# Top **URL:** https://discuss.elastic.co/top.md?page=678&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 679 --- ## [Embedding Kibana Visulaization using iframe](https://discuss.elastic.co/t/embedding-kibana-visulaization-using-iframe/2444)
**Author:** [@d3mon92](https://discuss.elastic.co/u/d3mon92)\ **Replies:** 1\ **Last updated:** [June 12, 2015, 5:55am UTC](https://discuss.elastic.co/t/embedding-kibana-visulaization-using-iframe/2444 "2015-06-12T05:55:48Z")
I'm using Kibana 4 and want to embed Kibana Visualize in a HTML page using iframe, along with all its functionalities But when I do that, on creating new visualization I don't get the left pane, where all the aggregatio… --- ## [Shibboleth Auth Logs \_grokparsefailure](https://discuss.elastic.co/t/shibboleth-auth-logs-grokparsefailure/151280)
**Author:** [@Dr\_Natas](https://discuss.elastic.co/u/Dr_Natas)\ **Replies:** 0\ **Last updated:** [October 5, 2018, 8:32pm UTC](https://discuss.elastic.co/t/shibboleth-auth-logs-grokparsefailure/151280 "2018-10-05T20:32:00Z")
How filebeat sends my shibboleth logs. /etc/filebeat/filebeat.yml Note: Code is truncated. #--------------------------- Prospectors Path --------------------------------- #filebeat.config.inputs: # enabled: true # p… --- ## [Indexing and searching on special characters?](https://discuss.elastic.co/t/indexing-and-searching-on-special-characters/9312)
**Author:** [@tsandstr](https://discuss.elastic.co/u/tsandstr)\ **Replies:** 2\ **Last updated:** [October 13, 2012, 7:14am UTC](https://discuss.elastic.co/t/indexing-and-searching-on-special-characters/9312 "2012-10-13T07:14:01Z")
I am having some troubles with how the indexing works on strings. I use normal mapping for strings and query\_string for my queries. I index the following: curl -XPUT http://localhost:9200/twitter/tweet/1 … --- ## [ES BUG? Filter excluding "-" still brings results with dash "-"](https://discuss.elastic.co/t/es-bug-filter-excluding-still-brings-results-with-dash/173096)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [March 21, 2019, 12:38pm UTC](https://discuss.elastic.co/t/es-bug-filter-excluding-still-brings-results-with-dash/173096 "2019-03-21T12:38:42Z")
We have an index with documents which have the value "-" in a field "referrer". However when we try to exclude these values in Kibana, the documents are not filtered out. Digging deeper we see that ElasticSearch does not… --- ## [Vega timeline visualisation](https://discuss.elastic.co/t/vega-timeline-visualisation/148087)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 12:44pm UTC](https://discuss.elastic.co/t/vega-timeline-visualisation/148087 "2018-09-14T12:44:52Z")
Hey there I'm trying to create a time-visualsation with Vega-Lite. I have an index called 460 with the field "CreationDate" as timestamp and a field "AssignedWorker" as a number. Now I want a simple chart with the "Crea… --- ## [Elastic 2.0 slower query execution speed as 1.3](https://discuss.elastic.co/t/elastic-2-0-slower-query-execution-speed-as-1-3/34973)
**Author:** [@Jayme](https://discuss.elastic.co/u/Jayme)\ **Replies:** 5\ **Last updated:** [February 1, 2016, 3:32pm UTC](https://discuss.elastic.co/t/elastic-2-0-slower-query-execution-speed-as-1-3/34973 "2016-02-01T15:32:36Z")
Hi, I'm having an index of around 140M entries, still running elastic 1.3 in production and using filtered queries to do lookups, most of the queries execute in sub 100ms, between 40 and 100ms. I now have a new serve… --- ## [Proximity and "OR" or equivalency searching](https://discuss.elastic.co/t/proximity-and-or-or-equivalency-searching/27837)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 5\ **Last updated:** [August 21, 2015, 3:29pm UTC](https://discuss.elastic.co/t/proximity-and-or-or-equivalency-searching/27837 "2015-08-21T15:29:57Z")
We're migrating from Oracle's text search using CONTAINS to Elastic, and one search commonly performed by our "power users" is a NEAR (proximity) search in conjunction with an EQUIValence (=) operator. Equivalence oper… --- ## [Embed Kibana Log Stream Widget to Web page](https://discuss.elastic.co/t/embed-kibana-log-stream-widget-to-web-page/242348)
**Author:** [@Istvan\_Romhany](https://discuss.elastic.co/u/Istvan_Romhany)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 2:12pm UTC](https://discuss.elastic.co/t/embed-kibana-log-stream-widget-to-web-page/242348 "2020-07-23T14:12:46Z")
Hello! I am new to the ELK stack, it's awesome, but for our use case we need just the Log Stream page of kibana (/app/logs/stream) and we need to embed it into our own web application. I see that we could utilize ifram… --- ## [Tile map not showing geo points - just a blank map!](https://discuss.elastic.co/t/tile-map-not-showing-geo-points-just-a-blank-map/107628)
**Author:** [@fcargentina](https://discuss.elastic.co/u/fcargentina)\ **Replies:** 4\ **Last updated:** [November 14, 2017, 10:32pm UTC](https://discuss.elastic.co/t/tile-map-not-showing-geo-points-just-a-blank-map/107628 "2017-11-14T22:32:57Z")
Hello there, i've been playing around with ELK for the past few weeks, trying to analize twitter's data and so far, so good. I love it! The whole thing is easy to use.... i just have one little-tinny problem i can not se… --- ## [Logstash cache lookup data](https://discuss.elastic.co/t/logstash-cache-lookup-data/162687)
**Author:** [@roblopes](https://discuss.elastic.co/u/roblopes)\ **Replies:** 3\ **Last updated:** [January 2, 2019, 7:15pm UTC](https://discuss.elastic.co/t/logstash-cache-lookup-data/162687 "2019-01-02T19:15:37Z")
Hi, I am moving a legacy logging system to Elastic stack, and there are couple fields in the existing system that are using foreign keys for a lookup table (around 1000 rows, but it can grow or shrink since users can cr… --- ## [How to calculate relevancy by the help of precision and recall](https://discuss.elastic.co/t/how-to-calculate-relevancy-by-the-help-of-precision-and-recall/15610)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 3\ **Last updated:** [February 5, 2014, 7:51am UTC](https://discuss.elastic.co/t/how-to-calculate-relevancy-by-the-help-of-precision-and-recall/15610 "2014-02-05T07:51:51Z")
Hi, I want to know how do we calculate relevancy with the help of precision and reacall, for example:- A = The number of relevant records retrieved, B = The number of relevantrecords not retrieved, and C = T… --- ## [Elasticsearch exception \[type=search\_phase\_execution\_exception, reason=all shards failed\]](https://discuss.elastic.co/t/elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/308737)
**Author:** [@Pamal\_Jayawickrama](https://discuss.elastic.co/u/Pamal_Jayawickrama)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/308737 "2022-07-03T14:36:16Z")
when I searching this query using simpleQueryStringQuery, GET books/\_search { "query":{ "bool":{ "must":\[ {"bool":{ "should":\[{ "wildcard":{"vault-bpa-ui-url":{"wildcard":"http\*… --- ## [Could not get unknown property 'jar' for project ':core' of type org.gradle.ap i.Project](https://discuss.elastic.co/t/could-not-get-unknown-property-jar-for-project-core-of-type-org-gradle-ap-i-project/98426)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 1\ **Last updated:** [August 26, 2017, 3:19am UTC](https://discuss.elastic.co/t/could-not-get-unknown-property-jar-for-project-core-of-type-org-gradle-ap-i-project/98426 "2017-08-26T03:19:37Z")
Elasticsearch version: 5.5.2 OS: Windlws When I use gradle to build elasticsearch source code, I encounter a problem like this: What went wrong: A problem occurred evaluating project ':distribution'. Could not get… --- ## [Need help on elastalert configuration](https://discuss.elastic.co/t/need-help-on-elastalert-configuration/50200)
**Author:** [@vmankala](https://discuss.elastic.co/u/vmankala)\ **Replies:** 1\ **Last updated:** [May 17, 2016, 11:03am UTC](https://discuss.elastic.co/t/need-help-on-elastalert-configuration/50200 "2016-05-17T11:03:04Z")
I have setup an ELK such as installed filebeat on target hosts and configured 1 centralised logstash server. Created an Elastic search domain and given the domain url in logstash conf file. Also I have setup an Elastaler… --- ## [Elasticsearch settings do not seem to be applied via Docker env variables?](https://discuss.elastic.co/t/elasticsearch-settings-do-not-seem-to-be-applied-via-docker-env-variables/213384)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 8:28pm UTC](https://discuss.elastic.co/t/elasticsearch-settings-do-not-seem-to-be-applied-via-docker-env-variables/213384 "2020-01-21T20:28:06Z")
I'm running a small test cluster via docker-compose on a desktop in my office, I've configured each node via environment variables. Not by using elasticsearch.yml. My main node looks like: version: '3.3' services: es… --- ## [Disabling DELETE API](https://discuss.elastic.co/t/disabling-delete-api/192830)
**Author:** [@tonyl](https://discuss.elastic.co/u/tonyl)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 6:52am UTC](https://discuss.elastic.co/t/disabling-delete-api/192830 "2019-07-30T06:52:31Z")
Read from the below linked post from 2014 that the DELETE method cannot be disabled in Elastic Search. Like to confirm if this is still so currently? If so, is there any official documentation which states this in wr… --- ## [Custom Realm - Building UsernamePasswordToken](https://discuss.elastic.co/t/custom-realm-building-usernamepasswordtoken/82699)
**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\ **Replies:** 7\ **Last updated:** [April 24, 2017, 9:36am UTC](https://discuss.elastic.co/t/custom-realm-building-usernamepasswordtoken/82699 "2017-04-24T09:36:01Z")
Hello there, I'm developing a custom realm based on The plan is for browser to kibana to be HTTPS, but kibana to elasticsearch is HTTP. I'm attempting to authenticate with curl -H "User-Agent: Mozilla" -H "Origin:… --- ## [Constant boost for nested query](https://discuss.elastic.co/t/constant-boost-for-nested-query/9008)
**Author:** [@Chris\_Yuska](https://discuss.elastic.co/u/Chris_Yuska)\ **Replies:** 7\ **Last updated:** [September 18, 2012, 11:33pm UTC](https://discuss.elastic.co/t/constant-boost-for-nested-query/9008 "2012-09-18T23:33:56Z")
I have a Person object indexed with nested Work records. I want to search for the Work "title" and give an extra boost to Work records that match on title but are also still "current." My current query (shortened f… --- ## [Date range value for data table](https://discuss.elastic.co/t/date-range-value-for-data-table/206111)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 5\ **Last updated:** [November 4, 2019, 3:29pm UTC](https://discuss.elastic.co/t/date-range-value-for-data-table/206111 "2019-11-04T15:29:44Z")
Is there a way to obtain the value of the date range in terms of start and end times, last x mins, etc... I would like to put this value into a data table. i.e. Animal Number Date range Average … --- ## [Getting error when invoking elasticSearch from spark](https://discuss.elastic.co/t/getting-error-when-invoking-elasticsearch-from-spark/46904)
**Author:** [@ashish100](https://discuss.elastic.co/u/ashish100)\ **Replies:** 5\ **Last updated:** [April 11, 2016, 3:48pm UTC](https://discuss.elastic.co/t/getting-error-when-invoking-elasticsearch-from-spark/46904 "2016-04-11T15:48:03Z")
I have a use case, where I need to read messages from kafka and for each message, extract data and invoke elasticsearch Index. The response will be further used to do further processing. I am getting below error when inv… --- ## [Does Kibana support localization for 10 languages?](https://discuss.elastic.co/t/does-kibana-support-localization-for-10-languages/263257)
**Author:** [@sarath\_td](https://discuss.elastic.co/u/sarath_td)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 4:09pm UTC](https://discuss.elastic.co/t/does-kibana-support-localization-for-10-languages/263257 "2021-02-04T16:09:42Z")
We have an immediate requirement for enabling multi lingual support in Kibana (localization/globalization) for our clients. All our dashboards visualizations should support local language. Is there a way to achieve this? … --- ## [Incapaz de crear un template](https://discuss.elastic.co/t/incapaz-de-crear-un-template/108688)
**Author:** [@davidsoler95](https://discuss.elastic.co/u/davidsoler95)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 3:43pm UTC](https://discuss.elastic.co/t/incapaz-de-crear-un-template/108688 "2017-11-28T15:43:37Z")
Hola, Tras dos días intentando algo básico soy incapaz de que Filebeat y Kibana detecten los datos de mis Logs y separar los campos para poder utilizar las herramientas de visualización de Kibana, usando la versión 5.6.… --- ## [Filebeats cuts off first part of log event](https://discuss.elastic.co/t/filebeats-cuts-off-first-part-of-log-event/155057)
**Author:** [@hyattcs](https://discuss.elastic.co/u/hyattcs)\ **Replies:** 4\ **Last updated:** [November 14, 2018, 8:34pm UTC](https://discuss.elastic.co/t/filebeats-cuts-off-first-part-of-log-event/155057 "2018-11-14T20:34:57Z")
I'm using beats, logstash, elasticsearch to read log info in json, add some fields and index it. Beats is set up to treat a single line in the logs as an event, and each json object should be on a single line. I notice… --- ## [Elasticsearch head x-pack 5.1.x can't connect](https://discuss.elastic.co/t/elasticsearch-head-x-pack-5-1-x-cant-connect/72240)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 4\ **Last updated:** [January 20, 2017, 7:32am UTC](https://discuss.elastic.co/t/elasticsearch-head-x-pack-5-1-x-cant-connect/72240 "2017-01-20T07:32:52Z")
elasticsearch head When enabled x-pack,login kibana and elasticsearch all need logon,but the elasticsearch-head (https://github.com/mobz/elasticsearch-head ) can't connect to elasticsearch (localhost:9200),how do to s… --- ## [Logstash as a service windows](https://discuss.elastic.co/t/logstash-as-a-service-windows/87217)
**Author:** [@kalman](https://discuss.elastic.co/u/kalman)\ **Replies:** 1\ **Last updated:** [May 28, 2017, 4:24pm UTC](https://discuss.elastic.co/t/logstash-as-a-service-windows/87217 "2017-05-28T16:24:35Z")
Is there a official way you can run logstash as a service on windows? because logstash is started with a bat, how can I run it as a manged service to monitor if it crashes or if something happens in production --- ## [Painless scripts in Kibana: inline vs stored scripts](https://discuss.elastic.co/t/painless-scripts-in-kibana-inline-vs-stored-scripts/141423)
**Author:** [@mbelluomini](https://discuss.elastic.co/u/mbelluomini)\ **Replies:** 6\ **Last updated:** [July 27, 2018, 4:23pm UTC](https://discuss.elastic.co/t/painless-scripts-in-kibana-inline-vs-stored-scripts/141423 "2018-07-27T16:23:40Z")
Hi everybody. In a (bar chart) visualization I'm successfully using in the JSON input field (advanced area of the Y-axis) the following JSON Painless script (in order to get the ratio ab2\_tot\_immobilizz\_mater/ab1\_tot\_im… --- ## [Getting Field name as field value in Pie chart visualization](https://discuss.elastic.co/t/getting-field-name-as-field-value-in-pie-chart-visualization/25698)
**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\ **Replies:** 6\ **Last updated:** [March 20, 2017, 5:04pm UTC](https://discuss.elastic.co/t/getting-field-name-as-field-value-in-pie-chart-visualization/25698 "2017-03-20T17:04:54Z")
Hi Team, I am getting field name as filed value.For example if i select field as "AppName" getting the same in field values.So displays incorrect visualization. Can you please help me... --- ## [Store and index "no" not working](https://discuss.elastic.co/t/store-and-index-no-not-working/38589)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 8\ **Last updated:** [January 8, 2016, 8:26pm UTC](https://discuss.elastic.co/t/store-and-index-no-not-working/38589 "2016-01-08T20:26:39Z")
Here comes another offspring to this question: https://discuss.elastic.co/t/exclude-complete-path-from-indexing-and--source/37854/11 What I want to achieve here is to -exclude a field called "ignoreme" from the \_source… --- ## [Tag Cloud that will search from all index](https://discuss.elastic.co/t/tag-cloud-that-will-search-from-all-index/90285)
**Author:** [@Mark\_John\_Sabado](https://discuss.elastic.co/u/Mark_John_Sabado)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 7:25am UTC](https://discuss.elastic.co/t/tag-cloud-that-will-search-from-all-index/90285 "2017-06-28T07:25:05Z")
Hi! I have a visualization tag cloud, now I want to it to be when an item was clicked it will filter other charts inside the dashboard? Can I Do that? --- ## [How to correlate events in ES](https://discuss.elastic.co/t/how-to-correlate-events-in-es/87307)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 9:34pm UTC](https://discuss.elastic.co/t/how-to-correlate-events-in-es/87307 "2017-06-13T21:34:26Z")
I want to correlate events in IIS and IDS logs so that I can get the client IPs that exist in both log types in which each matches certain conditions (hits admin.aspx with 200 response code in IIS and generates critical … --- ## [Elastic process dies immediately after startup](https://discuss.elastic.co/t/elastic-process-dies-immediately-after-startup/58539)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 5\ **Last updated:** [April 17, 2017, 1:28pm UTC](https://discuss.elastic.co/t/elastic-process-dies-immediately-after-startup/58539 "2017-04-17T13:28:49Z")
I've got a data node (2.3.4) that once fired up dies almost immediately with the following in the log file \[admin@rfdesdata2 logs\]$ tail -1000lf ./rfd-performance.log \[2016-08-21 17:33:38,278\]\[DEBUG\]\[bootstrap … --- ## [Timestamps stored as seconds since Unix epoch](https://discuss.elastic.co/t/timestamps-stored-as-seconds-since-unix-epoch/22971)
**Author:** [@Jean\_Marc\_Saffroy](https://discuss.elastic.co/u/Jean_Marc_Saffroy)\ **Replies:** 5\ **Last updated:** [March 31, 2015, 6:58am UTC](https://discuss.elastic.co/t/timestamps-stored-as-seconds-since-unix-epoch/22971 "2015-03-31T06:58:20Z")
Hi all, Not sure what I'm doing wrong, but I couldn't find a way to store my docs with timestamps as seconds since the Unix epoch and query them properly. I have my date/time field mapped like this: "start\_time… --- ## [Active - Active Cross Cluster Replication](https://discuss.elastic.co/t/active-active-cross-cluster-replication/306298)
**Author:** [@cagdasalagoz](https://discuss.elastic.co/u/cagdasalagoz)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 6:30am UTC](https://discuss.elastic.co/t/active-active-cross-cluster-replication/306298 "2022-06-09T06:30:03Z")
Hello World! I am trying to come up with a configuration for disaster recovery for our elastic stack. We have two data-centers(DC1 and DC2) in separate cities and both will be up and running at the same time. If a prob… --- ## [Permission issue](https://discuss.elastic.co/t/permission-issue/123921)
**Author:** [@Padmapriya](https://discuss.elastic.co/u/Padmapriya)\ **Replies:** 4\ **Last updated:** [March 15, 2018, 2:49pm UTC](https://discuss.elastic.co/t/permission-issue/123921 "2018-03-15T14:49:46Z")
Hi , I am learning kibana and xpack. I have installed free version of ES,kibana and xpack and also done the security settings like username and password. Now am facing permission issues in kibana. Before installing xpa… --- ## [Why does ttf have different values for same term in same index?](https://discuss.elastic.co/t/why-does-ttf-have-different-values-for-same-term-in-same-index/74118)
**Author:** [@David\_Steiner](https://discuss.elastic.co/u/David_Steiner)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 7:16pm UTC](https://discuss.elastic.co/t/why-does-ttf-have-different-values-for-same-term-in-same-index/74118 "2017-02-07T19:16:12Z")
using the termvectors endpoint, I get two different values for ttf for the same term. For doc #1, I get: "death": { "doc\_freq": 2069, "ttf": 14447, "term\_freq": 42 … Document #2 in the… --- ## [Zlib::GzipFile::Error: not in gzip format with input file codec =\> "gzip\_lines"](https://discuss.elastic.co/t/zlib-not-in-gzip-format-with-input-file-codec-gzip-lines/239334)
**Author:** [@jdelouche](https://discuss.elastic.co/u/jdelouche)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 3:14pm UTC](https://discuss.elastic.co/t/zlib-not-in-gzip-format-with-input-file-codec-gzip-lines/239334 "2020-06-30T15:14:46Z")
Hi, I am not able to use the logstash-codec-gzip\_lines plugin because it tells me that .gz files are not in gzip format, but if I check the file I find no specific issue: gunzip -tv sl\_trace.trace.gz sl\_trace.trace.gz:… --- ## [Mapper\_parsing\_exception error](https://discuss.elastic.co/t/mapper-parsing-exception-error/334447)
**Author:** [@Ruwi](https://discuss.elastic.co/u/Ruwi)\ **Replies:** 6\ **Last updated:** [May 31, 2023, 2:01pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-error/334447 "2023-05-31T14:01:26Z")
Hi all, I create indexes on a daily basis using fluentd in Elasticsearch. I don't do any mapping on elasticsearch side. After a while, the related index could not be created in Elasticsearch and I got the following erro… --- ## [Scripts for fix unassigned shards](https://discuss.elastic.co/t/scripts-for-fix-unassigned-shards/314019)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 6\ **Last updated:** [September 12, 2022, 1:20am UTC](https://discuss.elastic.co/t/scripts-for-fix-unassigned-shards/314019 "2022-09-12T01:20:30Z")
Hello Can You point me out what's wrong in below short script #!/bin/bash NODE="es\_data\_1" IFS=$'\\n' for line in $(curl -u elastic:pass 'http://10.220.111.200:9200/\_cat/shards' | fgrep UNASSIGNED); do INDEX=$(echo $l… --- ## [How to different syslog in the same port?](https://discuss.elastic.co/t/how-to-different-syslog-in-the-same-port/295134)
**Author:** [@baalchina](https://discuss.elastic.co/u/baalchina)\ **Replies:** 6\ **Last updated:** [January 23, 2022, 3:22pm UTC](https://discuss.elastic.co/t/how-to-different-syslog-in-the-same-port/295134 "2022-01-23T15:22:24Z")
Hi all, I have many network devices, I forward their syslog to a logstash server, and then to elastisearch. In logstash, I start many ports, such 514,515,516... and each port to different log types, and when output to e… --- ## [Visualized precision doesn't match field precision](https://discuss.elastic.co/t/visualized-precision-doesnt-match-field-precision/27299)
**Author:** [@hughesm02](https://discuss.elastic.co/u/hughesm02)\ **Replies:** 6\ **Last updated:** [August 18, 2015, 3:58pm UTC](https://discuss.elastic.co/t/visualized-precision-doesnt-match-field-precision/27299 "2015-08-18T15:58:37Z")
I have a field that I'd like to visualize to 3 decimal points. In Settings\>Indices I set the format of the field to "Number" with the default format "0,0.\[000\]". In Discover I see the events to the expected precision … --- ## [Parquet Format Output to S3](https://discuss.elastic.co/t/parquet-format-output-to-s3/216273)
**Author:** [@stranjer](https://discuss.elastic.co/u/stranjer)\ **Replies:** 1\ **Last updated:** [February 17, 2020, 5:08pm UTC](https://discuss.elastic.co/t/parquet-format-output-to-s3/216273 "2020-02-17T17:08:30Z")
Is there a way to have Logstash output to an S3 bucket in Parquet format, preferably using Snappy compression? I see there is an Avro codec but not Parquet one, and a Webhdfs output plugin that allows Snappy compression… --- ## [Elasticsearch wont start](https://discuss.elastic.co/t/elasticsearch-wont-start/142199)
**Author:** [@Timshs](https://discuss.elastic.co/u/Timshs)\ **Replies:** 8\ **Last updated:** [August 24, 2018, 1:30pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start/142199 "2018-08-24T13:30:54Z")
Hi I'm having a single node running ES but it wont start suddently. Logs showing: SYSLOG: Jul 30 13:53:49 rg-app-prod-elk kibana\[1495\]: {"type":"log","@timestamp":"2018-07-30T13:53:49Z","tags":\["warning","elasticsearc… --- ## [How to diagnose long index creation times](https://discuss.elastic.co/t/how-to-diagnose-long-index-creation-times/35509)
**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\ **Replies:** 3\ **Last updated:** [November 29, 2015, 12:56am UTC](https://discuss.elastic.co/t/how-to-diagnose-long-index-creation-times/35509 "2015-11-29T00:56:09Z")
Hi Folks, I have several clusters, all of which show the same issue in that index creation (and deletion) takes minutes. What are the best places to look to understand why shard initialization/allocation is taking so l… --- ## [ES Crash](https://discuss.elastic.co/t/es-crash/12662)
**Author:** [@DJP](https://discuss.elastic.co/u/DJP)\ **Replies:** 3\ **Last updated:** [July 5, 2013, 3:48pm UTC](https://discuss.elastic.co/t/es-crash/12662 "2013-07-05T15:48:06Z")
Hello, I'm experiencing crash with ES about 1m30 to 30 min after ES starts with differents versions. I tried : ES 19.9 + OpenJDK 1.6 ; ES 19.12 + OpenJDK 1.6 ; ES 19.12 + OracleJava 1.7 ; ES 20.6 + OracleJava 1.7 ; E… --- ## [Winlogbeat起動時にエラー](https://discuss.elastic.co/t/winlogbeat/221349)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 7:54am UTC](https://discuss.elastic.co/t/winlogbeat/221349 "2020-03-02T07:54:40Z")
winlogbeatをwindows10で起動しようとするとエラーになります。 解消方法などございましたらご教授いただけると嬉しいです。 powershellでStart-Serviceコマンド実行時に、 Start-Service : 次のエラーのため、サービス 'winlogbeat (winlogbeat)' を開始できません: '.' コンピューター で winlogbeat サービスを開けません。 発生場所 行:1… --- ## [Mutate a Nested Field](https://discuss.elastic.co/t/mutate-a-nested-field/231954)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 5\ **Last updated:** [May 15, 2020, 7:28am UTC](https://discuss.elastic.co/t/mutate-a-nested-field/231954 "2020-05-15T07:28:19Z")
Hi there, I have an index that looks like so: { "\_index": "ec2\_logs-index-2020.05.11", "\_type": "\_doc", "\_id": "V3LAAnIBk2krYRHTuxCC", "\_version": 1, "\_score": null, "\_source": { "owner": "104115521938"… --- ## [Testing two nodes on Local (solved)](https://discuss.elastic.co/t/testing-two-nodes-on-local-solved/24352)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 5\ **Last updated:** [June 26, 2015, 7:26am UTC](https://discuss.elastic.co/t/testing-two-nodes-on-local-solved/24352 "2015-06-26T07:26:32Z")
Has anyone run into the trouble of starting up 2 ES instances? They both want to be masters on the same machine. --- ## [Listing all values of one field](https://discuss.elastic.co/t/listing-all-values-of-one-field/172784)
**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\ **Replies:** 4\ **Last updated:** [March 20, 2019, 9:01am UTC](https://discuss.elastic.co/t/listing-all-values-of-one-field/172784 "2019-03-20T09:01:34Z")
Hello, I have a big index (in fact many: one per day) with a field "id". I would like to know each value that this field has. The classical answer is : { "size": 0, "aggs": { "2": { "terms": { "fi… --- ## [Oracle DB alert log config error on Logstash 6.4](https://discuss.elastic.co/t/oracle-db-alert-log-config-error-on-logstash-6-4/151995)
**Author:** [@sandeep2](https://discuss.elastic.co/u/sandeep2)\ **Replies:** 7\ **Last updated:** [October 15, 2018, 9:44am UTC](https://discuss.elastic.co/t/oracle-db-alert-log-config-error-on-logstash-6-4/151995 "2018-10-15T09:44:51Z")
Sending Logstash logs to D:/Hexa\_Software/ELK/logstash-6.4.2/logs which is now configured via log4j2.properties \[2018-10-11T11:51:02,241\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file becau… --- ## [Elasticsearch's action.auto\_create\_index setting impact on Kibana](https://discuss.elastic.co/t/elasticsearchs-action-auto-create-index-setting-impact-on-kibana/117701)
**Author:** [@pri](https://discuss.elastic.co/u/pri)\ **Replies:** 2\ **Last updated:** [January 31, 2018, 2:29am UTC](https://discuss.elastic.co/t/elasticsearchs-action-auto-create-index-setting-impact-on-kibana/117701 "2018-01-31T02:29:34Z")
Hi, We are on Kibana 6.1 and ES 6.1. In one of our ES production clusters, we have action.auto\_create\_index setting as false. And when I try to create a new index pattern on Kibana, it throws an error saying that this p… [Previous page](https://discuss.elastic.co/top.md?page=677&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=679&per_page=50&period=all)