# Top

**URL:** https://discuss.elastic.co/top.md?page=587&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 588

---

## [Increasing limit of total\_fields in a index?](https://discuss.elastic.co/t/increasing-limit-of-total-fields-in-a-index/68098)

<div class="topic-metadata">

**Author:** [@patlola](https://discuss.elastic.co/u/patlola)\
**Replies:** 5\
**Last updated:** [December 5, 2016, 10:06pm UTC](https://discuss.elastic.co/t/increasing-limit-of-total-fields-in-a-index/68098 "2016-12-05T22:06:04Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html#mapping-limit-settings after setting index.mapping.total\_fields.limit: 2000 in elasticsearch.yml and restarting elasticsearch is not startin…

---

## [Multisearch vs multiple search requests](https://discuss.elastic.co/t/multisearch-vs-multiple-search-requests/38526)

<div class="topic-metadata">

**Author:** [@dorr](https://discuss.elastic.co/u/dorr)\
**Replies:** 2\
**Last updated:** [June 23, 2017, 11:49am UTC](https://discuss.elastic.co/t/multisearch-vs-multiple-search-requests/38526 "2017-06-23T11:49:26Z")

</div>

Hello, I have k queries to do, each one of them gets a few records for some ID. The only difference is the filter value which is the ID. Is there any performance benefit to running a multisearch query (bulk) that con…

---

## [Convert JavaPairRDD to JavaRDD](https://discuss.elastic.co/t/convert-javapairrdd-to-javardd/31834)

<div class="topic-metadata">

**Author:** [@Sar82](https://discuss.elastic.co/u/Sar82)\
**Replies:** 2\
**Last updated:** [October 13, 2015, 2:12pm UTC](https://discuss.elastic.co/t/convert-javapairrdd-to-javardd/31834 "2015-10-13T14:12:05Z")

</div>

I am fetching data from ElsticSearch using ElasticSearch-Hadoop Library. JavaPairRDD\<String, Map\<String, Object\>\> esRDD = JavaEsSpark.esRDD(sc); Now I have JavaPairRDD. I want to use Random Forest from MLLib on this R…

---

## [Resource Utilization Machine Learning](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 8:18am UTC](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502 "2022-05-19T08:18:16Z")

</div>

Hello, I am working on the Machine Learning capability within two of the clusters that I am responsible for. I am trying to figure out the relationship between the size of my nodes, their configuration and model\_memory …

---

## [Can Kibana serve static HTML files?](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 7\
**Last updated:** [April 29, 2021, 2:44pm UTC](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062 "2021-04-29T14:44:53Z")

</div>

I'd like to front-end a set of related Kibana dashboards with a static web page that displays a set of tiles with links to those dashboards: This is just a skeleton layout: The color and sizing specs are temporary …

---

## [Term is not working after some time](https://discuss.elastic.co/t/term-is-not-working-after-some-time/102664)

<div class="topic-metadata">

**Author:** [@nkk](https://discuss.elastic.co/u/nkk)\
**Replies:** 7\
**Last updated:** [October 6, 2017, 7:57am UTC](https://discuss.elastic.co/t/term-is-not-working-after-some-time/102664 "2017-10-06T07:57:15Z")

</div>

Hello, i am using elasticsearch 1.7, i have a mapping "testClass": { "type": "string" , "index": "not\_analyzed", "norms": { "enabled": false }} after posting mapping, i could run both match and term queries. b…

---

## [Using if else in logstash filter](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 8\
**Last updated:** [October 19, 2022, 5:13am UTC](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853 "2022-10-19T05:13:50Z")

</div>

Hi everyone, i'd like to ask, is it possible to use OR operator in if else statement in logstash filter? so, i want to delete the event that has value "VoIP-Null0", "Null0", and "Loopback0" in data.ifDescr field. i …

---

## [Logstash unable to load csv data into elasticsearch on windows](https://discuss.elastic.co/t/logstash-unable-to-load-csv-data-into-elasticsearch-on-windows/150964)

<div class="topic-metadata">

**Author:** [@cj\_vegi](https://discuss.elastic.co/u/cj_vegi)\
**Replies:** 8\
**Last updated:** [October 10, 2018, 6:03pm UTC](https://discuss.elastic.co/t/logstash-unable-to-load-csv-data-into-elasticsearch-on-windows/150964 "2018-10-10T18:03:24Z")

</div>

Hi, I have been trying to load csv file into elasticsearch using logstash locally on windows 10. I had no success. The same configuration file seems to work on a mac sometimes. However, even on mac often fails without a…

---

## [Checking Index Integrity](https://discuss.elastic.co/t/checking-index-integrity/31752)

<div class="topic-metadata">

**Author:** [@Nathan\_F](https://discuss.elastic.co/u/Nathan_F)\
**Replies:** 4\
**Last updated:** [October 7, 2015, 9:08am UTC](https://discuss.elastic.co/t/checking-index-integrity/31752 "2015-10-07T09:08:55Z")

</div>

I have been doing a moderately large scale restoration from s3 backups made in ES 1.0 into a new cluster running ES 1.7. Two of my indices so far (among several hundred) are failing with index corruption errors during t…

---

## [Search nested "nested objects" using "wildcard paths"](https://discuss.elastic.co/t/search-nested-nested-objects-using-wildcard-paths/10138)

<div class="topic-metadata">

**Author:** [@Ash\_2](https://discuss.elastic.co/u/Ash_2)\
**Replies:** 4\
**Last updated:** [December 21, 2012, 12:53am UTC](https://discuss.elastic.co/t/search-nested-nested-objects-using-wildcard-paths/10138 "2012-12-21T00:53:36Z")

</div>

Hi, I've been try to use Elasticsearch to query heavily nested documents like below (simplified document). In the document below, I would like to search for all color values without having to specify a full "path"…

---

## [slf4j-log4j jar required?](https://discuss.elastic.co/t/slf4j-log4j-jar-required/3459)

<div class="topic-metadata">

**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\
**Replies:** 3\
**Last updated:** [October 20, 2010, 8:26am UTC](https://discuss.elastic.co/t/slf4j-log4j-jar-required/3459 "2010-10-20T08:26:31Z")

</div>

Hi This is probably a silly question. But so far I have always used ES's http endpoint to do my searching. Now that I am trying to use the java api, I dropped in the elasticsearch-0.12.0.jar into my classpath and e…

---

## [Add scripted field for finding difference between two dates](https://discuss.elastic.co/t/add-scripted-field-for-finding-difference-between-two-dates/136031)

<div class="topic-metadata">

**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 7:22am UTC](https://discuss.elastic.co/t/add-scripted-field-for-finding-difference-between-two-dates/136031 "2018-06-16T07:22:44Z")

</div>

Hi, I want to add a scripted field to calculate the difference between two dates - start date and end date. However, the format of them is a little bit different. Here's how they look like: proc\_start\_time: 04:10:26 p…

---

## [Integer size vs Long size](https://discuss.elastic.co/t/integer-size-vs-long-size/10736)

<div class="topic-metadata">

**Author:** [@ryanogle](https://discuss.elastic.co/u/ryanogle)\
**Replies:** 2\
**Last updated:** [February 16, 2013, 3:08pm UTC](https://discuss.elastic.co/t/integer-size-vs-long-size/10736 "2013-02-16T15:08:10Z")

</div>

So I have a test index where I define a field1 as type: long. I then define field2 as type:integer. I index 2 documents, each with array of 1000 numbers that are 9 digits in length. In the first document, the arra…

---

## [Total tokens count in all documents](https://discuss.elastic.co/t/total-tokens-count-in-all-documents/42776)

<div class="topic-metadata">

**Author:** [@tyka](https://discuss.elastic.co/u/tyka)\
**Replies:** 6\
**Last updated:** [February 26, 2016, 8:46pm UTC](https://discuss.elastic.co/t/total-tokens-count-in-all-documents/42776 "2016-02-26T20:46:25Z")

</div>

I am trying to get the total number of tokens in documents that match a query. I haven't defined any custom mapping and the field for which I want to get the token count is of type 'string'. I tried the following query,…

---

## [Elastic search AWS EC2 cluster indexing performance is decreased compared to single node performance](https://discuss.elastic.co/t/elastic-search-aws-ec2-cluster-indexing-performance-is-decreased-compared-to-single-node-performance/25514)

<div class="topic-metadata">

**Author:** [@balaa\_gs](https://discuss.elastic.co/u/balaa_gs)\
**Replies:** 4\
**Last updated:** [July 17, 2015, 2:14am UTC](https://discuss.elastic.co/t/elastic-search-aws-ec2-cluster-indexing-performance-is-decreased-compared-to-single-node-performance/25514 "2015-07-17T02:14:03Z")

</div>

I got the good indexing performance (1300+ doc/sec) in single node. but in cluster of 3 nodes, getting less performance (800-900 doc/sec). ES cluster deployed in AWS EC2 Linux servers with 15GB RAM. Heap size set to 5G…

---

## [Filebeat with multiple path and index](https://discuss.elastic.co/t/filebeat-with-multiple-path-and-index/356487)

<div class="topic-metadata">

**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\
**Replies:** 7\
**Last updated:** [April 8, 2024, 8:28am UTC](https://discuss.elastic.co/t/filebeat-with-multiple-path-and-index/356487 "2024-04-08T08:28:51Z")

</div>

hi dear friends, i have a filebeat with multiple paths that needs to ship logs directly to elasticsearch and i need each one to have it's index name , below is my filebeat.yml config file: filebeat.inputs: - type: lo…

---

## [Keystore.password deprecated](https://discuss.elastic.co/t/keystore-password-deprecated/319324)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 7\
**Last updated:** [November 24, 2022, 12:13pm UTC](https://discuss.elastic.co/t/keystore-password-deprecated/319324 "2022-11-24T12:13:24Z")

</div>

Hello, i'm triyng to resolve this deprecated setting but i can't rn. I add the secure version(keystore.secure\_password) in the keystore by elasticsearch-keystore add but it didn't work. I tried also to put it in the y…

---

## [How to Calculate Throughput(Ops/sec) from ESRally Report.md](https://discuss.elastic.co/t/how-to-calculate-throughput-ops-sec-from-esrally-report-md/183926)

<div class="topic-metadata">

**Author:** [@Balmukund](https://discuss.elastic.co/u/Balmukund)\
**Replies:** 8\
**Last updated:** [July 10, 2019, 5:08am UTC](https://discuss.elastic.co/t/how-to-calculate-throughput-ops-sec-from-esrally-report-md/183926 "2019-07-10T05:08:36Z")

</div>

Hi All, I am running 232 queries per minute through ESRally and also having 232 clients. Below are few of my report.md file contents. All,Min Throughput,custom\_simple\_query\_228,0.13,ops/s All,Median Throughput,custom…

---

## [X-Pack monitoring plug-in with Kibana GC charts](https://discuss.elastic.co/t/x-pack-monitoring-plug-in-with-kibana-gc-charts/87598)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 1\
**Last updated:** [June 9, 2017, 9:04pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-plug-in-with-kibana-gc-charts/87598 "2017-06-09T21:04:37Z")

</div>

Hi Folks, I am using x-pack monitoring and reviewing the charts that come with them in Kibana. Specifically I am trying to understand the GC Count and GC Duration charts and their relationship to the JVM Heap one. Whil…

---

## [Exclude global Querystring for Visualizations](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 5\
**Last updated:** [November 6, 2015, 9:03am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836 "2015-11-06T09:03:09Z")

</div>

Hey guys, just a simple question form an former Kibana3 user: In Kibana3 you had the possibility the select which global dashboard queries should apply to each visualization/panel, is it possible to do the same in Ki…

---

## [Full Text Search + сортировка + фильтры + nested в одном запросе](https://discuss.elastic.co/t/full-text-search-nested/54816)

<div class="topic-metadata">

**Author:** [@Vitaly\_Polovnikov](https://discuss.elastic.co/u/Vitaly_Polovnikov)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 4:51pm UTC](https://discuss.elastic.co/t/full-text-search-nested/54816 "2016-07-07T16:51:23Z")

</div>

Здравствуйте! Только начал изучать ES, составил запрос, он работает. Но нужна оценка профессионала, относительно производительности этого запроса при выборке из большой базы. Если есть возможность, пожалуйста, дайте …

---

## [Process Cluster Event Timeout Exception](https://discuss.elastic.co/t/process-cluster-event-timeout-exception/13606)

<div class="topic-metadata">

**Author:** [@greenmang0](https://discuss.elastic.co/u/greenmang0)\
**Replies:** 4\
**Last updated:** [November 10, 2013, 12:30pm UTC](https://discuss.elastic.co/t/process-cluster-event-timeout-exception/13606 "2013-11-10T12:30:35Z")

</div>

Hi List, I am getting this ProcessClusterEventTimeoutException when I try to create a new index. What could cause it? I have a medium size cluster (EC2 - XL) with 4 nodes. The cluster status is yellow because of som…

---

## [Recovering after shard failure](https://discuss.elastic.co/t/recovering-after-shard-failure/7965)

<div class="topic-metadata">

**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\
**Replies:** 6\
**Last updated:** [June 15, 2012, 12:12am UTC](https://discuss.elastic.co/t/recovering-after-shard-failure/7965 "2012-06-15T00:12:58Z")

</div>

I had a shard go crazy, it created over 50 thousand files and elasticsearch was complaining about file limits. So on that machine I deleted everything for that index in the nodes/0/indices/sessions directory and res…

---

## [Geo\_point issues](https://discuss.elastic.co/t/geo-point-issues/110000)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 7\
**Last updated:** [December 3, 2017, 11:08pm UTC](https://discuss.elastic.co/t/geo-point-issues/110000 "2017-12-03T23:08:02Z")

</div>

HI all, We are having major issues getting geolocation mapping working after upgrading to Elasticsearch 6.0 anf Kibana 6.0. We have tried all sorts of things to try and set the location field to type:geo\_point, but not…

---

## [Is percolator better choice in this use case?](https://discuss.elastic.co/t/is-percolator-better-choice-in-this-use-case/40209)

<div class="topic-metadata">

**Author:** [@Pavanraj\_Ramisetty](https://discuss.elastic.co/u/Pavanraj_Ramisetty)\
**Replies:** 8\
**Last updated:** [February 5, 2016, 8:18am UTC](https://discuss.elastic.co/t/is-percolator-better-choice-in-this-use-case/40209 "2016-02-05T08:18:06Z")

</div>

We have ads and alerts, we are supposed to find matching alerts when a new ad is posted and notify them of the ad posted. 1) One way is Convert alert to a query and store it in the percolator. When a new ad i…

---

## [Logstash 7.2.0 \_mutate\_error](https://discuss.elastic.co/t/logstash-7-2-0-mutate-error/193086)

<div class="topic-metadata">

**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 1:14pm UTC](https://discuss.elastic.co/t/logstash-7-2-0-mutate-error/193086 "2019-07-31T13:14:12Z")

</div>

hi, I'm using Logstash 6.8.0 for parsing logs, It works fine. I'm splitting "path" field using current pipeline: if \[path\] and !(\[path\] == "/") { mutate { copy =\> {"path" =\> "path\_split"} } mutate { …

---

## [Rsyslog+ELK Integration](https://discuss.elastic.co/t/rsyslog-elk-integration/59125)

<div class="topic-metadata">

**Author:** [@Bhuvanesh](https://discuss.elastic.co/u/Bhuvanesh)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 3:12pm UTC](https://discuss.elastic.co/t/rsyslog-elk-integration/59125 "2016-08-30T15:12:19Z")

</div>

Hi All, I am new to ELK stack. I am now trying to implement a centralized log server for one of the project in my organization. This implementation expectations are, Ship logs (system logs, webserver logs, firewall …

---

## [Unable to send email](https://discuss.elastic.co/t/unable-to-send-email/2631)

<div class="topic-metadata">

**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\
**Replies:** 2\
**Last updated:** [June 18, 2015, 10:50pm UTC](https://discuss.elastic.co/t/unable-to-send-email/2631 "2015-06-18T22:50:26Z")

</div>

I am trying out one of the watcher examples given here: https://www.elastic.co/guide/en/watcher/current/watching-marvel-data.html#watching-cpu-usage. I have configured exchange using the guide: https://www.elastic.co/…

---

## [Issue in POST request to Elastic Search using Nest in .NET](https://discuss.elastic.co/t/issue-in-post-request-to-elastic-search-using-nest-in-net/118578)

<div class="topic-metadata">

**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\
**Replies:** 7\
**Last updated:** [February 7, 2018, 4:54am UTC](https://discuss.elastic.co/t/issue-in-post-request-to-elastic-search-using-nest-in-net/118578 "2018-02-07T04:54:21Z")

</div>

In Get Request i get Data when i try using POSTMAN Client. \[image\] In same way if try the post request then i wont get data as response Valid NEST response built from a successful low level call on POST: /bankpayoutsu…

---

## [Grok Filter Parsing Failure](https://discuss.elastic.co/t/grok-filter-parsing-failure/76013)

<div class="topic-metadata">

**Author:** [@agrawalsaurabh](https://discuss.elastic.co/u/agrawalsaurabh)\
**Replies:** 5\
**Last updated:** [February 23, 2017, 10:23am UTC](https://discuss.elastic.co/t/grok-filter-parsing-failure/76013 "2017-02-23T10:23:50Z")

</div>

Hi, I was able to integrate Filebeat/logstash/Elasticsearch and kibana and able to parise logs using default APACHE LOG filter. Next I tried to parse specific information and push it to Elasticsearch. However, logstas…

---

## [Is it possible to show old logs(previous year) in the ELK a visualization?](https://discuss.elastic.co/t/is-it-possible-to-show-old-logs-previous-year-in-the-elk-a-visualization/242747)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 8\
**Last updated:** [July 31, 2020, 12:36pm UTC](https://discuss.elastic.co/t/is-it-possible-to-show-old-logs-previous-year-in-the-elk-a-visualization/242747 "2020-07-31T12:36:11Z")

</div>

Hi Team, Below is the log message that have captured to the ELK from the server , i have configured the filebeat on july 24th ,the below date July 24th is the time and in message we have a logs of the year 2018. My req…

---

## [Filter over dynamic nested fields with aggregation](https://discuss.elastic.co/t/filter-over-dynamic-nested-fields-with-aggregation/178513)

<div class="topic-metadata">

**Author:** [@DenisAlliswell](https://discuss.elastic.co/u/DenisAlliswell)\
**Replies:** 4\
**Last updated:** [April 26, 2019, 8:23pm UTC](https://discuss.elastic.co/t/filter-over-dynamic-nested-fields-with-aggregation/178513 "2019-04-26T20:23:14Z")

</div>

I have products with dynamic attributes (filters). I need to get dynamically counts for each value for the filter according to the search query. I have following mapping for products index: { "products":{ …

---

## [How to set number of displayed results in saved searches](https://discuss.elastic.co/t/how-to-set-number-of-displayed-results-in-saved-searches/171256)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 4\
**Last updated:** [March 8, 2019, 10:02am UTC](https://discuss.elastic.co/t/how-to-set-number-of-displayed-results-in-saved-searches/171256 "2019-03-08T10:02:05Z")

</div>

I just created a dashboard and added a saved search. No matter how large I scale it, it will only display 50 results at once. Is it possible to increase this number?

---

## [Class\_cast\_exception for dynamic field with "." in its name](https://discuss.elastic.co/t/class-cast-exception-for-dynamic-field-with-in-its-name/158819)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 4\
**Last updated:** [December 11, 2018, 8:59pm UTC](https://discuss.elastic.co/t/class-cast-exception-for-dynamic-field-with-in-its-name/158819 "2018-12-11T20:59:22Z")

</div>

I have an index with dynamic\_templates set as follows "dynamic\_templates": \[ { "all\_dynamic\_as\_keyword": { "match\_mapping\_type": "\*", "mapping": { …

---

## [Timelion sum not working but count does in metric field](https://discuss.elastic.co/t/timelion-sum-not-working-but-count-does-in-metric-field/144758)

<div class="topic-metadata">

**Author:** [@adepuit](https://discuss.elastic.co/u/adepuit)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 4:11pm UTC](https://discuss.elastic.co/t/timelion-sum-not-working-but-count-does-in-metric-field/144758 "2018-08-17T16:11:18Z")

</div>

I am somewhat new to Timelion but can't seem to figure out what I am missing that my usage of the sum metric is returning all 0s, when the count seems to work fine. I have this query: .es(index=\*, timefield='createdTs'…

---

## [How to extract things from beginning and end of a long single line log not parsing or extracting the thing in the middle of log](https://discuss.elastic.co/t/how-to-extract-things-from-beginning-and-end-of-a-long-single-line-log-not-parsing-or-extracting-the-thing-in-the-middle-of-log/136770)

<div class="topic-metadata">

**Author:** [@lserranov](https://discuss.elastic.co/u/lserranov)\
**Replies:** 4\
**Last updated:** [June 21, 2018, 9:49pm UTC](https://discuss.elastic.co/t/how-to-extract-things-from-beginning-and-end-of-a-long-single-line-log-not-parsing-or-extracting-the-thing-in-the-middle-of-log/136770 "2018-06-21T21:49:21Z")

</div>

Hi, Suppose that I have a single line log. This log has like 500 words. Suppose that I'm interested in extracting the initial 5 words and the last 5 words and I'm not interested on parsing the middle. Is there a way …

---

## [Filebeat for auditd events](https://discuss.elastic.co/t/filebeat-for-auditd-events/108410)

<div class="topic-metadata">

**Author:** [@bm\_rec](https://discuss.elastic.co/u/bm_rec)\
**Replies:** 4\
**Last updated:** [November 28, 2017, 10:59am UTC](https://discuss.elastic.co/t/filebeat-for-auditd-events/108410 "2017-11-28T10:59:39Z")

</div>

Hello! Could you help me with my issue? I need to get security events from auditd. I've updated filebeat from 5.3.2 to 5.6.4 to 6.0.0. Filebeat worked via audisp-simplify. I want to exclude audisp-simplify from the syst…

---

## [Free on premise option after release?](https://discuss.elastic.co/t/free-on-premise-option-after-release/210252)

<div class="topic-metadata">

**Author:** [@Michael\_C](https://discuss.elastic.co/u/Michael_C)\
**Replies:** 2\
**Last updated:** [December 6, 2019, 4:10am UTC](https://discuss.elastic.co/t/free-on-premise-option-after-release/210252 "2019-12-06T04:10:18Z")

</div>

Similar to Elastic and APM - will there be a free, downloadable, on-premise option for Enterprise Search? Or what roughly might the feature breakdown by cost be? We currently use Searchblox but it continues to have roug…

---

## [Failed to connect to backoff elasticsearch](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/165921)

<div class="topic-metadata">

**Author:** [@gleon](https://discuss.elastic.co/u/gleon)\
**Replies:** 0\
**Last updated:** [January 27, 2019, 11:29pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/165921 "2019-01-27T23:29:19Z")

</div>

Hello all, i'm begginer with ELK and having trouble shipping log events from filebeat to logstash. The scenario consists in: Machine 1) Linux ubuntu 18.04 running oracle virtual box. Machine 2) Linux centos 7 virtuali…

---

## [No field found for \[\] in mapping with types \[\]](https://discuss.elastic.co/t/no-field-found-for-in-mapping-with-types/250668)

<div class="topic-metadata">

**Author:** [@shobin-ebp](https://discuss.elastic.co/u/shobin-ebp)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 12:08am UTC](https://discuss.elastic.co/t/no-field-found-for-in-mapping-with-types/250668 "2020-10-21T00:08:39Z")

</div>

I have following query { "query": { "function\_score": { "query": { "match\_all": {} }, "functions": \[ { "script\_score": { "script": { "lang": "p…

---

## [Backup strategy](https://discuss.elastic.co/t/backup-strategy/107382)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 4\
**Last updated:** [November 19, 2017, 5:24pm UTC](https://discuss.elastic.co/t/backup-strategy/107382 "2017-11-19T17:24:50Z")

</div>

Hey, I’m looking for some answers in terms of backup strategy in ES I have a daily index that is being updated 2 times every hour, once at the half of the hour, and once at the end. (Each update is around 200k docs). I…

---

## [Elasticsearch SQL query - Where not working](https://discuss.elastic.co/t/elasticsearch-sql-query-where-not-working/196989)

<div class="topic-metadata">

**Author:** [@JacquelineGrecco](https://discuss.elastic.co/u/JacquelineGrecco)\
**Replies:** 7\
**Last updated:** [August 29, 2019, 8:25am UTC](https://discuss.elastic.co/t/elasticsearch-sql-query-where-not-working/196989 "2019-08-29T08:25:39Z")

</div>

Guys, i'm trying to make this query in SQL canvas, if where condition, but my result is like the pic below. The correct result should be the sum between 2017 + 2018 to 2018 and just one bar. Am I doing anything wrong? Ca…

---

## [Not able to create the TransportClient of the PreBuiltXPackTransportClient](https://discuss.elastic.co/t/not-able-to-create-the-transportclient-of-the-prebuiltxpacktransportclient/106643)

<div class="topic-metadata">

**Author:** [@Mukesh\_Soni](https://discuss.elastic.co/u/Mukesh_Soni)\
**Replies:** 7\
**Last updated:** [November 7, 2017, 4:19pm UTC](https://discuss.elastic.co/t/not-able-to-create-the-transportclient-of-the-prebuiltxpacktransportclient/106643 "2017-11-07T16:19:14Z")

</div>

I am trying to create the Transport client of the PreBuiltXPackTransportClient but getting the below exception: \[err\] NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{C5U0OGnqQ0uL4m-…

---

## [Using kill -1 pid to force logstash to reload the configuration file does not take effect](https://discuss.elastic.co/t/using-kill-1-pid-to-force-logstash-to-reload-the-configuration-file-does-not-take-effect/68906)

<div class="topic-metadata">

**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\
**Replies:** 7\
**Last updated:** [December 15, 2016, 2:36pm UTC](https://discuss.elastic.co/t/using-kill-1-pid-to-force-logstash-to-reload-the-configuration-file-does-not-take-effect/68906 "2016-12-15T14:36:22Z")

</div>

I use the following method to make the logstash reload configuration file, but did not take effect, what is the reason? My logstash version: 5.1.1 The method comes from https://www.elastic.co/guide/en/logstash/current/…

---

## [Elasticsearch 8.0 RPM Install error when adding new node](https://discuss.elastic.co/t/elasticsearch-8-0-rpm-install-error-when-adding-new-node/297967)

<div class="topic-metadata">

**Author:** [@soarendev](https://discuss.elastic.co/u/soarendev)\
**Replies:** 4\
**Last updated:** [February 24, 2022, 1:46am UTC](https://discuss.elastic.co/t/elasticsearch-8-0-rpm-install-error-when-adding-new-node/297967 "2022-02-24T01:46:02Z")

</div>

I'm installing Elasticsearch 8.0 on a new 3-node cluster on Amazon Linux 2. I have Elasticsearch running on the first node. I created a new enrollment key on this node. When I try to enroll the 2nd node I get the follow…

---

## [How can i use dev tools query in kibana discover query bar, is it possible?](https://discuss.elastic.co/t/how-can-i-use-dev-tools-query-in-kibana-discover-query-bar-is-it-possible/79752)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 2\
**Last updated:** [March 23, 2017, 6:56pm UTC](https://discuss.elastic.co/t/how-can-i-use-dev-tools-query-in-kibana-discover-query-bar-is-it-possible/79752 "2017-03-23T18:56:00Z")

</div>

my dev tool query GET /cars/transactions/\_search { "size" : 0, "aggs":{ "price":{ "histogram":{ "field": "price", "interval": 20000 }, "aggs":{ …

---

## [Display response body of Heartbeat in Kibana Uptime](https://discuss.elastic.co/t/display-response-body-of-heartbeat-in-kibana-uptime/242011)

<div class="topic-metadata">

**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\
**Replies:** 8\
**Last updated:** [August 3, 2020, 11:33am UTC](https://discuss.elastic.co/t/display-response-body-of-heartbeat-in-kibana-uptime/242011 "2020-08-03T11:33:31Z")

</div>

Dear Elastic-Team, in Heartbeat I am calling the actuator (info) endpoints to verify if the services are running. The endpoints are responding with a json body that includes the version of the service. I would want to d…

---

## [Edge Ngram not working with digits](https://discuss.elastic.co/t/edge-ngram-not-working-with-digits/89387)

<div class="topic-metadata">

**Author:** [@munotshubham](https://discuss.elastic.co/u/munotshubham)\
**Replies:** 0\
**Last updated:** [June 14, 2017, 1:54pm UTC](https://discuss.elastic.co/t/edge-ngram-not-working-with-digits/89387 "2017-06-14T13:54:10Z")

</div>

Hi, So I'm trying to build search-as-you-type and this is my mapping: PUT patients { "settings": { "analysis": { "analyzer": { "autocomplete": { "tokenizer": "autocomplete", "f…

---

## [Metricbeat index date timezone](https://discuss.elastic.co/t/metricbeat-index-date-timezone/78296)

<div class="topic-metadata">

**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Replies:** 5\
**Last updated:** [March 15, 2017, 9:59pm UTC](https://discuss.elastic.co/t/metricbeat-index-date-timezone/78296 "2017-03-15T21:59:42Z")

</div>

How do you control the timezone metricbeat uses for the date part of the index name: For ex: metricbeat-2017.03.12 Is there a way I can tell metricbeat to use a particular timezone when generating the date part abo…

---

## [Best way to show HTTPStatusCodes in graph](https://discuss.elastic.co/t/best-way-to-show-httpstatuscodes-in-graph/60022)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 3\
**Last updated:** [September 9, 2016, 10:58pm UTC](https://discuss.elastic.co/t/best-way-to-show-httpstatuscodes-in-graph/60022 "2016-09-09T22:58:18Z")

</div>

Previously - The previous one had Bad Request displayed seperately as it had a space. Now- Is there a better way to generate chart with http status codes which has/not has spaces?

[Previous page](https://discuss.elastic.co/top.md?page=586&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=588&per_page=50&period=all)
