# Top

**URL:** https://discuss.elastic.co/top.md?page=462&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 463

---

## [Visualize locations on map using Vega Plugin](https://discuss.elastic.co/t/visualize-locations-on-map-using-vega-plugin/115289)

<div class="topic-metadata">

**Author:** [@romanc](https://discuss.elastic.co/u/romanc)\
**Replies:** 6\
**Last updated:** [January 15, 2018, 8:39pm UTC](https://discuss.elastic.co/t/visualize-locations-on-map-using-vega-plugin/115289 "2018-01-15T20:39:37Z")

</div>

I am trying to understand how to visualize data on a map using Vega Plugin. I have a index called test with document containing location as a geo\_point type which I would like to visualize on a map: TEST { "mappings…

---

## [Advice regarding Metricbeat sharding and retention](https://discuss.elastic.co/t/advice-regarding-metricbeat-sharding-and-retention/119053)

<div class="topic-metadata">

**Author:** [@matt.hagenbuch](https://discuss.elastic.co/u/matt.hagenbuch)\
**Replies:** 5\
**Last updated:** [February 14, 2018, 12:01am UTC](https://discuss.elastic.co/t/advice-regarding-metricbeat-sharding-and-retention/119053 "2018-02-14T00:01:35Z")

</div>

Hi, I have a largish(?) metricbeat installation which collects from ~2000 machines minutely, generating ~100GB index with 135M docs per day. Currently I have the indexes set to 5 shards x2 replication, which is perform…

---

## [Http\_poller Host name '192.168.1.35' does not match the certificate subject provided by the peer](https://discuss.elastic.co/t/http-poller-host-name-192-168-1-35-does-not-match-the-certificate-subject-provided-by-the-peer/125111)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 5\
**Last updated:** [March 23, 2018, 12:55am UTC](https://discuss.elastic.co/t/http-poller-host-name-192-168-1-35-does-not-match-the-certificate-subject-provided-by-the-peer/125111 "2018-03-23T00:55:32Z")

</div>

Hi, I'm struggling to get the http\_poller working with a piece of equipment running a self signed cert. I've created the cert with the following command openssl s\_client -showcerts -connect 192.168.1.35:443 \</dev/null …

---

## [How to use json in update script](https://discuss.elastic.co/t/how-to-use-json-in-update-script/21277)

<div class="topic-metadata">

**Author:** [@roger](https://discuss.elastic.co/u/roger)\
**Replies:** 3\
**Last updated:** [March 1, 2016, 5:32pm UTC](https://discuss.elastic.co/t/how-to-use-json-in-update-script/21277 "2016-03-01T17:32:15Z")

</div>

Hello I'm trying to update a document whose root object contains a list of nested objects. I need to send an object of the nested type as a script parameter to append to the list How can I append the json (a string t…

---

## [Kibana Dashboard & Settings automatic backup/restore](https://discuss.elastic.co/t/kibana-dashboard-settings-automatic-backup-restore/253347)

<div class="topic-metadata">

**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 8:38am UTC](https://discuss.elastic.co/t/kibana-dashboard-settings-automatic-backup-restore/253347 "2020-10-30T08:38:08Z")

</div>

Hi, How can backup my dashboards and other saved objects from Kibana periodically ? I can do it manually with "saved objects" menu in "Stack Management", but would like to do it automatically through SLM (I guess with …

---

## [java.lang.IllegalStateException: Unable to access 'path.data' (/var/lib/elasticsearch)](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456)

<div class="topic-metadata">

**Author:** [@natarajjk](https://discuss.elastic.co/u/natarajjk)\
**Replies:** 2\
**Last updated:** [June 25, 2020, 4:35am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456 "2020-06-25T04:35:54Z")

</div>

Can some let me know why i am getting this error on ELK 7.8.0 Jun 24 08:59:02 nagiosclient.sg.com systemd\[1\]: Starting Elasticsearch... Jun 24 08:59:06 nagiosclient.sg.com systemd-entrypoint\[11107\]: uncaught exception …

---

## [Elasticsearch and Yarn - My Experience with Mesos?](https://discuss.elastic.co/t/elasticsearch-and-yarn-my-experience-with-mesos/24724)

<div class="topic-metadata">

**Author:** [@mandoskippy](https://discuss.elastic.co/u/mandoskippy)\
**Replies:** 3\
**Last updated:** [July 20, 2015, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-and-yarn-my-experience-with-mesos/24724 "2015-07-20T16:33:11Z")

</div>

Hey all, I thought I'd share an interesting experience I had in experimentation with Yarn, Mesos and MapR. In the es-yarn instructions it talks about container level storage vs. mounting NFS in HDFS (which has huge pe…

---

## [Sending logs with SSL/TLS from Logstash](https://discuss.elastic.co/t/sending-logs-with-ssl-tls-from-logstash/57779)

<div class="topic-metadata">

**Author:** [@ramongo](https://discuss.elastic.co/u/ramongo)\
**Replies:** 3\
**Last updated:** [August 11, 2016, 11:26am UTC](https://discuss.elastic.co/t/sending-logs-with-ssl-tls-from-logstash/57779 "2016-08-11T11:26:26Z")

</div>

Hi Specialists! I'm trying to send data from Logstash using SSL/TLS to a rsyslog server (it needs certificates). I read a lot of articles/posts/official docs/etc and couldn't found the way to accomplish this with Logstas…

---

## [Searching based on Emoji](https://discuss.elastic.co/t/searching-based-on-emoji/38348)

<div class="topic-metadata">

**Author:** [@Gautam\_S\_Thakur](https://discuss.elastic.co/u/Gautam_S_Thakur)\
**Replies:** 5\
**Last updated:** [June 28, 2017, 7:44am UTC](https://discuss.elastic.co/t/searching-based-on-emoji/38348 "2017-06-28T07:44:22Z")

</div>

I am interested in writing a set of queries that will search for emoji in the text (data already in the ES). What should be appropriate string to use to search in ElasticSearch? For example, I want to search for 'happy f…

---

## [Filebeat stops harvesting - file didn't change](https://discuss.elastic.co/t/filebeat-stops-harvesting-file-didnt-change/49446)

<div class="topic-metadata">

**Author:** [@knightsg](https://discuss.elastic.co/u/knightsg)\
**Replies:** 5\
**Last updated:** [July 20, 2016, 5:50pm UTC](https://discuss.elastic.co/t/filebeat-stops-harvesting-file-didnt-change/49446 "2016-07-20T17:50:00Z")

</div>

Today I found out about, and tried out filebeat for sending logs to Elasticsearch via Logstash, which I already had set up. It seemed to work fine for a bit, until I noticed that FB stops sending logs after a period of a…

---

## [Kibana is running inside the server but Kibana UI is not working](https://discuss.elastic.co/t/kibana-is-running-inside-the-server-but-kibana-ui-is-not-working/164071)

<div class="topic-metadata">

**Author:** [@sasank123](https://discuss.elastic.co/u/sasank123)\
**Replies:** 4\
**Last updated:** [January 22, 2019, 9:22am UTC](https://discuss.elastic.co/t/kibana-is-running-inside-the-server-but-kibana-ui-is-not-working/164071 "2019-01-22T09:22:40Z")

</div>

Hi, I installed Kibana version 6.2.2 three months back it is up and running and the UI monitoring is also working fine but suddenly UI is not working now. Kibana is running inside the server but can't browse the URL (Ki…

---

## [Timelion always brings back blank](https://discuss.elastic.co/t/timelion-always-brings-back-blank/87616)

<div class="topic-metadata">

**Author:** [@glifhits](https://discuss.elastic.co/u/glifhits)\
**Replies:** 2\
**Last updated:** [May 31, 2017, 10:54am UTC](https://discuss.elastic.co/t/timelion-always-brings-back-blank/87616 "2017-05-31T10:54:14Z")

</div>

Hi all, I am very new to elastic. I am trying to use Timelion to graph some data but timelion is always bringing back a blank no matter what see screenshot below: However I know for a fact I have data in my database: …

---

## [Winlogbeat stops working after a while with errors](https://discuss.elastic.co/t/winlogbeat-stops-working-after-a-while-with-errors/67027)

<div class="topic-metadata">

**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 5\
**Last updated:** [November 30, 2016, 4:02am UTC](https://discuss.elastic.co/t/winlogbeat-stops-working-after-a-while-with-errors/67027 "2016-11-30T04:02:19Z")

</div>

Hi, I just install winlogbeat in a Windows 2003 Server and sent the logs to Logstash 2.3.1. This is my Winlogbeat conf: output.logstash: hosts: \["192.168.70.110:5044"\] (complete file: http://pastebin.com/KdTTPEu2) My…

---

## [Removing the Time field from Discover](https://discuss.elastic.co/t/removing-the-time-field-from-discover/28790)

<div class="topic-metadata">

**Author:** [@pontipine](https://discuss.elastic.co/u/pontipine)\
**Replies:** 1\
**Last updated:** [September 8, 2015, 6:38am UTC](https://discuss.elastic.co/t/removing-the-time-field-from-discover/28790 "2015-09-08T06:38:30Z")

</div>

Hi Is it possible to remove the "Time" field from the table that is on the Discover page of Kibana 4.1.1? I wish to only display 1 field, however I cannot find a way of removing the Time field. Many thanks

---

## [Known Issue Logstash 7.7.1-7.9.1: Logstash Keystore may fail when used with multiple pipelines](https://discuss.elastic.co/t/known-issue-logstash-7-7-1-7-9-1-logstash-keystore-may-fail-when-used-with-multiple-pipelines/252711)

<div class="topic-metadata">

**Author:** [@RobBavey](https://discuss.elastic.co/u/RobBavey)\
**Replies:** 3\
**Last updated:** [October 20, 2020, 7:51pm UTC](https://discuss.elastic.co/t/known-issue-logstash-7-7-1-7-9-1-logstash-keystore-may-fail-when-used-with-multiple-pipelines/252711 "2020-10-20T19:51:44Z")

</div>

A performance related change made in Logstash 7.7.1 may cause Logstash configurations with multiple pipelines to fail with the following error: "Unable to configure plugins: (ConfigurationError) Cannot evaluate \`${varia…

---

## [Page file size is too small to hold elements](https://discuss.elastic.co/t/page-file-size-is-too-small-to-hold-elements/229860)

<div class="topic-metadata">

**Author:** [@Louis\_Zhang](https://discuss.elastic.co/u/Louis_Zhang)\
**Replies:** 0\
**Last updated:** [April 26, 2020, 5:47pm UTC](https://discuss.elastic.co/t/page-file-size-is-too-small-to-hold-elements/229860 "2020-04-26T17:47:48Z")

</div>

logstash version 7.6.2, using persistence queue, not sure if this is a known bug? what shoud I do to work around? \[2020-04-26T17:44:41,554\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"7.6.2…

---

## [Some elasticsearch nodes not showing in Kibana / Health yellow](https://discuss.elastic.co/t/some-elasticsearch-nodes-not-showing-in-kibana-health-yellow/176711)

<div class="topic-metadata">

**Author:** [@karan\_budhraja](https://discuss.elastic.co/u/karan_budhraja)\
**Replies:** 5\
**Last updated:** [April 16, 2019, 8:40am UTC](https://discuss.elastic.co/t/some-elasticsearch-nodes-not-showing-in-kibana-health-yellow/176711 "2019-04-16T08:40:57Z")

</div>

Hello. I have an elasticsearch cluster of 7 nodes, however, only 5 are shown in Kibana monitoring with information (status, cpu usage, load average etc.). However, the number next to "Nodes" at the top left is 7. The 5 …

---

## [How to find out if replication is in progress in a cluster](https://discuss.elastic.co/t/how-to-find-out-if-replication-is-in-progress-in-a-cluster/152193)

<div class="topic-metadata">

**Author:** [@sss](https://discuss.elastic.co/u/sss)\
**Replies:** 5\
**Last updated:** [October 16, 2018, 6:55am UTC](https://discuss.elastic.co/t/how-to-find-out-if-replication-is-in-progress-in-a-cluster/152193 "2018-10-16T06:55:53Z")

</div>

hello, I am looking for a reliable way where we can say that replication is in progress on a node ? From the below output, what are the parameters based on which i can reliably tell that replication is in progress/com…

---

## [Troubleshooting High heap usage](https://discuss.elastic.co/t/troubleshooting-high-heap-usage/118554)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 5\
**Last updated:** [February 8, 2018, 5:56pm UTC](https://discuss.elastic.co/t/troubleshooting-high-heap-usage/118554 "2018-02-08T17:56:32Z")

</div>

I have looked at many posts in the discussion forum and googled quite a bit as well. Either these posts are for older versions or there wasn't anything that matched the issue I am seeing. Hence, posting it one more time.…

---

## [Index not created correct](https://discuss.elastic.co/t/index-not-created-correct/100053)

<div class="topic-metadata">

**Author:** [@madalin](https://discuss.elastic.co/u/madalin)\
**Replies:** 5\
**Last updated:** [September 19, 2017, 4:14am UTC](https://discuss.elastic.co/t/index-not-created-correct/100053 "2017-09-19T04:14:57Z")

</div>

Hi guys I'm new in ELK and I need your help. I want to see my log4j2 logs into Kibana. For that i created and index in ES trying to map the fields from my log : curl -XPUT localhost:9200/log\_index -d ' { "settings"…

---

## [Bulk Rejection in Elasticsearch](https://discuss.elastic.co/t/bulk-rejection-in-elasticsearch/128319)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 1\
**Last updated:** [April 17, 2018, 9:23am UTC](https://discuss.elastic.co/t/bulk-rejection-in-elasticsearch/128319 "2018-04-17T09:23:18Z")

</div>

Hello Team, I'm trying to index a 12mb log file which has 50,000 logs. After Indexign around 30,000 logs I'm getting the following error \[2018-04-17T05:52:48,254\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed …

---

## [Connect to embedded node via transport protocol](https://discuss.elastic.co/t/connect-to-embedded-node-via-transport-protocol/93184)

<div class="topic-metadata">

**Author:** [@Felk](https://discuss.elastic.co/u/Felk)\
**Replies:** 0\
**Last updated:** [July 14, 2017, 12:11pm UTC](https://discuss.elastic.co/t/connect-to-embedded-node-via-transport-protocol/93184 "2017-07-14T12:11:20Z")

</div>

First off, I know embedded servers are not officially supported. I'm glad for any "unofficial" help too. I am trying to connect to an embedded node with a TransportClient. The embedded node gets created with the Node cl…

---

## [How to calculate quantile from histogram bucket metrics](https://discuss.elastic.co/t/how-to-calculate-quantile-from-histogram-bucket-metrics/201333)

<div class="topic-metadata">

**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\
**Replies:** 5\
**Last updated:** [October 4, 2019, 5:42pm UTC](https://discuss.elastic.co/t/how-to-calculate-quantile-from-histogram-bucket-metrics/201333 "2019-10-04T17:42:33Z")

</div>

Hello! I am using spring boot and micro meter for application metrics. My spring boot application is pushing metrics about the latency to elastic search. I am using micrometers Percentile histograms - Micrometer accumu…

---

## [Data not coming in through redis](https://discuss.elastic.co/t/data-not-coming-in-through-redis/25957)

<div class="topic-metadata">

**Author:** [@daq](https://discuss.elastic.co/u/daq)\
**Replies:** 6\
**Last updated:** [July 29, 2015, 6:57pm UTC](https://discuss.elastic.co/t/data-not-coming-in-through-redis/25957 "2015-07-29T18:57:54Z")

</div>

I have a basic ELK setup on a single box that is fed data from several inputs like syslog and lumberjack. It started dying from too much log data coming in so I installed redis server and added it to config, but now the …

---

## [ElasticSearch for the huge data (around 950 million) indexing from oracle](https://discuss.elastic.co/t/elasticsearch-for-the-huge-data-around-950-million-indexing-from-oracle/14976)

<div class="topic-metadata">

**Author:** [@kondapallinaresh](https://discuss.elastic.co/u/kondapallinaresh)\
**Replies:** 4\
**Last updated:** [December 20, 2013, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-for-the-huge-data-around-950-million-indexing-from-oracle/14976 "2013-12-20T23:29:40Z")

</div>

Hi All, My requirement is to index the table from oracle which has around 950 million rows of data. We had the infra of 4 nodes Each node has :4 CPU,16gig memory and 122 gig Storage my cofiguraion is ES…

---

## [Elastic search failed to put mappings on indices](https://discuss.elastic.co/t/elastic-search-failed-to-put-mappings-on-indices/124925)

<div class="topic-metadata">

**Author:** [@sri535](https://discuss.elastic.co/u/sri535)\
**Replies:** 1\
**Last updated:** [March 22, 2018, 1:45pm UTC](https://discuss.elastic.co/t/elastic-search-failed-to-put-mappings-on-indices/124925 "2018-03-22T13:45:10Z")

</div>

HI, In latest version for newly adding indices its failing to map indices and giving below error \[2018-03-21T00:06:29,854\]\[DEBUG\]\[o.e.a.a.i.m.p.TransportPutMappingAction\] \[W\_PbdUQ\] failed to put mappings on indices \[\[\[…

---

## [Search for an address](https://discuss.elastic.co/t/search-for-an-address/186720)

<div class="topic-metadata">

**Author:** [@rori1](https://discuss.elastic.co/u/rori1)\
**Replies:** 2\
**Last updated:** [June 26, 2019, 7:10am UTC](https://discuss.elastic.co/t/search-for-an-address/186720 "2019-06-26T07:10:22Z")

</div>

Hello, I have an address in a nested object where number, road name, postal code and city are each in a specific field. What is the best way to make search request from query like " 4 Brooklyn Rd Bromley" ? Thanks fo…

---

## [How to Run Metricbeat in Docker with Modules to Monitor Other Containers](https://discuss.elastic.co/t/how-to-run-metricbeat-in-docker-with-modules-to-monitor-other-containers/247112)

<div class="topic-metadata">

**Author:** [@chancewwr](https://discuss.elastic.co/u/chancewwr)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 6:26pm UTC](https://discuss.elastic.co/t/how-to-run-metricbeat-in-docker-with-modules-to-monitor-other-containers/247112 "2020-09-04T18:26:09Z")

</div>

Hello all, I'm trying to use Metricbeat to monitor my elasticstack. Logstash, Elasticsearch, Kibana, and some Beats are all running inside of docker containers. I am wondering what is the best way to use Metricbeat to mo…

---

## [Visualize services up or down](https://discuss.elastic.co/t/visualize-services-up-or-down/100653)

<div class="topic-metadata">

**Author:** [@Sharivari](https://discuss.elastic.co/u/Sharivari)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 8:39am UTC](https://discuss.elastic.co/t/visualize-services-up-or-down/100653 "2017-09-19T08:39:19Z")

</div>

Hi there, I'm trying to request a service, the service can be "up" or "down". Now I want a simple visualization, where I see the service name as title and under it there should be a red or a green square, if the status…

---

## [elasticsearch.exceptions.TransportError: TransportError 503: Data too large](https://discuss.elastic.co/t/elasticsearch-exceptions-transporterror-transporterror-503-data-too-large/128116)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Kumar](https://discuss.elastic.co/u/Vaibhav_Kumar)\
**Replies:** 6\
**Last updated:** [April 16, 2018, 9:12am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-transporterror-transporterror-503-data-too-large/128116 "2018-04-16T09:12:48Z")

</div>

I'm trying to get the response from ES hitting it from python code but it is showing the below error: elasticsearch.exceptions.TransportError: TransportError(503, u'search\_phase\_execution\_exception', u'\[request\] Data to…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862)

<div class="topic-metadata">

**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\
**Replies:** 3\
**Last updated:** [December 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862 "2021-12-03T11:49:33Z")

</div>

hello, i installed 3 nodes of Elasticsearch and its working but when i put kibana i have the message "Kibana server is not ready yet" My log kibana.yml {"type":"log","@timestamp":"2021-11-10T10:12:19+01:00","tags":\["d…

---

## [Merging documents based on matched fields values](https://discuss.elastic.co/t/merging-documents-based-on-matched-fields-values/249728)

<div class="topic-metadata">

**Author:** [@abregman](https://discuss.elastic.co/u/abregman)\
**Replies:** 1\
**Last updated:** [September 24, 2020, 6:24am UTC](https://discuss.elastic.co/t/merging-documents-based-on-matched-fields-values/249728 "2020-09-24T06:24:17Z")

</div>

I'll start by saying that I'm not sure what I need is actually to merge documents, it's simply the most suitable subject I've found. Every document created in my environment today has the following fields: job\_name and …

---

## [Metric to count number of queries per day/month](https://discuss.elastic.co/t/metric-to-count-number-of-queries-per-day-month/325076)

<div class="topic-metadata">

**Author:** [@Milad\_Heydariaan](https://discuss.elastic.co/u/Milad_Heydariaan)\
**Replies:** 4\
**Last updated:** [February 15, 2023, 6:23pm UTC](https://discuss.elastic.co/t/metric-to-count-number-of-queries-per-day-month/325076 "2023-02-15T18:23:00Z")

</div>

Hi, I'm trying to collect the number of queries that users send to Elasticsearch to understand how many queries per day/month are submitted to our clusters. I've tried using the following metrics mentioned in Nodes sta…

---

## [Querying Elasticsearch Remotely](https://discuss.elastic.co/t/querying-elasticsearch-remotely/38691)

<div class="topic-metadata">

**Author:** [@ninjada](https://discuss.elastic.co/u/ninjada)\
**Replies:** 4\
**Last updated:** [January 8, 2016, 6:02am UTC](https://discuss.elastic.co/t/querying-elasticsearch-remotely/38691 "2016-01-08T06:02:15Z")

</div>

Have recently updated to latest ES along with Logstash & Kibana latest. I was previously running a script from an external server that would search an IP list in elasticsearch. Since updating the script hasn't been able …

---

## [How to Merge Data from Two Tables in One Visualization?](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 4:31pm UTC](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936 "2019-11-01T16:31:15Z")

</div>

Hi Kibana Jedi Masters, Suppose I have a Kibana data chart Visualisation tracking the inventory of my fruit store: | Product Code | Qnty | ========================= | 100 | 15 | | 400 | 8 |…

---

## [SSL error when using python api](https://discuss.elastic.co/t/ssl-error-when-using-python-api/25121)

<div class="topic-metadata">

**Author:** [@Ella\_Soomla](https://discuss.elastic.co/u/Ella_Soomla)\
**Replies:** 2\
**Last updated:** [July 9, 2015, 6:59am UTC](https://discuss.elastic.co/t/ssl-error-when-using-python-api/25121 "2015-07-09T06:59:36Z")

</div>

Hi, I'm able to run queries to my elasticsearch cluster using sense and command line. However, when I try to use the python api to run the same queries, I keep getting the following error: elasticsearch.exceptions.SSLE…

---

## [Query against a list of objects](https://discuss.elastic.co/t/query-against-a-list-of-objects/83718)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 3:51pm UTC](https://discuss.elastic.co/t/query-against-a-list-of-objects/83718 "2017-04-26T15:51:26Z")

</div>

Hello, we're currently using winlogbeat to send domain controller logs to Elasticsearch and I was wondering how I would query against a list of objects, for example a list of usernames. After looking into it I think I ne…

---

## [Failed to parse value \[analyzed\] as only \[true\] or \[false\] are allowed. ES upgrade 5.5 -\> 6.5](https://discuss.elastic.co/t/failed-to-parse-value-analyzed-as-only-true-or-false-are-allowed-es-upgrade-5-5-6-5/166473)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 3\
**Last updated:** [February 1, 2019, 10:44am UTC](https://discuss.elastic.co/t/failed-to-parse-value-analyzed-as-only-true-or-false-are-allowed-es-upgrade-5-5-6-5/166473 "2019-02-01T10:44:46Z")

</div>

Recently we upgraded ES to 6.5 from 5.5. The same template which we used to push in Elasticsearch 5 is not working in ES 6. It is throwing below error. "type":"illegal\_argument\_exception","reason":"Failed to parse value…

---

## [JSON wildcard search](https://discuss.elastic.co/t/json-wildcard-search/3472)

<div class="topic-metadata">

**Author:** [@Albin\_Stigo](https://discuss.elastic.co/u/Albin_Stigo)\
**Replies:** 2\
**Last updated:** [October 26, 2010, 10:08pm UTC](https://discuss.elastic.co/t/json-wildcard-search/3472 "2010-10-26T22:08:53Z")

</div>

Hi, Could anyone point me in the right direction on this one... JSON request with something similar to this in the body: { "query" : { "term" : { "user" : "kim\*" } } } as opposed to this similar query-string requ…

---

## [Tracking user activity in Appsearch UI through logs](https://discuss.elastic.co/t/tracking-user-activity-in-appsearch-ui-through-logs/263373)

<div class="topic-metadata">

**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\
**Replies:** 8\
**Last updated:** [February 11, 2021, 3:48pm UTC](https://discuss.elastic.co/t/tracking-user-activity-in-appsearch-ui-through-logs/263373 "2021-02-11T15:48:04Z")

</div>

Is there any way we can track user activities like what they searched what document they accessed after logging in to appsearch UI through logs or some other ways for audit. Please let me know if any solution.

---

## [Unable to parse BaseAggregationBuilder](https://discuss.elastic.co/t/unable-to-parse-baseaggregationbuilder/217457)

<div class="topic-metadata">

**Author:** [@WLH](https://discuss.elastic.co/u/WLH)\
**Replies:** 1\
**Last updated:** [February 3, 2020, 3:23pm UTC](https://discuss.elastic.co/t/unable-to-parse-baseaggregationbuilder/217457 "2020-02-03T15:23:58Z")

</div>

Good afternoon, I am trying to build an elastic watcher query using nested aggs, that feed the variables into a bucket script that will subtract one field from another, then put that value into a watcher on a threashold.…

---

## [\[Resolved\]\[Kibana7.0.1\] Error occurs " Request Timeout after 30000ms" when starting kibana](https://discuss.elastic.co/t/resolved-kibana7-0-1-error-occurs-request-timeout-after-30000ms-when-starting-kibana/200968)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 3\
**Last updated:** [September 25, 2019, 10:38am UTC](https://discuss.elastic.co/t/resolved-kibana7-0-1-error-occurs-request-timeout-after-30000ms-when-starting-kibana/200968 "2019-09-25T10:38:29Z")

</div>

Hi Team, I was running into below error when starting kibana, and ES side has no error and exception. log \[06:49:29.171\] \[info\]\[status\]\[plugin:spaces@7.0.1\] Status changed from yellow to green - Ready error \[06:4…

---

## [Error when connecting filebeat to logstash](https://discuss.elastic.co/t/error-when-connecting-filebeat-to-logstash/46099)

<div class="topic-metadata">

**Author:** [@aschwanb](https://discuss.elastic.co/u/aschwanb)\
**Replies:** 3\
**Last updated:** [April 4, 2016, 12:12pm UTC](https://discuss.elastic.co/t/error-when-connecting-filebeat-to-logstash/46099 "2016-04-04T12:12:10Z")

</div>

Hello everyone I have a docker container with logstash running behind an nginx proxy on ubuntu 15 and would like to send information via filebeat from an OS X 10.11 client to logstash. I can connect to logstash using…

---

## [FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index. TypeError: Cannot read property 'error' of undefined](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-typeerror-cannot-read-property-error-of-undefined/269066)

<div class="topic-metadata">

**Author:** [@elk\_usr](https://discuss.elastic.co/u/elk_usr)\
**Replies:** 2\
**Last updated:** [April 2, 2021, 6:07pm UTC](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-typeerror-cannot-read-property-error-of-undefined/269066 "2021-04-02T18:07:47Z")

</div>

Hello, I am trying to install Kibana7.12.0 on a new Win10 laptop that has elasticsearch7.12.0 already installed and running. However, Kibana install fails about halfway giving below fatal error Any help on this is g…

---

## [\[Solved\] Create() got an unexpected keyword argument 'include\_type\_name'](https://discuss.elastic.co/t/solved-create-got-an-unexpected-keyword-argument-include-type-name/167522)

<div class="topic-metadata">

**Author:** [@cecoke](https://discuss.elastic.co/u/cecoke)\
**Replies:** 2\
**Last updated:** [February 8, 2019, 7:46am UTC](https://discuss.elastic.co/t/solved-create-got-an-unexpected-keyword-argument-include-type-name/167522 "2019-02-08T07:46:07Z")

</div>

Hi, I am getting an error when running "esrally --track http\_logs --target-hosts 172.31.13.142:9200 --pipeline benchmark-only --test-mode" Running delete-index …

---

## [Why won't Logstash rename a parsed JSON field?](https://discuss.elastic.co/t/why-wont-logstash-rename-a-parsed-json-field/218447)

<div class="topic-metadata">

**Author:** [@Sylancer](https://discuss.elastic.co/u/Sylancer)\
**Replies:** 6\
**Last updated:** [February 10, 2020, 12:04am UTC](https://discuss.elastic.co/t/why-wont-logstash-rename-a-parsed-json-field/218447 "2020-02-10T00:04:24Z")

</div>

So I've got some Zeek logs. In particular I've got http.log which Filebeat is adding the tag "Zeek-HTTP" to. That's all working fine. I want to use the JSON plugin to parse the "message" field in Logstash to a new target…

---

## [The msearch request must be terminated by a newline](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline/142586)

<div class="topic-metadata">

**Author:** [@zwokaros](https://discuss.elastic.co/u/zwokaros)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 12:49pm UTC](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline/142586 "2018-08-02T12:49:39Z")

</div>

Hello I've been stuck on this problem Basically I have a curl POST request that works when it's written directly on a terminal, but whenever I try to do it in a script, I get this error $data\_string = '{"index":\["trac…

---

## [Change Field type from keyword to integer](https://discuss.elastic.co/t/change-field-type-from-keyword-to-integer/146497)

<div class="topic-metadata">

**Author:** [@PieterF](https://discuss.elastic.co/u/PieterF)\
**Replies:** 2\
**Last updated:** [August 29, 2018, 9:49am UTC](https://discuss.elastic.co/t/change-field-type-from-keyword-to-integer/146497 "2018-08-29T09:49:07Z")

</div>

Hi There, We use elasticsearch 5.6 with logstash,filebeat and kibana to search through the iis logs. We have a filebeat index that already is used but the Time Taken is not a number in Kibana. The "Time Taken propert…

---

## [Failed to find geo\_point field \[destination.geo.location\]](https://discuss.elastic.co/t/failed-to-find-geo-point-field-destination-geo-location/256966)

<div class="topic-metadata">

**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\
**Replies:** 8\
**Last updated:** [December 14, 2020, 5:17pm UTC](https://discuss.elastic.co/t/failed-to-find-geo-point-field-destination-geo-location/256966 "2020-12-14T17:17:02Z")

</div>

Hello everyone, I am having some problems with geo.location showing up on that maps with errors. This is my errors" query\_shard\_exception at \`shard\` 0 \`index\` .ds-logs-windows.security-default-000001 \`node\` stUuKb8ZR4…

---

## [Connecting to port 9300 running inside a Docker container](https://discuss.elastic.co/t/connecting-to-port-9300-running-inside-a-docker-container/223916)

<div class="topic-metadata">

**Author:** [@calin](https://discuss.elastic.co/u/calin)\
**Replies:** 8\
**Last updated:** [April 3, 2020, 3:48pm UTC](https://discuss.elastic.co/t/connecting-to-port-9300-running-inside-a-docker-container/223916 "2020-04-03T15:48:13Z")

</div>

I think I have the same issue as here: But I am not sure how to implement the fix. Elastic (5.4.3) running in Docker, started with docker-compose. The relevant part of the docker-compose is: my-elastic: image: …

[Previous page](https://discuss.elastic.co/top.md?page=461&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=463&per_page=50&period=all)
