# Top **URL:** https://discuss.elastic.co/top.md?page=640&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 641 --- ## [Elasticsearch string query url with PHP and cURL](https://discuss.elastic.co/t/elasticsearch-string-query-url-with-php-and-curl/26985)
**Author:** [@TomS](https://discuss.elastic.co/u/TomS)\ **Replies:** 3\ **Last updated:** [August 7, 2015, 12:02am UTC](https://discuss.elastic.co/t/elasticsearch-string-query-url-with-php-and-curl/26985 "2015-08-07T00:02:52Z")
I am using elasticsearch to get some kind of information about my users. I just made a script in PHP that parses a document by using cURL and it is sending requests like: http://something.something/test\*/\_search?q=%2… --- ## [How to resolve: Exception in thread "main" java.nio.file.NoSuchFileException: /tmp/elasticsearch-10045853791335045856](https://discuss.elastic.co/t/how-to-resolve-exception-in-thread-main-java-nio-file-nosuchfileexception-tmp-elasticsearch-10045853791335045856/271668)
**Author:** [@hjj3296235](https://discuss.elastic.co/u/hjj3296235)\ **Replies:** 2\ **Last updated:** [May 2, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-resolve-exception-in-thread-main-java-nio-file-nosuchfileexception-tmp-elasticsearch-10045853791335045856/271668 "2021-05-02T14:10:45Z")
Linux: CentOS\_7 JDK: openJDK\_devel\_8 ES Version: 7.12.0 Log: 4月 28 22:47:46 localhost.localdomain systemd\[1\]: Unit elasticsearch.service entered failed state. 4月 28 22:47:46 localhost.localdomain systemd\[1\]: elastics… --- ## [Custom CSS code for dashboards](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 4:31pm UTC](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740 "2021-03-10T16:31:28Z")
Hi there! I'm looking into adding some custom CSS code to personalize a bit my dashboard. Say that I have a custom dashboard, I want the panels to have rounded corners. I have tested this code w/ the Firefox inspector (… --- ## [Cannot initialize SSL - Invalid keystore format](https://discuss.elastic.co/t/cannot-initialize-ssl-invalid-keystore-format/223615)
**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:30pm UTC](https://discuss.elastic.co/t/cannot-initialize-ssl-invalid-keystore-format/223615 "2020-03-20T13:30:33Z")
Hello all, I have installed an Elasticsearch cluster (ECK) in my Kubernetes cluster (GKE) by using this tutorial. I retrived the CA certificat tls.crt created by my ECK. Then, I used the following command to create a t… --- ## [Packetbeat not running](https://discuss.elastic.co/t/packetbeat-not-running/66953)
**Author:** [@kumar21000](https://discuss.elastic.co/u/kumar21000)\ **Replies:** 1\ **Last updated:** [November 23, 2016, 10:01am UTC](https://discuss.elastic.co/t/packetbeat-not-running/66953 "2016-11-23T10:01:16Z")
I am trying to run packetbeat in centos 7, while running I am getting the below error \[root@packetbeat\]# cat /var/log/packetbeat/packetbeat 2016-11-23T11:50:50+04:00 INFO Setup Beat: packetbeat; Version: 5.0.1 2016-11-… --- ## [Changing elasticsearch/kibana IP address](https://discuss.elastic.co/t/changing-elasticsearch-kibana-ip-address/361233)
**Author:** [@maissam\_asgari](https://discuss.elastic.co/u/maissam_asgari)\ **Replies:** 8\ **Last updated:** [June 19, 2024, 7:03am UTC](https://discuss.elastic.co/t/changing-elasticsearch-kibana-ip-address/361233 "2024-06-19T07:03:08Z")
Hello everyone I've been searching and trying every manual on Internet for this issue, but at end, couldn't resolve the problem. I installed elasticsearch/kibana via the manual here from debian packages. guide/en/elas… --- ## [Thread\_pool settings have strange defaults in es v6.2.4](https://discuss.elastic.co/t/thread-pool-settings-have-strange-defaults-in-es-v6-2-4/169419)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 5\ **Last updated:** [February 22, 2019, 9:50am UTC](https://discuss.elastic.co/t/thread-pool-settings-have-strange-defaults-in-es-v6-2-4/169419 "2019-02-22T09:50:25Z")
In the elasticsearch.yml config I'm setting the search thread\_pool size to be 4200, like so: thread\_pool.search.queue\_size: 4200 But the other day I received the following error: ElasticsearchStatusException\[Elasticse… --- ## [Can I add loadbalance to filebeat config for hosts in logstash output?](https://discuss.elastic.co/t/can-i-add-loadbalance-to-filebeat-config-for-hosts-in-logstash-output/53378)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 5\ **Last updated:** [June 22, 2016, 9:31pm UTC](https://discuss.elastic.co/t/can-i-add-loadbalance-to-filebeat-config-for-hosts-in-logstash-output/53378 "2016-06-22T21:31:07Z")
https://www.elastic.co/guide/en/beats/filebeat/current/logstash-output.html It says I can add a list of hosts in logstash output and enable loadbalancer but I am not sure if I can just add the loadbalancer like : log… --- ## [Elasticsearch 2.0.0-beta1 released](https://discuss.elastic.co/t/elasticsearch-2-0-0-beta1-released/28134)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 0\ **Last updated:** [August 26, 2015, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-2-0-0-beta1-released/28134 "2015-08-26T18:27:56Z")
Today, we are excited to announce the release of Elasticsearch 2.0.0-beta1, based on Lucene 5.2.1. This release contains over 2,500 pull requests from 469 committers. 850 of the pull requests are completely new to 2.0. … --- ## [Lost data on docker](https://discuss.elastic.co/t/lost-data-on-docker/246924)
**Author:** [@alireza\_Rahmani\_khal](https://discuss.elastic.co/u/alireza_Rahmani_khal)\ **Replies:** 7\ **Last updated:** [September 2, 2020, 10:07am UTC](https://discuss.elastic.co/t/lost-data-on-docker/246924 "2020-09-02T10:07:47Z")
hello this my docker-compose : search: image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 environment: - container\_name:es01 - bootstrap.memory\_lock:true - "ES\_JAVA\_OPTS=-Xms2g -Xmx2… --- ## [Fleet of agents healthy but not sending data](https://discuss.elastic.co/t/fleet-of-agents-healthy-but-not-sending-data/282440)
**Author:** [@yzpls](https://discuss.elastic.co/u/yzpls)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 9:23am UTC](https://discuss.elastic.co/t/fleet-of-agents-healthy-but-not-sending-data/282440 "2021-09-02T09:23:10Z")
I have a Fleet of Elastic Agents running on a fresh k8s cluster (running latest ECK). I added a couple integrations via Kibana, like the Kubernetes metrics. But the Kubernetes Dashboards are all empty, and nothing shows … --- ## [Multitier Storage with ES](https://discuss.elastic.co/t/multitier-storage-with-es/54029)
**Author:** [@Alexander\_Trumper](https://discuss.elastic.co/u/Alexander_Trumper)\ **Replies:** 4\ **Last updated:** [June 29, 2016, 11:24am UTC](https://discuss.elastic.co/t/multitier-storage-with-es/54029 "2016-06-29T11:24:12Z")
I'm currently evalutating ELK for logfile storage and analysis. Since we may acquire up to 50GB per day we need to use different storage pathes according to the age of indices. So the idea I'd like to ask for feedback… --- ## [Filtered alias and possible options for forcing filters for queries](https://discuss.elastic.co/t/filtered-alias-and-possible-options-for-forcing-filters-for-queries/15535)
**Author:** [@Matthias\_Johnson](https://discuss.elastic.co/u/Matthias_Johnson)\ **Replies:** 2\ **Last updated:** [February 3, 2014, 4:42pm UTC](https://discuss.elastic.co/t/filtered-alias-and-possible-options-for-forcing-filters-for-queries/15535 "2014-02-03T16:42:36Z")
In our application we have the need to restrict access to data. We would like to use filters for that. The filtered alias seems like a nice way to do that and my original thought was to simply create an alias for e… --- ## [How to split field value into an array?](https://discuss.elastic.co/t/how-to-split-field-value-into-an-array/245197)
**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\ **Replies:** 1\ **Last updated:** [August 17, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-split-field-value-into-an-array/245197 "2020-08-17T09:57:15Z")
Hello, I would like to split a field value into an array of values. Field type is keyword and I would like to separate these values, so we can filter each value separately (e.g. "app1"). example: applname: app1, app2,… --- ## [Unable to parse JSON Array object in Logstash](https://discuss.elastic.co/t/unable-to-parse-json-array-object-in-logstash/89247)
**Author:** [@ihsanhaikalz](https://discuss.elastic.co/u/ihsanhaikalz)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 7:02pm UTC](https://discuss.elastic.co/t/unable-to-parse-json-array-object-in-logstash/89247 "2017-06-13T19:02:23Z")
I am trying to parse an example JSON Array into Logstash as follow: { "Records": \[ { "eventVersion": "1.03", "userIdentity": { "type": "IAMUser", "principalId": "11112222… --- ## [How to create a Kibana Visualization to show jobs failing over last 7 days](https://discuss.elastic.co/t/how-to-create-a-kibana-visualization-to-show-jobs-failing-over-last-7-days/51217)
**Author:** [@chakrayadavalli](https://discuss.elastic.co/u/chakrayadavalli)\ **Replies:** 1\ **Last updated:** [June 2, 2016, 2:37pm UTC](https://discuss.elastic.co/t/how-to-create-a-kibana-visualization-to-show-jobs-failing-over-last-7-days/51217 "2016-06-02T14:37:54Z")
My app executes about 3 to 4 million jobs every day. Jobs are scheduled with the same unique ID and every job has a completion status representing success or failure. I would like to create a kibana visualization that sh… --- ## [Can we rename any index?](https://discuss.elastic.co/t/can-we-rename-any-index/293377)
**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 6:11pm UTC](https://discuss.elastic.co/t/can-we-rename-any-index/293377 "2022-01-03T18:11:46Z")
Is there any way to rename an index without the need of copying data to another index ? --- ## [IOPS for a Data node is extremely high while other not](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772)
**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\ **Replies:** 8\ **Last updated:** [September 12, 2021, 4:57pm UTC](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772 "2021-09-12T16:57:45Z")
Version: Elastic Search 7.13 I am running 3 master nodes, 2 client nodes and 10 data nodes (199-399 Gb each node) And one day I have seen the IOPS for a Data node is extremely high while other not Could you please … --- ## [Url too long, too many indices](https://discuss.elastic.co/t/url-too-long-too-many-indices/143593)
**Author:** [@LordMike](https://discuss.elastic.co/u/LordMike)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 12:54am UTC](https://discuss.elastic.co/t/url-too-long-too-many-indices/143593 "2018-08-09T00:54:37Z")
Hi, We have a situation where we'll end up maintaining a large-ish set of indices in ES, and where we want to query on sets of these indices (chosen by users). Right now, we're seeing an issue where the search URL reach… --- ## [Logstash Elasticsearch template for doc\_values](https://discuss.elastic.co/t/logstash-elasticsearch-template-for-doc-values/31423)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 8\ **Last updated:** [September 30, 2015, 5:21pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-template-for-doc-values/31423 "2015-09-30T17:21:38Z")
How do I go about modifying the default template for Logstash for it to use doc\_values for as many fields as possible? With Elasticsearch 2.0 doc\_values will be default for all fields instead of optional, so by then thi… --- ## [Why is the Java api query slower than the rest call?](https://discuss.elastic.co/t/why-is-the-java-api-query-slower-than-the-rest-call/17599)
**Author:** [@savioteles](https://discuss.elastic.co/u/savioteles)\ **Replies:** 8\ **Last updated:** [May 21, 2014, 11:20am UTC](https://discuss.elastic.co/t/why-is-the-java-api-query-slower-than-the-rest-call/17599 "2014-05-21T11:20:30Z")
When I run the following query, it takes much more time using the JAVA api than using the REST call (for example using the HEAD ES plugin). Why is this happening? Can anyone help me? Thanks!!! \*Time:\* JAVA … --- ## [Filebeat 的 logstash output 是否可以設定二個hosts](https://discuss.elastic.co/t/filebeat-logstash-output-hosts/94563)
**Author:** [@stephen\_luan](https://discuss.elastic.co/u/stephen_luan)\ **Replies:** 5\ **Last updated:** [August 10, 2017, 1:04am UTC](https://discuss.elastic.co/t/filebeat-logstash-output-hosts/94563 "2017-08-10T01:04:46Z")
Hi all, 有一個問題請教，filebeat 在設定檔內是否可以設定在logstash output的hosts 為兩個以上的logstash hosts, 並且是每個logstash host, 都能收到一模一樣的資料，如果不行，是否可以一台client 啟動兩個filebeat呢？ 在麻煩大家的幫助，謝謝。 --- ## [How to reparse some files](https://discuss.elastic.co/t/how-to-reparse-some-files/69185)
**Author:** [@valugi](https://discuss.elastic.co/u/valugi)\ **Replies:** 4\ **Last updated:** [December 18, 2016, 12:03pm UTC](https://discuss.elastic.co/t/how-to-reparse-some-files/69185 "2016-12-18T12:03:00Z")
Hi, I am in a development/testing phase of implementing the ELK stack. So I play and modify patterns and would like to see in Kibana the result of those changes as soon as possible. On my system, I am trying to test a m… --- ## [Enable \_size in index template](https://discuss.elastic.co/t/enable-size-in-index-template/278055)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 7\ **Last updated:** [July 7, 2021, 3:25pm UTC](https://discuss.elastic.co/t/enable-size-in-index-template/278055 "2021-07-07T15:25:28Z")
Hi, I've installed mapper size plugin on all of our elastic nodes, I can see/use the size field, when I enable it on an index: PUT index-xxx/\_mapping { "\_size": { "enabled": true } } and create a scripted fiel… --- ## [Kibana: Creating Selected Fields](https://discuss.elastic.co/t/kibana-creating-selected-fields/81311)
**Author:** [@fabiansc](https://discuss.elastic.co/u/fabiansc)\ **Replies:** 7\ **Last updated:** [April 18, 2017, 8:43am UTC](https://discuss.elastic.co/t/kibana-creating-selected-fields/81311 "2017-04-18T08:43:48Z")
Hi Everyone, I just found out about ELK + Filebeat and setup an own stack. First I player around with default systemlog files, which was working fine. Afterwards I started pushing my own application log file to it to f… --- ## [Use wildcards in Channels with Winlogbeat](https://discuss.elastic.co/t/use-wildcards-in-channels-with-winlogbeat/43367)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 1\ **Last updated:** [March 3, 2016, 11:54pm UTC](https://discuss.elastic.co/t/use-wildcards-in-channels-with-winlogbeat/43367 "2016-03-03T23:54:44Z")
If I want to watch all or almost all log channels on a Windows server the config file becomes quite bulky and defining all the channels is not a fun thing to do. Is there a way to define channels more easily like wit… --- ## [Grok pattern match order](https://discuss.elastic.co/t/grok-pattern-match-order/129120)
**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 2:05pm UTC](https://discuss.elastic.co/t/grok-pattern-match-order/129120 "2018-04-23T14:05:04Z")
Hi all, I've been writing up some grok patterns to match some Cisco FirePower logs however due to the data in the logs, it sometimes matching against other patterns and making results inaccurate. I've got the below con… --- ## [How can I combine some mysql query events with logstash aggregate filter?](https://discuss.elastic.co/t/how-can-i-combine-some-mysql-query-events-with-logstash-aggregate-filter/284533)
**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\ **Replies:** 2\ **Last updated:** [September 19, 2021, 6:13am UTC](https://discuss.elastic.co/t/how-can-i-combine-some-mysql-query-events-with-logstash-aggregate-filter/284533 "2021-09-19T06:13:09Z")
Hello, I implemented pipeline with JDBC input plugin, my table in mysql follow the EAV (Entity-Attribute-Value) structure, therefore I can't get all attributes that related to one user (Entity) in one row with mysql que… --- ## [Null\_pointer\_exception 500 error](https://discuss.elastic.co/t/null-pointer-exception-500-error/102534)
**Author:** [@doshi\_darshan](https://discuss.elastic.co/u/doshi_darshan)\ **Replies:** 1\ **Last updated:** [October 3, 2017, 1:39pm UTC](https://discuss.elastic.co/t/null-pointer-exception-500-error/102534 "2017-10-03T13:39:40Z")
I am getting below error in Heroku when i deployed my code. Please help me Heroku Redis : Redis Premium 0 \<- 500 { 2017-10-03T07:51:58.485013+00:00 app\[web.2\]: "error": { 2017-10-03T07:51:58.485014+00:00 app\[web.2\]:… --- ## [Filebeat on Windows 2012 R2, Error Sending logs to Logstash](https://discuss.elastic.co/t/filebeat-on-windows-2012-r2-error-sending-logs-to-logstash/52025)
**Author:** [@smitjainsj](https://discuss.elastic.co/u/smitjainsj)\ **Replies:** 8\ **Last updated:** [June 9, 2016, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-2012-r2-error-sending-logs-to-logstash/52025 "2016-06-09T14:13:38Z")
Team, I am using Filebeat \> Logstash \> Elasticsearch \> Kibana to parse and analyse logs basically Java Stack Trace and other Tomcat Logs. Here is YML for Filebeat filebeat: prospectors: - p… --- ## [Elasticsearch indices gets deleted automatically periodically](https://discuss.elastic.co/t/elasticsearch-indices-gets-deleted-automatically-periodically/71585)
**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearch-indices-gets-deleted-automatically-periodically/71585 "2017-01-17T20:16:00Z")
I have set up a demo elasticsearch cluster (with 3 nodes) in ec2 to build a prototype. I run an indexer job on demand to populate documents into the index. I am querying the index using sense plugin and a basic javascrip… --- ## [Grok Parse failure with fail2ban](https://discuss.elastic.co/t/grok-parse-failure-with-fail2ban/77492)
**Author:** [@xon](https://discuss.elastic.co/u/xon)\ **Replies:** 7\ **Last updated:** [March 15, 2017, 9:30pm UTC](https://discuss.elastic.co/t/grok-parse-failure-with-fail2ban/77492 "2017-03-15T21:30:00Z")
I followed 2 different guides and I still havent figure out where the issue is. I want to parse fail2ban logs and I tried the following two configurations unsuccessfully! Pattern files that I tried root@leeds:/etc/log… --- ## [Cannot restore index \[.security-7\]](https://discuss.elastic.co/t/cannot-restore-index-security-7/327473)
**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\ **Replies:** 6\ **Last updated:** [March 13, 2023, 9:39pm UTC](https://discuss.elastic.co/t/cannot-restore-index-security-7/327473 "2023-03-13T21:39:19Z")
Hello everyone, I'm trying to migrate all my users from my old 7.9 cluster to a new 8.5 cluster. I was reviewing the documentation and proceeded to take a snapshot of the security indexes of my old cluster to be able t… --- ## [Elasticsearch terms aggregation taking 5 seconds on 5 million documents](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-taking-5-seconds-on-5-million-documents/191314)
**Author:** [@Aakash\_Bhardwaj](https://discuss.elastic.co/u/Aakash_Bhardwaj)\ **Replies:** 6\ **Last updated:** [July 22, 2019, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-taking-5-seconds-on-5-million-documents/191314 "2019-07-22T05:26:41Z")
I'm using elasticsearch hosted service (elasticsearch.co) with 3 machines. The query has a bool query and then an aggregation query. The bool query almost select 2M out of the 5M documents and then we run a terms Agg… --- ## [Cant create XContentParser from source field](https://discuss.elastic.co/t/cant-create-xcontentparser-from-source-field/1887)
**Author:** [@CaoManhDat](https://discuss.elastic.co/u/CaoManhDat)\ **Replies:** 6\ **Last updated:** [June 26, 2015, 5:18pm UTC](https://discuss.elastic.co/t/cant-create-xcontentparser-from-source-field/1887 "2015-06-26T17:18:27Z")
I'm currently create a CustomQuery, i need to parse \_source field to get some specific field. But it some time throw ElasticsearchParseException BytesArray bytes = new BytesArray(doc.getField("\_source").binaryValue())… --- ## [Reload field list lost fields](https://discuss.elastic.co/t/reload-field-list-lost-fields/40741)
**Author:** [@dnd](https://discuss.elastic.co/u/dnd)\ **Replies:** 1\ **Last updated:** [February 8, 2016, 7:12pm UTC](https://discuss.elastic.co/t/reload-field-list-lost-fields/40741 "2016-02-08T19:12:16Z")
I'm running kibana v4, and everything was working fine, and I had about 150-200 fields that Kibana recognized. The other day I had a new field that I wanted to be able to filter on, but when I went to the index settings … --- ## [Using DataDog's vector to ship logs to ElasticSearch instead of elastic-agent?](https://discuss.elastic.co/t/using-datadogs-vector-to-ship-logs-to-elasticsearch-instead-of-elastic-agent/341388)
**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\ **Replies:** 3\ **Last updated:** [August 22, 2023, 4:29pm UTC](https://discuss.elastic.co/t/using-datadogs-vector-to-ship-logs-to-elasticsearch-instead-of-elastic-agent/341388 "2023-08-22T16:29:19Z")
DataDog's vector program has a feature which allows you to ship logs directly to Elasticsearch: This looks like this could be used as an alternative to elastic-agent. Does anyone have any experiences to share on usi… --- ## [Bitwise logical operation in filter](https://discuss.elastic.co/t/bitwise-logical-operation-in-filter/109982)
**Author:** [@sliu](https://discuss.elastic.co/u/sliu)\ **Replies:** 3\ **Last updated:** [December 3, 2017, 7:32am UTC](https://discuss.elastic.co/t/bitwise-logical-operation-in-filter/109982 "2017-12-03T07:32:30Z")
I see this get asked many times over the years. Is there a way to do bitwise operation in query filtering? For instance, I may have a data field for store opening day: M,T,W,Th,F,S,Sun. So: 1111100: store opens on weekd… --- ## [Data Table with split table ordering](https://discuss.elastic.co/t/data-table-with-split-table-ordering/116030)
**Author:** [@Tomas\_Law](https://discuss.elastic.co/u/Tomas_Law)\ **Replies:** 2\ **Last updated:** [January 19, 2018, 3:51pm UTC](https://discuss.elastic.co/t/data-table-with-split-table-ordering/116030 "2018-01-19T15:51:17Z")
Hello, After a couple split rows and split tables aggregations I get the following result: \[image\] The most important metric I get comes from the Total function in the visualization Options which is the Sum (circled i… --- ## [All primary shards are added to only one node](https://discuss.elastic.co/t/all-primary-shards-are-added-to-only-one-node/37260)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 4\ **Last updated:** [December 16, 2015, 2:52am UTC](https://discuss.elastic.co/t/all-primary-shards-are-added-to-only-one-node/37260 "2015-12-16T02:52:38Z")
Hi, I see a behavior in elasticsearch that all the primary shards (we have 5 shards per index) added to only one of the three nodes in cluster all the time. Why is this happening? Currently we have replicas disabled.… --- ## [Split Json Array Objects](https://discuss.elastic.co/t/split-json-array-objects/223088)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 8\ **Last updated:** [March 18, 2020, 4:03am UTC](https://discuss.elastic.co/t/split-json-array-objects/223088 "2020-03-18T04:03:21Z")
Hi, I want to split my json array into multiple events in logstash. I tried using split field but it doesn't seem to work that way for objects in array. So any reference which plugin should I use in logstash to process … --- ## [Can't input in Elasticsearch](https://discuss.elastic.co/t/cant-input-in-elasticsearch/51972)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 8\ **Last updated:** [June 14, 2016, 7:41am UTC](https://discuss.elastic.co/t/cant-input-in-elasticsearch/51972 "2016-06-14T07:41:58Z")
So I'm an all goner here. Got no clue where my mistake is. Here's the deal: I'm trying to input data from a csv file in Elasticsearch 2.3.2. The input, filter and output is done by Logstash 2.3.2. The .csv file: … --- ## [Timelion count rate per second](https://discuss.elastic.co/t/timelion-count-rate-per-second/121863)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 2\ **Last updated:** [March 2, 2018, 12:15pm UTC](https://discuss.elastic.co/t/timelion-count-rate-per-second/121863 "2018-03-02T12:15:52Z")
I'm struggling to find the rate that a certain strings appears per second. So far I have this: .es(index=myindex-\*, q='@message: "specific string"').scale\_interval(1s) When I zoom in I can see it does split it out by s… --- ## [Deploy elastic-agent with cert?](https://discuss.elastic.co/t/deploy-elastic-agent-with-cert/247397)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 5\ **Last updated:** [September 4, 2020, 11:29am UTC](https://discuss.elastic.co/t/deploy-elastic-agent-with-cert/247397 "2020-09-04T11:29:05Z")
I'm trying to deploy the agent but my kibana instance requires a certificate which won't let me connect to it. Is there a way to give it a certificate or another way around this? fail to enroll: fail to execute request … --- ## [Composite Aggregation bucket sorting by max score](https://discuss.elastic.co/t/composite-aggregation-bucket-sorting-by-max-score/187021)
**Author:** [@Jarrod\_C](https://discuss.elastic.co/u/Jarrod_C)\ **Replies:** 5\ **Last updated:** [June 25, 2019, 8:41am UTC](https://discuss.elastic.co/t/composite-aggregation-bucket-sorting-by-max-score/187021 "2019-06-25T08:41:26Z")
Hopefully I've overlooking something easy. I recently replaced the TermsAggregation with a Composite agg and I can't get the bucket sorting to work. With the terms agg there was an order directly in the agg builder tha… --- ## [Cannot install a \[platinum\] license unless TLS is configured or security is disabled](https://discuss.elastic.co/t/cannot-install-a-platinum-license-unless-tls-is-configured-or-security-is-disabled/181193)
**Author:** [@hari.v](https://discuss.elastic.co/u/hari.v)\ **Replies:** 5\ **Last updated:** [May 17, 2019, 2:21am UTC](https://discuss.elastic.co/t/cannot-install-a-platinum-license-unless-tls-is-configured-or-security-is-disabled/181193 "2019-05-17T02:21:13Z")
Hi i couldnt able to update platinum license on the kibana console. shows \* Error encountered uploading license: Cannot install a \[GOLD\] license unless TLS is configured or security is disabled so i tried to generate c… --- ## [Elastic Rest Client - Connection pooling](https://discuss.elastic.co/t/elastic-rest-client-connection-pooling/160846)
**Author:** [@sivakumarp11](https://discuss.elastic.co/u/sivakumarp11)\ **Replies:** 1\ **Last updated:** [December 21, 2018, 12:07pm UTC](https://discuss.elastic.co/t/elastic-rest-client-connection-pooling/160846 "2018-12-21T12:07:16Z")
It is not clear as to whether connection pool is available for Elastic REST client - synchronous call or not ? If yes, please provide sample configuration class. If not, 2.1 please explain why it is not provided for s… --- ## [Understanding implications of \`index: false\` with \`type: keyword\`](https://discuss.elastic.co/t/understanding-implications-of-index-false-with-type-keyword/264352)
**Author:** [@workmanw](https://discuss.elastic.co/u/workmanw)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 1:14am UTC](https://discuss.elastic.co/t/understanding-implications-of-index-false-with-type-keyword/264352 "2021-02-16T01:14:37Z")
Hello, I have a pretty simple use case that has been discussed at length on this forum, I'm storing a large block of text that I just want to reside in my source document, not be indexed at all. Originally this field wa… --- ## [Logstash 2.0 Cisco Asa - data does not appear in kibana](https://discuss.elastic.co/t/logstash-2-0-cisco-asa-data-does-not-appear-in-kibana/33581)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 6\ **Last updated:** [April 15, 2016, 10:19pm UTC](https://discuss.elastic.co/t/logstash-2-0-cisco-asa-data-does-not-appear-in-kibana/33581 "2016-04-15T22:19:07Z")
I'm using the following logtash config, and I can see it working on stdout, but nothing is show up in kibana/elastic search, I created an index called logstash\* but there seems to be nothing in it input { tcp { port =\> … --- ## [Turn Off Irrelevant / Sounds like search result](https://discuss.elastic.co/t/turn-off-irrelevant-sounds-like-search-result/251259)
**Author:** [@Habib\_Ullah](https://discuss.elastic.co/u/Habib_Ullah)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 9:23am UTC](https://discuss.elastic.co/t/turn-off-irrelevant-sounds-like-search-result/251259 "2020-10-12T09:23:13Z")
When I search for work "coke" app search return documents that never contain those words All these documents don't contain the word "coke" but they do contain "Smoked", I think the app search also matching word those… [Previous page](https://discuss.elastic.co/top.md?page=639&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=641&per_page=50&period=all)