# Top

**URL:** https://discuss.elastic.co/top.md?page=603&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 604

---

## [Completion suggester using java api 6.1.1](https://discuss.elastic.co/t/completion-suggester-using-java-api-6-1-1/116463)

<div class="topic-metadata">

**Author:** [@manfrid](https://discuss.elastic.co/u/manfrid)\
**Replies:** 4\
**Last updated:** [January 22, 2018, 10:49am UTC](https://discuss.elastic.co/t/completion-suggester-using-java-api-6-1-1/116463 "2018-01-22T10:49:45Z")

</div>

I found some code changes in java api 6.1.1. how can i query with completion suggester using java api 6.1.1 ? help!

---

## [Timezone conversion in ingest node date processor](https://discuss.elastic.co/t/timezone-conversion-in-ingest-node-date-processor/250810)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 8\
**Last updated:** [October 7, 2020, 7:11am UTC](https://discuss.elastic.co/t/timezone-conversion-in-ingest-node-date-processor/250810 "2020-10-07T07:11:41Z")

</div>

Hi, I have logs with a timestamp coming in a format like this. \[9/21/20 10:38:02:681 EEST\] In Logstash, I've used the translate filter plugin to convert EEST to +03:00, I can't find a similar functionality with the in…

---

## [Configure logstash to read local files recursively and send to elastic cloud](https://discuss.elastic.co/t/configure-logstash-to-read-local-files-recursively-and-send-to-elastic-cloud/125440)

<div class="topic-metadata">

**Author:** [@elastic\_bees](https://discuss.elastic.co/u/elastic_bees)\
**Replies:** 8\
**Last updated:** [March 26, 2018, 9:15am UTC](https://discuss.elastic.co/t/configure-logstash-to-read-local-files-recursively-and-send-to-elastic-cloud/125440 "2018-03-26T09:15:52Z")

</div>

Hi, I'm trying to configure logstash to read local files recursively and send the output to elastic cloud. I put my CloudID in /etc/logstash/logstash.yml Should I specify something in the logstatsh conf file? Do you …

---

## [MAC address filter - OUI lookup](https://discuss.elastic.co/t/mac-address-filter-oui-lookup/125471)

<div class="topic-metadata">

**Author:** [@netmonky](https://discuss.elastic.co/u/netmonky)\
**Replies:** 3\
**Last updated:** [March 26, 2018, 6:48am UTC](https://discuss.elastic.co/t/mac-address-filter-oui-lookup/125471 "2018-03-26T06:48:41Z")

</div>

Hi everyone, Very new to elk, in fact, only just reading about it :). I do have a query around enrichment. If I had logs with MAC addresses in, is it possible to lookup the oui somewhere and add that as a attribute when…

---

## [Logstash multiline pattern : continuous newline](https://discuss.elastic.co/t/logstash-multiline-pattern-continuous-newline/120993)

<div class="topic-metadata">

**Author:** [@byungik](https://discuss.elastic.co/u/byungik)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 8:12am UTC](https://discuss.elastic.co/t/logstash-multiline-pattern-continuous-newline/120993 "2018-02-22T08:12:58Z")

</div>

This is my DB logs(CUBRID Slow query log). '16-09-26 14:26:31.564 (35) execute\_all srv\_h\_id 14 DELETE FROM MSG\_RCV\_CC WHERE RCV\_ID = ? 16-09-26 14:26:31.564 (35) bind 1 : VARCHAR (9)11282366 16-09-26 14:26:33.987 (35)…

---

## [Suspect illegal state: trying to move shard from primary mode to replica mode](https://discuss.elastic.co/t/suspect-illegal-state-trying-to-move-shard-from-primary-mode-to-replica-mode/23845)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 8\
**Last updated:** [June 24, 2015, 4:11pm UTC](https://discuss.elastic.co/t/suspect-illegal-state-trying-to-move-shard-from-primary-mode-to-replica-mode/23845 "2015-06-24T16:11:13Z")

</div>

Hi all, I have a 6 node cluster in production running ES 1.5.0, and I'm seeing these messages roughly 7 times a day across all machines in the cluster. I did some searching, and was not able to find an explanation of …

---

## [How to merge results of two aggregations](https://discuss.elastic.co/t/how-to-merge-results-of-two-aggregations/43351)

<div class="topic-metadata">

**Author:** [@Aravindh\_S](https://discuss.elastic.co/u/Aravindh_S)\
**Replies:** 1\
**Last updated:** [March 3, 2016, 9:24am UTC](https://discuss.elastic.co/t/how-to-merge-results-of-two-aggregations/43351 "2016-03-03T09:24:49Z")

</div>

Hi, I have two terms aggregations. Both return an id and a doc\_count for each of the ids. How can I merge the result of these two. I would like to do an union as well as intersection of both the results.

---

## [Load data from parquet to elastic search](https://discuss.elastic.co/t/load-data-from-parquet-to-elastic-search/63392)

<div class="topic-metadata">

**Author:** [@RSree](https://discuss.elastic.co/u/RSree)\
**Replies:** 2\
**Last updated:** [October 20, 2016, 5:08am UTC](https://discuss.elastic.co/t/load-data-from-parquet-to-elastic-search/63392 "2016-10-20T05:08:50Z")

</div>

what is the best design approach to load data from large parquet files of 500M records to ES.

---

## [Logstash to process multiple events sent from Filebeat](https://discuss.elastic.co/t/logstash-to-process-multiple-events-sent-from-filebeat/59142)

<div class="topic-metadata">

**Author:** [@Sri\_ram](https://discuss.elastic.co/u/Sri_ram)\
**Replies:** 7\
**Last updated:** [August 30, 2016, 9:47pm UTC](https://discuss.elastic.co/t/logstash-to-process-multiple-events-sent-from-filebeat/59142 "2016-08-30T21:47:16Z")

</div>

Hi I have to send different formatted logs which are stored under same path. Using Filebeat as a log shipper i was able to send individual log files to logstash . By specifying multiple prospectors and document\_type in…

---

## [Generate dynamic date for ES Index](https://discuss.elastic.co/t/generate-dynamic-date-for-es-index/35797)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 4\
**Last updated:** [November 29, 2015, 12:03am UTC](https://discuss.elastic.co/t/generate-dynamic-date-for-es-index/35797 "2015-11-29T00:03:51Z")

</div>

Hi Below is the simple ES output which indexes to e2e-YYYY.MM.dd index in ES. i.e., of the Today's date. output { elasticsearch { hosts =\> "host:9200" index =\> "e2e-%{+YYYY.MM.dd}…

---

## [Elastic-Agent No Index/Data](https://discuss.elastic.co/t/elastic-agent-no-index-data/247431)

<div class="topic-metadata">

**Author:** [@crazedmeph](https://discuss.elastic.co/u/crazedmeph)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 4:34pm UTC](https://discuss.elastic.co/t/elastic-agent-no-index-data/247431 "2020-09-04T16:34:43Z")

</div>

I am trying to test out this ingestion manager and i enrolled a agent that is doing metrics and nginx and i never seem to get any new indicies that have 7.9. I go through kibana -\> Stack management -\> Index Management -\> …

---

## [Xpack installation error - segmentation fault](https://discuss.elastic.co/t/xpack-installation-error-segmentation-fault/68390)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 8\
**Last updated:** [December 14, 2016, 9:56am UTC](https://discuss.elastic.co/t/xpack-installation-error-segmentation-fault/68390 "2016-12-14T09:56:07Z")

</div>

I installed x-pack plugin for Elasticsearch. When I tried installing as Kibana plugin, it is throwing me segmentation fault error. Following this procedure. I ran offline installation of x-pack using bin/kibana-plugin…

---

## [Elasticssearch 1.7.5 and spring-data-elasticsearch 1.3.2](https://discuss.elastic.co/t/elasticssearch-1-7-5-and-spring-data-elasticsearch-1-3-2/43750)

<div class="topic-metadata">

**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\
**Replies:** 8\
**Last updated:** [March 9, 2016, 10:15am UTC](https://discuss.elastic.co/t/elasticssearch-1-7-5-and-spring-data-elasticsearch-1-3-2/43750 "2016-03-09T10:15:35Z")

</div>

Hi friends, I tested a java application with elasticsearch (1.7.5) and spring-data-elasticsearch(1.3.2). When I run the java application, I don't get any data. SpringElasticsearchExample s = (SpringElasticsearchExam…

---

## [Temporary bulk send failure](https://discuss.elastic.co/t/temporary-bulk-send-failure/54607)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 2\
**Last updated:** [July 4, 2016, 4:52am UTC](https://discuss.elastic.co/t/temporary-bulk-send-failure/54607 "2016-07-04T04:52:41Z")

</div>

I have installed ES in indexing data from different nodes running topbeat and packetbeat and it was running fine before. However, when I look at the node which sends data to the ES server, it shows Temporary bulk send fa…

---

## [Conditional query (If matches in field than do this...)](https://discuss.elastic.co/t/conditional-query-if-matches-in-field-than-do-this/136978)

<div class="topic-metadata">

**Author:** [@creaticious](https://discuss.elastic.co/u/creaticious)\
**Replies:** 1\
**Last updated:** [June 22, 2018, 10:24am UTC](https://discuss.elastic.co/t/conditional-query-if-matches-in-field-than-do-this/136978 "2018-06-22T10:24:28Z")

</div>

Hey guys, i've some problems to build a special conditional query. Pretend i have documents a,b,c etc. with a "country"-field and a "description"-field. My query should look in both fields...BUT if the user searches for…

---

## [Adding credentials to helm chart](https://discuss.elastic.co/t/adding-credentials-to-helm-chart/242420)

<div class="topic-metadata">

**Author:** [@joshuacox](https://discuss.elastic.co/u/joshuacox)\
**Replies:** 6\
**Last updated:** [September 16, 2020, 8:11am UTC](https://discuss.elastic.co/t/adding-credentials-to-helm-chart/242420 "2020-09-16T08:11:00Z")

</div>

On this page the section on adding a snapshot says: Add any required secrets or credentials into an Elasticsearch keystore following the how to use the keystore guide. But I am confused as to what to name the secret? …

---

## [{Help me}Extracting Domain from Mail address](https://discuss.elastic.co/t/help-me-extracting-domain-from-mail-address/60186)

<div class="topic-metadata">

**Author:** [@Uriel\_Ricardo](https://discuss.elastic.co/u/Uriel_Ricardo)\
**Replies:** 6\
**Last updated:** [September 13, 2016, 5:45pm UTC](https://discuss.elastic.co/t/help-me-extracting-domain-from-mail-address/60186 "2016-09-13T17:45:46Z")

</div>

Hello Friends. I need to extract the domain of an email address , I have a .csv , in one of the columns it stores the e -mail. How can I do it only get the domain? Note : This is my csv filter, it stores the e- mail …

---

## [How to store large numbers in elasticsearch?](https://discuss.elastic.co/t/how-to-store-large-numbers-in-elasticsearch/27957)

<div class="topic-metadata">

**Author:** [@timoschmidt](https://discuss.elastic.co/u/timoschmidt)\
**Replies:** 3\
**Last updated:** [August 25, 2015, 10:08am UTC](https://discuss.elastic.co/t/how-to-store-large-numbers-in-elasticsearch/27957 "2015-08-25T10:08:55Z")

</div>

Hello together, in our current project we need to store fields in an index with numbers, that are bigger then a long value. Is this somehow possible? Currently i get the following error: Error encountered during bulk…

---

## [Date filter is not working in kibana using DSL query](https://discuss.elastic.co/t/date-filter-is-not-working-in-kibana-using-dsl-query/179299)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 5\
**Last updated:** [May 4, 2019, 8:09am UTC](https://discuss.elastic.co/t/date-filter-is-not-working-in-kibana-using-dsl-query/179299 "2019-05-04T08:09:35Z")

</div>

HI , i am trying to a write DSL query for particular date range and its not working and i dont know why ? i have Time (kibana uploaded time) , message and date (the log generated date) as shown in the below image . …

---

## [Send logs to Kibana using Mobile IOS devie (android, ios)](https://discuss.elastic.co/t/send-logs-to-kibana-using-mobile-ios-devie-android-ios/305679)

<div class="topic-metadata">

**Author:** [@prakashshende](https://discuss.elastic.co/u/prakashshende)\
**Replies:** 4\
**Last updated:** [May 30, 2022, 6:46am UTC](https://discuss.elastic.co/t/send-logs-to-kibana-using-mobile-ios-devie-android-ios/305679 "2022-05-30T06:46:09Z")

</div>

Hello, How could I send the logs from a native mobile app (android, ios) to Kibana? What product provided by elastic should I use?

---

## [Unable to create api key](https://discuss.elastic.co/t/unable-to-create-api-key/271603)

<div class="topic-metadata">

**Author:** [@samueliako](https://discuss.elastic.co/u/samueliako)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 5:47am UTC](https://discuss.elastic.co/t/unable-to-create-api-key/271603 "2021-05-05T05:47:24Z")

</div>

Hi all, I have problem with generating api key using this command "#sudo -u apm-server apm-server apikey create --name user1-key". I'm receiving this error: {"error":{"root\_cause":\[{"type":"feature\_not\_enabled\_exceptio…

---

## [Can we run two ES Instances on the same server](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 6\
**Last updated:** [August 28, 2019, 12:23pm UTC](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982 "2019-08-28T12:23:46Z")

</div>

Currently I have one cluster 1 node ES . I need few inputs on below points.. Can we run two ES instances on the same server ? if yes, how can we ensure, that the client have single endpoint . Is there any rever…

---

## [LS pipeline start but no ES index created \[SOLVED\]](https://discuss.elastic.co/t/ls-pipeline-start-but-no-es-index-created-solved/64783)

<div class="topic-metadata">

**Author:** [@mmac](https://discuss.elastic.co/u/mmac)\
**Replies:** 3\
**Last updated:** [November 3, 2016, 6:15pm UTC](https://discuss.elastic.co/t/ls-pipeline-start-but-no-es-index-created-solved/64783 "2016-11-03T18:15:33Z")

</div>

Newbie here. The first time I ran through the LS guide, I was able to start a pipeline that created an index. However, I have not been able to start a pipeline that created an index since. I'm thinking that maybe the por…

---

## [100% CPU and GC on all nodes](https://discuss.elastic.co/t/100-cpu-and-gc-on-all-nodes/191485)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 5\
**Last updated:** [July 21, 2019, 12:11pm UTC](https://discuss.elastic.co/t/100-cpu-and-gc-on-all-nodes/191485 "2019-07-21T12:11:10Z")

</div>

Hi guys, we recently did a rolling upgrade on our ES Cluster (40+ Nodes, 120+ indices) from 5.6.14 to 6.8.1. We had many issues which we could eventually fix. One of the issues we still have however is, that the whole…

---

## [Logstash parent-child event configuration](https://discuss.elastic.co/t/logstash-parent-child-event-configuration/58117)

<div class="topic-metadata">

**Author:** [@aqiao](https://discuss.elastic.co/u/aqiao)\
**Replies:** 1\
**Last updated:** [August 18, 2016, 2:36pm UTC](https://discuss.elastic.co/t/logstash-parent-child-event-configuration/58117 "2016-08-18T14:36:33Z")

</div>

2016-08-16 14:00:14,655 ABC BETA P1 DecodeFieldList Refresh \<6\>,TRDPRC\_1,Price, \<15\>,CURRENCY,String,0 \<22\>,BID,Price, \<23\>,BID\_1,Price, \<24\>,BID\_2,Price, \<25\>,ASK,Price, …

---

## [Permission Rules for CSV Export on Basic License](https://discuss.elastic.co/t/permission-rules-for-csv-export-on-basic-license/303979)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 3:47pm UTC](https://discuss.elastic.co/t/permission-rules-for-csv-export-on-basic-license/303979 "2022-05-05T15:47:25Z")

</div>

Hey there, we run an ECK instance, which runs ES 7.16.2 However recently, users who were previously able to generate CSV reports are no longer able to generate CSV reports. We didn't upgade the stack or anything, just su…

---

## [ES\_HEAP\_SIZE not being used on new installs of ES 2.3.3](https://discuss.elastic.co/t/es-heap-size-not-being-used-on-new-installs-of-es-2-3-3/63628)

<div class="topic-metadata">

**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\
**Replies:** 7\
**Last updated:** [October 26, 2016, 2:47am UTC](https://discuss.elastic.co/t/es-heap-size-not-being-used-on-new-installs-of-es-2-3-3/63628 "2016-10-26T02:47:07Z")

</div>

Prior to this issue we had an elasticsearch cluster of 3 master and 2 data nodes. During the setup of those nodes there was no issue setting the ES\_HEAP\_SIZE and seeing that reflect in the Java min/max memory args on sta…

---

## [Logstash multiple pipeline configuration using logstash helm chart](https://discuss.elastic.co/t/logstash-multiple-pipeline-configuration-using-logstash-helm-chart/275880)

<div class="topic-metadata">

**Author:** [@arijitc](https://discuss.elastic.co/u/arijitc)\
**Replies:** 0\
**Last updated:** [June 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipeline-configuration-using-logstash-helm-chart/275880 "2021-06-14T17:47:37Z")

</div>

While configuring multiple pipeline using logstash (version 7.13.1) helm chart , the values.yaml is having a section # Allows you to add any pipeline files in /usr/share/logstash/pipeline/ ### \*\*\*warn\*\*\* there is a hard…

---

## [Elasticsearch update Query using script with params](https://discuss.elastic.co/t/elasticsearch-update-query-using-script-with-params/164051)

<div class="topic-metadata">

**Author:** [@Mohamed](https://discuss.elastic.co/u/Mohamed)\
**Replies:** 0\
**Last updated:** [January 13, 2019, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-update-query-using-script-with-params/164051 "2019-01-13T19:08:55Z")

</div>

Hello, I want to make partial updates by adding an element in my users list: "users" : \[ { "password" : "pwd", "level" : "admin", "user\_name" : "XX", …

---

## [Initializing and locks](https://discuss.elastic.co/t/initializing-and-locks/13430)

<div class="topic-metadata">

**Author:** [@Dan\_Fairs](https://discuss.elastic.co/u/Dan_Fairs)\
**Replies:** 2\
**Last updated:** [September 2, 2013, 9:28am UTC](https://discuss.elastic.co/t/initializing-and-locks/13430 "2013-09-02T09:28:25Z")

</div>

Hi, I added some more servers to our ES 0.19.8 cluster over the weekend. All went smoothly, except for one index. The logs on one of the nodes hosting the index have the following warning: \[2013-09-02 00:18:04,082\]…

---

## [Upsert Using NEST 7](https://discuss.elastic.co/t/upsert-using-nest-7/204276)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 4\
**Last updated:** [October 21, 2019, 3:22pm UTC](https://discuss.elastic.co/t/upsert-using-nest-7/204276 "2019-10-21T15:22:06Z")

</div>

Unfortunately, the docs for NEST is completely useless in providing answers to so many issues. Everything is available for Elasticsearch and can easily be found. But if you are looking for the same thing in NEST - Forget…

---

## [Log Encoding message incorrect](https://discuss.elastic.co/t/log-encoding-message-incorrect/119546)

<div class="topic-metadata">

**Author:** [@shri](https://discuss.elastic.co/u/shri)\
**Replies:** 8\
**Last updated:** [February 15, 2018, 8:04pm UTC](https://discuss.elastic.co/t/log-encoding-message-incorrect/119546 "2018-02-15T20:04:55Z")

</div>

Hello, Im new to elk. I'm using multiple inputs i) tcp ii) beats in my logstash. i) For tcp , using the spring pattern with in the code itself and simply default value of logstash server IP as below And able to see…

---

## [Running kibana and maps service behind firewall](https://discuss.elastic.co/t/running-kibana-and-maps-service-behind-firewall/106302)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 8\
**Last updated:** [November 9, 2017, 7:50am UTC](https://discuss.elastic.co/t/running-kibana-and-maps-service-behind-firewall/106302 "2017-11-09T07:50:47Z")

</div>

Hi, We want to run Logstash, Elasticsearch, and Kibana behind firewall. Is it straight forward or there is some special configuration to make? Furthermore, this means we have to run our own maps service, as requests …

---

## [error=\>"Elasticsearch Unreachable:](https://discuss.elastic.co/t/error-elasticsearch-unreachable/127676)

<div class="topic-metadata">

**Author:** [@dchan08](https://discuss.elastic.co/u/dchan08)\
**Replies:** 1\
**Last updated:** [April 11, 2018, 4:24pm UTC](https://discuss.elastic.co/t/error-elasticsearch-unreachable/127676 "2018-04-11T16:24:13Z")

</div>

Hi, i was running the latest version of ELK stack and decided to add x-pack to it, after which when i tried to run the configuration file in logstash it throws me the following error \[INFO \] 2018-04-11 06:09:25.860 \[ma…

---

## [Logstash forwarder vs. logback json encoder](https://discuss.elastic.co/t/logstash-forwarder-vs-logback-json-encoder/34281)

<div class="topic-metadata">

**Author:** [@rammulay](https://discuss.elastic.co/u/rammulay)\
**Replies:** 2\
**Last updated:** [December 2, 2015, 8:30pm UTC](https://discuss.elastic.co/t/logstash-forwarder-vs-logback-json-encoder/34281 "2015-12-02T20:30:20Z")

</div>

Hi, logs can be forwarded to logstash server using logback json encoder, LogstashTcpSocketAppender (https://github.com/logstash/logstash-logback-encoder) without installing the logstash forwarder. Is there a reason we st…

---

## [Creating multiple tabs in kibana](https://discuss.elastic.co/t/creating-multiple-tabs-in-kibana/249310)

<div class="topic-metadata">

**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\
**Replies:** 3\
**Last updated:** [September 22, 2020, 1:23pm UTC](https://discuss.elastic.co/t/creating-multiple-tabs-in-kibana/249310 "2020-09-22T13:23:58Z")

</div>

Hi team, In the dashboard, I want to create a Navigation pane and create tab names like demand,supply,etc.And when the user clicks on any tab name, it should navigate to the correspoding dashboard(or view). Essentially…

---

## [Ingest-attachment plugin installation within Dockerfile](https://discuss.elastic.co/t/ingest-attachment-plugin-installation-within-dockerfile/178041)

<div class="topic-metadata">

**Author:** [@s0r1n](https://discuss.elastic.co/u/s0r1n)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 2:15pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-installation-within-dockerfile/178041 "2019-04-23T14:15:19Z")

</div>

In order to install ingest-attachment plugin to a official elasticsearch docker image, here the Dockerfile to use: FROM docker.elastic.co/elasticsearch/elasticsearch:6.7.0 RUN /usr/share/elasticsearch/bin/elasticsearch-…

---

## [CombinedApacheLog pattern where request is without parameters](https://discuss.elastic.co/t/combinedapachelog-pattern-where-request-is-without-parameters/110383)

<div class="topic-metadata">

**Author:** [@Ronald\_Haring](https://discuss.elastic.co/u/Ronald_Haring)\
**Replies:** 7\
**Last updated:** [December 13, 2017, 3:13pm UTC](https://discuss.elastic.co/t/combinedapachelog-pattern-where-request-is-without-parameters/110383 "2017-12-13T15:13:51Z")

</div>

Hello i have set up a filebeat es and kibana stack but in the kibana/es i can see that the request contains parameters making it hard to collect all data on a specific url, i did find the URIPATH parameter but dont know …

---

## [How exactly do I shutdown, then restart the cluster?](https://discuss.elastic.co/t/how-exactly-do-i-shutdown-then-restart-the-cluster/230622)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 8\
**Last updated:** [April 30, 2020, 7:48pm UTC](https://discuss.elastic.co/t/how-exactly-do-i-shutdown-then-restart-the-cluster/230622 "2020-04-30T19:48:14Z")

</div>

I have a cluster of 3 nodes. I need to change a setting in elasticsearch.yml and then restart the cluster. I am a bit confused on the procedure. Here is what I have so far. Is this correct? Make changes to /etc/elast…

---

## [Access current time in kibana scripted field](https://discuss.elastic.co/t/access-current-time-in-kibana-scripted-field/47897)

<div class="topic-metadata">

**Author:** [@johan1](https://discuss.elastic.co/u/johan1)\
**Replies:** 4\
**Last updated:** [April 25, 2016, 5:49am UTC](https://discuss.elastic.co/t/access-current-time-in-kibana-scripted-field/47897 "2016-04-25T05:49:53Z")

</div>

Hi, We are trying to visualize some data based on a timespan between two dates date1 and date2. I'm trying to create a scripted field to return the amount of days between the two dates. This works as expected however d…

---

## [Include-in-all and include-in-root](https://discuss.elastic.co/t/include-in-all-and-include-in-root/12067)

<div class="topic-metadata">

**Author:** [@Chetana](https://discuss.elastic.co/u/Chetana)\
**Replies:** 4\
**Last updated:** [May 24, 2013, 11:38am UTC](https://discuss.elastic.co/t/include-in-all-and-include-in-root/12067 "2013-05-24T11:38:06Z")

</div>

I am not clear on the usage of include-in-all and include-in-root. Could someone please explain with some examples or point to some good references -- You received this message because you are subscribed to the…

---

## [Single NFS Storage for Entire Cluster - Separate processing and data replication](https://discuss.elastic.co/t/single-nfs-storage-for-entire-cluster-separate-processing-and-data-replication/22576)

<div class="topic-metadata">

**Author:** [@Bartleby\_O\_Connor](https://discuss.elastic.co/u/Bartleby_O_Connor)\
**Replies:** 1\
**Last updated:** [March 9, 2015, 7:00pm UTC](https://discuss.elastic.co/t/single-nfs-storage-for-entire-cluster-separate-processing-and-data-replication/22576 "2015-03-09T19:00:13Z")

</div>

I have a set of queries that take up a lot of RAM (mostly reads, few, infrequent writes), so I'm testing a cluster that has multiple nodes on different machines as query engines to field requests. However, my machines ar…

---

## [Create custom label for pie chart](https://discuss.elastic.co/t/create-custom-label-for-pie-chart/211271)

<div class="topic-metadata">

**Author:** [@thotakura2](https://discuss.elastic.co/u/thotakura2)\
**Replies:** 2\
**Last updated:** [December 16, 2019, 6:07am UTC](https://discuss.elastic.co/t/create-custom-label-for-pie-chart/211271 "2019-12-16T06:07:47Z")

</div>

Hi, I am new for elasticsearch and kibana while creating visualization i have faced a small issue. In the following image you can see the labels are set to 1,2,3,4,5. Instead of these i want the name of that highest co…

---

## [Establishing graph connections](https://discuss.elastic.co/t/establishing-graph-connections/53055)

<div class="topic-metadata">

**Author:** [@morioramdenbourg](https://discuss.elastic.co/u/morioramdenbourg)\
**Replies:** 5\
**Last updated:** [June 20, 2016, 8:58pm UTC](https://discuss.elastic.co/t/establishing-graph-connections/53055 "2016-06-20T20:58:38Z")

</div>

Hi, I'm currently new to graph and have been learning its API using CSV exports from crunchbase that I indexed into Elasticsearch. Each company in the database currently has a company name, a list of categories that are…

---

## [Logstash with protobuf](https://discuss.elastic.co/t/logstash-with-protobuf/27450)

<div class="topic-metadata">

**Author:** [@yairtheone](https://discuss.elastic.co/u/yairtheone)\
**Replies:** 1\
**Last updated:** [January 6, 2016, 9:42am UTC](https://discuss.elastic.co/t/logstash-with-protobuf/27450 "2016-01-06T09:42:53Z")

</div>

hi , is there plans to support input as protobuf file ?

---

## [I want to know the word list of the \_\_english\_\_ stop token filter](https://discuss.elastic.co/t/i-want-to-know-the-word-list-of-the---english---stop-token-filter/96930)

<div class="topic-metadata">

**Author:** [@zhangweilun](https://discuss.elastic.co/u/zhangweilun)\
**Replies:** 1\
**Last updated:** [August 14, 2017, 9:17am UTC](https://discuss.elastic.co/t/i-want-to-know-the-word-list-of-the---english---stop-token-filter/96930 "2017-08-14T09:17:25Z")

</div>

“english\_stop”: { “type”: “stop”, “stopwords”: “english” }, i want to know the specific words

---

## [How to combine multilines to a single entry in kibana for a log](https://discuss.elastic.co/t/how-to-combine-multilines-to-a-single-entry-in-kibana-for-a-log/265165)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 2\
**Last updated:** [February 23, 2021, 4:05pm UTC](https://discuss.elastic.co/t/how-to-combine-multilines-to-a-single-entry-in-kibana-for-a-log/265165 "2021-02-23T16:05:43Z")

</div>

Hi Team, Below is the log file , I need to achieve the below scenario's please help me on this. Scenario 1: Right now, I was getting the logs in the Kibana dashboard as below. I want all the multiline in the logs shou…

---

## [Send data kibana via curl post](https://discuss.elastic.co/t/send-data-kibana-via-curl-post/268531)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 4\
**Last updated:** [March 27, 2021, 3:49pm UTC](https://discuss.elastic.co/t/send-data-kibana-via-curl-post/268531 "2021-03-27T15:49:10Z")

</div>

Hi, I'm trying to send data to my Elastic Cloud instance via CURL POST, in this way: curl -v -X POST -u XXX:XXX -H "Content-Type: application/json" "https://XXX.es.europe-west3.gcp.cloud.es.io:9243/test/\_doc " -d' { "f…

---

## [Why is retry\_on\_conflict necessary?](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [August 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177 "2022-08-04T06:50:09Z")

</div>

We are battling to understand why version conflicts occur and why retry\_on\_conflict is a sensible strategy to resolving them. Consider Document \_id: 1 which has value foo: 1 and \_version: 1. If several processes try to …

---

## [\[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 12:56pm UTC](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372 "2019-10-07T12:56:48Z")

</div>

We Updated a QA ELK stack to ES 7.3.2 and since then then this message is all over the ES logs. \[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future. According to this…

[Previous page](https://discuss.elastic.co/top.md?page=602&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=604&per_page=50&period=all)
