# Top

**URL:** https://discuss.elastic.co/top.md?page=691&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 692

---

## [fieldNorm & queryNorm in explain api](https://discuss.elastic.co/t/fieldnorm-querynorm-in-explain-api/15747)

<div class="topic-metadata">

**Author:** [@usha2626](https://discuss.elastic.co/u/usha2626)\
**Replies:** 2\
**Last updated:** [February 12, 2014, 7:56am UTC](https://discuss.elastic.co/t/fieldnorm-querynorm-in-explain-api/15747 "2014-02-12T07:56:56Z")

</div>

Hi, I want to know what are fieldNorm and queryNorm in the output displayed by the explain api..how are they calculated? Thanks Usha -- You received this message because you are subscribed to the Google Gro…

---

## [Using normalizer for sorting](https://discuss.elastic.co/t/using-normalizer-for-sorting/106704)

<div class="topic-metadata">

**Author:** [@ArturKLB](https://discuss.elastic.co/u/ArturKLB)\
**Replies:** 4\
**Last updated:** [November 8, 2017, 2:16pm UTC](https://discuss.elastic.co/t/using-normalizer-for-sorting/106704 "2017-11-08T14:16:20Z")

</div>

Hi. I used custom normalizer with some char\_filter and lowercase filter. And when I perfom search with sorting I see that it is actually works! But I don't see any changes in terms via \_termvectors query by my normalized…

---

## [Manual Edit of Registry file](https://discuss.elastic.co/t/manual-edit-of-registry-file/151473)

<div class="topic-metadata">

**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\
**Replies:** 6\
**Last updated:** [October 10, 2018, 4:13pm UTC](https://discuss.elastic.co/t/manual-edit-of-registry-file/151473 "2018-10-10T16:13:32Z")

</div>

I have manually edited the registry file on one of my filebeats containers in an attempt to get it to reprocess specific files. It will load the edited registry, and the logs indicate that it no longer recognizes the the…

---

## [5.0.0-rc1 Setting network.host \<NIC IP\> fails](https://discuss.elastic.co/t/5-0-0-rc1-setting-network-host-nic-ip-fails/62833)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 3\
**Last updated:** [December 14, 2016, 7:50pm UTC](https://discuss.elastic.co/t/5-0-0-rc1-setting-network-host-nic-ip-fails/62833 "2016-12-14T19:50:42Z")

</div>

If I go into /etc/elasticsearch/elasticsearch.yml, set network.host to IP of the nic on the server, and restart the service it will not start: \[root@centos-7 ~\]# systemctl status elasticsearch -l ● elasticsearch.servic…

---

## [Transforms -how to add common fields (i.e. geoip-fields) to the transform output?](https://discuss.elastic.co/t/transforms-how-to-add-common-fields-i-e-geoip-fields-to-the-transform-output/257915)

<div class="topic-metadata">

**Author:** [@hevi](https://discuss.elastic.co/u/hevi)\
**Replies:** 6\
**Last updated:** [December 9, 2020, 9:30am UTC](https://discuss.elastic.co/t/transforms-how-to-add-common-fields-i-e-geoip-fields-to-the-transform-output/257915 "2020-12-09T09:30:56Z")

</div>

Basically I have thousands of embedded devices that periodically upload logfiles to a backend we've created and after some preprocessing the log files are ingested into elasticserach using the geoip igestion pipeline. At…

---

## [Issue when calculating MAX TPS using MAX Bucket Aggregation](https://discuss.elastic.co/t/issue-when-calculating-max-tps-using-max-bucket-aggregation/242979)

<div class="topic-metadata">

**Author:** [@rpotnuru](https://discuss.elastic.co/u/rpotnuru)\
**Replies:** 5\
**Last updated:** [August 24, 2020, 6:48pm UTC](https://discuss.elastic.co/t/issue-when-calculating-max-tps-using-max-bucket-aggregation/242979 "2020-08-24T18:48:56Z")

</div>

Hello, I am trying to add a visualization to calculate MAX TPS for an API, attached the Visualization settings. I am selecting the minimum interval in my date histogram as 1s, but the metric result I am getting is fo…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/284752)

<div class="topic-metadata">

**Author:** [@Olal](https://discuss.elastic.co/u/Olal)\
**Replies:** 7\
**Last updated:** [September 22, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/284752 "2021-09-22T10:32:19Z")

</div>

Hello there , I need help I am getting Error : Kibana server is not ready yet . When I check my Kibana.yml logs . I get this: {"type":"log","@timestamp":"2021-09-21T19:59:32+03:00","tags":\["error","savedobjects-servic…

---

## [Exception caught on netty layer - java.lang.OutOfMemoryError](https://discuss.elastic.co/t/exception-caught-on-netty-layer-java-lang-outofmemoryerror/145588)

<div class="topic-metadata">

**Author:** [@Sanj\_Gunetileke](https://discuss.elastic.co/u/Sanj_Gunetileke)\
**Replies:** 7\
**Last updated:** [August 29, 2018, 4:53pm UTC](https://discuss.elastic.co/t/exception-caught-on-netty-layer-java-lang-outofmemoryerror/145588 "2018-08-29T16:53:29Z")

</div>

Hi folks, I keep on getting a JVM out of memory error. I have used the option to disable index closing, so when this error does occur the indexes do not close. I would appreciate any advice on this. Thanks in advance…

---

## [Set custom analyzer with Java API](https://discuss.elastic.co/t/set-custom-analyzer-with-java-api/29875)

<div class="topic-metadata">

**Author:** [@zoltan](https://discuss.elastic.co/u/zoltan)\
**Replies:** 1\
**Last updated:** [September 23, 2015, 10:48pm UTC](https://discuss.elastic.co/t/set-custom-analyzer-with-java-api/29875 "2015-09-23T22:48:11Z")

</div>

Hi There! I'm building a Java Map with a content like this as I'd like to set a custom analyzer: {index={analysis={analyzer=\[{whitespace\_lowercase={filter=whitespace , type=custom, tokenizer=whitespace }}\]}}} But wh…

---

## [What is the ".ml-anomalies" and the ".ml-anomalies-shared"?](https://discuss.elastic.co/t/what-is-the-ml-anomalies-and-the-ml-anomalies-shared/197397)

<div class="topic-metadata">

**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 7:29pm UTC](https://discuss.elastic.co/t/what-is-the-ml-anomalies-and-the-ml-anomalies-shared/197397 "2019-08-30T19:29:18Z")

</div>

Hello I found these 2 index patterns: ".ml-anomalies", ".ml-anomalies-shared" in Kibana when ticking "Include system indices". What are those for? What is the difference?

---

## [\[solved\] How to work with sql\_last\_value on table that has multiple rows on same second](https://discuss.elastic.co/t/solved-how-to-work-with-sql-last-value-on-table-that-has-multiple-rows-on-same-second/129736)

<div class="topic-metadata">

**Author:** [@skatemple](https://discuss.elastic.co/u/skatemple)\
**Replies:** 4\
**Last updated:** [April 26, 2018, 11:27pm UTC](https://discuss.elastic.co/t/solved-how-to-work-with-sql-last-value-on-table-that-has-multiple-rows-on-same-second/129736 "2018-04-26T23:27:57Z")

</div>

Hello, I'm having troubles with a table, it has not a unique id column, so I have to pull data using a datetime column in my "where" statement. Problem is, that this tables saves the Datetime like this: "2018-04-26 02…

---

## [Queue Capacity Sizing](https://discuss.elastic.co/t/queue-capacity-sizing/53176)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 4\
**Last updated:** [June 18, 2016, 12:51pm UTC](https://discuss.elastic.co/t/queue-capacity-sizing/53176 "2016-06-18T12:51:15Z")

</div>

I am receiving the below error. The node is running ES 2.3.3 \[9992\]: index \[bro-2016.06.17\], type \[dns\], id \[AVVfLgt-PuabKO2qHMAs\], message \[RemoteTransportException\[\[WORKER\_NODE\_7\]\[10.1.55.14:9300\]\[indices:data/writ…

---

## [Understanding doc and docCount values in explain response](https://discuss.elastic.co/t/understanding-doc-and-doccount-values-in-explain-response/158383)

<div class="topic-metadata">

**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\
**Replies:** 3\
**Last updated:** [December 3, 2018, 7:41pm UTC](https://discuss.elastic.co/t/understanding-doc-and-doccount-values-in-explain-response/158383 "2018-12-03T19:41:33Z")

</div>

Here's the sample response after running query with explain set to true, \[0\] =\> Array ( \[value\] =\> 24.375515 \[description\] =\> score(doc=1115115,freq=1.0 = termFreq=1.0), product of: \[details\]…

---

## [Reading multiple files and writing into multiple files](https://discuss.elastic.co/t/reading-multiple-files-and-writing-into-multiple-files/143150)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 3\
**Last updated:** [August 8, 2018, 9:50am UTC](https://discuss.elastic.co/t/reading-multiple-files-and-writing-into-multiple-files/143150 "2018-08-08T09:50:17Z")

</div>

I want to read multiple log files and write into multiple files (intention is to test). My Filebeat configuration looks like below : filebeat.prospectors: - input\_type: log enabled: true paths: - C:\\data\\Logs\\e…

---

## [Curl query to delete index patterns, and, parsefailures to stdout](https://discuss.elastic.co/t/curl-query-to-delete-index-patterns-and-parsefailures-to-stdout/280110)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 6\
**Last updated:** [September 5, 2021, 6:35pm UTC](https://discuss.elastic.co/t/curl-query-to-delete-index-patterns-and-parsefailures-to-stdout/280110 "2021-09-05T18:35:38Z")

</div>

Hi all... I have 2 questions- I have created more than 150 index patterns based on the indexes I have. Yesterday I changed the names of indexes for better visibility. Now I need to delete all old index-patterns using…

---

## [Specify data type IP in logstash](https://discuss.elastic.co/t/specify-data-type-ip-in-logstash/29384)

<div class="topic-metadata">

**Author:** [@Hayder\_Abbass](https://discuss.elastic.co/u/Hayder_Abbass)\
**Replies:** 1\
**Last updated:** [September 16, 2015, 11:40am UTC](https://discuss.elastic.co/t/specify-data-type-ip-in-logstash/29384 "2015-09-16T11:40:44Z")

</div>

Hello, We are pushing data in ElasticSearch via logstash. The issue is that for the IP address, it is being stored as a string rather as an IP data type. Is it possible to specify it via grok? I have tried the follow c…

---

## [Where to find complete documentation for CRDs?](https://discuss.elastic.co/t/where-to-find-complete-documentation-for-crds/334367)

<div class="topic-metadata">

**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\
**Replies:** 0\
**Last updated:** [May 25, 2023, 7:25pm UTC](https://discuss.elastic.co/t/where-to-find-complete-documentation-for-crds/334367 "2023-05-25T19:25:40Z")

</div>

I'm looking for the complete documentation for the ECK operator CRDs. For example, I'm looking into tweaking the config for Kibana pods so they may run on my cluster. I see that the CRD defines spec.podTemplate, but expl…

---

## [\[deprecation.common \] Deprecated field \[ignore\_unmapped\] used, replaced by \[unmapped\_type\]](https://discuss.elastic.co/t/deprecation-common-deprecated-field-ignore-unmapped-used-replaced-by-unmapped-type/66424)

<div class="topic-metadata">

**Author:** [@stevenmwall](https://discuss.elastic.co/u/stevenmwall)\
**Replies:** 0\
**Last updated:** [November 17, 2016, 3:54pm UTC](https://discuss.elastic.co/t/deprecation-common-deprecated-field-ignore-unmapped-used-replaced-by-unmapped-type/66424 "2016-11-17T15:54:18Z")

</div>

Currently running ES 2.4.1 and preparing to upgrade to ES 5 so I have turned on deprecation logging. I am seeing this repeatedly in the log files (about once every 2 seconds): \[2016-11-17 08:46:08,232\]\[DEBUG\]\[deprecat…

---

## [How to get the basic license?](https://discuss.elastic.co/t/how-to-get-the-basic-license/68128)

<div class="topic-metadata">

**Author:** [@xmnd](https://discuss.elastic.co/u/xmnd)\
**Replies:** 5\
**Last updated:** [December 7, 2016, 1:41am UTC](https://discuss.elastic.co/t/how-to-get-the-basic-license/68128 "2016-12-07T01:41:10Z")

</div>

I got the email from Elastic Team, but i can not find the new license, is this somehing wrong? The following is the message content: Thank you for executing the Marvel (Elasticsearch Monitoring) basic license, gra…

---

## [Kafka Output - Increasing batching reduces throughput](https://discuss.elastic.co/t/kafka-output-increasing-batching-reduces-throughput/231426)

<div class="topic-metadata">

**Author:** [@taylorn](https://discuss.elastic.co/u/taylorn)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 10:23pm UTC](https://discuss.elastic.co/t/kafka-output-increasing-batching-reduces-throughput/231426 "2020-05-14T22:23:45Z")

</div>

I'm seeing poor performance with the Kafka output plugin when I increase the linger\_ms and batch\_size settings. This is the opposite behavior I would expect after reading the Kafka producer documentation. Increasing batc…

---

## [How to create a drilldown on dashboard for Vega-lite vis](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632)

<div class="topic-metadata">

**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\
**Replies:** 3\
**Last updated:** [December 14, 2020, 2:14pm UTC](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632 "2020-12-14T14:14:37Z")

</div>

I am trying to create drilldown from vega vis to dashboard but it doesn't work. For example, for tables, this works correctly, by clicking on the magnifying glass icon, you can select the drilldown created. Kibana v…

---

## [Using Network Drive](https://discuss.elastic.co/t/using-network-drive/186414)

<div class="topic-metadata">

**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 3:04am UTC](https://discuss.elastic.co/t/using-network-drive/186414 "2019-06-20T03:04:57Z")

</div>

Hi, I'm trying to use network drive for elasticsearch path.data in my elasticsearch.yml # ----------------------------------- Paths ------------------------------------ # # Path to directory where to store the data (s…

---

## [Combine a query with term and range](https://discuss.elastic.co/t/combine-a-query-with-term-and-range/165771)

<div class="topic-metadata">

**Author:** [@lmmartinez](https://discuss.elastic.co/u/lmmartinez)\
**Replies:** 0\
**Last updated:** [January 25, 2019, 12:18pm UTC](https://discuss.elastic.co/t/combine-a-query-with-term-and-range/165771 "2019-01-25T12:18:19Z")

</div>

I have an index with a lot of docs. I have intended to send a query via api, to obtain a count of documents that contain an exact phrase in a portion of the message in this index. The document has a field call event, an…

---

## [Missing authentication credentials when visiting localhost:9200 after running elasticsearch.bat](https://discuss.elastic.co/t/missing-authentication-credentials-when-visiting-localhost-9200-after-running-elasticsearch-bat/323018)

<div class="topic-metadata">

**Author:** [@Arthur\_Medforth](https://discuss.elastic.co/u/Arthur_Medforth)\
**Replies:** 2\
**Last updated:** [January 12, 2023, 9:21pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-when-visiting-localhost-9200-after-running-elasticsearch-bat/323018 "2023-01-12T21:21:30Z")

</div>

{"error":{"root\_cause":\[{"type":"security\_exception","reason":"missing authentication credentials for REST request \[/\]","header":{"WWW-Authenticate":\["Basic realm="security" charset="UTF-8"","ApiKey"\]}}\],"type":"security…

---

## [How to match exactly one item in an array](https://discuss.elastic.co/t/how-to-match-exactly-one-item-in-an-array/157220)

<div class="topic-metadata">

**Author:** [@AlloVince](https://discuss.elastic.co/u/AlloVince)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 6:33pm UTC](https://discuss.elastic.co/t/how-to-match-exactly-one-item-in-an-array/157220 "2018-11-20T18:33:15Z")

</div>

Hi guys I have a question when matching a field with array. Here is my data: Item1: { "names": \["foo-123-sth-more", "bar-456-sth-more"\] } Item2: { "names": \["foo-456-sth-more", "bar-123-sth-more"\] } My query is …

---

## [Alphabetically sorting + aggregation ElasticSearch](https://discuss.elastic.co/t/alphabetically-sorting-aggregation-elasticsearch/251414)

<div class="topic-metadata">

**Author:** [@het](https://discuss.elastic.co/u/het)\
**Replies:** 8\
**Last updated:** [October 16, 2020, 4:34pm UTC](https://discuss.elastic.co/t/alphabetically-sorting-aggregation-elasticsearch/251414 "2020-10-16T16:34:13Z")

</div>

Hi team, I am using aggregation to get grouped records. I am not able to sort the buckets. Dummy Data : { "\_index": "testing-aggregation", "\_type": "employee", "\_id": "emp001\_local000000000000001", "\_s…

---

## [Update Multiple Objects at same time](https://discuss.elastic.co/t/update-multiple-objects-at-same-time/128062)

<div class="topic-metadata">

**Author:** [@Amit\_khanduri](https://discuss.elastic.co/u/Amit_khanduri)\
**Replies:** 8\
**Last updated:** [April 15, 2018, 5:43pm UTC](https://discuss.elastic.co/t/update-multiple-objects-at-same-time/128062 "2018-04-15T17:43:32Z")

</div>

What is the best and optimize way to update multiple objects at same time in elasticSearch 6.2 ? I want to update the key : value pair of all the objects except one !! Thanks in Advance !!

---

## [Failed to connect to backoff(elasticsearch(http://localhost:9200))](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/325065)

<div class="topic-metadata">

**Author:** [@fnbk](https://discuss.elastic.co/u/fnbk)\
**Replies:** 1\
**Last updated:** [February 8, 2023, 9:27pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/325065 "2023-02-08T21:27:53Z")

</div>

I setup Elasticsearch version 8.6.1 the default way which generates self signed certificates so that the Elasticsearch endpoint uses https (https://localhost:9200). I installed the elastic-agent as a windows service usi…

---

## [Query : GET average document count](https://discuss.elastic.co/t/query-get-average-document-count/306556)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 2\
**Last updated:** [June 8, 2022, 1:46am UTC](https://discuss.elastic.co/t/query-get-average-document-count/306556 "2022-06-08T01:46:41Z")

</div>

Hi all , What would be the query to get average number of documents added per day on my index ? Is there any workaround or query to aggregate this data ? Thanks ! Hope to get a response

---

## [All shards failed after migration to 6.7.1](https://discuss.elastic.co/t/all-shards-failed-after-migration-to-6-7-1/176864)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 2:14pm UTC](https://discuss.elastic.co/t/all-shards-failed-after-migration-to-6-7-1/176864 "2019-04-15T14:14:06Z")

</div>

Hi, I have a problem with kibana. I have done a migration to 6.3.0 to 6.7.1 OK for elasticsearch OK for logstash But for kibana, after I have done a yum install kibana and restarted it, I can't connect to the web in…

---

## [Connection reset by peer - Shield RedHat](https://discuss.elastic.co/t/connection-reset-by-peer-shield-redhat/88848)

<div class="topic-metadata">

**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\
**Replies:** 2\
**Last updated:** [June 9, 2017, 3:12pm UTC](https://discuss.elastic.co/t/connection-reset-by-peer-shield-redhat/88848 "2017-06-09T15:12:49Z")

</div>

Hi all, I'm trying to install shield 2.4.4 along with elasticsearch 2.4.0 on RedHat Linux 7.3. When I install elasticsearch without shield I can query elasticsearch successfully using curl -X GET 'http://10.4.04:9200' …

---

## [Remove field in output plugin](https://discuss.elastic.co/t/remove-field-in-output-plugin/45353)

<div class="topic-metadata">

**Author:** [@zulquarnain0110](https://discuss.elastic.co/u/zulquarnain0110)\
**Replies:** 2\
**Last updated:** [March 25, 2016, 1:25pm UTC](https://discuss.elastic.co/t/remove-field-in-output-plugin/45353 "2016-03-25T13:25:43Z")

</div>

Hi Everyone, I have a problem of day change. I google and saw the following URL My problem is that I don't want to save "index\_day" tag in elasticsearch. Is there any way to remove it or ignore it.

---

## [License information could not be obtained from Elasticsearch due to \[illegal\_argument\_exception\] request \[/\_xpack\] contains unrecognized parameter: \[accept\_enterprise\]](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch-due-to-illegal-argument-exception-request-xpack-contains-unrecognized-parameter-accept-enterprise/271990)

<div class="topic-metadata">

**Author:** [@IBoskov](https://discuss.elastic.co/u/IBoskov)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 8:10am UTC](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch-due-to-illegal-argument-exception-request-xpack-contains-unrecognized-parameter-accept-enterprise/271990 "2021-05-04T08:10:05Z")

</div>

Hi there, We are trying to upgrade elasticsearch stack from 7.4.0 to 7.10.2, however when upgrading to 7.10.2 we are facing the following error message from kibana logs. {"type":"log","@timestamp":"2021-05-03T13:20:35Z…

---

## [Rotate indice daily to hourly](https://discuss.elastic.co/t/rotate-indice-daily-to-hourly/146251)

<div class="topic-metadata">

**Author:** [@dis](https://discuss.elastic.co/u/dis)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 5:16am UTC](https://discuss.elastic.co/t/rotate-indice-daily-to-hourly/146251 "2018-08-28T05:16:22Z")

</div>

Can someone point me to info on configure elasticsearch to roll over indice from daily to hourly? Using elasticsearch 6.2.4. The current index is created from fluentd (logstash\_format=true) with timestring '%Y.%m.%d'. …

---

## [Java issue when trying to send requests to ElasticSearch](https://discuss.elastic.co/t/java-issue-when-trying-to-send-requests-to-elasticsearch/16519)

<div class="topic-metadata">

**Author:** [@charles1](https://discuss.elastic.co/u/charles1)\
**Replies:** 4\
**Last updated:** [May 16, 2014, 3:28am UTC](https://discuss.elastic.co/t/java-issue-when-trying-to-send-requests-to-elasticsearch/16519 "2014-05-16T03:28:04Z")

</div>

Hi all, I am currently trying to set up a complete ElasticSearch + LogStash + Kibana stack on Amazon Web Services OpsWorks using the following tutorial : http://devblog.springest.com/complete-logstash-stack-on-aws…

---

## [Sense for elastic 5.0.0-alpha?](https://discuss.elastic.co/t/sense-for-elastic-5-0-0-alpha/46820)

<div class="topic-metadata">

**Author:** [@fassisrosa](https://discuss.elastic.co/u/fassisrosa)\
**Replies:** 5\
**Last updated:** [April 27, 2016, 1:17pm UTC](https://discuss.elastic.co/t/sense-for-elastic-5-0-0-alpha/46820 "2016-04-27T13:17:19Z")

</div>

Hi there, Now that elastic has released version 5.0.0-alpha of the stack, any chance we might be getting an installable pack for the Kibana Sense plugin? I tried installing current version of Sense without success a…

---

## [Light Theme - BGCOLOR changes light\_theme.style.css](https://discuss.elastic.co/t/light-theme-bgcolor-changes-light-theme-style-css/223451)

<div class="topic-metadata">

**Author:** [@jeeva](https://discuss.elastic.co/u/jeeva)\
**Replies:** 7\
**Last updated:** [March 16, 2020, 3:56pm UTC](https://discuss.elastic.co/t/light-theme-bgcolor-changes-light-theme-style-css/223451 "2020-03-16T15:56:38Z")

</div>

Dear Team, I have changed .form-control{} class background color to yellow , but after changing this also am not able to see background color change in Kibana. Could you please help me , how to change the background co…

---

## [Indexing twitter data since 2015 into elasticsearch](https://discuss.elastic.co/t/indexing-twitter-data-since-2015-into-elasticsearch/174499)

<div class="topic-metadata">

**Author:** [@safaelahbizi](https://discuss.elastic.co/u/safaelahbizi)\
**Replies:** 7\
**Last updated:** [April 3, 2019, 9:37am UTC](https://discuss.elastic.co/t/indexing-twitter-data-since-2015-into-elasticsearch/174499 "2019-04-03T09:37:56Z")

</div>

Hi all,I have a document-oriented database (JSON files) Twitter tweets on a Bank since 2015, can you suggest me a method of modeling this data under elasticsearch, so that my queries will be easy and my data will have a…

---

## [Java Msgs in Log](https://discuss.elastic.co/t/java-msgs-in-log/287967)

<div class="topic-metadata">

**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\
**Replies:** 8\
**Last updated:** [November 6, 2021, 2:13am UTC](https://discuss.elastic.co/t/java-msgs-in-log/287967 "2021-11-06T02:13:16Z")

</div>

Hello all, I have installed Elasticsearch for the first time and I am seeing msgs that a terminally deprecated method in java.lang.system has been called. Should I be concerned with this, even though it looks like Elast…

---

## [How we can use es-hadoop in AWS EMR to connect external elasticsearch](https://discuss.elastic.co/t/how-we-can-use-es-hadoop-in-aws-emr-to-connect-external-elasticsearch/108088)

<div class="topic-metadata">

**Author:** [@nand\_kishore](https://discuss.elastic.co/u/nand_kishore)\
**Replies:** 3\
**Last updated:** [December 14, 2017, 7:35pm UTC](https://discuss.elastic.co/t/how-we-can-use-es-hadoop-in-aws-emr-to-connect-external-elasticsearch/108088 "2017-12-14T19:35:51Z")

</div>

Dear all , I have AWS EMR and ELK stack installed on some other server. Since Hadoop is already installed in EMR so how can we connect with Elasticsearch. How much ES-Hadoop help us in AWS EMR. What configuration we n…

---

## [\[RESOLVED\] Custom log in Kibana](https://discuss.elastic.co/t/resolved-custom-log-in-kibana/85100)

<div class="topic-metadata">

**Author:** [@Florius](https://discuss.elastic.co/u/Florius)\
**Replies:** 3\
**Last updated:** [May 10, 2017, 5:26am UTC](https://discuss.elastic.co/t/resolved-custom-log-in-kibana/85100 "2017-05-10T05:26:55Z")

</div>

Hi. I use software that makes logfiles in /var/log/\*softwarename\*/\*YYYYMMDD\*/ It uses JSON formatting. But I'm new to Kibana and have no idea how I can read out the log files properly, as I get the log files in a single …

---

## [Custom filter based on a field range](https://discuss.elastic.co/t/custom-filter-based-on-a-field-range/190752)

<div class="topic-metadata">

**Author:** [@datawrangler](https://discuss.elastic.co/u/datawrangler)\
**Replies:** 4\
**Last updated:** [August 6, 2019, 3:35pm UTC](https://discuss.elastic.co/t/custom-filter-based-on-a-field-range/190752 "2019-08-06T15:35:27Z")

</div>

Hello All, In the Discover Panel, to view all traffic a specific subnet is genrated you can do a filter such as: source.ip: 10.0.1.0/24 source.ip: 10.0.2.0/24 source.ip: 10.0.3.0/24 Is there a way to create a user-fri…

---

## [Help with converting scripts from python to painless](https://discuss.elastic.co/t/help-with-converting-scripts-from-python-to-painless/79912)

<div class="topic-metadata">

**Author:** [@w3max](https://discuss.elastic.co/u/w3max)\
**Replies:** 4\
**Last updated:** [March 27, 2017, 1:40pm UTC](https://discuss.elastic.co/t/help-with-converting-scripts-from-python-to-painless/79912 "2017-03-27T13:40:12Z")

</div>

Hi, I have discovered that from Elasticsearch version 5, "python language plugin" is deprecated in favor of the new default scripting language "Painless". Source: https://www.elastic.co/guide/en/elasticsearch/plugins/c…

---

## [Kibana - Auto Refresh Default Change](https://discuss.elastic.co/t/kibana-auto-refresh-default-change/169795)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 5\
**Last updated:** [February 26, 2019, 9:04pm UTC](https://discuss.elastic.co/t/kibana-auto-refresh-default-change/169795 "2019-02-26T21:04:14Z")

</div>

Hi, I would like to change the auto refresh on my kibana to 1 min by default. Currently the default is 15mins. Can anyone help as to where this can be done? Permanently. Thanks.

---

## [High availability when creating "in memory" index without persisting the index into a storage](https://discuss.elastic.co/t/high-availability-when-creating-in-memory-index-without-persisting-the-index-into-a-storage/5522)

<div class="topic-metadata">

**Author:** [@Spico\_Florin](https://discuss.elastic.co/u/Spico_Florin)\
**Replies:** 5\
**Last updated:** [October 6, 2011, 7:04pm UTC](https://discuss.elastic.co/t/high-availability-when-creating-in-memory-index-without-persisting-the-index-into-a-storage/5522 "2011-10-06T19:04:47Z")

</div>

Hello! We have the following scenario: 1. we would like to maintain an index of documents in memory 2. we don't want to keep the index persisted in a storage. Practically, our index works as temporary index in…

---

## [Problème avec Aggregate](https://discuss.elastic.co/t/probleme-avec-aggregate/269669)

<div class="topic-metadata">

**Author:** [@Yahya\_Bouzoubaa](https://discuss.elastic.co/u/Yahya_Bouzoubaa)\
**Replies:** 6\
**Last updated:** [April 9, 2021, 3:51pm UTC](https://discuss.elastic.co/t/probleme-avec-aggregate/269669 "2021-04-09T15:51:39Z")

</div>

Bonjour, J'ai un bug qui persiste en lien avec l'aggregate. Description du problème initial : j'ai des logs de types request et d'autres de type response. Les logs ne se succèdent pas, entre ces deux requêtes il y a t…

---

## [No index compression with "best\_compression" in 6.3.2](https://discuss.elastic.co/t/no-index-compression-with-best-compression-in-6-3-2/149046)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 6\
**Last updated:** [September 20, 2018, 9:37am UTC](https://discuss.elastic.co/t/no-index-compression-with-best-compression-in-6-3-2/149046 "2018-09-20T09:37:54Z")

</div>

I am using Elasticsearch 6.3.2 to index log data, which is sent from Logstash 6.3.2. Below is my Logstash pipeline config (output part) output { elasticsearch { hosts =\> "my-host:9200" index =\> "%{\[@metadata\]\[index\_t…

---

## [Kibana search bar in dashboard](https://discuss.elastic.co/t/kibana-search-bar-in-dashboard/252801)

<div class="topic-metadata">

**Author:** [@sus](https://discuss.elastic.co/u/sus)\
**Replies:** 2\
**Last updated:** [October 27, 2020, 7:39am UTC](https://discuss.elastic.co/t/kibana-search-bar-in-dashboard/252801 "2020-10-27T07:39:38Z")

</div>

Hi! Im working in Kibana 7.8.1. I have a dashboard with a controls visualization and a table. The controls visualization has a dropdown menu - at the moment I dont have more than 100 data entries, but sooner than later…

---

## [Index not moving to next phase](https://discuss.elastic.co/t/index-not-moving-to-next-phase/273376)

<div class="topic-metadata">

**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 11:49am UTC](https://discuss.elastic.co/t/index-not-moving-to-next-phase/273376 "2021-05-19T11:49:25Z")

</div>

Hi, I'm struggleling with ILM. Using Kibana, I've setup a policy where after a day index should be moved to a warm phase and after 3 days they should be moved to a cold phase. Unfortunately, even with this policy enab…

---

## [How many users can be created in kibana? do you have limit?](https://discuss.elastic.co/t/how-many-users-can-be-created-in-kibana-do-you-have-limit/194435)

<div class="topic-metadata">

**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\
**Replies:** 3\
**Last updated:** [August 9, 2019, 8:59am UTC](https://discuss.elastic.co/t/how-many-users-can-be-created-in-kibana-do-you-have-limit/194435 "2019-08-09T08:59:05Z")

</div>

Hi There, How many users can be created in kibana? do you have limit? if so what s the ideal number which does not hit dashboard performance. Thank you!!!

[Previous page](https://discuss.elastic.co/top.md?page=690&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=692&per_page=50&period=all)
