# Top **URL:** https://discuss.elastic.co/top.md?page=647&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 648 --- ## [How to resolve rejected \`execution of org.elasticsearch.common.util.concurrent.TimedRunnable\`](https://discuss.elastic.co/t/how-to-resolve-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable/199461)
**Author:** [@nathanburgess](https://discuss.elastic.co/u/nathanburgess)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 9:29am UTC](https://discuss.elastic.co/t/how-to-resolve-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable/199461 "2019-09-20T09:29:39Z")
Last night our ES production server got bogged down for the first time and the only recent change (a few weeks ago) was enabling future mode for all search requests. I'm really new to ES and not sure at all how to go abo… --- ## [Kibana 6.1.2 - understanding serial diff aggregation](https://discuss.elastic.co/t/kibana-6-1-2-understanding-serial-diff-aggregation/116683)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [January 23, 2018, 2:22pm UTC](https://discuss.elastic.co/t/kibana-6-1-2-understanding-serial-diff-aggregation/116683 "2018-01-23T14:22:43Z")
Hi, I upgraded from 5.1.2 to 6.1.2 and I am checking whats new in 6.1.2. Serial Diff aggregation sounds interesting: As I understand it is building the difference between current and previous buckets. As I understand … --- ## [Kibana control in visualization not showing all values than expected](https://discuss.elastic.co/t/kibana-control-in-visualization-not-showing-all-values-than-expected/213896)
**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\ **Replies:** 3\ **Last updated:** [January 6, 2020, 5:37pm UTC](https://discuss.elastic.co/t/kibana-control-in-visualization-not-showing-all-values-than-expected/213896 "2020-01-06T17:37:53Z")
kibana control in visualization not showing all values than expected.iam using 7.2 kibana --- ## [java.nio.channels.OverlappingFileLockException: null](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/103096)
**Author:** [@JJerpseth](https://discuss.elastic.co/u/JJerpseth)\ **Replies:** 3\ **Last updated:** [October 9, 2017, 8:47pm UTC](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/103096 "2017-10-09T20:47:26Z")
Please note: I have already tried the solutions I found online which included 1 -- reboot machine 2 -- delete node.lock in my data areas Node dropped out of the cluster then elasticsearch failed to start with \[2017-1… --- ## [Trim X -axis details](https://discuss.elastic.co/t/trim-x-axis-details/89008)
**Author:** [@amruthapbhat](https://discuss.elastic.co/u/amruthapbhat)\ **Replies:** 6\ **Last updated:** [June 13, 2017, 3:01pm UTC](https://discuss.elastic.co/t/trim-x-axis-details/89008 "2017-06-13T15:01:20Z")
Hi, I am currently setting up a dashboard in Kibana and my x-axis details are quite long Ex: /home/test1/workspace/Docker-Release/release/Docker/containers.d/confd/Dockerfile.log /home/test1/workspace/Docker-Release/… --- ## [Kibana 7.5: server.defaultRoute parameter](https://discuss.elastic.co/t/kibana-7-5-server-defaultroute-parameter/212191)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 4\ **Last updated:** [December 18, 2019, 5:01pm UTC](https://discuss.elastic.co/t/kibana-7-5-server-defaultroute-parameter/212191 "2019-12-18T17:01:06Z")
Hello guys ! I'm working on the migration of a custom plugin from kibana 6.5.4 to kibana 7.5.0 but I noticed that the parameter server.defaultRoute disappeared from the configuration file. So, how can I redirect the ho… --- ## [My Grok filter is not working](https://discuss.elastic.co/t/my-grok-filter-is-not-working/108446)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 5\ **Last updated:** [November 21, 2017, 4:24am UTC](https://discuss.elastic.co/t/my-grok-filter-is-not-working/108446 "2017-11-21T04:24:17Z")
Hi Guys, I am struggling with basic grok filter and seeking your help please Here is my file and would like to parse as geotype, attack\_type "103.40.130.84": "bad reputation" "103.40.132.18": "known attacker" "103.4… --- ## [Perform search on ES but limit to hot nodes only?](https://discuss.elastic.co/t/perform-search-on-es-but-limit-to-hot-nodes-only/256782)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 8\ **Last updated:** [November 27, 2020, 8:16pm UTC](https://discuss.elastic.co/t/perform-search-on-es-but-limit-to-hot-nodes-only/256782 "2020-11-27T20:16:34Z")
We have employed a hot-warm architecture in our cluster, and the indices share the same prefix. Right now, to keep our process sane, we do this to our indices: Reindex the original index named name-YYYY.MM into a new i… --- ## [Logstash mutate filter](https://discuss.elastic.co/t/logstash-mutate-filter/59978)
**Author:** [@TRSRaphael](https://discuss.elastic.co/u/TRSRaphael)\ **Replies:** 8\ **Last updated:** [September 12, 2016, 8:34am UTC](https://discuss.elastic.co/t/logstash-mutate-filter/59978 "2016-09-12T08:34:15Z")
Hello, logstash is getting the events coming from collectd and put it in ElasticSearch. from kibana (plugged on ElasticSearch) I see the logstash index fields : geoip.ip, geoip.location, majflt, ... In the input-co… --- ## [FileBeat log rotation problem with Log4j](https://discuss.elastic.co/t/filebeat-log-rotation-problem-with-log4j/178445)
**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\ **Replies:** 1\ **Last updated:** [April 26, 2019, 12:00pm UTC](https://discuss.elastic.co/t/filebeat-log-rotation-problem-with-log4j/178445 "2019-04-26T12:00:48Z")
We are using 6.4.2 version of Elastic Stack. How we tested? We created a java class to generate log. LoggerMain.java package com.jcg.examples; import org.apache.log4j.Logger; public class LoggerMain { public stat… --- ## [Exclude indices from Elastic Search role](https://discuss.elastic.co/t/exclude-indices-from-elastic-search-role/244159)
**Author:** [@amjadbrsc](https://discuss.elastic.co/u/amjadbrsc)\ **Replies:** 3\ **Last updated:** [August 11, 2020, 3:05am UTC](https://discuss.elastic.co/t/exclude-indices-from-elastic-search-role/244159 "2020-08-11T03:05:30Z")
Hi, I have 20 indices. These indices has different naming convention. I am trying to define a ES role where a user can have access to 19 indices except one. I can define a role and mention all 19 indices in the role one… --- ## [Visualize: Expected numeric type on field \[some\_field\], but got \[string\]](https://discuss.elastic.co/t/visualize-expected-numeric-type-on-field-some-field-but-got-string/142380)
**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\ **Replies:** 3\ **Last updated:** [August 7, 2018, 12:52pm UTC](https://discuss.elastic.co/t/visualize-expected-numeric-type-on-field-some-field-but-got-string/142380 "2018-08-07T12:52:14Z")
Hi, When going to the index setting I clearly see that the type for field some\_field is number. But in the visualization I'm getting this error when trying to do an "average" on this field- "Visualize: Expected numeri… --- ## [Elasticsearch cluster with docker - handshake failed](https://discuss.elastic.co/t/elasticsearch-cluster-with-docker-handshake-failed/134223)
**Author:** [@maciejgawlowski](https://discuss.elastic.co/u/maciejgawlowski)\ **Replies:** 3\ **Last updated:** [June 8, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-with-docker-handshake-failed/134223 "2018-06-08T12:05:04Z")
Hi, I try to connect one elasticsearch data node to another elasticsearch data-master node. Both elasticsearch are running in docker containers on two different virtual machines. When I try to connect I get error: \[2018… --- ## [Setting a filter that transforms "NULL" values to a default value from Mysql to elasticSearch](https://discuss.elastic.co/t/setting-a-filter-that-transforms-null-values-to-a-default-value-from-mysql-to-elasticsearch/59642)
**Author:** [@Sadok\_Mtir](https://discuss.elastic.co/u/Sadok_Mtir)\ **Replies:** 3\ **Last updated:** [September 5, 2016, 8:29am UTC](https://discuss.elastic.co/t/setting-a-filter-that-transforms-null-values-to-a-default-value-from-mysql-to-elasticsearch/59642 "2016-09-05T08:29:35Z")
The fields that I want to get them with default value could be NULL in MYSQL. This is my configuration for the logstash plugin. input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/elements… --- ## [Dec 7th, 2021: \[en\] Seven tricks to building fast, reliable search data integrations](https://discuss.elastic.co/t/dec-7th-2021-en-seven-tricks-to-building-fast-reliable-search-data-integrations/289184)
**Author:** [@Jessica\_Taylor](https://discuss.elastic.co/u/Jessica_Taylor)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2021-en-seven-tricks-to-building-fast-reliable-search-data-integrations/289184 "2021-12-07T08:00:57Z")
Building fast, reliable search data integrations can make or break search experiences. Why? Because developers, like you, have high aspirations for search experiences. And end-users have high expectations for the results… --- ## [Setting up multiple ILM policies on a filebeat with multiple indices as its output](https://discuss.elastic.co/t/setting-up-multiple-ilm-policies-on-a-filebeat-with-multiple-indices-as-its-output/210263)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 12:40am UTC](https://discuss.elastic.co/t/setting-up-multiple-ilm-policies-on-a-filebeat-with-multiple-indices-as-its-output/210263 "2019-12-03T00:40:48Z")
I've been trying to set up ILM policies on a filebeat which has a module enabled for additional data source to process. So, I'll need to apply two different policies to two different indexes on the same filebeat. ILM po… --- ## [Writes to Elastic search fails](https://discuss.elastic.co/t/writes-to-elastic-search-fails/61447)
**Author:** [@sudhir\_baru](https://discuss.elastic.co/u/sudhir_baru)\ **Replies:** 7\ **Last updated:** [October 2, 2016, 7:23pm UTC](https://discuss.elastic.co/t/writes-to-elastic-search-fails/61447 "2016-10-02T19:23:44Z")
I'm trying to collect network data and pushing to elastic store. Some of the documents are not indexed(not stored). Is this expected. --- ## [How to fetch field content from elasticsearch using java API](https://discuss.elastic.co/t/how-to-fetch-field-content-from-elasticsearch-using-java-api/224823)
**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\ **Replies:** 6\ **Last updated:** [March 25, 2020, 1:19pm UTC](https://discuss.elastic.co/t/how-to-fetch-field-content-from-elasticsearch-using-java-api/224823 "2020-03-25T13:19:31Z")
Hie team, I am trying to fetch content of "message" field which is of type binary,but it returns null. In elasticsearch data is stored as below { "\_index": "twitter", "\_type": "\_doc", "\_id": "56", "\_version": … --- ## [Snapshot and restore Sharda failed issue](https://discuss.elastic.co/t/snapshot-and-restore-sharda-failed-issue/174045)
**Author:** [@Vinit\_ParadoX](https://discuss.elastic.co/u/Vinit_ParadoX)\ **Replies:** 6\ **Last updated:** [March 28, 2019, 7:16am UTC](https://discuss.elastic.co/t/snapshot-and-restore-sharda-failed-issue/174045 "2019-03-28T07:16:25Z")
I am using ES 6.2.4 I have a remote server which cannot be accessed by our Network. It has the data which I need to take backup of. I created a snapshot there and physically copied created files to my system an restored… --- ## [Kibana: export pre-configured dashboard as pdf/png](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 5\ **Last updated:** [February 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391 "2021-02-19T08:08:19Z")
We have the following use cases for working with Kibana: Use Case 1 We run automated performance tests using a Jenkins pipeline. We would like to be able to import a pre-configured dashboard at the start of the test, r… --- ## [Unable to View Imported Dashboards/Visualizations for Metricbeat](https://discuss.elastic.co/t/unable-to-view-imported-dashboards-visualizations-for-metricbeat/69360)
**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\ **Replies:** 5\ **Last updated:** [January 3, 2017, 7:44am UTC](https://discuss.elastic.co/t/unable-to-view-imported-dashboards-visualizations-for-metricbeat/69360 "2017-01-03T07:44:27Z")
I am using MetricBeat to capture statistics and send data to Logstash. Logstash then reads input from Beats and sends the data to Elasticsearch. Data is present in Elasticsearch & Kibana index shows the data read from El… --- ## [Subtract two counts](https://discuss.elastic.co/t/subtract-two-counts/169870)
**Author:** [@Menso](https://discuss.elastic.co/u/Menso)\ **Replies:** 3\ **Last updated:** [March 11, 2019, 9:42am UTC](https://discuss.elastic.co/t/subtract-two-counts/169870 "2019-03-11T09:42:51Z")
Hi everyone, I'm writing this kind of data into elastic: {'action': 'customer.created', 'user': 'john', '@timestamp': datetime.datetime(2019, 2, 25, 12, 43, 11, 691604)} {'action': 'customer.deleted', 'user': 'john', '… --- ## [URL Template](https://discuss.elastic.co/t/url-template/113294)
**Author:** [@sanek64](https://discuss.elastic.co/u/sanek64)\ **Replies:** 3\ **Last updated:** [December 28, 2017, 6:48pm UTC](https://discuss.elastic.co/t/url-template/113294 "2017-12-28T18:48:31Z")
Hi all, I'd like to have reference from one filed in the first index discovery page to the second index in another discovery page (search). So a made new discovery page (search) for second index , selected appropriate f… --- ## [Re-index after changing field type from String to Float](https://discuss.elastic.co/t/re-index-after-changing-field-type-from-string-to-float/50317)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 1\ **Last updated:** [May 19, 2016, 11:09am UTC](https://discuss.elastic.co/t/re-index-after-changing-field-type-from-string-to-float/50317 "2016-05-19T11:09:13Z")
Hi, I have a 'duration' field being indexed in my ES as of May 5th 2016. Logstash automatically created it as type String. A few days and a few records later I realised this problem and configured Logstash to set thi… --- ## [Filebeat include\_lines problem](https://discuss.elastic.co/t/filebeat-include-lines-problem/122200)
**Author:** [@beitiantian](https://discuss.elastic.co/u/beitiantian)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 1:56am UTC](https://discuss.elastic.co/t/filebeat-include-lines-problem/122200 "2018-03-07T01:56:22Z")
I want to extract the logs that include the "FaceLogBean" ，Configuration file is： filebeat.prospectors: - input\_type: log document\_type: cloud paths: - /usr/logs/\*.log include\_lines:\["F… --- ## [Active shards after closing indices](https://discuss.elastic.co/t/active-shards-after-closing-indices/231678)
**Author:** [@bartelastic](https://discuss.elastic.co/u/bartelastic)\ **Replies:** 5\ **Last updated:** [May 8, 2020, 10:44am UTC](https://discuss.elastic.co/t/active-shards-after-closing-indices/231678 "2020-05-08T10:44:26Z")
I see that after closing indices the shards are still reported as active (also see https://discuss.elastic.co/t/elasticsearch-7-x-closed-indices-retain-shards/187969 ) and that was done to implement replicated closed ind… --- ## [Elastic Cloud - How to fix "number of fields exceeds the automatic field expansion limit"](https://discuss.elastic.co/t/elastic-cloud-how-to-fix-number-of-fields-exceeds-the-automatic-field-expansion-limit/181921)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [June 7, 2019, 2:27pm UTC](https://discuss.elastic.co/t/elastic-cloud-how-to-fix-number-of-fields-exceeds-the-automatic-field-expansion-limit/181921 "2019-06-07T14:27:30Z")
Hi, On Elastic Cloud 6.7 and 6.8 I get the above warning when running the 7.0 upgrade assistant. How do I solve this? I found you can set indices.query.bool.max\_clause\_count but Elastic Cloud does not allow modifying t… --- ## [How to show google analytics data using ELK](https://discuss.elastic.co/t/how-to-show-google-analytics-data-using-elk/86930)
**Author:** [@Kamal\_Samra](https://discuss.elastic.co/u/Kamal_Samra)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 9:21am UTC](https://discuss.elastic.co/t/how-to-show-google-analytics-data-using-elk/86930 "2017-05-24T09:21:03Z")
I want to show reports of google analytics data on kibana. So is there any plugin exist? --- ## [Kibana crashes Elasticsearch](https://discuss.elastic.co/t/kibana-crashes-elasticsearch/29863)
**Author:** [@cdominik](https://discuss.elastic.co/u/cdominik)\ **Replies:** 7\ **Last updated:** [September 24, 2015, 1:45pm UTC](https://discuss.elastic.co/t/kibana-crashes-elasticsearch/29863 "2015-09-24T13:45:12Z")
Hi all, when Kibana starts I found this error into the Elasticsearch log file, could anyone explain why? (with 4gb heap size) thanks in advance \[2015-09-23 21:41:02,880\]\[INFO \]\[gateway \] \[Luke Cage\] r… --- ## [On restart Harversters are opened for ignored files](https://discuss.elastic.co/t/on-restart-harversters-are-opened-for-ignored-files/50038)
**Author:** [@Stuart\_Fraser](https://discuss.elastic.co/u/Stuart_Fraser)\ **Replies:** 6\ **Last updated:** [May 17, 2016, 12:57pm UTC](https://discuss.elastic.co/t/on-restart-harversters-are-opened-for-ignored-files/50038 "2016-05-17T12:57:14Z")
Impact Unable to restart filebeat as expected after ignoring a lot of files. Description When filebeat is restarted Harversters open every file even if they should be ignored by the ignore\_older setting. Environm… --- ## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, ,, \]](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of/161676)
**Author:** [@wusong](https://discuss.elastic.co/u/wusong)\ **Replies:** 3\ **Last updated:** [December 21, 2018, 1:54am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of/161676 "2018-12-21T01:54:32Z")
I run cmd .\\logstash -e 'input{stdin{}} output{ elasticsearch{ hosts=\>\["127.0.0.1:9200"\] } }' ; then have following errors. \[2018-12-20T18:47:55,667\]\[ERROR\]\[logstash.agent \] Failed to execute action {:actio… --- ## [Logging Action to Custom File](https://discuss.elastic.co/t/logging-action-to-custom-file/35998)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 1:55pm UTC](https://discuss.elastic.co/t/logging-action-to-custom-file/35998 "2018-03-20T13:55:42Z")
Hi Is there any way to configure the Watcher to write the alerts to a custom file instead of elasticsearch log file. Thanks --- ## [Marvel install failure to download out of all possible locations](https://discuss.elastic.co/t/marvel-install-failure-to-download-out-of-all-possible-locations/35855)
**Author:** [@folkes.tom](https://discuss.elastic.co/u/folkes.tom)\ **Replies:** 2\ **Last updated:** [November 30, 2015, 3:20am UTC](https://discuss.elastic.co/t/marvel-install-failure-to-download-out-of-all-possible-locations/35855 "2015-11-30T03:20:05Z")
HI, I have found your documentation confusing and contradictory. I already work in a really sloppy area of CS. This is not helping. I am trying to follow your starter info off the splash page. Which is not corre… --- ## [Logstash not indexing date to the filebeat write index for data stream](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 4\ **Last updated:** [June 4, 2022, 10:21pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360 "2022-06-04T22:21:00Z")
Hi everybody. I've got a three nodes ES cluster. I've got the Kibana, one logstash and one filebeat running along in one of those three ES nodes. 'ubuntuelk'. Everything on version 8.2.1. My goal is to use that filebe… --- ## [Timelion wildcard query](https://discuss.elastic.co/t/timelion-wildcard-query/110694)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 4\ **Last updated:** [December 8, 2017, 7:08am UTC](https://discuss.elastic.co/t/timelion-wildcard-query/110694 "2017-12-08T07:08:38Z")
Hi there I have a stack of data, each of the documents has a name and a description. A name could look like this: 'Runtimeerror \[-191\]'. But the number isn't allways the same (Range from -1 to -100'000). I know that I c… --- ## [Calendar in time filter from Monday to Sunday instead of Sunday to Saturday](https://discuss.elastic.co/t/calendar-in-time-filter-from-monday-to-sunday-instead-of-sunday-to-saturday/55043)
**Author:** [@sasauz](https://discuss.elastic.co/u/sasauz)\ **Replies:** 4\ **Last updated:** [July 13, 2016, 7:32am UTC](https://discuss.elastic.co/t/calendar-in-time-filter-from-monday-to-sunday-instead-of-sunday-to-saturday/55043 "2016-07-13T07:32:03Z")
Is it possible to change the calendar format in absolute time filter, so that it will be show weeks from Monday to Sunday instead of Sunday to Saturday? --- ## [Filebeat port configuration](https://discuss.elastic.co/t/filebeat-port-configuration/110578)
**Author:** [@Shreya\_Chatterjee](https://discuss.elastic.co/u/Shreya_Chatterjee)\ **Replies:** 3\ **Last updated:** [December 7, 2017, 6:08am UTC](https://discuss.elastic.co/t/filebeat-port-configuration/110578 "2017-12-07T06:08:20Z")
Hi! Im new to elastic search, I wish to send log files from filebeat to logstash. Filebeat log shows connection refused error as follows: 2017-12-07T02:43:07+05:30 ERR Failed to connect: dial tcp 127.0.0.1:9600: connect… --- ## [Scripted fields not showing up in Kibana](https://discuss.elastic.co/t/scripted-fields-not-showing-up-in-kibana/124671)
**Author:** [@Douglas\_Muth](https://discuss.elastic.co/u/Douglas_Muth)\ **Replies:** 2\ **Last updated:** [March 21, 2018, 11:49pm UTC](https://discuss.elastic.co/t/scripted-fields-not-showing-up-in-kibana/124671 "2018-03-21T23:49:16Z")
Hi, Relatively new to ELK, and I am trying to use it to perform data analytics on Philadephia's pubic transit system. I have access to their API and have no difficulty ingesting the data, but where I am running into pr… --- ## [Getting Exception while running Aggregation Queries](https://discuss.elastic.co/t/getting-exception-while-running-aggregation-queries/43507)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 1\ **Last updated:** [March 4, 2016, 1:34pm UTC](https://discuss.elastic.co/t/getting-exception-while-running-aggregation-queries/43507 "2016-03-04T13:34:42Z")
Hi I am getting the following exception in es 2.1.0 java api migration. Failed to execute phase \[query\], all shards failed; shardFailures {\[YGPc1Z8\_QYektQpNh-C9rQ\]\[fw3\]\[0\]: RemoteTransportException\[\[10.2.1.50\]\[10.… --- ## [Kibana.service holdoff time over, scheduling restart](https://discuss.elastic.co/t/kibana-service-holdoff-time-over-scheduling-restart/245700)
**Author:** [@Kra3](https://discuss.elastic.co/u/Kra3)\ **Replies:** 4\ **Last updated:** [August 23, 2020, 7:43am UTC](https://discuss.elastic.co/t/kibana-service-holdoff-time-over-scheduling-restart/245700 "2020-08-23T07:43:35Z")
● kibana.service - Kibana Loaded: loaded (/etc/systemd/system/kibana.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2020-08-20 04:29:53 UTC; 30s ago Main PID: 313 (node) CGroup: /system… --- ## [Customize Java security manager settings (provide ability to turn it off)](https://discuss.elastic.co/t/customize-java-security-manager-settings-provide-ability-to-turn-it-off/72303)
**Author:** [@Polina\_Kalinkina](https://discuss.elastic.co/u/Polina_Kalinkina)\ **Replies:** 4\ **Last updated:** [January 23, 2017, 4:19pm UTC](https://discuss.elastic.co/t/customize-java-security-manager-settings-provide-ability-to-turn-it-off/72303 "2017-01-23T16:19:45Z")
Hello, I'm writing a plugin that provides authentication for Elasticsearch. In current version of elasticsearch (5.1.1 and 5.1.2) it's not possible to turn off Security Manager and we have to grand permissions directl… --- ## [\[warning\]\[stats-collection\] \[index\_not\_found\_exception\] no such index \[.kibana\], with { resource.type="index\_or\_alias" & resource.id=".kibana"](https://discuss.elastic.co/t/warning-stats-collection-index-not-found-exception-no-such-index-kibana-with-resource-type-index-or-alias-resource-id-kibana/196663)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [August 25, 2019, 4:52pm UTC](https://discuss.elastic.co/t/warning-stats-collection-index-not-found-exception-no-such-index-kibana-with-resource-type-index-or-alias-resource-id-kibana/196663 "2019-08-25T16:52:58Z")
Hi, I am running ES 7.3 and Kibana 7.3 ,Elasticsearch is started and running fine ,but when i start kibana i am getting below error , what is the cause? \[stats-collection\] Unable to fetch data from visualization\_types… --- ## [Return field value from array of objects](https://discuss.elastic.co/t/return-field-value-from-array-of-objects/122704)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 8\ **Last updated:** [March 13, 2018, 10:55am UTC](https://discuss.elastic.co/t/return-field-value-from-array-of-objects/122704 "2018-03-13T10:55:02Z")
I have the following document that is being loaded into elasticseatch 6: { "DataChangeInfo" : "Archive Log Set archiveLogSet.2, "documentsList" : \[ { "commandScn": "25933758", "commandCommitScn": "0", "commandSequ… --- ## [Scripted fields: Only first token of comma separated string is returned](https://discuss.elastic.co/t/scripted-fields-only-first-token-of-comma-separated-string-is-returned/116298)
**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\ **Replies:** 7\ **Last updated:** [January 19, 2018, 10:13pm UTC](https://discuss.elastic.co/t/scripted-fields-only-first-token-of-comma-separated-string-is-returned/116298 "2018-01-19T22:13:39Z")
Hello I've seen this issue reported before with no answer. I have a string of tokens separated by commas, such as "dog, cat, bird, etc," but only the first token is returned with this basic script: return doc\['fieldnam… --- ## [Angular 2/4](https://discuss.elastic.co/t/angular-2-4/109482)
**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 11:19pm UTC](https://discuss.elastic.co/t/angular-2-4/109482 "2017-11-29T23:19:08Z")
Are there any plans or is there discussion of future development of Kibana in Angular 2/4 or any other modern front-end framework? Angular (X) would be a pretty big deal to our company for integration and customization. --- ## [What is the difference between analyzer and search analyzer?](https://discuss.elastic.co/t/what-is-the-difference-between-analyzer-and-search-analyzer/153141)
**Author:** [@newnewb](https://discuss.elastic.co/u/newnewb)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 8:38am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-analyzer-and-search-analyzer/153141 "2018-10-19T08:38:20Z")
From what I've been reading, index\_analyzer should analyze during indexing, and search\_analyzer when querying. But I still can't wrap my head around this completely, it sounds pretty simple and straightforward, but when … --- ## [How many Transport Clients can a Elasticsearch cluster have?](https://discuss.elastic.co/t/how-many-transport-clients-can-a-elasticsearch-cluster-have/60252)
**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\ **Replies:** 5\ **Last updated:** [September 13, 2016, 11:13am UTC](https://discuss.elastic.co/t/how-many-transport-clients-can-a-elasticsearch-cluster-have/60252 "2016-09-13T11:13:31Z")
Hi, Elasticsearch acts as the data center of our system. Other applications, which hold one "Transport Client" in the application itself, are doing query actions from the Elasticsearch. ES version: 1.5.2 Our cluster h… --- ## [FS Crawler exception "Error while crawling - Connection Closed"](https://discuss.elastic.co/t/fs-crawler-exception-error-while-crawling-connection-closed/198259)
**Author:** [@Danilo\_Felix](https://discuss.elastic.co/u/Danilo_Felix)\ **Replies:** 4\ **Last updated:** [September 6, 2019, 1:51pm UTC](https://discuss.elastic.co/t/fs-crawler-exception-error-while-crawling-connection-closed/198259 "2019-09-06T13:51:24Z")
Hello, I'm trying to use FS Crawler 2.6 in a Windows Server machine to index a huge number of files in my company. It's a very large Windows folders tree in a network drive: 14,92 Tb size, 7,2M files in 2,3M folders. Da… --- ## [Logstash vs Elasticsearch](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940)
**Author:** [@Andrew\_Rimmer](https://discuss.elastic.co/u/Andrew_Rimmer)\ **Replies:** 2\ **Last updated:** [September 24, 2014, 11:37am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940 "2014-09-24T11:37:18Z")
What is the benefit of using Logstash over indexing directly into Elasticsearch? I have all of my data that needs indexing going into a queue. At the moment I have a small program that gets the messages from the q… --- ## [Elastic SIEM - Detection Rules - Combination of Time-based, Threshold, Aggregation and Sequence Events](https://discuss.elastic.co/t/elastic-siem-detection-rules-combination-of-time-based-threshold-aggregation-and-sequence-events/263175)
**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\ **Replies:** 6\ **Last updated:** [February 5, 2021, 6:11pm UTC](https://discuss.elastic.co/t/elastic-siem-detection-rules-combination-of-time-based-threshold-aggregation-and-sequence-events/263175 "2021-02-05T18:11:20Z")
How to create rule to detect: "Successful Brute Force Attack" (When more than 10 Windows logout events (ID 4625) occur AND followed by a Windows login event (ID 4624) on a same host) in 5 minutes timespan Thresholds: N… [Previous page](https://discuss.elastic.co/top.md?page=646&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=648&per_page=50&period=all)