# Top

**URL:** https://discuss.elastic.co/top.md?page=762&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 763

---

## [Searching in nested objects without knowing the full path](https://discuss.elastic.co/t/searching-in-nested-objects-without-knowing-the-full-path/116776)

<div class="topic-metadata">

**Author:** [@Emilio\_Srougo](https://discuss.elastic.co/u/Emilio_Srougo)\
**Replies:** 6\
**Last updated:** [February 6, 2018, 1:11pm UTC](https://discuss.elastic.co/t/searching-in-nested-objects-without-knowing-the-full-path/116776 "2018-02-06T13:11:40Z")

</div>

Hi, I have a document that looks like this: "name": { "use": "official", "family": "Donald", "given": \[ "Duck" \] } And I'm making an API where the clients will send me queries like t…

---

## [After upgdare to 2.3.5: Mapping definition has unsupported parameters](https://discuss.elastic.co/t/after-upgdare-to-2-3-5-mapping-definition-has-unsupported-parameters/58658)

<div class="topic-metadata">

**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\
**Replies:** 6\
**Last updated:** [August 23, 2016, 1:57pm UTC](https://discuss.elastic.co/t/after-upgdare-to-2-3-5-mapping-definition-has-unsupported-parameters/58658 "2016-08-23T13:57:22Z")

</div>

Hi! I have upgraded ES from 1.7.5 to 2.3.5. Now I can't put settings (early i used index\_analyzer instead of just analyzer): { "settings" : { "number\_of\_shards" : 1, "number\_of\_replicas": 1, "…

---

## [How to get the list of nodes which left the cluster?](https://discuss.elastic.co/t/how-to-get-the-list-of-nodes-which-left-the-cluster/157363)

<div class="topic-metadata">

**Author:** [@Saji\_George](https://discuss.elastic.co/u/Saji_George)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 7:02am UTC](https://discuss.elastic.co/t/how-to-get-the-list-of-nodes-which-left-the-cluster/157363 "2018-11-21T07:02:27Z")

</div>

How to do we find the servers which are down and left the cluster? I have 8 data nodes and 3 master nodes. Its very difficult to go through each server to find status of each server. I can see the list of nodes which a…

---

## [Logstash docker file input and file output](https://discuss.elastic.co/t/logstash-docker-file-input-and-file-output/94666)

<div class="topic-metadata">

**Author:** [@sslv](https://discuss.elastic.co/u/sslv)\
**Replies:** 2\
**Last updated:** [July 26, 2017, 11:36pm UTC](https://discuss.elastic.co/t/logstash-docker-file-input-and-file-output/94666 "2017-07-26T23:36:54Z")

</div>

Hi, I am new to Logstash, trying my hand with docker image. I have followed instructions from official documentation and was able to pull the image successfully. Through this command: docker run --rm -it -v C:\\Users\\xy…

---

## [503 PUT mapping exceptions with large number of mappings](https://discuss.elastic.co/t/503-put-mapping-exceptions-with-large-number-of-mappings/40684)

<div class="topic-metadata">

**Author:** [@monica2587](https://discuss.elastic.co/u/monica2587)\
**Replies:** 2\
**Last updated:** [February 2, 2016, 5:03pm UTC](https://discuss.elastic.co/t/503-put-mapping-exceptions-with-large-number-of-mappings/40684 "2016-02-02T17:03:58Z")

</div>

Hello! We are having some issues while we are trying to create mappings on our index. We are seeing a sudden burst of ProcessClusterEventTimeoutExceptions for PUT mapping. Stack from es-master02: \[es-ma…

---

## [Script\_exception - runtime error - Illegal list shortcut value](https://discuss.elastic.co/t/script-exception-runtime-error-illegal-list-shortcut-value/319297)

<div class="topic-metadata">

**Author:** [@JuanCarPC](https://discuss.elastic.co/u/JuanCarPC)\
**Replies:** 1\
**Last updated:** [November 21, 2022, 8:09am UTC](https://discuss.elastic.co/t/script-exception-runtime-error-illegal-list-shortcut-value/319297 "2022-11-21T08:09:29Z")

</div>

Hi, I made this update by query POST documento2/\_update\_by\_query { "script": { "source": """ for (int i = 0; i \< ctx.\_source.innResultado.innResultadoEfectos.size(); i++) { if(ctx.\_source.innResul…

---

## [Unknown setting \[index.analysis\]](https://discuss.elastic.co/t/unknown-setting-index-analysis/137282)

<div class="topic-metadata">

**Author:** [@Fabio\_Marchetto](https://discuss.elastic.co/u/Fabio_Marchetto)\
**Replies:** 1\
**Last updated:** [June 25, 2018, 4:21pm UTC](https://discuss.elastic.co/t/unknown-setting-index-analysis/137282 "2018-06-25T16:21:08Z")

</div>

I'm creating my index with org.elasticsearch Java API (6.3.0) in the following function: private void createIndex(String type) throws IOException { boolean existent = config.getClient() .admin() .indices() .prepar…

---

## [Java APM](https://discuss.elastic.co/t/java-apm/126958)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 8\
**Last updated:** [April 30, 2018, 9:45am UTC](https://discuss.elastic.co/t/java-apm/126958 "2018-04-30T09:45:33Z")

</div>

Is there an ETA to when the Java APM will be available for use/ beta?

---

## [Problem with elasticsearch-certutil http and "ca certificate is not a CA" error](https://discuss.elastic.co/t/problem-with-elasticsearch-certutil-http-and-ca-certificate-is-not-a-ca-error/309949)

<div class="topic-metadata">

**Author:** [@rlatta](https://discuss.elastic.co/u/rlatta)\
**Replies:** 4\
**Last updated:** [July 19, 2022, 3:54pm UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-certutil-http-and-ca-certificate-is-not-a-ca-error/309949 "2022-07-19T15:54:41Z")

</div>

Hello, I installed Elasticsearch and Kibana 7.17.5 (windows server 2019). I followed the directions in the "Set up basic security for the Elastic Stack" and didn't run into problems. However, when I move on to the set…

---

## [Gpg: no valid OpenPGP data found](https://discuss.elastic.co/t/gpg-no-valid-openpgp-data-found/290633)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 0\
**Last updated:** [December 1, 2021, 7:23am UTC](https://discuss.elastic.co/t/gpg-no-valid-openpgp-data-found/290633 "2021-12-01T07:23:00Z")

</div>

Hi, I already have an ELK environment running at version 7.13, I'm trying to update to 7.15. But when trying to use the below command: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - …

---

## [Netflow flow direction on v5 vs v9](https://discuss.elastic.co/t/netflow-flow-direction-on-v5-vs-v9/163025)

<div class="topic-metadata">

**Author:** [@samplonius](https://discuss.elastic.co/u/samplonius)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 11:28am UTC](https://discuss.elastic.co/t/netflow-flow-direction-on-v5-vs-v9/163025 "2019-01-08T11:28:20Z")

</div>

The Netflow module forces v5 flows to be of direction ingress. But for v9 messages, the module uses the "direction" field from the message, but if "direction" is not included, the \_\_netflow\_direction\_not\_recognized tag …

---

## [Java client --\> EC2 --\> ES](https://discuss.elastic.co/t/java-client-ec2-es/5911)

<div class="topic-metadata">

**Author:** [@achaayan](https://discuss.elastic.co/u/achaayan)\
**Replies:** 7\
**Last updated:** [November 23, 2011, 1:27am UTC](https://discuss.elastic.co/t/java-client-ec2-es/5911 "2011-11-23T01:27:44Z")

</div>

Hi, I have set up ES server in AWS, and it seems to be working fine. I am trying to connect programmatically to this server from my java client, by creating a node (java application is running outside the cloud). Ho…

---

## [Kibana for open mobility data in Berlin](https://discuss.elastic.co/t/kibana-for-open-mobility-data-in-berlin/353056)

<div class="topic-metadata">

**Author:** [@CargoBikoMeter](https://discuss.elastic.co/u/CargoBikoMeter)\
**Replies:** 0\
**Last updated:** [February 12, 2024, 11:12am UTC](https://discuss.elastic.co/t/kibana-for-open-mobility-data-in-berlin/353056 "2024-02-12T11:12:42Z")

</div>

In Berlin we have setup a Kibana based dashboard for open mobility data, which are based on data from Telraam devices. We have setup a system which reads the data via Telraam-API and provides these data as CSV files. The…

---

## [Adding label for different parts of timelion](https://discuss.elastic.co/t/adding-label-for-different-parts-of-timelion/156789)

<div class="topic-metadata">

**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\
**Replies:** 3\
**Last updated:** [November 16, 2018, 3:07pm UTC](https://discuss.elastic.co/t/adding-label-for-different-parts-of-timelion/156789 "2018-11-16T15:07:33Z")

</div>

I am using .min method in kibana timelion. My string is something like this: .es().bars(stack=false).color(#F44336), .min(.es(), 25).bars(stack=false).color(#8BC34A) This is taken from https://www.elastic.co/blog/timel…

---

## [\[Logstash jms input\] Unable to connect to ActiveMQ topic](https://discuss.elastic.co/t/logstash-jms-input-unable-to-connect-to-activemq-topic/115170)

<div class="topic-metadata">

**Author:** [@Pavel\_Sapozhnikov](https://discuss.elastic.co/u/Pavel_Sapozhnikov)\
**Replies:** 3\
**Last updated:** [January 18, 2018, 9:53am UTC](https://discuss.elastic.co/t/logstash-jms-input-unable-to-connect-to-activemq-topic/115170 "2018-01-18T09:53:53Z")

</div>

Hi I am trying to connect to an ActiveMQ topic using logstash-jms-input plugin and I am unable to. When I run logstash it will create a queue with the name that I give it in destination but never a topic. Here are my co…

---

## [Scalable Logstash Config Generator](https://discuss.elastic.co/t/scalable-logstash-config-generator/72691)

<div class="topic-metadata">

**Author:** [@thehybridtech](https://discuss.elastic.co/u/thehybridtech)\
**Replies:** 3\
**Last updated:** [January 31, 2017, 7:00pm UTC](https://discuss.elastic.co/t/scalable-logstash-config-generator/72691 "2017-01-31T19:00:26Z")

</div>

I have been using Logstash for over 2 years and love it. One frustration I have had is scaling Logstash across multiple (100+) different data types. (These are not like dissimilar syslog types but completely different…

---

## [Load Balance Kibana4](https://discuss.elastic.co/t/load-balance-kibana4/1057)

<div class="topic-metadata">

**Author:** [@Kyle\_Hartigan](https://discuss.elastic.co/u/Kyle_Hartigan)\
**Replies:** 3\
**Last updated:** [June 11, 2015, 10:17pm UTC](https://discuss.elastic.co/t/load-balance-kibana4/1057 "2015-06-11T22:17:04Z")

</div>

Hello I would like to loadbalance 2 kibana nodes, i am trying to see if this is possible, as i have been attempting to Load Balance two nodes in aws. to give you a break down of what i have done so far i have tried…

---

## [Problem using external Ruby script in Logstash](https://discuss.elastic.co/t/problem-using-external-ruby-script-in-logstash/219387)

<div class="topic-metadata">

**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 10:23am UTC](https://discuss.elastic.co/t/problem-using-external-ruby-script-in-logstash/219387 "2020-02-17T10:23:53Z")

</div>

Hello guys, I'm having problem trying to get my ruby code filter into an external ruby file called test2.rb When i was using a ruby {} inside my configuration, it was working very well, and i am new to ruby so maybe my…

---

## [Filebeat v7.3.2 - Failed to publish events caused by: EOF](https://discuss.elastic.co/t/filebeat-v7-3-2-failed-to-publish-events-caused-by-eof/200335)

<div class="topic-metadata">

**Author:** [@profiler](https://discuss.elastic.co/u/profiler)\
**Replies:** 5\
**Last updated:** [September 25, 2019, 8:24pm UTC](https://discuss.elastic.co/t/filebeat-v7-3-2-failed-to-publish-events-caused-by-eof/200335 "2019-09-25T20:24:16Z")

</div>

Getting these about 20-30 minutes after starting filebeat and ongoing from then on: Sep 20 15:42:39 silver.smartabase.com filebeat\[7615\]: WARN beater/filebeat.go:368 Filebeat is unable to load the Ingest N…

---

## [Kibana dashboard of "Elastic for Operational Analytics" webinar](https://discuss.elastic.co/t/kibana-dashboard-of-elastic-for-operational-analytics-webinar/98724)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 5\
**Last updated:** [September 14, 2017, 10:10am UTC](https://discuss.elastic.co/t/kibana-dashboard-of-elastic-for-operational-analytics-webinar/98724 "2017-09-14T10:10:57Z")

</div>

Hey, Are the kibana dashboards used for the recent “Elastic for Operational Analytics” webinar available somewhere? I am in particular interested by the dashboard shown at 12min and the distribution per country. I hav…

---

## [Shield Custom Realm for 2.4.4 - unable to compile after moving from 2.4.3](https://discuss.elastic.co/t/shield-custom-realm-for-2-4-4-unable-to-compile-after-moving-from-2-4-3/71740)

<div class="topic-metadata">

**Author:** [@Yasho](https://discuss.elastic.co/u/Yasho)\
**Replies:** 5\
**Last updated:** [January 24, 2017, 11:20am UTC](https://discuss.elastic.co/t/shield-custom-realm-for-2-4-4-unable-to-compile-after-moving-from-2-4-3/71740 "2017-01-24T11:20:21Z")

</div>

Hi, I was using and modifying custom realm using 2.4.3 version of ES. However lately ES is now upgraded to 2.4.4, I just updated the POM.XML to 2.4.4 and after which i am getting series of compilation errors, Please h…

---

## [Custom Payload Analyzer and Query](https://discuss.elastic.co/t/custom-payload-analyzer-and-query/6547)

<div class="topic-metadata">

**Author:** [@Kyley\_Jex](https://discuss.elastic.co/u/Kyley_Jex)\
**Replies:** 5\
**Last updated:** [February 5, 2012, 10:33am UTC](https://discuss.elastic.co/t/custom-payload-analyzer-and-query/6547 "2012-02-05T10:33:56Z")

</div>

I'm working on providing advanced searching for annotated Medical Documents (using UIMA). In the context of an annotated document, I identify relevant medical terms, as well as the negation of certain terms. Follow…

---

## [Kibana-plugin.bat install doesn't work in 6.3.0 version](https://discuss.elastic.co/t/kibana-plugin-bat-install-doesnt-work-in-6-3-0-version/139503)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 4\
**Last updated:** [July 12, 2018, 2:46pm UTC](https://discuss.elastic.co/t/kibana-plugin-bat-install-doesnt-work-in-6-3-0-version/139503 "2018-07-12T14:46:29Z")

</div>

Hi, I would like to install a new kibana plugin using this command kibana-plugin.bat install C:\\Users\\asallemi\\Desktop\\Elastic stack\\kibana-6.3.0\\bin\>kibana-plugin.bat install file:///C:/analyze-api-ui-plugin.zip Th…

---

## [Machine Learning disabled by default?](https://discuss.elastic.co/t/machine-learning-disabled-by-default/99052)

<div class="topic-metadata">

**Author:** [@Wes\_F](https://discuss.elastic.co/u/Wes_F)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 9:03am UTC](https://discuss.elastic.co/t/machine-learning-disabled-by-default/99052 "2017-09-06T09:03:31Z")

</div>

So I was using ECE to spin up a Kibana instance and it appears that: xpack.ml.enabled is set to false per below after doing a GET \_xpack { "build": { "hash": "40710b2", "date": "2017-05-29T16:24:24.726Z" …

---

## [Referring to a non-existent field in an elasticsearch mvel scoring script](https://discuss.elastic.co/t/referring-to-a-non-existent-field-in-an-elasticsearch-mvel-scoring-script/9530)

<div class="topic-metadata">

**Author:** [@Amy](https://discuss.elastic.co/u/Amy)\
**Replies:** 4\
**Last updated:** [May 31, 2013, 12:13pm UTC](https://discuss.elastic.co/t/referring-to-a-non-existent-field-in-an-elasticsearch-mvel-scoring-script/9530 "2013-05-31T12:13:08Z")

</div>

Hi, I have a mvel scoring script that refers to a field: "(doc\['myfield'\].value == '1') ? 1 : 0)" None of the documents in the type that I am searching have this field yet. When I perform a search that includes …

---

## [Removing header in log file using logstash](https://discuss.elastic.co/t/removing-header-in-log-file-using-logstash/64675)

<div class="topic-metadata">

**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 12:08pm UTC](https://discuss.elastic.co/t/removing-header-in-log-file-using-logstash/64675 "2016-11-04T12:08:01Z")

</div>

Hi, I have a log file which has a header as the first line to represent the log line's type. While parsing with logstash, it happened to parse the header along with the other log lines also but I need to remove the hea…

---

## [Changing default sort order in kibana discover page](https://discuss.elastic.co/t/changing-default-sort-order-in-kibana-discover-page/32202)

<div class="topic-metadata">

**Author:** [@nidd](https://discuss.elastic.co/u/nidd)\
**Replies:** 3\
**Last updated:** [October 21, 2015, 10:37pm UTC](https://discuss.elastic.co/t/changing-default-sort-order-in-kibana-discover-page/32202 "2015-10-21T22:37:25Z")

</div>

Is it possible to change default sort order in kibana discover page? Developers in my team usually like to have older events first (that's how they usually see logs through grep/tail)

---

## [Grouping search results in Elasticsearch](https://discuss.elastic.co/t/grouping-search-results-in-elasticsearch/8836)

<div class="topic-metadata">

**Author:** [@vibin](https://discuss.elastic.co/u/vibin)\
**Replies:** 3\
**Last updated:** [August 31, 2012, 6:58am UTC](https://discuss.elastic.co/t/grouping-search-results-in-elasticsearch/8836 "2012-08-31T06:58:26Z")

</div>

Hi All, Is it possible to group the search results in elastic search by using the value in particular field (as in DB Query)? Thanks, -Vibin --

---

## [Failure on document\_parsing\_exception - dot\_product similarity on dense\_vector index field](https://discuss.elastic.co/t/failure-on-document-parsing-exception-dot-product-similarity-on-dense-vector-index-field/346718)

<div class="topic-metadata">

**Author:** [@ORipalta](https://discuss.elastic.co/u/ORipalta)\
**Replies:** 5\
**Last updated:** [November 13, 2023, 9:58pm UTC](https://discuss.elastic.co/t/failure-on-document-parsing-exception-dot-product-similarity-on-dense-vector-index-field/346718 "2023-11-13T21:58:00Z")

</div>

I'm trying to use dot-plot similarity on Elasticsearch. But after creating the index, the data/rows fail to load due to document\_parsing\_exception. The error message that is being returned is failed to parse: The \[dot\_p…

---

## [Precision Threshold of Count in Canvas](https://discuss.elastic.co/t/precision-threshold-of-count-in-canvas/274664)

<div class="topic-metadata">

**Author:** [@Amy\_Collins](https://discuss.elastic.co/u/Amy_Collins)\
**Replies:** 5\
**Last updated:** [June 3, 2021, 3:33pm UTC](https://discuss.elastic.co/t/precision-threshold-of-count-in-canvas/274664 "2021-06-03T15:33:10Z")

</div>

Hi, Is there a way to set the precision threshold when performing a unique/distinct count using Canvas? I need the count to be as accurate as possible. All hints and tips welcome.

---

## [Unable to create index pattern in kibana 7.2](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-7-2/193269)

<div class="topic-metadata">

**Author:** [@BS\_Lee](https://discuss.elastic.co/u/BS_Lee)\
**Replies:** 5\
**Last updated:** [August 6, 2019, 7:35am UTC](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-7-2/193269 "2019-08-06T07:35:58Z")

</div>

Hi, all I am trying to make an ELK stack sample after installation of ELK and Filebeat. But I couldn’t “create an index pattern” in Kibana(version 7.2) Please let me know what’s wrong in my configuration? I really ap…

---

## [Change @timestamp to time from actual log file](https://discuss.elastic.co/t/change-timestamp-to-time-from-actual-log-file/100011)

<div class="topic-metadata">

**Author:** [@Ferrow](https://discuss.elastic.co/u/Ferrow)\
**Replies:** 5\
**Last updated:** [September 11, 2017, 1:55pm UTC](https://discuss.elastic.co/t/change-timestamp-to-time-from-actual-log-file/100011 "2017-09-11T13:55:06Z")

</div>

Hello everybody.. Im trying to send log files from an Ubuntu client to my ES server. That seems to work fine although I can not seem to get the time field right. (want the time stamp from the log file, not when it has …

---

## [Etude de cas - optimisation de requête ELS](https://discuss.elastic.co/t/etude-de-cas-optimisation-de-requete-els/31697)

<div class="topic-metadata">

**Author:** [@Blured\_Derulb](https://discuss.elastic.co/u/Blured_Derulb)\
**Replies:** 5\
**Last updated:** [October 7, 2015, 3:26pm UTC](https://discuss.elastic.co/t/etude-de-cas-optimisation-de-requete-els/31697 "2015-10-07T15:26:53Z")

</div>

Bonjour, Je voudrais pour obtenir les résultats de ma recherche selon cet ordre : Documents qui matchent exactement exactement (Tous les mots doivent exister dans les documents retournés, les documents retournés ne …

---

## [Logstash 1.5.1 crashing](https://discuss.elastic.co/t/logstash-1-5-1-crashing/24134)

<div class="topic-metadata">

**Author:** [@Sam\_Barham](https://discuss.elastic.co/u/Sam_Barham)\
**Replies:** 5\
**Last updated:** [June 23, 2015, 9:56pm UTC](https://discuss.elastic.co/t/logstash-1-5-1-crashing/24134 "2015-06-23T21:56:37Z")

</div>

I'm just installed logstash 1.5.1 on a similar VM to one that runs logstash 1.4.2 without issue. On the new VM, however, logstash 1.5.1 crashes on startup with the following error logs: NotImplementedError: stat.st\_gi…

---

## [Kibana Math Aggregation on Terms](https://discuss.elastic.co/t/kibana-math-aggregation-on-terms/250816)

<div class="topic-metadata">

**Author:** [@savior1307](https://discuss.elastic.co/u/savior1307)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 1:54pm UTC](https://discuss.elastic.co/t/kibana-math-aggregation-on-terms/250816 "2020-10-05T13:54:37Z")

</div>

Kibana Term Math Aggregation Hey guys, I'd like to ask if there's any way to do Math aggregation on individual Term buckets in TSVB. TSVB Metric I've divided my data into buckets by Term and aggregated by Count. Thi…

---

## [XPack Security Enabled TLS/SSL configured, still not working!](https://discuss.elastic.co/t/xpack-security-enabled-tls-ssl-configured-still-not-working/258716)

<div class="topic-metadata">

**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\
**Replies:** 4\
**Last updated:** [December 16, 2020, 4:11am UTC](https://discuss.elastic.co/t/xpack-security-enabled-tls-ssl-configured-still-not-working/258716 "2020-12-16T04:11:41Z")

</div>

Good morning, We are putting ELK through a POC and have configure and 5 node cluster in the MS Azure space. Currently we have 3 ES nodes, 1 Kibana node and 1 Logstash node. I have been trying to work on getting the xpack…

---

## [How to use index template file?](https://discuss.elastic.co/t/how-to-use-index-template-file/28147)

<div class="topic-metadata">

**Author:** [@kikuchan](https://discuss.elastic.co/u/kikuchan)\
**Replies:** 4\
**Last updated:** [August 27, 2015, 5:46am UTC](https://discuss.elastic.co/t/how-to-use-index-template-file/28147 "2015-08-27T05:46:38Z")

</div>

I created the index template file, but it could not apply to the Elasticsearch. I put the index template file to the $/home/config/templates/japanese\_template.json When I create the index by the logstash which used outpu…

---

## [Docs about sharding and scatter/gather](https://discuss.elastic.co/t/docs-about-sharding-and-scatter-gather/4178)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 4\
**Last updated:** [April 1, 2011, 10:36am UTC](https://discuss.elastic.co/t/docs-about-sharding-and-scatter-gather/4178 "2011-04-01T10:36:42Z")

</div>

Hi, I can't seem to find the documentation about how ES shards documents (and how one can control that), is this available anywhere? Also, I'm looking for something that describes how ES avoids scattering search …

---

## [Issue when i start trying to make a post commande](https://discuss.elastic.co/t/issue-when-i-start-trying-to-make-a-post-commande/187514)

<div class="topic-metadata">

**Author:** [@busan](https://discuss.elastic.co/u/busan)\
**Replies:** 6\
**Last updated:** [June 26, 2019, 9:02am UTC](https://discuss.elastic.co/t/issue-when-i-start-trying-to-make-a-post-commande/187514 "2019-06-26T09:02:53Z")

</div>

Hi, first of all i'am a complete beginner, like i have never use something like elasticsearch before. I'm on a ubuntu 16.04 Xenial server behind a corporate proxy. So i have followed this tutorial: how to install elas…

---

## [Running filebeat as a different user or service account on Centos 6.5](https://discuss.elastic.co/t/running-filebeat-as-a-different-user-or-service-account-on-centos-6-5/63200)

<div class="topic-metadata">

**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\
**Replies:** 2\
**Last updated:** [October 17, 2016, 4:19pm UTC](https://discuss.elastic.co/t/running-filebeat-as-a-different-user-or-service-account-on-centos-6-5/63200 "2016-10-17T16:19:47Z")

</div>

Hello What is the best way to run / start filebeat as a different user or service account on Centos 6.5? Thanks

---

## [Not finding my log file](https://discuss.elastic.co/t/not-finding-my-log-file/37726)

<div class="topic-metadata">

**Author:** [@OliverBock](https://discuss.elastic.co/u/OliverBock)\
**Replies:** 2\
**Last updated:** [December 23, 2015, 12:37am UTC](https://discuss.elastic.co/t/not-finding-my-log-file/37726 "2015-12-23T00:37:24Z")

</div>

There is some newbie thing I have missed here. I have configured filebeat 1.0.1 on the latest ubuntu 14.04, installed via the elastic.co repository. Stripped of comments and blank lines, my filebeat.yml file looks like…

---

## [How to set a logLevel for Elasticsearch and Kibana CustomResource?](https://discuss.elastic.co/t/how-to-set-a-loglevel-for-elasticsearch-and-kibana-customresource/239038)

<div class="topic-metadata">

**Author:** [@esther.k](https://discuss.elastic.co/u/esther.k)\
**Replies:** 1\
**Last updated:** [June 29, 2020, 7:40am UTC](https://discuss.elastic.co/t/how-to-set-a-loglevel-for-elasticsearch-and-kibana-customresource/239038 "2020-06-29T07:40:17Z")

</div>

Hi, I'm currently using Elastic Operator v1.1.1. In my environment, Elasticsearch and Kibana has too many logs so it's difficult to figure out the problems and status of them. Can you let me know how to set a log leve…

---

## [FAQ about the \*\*pattern\_definitions\*\* option in grok](https://discuss.elastic.co/t/faq-about-the-pattern-definitions-option-in-grok/87871)

<div class="topic-metadata">

**Author:** [@Fly](https://discuss.elastic.co/u/Fly)\
**Replies:** 1\
**Last updated:** [June 1, 2017, 8:24pm UTC](https://discuss.elastic.co/t/faq-about-the-pattern-definitions-option-in-grok/87871 "2017-06-01T20:24:24Z")

</div>

Hi all Can give me more description of pattern\_definitions option. When I read it in the configuration of the pipeline logstash with filebeat module. I do not yet understand its functionality in the configuration …

---

## [Red indices when restoring from snapshot which contains indices in cold phase](https://discuss.elastic.co/t/red-indices-when-restoring-from-snapshot-which-contains-indices-in-cold-phase/279329)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 8\
**Last updated:** [August 2, 2021, 6:37am UTC](https://discuss.elastic.co/t/red-indices-when-restoring-from-snapshot-which-contains-indices-in-cold-phase/279329 "2021-08-02T06:37:47Z")

</div>

Hi All, I got a snapshot in s3 from cluster A (7.11.x) and tried to restore it in cluster B (7.13.x) and noticed that indices in cold nodes e.g. index-data-2021.03 were restored as e.g. restored-shrink-index-data-2021.0…

---

## [Logstash struck after Pipeline main started.. No output printed and nothing sent to elastic search](https://discuss.elastic.co/t/logstash-struck-after-pipeline-main-started-no-output-printed-and-nothing-sent-to-elastic-search/53559)

<div class="topic-metadata">

**Author:** [@sandeep\_vuppula](https://discuss.elastic.co/u/sandeep_vuppula)\
**Replies:** 3\
**Last updated:** [June 21, 2016, 10:25pm UTC](https://discuss.elastic.co/t/logstash-struck-after-pipeline-main-started-no-output-printed-and-nothing-sent-to-elastic-search/53559 "2016-06-21T22:25:24Z")

</div>

I am using logstash-2.3.3. when i run "logstash -f logstash-workday.conf" it is struck and no output is being displayed. C:\\logstash-2.3.3\\bin\>logstash -f logstash-workday.conf io/console not supported; tty will not be m…

---

## [Kibana bar chart help](https://discuss.elastic.co/t/kibana-bar-chart-help/39414)

<div class="topic-metadata">

**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\
**Replies:** 8\
**Last updated:** [January 18, 2016, 3:43am UTC](https://discuss.elastic.co/t/kibana-bar-chart-help/39414 "2016-01-18T03:43:04Z")

</div>

I'm using Kibana 4.1.2. I want to create a bar chart with the below details: Manager name on x-axis and teams under him with unit test coverage. I'm a new bie and facing trouble in creating bar chart. I have the below …

---

## [Problem installation Elasticsearch - fatal exception while booting Elasticsearch java.lang.IllegalStateException: failed to obtain node locks](https://discuss.elastic.co/t/problem-installation-elasticsearch-fatal-exception-while-booting-elasticsearch-java-lang-illegalstateexception-failed-to-obtain-node-locks/344550)

<div class="topic-metadata">

**Author:** [@Andres\_Giraldo](https://discuss.elastic.co/u/Andres_Giraldo)\
**Replies:** 2\
**Last updated:** [October 8, 2023, 9:27am UTC](https://discuss.elastic.co/t/problem-installation-elasticsearch-fatal-exception-while-booting-elasticsearch-java-lang-illegalstateexception-failed-to-obtain-node-locks/344550 "2023-10-08T09:27:20Z")

</div>

Hi I am doing a new installation of elasticsearch, I have done it several times but I have changed to a server with nvme (I don't know if it is the problem) and I have not been able to do it, I am doing it through ssh, …

---

## [ERR File is falling under ignore\_older before harvesting is finished. Adjust your close\_\* settings: api\_1.log](https://discuss.elastic.co/t/err-file-is-falling-under-ignore-older-before-harvesting-is-finished-adjust-your-close--settings-api-1-log/65495)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 2\
**Last updated:** [November 10, 2016, 10:30pm UTC](https://discuss.elastic.co/t/err-file-is-falling-under-ignore-older-before-harvesting-is-finished-adjust-your-close--settings-api-1-log/65495 "2016-11-10T22:30:21Z")

</div>

I am using filebeat 5.0 I am getting these error on filebeat log: 2016-11-09T14:17:32+01:00 ERR Failed to publish events caused by: read tcp 192.168.11.21:42549-\>: read: connection reset by peer 2016-11-09T14:17:32+0…

---

## [Mapping problem with dynamic\_date\_formats (ES 2.0)](https://discuss.elastic.co/t/mapping-problem-with-dynamic-date-formats-es-2-0/35955)

<div class="topic-metadata">

**Author:** [@larmader](https://discuss.elastic.co/u/larmader)\
**Replies:** 2\
**Last updated:** [December 1, 2015, 8:26pm UTC](https://discuss.elastic.co/t/mapping-problem-with-dynamic-date-formats-es-2-0/35955 "2015-12-01T20:26:41Z")

</div>

ElasticSearch 2.0: I am using "dynamic\_date\_formats" with the default type to apply date detection across all types. I have a date field with the same name that exists in multiple types. When the first document (of a…

---

## [Unescaped URLs in documents](https://discuss.elastic.co/t/unescaped-urls-in-documents/43293)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 1\
**Last updated:** [March 2, 2016, 6:40pm UTC](https://discuss.elastic.co/t/unescaped-urls-in-documents/43293 "2016-03-02T18:40:15Z")

</div>

Hi, Is it possible to show clickable URLs in search results. I tried to add something like: \<a href="http://site.com?id=A10"\>A10\</a\> to document field, but I see the same in kibana search results. Can I see unescape…

[Previous page](https://discuss.elastic.co/top.md?page=761&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=763&per_page=50&period=all)
