# Top **URL:** https://discuss.elastic.co/top.md?page=571&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 572 --- ## [Elasticsearch nodes did not elect master even after failure to discover master](https://discuss.elastic.co/t/elasticsearch-nodes-did-not-elect-master-even-after-failure-to-discover-master/32790)
**Author:** [@Vachan.Da](https://discuss.elastic.co/u/Vachan.Da)\ **Replies:** 0\ **Last updated:** [October 22, 2015, 4:42pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-did-not-elect-master-even-after-failure-to-discover-master/32790 "2015-10-22T16:42:17Z")
We recently faced an AWS network outage on one of the 3 nodes in our ES cluster. The node ES2 announced itself as the master and added the two nodes ES1 and ES3 respectively, to the cluster. The other nodes though, faile… --- ## [No cached mapping for this field --\> APM](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-apm/151196)
**Author:** [@umapati](https://discuss.elastic.co/u/umapati)\ **Replies:** 3\ **Last updated:** [October 12, 2018, 6:24pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-apm/151196 "2018-10-12T18:24:24Z")
I am using APM to monitor my node.js application. In Kibana, I see some fields with the error : " no cached mapping for this field". As a result, I cannot run any analytics or visualization on these fields. example of f… --- ## [How to replace Security Certificate sign by Elastic CA](https://discuss.elastic.co/t/how-to-replace-security-certificate-sign-by-elastic-ca/302840)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [April 22, 2022, 6:30pm UTC](https://discuss.elastic.co/t/how-to-replace-security-certificate-sign-by-elastic-ca/302840 "2022-04-22T18:30:34Z")
I had created certificate with following command in past. and it is going to expire now. bin/elasticsearch-certutil cert -out /etc/elasticsearch/config/elastic-certificates.p12 -pass "" I would like to replace that bef… --- ## [ES-5.0.0- PHP aggregations](https://discuss.elastic.co/t/es-5-0-0-php-aggregations/67626)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 4\ **Last updated:** [December 1, 2016, 6:07am UTC](https://discuss.elastic.co/t/es-5-0-0-php-aggregations/67626 "2016-12-01T06:07:39Z")
hi, I want to do aggregation with PHP and ES-5.0.0. my JSON CODES: GET titubb56k/ihale/\_search { "size" : 0, "query": { "match": { "IdareKodu": "11340073" } }, "aggs":{ "group\_by\_state":{… --- ## [Region Map Polygon Line Widths and Legend background Customization](https://discuss.elastic.co/t/region-map-polygon-line-widths-and-legend-background-customization/107088)
**Author:** [@drfuka](https://discuss.elastic.co/u/drfuka)\ **Replies:** 6\ **Last updated:** [December 5, 2017, 7:45pm UTC](https://discuss.elastic.co/t/region-map-polygon-line-widths-and-legend-background-customization/107088 "2017-12-05T19:45:41Z")
While having fun with RegionMaps with mapserver self hosted geojson requests, I have found a need to alter/remove the line width for the edges of the polygons. Is there any info on how to remove the polygon borders, or c… --- ## [Persistence on ES masters](https://discuss.elastic.co/t/persistence-on-es-masters/73175)
**Author:** [@Yaron\_Idan](https://discuss.elastic.co/u/Yaron_Idan)\ **Replies:** 6\ **Last updated:** [January 30, 2017, 11:55am UTC](https://discuss.elastic.co/t/persistence-on-es-masters/73175 "2017-01-30T11:55:54Z")
Hello, We are running an ES cluster as docker containers running on top of a kubernetes cluster. Recently we needed to restart the master node, and upon doing so lost the template we created for our indices. I have launc… --- ## [Kibana as Business Intelligence?](https://discuss.elastic.co/t/kibana-as-business-intelligence/45388)
**Author:** [@colonsorto](https://discuss.elastic.co/u/colonsorto)\ **Replies:** 1\ **Last updated:** [March 24, 2016, 7:15pm UTC](https://discuss.elastic.co/t/kibana-as-business-intelligence/45388 "2016-03-24T19:15:12Z")
Hello, I hope this should be the right forum if not, sorry for the inconvenience. I'm in research for a platform that fulfill my needs for a Business Intelligence and ETL. What we do have normally: MySql 5.5 database… --- ## [Delimiter for FILEBEAT?](https://discuss.elastic.co/t/delimiter-for-filebeat/92074)
**Author:** [@ahongyun](https://discuss.elastic.co/u/ahongyun)\ **Replies:** 5\ **Last updated:** [July 14, 2017, 2:56pm UTC](https://discuss.elastic.co/t/delimiter-for-filebeat/92074 "2017-07-14T14:56:31Z")
I have been using logstash to ship logs using the following config file { path =\> "/appdir/logs/\*\\.log\\.xml" type =\> "log.xml" delimiter =\> "\" I am trying to shift to use Filebeat but i have issues… --- ## [Returning a combination of parent and child fields](https://discuss.elastic.co/t/returning-a-combination-of-parent-and-child-fields/8841)
**Author:** [@phill](https://discuss.elastic.co/u/phill)\ **Replies:** 3\ **Last updated:** [September 7, 2012, 5:52pm UTC](https://discuss.elastic.co/t/returning-a-combination-of-parent-and-child-fields/8841 "2012-09-07T17:52:56Z")
Can I build a search request that can return a combination of the parent and child fields? I was thinking of using a has\_child query (filter?) or top\_children query which I believe I can work into getting me the r… --- ## [Host name does not match the certificate](https://discuss.elastic.co/t/host-name-does-not-match-the-certificate/269242)
**Author:** [@Ajith\_07](https://discuss.elastic.co/u/Ajith_07)\ **Replies:** 2\ **Last updated:** [April 9, 2021, 6:46pm UTC](https://discuss.elastic.co/t/host-name-does-not-match-the-certificate/269242 "2021-04-09T18:46:46Z")
Hi, I am facing Host name does not match the certificate issue in ES. I tried checking in ES forum and some has asked to disable the CN name check at code level but in the same thread we also see that its not recommende… --- ## [Kibana supports arrays of objects=](https://discuss.elastic.co/t/kibana-supports-arrays-of-objects/39892)
**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\ **Replies:** 2\ **Last updated:** [January 29, 2016, 9:03pm UTC](https://discuss.elastic.co/t/kibana-supports-arrays-of-objects/39892 "2016-01-29T21:03:36Z")
Hi! I would like to know if the new version of Kibana already supports arrays of objects and if it does what is the right mapping for Elasticsearch? Thanks, Luís Carvalho --- ## [Very slow query](https://discuss.elastic.co/t/very-slow-query/123414)
**Author:** [@sasankvemuri](https://discuss.elastic.co/u/sasankvemuri)\ **Replies:** 7\ **Last updated:** [March 12, 2018, 3:34am UTC](https://discuss.elastic.co/t/very-slow-query/123414 "2018-03-12T03:34:16Z")
I have been trying to search and retrieve results based on 3 user input values and find the closest value that satisfies these three conditions. The doc has about 30 million rows and the query takes about 10 seconds to e… --- ## [Add field from JSON -logstash filter](https://discuss.elastic.co/t/add-field-from-json-logstash-filter/84721)
**Author:** [@lherrera](https://discuss.elastic.co/u/lherrera)\ **Replies:** 1\ **Last updated:** [May 5, 2017, 2:08pm UTC](https://discuss.elastic.co/t/add-field-from-json-logstash-filter/84721 "2017-05-05T14:08:00Z")
Continuing the discussion from Add field from JSON / logstash filter: Hi there, I am having difficulty extracting a field from a log message using the json filter, I hope you can help. I am using logstash 5.2.1, the … --- ## [ES 6.5.2 Numeric range query returning results out of range](https://discuss.elastic.co/t/es-6-5-2-numeric-range-query-returning-results-out-of-range/162983)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 5\ **Last updated:** [January 9, 2019, 5:04pm UTC](https://discuss.elastic.co/t/es-6-5-2-numeric-range-query-returning-results-out-of-range/162983 "2019-01-09T17:04:04Z")
Hi Team, The field is definitely of the expected type which is float - this is the mapping of the index: ... "properties" : { .... "utc\_ts" : { "type" : "float" } } } }, The field values… --- ## [Taking Logstash input from Excel(.xlsx) file](https://discuss.elastic.co/t/taking-logstash-input-from-excel-xlsx-file/124029)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 1\ **Last updated:** [March 15, 2018, 5:37am UTC](https://discuss.elastic.co/t/taking-logstash-input-from-excel-xlsx-file/124029 "2018-03-15T05:37:40Z")
Hi, I am using ELK 5.5.0. Could anyone please help on how can we take input to Logstash(5.5.0) from an EXCEL file. --- ## [Exporting the logs to CSV file from a Saved search or Dashboard in Kibana version 5.4.1](https://discuss.elastic.co/t/exporting-the-logs-to-csv-file-from-a-saved-search-or-dashboard-in-kibana-version-5-4-1/128922)
**Author:** [@SelvaShanmugam](https://discuss.elastic.co/u/SelvaShanmugam)\ **Replies:** 3\ **Last updated:** [April 23, 2018, 6:56pm UTC](https://discuss.elastic.co/t/exporting-the-logs-to-csv-file-from-a-saved-search-or-dashboard-in-kibana-version-5-4-1/128922 "2018-04-23T18:56:50Z")
Hi I am using Kibana version 5.4.1 I would like query the logs based on a search term and export a few properties from the search results. e.g. Event Time and Event Description. I could search it from the Discover tab… --- ## [Basic License for Marvel - One Day expiry](https://discuss.elastic.co/t/basic-license-for-marvel-one-day-expiry/68672)
**Author:** [@Chandan\_PR](https://discuss.elastic.co/u/Chandan_PR)\ **Replies:** 5\ **Last updated:** [December 12, 2016, 9:27am UTC](https://discuss.elastic.co/t/basic-license-for-marvel-one-day-expiry/68672 "2016-12-12T09:27:39Z")
I am trying to generate a Basic License for the using it along with marvel. The license gets generated with only one day validity. Is it designed to be so or am I missing something here? Regards, Chandan --- ## [Cluster nodes don't see each other](https://discuss.elastic.co/t/cluster-nodes-dont-see-each-other/39033)
**Author:** [@Amelie](https://discuss.elastic.co/u/Amelie)\ **Replies:** 4\ **Last updated:** [January 15, 2016, 9:37am UTC](https://discuss.elastic.co/t/cluster-nodes-dont-see-each-other/39033 "2016-01-15T09:37:26Z")
Hi Guys, we have installed elasticsearch (version 1.1.2 with plugin head) on a server cluster consisting of 2 servers. The only configuration change was defining of 'cluster.name' and 'node.name'. Both instances are … --- ## [No feature for name \[\_status\]](https://discuss.elastic.co/t/no-feature-for-name--status/33503)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 1\ **Last updated:** [November 2, 2015, 11:01am UTC](https://discuss.elastic.co/t/no-feature-for-name--status/33503 "2015-11-02T11:01:32Z")
Hi, I'm having trouble accessing elasticsearch-head plugin. It throws me error : java.lang.IllegalArgumentException: No feature for name \[\_status\] I followed this ticket http://stackoverflow.com/questions/326615… --- ## [Kibana 8.19.11, 9.2.5 Security Update (ESA-2026-15)](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251 "2026-02-26T16:54:16Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) … --- ## [APM agent with RabbitMq listener](https://discuss.elastic.co/t/apm-agent-with-rabbitmq-listener/251584)
**Author:** [@nagabhushan.tr](https://discuss.elastic.co/u/nagabhushan.tr)\ **Replies:** 3\ **Last updated:** [October 12, 2020, 11:03am UTC](https://discuss.elastic.co/t/apm-agent-with-rabbitmq-listener/251584 "2020-10-12T11:03:19Z")
Kibana version: 7.9.1 Elasticsearch version: 7.9.1 APM Server version: 7.9.1 APM Agent language and version: Java agent 1.18.1 Browser version: Chrome 79.0.3945.130 Original install method (e.g. download page, yum, … --- ## [Logstash parsing only if run as root](https://discuss.elastic.co/t/logstash-parsing-only-if-run-as-root/61032)
**Author:** [@rwagner](https://discuss.elastic.co/u/rwagner)\ **Replies:** 3\ **Last updated:** [September 20, 2016, 5:40pm UTC](https://discuss.elastic.co/t/logstash-parsing-only-if-run-as-root/61032 "2016-09-20T17:40:17Z")
Hi guys, my logstash parsing logs only if run as root. Follow the video link showing the problem. Logstash version: yum list installed | grep logstash Repodata is over 2 weeks old. Install yum-cron? Or… --- ## [Possible to create a timeseries like timelion in table object?](https://discuss.elastic.co/t/possible-to-create-a-timeseries-like-timelion-in-table-object/102375)
**Author:** [@Cristian](https://discuss.elastic.co/u/Cristian)\ **Replies:** 5\ **Last updated:** [October 6, 2017, 4:39pm UTC](https://discuss.elastic.co/t/possible-to-create-a-timeseries-like-timelion-in-table-object/102375 "2017-10-06T16:39:11Z")
Hi All, I have created som pretty cool charts in timelion. Now, I would like to see the same data in a table instead but cant re-use the expression in the visualization part of kibana. Is there a possibility to create t… --- ## [Using bulk index](https://discuss.elastic.co/t/using-bulk-index/221246)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 12:37pm UTC](https://discuss.elastic.co/t/using-bulk-index/221246 "2020-03-03T12:37:58Z")
Hello everyone! I'm trying to index multiple documents using bulk with c#. Elastic version 7.5.1 Nest version 7.5.1 First I make a query excluding some fields, this query retun 1937 doc's. The response to the query … --- ## [How can we change background color of Dashboard](https://discuss.elastic.co/t/how-can-we-change-background-color-of-dashboard/35508)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 3\ **Last updated:** [November 25, 2015, 6:54am UTC](https://discuss.elastic.co/t/how-can-we-change-background-color-of-dashboard/35508 "2015-11-25T06:54:59Z")
Hi Guys, I am using Kibana 4.1.2. I have developed dashboard but dont know how to change background color as well as forecolor. Please guide. --- ## [ROW\_NUMBER in ES SQL](https://discuss.elastic.co/t/row-number-in-es-sql/257923)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 2:17pm UTC](https://discuss.elastic.co/t/row-number-in-es-sql/257923 "2020-12-08T14:17:34Z")
Hello, does the command ROW\_NUMBER() exist for ES SQL? When not, is there something equivalent to it? Can someone do an example, please? With best regards --- ## [ILM Rotate on Midnight](https://discuss.elastic.co/t/ilm-rotate-on-midnight/196279)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 5\ **Last updated:** [September 16, 2019, 7:01am UTC](https://discuss.elastic.co/t/ilm-rotate-on-midnight/196279 "2019-09-16T07:01:34Z")
Hi ES-Team! Is there now a possability to rotate on a specific time of the day. The most ideal would be that my indices rotate on a dayli basis on MIDNIGHT. ref to Lifecycle Management rotate on a daily basis Thx --- ## [Visualize arrays of values over time](https://discuss.elastic.co/t/visualize-arrays-of-values-over-time/89033)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 4\ **Last updated:** [June 12, 2017, 9:59pm UTC](https://discuss.elastic.co/t/visualize-arrays-of-values-over-time/89033 "2017-06-12T21:59:37Z")
I am trying to visualize the change of values over time with fields that are stored inside another field. I don’t know how to explain this using text so I will show you a screenshot of my data here and perhaps you can h… --- ## [Elasticsearch not allowing POST requests](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731)
**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 12:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731 "2019-09-03T00:22:46Z")
I've run into an issue that Elasticsearch is not allowing POST requests using Postman, even after adding the following: http.cors.enabled: true http.cors.allow-origin: "\*" http.cors.allow-methods: OPTIONS, HEAD, POST,… --- ## [Question about Spring Data Elasticsearch using Rest Client](https://discuss.elastic.co/t/question-about-spring-data-elasticsearch-using-rest-client/222886)
**Author:** [@aiden\_elastic](https://discuss.elastic.co/u/aiden_elastic)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 10:01am UTC](https://discuss.elastic.co/t/question-about-spring-data-elasticsearch-using-rest-client/222886 "2020-03-10T10:01:57Z")
I am trying to connect spring data elastic search with elastic search using Rest Client. This is pom.xml \ \ **Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 2\ **Last updated:** [June 17, 2016, 3:49pm UTC](https://discuss.elastic.co/t/disable-logging-on-the-java-transport-client/53170 "2016-06-17T15:49:23Z") Hi, I'm trying to disable logging on the JAVA client, so I don't have the below outputting. INFO: \[Stone\] modules \[\], plugins \[\], sites \[\] INFO: \[Alchemy\] modules \[\], plugins \[\], sites \[\] I've tried setting Log4jES… --- ## [Initial startup (bulk api) does not use my template](https://discuss.elastic.co/t/initial-startup-bulk-api-does-not-use-my-template/51318)
**Author:** [@remco](https://discuss.elastic.co/u/remco)\ **Replies:** 7\ **Last updated:** [May 17, 2017, 3:03pm UTC](https://discuss.elastic.co/t/initial-startup-bulk-api-does-not-use-my-template/51318 "2017-05-17T15:03:17Z")
Hi, I have installed ELK (eleasticsearch 2.3.1 logstash 2.3.0 and kibana 4.5). when the system is started and ELK is started for the first time (via linux services). Logstash mappings are not created with my own templa… --- ## [Functionbeat ignores default region - only deploys to us-east-1 (AWS)](https://discuss.elastic.co/t/functionbeat-ignores-default-region-only-deploys-to-us-east-1-aws/276002)
**Author:** [@Phuurl](https://discuss.elastic.co/u/Phuurl)\ **Replies:** 4\ **Last updated:** [July 18, 2021, 7:59pm UTC](https://discuss.elastic.co/t/functionbeat-ignores-default-region-only-deploys-to-us-east-1-aws/276002 "2021-07-18T19:59:38Z")
Hey, Trying to deploy the latest Functionbeat version (7.13.x), and it appears that Functionbeat is ignoring the AWS\_DEFAULT\_REGION environment variable when deploying - it always deploys to North Virginia (us-east-1) i… --- ## [Read Only Kibana Dashboard](https://discuss.elastic.co/t/read-only-kibana-dashboard/82255)
**Author:** [@tausif786](https://discuss.elastic.co/u/tausif786)\ **Replies:** 1\ **Last updated:** [April 13, 2017, 2:13pm UTC](https://discuss.elastic.co/t/read-only-kibana-dashboard/82255 "2017-04-13T14:13:15Z")
Hello Everyone, I have created a Dashboard in Kibana 5 and now i want to share with users such that they can only view the Dashboard and not make any changes to it. How can i achieve that? Which privileges should be assi… --- ## [Ruby filter plugin: how to indicate failure](https://discuss.elastic.co/t/ruby-filter-plugin-how-to-indicate-failure/165055)
**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\ **Replies:** 5\ **Last updated:** [January 22, 2019, 3:37pm UTC](https://discuss.elastic.co/t/ruby-filter-plugin-how-to-indicate-failure/165055 "2019-01-22T15:37:41Z")
Hi, currently I use a small Ruby filter script to request a REST API and get some data. If valid data is returned the script is "successful" and the ruby filter applies the add\_tag option and adds some tags. But of cou… --- ## [Elasticsearch.Net and multisearch](https://discuss.elastic.co/t/elasticsearch-net-and-multisearch/96602)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 3\ **Last updated:** [August 12, 2017, 7:47am UTC](https://discuss.elastic.co/t/elasticsearch-net-and-multisearch/96602 "2017-08-12T07:47:22Z")
How do you perform a multisearch with Elasticsearch.Net? I cannot find any examples of this. --- ## [AmazonClientException\[Unable to unmarshall error response...\] when creating snapshot in S3](https://discuss.elastic.co/t/amazonclientexception-unable-to-unmarshall-error-response-when-creating-snapshot-in-s3/17211)
**Author:** [@Paulo\_Correa](https://discuss.elastic.co/u/Paulo_Correa)\ **Replies:** 3\ **Last updated:** [May 8, 2014, 3:54pm UTC](https://discuss.elastic.co/t/amazonclientexception-unable-to-unmarshall-error-response-when-creating-snapshot-in-s3/17211 "2014-05-08T15:54:01Z")
I\`ve set up ES v.1.1.1 + AWS-cloud-plugin 2.1.1 on an EC2 instance, using a Role to give access to my S3 bucket. Everything seems fine, I can put, list and get objects from inside the instance (tested with node.js c… --- ## [Searching like SQl "LIKE" operator](https://discuss.elastic.co/t/searching-like-sql-like-operator/10216)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 1\ **Last updated:** [January 2, 2013, 7:38pm UTC](https://discuss.elastic.co/t/searching-like-sql-like-operator/10216 "2013-01-02T19:38:37Z")
Hello all, Can anybody tell me how we can search in ES that "LIKE" operator work in SQl. for EX- {"Name":"Sumit"}, {"Name":"Sachin"} I want to search that name which have third character is 'm' ...H… --- ## [Use Snapshot from Hadoop?](https://discuss.elastic.co/t/use-snapshot-from-hadoop/63773)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 5\ **Last updated:** [August 4, 2017, 7:46am UTC](https://discuss.elastic.co/t/use-snapshot-from-hadoop/63773 "2017-08-04T07:46:48Z")
Just curious, is it possible to read a snapshot with Java? (Especially with Hadoop techo. such as Hive or Spark or PIG). We have a ton of snapshots, would like read data but I don't want to restore them one by one for … --- ## [OSS Version to Basic Version](https://discuss.elastic.co/t/oss-version-to-basic-version/238652)
**Author:** [@Anthony\_Whitehead](https://discuss.elastic.co/u/Anthony_Whitehead)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 1:22pm UTC](https://discuss.elastic.co/t/oss-version-to-basic-version/238652 "2020-06-25T13:22:27Z")
Hi, I've been tasked with deciding where we move with Elastic & Kibana, we're currently on 6.8 and have an OSS version, we also have an aweful lot of data and we will NOT be able to reingest this. Having just watched Ela… --- ## [Textbox user input function](https://discuss.elastic.co/t/textbox-user-input-function/84215)
**Author:** [@umesh.k](https://discuss.elastic.co/u/umesh.k)\ **Replies:** 1\ **Last updated:** [May 2, 2017, 10:31am UTC](https://discuss.elastic.co/t/textbox-user-input-function/84215 "2017-05-02T10:31:48Z")
Hello, I would want to place a textbox in my dashboard which takes input from the user(possibly a number) & multiplies it with one of the fields in the index/table. Went through multiple posts but unable to find the… --- ## [Good practice for index templates in ES](https://discuss.elastic.co/t/good-practice-for-index-templates-in-es/180116)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 8\ **Last updated:** [May 8, 2019, 10:40am UTC](https://discuss.elastic.co/t/good-practice-for-index-templates-in-es/180116 "2019-05-08T10:40:21Z")
Let's say I have documents coming into my ES from different sources. Source A(index name = "abde") has the following mapping: { "field1": { "type": "text" }, … --- ## [Filebeat issues - geoip installation error](https://discuss.elastic.co/t/filebeat-issues-geoip-installation-error/137911)
**Author:** [@pge](https://discuss.elastic.co/u/pge)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-issues-geoip-installation-error/137911 "2018-08-02T14:21:07Z")
Hi all, on centos 7.5 I have to test filebeat 6.3.0. After rhe installation i have problems with geoip plugin. On filebeat log i have this message: 2018-06-28T16:23:04.673+0200 ERROR pipeline/output.go:74 Faile… --- ## [Sum of unique ids](https://discuss.elastic.co/t/sum-of-unique-ids/134065)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 4\ **Last updated:** [June 4, 2018, 2:04pm UTC](https://discuss.elastic.co/t/sum-of-unique-ids/134065 "2018-06-04T14:04:48Z")
I have an aggregation that sums the column quantity, but I want it to sum the column quantity of unique IDS. Knowing that each unique id, has a unique quantity value. For example, if I have : id = 5 | quantity = 5 id… --- ## [Incorrect "system.memory.actual.free" metrics](https://discuss.elastic.co/t/incorrect-system-memory-actual-free-metrics/83783)
**Author:** [@tim\_wong](https://discuss.elastic.co/u/tim_wong)\ **Replies:** 4\ **Last updated:** [May 6, 2017, 8:12am UTC](https://discuss.elastic.co/t/incorrect-system-memory-actual-free-metrics/83783 "2017-05-06T08:12:58Z")
It seems that the system.memory.actual.free metric collected from Metricbeat is incorrect. According to the document: system.memory.actual.free Actual free memory in bytes. It is calculated based on the OS. On Linux i… --- ## [Not releasing disk space after (failed?) shard allocations](https://discuss.elastic.co/t/not-releasing-disk-space-after-failed-shard-allocations/199967)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 1:13pm UTC](https://discuss.elastic.co/t/not-releasing-disk-space-after-failed-shard-allocations/199967 "2019-09-18T13:13:12Z")
We have a fairly small cluster of 3 nodes with ~40GB disks each and about 12 monthly indices with 1 replica. Date should be around 8GB of primaries, so 16GB with 1 replica. We run ES 6.2 We recently had a runaway proces… --- ## [Field duplicate and truncate](https://discuss.elastic.co/t/field-duplicate-and-truncate/97745)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 3\ **Last updated:** [August 23, 2017, 4:16am UTC](https://discuss.elastic.co/t/field-duplicate-and-truncate/97745 "2017-08-23T04:16:00Z")
I need to duplicate my event field and manipulate the string field length to 5 characters . This is my sample log: {"LogLevel":"INFO","LogMsg":"Checked existing Slots ... 180 more lines","Time":"2017-08-21\_12:01:48.882… --- ## [Function could not deploy, error: bucket 'abc' already exist and you don't have permission to access it](https://discuss.elastic.co/t/function-could-not-deploy-error-bucket-abc-already-exist-and-you-dont-have-permission-to-access-it/184467)
**Author:** [@mac65](https://discuss.elastic.co/u/mac65)\ **Replies:** 5\ **Last updated:** [June 6, 2019, 4:28pm UTC](https://discuss.elastic.co/t/function-could-not-deploy-error-bucket-abc-already-exist-and-you-dont-have-permission-to-access-it/184467 "2019-06-06T16:28:24Z")
Hi, I'm having the same issue as https://discuss.elastic.co/t/unable-to-deploy-functionbeat-to-s3-bucket/171371/3, using Function Beat 7.1.1 Linux x86\_64. I do have full access to the bucket, and it does exist: aws s3 … --- ## [No alert in security detection dashboards after malware attack](https://discuss.elastic.co/t/no-alert-in-security-detection-dashboards-after-malware-attack/258380)
**Author:** [@Diana\_Dragoiu](https://discuss.elastic.co/u/Diana_Dragoiu)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 3:01pm UTC](https://discuss.elastic.co/t/no-alert-in-security-detection-dashboards-after-malware-attack/258380 "2020-12-17T15:01:17Z")
Hello ES team, After installing and enrolling Elastic Agent 7.10 we launched an Mimikatz.exe on our Win10 machine and received an ES Malware Alert but we do not receive an alert in Security Detections tab in Kibana. T… --- ## [Keystore is tampered with or corrupted, now what?](https://discuss.elastic.co/t/keystore-is-tampered-with-or-corrupted-now-what/109847)
**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\ **Replies:** 7\ **Last updated:** [December 2, 2017, 11:02pm UTC](https://discuss.elastic.co/t/keystore-is-tampered-with-or-corrupted-now-what/109847 "2017-12-02T23:02:56Z")
There is no documentation on how to recreate the elasticsearch-keystore when getting this message when trying to list or add keys to the keystore file: Exception in thread "main" java.lang.SecurityException: Keystore ha… [Previous page](https://discuss.elastic.co/top.md?page=570&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=572&per_page=50&period=all)