Last updated:** [October 7, 2015, 9:16am UTC](https://discuss.elastic.co/t/increase-queue-size/31756 "2015-10-07T09:16:25Z")
Since I often get: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution (queue capacity 1000) on org.elasticsearch.search.action.SearchServiceTransportAction$23@644df44e and warning… --- ## [Elastic search Service is getting stopped automatically](https://discuss.elastic.co/t/elastic-search-service-is-getting-stopped-automatically/162390)
**Author:** [@Nitin\_Chavan](https://discuss.elastic.co/u/Nitin_Chavan)\ **Replies:** 1\ **Last updated:** [December 29, 2018, 6:55am UTC](https://discuss.elastic.co/t/elastic-search-service-is-getting-stopped-automatically/162390 "2018-12-29T06:55:28Z")
The service is getting stopped automatically as soon as I start it. The elastic search version we are using is 6.3.2. Below is the error I am getting elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/syste… --- ## [\_source.excludes/includes makes query 2 times slower](https://discuss.elastic.co/t/source-excludes-includes-makes-query-2-times-slower/222227)
**Author:** [@backend](https://discuss.elastic.co/u/backend)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 11:46am UTC](https://discuss.elastic.co/t/source-excludes-includes-makes-query-2-times-slower/222227 "2020-03-05T11:46:29Z")
ES: 7.4.1 I have a tiny little index (~100MB). The mapping is simple and naive - with no nested objects whatsoever. There's one field (an array of objects) which is kind of big, and sometimes I'd like to exclude that fr… --- ## [Upgrade to es 6.1.0 trouble](https://discuss.elastic.co/t/upgrade-to-es-6-1-0-trouble/112268)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 8\ **Last updated:** [December 21, 2017, 1:31am UTC](https://discuss.elastic.co/t/upgrade-to-es-6-1-0-trouble/112268 "2017-12-21T01:31:40Z")
Hi, I try to upgrade the ELK stack from 5.6.3 to 6.1.0. I get some errors when trying to load the old templates. 15:33:23.975 \[\[main\]-pipeline-manager\] INFO logstash.outputs.elasticsearch - Installing elasticsearch t… --- ## [How to loop through json arrays and apply filter](https://discuss.elastic.co/t/how-to-loop-through-json-arrays-and-apply-filter/48558)
**Author:** [@abhuyan](https://discuss.elastic.co/u/abhuyan)\ **Replies:** 3\ **Last updated:** [May 3, 2016, 6:42pm UTC](https://discuss.elastic.co/t/how-to-loop-through-json-arrays-and-apply-filter/48558 "2016-05-03T18:42:19Z")
My JSON log looks like this: { "ns\_records": \[{ "nsip": "208.84.0.53", "nsname": "ns1.msft.net" }, { "nsip": "208.84.2.53", "nsname": "ns2.msft.net" }\], "domain": "mx1.hotmail.com", "country\_iso": "US", "ip": … --- ## [フレーズ検索時に展開された類義語をfvhでハイライトしたい](https://discuss.elastic.co/t/fvh/193433)
**Author:** [@begin](https://discuss.elastic.co/u/begin)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 6:12am UTC](https://discuss.elastic.co/t/fvh/193433 "2019-08-05T06:12:47Z")
Elasticsearch:7.3.0です。 phrase検索時、synonym\_graphで展開された類義語がfvhでhighlightされません。 下記の検索クエリにおいて、いずれかの部分を書き換えるとハイライトがつきます。 ・単純なMatchクエリでは、類義語もfvhでhighlightされる。(match\_phrase→match) ・類義語以外はfvhでhighlightされる。("value": "ケータイ"→"va… --- ## [Shards per CPU](https://discuss.elastic.co/t/shards-per-cpu/61118)
**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\ **Replies:** 4\ **Last updated:** [October 6, 2016, 7:20am UTC](https://discuss.elastic.co/t/shards-per-cpu/61118 "2016-10-06T07:20:31Z")
Should my shard allocation strategy take available CPUs into considerations? When using a mutli processor machine, I saw a serious slow down in indexing and query speeds when using 1 shard, while getting much better sp… --- ## [ARM64/aarch64 suppport (Debian Linux) for filebeat, metricbeat](https://discuss.elastic.co/t/arm64-aarch64-suppport-debian-linux-for-filebeat-metricbeat/227419)
**Author:** [@siva-eh](https://discuss.elastic.co/u/siva-eh)\ **Replies:** 5\ **Last updated:** [April 12, 2020, 9:55pm UTC](https://discuss.elastic.co/t/arm64-aarch64-suppport-debian-linux-for-filebeat-metricbeat/227419 "2020-04-12T21:55:26Z")
I have been using rsyslogd as the log forwarder, but I would prefer to use filebeat (and metricbeat). However, arm64/aarch64 is not being built as a standard platform. I installed go, and downloaded v7.6 of beats, but I'… --- ## [Painless script failes while deleting nested field](https://discuss.elastic.co/t/painless-script-failes-while-deleting-nested-field/134963)
**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\ **Replies:** 7\ **Last updated:** [July 11, 2018, 9:21am UTC](https://discuss.elastic.co/t/painless-script-failes-while-deleting-nested-field/134963 "2018-07-11T09:21:03Z")
Hello. Elasticsearch 5.4.2. I have the following index mapping: { "pop": { "mappings": { "poptype": { "properties": { "popnested": { "type": "nested", "properties": { "first": { "type":… --- ## [Logstash IP to Hostname](https://discuss.elastic.co/t/logstash-ip-to-hostname/92912)
**Author:** [@vvserpent](https://discuss.elastic.co/u/vvserpent)\ **Replies:** 2\ **Last updated:** [July 13, 2017, 6:59am UTC](https://discuss.elastic.co/t/logstash-ip-to-hostname/92912 "2017-07-13T06:59:48Z")
I have configured Logstash to receive the syslog message from the networking devices. The dnsmasq and static host-file are used to translate the IP address to hostname. The system is working for few months. I have … --- ## [Filebeat Error: "Writing of registry returned error"](https://discuss.elastic.co/t/filebeat-error-writing-of-registry-returned-error/45458)
**Author:** [@matt.koivisto](https://discuss.elastic.co/u/matt.koivisto)\ **Replies:** 2\ **Last updated:** [April 1, 2016, 3:40pm UTC](https://discuss.elastic.co/t/filebeat-error-writing-of-registry-returned-error/45458 "2016-04-01T15:40:25Z")
Hi, I noticed these errors coming out of filebeat: 2016/03/25 15:34:30.198179 file\_other.go:39: ERR Rotate error: rename /root/.filebeat.new /root/.filebeat: no such file or directory 2016/03/25 15:34:30.198234 regis… --- ## [\[Ingest Node\] Unrecognized character escape ';' (code 59)](https://discuss.elastic.co/t/ingest-node-unrecognized-character-escape-code-59/84098)
**Author:** [@joaoantoniopereira](https://discuss.elastic.co/u/joaoantoniopereira)\ **Replies:** 3\ **Last updated:** [April 29, 2017, 11:31pm UTC](https://discuss.elastic.co/t/ingest-node-unrecognized-character-escape-code-59/84098 "2017-04-29T23:31:44Z")
Hi, I am trying to use ingest node to parse lines from filebeat. I used grok debugger to get to the pattern. My json file is like this: { "description": "Test pipeline", "processors": \[ { … --- ## [How kibana will connect to elasticsearch without built-in user and password](https://discuss.elastic.co/t/how-kibana-will-connect-to-elasticsearch-without-built-in-user-and-password/180284)
**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 4:55pm UTC](https://discuss.elastic.co/t/how-kibana-will-connect-to-elasticsearch-without-built-in-user-and-password/180284 "2019-05-10T16:55:08Z")
Hi team, I have few queries for my elasticsearch cluster. It is TLS enabled and running on platinum license. I don't want to use any static username and password for built-in users, so I have setup LDAP realm and I'm ab… --- ## [Change colors for each result on stacked bar?](https://discuss.elastic.co/t/change-colors-for-each-result-on-stacked-bar/275598)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 7\ **Last updated:** [June 16, 2021, 3:24pm UTC](https://discuss.elastic.co/t/change-colors-for-each-result-on-stacked-bar/275598 "2021-06-16T15:24:20Z")
Hello I have stacked bar that is showing me success logons and failed logons. I want them to be different colors than the default but I dont see where I can change that. How do I do it? --- ## [(EAV/Many-to-many relationship): how to build field mapping](https://discuss.elastic.co/t/eav-many-to-many-relationship-how-to-build-field-mapping/87968)
**Author:** [@johnson](https://discuss.elastic.co/u/johnson)\ **Replies:** 0\ **Last updated:** [June 1, 2017, 6:53pm UTC](https://discuss.elastic.co/t/eav-many-to-many-relationship-how-to-build-field-mapping/87968 "2017-06-01T18:53:55Z")
Hello,I have a many-to-many relational database and wonder how I have to design my Documents in elasticsearch. the data model in SQL looks like the following: Product -id -name Package -id -name Attribute -id -na… --- ## [Elasticsearch query for "starts with "searching on whole string](https://discuss.elastic.co/t/elasticsearch-query-for-starts-with-searching-on-whole-string/86503)
**Author:** [@Sharat\_Jagannath](https://discuss.elastic.co/u/Sharat_Jagannath)\ **Replies:** 1\ **Last updated:** [May 26, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-query-for-starts-with-searching-on-whole-string/86503 "2017-05-26T13:59:56Z")
i have documents with a field called title having data like "the lord of the rings","lord of the rings","the ring",etc I would like to do a search as you type feature. So if user types "th", the order of the results sh… --- ## [Filebeat multiline config not working](https://discuss.elastic.co/t/filebeat-multiline-config-not-working/290383)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 10:40pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-not-working/290383 "2021-12-13T22:40:30Z")
I have a 3rd party app that spits out a text file with multiple lines for a single event. An event has a consistent start line and an end line. I have tried filebeat configurations that grab everything after a specific … --- ## [How to display other info than geopoint on map vizualization?](https://discuss.elastic.co/t/how-to-display-other-info-than-geopoint-on-map-vizualization/64462)
**Author:** [@kalanit](https://discuss.elastic.co/u/kalanit)\ **Replies:** 7\ **Last updated:** [November 17, 2016, 4:55pm UTC](https://discuss.elastic.co/t/how-to-display-other-info-than-geopoint-on-map-vizualization/64462 "2016-11-17T16:55:36Z")
I am beginning with both elastic search and kibana. I would like, when clicking on a result displayed on the map vizualisation, that it would display other info about the node (if possible even a clickable link to image… [Previous page](https://discuss.elastic.co/top.md?page=454&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=456&per_page=50&period=all)