# Top **URL:** https://discuss.elastic.co/top.md?page=721&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 722 --- ## [Vertical bar chart issue in kibana](https://discuss.elastic.co/t/vertical-bar-chart-issue-in-kibana/57714)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [August 11, 2016, 6:28am UTC](https://discuss.elastic.co/t/vertical-bar-chart-issue-in-kibana/57714 "2016-08-11T06:28:35Z")
HI Team, I'm facing very new issue while creating bar chart in visualization. I want to create grouped bar. when i passing the input its not creating correctly. This are my inputs, 1st bucket Split bars, Aggregation t… --- ## [How to unzip compressed logs and ship through forwarder?](https://discuss.elastic.co/t/how-to-unzip-compressed-logs-and-ship-through-forwarder/685)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [May 15, 2015, 5:58am UTC](https://discuss.elastic.co/t/how-to-unzip-compressed-logs-and-ship-through-forwarder/685 "2015-05-15T05:58:32Z")
Hello friends, I am using forwarder to ship log to logstash 1.4.2 where those are filtered. I have one system which compressed log files in a zip file. there are more than one zip files created at static location once in… --- ## [Filebeat read/extract file from shared drives/shared folder](https://discuss.elastic.co/t/filebeat-read-extract-file-from-shared-drives-shared-folder/96537)
**Author:** [@SeanKuan](https://discuss.elastic.co/u/SeanKuan)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 2:49pm UTC](https://discuss.elastic.co/t/filebeat-read-extract-file-from-shared-drives-shared-folder/96537 "2017-08-10T14:49:31Z")
hi, i would like to install FileBeat in remote server and reading/extracting file from shared drive. Is it supported or will it supported in future? --- ## [Read the same file several times](https://discuss.elastic.co/t/read-the-same-file-several-times/76655)
**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\ **Replies:** 3\ **Last updated:** [March 6, 2017, 2:43pm UTC](https://discuss.elastic.co/t/read-the-same-file-several-times/76655 "2017-03-06T14:43:07Z")
Hi, I have a file that I want to harvest many time with filebeat. That means the file has some logs (say 1000 logs lines) which don't change. Once filebeat has finish harvesting these 1000 logs, I want it to reharvest … --- ## [Elastic анализаторы и маппинг, проблемы с настройкой](https://discuss.elastic.co/t/elastic/35127)
**Author:** [@Pavel\_Zakharov](https://discuss.elastic.co/u/Pavel_Zakharov)\ **Replies:** 5\ **Last updated:** [November 24, 2015, 3:48pm UTC](https://discuss.elastic.co/t/elastic/35127 "2015-11-24T15:48:22Z")
Привет всем! Я столкнулся с проблемой, может кто-то сможет помочь. Я сконфигурил нужные анализаторы и маппинг для моего будущего индекса. Я пытаюсь их PUT на эластик. После с помощью Logstash я перегоняю данные из MSSQL … --- ## [Use java Api to set a document's field as \_id](https://discuss.elastic.co/t/use-java-api-to-set-a-documents-field-as--id/18912)
**Author:** [@Chia\_Eng\_Chang](https://discuss.elastic.co/u/Chia_Eng_Chang)\ **Replies:** 2\ **Last updated:** [July 28, 2014, 4:21pm UTC](https://discuss.elastic.co/t/use-java-api-to-set-a-documents-field-as--id/18912 "2014-07-28T16:21:09Z")
I want to ask if the unique field \_id be assigned by certain field within document. I see with Rest, it can achieve by "path": { "tweet" : { "\_id" : { "path" : "post\_id" … --- ## [Correlation Coefficient in Kibana](https://discuss.elastic.co/t/correlation-coefficient-in-kibana/225947)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 3\ **Last updated:** [April 1, 2020, 6:09pm UTC](https://discuss.elastic.co/t/correlation-coefficient-in-kibana/225947 "2020-04-01T18:09:56Z")
Hello, I am wondering if there is a visualization in Kibana that supports the "matrix\_stats" aggregation. Specifically I am looking for a way to visualize a matrix/table that shows the correlation coefficient between mu… --- ## [Elasticsearch query vs. SQL query](https://discuss.elastic.co/t/elasticsearch-query-vs-sql-query/49187)
**Author:** [@diwertowski](https://discuss.elastic.co/u/diwertowski)\ **Replies:** 3\ **Last updated:** [May 6, 2016, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-query-vs-sql-query/49187 "2016-05-06T10:50:06Z")
Is it possible to do this sql query: SELECT icID, icmID, message from logstash\* WHERE @timesstamp in ( SELECT @timestamp from logstash\* WHERE icID = 8676 ) with a query from elasticsearch? The problem is, that … --- ## [java.lang.NullPointerException: Cannot invoke "java.util.List.stream()" because the return value of "org.elasticsearch.indices.NodeIndicesStats.getShardStats(org.elasticsearch.index.Index)" is null](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream-because-the-return-value-of-org-elasticsearch-indices-nodeindicesstats-getshardstats-org-elasticsearch-index-index-is-null/324091)
**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\ **Replies:** 1\ **Last updated:** [January 27, 2023, 2:12pm UTC](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream-because-the-return-value-of-org-elasticsearch-indices-nodeindicesstats-getshardstats-org-elasticsearch-index-index-is-null/324091 "2023-01-27T14:12:40Z")
Hi We are getting below in prod \[2023-01-26T23:55:54,079\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[xxx-prd-elkmd1.xxxxxx.com\] collector \[cluster\_stats\] failed to collect data java.lang.NullPointerException: Cannot i… --- ## [Highlight not working properly](https://discuss.elastic.co/t/highlight-not-working-properly/307128)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 6\ **Last updated:** [June 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/highlight-not-working-properly/307128 "2022-06-20T12:23:52Z")
Hi Team, Can anyone please explain me the flow of highlight in Elasticsearch? When i am adding multiple queries in should condition then highlight is not returning expected values and when i am trying with single query… --- ## [Mantain source IP TCP Output](https://discuss.elastic.co/t/mantain-source-ip-tcp-output/302556)
**Author:** [@SecRobe](https://discuss.elastic.co/u/SecRobe)\ **Replies:** 6\ **Last updated:** [April 17, 2022, 3:26pm UTC](https://discuss.elastic.co/t/mantain-source-ip-tcp-output/302556 "2022-04-17T15:26:45Z")
Hello, I'm absolutely newbie in Logstash. I'm using Logstash 6.2.3 with a simple input filter (TCP and UDP) and Syslog output, the problem with syslog output (as we know) it's it adds the "logstash" header, I'm trying t… --- ## [Highlight when query contains fields and text - ES 1.6.0](https://discuss.elastic.co/t/highlight-when-query-contains-fields-and-text-es-1-6-0/24311)
**Author:** [@effoeffi](https://discuss.elastic.co/u/effoeffi)\ **Replies:** 6\ **Last updated:** [June 30, 2015, 4:25pm UTC](https://discuss.elastic.co/t/highlight-when-query-contains-fields-and-text-es-1-6-0/24311 "2015-06-30T16:25:38Z")
Hello, I'm using elasticsearch 1.6.0. Assume having the following document indexed in elasticsearch: { "id" : 2, "user" : "jack", "message" : "I'm jack", "comment" : "my first tweet" } When query: … --- ## [WinLogBeat and Windows Server 2019](https://discuss.elastic.co/t/winlogbeat-and-windows-server-2019/265539)
**Author:** [@branden999](https://discuss.elastic.co/u/branden999)\ **Replies:** 5\ **Last updated:** [March 12, 2021, 3:08pm UTC](https://discuss.elastic.co/t/winlogbeat-and-windows-server-2019/265539 "2021-03-12T15:08:15Z")
Having trouble getting WinLogBeat to continue sending logs to Logstash. Prior to last week, I was running a virtual WEC (Windows Event Collector) on Windows Server 2016 with WinLogBeat 6.8 forwarding to a Logstash 6.7.2 … --- ## [How to resolve "Http client did not trust this server’s certificate"](https://discuss.elastic.co/t/how-to-resolve-http-client-did-not-trust-this-server-s-certificate/365790)
**Author:** [@darius12](https://discuss.elastic.co/u/darius12)\ **Replies:** 8\ **Last updated:** [September 11, 2024, 4:13pm UTC](https://discuss.elastic.co/t/how-to-resolve-http-client-did-not-trust-this-server-s-certificate/365790 "2024-09-11T16:13:11Z")
i get this error, despite following documentation for configuring elasticsearch on windows for HTTPS. I did the following steps: STEP 1. Run CMD.EXE as ADMIN, Navigate to Elastic /BIN folder elasticsearch-certutil ca … --- ## [JSON Parsing issue with elasticsearch ingest pipeline](https://discuss.elastic.co/t/json-parsing-issue-with-elasticsearch-ingest-pipeline/342519)
**Author:** [@Jobin\_James](https://discuss.elastic.co/u/Jobin_James)\ **Replies:** 4\ **Last updated:** [September 7, 2023, 1:51pm UTC](https://discuss.elastic.co/t/json-parsing-issue-with-elasticsearch-ingest-pipeline/342519 "2023-09-07T13:51:55Z")
Hello, I am building an Elasticsearch cluster to aggregate and monitor application logs. I am using ECK for deploying and managing the cluster in k8s and fleet-managed elastic agent deployed across multiple clusters to … --- ## [Getting 403 from Elasticsearch head](https://discuss.elastic.co/t/getting-403-from-elasticsearch-head/53299)
**Author:** [@someone235](https://discuss.elastic.co/u/someone235)\ **Replies:** 2\ **Last updated:** [June 20, 2016, 11:39am UTC](https://discuss.elastic.co/t/getting-403-from-elasticsearch-head/53299 "2016-06-20T11:39:58Z")
When Elasticsearch Head is posting to this: /\_all/\_search It gets 403 Someone knows what can be the cause, and how to fix this? --- ## [@timestamp is showing a time in the future](https://discuss.elastic.co/t/timestamp-is-showing-a-time-in-the-future/29421)
**Author:** [@mgirndt](https://discuss.elastic.co/u/mgirndt)\ **Replies:** 2\ **Last updated:** [September 16, 2015, 6:26pm UTC](https://discuss.elastic.co/t/timestamp-is-showing-a-time-in-the-future/29421 "2015-09-16T18:26:05Z")
The @timestamp date and time is showing 5 hours in the future. Why is this happening. Can someone help me in getting this fixed. This log came into elasticsearch not long after it posted. "@timestamp":… --- ## [Filebeat - how control level nested json object parsing - decode\_json\_fields](https://discuss.elastic.co/t/filebeat-how-control-level-nested-json-object-parsing-decode-json-fields/162876)
**Author:** [@azhurbilo](https://discuss.elastic.co/u/azhurbilo)\ **Replies:** 1\ **Last updated:** [January 4, 2019, 10:47am UTC](https://discuss.elastic.co/t/filebeat-how-control-level-nested-json-object-parsing-decode-json-fields/162876 "2019-01-04T10:47:02Z")
Filebeat - how can I control level of decode\_json\_fields ? max\_depth seems not help in my case :frowning: goal: parsing '/var/lib/docker/containers/\*/\*.log' but controlling max json depth name: "host-01" queue: mem… --- ## [Word\_delimiter and catenate\_all doesnt work?](https://discuss.elastic.co/t/word-delimiter-and-catenate-all-doesnt-work/43377)
**Author:** [@batmaci](https://discuss.elastic.co/u/batmaci)\ **Replies:** 7\ **Last updated:** [March 4, 2016, 11:04am UTC](https://discuss.elastic.co/t/word-delimiter-and-catenate-all-doesnt-work/43377 "2016-03-04T11:04:35Z")
I have my mapping as below { "state": "open", "settings": { "index": { "creation\_date": "1457004137507", "analysis": { "filter": { "my\_word\_delimiter": { "catenate\_all": "true", "split\_on\_numerics": "true", "split\_on\_c… --- ## [Min\_score in Elasticsearch](https://discuss.elastic.co/t/min-score-in-elasticsearch/176508)
**Author:** [@Shreya\_Jain](https://discuss.elastic.co/u/Shreya_Jain)\ **Replies:** 3\ **Last updated:** [April 19, 2019, 10:40pm UTC](https://discuss.elastic.co/t/min-score-in-elasticsearch/176508 "2019-04-19T22:40:25Z")
I have seen a lot of posts suggesting against the use of min\_score functionality. But it's important for my use case to display only high-quality results. Is there a way i can have the \_score returned from elasticsearch … --- ## [Elasticsearch failing to start after upgrading to V5.0.2 from V2.4](https://discuss.elastic.co/t/elasticsearch-failing-to-start-after-upgrading-to-v5-0-2-from-v2-4/67793)
**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\ **Replies:** 3\ **Last updated:** [December 5, 2016, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-failing-to-start-after-upgrading-to-v5-0-2-from-v2-4/67793 "2016-12-05T12:09:14Z")
Hello I am having trouble starting elasticsearch after it was upgraded to V5.0.2 from version V2.4 (Running on Centos 6.7) sudo service elasticsearch start Starting elasticsearch: \[2016-12-01T16:45:32,801\]\[WARN \]\[o.e… --- ## [Kibana on curl gives 302 http 1.1 code](https://discuss.elastic.co/t/kibana-on-curl-gives-302-http-1-1-code/186236)
**Author:** [@hemanthsss](https://discuss.elastic.co/u/hemanthsss)\ **Replies:** 1\ **Last updated:** [June 21, 2019, 9:42am UTC](https://discuss.elastic.co/t/kibana-on-curl-gives-302-http-1-1-code/186236 "2019-06-21T09:42:21Z")
hi folks, i have dockerized my elasticsearch with ssl and i am able to curl the elasticsearch outside container, and also i provided the certs and key for kibana configuration, on start of kibana and when i curl i get … --- ## [How to monitor the memory cost of a query?](https://discuss.elastic.co/t/how-to-monitor-the-memory-cost-of-a-query/149911)
**Author:** [@ankurlathwal](https://discuss.elastic.co/u/ankurlathwal)\ **Replies:** 6\ **Last updated:** [September 26, 2018, 6:26pm UTC](https://discuss.elastic.co/t/how-to-monitor-the-memory-cost-of-a-query/149911 "2018-09-26T18:26:33Z")
Our ECE cluster JVM memory gets stacked up almost every day now. Sometimes, I see that the number of requests at a particular time rockets up to 15k (with around 14.5k being indexing requests). But the cluster has also a… --- ## [Understanding bool/must behavior (intersection? )](https://discuss.elastic.co/t/understanding-bool-must-behavior-intersection/39286)
**Author:** [@frankd](https://discuss.elastic.co/u/frankd)\ **Replies:** 6\ **Last updated:** [January 15, 2016, 11:15pm UTC](https://discuss.elastic.co/t/understanding-bool-must-behavior-intersection/39286 "2016-01-15T23:15:34Z")
I am having trouble getting a bool : must filter to return what I think it should. (I have a gist at http://pastebin.com/e4Mbgq48 ) Given that this returns all 3 records: Bool:{ must \[ … --- ## [New Primary Shards On Same Node](https://discuss.elastic.co/t/new-primary-shards-on-same-node/126974)
**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\ **Replies:** 2\ **Last updated:** [April 6, 2018, 2:41pm UTC](https://discuss.elastic.co/t/new-primary-shards-on-same-node/126974 "2018-04-06T14:41:31Z")
We have a 200 node cluster with multiple instances on same node. say host1-node1, host1-node2, host1-node3. when we do a rolling upgrade. as we disable shard allocation. we don't have any issues with shards distribution… --- ## [Gateway Time-out error](https://discuss.elastic.co/t/gateway-time-out-error/115471)
**Author:** [@uvarisubash](https://discuss.elastic.co/u/uvarisubash)\ **Replies:** 2\ **Last updated:** [January 15, 2018, 5:24am UTC](https://discuss.elastic.co/t/gateway-time-out-error/115471 "2018-01-15T05:24:17Z")
Hi, I am getting the below error when run create new index and new watcher commands from dev tool. Please help me to solve this issue. { "statusCode": 504, "error": "Gateway Time-out", "message": "Client request … --- ## [Low writing speed on SSD, identify bottleneck](https://discuss.elastic.co/t/low-writing-speed-on-ssd-identify-bottleneck/285726)
**Author:** [@sdwerwed](https://discuss.elastic.co/u/sdwerwed)\ **Replies:** 5\ **Last updated:** [October 2, 2021, 3:35pm UTC](https://discuss.elastic.co/t/low-writing-speed-on-ssd-identify-bottleneck/285726 "2021-10-02T15:35:19Z")
Hello Elasticseach community! :slight\_smile: Writing speed on SSD is low and I am not sure where the bottleneck is. I use Elasticsearch 7.14.0 in Kubernetes 4 data nodes 3 masters 8G RAM 4g heap 1 CPU each 512 Standa… --- ## [Best way to insert data into Elasticsearch](https://discuss.elastic.co/t/best-way-to-insert-data-into-elasticsearch/80862)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 5\ **Last updated:** [April 7, 2017, 8:23pm UTC](https://discuss.elastic.co/t/best-way-to-insert-data-into-elasticsearch/80862 "2017-04-07T20:23:37Z")
When inserting data into elasticsearch with Logstash (Where logstash is doing the parsing), is it better to: Point all incoming index requests to any node (i.e. doesn't really matter what node, as long as it gets to t… --- ## [External flat file for host lookup to add tags on network syslogs](https://discuss.elastic.co/t/external-flat-file-for-host-lookup-to-add-tags-on-network-syslogs/32579)
**Author:** [@l1carter](https://discuss.elastic.co/u/l1carter)\ **Replies:** 5\ **Last updated:** [November 30, 2015, 4:04pm UTC](https://discuss.elastic.co/t/external-flat-file-for-host-lookup-to-add-tags-on-network-syslogs/32579 "2015-11-30T16:04:36Z")
All, we use Rancid today to backup router/switch configurations. the config file in Rancid is the in format of: dnsname;manufacture;status so: router01;cisco;up I've figured out how to get syslog-ng to append the d… --- ## [Elasticsearch mTLS connection to S3 (minio based) to store snapshots](https://discuss.elastic.co/t/elasticsearch-mtls-connection-to-s3-minio-based-to-store-snapshots/226690)
**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\ **Replies:** 3\ **Last updated:** [November 8, 2020, 7:17am UTC](https://discuss.elastic.co/t/elasticsearch-mtls-connection-to-s3-minio-based-to-store-snapshots/226690 "2020-11-08T07:17:09Z")
Hi All, I want to store snapshots in s3 storage where it requires mutual auth (mTLS) ( Note : S3 is minio based) I have client.crt, client.key, root.crt at the client side. I tried these steps, apiVersion: elasticsea… --- ## [Data node not able to discover master node](https://discuss.elastic.co/t/data-node-not-able-to-discover-master-node/249570)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 4\ **Last updated:** [September 22, 2020, 7:04pm UTC](https://discuss.elastic.co/t/data-node-not-able-to-discover-master-node/249570 "2020-09-22T19:04:55Z")
I have 1 master eligible node and 1 data node Master config: # ---------------------------------- Cluster ----------------------------------- cluster.name: ELS\_Cluster # ------------------------------------ Node ------… --- ## [Kv filter - Fortigate Logs](https://discuss.elastic.co/t/kv-filter-fortigate-logs/105281)
**Author:** [@dev\_disola](https://discuss.elastic.co/u/dev_disola)\ **Replies:** 4\ **Last updated:** [October 27, 2017, 12:03am UTC](https://discuss.elastic.co/t/kv-filter-fortigate-logs/105281 "2017-10-27T00:03:36Z")
Hello everyone, I met ELK a short time ago and started to analyze logs generated from a Fortigate switch. The message is coming in the following format: \<189\>date = 2017-10-25 time = 14:25:25 devname = ELSEN01 ... I'm… --- ## [Convert fields of datatype text to int or float in Kibana](https://discuss.elastic.co/t/convert-fields-of-datatype-text-to-int-or-float-in-kibana/194324)
**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\ **Replies:** 3\ **Last updated:** [August 8, 2019, 3:48pm UTC](https://discuss.elastic.co/t/convert-fields-of-datatype-text-to-int-or-float-in-kibana/194324 "2019-08-08T15:48:11Z")
Is there a way to convert fields ingested as datatype text to an integer or float in Kibana? It would be cool to be able to convert datatypes real time when creating a visual --- ## [Failed to parse\[host\]?](https://discuss.elastic.co/t/failed-to-parse-host/150489)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [October 1, 2018, 8:17pm UTC](https://discuss.elastic.co/t/failed-to-parse-host/150489 "2018-10-01T20:17:23Z")
I am developing a custom beats client. After a recent upgrade on my elastic server, the beat is now failing to publish with an error of; 2018-09-30T22:25:17.152+0100 WARN elasticsearch/client.go:520 Canno… --- ## [Installing ELK on a new Linux box on Azure](https://discuss.elastic.co/t/installing-elk-on-a-new-linux-box-on-azure/72319)
**Author:** [@Maurgi](https://discuss.elastic.co/u/Maurgi)\ **Replies:** 8\ **Last updated:** [January 25, 2017, 1:17am UTC](https://discuss.elastic.co/t/installing-elk-on-a-new-linux-box-on-azure/72319 "2017-01-25T01:17:41Z")
I am a Linux n00b, sorry, but I am trying :slight\_smile: What do I need to do to access Kibana from the another machine once I deploy to Linux? Problem: I just provisioned a new Ubuntu Linux box on Azure and installe… --- ## [How to query the stored, un-analyzed, form of an analyzed field?](https://discuss.elastic.co/t/how-to-query-the-stored-un-analyzed-form-of-an-analyzed-field/13334)
**Author:** [@Chris\_5](https://discuss.elastic.co/u/Chris_5)\ **Replies:** 3\ **Last updated:** [August 26, 2013, 9:47pm UTC](https://discuss.elastic.co/t/how-to-query-the-stored-un-analyzed-form-of-an-analyzed-field/13334 "2013-08-26T21:47:19Z")
I'm having trouble figuring out how the query (search) the 'stored' form of a field that has an analyzer. I need to be able to search for both the unmodified words, and the synonym mapping I've created at different … --- ## [User Retention Analysis in Kibana (Cohorts)](https://discuss.elastic.co/t/user-retention-analysis-in-kibana-cohorts/120733)
**Author:** [@geoff\_yalo](https://discuss.elastic.co/u/geoff_yalo)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 9:32am UTC](https://discuss.elastic.co/t/user-retention-analysis-in-kibana-cohorts/120733 "2018-02-21T09:32:06Z")
Hi, I would like to create a chart in Kibana showing user retention by cohort over time. See below as an example of what I would like to create. The chart below shows that among users who started on Day 0, ~50% returned… --- ## [Cannot Install Fleet Server](https://discuss.elastic.co/t/cannot-install-fleet-server/274764)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 5:17pm UTC](https://discuss.elastic.co/t/cannot-install-fleet-server/274764 "2021-06-02T17:17:29Z")
Hello there, Server info: 1 - I´m running ubuntu server 18.04 2 - Elk stack running on 7.13 version I´m trying to add a fleet server on a self managed host but no luck. Following the kibana instructions this is what … --- ## [How to set sequence to run multiple pipeline](https://discuss.elastic.co/t/how-to-set-sequence-to-run-multiple-pipeline/152048)
**Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 6:08am UTC](https://discuss.elastic.co/t/how-to-set-sequence-to-run-multiple-pipeline/152048 "2018-10-23T06:08:53Z")
Hi all, I'm working on multiple pipeline, I've created 3 different pipeline on single instance. but on running logstash i'm not getting the output in the sequece. is there any way to get output according mentioned seq… --- ## [Logstash restart loop](https://discuss.elastic.co/t/logstash-restart-loop/177163)
**Author:** [@johndowe](https://discuss.elastic.co/u/johndowe)\ **Replies:** 0\ **Last updated:** [April 16, 2019, 10:32pm UTC](https://discuss.elastic.co/t/logstash-restart-loop/177163 "2019-04-16T22:32:11Z")
I have setup Filebeats succesfully and noticed logstash is still not processing any logs since it is continuously restarting. This is what I am seeing in the log files on the Raspberry Pi : \[2019-04-17T00:25:17,025\]\[ER… --- ## [Why my bool query is not working?](https://discuss.elastic.co/t/why-my-bool-query-is-not-working/7291)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 5\ **Last updated:** [February 1, 2013, 2:22pm UTC](https://discuss.elastic.co/t/why-my-bool-query-is-not-working/7291 "2013-02-01T14:22:21Z")
Hi all, curl -XGET 'http://localhost:9200/amazon/book/\_search' -d '{ "query": { "bool" : { … --- ## [Error Running ./bin/elasticsearch-setup-passwords interactive](https://discuss.elastic.co/t/error-running-bin-elasticsearch-setup-passwords-interactive/137289)
**Author:** [@shrike718](https://discuss.elastic.co/u/shrike718)\ **Replies:** 1\ **Last updated:** [June 25, 2018, 4:31pm UTC](https://discuss.elastic.co/t/error-running-bin-elasticsearch-setup-passwords-interactive/137289 "2018-06-25T16:31:30Z")
Received the following error running elasticsearch-setup-passwords interactive: elasticsearch-6.3.0\]$ ./bin/elasticsearch-setup-passwords interactive Unexpected response code \[403\] from calling GET http://127.0.0.1:920… --- ## [Fleet Server is Not Healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/322215)
**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\ **Replies:** 3\ **Last updated:** [January 23, 2023, 4:41pm UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/322215 "2023-01-23T16:41:38Z")
I am getting the error, and becuase of that I can't add any agent.. what is causing the error. and How do i Resolve it. Is it becuause of the SSL certificate ? --- ## [Value shown on top of bar](https://discuss.elastic.co/t/value-shown-on-top-of-bar/105553)
**Author:** [@hamrio](https://discuss.elastic.co/u/hamrio)\ **Replies:** 3\ **Last updated:** [October 30, 2017, 4:01pm UTC](https://discuss.elastic.co/t/value-shown-on-top-of-bar/105553 "2017-10-30T16:01:49Z")
Hi, I'm new to kibana and trying to figure something out. I want to display the value of one bar but I don't see any option on setting. Is there a way to achieve this? I'm using kibana 5.6.3 Thank you --- ## [No .raw field in kibana](https://discuss.elastic.co/t/no-raw-field-in-kibana/98425)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 4:21pm UTC](https://discuss.elastic.co/t/no-raw-field-in-kibana/98425 "2017-08-30T16:21:03Z")
I am seeing an issues where i am not seeing .raw fields but instead i am seeing .keyword fields. I know there was a problem when you change the default index name from logstash-\* to something else but couldn’t recall the… --- ## [Script processor ingest pipelines on nested fields](https://discuss.elastic.co/t/script-processor-ingest-pipelines-on-nested-fields/172092)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 2\ **Last updated:** [March 15, 2019, 1:18pm UTC](https://discuss.elastic.co/t/script-processor-ingest-pipelines-on-nested-fields/172092 "2019-03-15T13:18:33Z")
Hi there! I'm dealing with the following situation. I have some data ingested into elasticsearch which present a field "certainField" which can either be null or contain an unspecified number of JSON objects. My goal … --- ## [High CPU usage docker container running Logstash 2.0](https://discuss.elastic.co/t/high-cpu-usage-docker-container-running-logstash-2-0/35180)
**Author:** [@danwald](https://discuss.elastic.co/u/danwald)\ **Replies:** 2\ **Last updated:** [November 21, 2015, 10:26am UTC](https://discuss.elastic.co/t/high-cpu-usage-docker-container-running-logstash-2-0/35180 "2015-11-21T10:26:25Z")
I am running the official logstash2.0 (using marathon via mesos) docker and the process is using a lot of CPU. Heres what the top on the process and its threads (below). The process eventually dies failing to connect to… --- ## [Query to get all records until the sum of column less than or equal a value](https://discuss.elastic.co/t/query-to-get-all-records-until-the-sum-of-column-less-than-or-equal-a-value/197302)
**Author:** [@darshitdrg](https://discuss.elastic.co/u/darshitdrg)\ **Replies:** 8\ **Last updated:** [September 10, 2019, 10:38am UTC](https://discuss.elastic.co/t/query-to-get-all-records-until-the-sum-of-column-less-than-or-equal-a-value/197302 "2019-09-10T10:38:53Z")
HI, Is there any way to find ids of document for which sum of field "salary" reach 10000? I just want to fetch ids for which the total of salary is just less than or equal to 10000? something like - https://stackoverf… --- ## [Count distinct values lower than doc\_count](https://discuss.elastic.co/t/count-distinct-values-lower-than-doc-count/145840)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 8\ **Last updated:** [August 24, 2018, 7:11am UTC](https://discuss.elastic.co/t/count-distinct-values-lower-than-doc-count/145840 "2018-08-24T07:11:20Z")
Hi i am using cardinality Aggregation Query but some time unique count value less than the previous value.. "size": 0, "aggs": { "camgroup": { "filter": { "term": { "RTT": "184" } }, "aggs": { "campevents": { … --- ## [No data in uptime dashboard](https://discuss.elastic.co/t/no-data-in-uptime-dashboard/179651)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 7\ **Last updated:** [May 22, 2019, 7:49am UTC](https://discuss.elastic.co/t/no-data-in-uptime-dashboard/179651 "2019-05-22T07:49:48Z")
My uptime dashboard is empty. I am able to see data flowing in the discover tab for the urls I have configured in the heartbeat.yml file. I am able to see data in the Heartbeat default dashboard but the uptime is empty. … [Previous page](https://discuss.elastic.co/top.md?page=720&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=722&per_page=50&period=all)