# Top

**URL:** https://discuss.elastic.co/top.md?page=569&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 570

---

## [Kibana not available after license expiration](https://discuss.elastic.co/t/kibana-not-available-after-license-expiration/344641)

<div class="topic-metadata">

**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\
**Replies:** 4\
**Last updated:** [October 9, 2023, 7:12pm UTC](https://discuss.elastic.co/t/kibana-not-available-after-license-expiration/344641 "2023-10-09T19:12:00Z")

</div>

Hi, Within Kibana, I activated a 30 day trial license. To my surprise, I was "locked out" of Kibana when it expired, getting the "Kibana server is not ready yet" message. Kibana outputs the following: \[INFO \]\[savedobje…

---

## [How to setup a cluster from scratch](https://discuss.elastic.co/t/how-to-setup-a-cluster-from-scratch/337564)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 4\
**Last updated:** [July 4, 2023, 2:31pm UTC](https://discuss.elastic.co/t/how-to-setup-a-cluster-from-scratch/337564 "2023-07-04T14:31:18Z")

</div>

Hi, I have been using elasticsearch for a long time. Our initial cluster was setup in 5.x days (installation procedures have been 'lost') and we have performed rolling upgrade ever since. Currently the cluster is 8.8 wi…

---

## [Ingest postfix (mail) logs to ELK](https://discuss.elastic.co/t/ingest-postfix-mail-logs-to-elk/299663)

<div class="topic-metadata">

**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\
**Replies:** 6\
**Last updated:** [March 22, 2022, 6:57pm UTC](https://discuss.elastic.co/t/ingest-postfix-mail-logs-to-elk/299663 "2022-03-22T18:57:10Z")

</div>

Hi! I would like to ingest sendmail logs (/var/log/maillog) from different servers (about 5) into Elasticsearch at the same time. I did Google search and found different and confused tutorials about this. Anybody can …

---

## [\_refresh is throwing error \[post /indexname/\_refresh\] does not support having a body](https://discuss.elastic.co/t/refresh-is-throwing-error-post-indexname-refresh-does-not-support-having-a-body/279940)

<div class="topic-metadata">

**Author:** [@Sumit\_Gaud](https://discuss.elastic.co/u/Sumit_Gaud)\
**Replies:** 6\
**Last updated:** [July 29, 2021, 12:50pm UTC](https://discuss.elastic.co/t/refresh-is-throwing-error-post-indexname-refresh-does-not-support-having-a-body/279940 "2021-07-29T12:50:05Z")

</div>

Hi, I deployed a elasticsearch on Azure using Elasticsearch (Self-Managed) I am using NEST nuget package to communicate to elasticsearch api in a .net application. This my application works fine with elastic search ho…

---

## [Memory Usage AND CPU Usage Not Work!](https://discuss.elastic.co/t/memory-usage-and-cpu-usage-not-work/91216)

<div class="topic-metadata">

**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\
**Replies:** 6\
**Last updated:** [July 5, 2017, 8:11am UTC](https://discuss.elastic.co/t/memory-usage-and-cpu-usage-not-work/91216 "2017-07-05T08:11:10Z")

</div>

Hi, I'm following example in https://www.elastic.co/guide/en/watcher/current/watching-marvel-data.html#watching-memory-usage, I'm currently using elasticsearch, kibana and metricbeat version 5.4.1 setup on windows10. I c…

---

## [Opinions on KStem vs Porter Stem?](https://discuss.elastic.co/t/opinions-on-kstem-vs-porter-stem/13816)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 6\
**Last updated:** [April 14, 2016, 6:05am UTC](https://discuss.elastic.co/t/opinions-on-kstem-vs-porter-stem/13816 "2016-04-14T06:05:12Z")

</div>

I'm thinking of switching from the Porter stemmer to KStem for English because it seems to do a better job for my rather limited test set. Does anyone have an opinion on which stemmer seems to do a better job? Than…

---

## [One of the nodes disk usage is almost full](https://discuss.elastic.co/t/one-of-the-nodes-disk-usage-is-almost-full/318977)

<div class="topic-metadata">

**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\
**Replies:** 8\
**Last updated:** [November 29, 2022, 2:44pm UTC](https://discuss.elastic.co/t/one-of-the-nodes-disk-usage-is-almost-full/318977 "2022-11-29T14:44:39Z")

</div>

We have 3 nodes in an elasticsearch cluster on version: 6.8.21 All of them are master and data nodes. Today, we observed that one node disk usage is almost full (88%), while the others are only 13%, 25% used. curl -s …

---

## [Kibana 7.16.3 issues with connecting to elasticsearch](https://discuss.elastic.co/t/kibana-7-16-3-issues-with-connecting-to-elasticsearch/295715)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 2\
**Last updated:** [January 29, 2022, 6:17pm UTC](https://discuss.elastic.co/t/kibana-7-16-3-issues-with-connecting-to-elasticsearch/295715 "2022-01-29T18:17:11Z")

</div>

Hello, today I upgraded ES to the latest version and kibana, I see in logs that ES cannot be detected: "message":"Error \[ProductNotSupportedSecurityError\]: The client is unable to verify that the server is Elasticsea…

---

## [Skip SSL verify when enroll metricbeat](https://discuss.elastic.co/t/skip-ssl-verify-when-enroll-metricbeat/184113)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 2:44am UTC](https://discuss.elastic.co/t/skip-ssl-verify-when-enroll-metricbeat/184113 "2019-06-27T02:44:06Z")

</div>

I'm using ELK 7.1.1 and i current testing metricbeat erroll management center. But my kibana is using self cert so when i enroll beat i got error : Error while enrolling: fail to execute the HTTP POST request: Post ht…

---

## [Beginner: How to index json file into Elasticsearch](https://discuss.elastic.co/t/beginner-how-to-index-json-file-into-elasticsearch/160917)

<div class="topic-metadata">

**Author:** [@ESBeginner](https://discuss.elastic.co/u/ESBeginner)\
**Replies:** 1\
**Last updated:** [December 14, 2018, 4:21pm UTC](https://discuss.elastic.co/t/beginner-how-to-index-json-file-into-elasticsearch/160917 "2018-12-14T16:21:17Z")

</div>

Hello, I have a json file with about 1000 documents and I want to index this file, but I really do not understand how I should do it. I already googled and saw things about the Bulk API but it does not work out for me o…

---

## [How to filter kafka topics based on their names in logstash conf in the output section using if-else condition for elastic search output](https://discuss.elastic.co/t/how-to-filter-kafka-topics-based-on-their-names-in-logstash-conf-in-the-output-section-using-if-else-condition-for-elastic-search-output/111863)

<div class="topic-metadata">

**Author:** [@KUMAR\_SATYAM](https://discuss.elastic.co/u/KUMAR_SATYAM)\
**Replies:** 1\
**Last updated:** [December 15, 2017, 10:43am UTC](https://discuss.elastic.co/t/how-to-filter-kafka-topics-based-on-their-names-in-logstash-conf-in-the-output-section-using-if-else-condition-for-elastic-search-output/111863 "2017-12-15T10:43:59Z")

</div>

I am using the new version of Kafka plugin for elkstack input { kafka { bootstrap\_servers =\> "1XX.X.X.X:9092" topics =\> \["test\_all\_logs","test\_apiserver\_logs","test\_orchestrator\_logs","test\_credentialstore\_log…

---

## [Copy\_to not copying data in nested object type](https://discuss.elastic.co/t/copy-to-not-copying-data-in-nested-object-type/74516)

<div class="topic-metadata">

**Author:** [@Amit\_Sharma1](https://discuss.elastic.co/u/Amit_Sharma1)\
**Replies:** 0\
**Last updated:** [February 9, 2017, 2:14pm UTC](https://discuss.elastic.co/t/copy-to-not-copying-data-in-nested-object-type/74516 "2017-02-09T14:14:57Z")

</div>

copy\_to is not storing data as nested object although jobActivity is defined as nested type. If we directly aggregate on jobActivity.jobTitle field. it returns the data but nested aggregation query doesn't return any re…

---

## [Filebeat / slow mysql log](https://discuss.elastic.co/t/filebeat-slow-mysql-log/119973)

<div class="topic-metadata">

**Author:** [@rosselg](https://discuss.elastic.co/u/rosselg)\
**Replies:** 5\
**Last updated:** [February 20, 2018, 10:53am UTC](https://discuss.elastic.co/t/filebeat-slow-mysql-log/119973 "2018-02-20T10:53:32Z")

</div>

Hi there, I'm trying to ingest the "mysql slow log" into my elasticsearch. As my mysql version doesn't match the PATTERN defined in /usr/share/filebeat/module/mysql/slowlog/ingest/pipeline.json, I've modified the patte…

---

## [Date Range filter not working properly](https://discuss.elastic.co/t/date-range-filter-not-working-properly/74170)

<div class="topic-metadata">

**Author:** [@poooh](https://discuss.elastic.co/u/poooh)\
**Replies:** 5\
**Last updated:** [February 7, 2017, 12:23pm UTC](https://discuss.elastic.co/t/date-range-filter-not-working-properly/74170 "2017-02-07T12:23:38Z")

</div>

Hi, I've been getting wrong results in range filters in python. The code and mapping are as below:- Code1:- GET \_search { "query": { "filtered": { "filter": { "…

---

## [Script field along with all the other fields using Painless](https://discuss.elastic.co/t/script-field-along-with-all-the-other-fields-using-painless/296384)

<div class="topic-metadata">

**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\
**Replies:** 3\
**Last updated:** [February 6, 2022, 12:10pm UTC](https://discuss.elastic.co/t/script-field-along-with-all-the-other-fields-using-painless/296384 "2022-02-06T12:10:19Z")

</div>

I have data indexed as follows: {"index":{"\_id":1}} {"first":"johnny","last":"gaudreau","goals":\[9,27,1\],"born":"1993/08/13"} {"index":{"\_id":2}} {"first":"sean","last":"monohan","goals":\[7,54,26\],"born":"1994/10/12"} W…

---

## [Using php client bulk() - ERROR: 400 parse\_exception: Failed to derive xcontent](https://discuss.elastic.co/t/using-php-client-bulk-error-400-parse-exception-failed-to-derive-xcontent/47557)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 3\
**Last updated:** [April 17, 2016, 5:08am UTC](https://discuss.elastic.co/t/using-php-client-bulk-error-400-parse-exception-failed-to-derive-xcontent/47557 "2016-04-17T05:08:16Z")

</div>

Using the 2.0 php client bulk() I'm getting "ERROR: 400 parse\_exception: Failed to derive xcontent" on some documents. The linked document below consistently hits this exception. My ES instance is running 2.2.0. Before t…

---

## [Installing plugins with custom docker image warning message](https://discuss.elastic.co/t/installing-plugins-with-custom-docker-image-warning-message/113490)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 2\
**Last updated:** [January 2, 2018, 1:55pm UTC](https://discuss.elastic.co/t/installing-plugins-with-custom-docker-image-warning-message/113490 "2018-01-02T13:55:18Z")

</div>

Here is my Dockerfile... FROM docker.elastic.co/elasticsearch/elasticsearch-platinum:6.1.1 USER root RUN whoami RUN /usr/share/elasticsearch/bin/elasticsearch-plugin install --batch repository-s3 RUN /usr/share/ela…

---

## [Logstash File Input Plugin Read Mode Not Loading Data](https://discuss.elastic.co/t/logstash-file-input-plugin-read-mode-not-loading-data/165869)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 3\
**Last updated:** [January 27, 2019, 3:14am UTC](https://discuss.elastic.co/t/logstash-file-input-plugin-read-mode-not-loading-data/165869 "2019-01-27T03:14:10Z")

</div>

I'm having trouble getting Logstash to load data to Elasticsearch when using read mode. input { file { mode =\> "read" path =\> \["/var/log/PASS/analyses/\*"\] sincedb\_path =\> \["/var/lib/logstash/file-analysis\_sincedb…

---

## [Displaying @datetime in UTC format from Elasticsearch database rollup using Kibana](https://discuss.elastic.co/t/displaying-datetime-in-utc-format-from-elasticsearch-database-rollup-using-kibana/194289)

<div class="topic-metadata">

**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\
**Replies:** 7\
**Last updated:** [August 8, 2019, 3:29pm UTC](https://discuss.elastic.co/t/displaying-datetime-in-utc-format-from-elasticsearch-database-rollup-using-kibana/194289 "2019-08-08T15:29:34Z")

</div>

Greetings! We are using Elasticsearch rollups of metricbeat data using Kibana. Instead of @datetime we would like to see the date in UTC. I cannot find an option to do this in Kibana. We just need to convert the field "@…

---

## [Extract strings from one field](https://discuss.elastic.co/t/extract-strings-from-one-field/24637)

<div class="topic-metadata">

**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\
**Replies:** 2\
**Last updated:** [June 30, 2015, 10:08pm UTC](https://discuss.elastic.co/t/extract-strings-from-one-field/24637 "2015-06-30T22:08:45Z")

</div>

After successfully parsing out this field from my log files, I want to extract information from this field and store it as a separate field, I looked through lots of the filters and didn't find one that serves this purpo…

---

## [Security rules failing (timed out) all the time](https://discuss.elastic.co/t/security-rules-failing-timed-out-all-the-time/285681)

<div class="topic-metadata">

**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 5\
**Last updated:** [November 1, 2021, 4:05pm UTC](https://discuss.elastic.co/t/security-rules-failing-timed-out-all-the-time/285681 "2021-11-01T16:05:27Z")

</div>

I have a testing Elasticsearch (7.14.0 before and 7.15.0 now) where I'm sending filebeat's Threat Intel data (50,000 documents on the filebeat-\* index) and a Firewall data index with less than 1,000,000 messages. I've c…

---

## [Using the exclude\_lines option](https://discuss.elastic.co/t/using-the-exclude-lines-option/40779)

<div class="topic-metadata">

**Author:** [@yammy](https://discuss.elastic.co/u/yammy)\
**Replies:** 5\
**Last updated:** [July 5, 2016, 10:01am UTC](https://discuss.elastic.co/t/using-the-exclude-lines-option/40779 "2016-07-05T10:01:01Z")

</div>

According to the documenation I should be able to use the "exclude\_lines" option to filter specific events. I've setup my filebeat.yml to exclude any entries that start with my load balancer IP, but they still forward …

---

## [Logstash filter duration calculation](https://discuss.elastic.co/t/logstash-filter-duration-calculation/58035)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 2\
**Last updated:** [August 16, 2016, 8:15pm UTC](https://discuss.elastic.co/t/logstash-filter-duration-calculation/58035 "2016-08-16T20:15:14Z")

</div>

in my log, each log line has action start time and action end time formatted as HHmmss. I used the following code in the logstash filter. It works well if the action lasts during the same day. However, it runs into probl…

---

## [Not Solved!? Sync issues? with bulk create and threads exceeded](https://discuss.elastic.co/t/not-solved-sync-issues-with-bulk-create-and-threads-exceeded/146079)

<div class="topic-metadata">

**Author:** [@esmattdawson](https://discuss.elastic.co/u/esmattdawson)\
**Replies:** 8\
**Last updated:** [August 30, 2018, 5:26am UTC](https://discuss.elastic.co/t/not-solved-sync-issues-with-bulk-create-and-threads-exceeded/146079 "2018-08-30T05:26:30Z")

</div>

elasticsearch version 6.3.2 Cluster: 3 master + data nodes Index: 1 shard + 2 replicas, 10 second flush rate When I perform a bulk create over many indexes sometimes I get a bulk threads exceeded exception, which is …

---

## [Delete by Query - Based on time](https://discuss.elastic.co/t/delete-by-query-based-on-time/117456)

<div class="topic-metadata">

**Author:** [@ganeshmuralidhar](https://discuss.elastic.co/u/ganeshmuralidhar)\
**Replies:** 4\
**Last updated:** [January 30, 2018, 8:18am UTC](https://discuss.elastic.co/t/delete-by-query-based-on-time/117456 "2018-01-30T08:18:03Z")

</div>

Hello, I am trying to delete data from Elastic Search based on timestamp. I could not find a way to do it after giving multiple tries with the below: POST index\_name/\_delete\_by\_query { "query": { "range" : { "@time…

---

## [SQL WHERE clause usage](https://discuss.elastic.co/t/sql-where-clause-usage/170709)

<div class="topic-metadata">

**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\
**Replies:** 2\
**Last updated:** [March 6, 2019, 5:05am UTC](https://discuss.elastic.co/t/sql-where-clause-usage/170709 "2019-03-06T05:05:57Z")

</div>

Hello, I am trying to understand basic usage of the WHERE clause in Elasicsearch SQL queries. I loaded the shakespeare dataset from https://www.elastic.co/guide/en/kibana/current/tutorial-load-dataset.html While I am …

---

## [Wrong returned Values on simple SUM-Aggregation](https://discuss.elastic.co/t/wrong-returned-values-on-simple-sum-aggregation/156690)

<div class="topic-metadata">

**Author:** [@open7](https://discuss.elastic.co/u/open7)\
**Replies:** 2\
**Last updated:** [November 22, 2018, 3:52pm UTC](https://discuss.elastic.co/t/wrong-returned-values-on-simple-sum-aggregation/156690 "2018-11-22T15:52:21Z")

</div>

The expected Result is 149314.2, the returned wrong Result is 149314.203125 What could be the Problem? This is my Query: POST sap-lo-po/\_search { "query": { "match": { "EBELN": "4500017596" } }, "aggs": { "Bes…

---

## [Which filter query is good as per performance wise?](https://discuss.elastic.co/t/which-filter-query-is-good-as-per-performance-wise/140078)

<div class="topic-metadata">

**Author:** [@Shrimp-Fried-Rice](https://discuss.elastic.co/u/Shrimp-Fried-Rice)\
**Replies:** 6\
**Last updated:** [July 18, 2018, 10:39am UTC](https://discuss.elastic.co/t/which-filter-query-is-good-as-per-performance-wise/140078 "2018-07-18T10:39:59Z")

</div>

hi, i am new to elasticsearch, trying to implement it in place of mysql full text search. i am confused in these 3 queries as which one is better over another and why ? i am trying to to use filter and without use filt…

---

## [Kibana blank after deleting index](https://discuss.elastic.co/t/kibana-blank-after-deleting-index/75773)

<div class="topic-metadata">

**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\
**Replies:** 6\
**Last updated:** [February 20, 2017, 7:52pm UTC](https://discuss.elastic.co/t/kibana-blank-after-deleting-index/75773 "2017-02-20T19:52:39Z")

</div>

I deleted the filebeat index on accident from kibana browser and now it is coming up blank with a 404 error. I tried to delete the cache, update kibana and es, and reinstall the default templates, but nothing has worked.…

---

## [Script having issue with long data type](https://discuss.elastic.co/t/script-having-issue-with-long-data-type/68795)

<div class="topic-metadata">

**Author:** [@Sree2k](https://discuss.elastic.co/u/Sree2k)\
**Replies:** 5\
**Last updated:** [December 13, 2016, 8:16pm UTC](https://discuss.elastic.co/t/script-having-issue-with-long-data-type/68795 "2016-12-13T20:16:42Z")

</div>

Hello, I'm kind of new to elasticsearch. I had a question regarding using transport client ( v5.0.1 and my elasticsearch cluster is also at 5.0.1). I'm seeing this error when I try to call update operation. My docum…

---

## [Kafka publish failed with: kafka: client has run out of available brokers to talk to (Is your cluster reachable?)](https://discuss.elastic.co/t/kafka-publish-failed-with-kafka-client-has-run-out-of-available-brokers-to-talk-to-is-your-cluster-reachable/274805)

<div class="topic-metadata">

**Author:** [@suyannam](https://discuss.elastic.co/u/suyannam)\
**Replies:** 1\
**Last updated:** [June 10, 2021, 2:56am UTC](https://discuss.elastic.co/t/kafka-publish-failed-with-kafka-client-has-run-out-of-available-brokers-to-talk-to-is-your-cluster-reachable/274805 "2021-06-10T02:56:08Z")

</div>

Dear friends, need your help. For last couple of days stuck with below error. we are trying to send application logs to kafka, below is the kafka output config. We want to use kerberose auth type. I am not sure whether …

---

## [Error cannot execute binary file when trying to run elasticsearch after installation](https://discuss.elastic.co/t/error-cannot-execute-binary-file-when-trying-to-run-elasticsearch-after-installation/210934)

<div class="topic-metadata">

**Author:** [@CrisRus](https://discuss.elastic.co/u/CrisRus)\
**Replies:** 1\
**Last updated:** [December 9, 2019, 1:54pm UTC](https://discuss.elastic.co/t/error-cannot-execute-binary-file-when-trying-to-run-elasticsearch-after-installation/210934 "2019-12-09T13:54:26Z")

</div>

Hello, when trying to install Elasticsearch 7.5, I get the following error mentioned in the subject I have just followed the instructions here: https://www.elastic.co/guide/en/elastic-stack-get-started/7.5/get-started…

---

## [Individually update a large amount of documents with the Python DSL](https://discuss.elastic.co/t/individually-update-a-large-amount-of-documents-with-the-python-dsl/189997)

<div class="topic-metadata">

**Author:** [@gbosetti](https://discuss.elastic.co/u/gbosetti)\
**Replies:** 1\
**Last updated:** [July 20, 2019, 8:17pm UTC](https://discuss.elastic.co/t/individually-update-a-large-amount-of-documents-with-the-python-dsl/189997 "2019-07-20T20:17:52Z")

</div>

Hi! I'm trying to use the UpdateByQuery to update a property of a large amount of documents. I got the new values by processing them with python, and now I need to update their values in the indexes. As each document has…

---

## ["type" : "mapper\_parsing\_exception"](https://discuss.elastic.co/t/type-mapper-parsing-exception/79118)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [March 18, 2017, 7:07am UTC](https://discuss.elastic.co/t/type-mapper-parsing-exception/79118 "2017-03-18T07:07:26Z")

</div>

Hi.....all, i am new to elasticsearch Here is my code for creating index PUT sat1 { "mappings": { "sun": { "properties": { "location": { "lat\_lon": true, "geohash\_prefix": true, "type": …

---

## [Why does logstash send RST rather than FIN on client\_inactivity\_timeout](https://discuss.elastic.co/t/why-does-logstash-send-rst-rather-than-fin-on-client-inactivity-timeout/89877)

<div class="topic-metadata">

**Author:** [@jgoff](https://discuss.elastic.co/u/jgoff)\
**Replies:** 0\
**Last updated:** [June 19, 2017, 3:50am UTC](https://discuss.elastic.co/t/why-does-logstash-send-rst-rather-than-fin-on-client-inactivity-timeout/89877 "2017-06-19T03:50:31Z")

</div>

hi all Logstash 5.4.1, filebeat 5.4.1, ubuntu, development machines (no other traffic beyond the below) I have seen a number of threads about this log message in filebeat (port 8998 is the logstash port), sometimes c…

---

## [Embed Kibana graphics in enduser projects](https://discuss.elastic.co/t/embed-kibana-graphics-in-enduser-projects/482)

<div class="topic-metadata">

**Author:** [@karussell](https://discuss.elastic.co/u/karussell)\
**Replies:** 2\
**Last updated:** [May 14, 2015, 9:43pm UTC](https://discuss.elastic.co/t/embed-kibana-graphics-in-enduser-projects/482 "2015-05-14T21:43:44Z")

</div>

Hi, I'm fairly new to kibana (but not to ElasticSearch) and always implemented charts myself. But as kibana looks really powerful I would like to 'export' certain charts to the dashboard of my customers. Is there a blo…

---

## [Remove deleted documents from large segments](https://discuss.elastic.co/t/remove-deleted-documents-from-large-segments/48952)

<div class="topic-metadata">

**Author:** [@muzzlebeat](https://discuss.elastic.co/u/muzzlebeat)\
**Replies:** 3\
**Last updated:** [May 2, 2016, 8:32pm UTC](https://discuss.elastic.co/t/remove-deleted-documents-from-large-segments/48952 "2016-05-02T20:32:31Z")

</div>

Only when segments merge, deleted documents are actually cleaned up. But when segment size goes beyond a limit (default: 5 GB), segments are no longer merged. In this case, how do you suggest forced removal of deleted do…

---

## [Multi Valued fields in ElasticSearch](https://discuss.elastic.co/t/multi-valued-fields-in-elasticsearch/8193)

<div class="topic-metadata">

**Author:** [@Saurabh](https://discuss.elastic.co/u/Saurabh)\
**Replies:** 8\
**Last updated:** [November 14, 2012, 1:29pm UTC](https://discuss.elastic.co/t/multi-valued-fields-in-elasticsearch/8193 "2012-11-14T13:29:41Z")

</div>

Hi, How to create multi-valued fields in ElasticSearch, something like below: { "name" : "abc", "favcolor" : "blue", "favcolor" : "black" } I know that it can be created as { "name" : "abc", "favcolor…

---

## [ElasticSearch 2.0 и 2 вопроса Игорю. :)](https://discuss.elastic.co/t/elasticsearch-2-0-2/33568)

<div class="topic-metadata">

**Author:** [@Stan](https://discuss.elastic.co/u/Stan)\
**Replies:** 6\
**Last updated:** [November 3, 2015, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-2-0-2/33568 "2015-11-03T18:15:23Z")

</div>

Игорь, добрый вечер! Сейчас вышел Elasticsearch 2.0, и я начинаю думать над вопросами миграции. Натолкнулся на два концептуальных вопроса, которые хотелось бы понять. мне кажется, в рускоязычном сообществе Вы единствен…

---

## [How to show Y axis in percentage instead of count in vertical bar chart](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 5\
**Last updated:** [December 7, 2021, 5:15pm UTC](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778 "2021-12-07T17:15:43Z")

</div>

Hi, I am using a vertical bar chart for data visualization. I want percentage instead of count in Y-axis. I checked multiple options but was unable to get through it, Viz Pic-

---

## [How Query string pattern in kibana in simple syntax query space](https://discuss.elastic.co/t/how-query-string-pattern-in-kibana-in-simple-syntax-query-space/179773)

<div class="topic-metadata">

**Author:** [@adg](https://discuss.elastic.co/u/adg)\
**Replies:** 1\
**Last updated:** [May 10, 2019, 2:32pm UTC](https://discuss.elastic.co/t/how-query-string-pattern-in-kibana-in-simple-syntax-query-space/179773 "2019-05-10T14:32:24Z")

</div>

Currently, we are using ELK stack for analysis of access logs but we are not able to query specific pattern in field ex in URL field there I have to filter only those URL how to have /topic/something-something/public …

---

## [Which is the best way of disabling IDF?](https://discuss.elastic.co/t/which-is-the-best-way-of-disabling-idf/62647)

<div class="topic-metadata">

**Author:** [@drount](https://discuss.elastic.co/u/drount)\
**Replies:** 4\
**Last updated:** [October 12, 2016, 7:55am UTC](https://discuss.elastic.co/t/which-is-the-best-way-of-disabling-idf/62647 "2016-10-12T07:55:00Z")

</div>

Hello, in Elasticsearch documentation there are references on how to disable TF-IDF. However, I need to just disable IDF (while keeping TF, queryNorm, ...) Which would be the best way of archiving that? Thank you.

---

## [Upgraded Kibana from 7.12 to 7.14 and now it's broken](https://discuss.elastic.co/t/upgraded-kibana-from-7-12-to-7-14-and-now-its-broken/282515)

<div class="topic-metadata">

**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\
**Replies:** 8\
**Last updated:** [August 27, 2021, 5:38pm UTC](https://discuss.elastic.co/t/upgraded-kibana-from-7-12-to-7-14-and-now-its-broken/282515 "2021-08-27T17:38:57Z")

</div>

Bottom line up front: I’ve broken my Kibana by attempting an upgrade from 7.12 to 7.14. Details: We have an Elastic Stack installation in a development sandbox environment. The first version of the Stack components ins…

---

## [Display issue on CEF (Chrome Embedded)](https://discuss.elastic.co/t/display-issue-on-cef-chrome-embedded/35379)

<div class="topic-metadata">

**Author:** [@Numa\_NC](https://discuss.elastic.co/u/Numa_NC)\
**Replies:** 6\
**Last updated:** [December 20, 2016, 2:20pm UTC](https://discuss.elastic.co/t/display-issue-on-cef-chrome-embedded/35379 "2016-12-20T14:20:00Z")

</div>

Hello, After 4.2 upgrade the dashboard are not displayed correctly on Chrome Embedded (included in Xibo application) The error displayed is the following: Fatal Error: Uncaught TypeError: undefined is not a function (h…

---

## [One billion data from MySql imported into ElasticSearch, how ES performance？](https://discuss.elastic.co/t/one-billion-data-from-mysql-imported-into-elasticsearch-how-es-performance/22461)

<div class="topic-metadata">

**Author:** [@Zhantong\_Mou](https://discuss.elastic.co/u/Zhantong_Mou)\
**Replies:** 6\
**Last updated:** [March 3, 2015, 8:30am UTC](https://discuss.elastic.co/t/one-billion-data-from-mysql-imported-into-elasticsearch-how-es-performance/22461 "2015-03-03T08:30:46Z")

</div>

I have one billion data in mysql. the data of mysql is like name, ID cards, phone numbers. They are almost unique. Whether the ElasticSearch based on Inverted index can ensure the speed of queries? Can we justify …

---

## [Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters/42090)

<div class="topic-metadata">

**Author:** [@Florin\_Andrei](https://discuss.elastic.co/u/Florin_Andrei)\
**Replies:** 0\
**Last updated:** [February 18, 2016, 1:59am UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters/42090 "2016-02-18T01:59:52Z")

</div>

ES 2.2.0 I get this error: # curl -XPUT http://localhost:9200/vendnext\_new\_no\_auth\_index/ -d @./vendnext\_new\_no\_auth\_index.config.json {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"Root mapping…

---

## [Cohort analysis using the query DSL](https://discuss.elastic.co/t/cohort-analysis-using-the-query-dsl/23285)

<div class="topic-metadata">

**Author:** [@Christopher\_Blasnik](https://discuss.elastic.co/u/Christopher_Blasnik)\
**Replies:** 3\
**Last updated:** [April 21, 2015, 8:04am UTC](https://discuss.elastic.co/t/cohort-analysis-using-the-query-dsl/23285 "2015-04-21T08:04:21Z")

</div>

Dear all! I am trying to perform a cohort analysis with Elasticsearch. For a quick primer on what cohort analysis actually is, please take a look at this wikipedia article (which IMO does not carry a lot of inform…

---

## [Index UUIDs in snapshots](https://discuss.elastic.co/t/index-uuids-in-snapshots/77175)

<div class="topic-metadata">

**Author:** [@eirc](https://discuss.elastic.co/u/eirc)\
**Replies:** 4\
**Last updated:** [March 3, 2017, 1:15pm UTC](https://discuss.elastic.co/t/index-uuids-in-snapshots/77175 "2017-03-03T13:15:39Z")

</div>

Hello, we upgraded to ES 5 and we are trying to check the disk usage of our snapshots by index. The new scheme of using index UUIDs as folder names makes it impossible for us to know what folder corresponds to what ind…

---

## [\[10:20\] unable to parse BaseAggregationBuilder with name \[query\]: parser not found](https://discuss.elastic.co/t/10-20-unable-to-parse-baseaggregationbuilder-with-name-query-parser-not-found/177220)

<div class="topic-metadata">

**Author:** [@Sagar\_Kayasth](https://discuss.elastic.co/u/Sagar_Kayasth)\
**Replies:** 1\
**Last updated:** [April 17, 2019, 7:49am UTC](https://discuss.elastic.co/t/10-20-unable-to-parse-baseaggregationbuilder-with-name-query-parser-not-found/177220 "2019-04-17T07:49:13Z")

</div>

Hi everyone, I'm facing a strange issue when performing a search on an nested field on multiple fields with aggregation. { "size": 0, "aggs": { "Attributes": { "nested": { "path": "Attributes" }, "aggs": { "Att…

---

## [Elasticsearch 6.6.0 geo\_shape query on old documents not working after upgrade](https://discuss.elastic.co/t/elasticsearch-6-6-0-geo-shape-query-on-old-documents-not-working-after-upgrade/166962)

<div class="topic-metadata">

**Author:** [@oystein.elvik](https://discuss.elastic.co/u/oystein.elvik)\
**Replies:** 3\
**Last updated:** [February 6, 2019, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-6-6-0-geo-shape-query-on-old-documents-not-working-after-upgrade/166962 "2019-02-06T07:36:23Z")

</div>

Hi, I just tried to upgrade from elasticsearch 6.2.3 to elasticsearch 6.6.0. After upgrade i find that i get no hits of older documents when using geo\_shape query. I get a match for documents created after upgrade. Th…

[Previous page](https://discuss.elastic.co/top.md?page=568&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=570&per_page=50&period=all)
