# Top

**URL:** https://discuss.elastic.co/top.md?page=623&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 624

---

## [Aggregating Data for Visualization](https://discuss.elastic.co/t/aggregating-data-for-visualization/191429)

<div class="topic-metadata">

**Author:** [@talqadi7](https://discuss.elastic.co/u/talqadi7)\
**Replies:** 5\
**Last updated:** [July 24, 2019, 8:37pm UTC](https://discuss.elastic.co/t/aggregating-data-for-visualization/191429 "2019-07-24T20:37:07Z")

</div>

Hi all, I'm trying visualize data based on an aggregation of a certain column. In this case, its company name. Throughout my data, company names are not standard, and I would like to find a way to either pre-aggregate th…

---

## [Help me to Activate X-Pack security on Elasticsearch 5.6.15](https://discuss.elastic.co/t/help-me-to-activate-x-pack-security-on-elasticsearch-5-6-15/182040)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 5\
**Last updated:** [May 21, 2019, 9:50pm UTC](https://discuss.elastic.co/t/help-me-to-activate-x-pack-security-on-elasticsearch-5-6-15/182040 "2019-05-21T21:50:32Z")

</div>

Hi, I have installed elasticsearch 5.6.15 on one of my node. I want to secure my elasticsearch. I have also installed the same version of x-pack plugin. and I have chenged the following in elasticsearch.yml file xpack…

---

## [Topology chart visualization in kibana](https://discuss.elastic.co/t/topology-chart-visualization-in-kibana/37592)

<div class="topic-metadata">

**Author:** [@rabeetwaqar1](https://discuss.elastic.co/u/rabeetwaqar1)\
**Replies:** 3\
**Last updated:** [March 17, 2016, 9:33pm UTC](https://discuss.elastic.co/t/topology-chart-visualization-in-kibana/37592 "2016-03-17T21:33:49Z")

</div>

Hi, I have been searching on this from past few days and i havn't found any useful solution. Kibana 3 supports toplogy charts but where to add this? i'm stuck in the middle please help me out with this. If there is…

---

## ["nginx-access-\*" index pattern does not contain any of the following field types: geo\_point](https://discuss.elastic.co/t/nginx-access-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/85398)

<div class="topic-metadata">

**Author:** [@aarishramesh](https://discuss.elastic.co/u/aarishramesh)\
**Replies:** 4\
**Last updated:** [May 15, 2017, 11:58am UTC](https://discuss.elastic.co/t/nginx-access-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/85398 "2017-05-15T11:58:09Z")

</div>

I get the above error while trying to create tile map visualization based on nginx client ip. I have set up ELK to log my nginx access logs. Have defined a custom index pattern in my filebeat.yml like below - input\_type…

---

## [No master node reported](https://discuss.elastic.co/t/no-master-node-reported/261367)

<div class="topic-metadata">

**Author:** [@Jorge\_Mario\_Montes\_R](https://discuss.elastic.co/u/Jorge_Mario_Montes_R)\
**Replies:** 6\
**Last updated:** [January 19, 2021, 10:38pm UTC](https://discuss.elastic.co/t/no-master-node-reported/261367 "2021-01-19T22:38:13Z")

</div>

This is on a cluster on cloud.elastic.co After reducing memory form the master node, I'm unable to get it back running. Logs show: master\_not\_discovered\_exception Tried to reapply the last successful configuration, bu…

---

## [Ingress for Kibana dashboard when using kubernetes & traefik](https://discuss.elastic.co/t/ingress-for-kibana-dashboard-when-using-kubernetes-traefik/198236)

<div class="topic-metadata">

**Author:** [@vrider](https://discuss.elastic.co/u/vrider)\
**Replies:** 1\
**Last updated:** [September 5, 2019, 12:05pm UTC](https://discuss.elastic.co/t/ingress-for-kibana-dashboard-when-using-kubernetes-traefik/198236 "2019-09-05T12:05:02Z")

</div>

Dear Colleagues, I've followed a get started guide on https://www.elastic.co/elasticsearch-kubernetes I've deployed es + kibana in the way described there. If I curl from master instance , it works curl -I -k -u elas…

---

## [New protocol: CouchDB](https://discuss.elastic.co/t/new-protocol-couchdb/35538)

<div class="topic-metadata">

**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\
**Replies:** 8\
**Last updated:** [November 27, 2015, 4:36pm UTC](https://discuss.elastic.co/t/new-protocol-couchdb/35538 "2015-11-27T16:36:51Z")

</div>

Hello everyone, While waiting for the contributing agreement for my AMQP plugin, my company asked me if it's possible to implement the couchdb protocol for Packetbeat. So I have two questions : -First, is anybody alr…

---

## [Failed to connect to backoff(elasticsearch(http://172.18.158.52:9200))](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-172-18-158-52-9200/357433)

<div class="topic-metadata">

**Author:** [@Chadi\_SHWADA](https://discuss.elastic.co/u/Chadi_SHWADA)\
**Replies:** 5\
**Last updated:** [April 17, 2024, 11:59am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-172-18-158-52-9200/357433 "2024-04-17T11:59:21Z")

</div>

I currently have two servers which are as follows: 172.18.158.52 where I installed elasticsearch and kibana 172.18.158.49 where I installed filebeat Filebeat is able to recover the data except that I have this error i…

---

## [Winlogbeat 7.13.0 expected int but got type string in equals condition](https://discuss.elastic.co/t/winlogbeat-7-13-0-expected-int-but-got-type-string-in-equals-condition/274273)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 5:17pm UTC](https://discuss.elastic.co/t/winlogbeat-7-13-0-expected-int-but-got-type-string-in-equals-condition/274273 "2021-06-15T17:17:58Z")

</div>

I've upgraded to the latest version and winlogbeat is not sending data anymore The changes in 7.13.0 Change event.code and winlog.event\_id from int to keyword. I'm seeing a lot of these WARN \[conditions\] condit…

---

## [Logstash multiple pipeline on docker](https://discuss.elastic.co/t/logstash-multiple-pipeline-on-docker/241301)

<div class="topic-metadata">

**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\
**Replies:** 4\
**Last updated:** [July 19, 2020, 9:09am UTC](https://discuss.elastic.co/t/logstash-multiple-pipeline-on-docker/241301 "2020-07-19T09:09:05Z")

</div>

Hi All I'm trying to build logstash on docker with multiple pipelines. After reading a lot over the internet and trying things, still can't start multiple pipelines on docker. I'm trying to run some basic configuratio…

---

## [ECE - Certificate chain was invalid](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 4\
**Last updated:** [February 3, 2020, 7:50pm UTC](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125 "2020-02-03T19:50:15Z")

</div>

Hi all, I am getting this error message when uploading my proxy certificate into ECE: Certificate chain was invalid \[Invalid Entry: expected X.509 Certificate As I don't have certificates, I am unable to log into Kiba…

---

## [Ingest pipeline write to different index](https://discuss.elastic.co/t/ingest-pipeline-write-to-different-index/198512)

<div class="topic-metadata">

**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\
**Replies:** 1\
**Last updated:** [September 7, 2019, 3:25pm UTC](https://discuss.elastic.co/t/ingest-pipeline-write-to-different-index/198512 "2019-09-07T15:25:19Z")

</div>

I would like to create new documents based on results from the ingest pipeline. is that possible? for example, if there is a log message that says "tests failed", I would like to write into a different "failed\_tests" in…

---

## [Is it possible : Stream 50k-100k document \< 1sec?](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640)

<div class="topic-metadata">

**Author:** [@saz](https://discuss.elastic.co/u/saz)\
**Replies:** 6\
**Last updated:** [August 20, 2019, 5:25am UTC](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640 "2019-08-20T05:25:23Z")

</div>

Hi , We have a usecase in our projects, where elasticsearch is used for search and need to send anywhere from 50,000-100,000 documents for further processing and then send to client. The response document should contai…

---

## [How to GET a Field from nested JSON Data using Query](https://discuss.elastic.co/t/how-to-get-a-field-from-nested-json-data-using-query/189812)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 6\
**Last updated:** [July 15, 2019, 9:43am UTC](https://discuss.elastic.co/t/how-to-get-a-field-from-nested-json-data-using-query/189812 "2019-07-15T09:43:25Z")

</div>

Hello folks , i have this bellow JSON Data, and i want to write a Query , the Query is , (Give me all Entities where the "ai\_id" has the Value = 0 ). the JSON Data , { "\_index": "try1", "\_type"…

---

## [X-pack :-Report : PDF generated report in the mail attached is getting corrupted](https://discuss.elastic.co/t/x-pack-report-pdf-generated-report-in-the-mail-attached-is-getting-corrupted/91080)

<div class="topic-metadata">

**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\
**Replies:** 6\
**Last updated:** [July 19, 2017, 5:15am UTC](https://discuss.elastic.co/t/x-pack-report-pdf-generated-report-in-the-mail-attached-is-getting-corrupted/91080 "2017-07-19T05:15:42Z")

</div>

As i am trying to generate a report dynamically and trigger it on a specified time: The pdf report is getting generated dynamically based on the given URL and sending it as an attachment successfully but the problem he…

---

## [Loading config file error: open filebeat.yml: function not implemented](https://discuss.elastic.co/t/loading-config-file-error-open-filebeat-yml-function-not-implemented/46708)

<div class="topic-metadata">

**Author:** [@iyaozhen](https://discuss.elastic.co/u/iyaozhen)\
**Replies:** 6\
**Last updated:** [August 21, 2016, 5:07pm UTC](https://discuss.elastic.co/t/loading-config-file-error-open-filebeat-yml-function-not-implemented/46708 "2016-08-21T17:07:16Z")

</div>

$ ./filebeat -c filebeat.yml -e Loading config file error: Failed to read filebeat.yml: open filebeat.yml: function not implemented. Exiting. my system: LSB Version: :core-3.0-amd64:core-3.0-noarch:graphics-3.0-amd64:g…

---

## [Is rrf available in the free, self-hosted version of elastic search?](https://discuss.elastic.co/t/is-rrf-available-in-the-free-self-hosted-version-of-elastic-search/342354)

<div class="topic-metadata">

**Author:** [@panivan99pl](https://discuss.elastic.co/u/panivan99pl)\
**Replies:** 1\
**Last updated:** [September 5, 2023, 3:39pm UTC](https://discuss.elastic.co/t/is-rrf-available-in-the-free-self-hosted-version-of-elastic-search/342354 "2023-09-05T15:39:40Z")

</div>

I am using Elasticsearch as self-hosted in docker container, 8.9.1. When I query with the parameter rrf Reciprocal rank fusion, I get this message elasticsearch.AuthorizationException: AuthorizationException(403, 'secur…

---

## [Getting count based on field value](https://discuss.elastic.co/t/getting-count-based-on-field-value/34830)

<div class="topic-metadata">

**Author:** [@jdepp99](https://discuss.elastic.co/u/jdepp99)\
**Replies:** 3\
**Last updated:** [November 18, 2015, 4:08pm UTC](https://discuss.elastic.co/t/getting-count-based-on-field-value/34830 "2015-11-18T16:08:59Z")

</div>

{ "query": { "filtered": { "query": { "query\_string": { "analyze\_wildcard": true, "query": "\*" } }, "filter": { "bool": { "must": \[ …

---

## [Kibana and Websockets](https://discuss.elastic.co/t/kibana-and-websockets/81801)

<div class="topic-metadata">

**Author:** [@deepansh](https://discuss.elastic.co/u/deepansh)\
**Replies:** 5\
**Last updated:** [April 11, 2017, 9:15am UTC](https://discuss.elastic.co/t/kibana-and-websockets/81801 "2017-04-11T09:15:12Z")

</div>

Hi, Does kibana uses websockets?

---

## [Rebuilding cluster, few question about shards, index organization and retention](https://discuss.elastic.co/t/rebuilding-cluster-few-question-about-shards-index-organization-and-retention/50066)

<div class="topic-metadata">

**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\
**Replies:** 5\
**Last updated:** [May 17, 2016, 5:55am UTC](https://discuss.elastic.co/t/rebuilding-cluster-few-question-about-shards-index-organization-and-retention/50066 "2016-05-17T05:55:10Z")

</div>

Hello, I'm in the process of rebuilding our cluster and after some reading, I'm still not sure I get it right. Current status: 3 node cluster that is used for log storage from our servers. I process them with logstas…

---

## [Elastiscsearch Output - Attempted to send a bulk request](https://discuss.elastic.co/t/elastiscsearch-output-attempted-to-send-a-bulk-request/166703)

<div class="topic-metadata">

**Author:** [@Gochou](https://discuss.elastic.co/u/Gochou)\
**Replies:** 2\
**Last updated:** [February 5, 2019, 8:33am UTC](https://discuss.elastic.co/t/elastiscsearch-output-attempted-to-send-a-bulk-request/166703 "2019-02-05T08:33:56Z")

</div>

Hi, So from time to time I get this error in my logstash logs: \[2019-02-01T01:35:18,762\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreach…

---

## [An unknown error occurred sending a bulk request to Elasticsearch](https://discuss.elastic.co/t/an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/95537)

<div class="topic-metadata">

**Author:** [@sadiesh](https://discuss.elastic.co/u/sadiesh)\
**Replies:** 0\
**Last updated:** [August 2, 2017, 1:29pm UTC](https://discuss.elastic.co/t/an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/95537 "2017-08-02T13:29:41Z")

</div>

Am getting following error in logstash. while running a JDBC Plugin An unknown error occurred sending a bulk request to Elasticsearch. We will retry indefinitely {:error\_message=\>“No serializer found for class java.io.B…

---

## [APM java agent do not support microservice framework (spring cloud)?](https://discuss.elastic.co/t/apm-java-agent-do-not-support-microservice-framework-spring-cloud/168550)

<div class="topic-metadata">

**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\
**Replies:** 2\
**Last updated:** [February 16, 2019, 3:09am UTC](https://discuss.elastic.co/t/apm-java-agent-do-not-support-microservice-framework-spring-cloud/168550 "2019-02-16T03:09:01Z")

</div>

I use the elasticsearch/kibana/APM server 6.6 version, and APM java agent 1.3 version. In my test, I use spring cloud (Greenwich.RELEASE) as the distributed micro service framework and use netflix eureka as the service …

---

## [Kibana creating bar visualization with different filters on each bar, y axis advanced option json input](https://discuss.elastic.co/t/kibana-creating-bar-visualization-with-different-filters-on-each-bar-y-axis-advanced-option-json-input/256013)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 3\
**Last updated:** [November 19, 2020, 4:27pm UTC](https://discuss.elastic.co/t/kibana-creating-bar-visualization-with-different-filters-on-each-bar-y-axis-advanced-option-json-input/256013 "2020-11-19T16:27:34Z")

</div>

Hi, I would like to create a bar chart looks like below. But each bar in the bar chart will need to have different filters. For example, one of the bar call record\_id, and this bar need to have filter in the filter 1, a…

---

## [Boosting query but score is null](https://discuss.elastic.co/t/boosting-query-but-score-is-null/133142)

<div class="topic-metadata">

**Author:** [@sherlonv](https://discuss.elastic.co/u/sherlonv)\
**Replies:** 3\
**Last updated:** [May 31, 2018, 2:19pm UTC](https://discuss.elastic.co/t/boosting-query-but-score-is-null/133142 "2018-05-31T14:19:08Z")

</div>

I'm not familiar when it comes to boosting the score based on a query so I be doing something wrong. But in any case, I seem to have a problem when it comes to generating scores based on boosting. All results come back w…

---

## [Error: Expected one of #, =\> at line](https://discuss.elastic.co/t/error-expected-one-of-at-line/103579)

<div class="topic-metadata">

**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 4:26pm UTC](https://discuss.elastic.co/t/error-expected-one-of-at-line/103579 "2017-10-11T16:26:08Z")

</div>

I have Logstash Kibana and Elasticsearch (all version 5.6.2) configured and running on Windows Server 2012 R2, running through a remote desktop connection. I am working on my logstash config file to read data from a .txt…

---

## [Finding Difficulties with SSL Certificate verification with Lumberjack,Logstash version 1.5.4](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219)

<div class="topic-metadata">

**Author:** [@KarthikaAr](https://discuss.elastic.co/u/KarthikaAr)\
**Replies:** 3\
**Last updated:** [September 15, 2015, 12:45pm UTC](https://discuss.elastic.co/t/finding-difficulties-with-ssl-certificate-verification-with-lumberjack-logstash-version-1-5-4/28219 "2015-09-15T12:45:49Z")

</div>

Hi Greetings!! I am trying to connect one Log stash agent to another(Using Logstash 1.5.4). java version: java version "1.8.0\_51" Java(TM) SE Runtime Environment (build 1.8.0\_51-b16) Java HotSpot(TM) 64-Bit S…

---

## [Severity\_label not available with tcp input](https://discuss.elastic.co/t/severity-label-not-available-with-tcp-input/25720)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 4\
**Last updated:** [September 16, 2015, 2:40pm UTC](https://discuss.elastic.co/t/severity-label-not-available-with-tcp-input/25720 "2015-09-16T14:40:17Z")

</div>

Hello, I'm having an issue with an Infoblox filter I'm working on. As I can't use the default syslog filter, I have to use tcp input. This is working fine except for one part and that is the severity\_label not being av…

---

## [How to connect Django and Elasticsearch by using Logstash?](https://discuss.elastic.co/t/how-to-connect-django-and-elasticsearch-by-using-logstash/244645)

<div class="topic-metadata">

**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 4:33am UTC](https://discuss.elastic.co/t/how-to-connect-django-and-elasticsearch-by-using-logstash/244645 "2020-08-12T04:33:16Z")

</div>

Hi, I'm trying to send data in Django sqlite DB to Elasticsearch by using Logstash. I made two tables in Django and they are in sqlite DB basically embedded in Django. And I want send these datas to elasticsearch by usi…

---

## [Elastic-agent -- Sent logs to external SIEM](https://discuss.elastic.co/t/elastic-agent-sent-logs-to-external-siem/296045)

<div class="topic-metadata">

**Author:** [@fselim](https://discuss.elastic.co/u/fselim)\
**Replies:** 8\
**Last updated:** [February 4, 2022, 8:07am UTC](https://discuss.elastic.co/t/elastic-agent-sent-logs-to-external-siem/296045 "2022-02-04T08:07:47Z")

</div>

Goodmorning, We have installed elastic-agents throughout our environment with everything setup for filebeat and metricbeat monitoring. Though now I'm trying to figure out how to forward logs to an external SIEM when the…

---

## [Elastic is very slow on bulk insert](https://discuss.elastic.co/t/elastic-is-very-slow-on-bulk-insert/49353)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 8\
**Last updated:** [May 6, 2016, 5:28am UTC](https://discuss.elastic.co/t/elastic-is-very-slow-on-bulk-insert/49353 "2016-05-06T05:28:57Z")

</div>

Hey All, I am doing the stress test on Elasticsearch where I'm continuously creating indexes using single thread, maximum of 2000 index. But the index creation time has slowed down as the index count increases, all oper…

---

## [Python vs java bulk indexing](https://discuss.elastic.co/t/python-vs-java-bulk-indexing/16673)

<div class="topic-metadata">

**Author:** [@eunever32](https://discuss.elastic.co/u/eunever32)\
**Replies:** 8\
**Last updated:** [March 30, 2014, 1:15am UTC](https://discuss.elastic.co/t/python-vs-java-bulk-indexing/16673 "2014-03-30T01:15:08Z")

</div>

Hi, When running the bulk indexing with python everything works fine.. good solid throughput for the full indexing run. When doing the same with the Java api what is happening is that thousands of client thread…

---

## [How many search threads used for single search query](https://discuss.elastic.co/t/how-many-search-threads-used-for-single-search-query/175573)

<div class="topic-metadata">

**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\
**Replies:** 3\
**Last updated:** [April 6, 2019, 10:57am UTC](https://discuss.elastic.co/t/how-many-search-threads-used-for-single-search-query/175573 "2019-04-06T10:57:20Z")

</div>

Hi Team, ElasticSearch version: 6.0.0 No of nodes : 3 Operating System : CentOS 7 Client : Low Level Rest Client of java No of Index : 3 No of Shards per Index : 3 No of Replicas for Shard : 1 Each machine capaci…

---

## [Querystring search: Tokens are out of order](https://discuss.elastic.co/t/querystring-search-tokens-are-out-of-order/23238)

<div class="topic-metadata">

**Author:** [@Dave\_Reed](https://discuss.elastic.co/u/Dave_Reed)\
**Replies:** 4\
**Last updated:** [April 15, 2015, 8:32am UTC](https://discuss.elastic.co/t/querystring-search-tokens-are-out-of-order/23238 "2015-04-15T08:32:37Z")

</div>

I have the following search: { "query": { "filtered": { "query": { "query\_string": { "default\_operator": "AND", "query": "details:foo\\\\-bar" } }, "f…

---

## [Visual Builder Can't use overall aggregation as input to another aggregation](https://discuss.elastic.co/t/visual-builder-cant-use-overall-aggregation-as-input-to-another-aggregation/92152)

<div class="topic-metadata">

**Author:** [@clowder](https://discuss.elastic.co/u/clowder)\
**Replies:** 5\
**Last updated:** [August 29, 2017, 4:32pm UTC](https://discuss.elastic.co/t/visual-builder-cant-use-overall-aggregation-as-input-to-another-aggregation/92152 "2017-08-29T16:32:36Z")

</div>

I am dealing with data regarding user success rates for performing different tasks. What I'd like to do is use the experimental visualization builder to create a metric visualization. I use a calculation aggregation to s…

---

## [How could I search an array of terms using wildcard](https://discuss.elastic.co/t/how-could-i-search-an-array-of-terms-using-wildcard/158397)

<div class="topic-metadata">

**Author:** [@Gabriel\_Pellegrini\_M](https://discuss.elastic.co/u/Gabriel_Pellegrini_M)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 7:05am UTC](https://discuss.elastic.co/t/how-could-i-search-an-array-of-terms-using-wildcard/158397 "2018-11-28T07:05:53Z")

</div>

I'm looking for a way to search an array of items where should have wildcards in their extremities. I tried to use query\_string, but this search does not allow an array search. {"query": { "bool": { …

---

## [Queries get slow while indexing documents](https://discuss.elastic.co/t/queries-get-slow-while-indexing-documents/251243)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 8\
**Last updated:** [October 8, 2020, 6:52am UTC](https://discuss.elastic.co/t/queries-get-slow-while-indexing-documents/251243 "2020-10-08T06:52:01Z")

</div>

I have an index with approximately 2.3M documents. It usually returns results of query within 1~2 seconds, but it gets very slow (sometimes as long as 20~30s) while I'm inserting data into the index. I insert data in R…

---

## [Terms aggregation split by whitespace](https://discuss.elastic.co/t/terms-aggregation-split-by-whitespace/171522)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 3\
**Last updated:** [March 10, 2019, 2:41pm UTC](https://discuss.elastic.co/t/terms-aggregation-split-by-whitespace/171522 "2019-03-10T14:41:51Z")

</div>

I have a bunch of elastic search documents that contain information about jobs ads. I'm trying to aggregate the \*\*title\*\* field to extract the number of "experience" instances from the job posting. e.g. Junior, Senior,…

---

## [Kibana authenticate iframe for nginx](https://discuss.elastic.co/t/kibana-authenticate-iframe-for-nginx/113875)

<div class="topic-metadata">

**Author:** [@Akramach](https://discuss.elastic.co/u/Akramach)\
**Replies:** 3\
**Last updated:** [January 3, 2018, 10:08pm UTC](https://discuss.elastic.co/t/kibana-authenticate-iframe-for-nginx/113875 "2018-01-03T22:08:46Z")

</div>

I've seen old posts on this topic but they appear to talk about shield. I'm not using shield, but simply have a basic auth in nginx serving as a reverse proxy. This prevents direct access to Kibana, great. Now, I have an…

---

## [Lucene Vs Elasticsearch Indexing performance](https://discuss.elastic.co/t/lucene-vs-elasticsearch-indexing-performance/91659)

<div class="topic-metadata">

**Author:** [@mohaneldia](https://discuss.elastic.co/u/mohaneldia)\
**Replies:** 2\
**Last updated:** [July 3, 2017, 4:51pm UTC](https://discuss.elastic.co/t/lucene-vs-elasticsearch-indexing-performance/91659 "2017-07-03T16:51:09Z")

</div>

Hi, we are designing and developing a search application which will be installed in a single system. so, we chose lucene. but elasticsearch contains lot of features and easy management. but we also need performance. so, …

---

## [Kibana Plugins require Elasticsearch version 8.0.0?](https://discuss.elastic.co/t/kibana-plugins-require-elasticsearch-version-8-0-0/202905)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 6\
**Last updated:** [October 13, 2019, 10:13pm UTC](https://discuss.elastic.co/t/kibana-plugins-require-elasticsearch-version-8-0-0/202905 "2019-10-13T22:13:49Z")

</div>

I'm trying to writ a kibana plugin. When i start the kibana , i get the following startup messages. Why is it asking for elasticsearch version 8.0.0 when we dont even have this version yet? I'm working with version 7.…

---

## [Returning field names in highlight](https://discuss.elastic.co/t/returning-field-names-in-highlight/173341)

<div class="topic-metadata">

**Author:** [@neesha](https://discuss.elastic.co/u/neesha)\
**Replies:** 6\
**Last updated:** [March 25, 2019, 7:27pm UTC](https://discuss.elastic.co/t/returning-field-names-in-highlight/173341 "2019-03-25T19:27:40Z")

</div>

I have a query that runs against a field called content. Content contains many subfields, for example message, name, description, story, caption. When it ES finds matches, the highlight result looks like this: highlight…

---

## [Indexing application log files to elasticsearch](https://discuss.elastic.co/t/indexing-application-log-files-to-elasticsearch/55377)

<div class="topic-metadata">

**Author:** [@shane\_lee](https://discuss.elastic.co/u/shane_lee)\
**Replies:** 6\
**Last updated:** [July 13, 2016, 1:47pm UTC](https://discuss.elastic.co/t/indexing-application-log-files-to-elasticsearch/55377 "2016-07-13T13:47:47Z")

</div>

Hi, I am investigating what to use to index application log files into elasticsearch. ===Use Case=== I have a miroservice developed using spring boot. Logging framework I use is logback. Options to log applicati…

---

## [Logstash-cloudwatch-input plugin is not sending data to Elasticsearch](https://discuss.elastic.co/t/logstash-cloudwatch-input-plugin-is-not-sending-data-to-elasticsearch/46867)

<div class="topic-metadata">

**Author:** [@Rajat\_Toshniwal](https://discuss.elastic.co/u/Rajat_Toshniwal)\
**Replies:** 4\
**Last updated:** [October 28, 2016, 7:45pm UTC](https://discuss.elastic.co/t/logstash-cloudwatch-input-plugin-is-not-sending-data-to-elasticsearch/46867 "2016-10-28T19:45:33Z")

</div>

Hi All, I am little new in this world and really struggling in setting up a centralized log management server for AWS cloud servers. I am using logstash-cloudwatch-input plugin to do the same. Below is my Logstash conf…

---

## [Annoying - filter ruby code multiplication doesnt work](https://discuss.elastic.co/t/annoying-filter-ruby-code-multiplication-doesnt-work/52187)

<div class="topic-metadata">

**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\
**Replies:** 4\
**Last updated:** [June 9, 2016, 9:37am UTC](https://discuss.elastic.co/t/annoying-filter-ruby-code-multiplication-doesnt-work/52187 "2016-06-09T09:37:34Z")

</div>

Can anyone please help with this ... its annoying me no end \[:slight\_smile:\] field cpu.user\_p=0.45 This filter works and allocates cpu\_user\_p=45 ruby { code =\> "event\['cpu\_user\_p'\] = 0.45 \* 100" } This filter doe…

---

## [Is this a valid setup for syslog, redis, logstash, elasticsearch, kibana?](https://discuss.elastic.co/t/is-this-a-valid-setup-for-syslog-redis-logstash-elasticsearch-kibana/34229)

<div class="topic-metadata">

**Author:** [@tomas](https://discuss.elastic.co/u/tomas)\
**Replies:** 4\
**Last updated:** [November 10, 2015, 2:55pm UTC](https://discuss.elastic.co/t/is-this-a-valid-setup-for-syslog-redis-logstash-elasticsearch-kibana/34229 "2015-11-10T14:55:16Z")

</div>

Hi all, I'd appreciate some input regarding my proposed setup. I'm pretty new to all of these products so I might have the wrong mindset. Please see the attached image. Many thanks

---

## [How to manipulate result of cumulative sum metric?](https://discuss.elastic.co/t/how-to-manipulate-result-of-cumulative-sum-metric/94063)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 5\
**Last updated:** [August 10, 2017, 11:39am UTC](https://discuss.elastic.co/t/how-to-manipulate-result-of-cumulative-sum-metric/94063 "2017-08-10T11:39:21Z")

</div>

Kibana version : 5.4.0 Hello . I have a goal to achieve but struggling with kibana interface so I would like to get some help with this. My Goal I will need to achieve below 2 steps Calculate the cumulative sum of…

---

## [Unable to open Machine Learning job](https://discuss.elastic.co/t/unable-to-open-machine-learning-job/142359)

<div class="topic-metadata">

**Author:** [@Alon\_Goldstein](https://discuss.elastic.co/u/Alon_Goldstein)\
**Replies:** 7\
**Last updated:** [August 1, 2018, 11:51am UTC](https://discuss.elastic.co/t/unable-to-open-machine-learning-job/142359 "2018-08-01T11:51:25Z")

</div>

Hi, I'm using Elasticsearch and Kibana version 6.2.4 with Platinum license. Every time I create a Machine Learning job (through API or Kibana), I'm getting the following error in ES log: \[2018-07-31T08:36:30,172\]\[WARN…

---

## [Hourly Average over 24 hours](https://discuss.elastic.co/t/hourly-average-over-24-hours/201445)

<div class="topic-metadata">

**Author:** [@neilp](https://discuss.elastic.co/u/neilp)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 7:47pm UTC](https://discuss.elastic.co/t/hourly-average-over-24-hours/201445 "2019-09-27T19:47:09Z")

</div>

Hi folks, I am trying to build a bar graph (x-axis=hours 0-23 and y-axis= avg. number of logs) but I have not been able to get this information. I have even tried creating custom Elasticsearch queries with dev tools. Bu…

---

## [Java Agent add custom fields](https://discuss.elastic.co/t/java-agent-add-custom-fields/172714)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 8\
**Last updated:** [March 25, 2019, 9:07am UTC](https://discuss.elastic.co/t/java-agent-add-custom-fields/172714 "2019-03-25T09:07:18Z")

</div>

Is it possible to add a custom field like in other beats? I would want to add something like: fields.comp.hostname: ${COMPUTERNAME} thanks

[Previous page](https://discuss.elastic.co/top.md?page=622&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=624&per_page=50&period=all)
