# Top **URL:** https://discuss.elastic.co/top.md?page=688&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 689 --- ## [Support multiple data sources](https://discuss.elastic.co/t/support-multiple-data-sources/23069)
**Author:** [@Yosi\_Attias](https://discuss.elastic.co/u/Yosi_Attias)\ **Replies:** 3\ **Last updated:** [April 3, 2015, 11:42am UTC](https://discuss.elastic.co/t/support-multiple-data-sources/23069 "2015-04-03T11:42:33Z")
Hi, I am currently using kibana and I really like it for dashboard - but most of my data is in the mssql or more than 3 elastic indexes. I would like to create one dashboard that gets data from mssql and from my o… --- ## [Two node Cluster / Logstash / Kibana4 / Puppet: Unknown Cluster problems](https://discuss.elastic.co/t/two-node-cluster-logstash-kibana4-puppet-unknown-cluster-problems/29410)
**Author:** [@linuxmail](https://discuss.elastic.co/u/linuxmail)\ **Replies:** 6\ **Last updated:** [September 17, 2015, 10:23am UTC](https://discuss.elastic.co/t/two-node-cluster-logstash-kibana4-puppet-unknown-cluster-problems/29410 "2015-09-17T10:23:20Z")
hi, I'm new to Elasticsearch and trying to replace my logserver with two Debian Jessie server. I had everything (Elastic (1.7.2) /Logstash(.5.4-1)/Kibana4 (4.0.1)) running with a single node installation via Puppet man… --- ## [Docker+filebeat cannot get logs](https://discuss.elastic.co/t/docker-filebeat-cannot-get-logs/136071)
**Author:** [@qiao\_tyrant](https://discuss.elastic.co/u/qiao_tyrant)\ **Replies:** 4\ **Last updated:** [June 20, 2018, 7:53am UTC](https://discuss.elastic.co/t/docker-filebeat-cannot-get-logs/136071 "2018-06-20T07:53:42Z")
I am using filebeat 6.3.0. I use the official Dockerfile to create a filebeat docker. But when I run this container, \[docker run xxx/custom\_image\] It only returns \[monitoring\] log/log.go:124 Non-zero metrics in t… --- ## [Disabling certificate verification for watcher emails?](https://discuss.elastic.co/t/disabling-certificate-verification-for-watcher-emails/150719)
**Author:** [@Horaci\_Macias](https://discuss.elastic.co/u/Horaci_Macias)\ **Replies:** 8\ **Last updated:** [October 3, 2018, 4:06pm UTC](https://discuss.elastic.co/t/disabling-certificate-verification-for-watcher-emails/150719 "2018-10-03T16:06:10Z")
Is there any way to disable SSL certificate validation for emails sent through Watcher? I'm having trouble integrating with an SMTP server even after adding the certificate and CA certificate to the truststore. At leas… --- ## [How to restore a seach](https://discuss.elastic.co/t/how-to-restore-a-seach/69210)
**Author:** [@markd](https://discuss.elastic.co/u/markd)\ **Replies:** 8\ **Last updated:** [December 16, 2016, 1:24am UTC](https://discuss.elastic.co/t/how-to-restore-a-seach/69210 "2016-12-16T01:24:45Z")
I deleted "System-stats" search provided with Kibana5 install. Any idea how to re-install it? thanks, MarkD:-) --- ## [Filebeat is not collecting logs from pods/kubernetes](https://discuss.elastic.co/t/filebeat-is-not-collecting-logs-from-pods-kubernetes/299980)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 6:43pm UTC](https://discuss.elastic.co/t/filebeat-is-not-collecting-logs-from-pods-kubernetes/299980 "2022-03-21T18:43:01Z")
Hey, I am using Docker-desktop 4.6.0 (75818) on windows 10 \[version 10.0.19042.1526\], trying to set up Observability in a Kubernetes context, I have two application running (spring boot application + react app) I set up … --- ## [ParserError: Illegal character ((CTRL-CHAR, code 27)): only regular white space (\\r, \\n, \\t) is allowed between tokens](https://discuss.elastic.co/t/parsererror-illegal-character-ctrl-char-code-27-only-regular-white-space-r-n-t-is-allowed-between-tokens/219550)
**Author:** [@Valm1980](https://discuss.elastic.co/u/Valm1980)\ **Replies:** 1\ **Last updated:** [February 17, 2020, 3:05pm UTC](https://discuss.elastic.co/t/parsererror-illegal-character-ctrl-char-code-27-only-regular-white-space-r-n-t-is-allowed-between-tokens/219550 "2020-02-17T15:05:08Z")
Hello, I am trying to filter out a log and drop any entries that have certain IP address, however I am getting an error: \[logstash.filters.json \] Error parsing json {:source=\>"message", :raw=\>"\\e\[32minfo\\e\[39m: 127.0… --- ## [How I can add 3d graph or charts visualization in kibana on windows machine](https://discuss.elastic.co/t/how-i-can-add-3d-graph-or-charts-visualization-in-kibana-on-windows-machine/114792)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 3\ **Last updated:** [January 11, 2018, 4:56am UTC](https://discuss.elastic.co/t/how-i-can-add-3d-graph-or-charts-visualization-in-kibana-on-windows-machine/114792 "2018-01-11T04:56:47Z")
Hello Everyone, I need some help for visualization in kibana. i want to install kibana 3D visualization plugin in kibana version 5.6.4 and 6.1.1 in windows machine i saw one link: https://www.elastic.co/guide/en/kiban… --- ## [How to update/delete indexed documents from ES index using mysql jdbc river](https://discuss.elastic.co/t/how-to-update-delete-indexed-documents-from-es-index-using-mysql-jdbc-river/19134)
**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\ **Replies:** 3\ **Last updated:** [August 9, 2014, 11:23am UTC](https://discuss.elastic.co/t/how-to-update-delete-indexed-documents-from-es-index-using-mysql-jdbc-river/19134 "2014-08-09T11:23:05Z")
Hi, I'm using jdbc mysql river plugin https://github.com/jprante/elasticsearch-river-jdbc for creating ES index. I have been able to index my documents successfully but I'm facing issues in updating/deleting ind… --- ## [Using json\_batch format in http output plugin](https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429)
**Author:** [@HendPro12](https://discuss.elastic.co/u/HendPro12)\ **Replies:** 0\ **Last updated:** [November 27, 2018, 10:30pm UTC](https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429 "2018-11-27T22:30:56Z")
I am using Filebeat to send events to Logstash. Filebeat's internal queue has been configured so that events will be combined into events before being sent to the logstash output. I've modified pipeline.batch.size and … --- ## [Single node with high cpu usage in large number of shards scenario](https://discuss.elastic.co/t/single-node-with-high-cpu-usage-in-large-number-of-shards-scenario/152743)
**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\ **Replies:** 4\ **Last updated:** [October 17, 2018, 2:04pm UTC](https://discuss.elastic.co/t/single-node-with-high-cpu-usage-in-large-number-of-shards-scenario/152743 "2018-10-17T14:04:35Z")
Hi All, In my test environment, I setup a single ES 6.4.1 node, 1 core, 2GB memory (1GB heap). After creating 600 empty indices (without any data and read/write operation), each index has 20 shards, total 12000 shards,… --- ## [Getting Source data in aggregation results](https://discuss.elastic.co/t/getting-source-data-in-aggregation-results/234328)
**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\ **Replies:** 5\ **Last updated:** [June 3, 2020, 7:52am UTC](https://discuss.elastic.co/t/getting-source-data-in-aggregation-results/234328 "2020-06-03T07:52:02Z")
I have an index that consists of nested and normal fields. The structure of my index is: { "name" : "Walter white", "age" : "20", "email" : "walter.white@gmail.com", "subjects" :\[ { "subject\_name" : "Computer … --- ## [Kibana dashboard disappeared](https://discuss.elastic.co/t/kibana-dashboard-disappeared/217746)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 3\ **Last updated:** [February 4, 2020, 1:12pm UTC](https://discuss.elastic.co/t/kibana-dashboard-disappeared/217746 "2020-02-04T13:12:58Z")
I am new to ELK. I had some previous visualizations and dashboards which i made which I can't see in kibana. i think It is because I moved elasticsearch and logstash directory to other location. Can I get back old data? --- ## [Manipulate fonts](https://discuss.elastic.co/t/manipulate-fonts/90069)
**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 3:24pm UTC](https://discuss.elastic.co/t/manipulate-fonts/90069 "2017-06-20T15:24:28Z")
Hi, I'm using a process that render my visualize to Email base64 (body content) The problem is that I need to change the font family from Kibana, that display as font-family: 'Open Sans'; is there a way to custom/ … --- ## [Logstash: CSV filter pattern-based field name detection from header row](https://discuss.elastic.co/t/logstash-csv-filter-pattern-based-field-name-detection-from-header-row/198266)
**Author:** [@barnetta](https://discuss.elastic.co/u/barnetta)\ **Replies:** 5\ **Last updated:** [September 17, 2019, 1:18pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-pattern-based-field-name-detection-from-header-row/198266 "2019-09-17T13:18:46Z")
Summary: current understanding is that CSV file -\> FileBeat -\> Logstash -\> Logstash CSV filter cannot reliably detect field names from column headings within CSV; workaround or alternative needed. I have read the follow… --- ## [Can we make filebeat to read files in particular sequence](https://discuss.elastic.co/t/can-we-make-filebeat-to-read-files-in-particular-sequence/47090)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 5\ **Last updated:** [July 8, 2016, 6:57am UTC](https://discuss.elastic.co/t/can-we-make-filebeat-to-read-files-in-particular-sequence/47090 "2016-07-08T06:57:03Z")
Hi, I am using filebeat 1.2.0 to fetch my log files. I have a pair of log files, request andresponse log files. In my logstash configuration I am doing some aggregation between request and response files. In my log dire… --- ## [Packetbeat: What are the databases/servers that we can listen to?](https://discuss.elastic.co/t/packetbeat-what-are-the-databases-servers-that-we-can-listen-to/44809)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 4\ **Last updated:** [March 22, 2016, 1:24pm UTC](https://discuss.elastic.co/t/packetbeat-what-are-the-databases-servers-that-we-can-listen-to/44809 "2016-03-22T13:24:36Z")
I am using packetbeat for monitoring servers, and I want to listen to the db-servers like oracle, mssql server and so. Does it support listening to them as well? I'd mentioned oracle under protocol and port no 1521 but i… --- ## [Determine which analyzer is used for a given index/type/field](https://discuss.elastic.co/t/determine-which-analyzer-is-used-for-a-given-index-type-field/12223)
**Author:** [@hillel\_t](https://discuss.elastic.co/u/hillel_t)\ **Replies:** 4\ **Last updated:** [June 7, 2013, 10:47am UTC](https://discuss.elastic.co/t/determine-which-analyzer-is-used-for-a-given-index-type-field/12223 "2013-06-07T10:47:37Z")
Hey all, Is there a way to use the REST API to determine which analyzer elasticsearch is using for a given index? how about a given type or a specific field? Thanks, -- Hillel -- You received this messa… --- ## [Does k-nearest neighbor (kNN) search - supports search\_after pagination?](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222)
**Author:** [@Dinesh\_Sonachalam](https://discuss.elastic.co/u/Dinesh_Sonachalam)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 11:44pm UTC](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222 "2022-11-07T23:44:47Z")
Reference: kNN search: k-nearest neighbor (kNN) search | Elasticsearch Guide \[master\] | Elastic Search after pagination: https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#sea… --- ## [Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"}](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757)
**Author:** [@Suman\_Thota](https://discuss.elastic.co/u/Suman_Thota)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:39pm UTC](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757 "2022-07-15T20:39:28Z")
Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"} when following instructions in Create API key API | Elasticsearch Guide \[8.3\] | Elastic to create an api key. Elasticsearch version: 8.… --- ## [Hot backup strategy for Elasticsearch](https://discuss.elastic.co/t/hot-backup-strategy-for-elasticsearch/20251)
**Author:** [@skm](https://discuss.elastic.co/u/skm)\ **Replies:** 6\ **Last updated:** [October 15, 2014, 6:33pm UTC](https://discuss.elastic.co/t/hot-backup-strategy-for-elasticsearch/20251 "2014-10-15T18:33:11Z")
Hello List, Going through the current documentation I found that snapshot/restore mechanism is one type of backup strategy that we can use for ES clusters. Any other recommendations? Using the following 1.el… --- ## [Unread count not changing](https://discuss.elastic.co/t/unread-count-not-changing/29242)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 5\ **Last updated:** [September 18, 2015, 10:21pm UTC](https://discuss.elastic.co/t/unread-count-not-changing/29242 "2015-09-18T22:21:59Z")
This only happened recently for me, but now if I sit in the new or unread categories, the unread count never changes. I do get popups when new notifications arrive, and my avatar gets the number, but that's it. OS X 10… --- ## [Filebeat in Kubernetes - How to push logs for a specific k8s namespace](https://discuss.elastic.co/t/filebeat-in-kubernetes-how-to-push-logs-for-a-specific-k8s-namespace/154868)
**Author:** [@anuranjit](https://discuss.elastic.co/u/anuranjit)\ **Replies:** 2\ **Last updated:** [November 13, 2018, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-in-kubernetes-how-to-push-logs-for-a-specific-k8s-namespace/154868 "2018-11-13T13:15:51Z")
We are using filebeat configuration as in https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-docker.html . We are able to successfully push the logs from kubernetes to Elasticsearch for containers.ids… --- ## [Calculate based on aggregation Metrics results](https://discuss.elastic.co/t/calculate-based-on-aggregation-metrics-results/64314)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 2\ **Last updated:** [October 28, 2016, 11:15pm UTC](https://discuss.elastic.co/t/calculate-based-on-aggregation-metrics-results/64314 "2016-10-28T23:15:09Z")
I am using kibana 4 I generated a table using kibana aggregation, it has two metrics: sum of profits, and count. How do I add another metric to calculate the average profit per count by doing profits.value / count.value… --- ## [Regex search not working on not\_analyzed field](https://discuss.elastic.co/t/regex-search-not-working-on-not-analyzed-field/24603)
**Author:** [@bikrant](https://discuss.elastic.co/u/bikrant)\ **Replies:** 2\ **Last updated:** [June 30, 2015, 6:39pm UTC](https://discuss.elastic.co/t/regex-search-not-working-on-not-analyzed-field/24603 "2015-06-30T18:39:34Z")
Hi, My error log contains lines like: exception 'RedisException' with message '127.0.0.1:13635 connection closed' The log field in not\_analyzed and I'm trying to match the IP and the port using a simple regex but I'… --- ## [Kibanaダッシュボード 異なるフィールドを関連付ける方法](https://discuss.elastic.co/t/kibana/76360)
**Author:** [@abu001](https://discuss.elastic.co/u/abu001)\ **Replies:** 4\ **Last updated:** [February 25, 2017, 3:32am UTC](https://discuss.elastic.co/t/kibana/76360 "2017-02-25T03:32:15Z")
Kibanaダッシュボード上に、２つのグラフを作成しています。 それぞれ、べつのindexから作成されたグラフです。 上記条件で、フィールド名は異なるけれども、データ自体には関連がある場合、 Kibanaダッシュボード上で、フィールドに関連性をもたせたいのですが、 フィールド名の一致が絶対条件でしょうか？ フィールド名の異なるものを関連付ける方法はあるでしょうか？ 例えば、ダッシュボード上のグラフ①のとある入門日をクリックして、… --- ## [Pie chart with filtering](https://discuss.elastic.co/t/pie-chart-with-filtering/290271)
**Author:** [@thenotoriousciu](https://discuss.elastic.co/u/thenotoriousciu)\ **Replies:** 3\ **Last updated:** [November 26, 2021, 11:14am UTC](https://discuss.elastic.co/t/pie-chart-with-filtering/290271 "2021-11-26T11:14:30Z")
Hello, everyone. I am trying to create a pie-chart based on the below data, but I am pretty sure that it can only be don with Vega, not with a regular pie-chart. However, I thought I could ask this question, see if anyo… --- ## [Have Kibana display a numeric field value in hexadecimal](https://discuss.elastic.co/t/have-kibana-display-a-numeric-field-value-in-hexadecimal/106488)
**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\ **Replies:** 3\ **Last updated:** [June 27, 2019, 11:17pm UTC](https://discuss.elastic.co/t/have-kibana-display-a-numeric-field-value-in-hexadecimal/106488 "2019-06-27T23:17:49Z")
Hello, How can I tell Kibana to display a numeric field in hexadecimal or octal? I have looked into the formatting options and numeral.js, but nothing concerning which base to use for displaying numeric values... I'd … --- ## [Schema error: extra keys not allowed @ data\['client'\]](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-client/128280)
**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\ **Replies:** 3\ **Last updated:** [April 17, 2018, 11:57pm UTC](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-client/128280 "2018-04-17T23:57:09Z")
Hello All, I'm new to Curator. However I tried to execute a sample command to delete indices and this is the output. 2018-04-17 03:20:04,413 ERROR Schema error: extra keys not allowed @ data\['client'\] Traceback (m… --- ## [How to get all indexes from elasticsearch with spring-elastisearch?](https://discuss.elastic.co/t/how-to-get-all-indexes-from-elasticsearch-with-spring-elastisearch/34303)
**Author:** [@AndrewS](https://discuss.elastic.co/u/AndrewS)\ **Replies:** 3\ **Last updated:** [November 11, 2015, 12:14pm UTC](https://discuss.elastic.co/t/how-to-get-all-indexes-from-elasticsearch-with-spring-elastisearch/34303 "2015-11-11T12:14:31Z")
Hi, I am new in elastic, I want to create java webservise to existing elasticsearch database. I need to use spring elasticsearch. I tryed to google it but everything what I found was just examples to create new one not t… --- ## [Elasticsearch 5.4.2 process periodically dying with high CPU load and kernel message pgtable-generic.c:33: bad pmd](https://discuss.elastic.co/t/elasticsearch-5-4-2-process-periodically-dying-with-high-cpu-load-and-kernel-message-pgtable-generic-c-33-bad-pmd/92239)
**Author:** [@Ruslan\_Lutsenko](https://discuss.elastic.co/u/Ruslan_Lutsenko)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-2-process-periodically-dying-with-high-cpu-load-and-kernel-message-pgtable-generic-c-33-bad-pmd/92239 "2017-09-08T16:21:53Z")
Maybe someone faced similar problem. Data nodes (cluster 4xdata nodes) periodically dying with dmesg message: \[Fri Jul 7 02:19:34 2017\] /home/kernel/COD/linux/mm/pgtable-generic.c:33: bad pmd ffff95e5b0039500(0000001b… --- ## [Logstash grok vs. grok debugger](https://discuss.elastic.co/t/logstash-grok-vs-grok-debugger/50656)
**Author:** [@aalaie](https://discuss.elastic.co/u/aalaie)\ **Replies:** 7\ **Last updated:** [May 23, 2016, 9:31am UTC](https://discuss.elastic.co/t/logstash-grok-vs-grok-debugger/50656 "2016-05-23T09:31:38Z")
Hi, I have got a grok : filter { grok { match =\> \[ "message", "%{SYSLOGTIMESTAMP:date}%{SPACE}%{IPV4:clientip}%{SPACE}%{SYSLOGTIMESTAMP}%{SPACE}\[%{WORD:onLocation}\\:%{WORD:onComponent}.%{WORD:onVolume}.%{WORD… --- ## [How to put multiple lines in Kibana SQL search?](https://discuss.elastic.co/t/how-to-put-multiple-lines-in-kibana-sql-search/241708)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [July 18, 2020, 8:12am UTC](https://discuss.elastic.co/t/how-to-put-multiple-lines-in-kibana-sql-search/241708 "2020-07-18T08:12:28Z")
hi I'm trying to put multiline sql search (as our source-code are long and in multile lines), but even if I put escape characters, error happens. Please find screenshot "type" : "json\_parse\_exception", "reas… --- ## [ILM \`security\_exception\` error](https://discuss.elastic.co/t/ilm-security-exception-error/232172)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 10:14am UTC](https://discuss.elastic.co/t/ilm-security-exception-error/232172 "2020-05-13T10:14:53Z")
Hey there, So, I currently have a cluster running for timeseries with security enabled. There's one main ILM policy, let's call it policy1: "policy" : { "phases" : { "warm" : { "min\_age" : "0ms… --- ## [Disable stop words and stemming for phrases searches when using query\_string](https://discuss.elastic.co/t/disable-stop-words-and-stemming-for-phrases-searches-when-using-query-string/37683)
**Author:** [@Imran\_Azad](https://discuss.elastic.co/u/Imran_Azad)\ **Replies:** 2\ **Last updated:** [December 22, 2015, 10:15am UTC](https://discuss.elastic.co/t/disable-stop-words-and-stemming-for-phrases-searches-when-using-query-string/37683 "2015-12-22T10:15:46Z")
How can I disable stop words and stemming for phrase searches when using the query\_string? For example I want the user to search for "the mouth" and I want documents to be returned with the exact phrase. --- ## [Completion suggestions with strings containing only numbers and strings prefixed with numbers (e.g. addresses) not working](https://discuss.elastic.co/t/completion-suggestions-with-strings-containing-only-numbers-and-strings-prefixed-with-numbers-e-g-addresses-not-working/14523)
**Author:** [@Mahesh\_Kommareddi](https://discuss.elastic.co/u/Mahesh_Kommareddi)\ **Replies:** 2\ **Last updated:** [November 22, 2013, 5:45pm UTC](https://discuss.elastic.co/t/completion-suggestions-with-strings-containing-only-numbers-and-strings-prefixed-with-numbers-e-g-addresses-not-working/14523 "2013-11-22T17:45:38Z")
Hi, I'm using and testing against 0.90.5 (three nodes and five shards) and 0.90.7 (one node and five shards). I'm interested in the completion suggester and it works great for items where letters are involved. For … --- ## [Can both allocate this shard and improve the cluster balance](https://discuss.elastic.co/t/can-both-allocate-this-shard-and-improve-the-cluster-balance/285579)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 5\ **Last updated:** [October 1, 2021, 10:20am UTC](https://discuss.elastic.co/t/can-both-allocate-this-shard-and-improve-the-cluster-balance/285579 "2021-10-01T10:20:35Z")
Hi everyone, I've recently been setting up a new ELK stack, and am naturally trying to use all the cool tools and features possible. In times past we've used regular indices and curator to move their shards about based… --- ## [Send reports and logs from all devices to mcafee siem](https://discuss.elastic.co/t/send-reports-and-logs-from-all-devices-to-mcafee-siem/164090)
**Author:** [@mp28may](https://discuss.elastic.co/u/mp28may)\ **Replies:** 5\ **Last updated:** [January 14, 2019, 9:33am UTC](https://discuss.elastic.co/t/send-reports-and-logs-from-all-devices-to-mcafee-siem/164090 "2019-01-14T09:33:02Z")
HI Team, I am new to elkstack. I have configured ELKstack in my environment and it is working perfectly. I am able to get the reports and syslogs from all the devices on KIBANA interface. I also have Mcafee siem solu… --- ## [How to enable Elastic APM for c# console application](https://discuss.elastic.co/t/how-to-enable-elastic-apm-for-c-console-application/303754)
**Author:** [@Sachin\_Agarwal2](https://discuss.elastic.co/u/Sachin_Agarwal2)\ **Replies:** 4\ **Last updated:** [May 10, 2022, 10:06am UTC](https://discuss.elastic.co/t/how-to-enable-elastic-apm-for-c-console-application/303754 "2022-05-10T10:06:13Z")
How can we use elastic APM for the C# console application, for ast .net core we can do it using \`\`\` app.UseAllElasticApm(Configuration) but for console app we cant access app instance . --- ## [Is it possible for ES to drop every field that's not in mapping upon indexing](https://discuss.elastic.co/t/is-it-possible-for-es-to-drop-every-field-thats-not-in-mapping-upon-indexing/278449)
**Author:** [@R.L](https://discuss.elastic.co/u/R.L)\ **Replies:** 4\ **Last updated:** [July 12, 2021, 6:58pm UTC](https://discuss.elastic.co/t/is-it-possible-for-es-to-drop-every-field-thats-not-in-mapping-upon-indexing/278449 "2021-07-12T18:58:52Z")
Let's say I have a index template mapping which has fields: { "first\_name"..., "last\_name"..., } and someone is uploading docs with fields: { "first\_name": "jon", "last\_name": "connington", "address": "blah… --- ## [Index logstash in kibana](https://discuss.elastic.co/t/index-logstash-in-kibana/80286)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 4\ **Last updated:** [March 28, 2017, 3:11pm UTC](https://discuss.elastic.co/t/index-logstash-in-kibana/80286 "2017-03-28T15:11:35Z")
How to index logstash-\* in kibana. Im using ELK stack 5.2 version and i have indexed filebeat, metricbeat, packetbeat and winlogbeat. Im using filbeat config sending logs to logstash-\>elasticsearch-\>kibana i need t… --- ## [Return a few log lines before and after an ELASTIC watcher match query](https://discuss.elastic.co/t/return-a-few-log-lines-before-and-after-an-elastic-watcher-match-query/154412)
**Author:** [@mark-otcxn](https://discuss.elastic.co/u/mark-otcxn)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 9:05am UTC](https://discuss.elastic.co/t/return-a-few-log-lines-before-and-after-an-elastic-watcher-match-query/154412 "2018-11-02T09:05:04Z")
I have an ELASTIC watcher that searches for "ERROR" in logs, and then sends an e-mail when this happens. Is it possible for the watcher to return, say the next 2 or 3 lines after the ERROR. This could help give additiona… --- ## [Logstash 6.0 http input not accepting utf-8](https://discuss.elastic.co/t/logstash-6-0-http-input-not-accepting-utf-8/107731)
**Author:** [@Conall\_Prendergast](https://discuss.elastic.co/u/Conall_Prendergast)\ **Replies:** 3\ **Last updated:** [November 15, 2017, 3:36pm UTC](https://discuss.elastic.co/t/logstash-6-0-http-input-not-accepting-utf-8/107731 "2017-11-15T15:36:26Z")
Hi, I have a logstash pipeline with a http input plugin. I want to use a json codec but this fails when the input contains the character "é". This fails with the error: \[ERROR\] 2017-11-15 11:32:24.663 \[Ruby-0-Thread-2… --- ## [Deleted indexes reappearing](https://discuss.elastic.co/t/deleted-indexes-reappearing/7188)
**Author:** [@Darren](https://discuss.elastic.co/u/Darren)\ **Replies:** 3\ **Last updated:** [March 31, 2012, 9:02pm UTC](https://discuss.elastic.co/t/deleted-indexes-reappearing/7188 "2012-03-31T21:02:52Z")
Hi Guys, Playing with elasticsearch at the moment, amazed with just how simple it is to get a cluster up and running. It just works (tm) I've come to try and delete an index but after around 30 mins it appears ba… --- ## [ERROR: A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/206515)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 7:21am UTC](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/206515 "2019-11-05T07:21:27Z")
Hi sagar this side. I have installed all three Elastic search, kibana and logstash in my redhat, for practice purposes. I'm try to connect to oracle database in my network, and have used ojdbc7.jar for that, all my ser… --- ## [Installed Elasticsearch docker does not have a password](https://discuss.elastic.co/t/installed-elasticsearch-docker-does-not-have-a-password/281805)
**Author:** [@evo](https://discuss.elastic.co/u/evo)\ **Replies:** 6\ **Last updated:** [September 14, 2021, 2:10pm UTC](https://discuss.elastic.co/t/installed-elasticsearch-docker-does-not-have-a-password/281805 "2021-09-14T14:10:55Z")
I have just following the docker installation guide and have got ES up and running but anyone can add documents to it. I am confused on how to secure it. Is the authentication only pre-configured in the paid version? W… --- ## [A short question of GROK to handle hex number](https://discuss.elastic.co/t/a-short-question-of-grok-to-handle-hex-number/139684)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 7\ **Last updated:** [July 17, 2018, 7:35am UTC](https://discuss.elastic.co/t/a-short-question-of-grok-to-handle-hex-number/139684 "2018-07-17T07:35:11Z")
Hello every experts, I have met a short question. Here is a source input content, it is one function back trace of an issue, the content shows as below: 101c2f8f 1106f017 129570e2 1210da9a 1290fa12 10fb825d120e33ed 12… --- ## [Where is configuration stored?](https://discuss.elastic.co/t/where-is-configuration-stored/117633)
**Author:** [@some7](https://discuss.elastic.co/u/some7)\ **Replies:** 1\ **Last updated:** [January 30, 2018, 9:35pm UTC](https://discuss.elastic.co/t/where-is-configuration-stored/117633 "2018-01-30T21:35:07Z")
When you create index patterns, mappings for fields, visualizations, dashboards, etc in kibana, where are these settings stored? When I reinstall my system I'd like to be able to restore everything to exactly how it was. … --- ## [Trouble showing data in Vega-lite](https://discuss.elastic.co/t/trouble-showing-data-in-vega-lite/260216)
**Author:** [@Aishna\_Gupta](https://discuss.elastic.co/u/Aishna_Gupta)\ **Replies:** 8\ **Last updated:** [January 5, 2021, 6:47pm UTC](https://discuss.elastic.co/t/trouble-showing-data-in-vega-lite/260216 "2021-01-05T18:47:08Z")
Hello Everyone, I'm new to Vega-lite. I'm trying to plot a bar graph using Vega-lite getting data from an Index. But the data does not show up in the view, only the axes. This is the script I'm using: { "$sch… --- ## [ES Scripting - How to access a multi field value](https://discuss.elastic.co/t/es-scripting-how-to-access-a-multi-field-value/39503)
**Author:** [@britto1981](https://discuss.elastic.co/u/britto1981)\ **Replies:** 6\ **Last updated:** [February 1, 2016, 7:40pm UTC](https://discuss.elastic.co/t/es-scripting-how-to-access-a-multi-field-value/39503 "2016-02-01T19:40:27Z")
I have a sub field named "util" defined in the ES mappings as shown below: "metric\_value\_number": { "type": "long", "fields": { "util": { "type": "double" } … [Previous page](https://discuss.elastic.co/top.md?page=687&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=689&per_page=50&period=all)