# Top **URL:** https://discuss.elastic.co/top.md?page=705&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 706 --- ## [Environment variables in IF-statement](https://discuss.elastic.co/t/environment-variables-in-if-statement/63613)
**Author:** [@krzysztof\_pl](https://discuss.elastic.co/u/krzysztof_pl)\ **Replies:** 2\ **Last updated:** [October 23, 2016, 7:53pm UTC](https://discuss.elastic.co/t/environment-variables-in-if-statement/63613 "2016-10-23T19:53:08Z")
hi Everyone! My goal is to 'implement' filter to process only traces with specific levels. Perfect solution: levels should be defined in separated file or environment variable. So, I would like to achive it in this w… --- ## [RabbitMQ: no queues and state idle when indexing](https://discuss.elastic.co/t/rabbitmq-no-queues-and-state-idle-when-indexing/21774)
**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\ **Replies:** 2\ **Last updated:** [January 22, 2015, 2:42pm UTC](https://discuss.elastic.co/t/rabbitmq-no-queues-and-state-idle-when-indexing/21774 "2015-01-22T14:42:01Z")
Hi all, I have installed the RabbitMQ plugin and added a user "elasticsearch" with administrator rights in RabbitMQ. The plugin is loaded fine: \[2015-01-22 11:33:01,974\]\[INFO \]\[plugins \] \[node2\]… --- ## [Structuring data for hierarchy](https://discuss.elastic.co/t/structuring-data-for-hierarchy/45356)
**Author:** [@Dani](https://discuss.elastic.co/u/Dani)\ **Replies:** 1\ **Last updated:** [March 24, 2016, 5:53pm UTC](https://discuss.elastic.co/t/structuring-data-for-hierarchy/45356 "2016-03-24T17:53:07Z")
Hi there, I'm trying to structure a log file that holds information about hierarchy that I would like to aggregate on at different levels. I may have data that looks like this animal::mammal::dog::collie or fruit::vege… --- ## [504 error issue](https://discuss.elastic.co/t/504-error-issue/14142)
**Author:** [@fred](https://discuss.elastic.co/u/fred)\ **Replies:** 1\ **Last updated:** [October 28, 2013, 4:59pm UTC](https://discuss.elastic.co/t/504-error-issue/14142 "2013-10-28T16:59:58Z")
Hello, Every once in a while, my client gets disconnected from my server, with the following stack. ES version is 0.90.2, with the following cluster setup: - 2 http nodes - 3 data nodes The ES http hosts ar… --- ## [Preventing to send logs from /var/log/messages and /var/log/secure](https://discuss.elastic.co/t/preventing-to-send-logs-from-var-log-messages-and-var-log-secure/167473)
**Author:** [@Anonymous2](https://discuss.elastic.co/u/Anonymous2)\ **Replies:** 0\ **Last updated:** [February 7, 2019, 3:05pm UTC](https://discuss.elastic.co/t/preventing-to-send-logs-from-var-log-messages-and-var-log-secure/167473 "2019-02-07T15:05:26Z")
Hello, I have installed and configured Elasticsearch, Logstash, Filebeat and Kibana. I'm sending logs from Filebeat to Logstash and to Elasticsearch. I have deleted the /var/log/messages path in filebeat.yml file, but … --- ## ["Kibana is now available (was degraded)"](https://discuss.elastic.co/t/kibana-is-now-available-was-degraded/305335)
**Author:** [@grramaprasad](https://discuss.elastic.co/u/grramaprasad)\ **Replies:** 3\ **Last updated:** [May 21, 2022, 9:03pm UTC](https://discuss.elastic.co/t/kibana-is-now-available-was-degraded/305335 "2022-05-21T21:03:44Z")
Cannot launch kibana but the service is available --- ## [Kibana nested JSON search](https://discuss.elastic.co/t/kibana-nested-json-search/97602)
**Author:** [@Ali\_Khan](https://discuss.elastic.co/u/Ali_Khan)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 5:52pm UTC](https://discuss.elastic.co/t/kibana-nested-json-search/97602 "2017-08-18T17:52:26Z")
Currently we pipe application logs to ElasticSearch via Fleuntd. When searching it's been impossible to do so by JSON Keys within a log field. Below in our 'log' field we have a correctly formatted JSON string. However i… --- ## [Elastic pricing for on-premises deployment](https://discuss.elastic.co/t/elastic-pricing-for-on-premises-deployment/356980)
**Author:** [@S\_n\_Ngo\_Hoang](https://discuss.elastic.co/u/S_n_Ngo_Hoang)\ **Replies:** 5\ **Last updated:** [April 8, 2024, 4:26pm UTC](https://discuss.elastic.co/t/elastic-pricing-for-on-premises-deployment/356980 "2024-04-08T16:26:21Z")
Hello, I am currently working as a security analyst and am interested in Elastic and Machine Learning solutions. Currently I want to deploy Elastic Stack on-premises with 3 Elasticsearch nodes and 2 nodes for ML. I tried… --- ## [Random \_id vs custom \_id?](https://discuss.elastic.co/t/random-id-vs-custom-id/271881)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [May 2, 2021, 1:23pm UTC](https://discuss.elastic.co/t/random-id-vs-custom-id/271881 "2021-05-02T13:23:43Z")
Hey there, I saw several topics about this point on the net but I never found exactly if I should prefer random or custom \_id. Is there anyone that can explain it to me? Furthermore, Is there any difference between a cr… --- ## [Invalid control character in URL?](https://discuss.elastic.co/t/invalid-control-character-in-url/222981)
**Author:** [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Replies:** 5\ **Last updated:** [March 13, 2020, 7:26pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981 "2020-03-13T19:26:40Z")
See also below: I have found lots of errors in the syslog. They are all coming from PacketBeats. But I have no clue what this means; let alone what to do with it. Any suggestions? Thanks - Will Mar 10 17:30:11 tank … --- ## [Query on Indexing using es-hadoop](https://discuss.elastic.co/t/query-on-indexing-using-es-hadoop/24632)
**Author:** [@vinoth4v](https://discuss.elastic.co/u/vinoth4v)\ **Replies:** 5\ **Last updated:** [July 6, 2015, 1:15pm UTC](https://discuss.elastic.co/t/query-on-indexing-using-es-hadoop/24632 "2015-07-06T13:15:27Z")
Hello, I am looking to implement the ELK stack with an existing hadoop cluster. My main goal is to store the logs in HDFS , use ES for just indexing and show the analytics on Kibana. I have couple of questions regar… --- ## [Deploy ECK to a Single Namespace](https://discuss.elastic.co/t/deploy-eck-to-a-single-namespace/211495)
**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\ **Replies:** 7\ **Last updated:** [January 10, 2020, 3:17pm UTC](https://discuss.elastic.co/t/deploy-eck-to-a-single-namespace/211495 "2020-01-10T15:17:19Z")
Hi, I would like to deploy ECK within a single namespace, but it is not clear to me how to do so after reading https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-ns-config.html and https://www.elastic.co/guide/… --- ## [Elaticsearch always have a node disconnected when initializing shards](https://discuss.elastic.co/t/elaticsearch-always-have-a-node-disconnected-when-initializing-shards/99994)
**Author:** [@tkg\_cangkul](https://discuss.elastic.co/u/tkg_cangkul)\ **Replies:** 7\ **Last updated:** [September 11, 2017, 12:01pm UTC](https://discuss.elastic.co/t/elaticsearch-always-have-a-node-disconnected-when-initializing-shards/99994 "2017-09-11T12:01:46Z")
Hi, i have 4 nodes for ES in my cluster. but there is always a node disconnected when the cluster initializing shard or when i add some configuration after rolling restart. i have 64Gb RAM on each node. is there any … --- ## [Server on port 5603?](https://discuss.elastic.co/t/server-on-port-5603/98657)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 7\ **Last updated:** [August 31, 2017, 4:38pm UTC](https://discuss.elastic.co/t/server-on-port-5603/98657 "2017-08-31T16:38:09Z")
So when i run kibana (5.4.1) in development more using ‘npm start’, the APIs that i add to the Hapi.js server object can be accessed via 5603 and not 5601 where actual kibana resides, this behavior is not present when I’… --- ## [Remove cluster setting](https://discuss.elastic.co/t/remove-cluster-setting/137781)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 2\ **Last updated:** [June 29, 2018, 2:50pm UTC](https://discuss.elastic.co/t/remove-cluster-setting/137781 "2018-06-29T14:50:36Z")
Hi All, I have a setting archived.indices.store.throttle.type which is not recognized anymore in 6.2.4 but I cannot seem to remove it.. I have tried: curl -H "Content-Type: application/json" -XPUT 'http://xxxxx:9200/\_… --- ## [Can't convert the string datatype to ip](https://discuss.elastic.co/t/cant-convert-the-string-datatype-to-ip/115323)
**Author:** [@MartyA](https://discuss.elastic.co/u/MartyA)\ **Replies:** 2\ **Last updated:** [January 12, 2018, 5:38pm UTC](https://discuss.elastic.co/t/cant-convert-the-string-datatype-to-ip/115323 "2018-01-12T17:38:37Z")
mutate { convert =\> { "ip\_addr" =\> "ip" } } I tried using this. It gives me an error before it even starts indexing anything. I read something in a post from about 2 years ago and it said convert can't change speciali… --- ## [Logstash v5 installing filter-multiline plugin](https://discuss.elastic.co/t/logstash-v5-installing-filter-multiline-plugin/58523)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 2\ **Last updated:** [August 21, 2016, 8:59am UTC](https://discuss.elastic.co/t/logstash-v5-installing-filter-multiline-plugin/58523 "2016-08-21T08:59:21Z")
hi i'm trying on my Test environment tne new elastic stack v5 when updating logstash i got the error message that the logstash-filter-multiline plugin is not built-in any more i downloded from git-hub the plugin (manua… --- ## [Rejected execution of primary operation](https://discuss.elastic.co/t/rejected-execution-of-primary-operation/340391)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 4\ **Last updated:** [August 9, 2023, 2:27am UTC](https://discuss.elastic.co/t/rejected-execution-of-primary-operation/340391 "2023-08-09T02:27:23Z")
Hi there, sometimes my logstash had printed the log that said "rejected execution of primary operation" with the error type "es\_rejected\_execution\_exception" can anyone explain to me what's going on actually? Thanks --- ## [Count() with KQL doesn't return desired results](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 9:30am UTC](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121 "2021-11-01T09:30:16Z")
Hi There, I'm using 7.15. My elastic data are records of tests. Each test has status failed or pass. I want to visualize a table like this: Testcase Name | # of failed tests | %of failure from all runs I tried to us… --- ## [Authentication Clarification for Elasticsearch 6+](https://discuss.elastic.co/t/authentication-clarification-for-elasticsearch-6/124344)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 6\ **Last updated:** [March 17, 2018, 12:10am UTC](https://discuss.elastic.co/t/authentication-clarification-for-elasticsearch-6/124344 "2018-03-17T00:10:26Z")
I am attempting to upgrade to 6.2.2 from 5.2.1. Thankfully I can just install a clean version, no upgrade. I am using just the Basic License. I believe that the basic authentication from version 5 is no longer availab… --- ## [Problem with insert data to elasticsearch](https://discuss.elastic.co/t/problem-with-insert-data-to-elasticsearch/3471)
**Author:** [@Jakub](https://discuss.elastic.co/u/Jakub)\ **Replies:** 6\ **Last updated:** [April 23, 2011, 8:33pm UTC](https://discuss.elastic.co/t/problem-with-insert-data-to-elasticsearch/3471 "2011-04-23T20:33:34Z")
Hi, I'm using latest elasticsearch release 0.12.0 I have problem with insert data to elasticsearch. I'm using "elasticsearch" PHP client to insert data. Insert data is done in loop. PHP script insert 0 - 10000 e… --- ## [Getting \_dateparsefailure](https://discuss.elastic.co/t/getting--dateparsefailure/89986)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 8\ **Last updated:** [June 21, 2017, 8:29pm UTC](https://discuss.elastic.co/t/getting--dateparsefailure/89986 "2017-06-21T20:29:06Z")
Hi, I have date format like 20170616155531767-0500 which is unable to parse. Can you give me solution how can I parse date. I used date filter : date { locale =\> "en" match =\> \[ "REQ… --- ## [Date filter not working properly](https://discuss.elastic.co/t/date-filter-not-working-properly/96941)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 5\ **Last updated:** [August 14, 2017, 11:34am UTC](https://discuss.elastic.co/t/date-filter-not-working-properly/96941 "2017-08-14T11:34:13Z")
i have a string timestamp field in my log,i need to change the string to date format, This is my sample log file: {“LogMsg”:"{“type”:“GAUGE”, “name”:“io.dropwizard.jetty.MutableServletContextHandler.percent-4xx-15m”, “… --- ## [Cross-Origin Request Blocked in firefox for Angular rum js](https://discuss.elastic.co/t/cross-origin-request-blocked-in-firefox-for-angular-rum-js/248193)
**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\ **Replies:** 4\ **Last updated:** [September 14, 2020, 1:28pm UTC](https://discuss.elastic.co/t/cross-origin-request-blocked-in-firefox-for-angular-rum-js/248193 "2020-09-14T13:28:54Z")
Hi, I have an angular frontend application and enabled elastic APM in the app. It works perfect in Chrome and sends events to the APM server and also distributed tracing origin to the backend API works. But when the f… --- ## [Passing Current time in Logstash input plugin 'exec' for executing API in curl](https://discuss.elastic.co/t/passing-current-time-in-logstash-input-plugin-exec-for-executing-api-in-curl/243933)
**Author:** [@Rebin](https://discuss.elastic.co/u/Rebin)\ **Replies:** 4\ **Last updated:** [August 14, 2020, 9:13am UTC](https://discuss.elastic.co/t/passing-current-time-in-logstash-input-plugin-exec-for-executing-api-in-curl/243933 "2020-08-14T09:13:55Z")
I want to execute API in Logstash & schedule it every 30 mins and store the data in elastic search. I'm using exec logstash plugin to do, In the curl command there is start and end query param where i need to specify epo… --- ## [Filebeat not sending NAS path logs](https://discuss.elastic.co/t/filebeat-not-sending-nas-path-logs/81410)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 7\ **Last updated:** [April 19, 2017, 3:56am UTC](https://discuss.elastic.co/t/filebeat-not-sending-nas-path-logs/81410 "2017-04-19T03:56:20Z")
I have given below lines in filebeat yml. filebeat.prospectors: - input\_type: log paths: - /var/log/\*.log - \\\\BNGWIDFL001.aonnet.aon.net\\ECMLogs\\NavigatorLogs\\EDSService\\\*.log - D:\\logs\\\*.log document\_type:… --- ## [Is there a way to get all doc ID's from an index for a specified time range?](https://discuss.elastic.co/t/is-there-a-way-to-get-all-doc-ids-from-an-index-for-a-specified-time-range/275885)
**Author:** [@aidenosi](https://discuss.elastic.co/u/aidenosi)\ **Replies:** 3\ **Last updated:** [June 15, 2021, 5:34pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-all-doc-ids-from-an-index-for-a-specified-time-range/275885 "2021-06-15T17:34:35Z")
Hello, We recently had an issue that caused one of our servers to report as "down" to heartbeat even though it was up. This caused us to have 3 days of "downtime" in our metrics. We want to fix this by going through and… --- ## [Exclude\_files doesn't work?](https://discuss.elastic.co/t/exclude-files-doesnt-work/109799)
**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 10:56am UTC](https://discuss.elastic.co/t/exclude-files-doesnt-work/109799 "2017-12-01T10:56:51Z")
Hi, I have the following in my filebeat.yml (5.6): ... exclude\_files: \['.gz$', 'btmp\*', 'btmp$'\] ... but filebeat says in its logs: 2017-11-30T17:03:07Z INFO Harvester started for file: /var/log/wtmp 2017-11-30T17:… --- ## [How to force Transform to run periodically?](https://discuss.elastic.co/t/how-to-force-transform-to-run-periodically/226413)
**Author:** [@roishibr](https://discuss.elastic.co/u/roishibr)\ **Replies:** 6\ **Last updated:** [April 7, 2020, 8:14pm UTC](https://discuss.elastic.co/t/how-to-force-transform-to-run-periodically/226413 "2020-04-07T20:14:47Z")
Hi there! Is there any way to run Transform periodically (e.g., at each 5 seconds) regardless of having an update in the sync date field of source index? I'm trying to use Transform to aggregate values ​​in a sliding w… --- ## [Seeing error in IIS module](https://discuss.elastic.co/t/seeing-error-in-iis-module/187901)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 6\ **Last updated:** [June 28, 2019, 4:03am UTC](https://discuss.elastic.co/t/seeing-error-in-iis-module/187901 "2019-06-28T04:03:17Z")
Hi @pierhugues @Kaiyan\_Sheng I am using ELK 7.2. I am using iis module to ship iis access logs to es. I am seeing this error. error.message Provided Grok expressions do not match field value: \[2019-02-09 09:40:50 10… --- ## [Show suggest result on Front end without hampering speed of ES](https://discuss.elastic.co/t/show-suggest-result-on-front-end-without-hampering-speed-of-es/118351)
**Author:** [@Arpit\_Dadheech](https://discuss.elastic.co/u/Arpit_Dadheech)\ **Replies:** 6\ **Last updated:** [February 4, 2018, 6:20pm UTC](https://discuss.elastic.co/t/show-suggest-result-on-front-end-without-hampering-speed-of-es/118351 "2018-02-04T18:20:27Z")
I am using ES with angular 2. I am using suggester of ES. I am getting the results as I want. Like I type "A" I get result set as \[ "Alexander", "Alexander Ambrose", "Crown Victoria"\] and \[ "Cleo", "Cleo Walling",… --- ## [Plugin doesn't work with embedded elasticsearch in spring boot app's uber JAR](https://discuss.elastic.co/t/plugin-doesnt-work-with-embedded-elasticsearch-in-spring-boot-apps-uber-jar/56547)
**Author:** [@bratislav](https://discuss.elastic.co/u/bratislav)\ **Replies:** 6\ **Last updated:** [July 29, 2016, 11:43am UTC](https://discuss.elastic.co/t/plugin-doesnt-work-with-embedded-elasticsearch-in-spring-boot-apps-uber-jar/56547 "2016-07-29T11:43:33Z")
Hi, I'm running an embedded elasticsearch with attachment plugin inside one big spring-boot application ( as a stand-alone JAR). I have defined a contents field with the type = attachment and everything works fine when… --- ## [ES 2.1 index refresh interval not working as expected](https://discuss.elastic.co/t/es-2-1-index-refresh-interval-not-working-as-expected/36305)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 6\ **Last updated:** [December 9, 2015, 3:53pm UTC](https://discuss.elastic.co/t/es-2-1-index-refresh-interval-not-working-as-expected/36305 "2015-12-09T15:53:40Z")
Hello, I have the following index: \[root@jupiter ventus\]# curl -XGET 'http://jupiter:9200/190\_0?pretty=true' { "190\_0" : { "aliases" : { }, "mappings" : { "190" : { "dynamic" : "strict", "\_all" : { "enabled" … --- ## [Aggregation with unique count and sum: how to do it?](https://discuss.elastic.co/t/aggregation-with-unique-count-and-sum-how-to-do-it/234422)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 2\ **Last updated:** [May 28, 2020, 7:54am UTC](https://discuss.elastic.co/t/aggregation-with-unique-count-and-sum-how-to-do-it/234422 "2020-05-28T07:54:37Z")
Hello. We have some documents in ES (7.7.0) that represent some kind of ecommerce sales transactions, that can be described as the following table | tx\_id | item | cost | price | ---------------------------------… --- ## [Using NEST to Enable/Disable Index Refresh](https://discuss.elastic.co/t/using-nest-to-enable-disable-index-refresh/93600)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 10:14am UTC](https://discuss.elastic.co/t/using-nest-to-enable-disable-index-refresh/93600 "2017-07-21T10:14:10Z")
What we are trying to do is to index a bunch of documents in batches i.e. foreach (var batch in props.ChunkBy(100)) { var result = await client.IndexManyAsync\(batch, indexName); … --- ## [Logstash / Filebeat and "|" sparated logs](https://discuss.elastic.co/t/logstash-filebeat-and-sparated-logs/94123)
**Author:** [@basti](https://discuss.elastic.co/u/basti)\ **Replies:** 5\ **Last updated:** [July 24, 2017, 5:45am UTC](https://discuss.elastic.co/t/logstash-filebeat-and-sparated-logs/94123 "2017-07-24T05:45:35Z")
Hello, I just done my first steps with filebeat and logstash. I have some servers with log files with lines like: value1|value2|value3|..... Now i want them to be send via (1)FileBeat to (2)Logstash and then to (3)El… --- ## [Fleet Server x509 Error (GODEBUG=x509ignoreCN=0)](https://discuss.elastic.co/t/fleet-server-x509-error-godebug-x509ignorecn-0/281427)
**Author:** [@morgan.atwood](https://discuss.elastic.co/u/morgan.atwood)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 3:01pm UTC](https://discuss.elastic.co/t/fleet-server-x509-error-godebug-x509ignorecn-0/281427 "2021-08-30T15:01:53Z")
Greeting, Running into a problem with setting up the Fleet server. I have a standalone development server running Kibana, Elasticsearch, and Elastic-agent. Very excited to try out the new agent and security features in… --- ## [Unable to start logstash service Windows server 2012 64 bit](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-2012-64-bit/151967)
**Author:** [@hardikbhatia](https://discuss.elastic.co/u/hardikbhatia)\ **Replies:** 4\ **Last updated:** [October 15, 2018, 9:27am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-2012-64-bit/151967 "2018-10-15T09:27:45Z")
Hi, I have downloaded and unzipped logstash and tried to install it as service using nssm. Logstash gets successfully installed but when i try to start the service it immediately goes to paused state: I have installe… --- ## [Querying on a subobject field within a nested object](https://discuss.elastic.co/t/querying-on-a-subobject-field-within-a-nested-object/65533)
**Author:** [@jpblair](https://discuss.elastic.co/u/jpblair)\ **Replies:** 4\ **Last updated:** [December 9, 2016, 7:33pm UTC](https://discuss.elastic.co/t/querying-on-a-subobject-field-within-a-nested-object/65533 "2016-12-09T19:33:53Z")
I can't seem to get the expected results when running a terms query for a field within a subobject of a nested object. Assume an example like this (where nestedField has type nested in the mapping): "nestedField": \[ … --- ## [Query to show all values in field where the sum of count for these values equal 0](https://discuss.elastic.co/t/query-to-show-all-values-in-field-where-the-sum-of-count-for-these-values-equal-0/63245)
**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\ **Replies:** 4\ **Last updated:** [October 19, 2016, 5:52am UTC](https://discuss.elastic.co/t/query-to-show-all-values-in-field-where-the-sum-of-count-for-these-values-equal-0/63245 "2016-10-19T05:52:17Z")
Hello, I have a field server\_name which return the name of the server that sends the log. What we want is create a graph that would show us all the servers that didn't send any logs for a specific timeframe. Would ther… --- ## [No cached mapping for this field.Refresh field list from the lanagement](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-field-list-from-the-lanagement/236835)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 5\ **Last updated:** [June 17, 2020, 3:00am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-field-list-from-the-lanagement/236835 "2020-06-17T03:00:26Z")
I tried "Management -\> Index Patterns and hit Refresh button",but it didn't work. I updated the fields.yml http field of apmserver, but it is still useless. apmserver: 7.6.2 ELK: 7.4.2 --- ## [Effacer des doublons avec une requête](https://discuss.elastic.co/t/effacer-des-doublons-avec-une-requete/171704)
**Author:** [@Radic4l](https://discuss.elastic.co/u/Radic4l)\ **Replies:** 5\ **Last updated:** [March 11, 2019, 12:38pm UTC](https://discuss.elastic.co/t/effacer-des-doublons-avec-une-requete/171704 "2019-03-11T12:38:08Z")
Bonjour à tous, j'ai besoin d'aide en ce qui concerne le \_delete\_by\_query. Voilà mon problème. J'utilise Logstash pour me remonter des adresses IP de GLPI et de IPAM. Je stock ensuite ces IP dans une même variable (hi… --- ## [Filebeat panic error while running in Windows based Docker container](https://discuss.elastic.co/t/filebeat-panic-error-while-running-in-windows-based-docker-container/91512)
**Author:** [@pbering](https://discuss.elastic.co/u/pbering)\ **Replies:** 5\ **Last updated:** [July 2, 2017, 6:18pm UTC](https://discuss.elastic.co/t/filebeat-panic-error-while-running-in-windows-based-docker-container/91512 "2017-07-02T18:18:16Z")
Hi, I'm trying to make a Docker container based on "microsoft/nanoserver" to run on my Windows based Docker hosts (in a Swarm). But I can't get Filebeat to work. Observations: Seems related to the the volume mounti… --- ## [Calling a python function in logstash](https://discuss.elastic.co/t/calling-a-python-function-in-logstash/66682)
**Author:** [@Mahdy\_S](https://discuss.elastic.co/u/Mahdy_S)\ **Replies:** 5\ **Last updated:** [November 21, 2016, 2:00pm UTC](https://discuss.elastic.co/t/calling-a-python-function-in-logstash/66682 "2016-11-21T14:00:22Z")
I'm using logstash to parse some files into elasticsearch. I would like to call a python function passing to it some arguments from logstash and then to add the value returned by the function in a new field in elasticsea… --- ## [Setting patterns\_dir for grok relatively?](https://discuss.elastic.co/t/setting-patterns-dir-for-grok-relatively/117471)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [February 15, 2018, 11:53pm UTC](https://discuss.elastic.co/t/setting-patterns-dir-for-grok-relatively/117471 "2018-02-15T23:53:38Z")
Hi, can the patterns\_dir of grok command be set recursively? How? Can I set up a default folder / file for patterns, so that there is no need to set them in each grok filter? Thanks, Andreas --- ## [Embed Dashboards Kibana with Security](https://discuss.elastic.co/t/embed-dashboards-kibana-with-security/160918)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 2\ **Last updated:** [December 17, 2018, 5:03pm UTC](https://discuss.elastic.co/t/embed-dashboards-kibana-with-security/160918 "2018-12-17T17:03:56Z")
Hello, I want to embed my dashboards made in Kibana in a webpage. However, I have security enabled in Elastic and Kibana, so to open a dashboard it requires the Kibana login. There is any way I can auto-sign-in users t… --- ## [How to show date in UTC format in the downloaded CSV file from kibana](https://discuss.elastic.co/t/how-to-show-date-in-utc-format-in-the-downloaded-csv-file-from-kibana/85618)
**Author:** [@Bhavana](https://discuss.elastic.co/u/Bhavana)\ **Replies:** 2\ **Last updated:** [May 18, 2017, 12:57pm UTC](https://discuss.elastic.co/t/how-to-show-date-in-utc-format-in-the-downloaded-csv-file-from-kibana/85618 "2017-05-18T12:57:34Z")
Hello Everyone, when i download the CSV file from the kibana visualization , i am getting date in UNIX format rather than UTC. Is there any possibility to get that date field in UTC format itself ? Thanks , Bhavana. --- ## [Count Each word in a text Field](https://discuss.elastic.co/t/count-each-word-in-a-text-field/299605)
**Author:** [@vishesh08](https://discuss.elastic.co/u/vishesh08)\ **Replies:** 7\ **Last updated:** [March 15, 2022, 11:02am UTC](https://discuss.elastic.co/t/count-each-word-in-a-text-field/299605 "2022-03-15T11:02:07Z")
I have tweets stored in a text field with field Data True. I want to remove the english stopwords and get a count of each word in the tweets. Data Mapping: { "tweets" : { "mappings" : { "properties" : { … --- ## [ElasticSearch 5.3.2 data import from SQL Server 2012](https://discuss.elastic.co/t/elasticsearch-5-3-2-data-import-from-sql-server-2012/85308)
**Author:** [@cogdellj](https://discuss.elastic.co/u/cogdellj)\ **Replies:** 6\ **Last updated:** [May 22, 2017, 3:04pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-2-data-import-from-sql-server-2012/85308 "2017-05-22T15:04:36Z")
Directly from the example given on the site I am attempting to connect to a local default instance of SQL server 2012 on my development box and import data from an adventureworks2012 database and it fails. I tried port … --- ## [Breaking change in sort: field "missing" is gone from "\_score"](https://discuss.elastic.co/t/breaking-change-in-sort-field-missing-is-gone-from--score/74657)
**Author:** [@Roeland](https://discuss.elastic.co/u/Roeland)\ **Replies:** 6\ **Last updated:** [February 13, 2017, 8:31am UTC](https://discuss.elastic.co/t/breaking-change-in-sort-field-missing-is-gone-from--score/74657 "2017-02-13T08:31:03Z")
Up until ES2.x I used the following code for sorting: {... ,"sort": \[{ "\_score": { "order": "desc", "missing": "\_last" } } \] } Now, we want to go to ES5.2 and see that this sentence don't wo… [Previous page](https://discuss.elastic.co/top.md?page=704&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=706&per_page=50&period=all)