# Top **URL:** https://discuss.elastic.co/top.md?page=494&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 495 --- ## [Balancing shards equally per nodes](https://discuss.elastic.co/t/balancing-shards-equally-per-nodes/47297)
**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\ **Replies:** 2\ **Last updated:** [April 14, 2016, 8:57am UTC](https://discuss.elastic.co/t/balancing-shards-equally-per-nodes/47297 "2016-04-14T08:57:00Z")
Hy, I have a ES cluster running 1.6.0, consisting of 10 nodes. 2 of them are new nodes in this cluster, with small number of shards( hundreds). The other 8 nodes have thousands of shards. The problem is that whe… --- ## [Handle 150.000 logs per sec](https://discuss.elastic.co/t/handle-150-000-logs-per-sec/78932)
**Author:** [@AndreAga](https://discuss.elastic.co/u/AndreAga)\ **Replies:** 3\ **Last updated:** [March 17, 2017, 2:26pm UTC](https://discuss.elastic.co/t/handle-150-000-logs-per-sec/78932 "2017-03-17T14:26:18Z")
Hi all, I'm here to ask for help about the sizing of a Elasticsearch cluster. I have to index about 5TB of logs a day (from 7am to about 7pm) with 7 days of retention. There are about 150.000 events per second divided in… --- ## [Logstash fails to open file: Permission denied](https://discuss.elastic.co/t/logstash-fails-to-open-file-permission-denied/98170)
**Author:** [@Hisushi](https://discuss.elastic.co/u/Hisushi)\ **Replies:** 5\ **Last updated:** [August 25, 2017, 7:44am UTC](https://discuss.elastic.co/t/logstash-fails-to-open-file-permission-denied/98170 "2017-08-25T07:44:46Z")
Hi everybody, I’m currently encountering the error that Logstash is not able to open several files due to a “Permission denied” error \[2017-08-24T08:25:43,619\]\[WARN \]\[logstash.inputs.file \] failed to open /media/Lo… --- ## [I can not install elasticsearch](https://discuss.elastic.co/t/i-can-not-install-elasticsearch/80368)
**Author:** [@Gilberto](https://discuss.elastic.co/u/Gilberto)\ **Replies:** 5\ **Last updated:** [April 4, 2017, 9:43am UTC](https://discuss.elastic.co/t/i-can-not-install-elasticsearch/80368 "2017-04-04T09:43:42Z")
May I install elasticsearch 5.2.2 on Windows 10? --- ## [Elasticsearch Java Security Manager: somaxconn read permissions](https://discuss.elastic.co/t/elasticsearch-java-security-manager-somaxconn-read-permissions/110511)
**Author:** [@ize0j10](https://discuss.elastic.co/u/ize0j10)\ **Replies:** 7\ **Last updated:** [December 7, 2017, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-java-security-manager-somaxconn-read-permissions/110511 "2017-12-07T14:05:14Z")
Hi, I am experiencing a Java Security Manager issue when running Elasticsearch with the official docker image in Version 5.6.4 setting log level to DEBUG. Elasticsearch throws an exception during start: Dec 06 09:14… --- ## [License problem - Not available for trying with Basic license](https://discuss.elastic.co/t/license-problem-not-available-for-trying-with-basic-license/59844)
**Author:** [@Alberto\_Yoldi](https://discuss.elastic.co/u/Alberto_Yoldi)\ **Replies:** 6\ **Last updated:** [September 7, 2016, 6:26am UTC](https://discuss.elastic.co/t/license-problem-not-available-for-trying-with-basic-license/59844 "2016-09-07T06:26:37Z")
I would like to try the new reporting features. The installation was succesfull after upgrading ES to the right version, but when I want to generate the PDF, the system anwers clearly that the license is not valid. I jus… --- ## [Performance impact of installing APM (Java and .NET)](https://discuss.elastic.co/t/performance-impact-of-installing-apm-java-and-net/201094)
**Author:** [@mikesparr](https://discuss.elastic.co/u/mikesparr)\ **Replies:** 4\ **Last updated:** [October 3, 2019, 2:24pm UTC](https://discuss.elastic.co/t/performance-impact-of-installing-apm-java-and-net/201094 "2019-10-03T14:24:46Z")
Elastic Cloud on latest 7.3.x release and working with Ops to get APM agents installed in production. We have some questions we want to cover before flipping the switch regarding resource usage and performance impact of … --- ## [Logstash Log Stream](https://discuss.elastic.co/t/logstash-log-stream/299262)
**Author:** [@laolao](https://discuss.elastic.co/u/laolao)\ **Replies:** 3\ **Last updated:** [March 10, 2022, 3:55pm UTC](https://discuss.elastic.co/t/logstash-log-stream/299262 "2022-03-10T15:55:34Z")
I have a basic configuration of logstash sending syslogs to Elasticsearch. I created my index pattern and can make visualizations, etc. However, I want to view the logs in real time on my dashboard. My dashboard has 4 d… --- ## [Elasticsearch slow performance](https://discuss.elastic.co/t/elasticsearch-slow-performance/27099)
**Author:** [@ksvagarwal](https://discuss.elastic.co/u/ksvagarwal)\ **Replies:** 7\ **Last updated:** [August 11, 2015, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-slow-performance/27099 "2015-08-11T16:06:00Z")
When I started parsing my logs with ELK stack, the speed was good but sometimes, I was able to parse 50000 logs in a minute and sometimes, it was as low as 4000 in a minute. I parsed about 2.5 million data in two and a h… --- ## [Disk space /var](https://discuss.elastic.co/t/disk-space-var/148369)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 4:04pm UTC](https://discuss.elastic.co/t/disk-space-var/148369 "2018-09-14T16:04:43Z")
Hi, The var folder is full ELK server. fully indices and please tell a method to remove it /dev/sda1 950M 181M 770M 19% /boot /dev/mapper/rhel\_-var 187G 174G 13G 94% /var tmpfs … --- ## [Unable to connect to postgres module from metricbeat](https://discuss.elastic.co/t/unable-to-connect-to-postgres-module-from-metricbeat/97203)
**Author:** [@Dinesh\_Senthil\_Kumar](https://discuss.elastic.co/u/Dinesh_Senthil_Kumar)\ **Replies:** 6\ **Last updated:** [August 17, 2017, 1:48pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-postgres-module-from-metricbeat/97203 "2017-08-17T13:48:21Z")
hi ALL, i ma getting the bewlo error while connecting to postgres module from metric beat. need your help or pointers to resolve the same. currently i am using metric beat 5.4.x and postgres 9.5.05. 2017/08/16 08:02:… --- ## [Failed to authenticate user \[elastic\] after changing environment](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-after-changing-environment/303319)
**Author:** [@Jasper\_Tan](https://discuss.elastic.co/u/Jasper_Tan)\ **Replies:** 5\ **Last updated:** [April 28, 2022, 2:26am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-after-changing-environment/303319 "2022-04-28T02:26:58Z")
I am aware that there are multiple post on this issue already but my situation is kinda unique. Back story: I have provisioned a VM on an offline server with Elasticsearch, Logstash and Kibana running fine on it for the… --- ## [How to move ES data to another machine?](https://discuss.elastic.co/t/how-to-move-es-data-to-another-machine/81030)
**Author:** [@dolanmk](https://discuss.elastic.co/u/dolanmk)\ **Replies:** 4\ **Last updated:** [April 5, 2017, 12:30pm UTC](https://discuss.elastic.co/t/how-to-move-es-data-to-another-machine/81030 "2017-04-05T12:30:21Z")
Hi, I am upgrading to a more efficient machine to run my ES on but I do not want to lose the data I have already stashed in my ES. Here is what I have tried so far: 1.) Node Exporter In a command shell: node exporter… --- ## [Tutorial suricata with Kibana 4](https://discuss.elastic.co/t/tutorial-suricata-with-kibana-4/1601)
**Author:** [@Mister74](https://discuss.elastic.co/u/Mister74)\ **Replies:** 5\ **Last updated:** [June 2, 2015, 11:04am UTC](https://discuss.elastic.co/t/tutorial-suricata-with-kibana-4/1601 "2015-06-02T11:04:36Z")
Hello You are there a tutorial on installing Kibana 4 with suricata? thank you Mz --- ## [Multiple Elasticsearch with single Kibana, it possible?](https://discuss.elastic.co/t/multiple-elasticsearch-with-single-kibana-it-possible/173937)
**Author:** [@haux](https://discuss.elastic.co/u/haux)\ **Replies:** 3\ **Last updated:** [April 11, 2019, 3:16am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-with-single-kibana-it-possible/173937 "2019-04-11T03:16:36Z")
I want to deploy ELK to gather our web application logs. The constraint is that we can't centralize the data for legal requirements. That means I need to keep the logs separated in Europe, USA and Asia. Is there a way … --- ## [Elastic stores string in numeric (long) field](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102)
**Author:** [@Yaniv\_Bogdanov](https://discuss.elastic.co/u/Yaniv_Bogdanov)\ **Replies:** 6\ **Last updated:** [February 16, 2021, 7:31pm UTC](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102 "2021-02-16T19:31:02Z")
Hello, I noticed that elastic allows to store a string value in a numeric field that was mapped as long (as the string can be parsed as a number). I'm not sure if this is a bug or a feature (and if it has a setting to … --- ## [Failed to parse date field, date\_time\_parse\_exception](https://discuss.elastic.co/t/failed-to-parse-date-field-date-time-parse-exception/261492)
**Author:** [@yulaika](https://discuss.elastic.co/u/yulaika)\ **Replies:** 6\ **Last updated:** [January 20, 2021, 1:02am UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-date-time-parse-exception/261492 "2021-01-20T01:02:59Z")
Here is my configuration: "\[log\]\[timestamp\]" =\> "%{\[yearinlog\]}-%{\[monthinlog\]}-%{\[dateinlog\]} %{\[hourinlog\]}:%{\[minuteinlog\]}:%{\[secondinlog\]}" } } date { match =\> \[ "\[log\]\[timestamp\]", "yyyy-MM-dd HH:mm:ss.SSS00… --- ## [Logstash: unrecognized service](https://discuss.elastic.co/t/logstash-unrecognized-service/83144)
**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\ **Replies:** 4\ **Last updated:** [April 24, 2017, 3:45pm UTC](https://discuss.elastic.co/t/logstash-unrecognized-service/83144 "2017-04-24T15:45:54Z")
CentOS 6.9 use elastic repo install logstash,but logstash daemon service can't not found .when execte sudo service logstash start ,error logstash: unrecognized service --- ## [Failed to execute fetch phase when trying to get a large data set](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-when-trying-to-get-a-large-data-set/211962)
**Author:** [@RazmikGevorgyan](https://discuss.elastic.co/u/RazmikGevorgyan)\ **Replies:** 0\ **Last updated:** [December 16, 2019, 8:57am UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-when-trying-to-get-a-large-data-set/211962 "2019-12-16T08:57:51Z")
hi can anyone help me I have 3 node cluster and I get this error when trying to get a large data set of more than 250,000 documents with search\_after requests, the batch size is 10,000 documents i'm using nest .net cli… --- ## [Elastic ec2 plugin : access denied to aws](https://discuss.elastic.co/t/elastic-ec2-plugin-access-denied-to-aws/123890)
**Author:** [@harkamals](https://discuss.elastic.co/u/harkamals)\ **Replies:** 7\ **Last updated:** [March 16, 2018, 6:26am UTC](https://discuss.elastic.co/t/elastic-ec2-plugin-access-denied-to-aws/123890 "2018-03-16T06:26:27Z")
Hi, I'm trying not to use access key and secret for aws api access and instead use ec2 instance profile to grant role based access. I could not find text suggesting this is acceptable or not for elastic ec2 plugin to pe… --- ## [Filtering events by message contents / Custom Processor](https://discuss.elastic.co/t/filtering-events-by-message-contents-custom-processor/64795)
**Author:** [@jojo.pornebo](https://discuss.elastic.co/u/jojo.pornebo)\ **Replies:** 7\ **Last updated:** [November 7, 2016, 7:22pm UTC](https://discuss.elastic.co/t/filtering-events-by-message-contents-custom-processor/64795 "2016-11-07T19:22:53Z")
I'd like to ask for help on writing a processor configuration to do the following: filter on keyword from the event log message (example the application event log message has the word(s)/phrase - "forcibly closed")inc… --- ## [Action unauthorized for user](https://discuss.elastic.co/t/action-unauthorized-for-user/255065)
**Author:** [@Samir\_Said](https://discuss.elastic.co/u/Samir_Said)\ **Replies:** 2\ **Last updated:** [November 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/action-unauthorized-for-user/255065 "2020-11-11T13:50:41Z")
I have created a user using: Stack Management / Users and added roles: kibana\_admin, kibana\_system however, the user got error when tried to run queury: { "error" : { "root\_cause" : \[ { "type" : "… --- ## [Difference between analyzer and normalizer](https://discuss.elastic.co/t/difference-between-analyzer-and-normalizer/205897)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 1\ **Last updated:** [October 30, 2019, 11:55pm UTC](https://discuss.elastic.co/t/difference-between-analyzer-and-normalizer/205897 "2019-10-30T23:55:39Z")
Hello, what is the difference between analyzer and normalizer? Thanks Daniele --- ## [Gauge with dynamic maximum value](https://discuss.elastic.co/t/gauge-with-dynamic-maximum-value/130634)
**Author:** [@MichaelDz](https://discuss.elastic.co/u/MichaelDz)\ **Replies:** 2\ **Last updated:** [May 7, 2018, 7:37am UTC](https://discuss.elastic.co/t/gauge-with-dynamic-maximum-value/130634 "2018-05-07T07:37:20Z")
I have a data coming from logstash that shows how much space is used on a table in a database and maximum allocated capacity for a table. I want to create in Kibana gauges for every table that show how much space is curr… --- ## [Try the Elastic Stack 5.0.0-alpha5, and join the Elastic Pioneer Program](https://discuss.elastic.co/t/try-the-elastic-stack-5-0-0-alpha5-and-join-the-elastic-pioneer-program/47293)
**Author:** [@michelle](https://discuss.elastic.co/u/michelle)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 4:33pm UTC](https://discuss.elastic.co/t/try-the-elastic-stack-5-0-0-alpha5-and-join-the-elastic-pioneer-program/47293 "2016-08-31T16:33:55Z")
Try the Elastic Stack 5.0.0-alpha5, and join the Elastic Pioneer Program The 5.0.0-alpha5 release candidates of Elasticsearch, Logstash, Beats, Kibana, and X-Pack are now available to download and test! Learn about the… --- ## [Plugin \[repository-hdfs\] is incompatible with Elasticsearch \[2.1.1\]. Was designed for version \[2.2.0-SNAPSHOT\]](https://discuss.elastic.co/t/plugin-repository-hdfs-is-incompatible-with-elasticsearch-2-1-1-was-designed-for-version-2-2-0-snapshot/39846)
**Author:** [@tdk93](https://discuss.elastic.co/u/tdk93)\ **Replies:** 7\ **Last updated:** [January 24, 2016, 7:31pm UTC](https://discuss.elastic.co/t/plugin-repository-hdfs-is-incompatible-with-elasticsearch-2-1-1-was-designed-for-version-2-2-0-snapshot/39846 "2016-01-24T19:31:26Z")
I'm trying to integrate HDFS with Elastic Search to use it as the repository for snapshots. You can find the documentation here. Hadoop is already installed and running on my system so I'm using the light version. I'm i… --- ## [\[illegal\_argument\_exception\] unknown type for collapse field \`cluster\_uuid\`, only keywords and numbers are accepted: Check the Elasticsearch Monitoring cluster network connection or the load level of the nodes](https://discuss.elastic.co/t/illegal-argument-exception-unknown-type-for-collapse-field-cluster-uuid-only-keywords-and-numbers-are-accepted-check-the-elasticsearch-monitoring-cluster-network-connection-or-the-load-level-of-the-nodes/224575)
**Author:** [@gururjrk](https://discuss.elastic.co/u/gururjrk)\ **Replies:** 5\ **Last updated:** [March 24, 2020, 5:46am UTC](https://discuss.elastic.co/t/illegal-argument-exception-unknown-type-for-collapse-field-cluster-uuid-only-keywords-and-numbers-are-accepted-check-the-elasticsearch-monitoring-cluster-network-connection-or-the-load-level-of-the-nodes/224575 "2020-03-24T05:46:29Z")
In Kibana when I click on Monitoring getting error \[illegal\_argument\_exception\] unknown type for collapse field cluster\_uuid, only keywords and numbers are accepted: Check the Elasticsearch Monitoring cluster network c… --- ## [Fastest way to delete a lot of individual documents](https://discuss.elastic.co/t/fastest-way-to-delete-a-lot-of-individual-documents/101201)
**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\ **Replies:** 5\ **Last updated:** [September 20, 2017, 8:30pm UTC](https://discuss.elastic.co/t/fastest-way-to-delete-a-lot-of-individual-documents/101201 "2017-09-20T20:30:19Z")
I've got a index with billions of documents. Once in a while I push an update. The update contains new documents and documents that replace older documents. I'd like to delete the document that are replaced, typically a … --- ## [Is Rabbitmq Plugin for Filebeat available?](https://discuss.elastic.co/t/is-rabbitmq-plugin-for-filebeat-available/89843)
**Author:** [@bhupathireddys](https://discuss.elastic.co/u/bhupathireddys)\ **Replies:** 2\ **Last updated:** [June 29, 2017, 7:09am UTC](https://discuss.elastic.co/t/is-rabbitmq-plugin-for-filebeat-available/89843 "2017-06-29T07:09:34Z")
Hello, would like to send my filebeat logs to rabbitmq before it pushes to logstash. Is there any plugin available for the same? Thanks --- ## [No 'Access-Control-Allow-Origin' header is present on the requested resource](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/138372)
**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\ **Replies:** 4\ **Last updated:** [July 4, 2018, 8:16am UTC](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/138372 "2018-07-04T08:16:48Z")
Even though I have provided CORS configuration in elasticsearch.yml file as: http.cors.enabled: true http.cors.allow-origin: "\*" But still I'm getting this error Failed to load http://localhost:9200/user/\_search?pr… --- ## [How to pass dynamic parameters in Logstash input](https://discuss.elastic.co/t/how-to-pass-dynamic-parameters-in-logstash-input/117502)
**Author:** [@rajeshb44](https://discuss.elastic.co/u/rajeshb44)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 8:54pm UTC](https://discuss.elastic.co/t/how-to-pass-dynamic-parameters-in-logstash-input/117502 "2018-01-29T20:54:02Z")
How to pass dynamic parameters in Logstash input --- ## [Kibana - Exclude field with same value](https://discuss.elastic.co/t/kibana-exclude-field-with-same-value/83127)
**Author:** [@chg](https://discuss.elastic.co/u/chg)\ **Replies:** 7\ **Last updated:** [April 25, 2017, 11:00pm UTC](https://discuss.elastic.co/t/kibana-exclude-field-with-same-value/83127 "2017-04-25T23:00:37Z")
I am trying to create a graph which displays deltas from the previous week and current week. In terms of delta, I would like to display the events that showed up last week, but not the current week AND the events that sh… --- ## [Kibana Not Loading Results -- TypeError: Cannot read property 'length' of undefined](https://discuss.elastic.co/t/kibana-not-loading-results-typeerror-cannot-read-property-length-of-undefined/21824)
**Author:** [@Shawn\_Nicholas\_Stark](https://discuss.elastic.co/u/Shawn_Nicholas_Stark)\ **Replies:** 4\ **Last updated:** [February 20, 2015, 6:08pm UTC](https://discuss.elastic.co/t/kibana-not-loading-results-typeerror-cannot-read-property-length-of-undefined/21824 "2015-02-20T18:08:15Z")
Using kibana-3.0.0milestone4 Cannot Load Data from elasticsearch with queries that work from shell Receive Error : TypeError: Cannot read property 'length' of undefined (Attached) ElasticSearch can be queried via … --- ## [Error: fleet-server failed: context canceled | Error - dial tcp 172.18.0.2:9200: i/o timeout](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-dial-tcp-172-18-0-2-i-o-timeout/306411)
**Author:** [@ilia19945](https://discuss.elastic.co/u/ilia19945)\ **Replies:** 5\ **Last updated:** [July 10, 2022, 4:57pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-dial-tcp-172-18-0-2-i-o-timeout/306411 "2022-07-10T16:57:18Z")
Kibana version: v 8.2.2 Elasticsearch version: v 8.2.2 APM Server version: v 8.2.2 APM Agent language and version: Python 3.10.0 Browser version: Google Chrome Version 102.0.5005.63 (Official Build) (64-bit) O… --- ## [Unable to access elasticsearch on localhost:9200](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-localhost-9200/360368)
**Author:** [@Lim\_Rik](https://discuss.elastic.co/u/Lim_Rik)\ **Replies:** 6\ **Last updated:** [May 29, 2024, 10:15am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-localhost-9200/360368 "2024-05-29T10:15:16Z")
I am trying to run elasticsearch on docker, I am able to get my images up but unable to access localhost:9200, I am able to access kibana on localhost:5601 though. --- ## [Return value of null](https://discuss.elastic.co/t/return-value-of-null/113931)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 6\ **Last updated:** [January 4, 2018, 4:54pm UTC](https://discuss.elastic.co/t/return-value-of-null/113931 "2018-01-04T16:54:03Z")
Hello, i used script fileds to return value if sessionDate : null return 'never check' My script do half work and don't return the value 'never check' when it==null "script\_fields" : { "check" : { "scr… --- ## [Shards stuck in INITIALIZING state after CLUSTER restart](https://discuss.elastic.co/t/shards-stuck-in-initializing-state-after-cluster-restart/113394)
**Author:** [@Vijaysimha\_Naik](https://discuss.elastic.co/u/Vijaysimha_Naik)\ **Replies:** 3\ **Last updated:** [January 10, 2018, 4:39pm UTC](https://discuss.elastic.co/t/shards-stuck-in-initializing-state-after-cluster-restart/113394 "2018-01-10T16:39:23Z")
Elasticsearch version (bin/elasticsearch --version): 1.1.1 Plugins installed: \[\] JVM version (java -version):openjdk version "1.8.0\_151" OS version (uname -a if on a Unix-like system): x86\_64 x86\_64 x86\_64 GNU/Linux I… --- ## [Nested query and empty results](https://discuss.elastic.co/t/nested-query-and-empty-results/91665)
**Author:** [@airpons1](https://discuss.elastic.co/u/airpons1)\ **Replies:** 5\ **Last updated:** [July 19, 2017, 1:54am UTC](https://discuss.elastic.co/t/nested-query-and-empty-results/91665 "2017-07-19T01:54:02Z")
Hi all, I'm starting to use ES and I struggle with the concept of nested queries. I would like to filter nested comment of my blog post respecting the following condition Only nested elements which respect query are… --- ## [Mixed Charts in Kibana (Bars and Lines)](https://discuss.elastic.co/t/mixed-charts-in-kibana-bars-and-lines/104202)
**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\ **Replies:** 2\ **Last updated:** [October 18, 2017, 7:55am UTC](https://discuss.elastic.co/t/mixed-charts-in-kibana-bars-and-lines/104202 "2017-10-18T07:55:18Z")
Hi everybody, I'm new to Kibana and would like to know if it is possible to do stacked bars ( y-axis 1) and lines ( y-axis 2) on a timeline in a mixed chart with Kibana. Currently I'm on Kibana 5.3.2 where the feature d… --- ## [Cannot install kibana plugin sense](https://discuss.elastic.co/t/cannot-install-kibana-plugin-sense/64950)
**Author:** [@mashannon168](https://discuss.elastic.co/u/mashannon168)\ **Replies:** 2\ **Last updated:** [November 3, 2016, 10:15pm UTC](https://discuss.elastic.co/t/cannot-install-kibana-plugin-sense/64950 "2016-11-03T22:15:32Z")
Hi I am having problem install plugin sense, it times out if i ran bin/kibana-plugin install elastic/sense so i tried wget wget https://artifacts.elastic.co/downloads/kibana-plugins/elastic/sense/elastic/sense-5… --- ## [Kibana stopped working after update](https://discuss.elastic.co/t/kibana-stopped-working-after-update/285444)
**Author:** [@Artemis\_Fowl](https://discuss.elastic.co/u/Artemis_Fowl)\ **Replies:** 6\ **Last updated:** [September 29, 2021, 9:32pm UTC](https://discuss.elastic.co/t/kibana-stopped-working-after-update/285444 "2021-09-29T21:32:33Z")
After the update kibana is not working. http://localhost:5601/ response - "Kibana server is not ready yet" $ journalctl -u kibana.service Sep 29 12:03:21 Notebook systemd\[1\]: Stopping Kibana... Sep 29 12:03:55 Noteboo… --- ## [HTTP\_Poller send output to elasticsearch](https://discuss.elastic.co/t/http-poller-send-output-to-elasticsearch/100674)
**Author:** [@Sharivari](https://discuss.elastic.co/u/Sharivari)\ **Replies:** 6\ **Last updated:** [September 28, 2017, 5:38pm UTC](https://discuss.elastic.co/t/http-poller-send-output-to-elasticsearch/100674 "2017-09-28T17:38:45Z")
Hey everyone, for testcases I am requesting some urls and want to send the result to my elasticsearch. this is my config file: input { http\_poller { urls =\> { "service1" =\> "http://192.168.99.100:9200/servi… --- ## [Failed parsing date from field creation\_date (jdbc)](https://discuss.elastic.co/t/failed-parsing-date-from-field-creation-date-jdbc/47244)
**Author:** [@PascalR](https://discuss.elastic.co/u/PascalR)\ **Replies:** 7\ **Last updated:** [April 20, 2016, 11:06am UTC](https://discuss.elastic.co/t/failed-parsing-date-from-field-creation-date-jdbc/47244 "2016-04-20T11:06:14Z")
Hi, I tried to load data from my MySQL database to ES. It worked well, only fields with datetime have a wrong time in it. As you can see in the config-file below, I used a date filter to solve this with several formats… --- ## [org.elasticsearch.bootstrap.StartupException after installing elasticsearch 5.0.2](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-after-installing-elasticsearch-5-0-2/68529)
**Author:** [@DeepSea](https://discuss.elastic.co/u/DeepSea)\ **Replies:** 4\ **Last updated:** [December 12, 2016, 2:47am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-after-installing-elasticsearch-5-0-2/68529 "2016-12-12T02:47:18Z")
I am completely new to ELK. I'm trying to install 5.0.2. logstash works fine but when I run elasticsearch.bat I get the following: \[2016-12-09T15:17:43,484\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\] uncau… --- ## [Optimizing ElasticSearch for Heavy Insertions](https://discuss.elastic.co/t/optimizing-elasticsearch-for-heavy-insertions/13023)
**Author:** [@jbalachandran](https://discuss.elastic.co/u/jbalachandran)\ **Replies:** 4\ **Last updated:** [August 2, 2013, 10:06am UTC](https://discuss.elastic.co/t/optimizing-elasticsearch-for-heavy-insertions/13023 "2013-08-02T10:06:22Z")
Hey, Currently, due to the large number of bulk inserts and the frequency of them, our ES cluster can go to yellow to red rather quickly. Once in red, it does recover, but takes 15-20 minutes. In fact the last tim… --- ## [Your trial license is expired help](https://discuss.elastic.co/t/your-trial-license-is-expired-help/324173)
**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\ **Replies:** 7\ **Last updated:** [January 29, 2023, 4:05pm UTC](https://discuss.elastic.co/t/your-trial-license-is-expired-help/324173 "2023-01-29T16:05:47Z")
Hi all, Please i use elasticsearch 8.0 version and i have my workspace so yesterday , kibana said Your trial license is expired Please your support i have all my dashbored I am afraid of losing my data and dashboard. … --- ## [How to discover the data Index Pattern .monitoring-es-\*](https://discuss.elastic.co/t/how-to-discover-the-data-index-pattern-monitoring-es/86700)
**Author:** [@yapro](https://discuss.elastic.co/u/yapro)\ **Replies:** 8\ **Last updated:** [May 22, 2017, 5:17pm UTC](https://discuss.elastic.co/t/how-to-discover-the-data-index-pattern-monitoring-es/86700 "2017-05-22T17:17:52Z")
How to discover the data Index Pattern .monitoring-es-\* --- ## [Webhook action in watcher to use environment variables](https://discuss.elastic.co/t/webhook-action-in-watcher-to-use-environment-variables/148790)
**Author:** [@vinodkannan](https://discuss.elastic.co/u/vinodkannan)\ **Replies:** 3\ **Last updated:** [September 20, 2018, 11:38am UTC](https://discuss.elastic.co/t/webhook-action-in-watcher-to-use-environment-variables/148790 "2018-09-20T11:38:52Z")
Hi, This is the webhook action I am using: "actions" : { "web-post" : { "webhook": { "method" : "POST", "host": "x.x.x.x", "port": 8090, "path": ":/notification", "headers": { "Content-Type": "application/json" … --- ## [No Compatible Fields: types: geo\_point](https://discuss.elastic.co/t/no-compatible-fields-types-geo-point/137151)
**Author:** [@teoman](https://discuss.elastic.co/u/teoman)\ **Replies:** 7\ **Last updated:** [June 24, 2018, 7:07pm UTC](https://discuss.elastic.co/t/no-compatible-fields-types-geo-point/137151 "2018-06-24T19:07:57Z")
I am following practices below; I am using both Elasticsearch & Kibana version 6.2.1 I followed instructions as below; But, I am getting following error: No Compatible Fields: The "logstash\*" index pattern d… --- ## [Invalid index name \[\_watcher\], must not start with '\_', '-', or '+'"](https://discuss.elastic.co/t/invalid-index-name-watcher-must-not-start-with-or/203930)
**Author:** [@mv007](https://discuss.elastic.co/u/mv007)\ **Replies:** 4\ **Last updated:** [November 6, 2019, 4:54pm UTC](https://discuss.elastic.co/t/invalid-index-name-watcher-must-not-start-with-or/203930 "2019-11-06T16:54:11Z")
Hello All, I am a newbie in ELK and still learning it. I am planning to setup a watcher functionality. Below is the watcher definition that i have written, I have just followed the online document. However, I am not… [Previous page](https://discuss.elastic.co/top.md?page=493&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=495&per_page=50&period=all)