# Top **URL:** https://discuss.elastic.co/top.md?page=717&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 718 --- ## [Get current bucket value in a Moving function agg](https://discuss.elastic.co/t/get-current-bucket-value-in-a-moving-function-agg/174034)
**Author:** [@nuf](https://discuss.elastic.co/u/nuf)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 2:30am UTC](https://discuss.elastic.co/t/get-current-bucket-value-in-a-moving-function-agg/174034 "2019-03-27T02:30:58Z")
Hi all, I'm trying to calculate the year over year percentage change, which comes down to finding the percentage change of bucket values in a histogram. I can use the derivative aggregation as discussed here to get the… --- ## [Parsing nested JSON in message field \[Logstash\]\[Filebeat\]](https://discuss.elastic.co/t/parsing-nested-json-in-message-field-logstash-filebeat/171903)
**Author:** [@vkpro](https://discuss.elastic.co/u/vkpro)\ **Replies:** 0\ **Last updated:** [March 12, 2019, 9:28am UTC](https://discuss.elastic.co/t/parsing-nested-json-in-message-field-logstash-filebeat/171903 "2019-03-12T09:28:13Z")
I have log in following format, it is a plain json with nested fields. { "level": "info", "message": { "req": { "headers": { "host": "localhost:8080", "connect… --- ## [Logstash Geoip Filter with a Custom Database](https://discuss.elastic.co/t/logstash-geoip-filter-with-a-custom-database/146778)
**Author:** [@lens](https://discuss.elastic.co/u/lens)\ **Replies:** 0\ **Last updated:** [August 30, 2018, 9:28pm UTC](https://discuss.elastic.co/t/logstash-geoip-filter-with-a-custom-database/146778 "2018-08-30T21:28:39Z")
We are looking into using the geoip filter to basically search through IP addresses and blocks to get information that is not actually geographic. We've followed the instructions for creating a new .mmdb file (https://bl… --- ## [Search after doesn't work with date type. Is it bug?](https://discuss.elastic.co/t/search-after-doesnt-work-with-date-type-is-it-bug/112262)
**Author:** [@Vitaly\_Igorevich](https://discuss.elastic.co/u/Vitaly_Igorevich)\ **Replies:** 0\ **Last updated:** [December 18, 2017, 3:04pm UTC](https://discuss.elastic.co/t/search-after-doesnt-work-with-date-type-is-it-bug/112262 "2017-12-18T15:04:44Z")
Elasticsearch 6.1 Mapping: { "posts" : { "mappings" : { "post" : { "dynamic" : "false", "properties" : { "created\_at" : { "type" : "date", }, "format" : "epoch\_second" }, } } } } } Query: { "size":25, … --- ## [Painless script for converting Long to Hexadecimal](https://discuss.elastic.co/t/painless-script-for-converting-long-to-hexadecimal/186563)
**Author:** [@baerrach](https://discuss.elastic.co/u/baerrach)\ **Replies:** 3\ **Last updated:** [June 28, 2019, 8:17am UTC](https://discuss.elastic.co/t/painless-script-for-converting-long-to-hexadecimal/186563 "2019-06-28T08:17:03Z")
Have Kibana display a numeric field value in hexadecimal is locked, and the example is an image (and broken) which is not useful for cut-and-paste. If it wasn't locked I'd just reply there. I needed to change the dns.id… --- ## [Persisted Queue (Re-Play of existing Data)](https://discuss.elastic.co/t/persisted-queue-re-play-of-existing-data/111452)
**Author:** [@neu5ron](https://discuss.elastic.co/u/neu5ron)\ **Replies:** 6\ **Last updated:** [January 13, 2018, 12:10am UTC](https://discuss.elastic.co/t/persisted-queue-re-play-of-existing-data/111452 "2018-01-13T00:10:41Z")
I have about 15GBs worth of pesisted queue's that I need to "replay"/"re-run" through the pipeline. However, after a restart/reboot/etc logstash will not begin to re-ingest the data that is queued. All the data is still … --- ## [Java exception full trace](https://discuss.elastic.co/t/java-exception-full-trace/100041)
**Author:** [@nsivabalan](https://discuss.elastic.co/u/nsivabalan)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 4:35pm UTC](https://discuss.elastic.co/t/java-exception-full-trace/100041 "2017-09-12T16:35:07Z")
Hi, I would like see full log trace of the exception in the kibana. Kindly some one let me know the multile pattern for the below log format. FYR INFO | jvm 1 | main | 2017/09/11 00:00:45.665 | 12:00:45 AM | … --- ## [リバランスが途中で停止する現象について](https://discuss.elastic.co/t/topic/63156)
**Author:** [@yuji\_kumada](https://discuss.elastic.co/u/yuji_kumada)\ **Replies:** 4\ **Last updated:** [November 7, 2016, 1:51am UTC](https://discuss.elastic.co/t/topic/63156 "2016-11-07T01:51:20Z")
お世話になっております。 掲題の件について、ご教授いただければと思います。 ノード復旧の際のリバランスの挙動について、 \[2016-xx-xx 09:19:11,906\]\[INFO \]\[cluster.routing.allocation.decider\] \[data\_nodeA\] low disk watermark \[15%\] exceeded on \[XXXXXXXXXXXXXXX\]\[data\_nodeB\] free:… --- ## [Create a simple frequency based alert using Watcher](https://discuss.elastic.co/t/create-a-simple-frequency-based-alert-using-watcher/143586)
**Author:** [@rouble](https://discuss.elastic.co/u/rouble)\ **Replies:** 5\ **Last updated:** [August 20, 2018, 7:28am UTC](https://discuss.elastic.co/t/create-a-simple-frequency-based-alert-using-watcher/143586 "2018-08-20T07:28:53Z")
Gurus, I am looking to create a frequency based watch. Very simply, if the query returns any results at all in the last N seconds, send an alert. I have written something that works, but since I am new to writing watche… --- ## [Comparing values from 2 ML Jobs in watcher](https://discuss.elastic.co/t/comparing-values-from-2-ml-jobs-in-watcher/118882)
**Author:** [@mgarg123](https://discuss.elastic.co/u/mgarg123)\ **Replies:** 5\ **Last updated:** [February 7, 2018, 10:40pm UTC](https://discuss.elastic.co/t/comparing-values-from-2-ml-jobs-in-watcher/118882 "2018-02-07T22:40:04Z")
Hi, I have 2 different ML jobs. Identifies the anomaly in the users unusual login time. IE if users regularly logs in between 11:00 AM - 6:00 PM and one day he/she logs in @ 12:00 AM. this will be detected as a anoma… --- ## [Send link to search in slack](https://discuss.elastic.co/t/send-link-to-search-in-slack/81359)
**Author:** [@isaac](https://discuss.elastic.co/u/isaac)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 8:03am UTC](https://discuss.elastic.co/t/send-link-to-search-in-slack/81359 "2017-04-10T08:03:42Z")
Hi, Is it possible to send a link with the search that will match the watcher that has been triggered with the slack message? Or any similar way to easily find the errors in kibana when getting the slack notification… --- ## [How can I know average value of field "elapsed.time"](https://discuss.elastic.co/t/how-can-i-know-average-value-of-field-elapsed-time/24928)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 5\ **Last updated:** [July 6, 2015, 9:23am UTC](https://discuss.elastic.co/t/how-can-i-know-average-value-of-field-elapsed-time/24928 "2015-07-06T09:23:06Z")
Hi!! I have my document with field "elapsed.time" I have to know average value of this field. Many thanks for helping me!!! --- ## [ELK Red status](https://discuss.elastic.co/t/elk-red-status/216015)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 1\ **Last updated:** [January 22, 2020, 10:06am UTC](https://discuss.elastic.co/t/elk-red-status/216015 "2020-01-22T10:06:00Z")
Hi, Every day i am facing an issue on my ELK cluster with red status. Some Indexes everyday are red so i am deleting them and they are recreating and after this the ELK Status is becoming green again. Here is the log o… --- ## [Error initializing beat: error loading config file: stat /etc/filebeat/filebeat.yml: no such file or directory](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-etc-filebeat-filebeat-yml-no-such-file-or-directory/157116)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [December 11, 2018, 2:05am UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-etc-filebeat-filebeat-yml-no-such-file-or-directory/157116 "2018-12-11T02:05:10Z")
Hello, I removed Elastic's Beats (filebeat & metricbeat package) by issuing apt-get remove filbeat metricbeat and removed directory rm -rf /etc/filebeat /etc/metricbeat as well. I than tried to install it back by issui… --- ## [Elasticsearch as a service - Linux](https://discuss.elastic.co/t/elasticsearch-as-a-service-linux/29854)
**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\ **Replies:** 7\ **Last updated:** [September 23, 2015, 8:31pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-service-linux/29854 "2015-09-23T20:31:10Z")
I have Elasticsearch, Kibana, Logstash all up and running on seperate linux boxes. I first started with installing them and then launching them all individually. But I need to have each box launching them as a service. … --- ## [Update index that already have](https://discuss.elastic.co/t/update-index-that-already-have/102503)
**Author:** [@Chanpiseth\_Ros](https://discuss.elastic.co/u/Chanpiseth_Ros)\ **Replies:** 3\ **Last updated:** [October 3, 2017, 7:03am UTC](https://discuss.elastic.co/t/update-index-that-already-have/102503 "2017-10-03T07:03:26Z")
Hi everyone, I have a problem, when i try to update my index in Elasticsearch, that index has already created before, and i get the error with this message: Exception : {"error":"IndexAlreadyExistsException\[\[person\] alr… --- ## [How does Filebeat crawls log files? Inotify?](https://discuss.elastic.co/t/how-does-filebeat-crawls-log-files-inotify/43668)
**Author:** [@Johannes](https://discuss.elastic.co/u/Johannes)\ **Replies:** 3\ **Last updated:** [March 10, 2016, 12:03pm UTC](https://discuss.elastic.co/t/how-does-filebeat-crawls-log-files-inotify/43668 "2016-03-10T12:03:32Z")
Hi \[:slightly\_smiling:\] how does Filebeat crawls log files? Is Filebeat using inotify? Or is Filebeat polling the logs? Thanks for your time and best wishes Johannes --- ## [Searching year, month, and date split into different fields](https://discuss.elastic.co/t/searching-year-month-and-date-split-into-different-fields/8599)
**Author:** [@curious](https://discuss.elastic.co/u/curious)\ **Replies:** 2\ **Last updated:** [August 1, 2012, 8:55pm UTC](https://discuss.elastic.co/t/searching-year-month-and-date-split-into-different-fields/8599 "2012-08-01T20:55:28Z")
I have year, month, and date split into different fields. To search documents for specific dates (I have to retrieve in 7-day batches), I am trying to use multiple "AND" clauses in a filter. 1. The problem is … --- ## [How to do authorization in elasticsearch](https://discuss.elastic.co/t/how-to-do-authorization-in-elasticsearch/105051)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 5:52am UTC](https://discuss.elastic.co/t/how-to-do-authorization-in-elasticsearch/105051 "2017-10-25T05:52:19Z")
I wanna to integrate user authorization part.how it possible without using xpack. --- ## [Using logstash-filter-csv, unable to aggregate/visualize on integer fields](https://discuss.elastic.co/t/using-logstash-filter-csv-unable-to-aggregate-visualize-on-integer-fields/62665)
**Author:** [@rlonberg](https://discuss.elastic.co/u/rlonberg)\ **Replies:** 6\ **Last updated:** [October 12, 2016, 3:45pm UTC](https://discuss.elastic.co/t/using-logstash-filter-csv-unable-to-aggregate-visualize-on-integer-fields/62665 "2016-10-12T15:45:31Z")
Using logstash-filter-csv, some resulting fields are converted to integers in kibana = I am unable to aggregate/visualize on them: 'Field data loading is forbidden on this \[fieldname\]' ... Before I begin, I have alread… --- ## [Switch OR Case statement in kibana scripted field](https://discuss.elastic.co/t/switch-or-case-statement-in-kibana-scripted-field/218756)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 11:15am UTC](https://discuss.elastic.co/t/switch-or-case-statement-in-kibana-scripted-field/218756 "2020-02-11T11:15:17Z")
Can we use case statement while making scripted field in kibana OR we just have to use if else --- ## [Elastic Rule Connector sends a String instead of JSON to the Webhook](https://discuss.elastic.co/t/elastic-rule-connector-sends-a-string-instead-of-json-to-the-webhook/313833)
**Author:** [@yzaritskyi](https://discuss.elastic.co/u/yzaritskyi)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 7:18pm UTC](https://discuss.elastic.co/t/elastic-rule-connector-sends-a-string-instead-of-json-to-the-webhook/313833 "2022-09-08T19:18:13Z")
Hey there! First of all, I'd like to describe my situation. I have an Elastic Rule, that successfully creates the Alerts in the Elastic Security. Now I have configured a connector, that allows me to send those Alerts to… --- ## [Removing special characters from field name](https://discuss.elastic.co/t/removing-special-characters-from-field-name/213788)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 3\ **Last updated:** [January 7, 2020, 2:03pm UTC](https://discuss.elastic.co/t/removing-special-characters-from-field-name/213788 "2020-01-07T14:03:50Z")
if "Holding Dealer Organic ID" { mutate { add\_tag =\> \["holding\_dealer"\] } mutate { lowercas… --- ## [Error initializing publisher: 2 errors: open /etc/filebeat/cert.pem: no such file or directory](https://discuss.elastic.co/t/error-initializing-publisher-2-errors-open-etc-filebeat-cert-pem-no-such-file-or-directory/227096)
**Author:** [@lsambolino](https://discuss.elastic.co/u/lsambolino)\ **Replies:** 1\ **Last updated:** [April 15, 2020, 9:38am UTC](https://discuss.elastic.co/t/error-initializing-publisher-2-errors-open-etc-filebeat-cert-pem-no-such-file-or-directory/227096 "2020-04-15T09:38:57Z")
Hi, When trying to deploy filebeat 7.6.2 by a Kubernetes 1.13 manifest file, containers are unable to spawn up correctly and they produce the following error: 2020-04-08T09:59:12.044Z ERROR instance/beat.go:93… --- ## [X-Pack Machine Learning Lab 1 Logstash Error](https://discuss.elastic.co/t/x-pack-machine-learning-lab-1-logstash-error/115205)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 7\ **Last updated:** [February 5, 2018, 4:30pm UTC](https://discuss.elastic.co/t/x-pack-machine-learning-lab-1-logstash-error/115205 "2018-02-05T16:30:39Z")
I'm having an issue getting the stocks data into kibana using logstash. Here is my log file: \[2018-01-11T22:17:04,976\]\[INFO \]\[logstash.inputs.metrics \] Monitoring License OK ..........................................… --- ## [Install local plugin](https://discuss.elastic.co/t/install-local-plugin/7016)
**Author:** [@thinusp](https://discuss.elastic.co/u/thinusp)\ **Replies:** 2\ **Last updated:** [March 15, 2012, 12:43pm UTC](https://discuss.elastic.co/t/install-local-plugin/7016 "2012-03-15T12:43:01Z")
This really shouldn't be hard, but I am struggling to install a plugin from the local directory. I have tried ./bin/plugin -install where the path is to the jar file, but that doesn't want to work. I've also tri… --- ## [Share Kibana Dashboards](https://discuss.elastic.co/t/share-kibana-dashboards/127734)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 8\ **Last updated:** [April 20, 2018, 6:53am UTC](https://discuss.elastic.co/t/share-kibana-dashboards/127734 "2018-04-20T06:53:39Z")
Hello Team, I have built few kibana dashboards, and I want to share it with my clients. One of my clients is on my network and the other client is not on my network. is it possible for both cases to share dashboards? if… --- ## [Hunk vs ElastisSearch](https://discuss.elastic.co/t/hunk-vs-elastissearch/31726)
**Author:** [@mkarthikswamy](https://discuss.elastic.co/u/mkarthikswamy)\ **Replies:** 1\ **Last updated:** [October 6, 2015, 8:47pm UTC](https://discuss.elastic.co/t/hunk-vs-elastissearch/31726 "2015-10-06T20:47:05Z")
Hi, We are exploring the applicability of using ElasticSearch for a data reconciliation project that we are delivering. The details are as follows: - The project currently uses HUNK - The data sources are as follows: Mul… --- ## [What will happen if elasticsearch all node goes down? Did we loose all data In this case?](https://discuss.elastic.co/t/what-will-happen-if-elasticsearch-all-node-goes-down-did-we-loose-all-data-in-this-case/265923)
**Author:** [@Mangesh\_Mandavgane](https://discuss.elastic.co/u/Mangesh_Mandavgane)\ **Replies:** 4\ **Last updated:** [March 2, 2021, 10:28am UTC](https://discuss.elastic.co/t/what-will-happen-if-elasticsearch-all-node-goes-down-did-we-loose-all-data-in-this-case/265923 "2021-03-02T10:28:14Z")
While reading about Elasticsearch I understood that Nodes have Shards. And we can make configuration for Primary and Replica Shards. If one of node goes down it retrieve data from replica shards which is in another node. … --- ## [How to completely disable Inverse document frequency?](https://discuss.elastic.co/t/how-to-completely-disable-inverse-document-frequency/145390)
**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\ **Replies:** 4\ **Last updated:** [August 22, 2018, 8:01am UTC](https://discuss.elastic.co/t/how-to-completely-disable-inverse-document-frequency/145390 "2018-08-22T08:01:18Z")
I need to make a full text search for names. I would like to disable Inverse document frequency because it is irrelevant in my use case. Is it possible not only ignore Inverse document frequency but also to turn it off t… --- ## [Gradle build for eclipse failed](https://discuss.elastic.co/t/gradle-build-for-eclipse-failed/44818)
**Author:** [@ttjslbz](https://discuss.elastic.co/u/ttjslbz)\ **Replies:** 4\ **Last updated:** [June 1, 2016, 10:37am UTC](https://discuss.elastic.co/t/gradle-build-for-eclipse-failed/44818 "2016-06-01T10:37:15Z")
Hi all： I just download elasticsearch master branch. Previously, i use the following command to compile and setup environment for eclipse: gradle cleanEclipse eclipse. But , i just find i can't upgrade my .classpath f… --- ## [Facing difficulties in Installing Community Beat (Elasticbeat)](https://discuss.elastic.co/t/facing-difficulties-in-installing-community-beat-elasticbeat/50077)
**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\ **Replies:** 4\ **Last updated:** [May 15, 2016, 7:57pm UTC](https://discuss.elastic.co/t/facing-difficulties-in-installing-community-beat-elasticbeat/50077 "2016-05-15T19:57:39Z")
Hi All I am facing difficulty while installing elasticbeat. I am using Ubuntu. I am mentioning the steps along with error while installing elasticbeat:- Installed Go using following command:- sudo apt-get install go… --- ## [How to change the cluster health status from red to green](https://discuss.elastic.co/t/how-to-change-the-cluster-health-status-from-red-to-green/48914)
**Author:** [@sravani\_amarachinta](https://discuss.elastic.co/u/sravani_amarachinta)\ **Replies:** 4\ **Last updated:** [May 2, 2016, 8:21am UTC](https://discuss.elastic.co/t/how-to-change-the-cluster-health-status-from-red-to-green/48914 "2016-05-02T08:21:40Z")
How to change the cluster health status from red to green, are there any commands used to do so. --- ## [Regarding gradle build through intellj](https://discuss.elastic.co/t/regarding-gradle-build-through-intellj/4850)
**Author:** [@arien](https://discuss.elastic.co/u/arien)\ **Replies:** 4\ **Last updated:** [July 13, 2011, 12:49pm UTC](https://discuss.elastic.co/t/regarding-gradle-build-through-intellj/4850 "2011-07-13T12:49:01Z")
Hi; i imported the source code into IDEA IDE and wants to run gradle build der through IDE using build.gradle.I m new to gradle and IDEA too.when i try to run this gradle script through IDE i get class not found exce… --- ## [How to highlight stopwords only on an exact phrase match?](https://discuss.elastic.co/t/how-to-highlight-stopwords-only-on-an-exact-phrase-match/158835)
**Author:** [@Ying\_Wang](https://discuss.elastic.co/u/Ying_Wang)\ **Replies:** 0\ **Last updated:** [November 29, 2018, 10:36pm UTC](https://discuss.elastic.co/t/how-to-highlight-stopwords-only-on-an-exact-phrase-match/158835 "2018-11-29T22:36:29Z")
Is it possible to configure Elasticsearch to highlight stopwords in a phrase, but not to highlight stopwords which occur alone? For example, I want to highlight "the lord of the rings", "rings", or "lord". But I don't w… --- ## [Not able to add JAVA APM agent as dependency in spring boot project](https://discuss.elastic.co/t/not-able-to-add-java-apm-agent-as-dependency-in-spring-boot-project/193224)
**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\ **Replies:** 3\ **Last updated:** [August 2, 2019, 9:38am UTC](https://discuss.elastic.co/t/not-able-to-add-java-apm-agent-as-dependency-in-spring-boot-project/193224 "2019-08-02T09:38:44Z")
I want to do distributed tracking using Java APM. Initially, we use Java agent as manual setup with -javaagent flag and we get tracing data using this. Then we deploy this on our test server and its working fine. Now, … --- ## [Elasticsearch 6.0 multiple types problem](https://discuss.elastic.co/t/elasticsearch-6-0-multiple-types-problem/108928)
**Author:** [@mati](https://discuss.elastic.co/u/mati)\ **Replies:** 3\ **Last updated:** [December 20, 2017, 5:30pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-multiple-types-problem/108928 "2017-12-20T17:30:41Z")
Hi everyone, I wanna ask about help with sending logs to Elasticsearch. I use kv filter to parse logs from Fortigate devices. One of logged fields is named type which is automaticaly parsed to meta field \_type. Since… --- ## [Need to reindex everytime synonym change?](https://discuss.elastic.co/t/need-to-reindex-everytime-synonym-change/104482)
**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 11:51am UTC](https://discuss.elastic.co/t/need-to-reindex-everytime-synonym-change/104482 "2017-10-24T11:51:00Z")
All this while my knowledge on synonym is, whenever there is a change in synonym file, I will need to reindex for the changes to kicks in... But is that still true? Is that possible to not need to reindex whenever ther… --- ## [Gsub specific characters but not all of them in value](https://discuss.elastic.co/t/gsub-specific-characters-but-not-all-of-them-in-value/53909)
**Author:** [@Spacemansam](https://discuss.elastic.co/u/Spacemansam)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 7:21am UTC](https://discuss.elastic.co/t/gsub-specific-characters-but-not-all-of-them-in-value/53909 "2016-06-30T07:21:26Z")
Hi, I am desperately trying to figure out a way to replace full stops in an alphabetic string in a value without affecting decimal values. I am faced with two problems, I have a field value with an unknown quantity of … --- ## [Time Difference between two logs](https://discuss.elastic.co/t/time-difference-between-two-logs/314028)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 6\ **Last updated:** [September 9, 2022, 1:11pm UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028 "2022-09-09T13:11:05Z")
I have two logs. log1 is the start of the process and log2 is the end of the process. How can I get the time taken to complete the process. that is the difference between log2 and log 1. And also I have log3 , now how … --- ## [Full Text Search query](https://discuss.elastic.co/t/full-text-search-query/158853)
**Author:** [@Tapaswi](https://discuss.elastic.co/u/Tapaswi)\ **Replies:** 5\ **Last updated:** [November 30, 2018, 4:48pm UTC](https://discuss.elastic.co/t/full-text-search-query/158853 "2018-11-30T16:48:23Z")
My full-text search is not working properly and also it's taking too much time to execute elasticsearch query I am using following code to get the data from elasticsearch using java. PageRequest pageRequest = (PageReque… --- ## [Elasticsearch SQL ORDER BY Month](https://discuss.elastic.co/t/elasticsearch-sql-order-by-month/256716)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 7\ **Last updated:** [December 18, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-sql-order-by-month/256716 "2020-12-18T07:57:10Z")
Hello, I'm almost there getting my vertical bar to work in Canvas based on a SQL query, but I'm having a hard time ordering the monthly buckets chronologically. My SQL query: SELECT COUNT(DISTINCT user.name) AS UniqueU… --- ## [Trouble connecting to ElasticSearch Cloud via python library](https://discuss.elastic.co/t/trouble-connecting-to-elasticsearch-cloud-via-python-library/121568)
**Author:** [@David9](https://discuss.elastic.co/u/David9)\ **Replies:** 1\ **Last updated:** [February 26, 2018, 9:59pm UTC](https://discuss.elastic.co/t/trouble-connecting-to-elasticsearch-cloud-via-python-library/121568 "2018-02-26T21:59:35Z")
Using https://elasticsearch-py.readthedocs.io/en/master/ Can't connect, it's telling me "elasticsearch.exceptions.ImproperlyConfigured: Root certificates are missing for certificate validation. Either pass them in using… --- ## [Encounter an error while startup winlogbeat](https://discuss.elastic.co/t/encounter-an-error-while-startup-winlogbeat/193740)
**Author:** [@ravipemmasani](https://discuss.elastic.co/u/ravipemmasani)\ **Replies:** 8\ **Last updated:** [August 7, 2019, 12:17am UTC](https://discuss.elastic.co/t/encounter-an-error-while-startup-winlogbeat/193740 "2019-08-07T00:17:03Z")
Hello Team, While we are doing POC,i am getting following error when starting up WinlogBeat on remote Host.Following is my ELK stack version info.Would really appreciate your help. Syslog-ng-3.21 ElasticSearch-7.2 Lo… --- ## [PathHierarchy in index mapping no longer working in Elasticsearch 2.0](https://discuss.elastic.co/t/pathhierarchy-in-index-mapping-no-longer-working-in-elasticsearch-2-0/33951)
**Author:** [@ian1](https://discuss.elastic.co/u/ian1)\ **Replies:** 8\ **Last updated:** [November 7, 2015, 12:36am UTC](https://discuss.elastic.co/t/pathhierarchy-in-index-mapping-no-longer-working-in-elasticsearch-2-0/33951 "2015-11-07T00:36:21Z")
Hi, I upgraded my elasticsearch cluster from version 1.7 to 2.0. When I tried to start the upgraded elasticsearch, it didn't initialize and it kept outputting the following message to the log file: \[2015-11-06 03:26:… --- ## [How to apply filter to individual metric in Kibana?](https://discuss.elastic.co/t/how-to-apply-filter-to-individual-metric-in-kibana/121832)
**Author:** [@vinay.bhardwaj](https://discuss.elastic.co/u/vinay.bhardwaj)\ **Replies:** 2\ **Last updated:** [March 1, 2018, 7:59pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-to-individual-metric-in-kibana/121832 "2018-03-01T19:59:21Z")
The filter option available in Kibana applies to all the metrics. How can I set separate filter for each individual metric in a single Kibana visualization? --- ## [Help with Indexing log with custom time instead of timestamp](https://discuss.elastic.co/t/help-with-indexing-log-with-custom-time-instead-of-timestamp/277126)
**Author:** [@Core\_Sec](https://discuss.elastic.co/u/Core_Sec)\ **Replies:** 6\ **Last updated:** [June 27, 2021, 6:35pm UTC](https://discuss.elastic.co/t/help-with-indexing-log-with-custom-time-instead-of-timestamp/277126 "2021-06-27T18:35:27Z")
Hi everyone I've established ELK with GitHub - deviantony/docker-elk: The Elastic stack (ELK) powered by Docker and Compose. I have log with timestamp included - //{"type":"CustoumLogType","Param1":1,"Param2":1,"Param… --- ## [Syslog + Apache log =\> \_Grokparsefailure](https://discuss.elastic.co/t/syslog-apache-log--grokparsefailure/88841)
**Author:** [@Mehdi\_Khan](https://discuss.elastic.co/u/Mehdi_Khan)\ **Replies:** 6\ **Last updated:** [June 14, 2017, 9:27am UTC](https://discuss.elastic.co/t/syslog-apache-log--grokparsefailure/88841 "2017-06-14T09:27:36Z")
Hi, I'm trying to parse an Apache log that was sent by syslog but I get a \_grokparsefailure error in Kibana and nothing in logstash log. Yet I tested the grok patterns on http://grokconstructor.appspot.com with several… --- ## [Update elasticsearch repository](https://discuss.elastic.co/t/update-elasticsearch-repository/33779)
**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\ **Replies:** 6\ **Last updated:** [November 4, 2015, 7:31pm UTC](https://discuss.elastic.co/t/update-elasticsearch-repository/33779 "2015-11-04T19:31:30Z")
Dear team, Request you to update elasticsearch repo to stable version of elasticsearch. We still have beta package. I also get error while installing marvel plugin. Link thread here: https://discuss.elastic.co/t/cant-… --- ## [Elasticsearch Aggregation Error](https://discuss.elastic.co/t/elasticsearch-aggregation-error/135946)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 5\ **Last updated:** [June 18, 2018, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-error/135946 "2018-06-18T13:23:02Z")
Hi All, I am using Graylog as our web interface and have Elasticsearch in the backend. We run aggregation searches for alerting in Graylog, but we seem to be getting errors which cause Elasticsearch to stop working for … [Previous page](https://discuss.elastic.co/top.md?page=716&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=718&per_page=50&period=all)