# Top

**URL:** https://discuss.elastic.co/top.md?page=468&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 469

---

## [Elasticsearch.js API request timeout](https://discuss.elastic.co/t/elasticsearch-js-api-request-timeout/137682)

<div class="topic-metadata">

**Author:** [@dmongit](https://discuss.elastic.co/u/dmongit)\
**Replies:** 7\
**Last updated:** [June 28, 2018, 2:37pm UTC](https://discuss.elastic.co/t/elasticsearch-js-api-request-timeout/137682 "2018-06-28T14:37:30Z")

</div>

Short story: I'm using the es.js client creation code for the api. I call bulk with the api. I get a request timeout. I'm passing a newline delimited json array. Longer story (read the short story first, please): My co…

---

## [Kibana for weather station](https://discuss.elastic.co/t/kibana-for-weather-station/114909)

<div class="topic-metadata">

**Author:** [@bk10](https://discuss.elastic.co/u/bk10)\
**Replies:** 8\
**Last updated:** [February 2, 2018, 8:34pm UTC](https://discuss.elastic.co/t/kibana-for-weather-station/114909 "2018-02-02T20:34:29Z")

</div>

Hi there, I am in the middle of building weather station based on Raspberry Pi and couple of sensors. I succesfully sent logs from RPi to logstash and logstash resend them to elasticsearch. First of all I am configuri…

---

## [Failed to add a new node to a single node cluster on the fly](https://discuss.elastic.co/t/failed-to-add-a-new-node-to-a-single-node-cluster-on-the-fly/36031)

<div class="topic-metadata">

**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\
**Replies:** 3\
**Last updated:** [April 23, 2017, 10:58am UTC](https://discuss.elastic.co/t/failed-to-add-a-new-node-to-a-single-node-cluster-on-the-fly/36031 "2017-04-23T10:58:41Z")

</div>

We have an one node cluster for a long time, and the old node is crawler\_service\_001(172.16.11.17). We want to add a new node to that cluster(don't restart crawler\_service\_001), and named it crawler\_service\_002(172.16.11…

---

## [How to determine max\_num\_segments for force merge?](https://discuss.elastic.co/t/how-to-determine-max-num-segments-for-force-merge/63334)

<div class="topic-metadata">

**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Replies:** 4\
**Last updated:** [October 21, 2016, 4:19am UTC](https://discuss.elastic.co/t/how-to-determine-max-num-segments-for-force-merge/63334 "2016-10-21T04:19:44Z")

</div>

Hi All, In our ES cluster, we have time based indexes from a few GB up to 100+GB (replicas not counted). The cluster uses hot cold model, and I'm looking at force merge (https://www.elastic.co/guide/en/elasticsearch/re…

---

## [Handling an empty datatable](https://discuss.elastic.co/t/handling-an-empty-datatable/186963)

<div class="topic-metadata">

**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\
**Replies:** 2\
**Last updated:** [June 24, 2019, 3:08pm UTC](https://discuss.elastic.co/t/handling-an-empty-datatable/186963 "2019-06-24T15:08:35Z")

</div>

In Canvas, i’m Using the expression editor to calculate a percentage for use in a Metric object. After creating the datatable using ply, I’m executing the line: math “mean(percentage)” However, if my datatable is empt…

---

## [\[groovy\] scripts are deprecated, use \[painless\] scripts instead on ES 5.0](https://discuss.elastic.co/t/groovy-scripts-are-deprecated-use-painless-scripts-instead-on-es-5-0/64464)

<div class="topic-metadata">

**Author:** [@opendoc42](https://discuss.elastic.co/u/opendoc42)\
**Replies:** 6\
**Last updated:** [March 8, 2017, 7:29pm UTC](https://discuss.elastic.co/t/groovy-scripts-are-deprecated-use-painless-scripts-instead-on-es-5-0/64464 "2017-03-08T19:29:51Z")

</div>

Hello, I just did a fresh install of ElasticSearch 5.0. At start I have a message \[Groovy\] scripts are deprecated, use \[painless\] INSTEAD scripts Why install a deprecated module ? Here are the modules installed and …

---

## [Elasticsearch is recreating indexes after they were deleted](https://discuss.elastic.co/t/elasticsearch-is-recreating-indexes-after-they-were-deleted/288039)

<div class="topic-metadata">

**Author:** [@kamillacrozara](https://discuss.elastic.co/u/kamillacrozara)\
**Replies:** 5\
**Last updated:** [November 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-is-recreating-indexes-after-they-were-deleted/288039 "2021-11-15T14:27:34Z")

</div>

I am trying to sync relational data with Elasticsearch using Logstash. To do that I have crated a pipeline to Logstash like this: input { jdbc { tags =\> \["vehicles"\] jdbc\_driver\_library =\> "/usr/share/logstash…

---

## [Howto convert UNIX timestamp json field into ISO8601 format](https://discuss.elastic.co/t/howto-convert-unix-timestamp-json-field-into-iso8601-format/145109)

<div class="topic-metadata">

**Author:** [@Roberto\_Giordani](https://discuss.elastic.co/u/Roberto_Giordani)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 8:47am UTC](https://discuss.elastic.co/t/howto-convert-unix-timestamp-json-field-into-iso8601-format/145109 "2018-08-21T08:47:21Z")

</div>

Hi, I've allowed filebeat to parse a json log, but the Unix timestamp fields like this "EdgeStartTimestamp": 1534732311104000000, on Kibana is converted in this way EdgeStartTimestamp 1,534,732,311,104,000,0…

---

## [Master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/213412)

<div class="topic-metadata">

**Author:** [@li-peng](https://discuss.elastic.co/u/li-peng)\
**Replies:** 4\
**Last updated:** [January 20, 2020, 3:16am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/213412 "2020-01-20T03:16:03Z")

</div>

\[2019-12-31T14:29:23,954\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node1\] master not discovered or elected yet, an election requires at least 2 nodes with ids from \[5e3LlD8QTHmGaJDhlKY-8w, cJyHBa9ATf-2vg8Tnt7KeQ,…

---

## [Could not find a version that satisfies the requirement thespian](https://discuss.elastic.co/t/could-not-find-a-version-that-satisfies-the-requirement-thespian/76367)

<div class="topic-metadata">

**Author:** [@loganw](https://discuss.elastic.co/u/loganw)\
**Replies:** 4\
**Last updated:** [February 28, 2017, 7:25am UTC](https://discuss.elastic.co/t/could-not-find-a-version-that-satisfies-the-requirement-thespian/76367 "2017-02-28T07:25:20Z")

</div>

Experts, I got following error massage while installing esrally, could anyone kindly help？ What is thespian and how to resolve? Thanks a lot! ===================== Collecting thespian==3.6.2 (from esrally) Could not …

---

## [How to use regexp query filter in ElasticSearch Source Filtering?](https://discuss.elastic.co/t/how-to-use-regexp-query-filter-in-elasticsearch-source-filtering/123326)

<div class="topic-metadata">

**Author:** [@srikanth539](https://discuss.elastic.co/u/srikanth539)\
**Replies:** 7\
**Last updated:** [March 12, 2018, 6:30am UTC](https://discuss.elastic.co/t/how-to-use-regexp-query-filter-in-elasticsearch-source-filtering/123326 "2018-03-12T06:30:24Z")

</div>

For given below test data of ElasticSearch index, how do we eliminate the field name(s) containing UUID? Can we make use of regular expressions here? Per my understanding, regexp will match the values but not keys. { …

---

## [How to change or replace the SSL Certificate used by Fleet Server](https://discuss.elastic.co/t/how-to-change-or-replace-the-ssl-certificate-used-by-fleet-server/344930)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 6\
**Last updated:** [October 20, 2023, 12:06pm UTC](https://discuss.elastic.co/t/how-to-change-or-replace-the-ssl-certificate-used-by-fleet-server/344930 "2023-10-20T12:06:57Z")

</div>

Hello, I'm looking for the steps that need to be done to change or replace the SSL Certificate for a existing Fleet Server and I could not find anything in the documentation. All documentation that I found is about how…

---

## [Storing and analyzing user agent strings, general approach](https://discuss.elastic.co/t/storing-and-analyzing-user-agent-strings-general-approach/18346)

<div class="topic-metadata">

**Author:** [@Mark\_Dodwell](https://discuss.elastic.co/u/Mark_Dodwell)\
**Replies:** 3\
**Last updated:** [June 28, 2014, 5:22am UTC](https://discuss.elastic.co/t/storing-and-analyzing-user-agent-strings-general-approach/18346 "2014-06-28T05:22:44Z")

</div>

I want to store a bunch of documents in elasticsearch (which represent a hit to a website) including the user agent of the client that made the original HTTP request. Since user agent strings have a lot of varianc…

---

## [Create a new field from Message](https://discuss.elastic.co/t/create-a-new-field-from-message/44390)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 4\
**Last updated:** [March 16, 2016, 3:55am UTC](https://discuss.elastic.co/t/create-a-new-field-from-message/44390 "2016-03-16T03:55:40Z")

</div>

\[method : GET\] \[requestUri : https://myhost:4433/MyService/api/products/34221/availability/locationId/11111\] \[reasonPhrase : OK\] This is the text which I receive under the Message field after searching. Is there a way…

---

## [Real time streaming dashboard using Kibana](https://discuss.elastic.co/t/real-time-streaming-dashboard-using-kibana/16849)

<div class="topic-metadata">

**Author:** [@Chris\_Holt](https://discuss.elastic.co/u/Chris_Holt)\
**Replies:** 2\
**Last updated:** [April 9, 2014, 5:08pm UTC](https://discuss.elastic.co/t/real-time-streaming-dashboard-using-kibana/16849 "2014-04-09T17:08:23Z")

</div>

Hi, I'm trying to set up a real time streaming dashboard for logs, which would collect logs using fluentd or similar, and all I would want to do is extract running statistics from the data eg firewall denies / second…

---

## [Advice on force merge](https://discuss.elastic.co/t/advice-on-force-merge/100781)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 4:40pm UTC](https://discuss.elastic.co/t/advice-on-force-merge/100781 "2017-09-18T16:40:01Z")

</div>

We have been seeing degraded search performance on our 2.3.2 cluster. In looking at our main index, some of the shards are more than 50% deleted documents, and there are 1,610 segments. This index has 360 million docum…

---

## [Nested Fields in an Index](https://discuss.elastic.co/t/nested-fields-in-an-index/371311)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 8\
**Last updated:** [December 11, 2024, 11:39pm UTC](https://discuss.elastic.co/t/nested-fields-in-an-index/371311 "2024-12-11T23:39:04Z")

</div>

We have an Index with a Nested field. Most of the documents will have their nested field null but some will have it populated. What would the most efficient way of querying such index so that if there are no docs with n…

---

## [Logstash not sending logs to elastic](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elastic/123239)

<div class="topic-metadata">

**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\
**Replies:** 8\
**Last updated:** [March 12, 2018, 9:10am UTC](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elastic/123239 "2018-03-12T09:10:02Z")

</div>

\[2018-03-09T09:46:31,839\]\[WARN \]\[logstash.outputs.elasticsearch\] Detected a 6.x and above cluster: the type event field won't be used to determine the document \_type {:es\_version=\>6} \[2018-03-09T09:46:31,840\]\[INFO \]\[log…

---

## [Autoscale logstash in AWS](https://discuss.elastic.co/t/autoscale-logstash-in-aws/125262)

<div class="topic-metadata">

**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\
**Replies:** 4\
**Last updated:** [April 4, 2018, 1:20am UTC](https://discuss.elastic.co/t/autoscale-logstash-in-aws/125262 "2018-04-04T01:20:36Z")

</div>

i am using logstash-input-plugin with persistent queues and fowarding my logs to Elasticsearch and a small subset of logs are sent to s3. Is there any best practice for auto scaling my logstash instances. I am deploying…

---

## [Logarithmic scale for Kibana Timeli Y axis](https://discuss.elastic.co/t/logarithmic-scale-for-kibana-timeli-y-axis/81942)

<div class="topic-metadata">

**Author:** [@warunac](https://discuss.elastic.co/u/warunac)\
**Replies:** 2\
**Last updated:** [April 12, 2017, 2:47am UTC](https://discuss.elastic.co/t/logarithmic-scale-for-kibana-timeli-y-axis/81942 "2017-04-12T02:47:51Z")

</div>

Hi, Would be to able to have logarithmic scale for the Kibana Timelion Y axis. Is that possible?

---

## [Elastic search fails to index the records once it reaches 10000](https://discuss.elastic.co/t/elastic-search-fails-to-index-the-records-once-it-reaches-10000/199603)

<div class="topic-metadata">

**Author:** [@Nimisha\_Salian](https://discuss.elastic.co/u/Nimisha_Salian)\
**Replies:** 6\
**Last updated:** [September 17, 2019, 10:41am UTC](https://discuss.elastic.co/t/elastic-search-fails-to-index-the-records-once-it-reaches-10000/199603 "2019-09-17T10:41:11Z")

</div>

Hello, I'm new to elastic search so pardon me if you think this question is silly. So i'm facing issues while adding the records to my index. As soon as 10000 records are added to the index, my index doesn't take the r…

---

## [Configuring Filebeat to use proxy for any input request that goes out](https://discuss.elastic.co/t/configuring-filebeat-to-use-proxy-for-any-input-request-that-goes-out/279485)

<div class="topic-metadata">

**Author:** [@code4purpose](https://discuss.elastic.co/u/code4purpose)\
**Replies:** 7\
**Last updated:** [July 27, 2021, 8:16pm UTC](https://discuss.elastic.co/t/configuring-filebeat-to-use-proxy-for-any-input-request-that-goes-out/279485 "2021-07-27T20:16:55Z")

</div>

I am running Elasticsearch, Kibana and Filebeats on my office windows laptop. I am trying to use filebeat -microsoft module. All outgoing http/s requests go via a proxy. How do I Configure Filebeat to use proxy for an…

---

## [Can't query asterisk](https://discuss.elastic.co/t/cant-query-asterisk/40627)

<div class="topic-metadata">

**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Replies:** 3\
**Last updated:** [February 5, 2016, 2:01pm UTC](https://discuss.elastic.co/t/cant-query-asterisk/40627 "2016-02-05T14:01:21Z")

</div>

Hi, EDIT: The post displayed was not the same I wrote \[:frowning:\] My backslashes were not displayed... I am unable to search for the asterisk '\*' character. I got the following events indexed(3 with \*, 1 without): "…

---

## [Parsing tags](https://discuss.elastic.co/t/parsing-tags/55660)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 6\
**Last updated:** [July 20, 2016, 11:32am UTC](https://discuss.elastic.co/t/parsing-tags/55660 "2016-07-20T11:32:08Z")

</div>

How can I parse this using grok filter "tags" =\> \[ \[0\] "test-category", \[1\] "beats\_input\_raw\_event" Tried this won't work match =\> { "\[tags\]\[0\]" =\> "%{WORD:category}" } Thanks

---

## [Filter search results by aggregation (cardinality \> X)](https://discuss.elastic.co/t/filter-search-results-by-aggregation-cardinality-x/90070)

<div class="topic-metadata">

**Author:** [@andreas\_es](https://discuss.elastic.co/u/andreas_es)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 2:36pm UTC](https://discuss.elastic.co/t/filter-search-results-by-aggregation-cardinality-x/90070 "2017-06-20T14:36:26Z")

</div>

I am trying to run an ES query that uses a "cardinality" aggregation and filter the results so that I only see those with a cardinality greater than or equal to X. This is a very basic version of my query: "size": 0,…

---

## [Inverting X-axis](https://discuss.elastic.co/t/inverting-x-axis/71116)

<div class="topic-metadata">

**Author:** [@default](https://discuss.elastic.co/u/default)\
**Replies:** 1\
**Last updated:** [January 10, 2017, 6:14pm UTC](https://discuss.elastic.co/t/inverting-x-axis/71116 "2017-01-10T18:14:43Z")

</div>

Hi! I've got a question on inverting the X-axis for a bar or area chart. Let's say that I have a set of 10 numeric terms, as below: \[1,2,3,4,5,6,7,8,9,10\] I want to display the top 5 terms on the X-axis, with th…

---

## [Aggregations on basis of field prefix](https://discuss.elastic.co/t/aggregations-on-basis-of-field-prefix/32466)

<div class="topic-metadata">

**Author:** [@Asad\_Rehman](https://discuss.elastic.co/u/Asad_Rehman)\
**Replies:** 4\
**Last updated:** [October 20, 2015, 8:26pm UTC](https://discuss.elastic.co/t/aggregations-on-basis-of-field-prefix/32466 "2015-10-20T20:26:46Z")

</div>

Hi All, I want to know that if we can make buckets in Kibana on basis of field names' prefix? For example. I have a database in elasticsearch which has data for different shops and restaurants. documents contain a field…

---

## [Basic C# Apm Application Error: {SystemTotalCpuProvider} Failed instantiating PerformanceCounter](https://discuss.elastic.co/t/basic-c-apm-application-error-systemtotalcpuprovider-failed-instantiating-performancecounter/200467)

<div class="topic-metadata">

**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\
**Replies:** 8\
**Last updated:** [September 23, 2019, 3:19pm UTC](https://discuss.elastic.co/t/basic-c-apm-application-error-systemtotalcpuprovider-failed-instantiating-performancecounter/200467 "2019-09-23T15:19:58Z")

</div>

Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 Hello all, I am trying to implement a very basic C# apm application. This is the code in my main: When the line executes that tries to start …

---

## [Reindexing failed - Validation Failed: 1: id is too long, must be no longer than 512 bytes but was: 672;](https://discuss.elastic.co/t/reindexing-failed-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-672/185650)

<div class="topic-metadata">

**Author:** [@JinnaBalu](https://discuss.elastic.co/u/JinnaBalu)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 4:37am UTC](https://discuss.elastic.co/t/reindexing-failed-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-672/185650 "2019-06-18T04:37:05Z")

</div>

I am reindexing the elasticsearch with the cluster restart from 2.4.1 to 5.6.16, I have reindexed few indices successfull. Out of 23 indices 3 are getting failed duw to the Validation Failure with the id. Validation Fa…

---

## [Need to bypass authentication in iframe](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 5:39pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175 "2022-03-09T17:39:04Z")

</div>

I have an iframe which I need to embed in our application, but whenever I tried to access the iframe a login page comes. I need to bypass this authentication as this page will be accessed by client. I have found same que…

---

## [Querying multiple indexes using dev tools](https://discuss.elastic.co/t/querying-multiple-indexes-using-dev-tools/188842)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 4\
**Last updated:** [July 5, 2019, 5:16am UTC](https://discuss.elastic.co/t/querying-multiple-indexes-using-dev-tools/188842 "2019-07-05T05:16:01Z")

</div>

Hello, Can anyone help me how to query using two indexes in dev tools of kibana? i have two indexes created with different set of data and fields. Thanks & Regards, Priyanka

---

## [Cannot edit node.max\_local\_storage\_nodes in elasticsearch.yml file](https://discuss.elastic.co/t/cannot-edit-node-max-local-storage-nodes-in-elasticsearch-yml-file/149914)

<div class="topic-metadata">

**Author:** [@Edgar](https://discuss.elastic.co/u/Edgar)\
**Replies:** 1\
**Last updated:** [September 26, 2018, 6:49am UTC](https://discuss.elastic.co/t/cannot-edit-node-max-local-storage-nodes-in-elasticsearch-yml-file/149914 "2018-09-26T06:49:42Z")

</div>

Hello, I installed elasticsearch 6.3.1 version on Mac. I used vim config/elasticsearch.yml command in order to set the number\_of\_data\_nodes to 2 with node.max\_local\_storage\_nodes: 2. When I save yml file below. ==…

---

## [Losing data after Elasticsearch restart](https://discuss.elastic.co/t/losing-data-after-elasticsearch-restart/17985)

<div class="topic-metadata">

**Author:** [@rohit\_jaiswal](https://discuss.elastic.co/u/rohit_jaiswal)\
**Replies:** 7\
**Last updated:** [July 5, 2014, 12:02am UTC](https://discuss.elastic.co/t/losing-data-after-elasticsearch-restart/17985 "2014-07-05T00:02:59Z")

</div>

Hello Everyone, We lost data after restarting Elasticsearch cluster. Restarting is a part of deploying our software stack. We have a 20-node cluster running 0.90.2…

---

## [StatusLogger Multiple logging implementations found warn message on adding elasticsearch jar](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 5:51pm UTC](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761 "2019-08-29T17:51:32Z")

</div>

In an application using log4j with slf4j, I am trying to use elasticsearch jar which depends on log4j2. The application's logging dependency looks like this- \<dependency\> \<groupId\>org.slf4j\</groupId\> …

---

## [Logstash HTTP output retries forever on failure](https://discuss.elastic.co/t/logstash-http-output-retries-forever-on-failure/141239)

<div class="topic-metadata">

**Author:** [@darafield](https://discuss.elastic.co/u/darafield)\
**Replies:** 4\
**Last updated:** [July 23, 2018, 7:32pm UTC](https://discuss.elastic.co/t/logstash-http-output-retries-forever-on-failure/141239 "2018-07-23T19:32:42Z")

</div>

We are using Logstash 6.2.4. We have two outputs configured: all data goes to Elasticsearch and some data also goes to an HTTP endpoint that is not always running when we are testing. In the case when the endpoint is not…

---

## [Setting ElasticSearch 5.5.0 Cluster With discovery-ec2 Plugin](https://discuss.elastic.co/t/setting-elasticsearch-5-5-0-cluster-with-discovery-ec2-plugin/92818)

<div class="topic-metadata">

**Author:** [@SanE](https://discuss.elastic.co/u/SanE)\
**Replies:** 6\
**Last updated:** [July 27, 2017, 3:14pm UTC](https://discuss.elastic.co/t/setting-elasticsearch-5-5-0-cluster-with-discovery-ec2-plugin/92818 "2017-07-27T15:14:37Z")

</div>

Hello, I have Configured ElasticSearch Cluster (3 Nodes) with the discovery-ec2 plugin and my configuration below: ES1 (Master Eligible) cluster.name: my-cluster path.data: /data/data path.logs: /data/logs network…

---

## [Can't make your 'Talking to Elastic Search' examples work](https://discuss.elastic.co/t/cant-make-your-talking-to-elastic-search-examples-work/42714)

<div class="topic-metadata">

**Author:** [@mattyb](https://discuss.elastic.co/u/mattyb)\
**Replies:** 4\
**Last updated:** [February 28, 2016, 11:47am UTC](https://discuss.elastic.co/t/cant-make-your-talking-to-elastic-search-examples-work/42714 "2016-02-28T11:47:54Z")

</div>

I need to learn (told to by management) Elasticsearch and Logstash. Installed and ran elasticsearch on Linux (a server). Trying to input the employee stuff here : https://www.elastic.co/guide/en/elasticsearch/guide/curre…

---

## [Sign-in to Kibana only with Google Account](https://discuss.elastic.co/t/sign-in-to-kibana-only-with-google-account/187133)

<div class="topic-metadata">

**Author:** [@Louis-Clement](https://discuss.elastic.co/u/Louis-Clement)\
**Replies:** 2\
**Last updated:** [June 25, 2019, 1:00am UTC](https://discuss.elastic.co/t/sign-in-to-kibana-only-with-google-account/187133 "2019-06-25T01:00:55Z")

</div>

Hi! I followed these guides to sign-in to Kibana with a Google Account using Nginx and OAuth2\_proxy: And it works great! But I have a question: By theses methods I need a common password for Kibana users that I hav…

---

## [PostgreSQL module cannot connect](https://discuss.elastic.co/t/postgresql-module-cannot-connect/220916)

<div class="topic-metadata">

**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\
**Replies:** 8\
**Last updated:** [February 28, 2020, 2:45pm UTC](https://discuss.elastic.co/t/postgresql-module-cannot-connect/220916 "2020-02-28T14:45:45Z")

</div>

We are running metricbeat-7.6.0 on a RedHat 7 system. The basic Metricbeat app is running and connecting with ES. However, the postgresql module is not connecting to the local database. The password, shown here as "redac…

---

## [Unable To filter file types in kibana](https://discuss.elastic.co/t/unable-to-filter-file-types-in-kibana/60210)

<div class="topic-metadata">

**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\
**Replies:** 7\
**Last updated:** [September 14, 2016, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-filter-file-types-in-kibana/60210 "2016-09-14T13:44:07Z")

</div>

Hi Everyone, I am using kibana 4.5.4 elasticsearch 2.3.3 i am, trying to plot a bar or line graph for file types across the timestamp but unable to filter the file types we have field called "url" in our index.. s…

---

## [Subtracting time in elasticsearch query](https://discuss.elastic.co/t/subtracting-time-in-elasticsearch-query/67512)

<div class="topic-metadata">

**Author:** [@Mahdy\_S](https://discuss.elastic.co/u/Mahdy_S)\
**Replies:** 2\
**Last updated:** [November 30, 2016, 7:55am UTC](https://discuss.elastic.co/t/subtracting-time-in-elasticsearch-query/67512 "2016-11-30T07:55:28Z")

</div>

If I want to query event in a "relative" time window, I can do it in elasticsearch if my reference point is the current time "now". So I can say I want to query documents in the last 24 hours by sending the following que…

---

## [Watcher weird error : cannot access method/field \[period\] from a null def reference](https://discuss.elastic.co/t/watcher-weird-error-cannot-access-method-field-period-from-a-null-def-reference/328765)

<div class="topic-metadata">

**Author:** [@Paul\_Chen1](https://discuss.elastic.co/u/Paul_Chen1)\
**Replies:** 3\
**Last updated:** [March 29, 2023, 1:23pm UTC](https://discuss.elastic.co/t/watcher-weird-error-cannot-access-method-field-period-from-a-null-def-reference/328765 "2023-03-29T13:23:43Z")

</div>

My watcher is working normally around 3 years until yesterday, suddenly can't fetch the right number of our doc.count. but weird thing is I think the code should be work, like I paste below int past\_4\_hours\_conversi…

---

## [\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548)

<div class="topic-metadata">

**Author:** [@jpnorenam](https://discuss.elastic.co/u/jpnorenam)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:23pm UTC](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548 "2020-06-16T20:23:50Z")

</div>

Hi, I'am setting up the new ELK (7.7.0) in debian/buster64 OS. And Kibana is unable to connect to ES. The console log: log \[13:32:01.586\] \[info\]\[savedobjects-service\] Starting saved objects migrations log \[13:32:01…

---

## [Remove a field from the document is not successful](https://discuss.elastic.co/t/remove-a-field-from-the-document-is-not-successful/47066)

<div class="topic-metadata">

**Author:** [@szcountryboy](https://discuss.elastic.co/u/szcountryboy)\
**Replies:** 1\
**Last updated:** [April 12, 2016, 9:35am UTC](https://discuss.elastic.co/t/remove-a-field-from-the-document-is-not-successful/47066 "2016-04-12T09:35:09Z")

</div>

Hi, I reference curl -XPOST 'localhost:9200/test/type1/1/\_update' -d '{ "script" : "ctx.\_source.remove("name\_of\_field")" }' Test document inside the type below the message field to delete curl -XPOST 'localhost:9…

---

## [Logstash Forwarder Error Log](https://discuss.elastic.co/t/logstash-forwarder-error-log/662)

<div class="topic-metadata">

**Author:** [@SJ04](https://discuss.elastic.co/u/SJ04)\
**Replies:** 6\
**Last updated:** [May 18, 2015, 6:36am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-log/662 "2015-05-18T06:36:59Z")

</div>

Hi there, Thanks a lot in advance. I have configured the Logstash Forwarder on the cent os System but when i run the Logstash-forwarded . i get this error message in the Error Log OF logstash Forwarder. 2015/05/1…

---

## [Bool Query with multiple term queries inside should OR MultiSearch Queries](https://discuss.elastic.co/t/bool-query-with-multiple-term-queries-inside-should-or-multisearch-queries/113385)

<div class="topic-metadata">

**Author:** [@prakharjain17](https://discuss.elastic.co/u/prakharjain17)\
**Replies:** 2\
**Last updated:** [January 1, 2018, 6:06am UTC](https://discuss.elastic.co/t/bool-query-with-multiple-term-queries-inside-should-or-multisearch-queries/113385 "2018-01-01T06:06:29Z")

</div>

I have bool query which is perfectly satisfying my request which is like: GET product/product/\_search?pretty { "query" : { "bool": { "should": \[ { "term": { "field1" : "xxxx1" …

---

## [Apm-server configuration problem](https://discuss.elastic.co/t/apm-server-configuration-problem/244813)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 8:49am UTC](https://discuss.elastic.co/t/apm-server-configuration-problem/244813 "2020-08-13T08:49:40Z")

</div>

Dears, I need your help. I have problem with configuration apm-server. This is my configuration file: apm-server: host: "node-01:8200" output.elasticsearch: hosts: \["https://node-01:9200", "https://node-02:9200", "…

---

## [Kibana dashboards loading problem](https://discuss.elastic.co/t/kibana-dashboards-loading-problem/172490)

<div class="topic-metadata">

**Author:** [@harsha](https://discuss.elastic.co/u/harsha)\
**Replies:** 5\
**Last updated:** [March 22, 2019, 1:03pm UTC](https://discuss.elastic.co/t/kibana-dashboards-loading-problem/172490 "2019-03-22T13:03:49Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version:6.6.1 …

---

## [Elastic Sharepoint Online Python Connector v8.10.3.0 Security Update](https://discuss.elastic.co/t/elastic-sharepoint-online-python-connector-v8-10-3-0-security-update/344732)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [October 10, 2023, 12:18pm UTC](https://discuss.elastic.co/t/elastic-sharepoint-online-python-connector-v8-10-3-0-security-update/344732 "2023-10-10T12:18:57Z")

</div>

Elastic Sharepoint Online Python Connector Improper Access Control (ESA-2023-18) An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python …

---

## [Squid proxy logs directly to ELasticSearch via filebeat!](https://discuss.elastic.co/t/squid-proxy-logs-directly-to-elasticsearch-via-filebeat/197949)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 5\
**Last updated:** [September 6, 2019, 9:04pm UTC](https://discuss.elastic.co/t/squid-proxy-logs-directly-to-elasticsearch-via-filebeat/197949 "2019-09-06T21:04:31Z")

</div>

I am wondering does any one already configured the shipping of Squid Proxy logs directly to Elastic search via file beat ?if yes, can some one provide me the information to achieve this ! Thank you

[Previous page](https://discuss.elastic.co/top.md?page=467&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=469&per_page=50&period=all)
