# Top

**URL:** https://discuss.elastic.co/top.md?page=600&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 601

---

## [How to parse .gz (compressed file) using logstash](https://discuss.elastic.co/t/how-to-parse-gz-compressed-file-using-logstash/105950)

<div class="topic-metadata">

**Author:** [@jotsnadasari](https://discuss.elastic.co/u/jotsnadasari)\
**Replies:** 2\
**Last updated:** [November 3, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-to-parse-gz-compressed-file-using-logstash/105950 "2017-11-03T14:35:56Z")

</div>

Hi All, Does latest logstash support parsing .gz files using logstash? We have a requirement to get .gz files dynamically every hour. We do not know the file names and content. All we know is the file is compressed in …

---

## [Mulitple terms highlight in the Kibana Logs App](https://discuss.elastic.co/t/mulitple-terms-highlight-in-the-kibana-logs-app/240803)

<div class="topic-metadata">

**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\
**Replies:** 1\
**Last updated:** [July 14, 2020, 9:26pm UTC](https://discuss.elastic.co/t/mulitple-terms-highlight-in-the-kibana-logs-app/240803 "2020-07-14T21:26:01Z")

</div>

I was trying to use the "highlight" feature in the Kibana Logs app. I am not able to highlight multiple terms using this feature, when I enter like this I was expecting both the "app-01", and "logging" would get hig…

---

## [Elasticsearch master not discovered exception in AWS EC2 instance](https://discuss.elastic.co/t/elasticsearch-master-not-discovered-exception-in-aws-ec2-instance/202292)

<div class="topic-metadata">

**Author:** [@Ilamparithi\_Karthike](https://discuss.elastic.co/u/Ilamparithi_Karthike)\
**Replies:** 7\
**Last updated:** [October 4, 2019, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-master-not-discovered-exception-in-aws-ec2-instance/202292 "2019-10-04T07:43:43Z")

</div>

We configured elasticsearch in the AWS EC2 instance. It was running smoothly we upgraded to version 7.3.1 (both elasticsearch and kibana in the same version). While starting both services, elasticsearch(ip:9200/?pretty)…

---

## [Logstash License](https://discuss.elastic.co/t/logstash-license/327869)

<div class="topic-metadata">

**Author:** [@Milad\_Heydariaan](https://discuss.elastic.co/u/Milad_Heydariaan)\
**Replies:** 3\
**Last updated:** [March 29, 2023, 9:26pm UTC](https://discuss.elastic.co/t/logstash-license/327869 "2023-03-29T21:26:54Z")

</div>

Hi, Logstash is still covered by Elastic License v1 (ELv1) which has more restrictions than Elastic License v2 (ELv2): But Elasticsearch and Kibana are already migrated to ELv2. Is there any plan for migrating Logst…

---

## [Find function execution time based on start/end timestamps](https://discuss.elastic.co/t/find-function-execution-time-based-on-start-end-timestamps/106698)

<div class="topic-metadata">

**Author:** [@gavenkoa](https://discuss.elastic.co/u/gavenkoa)\
**Replies:** 3\
**Last updated:** [November 7, 2017, 3:59pm UTC](https://discuss.elastic.co/t/find-function-execution-time-based-on-start-end-timestamps/106698 "2017-11-07T15:59:00Z")

</div>

Our ES index has timestamps, markers for function start and end (in separate documents) and other fields which identify execution environment (ip+pid+tid). By fixing ip+pid+tid and calculating difference between timesta…

---

## [Grok pattern for date](https://discuss.elastic.co/t/grok-pattern-for-date/181322)

<div class="topic-metadata">

**Author:** [@talial](https://discuss.elastic.co/u/talial)\
**Replies:** 5\
**Last updated:** [May 16, 2019, 1:19pm UTC](https://discuss.elastic.co/t/grok-pattern-for-date/181322 "2019-05-16T13:19:16Z")

</div>

Hi I have a log file that I want to parse to elasticsearch using logstash. In the log I have a date like that: 2019-04-18+05:48:54.470 I trying to find how to grok this timestamp with kibana Grok Debugger Trying the…

---

## [Impossible to pull elastic image because of cloudfront](https://discuss.elastic.co/t/impossible-to-pull-elastic-image-because-of-cloudfront/319094)

<div class="topic-metadata">

**Author:** [@Althea\_Vestrit](https://discuss.elastic.co/u/Althea_Vestrit)\
**Replies:** 3\
**Last updated:** [November 17, 2022, 9:51am UTC](https://discuss.elastic.co/t/impossible-to-pull-elastic-image-because-of-cloudfront/319094 "2022-11-17T09:51:42Z")

</div>

Hello, I am trying to install an elastic-agent on a new server but cannot pull the elastic-agent container image (same problem with other elastic images). For example I have the same error with the kibana image, even th…

---

## [How to visualize/query hosts not sending logs in over an hour?](https://discuss.elastic.co/t/how-to-visualize-query-hosts-not-sending-logs-in-over-an-hour/102029)

<div class="topic-metadata">

**Author:** [@Brandon\_Reeves](https://discuss.elastic.co/u/Brandon_Reeves)\
**Replies:** 3\
**Last updated:** [October 3, 2017, 5:52pm UTC](https://discuss.elastic.co/t/how-to-visualize-query-hosts-not-sending-logs-in-over-an-hour/102029 "2017-10-03T17:52:27Z")

</div>

I am trying to build a query, dashboard, or something to solve an issue. We have multiple hosts sending data to elasticsearch via logstash. What we would like to do is determine quickly if elasticsearch has NOT received…

---

## [Kibana shard timeout setting](https://discuss.elastic.co/t/kibana-shard-timeout-setting/77545)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 3\
**Last updated:** [March 9, 2017, 5:16pm UTC](https://discuss.elastic.co/t/kibana-shard-timeout-setting/77545 "2017-03-09T17:16:09Z")

</div>

I am using elasticsearch 2.3 and Kibana 4 In Kibana dashboard, if I add searches, sometimes, kibana complains "2 shards failed" I noticed in Kibana settings the default setting of elasticsearch.shardTimeout is 0, so I ch…

---

## [Elastic APM sanitization on message body](https://discuss.elastic.co/t/elastic-apm-sanitization-on-message-body/240913)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 7\
**Last updated:** [July 15, 2020, 5:07am UTC](https://discuss.elastic.co/t/elastic-apm-sanitization-on-message-body/240913 "2020-07-15T05:07:48Z")

</div>

We are using Elastic APM from Elasticsearch 7.8 with java agent. We would like to capture HTTP message body. However, it does not work as expected. First, I'd expect that the sanitization can ensure a field would not be…

---

## [ElasticSearch crashing - where are the log files?](https://discuss.elastic.co/t/elasticsearch-crashing-where-are-the-log-files/11009)

<div class="topic-metadata">

**Author:** [@inZania](https://discuss.elastic.co/u/inZania)\
**Replies:** 1\
**Last updated:** [March 5, 2013, 4:15am UTC](https://discuss.elastic.co/t/elasticsearch-crashing-where-are-the-log-files/11009 "2013-03-05T04:15:46Z")

</div>

I'm running ElasticSearch on my EC2 servers. I'm having trouble understanding the logging / debugging of ElasticSearch. Occasionally, the service disappears, after having been running fine for days (I expect that it…

---

## [Beats input ssl problem](https://discuss.elastic.co/t/beats-input-ssl-problem/204606)

<div class="topic-metadata">

**Author:** [@Bartekk](https://discuss.elastic.co/u/Bartekk)\
**Replies:** 0\
**Last updated:** [October 22, 2019, 8:46am UTC](https://discuss.elastic.co/t/beats-input-ssl-problem/204606 "2019-10-22T08:46:20Z")

</div>

Info : Ubuntu 18.04 ELK : 7.4.0 OpenSSL : 1.1.1 I just followed the tutorial Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash | Elastic Blog Connected logstash + kibana + elastic n…

---

## [MapperParsingException failed to parse date format](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse-date-format/53441)

<div class="topic-metadata">

**Author:** [@Rajkumar\_E](https://discuss.elastic.co/u/Rajkumar_E)\
**Replies:** 2\
**Last updated:** [June 21, 2016, 2:17pm UTC](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse-date-format/53441 "2016-06-21T14:17:45Z")

</div>

I have exception for pushing mysql data to elasticxsearch. I stored mysql date value to "Current\_time\_stamp" its look like "2016-06-20 12:25:58" This is Table Data: id name mail ip …

---

## [Using space characters in a field's name](https://discuss.elastic.co/t/using-space-characters-in-a-fields-name/4177)

<div class="topic-metadata">

**Author:** [@Lar\_Mader](https://discuss.elastic.co/u/Lar_Mader)\
**Replies:** 1\
**Last updated:** [March 31, 2011, 9:05pm UTC](https://discuss.elastic.co/t/using-space-characters-in-a-fields-name/4177 "2011-03-31T21:05:33Z")

</div>

I apologize in advance if this question has been addressed, but I haven't been able to find it. I have a document that I want to index that would look something like this: { "description":"foo", "field name wit…

---

## [Best practices for automated tests](https://discuss.elastic.co/t/best-practices-for-automated-tests/320872)

<div class="topic-metadata">

**Author:** [@PzYon](https://discuss.elastic.co/u/PzYon)\
**Replies:** 3\
**Last updated:** [December 30, 2022, 2:47pm UTC](https://discuss.elastic.co/t/best-practices-for-automated-tests/320872 "2022-12-30T14:47:34Z")

</div>

In our (Java) unit tests we would like to test the integration of Elasticsearch (e.g. do queries work, can docs be indexed correctly, etc.). I'm wondering if there are any best practices or recommendations regarding this…

---

## [Upgrade to Elastic version 5.6.12 causes exception](https://discuss.elastic.co/t/upgrade-to-elastic-version-5-6-12-causes-exception/160409)

<div class="topic-metadata">

**Author:** [@trabakoulas](https://discuss.elastic.co/u/trabakoulas)\
**Replies:** 8\
**Last updated:** [December 18, 2018, 9:56am UTC](https://discuss.elastic.co/t/upgrade-to-elastic-version-5-6-12-causes-exception/160409 "2018-12-18T09:56:28Z")

</div>

Hello, I'm trying to upgrade my ElasticSearch from 2.3.4 to 5.6.12. In order to create my Client, due to this upgrade, I use now the PreBuiltTransportClient instead of the TransportClient. During the runtime I get the…

---

## [Can't merge a non object mapping \[cluster\] with an object mapping \[cluster\] ES 5.3.0](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-cluster-with-an-object-mapping-cluster-es-5-3-0/81841)

<div class="topic-metadata">

**Author:** [@khaoulaari](https://discuss.elastic.co/u/khaoulaari)\
**Replies:** 2\
**Last updated:** [April 12, 2017, 7:14am UTC](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-cluster-with-an-object-mapping-cluster-es-5-3-0/81841 "2017-04-12T07:14:56Z")

</div>

I'm trying to adapt the latest version of elastic search 5.3.0 with inviso and when I tried to index some jobs with a python file I’m getting the following error can someone tell me what is the changes in the lates…

---

## [Multiple OR and AND conditions with Elasticsearch php](https://discuss.elastic.co/t/multiple-or-and-and-conditions-with-elasticsearch-php/278286)

<div class="topic-metadata">

**Author:** [@hmastery](https://discuss.elastic.co/u/hmastery)\
**Replies:** 7\
**Last updated:** [July 14, 2021, 8:42am UTC](https://discuss.elastic.co/t/multiple-or-and-and-conditions-with-elasticsearch-php/278286 "2021-07-14T08:42:28Z")

</div>

I would like to achieve the following query with ElasticSearch : product\_shipper = 1 AND ((product\_type = product and price\>0) OR (product\_type = product\_variation and price=0)) I've built the following query but it do…

---

## [Scroll APIでpost filterを利用すると上手く結果が取得できない](https://discuss.elastic.co/t/scroll-api-post-filter/116654)

<div class="topic-metadata">

**Author:** [@Nao\_Mk2](https://discuss.elastic.co/u/Nao_Mk2)\
**Replies:** 7\
**Last updated:** [February 2, 2018, 1:15am UTC](https://discuss.elastic.co/t/scroll-api-post-filter/116654 "2018-02-02T01:15:11Z")

</div>

こんにちは。 Elasticsearchのバージョン : 6.1.1 数万件のドキュメントがあるインデックスからScroll APIを利用して1,2万件程度のドキュメントを取得しようとしているのですが、絞り込みに以下のようなpost\_filterを利用しています。 POST test\_index/\_search?scroll=1m { "size": 2000, "post\_filter": { "bool": {…

---

## [Work-around for the scroll issue doesn't seems to work propertly (also)](https://discuss.elastic.co/t/work-around-for-the-scroll-issue-doesnt-seems-to-work-propertly-also/3594)

<div class="topic-metadata">

**Author:** [@Tomislav\_Poljak](https://discuss.elastic.co/u/Tomislav_Poljak)\
**Replies:** 7\
**Last updated:** [December 19, 2010, 1:07am UTC](https://discuss.elastic.co/t/work-around-for-the-scroll-issue-doesnt-seems-to-work-propertly-also/3594 "2010-12-19T01:07:04Z")

</div>

Hi, since scrolling is still broken (in all latest versions, 0.13 included) https://github.com/elasticsearch/elasticsearch/issues#issue/136 'from' parameter work-around seems to be recommend way to go http://el…

---

## [Integrating whole kibana with Angular UI (without iframes)](https://discuss.elastic.co/t/integrating-whole-kibana-with-angular-ui-without-iframes/217562)

<div class="topic-metadata">

**Author:** [@suryansh291195](https://discuss.elastic.co/u/suryansh291195)\
**Replies:** 2\
**Last updated:** [February 4, 2020, 6:31am UTC](https://discuss.elastic.co/t/integrating-whole-kibana-with-angular-ui-without-iframes/217562 "2020-02-04T06:31:41Z")

</div>

Hi, I'm working on a web app that collects data from various sources and stores it into elastic search. Then I want to create different dashboards out of it. I'm thinking of flask in my back end and Angular in the front …

---

## [Kibana NODE\_OPTIONS](https://discuss.elastic.co/t/kibana-node-options/215018)

<div class="topic-metadata">

**Author:** [@AlfonsoRBJ](https://discuss.elastic.co/u/AlfonsoRBJ)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 3:31pm UTC](https://discuss.elastic.co/t/kibana-node-options/215018 "2020-01-17T15:31:47Z")

</div>

Hello everyone, I'm deploying Elastic Stack environments in containers and I have a question about Kibana and its memory. In the container of Elasticsearch, it has become clear to me how to manage the memory of Java. I…

---

## [Index failed to process cluster event (put-mapping) within 30s](https://discuss.elastic.co/t/index-failed-to-process-cluster-event-put-mapping-within-30s/108047)

<div class="topic-metadata">

**Author:** [@mahade01](https://discuss.elastic.co/u/mahade01)\
**Replies:** 3\
**Last updated:** [November 17, 2017, 7:32pm UTC](https://discuss.elastic.co/t/index-failed-to-process-cluster-event-put-mapping-within-30s/108047 "2017-11-17T19:32:04Z")

</div>

org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process cluster event (put-mapping) within 30s at org.elasticsearch.cluster.service.ClusterService.lambda$onTimeout$5(ClusterService.java…

---

## [Change how Kibana interprets dates as datetimes](https://discuss.elastic.co/t/change-how-kibana-interprets-dates-as-datetimes/325616)

<div class="topic-metadata">

**Author:** [@catrexis](https://discuss.elastic.co/u/catrexis)\
**Replies:** 6\
**Last updated:** [February 16, 2023, 2:17pm UTC](https://discuss.elastic.co/t/change-how-kibana-interprets-dates-as-datetimes/325616 "2023-02-16T14:17:44Z")

</div>

One of my indices uses a date (yyyy-MM-dd) instead of a datetime as timstamp-field. Kibana interprets that as a datetime, by setting the time to 01:00. As the document contains data of the whole day, I would like to set …

---

## [Help with formatting a logstash output exec using curl](https://discuss.elastic.co/t/help-with-formatting-a-logstash-output-exec-using-curl/181116)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 6\
**Last updated:** [May 16, 2019, 9:15am UTC](https://discuss.elastic.co/t/help-with-formatting-a-logstash-output-exec-using-curl/181116 "2019-05-16T09:15:01Z")

</div>

Hi - I am really struggling with what I assume to be the correct escaping of the JSON payload of this curl command in a logstash output exec. Any tips or guidance or examples would be most welcome! Thanks John I cure…

---

## [Searching like using grep in Kibana](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 10:39am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499 "2019-07-29T10:39:51Z")

</div>

Hello, some people in our company would like to search in message field like in in (e)grep utility. Exact match. Example: STRING="\[userID=\[W192ADM-x/AM41\], LC=4557-A/IL, T=78, DATE=2019-07-02 14:15:16.0\]" echo "$STRIN…

---

## [Kibana plugin - read configuration from kibana.yml](https://discuss.elastic.co/t/kibana-plugin-read-configuration-from-kibana-yml/122260)

<div class="topic-metadata">

**Author:** [@milkamar](https://discuss.elastic.co/u/milkamar)\
**Replies:** 5\
**Last updated:** [March 8, 2018, 7:51am UTC](https://discuss.elastic.co/t/kibana-plugin-read-configuration-from-kibana-yml/122260 "2018-03-08T07:51:03Z")

</div>

Hello, I code own plugin for kibana, but am unable to read plugin-related configuration from kibana.yml kibana.yml - custom attributes part cleanup tool kibanaVersion format: \[major\].\[minor\] cleanup\_tool.kibanaVersio…

---

## [フレーズ検索時のNGram TokenizerとNGram Token Filterの違いについて](https://discuss.elastic.co/t/ngram-tokenizer-ngram-token-filter/99409)

<div class="topic-metadata">

**Author:** [@A.S](https://discuss.elastic.co/u/A.S)\
**Replies:** 5\
**Last updated:** [October 16, 2017, 10:35am UTC](https://discuss.elastic.co/t/ngram-tokenizer-ngram-token-filter/99409 "2017-10-16T10:35:24Z")

</div>

お世話になっております。 フレーズ検索をした際、アナライザーにNGram Tokenizerをセットした場合と、NGram Token Filterをセットした場合で検索結果が異なりました。 NGram Token Filterをセットした場合でも、NGram Tokenizerをセットした場合と同じ検索結果にしたいのですが、どなたか解決策をご存じでしょうか。よろしくお願いいたします。 １．アナライザー設定 { "analys…

---

## [Why I can't create topic here](https://discuss.elastic.co/t/why-i-cant-create-topic-here/241074)

<div class="topic-metadata">

**Author:** [@Alex\_Liu](https://discuss.elastic.co/u/Alex_Liu)\
**Replies:** 1\
**Last updated:** [July 14, 2020, 7:30am UTC](https://discuss.elastic.co/t/why-i-cant-create-topic-here/241074 "2020-07-14T07:30:16Z")

</div>

why this button is gray out?

---

## [Installation of Elastic search 2.0](https://discuss.elastic.co/t/installation-of-elastic-search-2-0/35135)

<div class="topic-metadata">

**Author:** [@gn00342691](https://discuss.elastic.co/u/gn00342691)\
**Replies:** 4\
**Last updated:** [November 20, 2015, 12:28pm UTC](https://discuss.elastic.co/t/installation-of-elastic-search-2-0/35135 "2015-11-20T12:28:49Z")

</div>

Hi, I am trying to install Elasticsearch on Window 7. I have installed JDK 1.8.0\_60 and JRE 1.8.0\_66. I have set the JAVA\_HOME to C:\\Program Files\\Java\\jdk1.8.0\_60\\bin & PATH to C:\\Program Files\\Java\\jre1.8.0\_66\\bin E…

---

## [Index privilege syntax : all indices except one](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041)

<div class="topic-metadata">

**Author:** [@antoineozenne](https://discuss.elastic.co/u/antoineozenne)\
**Replies:** 8\
**Last updated:** [March 4, 2020, 4:43pm UTC](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041 "2020-03-04T16:43:20Z")

</div>

Hello, I want grant my new user read only privilege on all indices except one. I don't understand how I can write the query in KQL (I don't use Lucene) : Is it possible ? How ?

---

## [Problem running timelion](https://discuss.elastic.co/t/problem-running-timelion/63582)

<div class="topic-metadata">

**Author:** [@aros](https://discuss.elastic.co/u/aros)\
**Replies:** 8\
**Last updated:** [February 22, 2017, 3:30pm UTC](https://discuss.elastic.co/t/problem-running-timelion/63582 "2017-02-22T15:30:57Z")

</div>

Hi, I've seen similar topics here, but couldnt dig an answer that solved my problem. So again, when installing kibana 5.0.0-rc1 I am getting the following error when opening the timelion view (everything else seems to …

---

## [Filebeat no releasing deleted files](https://discuss.elastic.co/t/filebeat-no-releasing-deleted-files/206171)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 7\
**Last updated:** [November 12, 2019, 1:18pm UTC](https://discuss.elastic.co/t/filebeat-no-releasing-deleted-files/206171 "2019-11-12T13:18:49Z")

</div>

Hello, I could not find a post with my current specific problem so creating a new one :slight\_smile: I use Filebeat version 6.8.2 running on Debian 9 I have problems with Filebeat on some machines where Filebeat keeps…

---

## [How to range filter on floats](https://discuss.elastic.co/t/how-to-range-filter-on-floats/5751)

<div class="topic-metadata">

**Author:** [@Kunal](https://discuss.elastic.co/u/Kunal)\
**Replies:** 1\
**Last updated:** [November 2, 2011, 10:15pm UTC](https://discuss.elastic.co/t/how-to-range-filter-on-floats/5751 "2011-11-02T22:15:47Z")

</div>

Does the range filter support floats, or just integers? If I try this, it works: {"query":{"filtered":{"query":{"match\_all":{}},"filter":{"and": \[{"term":{"active":1}},{"range":{"myFloatVal":{"from":1,"to":2}}}\]}}…

---

## [Setting a Time Zone for a Dashboard](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941)

<div class="topic-metadata">

**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\
**Replies:** 2\
**Last updated:** [March 5, 2021, 11:39am UTC](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941 "2021-03-05T11:39:26Z")

</div>

Hello Team, Greetings for the Day ! I am looking if it is possible to set a time zone when creating a specific visualization/dashboard/canvas Work pad by using advanced json / css in canvas. The purpose for this is so …

---

## [Unable to create new index-patterns \[FORBIDDEN\]](https://discuss.elastic.co/t/unable-to-create-new-index-patterns-forbidden/178753)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 12:57pm UTC](https://discuss.elastic.co/t/unable-to-create-new-index-patterns-forbidden/178753 "2019-04-29T12:57:05Z")

</div>

Hi everyone, Since one week, i'm unable to add new index patterns with Kibana. My logstash pipeline creates correctly my new index management, but when I whant to visualize datas, and add a index patterns on this index…

---

## [.NET An error occurred while sending the request](https://discuss.elastic.co/t/net-an-error-occurred-while-sending-the-request/296473)

<div class="topic-metadata">

**Author:** [@pancar](https://discuss.elastic.co/u/pancar)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 7:36am UTC](https://discuss.elastic.co/t/net-an-error-occurred-while-sending-the-request/296473 "2022-03-03T07:36:27Z")

</div>

I am pretty new to APM and i am trying to set it on a .NET 4.6.2 web project. I follow these two documents when i do configure config file for some project it works and apm shows transactions. But on some projects i g…

---

## [Alias-level unique document id?](https://discuss.elastic.co/t/alias-level-unique-document-id/97950)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 0\
**Last updated:** [August 22, 2017, 5:08pm UTC](https://discuss.elastic.co/t/alias-level-unique-document-id/97950 "2017-08-22T17:08:54Z")

</div>

We are looking to migrate some of our business use cases from SQL Server to ElasticSearch and have come across a requirement to support merge-update functionality, i.e. create document if it doesn’t exist, otherwise over…

---

## [Use BulkProcessor with RefreshPolicy.WAIT\_UNTIL](https://discuss.elastic.co/t/use-bulkprocessor-with-refreshpolicy-wait-until/217934)

<div class="topic-metadata">

**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\
**Replies:** 6\
**Last updated:** [February 7, 2020, 3:10pm UTC](https://discuss.elastic.co/t/use-bulkprocessor-with-refreshpolicy-wait-until/217934 "2020-02-07T15:10:27Z")

</div>

The the current documentation \[1\] states how to wait for bulk requests to become visible for search: BulkRequest request = new BulkRequest(); // wait for bulk transaction results to become visible for search request.set…

---

## [Create multi nodes on a single cluster into ES 2.0](https://discuss.elastic.co/t/create-multi-nodes-on-a-single-cluster-into-es-2-0/35296)

<div class="topic-metadata">

**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\
**Replies:** 6\
**Last updated:** [November 23, 2015, 4:43pm UTC](https://discuss.elastic.co/t/create-multi-nodes-on-a-single-cluster-into-es-2-0/35296 "2015-11-23T16:43:46Z")

</div>

Hi, is possible to create and starts multi nodes on a single cluster into ES 2.0? I've tried the common config and some console commands but both don't work. I known that some console commands are disabled but i can't cr…

---

## [Kibana, Alerts and Actions, does not allow adding hostname in the message](https://discuss.elastic.co/t/kibana-alerts-and-actions-does-not-allow-adding-hostname-in-the-message/249867)

<div class="topic-metadata">

**Author:** [@kattyleja](https://discuss.elastic.co/u/kattyleja)\
**Replies:** 5\
**Last updated:** [September 25, 2020, 2:06pm UTC](https://discuss.elastic.co/t/kibana-alerts-and-actions-does-not-allow-adding-hostname-in-the-message/249867 "2020-09-25T14:06:20Z")

</div>

I am using Kibana 7.9.1, to generate alerts, I need to add to the message that is sent in this case to the logs, the hostname and message. but it has not been possible to show it. I get the empty space, with ctx.pay…

---

## [Difference of Parent to Child Documents and a Nested Document](https://discuss.elastic.co/t/difference-of-parent-to-child-documents-and-a-nested-document/8839)

<div class="topic-metadata">

**Author:** [@phill](https://discuss.elastic.co/u/phill)\
**Replies:** 2\
**Last updated:** [August 24, 2012, 8:20am UTC](https://discuss.elastic.co/t/difference-of-parent-to-child-documents-and-a-nested-document/8839 "2012-08-24T08:20:19Z")

</div>

I can understand the different between a multi-value field that contains many objects and a Nested Document. The main problem solvable by nested objects is "cross object" matching, see http://www.elasticsearch.org/gu…

---

## [Visualize: Field data loading is forbidden on \[FieldName\]](https://discuss.elastic.co/t/visualize-field-data-loading-is-forbidden-on-fieldname/62980)

<div class="topic-metadata">

**Author:** [@arque](https://discuss.elastic.co/u/arque)\
**Replies:** 3\
**Last updated:** [October 19, 2016, 9:30pm UTC](https://discuss.elastic.co/t/visualize-field-data-loading-is-forbidden-on-fieldname/62980 "2016-10-19T21:30:36Z")

</div>

Hi all, I want to visualize the data in Kibana. But, I always get Visualize: Field data loading is forbidden on \[FieldName\] for all my fields. These are the first two lines of the .csv file I am trying to visualize: …

---

## [Duplicate entries into Elastic Search](https://discuss.elastic.co/t/duplicate-entries-into-elastic-search/179778)

<div class="topic-metadata">

**Author:** [@Ravindra\_Nath](https://discuss.elastic.co/u/Ravindra_Nath)\
**Replies:** 7\
**Last updated:** [May 8, 2019, 8:54pm UTC](https://discuss.elastic.co/t/duplicate-entries-into-elastic-search/179778 "2019-05-08T20:54:59Z")

</div>

Problem: I am using ELK 6.71. I am able to get logs data to Elastic Search by input plugin from MySQL database and i scheduled to execute the SQL query for every 1 minute. But, every time logstash runs the query it also…

---

## [Packetbeat not starting after standby](https://discuss.elastic.co/t/packetbeat-not-starting-after-standby/119034)

<div class="topic-metadata">

**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\
**Replies:** 7\
**Last updated:** [February 12, 2018, 2:06pm UTC](https://discuss.elastic.co/t/packetbeat-not-starting-after-standby/119034 "2018-02-12T14:06:38Z")

</div>

I have packetbeat 6.1.2 installed as a service, running fine, but when I turn my laptop in standby (closing it) and I wake it up, packetbeat would not start. I can start it manually. And all 3 other beats that I instal…

---

## [Mixing up field types: on field \_ttl on elasticsearch 2.3](https://discuss.elastic.co/t/mixing-up-field-types-on-field--ttl-on-elasticsearch-2-3/55610)

<div class="topic-metadata">

**Author:** [@Rajind\_Ruparathna](https://discuss.elastic.co/u/Rajind_Ruparathna)\
**Replies:** 7\
**Last updated:** [January 13, 2017, 12:16am UTC](https://discuss.elastic.co/t/mixing-up-field-types-on-field--ttl-on-elasticsearch-2-3/55610 "2017-01-13T00:16:46Z")

</div>

I am using following in my mapping. \_ttl: { "enabled": true, "default": "15m" } I get failed to execute bulk item (index) index {\[ultraesb\]\[msg\_statistics\]\[AVXuOaBoYt4h9lsSojgC\], source\[{"totalMessageCount":7,"recordT…

---

## [How to convert ip long to string, to get ip subnets aggs](https://discuss.elastic.co/t/how-to-convert-ip-long-to-string-to-get-ip-subnets-aggs/27097)

<div class="topic-metadata">

**Author:** [@LubyRuffy](https://discuss.elastic.co/u/LubyRuffy)\
**Replies:** 7\
**Last updated:** [August 10, 2015, 5:53pm UTC](https://discuss.elastic.co/t/how-to-convert-ip-long-to-string-to-get-ip-subnets-aggs/27097 "2015-08-10T17:53:12Z")

</div>

there is a field named ip, which mapped to ip type, now i want to aggs as /24 subnets, i use script "doc\['ip'\].value & 0xffffff00" to get long value of ip, how to next to convert it to ip string??? { "\_source": \[ …

---

## [How to use logger in script file?](https://discuss.elastic.co/t/how-to-use-logger-in-script-file/37923)

<div class="topic-metadata">

**Author:** [@Red](https://discuss.elastic.co/u/Red)\
**Replies:** 5\
**Last updated:** [April 22, 2016, 11:36am UTC](https://discuss.elastic.co/t/how-to-use-logger-in-script-file/37923 "2016-04-22T11:36:25Z")

</div>

ive tried using logger object. the script code is : \> import org.elasticsearch.common.logging.\*; \> // ESLogger el; \>ESLogger logger=ESLoggerFactory.getLogger('test\_logger'); // logger.info('SCRIPT\_LOG:::This is a l…

---

## [Differences about label your fields with or without @ in Kibana](https://discuss.elastic.co/t/differences-about-label-your-fields-with-or-without-in-kibana/20484)

<div class="topic-metadata">

**Author:** [@hop2croft](https://discuss.elastic.co/u/hop2croft)\
**Replies:** 2\
**Last updated:** [October 30, 2014, 9:12am UTC](https://discuss.elastic.co/t/differences-about-label-your-fields-with-or-without-in-kibana/20484 "2014-10-30T09:12:42Z")

</div>

I was using Kibana and wondering which are the differences between using or not an @ sign before field names. It seems that the default (as in timepicker in the dashboard settings) is using the @ before a field but …

---

## [AWS vpcflow errors - count not find region configuration, context deadline exceeded](https://discuss.elastic.co/t/aws-vpcflow-errors-count-not-find-region-configuration-context-deadline-exceeded/225471)

<div class="topic-metadata">

**Author:** [@swisscheese](https://discuss.elastic.co/u/swisscheese)\
**Replies:** 6\
**Last updated:** [April 13, 2020, 9:18pm UTC](https://discuss.elastic.co/t/aws-vpcflow-errors-count-not-find-region-configuration-context-deadline-exceeded/225471 "2020-04-13T21:18:54Z")

</div>

I have vpc flow logs going to an S3 bucket and an SQS notification for any object creation event. I actually much preferred the logstash method of polling the bucket, for several reasons - mainly the ability to re-index…

[Previous page](https://discuss.elastic.co/top.md?page=599&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=601&per_page=50&period=all)
