# Top **URL:** https://discuss.elastic.co/top.md?page=673&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 674 --- ## [Problem with index folders in ES 2.3.2](https://discuss.elastic.co/t/problem-with-index-folders-in-es-2-3-2/50209)
**Author:** [@Jose\_A\_Garcia](https://discuss.elastic.co/u/Jose_A_Garcia)\ **Replies:** 8\ **Last updated:** [May 17, 2016, 4:01pm UTC](https://discuss.elastic.co/t/problem-with-index-folders-in-es-2-3-2/50209 "2016-05-17T16:01:18Z")
Hi, We are migrating from an old elasticsearch version (1.4) to the latest (2.3.2). We are doing some tests and I'm having some problems. Our deployment is a bit unconventional, we have several indexes, each one usin… --- ## [Can't convert types using mutate or ruby filter from fields generated with kv](https://discuss.elastic.co/t/cant-convert-types-using-mutate-or-ruby-filter-from-fields-generated-with-kv/91339)
**Author:** [@poorbob](https://discuss.elastic.co/u/poorbob)\ **Replies:** 4\ **Last updated:** [July 6, 2017, 11:31pm UTC](https://discuss.elastic.co/t/cant-convert-types-using-mutate-or-ruby-filter-from-fields-generated-with-kv/91339 "2017-07-06T23:31:50Z")
I have many fields generated from the kv plugin like so: kv { source =\> "kvpairs" remove\_field =\> \[ "kvpairs" \] } I have tried both of the following and neither result in the fields being converted to their proper… --- ## [RabbitMQ to LogStash / Elasticsearch](https://discuss.elastic.co/t/rabbitmq-to-logstash-elasticsearch/40676)
**Author:** [@Akshay\_Shah](https://discuss.elastic.co/u/Akshay_Shah)\ **Replies:** 4\ **Last updated:** [December 19, 2016, 8:59am UTC](https://discuss.elastic.co/t/rabbitmq-to-logstash-elasticsearch/40676 "2016-12-19T08:59:21Z")
I m very new to ElasticSearch and LogStash. and I want to move messages out from RabbitMQ for ElasticSearch and further Kibana to visualize aggregations. Application Messages \>\> RabbitMQ \>\> LogStash \>\> Index in Elasti… --- ## [TOO\_MANY\_REQUESTS/12/index read-only / allow delete (api](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/234901)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 6:16pm UTC](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/234901 "2020-05-29T18:16:31Z")
Why i am getting below logs in Logstash logs? \[2020-05-29T03:21:20,840\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[220c76045b556cf67d246e54931c092b729b0e8dcc83cd8283a28d6d531fc2bd\] retrying failed action with response… --- ## [File-based role management roles.yml](https://discuss.elastic.co/t/file-based-role-management-roles-yml/187947)
**Author:** [@dave1234](https://discuss.elastic.co/u/dave1234)\ **Replies:** 2\ **Last updated:** [July 3, 2019, 8:26pm UTC](https://discuss.elastic.co/t/file-based-role-management-roles-yml/187947 "2019-07-03T20:26:08Z")
roles.yml is not being loaded and I can't see the entry in GET \_security/role. The roles.yml is copied over to all instances. Is there something I'm missing? Anymore logs for me to look at of it getting applied? LOGS… --- ## [java.lang.IllegalStateException: Unable to access 'path.repo'](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-repo/312009)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 6\ **Last updated:** [August 14, 2022, 9:29am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-repo/312009 "2022-08-14T09:29:55Z")
Hi guys, I have a single node elastic setup o windows10. i tried to create repository on shared folder. the process i did was, i created a folder (Es\_backup) in shared drive then i mapped folder on my elastic local mach… --- ## [Node is not joining the cluster (ES-5.6.3)](https://discuss.elastic.co/t/node-is-not-joining-the-cluster-es-5-6-3/107641)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 6\ **Last updated:** [November 16, 2017, 10:06am UTC](https://discuss.elastic.co/t/node-is-not-joining-the-cluster-es-5-6-3/107641 "2017-11-16T10:06:36Z")
I"m running two nodes cluster on two separate RHEL servers. Here are the configurations. server ip \*\*\*1 elasticsearch.yml cluster. name: es1 node.name: es1-node1 node.master: true node.data: true network.host: \*\*\*… --- ## [Sum nested values and filter / sort by them](https://discuss.elastic.co/t/sum-nested-values-and-filter-sort-by-them/241284)
**Author:** [@stefnats](https://discuss.elastic.co/u/stefnats)\ **Replies:** 5\ **Last updated:** [July 15, 2020, 12:54pm UTC](https://discuss.elastic.co/t/sum-nested-values-and-filter-sort-by-them/241284 "2020-07-15T12:54:26Z")
Hi, as in this thread, my problem is pretty similar: I have a product index with a nested sales\_per\_day array. It looks something like this: PUT /products { "mappings": { "properties": { "sales\_per\_day… --- ## ["runuser: cannot set groups: Operation not permitted" Error While running ES as Service](https://discuss.elastic.co/t/runuser-cannot-set-groups-operation-not-permitted-error-while-running-es-as-service/123293)
**Author:** [@deepanshu\_mittal](https://discuss.elastic.co/u/deepanshu_mittal)\ **Replies:** 1\ **Last updated:** [March 9, 2018, 3:29pm UTC](https://discuss.elastic.co/t/runuser-cannot-set-groups-operation-not-permitted-error-while-running-es-as-service/123293 "2018-03-09T15:29:50Z")
I am getting "runuser: cannot set groups: Operation not permitted" Error while running ES as service on OEL6 linux machine. I am using following /etc/init.d/elasticsearch file #!/bin/bash elasticsearch chkconfig: … --- ## [Logstash - Conversion de date](https://discuss.elastic.co/t/logstash-conversion-de-date/109538)
**Author:** [@mat.bst](https://discuss.elastic.co/u/mat.bst)\ **Replies:** 7\ **Last updated:** [December 8, 2017, 12:03pm UTC](https://discuss.elastic.co/t/logstash-conversion-de-date/109538 "2017-12-08T12:03:44Z")
Bonjour tout le monde ! Grâce à Logstash j'indexe toute une table d'une base de donnée MySQL, cependant je n'arrive pas a filtrer correctement un champs pour qu'il soit transformé en quelque chose de lisible par kibana. … --- ## [Elasticsearch unreachable Error in Logstash after installing X-Pack](https://discuss.elastic.co/t/elasticsearch-unreachable-error-in-logstash-after-installing-x-pack/83681)
**Author:** [@jasdf](https://discuss.elastic.co/u/jasdf)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-error-in-logstash-after-installing-x-pack/83681 "2017-04-28T14:08:44Z")
Hi, I've set up Kibana 5.3.0, Logstash 5.3.0, Elasticsearch 5.3.0 and Filebeat 5.3.1. I had further issues with X-Pack, so I removed it completely and installed it again. I disabled security, monitoring, graph and wa… --- ## [How to set network.host to listen to IPv6 as well?](https://discuss.elastic.co/t/how-to-set-network-host-to-listen-to-ipv6-as-well/290923)
**Author:** [@houmie](https://discuss.elastic.co/u/houmie)\ **Replies:** 3\ **Last updated:** [December 6, 2021, 3:59pm UTC](https://discuss.elastic.co/t/how-to-set-network-host-to-listen-to-ipv6-as-well/290923 "2021-12-06T15:59:53Z")
Hello, After struggling for hours why Filebeat can't connect to ES, I realised that this setting in elasticsearch.yaml is the culprit. It is only listening to IPv4 and not IPv6. network.host: 0.0.0.0 I tried many d… --- ## [Why is \_source filtering faster than stored fields retrieval?](https://discuss.elastic.co/t/why-is--source-filtering-faster-than-stored-fields-retrieval/54808)
**Author:** [@Tzahi](https://discuss.elastic.co/u/Tzahi)\ **Replies:** 3\ **Last updated:** [July 19, 2016, 8:14pm UTC](https://discuss.elastic.co/t/why-is--source-filtering-faster-than-stored-fields-retrieval/54808 "2016-07-19T20:14:46Z")
In numerous ES posts, it is stated that retrieving stored fields is slower than filtering values from \_source fields. The reason stated is that reading each field requires disk access.disk seeks and stored fields - clint… --- ## [Elasticsearch: Too many open files error even with 64K max file descriptor set](https://discuss.elastic.co/t/elasticsearch-too-many-open-files-error-even-with-64k-max-file-descriptor-set/27196)
**Author:** [@lhorsky1](https://discuss.elastic.co/u/lhorsky1)\ **Replies:** 4\ **Last updated:** [August 11, 2015, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-too-many-open-files-error-even-with-64k-max-file-descriptor-set/27196 "2015-08-11T18:37:19Z")
I have a 3 node cluster (2 data/master and 1 master/no data. It is being fed by 2 logstash servers. I have everything tuned based on the production setting suggestions (max file descriptors set to 64K, setting ES Heap Si… --- ## [Logstash rds filtering?](https://discuss.elastic.co/t/logstash-rds-filtering/142655)
**Author:** [@jspriesterbach](https://discuss.elastic.co/u/jspriesterbach)\ **Replies:** 2\ **Last updated:** [August 1, 2018, 11:09pm UTC](https://discuss.elastic.co/t/logstash-rds-filtering/142655 "2018-08-01T23:09:06Z")
Hello, I currently have a script that will download all the error & slow logs from RDS for the day and put them in a folder. I am now trying to get logstash to read those files and put them into our ELK stack for use wi… --- ## [Logstash 5.2: init script for manual tar.gz installation?](https://discuss.elastic.co/t/logstash-5-2-init-script-for-manual-tar-gz-installation/74079)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [February 27, 2017, 11:25am UTC](https://discuss.elastic.co/t/logstash-5-2-init-script-for-manual-tar-gz-installation/74079 "2017-02-27T11:25:45Z")
Hi, I installed logstash 5.2 from the tar package on redhat 6.7. I did not use the installer, because an older version of the elk stack with installed services for logstash, etc. are already present at the system. I … --- ## [Export data using logstash](https://discuss.elastic.co/t/export-data-using-logstash/31408)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 6\ **Last updated:** [October 13, 2015, 8:10pm UTC](https://discuss.elastic.co/t/export-data-using-logstash/31408 "2015-10-13T20:10:33Z")
can logstash be used to export data FROM elasticearch to another database? --- ## [Regex for defining index patterns](https://discuss.elastic.co/t/regex-for-defining-index-patterns/201207)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 5\ **Last updated:** [October 4, 2019, 2:36pm UTC](https://discuss.elastic.co/t/regex-for-defining-index-patterns/201207 "2019-10-04T14:36:03Z")
I want to define an index pattern like log\_sample-2019.09.1\[0-2\]. How can I do that in Kibana? --- ## [How to Visualize data created using Bucket Script into dashboard](https://discuss.elastic.co/t/how-to-visualize-data-created-using-bucket-script-into-dashboard/127456)
**Author:** [@vinoz1990](https://discuss.elastic.co/u/vinoz1990)\ **Replies:** 1\ **Last updated:** [April 10, 2018, 6:53pm UTC](https://discuss.elastic.co/t/how-to-visualize-data-created-using-bucket-script-into-dashboard/127456 "2018-04-10T18:53:32Z")
I need to create a cumulative Average and i have created a following bucket script i wanted to display total percentage values in Kibana dashboard GET metricsreport2.0/report/\_search { "query":{ "match\_all": {} … --- ## [How to insert document in index using SQL Query in elasticsearch](https://discuss.elastic.co/t/how-to-insert-document-in-index-using-sql-query-in-elasticsearch/195687)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-to-insert-document-in-index-using-sql-query-in-elasticsearch/195687 "2019-08-19T13:52:11Z")
Hi All. i have written SQL Query Like below:- {"query":"select \* from index02 where id=121" } Obove is working fine but i want to insert docs inside current index02:-1: like:- {"query":"insert into index02 values(1… --- ## [Logstash TCP Input Codec to set utf-16 is not working](https://discuss.elastic.co/t/logstash-tcp-input-codec-to-set-utf-16-is-not-working/166318)
**Author:** [@aliaramli](https://discuss.elastic.co/u/aliaramli)\ **Replies:** 4\ **Last updated:** [January 31, 2019, 3:01pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-codec-to-set-utf-16-is-not-working/166318 "2019-01-31T15:01:14Z")
Hi, I wanted to set the input tcp plugin to have codec charset utf-16, because one of the logs has Chinese characters. \[2019-01-30T09:23:25,617\]\[WARN \]\[logstash.codecs.line \] Received an event that has a different char… --- ## [OpenJDK vs Oracle](https://discuss.elastic.co/t/openjdk-vs-oracle/158234)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 9:43am UTC](https://discuss.elastic.co/t/openjdk-vs-oracle/158234 "2018-11-28T09:43:40Z")
Hi guys, since our company always bets for open source and free alternatives, is there a reason to use Oracle for the Java packages or we can use OpenJDK without fear about breaking environments? We would like to use Ope… --- ## [Kibana Data table size limit](https://discuss.elastic.co/t/kibana-data-table-size-limit/77659)
**Author:** [@Timur](https://discuss.elastic.co/u/Timur)\ **Replies:** 1\ **Last updated:** [March 9, 2017, 9:07pm UTC](https://discuss.elastic.co/t/kibana-data-table-size-limit/77659 "2017-03-09T21:07:17Z")
I'm trying to limit number of records aggregated by Data table visualization to 500 first results. I've updated kibanaSavedObjectMeta.searchSourceJSON of my saved visualization object as follows: { "index": "logstash… --- ## [How to split CSV file and filter CSV Files](https://discuss.elastic.co/t/how-to-split-csv-file-and-filter-csv-files/28710)
**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\ **Replies:** 1\ **Last updated:** [September 5, 2015, 10:35am UTC](https://discuss.elastic.co/t/how-to-split-csv-file-and-filter-csv-files/28710 "2015-09-05T10:35:55Z")
Hi, I have a challenge where I am not able to filter a CSV file in logstash and pass this a separate files to elasticsearch. Original files: CLIENT\_IP,ISP,TEST\_DATE,SERVER\_NAME,DOWNLOAD\_KBPS,UPLOAD\_KBPS,LATENCY,LATITU… --- ## [Installed Rally, but it won't run & I can't find the install](https://discuss.elastic.co/t/installed-rally-but-it-wont-run-i-cant-find-the-install/65076)
**Author:** [@Woodford](https://discuss.elastic.co/u/Woodford)\ **Replies:** 3\ **Last updated:** [November 8, 2016, 9:36am UTC](https://discuss.elastic.co/t/installed-rally-but-it-wont-run-i-cant-find-the-install/65076 "2016-11-08T09:36:09Z")
Mac OS X, Sierra. All prereqs verified, ran install, no errors, but 'esrally configure' returns "command not found". No ~/.rally directory I'm looking in docs, getting started, no useful clues there. Any help appreciat… --- ## [Elasticsearch 7.16.2 fails to start as service under windows server 2019](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708)
**Author:** [@yankun0567](https://discuss.elastic.co/u/yankun0567)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708 "2021-12-22T16:40:59Z")
Hi, I've just downloaded Elasticsearch 7.16.2 and installed it as a service under Windows Server 2019. Previously I had 7.10.2. running without any issues. If I'm trying to start the service, it fails with following er… --- ## [How to access java methods inside of painless](https://discuss.elastic.co/t/how-to-access-java-methods-inside-of-painless/182242)
**Author:** [@Lockhead](https://discuss.elastic.co/u/Lockhead)\ **Replies:** 6\ **Last updated:** [May 23, 2019, 9:06am UTC](https://discuss.elastic.co/t/how-to-access-java-methods-inside-of-painless/182242 "2019-05-23T09:06:27Z")
I would like to do a popcount over a long field inside of a painless script, but I do not understand the documentation here. There is no single example in how to access native java functions inside of painless. { "scri… --- ## [Require support for conditional statement within beats input section](https://discuss.elastic.co/t/require-support-for-conditional-statement-within-beats-input-section/37254)
**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\ **Replies:** 4\ **Last updated:** [January 6, 2017, 3:06am UTC](https://discuss.elastic.co/t/require-support-for-conditional-statement-within-beats-input-section/37254 "2017-01-06T03:06:15Z")
I have a use case wherein I am running 2 different prospectors for 2 different file types and shipping the log events to logstash. Now in my logstash while I receive events from both file types, I would however want for … --- ## [Single node takes down entire cluster](https://discuss.elastic.co/t/single-node-takes-down-entire-cluster/12301)
**Author:** [@moj0rising](https://discuss.elastic.co/u/moj0rising)\ **Replies:** 4\ **Last updated:** [June 11, 2013, 8:34pm UTC](https://discuss.elastic.co/t/single-node-takes-down-entire-cluster/12301 "2013-06-11T20:34:09Z")
Hello, We have a problem where one of our Elastic search nodes runs out of memory and crashes. In the process, the whole (two-node) cluster stops functioning. What can we do to make it so if one node fails, it do… --- ## [Kibana - ERR\_OSSL\_PEM\_NO\_START\_LINE](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873)
**Author:** [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873 "2021-10-28T06:05:48Z")
Elasticsearch SSL is working. Moving onto Kibana SSL. I've followed the documents to generate new csr requests for Kibana-server.cer and kibana-server.key files. I've placed them in the kibana config directory. I've… --- ## [DSL Query to search in message field for some value and it must not contain something else](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 7:35am UTC](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450 "2021-09-18T07:35:25Z")
Trying to come up with a query to search "message" field for something like "Hello" and also the field must not contain strings like "Test" "TestProcess". "UpdatingTestProcess" Below are sample messages: Message: Hel… --- ## [Adding fields](https://discuss.elastic.co/t/adding-fields/36891)
**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\ **Replies:** 1\ **Last updated:** [December 10, 2015, 3:36pm UTC](https://discuss.elastic.co/t/adding-fields/36891 "2015-12-10T15:36:04Z")
Hello there, I want to know if there's a way to add two or more fields. We take two fields which are numbers (not string) and want to add each other into another field. Or even more, is there a way to add a number to a… --- ## [Unable to run inline script from Kibana UI](https://discuss.elastic.co/t/unable-to-run-inline-script-from-kibana-ui/24671)
**Author:** [@bikrant](https://discuss.elastic.co/u/bikrant)\ **Replies:** 1\ **Last updated:** [July 13, 2015, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-run-inline-script-from-kibana-ui/24671 "2015-07-13T19:01:17Z")
I'm trying to extract ip:port text from an inline script query, this works when I query ES directly: { "script\_fields": { "sub\_message": { "script": "def result = (doc\['message'\] =~ /.\*(127\\\\.0\\\\.0\\\\.1:\\\\d+)… --- ## [Filter the palo alto Global protect logs](https://discuss.elastic.co/t/filter-the-palo-alto-global-protect-logs/111405)
**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\ **Replies:** 3\ **Last updated:** [December 15, 2017, 5:34pm UTC](https://discuss.elastic.co/t/filter-the-palo-alto-global-protect-logs/111405 "2017-12-15T17:34:25Z")
Hello Community, We recently implemented ELK stack using docker compose, I am trying to visualize the palo alto global protect logs for login status and ip address. Below snip to give idea how I am filtering for system… --- ## [Max suggested index sizes / document amount etc](https://discuss.elastic.co/t/max-suggested-index-sizes-document-amount-etc/347937)
**Author:** [@elk1985](https://discuss.elastic.co/u/elk1985)\ **Replies:** 2\ **Last updated:** [November 24, 2023, 2:56pm UTC](https://discuss.elastic.co/t/max-suggested-index-sizes-document-amount-etc/347937 "2023-11-24T14:56:57Z")
Hello. My cluster is reaching 2000 opened shards. I have two data nodes now. I don't want to add another data node and scale up the cluster. I'm thinking more like changing indexing strategy. Currently logstash is cre… --- ## [How to create a GAUGE using filter ratio](https://discuss.elastic.co/t/how-to-create-a-gauge-using-filter-ratio/236689)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 8\ **Last updated:** [June 12, 2020, 1:50pm UTC](https://discuss.elastic.co/t/how-to-create-a-gauge-using-filter-ratio/236689 "2020-06-12T13:50:40Z")
Hello @flash1293, I took your advice and I used TSVB . I tried to create GAUGE that showes the total number of attempt and the portion of attempt compliant number. For that I used a filter ratio, but I didn't know ho… --- ## [Grok username in iis log](https://discuss.elastic.co/t/grok-username-in-iis-log/102543)
**Author:** [@frumat\_l](https://discuss.elastic.co/u/frumat_l)\ **Replies:** 8\ **Last updated:** [October 10, 2017, 5:17am UTC](https://discuss.elastic.co/t/grok-username-in-iis-log/102543 "2017-10-10T05:17:47Z")
Hi, I have an IIS log, example: "2017-10-01 08:29:29 10.70.4.52 GET /Shared+Documents/Forms/AllItems.aspx AjaxDelta=1&isStartPlt1=1506846557836 80 0#.w|auto\\user\_sppano\_dev 10.70.4.52 Mozilla/4.0+(compatible;+MSIE+7.0;… --- ## [Index status Open but in Delete phase](https://discuss.elastic.co/t/index-status-open-but-in-delete-phase/256043)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 8:14am UTC](https://discuss.elastic.co/t/index-status-open-but-in-delete-phase/256043 "2020-11-20T08:14:46Z")
Hi I have recently been working on a new data source for Threat Intel data to make use of the Indicator Match detection. My plan was to ingest the TI data in to an index and then roll that index over every 12hrs in to … --- ## [How i can download zip for ingest attachment plugin?](https://discuss.elastic.co/t/how-i-can-download-zip-for-ingest-attachment-plugin/170718)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 4\ **Last updated:** [March 5, 2019, 8:33am UTC](https://discuss.elastic.co/t/how-i-can-download-zip-for-ingest-attachment-plugin/170718 "2019-03-05T08:33:29Z")
Hi, I want to indexed pdf files. and for that want to install ingest attachment processor plugin offline. I looked at "https://www.elastic.co/guide/en/elasticsearch/plugins/master/ingest-attachment.html#ingest-attachmen… --- ## [How to scroll through an Elasticsearch index using elasticsearch-spark?](https://discuss.elastic.co/t/how-to-scroll-through-an-elasticsearch-index-using-elasticsearch-spark/144618)
**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\ **Replies:** 4\ **Last updated:** [August 21, 2018, 6:24pm UTC](https://discuss.elastic.co/t/how-to-scroll-through-an-elasticsearch-index-using-elasticsearch-spark/144618 "2018-08-21T18:24:32Z")
With the Java Client.prepareSearch() and Client.prepareSearchScroll() APIs, we can query an Elasticsearch index using the scrolls as mentioned in the documentation. With these APIs, we can select only a specific numbe… --- ## [How to make Linked Data Table in Kibana](https://discuss.elastic.co/t/how-to-make-linked-data-table-in-kibana/44123)
**Author:** [@svikas](https://discuss.elastic.co/u/svikas)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 3:28am UTC](https://discuss.elastic.co/t/how-to-make-linked-data-table-in-kibana/44123 "2016-03-31T03:28:02Z")
Friends, I have org hierarchy data with details on project status, etc. I want to create an interactive dashboard to view drill down report based on managers and their projects. Is it possible to do with Kibana? Regard… --- ## [TSVB Table Sorted by timestamp](https://discuss.elastic.co/t/tsvb-table-sorted-by-timestamp/267271)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 6\ **Last updated:** [April 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/tsvb-table-sorted-by-timestamp/267271 "2021-04-15T14:27:20Z")
Hello, I have a nice TSVB graph and I'm trying to get a table out of it sorted by timestamp. Should be simple, but it doesn't show any value: I want a time-based table like the other Table graph, but needs to be TSVB… --- ## [TSVB Visualisation get the filter date Value](https://discuss.elastic.co/t/tsvb-visualisation-get-the-filter-date-value/240309)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 6\ **Last updated:** [July 14, 2020, 3:46am UTC](https://discuss.elastic.co/t/tsvb-visualisation-get-the-filter-date-value/240309 "2020-07-14T03:46:54Z")
Hi All.... i want to create a Visualisation using TSVB. can we get a Day of time filter? exp: we get a minday = 1 , and maxday = 31 from time filter like this, or time interval of timefilter. i need this value to ca… --- ## [How to restrict user to a specific dashboard among other dashboards?](https://discuss.elastic.co/t/how-to-restrict-user-to-a-specific-dashboard-among-other-dashboards/234597)
**Author:** [@Fernando1](https://discuss.elastic.co/u/Fernando1)\ **Replies:** 2\ **Last updated:** [May 27, 2020, 8:12pm UTC](https://discuss.elastic.co/t/how-to-restrict-user-to-a-specific-dashboard-among-other-dashboards/234597 "2020-05-27T20:12:17Z")
Hello!! How can I restrict user access to certain dashboards? Thanks in advance!!! Best Wishes, Fernando Durier! --- ## [ロールとユーザーを作成方法](https://discuss.elastic.co/t/topic/221980)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 2\ **Last updated:** [March 6, 2020, 2:36am UTC](https://discuss.elastic.co/t/topic/221980 "2020-03-06T02:36:45Z")
Kibanaでロールとユーザーを作成したいのですが、securityの項目が出てきません。(7.6.0) 設定方法などございましたら、ご教授いただけると嬉しいです。 --- ## [Logstash-input-jms problem reading messages from IBM WebSphere MQ (missing valuefier)](https://discuss.elastic.co/t/logstash-input-jms-problem-reading-messages-from-ibm-websphere-mq-missing-valuefier/81993)
**Author:** [@alexander-milovidov](https://discuss.elastic.co/u/alexander-milovidov)\ **Replies:** 2\ **Last updated:** [April 21, 2017, 8:24am UTC](https://discuss.elastic.co/t/logstash-input-jms-problem-reading-messages-from-ibm-websphere-mq-missing-valuefier/81993 "2017-04-21T08:24:00Z")
I have problem getting messages from IBM WebSphere MQ. It seems that some field(s) in MQMD header has type which is not handled properly. Some messages are read without exception. When I turn off include\_header setting i… --- ## [Debug Elasticsearch with IntelliJ](https://discuss.elastic.co/t/debug-elasticsearch-with-intellij/110942)
**Author:** [@lukekingbru](https://discuss.elastic.co/u/lukekingbru)\ **Replies:** 3\ **Last updated:** [February 4, 2019, 9:30am UTC](https://discuss.elastic.co/t/debug-elasticsearch-with-intellij/110942 "2019-02-04T09:30:48Z")
How to config Program arguments in IntelliJ ? I got this error when I try to run: ERROR: the system property \[es.path.conf\] must be set --- ## [DateRange if DateTime Field not null?](https://discuss.elastic.co/t/daterange-if-datetime-field-not-null/121943)
**Author:** [@Mehmet\_KURT](https://discuss.elastic.co/u/Mehmet_KURT)\ **Replies:** 3\ **Last updated:** [March 3, 2018, 4:23pm UTC](https://discuss.elastic.co/t/daterange-if-datetime-field-not-null/121943 "2018-03-03T16:23:13Z")
Hi everybody, My table columns are not always null! Therefore, I need to check when querying the date range. I'm passing the Linq question below. How can I do that? query = query.where(p =\> (!p.markasnewstar… --- ## [Infinite extent for field “amount”: \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-amount-infinity-infinity/319876)
**Author:** [@sieky](https://discuss.elastic.co/u/sieky)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 7:26pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-amount-infinity-infinity/319876 "2022-12-08T19:26:46Z")
I am a new to vega.I just follow vega website's tutorials and create a bar chart sucessfully.But,when I replace data source: "data": \[ { "name": "table", "values": \[ {"category": "A", "amount": 28}, {"category": "B", "a… --- ## [Logstash integration with Zabbix server](https://discuss.elastic.co/t/logstash-integration-with-zabbix-server/53509)
**Author:** [@Alan\_John](https://discuss.elastic.co/u/Alan_John)\ **Replies:** 1\ **Last updated:** [June 21, 2016, 2:55pm UTC](https://discuss.elastic.co/t/logstash-integration-with-zabbix-server/53509 "2016-06-21T14:55:29Z")
Hi, I am working on with ELK and Zabbix recently. I'm stuck now with the integration of Logstash with Zabbix server. I couldn't find a good documentation to follow other than the slides provided by you and some publ… [Previous page](https://discuss.elastic.co/top.md?page=672&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=674&per_page=50&period=all)