# Top

**URL:** https://discuss.elastic.co/top.md?page=480&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 481

---

## [Spring data and elasticsearch (6+) release confusion](https://discuss.elastic.co/t/spring-data-and-elasticsearch-6-release-confusion/139789)

<div class="topic-metadata">

**Author:** [@kotek](https://discuss.elastic.co/u/kotek)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 1:34pm UTC](https://discuss.elastic.co/t/spring-data-and-elasticsearch-6-release-confusion/139789 "2018-08-21T13:34:07Z")

</div>

Hi all! My first post here so hopefully i'll be right on spot. I'm new to ES and trying to integrate with a Spring Data for a production app, as I prefer using Spring Data vs. ES Java API client (java high level rest)…

---

## [What is the mapping for array of arrays](https://discuss.elastic.co/t/what-is-the-mapping-for-array-of-arrays/64039)

<div class="topic-metadata">

**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\
**Replies:** 2\
**Last updated:** [October 27, 2016, 3:36am UTC](https://discuss.elastic.co/t/what-is-the-mapping-for-array-of-arrays/64039 "2016-10-27T03:36:11Z")

</div>

I am planning to store data for a field in this way: "pair\_age": \[ \[12, 19\], \[17,20\], \[34,35\] \] So in mapping how to set it: "pair\_age": { "type": "????" } What should I set the value of ???? above?

---

## [McAfee EPO logs to Logstash, XML parsing failure, XML: missing tag start, XML fails to generate datastructure](https://discuss.elastic.co/t/mcafee-epo-logs-to-logstash-xml-parsing-failure-xml-missing-tag-start-xml-fails-to-generate-datastructure/217827)

<div class="topic-metadata">

**Author:** [@Purk](https://discuss.elastic.co/u/Purk)\
**Replies:** 7\
**Last updated:** [February 13, 2020, 6:55am UTC](https://discuss.elastic.co/t/mcafee-epo-logs-to-logstash-xml-parsing-failure-xml-missing-tag-start-xml-fails-to-generate-datastructure/217827 "2020-02-13T06:55:26Z")

</div>

Hi I am looking for a help on how to parse the McAfee ePO XML logs into the logstash. I tried to use a XML filter plugin, but it fails to create an actual datastructure of the XML file. I have seen a similar topic in …

---

## [Failed to execute pipeline for a bulk request](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/136783)

<div class="topic-metadata">

**Author:** [@anuragh](https://discuss.elastic.co/u/anuragh)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 5:42am UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/136783 "2018-06-21T05:42:05Z")

</div>

\[2018-06-21T00:00:09,645\]\[ERROR\]\[o.e.a.b.TransportBulkAction\] \[ddlplels105\] failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.…

---

## [Kibana Infrastructure UI shows no metrics for hosts or kubernetes pods](https://discuss.elastic.co/t/kibana-infrastructure-ui-shows-no-metrics-for-hosts-or-kubernetes-pods/184216)

<div class="topic-metadata">

**Author:** [@zx10r](https://discuss.elastic.co/u/zx10r)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 4:27am UTC](https://discuss.elastic.co/t/kibana-infrastructure-ui-shows-no-metrics-for-hosts-or-kubernetes-pods/184216 "2019-06-10T04:27:08Z")

</div>

This happens when selecting something from the main Infrastructure UI when drilling into a pod or host and trying to go to metrics it loads empty while all data data is there in indexes. The error that i see logged is be…

---

## [Logstash authentication with TCP](https://discuss.elastic.co/t/logstash-authentication-with-tcp/110558)

<div class="topic-metadata">

**Author:** [@NenadP](https://discuss.elastic.co/u/NenadP)\
**Replies:** 5\
**Last updated:** [December 7, 2017, 8:31pm UTC](https://discuss.elastic.co/t/logstash-authentication-with-tcp/110558 "2017-12-07T20:31:38Z")

</div>

I am delivering logs from Pivotal web service (based on Cloud Foundry) to remote ELK. On Pivotal I've created log drain service which delivers logs to logstash via syslog TCP connection. Everything works fine but appare…

---

## [Trying to add a field with the ip address of the host](https://discuss.elastic.co/t/trying-to-add-a-field-with-the-ip-address-of-the-host/50061)

<div class="topic-metadata">

**Author:** [@Harley\_Burton](https://discuss.elastic.co/u/Harley_Burton)\
**Replies:** 2\
**Last updated:** [May 16, 2016, 4:22pm UTC](https://discuss.elastic.co/t/trying-to-add-a-field-with-the-ip-address-of-the-host/50061 "2016-05-16T16:22:21Z")

</div>

I'm sure this is in the docs, and/or here somewhere, but the closest I have been able to find was a thread here from Oct. 2015 with a link to a doc with info that doesn't work on the current version. I want to add a fi…

---

## [Field \[winlog.event\_data.ProcessCreationTime\] of type \[keyword\] does not support custom formats](https://discuss.elastic.co/t/field-winlog-event-data-processcreationtime-of-type-keyword-does-not-support-custom-formats/235489)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 4\
**Last updated:** [June 4, 2020, 12:44pm UTC](https://discuss.elastic.co/t/field-winlog-event-data-processcreationtime-of-type-keyword-does-not-support-custom-formats/235489 "2020-06-04T12:44:11Z")

</div>

Hi, I have winlogbeat sending data via logstash to elasticsearch from a Windows 10 box. In Kibana I get Type illegal\_argument\_exception Reason Field \[winlog.event\_data.ProcessCreationTime\] of type \[keyword\] does not…

---

## [Case-sensitive search](https://discuss.elastic.co/t/case-sensitive-search/53355)

<div class="topic-metadata">

**Author:** [@currymj](https://discuss.elastic.co/u/currymj)\
**Replies:** 4\
**Last updated:** [June 22, 2016, 2:33am UTC](https://discuss.elastic.co/t/case-sensitive-search/53355 "2016-06-22T02:33:11Z")

</div>

I'm trying to build an index for case-sensitive search. The index settings I'm using are at the bottom (including defining a custom "caseSensitive" analyzer). If I perform a query like GET /emails\_text/\_search { "…

---

## [Nested data not shown correctly with painless script](https://discuss.elastic.co/t/nested-data-not-shown-correctly-with-painless-script/157012)

<div class="topic-metadata">

**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\
**Replies:** 5\
**Last updated:** [December 21, 2018, 6:22am UTC](https://discuss.elastic.co/t/nested-data-not-shown-correctly-with-painless-script/157012 "2018-12-21T06:22:14Z")

</div>

Hi all, I may find issue with the combination of "nested data" and "painless script". In case "painless script" is NOT used, documents are shown correctly. In case "painless script" is used, they are shown wrongly. Of…

---

## [Can't delete an index with "elastic" user](https://discuss.elastic.co/t/cant-delete-an-index-with-elastic-user/166513)

<div class="topic-metadata">

**Author:** [@osykora](https://discuss.elastic.co/u/osykora)\
**Replies:** 7\
**Last updated:** [January 31, 2019, 2:13pm UTC](https://discuss.elastic.co/t/cant-delete-an-index-with-elastic-user/166513 "2019-01-31T14:13:25Z")

</div>

Hi, I have a new cluster in ECE and I migrated data there from an old cluster using a snapshot. However, restoring the snapshot went wrong and I had to do it again, therefore I wanted to delete all restored indices in t…

---

## [Hidden field](https://discuss.elastic.co/t/hidden-field/72770)

<div class="topic-metadata">

**Author:** [@dev\_kibana](https://discuss.elastic.co/u/dev_kibana)\
**Replies:** 1\
**Last updated:** [January 25, 2017, 8:04pm UTC](https://discuss.elastic.co/t/hidden-field/72770 "2017-01-25T20:04:54Z")

</div>

Hi. I have a problem. In my plugin i need to hidden the field. I don't know how i can do it. I think is possible setting something in the base file, where you put the schemas with buckets. Do you know how i can do it…

---

## [Error: Unsupported state or unable to authenticate data](https://discuss.elastic.co/t/error-unsupported-state-or-unable-to-authenticate-data/60500)

<div class="topic-metadata">

**Author:** [@theo.bot](https://discuss.elastic.co/u/theo.bot)\
**Replies:** 4\
**Last updated:** [January 18, 2017, 7:22am UTC](https://discuss.elastic.co/t/error-unsupported-state-or-unable-to-authenticate-data/60500 "2017-01-18T07:22:20Z")

</div>

Hi When I create new reports I (sometimes) get the message "Error: Unsupported state or unable to authenticate data" on top of my display. Any suggestion would be welcome Kind regards Theo

---

## [Access doc\_count in scripted\_metric section](https://discuss.elastic.co/t/access-doc-count-in-scripted-metric-section/56371)

<div class="topic-metadata">

**Author:** [@Shashi-GS](https://discuss.elastic.co/u/Shashi-GS)\
**Replies:** 4\
**Last updated:** [July 27, 2016, 9:23am UTC](https://discuss.elastic.co/t/access-doc-count-in-scripted-metric-section/56371 "2016-07-27T09:23:46Z")

</div>

Could you please help me on accessing the doc\_count or the value\_count aggregation result in the scripted metric section? here is the example I am trying to access. { "size": 0, "\_source": false, "aggs":…

---

## [How to use the RestHighLevelClient for the cloud?](https://discuss.elastic.co/t/how-to-use-the-resthighlevelclient-for-the-cloud/173027)

<div class="topic-metadata">

**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\
**Replies:** 7\
**Last updated:** [March 25, 2019, 8:18pm UTC](https://discuss.elastic.co/t/how-to-use-the-resthighlevelclient-for-the-cloud/173027 "2019-03-25T20:18:32Z")

</div>

I use the Java RestHighLevelClient, and it works fine with localhost elastic search (in which I pass "localhost" and 9200, "http") like the example in here https://www.elastic.co/guide/en/elasticsearch/client/java-rest/…

---

## [Elasticsearch-py index and get errors](https://discuss.elastic.co/t/elasticsearch-py-index-and-get-errors/34124)

<div class="topic-metadata">

**Author:** [@pstarrett1](https://discuss.elastic.co/u/pstarrett1)\
**Replies:** 2\
**Last updated:** [November 12, 2015, 10:38pm UTC](https://discuss.elastic.co/t/elasticsearch-py-index-and-get-errors/34124 "2015-11-12T22:38:45Z")

</div>

Below code creates traceback that follows. I am trying to get json file into and out of ES and have checked documentation but cannot seem to resolve. Appreciate any help! Code: d = {} def text\_to\_json(data): for …

---

## [Encrypting the certificate key for SSL](https://discuss.elastic.co/t/encrypting-the-certificate-key-for-ssl/100205)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 3\
**Last updated:** [September 21, 2017, 7:25am UTC](https://discuss.elastic.co/t/encrypting-the-certificate-key-for-ssl/100205 "2017-09-21T07:25:32Z")

</div>

Hi, I've enabled SSL between Filebeat and Logstash. I have the following configuration in my logstash.conf input { beats { host =\> "10.129.179.39" port =\> 5044 ssl =\> true ssl\_cer…

---

## [ElasticSearch - fscrawler missing documents in Index](https://discuss.elastic.co/t/elasticsearch-fscrawler-missing-documents-in-index/100449)

<div class="topic-metadata">

**Author:** [@Suresh\_Nataraj](https://discuss.elastic.co/u/Suresh_Nataraj)\
**Replies:** 7\
**Last updated:** [October 2, 2017, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-fscrawler-missing-documents-in-index/100449 "2017-10-02T21:29:25Z")

</div>

Hi All, I am using fscrawler for indexing a file system into ES . After the sucessful run of crawler the status shows below : { "name" : "test\_crawler\_1", "lastrun" : "2017-09-14T00:24:03.808", "indexed" : 13256…

---

## [Does filebeat can ship its own logs to elasticsearch](https://discuss.elastic.co/t/does-filebeat-can-ship-its-own-logs-to-elasticsearch/56495)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 7\
**Last updated:** [August 8, 2016, 8:35am UTC](https://discuss.elastic.co/t/does-filebeat-can-ship-its-own-logs-to-elasticsearch/56495 "2016-08-08T08:35:47Z")

</div>

Hi, I am shipping some log files using filebeat to elasticsearch through logstash. And in this chain there is possibility of any component going down. So inorder to monitor filebeat I want to ship filebeat.log also along…

---

## [Very large delete\_by\_query - supported?](https://discuss.elastic.co/t/very-large-delete-by-query-supported/247891)

<div class="topic-metadata">

**Author:** [@aidofitz](https://discuss.elastic.co/u/aidofitz)\
**Replies:** 5\
**Last updated:** [September 10, 2020, 8:42am UTC](https://discuss.elastic.co/t/very-large-delete-by-query-supported/247891 "2020-09-10T08:42:25Z")

</div>

Hi, I'm trying to run a very large \_delete\_by\_query, targeting ~1.5 billion documents in an index, amounting to 100's of GB of data. This is from a single index and in the context of a overall ES cluster side of ~80Tb. …

---

## [Kibana Reporting -csv download fails frequently with error 'Unable to generate report Max attempts reached (3)'](https://discuss.elastic.co/t/kibana-reporting-csv-download-fails-frequently-with-error-unable-to-generate-report-max-attempts-reached-3/278405)

<div class="topic-metadata">

**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 7:36am UTC](https://discuss.elastic.co/t/kibana-reporting-csv-download-fails-frequently-with-error-unable-to-generate-report-max-attempts-reached-3/278405 "2021-07-14T07:36:03Z")

</div>

Hello, I have tried to generate csv files using saved search on Kibana dashboard. This is downloading proper file for few cases and failing in some cases. This failure does not looks due to the size issue. I could see …

---

## [Amazon\_s3\_exception: Access Denied Service: Amazon S3; Status Code: 403;](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 5\
**Last updated:** [December 18, 2020, 8:11pm UTC](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267 "2020-12-18T20:11:30Z")

</div>

I have a 3 node ec2 dev cluster. I'm trying to setup a snapshot repository for elasticsearch to s3 but I'm getting the following error. AWS command line works for me but setting up through elasticsearch is not. any ide…

---

## [Elasticsearch data dictionary](https://discuss.elastic.co/t/elasticsearch-data-dictionary/85440)

<div class="topic-metadata">

**Author:** [@eirc](https://discuss.elastic.co/u/eirc)\
**Replies:** 5\
**Last updated:** [May 14, 2017, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-data-dictionary/85440 "2017-05-14T20:08:42Z")

</div>

After loading lots of data and lots of fields on the Elastic Stack it starts becoming very difficult for users (especially non-IT) to keep track of what each field actually represents. Essentially what's needed is a Data…

---

## [Dec 11th, 2017: \[PT-BR\]\[Elasticsearch\] É preciso indexar um documento pai antes do filho?](https://discuss.elastic.co/t/dec-11th-2017-pt-br-elasticsearch-e-preciso-indexar-um-documento-pai-antes-do-filho/109287)

<div class="topic-metadata">

**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-11th-2017-pt-br-elasticsearch-e-preciso-indexar-um-documento-pai-antes-do-filho/109287 "2017-12-11T00:00:23Z")

</div>

Em um mapeamento Parent/Child, não é necessário que o documento pai tenha sido indexado primeiro para indexar o documento filho. Sendo assim é possível indexar o documento filho primeiro, antes do pai ser indexado. O úni…

---

## [Aggregation running very slow](https://discuss.elastic.co/t/aggregation-running-very-slow/28192)

<div class="topic-metadata">

**Author:** [@Philip\_K\_Adetiloye](https://discuss.elastic.co/u/Philip_K_Adetiloye)\
**Replies:** 7\
**Last updated:** [September 4, 2015, 9:40am UTC](https://discuss.elastic.co/t/aggregation-running-very-slow/28192 "2015-09-04T09:40:38Z")

</div>

I'm using sparkSQL to query ES but aggregation (GROUP BY) is running very slow. I can't remember but seems I read that aggregation queries are also push down to ES. If that's the case, why is aggregation running so slow …

---

## [Deleting documents vs deleting the whole index and rebuilding it periodically](https://discuss.elastic.co/t/deleting-documents-vs-deleting-the-whole-index-and-rebuilding-it-periodically/127018)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 5\
**Last updated:** [April 6, 2018, 7:43am UTC](https://discuss.elastic.co/t/deleting-documents-vs-deleting-the-whole-index-and-rebuilding-it-periodically/127018 "2018-04-06T07:43:11Z")

</div>

I am creating an online shopping website. Users can create advertisements on the website to sell their products... these advertisements get expired or sold after some time... I am keeping all advertisement in MySQL and …

---

## [Can't access UI (ES/Kibana at aws in VPC)](https://discuss.elastic.co/t/cant-access-ui-es-kibana-at-aws-in-vpc/130300)

<div class="topic-metadata">

**Author:** [@rancor](https://discuss.elastic.co/u/rancor)\
**Replies:** 3\
**Last updated:** [May 2, 2018, 5:44pm UTC](https://discuss.elastic.co/t/cant-access-ui-es-kibana-at-aws-in-vpc/130300 "2018-05-02T17:44:03Z")

</div>

Hi! I'm starting with the stack at a linux 2 AWS instance (rhel based) The instance it's in a VPC, public subnet, EIP, IG and NATGW (using sensu stack on the same host and works perfect): -ES installed: # Set the bind …

---

## [How to diagnose slow queries every 10 minutes exactly?](https://discuss.elastic.co/t/how-to-diagnose-slow-queries-every-10-minutes-exactly/23336)

<div class="topic-metadata">

**Author:** [@Dave\_Reed](https://discuss.elastic.co/u/Dave_Reed)\
**Replies:** 8\
**Last updated:** [February 25, 2016, 6:47am UTC](https://discuss.elastic.co/t/how-to-diagnose-slow-queries-every-10-minutes-exactly/23336 "2016-02-25T06:47:05Z")

</div>

I have a 2-node cluster running on some beefy machines. 12g and 16g of heap space. About 2.1 million documents, each relatively small in size, spread across 200 or so indexes. The refresh interval is 0.5s (while I do…

---

## [Couldn't connect to Elasticsearch](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch/132196)

<div class="topic-metadata">

**Author:** [@vnkasturi](https://discuss.elastic.co/u/vnkasturi)\
**Replies:** 4\
**Last updated:** [May 18, 2018, 3:35am UTC](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch/132196 "2018-05-18T03:35:14Z")

</div>

I am trying to connect to the configured Elasticsearchservice instance in AWS from my machine and getting the following error. Any help is appreciated. ven@ven:~$ sudo metricbeat setup Exiting: Couldn't connect to any …

---

## [Can't start Elasticsearch on Ubuntu 19.10](https://discuss.elastic.co/t/cant-start-elasticsearch-on-ubuntu-19-10/204353)

<div class="topic-metadata">

**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\
**Replies:** 5\
**Last updated:** [October 22, 2019, 6:35pm UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-on-ubuntu-19-10/204353 "2019-10-22T18:35:42Z")

</div>

I am trying to run Elasticsearch on Ubuntu 19.10, which was released just three days ago. I downloaded the Elasticsearch 7.4.0 .tar.gz file from https://www.elastic.co/downloads/elasticsearch I extracted the .tar.gz I…

---

## [Template priority explanation](https://discuss.elastic.co/t/template-priority-explanation/311443)

<div class="topic-metadata">

**Author:** [@pestevao](https://discuss.elastic.co/u/pestevao)\
**Replies:** 3\
**Last updated:** [September 1, 2022, 11:11am UTC](https://discuss.elastic.co/t/template-priority-explanation/311443 "2022-09-01T11:11:10Z")

</div>

Hi all, I'm trying to change the number\_of\_replicas of some indexes, applying a loosely index\_patterns but... I'm struggling with priority. If I make a change on number\_of\_replicas and define a priority 1 on my new tem…

---

## [Beats\_system role](https://discuss.elastic.co/t/beats-system-role/253391)

<div class="topic-metadata">

**Author:** [@gquintana](https://discuss.elastic.co/u/gquintana)\
**Replies:** 6\
**Last updated:** [November 3, 2020, 5:07am UTC](https://discuss.elastic.co/t/beats-system-role/253391 "2020-11-03T05:07:18Z")

</div>

I've set up an Elastic Stack 7.9.2 and enabled basic security. Metricbeat can not use to Elasticsearch user beats\_system because of a lack of permissions. The documentation Built-in users | Elasticsearch Guide \[8.11\] |…

---

## [What is difference between POST and GET in aggregation request?](https://discuss.elastic.co/t/what-is-difference-between-post-and-get-in-aggregation-request/162432)

<div class="topic-metadata">

**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\
**Replies:** 2\
**Last updated:** [December 30, 2018, 3:06am UTC](https://discuss.elastic.co/t/what-is-difference-between-post-and-get-in-aggregation-request/162432 "2018-12-30T03:06:54Z")

</div>

Hi, I am studying aggregation part. Some aggregation examples are using POST request type and others are using GET request type. Both of them show me the same result. Is it ok to use any one of them or there is reason…

---

## [Unknown setting 'port' for elasticsearch {:level=\>:error}](https://discuss.elastic.co/t/unknown-setting-port-for-elasticsearch-level-error/34921)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 2\
**Last updated:** [November 19, 2015, 7:16am UTC](https://discuss.elastic.co/t/unknown-setting-port-for-elasticsearch-level-error/34921 "2015-11-19T07:16:19Z")

</div>

Hi All, I am using Elasticsearch 1.7.2 and try to copy docs from one index to another index by using logstash 1.5.5 When I am doing configtest of the logstash configuration file. bin/logstash agent --configtest …

---

## [Using aggregation Json Input field to filter values](https://discuss.elastic.co/t/using-aggregation-json-input-field-to-filter-values/62259)

<div class="topic-metadata">

**Author:** [@mbagatini](https://discuss.elastic.co/u/mbagatini)\
**Replies:** 2\
**Last updated:** [October 7, 2016, 11:36pm UTC](https://discuss.elastic.co/t/using-aggregation-json-input-field-to-filter-values/62259 "2016-10-07T23:36:58Z")

</div>

I'm trying to create a visualization on Kibana showing the average value of a field on a date histogram. In order to have a "smooth" average, I'd like to have a ceiling of 100 for said value. Using this json { "script…

---

## [How to apply filter using JSON input for area chart](https://discuss.elastic.co/t/how-to-apply-filter-using-json-input-for-area-chart/93253)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 3\
**Last updated:** [July 18, 2017, 3:59pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-using-json-input-for-area-chart/93253 "2017-07-18T15:59:39Z")

</div>

I want filter on status field(status=open) in area chat please suggest an json input code for the same

---

## [Kibana OSS ERROR: missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-oss-error-missing-authentication-credentials-for-rest-request/242836)

<div class="topic-metadata">

**Author:** [@Souji\_T](https://discuss.elastic.co/u/Souji_T)\
**Replies:** 6\
**Last updated:** [July 28, 2020, 7:15am UTC](https://discuss.elastic.co/t/kibana-oss-error-missing-authentication-credentials-for-rest-request/242836 "2020-07-28T07:15:14Z")

</div>

Hello, I have the problem that I can’t use Kibana OSS if my Elasticsearch is protected with basic authentication. I wanted to use the Kibana OSS version and figured out that in version 7.6.2 it was still working but wit…

---

## [Unable to find EMS tile configuration for id: road\_map in Maps for Kibana 7.0.1](https://discuss.elastic.co/t/unable-to-find-ems-tile-configuration-for-id-road-map-in-maps-for-kibana-7-0-1/181430)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 6\
**Last updated:** [May 20, 2019, 3:42pm UTC](https://discuss.elastic.co/t/unable-to-find-ems-tile-configuration-for-id-road-map-in-maps-for-kibana-7-0-1/181430 "2019-05-20T15:42:10Z")

</div>

I have installed Elasticsearch and Kibana 7.0.1 to investigate the capabilities of the Elastic Maps service. However after loading up Kibana and going to the maps section, I am presented with the following error: Unable …

---

## [Painless Sum aggregation with scripted field](https://discuss.elastic.co/t/painless-sum-aggregation-with-scripted-field/119210)

<div class="topic-metadata">

**Author:** [@Wills1](https://discuss.elastic.co/u/Wills1)\
**Replies:** 1\
**Last updated:** [February 9, 2018, 6:42pm UTC](https://discuss.elastic.co/t/painless-sum-aggregation-with-scripted-field/119210 "2018-02-09T18:42:07Z")

</div>

Hi ! I have a question relative to scripted field in Kibana. It is possible to summe all the values of a field in painless with scripted field ? Something like: SUM(doc.\['somefield'\].value) ?

---

## [Elasticsearch keeps timeout-ing in docker](https://discuss.elastic.co/t/elasticsearch-keeps-timeout-ing-in-docker/83968)

<div class="topic-metadata">

**Author:** [@olalonde](https://discuss.elastic.co/u/olalonde)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-timeout-ing-in-docker/83968 "2017-04-28T20:05:26Z")

</div>

For some reason, it looks like my ElasticSearch server starts timeouting as soon as there are 2 concurrent connections or more (and not doing more than ~3 queries per second). Here's the error I keep getting: llib3.…

---

## [Grok filter patterns for syslog](https://discuss.elastic.co/t/grok-filter-patterns-for-syslog/43628)

<div class="topic-metadata">

**Author:** [@Shreejit\_Nair](https://discuss.elastic.co/u/Shreejit_Nair)\
**Replies:** 2\
**Last updated:** [March 7, 2016, 7:12pm UTC](https://discuss.elastic.co/t/grok-filter-patterns-for-syslog/43628 "2016-03-07T19:12:11Z")

</div>

Hi All, I am new to logstash and still learning something new about this cool tool everyday. I found that grok pattens work only with the patter we define Like %{IP:client} %{WORD:method} %{URIPATHPARAM:request} %…

---

## [\[NEST\] How to move documents/aggregations to another index?](https://discuss.elastic.co/t/nest-how-to-move-documents-aggregations-to-another-index/117176)

<div class="topic-metadata">

**Author:** [@SparkyRih](https://discuss.elastic.co/u/SparkyRih)\
**Replies:** 5\
**Last updated:** [January 29, 2018, 8:28am UTC](https://discuss.elastic.co/t/nest-how-to-move-documents-aggregations-to-another-index/117176 "2018-01-29T08:28:53Z")

</div>

I found that it 's possible, but I can't find the solution in the C# library NEST... I want to aggregate documents by a certain hash value, and move them to a different index, how would I do that in NEST?

---

## [Elastic search 7.0 cluster master node handover problem](https://discuss.elastic.co/t/elastic-search-7-0-cluster-master-node-handover-problem/180968)

<div class="topic-metadata">

**Author:** [@8a2de8f67ab9a7e963a8](https://discuss.elastic.co/u/8a2de8f67ab9a7e963a8)\
**Replies:** 6\
**Last updated:** [May 14, 2019, 11:01am UTC](https://discuss.elastic.co/t/elastic-search-7-0-cluster-master-node-handover-problem/180968 "2019-05-14T11:01:54Z")

</div>

\[2019-05-14T17:29:05,931\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node-1-search\] master not discovered or elected yet, an election requires a node with id \[oTcvvEb8R2G73xLl0U3srQ\], have discovered which is not a …

---

## [Hibernate Search now compatible with Elasticsearch versions 2.0 to 5.6](https://discuss.elastic.co/t/hibernate-search-now-compatible-with-elasticsearch-versions-2-0-to-5-6/100677)

<div class="topic-metadata">

**Author:** [@Sanne](https://discuss.elastic.co/u/Sanne)\
**Replies:** 0\
**Last updated:** [September 15, 2017, 12:05pm UTC](https://discuss.elastic.co/t/hibernate-search-now-compatible-with-elasticsearch-versions-2-0-to-5-6/100677 "2017-09-15T12:05:20Z")

</div>

Hello everyone, the Hibernate community released a new version of Hibernate Search: 5.8.0.Final The highlight is that it's now compatible with all versions of Elasticsearch from version 2.0 to 5.6! And of course we al…

---

## [PacketBeat timestamp](https://discuss.elastic.co/t/packetbeat-timestamp/84581)

<div class="topic-metadata">

**Author:** [@gcorgne](https://discuss.elastic.co/u/gcorgne)\
**Replies:** 7\
**Last updated:** [May 9, 2017, 1:35pm UTC](https://discuss.elastic.co/t/packetbeat-timestamp/84581 "2017-05-09T13:35:01Z")

</div>

hi, We oversee a network interface that is close to 2 gigabits per second. All our servers are interfaced at 10 Gbps. Currently, we have only one node elastic search: 4x16 core and 256 Gb of RAM. We do not understand …

---

## [Pushing bulk data to ES in a stream](https://discuss.elastic.co/t/pushing-bulk-data-to-es-in-a-stream/19169)

<div class="topic-metadata">

**Author:** [@abhijit\_singh](https://discuss.elastic.co/u/abhijit_singh)\
**Replies:** 8\
**Last updated:** [August 11, 2014, 6:43pm UTC](https://discuss.elastic.co/t/pushing-bulk-data-to-es-in-a-stream/19169 "2014-08-11T18:43:43Z")

</div>

Hello everyone, I wanted to know if it is possible to index the docs through a stream which pushes data to the Elasticsearch cluster. Our current problem is to index the huge set of data from Postgres to Elast…

---

## [Centralize LOGS Switches](https://discuss.elastic.co/t/centralize-logs-switches/40472)

<div class="topic-metadata">

**Author:** [@wagnerl](https://discuss.elastic.co/u/wagnerl)\
**Replies:** 3\
**Last updated:** [January 29, 2016, 1:03pm UTC](https://discuss.elastic.co/t/centralize-logs-switches/40472 "2016-01-29T13:03:30Z")

</div>

Hello! I am learning to use the logstash, ElasticSearch and Kibana. I plan to centralize logs from multiple switches. Could anyone help me in setup?

---

## [Export to CSV with all fields - Logstash 7.0.1](https://discuss.elastic.co/t/export-to-csv-with-all-fields-logstash-7-0-1/187420)

<div class="topic-metadata">

**Author:** [@etsai7](https://discuss.elastic.co/u/etsai7)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 7:25pm UTC](https://discuss.elastic.co/t/export-to-csv-with-all-fields-logstash-7-0-1/187420 "2019-06-26T19:25:03Z")

</div>

Hello, Is there a way to configure the output to csv file to include all fields in the index by default so that each one does not have to be manually typed out? Thanks, Eric

---

## [Elasticsearch Authentication Exception](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001)

<div class="topic-metadata">

**Author:** [@darox](https://discuss.elastic.co/u/darox)\
**Replies:** 4\
**Last updated:** [April 23, 2018, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001 "2018-04-23T11:07:51Z")

</div>

My elasticsearch docker cluster is green, check from within the Kibana container with the kibana user: 1524397495 11:44:55 docker-cluster green 1 1 12 12 0 0 0 0 - 100.0% However, Kibana fails to connect to elasticsear…

---

## [How to retrieve a field value from inner\_hits filtered object](https://discuss.elastic.co/t/how-to-retrieve-a-field-value-from-inner-hits-filtered-object/63813)

<div class="topic-metadata">

**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\
**Replies:** 3\
**Last updated:** [June 15, 2018, 5:10pm UTC](https://discuss.elastic.co/t/how-to-retrieve-a-field-value-from-inner-hits-filtered-object/63813 "2018-06-15T17:10:17Z")

</div>

In my mapping document, I have one of the nested object as follows "availabilities":{ "type": "nested", "dynamic": "strict", "properties": { …

[Previous page](https://discuss.elastic.co/top.md?page=479&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=481&per_page=50&period=all)
