# Top **URL:** https://discuss.elastic.co/top.md?page=634&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 635 --- ## [Histogram not appearing on the Discover page](https://discuss.elastic.co/t/histogram-not-appearing-on-the-discover-page/86546)
**Author:** [@jth](https://discuss.elastic.co/u/jth)\ **Replies:** 4\ **Last updated:** [May 21, 2017, 4:53am UTC](https://discuss.elastic.co/t/histogram-not-appearing-on-the-discover-page/86546 "2017-05-21T04:53:28Z")
Hi, I'm a new user to Kibana and I'm setting it up to read from an apache log file. When I look at the discover page, I see the records, but there is no histogram. Previously, I could see the histogram, but then I add… --- ## [Search across multiple indices for the same field](https://discuss.elastic.co/t/search-across-multiple-indices-for-the-same-field/206349)
**Author:** [@Ashish1](https://discuss.elastic.co/u/Ashish1)\ **Replies:** 8\ **Last updated:** [November 6, 2019, 5:53am UTC](https://discuss.elastic.co/t/search-across-multiple-indices-for-the-same-field/206349 "2019-11-06T05:53:58Z")
Hello all, I am working on an event based dataset where let's say there is a central customer index and multiple indexes for different events types, say index event\_1, event\_2, event\_3. I want to search across all the … --- ## [Cannot Connect Elasticsearch in Docker](https://discuss.elastic.co/t/cannot-connect-elasticsearch-in-docker/233687)
**Author:** [@Vaibhav\_Saxena](https://discuss.elastic.co/u/Vaibhav_Saxena)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 9:38am UTC](https://discuss.elastic.co/t/cannot-connect-elasticsearch-in-docker/233687 "2020-05-26T09:38:35Z")
I am trying to launch my app using docker that connects to elasticsearch but I am not able to do so. I get the following exception: vaibhavsaxena@Vaibhavs-MacBook-Pro Final Project % docker-compose up … --- ## [Client connection impossible](https://discuss.elastic.co/t/client-connection-impossible/150707)
**Author:** [@mrxrom](https://discuss.elastic.co/u/mrxrom)\ **Replies:** 3\ **Last updated:** [October 2, 2018, 7:40pm UTC](https://discuss.elastic.co/t/client-connection-impossible/150707 "2018-10-02T19:40:04Z")
Hello guys, i have build a java application to manage 3 databases (MySQL, mongoDb and ElasticSearch). evything was designed with databases in a local network and it worked very well. Now we want to put the app on work … --- ## [Disk capacity for elasticsearch](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 4:25pm UTC](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816 "2021-11-22T16:25:37Z")
I want to ship my application log files into Elasticsearch and trying to come-up with a capacity plan for Elasticsearch. Let's say if I have 1 GB log file, how much disk space I need for Elasticsearch to store log conte… --- ## [ILM not deleting indices in data\_stream](https://discuss.elastic.co/t/ilm-not-deleting-indices-in-data-stream/257811)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 5:50pm UTC](https://discuss.elastic.co/t/ilm-not-deleting-indices-in-data-stream/257811 "2020-12-07T17:50:44Z")
Hello! So I've been checking out new features of ELK stack - created a template for data stream and connected a basic ILM policy to it. ILM policy is basically: { "policy": { "phases": { "hot": { … --- ## [Network Topology using Graph](https://discuss.elastic.co/t/network-topology-using-graph/220965)
**Author:** [@l4m4l](https://discuss.elastic.co/u/l4m4l)\ **Replies:** 4\ **Last updated:** [March 1, 2020, 9:40pm UTC](https://discuss.elastic.co/t/network-topology-using-graph/220965 "2020-03-01T21:40:23Z")
Hello all, I have indices that contain .pcap data (imported using tshark and elasticsearch BULK API). I would like to visualise this packet capture as a network topology using graph. I am envisaging that this would go … --- ## [\[watcher\] - \[how to\] \[monitor\] Elasticsearch Snapshots](https://discuss.elastic.co/t/watcher-how-to-monitor-elasticsearch-snapshots/76794)
**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\ **Replies:** 4\ **Last updated:** [March 13, 2017, 9:45am UTC](https://discuss.elastic.co/t/watcher-how-to-monitor-elasticsearch-snapshots/76794 "2017-03-13T09:45:04Z")
Dear All, With the help of watcher I would like to be informed when my ES index daily backup failed. # The idea is to have a configuration like: PUT \_xpack/watcher/watch/my-daily-backup-alert { "trigger": {}, … --- ## [SERVICE\_UNAVAILABLE/2/no master](https://discuss.elastic.co/t/service-unavailable-2-no-master/44219)
**Author:** [@wangyz2015](https://discuss.elastic.co/u/wangyz2015)\ **Replies:** 1\ **Last updated:** [March 15, 2016, 1:31am UTC](https://discuss.elastic.co/t/service-unavailable-2-no-master/44219 "2016-03-15T01:31:12Z")
hi,all my cluster has 24 nodes 6 machines(4 nodes per machine), one server seem not work yesterday, but my client print this error frequency:"org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVI… --- ## [Can't disable metricbeat metrics module](https://discuss.elastic.co/t/cant-disable-metricbeat-metrics-module/134271)
**Author:** [@fozboz](https://discuss.elastic.co/u/fozboz)\ **Replies:** 8\ **Last updated:** [July 3, 2018, 9:08am UTC](https://discuss.elastic.co/t/cant-disable-metricbeat-metrics-module/134271 "2018-07-03T09:08:49Z")
It seems that I'm unable to disable to metrics module in metricbeat. My metricbeat.yml is thusly: output.logstash: hosts: \["logstash1:5044","logstash2:5044"\] loadbalance: true metricbeat.modules: - module: apache … --- ## [Ingesting .gz files in elastic](https://discuss.elastic.co/t/ingesting-gz-files-in-elastic/231910)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 6\ **Last updated:** [May 11, 2020, 1:33am UTC](https://discuss.elastic.co/t/ingesting-gz-files-in-elastic/231910 "2020-05-11T01:33:11Z")
Hello, I know this topic has been discussed in the past, but I am unable to find any new information. So asking again to see if anyone can offer an update. Is there a way to ingest .gz files in elastic without unzippin… --- ## [Create alert per multiple fields](https://discuss.elastic.co/t/create-alert-per-multiple-fields/242706)
**Author:** [@Sergi](https://discuss.elastic.co/u/Sergi)\ **Replies:** 5\ **Last updated:** [August 26, 2020, 7:59pm UTC](https://discuss.elastic.co/t/create-alert-per-multiple-fields/242706 "2020-08-26T19:59:14Z")
Hi, Currently, when creating an alert, we can set up for example the next scenario: When avg system.cpu.total.pct is above 90% for the last 1 minute. Okey...It will affect to all the hosts which matches this query, th… --- ## [Accuracy in ES search](https://discuss.elastic.co/t/accuracy-in-es-search/147170)
**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Replies:** 5\ **Last updated:** [September 5, 2018, 3:27pm UTC](https://discuss.elastic.co/t/accuracy-in-es-search/147170 "2018-09-05T15:27:02Z")
We have a stock of about 2 million documents containing invoice information in an Elastic db. We want to understand: If I do a count of documents with certain fixed properties (like terms) Or a sum over all those docu… --- ## [Match all fields except one](https://discuss.elastic.co/t/match-all-fields-except-one/491)
**Author:** [@flarpy](https://discuss.elastic.co/u/flarpy)\ **Replies:** 4\ **Last updated:** [May 12, 2015, 4:22pm UTC](https://discuss.elastic.co/t/match-all-fields-except-one/491 "2015-05-12T16:22:05Z")
Hi I have a collection of products, all with different attributes. I want to do a search on all attributes EXCEPT name, what is the easiest way to do this? Thanks in advance. --- ## [Logstash with grok patterns applied on logs coming out of docker containers](https://discuss.elastic.co/t/logstash-with-grok-patterns-applied-on-logs-coming-out-of-docker-containers/181683)
**Author:** [@cmon\_sig](https://discuss.elastic.co/u/cmon_sig)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 8:22am UTC](https://discuss.elastic.co/t/logstash-with-grok-patterns-applied-on-logs-coming-out-of-docker-containers/181683 "2019-05-28T08:22:14Z")
Hi everyone, I'm using docker labels to filter for certain messages and to apply the appropriate grok patterns. The patterns work when I test them with the grok debugger but I'm getting \_grokparsefailure when I use the… --- ## [“JSON parse error, original data now in message field”](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/174790)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 1:39pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/174790 "2019-04-01T13:39:11Z")
I use LogStash 6.7.0 and ElasticSearch 6.7.0. Both of them are installed on my remote Azure VM server. I installed the Http\_poller input plugin, and I am currently following the tutorial here. As instructed by the tuto… --- ## [How many processes can update the same index in parallel?](https://discuss.elastic.co/t/how-many-processes-can-update-the-same-index-in-parallel/273051)
**Author:** [@Dmitry\_Reshetnik](https://discuss.elastic.co/u/Dmitry_Reshetnik)\ **Replies:** 5\ **Last updated:** [May 15, 2021, 1:31pm UTC](https://discuss.elastic.co/t/how-many-processes-can-update-the-same-index-in-parallel/273051 "2021-05-15T13:31:43Z")
I have an index in ES that contains 50-100 fields. I'm getting all those fields from 10-15 different data sources (as partial documents). For each data source I want to configure an indexer process(es) that will update… --- ## [Filebeat 6.4.2 the timestamp is not right](https://discuss.elastic.co/t/filebeat-6-4-2-the-timestamp-is-not-right/151748)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 5\ **Last updated:** [October 18, 2018, 2:38am UTC](https://discuss.elastic.co/t/filebeat-6-4-2-the-timestamp-is-not-right/151748 "2018-10-18T02:38:43Z")
filebeat 6.4.2 the timestamp is not right. i use filebeat 6.4.2 to es the time is +8 not right my machine timezone is Wed Oct 10 13:03:45 CST 2018 but the filebeat time write into es is like "@timestamp" : "2018-1… --- ## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/142960)
**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\ **Replies:** 5\ **Last updated:** [August 3, 2018, 7:17pm UTC](https://discuss.elastic.co/t/failed-to-execute-action/142960 "2018-08-03T19:17:40Z")
Hello, Recently I upgraded ELK from 6.2.2 to 6.3.2. I have translate filter plugin for my logs processing filter which was working great in 6.2.2 but not in 6.3.2. I have 4 different conf files out of 4, 2 are working … --- ## [Regex multiline pattern with empty line](https://discuss.elastic.co/t/regex-multiline-pattern-with-empty-line/70324)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 6\ **Last updated:** [January 3, 2017, 1:03pm UTC](https://discuss.elastic.co/t/regex-multiline-pattern-with-empty-line/70324 "2017-01-03T13:03:29Z")
Looking for regex for the following lines: (Need to exlude the empty line) \<\\> \[Feb 24 14:36:19\] \[\[ACTIVE\] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'\] \[CM\] \[Asmsa1\] (MemoPublisherCreat… --- ## [Too many marvel indices with default per-day idx generation](https://discuss.elastic.co/t/too-many-marvel-indices-with-default-per-day-idx-generation/36705)
**Author:** [@zkun](https://discuss.elastic.co/u/zkun)\ **Replies:** 8\ **Last updated:** [February 5, 2016, 1:56am UTC](https://discuss.elastic.co/t/too-many-marvel-indices-with-default-per-day-idx-generation/36705 "2016-02-05T01:56:38Z")
Greetings. There used to be a option for marvel in 1.x version that control the format Marvel uses to create its data index: marvel.agent.exporter.es.index.timeformat. I can therefore set that to YYYY.MM so that Marvel j… --- ## [String to full text data table KIBANA](https://discuss.elastic.co/t/string-to-full-text-data-table-kibana/142878)
**Author:** [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\ **Replies:** 4\ **Last updated:** [August 3, 2018, 1:26pm UTC](https://discuss.elastic.co/t/string-to-full-text-data-table-kibana/142878 "2018-08-03T13:26:43Z")
Example: I have fields'detail': "totot goes to the market". And the idea is to display this sentence (with whites) in a data table. Currently, the problem I have is that in my data table, whites are ignored and next w… --- ## [ES node RAM allocation on Bigger (\> 100GB) RAM systems](https://discuss.elastic.co/t/es-node-ram-allocation-on-bigger-100gb-ram-systems/78917)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 2\ **Last updated:** [March 16, 2017, 9:27pm UTC](https://discuss.elastic.co/t/es-node-ram-allocation-on-bigger-100gb-ram-systems/78917 "2017-03-16T21:27:25Z")
Hi All As per the URL https://www.elastic.co/guide/en/elasticsearch/guide/current/hardware.html --\> 1. The allocation of RAM for the HEAP should not exceed 32GB RAM or less than 50% of RAM, whichever is lesser, e… --- ## [Filebeat fails to start with filebeat-god but works with filebeat directly](https://discuss.elastic.co/t/filebeat-fails-to-start-with-filebeat-god-but-works-with-filebeat-directly/60853)
**Author:** [@Stanislav\_Antic](https://discuss.elastic.co/u/Stanislav_Antic)\ **Replies:** 2\ **Last updated:** [September 19, 2016, 1:22pm UTC](https://discuss.elastic.co/t/filebeat-fails-to-start-with-filebeat-god-but-works-with-filebeat-directly/60853 "2016-09-19T13:22:10Z")
I'm using CentOS 6.8 and have installed filebeat (version 1.3.1). My configuration is: --- filebeat: prospectors: \[{"paths": \["/var/log/\*.log"\], "input\_type": "log"}\] registry\_file: /var/lib/filebeat/registry ou… --- ## [APM Server not identified by Kibana](https://discuss.elastic.co/t/apm-server-not-identified-by-kibana/307948)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 5\ **Last updated:** [June 27, 2022, 4:32am UTC](https://discuss.elastic.co/t/apm-server-not-identified-by-kibana/307948 "2022-06-27T04:32:16Z")
Kibana version : 7.17 Elasticsearch version : 7.17 APM Server version : 7.17 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Metricbeat user and Elasticsearch connection](https://discuss.elastic.co/t/metricbeat-user-and-elasticsearch-connection/75952)
**Author:** [@prodrg](https://discuss.elastic.co/u/prodrg)\ **Replies:** 5\ **Last updated:** [March 10, 2017, 3:19pm UTC](https://discuss.elastic.co/t/metricbeat-user-and-elasticsearch-connection/75952 "2017-03-10T15:19:40Z")
I have been configuring Metricbeat on my ELK configuration using these two documents: Securing Communication With Elasticsearch Beats and Security The Metricbeat user I configured is based on the Packetbeat user exampl… --- ## [Performanceissue with Filebeat and Netflow Input](https://discuss.elastic.co/t/performanceissue-with-filebeat-and-netflow-input/284268)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 6\ **Last updated:** [October 6, 2021, 10:20am UTC](https://discuss.elastic.co/t/performanceissue-with-filebeat-and-netflow-input/284268 "2021-10-06T10:20:09Z")
Hi folks, we are importing flow data into our 10 Node Elasticsearch cluster via Filebeat netflow Input. The Stack is running on 7.14.0. Unfortunately I am witnessing performance pressure and after all the debugging and … --- ## [Cannot get aggregation result without filter](https://discuss.elastic.co/t/cannot-get-aggregation-result-without-filter/189642)
**Author:** [@hangu\_choi](https://discuss.elastic.co/u/hangu_choi)\ **Replies:** 6\ **Last updated:** [July 11, 2019, 2:25am UTC](https://discuss.elastic.co/t/cannot-get-aggregation-result-without-filter/189642 "2019-07-11T02:25:55Z")
I want a filtered docs result and not filtered aggregation result in same query. I've been used elasticsearch 1.75 and able to get this result, but I can't do this in elasticsearch 7. If I am missing something, please l… --- ## [Bootstrap issues](https://discuss.elastic.co/t/bootstrap-issues/90533)
**Author:** [@sherabi](https://discuss.elastic.co/u/sherabi)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 4:41pm UTC](https://discuss.elastic.co/t/bootstrap-issues/90533 "2017-06-28T16:41:58Z")
Using ES 5.4.2. Trying to setup a production grade cluster with 2 masters to start. Here is my config.... # ======================== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch come… --- ## [Beats dashboards for TopBeat not creating dashboard](https://discuss.elastic.co/t/beats-dashboards-for-topbeat-not-creating-dashboard/63308)
**Author:** [@rayc999](https://discuss.elastic.co/u/rayc999)\ **Replies:** 6\ **Last updated:** [October 24, 2016, 9:19am UTC](https://discuss.elastic.co/t/beats-dashboards-for-topbeat-not-creating-dashboard/63308 "2016-10-24T09:19:37Z")
I'm following the instruction on this page on a Windows machine: https://www.elastic.co/guide/en/beats/libbeat/1.3/load-kibana-dashboards.html When I try to load the dashboards using Powershell command: .\\load.ps1 All … --- ## [Logs are not generated for logstash](https://discuss.elastic.co/t/logs-are-not-generated-for-logstash/49672)
**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\ **Replies:** 6\ **Last updated:** [May 16, 2016, 8:27am UTC](https://discuss.elastic.co/t/logs-are-not-generated-for-logstash/49672 "2016-05-16T08:27:05Z")
I am using filebeat to ship the logs to another server where my logstash is residing. Starting the logstash shows like this: \[root@astroELK bin\]# ./logstash -f /etc/logstash/conf.d/astro\_pdl.conf --- jar coordinate com… --- ## [Kibana doesn't display anything until all elasticsearch replica shards are allocated](https://discuss.elastic.co/t/kibana-doesnt-display-anything-until-all-elasticsearch-replica-shards-are-allocated/26930)
**Author:** [@TInaTinaTian\_L](https://discuss.elastic.co/u/TInaTinaTian_L)\ **Replies:** 6\ **Last updated:** [August 19, 2015, 1:37pm UTC](https://discuss.elastic.co/t/kibana-doesnt-display-anything-until-all-elasticsearch-replica-shards-are-allocated/26930 "2015-08-19T13:37:03Z")
We have 3 elasticsearch nodes in the cluster, 2 data nodes and 1 client node to which Kibana talks to. When one of the data node dies, kibana's discover page displays "no results found". It's not until both data nodes ar… --- ## [Saving Kibana visualizations or dashboards as images (JPG, JPEG, etc)?](https://discuss.elastic.co/t/saving-kibana-visualizations-or-dashboards-as-images-jpg-jpeg-etc/209407)
**Author:** [@sreliable](https://discuss.elastic.co/u/sreliable)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:34pm UTC](https://discuss.elastic.co/t/saving-kibana-visualizations-or-dashboards-as-images-jpg-jpeg-etc/209407 "2019-11-26T16:34:23Z")
Hi all, I have created several dashboards on Kibana for reporting purposes. My intent is to download the dashboards as images to be ported into Microsoft Powerpoint for monthly reporting. Is there any way to do this wi… --- ## [ElasticSearch via Ansible](https://discuss.elastic.co/t/elasticsearch-via-ansible/83260)
**Author:** [@StivOstenberg](https://discuss.elastic.co/u/StivOstenberg)\ **Replies:** 0\ **Last updated:** [April 21, 2017, 10:30pm UTC](https://discuss.elastic.co/t/elasticsearch-via-ansible/83260 "2017-04-21T22:30:27Z")
Trying to bring up a test environment to learn Terraform and Ansible. We are planning to implement an ELK stack and I need to make sure we do it right. I read the notes at "https://www.elastic.co/blog/deploying-elasti… --- ## [First time trying to run elk with docker-compose](https://discuss.elastic.co/t/first-time-trying-to-run-elk-with-docker-compose/246368)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 8\ **Last updated:** [August 29, 2020, 5:53pm UTC](https://discuss.elastic.co/t/first-time-trying-to-run-elk-with-docker-compose/246368 "2020-08-29T17:53:20Z")
Hi guys, im very interested setting up a centralized log server using docker / docker-compose: After following oficial , and no oficial documentation: https://www.elastic.co/guide/en/elastic-stack-get-started/current/g… --- ## [How to analyse nested fields?](https://discuss.elastic.co/t/how-to-analyse-nested-fields/325944)
**Author:** [@Amine16](https://discuss.elastic.co/u/Amine16)\ **Replies:** 1\ **Last updated:** [February 23, 2023, 3:28pm UTC](https://discuss.elastic.co/t/how-to-analyse-nested-fields/325944 "2023-02-23T15:28:45Z")
I am working in e-health project and we have a lot of clinical data (JSON format) stored in our data base. We want to do some research in these data, that’s why we think that Elastic Search tool can help us in this proj… --- ## [Multiple Indices Search: Failed to find nested object under path](https://discuss.elastic.co/t/multiple-indices-search-failed-to-find-nested-object-under-path/209753)
**Author:** [@abshek](https://discuss.elastic.co/u/abshek)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 7:09am UTC](https://discuss.elastic.co/t/multiple-indices-search-failed-to-find-nested-object-under-path/209753 "2019-11-28T07:09:13Z")
Hi I need to run a search query across multiple indices (say, idx-users and idx-meta). The mapping for each is different. idx-users has a nested field (path: staysAt, field: staysAt.street), while idx-meta doesn't have… --- ## [Kibana Error - Http status code 503](https://discuss.elastic.co/t/kibana-error-http-status-code-503/106516)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [November 6, 2017, 11:55pm UTC](https://discuss.elastic.co/t/kibana-error-http-status-code-503/106516 "2017-11-06T23:55:41Z")
I am seeing following error in Kibana while accessing the dashboard. Due to this error one of the Visualization is not getting rendered. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_p… --- ## [Phrase boosting in multi-match query](https://discuss.elastic.co/t/phrase-boosting-in-multi-match-query/49584)
**Author:** [@martyychang](https://discuss.elastic.co/u/martyychang)\ **Replies:** 1\ **Last updated:** [May 10, 2016, 4:30pm UTC](https://discuss.elastic.co/t/phrase-boosting-in-multi-match-query/49584 "2016-05-10T16:30:35Z")
How can I compose a multi-match phrase query that also boosts one of the phrases? I can write a multi-match query using multiple phrases, and I can write a multi-match query that boosts single keywords, but I'd like to d… --- ## [Illegal\_state\_exception when registering/updating watches](https://discuss.elastic.co/t/illegal-state-exception-when-registering-updating-watches/35136)
**Author:** [@mcku](https://discuss.elastic.co/u/mcku)\ **Replies:** 7\ **Last updated:** [October 21, 2016, 5:11pm UTC](https://discuss.elastic.co/t/illegal-state-exception-when-registering-updating-watches/35136 "2016-10-21T17:11:33Z")
On a trial installation, watches were working fine till yesterday, but today we get an error. Elastic cluster and Kibana is up and running. On the sense console, whenever I try to DELETE or PUT a watch I get (I had to ty… --- ## [\_id range query \[v6.1.x\]](https://discuss.elastic.co/t/id-range-query-v6-1-x/118046)
**Author:** [@andfk](https://discuss.elastic.co/u/andfk)\ **Replies:** 3\ **Last updated:** [February 15, 2018, 3:09pm UTC](https://discuss.elastic.co/t/id-range-query-v6-1-x/118046 "2018-02-15T15:09:24Z")
Hi, I would like to query by range for the "\_id" property. I tried adding the "\_id" on index time but as for v6.1.x is already added is not needed. I tried to query using a range but an exception is thrown with reason: … --- ## [Failed to send join request to master, discovery timed out](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-discovery-timed-out/107975)
**Author:** [@anton-g](https://discuss.elastic.co/u/anton-g)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 9:13am UTC](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-discovery-timed-out/107975 "2017-11-24T09:13:02Z")
Hey! I'm working on setting up a cluster and have run into a problem which I hope you could help me with. The cluster is set up with 2 master nodes (master-1 and master-2) running on the same server, then a data node o… --- ## [Doc with spaces in the id](https://discuss.elastic.co/t/doc-with-spaces-in-the-id/11939)
**Author:** [@John\_Bush\_2](https://discuss.elastic.co/u/John_Bush_2)\ **Replies:** 2\ **Last updated:** [May 15, 2013, 4:16am UTC](https://discuss.elastic.co/t/doc-with-spaces-in-the-id/11939 "2013-05-15T04:16:18Z")
I can't seem to delete (via java api) docs with spaces in the id. The request reports no error but it doesn't appear the doc is actually deleted from ES. It this expected behavior? Maybe something I'm doing wrong, … --- ## [Issue adding master only node -- path.repo not set?](https://discuss.elastic.co/t/issue-adding-master-only-node-path-repo-not-set/119716)
**Author:** [@corona](https://discuss.elastic.co/u/corona)\ **Replies:** 5\ **Last updated:** [February 15, 2018, 1:29pm UTC](https://discuss.elastic.co/t/issue-adding-master-only-node-path-repo-not-set/119716 "2018-02-15T13:29:18Z")
Hi, I would like to add 3 dedicated master only nodes to my cluster. I'd like to transition my existing master/data nodes to be data node only. However, the first step I took was to try adding a master only node to my … --- ## [Need some advice on cpu core number vs memory for ece allocator](https://discuss.elastic.co/t/need-some-advice-on-cpu-core-number-vs-memory-for-ece-allocator/169242)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 2:00pm UTC](https://discuss.elastic.co/t/need-some-advice-on-cpu-core-number-vs-memory-for-ece-allocator/169242 "2019-02-21T14:00:08Z")
Hi, I'm applying new test machine for ece and get below specification. CPU 24 Core/ Memory 384 GB As I know, ece allocate same cpu ratio to node with memory. For example, If I create a 64GB Node, then ece will alloca… --- ## [A Delay Between When Data is Archived in Elasticsearch but Visible in Kibana?](https://discuss.elastic.co/t/a-delay-between-when-data-is-archived-in-elasticsearch-but-visible-in-kibana/206054)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 7\ **Last updated:** [November 13, 2019, 2:04am UTC](https://discuss.elastic.co/t/a-delay-between-when-data-is-archived-in-elasticsearch-but-visible-in-kibana/206054 "2019-11-13T02:04:19Z")
Hi Elastic Sorcerers, I’ve recently set up a network monitoring system where data about network activity is archived in an Elasticsearch v 7.4.0 Docker container. On the same physical host (Ubuntu 16.04), I also have a… --- ## [Has anyone modified Kibana code to display images or documents?](https://discuss.elastic.co/t/has-anyone-modified-kibana-code-to-display-images-or-documents/59221)
**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\ **Replies:** 2\ **Last updated:** [August 29, 2016, 7:25pm UTC](https://discuss.elastic.co/t/has-anyone-modified-kibana-code-to-display-images-or-documents/59221 "2016-08-29T19:25:38Z")
I'm looking if it would be possible to display a document or image on the Kibana dashboard, or at least have a link to a directory where they are stored. --- ## [How do I setup APM all on one machine?](https://discuss.elastic.co/t/how-do-i-setup-apm-all-on-one-machine/324922)
**Author:** [@fnbk](https://discuss.elastic.co/u/fnbk)\ **Replies:** 4\ **Last updated:** [February 8, 2023, 9:26pm UTC](https://discuss.elastic.co/t/how-do-i-setup-apm-all-on-one-machine/324922 "2023-02-08T21:26:48Z")
I would like to have my application and the observability tools (logging, tracing, monitoring) installed all on one machine. But with the current ELK stack (8.6.1) with APM integration does not seem to support this. Is … --- ## [Filebeat not sending logs in real time](https://discuss.elastic.co/t/filebeat-not-sending-logs-in-real-time/260305)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 4\ **Last updated:** [January 15, 2021, 1:02pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-logs-in-real-time/260305 "2021-01-15T13:02:20Z")
Hello Team, We have upgraded our ELK stack from 6.4 to 6.8 but we are using beats 6.4. Before upgradation all the logs were reaching on kiabna in real time. But we upgraded our ELK from 6.4 to 6.8 and now filebeat is n… --- ## [Difference in time between timestamp and @timestamp](https://discuss.elastic.co/t/difference-in-time-between-timestamp-and-timestamp/231456)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 4:04pm UTC](https://discuss.elastic.co/t/difference-in-time-between-timestamp-and-timestamp/231456 "2020-05-07T16:04:33Z")
I have written the date filter as follows date { match =\> \["timestamp","yyyy-MM-dd HH:mm:ss.SSSSSSSSS"\] target =\> "@timestamp" timezone =\> "Asia/Kolkata" } timestamp : 2020-04-17 12:10:15.… [Previous page](https://discuss.elastic.co/top.md?page=633&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=635&per_page=50&period=all)