# Top **URL:** https://discuss.elastic.co/top.md?page=602&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 603 --- ## [Timestamp range with aggregation query](https://discuss.elastic.co/t/timestamp-range-with-aggregation-query/85089)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 2\ **Last updated:** [May 10, 2017, 4:56am UTC](https://discuss.elastic.co/t/timestamp-range-with-aggregation-query/85089 "2017-05-10T04:56:13Z")
I am trying to get top 5 IP between certain time range with the below query. But it is not working. Please tell me what is the problem with query and how to fix it? { "size":0, "query": { "bool"… --- ## [Elastic APM dropping spans from large distributed transactions](https://discuss.elastic.co/t/elastic-apm-dropping-spans-from-large-distributed-transactions/214241)
**Author:** [@manojpandey23](https://discuss.elastic.co/u/manojpandey23)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 2:53pm UTC](https://discuss.elastic.co/t/elastic-apm-dropping-spans-from-large-distributed-transactions/214241 "2020-01-10T14:53:24Z")
We have multiple messaging based micro-services, where a transaction is started from first incoming message, then forked into thousands of spans (messages to different micro-services). We started seeing that spans start… --- ## [Max\_doc\_count in terms aggragation](https://discuss.elastic.co/t/max-doc-count-in-terms-aggragation/131142)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 1\ **Last updated:** [May 10, 2018, 4:43pm UTC](https://discuss.elastic.co/t/max-doc-count-in-terms-aggragation/131142 "2018-05-10T16:43:42Z")
Hi using Es 5.4 Is there a way to do a max doc count like min doc count in terms agg? i want to get back only the first 200 (size : 200) buckets that contain max of 2000 doc count . what i encountered with is this: … --- ## [How to add conditions in "Json Input"?](https://discuss.elastic.co/t/how-to-add-conditions-in-json-input/151263)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 2\ **Last updated:** [October 5, 2018, 10:31pm UTC](https://discuss.elastic.co/t/how-to-add-conditions-in-json-input/151263 "2018-10-05T22:31:19Z")
I want to make a table based on some conditions. For example I have three variables a, b, and c. If I want to create a table which only includes records that have a\>1 or b\<10 or 4\ **Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 6:58pm UTC](https://discuss.elastic.co/t/restoring-a-snapshot-from-a-remote-repository/75378 "2017-02-16T18:58:55Z") Hi all, I set a local repository with type: "url" to access a remote repository. PUT localhost:9200/\_snapshot/elastic\_backup { "type": "url", "settings": { "url": "http://remote\_url\_repository:9205" … --- ## [Filter on in elasticsearch-1.2.1 trigger the error below. How can i resolve this? i am new to elasticsearch](https://discuss.elastic.co/t/filter-on-in-elasticsearch-1-2-1-trigger-the-error-below-how-can-i-resolve-this-i-am-new-to-elasticsearch/111944)
**Author:** [@Hein\_Htet](https://discuss.elastic.co/u/Hein_Htet)\ **Replies:** 7\ **Last updated:** [December 16, 2017, 8:06am UTC](https://discuss.elastic.co/t/filter-on-in-elasticsearch-1-2-1-trigger-the-error-below-how-can-i-resolve-this-i-am-new-to-elasticsearch/111944 "2017-12-16T08:06:41Z")
\[DEBUG\]\[action.search.type \] \[Hobgoblin II\] \[product\_catalogue\]\[4\], node\[DKcHeBciTEmIBk6UsZuSTQ\], \[P\], s\[STARTED\]: Failed to execute \[org.elasticsearch.action.search.SearchRequest@79f7411\] org.elasticsearch.search.Search… --- ## [Phantom immediately exited with: 127](https://discuss.elastic.co/t/phantom-immediately-exited-with-127/59641)
**Author:** [@pvogensen](https://discuss.elastic.co/u/pvogensen)\ **Replies:** 7\ **Last updated:** [December 8, 2016, 4:59pm UTC](https://discuss.elastic.co/t/phantom-immediately-exited-with-127/59641 "2016-12-08T16:59:54Z")
I've just finished installing Reporting and have tried several times to generate a report, however every time i try I receive the following text "Phantom immediately exited with: 127" and the report fails. Any advice g… --- ## [Cant get Logstash to connect to ES ( localhost )](https://discuss.elastic.co/t/cant-get-logstash-to-connect-to-es-localhost/33592)
**Author:** [@Kyle\_Hartigan](https://discuss.elastic.co/u/Kyle_Hartigan)\ **Replies:** 7\ **Last updated:** [November 4, 2015, 2:20pm UTC](https://discuss.elastic.co/t/cant-get-logstash-to-connect-to-es-localhost/33592 "2015-11-04T14:20:55Z")
i am doing a brand new clean install of Logstash and Elasticsearch ( version 2.0) and i am having issues getting logstash to connect to the elasticsearch server on the same host, there is no firewall installed and i c… --- ## [Install Logstash without internet connection](https://discuss.elastic.co/t/install-logstash-without-internet-connection/138132)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 4\ **Last updated:** [July 2, 2018, 10:11am UTC](https://discuss.elastic.co/t/install-logstash-without-internet-connection/138132 "2018-07-02T10:11:32Z")
Hey guys, I must install logstash on a server which has no active internet connection. But as I know the server needs a connection to resolve the repositories online, is there a possibility to install it without the int… --- ## [Dec 18th, 2021: \[en\] Crawling content from private network environments using a Crawler deployed on Elastic Cloud](https://discuss.elastic.co/t/dec-18th-2021-en-crawling-content-from-private-network-environments-using-a-crawler-deployed-on-elastic-cloud/290493)
**Author:** [@oleksiy-elastic](https://discuss.elastic.co/u/oleksiy-elastic)\ **Replies:** 0\ **Last updated:** [December 18, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2021-en-crawling-content-from-private-network-environments-using-a-crawler-deployed-on-elastic-cloud/290493 "2021-12-18T08:00:33Z")
Enterprise Search Crawler offers App Search users a powerful ingestion mechanism. Users can index any content available through an HTTP interface and build powerful search experiences without having to write any code to … --- ## [\[ANNOUNCEMENT\] Httpbeat 3.2.0 released](https://discuss.elastic.co/t/announcement-httpbeat-3-2-0-released/71602)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [January 14, 2017, 11:25am UTC](https://discuss.elastic.co/t/announcement-httpbeat-3-2-0-released/71602 "2017-01-14T11:25:31Z")
I'm happy to announce the availability of Httpbeat 3.2.0. Httpbeat is a Beat which polls HTTP endpoints in a regular interval and sends the HTTP request and response as an event to a configured shipper, e.g. elasticsea… --- ## [Should I escape or validate query terms before using the es client?](https://discuss.elastic.co/t/should-i-escape-or-validate-query-terms-before-using-the-es-client/182969)
**Author:** [@Fernando\_Cesar](https://discuss.elastic.co/u/Fernando_Cesar)\ **Replies:** 5\ **Last updated:** [June 21, 2019, 6:41pm UTC](https://discuss.elastic.co/t/should-i-escape-or-validate-query-terms-before-using-the-es-client/182969 "2019-06-21T18:41:17Z")
Hy, I'm trying out ES with a simple project. A web page with a search box (i.e., like Google) and a backend ES client sending the query terms to the search engine. So I receive "XPTO" from the web form, and I use the E… --- ## [Parsing a json file in logstash?](https://discuss.elastic.co/t/parsing-a-json-file-in-logstash/59597)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 5\ **Last updated:** [September 6, 2016, 2:03pm UTC](https://discuss.elastic.co/t/parsing-a-json-file-in-logstash/59597 "2016-09-06T14:03:00Z")
I'm sending log messages from a remote client to my ELK server, and all is well. The logs come in a json format, that looks something like { "type" =\> "trm-system", "host" =\> "susralcent09", "timesta… --- ## [Logstash dashboard in Kibana](https://discuss.elastic.co/t/logstash-dashboard-in-kibana/119462)
**Author:** [@salvob41](https://discuss.elastic.co/u/salvob41)\ **Replies:** 3\ **Last updated:** [February 13, 2018, 4:01pm UTC](https://discuss.elastic.co/t/logstash-dashboard-in-kibana/119462 "2018-02-13T16:01:59Z")
I am playing with the ELK module and other "beats". I realized there are cool default dashboards for Metricbeats and Heartbeat. But I couldn't find anything about logstash. So I was wondering: Is there an example of a d… --- ## [Where do kiabna stores local users created from GUI](https://discuss.elastic.co/t/where-do-kiabna-stores-local-users-created-from-gui/106077)
**Author:** [@kenny123](https://discuss.elastic.co/u/kenny123)\ **Replies:** 3\ **Last updated:** [November 6, 2017, 11:21pm UTC](https://discuss.elastic.co/t/where-do-kiabna-stores-local-users-created-from-gui/106077 "2017-11-06T23:21:09Z")
Hi , I am new to ELK. I installed x-pack on kibana , elastic search and logstash . I also created few users from kibana GUI but I was wondering in which config file will kibana stores that users created from GUI. Can I … --- ## [Run a Elasticsearch Cluster with Docker](https://discuss.elastic.co/t/run-a-elasticsearch-cluster-with-docker/93455)
**Author:** [@byjg](https://discuss.elastic.co/u/byjg)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 6:48pm UTC](https://discuss.elastic.co/t/run-a-elasticsearch-cluster-with-docker/93455 "2017-07-21T18:48:48Z")
I am having problems to create a cluster with Elasticsearch docker image . I am deploying two different servers in my local network. There is no firewalls and the servers can communicate each others. The command I a… --- ## [IP address mapping conflict](https://discuss.elastic.co/t/ip-address-mapping-conflict/76436)
**Author:** [@marky](https://discuss.elastic.co/u/marky)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 12:56am UTC](https://discuss.elastic.co/t/ip-address-mapping-conflict/76436 "2017-03-01T00:56:51Z")
Hi, I tried searching for a solution to this but I wasn't able to get very far. I'm importing numerous JSON documents that contain various logs (AWS cloudtrail logs in this case) into Elasticsearch and then using Kiban… --- ## [Convert string to date in logstash config file](https://discuss.elastic.co/t/convert-string-to-date-in-logstash-config-file/52976)
**Author:** [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 11:32am UTC](https://discuss.elastic.co/t/convert-string-to-date-in-logstash-config-file/52976 "2016-06-17T11:32:08Z")
hi... my csv file is:- input { stdin {} } filter { csv { separator =\> " " columns =\> \["frame.time","col.Source","col.Destination","col.Protocol","frame.len"\] } mutate {rename =\> {"frame.time" =\> "Time"}} mutate… --- ## [Elastic in gartner's magic quadrant](https://discuss.elastic.co/t/elastic-in-gartners-magic-quadrant/157964)
**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 10:13am UTC](https://discuss.elastic.co/t/elastic-in-gartners-magic-quadrant/157964 "2018-11-28T10:13:44Z")
Hi! Just came across Gartner's Magic Quadrant for Analytics and Business Intelligence Platforms dated Feb-2018 and the elastic stack does not even figure in that. Any comments? --- ## [Split a string with delimiter and assign to new key - logstash](https://discuss.elastic.co/t/split-a-string-with-delimiter-and-assign-to-new-key-logstash/95056)
**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\ **Replies:** 4\ **Last updated:** [July 31, 2017, 4:01am UTC](https://discuss.elastic.co/t/split-a-string-with-delimiter-and-assign-to-new-key-logstash/95056 "2017-07-31T04:01:47Z")
I am trying to import csv into elasticsearch using logstash. I have a field in the csv with is an IP:Port pair. I would like to split the IP and port, and assign them to two new keys though the logstash config file. I l… --- ## [Is there any spaCy libraries for Elasticsearch available?](https://discuss.elastic.co/t/is-there-any-spacy-libraries-for-elasticsearch-available/220284)
**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\ **Replies:** 6\ **Last updated:** [February 24, 2020, 9:59am UTC](https://discuss.elastic.co/t/is-there-any-spacy-libraries-for-elasticsearch-available/220284 "2020-02-24T09:59:32Z")
Hi guys, wanted to check if there is any spaCy plugins or libraries for Elasticsearch available out there? I found the openNLP Ingest processor but my professor wants me to find more on using spaCy... Much appreciated!… --- ## [Partly downgrade 5.5.2 to 5.1.2 possible?](https://discuss.elastic.co/t/partly-downgrade-5-5-2-to-5-1-2-possible/98520)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 6\ **Last updated:** [August 28, 2017, 10:18am UTC](https://discuss.elastic.co/t/partly-downgrade-5-5-2-to-5-1-2-possible/98520 "2017-08-28T10:18:16Z")
Hi, I am planing to upgrade the ELK stack from 5.1.2 to 5.5.2. We are using daily index rotating. Is anything happening with the old indices, which have been created with kibana 5.1.2 and where no new data has been ad… --- ## [Getting Error in Importing json file in Kibana4](https://discuss.elastic.co/t/getting-error-in-importing-json-file-in-kibana4/50339)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 6\ **Last updated:** [June 15, 2016, 4:36pm UTC](https://discuss.elastic.co/t/getting-error-in-importing-json-file-in-kibana4/50339 "2016-06-15T16:36:21Z")
When I am importing the json file containing dashboard and the visualization to Kibana 4 I am getting following error: Saved Objects: Cannot read property 'byName' of undefined OK TypeError: Cannot read property 'byNam… --- ## [Missing authentication credentials for rest request - API KEY](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-api-key/287651)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 7\ **Last updated:** [November 2, 2021, 4:43am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-api-key/287651 "2021-11-02T04:43:12Z")
Hi, I am trying to authorize my application using API Key from a PHP application . I have the below code. What else am i missing below as its asking for credetails. $search\_host = 'lux.es.eastus2.azure.elastic-cloud.co… --- ## [Curl -k query works but Logstash cannot query](https://discuss.elastic.co/t/curl-k-query-works-but-logstash-cannot-query/115176)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 8\ **Last updated:** [January 12, 2018, 5:27pm UTC](https://discuss.elastic.co/t/curl-k-query-works-but-logstash-cannot-query/115176 "2018-01-12T17:27:21Z")
When I issue a query via a curl -k command to an https elasticsearch end point, I get the query results, however, using the elasticsearch input plugin in logstash, I cannot retrieve the same data. curl -k -u xxxx https:… --- ## [What causes the 403 template error?](https://discuss.elastic.co/t/what-causes-the-403-template-error/34541)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 1\ **Last updated:** [September 23, 2016, 7:29am UTC](https://discuss.elastic.co/t/what-causes-the-403-template-error/34541 "2016-09-23T07:29:41Z")
$ bin/logstash -f httpin.conf Default settings used: Filter workers: 2 Failed to install template: \[403\] {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[indices:admin/template/get\] is unauthorized… --- ## ["top\_hits" performance inside 2 levels of "terms" aggregations](https://discuss.elastic.co/t/top-hits-performance-inside-2-levels-of-terms-aggregations/92266)
**Author:** [@emmerich](https://discuss.elastic.co/u/emmerich)\ **Replies:** 5\ **Last updated:** [July 7, 2017, 1:57pm UTC](https://discuss.elastic.co/t/top-hits-performance-inside-2-levels-of-terms-aggregations/92266 "2017-07-07T13:57:28Z")
Hi, I am currently trying to do 2 levels of aggregations on my documents. You can imagine that my documents are structured as such: { "country": "france", "city": "lyon", "address": "1 Rue de la Republi… --- ## [Windows Event log en français](https://discuss.elastic.co/t/windows-event-log-en-francais/44954)
**Author:** [@matthieurobin](https://discuss.elastic.co/u/matthieurobin)\ **Replies:** 5\ **Last updated:** [March 21, 2016, 4:42pm UTC](https://discuss.elastic.co/t/windows-event-log-en-francais/44954 "2016-03-21T16:42:37Z")
Bonjour à tous, Je me permets de vous contacter car j'ai un souci pour filtrer mes events logs de mon Windows FR. J'utilise WinlogBeat et cela fonctionnait bien en anglais, mais pas en français. Je dois surement oubli… --- ## [Unallocated shards on elasticsearch 5.2.2](https://discuss.elastic.co/t/unallocated-shards-on-elasticsearch-5-2-2/81519)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 11:36am UTC](https://discuss.elastic.co/t/unallocated-shards-on-elasticsearch-5-2-2/81519 "2017-04-18T11:36:15Z")
Hello, I have an index which has unassigned shards. The explain shows some weird data. curl -XGET 'localhost:19276/\_cluster/allocation/explain?pretty' -H 'Content-Type: application/json' -d' { "index": "616bf200-… --- ## [Painless script, get error dynamic method \[java.lang.Long, getMillis/0\] not found](https://discuss.elastic.co/t/painless-script-get-error-dynamic-method-java-lang-long-getmillis-0-not-found/250240)
**Author:** [@perezbrandon](https://discuss.elastic.co/u/perezbrandon)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 9:55am UTC](https://discuss.elastic.co/t/painless-script-get-error-dynamic-method-java-lang-long-getmillis-0-not-found/250240 "2020-09-29T09:55:00Z")
So when i run this script, doc\['date\_updated'\].value.getMillis() \> params.one\_day ? 1.9 i get the error dynamic method \[java.lang.Long, getMillis/0\] not found Im not sure what this error means or if im missing somethi… --- ## [Elasticsearch sort based on a string with special characters](https://discuss.elastic.co/t/elasticsearch-sort-based-on-a-string-with-special-characters/92680)
**Author:** [@emer](https://discuss.elastic.co/u/emer)\ **Replies:** 1\ **Last updated:** [July 11, 2017, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-sort-based-on-a-string-with-special-characters/92680 "2017-07-11T15:32:49Z")
I would like to sort all the results I get from a query. I would like to sort them in either ascending or descending order. This is working perfect in most cases. However I have noticed if I sort on a field that is a str… --- ## [How to implement pagination with large dataset](https://discuss.elastic.co/t/how-to-implement-pagination-with-large-dataset/300550)
**Author:** [@achobanov](https://discuss.elastic.co/u/achobanov)\ **Replies:** 4\ **Last updated:** [March 24, 2022, 9:03pm UTC](https://discuss.elastic.co/t/how-to-implement-pagination-with-large-dataset/300550 "2022-03-24T21:03:08Z")
Environment .Net 5 Elasticsearch.Net.Aws 7.1.0 : NuGet Gallery | Elasticsearch.Net.Aws 7.2.2 Low level client Problem Even with pagination, Elasticsearch's query API does not support more than 10\_000 records by defaul… --- ## [UNION-style search requests?](https://discuss.elastic.co/t/union-style-search-requests/5639)
**Author:** [@Andrew\_Regan](https://discuss.elastic.co/u/Andrew_Regan)\ **Replies:** 4\ **Last updated:** [October 21, 2011, 2:11pm UTC](https://discuss.elastic.co/t/union-style-search-requests/5639 "2011-10-21T14:11:50Z")
Is it possible to perform multiple, nested search queries (as per BoolQueryBuilder), each nested query run against a potentially different set of indices? Like a UNION in SQL: "return all hits where property=X in (… --- ## [Enabling shard allocation does not enable it for follower indices](https://discuss.elastic.co/t/enabling-shard-allocation-does-not-enable-it-for-follower-indices/217353)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 6\ **Last updated:** [February 3, 2020, 7:56am UTC](https://discuss.elastic.co/t/enabling-shard-allocation-does-not-enable-it-for-follower-indices/217353 "2020-02-03T07:56:19Z")
Hi there! So, I encountered a weird behavior where I'm not sure if this is my fault or not. We have this scenario, two DCs (DC1 and DC2). DC2 follows DC1. So, when we upgrade something we usually disable shard allocat… --- ## [Passing a Log4J2 file with multilines](https://discuss.elastic.co/t/passing-a-log4j2-file-with-multilines/34913)
**Author:** [@whgibbo](https://discuss.elastic.co/u/whgibbo)\ **Replies:** 3\ **Last updated:** [November 19, 2015, 6:28pm UTC](https://discuss.elastic.co/t/passing-a-log4j2-file-with-multilines/34913 "2015-11-19T18:28:19Z")
Hi, I've just started playing with Logstash 2.0.0 and so far it looks great :smile: And it is working fine for single line entries, but not for multiline entries. :frowning: Here is my config file to pass the file. i… --- ## [Reporting button not available in Discover tab](https://discuss.elastic.co/t/reporting-button-not-available-in-discover-tab/171227)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 2\ **Last updated:** [March 11, 2019, 7:01am UTC](https://discuss.elastic.co/t/reporting-button-not-available-in-discover-tab/171227 "2019-03-11T07:01:26Z")
I just installed Elasticsearch and Kibana 6.6.1 version in my windows machine. I loaded some data from sample datasets available. Ultimately, after adding some filters in an Index I want to export the data to CSV file.… --- ## [How to install plugin kibana-plugin-gauge-sg in Kibana5](https://discuss.elastic.co/t/how-to-install-plugin-kibana-plugin-gauge-sg-in-kibana5/68271)
**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\ **Replies:** 7\ **Last updated:** [January 3, 2017, 11:43pm UTC](https://discuss.elastic.co/t/how-to-install-plugin-kibana-plugin-gauge-sg-in-kibana5/68271 "2017-01-03T23:43:21Z")
Hi All, I think it maybe a dummy question. But how to install the plugin into kibana5? https://github.com/sbeyn/kibana-plugin-gauge-sg It just mentionthe below steps in wiki: Pour les versions de kibana-5.x $… --- ## [NoNodeAvailableException (None of the configured nodes are available) error when trying to push data to Elastic from a Spark job](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available-error-when-trying-to-push-data-to-elastic-from-a-spark-job/73904)
**Author:** [@dgoldenberg](https://discuss.elastic.co/u/dgoldenberg)\ **Replies:** 5\ **Last updated:** [February 15, 2017, 11:39pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available-error-when-trying-to-push-data-to-elastic-from-a-spark-job/73904 "2017-02-15T23:39:56Z")
Hi, Any reason why we might be getting this error? The code seems to work fine in the non-distributed mode but the same code when run from a Spark job is not able to get to Elastic. Spark version: 2.0.1 built for Ha… --- ## [Webina getting started with elasticsearch video full screen mode button disappears](https://discuss.elastic.co/t/webina-getting-started-with-elasticsearch-video-full-screen-mode-button-disappears/168231)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 4\ **Last updated:** [February 20, 2019, 10:49pm UTC](https://discuss.elastic.co/t/webina-getting-started-with-elasticsearch-video-full-screen-mode-button-disappears/168231 "2019-02-20T22:49:57Z")
Today, I found the full-screen model button in the embedded video in the following website disappears. Why? https://www.elastic.co/webinars/getting-started-elasticsearch --- ## [How to inner join 3 index](https://discuss.elastic.co/t/how-to-inner-join-3-index/153421)
**Author:** [@Gian\_Carlo\_Menotti](https://discuss.elastic.co/u/Gian_Carlo_Menotti)\ **Replies:** 8\ **Last updated:** [October 24, 2018, 7:10pm UTC](https://discuss.elastic.co/t/how-to-inner-join-3-index/153421 "2018-10-24T19:10:28Z")
Hi, i need to inner join 3 index in elastic for crate 1, is this possible? where can i found documentation, the 3 tables are in already in elastic the results should be something like this Select a.IdEntry, b.ItemCode… --- ## [Updating Child Mapping with new field fails with NullPointerException](https://discuss.elastic.co/t/updating-child-mapping-with-new-field-fails-with-nullpointerexception/39256)
**Author:** [@turp1twin](https://discuss.elastic.co/u/turp1twin)\ **Replies:** 4\ **Last updated:** [January 20, 2016, 1:33am UTC](https://discuss.elastic.co/t/updating-child-mapping-with-new-field-fails-with-nullpointerexception/39256 "2016-01-20T01:33:37Z")
I am running Elasticsearch 2.1.1. I have an Index which is made of a single parent type and multiple child types. I am trying to update a Child mapping by adding a new field. This results in a NullPointerException on the… --- ## [Best Practice for Multiple ES Nodes Setup in Production](https://discuss.elastic.co/t/best-practice-for-multiple-es-nodes-setup-in-production/144391)
**Author:** [@samwzm](https://discuss.elastic.co/u/samwzm)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 8:40pm UTC](https://discuss.elastic.co/t/best-practice-for-multiple-es-nodes-setup-in-production/144391 "2018-08-14T20:40:21Z")
Hi, there, I would greatly appreciate if anyone can share some insight about the elastic search cluster setup for the production environment. First question is about the data node numbers and hardware guidance to meet … --- ## [Cardinality is more than Count. How to achieve the exact uniq count?](https://discuss.elastic.co/t/cardinality-is-more-than-count-how-to-achieve-the-exact-uniq-count/63165)
**Author:** [@jaliph](https://discuss.elastic.co/u/jaliph)\ **Replies:** 6\ **Last updated:** [October 17, 2016, 8:52am UTC](https://discuss.elastic.co/t/cardinality-is-more-than-count-how-to-achieve-the-exact-uniq-count/63165 "2016-10-17T08:52:43Z")
Elasticsearch version: 2.4.0 Plugins installed: \[\] JVM version: 1.8.0\_101 RAM: 16331784kb Elasticsearch Heap Size:7g OS version:Red Hat Enterprise Linux Server release 6.6 (Santiago) Description of the problem includ… --- ## [Elasticsearch cluster uneven distribution of data](https://discuss.elastic.co/t/elasticsearch-cluster-uneven-distribution-of-data/247737)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 5\ **Last updated:** [September 7, 2020, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uneven-distribution-of-data/247737 "2020-09-07T13:11:09Z")
Dears, How to explain uneven distribution of data between cluster nodes? GET \_cat/allocation?v&pretty shards disk.indices disk.used disk.avail disk.total disk.percent host ip node 63 375gb … --- ## [Question about multiple conditions, actions and throttling](https://discuss.elastic.co/t/question-about-multiple-conditions-actions-and-throttling/89642)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [June 16, 2017, 1:24pm UTC](https://discuss.elastic.co/t/question-about-multiple-conditions-actions-and-throttling/89642 "2017-06-16T13:24:33Z")
Hi all, I was wondering if it's possible to have multiple conditions in one watch and whether its possible to limit throttling to 1 alert per day/week/month. Conditions: I'm checking for data usage. If usage is over … --- ## [How to create a scripted field using wildcard](https://discuss.elastic.co/t/how-to-create-a-scripted-field-using-wildcard/79812)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [March 24, 2017, 4:37pm UTC](https://discuss.elastic.co/t/how-to-create-a-scripted-field-using-wildcard/79812 "2017-03-24T16:37:07Z")
Hi, I am using ELK GA 5.0.0. I have manged to create a painless scripted field triggered in Kibana like; doc\['Action'\].value == 'PostA' ? 1 : 0 I have some selective actions like Post404, Post200 etc. I cant say th… --- ## [Visualize a number (integer field)](https://discuss.elastic.co/t/visualize-a-number-integer-field/83779)
**Author:** [@cabishek188](https://discuss.elastic.co/u/cabishek188)\ **Replies:** 2\ **Last updated:** [April 28, 2017, 7:47pm UTC](https://discuss.elastic.co/t/visualize-a-number-integer-field/83779 "2017-04-28T19:47:49Z")
Hi all, I want to visualize a simple integer field. For e.g. my data is as below: Number, Count 1,20 2,30, 3,50 I want to plot a line graph with x-axis as 1,2,3 and corresponding y-axis as 20,30,50 Note: I tri… --- ## [JLH score for significant terms](https://discuss.elastic.co/t/jlh-score-for-significant-terms/61935)
**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\ **Replies:** 2\ **Last updated:** [September 30, 2016, 4:03pm UTC](https://discuss.elastic.co/t/jlh-score-for-significant-terms/61935 "2016-09-30T16:03:03Z")
When using the JLH score to rank significance, how would the absolute change in popularity favor common terms whereas the relative change would favor rare terms as stated in the documentation? I ran through several c… --- ## [Http\_host only binds to 127.0.0.1](https://discuss.elastic.co/t/http-host-only-binds-to-127-0-0-1/136835)
**Author:** [@juanccert](https://discuss.elastic.co/u/juanccert)\ **Replies:** 4\ **Last updated:** [June 22, 2018, 8:09am UTC](https://discuss.elastic.co/t/http-host-only-binds-to-127-0-0-1/136835 "2018-06-22T08:09:18Z")
I'm trying to communicate my logstash instance with another host in a different LAN but I can't get my instance work in a different IP than the localhost: 127.0.0.1. This is my config settings: http.host:"172.20.25.… --- ## [Recursive glob patterns syntax help](https://discuss.elastic.co/t/recursive-glob-patterns-syntax-help/117885)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 4\ **Last updated:** [February 5, 2018, 6:30pm UTC](https://discuss.elastic.co/t/recursive-glob-patterns-syntax-help/117885 "2018-02-05T18:30:42Z")
Hello, I was attempting this pattern - input\_type: log paths: - /apps/log/\*\*/catalina.out multiline.pattern: '^\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}' multiline.negate: true multiline.match: after fields\_under\_root… [Previous page](https://discuss.elastic.co/top.md?page=601&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=603&per_page=50&period=all)