# Top

**URL:** https://discuss.elastic.co/top.md?page=795&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 796

---

## [Role mappings will not be applied to any users](https://discuss.elastic.co/t/role-mappings-will-not-be-applied-to-any-users/273219)

<div class="topic-metadata">

**Author:** [@cporte01](https://discuss.elastic.co/u/cporte01)\
**Replies:** 5\
**Last updated:** [May 24, 2021, 8:32am UTC](https://discuss.elastic.co/t/role-mappings-will-not-be-applied-to-any-users/273219 "2021-05-24T08:32:23Z")

</div>

I'm getting the following message in the Role Mappings page of Kibana: No compatible realms are enabled in Elasticsearch Role mappings will not be applied to any users. Contact your system administrator and refer to the…

---

## [Pb in kibana elastic.co tutorial](https://discuss.elastic.co/t/pb-in-kibana-elastic-co-tutorial/24252)

<div class="topic-metadata">

**Author:** [@eheb](https://discuss.elastic.co/u/eheb)\
**Replies:** 5\
**Last updated:** [November 5, 2015, 6:01am UTC](https://discuss.elastic.co/t/pb-in-kibana-elastic-co-tutorial/24252 "2015-11-05T06:01:57Z")

</div>

in https://www.elastic.co/guide/en/kibana/current/getting-started.html when i import data in elasticsearch for accounts.json and logstash.jsonl curl -XPOST 'localhost:9200/bank/\_bulk?pretty' --data-binary xxx.json I get …

---

## [Bulk update request results in java.lang.ClassCastException: java.lang.String cannot be cast to java.util.Map](https://discuss.elastic.co/t/bulk-update-request-results-in-java-lang-classcastexception-java-lang-string-cannot-be-cast-to-java-util-map/14603)

<div class="topic-metadata">

**Author:** [@Stine](https://discuss.elastic.co/u/Stine)\
**Replies:** 5\
**Last updated:** [November 27, 2013, 3:56pm UTC](https://discuss.elastic.co/t/bulk-update-request-results-in-java-lang-classcastexception-java-lang-string-cannot-be-cast-to-java-util-map/14603 "2013-11-27T15:56:34Z")

</div>

Hi, when I do this bulk update request: transportClient.prepareIndex("index", "type", "1").setSource("name", "Anna").execute().actionGet(); transportClient.prepareIndex("index", "type", …

---

## [Filtering documents based on a boolean value](https://discuss.elastic.co/t/filtering-documents-based-on-a-boolean-value/5206)

<div class="topic-metadata">

**Author:** [@kikster](https://discuss.elastic.co/u/kikster)\
**Replies:** 5\
**Last updated:** [September 11, 2011, 1:09am UTC](https://discuss.elastic.co/t/filtering-documents-based-on-a-boolean-value/5206 "2011-09-11T01:09:22Z")

</div>

I have been banging my head against the wall for hours to try and figure out how to filter a document based on the value of a boolean. It seems straight forward, but these queries do not seem to be working. Here is t…

---

## [Dynamic date passing in indices in watcher](https://discuss.elastic.co/t/dynamic-date-passing-in-indices-in-watcher/66972)

<div class="topic-metadata">

**Author:** [@sankar](https://discuss.elastic.co/u/sankar)\
**Replies:** 6\
**Last updated:** [November 23, 2016, 3:51pm UTC](https://discuss.elastic.co/t/dynamic-date-passing-in-indices-in-watcher/66972 "2016-11-23T15:51:53Z")

</div>

Hi, I am new to ELK setup, I am trying to create watcher for regular monitoring. I am unable to pass date as dynamic in watcher. Can you please help me how to fix this. PUT \_xpack/watcher/watch/test { "trigger" : …

---

## [Score of a Query](https://discuss.elastic.co/t/score-of-a-query/4978)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 6\
**Last updated:** [August 1, 2011, 8:18pm UTC](https://discuss.elastic.co/t/score-of-a-query/4978 "2011-08-01T20:18:40Z")

</div>

Hi, Is there anyway I can ask for the score of each document returned to be added to the results in a query, I'm finding it hard to debug the ordering of my results. Best Regards, David.

---

## [Kibana error randomly](https://discuss.elastic.co/t/kibana-error-randomly/249471)

<div class="topic-metadata">

**Author:** [@Gentle-Chen](https://discuss.elastic.co/u/Gentle-Chen)\
**Replies:** 7\
**Last updated:** [October 13, 2020, 8:03am UTC](https://discuss.elastic.co/t/kibana-error-randomly/249471 "2020-10-13T08:03:53Z")

</div>

Hi, I am upgrading Kibana from 6.0 to 7.2.1, and it works fine after upgraded, but i found it often shutdown randomly with below error, do you have any idea? events.js:174 throw er; // Unhandled 'error' event …

---

## [Filebeat modules config: failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/filebeat-modules-config-failed-to-publish-events-temporary-bulk-send-failure/284948)

<div class="topic-metadata">

**Author:** [@cdalexndr](https://discuss.elastic.co/u/cdalexndr)\
**Replies:** 3\
**Last updated:** [September 23, 2021, 4:06pm UTC](https://discuss.elastic.co/t/filebeat-modules-config-failed-to-publish-events-temporary-bulk-send-failure/284948 "2021-09-23T16:06:07Z")

</div>

Just upgraded elastic stack from 7.10.1 to 7.14.1, and now filebeat doesn't work! Filebeat logs repeats the following lines: filebeat | 2021-09-22T21:57:46.145Z INFO \[esclientleg\] eslegclient/connecti…

---

## [Winlogbeat/Kibana how to visualize a user logon time over 1 month?](https://discuss.elastic.co/t/winlogbeat-kibana-how-to-visualize-a-user-logon-time-over-1-month/157990)

<div class="topic-metadata">

**Author:** [@Loggeruk](https://discuss.elastic.co/u/Loggeruk)\
**Replies:** 3\
**Last updated:** [November 26, 2018, 1:08pm UTC](https://discuss.elastic.co/t/winlogbeat-kibana-how-to-visualize-a-user-logon-time-over-1-month/157990 "2018-11-26T13:08:06Z")

</div>

Hi all, I am trying to visualize in some way the first initial logon time for a user each day over a month, is this possible ? everything just seems to be based on count and i cant figure out the best way to do it. eg …

---

## [Filebeat с двумя лог файлами](https://discuss.elastic.co/t/filebeat/155719)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 3\
**Last updated:** [November 8, 2018, 3:12pm UTC](https://discuss.elastic.co/t/filebeat/155719 "2018-11-08T15:12:48Z")

</div>

Всем привет, есть filebeat настроенный на чтение одного лог файла, это csv файл. Все логи он посылает в logstash и там они фильтруются scv фильтром. Есть задача добавить еще один лог файл, формат файла log, разделение …

---

## [Wrong Standalone Cluster in Kibana Monitoring](https://discuss.elastic.co/t/wrong-standalone-cluster-in-kibana-monitoring/194752)

<div class="topic-metadata">

**Author:** [@stephan13360](https://discuss.elastic.co/u/stephan13360)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:03pm UTC](https://discuss.elastic.co/t/wrong-standalone-cluster-in-kibana-monitoring/194752 "2019-08-12T17:03:37Z")

</div>

Hi, I have a single node elasticsearch cluster called nuxio. Since a few days ago I suddenly also have a Standalone Cluster in my monitoring tab. Elasticsearch, Kibana and Logstash are showing up under the nuxio clust…

---

## [Is it safe to use Elastic App Search directly from my Android and iOS app?](https://discuss.elastic.co/t/is-it-safe-to-use-elastic-app-search-directly-from-my-android-and-ios-app/249427)

<div class="topic-metadata">

**Author:** [@susi\_pogba](https://discuss.elastic.co/u/susi_pogba)\
**Replies:** 4\
**Last updated:** [September 24, 2020, 11:38am UTC](https://discuss.elastic.co/t/is-it-safe-to-use-elastic-app-search-directly-from-my-android-and-ios-app/249427 "2020-09-24T11:38:51Z")

</div>

Hi all, I am new in Elastic product. I am actually an Android and iOS developer. so I have limited knowledge about backend. I have tried to read app search authentication documentation in here , it seems I can directly…

---

## [How to sum time ranges in kibana](https://discuss.elastic.co/t/how-to-sum-time-ranges-in-kibana/159838)

<div class="topic-metadata">

**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Replies:** 4\
**Last updated:** [December 24, 2018, 1:12am UTC](https://discuss.elastic.co/t/how-to-sum-time-ranges-in-kibana/159838 "2018-12-24T01:12:41Z")

</div>

I have a filed in logs which shows execution time in time format like hh:mm:as In kibana, I would like to sum all of these and show under metric. Log value is coming in DateTime format. Please help for the solution.

---

## [Failed to deploy Endpoint on Windows Server 2008 R2 Standard](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 7\
**Last updated:** [May 24, 2021, 8:14pm UTC](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704 "2021-05-24T20:14:13Z")

</div>

Hi, Notes: Running ELK 7.11.2 Standalone OS Windows Server 2008 R2 Standard I am deploying the Elastic Endpoint on several servers. On servers running OS Windows Server 2012 R2 Datacenter and Windows Server 2019 Data…

---

## [How to fix index\_out\_of\_bounds\_exception exception in aggregation in painless script](https://discuss.elastic.co/t/how-to-fix-index-out-of-bounds-exception-exception-in-aggregation-in-painless-script/144787)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 11:17pm UTC](https://discuss.elastic.co/t/how-to-fix-index-out-of-bounds-exception-exception-in-aggregation-in-painless-script/144787 "2018-08-16T23:17:57Z")

</div>

I have what I believe to be an entirely normal index where 1% of the documents don't have a field present. I'd like to write a painless script that references that field, but whenever I do I get "Courier fetch: X of Y s…

---

## [Length of an array in logstash](https://discuss.elastic.co/t/length-of-an-array-in-logstash/61750)

<div class="topic-metadata">

**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\
**Replies:** 1\
**Last updated:** [September 29, 2016, 5:38am UTC](https://discuss.elastic.co/t/length-of-an-array-in-logstash/61750 "2016-09-29T05:38:08Z")

</div>

I am trying to find length of an array for a field using ruby filter. But, I'm getting below error even though nul case is handled. Please let me know if there is any error in the filter. Thanks in advance filter { ru…

---

## [Netflow data not appears in Elastic search/Kibana](https://discuss.elastic.co/t/netflow-data-not-appears-in-elastic-search-kibana/324952)

<div class="topic-metadata">

**Author:** [@canifer](https://discuss.elastic.co/u/canifer)\
**Replies:** 5\
**Last updated:** [February 8, 2023, 1:33pm UTC](https://discuss.elastic.co/t/netflow-data-not-appears-in-elastic-search-kibana/324952 "2023-02-08T13:33:31Z")

</div>

Hello, I Countered a problem when using Filebeat to forward Netflow data into Elasticsearch, I'm using filebeat 8.5.2 installed on Centos Stream 9, to send netflow data to Elastic Stack 8.5.2. The problem is, why the …

---

## [Copy a remote index using Reindex API](https://discuss.elastic.co/t/copy-a-remote-index-using-reindex-api/324548)

<div class="topic-metadata">

**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\
**Replies:** 5\
**Last updated:** [February 3, 2023, 7:47am UTC](https://discuss.elastic.co/t/copy-a-remote-index-using-reindex-api/324548 "2023-02-03T07:47:00Z")

</div>

Hi, I have a running Elastic node with an index. I'm constantly inserting documents into the index in a process that I can't stop. The whole process is running in a remote server. I need to make a copy of the index into…

---

## [Elastiflow: The request for this panel failed](https://discuss.elastic.co/t/elastiflow-the-request-for-this-panel-failed/145747)

<div class="topic-metadata">

**Author:** [@drzbass](https://discuss.elastic.co/u/drzbass)\
**Replies:** 5\
**Last updated:** [September 7, 2018, 12:42pm UTC](https://discuss.elastic.co/t/elastiflow-the-request-for-this-panel-failed/145747 "2018-09-07T12:42:24Z")

</div>

Hello! I'm trying to configure Elastiflow and followed these 2 tutorials/documentation: http://blogs.catapultsystems.com/mdowst/archive/2018/06/18/install-elastiflow-on-ubuntu-18-04-part-3/ But there are many error…

---

## [How to avoid elasticsearch duplicate documents](https://discuss.elastic.co/t/how-to-avoid-elasticsearch-duplicate-documents/118261)

<div class="topic-metadata">

**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\
**Replies:** 5\
**Last updated:** [February 5, 2018, 3:40pm UTC](https://discuss.elastic.co/t/how-to-avoid-elasticsearch-duplicate-documents/118261 "2018-02-05T15:40:37Z")

</div>

How do I avoid elasticsearch duplicate documents? The elasticsearch index docs count (20,010,253) doesn’t match with logs line count (13,411,790). documentation: File input plugin File rotation is detected and handle…

---

## [How to query a nested object with combined AND and OR logic?](https://discuss.elastic.co/t/how-to-query-a-nested-object-with-combined-and-and-or-logic/102805)

<div class="topic-metadata">

**Author:** [@mpskovvang](https://discuss.elastic.co/u/mpskovvang)\
**Replies:** 5\
**Last updated:** [October 13, 2017, 10:24am UTC](https://discuss.elastic.co/t/how-to-query-a-nested-object-with-combined-and-and-or-logic/102805 "2017-10-13T10:24:45Z")

</div>

Hi, How should this expression be written as a query: (attributes.id = 14 OR attributes.id = 15) AND (attributes.id = 4843 OR attributes.id = 4859) The nested object looks like this: { "attributes":\[ { …

---

## [Metricbeat - mapping conflict](https://discuss.elastic.co/t/metricbeat-mapping-conflict/137124)

<div class="topic-metadata">

**Author:** [@anhlon](https://discuss.elastic.co/u/anhlon)\
**Replies:** 6\
**Last updated:** [July 4, 2018, 11:30pm UTC](https://discuss.elastic.co/t/metricbeat-mapping-conflict/137124 "2018-07-04T23:30:57Z")

</div>

Hi All, I am running into a problem with metricbeat. In my container I have a label "org.label-schema.build-date" which is set to the container build date. Things appear to be working fine, except over time, it causes…

---

## [Updating the indexes in every half an hour](https://discuss.elastic.co/t/updating-the-indexes-in-every-half-an-hour/15688)

<div class="topic-metadata">

**Author:** [@vallabh](https://discuss.elastic.co/u/vallabh)\
**Replies:** 6\
**Last updated:** [February 11, 2014, 8:03am UTC](https://discuss.elastic.co/t/updating-the-indexes-in-every-half-an-hour/15688 "2014-02-11T08:03:52Z")

</div>

Dear All, I am using elasticsearch in some of the my API. I have created the index and document and have added data in elasticsearch server from Mysql database. I am following 3 steps that is, 1. Delete the ind…

---

## [TSVB - Creating variables for Math](https://discuss.elastic.co/t/tsvb-creating-variables-for-math/228385)

<div class="topic-metadata">

**Author:** [@adahn](https://discuss.elastic.co/u/adahn)\
**Replies:** 2\
**Last updated:** [April 16, 2020, 7:41pm UTC](https://discuss.elastic.co/t/tsvb-creating-variables-for-math/228385 "2020-04-16T19:41:26Z")

</div>

I'd like to create a TSVB Metric using the Math aggregation. I would like to create two variables using filters, so I know I need to set up those aggregations before the Math module, but I'm having trouble figuring out h…

---

## [How can I successfully debug a watcher? My watchers don't seem to do anything](https://discuss.elastic.co/t/how-can-i-successfully-debug-a-watcher-my-watchers-dont-seem-to-do-anything/122221)

<div class="topic-metadata">

**Author:** [@ujjain](https://discuss.elastic.co/u/ujjain)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 4:51pm UTC](https://discuss.elastic.co/t/how-can-i-successfully-debug-a-watcher-my-watchers-dont-seem-to-do-anything/122221 "2018-03-09T16:51:24Z")

</div>

My watchers don´t seem to do anything. Nothing appears in the \_alerts index and no e-mail gets sent. I'm not sure what effective methods of debugging are either. I'm running ElasticSearch 2.4. { "\_index": "alert\_watc…

---

## [Elasticsearch-spark: empty fields are returned as "None" when using EsSpark.esRdd()](https://discuss.elastic.co/t/elasticsearch-spark-empty-fields-are-returned-as-none-when-using-esspark-esrdd/27919)

<div class="topic-metadata">

**Author:** [@lists\_arun](https://discuss.elastic.co/u/lists_arun)\
**Replies:** 2\
**Last updated:** [August 28, 2015, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-spark-empty-fields-are-returned-as-none-when-using-esspark-esrdd/27919 "2015-08-28T09:57:55Z")

</div>

I am using the latest build of elasticsearch-spark. (2.2.0.BUILD-20150818.024341-55) with Scala 2.11. When I process results from EsSpark.esRdd(), I find that empty columns (or fields) are returned as the string "None" i…

---

## [How can we get the user metrics](https://discuss.elastic.co/t/how-can-we-get-the-user-metrics/155082)

<div class="topic-metadata">

**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\
**Replies:** 3\
**Last updated:** [November 2, 2018, 5:37pm UTC](https://discuss.elastic.co/t/how-can-we-get-the-user-metrics/155082 "2018-11-02T17:37:50Z")

</div>

Hi Team, How can we get the user metrics I would like to know how many users are accessing/hitting my kibana dashboards Please advise

---

## [Working with subfields in logstash](https://discuss.elastic.co/t/working-with-subfields-in-logstash/102844)

<div class="topic-metadata">

**Author:** [@maxf](https://discuss.elastic.co/u/maxf)\
**Replies:** 4\
**Last updated:** [October 5, 2017, 2:39pm UTC](https://discuss.elastic.co/t/working-with-subfields-in-logstash/102844 "2017-10-05T14:39:11Z")

</div>

Hello. Im using logstash to parse sysmon events. So i cant correctly use condition if and change subfields. What am i doing wrong? my config: filter { if \[log\_name\] == "Microsoft-Windows-Sysmon/Operational" and \[eve…

---

## [Dissector mapping, pattern not found in Logstash](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 7\
**Last updated:** [January 20, 2021, 12:29pm UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444 "2021-01-20T12:29:32Z")

</div>

Hi Team, I am getting Dissector mapping, pattern not found in Logstash while start logstash.

---

## [Most efficient way to count entries with specific fields](https://discuss.elastic.co/t/most-efficient-way-to-count-entries-with-specific-fields/237366)

<div class="topic-metadata">

**Author:** [@Jeremy\_LHEZ](https://discuss.elastic.co/u/Jeremy_LHEZ)\
**Replies:** 7\
**Last updated:** [June 25, 2020, 9:49am UTC](https://discuss.elastic.co/t/most-efficient-way-to-count-entries-with-specific-fields/237366 "2020-06-25T09:49:01Z")

</div>

Hello everyone, I am currently working on a program and I need to count the number of entries in an index containing some specific fields. I work in JAVA with a RestHighLevelClient, and I use PutStoredScriptRequest to …

---

## [Import CSV file to Logstash on windows10](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows10/194770)

<div class="topic-metadata">

**Author:** [@aahtysh2525](https://discuss.elastic.co/u/aahtysh2525)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 10:29pm UTC](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows10/194770 "2019-08-12T22:29:27Z")

</div>

Hi, I am trying to import a CSV file to elasticsearch using logstash, but with no success. Windows 10 Logstash 7.3.0/Elasticsearch 7.3.0/Kibana 7.3.0 // Config File is as below input { file { path =\> \["E:\\Softwa…

---

## [Filtering out event\_data.TargetUserName ending in $](https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 2\
**Last updated:** [November 22, 2017, 5:13pm UTC](https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750 "2017-11-22T17:13:05Z")

</div>

Trying to figure out how to create a working kibana-filter to filter out where event\_data.TargetUserName ends in a dollar sign ($). For example computer accounts in AD or managed service accounts. And by filterng out i …

---

## [Unable to start TransportClient : RandomizedContext#getRandom](https://discuss.elastic.co/t/unable-to-start-transportclient-randomizedcontext-getrandom/85466)

<div class="topic-metadata">

**Author:** [@elastic\_boston](https://discuss.elastic.co/u/elastic_boston)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 4:29pm UTC](https://discuss.elastic.co/t/unable-to-start-transportclient-randomizedcontext-getrandom/85466 "2017-05-15T16:29:00Z")

</div>

I am unable to start a transport client. My code is - Settings settings = Settings.builder() .put("client.transport.sniff", true).build(); TransportClient client = new PreBuiltTransportClient(settings) …

---

## [\[Resolve\] Field from logstash not indexed](https://discuss.elastic.co/t/resolve-field-from-logstash-not-indexed/61144)

<div class="topic-metadata">

**Author:** [@rdesgrange](https://discuss.elastic.co/u/rdesgrange)\
**Replies:** 3\
**Last updated:** [September 22, 2016, 8:15am UTC](https://discuss.elastic.co/t/resolve-field-from-logstash-not-indexed/61144 "2016-09-22T08:15:56Z")

</div>

Hi, I have a setup where filebeat send log to logstash, that process it through grok parser and then send it to Elasticsearch. Classic. I just add this line in my logstash configuration : useragent { source =\> …

---

## [Heartbeat: response code in case of error](https://discuss.elastic.co/t/heartbeat-response-code-in-case-of-error/304493)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 6\
**Last updated:** [May 20, 2022, 1:14pm UTC](https://discuss.elastic.co/t/heartbeat-response-code-in-case-of-error/304493 "2022-05-20T13:14:08Z")

</div>

Hi, I am using heartbeat 6.4.0. I can see that in case of successful connection, unauthorized access, not found it returns http.response.status\_code as 200, 401, 404 respectively. But, in case of errors like below ther…

---

## [Ubuntu 14.04 Purging ElasticSeach](https://discuss.elastic.co/t/ubuntu-14-04-purging-elasticseach/169695)

<div class="topic-metadata">

**Author:** [@txu](https://discuss.elastic.co/u/txu)\
**Replies:** 6\
**Last updated:** [March 1, 2019, 2:52pm UTC](https://discuss.elastic.co/t/ubuntu-14-04-purging-elasticseach/169695 "2019-03-01T14:52:18Z")

</div>

Hello, I am a coop student trying to use elastic search for the first time. However, I ran into a few problem while trying to initially use elastic search after installation and also during the uninstall process. I am us…

---

## [Rally Track Report Analysis](https://discuss.elastic.co/t/rally-track-report-analysis/117589)

<div class="topic-metadata">

**Author:** [@ize0j10](https://discuss.elastic.co/u/ize0j10)\
**Replies:** 6\
**Last updated:** [February 20, 2018, 9:30am UTC](https://discuss.elastic.co/t/rally-track-report-analysis/117589 "2018-02-20T09:30:29Z")

</div>

Hello, we want to get a measurement on resources that still might be available in our elasticsearch cluster. To get an idea we run Rally 0.9.: esrally --track="http\_logs" --target-hosts="node1, node2" --pipeline=bench…

---

## [Unable to create jira issue in watcher action](https://discuss.elastic.co/t/unable-to-create-jira-issue-in-watcher-action/71318)

<div class="topic-metadata">

**Author:** [@ady](https://discuss.elastic.co/u/ady)\
**Replies:** 6\
**Last updated:** [January 12, 2017, 5:01pm UTC](https://discuss.elastic.co/t/unable-to-create-jira-issue-in-watcher-action/71318 "2017-01-12T17:01:13Z")

</div>

I am going post only action part of my watch here. For the same watch am able to create email notification but not able to create jira notification. "actions" : { "create-jira-issue" : { "jira" : { "accou…

---

## [Elasticsearch - Plain-text search](https://discuss.elastic.co/t/elasticsearch-plain-text-search/233275)

<div class="topic-metadata">

**Author:** [@Julien1](https://discuss.elastic.co/u/Julien1)\
**Replies:** 8\
**Last updated:** [May 22, 2020, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-plain-text-search/233275 "2020-05-22T00:40:17Z")

</div>

Hello, I'm working on an index on which I want to do plain-text search in several strings : for example, for 2 documents Doc 1 : strings "This is an example" and "another example" Doc 2 : strings "This is an test" an…

---

## [Is the input speed of the elasticsearch cluster linear?](https://discuss.elastic.co/t/is-the-input-speed-of-the-elasticsearch-cluster-linear/24464)

<div class="topic-metadata">

**Author:** [@nathaniel](https://discuss.elastic.co/u/nathaniel)\
**Replies:** 8\
**Last updated:** [June 29, 2015, 6:28pm UTC](https://discuss.elastic.co/t/is-the-input-speed-of-the-elasticsearch-cluster-linear/24464 "2015-06-29T18:28:11Z")

</div>

Hello guys, I am a newbie in elasticsearch. Recently I set up a elasticsearch cluster to save my logs.The cluster has 3 nodes, all of them serves as both master node and data node. I used logstash to foward data to the A…

---

## [Unable to launch elasticsearch from bat file in windows 10](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows-10/308197)

<div class="topic-metadata">

**Author:** [@Halim\_Dris](https://discuss.elastic.co/u/Halim_Dris)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 8:50pm UTC](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows-10/308197 "2022-06-27T20:50:17Z")

</div>

elasticsearch-8.2.3 Running elasticsearch with echo on. D:\\Elastic\\elasticsearch-8.2.3\\bin\>elasticsearch D:\\Elastic\\elasticsearch-8.2.3\\bin\>setlocal enabledelayedexpansion D:\\Elastic\\elasticsearch-8.2.3\\bin\>setlo…

---

## [Use curator to send elasticsearch indices to S3](https://discuss.elastic.co/t/use-curator-to-send-elasticsearch-indices-to-s3/272084)

<div class="topic-metadata">

**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\
**Replies:** 5\
**Last updated:** [May 7, 2021, 3:46pm UTC](https://discuss.elastic.co/t/use-curator-to-send-elasticsearch-indices-to-s3/272084 "2021-05-07T15:46:55Z")

</div>

Hello, I just managed to link my graylog/elasticsearch server to my S3 bucket curl -X PUT "localhost:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: application/json' -d' { "type": "s3", "settings": {…

---

## [Elasticsearch fails to start on VM Boot](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645)

<div class="topic-metadata">

**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\
**Replies:** 5\
**Last updated:** [January 12, 2021, 4:37pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645 "2021-01-12T16:37:34Z")

</div>

I am running Ubuntu 20. Upon starting my machine, kibana fails, saying it can't connect to localhost:9200. I check on Elasticsearch, and I see this: ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/sy…

---

## [Executing terms filter search on an index in Kibana](https://discuss.elastic.co/t/executing-terms-filter-search-on-an-index-in-kibana/42110)

<div class="topic-metadata">

**Author:** [@Natarajan\_venkataram](https://discuss.elastic.co/u/Natarajan_venkataram)\
**Replies:** 5\
**Last updated:** [February 21, 2016, 2:29pm UTC](https://discuss.elastic.co/t/executing-terms-filter-search-on-an-index-in-kibana/42110 "2016-02-21T14:29:37Z")

</div>

I want to filter execute terms filter search on my dashboard, but however I'm seeing no results, even though I could see that there is a match, and the string fields are indexed as not\_analyzed, as suggested for terms fi…

---

## [License of ElasticSearch](https://discuss.elastic.co/t/license-of-elasticsearch/81341)

<div class="topic-metadata">

**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\
**Replies:** 3\
**Last updated:** [April 5, 2017, 6:49pm UTC](https://discuss.elastic.co/t/license-of-elasticsearch/81341 "2017-04-05T18:49:26Z")

</div>

Hi, I am use the Docker of Elasticsearch in my production enviromnent but when I started the cluster, we receive this message: License \[will expire\] on \[Sunday, April 23, 2017\]. If you have a new license, please u…

---

## [Configuring ssl from letsencrypt](https://discuss.elastic.co/t/configuring-ssl-from-letsencrypt/117871)

<div class="topic-metadata">

**Author:** [@Frederic\_Gauld](https://discuss.elastic.co/u/Frederic_Gauld)\
**Replies:** 1\
**Last updated:** [January 31, 2018, 8:46pm UTC](https://discuss.elastic.co/t/configuring-ssl-from-letsencrypt/117871 "2018-01-31T20:46:03Z")

</div>

Hi! I'm new here, so I apologize in advance for possibly inquiring about something that may seem obvious. Elasticsearch version : 6.1 X-Pack version: 6.1 I've been struggling since yesterday to get secured https setu…

---

## [Predictive analysis using elasticsearch?](https://discuss.elastic.co/t/predictive-analysis-using-elasticsearch/69518)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [December 20, 2016, 6:47am UTC](https://discuss.elastic.co/t/predictive-analysis-using-elasticsearch/69518 "2016-12-20T06:47:13Z")

</div>

Hi, We are trying to use ELK stack for major incidence management systems and its data use for predictive analysis. Can somebody put focus on some use case, how can we utilize ELK stack? br, Sunil.

---

## [Intersectional search from two indices](https://discuss.elastic.co/t/intersectional-search-from-two-indices/170643)

<div class="topic-metadata">

**Author:** [@IgorPhoenix](https://discuss.elastic.co/u/IgorPhoenix)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 7:04am UTC](https://discuss.elastic.co/t/intersectional-search-from-two-indices/170643 "2019-03-05T07:04:02Z")

</div>

I have two indices in Elastic: Track and Messages. Each index has ServiceId field. Search in the Tracks index is always performed by fields (exact value) in the index. Search in the Messages is always performed by fre…

---

## [Where to put pipeline configuration files on Windows 10?](https://discuss.elastic.co/t/where-to-put-pipeline-configuration-files-on-windows-10/125450)

<div class="topic-metadata">

**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\
**Replies:** 4\
**Last updated:** [March 27, 2018, 8:09pm UTC](https://discuss.elastic.co/t/where-to-put-pipeline-configuration-files-on-windows-10/125450 "2018-03-27T20:09:43Z")

</div>

Where should I put pipeline configuration files (input-\>filter-\>output) referred to in pipelines.yml file on Windows 10? I am using Logstash 6.2.2 and I noticed that if the file names do not contain accented characters …

---

## [Comparison Graph in Kibana](https://discuss.elastic.co/t/comparison-graph-in-kibana/63718)

<div class="topic-metadata">

**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\
**Replies:** 4\
**Last updated:** [October 25, 2016, 2:22am UTC](https://discuss.elastic.co/t/comparison-graph-in-kibana/63718 "2016-10-25T02:22:33Z")

</div>

Hello I want to create graph as a template which will give me comparison of the current data with the old data . The data will be pushed once in every 24 hours and I want create the comparison graph of current data and …

[Previous page](https://discuss.elastic.co/top.md?page=794&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=796&per_page=50&period=all)
