# Top **URL:** https://discuss.elastic.co/top.md?page=631&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 632 --- ## [Kibana alternate way to remove duplicates or get precise Unique Count](https://discuss.elastic.co/t/kibana-alternate-way-to-remove-duplicates-or-get-precise-unique-count/174286)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 2:57pm UTC](https://discuss.elastic.co/t/kibana-alternate-way-to-remove-duplicates-or-get-precise-unique-count/174286 "2019-03-28T14:57:23Z")
Hi All, i have 60000 documents in an index. Many of these documents have same value for field "BookId". NOTE:-There are 14000 unique BookId's just many duplicates because they have different values in other fields of o… --- ## [How can i do kibana for i18n?](https://discuss.elastic.co/t/how-can-i-do-kibana-for-i18n/49749)
**Author:** [@lmx1989219](https://discuss.elastic.co/u/lmx1989219)\ **Replies:** 2\ **Last updated:** [May 12, 2016, 1:00am UTC](https://discuss.elastic.co/t/how-can-i-do-kibana-for-i18n/49749 "2016-05-12T01:00:42Z")
support different language. e.g: zh-cn via kibana extension plugin? anyway how do it? --- ## [Preparing the RHEL Environment: How to set the fs.may\_detach\_mounts?](https://discuss.elastic.co/t/preparing-the-rhel-environment-how-to-set-the-fs-may-detach-mounts/171926)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 1\ **Last updated:** [March 13, 2019, 8:50am UTC](https://discuss.elastic.co/t/preparing-the-rhel-environment-how-to-set-the-fs-may-detach-mounts/171926 "2019-03-13T08:50:44Z")
I am preparing the RHEL environment for installing ECE based on the documentation at https://www.elastic.co/guide/en/cloud-enterprise/2.0/ece-configure-hosts-rhel-centos.html I am stuck at the step on enabling fs.may\_de… --- ## [Logstash parse date with custom timezone](https://discuss.elastic.co/t/logstash-parse-date-with-custom-timezone/37721)
**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\ **Replies:** 2\ **Last updated:** [December 22, 2015, 1:31am UTC](https://discuss.elastic.co/t/logstash-parse-date-with-custom-timezone/37721 "2015-12-22T01:31:56Z")
I have logs that have a field "timestamp" with the following format { "foo":"bar", "timeStamp":"2015/12/12 04:18:15.839Z" } Logstash doesn't recognize this as a time, so it imports it as a string and give… --- ## [Get unique users in db](https://discuss.elastic.co/t/get-unique-users-in-db/134201)
**Author:** [@Wouter\_Durnez](https://discuss.elastic.co/u/Wouter_Durnez)\ **Replies:** 5\ **Last updated:** [June 1, 2018, 2:55pm UTC](https://discuss.elastic.co/t/get-unique-users-in-db/134201 "2018-06-01T14:55:54Z")
Hey everyone, I'm trying to get a list of unique users in my db. I'm using python. I've looked at other, similar questions, but I still can't manage to get what I want. My buckets are topped off at a length of 10. I tri… --- ## [Copying field values](https://discuss.elastic.co/t/copying-field-values/242520)
**Author:** [@macg](https://discuss.elastic.co/u/macg)\ **Replies:** 8\ **Last updated:** [August 5, 2020, 12:29pm UTC](https://discuss.elastic.co/t/copying-field-values/242520 "2020-08-05T12:29:53Z")
I want to copy the value of the host.hostname field to host.name or otherwise ensure that host.name takes this value. I'm collecting syslog and auth data from a number of hosts on a single machine and shipping to Elasti… --- ## [Nested terms with date\_histogram subaggregation](https://discuss.elastic.co/t/nested-terms-with-date-histogram-subaggregation/81967)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 1\ **Last updated:** [April 11, 2017, 1:09pm UTC](https://discuss.elastic.co/t/nested-terms-with-date-histogram-subaggregation/81967 "2017-04-11T13:09:34Z")
i have some nested fields and timestamps in documents a bit like: { "@timestamp": timestamp "field":\[ { "key":"keyname", "doc\_count":count },... \] } I'm trying to do a nested terms agg on fie… --- ## [Looping through hits using painless script](https://discuss.elastic.co/t/looping-through-hits-using-painless-script/117718)
**Author:** [@prabhath](https://discuss.elastic.co/u/prabhath)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 1:03am UTC](https://discuss.elastic.co/t/looping-through-hits-using-painless-script/117718 "2018-01-31T01:03:18Z")
Is there a way In Elasticsearch 5.3 to loop through query results using painless script to compute difference between the hits returned by query. I was trying to loop through the results in a for loop in script and coul… --- ## [Unable to restore Snapshot](https://discuss.elastic.co/t/unable-to-restore-snapshot/217949)
**Author:** [@Gayathri.Srivathsan](https://discuss.elastic.co/u/Gayathri.Srivathsan)\ **Replies:** 4\ **Last updated:** [February 5, 2020, 11:43am UTC](https://discuss.elastic.co/t/unable-to-restore-snapshot/217949 "2020-02-05T11:43:12Z")
Hi All, I have created a shared repository and created a snapshot in it. When I try to restore it after deleting the existing index , Iam unable to do so . I get the below error. index and alias names need to be unique… --- ## [Can't get logging to happen](https://discuss.elastic.co/t/cant-get-logging-to-happen/41837)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 3\ **Last updated:** [February 17, 2016, 3:13pm UTC](https://discuss.elastic.co/t/cant-get-logging-to-happen/41837 "2016-02-17T15:13:19Z")
Hello, I'm trying to verify that both topbeat and packetbeat can connect to the logstash host over port 5000. I've enabled logging in the yaml files for both and for some reason the logging directories remain empty… --- ## [Causes of High JVM in Data and Master nodes](https://discuss.elastic.co/t/causes-of-high-jvm-in-data-and-master-nodes/190452)
**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\ **Replies:** 6\ **Last updated:** [July 17, 2019, 4:58am UTC](https://discuss.elastic.co/t/causes-of-high-jvm-in-data-and-master-nodes/190452 "2019-07-17T04:58:57Z")
Hi, What are the possible causes for JVM to be high? Our cluster's JVM Memory Pressure in data nodes are always about 60-75%. Master JVM Memory Pressure peaks at 75% every 10 minutes. We have ~4,000 indices in our clus… --- ## [Blindly parse JSON from logs and add it to elasticsearch](https://discuss.elastic.co/t/blindly-parse-json-from-logs-and-add-it-to-elasticsearch/129716)
**Author:** [@Jean-Charle\_Passepon](https://discuss.elastic.co/u/Jean-Charle_Passepon)\ **Replies:** 6\ **Last updated:** [April 27, 2018, 10:38am UTC](https://discuss.elastic.co/t/blindly-parse-json-from-logs-and-add-it-to-elasticsearch/129716 "2018-04-27T10:38:30Z")
Hello, I've started to read quite a few topic about it and either I don't understand it correctly or it's not possible. I'm receiving logs formatted this way: "\[INFO\] JSEXTRA:{\\"user\_id\\": \\"90:70:65:12:56:D5\\", \\"su… --- ## [Spikes in Indexing Rate - Methods to Increase Indexing Rate?](https://discuss.elastic.co/t/spikes-in-indexing-rate-methods-to-increase-indexing-rate/68740)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 6\ **Last updated:** [December 15, 2016, 6:35pm UTC](https://discuss.elastic.co/t/spikes-in-indexing-rate-methods-to-increase-indexing-rate/68740 "2016-12-15T18:35:16Z")
I have six ES nodes (ES 2.4.1); two client nodes, two master nodes, and two data nodes. I have setup Logstash (2.2.4) to push data to the two client nodes. I have also set up Logstash to push the data to both the two cl… --- ## [The reporting job failed + Error: Max attempts (3) reached for job X. Failed with: Error: Unable to get index-pattern](https://discuss.elastic.co/t/the-reporting-job-failed-error-max-attempts-3-reached-for-job-x-failed-with-error-unable-to-get-index-pattern/310588)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 7\ **Last updated:** [August 24, 2022, 3:21am UTC](https://discuss.elastic.co/t/the-reporting-job-failed-error-max-attempts-3-reached-for-job-x-failed-with-error-unable-to-get-index-pattern/310588 "2022-08-24T03:21:50Z")
Hello World! I'm trying to: yet while trying to run report (using "added\*" index-pattern), getting the following error: The reporting job failed Error: Max attempts (3) reached for job X. Failed with: Error: Unabl… --- ## [Bulk Queue Size and Thread Count](https://discuss.elastic.co/t/bulk-queue-size-and-thread-count/178274)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [April 24, 2019, 2:44pm UTC](https://discuss.elastic.co/t/bulk-queue-size-and-thread-count/178274 "2019-04-24T14:44:04Z")
Hi, Is there any relationship between bulk queue size and bulk thread count? Does it increase in proportion with the number of threads? Regards, D --- ## [How to do "offset" on aggreation results](https://discuss.elastic.co/t/how-to-do-offset-on-aggreation-results/76314)
**Author:** [@Lukasz](https://discuss.elastic.co/u/Lukasz)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 1:16am UTC](https://discuss.elastic.co/t/how-to-do-offset-on-aggreation-results/76314 "2017-02-24T01:16:09Z")
Hi, I have problem with writing query in Elastic. I have 1 milion parts and daily statistic for them. What i want to do is display all parts in 1000 chunks. Generally table with download count :wink: So query in sql wo… --- ## [Searching attachment content with ingest attachment plugin](https://discuss.elastic.co/t/searching-attachment-content-with-ingest-attachment-plugin/111504)
**Author:** [@takleung](https://discuss.elastic.co/u/takleung)\ **Replies:** 2\ **Last updated:** [December 14, 2017, 6:54am UTC](https://discuss.elastic.co/t/searching-attachment-content-with-ingest-attachment-plugin/111504 "2017-12-14T06:54:18Z")
Hi, I had tried to follow the example. I can success to insert attachment and get in the details. But don't know how to do search with content. For example, I would like to return "filename" & word position in document w… --- ## [Elasticsearch Java API 5.4 - How to get the inner hits of a nested query?](https://discuss.elastic.co/t/elasticsearch-java-api-5-4-how-to-get-the-inner-hits-of-a-nested-query/90582)
**Author:** [@The\_Dude](https://discuss.elastic.co/u/The_Dude)\ **Replies:** 1\ **Last updated:** [July 5, 2017, 7:42pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-5-4-how-to-get-the-inner-hits-of-a-nested-query/90582 "2017-07-05T19:42:27Z")
I recently started to migrate from Elasticsearch version 2.4 to version 5.4. In version 2.4 I implemented some nested queries including inner hits, using the official Java API, which do not work in version 5.4 anymore. … --- ## [Elasticsearch suggest by middle words by making preserve\_position\_increments: false](https://discuss.elastic.co/t/elasticsearch-suggest-by-middle-words-by-making-preserve-position-increments-false/16145)
**Author:** [@shamsul\_haque](https://discuss.elastic.co/u/shamsul_haque)\ **Replies:** 1\ **Last updated:** [March 5, 2014, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-suggest-by-middle-words-by-making-preserve-position-increments-false/16145 "2014-03-05T13:26:34Z")
Hi, I am trying to implement middle word search, as Completion Suggester doc said, preserve\_position\_increments: if disabled and using stopword analyzer, you could get a string starting with 'the beatles', if you … --- ## [A password-protected multi-node cluster with Docker Compose](https://discuss.elastic.co/t/a-password-protected-multi-node-cluster-with-docker-compose/216560)
**Author:** [@alza](https://discuss.elastic.co/u/alza)\ **Replies:** 8\ **Last updated:** [January 27, 2020, 12:24pm UTC](https://discuss.elastic.co/t/a-password-protected-multi-node-cluster-with-docker-compose/216560 "2020-01-27T12:24:09Z")
I wonder if there is a way to password protect (not using SSL, just a simple password) the multi-node cluster (using Docker Compose and with basic/free license) that explained here? I tried to add ELASTIC\_PASSWORD=mypas… --- ## [May Elasticsearch nested query return only matched nested documents for nested fields?](https://discuss.elastic.co/t/may-elasticsearch-nested-query-return-only-matched-nested-documents-for-nested-fields/950)
**Author:** [@jffifa](https://discuss.elastic.co/u/jffifa)\ **Replies:** 1\ **Last updated:** [May 20, 2015, 8:21am UTC](https://discuss.elastic.co/t/may-elasticsearch-nested-query-return-only-matched-nested-documents-for-nested-fields/950 "2015-05-20T08:21:16Z")
I'm new to Elasticsearch, and come up with a question that whether Elasticsearch nested query may return only matched nested documents for nested fields or not. For Example I have a type named blog with a nested field … --- ## [Multi-level Sankey in Kibana](https://discuss.elastic.co/t/multi-level-sankey-in-kibana/190582)
**Author:** [@dhruv477](https://discuss.elastic.co/u/dhruv477)\ **Replies:** 4\ **Last updated:** [July 17, 2019, 11:22pm UTC](https://discuss.elastic.co/t/multi-level-sankey-in-kibana/190582 "2019-07-17T23:22:32Z")
I was able to successfully make a 2 level sankey graph based on the blog post but wasn't able to find anything to make the graph multi-level. Is there a way to extend the sankey to multiple layered graph? Any help would … --- ## [Can't get logstash user to authenticate to ES](https://discuss.elastic.co/t/cant-get-logstash-user-to-authenticate-to-es/47990)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 4\ **Last updated:** [February 13, 2017, 11:30pm UTC](https://discuss.elastic.co/t/cant-get-logstash-user-to-authenticate-to-es/47990 "2017-02-13T23:30:27Z")
Hey guys, I have a user setup with the logstash role: \[root@logs:~\] #esusers list|grep ls\_admin ls\_admin : logstash I've got him defined in my elasticsearch section of my output filter: output { elasticsea… --- ## [Coexistence with logstash-forwarder](https://discuss.elastic.co/t/coexistence-with-logstash-forwarder/33632)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 4\ **Last updated:** [November 3, 2015, 3:42pm UTC](https://discuss.elastic.co/t/coexistence-with-logstash-forwarder/33632 "2015-11-03T15:42:30Z")
I'm a bit confused about how FileBeat fits in with a logstash setup that already includes logstash-forwarder. I have a couple of logstash config files for defining inputs for both LF and FB: # 01-lumberjack-input.con… --- ## [Memory Requirements for Elasticsearch](https://discuss.elastic.co/t/memory-requirements-for-elasticsearch/89441)
**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\ **Replies:** 6\ **Last updated:** [June 16, 2017, 2:14am UTC](https://discuss.elastic.co/t/memory-requirements-for-elasticsearch/89441 "2017-06-16T02:14:21Z")
I would like to know what would be the memory requirements for my data set, I currently have 50GB of data on the whole. And planning to have 6-7 data nodes and 3 master only nodes and will connect using Transport client … --- ## [Lucene query parser to ES Java API](https://discuss.elastic.co/t/lucene-query-parser-to-es-java-api/16305)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 6\ **Last updated:** [March 20, 2014, 12:15am UTC](https://discuss.elastic.co/t/lucene-query-parser-to-es-java-api/16305 "2014-03-20T00:15:57Z")
Is there a utility that can convert lucene query string format to ES Java API format? We are planning to use lucene query parser to validate query string entered by user in our application before creating a request to … --- ## [Resolve unassigned shards?](https://discuss.elastic.co/t/resolve-unassigned-shards/276793)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 5\ **Last updated:** [June 26, 2021, 3:17am UTC](https://discuss.elastic.co/t/resolve-unassigned-shards/276793 "2021-06-26T03:17:57Z")
I am an unassigned shards issue on a newly setup cluster where the ilm policy is not moving the shares from hot to warm. The ilm policy is set to rollover after 1d or 50gb but the allocation is complaining about node do… --- ## [Master Elasticsearch node on same host as data node?](https://discuss.elastic.co/t/master-elasticsearch-node-on-same-host-as-data-node/249149)
**Author:** [@dshih](https://discuss.elastic.co/u/dshih)\ **Replies:** 5\ **Last updated:** [September 21, 2020, 6:03pm UTC](https://discuss.elastic.co/t/master-elasticsearch-node-on-same-host-as-data-node/249149 "2020-09-21T18:03:11Z")
Is there any benefit to enabling Elasticsearch master nodes if they will run on the same hosts as a data nodes? Background My company ships a product with a hosted (AWS-based) and on-premises offering. For hosted, we … --- ## [Conditions in Ingest node pipeline](https://discuss.elastic.co/t/conditions-in-ingest-node-pipeline/104941)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 5\ **Last updated:** [October 28, 2017, 3:09pm UTC](https://discuss.elastic.co/t/conditions-in-ingest-node-pipeline/104941 "2017-10-28T15:09:06Z")
Hi, I want to know if its possible to apply conditions in ingest node pipelines. I need to apply grok processor based on the value of one particular field. So, I will apply grok processor to extract that field and then … --- ## [Elasticsearch in docker container running as root](https://discuss.elastic.co/t/elasticsearch-in-docker-container-running-as-root/316441)
**Author:** [@HeadScratcher](https://discuss.elastic.co/u/HeadScratcher)\ **Replies:** 1\ **Last updated:** [October 13, 2022, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-container-running-as-root/316441 "2022-10-13T10:55:05Z")
Hi all, I've been wrestling with this problem for a few days now and im scratching my head a bit as i can't figure out what's wrong. I ran a fresh docker pull and install with docker-compose and it ran fine. then i ra… --- ## [Erreur conexion kibana](https://discuss.elastic.co/t/erreur-conexion-kibana/191996)
**Author:** [@sarahmech](https://discuss.elastic.co/u/sarahmech)\ **Replies:** 7\ **Last updated:** [July 29, 2019, 6:25am UTC](https://discuss.elastic.co/t/erreur-conexion-kibana/191996 "2019-07-29T06:25:08Z")
Bonjour, J'installé filebeat sur windows 10, mais il n'arrive pas à établir la conexion. voici ma configuration aussi filebeat.yml filebeat.inputs: # Each - is an input. Most options can be set at the input level, s… --- ## [Slow filter execution](https://discuss.elastic.co/t/slow-filter-execution/18964)
**Author:** [@Kireet\_Reddy](https://discuss.elastic.co/u/Kireet_Reddy)\ **Replies:** 7\ **Last updated:** [July 31, 2014, 6:49pm UTC](https://discuss.elastic.co/t/slow-filter-execution/18964 "2014-07-31T18:49:43Z")
One of my queries has been consistently taking 500ms-1s and I can't figure out why. Here is the query (it looks a bit strange as I have removed things that didn't seem to affect execution time). When I remove th… --- ## [Timelion of kibana error : incomplete function](https://discuss.elastic.co/t/timelion-of-kibana-error-incomplete-function/97230)
**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 10:47pm UTC](https://discuss.elastic.co/t/timelion-of-kibana-error-incomplete-function/97230 "2017-08-18T22:47:33Z")
Hello , i am using timelion of kibana but this error appear {“type”:“incompleteFunction”,“function”:“es”,“location”:{“min”:8,“max”:11},“text”:".es"} this the query i wrote .es(\*),.es(index='transaction",timefield=“tr… --- ## [Metricbeats failed to connect Elasticsearch with X-Pack enabled](https://discuss.elastic.co/t/metricbeats-failed-to-connect-elasticsearch-with-x-pack-enabled/190498)
**Author:** [@alza](https://discuss.elastic.co/u/alza)\ **Replies:** 8\ **Last updated:** [July 15, 2019, 1:12pm UTC](https://discuss.elastic.co/t/metricbeats-failed-to-connect-elasticsearch-with-x-pack-enabled/190498 "2019-07-15T13:12:44Z")
I setup an Elasticsearch 7.2.0 with the following elasticsearch.yml config file, , using docker, cluster.name: "docker-cluster" network.host: 0.0.0.0 discovery.type: single-node xpack.license.self\_generated.type: basic … --- ## [Metricbeat](https://discuss.elastic.co/t/metricbeat/70790)
**Author:** [@Manuel\_Laesser](https://discuss.elastic.co/u/Manuel_Laesser)\ **Replies:** 5\ **Last updated:** [January 10, 2017, 10:20am UTC](https://discuss.elastic.co/t/metricbeat/70790 "2017-01-10T10:20:47Z")
Hello I'm pretty new to ELK and installed the whole stack one one machine. Filebeat and Metricbeat --\> Logstash --\> Elasticsearch \<-- Kibana Filebeat is working great but today I installed metricbeat. For me it seems… --- ## [FIlebeat dropping connection to logstash](https://discuss.elastic.co/t/filebeat-dropping-connection-to-logstash/55822)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 5\ **Last updated:** [July 19, 2016, 10:01am UTC](https://discuss.elastic.co/t/filebeat-dropping-connection-to-logstash/55822 "2016-07-19T10:01:01Z")
In order to try filebeat on production, i launched 1.1k instances of filebeat on my production boxes, each monitoring a couple of files in its boxes and sending data to 3 central logstash servers, which are pushing those… --- ## [How to increase watcher search timeout?](https://discuss.elastic.co/t/how-to-increase-watcher-search-timeout/252764)
**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\ **Replies:** 6\ **Last updated:** [October 22, 2020, 9:17am UTC](https://discuss.elastic.co/t/how-to-increase-watcher-search-timeout/252764 "2020-10-22T09:17:02Z")
Hi, I'v create advanced watcher the part of input is "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "phplog-\*" \], "rest\_total\_… --- ## [Default\_operator 'AND' with query\_string does not work properly](https://discuss.elastic.co/t/default-operator-and-with-query-string-does-not-work-properly/203667)
**Author:** [@Flinou](https://discuss.elastic.co/u/Flinou)\ **Replies:** 4\ **Last updated:** [November 8, 2019, 1:55pm UTC](https://discuss.elastic.co/t/default-operator-and-with-query-string-does-not-work-properly/203667 "2019-11-08T13:55:55Z")
I have some issues trying to make default\_operator AND work with query\_string on multiple fields. (Elastic Search v 7.2) Here is my query and the document indexed : POST testeur/\_doc/document { "content": "attention … --- ## [Ruby filter: Ruby exception occurred: undefined method \`\*' for nil:NilClass](https://discuss.elastic.co/t/ruby-filter-ruby-exception-occurred-undefined-method-for-nil-nilclass/105699)
**Author:** [@nicklaw](https://discuss.elastic.co/u/nicklaw)\ **Replies:** 2\ **Last updated:** [October 30, 2017, 6:53pm UTC](https://discuss.elastic.co/t/ruby-filter-ruby-exception-occurred-undefined-method-for-nil-nilclass/105699 "2017-10-30T18:53:46Z")
My circumstance is a little different to this post (I think). I have the below filter that uses ruby to convert Nginx access request\_time's and upsteam\_response\_time's to milliseconds: filter { # NGINX ACCESS GROK … --- ## [\[ANNOUNCEMENT\] Execbeat 2.1.1 released](https://discuss.elastic.co/t/announcement-execbeat-2-1-1-released/71604)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [January 14, 2017, 11:46am UTC](https://discuss.elastic.co/t/announcement-execbeat-2-1-1-released/71604 "2017-01-14T11:46:02Z")
I'm happy to announce the availability of \[Execbeat 2.1.1\](https://github.com/christiangalsterer/execbeat/releases/tag/2.1.1. Execbeat is a Beat which executes (shell) commands in a regular interval and sends the stand… --- ## [Unique count (cardinality agg query) from two fields](https://discuss.elastic.co/t/unique-count-cardinality-agg-query-from-two-fields/153626)
**Author:** [@birko](https://discuss.elastic.co/u/birko)\ **Replies:** 1\ **Last updated:** [October 24, 2018, 8:54am UTC](https://discuss.elastic.co/t/unique-count-cardinality-agg-query-from-two-fields/153626 "2018-10-24T08:54:19Z")
Hello, how can I do unique count based on two fields with cardinality aggregation query? Let’s imagine from\_user and to\_user are telephone numbers and I need unique count of tel.numbers. Example: 1st document "\_index… --- ## [Update index patterns automatically - programatically?](https://discuss.elastic.co/t/update-index-patterns-automatically-programatically/129547)
**Author:** [@Robert\_Bardo](https://discuss.elastic.co/u/Robert_Bardo)\ **Replies:** 1\ **Last updated:** [April 25, 2018, 6:37pm UTC](https://discuss.elastic.co/t/update-index-patterns-automatically-programatically/129547 "2018-04-25T18:37:05Z")
Hello, Is there a solution / API function that allows for updating the index patterns programmatically? Opposed to the UI? Thank you! --- ## [List manipulation in painless script](https://discuss.elastic.co/t/list-manipulation-in-painless-script/65413)
**Author:** [@ahmmum](https://discuss.elastic.co/u/ahmmum)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 12:44pm UTC](https://discuss.elastic.co/t/list-manipulation-in-painless-script/65413 "2016-11-09T12:44:36Z")
I want to create a list as A = \[\[0, 1, 2\], \[1, 2, 3\], \[2, 3, 4\]\]. How can I create it as list/array in painless? Do I access a specific element as A\[i\]\[j\]? --- ## [QueryString vs multiple wildcards](https://discuss.elastic.co/t/querystring-vs-multiple-wildcards/335382)
**Author:** [@Ortiga\_Abdo](https://discuss.elastic.co/u/Ortiga_Abdo)\ **Replies:** 5\ **Last updated:** [June 7, 2023, 6:23pm UTC](https://discuss.elastic.co/t/querystring-vs-multiple-wildcards/335382 "2023-06-07T18:23:01Z")
I can't find any documentations that talks about queries and their performance/comparison I'm wondering which is better performance/faster multiple wildcard filter or a string\_query? "query": { "bool" : { "mu… --- ## [We can’t establish a connection to Enterprise Search at the host URL: https://myip:3002](https://discuss.elastic.co/t/we-can-t-establish-a-connection-to-enterprise-search-at-the-host-url-https-myip-3002/300711)
**Author:** [@bibilena](https://discuss.elastic.co/u/bibilena)\ **Replies:** 5\ **Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/we-can-t-establish-a-connection-to-enterprise-search-at-the-host-url-https-myip-3002/300711 "2022-04-04T10:03:46Z")
hello, I have a problem my Kibana and my enterprise search can't establish connection but in the log enterprise search said he is successfully connected to Kibana. I can connect to https://myip:3002, https://myip:5601 a… --- ## [Setup Up SSL in elasticsearch error](https://discuss.elastic.co/t/setup-up-ssl-in-elasticsearch-error/51525)
**Author:** [@Chris\_wang](https://discuss.elastic.co/u/Chris_wang)\ **Replies:** 5\ **Last updated:** [June 7, 2016, 5:28pm UTC](https://discuss.elastic.co/t/setup-up-ssl-in-elasticsearch-error/51525 "2016-06-07T17:28:12Z")
i'm following the document to open SSL in one node of elasticsearch cluster. i got the error message below "Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://x.x.x.x:9200 aga… --- ## [Data table viz excludes records where bucket term is blank \[SOLVED\]](https://discuss.elastic.co/t/data-table-viz-excludes-records-where-bucket-term-is-blank-solved/43804)
**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\ **Replies:** 5\ **Last updated:** [March 12, 2016, 6:41am UTC](https://discuss.elastic.co/t/data-table-viz-excludes-records-where-bucket-term-is-blank-solved/43804 "2016-03-12T06:41:53Z")
The data table is excluding rows where bucket term is blank. For example, assume I have the following data: {"id":1, "item":"widget1", "type":"toy", "color":"blue", "price":5.05} {"id":2, "item":"widget2", "type":"toy"… --- ## [TransportClient vs. HTTP - TransportClient advantages?](https://discuss.elastic.co/t/transportclient-vs-http-transportclient-advantages/9104)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 5\ **Last updated:** [September 25, 2012, 10:16am UTC](https://discuss.elastic.co/t/transportclient-vs-http-transportclient-advantages/9104 "2012-09-25T10:16:41Z")
Hello, What exactly is the advantage of using TransportClient to talk to ES versus talking via HTTP? Is there anything that cannot be done via HTTP that can be done using TC? Is there a known and significant per… --- ## [Elasticsearch 7.7 Cluster Nodes](https://discuss.elastic.co/t/elasticsearch-7-7-cluster-nodes/232849)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 4\ **Last updated:** [May 19, 2020, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-cluster-nodes/232849 "2020-05-19T17:15:58Z")
Hi, Since upgrading to 7.7 I get the following Error when accessing the Nodes section in the Cluster Status screen. Can Anyone shed some light? I have xpack.monitoring.collection.enabled set to true Monitoring Request… --- ## [What's using memory in ElasticSearch? (Details to follow...)](https://discuss.elastic.co/t/whats-using-memory-in-elasticsearch-details-to-follow/17893)
**Author:** [@Adam\_Georgiou](https://discuss.elastic.co/u/Adam_Georgiou)\ **Replies:** 7\ **Last updated:** [June 7, 2014, 6:37pm UTC](https://discuss.elastic.co/t/whats-using-memory-in-elasticsearch-details-to-follow/17893 "2014-06-07T18:37:52Z")
I'm curious as to what is actually using memory in my cluster. Over the course of a day or two we'll slowly progress to about 75% heap usage, at which point we get stuck in a garbage collect loop (i.e., apparently… [Previous page](https://discuss.elastic.co/top.md?page=630&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=632&per_page=50&period=all)