# Top

**URL:** https://discuss.elastic.co/top.md?page=684&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 685

---

## [Mapper of different type, current\_type \[boolean\], merged\_type \[ObjectMapper\] - Elasticsearch bulk import](https://discuss.elastic.co/t/mapper-of-different-type-current-type-boolean-merged-type-objectmapper-elasticsearch-bulk-import/123001)

<div class="topic-metadata">

**Author:** [@Abhilash\_Sathe](https://discuss.elastic.co/u/Abhilash_Sathe)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 6:07am UTC](https://discuss.elastic.co/t/mapper-of-different-type-current-type-boolean-merged-type-objectmapper-elasticsearch-bulk-import/123001 "2018-03-08T06:07:15Z")

</div>

I'm currently using Elasticsearch's \_bulk API to import a JSON dump. There is a field that has a dynamic data type, i.e. a Boolean type and an Object type. Due to this, while importing the dump, elasticsearch throws an…

---

## [MSSQL monitoring with Metricbeat?](https://discuss.elastic.co/t/mssql-monitoring-with-metricbeat/252733)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 5\
**Last updated:** [October 22, 2020, 10:12am UTC](https://discuss.elastic.co/t/mssql-monitoring-with-metricbeat/252733 "2020-10-22T10:12:59Z")

</div>

Hi, Note: - Using ELK 7.9.2 in Debian 10 - MS SQL Server 2016 SP2 Standard in Windows Server 2012 I am trying to monitor my MS SQL Server with Elasticsearch and visualize the data in Kibana. After some research I fou…

---

## [Unable to see my data in the Kibana](https://discuss.elastic.co/t/unable-to-see-my-data-in-the-kibana/67267)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 5\
**Last updated:** [December 5, 2016, 1:36pm UTC](https://discuss.elastic.co/t/unable-to-see-my-data-in-the-kibana/67267 "2016-12-05T13:36:42Z")

</div>

I have lot of data in the elasticsearch. I can see my index via the elasticsearch-head plugin, but I am not able to see that in the kibana. Maybe the kibana isn't connecting to my elasticsearch, or elastic search doesn…

---

## [Nested query and highlight fields](https://discuss.elastic.co/t/nested-query-and-highlight-fields/4949)

<div class="topic-metadata">

**Author:** [@Ellery\_Crane\_2](https://discuss.elastic.co/u/Ellery_Crane_2)\
**Replies:** 5\
**Last updated:** [July 27, 2011, 4:45am UTC](https://discuss.elastic.co/t/nested-query-and-highlight-fields/4949 "2011-07-27T04:45:53Z")

</div>

I've got my nested query working as intended, but no highlight fragments are generated on a hit. I assume that this is because each nested document is indexed separately from the root document, even if I have include\_…

---

## [How to configure different logs from different servers](https://discuss.elastic.co/t/how-to-configure-different-logs-from-different-servers/141294)

<div class="topic-metadata">

**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\
**Replies:** 4\
**Last updated:** [July 24, 2018, 9:25am UTC](https://discuss.elastic.co/t/how-to-configure-different-logs-from-different-servers/141294 "2018-07-24T09:25:12Z")

</div>

Hello Team, I am having a little bit confusing concept which I want to clear now. I have separate Server for separate operations and tools such as:- IP\_ADDR 1: Apache / nginx IP\_ADDR 2: MySQL IP\_ADDR 3: Cassandra No…

---

## [Mapping json with logstash](https://discuss.elastic.co/t/mapping-json-with-logstash/106228)

<div class="topic-metadata">

**Author:** [@citanionarrei](https://discuss.elastic.co/u/citanionarrei)\
**Replies:** 4\
**Last updated:** [November 3, 2017, 7:55am UTC](https://discuss.elastic.co/t/mapping-json-with-logstash/106228 "2017-11-03T07:55:07Z")

</div>

hi friends I'm starting now to use elk and for this reason I'm not very experienced. I do not understand where and how to create a template on logstash to map my json. someone can help me with a practical example. I ha…

---

## [\[kibana 7.13\]can not support the --allow-root when using the kibana-keystore](https://discuss.elastic.co/t/kibana-7-13-can-not-support-the-allow-root-when-using-the-kibana-keystore/278207)

<div class="topic-metadata">

**Author:** [@harry\_010](https://discuss.elastic.co/u/harry_010)\
**Replies:** 6\
**Last updated:** [July 8, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-13-can-not-support-the-allow-root-when-using-the-kibana-keystore/278207 "2021-07-08T18:08:26Z")

</div>

when I used the following command to create the Keystore, I got the following error. /usr/share/kibana/bin/kibana-keystore create --allow-root kibana.keystore located in the data folder is deprecated. Future versions …

---

## [How to display the documents present in .security index?](https://discuss.elastic.co/t/how-to-display-the-documents-present-in-security-index/59602)

<div class="topic-metadata">

**Author:** [@sampathkumar23](https://discuss.elastic.co/u/sampathkumar23)\
**Replies:** 6\
**Last updated:** [September 6, 2016, 3:05pm UTC](https://discuss.elastic.co/t/how-to-display-the-documents-present-in-security-index/59602 "2016-09-06T15:05:31Z")

</div>

When I try to fetch all the documents in .security index, getting 403 even with admin user. http://localhost:9200/.security/\_search {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[indices:data/…

---

## [ELK error](https://discuss.elastic.co/t/elk-error/110863)

<div class="topic-metadata">

**Author:** [@SunGirl](https://discuss.elastic.co/u/SunGirl)\
**Replies:** 3\
**Last updated:** [December 11, 2017, 7:29pm UTC](https://discuss.elastic.co/t/elk-error/110863 "2017-12-11T19:29:32Z")

</div>

Hi! I added a new log file to logstash (the following lines to logstash.conf :slight\_smile: Input section input { ... VirusTotal file { path =\> \["/data/vt/log.json"\] codec =\> json type =\> "VirusTotal" } } Filter…

---

## [Logstash conditional "in" with single element list not working](https://discuss.elastic.co/t/logstash-conditional-in-with-single-element-list-not-working/58807)

<div class="topic-metadata">

**Author:** [@Thomas\_Larsson\_Kron](https://discuss.elastic.co/u/Thomas_Larsson_Kron)\
**Replies:** 2\
**Last updated:** [August 27, 2016, 2:45pm UTC](https://discuss.elastic.co/t/logstash-conditional-in-with-single-element-list-not-working/58807 "2016-08-27T14:45:06Z")

</div>

Hello. I'm using logstash 2.1.1 and I'm encountering a problem with using the "in" conditional expression to filter out log events that are not of a certain level. If I have more than one element in the list, everyth…

---

## [Searching on special characters](https://discuss.elastic.co/t/searching-on-special-characters/10522)

<div class="topic-metadata">

**Author:** [@andrea\_crotti](https://discuss.elastic.co/u/andrea_crotti)\
**Replies:** 2\
**Last updated:** [January 29, 2013, 10:41am UTC](https://discuss.elastic.co/t/searching-on-special-characters/10522 "2013-01-29T10:41:36Z")

</div>

I'm a bit lost with a couple of ES string issues. So the idea is that I receive a search string, and I would like to be able to search also on special characters. I've found out that ES strips out all the special c…

---

## [Logstash Issue: Got response code '401' contacting Elasticsearch at URL 'http://localhost:9200/'](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395)

<div class="topic-metadata">

**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\
**Replies:** 1\
**Last updated:** [January 14, 2022, 5:08pm UTC](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395 "2022-01-14T17:08:34Z")

</div>

while trying to run logstash 7.16.3 with this current version of Elasticsearch 8.1.0 . I get the following error. {:url=\>"http://localhost:9200/", :exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResp…

---

## [Events Per Second Visualization](https://discuss.elastic.co/t/events-per-second-visualization/270129)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 14, 2021, 5:59pm UTC](https://discuss.elastic.co/t/events-per-second-visualization/270129 "2021-04-14T17:59:10Z")

</div>

I'm trying to create a metric for events per second, but not really sure how to do it. I saw one example that seems to get close, but when I manually do the math, it's a little off. The visualization configuration belo…

---

## [How to change userid in docker contianer for bind mounting config / data?](https://discuss.elastic.co/t/how-to-change-userid-in-docker-contianer-for-bind-mounting-config-data/173097)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 29, 2019, 7:55am UTC](https://discuss.elastic.co/t/how-to-change-userid-in-docker-contianer-for-bind-mounting-config-data/173097 "2019-03-29T07:55:32Z")

</div>

Hi, the container for logstash, elasticsearch and kibana are using user:group 1000:1000 inside of the container. If I would like to use bind mounts to link in custom configuration or the data folder, I need to give use…

---

## [Elasticsearch - Garbage Collection Issues](https://discuss.elastic.co/t/elasticsearch-garbage-collection-issues/166230)

<div class="topic-metadata">

**Author:** [@Timothy\_Pangburn](https://discuss.elastic.co/u/Timothy_Pangburn)\
**Replies:** 5\
**Last updated:** [January 30, 2019, 2:17pm UTC](https://discuss.elastic.co/t/elasticsearch-garbage-collection-issues/166230 "2019-01-30T14:17:28Z")

</div>

Our Elasticsearch cluster is experiencing quite a few issues with garbage collection and "stop the world" events. My questions. Is there any benefit from using Oracle Java vs the OpenJDK? I am using the OpenJDK. Can …

---

## [Logstash with multiple input and output](https://discuss.elastic.co/t/logstash-with-multiple-input-and-output/257524)

<div class="topic-metadata">

**Author:** [@ck\_7](https://discuss.elastic.co/u/ck_7)\
**Replies:** 4\
**Last updated:** [December 3, 2020, 3:18pm UTC](https://discuss.elastic.co/t/logstash-with-multiple-input-and-output/257524 "2020-12-03T15:18:56Z")

</div>

Help me to understand the below logstash config. Trying to configure multiples input and output but index shows only one. Here my config: There is no Error: logstash runs but no index name for the storage. only network…

---

## [Find what instance elasticsearch kibana is connected to](https://discuss.elastic.co/t/find-what-instance-elasticsearch-kibana-is-connected-to/131272)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 2\
**Last updated:** [May 13, 2018, 7:46am UTC](https://discuss.elastic.co/t/find-what-instance-elasticsearch-kibana-is-connected-to/131272 "2018-05-13T07:46:40Z")

</div>

Just a quick question: Is there a way to find out to what instance of elasticsearch kibana is listening to? I mean other than checking the kibana.yml file. Is there a way, for example, to see this from kibana terminal? O…

---

## [How can I use arcDistance in 6.7 painless](https://discuss.elastic.co/t/how-can-i-use-arcdistance-in-6-7-painless/191763)

<div class="topic-metadata">

**Author:** [@111183](https://discuss.elastic.co/u/111183)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 5:31pm UTC](https://discuss.elastic.co/t/how-can-i-use-arcdistance-in-6-7-painless/191763 "2019-07-26T17:31:10Z")

</div>

How can I use arcDistance in 6.7 painless? doc\['location'\].arcDistanceInKm(37.495359, 127.033065) "type": "illegal\_argument\_exception", "reason": "dynamic method \[org.elasticsearch.index.fielddata.ScriptDoc…

---

## [How can i handle nil values in logstash](https://discuss.elastic.co/t/how-can-i-handle-nil-values-in-logstash/83074)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 2:59pm UTC](https://discuss.elastic.co/t/how-can-i-handle-nil-values-in-logstash/83074 "2017-04-28T14:59:49Z")

</div>

I am using csv as input as shown below firstname lastname dinesh angari rajesh mahesh rangu and i am using http as output and below is my filter mutate {add\_field…

---

## ["An internal server error occurred" when looking at Uptime monitors](https://discuss.elastic.co/t/an-internal-server-error-occurred-when-looking-at-uptime-monitors/285411)

<div class="topic-metadata">

**Author:** [@Tadija](https://discuss.elastic.co/u/Tadija)\
**Replies:** 5\
**Last updated:** [October 1, 2021, 11:27am UTC](https://discuss.elastic.co/t/an-internal-server-error-occurred-when-looking-at-uptime-monitors/285411 "2021-10-01T11:27:12Z")

</div>

I have the latest version of elastic cloud deployment (v7.15.0). I have 3 instances of heartbeat v7.15.0 running on 3 separate machines pinging same websites and all are sending to same index. Their heartbeat.yml files …

---

## [Curator snapshots with TransportError](https://discuss.elastic.co/t/curator-snapshots-with-transporterror/55887)

<div class="topic-metadata">

**Author:** [@hunterchris](https://discuss.elastic.co/u/hunterchris)\
**Replies:** 6\
**Last updated:** [August 3, 2016, 8:32am UTC](https://discuss.elastic.co/t/curator-snapshots-with-transporterror/55887 "2016-08-03T08:32:04Z")

</div>

Hello, I've installed curator 3.5.1 on a ES 1.4.2; I'm running daily snapshots on all indices and from time to time I have 503 errors saying there's another snapshot already running (when the only task is the one I launc…

---

## [Filebeat versions from 7.0 - 7.8 fail to create alias field mappings for majority of modules](https://discuss.elastic.co/t/filebeat-versions-from-7-0-7-8-fail-to-create-alias-field-mappings-for-majority-of-modules/242874)

<div class="topic-metadata">

**Author:** [@b0le](https://discuss.elastic.co/u/b0le)\
**Replies:** 4\
**Last updated:** [July 29, 2020, 9:32am UTC](https://discuss.elastic.co/t/filebeat-versions-from-7-0-7-8-fail-to-create-alias-field-mappings-for-majority-of-modules/242874 "2020-07-29T09:32:26Z")

</div>

Summary: When running Filebeat's 7.8.0 setup command the field mappings for the majority of modules which define mappings of type alias never get created. The alias mappings are missing from export template output as wel…

---

## [Injecting a namespace into helm template](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230)

<div class="topic-metadata">

**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\
**Replies:** 1\
**Last updated:** [September 15, 2021, 9:42am UTC](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230 "2021-09-15T09:42:19Z")

</div>

Our Kubernetes environment is managed by Nirmata, which uses gitops for application deployments. It pulls a yaml file and creates the objects. I use the official Elasticsearch helm chart (https://github.com/elastic/helm…

---

## [Unable to get rule triggered](https://discuss.elastic.co/t/unable-to-get-rule-triggered/317448)

<div class="topic-metadata">

**Author:** [@GUruisaDog](https://discuss.elastic.co/u/GUruisaDog)\
**Replies:** 6\
**Last updated:** [November 10, 2022, 8:53pm UTC](https://discuss.elastic.co/t/unable-to-get-rule-triggered/317448 "2022-11-10T20:53:34Z")

</div>

My current version of ES Security is on 7.16.1. I was trying to setup a threshold rule, and everything goes well. I could see the result from the preview and such. However, after created the rule and activate the rule, n…

---

## [Kiabana completing setup blocked](https://discuss.elastic.co/t/kiabana-completing-setup-blocked/319497)

<div class="topic-metadata">

**Author:** [@ardue](https://discuss.elastic.co/u/ardue)\
**Replies:** 2\
**Last updated:** [December 1, 2022, 3:33pm UTC](https://discuss.elastic.co/t/kiabana-completing-setup-blocked/319497 "2022-12-01T15:33:44Z")

</div>

Hello, I have a problem with kibana, when connecting elasticsearch on kibana, it remains blocked on "completing setup" Here is the error in the log Action failed with '\[index\_not\_green\_timeout\] Timeout waiting for t…

---

## [Default tags/labels on configuration](https://discuss.elastic.co/t/default-tags-labels-on-configuration/173406)

<div class="topic-metadata">

**Author:** [@fredgalvao](https://discuss.elastic.co/u/fredgalvao)\
**Replies:** 8\
**Last updated:** [March 26, 2019, 7:13am UTC](https://discuss.elastic.co/t/default-tags-labels-on-configuration/173406 "2019-03-26T07:13:54Z")

</div>

Kibana version: 6.6.1 Elasticsearch version: 6.6.1 APM Server version: 6.6.1 APM Agent language and version: java-agent-1.4.0 Issue/Question Is there a way or plan for it to be possible to add default tags/labels…

---

## [Role Mapping API not working](https://discuss.elastic.co/t/role-mapping-api-not-working/139298)

<div class="topic-metadata">

**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\
**Replies:** 3\
**Last updated:** [July 10, 2018, 2:03pm UTC](https://discuss.elastic.co/t/role-mapping-api-not-working/139298 "2018-07-10T14:03:33Z")

</div>

I have configured X-Pack with LDAP in my ES Cluster. I am able to create the roles and role mappings using APIs. But role mapping is not taking effect in ES Cluster. It is working only If I update the role\_mapping,yml …

---

## [Failed action with response of 400, dropping action: \["index"](https://discuss.elastic.co/t/failed-action-with-response-of-400-dropping-action-index/25013)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [July 7, 2015, 10:41am UTC](https://discuss.elastic.co/t/failed-action-with-response-of-400-dropping-action-index/25013 "2015-07-07T10:41:31Z")

</div>

Hello, I have configured LS indexer output as below: output { elasticsearch { host =\> "10.211.10.32" cluster =\> "presit-elasticsearch" node\_name =\> "presit-data-Node-2" index =\> "%{type}-%{+YYYY.MM.dd}" …

---

## [Cluster locks up](https://discuss.elastic.co/t/cluster-locks-up/13514)

<div class="topic-metadata">

**Author:** [@jon\_spalding1](https://discuss.elastic.co/u/jon_spalding1)\
**Replies:** 8\
**Last updated:** [September 23, 2013, 10:35am UTC](https://discuss.elastic.co/t/cluster-locks-up/13514 "2013-09-23T10:35:15Z")

</div>

Hi, We've been having a problem with our production ElasticSearch cluster for a while now which has caused some downtime and we're struggling to get to the bottom of it. The problem is that the cluster "locks …

---

## [I get this error when i restart my filebeat in ELK](https://discuss.elastic.co/t/i-get-this-error-when-i-restart-my-filebeat-in-elk/80109)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 5\
**Last updated:** [March 28, 2017, 12:22pm UTC](https://discuss.elastic.co/t/i-get-this-error-when-i-restart-my-filebeat-in-elk/80109 "2017-03-28T12:22:05Z")

</div>

sudo service filebeat restart \* Restarting Sends log files to Logstash or directly to Elasticsearch. filebeat Loading config file error: YA…

---

## [Logstash crash after \[FATAL\]\[logstash.runner\] An unexpected error occurred!](https://discuss.elastic.co/t/logstash-crash-after-fatal-logstash-runner-an-unexpected-error-occurred/192069)

<div class="topic-metadata">

**Author:** [@emiliano7437](https://discuss.elastic.co/u/emiliano7437)\
**Replies:** 0\
**Last updated:** [July 24, 2019, 3:10pm UTC](https://discuss.elastic.co/t/logstash-crash-after-fatal-logstash-runner-an-unexpected-error-occurred/192069 "2019-07-24T15:10:28Z")

</div>

Hello. I´m new with ELK. I have an ELK cluster with the following: Node1: elasticsearch, logstash, kibana || 32GB RAM || -Xms12g, -Xmx12g Node2: elasticsearch, logstash || 32GB RAM || -Xms12g, -Xmx12g Node3,4,5: maste…

---

## [How to set geo\_point type from csv files using logstash?](https://discuss.elastic.co/t/how-to-set-geo-point-type-from-csv-files-using-logstash/236182)

<div class="topic-metadata">

**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\
**Replies:** 7\
**Last updated:** [June 13, 2020, 1:59am UTC](https://discuss.elastic.co/t/how-to-set-geo-point-type-from-csv-files-using-logstash/236182 "2020-06-13T01:59:55Z")

</div>

Hi, I'm trying to set geo\_point type from csv files which have latitude and longitude using logstash. But I really don't know how to convert latitude and longitude to location(geo\_point type). I'm using logstash for this…

---

## [Nested object with arrays , best practice](https://discuss.elastic.co/t/nested-object-with-arrays-best-practice/9378)

<div class="topic-metadata">

**Author:** [@samuel\_merlet](https://discuss.elastic.co/u/samuel_merlet)\
**Replies:** 7\
**Last updated:** [October 17, 2012, 3:47pm UTC](https://discuss.elastic.co/t/nested-object-with-arrays-best-practice/9378 "2012-10-17T15:47:43Z")

</div>

Hi, I have a quite complex model to put as a document . Here is the mapping { "id" : {"type" : "integer" }, "public\_name": {"type" : "string" ,"store" : "no", "index":"no" }, "description": {"type"…

---

## [Recently added basic license, can’t access Kibana](https://discuss.elastic.co/t/recently-added-basic-license-can-t-access-kibana/75564)

<div class="topic-metadata">

**Author:** [@MatthewHartz](https://discuss.elastic.co/u/MatthewHartz)\
**Replies:** 6\
**Last updated:** [February 18, 2017, 7:31pm UTC](https://discuss.elastic.co/t/recently-added-basic-license-can-t-access-kibana/75564 "2017-02-18T19:31:31Z")

</div>

Reposting topic from https://discuss.elastic.co/t/recently-added-basic-license-cant-access-kibana/70170. Hi, Today I added a basic license because my trial shield expired. I can successfully access elasticsearch withou…

---

## [Logstash output plugin data changes when stored to file as compared to standard output stdout{ }](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186)

<div class="topic-metadata">

**Author:** [@brbhanushali](https://discuss.elastic.co/u/brbhanushali)\
**Replies:** 3\
**Last updated:** [November 7, 2022, 1:50pm UTC](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186 "2022-11-07T13:50:59Z")

</div>

Hello All, I am new to logstash and working on a task to get syslogs from GitHub to Logstash to Elastic Search. I am facing a strange problem in Logstash. To understand the format that is coming on to input port of th…

---

## [String split](https://discuss.elastic.co/t/string-split/108117)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 2\
**Last updated:** [November 18, 2017, 1:22pm UTC](https://discuss.elastic.co/t/string-split/108117 "2017-11-18T13:22:02Z")

</div>

I use the following syntax to split a string...but its not working... filter { split { field =\> \["title"," "\] } } But its not working......I want to split a string and want to store as a list. For example: He is a…

---

## [Per User Kibana Index](https://discuss.elastic.co/t/per-user-kibana-index/26015)

<div class="topic-metadata">

**Author:** [@Pranav\_Sathyanarayan](https://discuss.elastic.co/u/Pranav_Sathyanarayan)\
**Replies:** 2\
**Last updated:** [July 23, 2015, 1:44pm UTC](https://discuss.elastic.co/t/per-user-kibana-index/26015 "2015-07-23T13:44:30Z")

</div>

Hi Everyone, I am new to the community and I am attempting to extend some functionality for my product into Kibana. I currently have Kibana setup with Elasticsearch, where me end users will each have their own pre-made…

---

## [Millions of documents -\> add vs. update \[aspect of performance\]](https://discuss.elastic.co/t/millions-of-documents-add-vs-update-aspect-of-performance/47763)

<div class="topic-metadata">

**Author:** [@Dom\_Sie](https://discuss.elastic.co/u/Dom_Sie)\
**Replies:** 3\
**Last updated:** [April 20, 2016, 1:01pm UTC](https://discuss.elastic.co/t/millions-of-documents-add-vs-update-aspect-of-performance/47763 "2016-04-20T13:01:15Z")

</div>

Hi, when a ES Index stores millions \[lots of millions\] documents \[Es Version 1.4.4; 5 primary shards with 1 replica shard per index\] and you have many document/data updates in short periods of time: Would you make an …

---

## [Filebeat multiline filter with autodiscover](https://discuss.elastic.co/t/filebeat-multiline-filter-with-autodiscover/217432)

<div class="topic-metadata">

**Author:** [@ztasre](https://discuss.elastic.co/u/ztasre)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 3:49pm UTC](https://discuss.elastic.co/t/filebeat-multiline-filter-with-autodiscover/217432 "2020-02-04T15:49:00Z")

</div>

Filebeat version: 7.5.2 I am trying to get my application running on Kubernetes with the ELK stack to do logging. The application is written in Java so I need to be able to able to ingest multiline stack traces as a sin…

---

## [Custom y axis interval](https://discuss.elastic.co/t/custom-y-axis-interval/99361)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 4:50am UTC](https://discuss.elastic.co/t/custom-y-axis-interval/99361 "2017-09-06T04:50:17Z")

</div>

I am using Kibana 5.3 and Is there a way i can set y axis as custom interval in line chart and bar charts Example: The time field of format HH:mm:ss in y axis is to be displayed as 1:00,2:00(that is custom interval of …

---

## [Get documents with a location + radius that contain a provided geopoint](https://discuss.elastic.co/t/get-documents-with-a-location-radius-that-contain-a-provided-geopoint/57279)

<div class="topic-metadata">

**Author:** [@MatthewHartz](https://discuss.elastic.co/u/MatthewHartz)\
**Replies:** 4\
**Last updated:** [August 5, 2016, 4:21pm UTC](https://discuss.elastic.co/t/get-documents-with-a-location-radius-that-contain-a-provided-geopoint/57279 "2016-08-05T16:21:25Z")

</div>

Here is a simple query GET /sen/operatinglocation/\_search { "query": { "filtered" : { "query" : { "match\_all" : {} }, "filter" : { "geo\_distance" : { "distance" : "20k…

---

## [Convert ip-address of long type to the Dotted decimal notation](https://discuss.elastic.co/t/convert-ip-address-of-long-type-to-the-dotted-decimal-notation/43972)

<div class="topic-metadata">

**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\
**Replies:** 4\
**Last updated:** [March 10, 2016, 1:58pm UTC](https://discuss.elastic.co/t/convert-ip-address-of-long-type-to-the-dotted-decimal-notation/43972 "2016-03-10T13:58:43Z")

</div>

hi, I want use logstash to write the log that contains the ip of long type to the elasticsearch. how can i convert the long type ip to the Dotted decimal notation in the logstash

---

## [Winlogbeat does not have a proper timestamp field](https://discuss.elastic.co/t/winlogbeat-does-not-have-a-proper-timestamp-field/60513)

<div class="topic-metadata">

**Author:** [@pramod\_kumar](https://discuss.elastic.co/u/pramod_kumar)\
**Replies:** 5\
**Last updated:** [September 15, 2016, 2:03pm UTC](https://discuss.elastic.co/t/winlogbeat-does-not-have-a-proper-timestamp-field/60513 "2016-09-15T14:03:17Z")

</div>

Winlogbeat doesnot have a Proper timestamp filed, Please help me with this issue. thanks pramod

---

## [Setting heap size at docker-compose](https://discuss.elastic.co/t/setting-heap-size-at-docker-compose/156326)

<div class="topic-metadata">

**Author:** [@rancor](https://discuss.elastic.co/u/rancor)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 5:12pm UTC](https://discuss.elastic.co/t/setting-heap-size-at-docker-compose/156326 "2018-11-12T17:12:20Z")

</div>

At a docker-compose for an ELK stack, I have set up ES like this: elasticsearch: image: elasticsearch:latest command: elasticsearch environment: - "ES\_JAVA\_OPTS=-Xms3g -Xmx3g" volumes: - ./elasticsearch/…

---

## [Root mapping definition has unsupported parameters (mapper\_parsing\_exception)](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-mapper-parsing-exception/95399)

<div class="topic-metadata">

**Author:** [@Sheryar\_Ahmed](https://discuss.elastic.co/u/Sheryar_Ahmed)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 6:44pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-mapper-parsing-exception/95399 "2017-08-01T18:44:52Z")

</div>

I am new to elasticsearch and I am stucked in a problem from couple of days. I have tried different solution provided on stackoverflow ES forum and other websites but they didn’t work for me that’s why I am posting this …

---

## [Set username and password for Kibana without using xpack](https://discuss.elastic.co/t/set-username-and-password-for-kibana-without-using-xpack/133101)

<div class="topic-metadata">

**Author:** [@solo](https://discuss.elastic.co/u/solo)\
**Replies:** 2\
**Last updated:** [May 24, 2018, 11:06am UTC](https://discuss.elastic.co/t/set-username-and-password-for-kibana-without-using-xpack/133101 "2018-05-24T11:06:46Z")

</div>

This is my setup: Kibana 6.2.4 Elasticsearch 6.2.4 Filebeat 6.2.4 Logstash 6.2.4 OS: Red Hat Linux I am setting up a basic test environment for testing out the features in Kibana for my organization. I want to hav…

---

## [Parent and sibling pipeline aggregations](https://discuss.elastic.co/t/parent-and-sibling-pipeline-aggregations/120475)

<div class="topic-metadata">

**Author:** [@tomak](https://discuss.elastic.co/u/tomak)\
**Replies:** 1\
**Last updated:** [February 19, 2018, 10:11pm UTC](https://discuss.elastic.co/t/parent-and-sibling-pipeline-aggregations/120475 "2018-02-19T22:11:51Z")

</div>

Reading the doc of Kibana, I don't understand the notion of a parent and sibling pipeline aggregation. Can someone explain this?

---

## [Sorting comblex Array elements with Painless script](https://discuss.elastic.co/t/sorting-comblex-array-elements-with-painless-script/118472)

<div class="topic-metadata">

**Author:** [@DBFBlackbull](https://discuss.elastic.co/u/DBFBlackbull)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 2:46pm UTC](https://discuss.elastic.co/t/sorting-comblex-array-elements-with-painless-script/118472 "2018-02-05T14:46:00Z")

</div>

Hello! I am looking for a way to use Update API with painless script to update the following record. I am using C# and NEST but writing the script as inline so the functionality should be the same. { "name": "Boubl…

---

## [Speedup or remove the smooth scrolling for javascript documentation?](https://discuss.elastic.co/t/speedup-or-remove-the-smooth-scrolling-for-javascript-documentation/117953)

<div class="topic-metadata">

**Author:** [@Leland-Kwong](https://discuss.elastic.co/u/Leland-Kwong)\
**Replies:** 7\
**Last updated:** [February 2, 2018, 1:36am UTC](https://discuss.elastic.co/t/speedup-or-remove-the-smooth-scrolling-for-javascript-documentation/117953 "2018-02-02T01:36:55Z")

</div>

Maybe its just me, but waiting for the scrolling whenever I click a link in the documentation starts to eat up time. This is especially so if the link needs to scroll to the bottom of the list. I feel like it would be a …

---

## [I have a ton of 9200 sessions running](https://discuss.elastic.co/t/i-have-a-ton-of-9200-sessions-running/44862)

<div class="topic-metadata">

**Author:** [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\
**Replies:** 7\
**Last updated:** [March 21, 2016, 10:01pm UTC](https://discuss.elastic.co/t/i-have-a-ton-of-9200-sessions-running/44862 "2016-03-21T22:01:49Z")

</div>

I have lots of these sessions running when I do a netstat -an | grep 9200 tcp 0 0 172.22.17.62:58500 172.22.17.62:9200 TIME\_WAIT tcp 0 0 172.22.17.62:58525 172.22.17.62:9200 …

[Previous page](https://discuss.elastic.co/top.md?page=683&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=685&per_page=50&period=all)
