# Top

**URL:** https://discuss.elastic.co/top.md?page=511&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 512

---

## [How to write quotes and double quotes in the same String](https://discuss.elastic.co/t/how-to-write-quotes-and-double-quotes-in-the-same-string/151465)

<div class="topic-metadata">

**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\
**Replies:** 5\
**Last updated:** [October 9, 2018, 3:00pm UTC](https://discuss.elastic.co/t/how-to-write-quotes-and-double-quotes-in-the-same-string/151465 "2018-10-09T15:00:56Z")

</div>

Hello, I want to use the file output. The problem is that my String that I want to write in the output file contains quotes and double quote. I want to write this line : {"script": {"source": "ctx.\_source\['Categorie SV…

---

## [Filebeat 7.3.0 Autodiscover configuration introduction yields "Cannot connect to the Docker daemon" error](https://discuss.elastic.co/t/filebeat-7-3-0-autodiscover-configuration-introduction-yields-cannot-connect-to-the-docker-daemon-error/193974)

<div class="topic-metadata">

**Author:** [@nmccoy](https://discuss.elastic.co/u/nmccoy)\
**Replies:** 3\
**Last updated:** [August 9, 2019, 1:19pm UTC](https://discuss.elastic.co/t/filebeat-7-3-0-autodiscover-configuration-introduction-yields-cannot-connect-to-the-docker-daemon-error/193974 "2019-08-09T13:19:14Z")

</div>

I would like to roll out an ELK stack using filebeat to transport logs from custom docker containers. The OS is Ubuntu 18.04. I am trying to do this by using the filebeat autodiscover feature by following the documentat…

---

## [Dashboard iframe triggers error](https://discuss.elastic.co/t/dashboard-iframe-triggers-error/91724)

<div class="topic-metadata">

**Author:** [@Manoj\_13](https://discuss.elastic.co/u/Manoj_13)\
**Replies:** 8\
**Last updated:** [July 31, 2017, 9:20am UTC](https://discuss.elastic.co/t/dashboard-iframe-triggers-error/91724 "2017-07-31T09:20:02Z")

</div>

Hi, We are trying to use Kibana for generating visualisations and using their iframe on to our html pages.But recently when we are getting this error: Oops! Looks like something went wrong. Refreshing may do the tri…

---

## [Does excuse me filebeat support input to kafka？](https://discuss.elastic.co/t/does-excuse-me-filebeat-support-input-to-kafka/39211)

<div class="topic-metadata">

**Author:** [@clifford](https://discuss.elastic.co/u/clifford)\
**Replies:** 7\
**Last updated:** [January 15, 2016, 2:39am UTC](https://discuss.elastic.co/t/does-excuse-me-filebeat-support-input-to-kafka/39211 "2016-01-15T02:39:26Z")

</div>

Does excuse me， filebeat support input to kafka, want to this architecture: filebeat - \> kakfa -- -- -- -- \> logstash - \> elasticsearch - \> kibana?

---

## [Visualization works, but not in dashboard](https://discuss.elastic.co/t/visualization-works-but-not-in-dashboard/84776)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 4\
**Last updated:** [May 9, 2017, 4:29pm UTC](https://discuss.elastic.co/t/visualization-works-but-not-in-dashboard/84776 "2017-05-09T16:29:34Z")

</div>

I have a bunch of saved visualizations. I have dashboards that include them. The visualizations used to show up in the dashboards, but now they do not. I recently turned off \_all, which I suspect is related. In Discover,…

---

## [Integrate HDP with Elasticsearch](https://discuss.elastic.co/t/integrate-hdp-with-elasticsearch/57991)

<div class="topic-metadata">

**Author:** [@Lucky](https://discuss.elastic.co/u/Lucky)\
**Replies:** 5\
**Last updated:** [August 15, 2016, 8:25pm UTC](https://discuss.elastic.co/t/integrate-hdp-with-elasticsearch/57991 "2016-08-15T20:25:38Z")

</div>

I have HDP 2.4 installed on 1 master and 6 slave nodes and I have elastisearch running on a different machine I want to integrate HDP and elasticsearch. Can please someone suggest me with steps to integrate HDP and elast…

---

## [Datastream index name](https://discuss.elastic.co/t/datastream-index-name/310985)

<div class="topic-metadata">

**Author:** [@Viktor\_Avramovski](https://discuss.elastic.co/u/Viktor_Avramovski)\
**Replies:** 1\
**Last updated:** [August 4, 2022, 6:56am UTC](https://discuss.elastic.co/t/datastream-index-name/310985 "2022-08-04T06:56:55Z")

</div>

Hey I was reading the documentation here: Data streams | Elasticsearch Guide \[7.17\] | Elastic I read that the index name is generated with the following format .ds-\<data-stream\>-\<yyyy.MM.dd\>-\<generation\> This means …

---

## [Fetching one field from every inner hit (docvalue\_field VS source filtering)](https://discuss.elastic.co/t/fetching-one-field-from-every-inner-hit-docvalue-field-vs-source-filtering/201024)

<div class="topic-metadata">

**Author:** [@menshenin](https://discuss.elastic.co/u/menshenin)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 9:06pm UTC](https://discuss.elastic.co/t/fetching-one-field-from-every-inner-hit-docvalue-field-vs-source-filtering/201024 "2020-06-02T21:06:32Z")

</div>

Hi, I have an index that stores complex documents with multiple nested fields, but as a query result I always need only one field from the nested document (some uid). How should I do: just turn off the \_source and take…

---

## [Multiple Filebeat Inputs Files](https://discuss.elastic.co/t/multiple-filebeat-inputs-files/149348)

<div class="topic-metadata">

**Author:** [@Esity](https://discuss.elastic.co/u/Esity)\
**Replies:** 4\
**Last updated:** [October 1, 2018, 3:20am UTC](https://discuss.elastic.co/t/multiple-filebeat-inputs-files/149348 "2018-10-01T03:20:10Z")

</div>

I was wondering if it is possible to have a conf.d type folder for filebeat to create multiple input items. I know I can list them all in filebeat.yml but that isn't preferable. I also don't think it makes sense to use a…

---

## [Use filebeat to send different logs in different server](https://discuss.elastic.co/t/use-filebeat-to-send-different-logs-in-different-server/127103)

<div class="topic-metadata">

**Author:** [@adg](https://discuss.elastic.co/u/adg)\
**Replies:** 3\
**Last updated:** [April 9, 2018, 7:32am UTC](https://discuss.elastic.co/t/use-filebeat-to-send-different-logs-in-different-server/127103 "2018-04-09T07:32:03Z")

</div>

in one of my server having filebeat configure currently it send server.log ,localhost.log and localhost-access.log logs to centralized log server via /etc/filebeat/filebeat.yml output: logstash : \[ceterlizedIP:port\] …

---

## [Dashboard links requires vega.enableExternalUrls: true](https://discuss.elastic.co/t/dashboard-links-requires-vega-enableexternalurls-true/209675)

<div class="topic-metadata">

**Author:** [@DavidKHE](https://discuss.elastic.co/u/DavidKHE)\
**Replies:** 7\
**Last updated:** [November 28, 2019, 5:52pm UTC](https://discuss.elastic.co/t/dashboard-links-requires-vega-enableexternalurls-true/209675 "2019-11-28T17:52:49Z")

</div>

Hi, after some analysis we learned to understand that this is not possible set vega.enableExternalUrls: true in the Kibana hosted by Elastic Cloud. as we are currently using HREF in vega visualisation for Kibana to nav…

---

## [Is roll-up API free (open source) or is available only with xpack](https://discuss.elastic.co/t/is-roll-up-api-free-open-source-or-is-available-only-with-xpack/151364)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [October 8, 2018, 2:56pm UTC](https://discuss.elastic.co/t/is-roll-up-api-free-open-source-or-is-available-only-with-xpack/151364 "2018-10-08T14:56:16Z")

</div>

Only if I want rollout feature.. how much would it cost in terms of licensing

---

## [Bulk Partial Update using Nest](https://discuss.elastic.co/t/bulk-partial-update-using-nest/29124)

<div class="topic-metadata">

**Author:** [@pavang6](https://discuss.elastic.co/u/pavang6)\
**Replies:** 1\
**Last updated:** [November 10, 2016, 12:10pm UTC](https://discuss.elastic.co/t/bulk-partial-update-using-nest/29124 "2016-11-10T12:10:23Z")

</div>

Is it possible to perform bulk partial updates using Nest ? Right now the following following code snippet does the update for a single document. elasticClient.Update(u =\> u .Id(documentId) …

---

## [Running elastic in windows with JRockit - Could not create the Java Virtual machine](https://discuss.elastic.co/t/running-elastic-in-windows-with-jrockit-could-not-create-the-java-virtual-machine/10838)

<div class="topic-metadata">

**Author:** [@Daniel\_Marchena\_Parr](https://discuss.elastic.co/u/Daniel_Marchena_Parr)\
**Replies:** 4\
**Last updated:** [February 22, 2013, 1:17pm UTC](https://discuss.elastic.co/t/running-elastic-in-windows-with-jrockit-could-not-create-the-java-virtual-machine/10838 "2013-02-22T13:17:02Z")

</div>

Hello guys, I'm new to elasticsearch and i'm following this tutorial (http://bin63.com/how-to-install-elasticsearch-on-windows) to install it in the windows environment. The JDK/JRE in use is JRockit 1.6 (last …

---

## [Grok Pattern For Access Log](https://discuss.elastic.co/t/grok-pattern-for-access-log/90626)

<div class="topic-metadata">

**Author:** [@Michael\_TRAN](https://discuss.elastic.co/u/Michael_TRAN)\
**Replies:** 2\
**Last updated:** [June 27, 2017, 9:30am UTC](https://discuss.elastic.co/t/grok-pattern-for-access-log/90626 "2017-06-27T09:30:09Z")

</div>

Hi, I have a issue with the grok pattern for access log. I try this grok filter %{COMBINEDAPACHELOG} but it's not working. I identify why and it's because of this variable "301148" between the date and GET 100.1.1.…

---

## [Can't escape single quote in json input in kibana visualization](https://discuss.elastic.co/t/cant-escape-single-quote-in-json-input-in-kibana-visualization/226007)

<div class="topic-metadata">

**Author:** [@WAFA\_Mardiney](https://discuss.elastic.co/u/WAFA_Mardiney)\
**Replies:** 7\
**Last updated:** [April 2, 2020, 12:07am UTC](https://discuss.elastic.co/t/cant-escape-single-quote-in-json-input-in-kibana-visualization/226007 "2020-04-02T00:07:54Z")

</div>

I'm using kibana data table visualization and i need to make an aggregation that counts all fields that contains a specific message THAT contains single-quote, the problem is that i'm using painless lang in json input fi…

---

## [Do you support APM link tracking for Websocket?](https://discuss.elastic.co/t/do-you-support-apm-link-tracking-for-websocket/212087)

<div class="topic-metadata">

**Author:** [@EDDYCJY](https://discuss.elastic.co/u/EDDYCJY)\
**Replies:** 7\
**Last updated:** [December 17, 2019, 10:08am UTC](https://discuss.elastic.co/t/do-you-support-apm-link-tracking-for-websocket/212087 "2019-12-17T10:08:55Z")

</div>

Kibana version: v7.4.2 Elasticsearch version: v7.4.2 APM Server version: v7.4.2 APM Agent language and version: apm-agent-go v1.5.0 Question： I am using net/http and github.com/gorilla/websocket for websocket de…

---

## [Wildcard query returns null when Uppercase Letters are used](https://discuss.elastic.co/t/wildcard-query-returns-null-when-uppercase-letters-are-used/24822)

<div class="topic-metadata">

**Author:** [@AkshataNaik](https://discuss.elastic.co/u/AkshataNaik)\
**Replies:** 3\
**Last updated:** [July 7, 2015, 6:21pm UTC](https://discuss.elastic.co/t/wildcard-query-returns-null-when-uppercase-letters-are-used/24822 "2015-07-07T18:21:50Z")

</div>

Hi, I am developing a search site which calls elasticsearch internally. I am using wildcard query to match entered text. everything works well when lowercase letters are entered. But when Uppercase letters are entered th…

---

## [Conditional checks in mutate gsub](https://discuss.elastic.co/t/conditional-checks-in-mutate-gsub/141564)

<div class="topic-metadata">

**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\
**Replies:** 4\
**Last updated:** [July 25, 2018, 2:44pm UTC](https://discuss.elastic.co/t/conditional-checks-in-mutate-gsub/141564 "2018-07-25T14:44:44Z")

</div>

Hello, When parsing WAS System out logs, I want to check the EventType and replace the abbreviation with full Description. like EventType (Replace with) Full Description "I" --\> "Informational" "F" --\> "Fatal" …

---

## [Kibana 5 alpha 4 script in JSON Input](https://discuss.elastic.co/t/kibana-5-alpha-4-script-in-json-input/56827)

<div class="topic-metadata">

**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\
**Replies:** 4\
**Last updated:** [January 3, 2017, 8:58am UTC](https://discuss.elastic.co/t/kibana-5-alpha-4-script-in-json-input/56827 "2017-01-03T08:58:52Z")

</div>

I am trying to add a groovy script for a bucket in the Advanced section in JSON Input when creating a visualization. It works perfectly well in Kibana 4 but it doesn't work in Kibana 5 alpha 4. Needless to say thay I en…

---

## [Rsyslog server =\> Haproxy =\> ES cluster](https://discuss.elastic.co/t/rsyslog-server-haproxy-es-cluster/26752)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 5\
**Last updated:** [August 6, 2015, 7:49am UTC](https://discuss.elastic.co/t/rsyslog-server-haproxy-es-cluster/26752 "2015-08-06T07:49:51Z")

</div>

Hi all I use haproxy with keepalive for ES but I have some concerns HAproxy config global log 127.0.0.1 local0 notice chroot /var/lib/haproxy user haproxy group haproxy daemon …

---

## [Skewed primary shards distribution leads to performance issues](https://discuss.elastic.co/t/skewed-primary-shards-distribution-leads-to-performance-issues/89108)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 8\
**Last updated:** [July 2, 2017, 9:47pm UTC](https://discuss.elastic.co/t/skewed-primary-shards-distribution-leads-to-performance-issues/89108 "2017-07-02T21:47:25Z")

</div>

We have a relatively large monthly index (reaches approx. 1TB by the end of the month, so about 30GB are added daily) that is doing hundreds of updates per second - it has 10 shards with 1 replica, and is spread out even…

---

## [No configuration found in the configured sources](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources/258029)

<div class="topic-metadata">

**Author:** [@djb000m](https://discuss.elastic.co/u/djb000m)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 2:28pm UTC](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources/258029 "2020-12-10T14:28:27Z")

</div>

Hi, I am running the standard 7.10.0 Logstash docker container and I want to use it to do its thing and send data on to an ECE elastic deployment. I'm running into an odd error that I cannot find a solution for. When I…

---

## [Send email alerts if log level == ERROR in more than one index](https://discuss.elastic.co/t/send-email-alerts-if-log-level-error-in-more-than-one-index/285750)

<div class="topic-metadata">

**Author:** [@Chandrakant\_Naik](https://discuss.elastic.co/u/Chandrakant_Naik)\
**Replies:** 5\
**Last updated:** [October 10, 2021, 10:04pm UTC](https://discuss.elastic.co/t/send-email-alerts-if-log-level-error-in-more-than-one-index/285750 "2021-10-10T22:04:52Z")

</div>

i have ingested python logs in Elasticsearch. Sample of my logs given below \[2021-10-01 23:54:39,752\] \[INFO\] \[run\]\[MainThread\] \[xxxxxxxxx\] \[function\_name:line no\] : updating user request mapping for the request xxxxxxx …

---

## [Terms aggregation ordered by date field](https://discuss.elastic.co/t/terms-aggregation-ordered-by-date-field/29874)

<div class="topic-metadata">

**Author:** [@krystalcode](https://discuss.elastic.co/u/krystalcode)\
**Replies:** 5\
**Last updated:** [September 26, 2015, 12:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-ordered-by-date-field/29874 "2015-09-26T12:54:24Z")

</div>

Hello, I have a document type with 2 fields: my\_field.hash my\_field.time Each value of the "hash" corresponds to a unique value of "time". It is extremely unlikely that 2 different "hashes" will have the same "time…

---

## [Upgrading ES from 2.1.1 to 2.2.0 - missing authentication token?](https://discuss.elastic.co/t/upgrading-es-from-2-1-1-to-2-2-0-missing-authentication-token/40869)

<div class="topic-metadata">

**Author:** [@plonka2000](https://discuss.elastic.co/u/plonka2000)\
**Replies:** 6\
**Last updated:** [February 8, 2016, 11:19am UTC](https://discuss.elastic.co/t/upgrading-es-from-2-1-1-to-2-2-0-missing-authentication-token/40869 "2016-02-08T11:19:00Z")

</div>

Hi, I decided to try upgrade the current cluster from ES2.1.1 to ES2.2.0. A mirror pair. The cluster is running within AWS, so I'm using the cloud-aws plugin for communication. I successfully upgraded the first node,…

---

## [Using an image as a map in a kibana dashboard](https://discuss.elastic.co/t/using-an-image-as-a-map-in-a-kibana-dashboard/274713)

<div class="topic-metadata">

**Author:** [@Marc2](https://discuss.elastic.co/u/Marc2)\
**Replies:** 5\
**Last updated:** [June 3, 2021, 1:13pm UTC](https://discuss.elastic.co/t/using-an-image-as-a-map-in-a-kibana-dashboard/274713 "2021-06-03T13:13:52Z")

</div>

Hello everybody. The thing is I must use a a facory layout I got in an image as a map in a dashboard and I don't know how. I guess I should add coordenates to that image and then upload it in some way. Is there anybody…

---

## [Validation failed because of missing type with hl rest client bulk API](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-hl-rest-client-bulk-api/196060)

<div class="topic-metadata">

**Author:** [@zhaozeyang](https://discuss.elastic.co/u/zhaozeyang)\
**Replies:** 3\
**Last updated:** [August 22, 2019, 12:47pm UTC](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-hl-rest-client-bulk-api/196060 "2019-08-22T12:47:18Z")

</div>

hello : this is my code: BulkRequest request = new BulkRequest(); for (DataInfo dataInfo : dataInfos) { String index = getCurrentIndex(dataInfo.getIndexPrefix()); String id = dataInfo.getId(); …

---

## [Best way to contains search in elastic search](https://discuss.elastic.co/t/best-way-to-contains-search-in-elastic-search/307369)

<div class="topic-metadata">

**Author:** [@khasim\_vali\_dudekula](https://discuss.elastic.co/u/khasim_vali_dudekula)\
**Replies:** 1\
**Last updated:** [June 16, 2022, 11:01am UTC](https://discuss.elastic.co/t/best-way-to-contains-search-in-elastic-search/307369 "2022-06-16T11:01:36Z")

</div>

Hi, I am working on a use case which does contains search in logs data indexed in elastic server. the query is a case-insensitive one I am aware of match, match\_phrase and query string. But none of the seems to be wor…

---

## [Elasticsearch Disk space issues](https://discuss.elastic.co/t/elasticsearch-disk-space-issues/84315)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 4\
**Last updated:** [May 4, 2017, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-disk-space-issues/84315 "2017-05-04T13:58:51Z")

</div>

Hello, I am having issues with managing the amount of space elasticsearch is taking up on each one of the nodes in the cluster. As of right now we have 5 ES nodes one which is a dedicated master Node. The rest are data…

---

## [Date Histogram when only have start and end dates (or duration)?](https://discuss.elastic.co/t/date-histogram-when-only-have-start-and-end-dates-or-duration/34726)

<div class="topic-metadata">

**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\
**Replies:** 2\
**Last updated:** [November 17, 2015, 5:28pm UTC](https://discuss.elastic.co/t/date-histogram-when-only-have-start-and-end-dates-or-duration/34726 "2015-11-17T17:28:58Z")

</div>

I'd like to plot the number of car trips ongoing on a particular day, every day for the last week. I know the start time and end time of the trips - the trips can last less than a day, or more than a day. Ultimately, I w…

---

## [Hitting Security API Endpoint](https://discuss.elastic.co/t/hitting-security-api-endpoint/241952)

<div class="topic-metadata">

**Author:** [@KSib](https://discuss.elastic.co/u/KSib)\
**Replies:** 7\
**Last updated:** [August 17, 2020, 7:36pm UTC](https://discuss.elastic.co/t/hitting-security-api-endpoint/241952 "2020-08-17T19:36:48Z")

</div>

A little preface: I'm trying to set up the following: Kibana: Shared dashboard with index pattern of Index-\* Site A : Embedded iframe Kibana Dashboard (with only access to Index-A) Site B : Embedded iframe Kibana Dash…

---

## [Optimal way for monitoring host and docker containers metrics](https://discuss.elastic.co/t/optimal-way-for-monitoring-host-and-docker-containers-metrics/62478)

<div class="topic-metadata">

**Author:** [@jbh6](https://discuss.elastic.co/u/jbh6)\
**Replies:** 7\
**Last updated:** [October 10, 2016, 6:56am UTC](https://discuss.elastic.co/t/optimal-way-for-monitoring-host-and-docker-containers-metrics/62478 "2016-10-10T06:56:44Z")

</div>

Hi I am trying my hands on MetricBeat and have been able to send the host system metrics to an Elastic Search cluster. But, I am facing issues with sending docker containers metrics by metric beat. Also, I am not reall…

---

## [Filebeat missing log lines - resolved logstash version problem](https://discuss.elastic.co/t/filebeat-missing-log-lines-resolved-logstash-version-problem/62876)

<div class="topic-metadata">

**Author:** [@Tim\_Burt](https://discuss.elastic.co/u/Tim_Burt)\
**Replies:** 8\
**Last updated:** [October 24, 2016, 7:15am UTC](https://discuss.elastic.co/t/filebeat-missing-log-lines-resolved-logstash-version-problem/62876 "2016-10-24T07:15:28Z")

</div>

Here is an example: Logs are being processed through two pathways. ruby-app --\> TCP --\> OldLogstash --\> OldKibana ruby-app --\> /var/log/json/file.log --\> filebeats --\> kafka --\> NewLogstash --\> NewKibana Tracin…

---

## [How to connect keyclock with elasticsearch and kibana](https://discuss.elastic.co/t/how-to-connect-keyclock-with-elasticsearch-and-kibana/277965)

<div class="topic-metadata">

**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Replies:** 5\
**Last updated:** [July 26, 2021, 9:44am UTC](https://discuss.elastic.co/t/how-to-connect-keyclock-with-elasticsearch-and-kibana/277965 "2021-07-26T09:44:25Z")

</div>

Hi team, I am using ELK in my local machine . And it was protected with searchguard. Now I want to integrate keyclock With ELK. I dont know how to connect keyclock with ELK . Give me a step by step process to integrate…

---

## [Purpose of State files](https://discuss.elastic.co/t/purpose-of-state-files/282849)

<div class="topic-metadata">

**Author:** [@hyadavalli](https://discuss.elastic.co/u/hyadavalli)\
**Replies:** 5\
**Last updated:** [September 1, 2021, 5:17pm UTC](https://discuss.elastic.co/t/purpose-of-state-files/282849 "2021-09-01T17:17:17Z")

</div>

Hello Everyone, After searching everywhere, I couldn't find the purpose of state files. We started off with version 2.2 and then went to 5.6 and then at 6.8 atm. Below is the scenario we frequently run into: Elastics…

---

## [Autocomplete suggester Java API?](https://discuss.elastic.co/t/autocomplete-suggester-java-api/16199)

<div class="topic-metadata">

**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Replies:** 6\
**Last updated:** [March 7, 2014, 8:19am UTC](https://discuss.elastic.co/t/autocomplete-suggester-java-api/16199 "2014-03-07T08:19:52Z")

</div>

I'm changing our current autocomplete implementation to use the new autocomplete suggester as below. Is there a Java API available to send the suggest search request to ElasticSearch? http://www.elasticsearch.org/…

---

## [\[ERROR\]\[logstash.inputs.metrics \] Failed to create monitoring event {:message=\>"For path: events. Map keys: \[:pipelines, :reloads\]", :error=\>"LogStash::Instrument::MetricStore::MetricNotFound"}](https://discuss.elastic.co/t/error-logstash-inputs-metrics-failed-to-create-monitoring-event-message-for-path-events-map-keys-pipelines-reloads-error-logstash-metricnotfound/163628)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [January 15, 2019, 4:28pm UTC](https://discuss.elastic.co/t/error-logstash-inputs-metrics-failed-to-create-monitoring-event-message-for-path-events-map-keys-pipelines-reloads-error-logstash-metricnotfound/163628 "2019-01-15T16:28:54Z")

</div>

I'm following Configuring Centralized Pipeline Management | Logstash Reference \[6.5\] | Elastic and as I enable following: # grep -i management docker-compose.override.yml - XPACK\_MANAGEMENT\_ELAS…

---

## [String in 'Metric' visualization + Timezone issue](https://discuss.elastic.co/t/string-in-metric-visualization-timezone-issue/40188)

<div class="topic-metadata">

**Author:** [@mad\_min](https://discuss.elastic.co/u/mad_min)\
**Replies:** 7\
**Last updated:** [February 26, 2016, 7:24pm UTC](https://discuss.elastic.co/t/string-in-metric-visualization-timezone-issue/40188 "2016-02-26T19:24:14Z")

</div>

Hi list, Is there anyway to put a string in the 'Metric' visualization? Or any other way to dynamically show a string value in Kibana? One of my fields is a string and describes a property of the dashboard, it would b…

---

## [Update existing record in elasticsearch](https://discuss.elastic.co/t/update-existing-record-in-elasticsearch/86449)

<div class="topic-metadata">

**Author:** [@v.kumar](https://discuss.elastic.co/u/v.kumar)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 3:46pm UTC](https://discuss.elastic.co/t/update-existing-record-in-elasticsearch/86449 "2017-05-19T15:46:26Z")

</div>

I am using ES 2.2 and we are fetching data from services and ingesting data in ES. Problem is, I have duplicate records in ES with same data but ID generated is different. We are generating id and indexing using bulk A…

---

## [Field name alias](https://discuss.elastic.co/t/field-name-alias/11858)

<div class="topic-metadata">

**Author:** [@Valentin\_Pletzer](https://discuss.elastic.co/u/Valentin_Pletzer)\
**Replies:** 2\
**Last updated:** [May 8, 2013, 6:26am UTC](https://discuss.elastic.co/t/field-name-alias/11858 "2013-05-08T06:26:03Z")

</div>

Hi, is there something I would call "field name alias"? Suppose I have two indeces/types with two different document schemas. One where the title of the document is found in the field "title" and another where the…

---

## [ES not moving shards off node with high disk usage. (88% )](https://discuss.elastic.co/t/es-not-moving-shards-off-node-with-high-disk-usage-88/176261)

<div class="topic-metadata">

**Author:** [@Asa\_Zalles-Milner](https://discuss.elastic.co/u/Asa_Zalles-Milner)\
**Replies:** 8\
**Last updated:** [April 11, 2019, 8:45pm UTC](https://discuss.elastic.co/t/es-not-moving-shards-off-node-with-high-disk-usage-88/176261 "2019-04-11T20:45:25Z")

</div>

I'm having an odd occurrence. I had cluster running out of disk space. Added more nodes, and all but two of the nodes had room made on them. 2 nodes are still sitting above the high watermark. I added another 3 nodes…

---

## [Apm agent for databases](https://discuss.elastic.co/t/apm-agent-for-databases/155714)

<div class="topic-metadata">

**Author:** [@sebasd44](https://discuss.elastic.co/u/sebasd44)\
**Replies:** 5\
**Last updated:** [November 7, 2018, 2:48pm UTC](https://discuss.elastic.co/t/apm-agent-for-databases/155714 "2018-11-07T14:48:57Z")

</div>

Hi all, i'm newbie for this solution, there is a list for clients APM Node.js Agent \[1.x\] — other versions APM Python Agent \[2.x\] — other versions APM Ruby Agent \[1.x\] — other versions APM Real User Monitoring JavaSc…

---

## [Why I am getting a double mapping for my keyword fields?](https://discuss.elastic.co/t/why-i-am-getting-a-double-mapping-for-my-keyword-fields/80362)

<div class="topic-metadata">

**Author:** [@Nestor\_Manrique](https://discuss.elastic.co/u/Nestor_Manrique)\
**Replies:** 5\
**Last updated:** [March 29, 2017, 4:25pm UTC](https://discuss.elastic.co/t/why-i-am-getting-a-double-mapping-for-my-keyword-fields/80362 "2017-03-29T16:25:38Z")

</div>

Hello, I'm using http\_poller to bring some info from an API to ES. My output config looks like this. output { if \[type\] == 'ServerPool'{ elasticsearch { hosts =\> "localhost:9200" …

---

## [QueryString to search String with colon](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369)

<div class="topic-metadata">

**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Replies:** 4\
**Last updated:** [April 3, 2020, 3:20pm UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369 "2020-04-03T15:20:28Z")

</div>

i am trying to achieve below condition loginId = "z2store" and type = "web" and dateTime = "12:17:08" below query i have written GET /sample/\_search { "bool" : { "must" : \[ { "term" : { "…

---

## [Add new fields using ingest pipeline script processor](https://discuss.elastic.co/t/add-new-fields-using-ingest-pipeline-script-processor/184537)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 4\
**Last updated:** [June 10, 2019, 9:40am UTC](https://discuss.elastic.co/t/add-new-fields-using-ingest-pipeline-script-processor/184537 "2019-06-10T09:40:12Z")

</div>

Hi there! I'd like to add an ingest pipeline to my index in order to add some further info to incoming documents. Let's say these docs have two fields, USERNAME and CITY. I'd like to add also latitude and longitude acc…

---

## [How can I merge two events in logstash?](https://discuss.elastic.co/t/how-can-i-merge-two-events-in-logstash/159520)

<div class="topic-metadata">

**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 12:42pm UTC](https://discuss.elastic.co/t/how-can-i-merge-two-events-in-logstash/159520 "2018-12-06T12:42:33Z")

</div>

I'm trying to parse a log file into elasticsearch through logstash. I want to send the following log as single event(i.e. as a single document) into elasticsearch. ######################################################…

---

## [Kibana not connected to epr.elastic.co Package Registry](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028)

<div class="topic-metadata">

**Author:** [@shuuny-matrix](https://discuss.elastic.co/u/shuuny-matrix)\
**Replies:** 3\
**Last updated:** [July 26, 2022, 3:19pm UTC](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028 "2022-07-26T15:19:41Z")

</div>

I have installed Elasticsearch and Kibana in my Ubuntu System in a corporate environment behind firewall and proxies. We have two crt files to use internet in browser. My elasticsearch is running fine. But when I run Ki…

---

## [\<CSV::MalformedCSVError: Illegal quoting in line 1.\>](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/162822)

<div class="topic-metadata">

**Author:** [@pbroek](https://discuss.elastic.co/u/pbroek)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 6:27am UTC](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/162822 "2019-01-08T06:27:59Z")

</div>

Hello, I am trying to load csv files using the logstash pipeline. The pipeline works but the indexed results is not what I expected. When I use the same csv file and import it using the data visualizer in machine learn…

---

## [Maps, geojson and display in Kibana](https://discuss.elastic.co/t/maps-geojson-and-display-in-kibana/138727)

<div class="topic-metadata">

**Author:** [@avranCheck](https://discuss.elastic.co/u/avranCheck)\
**Replies:** 7\
**Last updated:** [July 5, 2018, 7:06pm UTC](https://discuss.elastic.co/t/maps-geojson-and-display-in-kibana/138727 "2018-07-05T19:06:45Z")

</div>

I want to load geojson files in Kibana. I am following the examples here https://www.elastic.co/blog/custom-region-maps-in-kibana-6-0. Need help to figure out from the point of downloading the aus\_state.geojson, how do I…

[Previous page](https://discuss.elastic.co/top.md?page=510&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=512&per_page=50&period=all)
