# Top **URL:** https://discuss.elastic.co/top.md?page=644&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 645 --- ## [Netty Transport Issue - ES 5.6.4, Java8, Data Node Only](https://discuss.elastic.co/t/netty-transport-issue-es-5-6-4-java8-data-node-only/108646)
**Author:** [@andynz2017](https://discuss.elastic.co/u/andynz2017)\ **Replies:** 2\ **Last updated:** [December 1, 2017, 8:27am UTC](https://discuss.elastic.co/t/netty-transport-issue-es-5-6-4-java8-data-node-only/108646 "2017-12-01T08:27:05Z")
Hi All, Curly issue experienced after upgrading a cluster to 5.6.4. Ip addresses and hostnames have been sanitized. 2 out of 3 data nodes start OK and communicate back to three dedicated master nodes. If I disable SSL/… --- ## [\[ES5.1.2\] Help with Detecting DNS Tunnels with PacketBeat+Watcher](https://discuss.elastic.co/t/es5-1-2-help-with-detecting-dns-tunnels-with-packetbeat-watcher/72522)
**Author:** [@Snowman](https://discuss.elastic.co/u/Snowman)\ **Replies:** 8\ **Last updated:** [March 11, 2017, 6:03am UTC](https://discuss.elastic.co/t/es5-1-2-help-with-detecting-dns-tunnels-with-packetbeat-watcher/72522 "2017-03-11T06:03:47Z")
Hi, thanks a lot for your reply. I am using Packetbeat - 5.1.2 (My Kibana and also Elastic are 5.1.2) from elasticsearch repo. curl -XGET "http://localhost:9200/packetbeat-\*/dns/\_search?pretty&q=dns.question.etld\_plus\_… --- ## [Google OIDC SSO with Mapping (Google) Groups onto (Kibana) Roles](https://discuss.elastic.co/t/google-oidc-sso-with-mapping-google-groups-onto-kibana-roles/271762)
**Author:** [@MartynF](https://discuss.elastic.co/u/MartynF)\ **Replies:** 2\ **Last updated:** [May 4, 2021, 1:05pm UTC](https://discuss.elastic.co/t/google-oidc-sso-with-mapping-google-groups-onto-kibana-roles/271762 "2021-05-04T13:05:07Z")
Hi We're using Elastic Cloud hosted version of the Elastic stack and attempting to integration Google SSO with OIDC. I have the authentication working and can use role mapping with usernames to map specific users onto … --- ## [Efficiency of aggregation in my use cases?](https://discuss.elastic.co/t/efficiency-of-aggregation-in-my-use-cases/27012)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 6\ **Last updated:** [August 18, 2015, 1:47am UTC](https://discuss.elastic.co/t/efficiency-of-aggregation-in-my-use-cases/27012 "2015-08-18T01:47:36Z")
Hello Elastic Search experts, I have a tens of million records, which is customer ID and city ID pair. There are tens of millions of unique customer ID, and only a few hundreds unique city ID. I want to do a merge to g… --- ## [License for base elasticsearch](https://discuss.elastic.co/t/license-for-base-elasticsearch/186041)
**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\ **Replies:** 7\ **Last updated:** [June 18, 2019, 4:22am UTC](https://discuss.elastic.co/t/license-for-base-elasticsearch/186041 "2019-06-18T04:22:11Z")
Hi Team, As we known, the basic are free, after i install the basic version, when I install elasticsearch, kibana, it's prompt me "Elasticsearch cluster did not respond with license information." Please advise Thanks … --- ## [Failed to parse field \[flow.bytes\] of type \[long\]](https://discuss.elastic.co/t/failed-to-parse-field-flow-bytes-of-type-long/174843)
**Author:** [@Sghtblinder](https://discuss.elastic.co/u/Sghtblinder)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 7:23pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-flow-bytes-of-type-long/174843 "2019-04-01T19:23:19Z")
Hey Everyone i have been working on our ELK stack the last week and since this past weekend this error has started popping up in my logstash logs and i honestly have no idea what is causing it. \[2019-04-01T13:47:28,143… --- ## [Shard allocation seems to put replica shards on same host when using: cluster.routing.allocation.same\_shard.host: true](https://discuss.elastic.co/t/shard-allocation-seems-to-put-replica-shards-on-same-host-when-using-cluster-routing-allocation-same-shard-host-true/44181)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 7\ **Last updated:** [April 28, 2016, 2:16pm UTC](https://discuss.elastic.co/t/shard-allocation-seems-to-put-replica-shards-on-same-host-when-using-cluster-routing-allocation-same-shard-host-true/44181 "2016-04-28T14:16:37Z")
Using 2.2.0 So I decided to put more nodes per physical host. These are not VMs it's 3 physical instances running on the same physical host. For each host, I have 4 total servers.... I disabled shard allocation downed… --- ## [Filebeat: docker autodiscover - do I have things right?](https://discuss.elastic.co/t/filebeat-docker-autodiscover-do-i-have-things-right/138404)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 5\ **Last updated:** [July 9, 2018, 8:44am UTC](https://discuss.elastic.co/t/filebeat-docker-autodiscover-do-i-have-things-right/138404 "2018-07-09T08:44:11Z")
Hi there, After reading and watching this information: https://www.elastic.co/guide/en/beats/filebeat/6.3/configuration-autodiscover.html https://www.elastic.co/webinars/elasticsearch-log-collection-with-kubernetes… --- ## [How to use environment variable for logstash output elasticsearch plugin for multiple elasticsearch hosts?](https://discuss.elastic.co/t/how-to-use-environment-variable-for-logstash-output-elasticsearch-plugin-for-multiple-elasticsearch-hosts/317169)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [November 1, 2022, 3:07pm UTC](https://discuss.elastic.co/t/how-to-use-environment-variable-for-logstash-output-elasticsearch-plugin-for-multiple-elasticsearch-hosts/317169 "2022-11-01T15:07:54Z")
Hi, I am deploying logstash and its pipelines via ansible. I want to use the same pipeline on different installations. So I don't want to modify the elasticsearch output plugin in each pipeline. I want to use an environ… --- ## [How do I send request headers using HTTP input plugin?](https://discuss.elastic.co/t/how-do-i-send-request-headers-using-http-input-plugin/53009)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 4\ **Last updated:** [June 18, 2016, 3:50pm UTC](https://discuss.elastic.co/t/how-do-i-send-request-headers-using-http-input-plugin/53009 "2016-06-18T15:50:14Z")
The LogStash HTTP output plugin has a headers field that one can use to add custom headers to the http request. Why isn't there a headers field for the LogStash HTTP input plugin? --- ## [Kibana 5.3.0 Active Directory authentication](https://discuss.elastic.co/t/kibana-5-3-0-active-directory-authentication/82289)
**Author:** [@mk40us](https://discuss.elastic.co/u/mk40us)\ **Replies:** 2\ **Last updated:** [April 13, 2017, 3:58pm UTC](https://discuss.elastic.co/t/kibana-5-3-0-active-directory-authentication/82289 "2017-04-13T15:58:47Z")
Hi, We would like to setup AD authentication just for Kibana and not setup AD authentication for Elasticsearch or Logstash components. Is that possible?. Can anyone point me towards the direction of setting up AD based… --- ## [Kibana visualization sort according to timestamp](https://discuss.elastic.co/t/kibana-visualization-sort-according-to-timestamp/89298)
**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\ **Replies:** 1\ **Last updated:** [June 14, 2017, 4:44pm UTC](https://discuss.elastic.co/t/kibana-visualization-sort-according-to-timestamp/89298 "2017-06-14T16:44:35Z")
I am using Kibana to create visualizations. I have created a count (Y axis) vs timestamp (X axis) line chart. By default it gets sorted according to the counts. But I want to sort according to timestamp. How can I do it? … --- ## [ECS expect \`target\` value](https://discuss.elastic.co/t/ecs-expect-target-value/308652)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 8\ **Last updated:** [July 2, 2022, 12:40am UTC](https://discuss.elastic.co/t/ecs-expect-target-value/308652 "2022-07-02T00:40:54Z")
Hello boys and girls, I'm playing with logstash and sflow codec input Trying to enrich the data with geoip and get this error: \[WARN \]\[logstash.filters.geoip \]\[3\_sflow\] ECS expect \`target\` value \`destination.geo.ip\`… --- ## [Stemming Capability for English+Arabic Content](https://discuss.elastic.co/t/stemming-capability-for-english-arabic-content/12369)
**Author:** [@tarang\_dawer](https://discuss.elastic.co/u/tarang_dawer)\ **Replies:** 8\ **Last updated:** [June 17, 2013, 7:39am UTC](https://discuss.elastic.co/t/stemming-capability-for-english-arabic-content/12369 "2013-06-17T07:39:18Z")
Hi I am indexing some data which is a mixture of arabic and english content. Since the content is huge in size , thus, to avoid storage overhead , multi-field option is not prefrable (1 field with arabic analyzer an… --- ## [Performance reduction in elasticsearch 8.0.0](https://discuss.elastic.co/t/performance-reduction-in-elasticsearch-8-0-0/297067)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 5\ **Last updated:** [February 13, 2022, 1:30pm UTC](https://discuss.elastic.co/t/performance-reduction-in-elasticsearch-8-0-0/297067 "2022-02-13T13:30:23Z")
Hello friends Considering that Elasticsearch announced that it had upgraded its performance in version 8.0.0, I decided to install version 8.0.0, but after installation I found that my search performance was about 5 tim… --- ## [Recommended setup for javascript client & elasticsearch backend?](https://discuss.elastic.co/t/recommended-setup-for-javascript-client-elasticsearch-backend/5189)
**Author:** [@Andy\_2](https://discuss.elastic.co/u/Andy_2)\ **Replies:** 7\ **Last updated:** [August 19, 2011, 8:07am UTC](https://discuss.elastic.co/t/recommended-setup-for-javascript-client-elasticsearch-backend/5189 "2011-08-19T08:07:14Z")
Hi, My front end is a browser-based javascript program that generates read- only queries. Should I have the js program communicating directly with elasticsearch? If not, is there any proxy/middleware setup you would… --- ## [How to change kibana.yml in elastic cloud](https://discuss.elastic.co/t/how-to-change-kibana-yml-in-elastic-cloud/130460)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 4\ **Last updated:** [May 4, 2018, 8:33am UTC](https://discuss.elastic.co/t/how-to-change-kibana-yml-in-elastic-cloud/130460 "2018-05-04T08:33:44Z")
We are using Elastic Cloud to host our elastic solution. We have some issues with generating reports and need to increase the xpack.reporting.queue.timeout in the kibana.yml file. But where do you find the kibana.yml fil… --- ## [Logstash 429 errors](https://discuss.elastic.co/t/logstash-429-errors/44387)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\ **Replies:** 4\ **Last updated:** [March 16, 2016, 1:51am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387 "2016-03-16T01:51:20Z")
I have logstash 2.2.2 installed in my server. I see following 429 warnings in the logstashlogs. what do these logs mean? Does it mean the retry succeeds, or the event is going to be retried? Also are there any tips to wa… --- ## [Hierarchical aggregations](https://discuss.elastic.co/t/hierarchical-aggregations/50137)
**Author:** [@Geoff\_Stockham](https://discuss.elastic.co/u/Geoff_Stockham)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 3:01pm UTC](https://discuss.elastic.co/t/hierarchical-aggregations/50137 "2016-05-17T15:01:59Z")
Hi, I think I'm getting a bit lost in the terminology for aggregations (nested, sub-, reverse-nested etc.) and am struggling to construct a query to return what I want from an aggregation. I have some hierarchical me… --- ## ["Non scoring" queries](https://discuss.elastic.co/t/non-scoring-queries/53880)
**Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\ **Replies:** 3\ **Last updated:** [June 28, 2016, 9:40am UTC](https://discuss.elastic.co/t/non-scoring-queries/53880 "2016-06-28T09:40:23Z")
Hi, I'm coming with 1.X experience and I'm facing with some 2.X new features and radical changes. I'm a bit confused. in this part of the documentation you talk about filters and queries: https://www.elastic.co/guide/e… --- ## [Inconsistent newlines in watcher email body text](https://discuss.elastic.co/t/inconsistent-newlines-in-watcher-email-body-text/148668)
**Author:** [@jgburks](https://discuss.elastic.co/u/jgburks)\ **Replies:** 2\ **Last updated:** [September 20, 2018, 11:40am UTC](https://discuss.elastic.co/t/inconsistent-newlines-in-watcher-email-body-text/148668 "2018-09-20T11:40:36Z")
I'm using this Watcher code to send myself emails: "body": { "text": "{{#ctx.payload.hits.hits}}{{\_source.@timestamp}} {{\_source.message}}\\n{{/ctx.payload.hits.hits}}" But I don't get a newline in the email b… --- ## [Multi field search with wildcard expression in query](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001)
**Author:** [@sreedhar1](https://discuss.elastic.co/u/sreedhar1)\ **Replies:** 5\ **Last updated:** [December 10, 2020, 3:12pm UTC](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001 "2020-12-10T15:12:04Z")
Expecting text "abc" search against field1 or field2 to get the results. what is wrong in below query? s =\> s .Query(q =\> q .DisMax(d =\> d .Queries(q1 =\> q1 .Wildcard(w =\> w .Field(f =\> f.field1).Value("abc\*") .F… --- ## [How to connect elastic from public address](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918)
**Author:** [@mmax](https://discuss.elastic.co/u/mmax)\ **Replies:** 6\ **Last updated:** [August 27, 2020, 8:22am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918 "2020-08-27T08:22:16Z")
Hi, I have an infrastructure of 20 servers , standalones, no lan, only public ip behind firewall. I would like monitoring them with elk using metricbeats & winlogsbeats My cluster is ok, i tested metricbeats from a vm… --- ## [How to create aggregated test reports from Cucumber JSON files](https://discuss.elastic.co/t/how-to-create-aggregated-test-reports-from-cucumber-json-files/154770)
**Author:** [@ashis](https://discuss.elastic.co/u/ashis)\ **Replies:** 3\ **Last updated:** [October 31, 2018, 9:28am UTC](https://discuss.elastic.co/t/how-to-create-aggregated-test-reports-from-cucumber-json-files/154770 "2018-10-31T09:28:01Z")
Hi, I am pretty new to this, I have got Elasticsearch, Logstash and Kibana installed and running successfully. My requirement is, I have a test report generated by Cucumber in JSON format for each run. I want to creat… --- ## [Straight vs. Curly Quotes Affecting Search](https://discuss.elastic.co/t/straight-vs-curly-quotes-affecting-search/92911)
**Author:** [@Jacqueline\_Kong](https://discuss.elastic.co/u/Jacqueline_Kong)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 2:13pm UTC](https://discuss.elastic.co/t/straight-vs-curly-quotes-affecting-search/92911 "2017-07-14T14:13:46Z")
Hello! I have noticed that when I enter search parameters in a visualisation or in the Discovery pane in Kibana, the quotation marks being straight vs. curly affect whether or not the search is valid. However, it seems i… --- ## [Illegal combination of \[copy\_to\] and \[nested\] mappings: \[copy\_to\]](https://discuss.elastic.co/t/illegal-combination-of-copy-to-and-nested-mappings-copy-to/140690)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [July 19, 2018, 8:31am UTC](https://discuss.elastic.co/t/illegal-combination-of-copy-to-and-nested-mappings-copy-to/140690 "2018-07-19T08:31:15Z")
I am facing an error for following mapping and my version is current 6.3 { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Illegal combination of \[copy\_to\] and \[nested\] mappings: \[copy… --- ## [New Elasticsearch node does not sync with existing cluster](https://discuss.elastic.co/t/new-elasticsearch-node-does-not-sync-with-existing-cluster/268994)
**Author:** [@runchranda](https://discuss.elastic.co/u/runchranda)\ **Replies:** 7\ **Last updated:** [April 5, 2021, 7:37am UTC](https://discuss.elastic.co/t/new-elasticsearch-node-does-not-sync-with-existing-cluster/268994 "2021-04-05T07:37:59Z")
Hi, I previously had 3 elasticsearch nodes consisting of node 1, node 2 and node 3, but my node 2 encountered some OS related issues so it had to be formatted. So I reinstalled and reconfigured node 2 as before it is fo… --- ## [Postgresql queries in ELK](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:43pm UTC](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371 "2020-12-02T12:43:23Z")
Hi, I installed metricbeat to provide metrics from postgresql and it works, but main goal was to analize queries in elastic and build dashboard for custom queries. As I started to configure, any statements from databas… --- ## [Filesystem pct/used not same as reported by df](https://discuss.elastic.co/t/filesystem-pct-used-not-same-as-reported-by-df/71795)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 7\ **Last updated:** [January 18, 2017, 8:20pm UTC](https://discuss.elastic.co/t/filesystem-pct-used-not-same-as-reported-by-df/71795 "2017-01-18T20:20:16Z")
This is what i get in metricbeat. ( 0.29 used) Mount point Available disk space Total disk space Used disk space Used disk space (%) Files / 666,701,824 1,023,303,680 302,915,584 0.296 65,536 and this is df /d… --- ## [Removing ansi color codes with mutate](https://discuss.elastic.co/t/removing-ansi-color-codes-with-mutate/41958)
**Author:** [@encee](https://discuss.elastic.co/u/encee)\ **Replies:** 1\ **Last updated:** [July 12, 2016, 8:10am UTC](https://discuss.elastic.co/t/removing-ansi-color-codes-with-mutate/41958 "2016-07-12T08:10:07Z")
Hello, I have been trying to strip the color codes out of my logs so that I can more easily use logstash but I have been unable to actually get it to work. I found a comment and a small article that had a mutate stri… --- ## [Remove duplicates in a logstash array](https://discuss.elastic.co/t/remove-duplicates-in-a-logstash-array/129705)
**Author:** [@SKing](https://discuss.elastic.co/u/SKing)\ **Replies:** 2\ **Last updated:** [April 26, 2018, 3:32pm UTC](https://discuss.elastic.co/t/remove-duplicates-in-a-logstash-array/129705 "2018-04-26T15:32:15Z")
I have a json String with name / value pairs { "A1":"123", "A2":"225", "A3":"668", "A4":"225" } Using logstash I can mutate the string and end up with an array by using mutate { add\_field =\> {A =\> "%{A1}") add\_… --- ## [Lens visualisation doesn't sort on formula result](https://discuss.elastic.co/t/lens-visualisation-doesnt-sort-on-formula-result/296258)
**Author:** [@Dominik11](https://discuss.elastic.co/u/Dominik11)\ **Replies:** 3\ **Last updated:** [February 4, 2022, 10:25am UTC](https://discuss.elastic.co/t/lens-visualisation-doesnt-sort-on-formula-result/296258 "2022-02-04T10:25:19Z")
Hi all, I have been recreating some of my dashboards using Lens visualisations but I stumbled on a seemingly illogical limitation. The concept of one visualisation is like this : I have 50+ API's running and I want to … --- ## [Watcher Alert for Failed Snapshots How to loop the ctx.payload returned](https://discuss.elastic.co/t/watcher-alert-for-failed-snapshots-how-to-loop-the-ctx-payload-returned/122575)
**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\ **Replies:** 3\ **Last updated:** [March 15, 2018, 8:36pm UTC](https://discuss.elastic.co/t/watcher-alert-for-failed-snapshots-how-to-loop-the-ctx-payload-returned/122575 "2018-03-15T20:36:30Z")
In the below example I query for the snapshots to see if there is a failed status on any of them. In this one I'm pulling the first record and the number of shards that failed in the snapshot. How would I edit this so … --- ## [Shoving data old log data into elasticsearch: I feel the need, the need for speed](https://discuss.elastic.co/t/shoving-data-old-log-data-into-elasticsearch-i-feel-the-need-the-need-for-speed/2389)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 6\ **Last updated:** [June 12, 2015, 5:39am UTC](https://discuss.elastic.co/t/shoving-data-old-log-data-into-elasticsearch-i-feel-the-need-the-need-for-speed/2389 "2015-06-12T05:39:13Z")
I've got 121 gb of compressed apache logs files from 2014. We'd like to get all of it into elasticsearch. Based on rough calculations based on some sample days it will take approximately 14 days. This is reasonable b… --- ## [Init container mount problem in ECK](https://discuss.elastic.co/t/init-container-mount-problem-in-eck/212382)
**Author:** [@William\_Doran](https://discuss.elastic.co/u/William_Doran)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 8:59am UTC](https://discuss.elastic.co/t/init-container-mount-problem-in-eck/212382 "2019-12-20T08:59:08Z")
HI there, i installed the K8s operator for 1.0.0-beta on my cluster. I attempted to install the default single node cluster using the Quick start guide. My K8s admin has so enforced resource limits so i had to explicitly… --- ## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/48513)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 2\ **Last updated:** [April 27, 2016, 8:01am UTC](https://discuss.elastic.co/t/mapper-parsing-exception/48513 "2016-04-27T08:01:34Z")
Hi, I have big mysql data. I am trying index mysql data with Php and elasticsearch. I did mapping on sense editor. After I wrote index codes with PHP but I have problem. Firstly I indexed mysql data from mysql table (… --- ## [Sort descending with JavaScript API](https://discuss.elastic.co/t/sort-descending-with-javascript-api/17861)
**Author:** [@el1](https://discuss.elastic.co/u/el1)\ **Replies:** 2\ **Last updated:** [June 3, 2014, 1:54pm UTC](https://discuss.elastic.co/t/sort-descending-with-javascript-api/17861 "2014-06-03T13:54:21Z")
This is a syntax question. In my search I want to sort descending on a field named 'no'. I tried things like params.sort = "no: {order: 'desc'}" or params.sort = "\[{'no': {'order': 'desc'}}\]" but nothings works. If … --- ## [Interval query using two fields](https://discuss.elastic.co/t/interval-query-using-two-fields/142421)
**Author:** [@telastic](https://discuss.elastic.co/u/telastic)\ **Replies:** 8\ **Last updated:** [August 1, 2018, 7:07am UTC](https://discuss.elastic.co/t/interval-query-using-two-fields/142421 "2018-08-01T07:07:53Z")
Is there a way to count the number of documents that fall within an interval, based on two fields? For example, say you had documents with start and end times. Instead of intervaling over one field (like the start time,… --- ## [Replicating all data to a single node](https://discuss.elastic.co/t/replicating-all-data-to-a-single-node/6470)
**Author:** [@snowmonkey](https://discuss.elastic.co/u/snowmonkey)\ **Replies:** 8\ **Last updated:** [January 24, 2012, 2:24pm UTC](https://discuss.elastic.co/t/replicating-all-data-to-a-single-node/6470 "2012-01-24T14:24:08Z")
We have a cluster with 3 nodes (with 1 replica and 5 shards) and we'd like to create a 4th node which will have a complete copy of all the data. Is this possible? And if so how do we best achieve it? We only want the… --- ## [Kibana new metric visualization too small and doesn't show full value](https://discuss.elastic.co/t/kibana-new-metric-visualization-too-small-and-doesnt-show-full-value/325077)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 7\ **Last updated:** [February 9, 2023, 10:19pm UTC](https://discuss.elastic.co/t/kibana-new-metric-visualization-too-small-and-doesnt-show-full-value/325077 "2023-02-09T22:19:56Z")
Hello, I'm currently on version 8.5.1 and can't updated at the moment, I'm trying to creat a dashboard showing some metrics and decided to use the Metric visualization instead of the old Legacy Visualization, but I have… --- ## [Found "Kibana server is not ready yet" after configured kibana](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268)
**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\ **Replies:** 7\ **Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268 "2022-05-11T13:32:58Z")
After setup of kibana and configure the yml file in my linux box, I got message "Kibana server is not ready yet" once I access to http://myipaddress:5601 And here is my kibana.yml config file. Many thanks all. … --- ## [Use elasticsearch-py client to search, and get index\_not\_found\_exception error, why?](https://discuss.elastic.co/t/use-elasticsearch-py-client-to-search-and-get-index-not-found-exception-error-why/70322)
**Author:** [@mover](https://discuss.elastic.co/u/mover)\ **Replies:** 1\ **Last updated:** [January 1, 2017, 6:35am UTC](https://discuss.elastic.co/t/use-elasticsearch-py-client-to-search-and-get-index-not-found-exception-error-why/70322 "2017-01-01T06:35:55Z")
i use elasticsearch-py client to do search, but get the follow error: Traceback (most recent call last): File "./netflow\_ana\_ra\_ip\_hn.py", line 203, in main() File "./netflow\_ana\_ra\_ip\_hn.py", line 185, in mai… --- ## [Using Elasticsearch output for Logstash to send logs to elasticsearch](https://discuss.elastic.co/t/using-elasticsearch-output-for-logstash-to-send-logs-to-elasticsearch/29337)
**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\ **Replies:** 7\ **Last updated:** [September 16, 2015, 4:17pm UTC](https://discuss.elastic.co/t/using-elasticsearch-output-for-logstash-to-send-logs-to-elasticsearch/29337 "2015-09-16T16:17:46Z")
I have a logstash central linux machine and an Elastsearch linux machine. I am trying to send logstash files to elasticsearch using the elasticsearch output... Here is the configuration file in logstash using the ES ou… --- ## [How to replace failed disk when using multiple path.data entries?](https://discuss.elastic.co/t/how-to-replace-failed-disk-when-using-multiple-path-data-entries/35788)
**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 8:45pm UTC](https://discuss.elastic.co/t/how-to-replace-failed-disk-when-using-multiple-path-data-entries/35788 "2015-12-03T20:45:46Z")
Hi -- I have a small ES cluster with two data nodes. Each data node is running one ES instance with multiple path.data entries, one for each data disk on that node (six for each node). One disk on one node failed, and … --- ## [Displaying the Full Exception and Caused By Message](https://discuss.elastic.co/t/displaying-the-full-exception-and-caused-by-message/143364)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 4\ **Last updated:** [August 7, 2018, 8:38pm UTC](https://discuss.elastic.co/t/displaying-the-full-exception-and-caused-by-message/143364 "2018-08-07T20:38:28Z")
Hello, I am working on displaying the full error, exception and "caused by" portions of my logs. I used the following doc to install the ELK stack: My error example: 2018-03-01 10:24:20.014 ERROR 32649 --- \[Camel (c… --- ## [Error while starting elasticsearch xpack.security.enabled=true](https://discuss.elastic.co/t/error-while-starting-elasticsearch-xpack-security-enabled-true/235214)
**Author:** [@DZ1](https://discuss.elastic.co/u/DZ1)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 6:11am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch-xpack-security-enabled-true/235214 "2020-06-02T06:11:13Z")
In my scenario I have started elasticsearch 7.2 first and stopped it and added following property: xpack.license.self\_generated.type: trial xpack.monitoring.collection.enabled: true And restarted elasticsearch then it … --- ## [Ingestion rate in a elastic cluster](https://discuss.elastic.co/t/ingestion-rate-in-a-elastic-cluster/97394)
**Author:** [@armsepehr](https://discuss.elastic.co/u/armsepehr)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 3:24pm UTC](https://discuss.elastic.co/t/ingestion-rate-in-a-elastic-cluster/97394 "2017-08-17T15:24:06Z")
I have a small cluster with only two nodes. Both nodes have all roles, and I am using bulk java API to index data. First of all, I optimized a single node cluster and gained 25M/s, then, I hoped that we can increase inge… --- ## [Custom key/value mapping](https://discuss.elastic.co/t/custom-key-value-mapping/119316)
**Author:** [@davidmorabito](https://discuss.elastic.co/u/davidmorabito)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 5:20am UTC](https://discuss.elastic.co/t/custom-key-value-mapping/119316 "2018-02-10T05:20:00Z")
Hi there, I have a requirement that I'm not sure if Kibana would be able to address: I'm ingesting two logs with Elasticsearch: log1: contains responses from an API, and they have an unique status code. E.g. ABC123 l… --- ## [Current license is non-compliant for \[graph\]](https://discuss.elastic.co/t/current-license-is-non-compliant-for-graph/46061)
**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\ **Replies:** 2\ **Last updated:** [April 1, 2016, 7:22pm UTC](https://discuss.elastic.co/t/current-license-is-non-compliant-for-graph/46061 "2016-04-01T19:22:20Z")
After upgrade to 2.3.0 ES (including Graph plugin installation), we get following reponse for any Graph API request { "error": { "root\_cause": \[ { "type": "security\_exception", … --- ## [Jvm heap size - garbage collection](https://discuss.elastic.co/t/jvm-heap-size-garbage-collection/103840)
**Author:** [@Patrik\_Soderstrom](https://discuss.elastic.co/u/Patrik_Soderstrom)\ **Replies:** 5\ **Last updated:** [October 24, 2017, 6:34am UTC](https://discuss.elastic.co/t/jvm-heap-size-garbage-collection/103840 "2017-10-24T06:34:45Z")
Hi, I´m trying to optimize the jvm heap size for nodes in my cluster. Sadly or good now :slight\_smile: First picture is heap size 4GB and second picture is 5GB. Which one looks best for garbage collection? \[Capture\]\[Ca… [Previous page](https://discuss.elastic.co/top.md?page=643&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=645&per_page=50&period=all)