# Top

**URL:** https://discuss.elastic.co/top.md?page=534&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 535

---

## [Logstash TLS with x-pack error registering plugin (Cipher is not available) 6.x](https://discuss.elastic.co/t/logstash-tls-with-x-pack-error-registering-plugin-cipher-is-not-available-6-x/117650)

<div class="topic-metadata">

**Author:** [@stephenpatten](https://discuss.elastic.co/u/stephenpatten)\
**Replies:** 7\
**Last updated:** [March 8, 2018, 6:06pm UTC](https://discuss.elastic.co/t/logstash-tls-with-x-pack-error-registering-plugin-cipher-is-not-available-6-x/117650 "2018-03-08T18:06:08Z")

</div>

Hello, Set up LS w/ x-pack on a 2 node TLS ES/Kibana windows cluster. ES and Kibana are running fine at this point. logstash.yml file: node.name: logstash.local xpack.monitoring.elasticsearch.username: logstash\_syste…

---

## [Kibana data tables visualizations seperate fields on punctuation. How can I combine them?](https://discuss.elastic.co/t/kibana-data-tables-visualizations-seperate-fields-on-punctuation-how-can-i-combine-them/51440)

<div class="topic-metadata">

**Author:** [@Ambrose](https://discuss.elastic.co/u/Ambrose)\
**Replies:** 4\
**Last updated:** [June 2, 2016, 7:11pm UTC](https://discuss.elastic.co/t/kibana-data-tables-visualizations-seperate-fields-on-punctuation-how-can-i-combine-them/51440 "2016-06-02T19:11:36Z")

</div>

I'm sorting through some security logs that include windows paths as a data table visualization in Kibana and notice that the table splits up the Path field based on the non alphabet characters in the path. This of cours…

---

## [Open JRE for ElasticSearch](https://discuss.elastic.co/t/open-jre-for-elasticsearch/32530)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 4\
**Last updated:** [October 20, 2015, 2:20pm UTC](https://discuss.elastic.co/t/open-jre-for-elasticsearch/32530 "2015-10-20T14:20:36Z")

</div>

Hi, I want to check If I can use open JRE with latest ElasticSearch and logstash. Is lastest ElasticSearch and logstash tested with latest open JRE? We started developing our product using ElasticSearch and logstash us…

---

## [Failed to Import Metricbeat Dashboards](https://discuss.elastic.co/t/failed-to-import-metricbeat-dashboards/162896)

<div class="topic-metadata">

**Author:** [@SSIDDIQUI](https://discuss.elastic.co/u/SSIDDIQUI)\
**Replies:** 6\
**Last updated:** [January 22, 2019, 4:17am UTC](https://discuss.elastic.co/t/failed-to-import-metricbeat-dashboards/162896 "2019-01-22T04:17:23Z")

</div>

Hi All, I'm new to ELK and was not involved with the installation of ELK. The delete\_indices.yml script ended up deleting the main .kibana index file which wiped out the dashboards. Once I gave the server a reboot some …

---

## [Brazilian Portuguese Metaphone plugin 1.0.0](https://discuss.elastic.co/t/brazilian-portuguese-metaphone-plugin-1-0-0/80379)

<div class="topic-metadata">

**Author:** [@anaelcarvalho](https://discuss.elastic.co/u/anaelcarvalho)\
**Replies:** 0\
**Last updated:** [March 28, 2017, 9:11pm UTC](https://discuss.elastic.co/t/brazilian-portuguese-metaphone-plugin-1-0-0/80379 "2017-03-28T21:11:33Z")

</div>

This is an implementation of the Metaphone algorithm for Brazilian Portuguese inspired by a number of works, chiefly among which is the "Portuguese Metaphone implementation in PHP" by "Prefeitura de Várzea Paulista" gi…

---

## [Many Elasticsearch threads in WAITING parking state](https://discuss.elastic.co/t/many-elasticsearch-threads-in-waiting-parking-state/264154)

<div class="topic-metadata">

**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\
**Replies:** 1\
**Last updated:** [February 12, 2021, 5:23pm UTC](https://discuss.elastic.co/t/many-elasticsearch-threads-in-waiting-parking-state/264154 "2021-02-12T17:23:48Z")

</div>

Hi, We are running a ES cluster on 6.8 and we are still using TCP client. I know it's deprecated and move to REST client but we have not got around to it yet. In addition, we have a service which uses Elastic4s library…

---

## [How to get aggregations working in Elasticsearch Spark adapter?](https://discuss.elastic.co/t/how-to-get-aggregations-working-in-elasticsearch-spark-adapter/23034)

<div class="topic-metadata">

**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\
**Replies:** 4\
**Last updated:** [April 8, 2015, 9:14pm UTC](https://discuss.elastic.co/t/how-to-get-aggregations-working-in-elasticsearch-spark-adapter/23034 "2015-04-08T21:14:33Z")

</div>

I have ES, Spark, and ES hadoop adapter installed on my laptop. I wrote a simple scala notebook to test ES adapter. Everything was fine until I started thinking at more sophisticated features. This is the snippet t…

---

## [Wildcard search on raw not\_analyzed field](https://discuss.elastic.co/t/wildcard-search-on-raw-not-analyzed-field/21841)

<div class="topic-metadata">

**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\
**Replies:** 4\
**Last updated:** [March 31, 2015, 7:44pm UTC](https://discuss.elastic.co/t/wildcard-search-on-raw-not-analyzed-field/21841 "2015-03-31T19:44:34Z")

</div>

I have a dynamic template that sets up not\_analyzed raw mappings for all my string fields. When I perform a query search like this: field.raw=KnownValue it works (has hits). When I do this: field.raw=Known?…

---

## [Filebeat tcp and Udp error](https://discuss.elastic.co/t/filebeat-tcp-and-udp-error/277087)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 6\
**Last updated:** [June 30, 2021, 11:14am UTC](https://discuss.elastic.co/t/filebeat-tcp-and-udp-error/277087 "2021-06-30T11:14:43Z")

</div>

Am getting the following error, can anyone please help? Exiting: Failed to start crawler: starting input failed: Error while initializing input: you must choose between TCP or UDP. Where do I configure the TCP and UDP…

---

## [Update(upsert) with query support](https://discuss.elastic.co/t/update-upsert-with-query-support/135098)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya](https://discuss.elastic.co/u/Hitesh_Baldaniya)\
**Replies:** 5\
**Last updated:** [June 8, 2018, 1:20pm UTC](https://discuss.elastic.co/t/update-upsert-with-query-support/135098 "2018-06-08T13:20:11Z")

</div>

Hi All, Consider following situation. PUT {{Index}}/{{Type}}/{{ID}}?query={"range": {"version": {"lt": 2}}} { "doc": { "title": "Test1" "version": 2 } } I want to upsert document if it absent, otherwise update the doc…

---

## [Split chart in Timelion](https://discuss.elastic.co/t/split-chart-in-timelion/197664)

<div class="topic-metadata">

**Author:** [@Jesus\_Rodrigo](https://discuss.elastic.co/u/Jesus_Rodrigo)\
**Replies:** 3\
**Last updated:** [September 6, 2019, 12:20pm UTC](https://discuss.elastic.co/t/split-chart-in-timelion/197664 "2019-09-06T12:20:37Z")

</div>

Hi, I have a question about Timelion, it's possible make split chart (like visualizes) in Timelion graph?? Because I'm trying draw two data, I would like to be able to differentiate between a variable x that correspond…

---

## [Elasticsearch on AWS I3](https://discuss.elastic.co/t/elasticsearch-on-aws-i3/77457)

<div class="topic-metadata">

**Author:** [@logman](https://discuss.elastic.co/u/logman)\
**Replies:** 2\
**Last updated:** [March 21, 2017, 6:49pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-i3/77457 "2017-03-21T18:49:35Z")

</div>

Have just switched from running our logging cluster based around r3.xlarge to the new i3.xlarge. Have been able to shut down a third of my nodes due to improved performance and am paying less per node for the i3.xlarg…

---

## [Sorting response hits using java api](https://discuss.elastic.co/t/sorting-response-hits-using-java-api/13179)

<div class="topic-metadata">

**Author:** [@Nir\_Biran](https://discuss.elastic.co/u/Nir_Biran)\
**Replies:** 4\
**Last updated:** [August 13, 2013, 8:20am UTC](https://discuss.elastic.co/t/sorting-response-hits-using-java-api/13179 "2013-08-13T08:20:21Z")

</div>

Hello, i'm using logstash to manage logs, and as part of it - elasticsearch. when querying the logs i'm using\* scan search\* and have the following fields for each hit: @message, @source, @source\_host, @source\_path,…

---

## [\_grokparsefailure tag not removed](https://discuss.elastic.co/t/-grokparsefailure-tag-not-removed/87292)

<div class="topic-metadata">

**Author:** [@mikygee](https://discuss.elastic.co/u/mikygee)\
**Replies:** 1\
**Last updated:** [May 29, 2017, 5:21am UTC](https://discuss.elastic.co/t/-grokparsefailure-tag-not-removed/87292 "2017-05-29T05:21:17Z")

</div>

Hello, I'm strugling to get rid of these \_grokparsefailure tags Case 1: Message 1.1.1.1 - - \[26/May/2017:21:24:04 +0200\] "GET /plugins/jqueryui/themes/classic/jquery-ui-1.10.4.custom.css?s=1450862292 HTTP/1.1" 200 62…

---

## [Serializing Elasticsearch clients for use when looping through Spark RDDs](https://discuss.elastic.co/t/serializing-elasticsearch-clients-for-use-when-looping-through-spark-rdds/126164)

<div class="topic-metadata">

**Author:** [@pavocristatus](https://discuss.elastic.co/u/pavocristatus)\
**Replies:** 6\
**Last updated:** [April 3, 2018, 11:02pm UTC](https://discuss.elastic.co/t/serializing-elasticsearch-clients-for-use-when-looping-through-spark-rdds/126164 "2018-04-03T23:02:51Z")

</div>

Opening and closing connections for Elasticsearch TransportClients We have the need to distribute tasks across several machines hence the use of rdd.partitions to distribute a dataset on each node. Each node that is ope…

---

## [Adding a static text section in kibana dashboard](https://discuss.elastic.co/t/adding-a-static-text-section-in-kibana-dashboard/233233)

<div class="topic-metadata">

**Author:** [@vijay3](https://discuss.elastic.co/u/vijay3)\
**Replies:** 2\
**Last updated:** [May 19, 2020, 5:39am UTC](https://discuss.elastic.co/t/adding-a-static-text-section-in-kibana-dashboard/233233 "2020-05-19T05:39:23Z")

</div>

Hi All, I have created a dashboard. But at the end of the dashboard i need to add footnotes, which is nothing but a static text. But i dont find any feature to add such a section. Even if the text can be added as toolti…

---

## [Is there anyway I can tag the elasticsearch server name in the field?](https://discuss.elastic.co/t/is-there-anyway-i-can-tag-the-elasticsearch-server-name-in-the-field/61196)

<div class="topic-metadata">

**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\
**Replies:** 7\
**Last updated:** [September 22, 2016, 10:39am UTC](https://discuss.elastic.co/t/is-there-anyway-i-can-tag-the-elasticsearch-server-name-in-the-field/61196 "2016-09-22T10:39:00Z")

</div>

my data flows from source server --\> redis (on elasticsearch server A) --\> elasticsearch (same server as redis run). what i know is logstash can only parse whatever available in the message or path, elasticsearch is no…

---

## [Performance hit due to sort over date field](https://discuss.elastic.co/t/performance-hit-due-to-sort-over-date-field/182664)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 4\
**Last updated:** [May 25, 2019, 9:52am UTC](https://discuss.elastic.co/t/performance-hit-due-to-sort-over-date-field/182664 "2019-05-25T09:52:39Z")

</div>

Hi, We are trying to optimize query that should fetch top 50 newest documents from a large data set. That data set has 60,000,000 documents (filtered) across 92 indices, 7377 shards and 48 nodes. At that time all nodes …

---

## [Courier Fetch](https://discuss.elastic.co/t/courier-fetch/27575)

<div class="topic-metadata">

**Author:** [@Hornov](https://discuss.elastic.co/u/Hornov)\
**Replies:** 4\
**Last updated:** [August 21, 2015, 3:16pm UTC](https://discuss.elastic.co/t/courier-fetch/27575 "2015-08-21T15:16:13Z")

</div>

Sometimes I meet the following warning : Courier Fetch: 1 of 90 shards failed. And when I look for in the elasticsearch log I find : No mapping found for ... in order to sort on However in all shards I've the mapping : "…

---

## [Full disk cleanup](https://discuss.elastic.co/t/full-disk-cleanup/9570)

<div class="topic-metadata">

**Author:** [@Rob](https://discuss.elastic.co/u/Rob)\
**Replies:** 1\
**Last updated:** [November 6, 2012, 9:13am UTC](https://discuss.elastic.co/t/full-disk-cleanup/9570 "2012-11-06T09:13:20Z")

</div>

As of today I inherited an ubuntu logging server running graylog2. I went to log on to the web interface for the first time which gave an error when loading that there's no free disk space on the machine. Without th…

---

## [How to find snapshot size in ElasticSearch](https://discuss.elastic.co/t/how-to-find-snapshot-size-in-elasticsearch/97809)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 0\
**Last updated:** [August 21, 2017, 5:57pm UTC](https://discuss.elastic.co/t/how-to-find-snapshot-size-in-elasticsearch/97809 "2017-08-21T17:57:20Z")

</div>

Hi all Here i am trying to find each Snapshot Size which are got created in elasticsearch where i came across \_cat/snapshots API but does not helps me. is there a way to find Snapshot Size in ElasticSearch? Thank you…

---

## [How to intellij](https://discuss.elastic.co/t/how-to-intellij/16364)

<div class="topic-metadata">

**Author:** [@Benjamin\_Black](https://discuss.elastic.co/u/Benjamin_Black)\
**Replies:** 3\
**Last updated:** [December 2, 2016, 9:14pm UTC](https://discuss.elastic.co/t/how-to-intellij/16364 "2016-12-02T21:14:47Z")

</div>

would one of you wise sages offer up the magical incantations for working with ES source in intellij? specifically, what are the configuration steps from cloning the github repo through to debugging a running ES inst…

---

## [Combine bool with nested query](https://discuss.elastic.co/t/combine-bool-with-nested-query/129445)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 2\
**Last updated:** [April 26, 2018, 3:14pm UTC](https://discuss.elastic.co/t/combine-bool-with-nested-query/129445 "2018-04-26T15:14:52Z")

</div>

I am sending the following request: { "query": { "bool": { "must": \[{ "terms": { "name": \["test"\] } }, { "terms": { "tags": \["java", "php"\] } }, { "nested ": { "path": "fi…

---

## [Indexing file (.doc,.pdf.xls etc)](https://discuss.elastic.co/t/indexing-file-doc-pdf-xls-etc/55683)

<div class="topic-metadata">

**Author:** [@akashjarad](https://discuss.elastic.co/u/akashjarad)\
**Replies:** 6\
**Last updated:** [July 21, 2016, 6:06am UTC](https://discuss.elastic.co/t/indexing-file-doc-pdf-xls-etc/55683 "2016-07-21T06:06:48Z")

</div>

i want to index the content of files like .doc or .pdf using elasticsearch . i read about elasticsearch-mapper-attachments but it is storing whole file , i just want it to index the content of file not to store the who…

---

## [APM Server accepting events from RUM agent but not sending data to ES \[Elastic Cloud\]](https://discuss.elastic.co/t/apm-server-accepting-events-from-rum-agent-but-not-sending-data-to-es-elastic-cloud/190946)

<div class="topic-metadata">

**Author:** [@kenneth123456](https://discuss.elastic.co/u/kenneth123456)\
**Replies:** 5\
**Last updated:** [July 18, 2019, 7:11am UTC](https://discuss.elastic.co/t/apm-server-accepting-events-from-rum-agent-but-not-sending-data-to-es-elastic-cloud/190946 "2019-07-18T07:11:52Z")

</div>

Kibana version: 7.2.0 Elasticsearch version: 7.2.0 APM Server version: 7.2.0 APM Agent language and version: Javascript APM-Rum 4.3.0 Browser version: Google Chrome 75.0.3770.100 Original install method (e.g. d…

---

## [Remove json array elements that are objects](https://discuss.elastic.co/t/remove-json-array-elements-that-are-objects/115022)

<div class="topic-metadata">

**Author:** [@Jason\_Brooks](https://discuss.elastic.co/u/Jason_Brooks)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 6:15pm UTC](https://discuss.elastic.co/t/remove-json-array-elements-that-are-objects/115022 "2018-01-11T18:15:06Z")

</div>

Hello, I have the following (shortened) json array: "identifiers": \[{ "name": "ENCODED\_RECIPIENT\_ID", "value": "LTMxNjcxMTc4NjQS1", "isOriginal": false }, { "name": "ENCODED\_RECIPIENT\_ID", "value": "LTMxNjcxODA5NzQS1",…

---

## [ELK - guaranteed lossless?](https://discuss.elastic.co/t/elk-guaranteed-lossless/26348)

<div class="topic-metadata">

**Author:** [@dhopkins](https://discuss.elastic.co/u/dhopkins)\
**Replies:** 5\
**Last updated:** [July 29, 2015, 4:46am UTC](https://discuss.elastic.co/t/elk-guaranteed-lossless/26348 "2015-07-29T04:46:58Z")

</div>

Hi folks, I'm trying to understand what the best setup is to guarantee zero lost messages. I know logstash will not purposely lose messages, however I have seen references of people pulling in Redis to ensure they don'…

---

## [How to know the current date in a sql query in kibana](https://discuss.elastic.co/t/how-to-know-the-current-date-in-a-sql-query-in-kibana/189756)

<div class="topic-metadata">

**Author:** [@Diego\_Benito](https://discuss.elastic.co/u/Diego_Benito)\
**Replies:** 4\
**Last updated:** [July 10, 2019, 2:15pm UTC](https://discuss.elastic.co/t/how-to-know-the-current-date-in-a-sql-query-in-kibana/189756 "2019-07-10T14:15:46Z")

</div>

Hi, Im trying to execute the follow sql query: GET \_xpack/sql?format=txt { "query" :""" select level from "default-\*" where queueName='ASPY\_001\_0200\_RecogidaDatosGISS' and (transactionStatus='2' or transactionStat…

---

## [How to recover a closed Index](https://discuss.elastic.co/t/how-to-recover-a-closed-index/113551)

<div class="topic-metadata">

**Author:** [@PakanAngel](https://discuss.elastic.co/u/PakanAngel)\
**Replies:** 4\
**Last updated:** [January 3, 2018, 3:05am UTC](https://discuss.elastic.co/t/how-to-recover-a-closed-index/113551 "2018-01-03T03:05:14Z")

</div>

I am using elasticsearch 5.6.1 with Fess. Unfortunately my server ran out of memory. After restarting the server and running Elasticsearch realized that the main index is closed. First tried to re-open it but no success.…

---

## [Installing logstash jdbc plugin](https://discuss.elastic.co/t/installing-logstash-jdbc-plugin/127885)

<div class="topic-metadata">

**Author:** [@squanchydata](https://discuss.elastic.co/u/squanchydata)\
**Replies:** 3\
**Last updated:** [April 13, 2018, 1:44am UTC](https://discuss.elastic.co/t/installing-logstash-jdbc-plugin/127885 "2018-04-13T01:44:09Z")

</div>

In order for me to link my mysql database with elasticsearch, I need the jdbc plugin with logstash. Where/how do I install this plugin and how do I use it?

---

## [Logstash and MariaDB won't connect (both dockerized)](https://discuss.elastic.co/t/logstash-and-mariadb-wont-connect-both-dockerized/97499)

<div class="topic-metadata">

**Author:** [@gabrielmll](https://discuss.elastic.co/u/gabrielmll)\
**Replies:** 3\
**Last updated:** [August 18, 2017, 8:52pm UTC](https://discuss.elastic.co/t/logstash-and-mariadb-wont-connect-both-dockerized/97499 "2017-08-18T20:52:24Z")

</div>

Hello everyone, newby here, quite excited to learn about elastic and the community. Some help would be great. I'm getting an error when JDBC plugin attempts to connect to mariaDB through the following settings: maria…

---

## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818)

<div class="topic-metadata">

**Author:** [@richardvk](https://discuss.elastic.co/u/richardvk)\
**Replies:** 1\
**Last updated:** [November 20, 2022, 11:33pm UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818 "2022-11-20T23:33:16Z")

</div>

Im trying to enable clustering as per: I get this when creating a token: root@elk-1 ~ # /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node ERROR: Failed to determine the health of the cluster…

---

## [Error with parsing Azure json multiline files](https://discuss.elastic.co/t/error-with-parsing-azure-json-multiline-files/77307)

<div class="topic-metadata">

**Author:** [@111148](https://discuss.elastic.co/u/111148)\
**Replies:** 7\
**Last updated:** [March 3, 2017, 2:20pm UTC](https://discuss.elastic.co/t/error-with-parsing-azure-json-multiline-files/77307 "2017-03-03T14:20:32Z")

</div>

Hello, Please advise how to solve this. Here is my logstash config file:

---

## [Winlogbeat not able to send data to elastic (401 Unauthorized)](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-data-to-elastic-401-unauthorized/66580)

<div class="topic-metadata">

**Author:** [@alvaroca1](https://discuss.elastic.co/u/alvaroca1)\
**Replies:** 7\
**Last updated:** [November 21, 2016, 6:55pm UTC](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-data-to-elastic-401-unauthorized/66580 "2016-11-21T18:55:19Z")

</div>

\\winlogbeat\> .\\winlogbeat.exe -c '.\\winlogbeat.yml' -e -v 11/17 19:45:16.781950 beat.go:264: INFO Home path: \[C:\\winlogbeat\] Config path: \[C:\\winlogbeat\] Data path: \[C:\\winlogbeat\\data\] Logs path: \[C:\\winlogbeat\\logs\] 1…

---

## [Enable / Disable anonymous usage statistics by default?](https://discuss.elastic.co/t/enable-disable-anonymous-usage-statistics-by-default/214778)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [January 15, 2020, 6:21am UTC](https://discuss.elastic.co/t/enable-disable-anonymous-usage-statistics-by-default/214778 "2020-01-15T06:21:13Z")

</div>

Hi, Is there a way to enable / disable anonymous usage statistics in kibana by configuration, so that no one has to answer this question manually? Any variable in kibana.yml? Thanks, Andreas

---

## [Problems while inserting data to index](https://discuss.elastic.co/t/problems-while-inserting-data-to-index/96838)

<div class="topic-metadata">

**Author:** [@vinaya\_dhinu](https://discuss.elastic.co/u/vinaya_dhinu)\
**Replies:** 5\
**Last updated:** [August 29, 2017, 11:01am UTC](https://discuss.elastic.co/t/problems-while-inserting-data-to-index/96838 "2017-08-29T11:01:22Z")

</div>

I am getting following error : {“error”:{“root\_cause”:\[{“type”:“illegal\_argument\_exception”,“reason”:“Limit of total fields \[1000\] in index \[priceline\_hotels\] has been exceeded”}\]. The same error i got for another indi…

---

## [How to add a new field to all my log indices](https://discuss.elastic.co/t/how-to-add-a-new-field-to-all-my-log-indices/224149)

<div class="topic-metadata">

**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-add-a-new-field-to-all-my-log-indices/224149 "2020-03-20T16:42:47Z")

</div>

I'm a new kibana user and you guys have been invaluable to me over the past two months while I get my feet under me. Now I've got a question about logging data. I upload my testpass logs to cloudwatch which then shuffles…

---

## [Add grok filter for costume log data in Filebeat's NGINX module](https://discuss.elastic.co/t/add-grok-filter-for-costume-log-data-in-filebeats-nginx-module/161855)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 4\
**Last updated:** [January 17, 2019, 9:32am UTC](https://discuss.elastic.co/t/add-grok-filter-for-costume-log-data-in-filebeats-nginx-module/161855 "2019-01-17T09:32:30Z")

</div>

Hi I'm not sure if this is the best way to go on about this. If there is a better way, please advice. I've added a new access.log entry for NGINX that tracks the following: $remote\_addr $ssl\_protocol $ssl\_cipher $r…

---

## [Kibana with GrayLog](https://discuss.elastic.co/t/kibana-with-graylog/120136)

<div class="topic-metadata">

**Author:** [@Amine\_El\_Hijazi](https://discuss.elastic.co/u/Amine_El_Hijazi)\
**Replies:** 4\
**Last updated:** [February 19, 2018, 8:42am UTC](https://discuss.elastic.co/t/kibana-with-graylog/120136 "2018-02-19T08:42:37Z")

</div>

Hello everyone ! I m wondering If i can use Kibana with GrayLog , Since they both use ElasticSearch ? if the answser is YES , Please Can some one give a documentation or just some quick hint about it ? i'll be thankfull…

---

## [Kibana scripted fields and nested types - no value returned](https://discuss.elastic.co/t/kibana-scripted-fields-and-nested-types-no-value-returned/88780)

<div class="topic-metadata">

**Author:** [@mkhan](https://discuss.elastic.co/u/mkhan)\
**Replies:** 4\
**Last updated:** [June 15, 2017, 1:12am UTC](https://discuss.elastic.co/t/kibana-scripted-fields-and-nested-types-no-value-returned/88780 "2017-06-15T01:12:39Z")

</div>

How can one return a nested field value using the Scripted Fields in Kibana? In the following painless script, given that the 'activity' is a 'nested' type, 'typecode' is text type, and 'keyword' is a 'keyword' type --…

---

## [Filebeat Index Pattern Creation](https://discuss.elastic.co/t/filebeat-index-pattern-creation/200309)

<div class="topic-metadata">

**Author:** [@Eric\_Orcutt](https://discuss.elastic.co/u/Eric_Orcutt)\
**Replies:** 4\
**Last updated:** [October 1, 2019, 8:20pm UTC](https://discuss.elastic.co/t/filebeat-index-pattern-creation/200309 "2019-10-01T20:20:02Z")

</div>

I'm attempting to create a custom index using ILM policy through Filebeat and everything appears to be fine except that the Index Pattern created in Kibana by Filebeat is not using the custom pattern that I'm providing i…

---

## [Logstash filter target操作之后remove\_field无法删除子字段](https://discuss.elastic.co/t/logstash-filter-target-remove-field/139486)

<div class="topic-metadata">

**Author:** [@hjfeng1988](https://discuss.elastic.co/u/hjfeng1988)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 7:12am UTC](https://discuss.elastic.co/t/logstash-filter-target-remove-field/139486 "2018-07-11T07:12:37Z")

</div>

grok { match =\> { "message" =\> "%{HTTPD\_COMBINEDLOG}" } remove\_field =\> \[ "message" \] } useragent { source =\> "agent" target =\> "ua" rem…

---

## [How to fetch the last updated time of the document in ES 5.0](https://discuss.elastic.co/t/how-to-fetch-the-last-updated-time-of-the-document-in-es-5-0/70517)

<div class="topic-metadata">

**Author:** [@Renuka\_Aradhya](https://discuss.elastic.co/u/Renuka_Aradhya)\
**Replies:** 1\
**Last updated:** [January 4, 2017, 1:04pm UTC](https://discuss.elastic.co/t/how-to-fetch-the-last-updated-time-of-the-document-in-es-5-0/70517 "2017-01-04T13:04:22Z")

</div>

This is in 5.0.0 version of ES and using Java APIs. I am trying to fetch the last updated time and version of the document in ES. I am able to fetch the version but not the last updated time stamp of the document. Pl…

---

## [Rétention des documents](https://discuss.elastic.co/t/retention-des-documents/24101)

<div class="topic-metadata">

**Author:** [@JeromeGontier](https://discuss.elastic.co/u/JeromeGontier)\
**Replies:** 8\
**Last updated:** [July 6, 2017, 12:39pm UTC](https://discuss.elastic.co/t/retention-des-documents/24101 "2017-07-06T12:39:13Z")

</div>

Bonjour à tous, Je me permets de solliciter votre aide car j'ai hérité de la configuration suivante ElasticSearch Kibana et Logtash installé par un collègue partie depuis. Je ne connais absolument pas ces trois élément…

---

## [Time Filter not shown in Kibana menu bar](https://discuss.elastic.co/t/time-filter-not-shown-in-kibana-menu-bar/38454)

<div class="topic-metadata">

**Author:** [@mingho](https://discuss.elastic.co/u/mingho)\
**Replies:** 2\
**Last updated:** [January 6, 2016, 6:36pm UTC](https://discuss.elastic.co/t/time-filter-not-shown-in-kibana-menu-bar/38454 "2016-01-06T18:36:53Z")

</div>

Hello, I am able to use logstash (2.1.0) with my custom patterns to send my log files to Elasticsearch (2.1.1). I am also able to view and search my data in Kibana 4.3.1. Everything works it is supposed to be. Since I …

---

## [Production Mode vs Development Mode in Kibana](https://discuss.elastic.co/t/production-mode-vs-development-mode-in-kibana/91078)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 3\
**Last updated:** [July 4, 2017, 2:43pm UTC](https://discuss.elastic.co/t/production-mode-vs-development-mode-in-kibana/91078 "2017-07-04T14:43:22Z")

</div>

Hi All, How can we ensure the Kibana is runing in Prod Mode or Dev Mode., or what is the difference between dev mode or prod mode in Kibana. Same thing I got info for elastic search in https://discuss.elastic.co/t/pr…

---

## [Integrate Google Analytics with Kibana](https://discuss.elastic.co/t/integrate-google-analytics-with-kibana/241882)

<div class="topic-metadata">

**Author:** [@Tango31](https://discuss.elastic.co/u/Tango31)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 10:41pm UTC](https://discuss.elastic.co/t/integrate-google-analytics-with-kibana/241882 "2020-07-20T22:41:41Z")

</div>

Hello, I want to see google analytics data into kibana dashboard..How to do it?..Can anyone help me on this topic?

---

## [Deep pagination vs scroll & Search After](https://discuss.elastic.co/t/deep-pagination-vs-scroll-search-after/89971)

<div class="topic-metadata">

**Author:** [@Cen\_giz](https://discuss.elastic.co/u/Cen_giz)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 2:43pm UTC](https://discuss.elastic.co/t/deep-pagination-vs-scroll-search-after/89971 "2017-06-20T14:43:18Z")

</div>

Dears, My use-case: Export up to 1 million documents of size 5K each for EXCEL EXPORT with 5GB output. This is not for real-time users and will be used by 1 user at any point of time. Using Elastic 2.4: a) Use deep…

---

## [How to set allow\_insecure\_settings to enable repository-s3](https://discuss.elastic.co/t/how-to-set-allow-insecure-settings-to-enable-repository-s3/357771)

<div class="topic-metadata">

**Author:** [@dove-young](https://discuss.elastic.co/u/dove-young)\
**Replies:** 8\
**Last updated:** [April 22, 2024, 6:42am UTC](https://discuss.elastic.co/t/how-to-set-allow-insecure-settings-to-enable-repository-s3/357771 "2024-04-22T06:42:29Z")

</div>

I installed elastic 8.13.0 in OCP 4.15. I attach to a elastic pod and tried to register a S3 repository to minio sh-5.0$ curl -X PUT "http://instana-es-http:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: appl…

---

## [How to get back my Primary shards?](https://discuss.elastic.co/t/how-to-get-back-my-primary-shards/39954)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 8\
**Last updated:** [January 25, 2016, 1:34pm UTC](https://discuss.elastic.co/t/how-to-get-back-my-primary-shards/39954 "2016-01-25T13:34:00Z")

</div>

After disabling allocation curl -X PUT -d "{\\"persistent\\": {\\"cluster.routing.allocation.enable\\": \\"none\\"}}" http://localhost:9200/\_cluster/settings I shutdown one of my nodes for service. Now that it is back up,…

[Previous page](https://discuss.elastic.co/top.md?page=533&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=535&per_page=50&period=all)
