# Top

**URL:** https://discuss.elastic.co/top.md?page=695&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 696

---

## [Scroll api or search\_after giving duplicate records](https://discuss.elastic.co/t/scroll-api-or-search-after-giving-duplicate-records/219254)

<div class="topic-metadata">

**Author:** [@arjun\_kumar](https://discuss.elastic.co/u/arjun_kumar)\
**Replies:** 4\
**Last updated:** [February 14, 2020, 9:05am UTC](https://discuss.elastic.co/t/scroll-api-or-search-after-giving-duplicate-records/219254 "2020-02-14T09:05:54Z")

</div>

Hi I would like query huge amount of data (more than 500k), to achieve this, I used scroll API and searc\_after(with modified time) in both the cases it's giving me the same records(duplicate) multiple times { …

---

## [Rally 0.4.0 released](https://discuss.elastic.co/t/rally-0-4-0-released/59405)

<div class="topic-metadata">

**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\
**Replies:** 0\
**Last updated:** [August 31, 2016, 9:07am UTC](https://discuss.elastic.co/t/rally-0-4-0-released/59405 "2016-08-31T09:07:13Z")

</div>

Today we're proud to announce Rally 0.4.0. Although not much changed from the outside, Rally 0.4.0 is basically a rewrite of one of its core components: the load generator. How to...? ... upgrade: pip3 install --upgr…

---

## [Number of documents in Dev tools is different from number of document in Discover](https://discuss.elastic.co/t/number-of-documents-in-dev-tools-is-different-from-number-of-document-in-discover/274917)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 8\
**Last updated:** [June 9, 2021, 12:31pm UTC](https://discuss.elastic.co/t/number-of-documents-in-dev-tools-is-different-from-number-of-document-in-discover/274917 "2021-06-09T12:31:09Z")

</div>

I am using ELK 7.9.3 and I have an index which contain more then 2M documents, I used reindex API to have a sample using the following command: POST /\_reindex?wait\_for\_completion=false { "max\_docs": 1000, "source":…

---

## [We can't find products matching the selection](https://discuss.elastic.co/t/we-cant-find-products-matching-the-selection/255653)

<div class="topic-metadata">

**Author:** [@AndrewsG](https://discuss.elastic.co/u/AndrewsG)\
**Replies:** 3\
**Last updated:** [November 17, 2020, 10:34am UTC](https://discuss.elastic.co/t/we-cant-find-products-matching-the-selection/255653 "2020-11-17T10:34:34Z")

</div>

Hi, I have installed Elasticsearch onto a Magento 2.4 site. I keep receiving the error "We can't find products matching the selection" after a period of time of the Elasticsearch working. Please can anyone advise?

---

## [Accidentally deleted the \_state folder of the index](https://discuss.elastic.co/t/accidentally-deleted-the-state-folder-of-the-index/166873)

<div class="topic-metadata">

**Author:** [@Shubhankar\_Sarda](https://discuss.elastic.co/u/Shubhankar_Sarda)\
**Replies:** 3\
**Last updated:** [February 3, 2019, 8:04pm UTC](https://discuss.elastic.co/t/accidentally-deleted-the-state-folder-of-the-index/166873 "2019-02-03T20:04:21Z")

</div>

During an upgrade process I accidentally deleted the \_state folder of an index. Now it shows the following error on starting elasticsearch \[2019-02-03T17:06:13,247\]\[WARN \]\[o.e.c.u.IndexFolderUpgrader\] \[/var/lib/elastic…

---

## [Elasticsearch sequence pattern mining](https://discuss.elastic.co/t/elasticsearch-sequence-pattern-mining/88255)

<div class="topic-metadata">

**Author:** [@vinay\_khandelwal](https://discuss.elastic.co/u/vinay_khandelwal)\
**Replies:** 3\
**Last updated:** [June 14, 2017, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-sequence-pattern-mining/88255 "2017-06-14T10:19:43Z")

</div>

I am looking for a way to search patterns in the elasticsearch events. Let us consider two different query matches that return documents of type A and B. Is it possible to obtain all documents where an A is followed …

---

## [Filebeat skipping log files](https://discuss.elastic.co/t/filebeat-skipping-log-files/59232)

<div class="topic-metadata">

**Author:** [@tcaudrey](https://discuss.elastic.co/u/tcaudrey)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-skipping-log-files/59232 "2016-08-30T14:44:07Z")

</div>

Hello, Recently I have noticed filebeat has been skipping some log files completely. From the logs it seems as if logbeat thinks it's already consumed the log in question. Which is impossible, as the log didn't even ex…

---

## [Kibana and offline OpenStreetMap serveur](https://discuss.elastic.co/t/kibana-and-offline-openstreetmap-serveur/255169)

<div class="topic-metadata">

**Author:** [@Simon\_Poirier](https://discuss.elastic.co/u/Simon_Poirier)\
**Replies:** 5\
**Last updated:** [November 12, 2020, 4:38pm UTC](https://discuss.elastic.co/t/kibana-and-offline-openstreetmap-serveur/255169 "2020-11-12T16:38:30Z")

</div>

Hi to all ! I build my own offline OpenStreetMap server in a virutal machine following switc2osm tutorial and it works fine. the tutorial here : switch2osm I build a second virtual machine whith Elastic search and kib…

---

## [Setup password for Elasticsearch in windows cmd](https://discuss.elastic.co/t/setup-password-for-elasticsearch-in-windows-cmd/135577)

<div class="topic-metadata">

**Author:** [@sravan\_gottipaty](https://discuss.elastic.co/u/sravan_gottipaty)\
**Replies:** 5\
**Last updated:** [June 25, 2018, 1:45am UTC](https://discuss.elastic.co/t/setup-password-for-elasticsearch-in-windows-cmd/135577 "2018-06-25T01:45:53Z")

</div>

Elasticsearch and kibana were running perfectly before but when I installed x-pack it started asking for the password I looked at the forums but they all were in the linux environment. I tried typing in the default usern…

---

## [Mapper\_parsing\_exception with template](https://discuss.elastic.co/t/mapper-parsing-exception-with-template/114534)

<div class="topic-metadata">

**Author:** [@florentmair](https://discuss.elastic.co/u/florentmair)\
**Replies:** 7\
**Last updated:** [January 8, 2018, 2:56pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-with-template/114534 "2018-01-08T14:56:24Z")

</div>

Hello, i am updated my cluster from 5.6.1 to 6.1.1 and i am not able to create new index if i use template My template PUT \_template/tds\_audit { "order": 0, "index\_patterns": "logstash-tds\_audit\*", "setti…

---

## [What effect does index\_buffer\_size have on performance?](https://discuss.elastic.co/t/what-effect-does-index-buffer-size-have-on-performance/55920)

<div class="topic-metadata">

**Author:** [@eugene\_miretsky](https://discuss.elastic.co/u/eugene_miretsky)\
**Replies:** 7\
**Last updated:** [July 29, 2016, 3:50pm UTC](https://discuss.elastic.co/t/what-effect-does-index-buffer-size-have-on-performance/55920 "2016-07-29T15:50:32Z")

</div>

index\_buffer\_size configured the amount of RAM available for indexing. However, what is that memory actually used for? Segments are stored in memory before being flushed (but that's controlled by flush\_threshold\_size). …

---

## [Load json file failed, "The file could not be processed."](https://discuss.elastic.co/t/load-json-file-failed-the-file-could-not-be-processed/94107)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 2\
**Last updated:** [July 22, 2017, 7:05am UTC](https://discuss.elastic.co/t/load-json-file-failed-the-file-could-not-be-processed/94107 "2017-07-22T07:05:52Z")

</div>

ELK version: 5.4.1 I followed this guide: When I import the json file, it always report a error: Saved Objects: The file could not be processed.

---

## [Kibana 5 won't start after install](https://discuss.elastic.co/t/kibana-5-wont-start-after-install/72034)

<div class="topic-metadata">

**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\
**Replies:** 2\
**Last updated:** [January 19, 2017, 7:37am UTC](https://discuss.elastic.co/t/kibana-5-wont-start-after-install/72034 "2017-01-19T07:37:55Z")

</div>

Details: - CentOS 7 (10 nodes) - Kibana 5.1.2 (installed the rpm) - ES 5.1.2 I've installed elasticsearch on ten nodes and all of them have succesfully joined the cluster. When I enter localhost:9200 in my browser I ge…

---

## [Toggling legend in embedded visualizations](https://discuss.elastic.co/t/toggling-legend-in-embedded-visualizations/86448)

<div class="topic-metadata">

**Author:** [@kostja79](https://discuss.elastic.co/u/kostja79)\
**Replies:** 6\
**Last updated:** [June 7, 2017, 10:32am UTC](https://discuss.elastic.co/t/toggling-legend-in-embedded-visualizations/86448 "2017-06-07T10:32:40Z")

</div>

I embedded some Kibana visualizations in my html pages via iframe. How can I toggle every legend on load? Thanks

---

## [\[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-telemetry\]: version conflict, required seqNo \[14477\], primary term \[48\]. current document has seqNo \[14478\] and primary term \[48\]](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447)

<div class="topic-metadata">

**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\
**Replies:** 1\
**Last updated:** [July 23, 2021, 11:29pm UTC](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447 "2021-07-23T23:29:30Z")

</div>

I am using kibana 7.10.2 and I can see the following error in logs. Is there any way to fix it? server log \[06:30:40.197\] \[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-t…

---

## [How to restrict user to access tab on kibana](https://discuss.elastic.co/t/how-to-restrict-user-to-access-tab-on-kibana/156137)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 4\
**Last updated:** [November 14, 2018, 3:48am UTC](https://discuss.elastic.co/t/how-to-restrict-user-to-access-tab-on-kibana/156137 "2018-11-14T03:48:52Z")

</div>

Hi, I want to restrict management,apm,graph to access by user. I'm using xpack. It contain default roles in that i could see one role 'kibana\_dashboard\_only' like this i want to provide some role. Anyone can help me on…

---

## [Undesired client nodes discovered via sniffing](https://discuss.elastic.co/t/undesired-client-nodes-discovered-via-sniffing/24110)

<div class="topic-metadata">

**Author:** [@jimmyjones2](https://discuss.elastic.co/u/jimmyjones2)\
**Replies:** 5\
**Last updated:** [June 27, 2015, 5:58pm UTC](https://discuss.elastic.co/t/undesired-client-nodes-discovered-via-sniffing/24110 "2015-06-27T17:58:16Z")

</div>

I've been following the Kibana guide which suggests in production to set up an Elasticsearch client node for Kibana to use. However, by default any ingest processes using sniffing will start sending indexing requests via…

---

## [Drop milliseconds from timestamp](https://discuss.elastic.co/t/drop-milliseconds-from-timestamp/232264)

<div class="topic-metadata">

**Author:** [@alberto1](https://discuss.elastic.co/u/alberto1)\
**Replies:** 7\
**Last updated:** [May 14, 2020, 2:35pm UTC](https://discuss.elastic.co/t/drop-milliseconds-from-timestamp/232264 "2020-05-14T14:35:23Z")

</div>

Hi, I am trying to drop the 4 miliseconds from the timestamp but i cannot make it work and it's given me an error of \_dateparsefailure the bit where I have the error is: grok { match =\> \[ "message", "%{TIMESTAMP\_ISO…

---

## [Create a new field with ruby filter](https://discuss.elastic.co/t/create-a-new-field-with-ruby-filter/166307)

<div class="topic-metadata">

**Author:** [@thelfter](https://discuss.elastic.co/u/thelfter)\
**Replies:** 1\
**Last updated:** [January 30, 2019, 11:00am UTC](https://discuss.elastic.co/t/create-a-new-field-with-ruby-filter/166307 "2019-01-30T11:00:43Z")

</div>

grok { match =\> { "request" =\> \[ "url", "%{URIPATH:url\_path}%{URIPARAM:url\_params}?" \]} } urldecode{ field =\> "url\_path" } mutate { gsub =\> \["url\_params","\\?","" \] } kv { field\_split =\> "&" source =\> "url\_…

---

## [Corrupt winlogbeat.yml checkpoint file](https://discuss.elastic.co/t/corrupt-winlogbeat-yml-checkpoint-file/58417)

<div class="topic-metadata">

**Author:** [@mcgrew](https://discuss.elastic.co/u/mcgrew)\
**Replies:** 7\
**Last updated:** [August 19, 2016, 2:06am UTC](https://discuss.elastic.co/t/corrupt-winlogbeat-yml-checkpoint-file/58417 "2016-08-19T02:06:02Z")

</div>

I'm using 5.0.0-alpha4 and I noticed that on some users the service was not able to start up. The following error was in the log file: 2016-08-18T18:22:56-07:00 CRIT Exiting: yaml: control characters are not allowed I…

---

## [Timeout Connection are not being monitored by packetbeat](https://discuss.elastic.co/t/timeout-connection-are-not-being-monitored-by-packetbeat/31581)

<div class="topic-metadata">

**Author:** [@5uraj](https://discuss.elastic.co/u/5uraj)\
**Replies:** 7\
**Last updated:** [October 11, 2015, 1:41pm UTC](https://discuss.elastic.co/t/timeout-connection-are-not-being-monitored-by-packetbeat/31581 "2015-10-11T13:41:40Z")

</div>

I have noticed one more issue where packetbeat is not sending data for connection timeouts on nginx running on application servers. So whenever there is any 504 on nginx logs there is no corresponding log in packetbeats. …

---

## [Vega transform not recognized](https://discuss.elastic.co/t/vega-transform-not-recognized/125507)

<div class="topic-metadata">

**Author:** [@m.hashemian](https://discuss.elastic.co/u/m.hashemian)\
**Replies:** 3\
**Last updated:** [March 26, 2018, 1:06pm UTC](https://discuss.elastic.co/t/vega-transform-not-recognized/125507 "2018-03-26T13:06:27Z")

</div>

Hi there, When I use Vega's flatten transform in Kibana 6.2.3, I get a message saying Unrecognized transform type: "flatten". I assume the version of Vega used in Kibana does not support this transform yet. Is this corr…

---

## [How can you remove node ID form cluster?](https://discuss.elastic.co/t/how-can-you-remove-node-id-form-cluster/182646)

<div class="topic-metadata">

**Author:** [@Theoooooo](https://discuss.elastic.co/u/Theoooooo)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-can-you-remove-node-id-form-cluster/182646 "2019-05-28T07:58:57Z")

</div>

Hello Everyone, i'm in a situation i've never seen anywhere else and i really need you help on this one. I decomissioned a master eligible node while following the guide : https://www.elastic.co/guide/en/elasticsearch/…

---

## [Import java classes into painless script](https://discuss.elastic.co/t/import-java-classes-into-painless-script/130699)

<div class="topic-metadata">

**Author:** [@A\_Med\_Student](https://discuss.elastic.co/u/A_Med_Student)\
**Replies:** 3\
**Last updated:** [May 22, 2018, 5:20pm UTC](https://discuss.elastic.co/t/import-java-classes-into-painless-script/130699 "2018-05-22T17:20:47Z")

</div>

Hi, I am migrating from an old version of elasticsearch (1.4.4). I had a groovy script, that was importing classes from the java classpath. With my earlier script I was executing updates, conditionally. With the new ve…

---

## [Query using Kibana URL](https://discuss.elastic.co/t/query-using-kibana-url/145007)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 4\
**Last updated:** [August 23, 2018, 8:55am UTC](https://discuss.elastic.co/t/query-using-kibana-url/145007 "2018-08-23T08:55:43Z")

</div>

Hey , I am using kibana v6.3.0 . I want to show the discover tab with pre-existing filter to users which I want to show them(basically, filtered logs) . The problem here is, if I open the link in incognito tab, it shows…

---

## [JSON file -\> Filebeat -\> Logstash](https://discuss.elastic.co/t/json-file-filebeat-logstash/250636)

<div class="topic-metadata">

**Author:** [@AnthonyS4](https://discuss.elastic.co/u/AnthonyS4)\
**Replies:** 6\
**Last updated:** [October 6, 2020, 2:59pm UTC](https://discuss.elastic.co/t/json-file-filebeat-logstash/250636 "2020-10-06T14:59:51Z")

</div>

Hi, I'm trying to parse a JSON file with Filebeat and then send it to Logstash, Logstash is not receiving data then there is no an output file, these are my configs.yml: filebeat.yml filebeat.inputs: - type: log …

---

## [\[KIBANA\] Impossible de créer un index pattern](https://discuss.elastic.co/t/kibana-impossible-de-creer-un-index-pattern/183983)

<div class="topic-metadata">

**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\
**Replies:** 6\
**Last updated:** [June 4, 2019, 1:17pm UTC](https://discuss.elastic.co/t/kibana-impossible-de-creer-un-index-pattern/183983 "2019-06-04T13:17:36Z")

</div>

Bonjour tout le monde, Je viens de fraîchement installer une stack Elastic sur Kubernetes en suivant le tuto suivant: https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html J'ai donc un cluster elasticsearch …

---

## [Is path.repo needed to register a snapshot repository for "type" = "s3"? (elasticsearch 1.7.4)](https://discuss.elastic.co/t/is-path-repo-needed-to-register-a-snapshot-repository-for-type-s3-elasticsearch-1-7-4/41932)

<div class="topic-metadata">

**Author:** [@Vishal\_Singh1](https://discuss.elastic.co/u/Vishal_Singh1)\
**Replies:** 6\
**Last updated:** [May 18, 2016, 12:10am UTC](https://discuss.elastic.co/t/is-path-repo-needed-to-register-a-snapshot-repository-for-type-s3-elasticsearch-1-7-4/41932 "2016-05-18T00:10:20Z")

</div>

I am getting this error 1) Error injecting constructor, org.elasticsearch.repositories.RepositoryException: \[repository\] location \[backup\] doesn't match any of the locations specified by path.repo because this setting is…

---

## [Reindexing with Logstash causes ArrayIndexOutOfBoundsException errors on Elasticsearch 1.7.5](https://discuss.elastic.co/t/reindexing-with-logstash-causes-arrayindexoutofboundsexception-errors-on-elasticsearch-1-7-5/46574)

<div class="topic-metadata">

**Author:** [@jdoss](https://discuss.elastic.co/u/jdoss)\
**Replies:** 6\
**Last updated:** [April 8, 2016, 1:05am UTC](https://discuss.elastic.co/t/reindexing-with-logstash-causes-arrayindexoutofboundsexception-errors-on-elasticsearch-1-7-5/46574 "2016-04-08T01:05:33Z")

</div>

I am seeing the following errors when trying to reindex all of my 2016 indexes to get rid of fields with dots in them so I can upgrade to Elasticsearch 2.x. I am seeing ArrayIndexOutOfBoundsException errors if I do all o…

---

## [Percolate performance improvements?](https://discuss.elastic.co/t/percolate-performance-improvements/194717)

<div class="topic-metadata">

**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 12:19pm UTC](https://discuss.elastic.co/t/percolate-performance-improvements/194717 "2019-08-12T12:19:58Z")

</div>

We have been experiencing what feels like rather poor performance for our percolate queries. We have 4 indexes with percolate queries, each with a few hundred saved queries. These indexes have a single shard and many rep…

---

## [Kibanaダッシュボード作成の自動化について](https://discuss.elastic.co/t/kibana/162160)

<div class="topic-metadata">

**Author:** [@hmlhmz](https://discuss.elastic.co/u/hmlhmz)\
**Replies:** 2\
**Last updated:** [December 27, 2018, 4:09am UTC](https://discuss.elastic.co/t/kibana/162160 "2018-12-27T04:09:04Z")

</div>

現在、json形式のデータをElasticsearchへ投入し(elasticsearch-pyを使用)、その後手動でkibanaのビジュアライズやダッシュボードでグラフを作成しています。 この手動で行っている部分を自動化(スクリプト化)したいと考えています。 具体的には、以下のような事ができないか考えています。 サンプル等(elasticsearch-py)見つける事ができず問い合わせさせていただきました。実現可否と、可能な場合…

---

## [Reduce threads used by elasticsearch](https://discuss.elastic.co/t/reduce-threads-used-by-elasticsearch/18271)

<div class="topic-metadata">

**Author:** [@jnortey](https://discuss.elastic.co/u/jnortey)\
**Replies:** 5\
**Last updated:** [August 15, 2014, 8:45am UTC](https://discuss.elastic.co/t/reduce-threads-used-by-elasticsearch/18271 "2014-08-15T08:45:16Z")

</div>

We have a development and production offering that uses elasticsearch. In development, it is not necessary to create many threads and so we're trying to use as few threads as possible. I've been able to make some gre…

---

## [SSL error in docker container](https://discuss.elastic.co/t/ssl-error-in-docker-container/347542)

<div class="topic-metadata">

**Author:** [@Manoj\_Chander](https://discuss.elastic.co/u/Manoj_Chander)\
**Replies:** 0\
**Last updated:** [November 20, 2023, 2:43pm UTC](https://discuss.elastic.co/t/ssl-error-in-docker-container/347542 "2023-11-20T14:43:50Z")

</div>

I am setting up docker container for elasticsearch and kibana : (customised from docker compose) im doing setup container steps manually image used : docker.elastic.co/elasticsearch/elasticsearch:8.11.1 ==============…

---

## [Error in beats elastic agent container: open /hostfs/sys/fs/cgroup/io.pressure: no such file or directory](https://discuss.elastic.co/t/error-in-beats-elastic-agent-container-open-hostfs-sys-fs-cgroup-io-pressure-no-such-file-or-directory/299115)

<div class="topic-metadata">

**Author:** [@Josh-a-e](https://discuss.elastic.co/u/Josh-a-e)\
**Replies:** 0\
**Last updated:** [March 8, 2022, 4:20pm UTC](https://discuss.elastic.co/t/error-in-beats-elastic-agent-container-open-hostfs-sys-fs-cgroup-io-pressure-no-such-file-or-directory/299115 "2022-03-08T16:20:35Z")

</div>

On running an elastic agent container (docker.elastic.co/beats/elastic-agent:8.0.1) as a daemon set (configuration here - https://raw.githubusercontent.com/elastic/beats/8.0/deploy/kubernetes/elastic-agent-managed-kubern…

---

## [Elastic Stack 5.4.2 released](https://discuss.elastic.co/t/elastic-stack-5-4-2-released/90125)

<div class="topic-metadata">

**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\
**Replies:** 0\
**Last updated:** [June 20, 2017, 4:31pm UTC](https://discuss.elastic.co/t/elastic-stack-5-4-2-released/90125 "2017-06-20T16:31:32Z")

</div>

Hi all, We've just released version 5.4.2 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts for Elasticsea…

---

## [Kibana Scripted Fields - Using one Value for a URL and another for the Label](https://discuss.elastic.co/t/kibana-scripted-fields-using-one-value-for-a-url-and-another-for-the-label/210925)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 10:16pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-using-one-value-for-a-url-and-another-for-the-label/210925 "2019-12-19T22:16:16Z")

</div>

I'm trying to use scripted fields on my index pattern in Kibana 6.7. I basically want to have 'field\_A' referenced in the URL template, and 'field\_B' referenced in the Label Template, but I must be doing something wrong …

---

## [Session State and Load Balancing Kibana 4](https://discuss.elastic.co/t/session-state-and-load-balancing-kibana-4/47931)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 3\
**Last updated:** [April 21, 2016, 11:32pm UTC](https://discuss.elastic.co/t/session-state-and-load-balancing-kibana-4/47931 "2016-04-21T23:32:39Z")

</div>

Unlike Kibana 3, Kibana 4 stores user session state in the Kibana server. Is that accurate? If this is true, how would one load balance Kibana? I could configure my load balancer to be sticky, but that would requir…

---

## [Multiple IDs for the same document](https://discuss.elastic.co/t/multiple-ids-for-the-same-document/5507)

<div class="topic-metadata">

**Author:** [@Neil1](https://discuss.elastic.co/u/Neil1)\
**Replies:** 3\
**Last updated:** [October 4, 2011, 5:13am UTC](https://discuss.elastic.co/t/multiple-ids-for-the-same-document/5507 "2011-10-04T05:13:53Z")

</div>

Just curious -- is this possible? Thanks, Neil

---

## [Logstash pipeline error by filebeat](https://discuss.elastic.co/t/logstash-pipeline-error-by-filebeat/139605)

<div class="topic-metadata">

**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 4:48pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-by-filebeat/139605 "2018-07-11T16:48:40Z")

</div>

When i am hitting the pipeline of logstash through file beat we are getting this error. \[INFO \] 2018-07-11 16:04:10.935 \[defaultEventExecutorGroup-5-2\] BeatsHandler - \[local: 172...:5044, remote: 172...:45904\] Handling …

---

## [NoShardAvailableActionException Error on ElasticSearch on Docker](https://discuss.elastic.co/t/noshardavailableactionexception-error-on-elasticsearch-on-docker/279555)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 2\
**Last updated:** [July 26, 2021, 11:52am UTC](https://discuss.elastic.co/t/noshardavailableactionexception-error-on-elasticsearch-on-docker/279555 "2021-07-26T11:52:49Z")

</div>

I set up basic security for the Elastic Stack plus secured HTTPS traffic recently and i encrypted all communication between the elastic nodes even though i use only one node. The thins is now kibana will have this error…

---

## [Reindex daily-indices in a single command](https://discuss.elastic.co/t/reindex-daily-indices-in-a-single-command/128892)

<div class="topic-metadata">

**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\
**Replies:** 4\
**Last updated:** [May 31, 2018, 2:20pm UTC](https://discuss.elastic.co/t/reindex-daily-indices-in-a-single-command/128892 "2018-05-31T14:20:26Z")

</div>

Hi, I've recently had to update the type-mapping for ~30 indices, changing several fields from text → keyword \[1\]. I now need to do this again, and am wondering if there is an easier method than the one shown below. W…

---

## [Logstash with redis cluster problem](https://discuss.elastic.co/t/logstash-with-redis-cluster-problem/40002)

<div class="topic-metadata">

**Author:** [@liuzg459](https://discuss.elastic.co/u/liuzg459)\
**Replies:** 4\
**Last updated:** [January 25, 2016, 10:28am UTC](https://discuss.elastic.co/t/logstash-with-redis-cluster-problem/40002 "2016-01-25T10:28:04Z")

</div>

Hi there! I want to use redis cluster instant of one instance. here is my framework： logstash shipper -\>redis cluster -\> logstash indexer -\> elasticsearch -\> kibana Here is my redis config: \[root@localhost src\]# ./re…

---

## [Elasticsearch snapshots on Azure Blob stops suddenly with weird error](https://discuss.elastic.co/t/elasticsearch-snapshots-on-azure-blob-stops-suddenly-with-weird-error/201541)

<div class="topic-metadata">

**Author:** [@sunilthemaster](https://discuss.elastic.co/u/sunilthemaster)\
**Replies:** 6\
**Last updated:** [October 18, 2019, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-on-azure-blob-stops-suddenly-with-weird-error/201541 "2019-10-18T17:26:26Z")

</div>

I have multiple environments on Azure. Each of the env. has multiple node elasticsearch cluster. everything was working fine for months and now suddenly ES snapshot stopped worked with weird error. Error during snapshot…

---

## [Xml parse files help](https://discuss.elastic.co/t/xml-parse-files-help/87778)

<div class="topic-metadata">

**Author:** [@timj123](https://discuss.elastic.co/u/timj123)\
**Replies:** 6\
**Last updated:** [July 3, 2017, 5:40pm UTC](https://discuss.elastic.co/t/xml-parse-files-help/87778 "2017-07-03T17:40:36Z")

</div>

Everyone - I am really new to elk and I have a requirement to parse a very large (~1.9M line) xml file. In this xml file I want to capture two tag fields and create an timestamp field that all the events that follow wil…

---

## [Session cookies will be transmitted over insecure connections](https://discuss.elastic.co/t/session-cookies-will-be-transmitted-over-insecure-connections/112246)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 1:28pm UTC](https://discuss.elastic.co/t/session-cookies-will-be-transmitted-over-insecure-connections/112246 "2017-12-19T13:28:00Z")

</div>

Hello, On my Kibana 6.1 test server I get this on kibana service restart Dec 18 15:10:04 srvelkodv02 kibana: {"type":"log","@timestamp":"2017-12-18T14:10:04Z","tags":\["security","warning"\],"pid":20636,"message":"Sessio…

---

## [What is the replacement of SQL UNION in KQL?](https://discuss.elastic.co/t/what-is-the-replacement-of-sql-union-in-kql/275407)

<div class="topic-metadata">

**Author:** [@VinodKumarPotta](https://discuss.elastic.co/u/VinodKumarPotta)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:39am UTC](https://discuss.elastic.co/t/what-is-the-replacement-of-sql-union-in-kql/275407 "2021-06-15T07:39:32Z")

</div>

Hi Team, Would like to check in this forum, Is there anyway that we can achieve UNION by using KQL? I have a requirement where I would need to build a Kibana dashboard with UNION of multiple sub-queries. Thank you!

---

## [Error while enrolling: fail to execute the HTTP POST request: Post https://A.B.C:443/api/beats/agent/XXX-XXX-XXX-XXX-XXX: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/error-while-enrolling-fail-to-execute-the-http-post-request-post-https-a-b-c-443-api-beats-agent-xxx-xxx-xxx-xxx-xxx-x509-certificate-signed-by-unknown-authority/167377)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [February 15, 2019, 9:36am UTC](https://discuss.elastic.co/t/error-while-enrolling-fail-to-execute-the-http-post-request-post-https-a-b-c-443-api-beats-agent-xxx-xxx-xxx-xxx-xxx-x509-certificate-signed-by-unknown-authority/167377 "2019-02-15T09:36:22Z")

</div>

Hello World! @pierhugues am still trying to get an answer to following: Is there a work around or ... Please advise.

---

## [Logstash kafka input issues in reconnecting to zookeeper](https://discuss.elastic.co/t/logstash-kafka-input-issues-in-reconnecting-to-zookeeper/57741)

<div class="topic-metadata">

**Author:** [@prabhakar349](https://discuss.elastic.co/u/prabhakar349)\
**Replies:** 5\
**Last updated:** [August 16, 2016, 1:29pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-issues-in-reconnecting-to-zookeeper/57741 "2016-08-16T13:29:17Z")

</div>

We are using logstash version : logstash-2.3.3 Right now we are using kafka input to read messages from broker which is version 0.9 { kafka { topic\_id =\> "{{kafka\_log\_consumer\_topic\_id}}" group\_id =\>…

---

## [\[SOLVED\]Logstash strange indexing error](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702)

<div class="topic-metadata">

**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\
**Replies:** 5\
**Last updated:** [August 3, 2016, 12:51pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702 "2016-08-03T12:51:30Z")

</div>

Hello, During reindexing through logstash I get this error (lot of times...): Should not be that message part also qouted? Failed action. {:status=\>400, :action=\>\["index", {:\_id=\>"+lmAQBUf3Mrk9Yymy08bABnbE8mg8EFRHqrx6…

---

## [Kibana service stops after few seconds](https://discuss.elastic.co/t/kibana-service-stops-after-few-seconds/158954)

<div class="topic-metadata">

**Author:** [@caiossouza](https://discuss.elastic.co/u/caiossouza)\
**Replies:** 2\
**Last updated:** [December 5, 2018, 1:09pm UTC](https://discuss.elastic.co/t/kibana-service-stops-after-few-seconds/158954 "2018-12-05T13:09:23Z")

</div>

Hello, My Kibana was working fine for months and it stopped working without apparently reason. When I restart the service using "sudo service kibana start", it stops after few seconds. I've checked the storage and me…

[Previous page](https://discuss.elastic.co/top.md?page=694&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=696&per_page=50&period=all)
