# Top **URL:** https://discuss.elastic.co/top.md?page=589&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 590 --- ## [Time-Value chart in Kibana](https://discuss.elastic.co/t/time-value-chart-in-kibana/71827)
**Author:** [@saggarsunil](https://discuss.elastic.co/u/saggarsunil)\ **Replies:** 4\ **Last updated:** [January 20, 2017, 3:00pm UTC](https://discuss.elastic.co/t/time-value-chart-in-kibana/71827 "2017-01-20T15:00:54Z")
Is it possible to create a basic time-value line chart ? We have a stream of data coming in and based on the filter condition, we want to plot time/value \< temperature\> chart on Kibana dashbaord. Is there an option to … --- ## [Permalink to a document on Kibana](https://discuss.elastic.co/t/permalink-to-a-document-on-kibana/56373)
**Author:** [@mbagatini](https://discuss.elastic.co/u/mbagatini)\ **Replies:** 4\ **Last updated:** [July 26, 2016, 1:39pm UTC](https://discuss.elastic.co/t/permalink-to-a-document-on-kibana/56373 "2016-07-26T13:39:11Z")
At the moment we have on Kibana that very useful link to a specific document. Is there a way to make that link always work regardless of the index state? --- ## [Multiple instances of Elasitcsearch on single node](https://discuss.elastic.co/t/multiple-instances-of-elasitcsearch-on-single-node/25583)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 4\ **Last updated:** [July 17, 2015, 2:36am UTC](https://discuss.elastic.co/t/multiple-instances-of-elasitcsearch-on-single-node/25583 "2015-07-17T02:36:35Z")
Due to circumstances beyond my control, i need to start 2 instances on one physical server. My servers specs are 32 cpu cores, 189GB ram, 16x1TB HDD and 2x120GB SSD. I plan to have one instance run on the 16TB HDD partit… --- ## [JSON Array To Object](https://discuss.elastic.co/t/json-array-to-object/147606)
**Author:** [@manwithoutsleep](https://discuss.elastic.co/u/manwithoutsleep)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 5:55pm UTC](https://discuss.elastic.co/t/json-array-to-object/147606 "2018-09-07T17:55:30Z")
Hi - Each record of input to my Logstash instance is a JSON array of key-value pairs. I need to translate this array to a single object with the value of the "key" as the field name and the value of the "value" as the f… --- ## [Graphing Netflow Data](https://discuss.elastic.co/t/graphing-netflow-data/70674)
**Author:** [@juliann](https://discuss.elastic.co/u/juliann)\ **Replies:** 3\ **Last updated:** [January 5, 2017, 4:04pm UTC](https://discuss.elastic.co/t/graphing-netflow-data/70674 "2017-01-05T16:04:49Z")
I am not 100% sure whether my problem is with Graph or Logstash. I am able to collect Netflow data from Cisco Meraki via Logstash into Elasticsearch with a few warnings from Logstash on flowset\_id. However, when view… --- ## [Dashboard not showing lines correctly](https://discuss.elastic.co/t/dashboard-not-showing-lines-correctly/95874)
**Author:** [@jarko.piironen](https://discuss.elastic.co/u/jarko.piironen)\ **Replies:** 7\ **Last updated:** [August 16, 2017, 8:31am UTC](https://discuss.elastic.co/t/dashboard-not-showing-lines-correctly/95874 "2017-08-16T08:31:20Z")
Using Kibana 5.5.1 In my dashboard I am getting dots instead of a lines graph, if i go to the vizulation its shows the lines perfactly. What could be wrong? Dashboard: Vizualize: --- ## [Kibana splitting fields with dots or spaces in them](https://discuss.elastic.co/t/kibana-splitting-fields-with-dots-or-spaces-in-them/61298)
**Author:** [@sacasumo](https://discuss.elastic.co/u/sacasumo)\ **Replies:** 1\ **Last updated:** [September 22, 2016, 5:43pm UTC](https://discuss.elastic.co/t/kibana-splitting-fields-with-dots-or-spaces-in-them/61298 "2016-09-22T17:43:20Z")
I'm stuck with an issue in the vizualisation page, where Kibana is splitting fileds which have a space or a dot between them. For example with a source hostname such as server.domain.local I get a count for server, anoth… --- ## [Kibana Visualizeにて月間の時間別合計数を表示する方法](https://discuss.elastic.co/t/kibana-visualize/220751)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/kibana-visualize/220751 "2020-03-02T07:26:11Z")
お世話になります。 KibanaのVisualizeの Vertical bar chartについて質問させて頂きます。 ▼実現したいこと ・月間の時間別の合計数を表す縦棒グラフを作成 ▼作成イメージ 例）indexの項目 日付(yyyy/MM/dd HH: mm:ss) アクセス数 2020/02/01 10:00:00 10 2020/02/01 11:00:00 … --- ## [\[FATAL\] An unexpected error occured](https://discuss.elastic.co/t/fatal-an-unexpected-error-occured/101216)
**Author:** [@Louise](https://discuss.elastic.co/u/Louise)\ **Replies:** 5\ **Last updated:** [September 21, 2017, 9:21pm UTC](https://discuss.elastic.co/t/fatal-an-unexpected-error-occured/101216 "2017-09-21T21:21:26Z")
I am new with the Elasticsearch stak and I have a fatal error when trying to configure Logstash since I have deleted and re-downloaded it. It used to work but I thought the connection with Elasticsearch and Kibana was st… --- ## [EsRejectedExecutionException during bulk indexing due to scan and scroll](https://discuss.elastic.co/t/esrejectedexecutionexception-during-bulk-indexing-due-to-scan-and-scroll/33422)
**Author:** [@am87](https://discuss.elastic.co/u/am87)\ **Replies:** 5\ **Last updated:** [May 31, 2016, 11:08am UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-during-bulk-indexing-due-to-scan-and-scroll/33422 "2016-05-31T11:08:49Z")
Hey guys, I'm having some issues with bulk indexing and scan and scroll. Some background: I have an Elasticsearch index with around 80 million documents. My bulk indexing setup consists of 20 "processor" service… --- ## [Feedback on the Security Solution Dashboard Experience](https://discuss.elastic.co/t/feedback-on-the-security-solution-dashboard-experience/386721)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [June 15, 2026, 8:25am UTC](https://discuss.elastic.co/t/feedback-on-the-security-solution-dashboard-experience/386721 "2026-06-15T08:25:50Z")
Hello, I would like to share some feedback regarding the Security Solution dashboard experience in Kibana. While I appreciate the effort to provide a dedicated Security-focused dashboard experience, many users in our en… --- ## [Connector for Elastic Search 8.6.2 and databricks spark 3.4.0](https://discuss.elastic.co/t/connector-for-elastic-search-8-6-2-and-databricks-spark-3-4-0/342746)
**Author:** [@luckymishra](https://discuss.elastic.co/u/luckymishra)\ **Replies:** 8\ **Last updated:** [September 29, 2023, 3:53pm UTC](https://discuss.elastic.co/t/connector-for-elastic-search-8-6-2-and-databricks-spark-3-4-0/342746 "2023-09-29T15:53:14Z")
I am trying to connect Elastic Search using spark in data bricks but keep getting this error org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens if the network/Ela… --- ## [How is the system.network.in.dropped calculated?](https://discuss.elastic.co/t/how-is-the-system-network-in-dropped-calculated/212403)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 3:40pm UTC](https://discuss.elastic.co/t/how-is-the-system-network-in-dropped-calculated/212403 "2019-12-19T15:40:44Z")
Hi, I have noticed a machine has a "higher" rate of dropped packets vs other machines. This machine is about +1% packet loss vs other machines are way below 1% I.e: Machine 1: 14 dropped packets over 200 million Machi… --- ## [Count elements within array](https://discuss.elastic.co/t/count-elements-within-array/139046)
**Author:** [@eviatenne](https://discuss.elastic.co/u/eviatenne)\ **Replies:** 2\ **Last updated:** [July 9, 2018, 12:51pm UTC](https://discuss.elastic.co/t/count-elements-within-array/139046 "2018-07-09T12:51:01Z")
Hey all, Let's assume that I have the elasticsearch index "courses", that contains the fields: name (string), tags (array) Courses: |name | tags| |courseA | \[java,web\]| |courseB . | \[python, web… --- ## [Pdfbox font issue](https://discuss.elastic.co/t/pdfbox-font-issue/80124)
**Author:** [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 12:23pm UTC](https://discuss.elastic.co/t/pdfbox-font-issue/80124 "2017-03-27T12:23:41Z")
can any one help in fixing 'opentype layout tables used in font abcdee+sylfaen are not implemented in pdfbox '. --- ## [Marvel dashboard won't show shards infos](https://discuss.elastic.co/t/marvel-dashboard-wont-show-shards-infos/35525)
**Author:** [@Vesnica](https://discuss.elastic.co/u/Vesnica)\ **Replies:** 7\ **Last updated:** [December 1, 2015, 8:21am UTC](https://discuss.elastic.co/t/marvel-dashboard-wont-show-shards-infos/35525 "2015-12-01T08:21:25Z")
Elasticsearch 2.1.0 + Kibana 4.3.0 + latest marvel plugins Sense give me this: GET \_cat/shards?v index shard prirep state docs store ip node .marvel-es-2015.11.25 0 r … --- ## [Filebeat Connecting error publishing events Error](https://discuss.elastic.co/t/filebeat-connecting-error-publishing-events-error/77710)
**Author:** [@Erik\_Chubb](https://discuss.elastic.co/u/Erik_Chubb)\ **Replies:** 6\ **Last updated:** [March 11, 2017, 12:07am UTC](https://discuss.elastic.co/t/filebeat-connecting-error-publishing-events-error/77710 "2017-03-11T00:07:46Z")
Hello Everyone, I am having an issue with trying to get logs on a linux server using filebeat to be delivered to my ELK server. They are both on the same network, I can ping each server and I can telnet from the clien… --- ## [How to index parts of json files using Java API?](https://discuss.elastic.co/t/how-to-index-parts-of-json-files-using-java-api/12604)
**Author:** [@11122](https://discuss.elastic.co/u/11122)\ **Replies:** 6\ **Last updated:** [July 2, 2013, 10:36pm UTC](https://discuss.elastic.co/t/how-to-index-parts-of-json-files-using-java-api/12604 "2013-07-02T22:36:24Z")
I've parsed a json file into an JSONObject and created an index for this whole JSONObject. But how can I index only a part of this JSONObject, for instance, only several fields or nested parts? Should I extract the… --- ## [Kibana Master Not Discovered Exception](https://discuss.elastic.co/t/kibana-master-not-discovered-exception/154451)
**Author:** [@Mustafa\_Akmal](https://discuss.elastic.co/u/Mustafa_Akmal)\ **Replies:** 3\ **Last updated:** [October 30, 2018, 8:05am UTC](https://discuss.elastic.co/t/kibana-master-not-discovered-exception/154451 "2018-10-30T08:05:11Z")
We have a single node cluster. Elastic Search is up and running. Getting this error {"error":{"root\_cause":\[{"type":"master\_not\_discovered\_exception","reason":null}\],"type":"master\_not\_discovered\_exception","reason":nul… --- ## [Logstash create doc if not exist else append array](https://discuss.elastic.co/t/logstash-create-doc-if-not-exist-else-append-array/153262)
**Author:** [@idunnomuch](https://discuss.elastic.co/u/idunnomuch)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 9:38am UTC](https://discuss.elastic.co/t/logstash-create-doc-if-not-exist-else-append-array/153262 "2018-11-02T09:38:01Z")
Elasticsearch: 6.4.2 Logstash: 6.4.2 Goal: Index the data if it hasn't been indexed before, otherwise, if the document does exist, then append an array. Input data round 1: { "item": \["1"\] } Input data round 2: { "… --- ## [Kibana “Failed to load indices” and “Failed to load remote clusters”](https://discuss.elastic.co/t/kibana-failed-to-load-indices-and-failed-to-load-remote-clusters/203840)
**Author:** [@ab2obek](https://discuss.elastic.co/u/ab2obek)\ **Replies:** 4\ **Last updated:** [October 18, 2019, 7:30am UTC](https://discuss.elastic.co/t/kibana-failed-to-load-indices-and-failed-to-load-remote-clusters/203840 "2019-10-18T07:30:22Z")
Hi everyone, I recently installed an Elasticsearch cluster (3 mdi machines), Kibana (1 machine), both on v7.3.0 and everything seems to be working. My problem is that when I click on "Create Index Pattern" from Kibana'… --- ## [Problem with indexed groovy script, bulk API, and shield](https://discuss.elastic.co/t/problem-with-indexed-groovy-script-bulk-api-and-shield/52234)
**Author:** [@founderbits](https://discuss.elastic.co/u/founderbits)\ **Replies:** 5\ **Last updated:** [June 16, 2016, 10:55am UTC](https://discuss.elastic.co/t/problem-with-indexed-groovy-script-bulk-api-and-shield/52234 "2016-06-16T10:55:09Z")
Hello, I've chosen to enable all indexed scripts for my cluster and am able to put groovy scripts into .scripts with my admin user. (I should mention I setup shield with the default config.) However, when using the r… --- ## [Is there any API to fetch query history?](https://discuss.elastic.co/t/is-there-any-api-to-fetch-query-history/71028)
**Author:** [@microx](https://discuss.elastic.co/u/microx)\ **Replies:** 2\ **Last updated:** [January 13, 2017, 7:52am UTC](https://discuss.elastic.co/t/is-there-any-api-to-fetch-query-history/71028 "2017-01-13T07:52:28Z")
Hi all, I'd like to access the query history of users by invoking API for analyzing the user behavior. From the document, it seems that Elastic Search does not provide such an API for fetching query history. After goog… --- ## [Realtime view of logs](https://discuss.elastic.co/t/realtime-view-of-logs/42899)
**Author:** [@Michael\_Korbakov](https://discuss.elastic.co/u/Michael_Korbakov)\ **Replies:** 2\ **Last updated:** [February 26, 2016, 11:17pm UTC](https://discuss.elastic.co/t/realtime-view-of-logs/42899 "2016-02-26T23:17:13Z")
Hi all. I'm wondering, is there any accepted solution to provide real time view of application logs collected through Logstash? Kibana is great for search and analysis but sometimes ability to view stream of events as … --- ## [Partial update error. Reason: "Left-hand side cannot be assigned a value."](https://discuss.elastic.co/t/partial-update-error-reason-left-hand-side-cannot-be-assigned-a-value/117100)
**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\ **Replies:** 5\ **Last updated:** [January 26, 2018, 1:27pm UTC](https://discuss.elastic.co/t/partial-update-error-reason-left-hand-side-cannot-be-assigned-a-value/117100 "2018-01-26T13:27:33Z")
Hi I'm trying to update an index-pattern in .kibana to contain another scripted field. In testing partial update of the document field I get an error. The partial update was the following: curl -XPOST 'localhost:9200/.… --- ## [Error sending data to elasticsearch](https://discuss.elastic.co/t/error-sending-data-to-elasticsearch/51789)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 6, 2016, 4:32am UTC](https://discuss.elastic.co/t/error-sending-data-to-elasticsearch/51789 "2016-06-06T04:32:21Z")
I have come accorss with the following error. Is there anyone who have ideas with that? 2016/06/03 10:49:02.295137 client.go:190: INFO Bulk item insert failed (i=49, status=503): {"type":"unavailable\_shards\_exception",… --- ## [Unable to install Marvel plugin. Tried online, offline both](https://discuss.elastic.co/t/unable-to-install-marvel-plugin-tried-online-offline-both/35873)
**Author:** [@prkhr\_singh](https://discuss.elastic.co/u/prkhr_singh)\ **Replies:** 5\ **Last updated:** [December 1, 2015, 1:34pm UTC](https://discuss.elastic.co/t/unable-to-install-marvel-plugin-tried-online-offline-both/35873 "2015-12-01T13:34:29Z")
I'm very new to elasticsearch. I am following the introduction walkthrough video religiously, but I am unable to download marvel. Procedure: 1. Made suggested changes to config/elasticsearch.yml 2. Ran ./bin/plugin insta… --- ## [Disk usage elasticsearch](https://discuss.elastic.co/t/disk-usage-elasticsearch/113009)
**Author:** [@adriell](https://discuss.elastic.co/u/adriell)\ **Replies:** 3\ **Last updated:** [December 26, 2017, 9:10pm UTC](https://discuss.elastic.co/t/disk-usage-elasticsearch/113009 "2017-12-26T21:10:15Z")
Guys, how do I set a limit on disk usage in elasticsearch? My elasticsearch server has a disk space problem. --- ## [Status of restore process](https://discuss.elastic.co/t/status-of-restore-process/131159)
**Author:** [@\_danny](https://discuss.elastic.co/u/_danny)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 3:12pm UTC](https://discuss.elastic.co/t/status-of-restore-process/131159 "2018-05-11T15:12:29Z")
Hi, I am having two elastic search clusters and a single shared repository is registered on both of them. One process is used to snapshot the indices from first ES cluster while another process restore the snapshot to … --- ## [Wildcard Analysis in simple\_query\_string Query](https://discuss.elastic.co/t/wildcard-analysis-in-simple-query-string-query/211953)
**Author:** [@burakyuksel](https://discuss.elastic.co/u/burakyuksel)\ **Replies:** 4\ **Last updated:** [December 16, 2019, 2:16pm UTC](https://discuss.elastic.co/t/wildcard-analysis-in-simple-query-string-query/211953 "2019-12-16T14:16:42Z")
Hello, I wonder how ES analyzes wildcard in simple\_query\_string queries. Specifically, what happens when query string includes a stop word and asterisk (\*). In my case, My index has a custom analyzer with a bunch of f… --- ## [Pulling logs stored in a database into Logstash](https://discuss.elastic.co/t/pulling-logs-stored-in-a-database-into-logstash/26509)
**Author:** [@tz1413](https://discuss.elastic.co/u/tz1413)\ **Replies:** 4\ **Last updated:** [December 31, 2015, 4:00pm UTC](https://discuss.elastic.co/t/pulling-logs-stored-in-a-database-into-logstash/26509 "2015-12-31T16:00:19Z")
I have a Cassandra database in which we are storing information from Jenkins from build jobs. One of these fields contains the complete log file. I would like to be able to use Logstash to read these logs and search th… --- ## [TLS/SSL Encryption and Cert Issues FATAL Error 0906D06C:PEM routines:PEM\_read\_bio:no start line](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [November 14, 2018, 12:49am UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538 "2018-11-14T00:49:53Z")
I have Elasticsearch on one server named 789 and Kibana on another named 1260. I've currently made it up to the point where x-pack is enabled, xpack.security.transport.ssl settings "seem" ok; that is nothing stops commu… --- ## [Issue with TransportClient on 5.2.1](https://discuss.elastic.co/t/issue-with-transportclient-on-5-2-1/76827)
**Author:** [@Michael\_Rozing](https://discuss.elastic.co/u/Michael_Rozing)\ **Replies:** 2\ **Last updated:** [March 1, 2017, 10:53am UTC](https://discuss.elastic.co/t/issue-with-transportclient-on-5-2-1/76827 "2017-03-01T10:53:31Z")
hi, i'm trying to upgrade our ES to 5.2.1 from 2.3.1 and i'm having a ton of issues... currently i'm facing the following problem: our java application uses the TransportClient for connecting to our ES servers. i'm follo… --- ## [Elasticsearch rejecting records because of parsing error](https://discuss.elastic.co/t/elasticsearch-rejecting-records-because-of-parsing-error/180040)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 3\ **Last updated:** [May 22, 2019, 1:11am UTC](https://discuss.elastic.co/t/elasticsearch-rejecting-records-because-of-parsing-error/180040 "2019-05-22T01:11:18Z")
Elastic version: 6.7.0 Kibana version: 6.7.0 Source to send data to elasticsearch: kubernetes, fluentd I am having an issue while parsing message and forwarding from kubernetes cluster to elasticsearch it's rejecting… --- ## [CheckPoint Netflow and Elasticsearch](https://discuss.elastic.co/t/checkpoint-netflow-and-elasticsearch/99993)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 8\ **Last updated:** [September 17, 2017, 12:38pm UTC](https://discuss.elastic.co/t/checkpoint-netflow-and-elasticsearch/99993 "2017-09-17T12:38:34Z")
Hi Guys, Is anyone here able to successfully configured netflow on checkpoint with elasticssearch? Is there any such use case? If any one can you help me with logstash configuration? --- ## [Where to send requests in a cluster](https://discuss.elastic.co/t/where-to-send-requests-in-a-cluster/100478)
**Author:** [@Jonathan\_Kosgei](https://discuss.elastic.co/u/Jonathan_Kosgei)\ **Replies:** 8\ **Last updated:** [September 14, 2017, 11:50am UTC](https://discuss.elastic.co/t/where-to-send-requests-in-a-cluster/100478 "2017-09-14T11:50:51Z")
We have the following cluster setup; 3 masters 2 client nodes 1 ingest node 1 data node Each group of nodes has a dns loadbalancer infront of them. The question is, where do I point to in my applicatons? Do I do t… --- ## [Druid vs elasticsearch](https://discuss.elastic.co/t/druid-vs-elasticsearch/68444)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 3\ **Last updated:** [December 12, 2016, 11:37pm UTC](https://discuss.elastic.co/t/druid-vs-elasticsearch/68444 "2016-12-12T23:37:51Z")
Hello Folks, We are doing a benchmarking on those two technologies for a lambda architecture. One of the biggest point of Druid is that it does aggregation when ingesting. That's why it can respond faster. This is what… --- ## [java.net.ConnectException: Operation timed out when posting messages to slack incoming web hook](https://discuss.elastic.co/t/java-net-connectexception-operation-timed-out-when-posting-messages-to-slack-incoming-web-hook/62455)
**Author:** [@pvishwamitrula](https://discuss.elastic.co/u/pvishwamitrula)\ **Replies:** 5\ **Last updated:** [October 19, 2016, 9:03am UTC](https://discuss.elastic.co/t/java-net-connectexception-operation-timed-out-when-posting-messages-to-slack-incoming-web-hook/62455 "2016-10-19T09:03:10Z")
I have created new incoming web hook for my channel. Used incoming webhook in elasticsearch.yml file to send slack messages. watcher.actions.slack.service: account: monitoring: url: https://hooks.slack.com… --- ## [Error on offline plugin install, verification failed](https://discuss.elastic.co/t/error-on-offline-plugin-install-verification-failed/95631)
**Author:** [@TaurusD](https://discuss.elastic.co/u/TaurusD)\ **Replies:** 4\ **Last updated:** [August 3, 2017, 10:04am UTC](https://discuss.elastic.co/t/error-on-offline-plugin-install-verification-failed/95631 "2017-08-03T10:04:21Z")
Hi, I'm using logstash 5.5.1 and trying to install some plugin offline on WINDOWS. I have already have my plugins ready on my PC, and I used bin\\logstash-plugin prepare-offline-packages logstash-input-\* logstash-filte… --- ## [APT Package: Queue directory not writeable](https://discuss.elastic.co/t/apt-package-queue-directory-not-writeable/69392)
**Author:** [@padyx](https://discuss.elastic.co/u/padyx)\ **Replies:** 4\ **Last updated:** [December 20, 2016, 5:53pm UTC](https://discuss.elastic.co/t/apt-package-queue-directory-not-writeable/69392 "2016-12-20T17:53:47Z")
Has anyone else experienced the issue when installing Logstash 5.x as an APT-Package, that it won't start: \[2016-12-19T07:06:27,418\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\ **Author:** [@Muharez](https://discuss.elastic.co/u/Muharez)\ **Replies:** 2\ **Last updated:** [December 31, 2021, 3:03pm UTC](https://discuss.elastic.co/t/how-to-filter-two-fields-based-on-a-list-of-values/292846 "2021-12-31T15:03:34Z") Hi there! I have just started learning Elasticsearch. I created an index with four fields that contain information on distances between pairs of postcodes. { "distances" : { "mappings" : { "properties" : {… --- ## [How to filter nested aggregated buckets in ES](https://discuss.elastic.co/t/how-to-filter-nested-aggregated-buckets-in-es/67114)
**Author:** [@k88](https://discuss.elastic.co/u/k88)\ **Replies:** 0\ **Last updated:** [November 24, 2016, 1:41pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-aggregated-buckets-in-es/67114 "2016-11-24T13:41:45Z")
Hi, I know elsticserach provides bucket\_selector aggregation to filter the documents based on the aggregated buckets, but I have troubling, using this to filter the nested aggregated buckets. I have a schema hierarchy… --- ## [Cannot index event publisher ERROR](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 5\ **Last updated:** [January 4, 2023, 5:01pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285 "2023-01-04T17:01:45Z")
Getting this error {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[network.forwarded\_ip\] of type \[ip\] in document with id 'msD2cIUBIsfwhIgCSPy9'. Preview of field's value: '0'","caused\_by":{"type":"i… --- ## [Delete files using the "registry" file](https://discuss.elastic.co/t/delete-files-using-the-registry-file/136788)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 10:55am UTC](https://discuss.elastic.co/t/delete-files-using-the-registry-file/136788 "2018-06-21T10:55:03Z")
Hi, I have a use case in which, multiple large files are pushed on a server. These are read by Filebeat and sent to Logstash. I have written a script to read the registry file and get the filenames that have been ackno… --- ## [nGram performance](https://discuss.elastic.co/t/ngram-performance/12943)
**Author:** [@Michael\_Lockwood](https://discuss.elastic.co/u/Michael_Lockwood)\ **Replies:** 2\ **Last updated:** [July 26, 2013, 9:37am UTC](https://discuss.elastic.co/t/ngram-performance/12943 "2013-07-26T09:37:43Z")
Hi, I wanted partial matching functionality on a field so I tried using the nGram tokenizer in my index analyzer but just the standard tokenizer in my search analyzer which worked perfectly. However my questio… --- ## [IP Field contained invalid IP address or hostname with geoip filter](https://discuss.elastic.co/t/ip-field-contained-invalid-ip-address-or-hostname-with-geoip-filter/49803)
**Author:** [@Duleendra](https://discuss.elastic.co/u/Duleendra)\ **Replies:** 4\ **Last updated:** [August 29, 2016, 11:46am UTC](https://discuss.elastic.co/t/ip-field-contained-invalid-ip-address-or-hostname-with-geoip-filter/49803 "2016-08-29T11:46:09Z")
Hi I am parsing a CSV file with the following configurations. This CSV file has a field which contains IP address. Problem is , Logstash gives the following error with geoip for IP addresses even though IP addresses… --- ## [How to create tokenizer and analyzer in elasticsearch.yml](https://discuss.elastic.co/t/how-to-create-tokenizer-and-analyzer-in-elasticsearch-yml/39415)
**Author:** [@NgocPham](https://discuss.elastic.co/u/NgocPham)\ **Replies:** 6\ **Last updated:** [January 18, 2016, 4:10am UTC](https://discuss.elastic.co/t/how-to-create-tokenizer-and-analyzer-in-elasticsearch-yml/39415 "2016-01-18T04:10:14Z")
Hi, im newbie in elasticsearch and i have a question. Please help me :sunny: i have one command working like this :slightly\_smiling: curl -XPUT 'localhost:9200/number2' -d ' { "settings" : { "analysis" : { "anal… --- ## [SUM top hit aggegration?](https://discuss.elastic.co/t/sum-top-hit-aggegration/154383)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [October 30, 2018, 6:31am UTC](https://discuss.elastic.co/t/sum-top-hit-aggegration/154383 "2018-10-30T06:31:05Z")
Hi, I was wondering whether it is possible to create a scripted field that can query the top hit (last value) for each unique value of product and then sum that so it can be used for graphing in Kibana? Basically I hav… --- ## [How to add 2 metrics visualization?](https://discuss.elastic.co/t/how-to-add-2-metrics-visualization/89017)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 1:01pm UTC](https://discuss.elastic.co/t/how-to-add-2-metrics-visualization/89017 "2017-06-13T13:01:10Z")
I want to add the result of metrics visualisation --- ## [Data virtualization and Elastic](https://discuss.elastic.co/t/data-virtualization-and-elastic/183211)
**Author:** [@davelo](https://discuss.elastic.co/u/davelo)\ **Replies:** 2\ **Last updated:** [June 9, 2019, 5:17am UTC](https://discuss.elastic.co/t/data-virtualization-and-elastic/183211 "2019-06-09T05:17:36Z")
Does anyone have any thoughts on data virtualization and how it applies to Elastic? [Previous page](https://discuss.elastic.co/top.md?page=588&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=590&per_page=50&period=all)