# Top **URL:** https://discuss.elastic.co/top.md?page=458&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 459 --- ## [ES 5.2: How select aggregation max with filter value](https://discuss.elastic.co/t/es-5-2-how-select-aggregation-max-with-filter-value/74441)
**Author:** [@Pashkevich\_Aleksandr](https://discuss.elastic.co/u/Pashkevich_Aleksandr)\ **Replies:** 2\ **Last updated:** [February 9, 2017, 12:15am UTC](https://discuss.elastic.co/t/es-5-2-how-select-aggregation-max-with-filter-value/74441 "2017-02-09T00:15:19Z")
Hello. Sorry for my English Me need select 4 aggregation for terms 1 agg it's max value field price, where filter is\_new:true 2 agg it's min value field price, where filter is\_new:true 3 agg it's max value field price… --- ## [Docker Compose for Elastic+Kibana? Errors when starting](https://discuss.elastic.co/t/docker-compose-for-elastic-kibana-errors-when-starting/118314)
**Author:** [@roybatty](https://discuss.elastic.co/u/roybatty)\ **Replies:** 5\ **Last updated:** [February 6, 2018, 1:56pm UTC](https://discuss.elastic.co/t/docker-compose-for-elastic-kibana-errors-when-starting/118314 "2018-02-06T13:56:16Z")
HI All, I tried to bring up elastic and kibana using docker, but it seems to have gone wrong. Does anyone have any suggestions for me? I took this docker compose file as my starting point: https://github.com/elastic/s… --- ## [Upper limits on terms filter array size](https://discuss.elastic.co/t/upper-limits-on-terms-filter-array-size/37717)
**Author:** [@brunomiranda](https://discuss.elastic.co/u/brunomiranda)\ **Replies:** 4\ **Last updated:** [December 22, 2015, 6:50am UTC](https://discuss.elastic.co/t/upper-limits-on-terms-filter-array-size/37717 "2015-12-22T06:50:42Z")
Curious if anyone know of the limitations of passing a terms filter a very large array of strings to filter one. I have tried with a few hundred and it's fine. Wondering what happens when it gets to 3-5k. I am consider… --- ## [Timestamps do not match](https://discuss.elastic.co/t/timestamps-do-not-match/41305)
**Author:** [@romspacenut](https://discuss.elastic.co/u/romspacenut)\ **Replies:** 3\ **Last updated:** [February 9, 2017, 4:52pm UTC](https://discuss.elastic.co/t/timestamps-do-not-match/41305 "2017-02-09T16:52:05Z")
I've noticed that the @timestamp and the timestamp in the message do not match. I'm using Filebeats to push syslog to my ES cluster. Here's a screenshot of what I'm talking about. I'm currently using the index template … --- ## [How best to verify a client connection?](https://discuss.elastic.co/t/how-best-to-verify-a-client-connection/5869)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 3\ **Last updated:** [November 15, 2011, 3:04pm UTC](https://discuss.elastic.co/t/how-best-to-verify-a-client-connection/5869 "2011-11-15T15:04:24Z")
I'd like a simple way of verifying that ES is available to a Java client. I have a factory that looks something like this to get a client instance: https://gist.github.com/1364734 What's the best way to gracefull… --- ## [Is it better to have one pipeline or multiple pipelines?](https://discuss.elastic.co/t/is-it-better-to-have-one-pipeline-or-multiple-pipelines/285493)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 6\ **Last updated:** [September 30, 2021, 5:12pm UTC](https://discuss.elastic.co/t/is-it-better-to-have-one-pipeline-or-multiple-pipelines/285493 "2021-09-30T17:12:41Z")
Hello From the start, Ive implemented the Elastic Stack using Logstash as the reciever and sender of logs to Logstash. Ive always implemented it using various pipelines. Each pipeline is organized by a different config… --- ## [Logstash configuration for Cloudfront logs](https://discuss.elastic.co/t/logstash-configuration-for-cloudfront-logs/45660)
**Author:** [@manishr](https://discuss.elastic.co/u/manishr)\ **Replies:** 7\ **Last updated:** [April 4, 2016, 5:05pm UTC](https://discuss.elastic.co/t/logstash-configuration-for-cloudfront-logs/45660 "2016-04-04T17:05:00Z")
Hi Guys, Help me getting cloudfront logs parsed in logstash. I want each filed to be searchable even parameters like aid, bid, cid etc. See below Sample cloudfront log 2016-03-29 04:02:08 ABC1 461 … --- ## [Recover data after the lost of master \[7.1.1\]](https://discuss.elastic.co/t/recover-data-after-the-lost-of-master-7-1-1/187775)
**Author:** [@syavel](https://discuss.elastic.co/u/syavel)\ **Replies:** 5\ **Last updated:** [June 27, 2019, 12:57pm UTC](https://discuss.elastic.co/t/recover-data-after-the-lost-of-master-7-1-1/187775 "2019-06-27T12:57:36Z")
Hi, I have a cluster with 3 masters node and 3 data node. I've lost my 3 masters at the same time, is there a way to recover the data ? I've tried to promote my 3 data node to the master but I have this log: master n… --- ## [Can we change .yaxis() in timelion](https://discuss.elastic.co/t/can-we-change-yaxis-in-timelion/88280)
**Author:** [@shreyanshu\_pare](https://discuss.elastic.co/u/shreyanshu_pare)\ **Replies:** 5\ **Last updated:** [June 13, 2017, 5:17am UTC](https://discuss.elastic.co/t/can-we-change-yaxis-in-timelion/88280 "2017-06-13T05:17:33Z")
I have json:- {ExchangeName:YOBIT, CurrencyPair:ETHBTC ,MachineTime:June 5th 2017, 16:08:50.672, OrderSide:bids, Price:0.089 ,Quantity:0.002, id:AVx31gjeldQy5pE4euee, \_type:order, \_index:ethbtcorder ,\_score:1} In Timel… --- ## [How can I aggregate terms by their tf-idf score in elasticsearch?](https://discuss.elastic.co/t/how-can-i-aggregate-terms-by-their-tf-idf-score-in-elasticsearch/53548)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 8\ **Last updated:** [June 22, 2016, 2:29pm UTC](https://discuss.elastic.co/t/how-can-i-aggregate-terms-by-their-tf-idf-score-in-elasticsearch/53548 "2016-06-22T14:29:48Z")
Suppose I run a query which returns a total of 1000 documents and want to aggregate the top 500 documents with terms sorted in order of their tf-idf scores. Is it possible to do that in Elasticsearch? I am using v2.3… --- ## [Kibana saved object api for creating index pattern is not working](https://discuss.elastic.co/t/kibana-saved-object-api-for-creating-index-pattern-is-not-working/183914)
**Author:** [@Shwetha\_Naranapura](https://discuss.elastic.co/u/Shwetha_Naranapura)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 10:39am UTC](https://discuss.elastic.co/t/kibana-saved-object-api-for-creating-index-pattern-is-not-working/183914 "2019-06-11T10:39:57Z")
Hi, I am using following code to create indexpattern but am facing errors: curl -X POST "http://localhost:5601/api/saved\_objects/index-pattern/my-pattern-" -H "kbn-xsrf:true" -H 'kbn-version:6.8.0' -H 'Content-Type:ap… --- ## [How to move elasticsearch text to next line](https://discuss.elastic.co/t/how-to-move-elasticsearch-text-to-next-line/65203)
**Author:** [@sudarshan](https://discuss.elastic.co/u/sudarshan)\ **Replies:** 4\ **Last updated:** [November 9, 2016, 7:23pm UTC](https://discuss.elastic.co/t/how-to-move-elasticsearch-text-to-next-line/65203 "2016-11-09T19:23:02Z")
Hello, I have a field in elasticsearch that is very lengthy. So while visualizing that field I am getting the whole value in a straight line which is looking awkward. So I want to split that line into two lines(i.e; se… --- ## [URL Monitoring Using KIBANA](https://discuss.elastic.co/t/url-monitoring-using-kibana/144818)
**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\ **Replies:** 8\ **Last updated:** [August 17, 2018, 9:44am UTC](https://discuss.elastic.co/t/url-monitoring-using-kibana/144818 "2018-08-17T09:44:13Z")
Hi, I am using ES-6.2, LOGSTASH 6.2, KIBANA 6.2. Is it possible to monitor a URL using the beats. Is any visualization available which can be used for the monitoring of a URL? Request to advise! Thanks --- ## [Customize kibana login screen](https://discuss.elastic.co/t/customize-kibana-login-screen/97683)
**Author:** [@in06cd](https://discuss.elastic.co/u/in06cd)\ **Replies:** 3\ **Last updated:** [August 21, 2017, 7:45am UTC](https://discuss.elastic.co/t/customize-kibana-login-screen/97683 "2017-08-21T07:45:05Z")
Dear Elastic, In every login screen we provide a legal warning of using the to be entered application. It would be great if we could have a customizable text shown on the login screen of Kibana, possibly beside a compan… --- ## [How to start Filebeat?](https://discuss.elastic.co/t/how-to-start-filebeat/80133)
**Author:** [@bobbysidhartha](https://discuss.elastic.co/u/bobbysidhartha)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 3:02pm UTC](https://discuss.elastic.co/t/how-to-start-filebeat/80133 "2017-03-27T15:02:21Z")
Hi, I am a new comer to Beats and Im trying to learn it starting with Filebeats. I understood that filebeats.yml is the file where you define your input and output file. In my Linux system, I gave them as below. - in… --- ## [Unknown filter type \[stemmer\]](https://discuss.elastic.co/t/unknown-filter-type-stemmer/109567)
**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\ **Replies:** 6\ **Last updated:** [December 11, 2017, 8:20am UTC](https://discuss.elastic.co/t/unknown-filter-type-stemmer/109567 "2017-12-11T08:20:51Z")
I have this { "analysis": { "analyzer": { "sv\_analyzer": { "type": "custom", "filter": \["standard", "lowercase", "sv\_stop\_filter", "sv\_stem"\], "tokenizer": "standard" } }… --- ## [Docker Swarm + Filebeat](https://discuss.elastic.co/t/docker-swarm-filebeat/112002)
**Author:** [@ZaphordB](https://discuss.elastic.co/u/ZaphordB)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 1:35pm UTC](https://discuss.elastic.co/t/docker-swarm-filebeat/112002 "2017-12-21T13:35:40Z")
Hi! There is a server with ELK 5.6 stack and now I need to analyze logs from Docker Swarm hosts. Is it possible to config Filebeat (or any other Beat) inside Swarm to send logs to the ELK server? --- ## [Elasticsearch always returns all results and queries or filters does not work](https://discuss.elastic.co/t/elasticsearch-always-returns-all-results-and-queries-or-filters-does-not-work/86574)
**Author:** [@hossein\_ey](https://discuss.elastic.co/u/hossein_ey)\ **Replies:** 4\ **Last updated:** [May 22, 2017, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-always-returns-all-results-and-queries-or-filters-does-not-work/86574 "2017-05-22T06:35:29Z")
I am trying elasticsearch with about 300 million documents and try to test some filters and queries suppose I have a type with name my\_type and index my\_index, with field my\_field when I run this query: get /my\_ind… --- ## [Specify routing in Logstash](https://discuss.elastic.co/t/specify-routing-in-logstash/29458)
**Author:** [@ashwintumma](https://discuss.elastic.co/u/ashwintumma)\ **Replies:** 2\ **Last updated:** [September 17, 2015, 9:59am UTC](https://discuss.elastic.co/t/specify-routing-in-logstash/29458 "2015-09-17T09:59:58Z")
I wanted to store my data on different shards based on some field value. For example, geo-sharding is something which I am looking for. All my records with continent value 'NA' should go to shard-1, North America; 'EU' s… --- ## [Filter by min doc count](https://discuss.elastic.co/t/filter-by-min-doc-count/190972)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 1\ **Last updated:** [July 19, 2019, 7:34pm UTC](https://discuss.elastic.co/t/filter-by-min-doc-count/190972 "2019-07-19T19:34:20Z")
I am trying to write a query that filters the results of an aggregation by min\_doc\_count. I've tried different strategies but the output is not what I need. If I understand the logic correctly, if the aggregation counts… --- ## [Not able enter into the kibana with correct credentials](https://discuss.elastic.co/t/not-able-enter-into-the-kibana-with-correct-credentials/56281)
**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Replies:** 7\ **Last updated:** [August 1, 2016, 5:06pm UTC](https://discuss.elastic.co/t/not-able-enter-into-the-kibana-with-correct-credentials/56281 "2016-08-01T17:06:09Z")
Hi , i activated the kibana , asking username and password , if i enter wrong credentials it is throwing invalid username password please give me the solution for this! but if it is correct not able enter into the kiban… --- ## [GC s1 always used 100%, never less than 100%](https://discuss.elastic.co/t/gc-s1-always-used-100-never-less-than-100/111076)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 3\ **Last updated:** [December 12, 2017, 10:30am UTC](https://discuss.elastic.co/t/gc-s1-always-used-100-never-less-than-100/111076 "2017-12-12T10:30:00Z")
Hi Folks, I change from cms GC into g1 GC because of reducing of FGC during a week, but S1 got the problem like this. Is it okay? How can we avoid this situation? we have 300 servers send metrics to logstash ,and the… --- ## [Possible to Index PDFs by page?](https://discuss.elastic.co/t/possible-to-index-pdfs-by-page/8883)
**Author:** [@Meltemi](https://discuss.elastic.co/u/Meltemi)\ **Replies:** 5\ **Last updated:** [August 27, 2014, 6:31am UTC](https://discuss.elastic.co/t/possible-to-index-pdfs-by-page/8883 "2014-08-27T06:31:30Z")
Can elasticsearch index an attachment (PDF specifically) so the parent/child relationship between the \*document\* (PDF) and the \*page\* are preserved? Our requirement dictates that matches should initially return t… --- ## [Unable to apply base Elasticsearch kubernetes image](https://discuss.elastic.co/t/unable-to-apply-base-elasticsearch-kubernetes-image/250231)
**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 5:47am UTC](https://discuss.elastic.co/t/unable-to-apply-base-elasticsearch-kubernetes-image/250231 "2020-09-29T05:47:14Z")
Hi I am trying to apply the Elasticsearch Docker image. I am trying to use the instructions defined here: When I run an "kubectl apply -f" on the yaml, I get an error: error: unable to recognize "test.yaml": no mat… --- ## [Funnel(Conversion) analysis(Metrics)](https://discuss.elastic.co/t/funnel-conversion-analysis-metrics/24899)
**Author:** [@nikhil](https://discuss.elastic.co/u/nikhil)\ **Replies:** 3\ **Last updated:** [July 6, 2015, 10:10am UTC](https://discuss.elastic.co/t/funnel-conversion-analysis-metrics/24899 "2015-07-06T10:10:46Z")
Hi there, I really liked the way the elastic search aggregation query works and interested to use it for one of the product. We are planning to have a funnel analysis or conversion metrics in our product using elast… --- ## [Howto map city (non-IP) to geospatial in ES](https://discuss.elastic.co/t/howto-map-city-non-ip-to-geospatial-in-es/27341)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 6\ **Last updated:** [August 14, 2015, 2:11am UTC](https://discuss.elastic.co/t/howto-map-city-non-ip-to-geospatial-in-es/27341 "2015-08-14T02:11:51Z")
Hi, I have loaded IP data to ES for geospatial visualization in Kibana. Awesome! Is there a way to map non-IP data (e.g. City, addresses, etc) to ES for geospatial queries? Frank. --- ## [Handling dot notated fields](https://discuss.elastic.co/t/handling-dot-notated-fields/129657)
**Author:** [@fenneh](https://discuss.elastic.co/u/fenneh)\ **Replies:** 4\ **Last updated:** [May 10, 2018, 6:12pm UTC](https://discuss.elastic.co/t/handling-dot-notated-fields/129657 "2018-05-10T18:12:46Z")
Running Elastic 6.0.0. What's the best way to handle fields which have a dot notation within them? The default behaviour seems to be to store them as strings? An example event.status = "Running" event.status.id = 33 W… --- ## [Spark sql to query array fields in elastic search](https://discuss.elastic.co/t/spark-sql-to-query-array-fields-in-elastic-search/29143)
**Author:** [@tridib](https://discuss.elastic.co/u/tridib)\ **Replies:** 8\ **Last updated:** [September 27, 2015, 6:19pm UTC](https://discuss.elastic.co/t/spark-sql-to-query-array-fields-in-elastic-search/29143 "2015-09-27T18:19:03Z")
I have integrated elasticsearch with spark using elastic-spark connector. I can query elastic search through spark. But the query does not return any result when I put array fields in where clause. Elastic search docum… --- ## [Multi elasticsearch docker containers per host?](https://discuss.elastic.co/t/multi-elasticsearch-docker-containers-per-host/49989)
**Author:** [@nsteinmetz](https://discuss.elastic.co/u/nsteinmetz)\ **Replies:** 2\ **Last updated:** [October 4, 2016, 8:47am UTC](https://discuss.elastic.co/t/multi-elasticsearch-docker-containers-per-host/49989 "2016-10-04T08:47:36Z")
Hi, I want to set up at least 2 elasticsearch docker containers per host so that I have a 4 node cluster on 2 servers on EC2. My idea would be on a per host basis: \* Container ES1 to run with port eth0:9200/eth0:9300 … --- ## [Kibana and index patterns performance](https://discuss.elastic.co/t/kibana-and-index-patterns-performance/209564)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 12:27pm UTC](https://discuss.elastic.co/t/kibana-and-index-patterns-performance/209564 "2019-11-28T12:27:45Z")
Hi all, I'm collecting information with filebeat, procesing it with logstash and storing in elasticsearch. I have different types and sub-types of information, and indexing the information with something similar to %{\[… --- ## [How to install http\_pollar plugin manually in Logstash?](https://discuss.elastic.co/t/how-to-install-http-pollar-plugin-manually-in-logstash/29308)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 4:48am UTC](https://discuss.elastic.co/t/how-to-install-http-pollar-plugin-manually-in-logstash/29308 "2015-11-18T04:48:13Z")
How to install http\_pollar plugin manually in Logstash? --- ## [\[processors\] required property is missing](https://discuss.elastic.co/t/processors-required-property-is-missing/271554)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 7:17am UTC](https://discuss.elastic.co/t/processors-required-property-is-missing/271554 "2021-04-29T07:17:26Z")
I am creating a ingest pipeline for custom index for Azure activity log with same configurations it has for Filebeat index. I copied pipeline content from \_ingest/pipeline. Due to character limit, I am unable to paste th… --- ## [コンテナ上のESでlocalhostへのアクセスできない](https://discuss.elastic.co/t/es-localhost/203626)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 5\ **Last updated:** [October 24, 2019, 1:28pm UTC](https://discuss.elastic.co/t/es-localhost/203626 "2019-10-24T13:28:26Z")
以下のdocker-compose.ymlとDockerfile、elasticsearch.ymlの設定で コンテナを作成しました。(使用するポート番号は9600) そこでlocalhost:9600にアクセスしてもERR\_EMPTY\_RESPONSEとなってしまいます。 設定ファイルのパラメータに何か不足があるのでしょうか？ docker-compose.yml version: '2.2' services: el… --- ## [Can't access elasticsearch on http://server-ip:9200/ but shows running on localhost when i do netstat](https://discuss.elastic.co/t/cant-access-elasticsearch-on-http-server-ip-9200-but-shows-running-on-localhost-when-i-do-netstat/189923)
**Author:** [@Garima\_Sharma](https://discuss.elastic.co/u/Garima_Sharma)\ **Replies:** 5\ **Last updated:** [July 18, 2019, 10:09am UTC](https://discuss.elastic.co/t/cant-access-elasticsearch-on-http-server-ip-9200-but-shows-running-on-localhost-when-i-do-netstat/189923 "2019-07-18T10:09:51Z")
Hello, elasticsearch-6.3.2 kibana-6.3.2 server- RHEL-7 I am not able to access http://server-ip:9200/ but it shows running when i do netstat in the terminal On curl localhost:9200 - it works curl 127.0.0.1:9200 - … --- ## [No logstash output to kibana/elasticsearch](https://discuss.elastic.co/t/no-logstash-output-to-kibana-elasticsearch/70679)
**Author:** [@pgrzec2s](https://discuss.elastic.co/u/pgrzec2s)\ **Replies:** 8\ **Last updated:** [January 12, 2017, 1:49pm UTC](https://discuss.elastic.co/t/no-logstash-output-to-kibana-elasticsearch/70679 "2017-01-12T13:49:46Z")
Good day to you! I am pretty new to ELK stack and i am working on a issue since 3 days. I got an apache-access.log but i can't send the logfile through kibana. Using Kibana 5.1.1, elasticsearch 5.1.1, logstash 5.1.1 … --- ## [How to reinstall X-Pack?](https://discuss.elastic.co/t/how-to-reinstall-x-pack/69248)
**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\ **Replies:** 6\ **Last updated:** [December 22, 2016, 7:47pm UTC](https://discuss.elastic.co/t/how-to-reinstall-x-pack/69248 "2016-12-22T19:47:47Z")
Hi Team, We are using X-Pack now. But after we follow the instructure to uninstall and install it again, we found the license issue date. So if we want to keep using the X-Pack till the actual license purchase, how to d… --- ## [Cisco IOS logging - help required](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 8\ **Last updated:** [May 16, 2022, 7:49am UTC](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957 "2022-05-16T07:49:30Z")
Hi, I'm trying to ingest IOS switch logs into Elasticsearch, but I feel like I'm missing out on how this all works (I'm not a network engineer which may explain it!) We're using Elastic cloud and Fleets Cisco IOS integ… --- ## [Unable to Export Kibana Netflow dashboards](https://discuss.elastic.co/t/unable-to-export-kibana-netflow-dashboards/130106)
**Author:** [@Tabrez.Goilkar](https://discuss.elastic.co/u/Tabrez.Goilkar)\ **Replies:** 8\ **Last updated:** [May 26, 2018, 7:05am UTC](https://discuss.elastic.co/t/unable-to-export-kibana-netflow-dashboards/130106 "2018-05-26T07:05:19Z")
I have setup Logstash Kibana and elastic search on same windows server, i am running netflow module on logstash with below command but still dashboards are not imported in Kibana for netflow. i have tried multple options… --- ## [Invalid format: \[yyyy-MM-ddTHH:mm:ssZ\]: Unknown pattern letter: T"](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 7:45am UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874 "2021-01-13T07:45:30Z")
Hello team, strange thing happened. I have following mapping for the field in els with multiple formats: "createdAt" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ssZ||yyyy-MM-dd… --- ## [How much external storage can be added to a elastic node](https://discuss.elastic.co/t/how-much-external-storage-can-be-added-to-a-elastic-node/63684)
**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\ **Replies:** 8\ **Last updated:** [November 2, 2016, 5:14am UTC](https://discuss.elastic.co/t/how-much-external-storage-can-be-added-to-a-elastic-node/63684 "2016-11-02T05:14:21Z")
I am try setting up a cluster and every node specifications are 4GB RAM, 2 CPU, 60 GB internal hard disk. By using this configuration how much external storage disk (SSD) I can add for elasticsearch data storage without … --- ## [Sort by string in kibana's discover (search)](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 10:15pm UTC](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284 "2021-03-04T22:15:43Z")
When I go to Kiban's discover and add fields I can sort on date field or Number field but I can't on string. is this by design or I have to change some setting to enable this I am using version 7.10.1 --- ## [Logstash monitoring not showing in Kibana](https://discuss.elastic.co/t/logstash-monitoring-not-showing-in-kibana/202056)
**Author:** [@drew0624](https://discuss.elastic.co/u/drew0624)\ **Replies:** 5\ **Last updated:** [October 3, 2019, 4:06pm UTC](https://discuss.elastic.co/t/logstash-monitoring-not-showing-in-kibana/202056 "2019-10-03T16:06:14Z")
Hello, I'm setting up a brand new ELK stack. All nodes are on 7.4.0. Xpack monitoring is turned on and I can see metrics for Elasticsearch and Kibana with no issues. However, nothing is showing for my Logstash nodes. It… --- ## [Scripted Fields + Filtering](https://discuss.elastic.co/t/scripted-fields-filtering/262047)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 7\ **Last updated:** [February 1, 2021, 4:40pm UTC](https://discuss.elastic.co/t/scripted-fields-filtering/262047 "2021-02-01T16:40:13Z")
I am trying to use painless to calculate the duration of 2 ISO8601 timestamps The field is correctly populated with the returned string i have defined. However the field can't not be filtered upon / with. This is my firs… --- ## [Rest api or java client?](https://discuss.elastic.co/t/rest-api-or-java-client/18890)
**Author:** [@CB1](https://discuss.elastic.co/u/CB1)\ **Replies:** 6\ **Last updated:** [August 4, 2014, 12:25am UTC](https://discuss.elastic.co/t/rest-api-or-java-client/18890 "2014-08-04T00:25:36Z")
hi all, i'm new to elastic search and would like to ask some basic questions. we are developing a system based on the play framework (non blocking io, event loop, scala) we are currently working with elastic s… --- ## [Nginx reverse proxy with rewrite and app/kibana#/discover](https://discuss.elastic.co/t/nginx-reverse-proxy-with-rewrite-and-app-kibana-discover/198461)
**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 2:44pm UTC](https://discuss.elastic.co/t/nginx-reverse-proxy-with-rewrite-and-app-kibana-discover/198461 "2019-09-25T14:44:20Z")
I've got Kibana running in docker-compose with nginx as a reverse proxy. It's working great, generally. Here are the relevant peices: upstream docker-kibana { server kibana:5601; } ... location /kibana { pro… --- ## [Cron job](https://discuss.elastic.co/t/cron-job/91820)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 6:36am UTC](https://discuss.elastic.co/t/cron-job/91820 "2017-07-05T06:36:19Z")
Can someone provide me clarification on the below points 1.Is it possible to set a cron job so that it fetches records on a weekly basis(Example:every sunday) 2.While setting as a cron job the records are fetched from … --- ## [Or inside must](https://discuss.elastic.co/t/or-inside-must/39446)
**Author:** [@pewpewlasers](https://discuss.elastic.co/u/pewpewlasers)\ **Replies:** 2\ **Last updated:** [January 19, 2016, 9:15am UTC](https://discuss.elastic.co/t/or-inside-must/39446 "2016-01-19T09:15:25Z")
I have a query that looks like the following functions: \[...\], query: { bool: { must: \[ \], must\_not: \[ \], should: \[ \], filter: \[ \], }, }, I want to limit searc… --- ## [Filebeat Output Condition for multiple (ELK) logstash server](https://discuss.elastic.co/t/filebeat-output-condition-for-multiple-elk-logstash-server/103572)
**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\ **Replies:** 5\ **Last updated:** [October 12, 2017, 6:12pm UTC](https://discuss.elastic.co/t/filebeat-output-condition-for-multiple-elk-logstash-server/103572 "2017-10-12T18:12:57Z")
There are two environments - DEV/TEST (ENV1) and PROD (ENV2) hosted in two separate Cloud environment respectively. Both have no internet connectivity. For these two environments, we have separate ELK setup for Nonprod a… --- ## [Replace field content](https://discuss.elastic.co/t/replace-field-content/110023)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 3\ **Last updated:** [December 4, 2017, 3:42pm UTC](https://discuss.elastic.co/t/replace-field-content/110023 "2017-12-04T15:42:35Z")
hi i\*m trying to replace the field content , currently a number/integer to a field with letters. basically i want to change the logontype to something more understandable than just the number "2" i first tried this as i… --- ## [Sorting performance trouble](https://discuss.elastic.co/t/sorting-performance-trouble/27809)
**Author:** [@liamwhite](https://discuss.elastic.co/u/liamwhite)\ **Replies:** 8\ **Last updated:** [August 26, 2015, 4:28pm UTC](https://discuss.elastic.co/t/sorting-performance-trouble/27809 "2015-08-26T16:28:47Z")
Hi, Recently we moved to a new production server and upgraded from ES 1.4.1 to 1.7.1 in the process. Since the upgrade, sorting performance on an entire collection (comments) to return the top 5 newest documents with… [Previous page](https://discuss.elastic.co/top.md?page=457&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=459&per_page=50&period=all)