# Top **URL:** https://discuss.elastic.co/top.md?page=754&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 755 --- ## [Can match query be use in filter context?](https://discuss.elastic.co/t/can-match-query-be-use-in-filter-context/53883)
**Author:** [@Anirudh\_Modi](https://discuss.elastic.co/u/Anirudh_Modi)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 12:28pm UTC](https://discuss.elastic.co/t/can-match-query-be-use-in-filter-context/53883 "2016-06-24T12:28:18Z")
I have a doubt, it is no where mentioned in docs about what kind of queries can be used in filter context, which leads to the confusion that can match be used inside a filter context? --- ## [All shards remain unassigned](https://discuss.elastic.co/t/all-shards-remain-unassigned/53145)
**Author:** [@Daan\_Aerts](https://discuss.elastic.co/u/Daan_Aerts)\ **Replies:** 4\ **Last updated:** [June 17, 2016, 2:38pm UTC](https://discuss.elastic.co/t/all-shards-remain-unassigned/53145 "2016-06-17T14:38:03Z")
why are none of my shards being assigned? (ES 2.3) Create index: PUT 'host:9200/entities?pretty' -d ' { "mappings": { x } }, "settings" : { "index" : { "number\_of\_shards" : 6, "nu… --- ## [5.6.5 cluster.routing.allocation.enableが勝手にnoneになる](https://discuss.elastic.co/t/5-6-5-cluster-routing-allocation-enable-none/112155)
**Author:** [@KanakoNakai](https://discuss.elastic.co/u/KanakoNakai)\ **Replies:** 3\ **Last updated:** [December 18, 2017, 1:06pm UTC](https://discuss.elastic.co/t/5-6-5-cluster-routing-allocation-enable-none/112155 "2017-12-18T13:06:20Z")
ES version : 5.6.5 OS: CentOS 7 突然、index作成時にshardが自動allocateされなくなりました。 ログにはERRORは出ておらずWARNのみ。 \[2017-12-14T15:45:27,714\]\[WARN \]\[rest.suppressed \] path: /test-a/test/\_search, params: {index=test-a, type=test} … --- ## [Local filter plugin pretended to be installed but not listed and not working](https://discuss.elastic.co/t/local-filter-plugin-pretended-to-be-installed-but-not-listed-and-not-working/2016)
**Author:** [@eravelo](https://discuss.elastic.co/u/eravelo)\ **Replies:** 3\ **Last updated:** [September 28, 2015, 8:50am UTC](https://discuss.elastic.co/t/local-filter-plugin-pretended-to-be-installed-but-not-listed-and-not-working/2016 "2015-09-28T08:50:28Z")
I tried writing a simple filter plugin, following this Howto: https://www.elastic.co/guide/en/logstash/current/\_how\_to\_write\_a\_logstash\_filter\_plugin.html When installing the plugin, it was reported to be installed: #… --- ## [Post Filter On Nested Value](https://discuss.elastic.co/t/post-filter-on-nested-value/21558)
**Author:** [@Dev\_Day](https://discuss.elastic.co/u/Dev_Day)\ **Replies:** 3\ **Last updated:** [January 9, 2015, 2:07pm UTC](https://discuss.elastic.co/t/post-filter-on-nested-value/21558 "2015-01-09T14:07:39Z")
Hi, I would like to run a post filter on a nested value, but cannot seem to get this working. This is my very simple document structure: {"code":"ABC", "variants": \[{"sku":"123", "price": 15}\], "colour":"blue"} … --- ## [\[ILM Policy\] Best compromise between size and max age](https://discuss.elastic.co/t/ilm-policy-best-compromise-between-size-and-max-age/223299)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 5\ **Last updated:** [March 14, 2020, 1:40pm UTC](https://discuss.elastic.co/t/ilm-policy-best-compromise-between-size-and-max-age/223299 "2020-03-14T13:40:54Z")
Hello Elasticians ! While testing ILM policy feature, I've just figured that the delete phase is relative to the rollover time, not the index creation time (source) Let's say I have the following ILM policy : { "im… --- ## [API Key for Elastic Cloud](https://discuss.elastic.co/t/api-key-for-elastic-cloud/150615)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 5\ **Last updated:** [October 3, 2018, 10:23am UTC](https://discuss.elastic.co/t/api-key-for-elastic-cloud/150615 "2018-10-03T10:23:10Z")
Is there a way to create an API key instead of a username:password combination? If not an API key, is there an alternative? I have developers using React javascript and the username and password is clear in transmissio… --- ## [ElasticSearch mapping date RFC 2822](https://discuss.elastic.co/t/elasticsearch-mapping-date-rfc-2822/13998)
**Author:** [@Federico\_Garcia](https://discuss.elastic.co/u/Federico_Garcia)\ **Replies:** 5\ **Last updated:** [October 17, 2013, 6:43pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-date-rfc-2822/13998 "2013-10-17T18:43:01Z")
Hi! Original date RFC 2822: "Wed, 27 Mar 2013 15:12:14 +0000" Mapping: "created\_at": { "type": "date", "format": "EEEE, dd MMM yyyy H… --- ## [XDELETE remove no records](https://discuss.elastic.co/t/xdelete-remove-no-records/45677)
**Author:** [@rodi](https://discuss.elastic.co/u/rodi)\ **Replies:** 6\ **Last updated:** [March 30, 2016, 9:33am UTC](https://discuss.elastic.co/t/xdelete-remove-no-records/45677 "2016-03-30T09:33:12Z")
Hello We use Elasticsearch Version is 1.7.1 and i have this script and want delete old messages on Graylog. #!/bin/sh FDATE=date +"%F %H:%M:%S.000" --date="60 days ago" TDATE=date +"%F %H:%M:%S.000" --date="0 days ag… --- ## [Change node hostname](https://discuss.elastic.co/t/change-node-hostname/338312)
**Author:** [@cesar.hernandez.a3se](https://discuss.elastic.co/u/cesar.hernandez.a3se)\ **Replies:** 7\ **Last updated:** [September 29, 2023, 3:19am UTC](https://discuss.elastic.co/t/change-node-hostname/338312 "2023-09-29T03:19:50Z")
Hi We have a 7 node ES cluster (v7.17.5) and we need to change the hostnames of all nodes. I know how to do it on Linux, but, is there anything I need to change on Elasticsearch? My elasticsearch.yml uses ip address (n… --- ## [ES 7.16.0 and 7.16.1 Upgrade single node health yellow](https://discuss.elastic.co/t/es-7-16-0-and-7-16-1-upgrade-single-node-health-yellow/291875)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 8:26am UTC](https://discuss.elastic.co/t/es-7-16-0-and-7-16-1-upgrade-single-node-health-yellow/291875 "2022-01-20T08:26:01Z")
Hello boys and girls I have a single ES node which has one index turn yellow curl -XGET localhost:9200/\_cat/health 1639519203 22:00:03 ndelastic yellow 1 1 317 317 0 0 1 0 - 99.7% curl -XGET localhost:9200/\_cluster/a… --- ## [Why can't I import the metricbeat dashboard on Freebsd?](https://discuss.elastic.co/t/why-cant-i-import-the-metricbeat-dashboard-on-freebsd/168365)
**Author:** [@Tutorial\_Linux\_Indon](https://discuss.elastic.co/u/Tutorial_Linux_Indon)\ **Replies:** 8\ **Last updated:** [February 27, 2019, 8:08am UTC](https://discuss.elastic.co/t/why-cant-i-import-the-metricbeat-dashboard-on-freebsd/168365 "2019-02-27T08:08:28Z")
Good afternoon / afternoon, why can't I import the metricbeat dashboard on Freebsd? Next is the log Metricbaet Output. Feb 14 15:32:32 smtp140 metricbeat\[3834\]: ERROR instance/beat.go:667 Exiting: 1 error: 1 error: me… --- ## [Logstash 2.2.1 Elasticsearch Output Vulnerability](https://discuss.elastic.co/t/logstash-2-2-1-elasticsearch-output-vulnerability/42091)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [February 18, 2016, 2:03am UTC](https://discuss.elastic.co/t/logstash-2-2-1-elasticsearch-output-vulnerability/42091 "2016-02-18T02:03:37Z")
Logstash version 2.2.1 is vulnerable to a man in the middle attack when used with Elasticsearch output. In version 2.2.1, the config which enables SSL/TLS default has been disabled inadvertently, so a malicious user coul… --- ## [Xpack-session out disable](https://discuss.elastic.co/t/xpack-session-out-disable/84679)
**Author:** [@Rom2](https://discuss.elastic.co/u/Rom2)\ **Replies:** 4\ **Last updated:** [May 11, 2017, 8:18am UTC](https://discuss.elastic.co/t/xpack-session-out-disable/84679 "2017-05-11T08:18:24Z")
For X-pack in free license version is it possible to disable the session logout feature?...Also after trial period would ELK function normally as before along with the monitoring feature? --- ## [Escaping return carriage in json message body](https://discuss.elastic.co/t/escaping-return-carriage-in-json-message-body/58717)
**Author:** [@kalim](https://discuss.elastic.co/u/kalim)\ **Replies:** 1\ **Last updated:** [August 25, 2016, 8:17am UTC](https://discuss.elastic.co/t/escaping-return-carriage-in-json-message-body/58717 "2016-08-25T08:17:53Z")
Hi, Am using logstash-input-azureeventhub plugin to get data from Azure event hub. Am getting json parse error on return carriages when trying to import data. Please see below: Message: {"app\_Name":"KalimTest","Valu… --- ## [Filebeat Line Endings Problem '\\n'](https://discuss.elastic.co/t/filebeat-line-endings-problem-n/157568)
**Author:** [@ahbe2901](https://discuss.elastic.co/u/ahbe2901)\ **Replies:** 5\ **Last updated:** [November 21, 2018, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-line-endings-problem-n/157568 "2018-11-21T15:48:51Z")
I have the following setting: Filebeat =\> Logstash My problem is, that Filebeat is not recognizing \\n as a line ending and is then packing multiple lines into one message. Log Input (with Unix line endings \\n): 2018-1… --- ## [Multiple database connection using logstash](https://discuss.elastic.co/t/multiple-database-connection-using-logstash/130865)
**Author:** [@Boukhdhira](https://discuss.elastic.co/u/Boukhdhira)\ **Replies:** 5\ **Last updated:** [May 8, 2018, 11:53am UTC](https://discuss.elastic.co/t/multiple-database-connection-using-logstash/130865 "2018-05-08T11:53:13Z")
Is it possible to have many sqlite connection with logstash in the same configuration using JDBC input ? However, databases contains the same tables structures . --- ## [Logstash - Error](https://discuss.elastic.co/t/logstash-error/136495)
**Author:** [@Aby](https://discuss.elastic.co/u/Aby)\ **Replies:** 6\ **Last updated:** [June 20, 2018, 8:10am UTC](https://discuss.elastic.co/t/logstash-error/136495 "2018-06-20T08:10:24Z")
Hi I am running a logstash program to read the log file into the elastic db. Below is the sample file: \[2018-05-29 08:04:23,687\] DEBUG - http-outgoing-2845 HTTP/1.1 500 Internal Server Error {org.apache.synapse.trans… --- ## ["index\_out\_of\_bounds\_exception](https://discuss.elastic.co/t/index-out-of-bounds-exception/203375)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:02pm UTC](https://discuss.elastic.co/t/index-out-of-bounds-exception/203375 "2019-10-14T12:02:34Z")
Hi, When using scripts in term aggregation i am getting "index\_out\_of\_bounds\_exception why is this happening { "took" : 22, "timed\_out" : false, "\_shards" : { "total" : 3, "successful" : 2, "skipped" : 0, "fa… --- ## [Configurable ASCIIFolding and CharReplace filters done](https://discuss.elastic.co/t/configurable-asciifolding-and-charreplace-filters-done/3934)
**Author:** [@Barsk](https://discuss.elastic.co/u/Barsk)\ **Replies:** 7\ **Last updated:** [February 28, 2012, 1:35pm UTC](https://discuss.elastic.co/t/configurable-asciifolding-and-charreplace-filters-done/3934 "2012-02-28T13:35:11Z")
Hi all. I've been digging around in ES lately to try it to do what I want. Part of that is to normalize so that diacritics and other accents etc are removed. And there are a number of… --- ## [Need to generate response time graphs from apache logs, average and pct95](https://discuss.elastic.co/t/need-to-generate-response-time-graphs-from-apache-logs-average-and-pct95/136941)
**Author:** [@lserranov](https://discuss.elastic.co/u/lserranov)\ **Replies:** 3\ **Last updated:** [June 22, 2018, 2:55am UTC](https://discuss.elastic.co/t/need-to-generate-response-time-graphs-from-apache-logs-average-and-pct95/136941 "2018-06-22T02:55:38Z")
Hi, As a user, some time back I was able to generate Response Time graphs (Average and pct95) from apache logs. X axis was time, In Y axis there were 2 lines, pct95 and average. So I would assume I know how to do them. … --- ## [Logstash file Input Plugin to read all files from a directory where log files gets rotated every hour](https://discuss.elastic.co/t/logstash-file-input-plugin-to-read-all-files-from-a-directory-where-log-files-gets-rotated-every-hour/270806)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 4\ **Last updated:** [April 22, 2021, 11:40am UTC](https://discuss.elastic.co/t/logstash-file-input-plugin-to-read-all-files-from-a-directory-where-log-files-gets-rotated-every-hour/270806 "2021-04-22T11:40:45Z")
Hello Dear ELkan's Hope all are doing good!!. here are details of my query: Logstash version7.10 on Centos7.8 Using File input plugin to read files and forward logs to other components Issue Statement : How can i rea… --- ## [How expensive is the Source Filtering?](https://discuss.elastic.co/t/how-expensive-is-the-source-filtering/156164)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 4\ **Last updated:** [November 12, 2018, 8:41am UTC](https://discuss.elastic.co/t/how-expensive-is-the-source-filtering/156164 "2018-11-12T08:41:34Z")
Hi, Pretty big documents are stored in the Index but with not so much of fields indexable. let's say only 5% of fields are indexed but the rest just stored in \_source field. As mentioned the document is so big and when… --- ## [Head shows incorrect docs count if nested type field is defined in mapping](https://discuss.elastic.co/t/head-shows-incorrect-docs-count-if-nested-type-field-is-defined-in-mapping/23270)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 4\ **Last updated:** [April 17, 2015, 3:42am UTC](https://discuss.elastic.co/t/head-shows-incorrect-docs-count-if-nested-type-field-is-defined-in-mapping/23270 "2015-04-17T03:42:08Z")
I was confused by the docs count value displaying in head plugin if there is nest type field define in mapping For example, I created a new index with following mapping: { "mappings" : { "doc" : { … --- ## [Is there a way to return only one result in a query?](https://discuss.elastic.co/t/is-there-a-way-to-return-only-one-result-in-a-query/14953)
**Author:** [@Adrian\_Luna](https://discuss.elastic.co/u/Adrian_Luna)\ **Replies:** 4\ **Last updated:** [December 20, 2013, 9:57am UTC](https://discuss.elastic.co/t/is-there-a-way-to-return-only-one-result-in-a-query/14953 "2013-12-20T09:57:43Z")
I am using the update by query plugin . I only want to update one of the elements that match my query at a time and the "size=1" is not working. Is there any other possibility to set the number of returned element… --- ## [Error when starting up Logstash](https://discuss.elastic.co/t/error-when-starting-up-logstash/202252)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 2\ **Last updated:** [October 7, 2019, 1:30am UTC](https://discuss.elastic.co/t/error-when-starting-up-logstash/202252 "2019-10-07T01:30:29Z")
When starting Logstash, I get the following error: \[2019-10-03T23:04:46,420\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or command line options are specified \[2019-10-03T… --- ## [Configuring Both X-Pack Monitoring and X-Pack Management with TLS for Logstash](https://discuss.elastic.co/t/configuring-both-x-pack-monitoring-and-x-pack-management-with-tls-for-logstash/126045)
**Author:** [@wanch](https://discuss.elastic.co/u/wanch)\ **Replies:** 2\ **Last updated:** [April 3, 2018, 10:32am UTC](https://discuss.elastic.co/t/configuring-both-x-pack-monitoring-and-x-pack-management-with-tls-for-logstash/126045 "2018-04-03T10:32:58Z")
Hi, Not sure whether to post this in the Logstash or X-Pack category, but I guess I'd try this place first. I am having troubles configuring both the X-Pack Monitoring and X-Pack Centralized Pipeline Management for Log… --- ## [Updating a document with elasticsearch.js](https://discuss.elastic.co/t/updating-a-document-with-elasticsearch-js/115960)
**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 1:45am UTC](https://discuss.elastic.co/t/updating-a-document-with-elasticsearch-js/115960 "2018-01-18T01:45:15Z")
I'm trying to update a document with elasticsearch.js, and I'm getting a few errors from it. Here's what I'm using: this.elasticClient.update({ index: 'applicants', type: 'applicant', id: this.applicantId, body:… --- ## [Reverse Proxy & Load Balancer](https://discuss.elastic.co/t/reverse-proxy-load-balancer/88240)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 1\ **Last updated:** [June 5, 2017, 9:10am UTC](https://discuss.elastic.co/t/reverse-proxy-load-balancer/88240 "2017-06-05T09:10:09Z")
I am going to send in lots of data into my elasticsearch cluster and I need to protect my cluster from being seen on my internal network. I am intending to put in a device with load balancing and reverse proxy turn on. … --- ## [Login is currently disabled. Administrators should consult the Kibana logs for more details. - Azure template](https://discuss.elastic.co/t/login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details-azure-template/126807)
**Author:** [@subrato](https://discuss.elastic.co/u/subrato)\ **Replies:** 5\ **Last updated:** [April 19, 2018, 4:08pm UTC](https://discuss.elastic.co/t/login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details-azure-template/126807 "2018-04-19T16:08:49Z")
I spun up Elastic Search in Azure using the template. By default x-pack is installed in that template. When I browse url:9200 I can see elastic search is running but when I try url:5601 kibana url it shows me that error. … --- ## [Elasticsearch-head plugin on windows OS](https://discuss.elastic.co/t/elasticsearch-head-plugin-on-windows-os/131281)
**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\ **Replies:** 3\ **Last updated:** [May 10, 2018, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-head-plugin-on-windows-os/131281 "2018-05-10T12:43:16Z")
Hello, please how can I install ELASTICSEARCH-HEAD PLUGIN on windows OS PS: I have elasticsearch 6.2.2 installed on windows server 2008 and I would like to add a web front end for it. I try c:\\ES\\bin\>plugin.bat insta… --- ## [Setting up Elasticsearch with Docker on local machine - Container stops and throws error](https://discuss.elastic.co/t/setting-up-elasticsearch-with-docker-on-local-machine-container-stops-and-throws-error/219954)
**Author:** [@bvelastic](https://discuss.elastic.co/u/bvelastic)\ **Replies:** 6\ **Last updated:** [February 19, 2020, 12:50pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-with-docker-on-local-machine-container-stops-and-throws-error/219954 "2020-02-19T12:50:38Z")
Hello, I am new to elastic search and docker and I want to setup up ELK using Docker on my laptop only to play around. I am followed the instructions on the Elastic documentation but I am receiving an error when I try … --- ## [Hide some fields from Discover page](https://discuss.elastic.co/t/hide-some-fields-from-discover-page/103345)
**Author:** [@wonnado](https://discuss.elastic.co/u/wonnado)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 1:55pm UTC](https://discuss.elastic.co/t/hide-some-fields-from-discover-page/103345 "2017-10-10T13:55:25Z")
Hi! I'd like to hide some fields in Available Fields on Discover page. Is it possible? --- ## [Best practices for on boarding ELK stack](https://discuss.elastic.co/t/best-practices-for-on-boarding-elk-stack/74543)
**Author:** [@rahul.dhammy](https://discuss.elastic.co/u/rahul.dhammy)\ **Replies:** 2\ **Last updated:** [February 13, 2017, 2:12pm UTC](https://discuss.elastic.co/t/best-practices-for-on-boarding-elk-stack/74543 "2017-02-13T14:12:07Z")
Hi All I am just trying to setup ELK with my windows based services. I am using log4net for my logs and want to use ELK stack for centralized log processing. My question is what are the best practices for setting the ELK… --- ## [\[SOLVED\] OSM-WMS Compliant Maps & Precision](https://discuss.elastic.co/t/solved-osm-wms-compliant-maps-precision/57034)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [August 9, 2016, 3:53pm UTC](https://discuss.elastic.co/t/solved-osm-wms-compliant-maps-precision/57034 "2016-08-09T15:53:11Z")
With the recent decommission of Mapquest functionality with Kibana, I have been researching other WMS compliant maps. Leading me to a few questions; Is there a list of maps that are compliant with Kibana 4.5? I want t… --- ## [Not\_analyzed field with doc\_values still in fielddata cache](https://discuss.elastic.co/t/not-analyzed-field-with-doc-values-still-in-fielddata-cache/26298)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 2\ **Last updated:** [July 27, 2015, 7:25am UTC](https://discuss.elastic.co/t/not-analyzed-field-with-doc-values-still-in-fielddata-cache/26298 "2015-07-27T07:25:41Z")
During some experiment with fielddata vs doc\_values I encountered a weird case. In my earlier mapping, I didn't use doc values at all. In my new mapping, I've added doc\_values: true to all fields in my mapping, except an… --- ## [Cloud Elastic with Azure AD Authentication](https://discuss.elastic.co/t/cloud-elastic-with-azure-ad-authentication/189154)
**Author:** [@RxJcollins](https://discuss.elastic.co/u/RxJcollins)\ **Replies:** 4\ **Last updated:** [July 8, 2019, 3:09pm UTC](https://discuss.elastic.co/t/cloud-elastic-with-azure-ad-authentication/189154 "2019-07-08T15:09:08Z")
I am currently evaluating the Cloud Elastic Service as cloud.elastic.co for my organization. I have created my deployment and would like to connect it to our Azure AD to use AD as authentication to Kibana and map Elastic… --- ## [Mongodb input plugin for logstash missing data problem](https://discuss.elastic.co/t/mongodb-input-plugin-for-logstash-missing-data-problem/95272)
**Author:** [@TaurusD](https://discuss.elastic.co/u/TaurusD)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 6:20am UTC](https://discuss.elastic.co/t/mongodb-input-plugin-for-logstash-missing-data-problem/95272 "2017-08-04T06:20:21Z")
Hi, I’m using logstash-input-mongodb to import my data from mongodb to ELK. But when it was done, I found that there is one document missing (I have 17781 docs in mongodb but only got 17780 docs in ELK). I used the “no… --- ## [Can Watcher execute external script upon alert?](https://discuss.elastic.co/t/can-watcher-execute-external-script-upon-alert/31663)
**Author:** [@Tal\_Bar\_Or](https://discuss.elastic.co/u/Tal_Bar_Or)\ **Replies:** 4\ **Last updated:** [October 5, 2016, 2:15am UTC](https://discuss.elastic.co/t/can-watcher-execute-external-script-upon-alert/31663 "2016-10-05T02:15:57Z")
Hi All, I would like to use Watcher to execute external script on alert condition is it possible? If yes if can i get reference link to how to Please advice Thanks --- ## [Limit to number of Nodes?](https://discuss.elastic.co/t/limit-to-number-of-nodes/51344)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 5\ **Last updated:** [June 2, 2016, 7:29pm UTC](https://discuss.elastic.co/t/limit-to-number-of-nodes/51344 "2016-06-02T19:29:19Z")
Is there a limit to the number of nodes displayed in the free version of Marvel? Right now I have 12 data nodes, all showing up, but I have 12 logstash nodes as well with ES client nodes running on them. When I view Ma… --- ## [Filebeat 7.2.0 autodiscover configuration issues](https://discuss.elastic.co/t/filebeat-7-2-0-autodiscover-configuration-issues/188168)
**Author:** [@dnmahendra](https://discuss.elastic.co/u/dnmahendra)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 4:39pm UTC](https://discuss.elastic.co/t/filebeat-7-2-0-autodiscover-configuration-issues/188168 "2019-08-29T16:39:55Z")
I am trying to setup filebeat for the kubernetes cluster. I am trying to use autodiscover for my containers. I have istio envoy proxy running on each pod. I am trying to ship those logs to my elastic stack. But, I am get… --- ## [New to Kibana, a question on extensability using R and Python libaries](https://discuss.elastic.co/t/new-to-kibana-a-question-on-extensability-using-r-and-python-libaries/127849)
**Author:** [@Jonathan\_Dunne](https://discuss.elastic.co/u/Jonathan_Dunne)\ **Replies:** 3\ **Last updated:** [April 16, 2018, 9:00pm UTC](https://discuss.elastic.co/t/new-to-kibana-a-question-on-extensability-using-r-and-python-libaries/127849 "2018-04-16T21:00:04Z")
Hello, I'm looking at Kibana and Vega to potentially using it for use within my PhD as I am analysing large volumes of data. For the most part, both applications appear useful. However, I noticed from the video demo's t… --- ## [Mark all as Solved](https://discuss.elastic.co/t/mark-all-as-solved/35712)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 3\ **Last updated:** [May 23, 2016, 3:16pm UTC](https://discuss.elastic.co/t/mark-all-as-solved/35712 "2016-05-23T15:16:04Z")
I was wondering , since most topics on the forums are people asking questions/help , if it is not possible to add a way to mark a topic as Solved/Closed - sortof like StackOverflow has ? Its incredibly helpful for some… --- ## [Search on a nested field on multi-indexes, multi-document types throw QueryParsingException](https://discuss.elastic.co/t/search-on-a-nested-field-on-multi-indexes-multi-document-types-throw-queryparsingexception/40269)
**Author:** [@Arnaud\_Babilone](https://discuss.elastic.co/u/Arnaud_Babilone)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 11:30am UTC](https://discuss.elastic.co/t/search-on-a-nested-field-on-multi-indexes-multi-document-types-throw-queryparsingexception/40269 "2016-01-29T11:30:38Z")
Hi everyone, I'm facing a strange issue when performing a search on an nested field on multiple indexes, multiple document types. First of all, we are working on elasticsearch 1.7.3. My search is on two indexes, w… --- ## [Is it normal for dashboards, index patterns, etc to disappear after upgrading?](https://discuss.elastic.co/t/is-it-normal-for-dashboards-index-patterns-etc-to-disappear-after-upgrading/161795)
**Author:** [@gyau](https://discuss.elastic.co/u/gyau)\ **Replies:** 2\ **Last updated:** [December 22, 2018, 1:46am UTC](https://discuss.elastic.co/t/is-it-normal-for-dashboards-index-patterns-etc-to-disappear-after-upgrading/161795 "2018-12-22T01:46:23Z")
I've upgraded both Elasticsearch and Kibana from 6.4.3 to 6.5.4. First, I upgraded Elasticsearch, while running Kibana 6.4.3 and everything was okay; I could still see my dashboards, index patterns, data visualizations,… --- ## [Setting path.repo for kubernetes pods](https://discuss.elastic.co/t/setting-path-repo-for-kubernetes-pods/178186)
**Author:** [@fbede4](https://discuss.elastic.co/u/fbede4)\ **Replies:** 1\ **Last updated:** [April 29, 2019, 8:14am UTC](https://discuss.elastic.co/t/setting-path-repo-for-kubernetes-pods/178186 "2019-04-29T08:14:56Z")
I understand you have to set the path.repo in elasticsearch.yml to create a backup like this: path.repo: /mnt/backup But I have elasticsearch running on Kubernetes, and I would like to set the path.repo from a stateful… --- ## [Index setting for blocks.read\_only\_allow\_delete keeps changing](https://discuss.elastic.co/t/index-setting-for-blocks-read-only-allow-delete-keeps-changing/128256)
**Author:** [@daved](https://discuss.elastic.co/u/daved)\ **Replies:** 1\ **Last updated:** [April 17, 2018, 2:15am UTC](https://discuss.elastic.co/t/index-setting-for-blocks-read-only-allow-delete-keeps-changing/128256 "2018-04-17T02:15:20Z")
Hi, I'm trying to delete and re-ingest a large amount of data. I set up a script to do this and things were going fine, deleting an old daily index and re-copying data to a file input folder until everything stopped. I … --- ## [Splitting multiple logs combined as a single message to multiple event log entries](https://discuss.elastic.co/t/splitting-multiple-logs-combined-as-a-single-message-to-multiple-event-log-entries/177756)
**Author:** [@SISA\_Nirmal\_kumar\_B](https://discuss.elastic.co/u/SISA_Nirmal_kumar_B)\ **Replies:** 0\ **Last updated:** [April 21, 2019, 2:17pm UTC](https://discuss.elastic.co/t/splitting-multiple-logs-combined-as-a-single-message-to-multiple-event-log-entries/177756 "2019-04-21T14:17:56Z")
I have installed filebeat to forward apache logs to logstash to parse and store it in elasticsearch so that i can view it in Kibana, but i'm facing the below issue Multiple logs are getting parsed as a single message - … --- ## [How to add new node to clusters on different machines](https://discuss.elastic.co/t/how-to-add-new-node-to-clusters-on-different-machines/10309)
**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\ **Replies:** 4\ **Last updated:** [January 11, 2013, 7:35pm UTC](https://discuss.elastic.co/t/how-to-add-new-node-to-clusters-on-different-machines/10309 "2013-01-11T19:35:14Z")
How to add 2 shards/replica on two different boxes? I couldn't find any good examples of doing it. Please point me the right direction or show me some code. Thanks in advance Fei -- --- ## [Remove first line csv logstash](https://discuss.elastic.co/t/remove-first-line-csv-logstash/212749)
**Author:** [@frangolzmil](https://discuss.elastic.co/u/frangolzmil)\ **Replies:** 1\ **Last updated:** [December 21, 2019, 7:19pm UTC](https://discuss.elastic.co/t/remove-first-line-csv-logstash/212749 "2019-12-21T19:19:11Z")
Hi dudes! I just wanna remove the header (first line) from my csv files. The first line is containing the column names. After parsing csv file, the visualization on Kibana shows the first line parsed as the column name … [Previous page](https://discuss.elastic.co/top.md?page=753&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=755&per_page=50&period=all)