# Top **URL:** https://discuss.elastic.co/top.md?page=801&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 802 --- ## [JSON array mapping into Hive](https://discuss.elastic.co/t/json-array-mapping-into-hive/71411)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 9:39pm UTC](https://discuss.elastic.co/t/json-array-mapping-into-hive/71411 "2017-01-16T21:39:34Z")
I would like to read elasticsearch data into Hive, and have been following documentation here. One of my elasticsearch fields (ACTIVITIES) is an array of JSON objects with structure like this: ACTIVITIES:{ {NAME: … --- ## [Is it possible to query app-search documents through elastic search API?](https://discuss.elastic.co/t/is-it-possible-to-query-app-search-documents-through-elastic-search-api/246370)
**Author:** [@Ali\_Modern](https://discuss.elastic.co/u/Ali_Modern)\ **Replies:** 5\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-query-app-search-documents-through-elastic-search-api/246370 "2022-06-16T14:32:04Z")
I have self-hosted app search instance with the Elastic stack (ELK+Appsearch). I can't see app-search index in Kibana. I'm wondering if there is any other way to manage the documents app-search is working on apart from a… --- ## [Replication on data nodes](https://discuss.elastic.co/t/replication-on-data-nodes/118301)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 5\ **Last updated:** [February 3, 2018, 1:38pm UTC](https://discuss.elastic.co/t/replication-on-data-nodes/118301 "2018-02-03T13:38:08Z")
I was upgrading elasticsearch onmy cluster. Successfully been done, I face an issue, the issue is on my data nodes when I see on the dashboard, one data node has all the original data while other has all the replicated … --- ## [Alternative to ngram tokenizer and token filter. Substring issue](https://discuss.elastic.co/t/alternative-to-ngram-tokenizer-and-token-filter-substring-issue/53354)
**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\ **Replies:** 5\ **Last updated:** [June 20, 2016, 7:54pm UTC](https://discuss.elastic.co/t/alternative-to-ngram-tokenizer-and-token-filter-substring-issue/53354 "2016-06-20T19:54:52Z")
Hey guys, Currently I am looking for a means to search for a substring inside a phrase or text. I know that the two most common methods are is to use: ngram tokenizer/ token filter. Wild card search. However, both… --- ## [Metricbeat Output to Secure Elasticsearch Error](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830 "2022-03-28T13:02:23Z")
Hi, I'm using ELK Stack 8.0, which is Elasticsearch running in secured mode. I'm having the problem to output my metricbeat to Elasticsearch. Below is the error when I run the command "metricbeat setup -e" {"log.leve… --- ## [Help with Logstash conf](https://discuss.elastic.co/t/help-with-logstash-conf/125746)
**Author:** [@Faenor2105](https://discuss.elastic.co/u/Faenor2105)\ **Replies:** 2\ **Last updated:** [March 27, 2018, 1:10pm UTC](https://discuss.elastic.co/t/help-with-logstash-conf/125746 "2018-03-27T13:10:59Z")
Hi there. I'm new in ELK theme. Can you help me to make right logstash config file? Right now i have many errors like this: \[2018-03-27T11:27:37,900\]\[ERROR\]\[logstash.filters.grok \] Unknown setting 'pattern' for grok… --- ## [Adding conditional tags or fields in filebeat.yml](https://discuss.elastic.co/t/adding-conditional-tags-or-fields-in-filebeat-yml/79952)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 3:33pm UTC](https://discuss.elastic.co/t/adding-conditional-tags-or-fields-in-filebeat-yml/79952 "2017-03-27T15:33:18Z")
A) Is there a way to add tags or fields - conditionally in filebeat. For eg: if the input file is xyz then add tag or field XYZ if the input file is abc then add tag or field ABC OR b) Alternativel… --- ## [How to add fields to event from ruby plugin](https://discuss.elastic.co/t/how-to-add-fields-to-event-from-ruby-plugin/41289)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 2\ **Last updated:** [February 9, 2016, 7:10pm UTC](https://discuss.elastic.co/t/how-to-add-fields-to-event-from-ruby-plugin/41289 "2016-02-09T19:10:12Z")
My config file accumulates data in the Class variables and does so until it's time to write out the 'aggregated' values into the Event. I don't know how to do that. Here is the code I have, which doesn't work. How do… --- ## [Creating custom search result by mapping query to a specific doc](https://discuss.elastic.co/t/creating-custom-search-result-by-mapping-query-to-a-specific-doc/84629)
**Author:** [@AB77](https://discuss.elastic.co/u/AB77)\ **Replies:** 0\ **Last updated:** [May 4, 2017, 8:52pm UTC](https://discuss.elastic.co/t/creating-custom-search-result-by-mapping-query-to-a-specific-doc/84629 "2017-05-04T20:52:22Z")
Hi, So I see that you can get a JSON document based on it's id. However is it possible to also map certain queries to specific documents. Or even search a different index based on the query. I know that it could be… --- ## [\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/234241)
**Author:** [@Raj\_Techie](https://discuss.elastic.co/u/Raj_Techie)\ **Replies:** 7\ **Last updated:** [May 26, 2020, 6:16am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/234241 "2020-05-26T06:16:46Z")
Logstash version I am using -logstash 6.0.1 Elasticsearch version below are there in my system. /appserver/elk4pq/elasticsearch-2.3.2/config/elasticsearch.yml /data/software/elk/elasticsearch-2.4.5/config/elasticsearc… --- ## [Adding file descriptor metrics to topbeat and gosigar](https://discuss.elastic.co/t/adding-file-descriptor-metrics-to-topbeat-and-gosigar/50997)
**Author:** [@lukejolly](https://discuss.elastic.co/u/lukejolly)\ **Replies:** 7\ **Last updated:** [June 3, 2016, 7:16am UTC](https://discuss.elastic.co/t/adding-file-descriptor-metrics-to-topbeat-and-gosigar/50997 "2016-06-03T07:16:56Z")
I really like the metrics topbeat grabs per process but I feel it is missing a two key metric which is the file descriptor limit for the process and the amount currently used by it. Along with CPU and Memory resource I … --- ## [Could not initialize class org.elasticsearch.threadpool.ThreadPool](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-threadpool-threadpool/47575)
**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\ **Replies:** 1\ **Last updated:** [April 17, 2016, 7:59am UTC](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-threadpool-threadpool/47575 "2016-04-17T07:59:39Z")
I am upgrading the elasticsearch version from 1.\* to 2.1.1. I am using it in a storm topology: \ \org.elasticsearch\ \elasticsearch\ \2.1.1\ \ **Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\ **Replies:** 3\ **Last updated:** [June 6, 2017, 5:48pm UTC](https://discuss.elastic.co/t/errors-when-logstash-is-writing-to-influxdb/87807 "2017-06-06T17:48:51Z") Hi, I am going to send logs from Logstash to both Elasticsearch and InfluxDB. This is logstash.conf: input { beats { port =\> 5044 ssl =\> false ssl\_certificate =\> "..." ssl\_key =\> "..." } } filter… --- ## [Null pointer exception Elasticsearch 2.4.4 with filter and term query](https://discuss.elastic.co/t/null-pointer-exception-elasticsearch-2-4-4-with-filter-and-term-query/76036)
**Author:** [@Infrid](https://discuss.elastic.co/u/Infrid)\ **Replies:** 3\ **Last updated:** [February 22, 2017, 4:19pm UTC](https://discuss.elastic.co/t/null-pointer-exception-elasticsearch-2-4-4-with-filter-and-term-query/76036 "2017-02-22T16:19:39Z")
Hello, I am trying to filter results from a query using multiple term but I get a null pointer exception, the query fails even with an empty index. Does the query looks ok? I am using Elasticsearch 2.4.4 and Oracle Jav… --- ## [Logstash vs Spark vs something else](https://discuss.elastic.co/t/logstash-vs-spark-vs-something-else/130066)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 6\ **Last updated:** [May 3, 2018, 4:35pm UTC](https://discuss.elastic.co/t/logstash-vs-spark-vs-something-else/130066 "2018-05-03T16:35:12Z")
I have been using Logstash to connect to Postgres to parse XML and extract certain xpaths and then push them to Elasticsearch. However, it's been fairly apparent that Logstash isn't meant for parsing entire files. Is th… --- ## [Search documents having multiple values of a field](https://discuss.elastic.co/t/search-documents-having-multiple-values-of-a-field/129915)
**Author:** [@ram](https://discuss.elastic.co/u/ram)\ **Replies:** 6\ **Last updated:** [April 28, 2018, 8:24pm UTC](https://discuss.elastic.co/t/search-documents-having-multiple-values-of-a-field/129915 "2018-04-28T20:24:04Z")
Hi, I want to search docs with multiple values of a field? eg. let's say I have job postings. Few of the jobs have multiple locations. { id: 1, location: 'new york' }, { id: 2, location: \['new york', 'london'\] … --- ## [Conversion not working](https://discuss.elastic.co/t/conversion-not-working/119390)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 2\ **Last updated:** [February 13, 2018, 10:12am UTC](https://discuss.elastic.co/t/conversion-not-working/119390 "2018-02-13T10:12:22Z")
Hello, conversion type in logstash doesn't work. Can you help me please. I want to see in Kibana the data of me .csv file. This is what there is in my file (toto.csv) : 2|fichier\_2 3|fichier\_3 There is : \|\<… --- ## [Getting access denied in Kibana with x-pack monitoring only enabled](https://discuss.elastic.co/t/getting-access-denied-in-kibana-with-x-pack-monitoring-only-enabled/101625)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 5:53am UTC](https://discuss.elastic.co/t/getting-access-denied-in-kibana-with-x-pack-monitoring-only-enabled/101625 "2017-09-25T05:53:48Z")
hi, I am running ES 5.5.1 on windows 2008 R2, with Readonlyrest free version, X-pack monitoring only enabled (rest all features disabled). I am able to get into Kibana Dev console using the id/pwd that I have setup in R… --- ## [Kafka consumer lag?](https://discuss.elastic.co/t/kafka-consumer-lag/163884)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 4\ **Last updated:** [January 17, 2019, 10:49am UTC](https://discuss.elastic.co/t/kafka-consumer-lag/163884 "2019-01-17T10:49:59Z")
I'd somehow got the idea that Metricbeat 6.5 might enable the monitoring of Kafka consumer lag, but on trying it I see that the latest offset is still only in the partition event and the consumer group offset is still on… --- ## [Issues using type\_table in a word\_delimiter token filter to NOT split on special character](https://discuss.elastic.co/t/issues-using-type-table-in-a-word-delimiter-token-filter-to-not-split-on-special-character/8653)
**Author:** [@Jacob\_Evans](https://discuss.elastic.co/u/Jacob_Evans)\ **Replies:** 4\ **Last updated:** [August 7, 2012, 12:09am UTC](https://discuss.elastic.co/t/issues-using-type-table-in-a-word-delimiter-token-filter-to-not-split-on-special-character/8653 "2012-08-07T00:09:47Z")
I'm trying to design a token filter that will split words, but will not split on dollar signs ("$"). (I'm actually trying to do something more complicated, but I am stuck on this step). I'm attempting to use a … --- ## [Elasticsearch vm.max\_map\_count error in docker image on MacOS 14](https://discuss.elastic.co/t/elasticsearch-vm-max-map-count-error-in-docker-image-on-macos-14/346285)
**Author:** [@timofeyp](https://discuss.elastic.co/u/timofeyp)\ **Replies:** 1\ **Last updated:** [November 2, 2023, 3:54pm UTC](https://discuss.elastic.co/t/elasticsearch-vm-max-map-count-error-in-docker-image-on-macos-14/346285 "2023-11-02T15:54:29Z")
Hello! I have the "vm.max\_map\_count \[65530\] is too low, increase to at least \[262144\]" error while elastic container starting on Docker 4.25, MacOS 14 and ARM core. Here is my container props: image: elasticsearch… --- ## [Want to fetch latest record from the list of records in kibana using DSL query](https://discuss.elastic.co/t/want-to-fetch-latest-record-from-the-list-of-records-in-kibana-using-dsl-query/207081)
**Author:** [@salahali](https://discuss.elastic.co/u/salahali)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 6:45pm UTC](https://discuss.elastic.co/t/want-to-fetch-latest-record-from-the-list-of-records-in-kibana-using-dsl-query/207081 "2019-11-18T18:45:19Z")
We are using the ELK v7.3.2 version. We have requirement in Kibana that we have list of records which are displaying in the Kibana data table. We need to display last updated record on top of the table. For which we are… --- ## [Aggregate filter - push on event size limit](https://discuss.elastic.co/t/aggregate-filter-push-on-event-size-limit/180875)
**Author:** [@bosand](https://discuss.elastic.co/u/bosand)\ **Replies:** 2\ **Last updated:** [May 13, 2019, 9:23pm UTC](https://discuss.elastic.co/t/aggregate-filter-push-on-event-size-limit/180875 "2019-05-13T21:23:09Z")
Hi there, I would like to aggregate events until the aggregated event reaches a certain size limit (e.g. 256kb) at which point I would like to push the event to the queue. There are no start/end events. Push on timeout… --- ## [One cluster, Two Kibana servers for HA - Monitoring shows One](https://discuss.elastic.co/t/one-cluster-two-kibana-servers-for-ha-monitoring-shows-one/84322)
**Author:** [@ben-10](https://discuss.elastic.co/u/ben-10)\ **Replies:** 3\ **Last updated:** [May 4, 2017, 2:32pm UTC](https://discuss.elastic.co/t/one-cluster-two-kibana-servers-for-ha-monitoring-shows-one/84322 "2017-05-04T14:32:42Z")
I have one elasticsearch cluster with 10 nodes. Two of those nodes are client nodes with Kibana installed for HA. Under the Monitoring Tab, cluster, Kibana instances, it will show one of the two nodes for a while and the… --- ## [Fixnum is deprecated](https://discuss.elastic.co/t/fixnum-is-deprecated/297669)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [February 19, 2022, 6:49pm UTC](https://discuss.elastic.co/t/fixnum-is-deprecated/297669 "2022-02-19T18:49:22Z")
Hi i got this error when i run logstash \[2022-02-17T16:37:37,651\]\[INFO \]\[logstash.javapipeline \]\[main\] Pipeline started {"pipeline.id"=\>"main"} \[2022-02-17T16:37:37,728\]\[INFO \]\[logstash.agent \] Pipelines r… --- ## [Kibana filter issues on embedded dashboards](https://discuss.elastic.co/t/kibana-filter-issues-on-embedded-dashboards/268898)
**Author:** [@a.deharo](https://discuss.elastic.co/u/a.deharo)\ **Replies:** 7\ **Last updated:** [April 28, 2021, 1:16pm UTC](https://discuss.elastic.co/t/kibana-filter-issues-on-embedded-dashboards/268898 "2021-04-28T13:16:35Z")
Hi everyone, I recently upgraded my Elastic stack version from v7.11.2 to v7.12.0, and I'm starting to see some weird behavior on both filters and controls visualizations on embedded dashboards from Kibana. I guess the … --- ## [Reporting from Kibana: Export as PDF](https://discuss.elastic.co/t/reporting-from-kibana-export-as-pdf/149700)
**Author:** [@Mheni](https://discuss.elastic.co/u/Mheni)\ **Replies:** 1\ **Last updated:** [September 25, 2018, 3:26am UTC](https://discuss.elastic.co/t/reporting-from-kibana-export-as-pdf/149700 "2018-09-25T03:26:42Z")
I tryed to install x-pack on Kibana 6.4 Kibana now contains X-Pack by default, there is no longer any need to install it as it is already present. but the Reporting Button as this(https://www.elastic.co/guide/en/kibana… --- ## [Picking substring from field in logstash](https://discuss.elastic.co/t/picking-substring-from-field-in-logstash/97797)
**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 8:47pm UTC](https://discuss.elastic.co/t/picking-substring-from-field-in-logstash/97797 "2017-08-23T20:47:19Z")
Hi I have a log field in the pattern: PRODUCT\_GLOBAL\_20170706024756466\_0000000004069390 My requirement is to extract 0000000004069390 from the field and store it in a new field named FieldX. Can anyone please help me … --- ## [Kibana can't connect to ES having (openstack) LoadBalancer setting](https://discuss.elastic.co/t/kibana-cant-connect-to-es-having-openstack-loadbalancer-setting/206691)
**Author:** [@JuYeong\_Park](https://discuss.elastic.co/u/JuYeong_Park)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 5:00am UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-es-having-openstack-loadbalancer-setting/206691 "2019-11-19T05:00:42Z")
I want to use ES and Kibana on LoadBalancer Env. So, i added load balancer options to ES yaml as below. apiVersion: elasticsearch.k8s.elastic.co/v1beta1 kind: Elasticsearch metadata: name: lb spec: http: service… --- ## [Logstash-output-elasticssearch on Windows cannot load Java class](https://discuss.elastic.co/t/logstash-output-elasticssearch-on-windows-cannot-load-java-class/55684)
**Author:** [@Erkan\_Aslanel](https://discuss.elastic.co/u/Erkan_Aslanel)\ **Replies:** 4\ **Last updated:** [August 22, 2016, 2:58pm UTC](https://discuss.elastic.co/t/logstash-output-elasticssearch-on-windows-cannot-load-java-class/55684 "2016-08-22T14:58:56Z")
I started to implement ELK on windows.I got error C:\\logstash\\logstash-2.3.4\\bin\>logstash -f logstash-simple.conf io/console not supported; tty will not be manipulated ←\[31mfetched an invalid config {:config=\>"input {… --- ## [Moving datacenters](https://discuss.elastic.co/t/moving-datacenters/26749)
**Author:** [@Zack](https://discuss.elastic.co/u/Zack)\ **Replies:** 5\ **Last updated:** [August 4, 2015, 10:19pm UTC](https://discuss.elastic.co/t/moving-datacenters/26749 "2015-08-04T22:19:08Z")
This is the old datacenter awareness issue again. I've done a thorough search and haven't found any good solution to moving an ES cluster to a new DC, so I'm hoping some one here has a viable method! So we're moving da… --- ## [There is a problem with this saved object](https://discuss.elastic.co/t/there-is-a-problem-with-this-saved-object/167758)
**Author:** [@thoth](https://discuss.elastic.co/u/thoth)\ **Replies:** 3\ **Last updated:** [February 19, 2019, 4:19pm UTC](https://discuss.elastic.co/t/there-is-a-problem-with-this-saved-object/167758 "2019-02-19T16:19:59Z")
I'm getting very inconsistent results from my elastic stack. Saved searches, visualizations, and dashboards all sporadically return: There is a problem with this saved object This most prevalent when I have two comput… --- ## [Issue with Active Directory User Authentication using X-Pack](https://discuss.elastic.co/t/issue-with-active-directory-user-authentication-using-x-pack/80459)
**Author:** [@Nihar](https://discuss.elastic.co/u/Nihar)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 12:54pm UTC](https://discuss.elastic.co/t/issue-with-active-directory-user-authentication-using-x-pack/80459 "2017-04-13T12:54:44Z")
Hi All, We are using ElasticSearch 5.2.2 and trying to configure Active Directory User Authenticatioon using x-pack We have configured active directory realm in config.yml file as below xpack: security: authc: … --- ## [Automatic id generation on bulk create](https://discuss.elastic.co/t/automatic-id-generation-on-bulk-create/5599)
**Author:** [@michael\_2](https://discuss.elastic.co/u/michael_2)\ **Replies:** 3\ **Last updated:** [March 2, 2017, 12:12pm UTC](https://discuss.elastic.co/t/automatic-id-generation-on-bulk-create/5599 "2017-03-02T12:12:14Z")
Is it possible to have automatic id generation on bulk create? What is the syntax? Leaving out the \_id? { "create" : { "\_index" : "test", "\_type" : "type1"} } { "field1" : "value3" } --- ## [Kibana in not running after setting log file destination](https://discuss.elastic.co/t/kibana-in-not-running-after-setting-log-file-destination/194579)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 2\ **Last updated:** [August 13, 2019, 9:58am UTC](https://discuss.elastic.co/t/kibana-in-not-running-after-setting-log-file-destination/194579 "2019-08-13T09:58:00Z")
I set the path to log file in kibana.yml file after that kibana is stop working. This is kibana.yml file: # Kibana is served by a back end server. This setting specifies the port to use. server.port: 5601 # Specifies t… --- ## [Error while creating elastic search x-pack transport client](https://discuss.elastic.co/t/error-while-creating-elastic-search-x-pack-transport-client/143839)
**Author:** [@Mahendra\_Shinde](https://discuss.elastic.co/u/Mahendra_Shinde)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 10:29am UTC](https://discuss.elastic.co/t/error-while-creating-elastic-search-x-pack-transport-client/143839 "2018-08-13T10:29:04Z")
Hi, I am trying to create Transport client using below code .put("cluster.name", clusterName) .put("xpack.security.user", "elastic:RIzpjJS0HxVSgzg1oyZy") .build() val createdClient: TransportClient… --- ## [Change kibana title](https://discuss.elastic.co/t/change-kibana-title/127857)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 2\ **Last updated:** [April 16, 2018, 6:09am UTC](https://discuss.elastic.co/t/change-kibana-title/127857 "2018-04-16T06:09:32Z")
I am looking for a file in which i can modify kibana's default page title Can somebody tell me how can i do that? Thank You, Meet --- ## [How to connect missing points in a timelion chart?](https://discuss.elastic.co/t/how-to-connect-missing-points-in-a-timelion-chart/77349)
**Author:** [@mmoxam](https://discuss.elastic.co/u/mmoxam)\ **Replies:** 2\ **Last updated:** [March 3, 2017, 7:34pm UTC](https://discuss.elastic.co/t/how-to-connect-missing-points-in-a-timelion-chart/77349 "2017-03-03T19:34:04Z")
I have a graph in Kibana that looks as such: As you can see the lines are not connected where no data exists. The connections are inferred with a regular line chart. Anyway to get that inference with timelion? --- ## [Moving to production - Storage and servers](https://discuss.elastic.co/t/moving-to-production-storage-and-servers/22139)
**Author:** [@rondelvictor](https://discuss.elastic.co/u/rondelvictor)\ **Replies:** 2\ **Last updated:** [February 13, 2015, 2:57pm UTC](https://discuss.elastic.co/t/moving-to-production-storage-and-servers/22139 "2015-02-13T14:57:58Z")
Hi everyone, After my first and second question regarding clusters' examples and multy-tenancy with garantee of service, I have one more on my way to production : Could you describe the \*pros\* and \*cons… --- ## [How to get long value of date in result set of a search query](https://discuss.elastic.co/t/how-to-get-long-value-of-date-in-result-set-of-a-search-query/20042)
**Author:** [@bernard\_drigs](https://discuss.elastic.co/u/bernard_drigs)\ **Replies:** 2\ **Last updated:** [October 2, 2014, 3:21pm UTC](https://discuss.elastic.co/t/how-to-get-long-value-of-date-in-result-set-of-a-search-query/20042 "2014-10-02T15:21:42Z")
Hello there, My question : When I make a search query of indexed element, i want to parse the result of date object value into a Java Object. To make that properly, and because I use the Jest API, I need that the… --- ## [How to throw a error in painless](https://discuss.elastic.co/t/how-to-throw-a-error-in-painless/176337)
**Author:** [@Anurag\_Mankar](https://discuss.elastic.co/u/Anurag_Mankar)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 3:12pm UTC](https://discuss.elastic.co/t/how-to-throw-a-error-in-painless/176337 "2019-04-11T15:12:01Z")
I want to return something so that I can identify that the below update is exceuted from "if " section or the "else" section. Is there a way to return or throw an exception POST customer/\_update\_by\_query { "script":… --- ## [Impossible Travel Detection](https://discuss.elastic.co/t/impossible-travel-detection/359454)
**Author:** [@lfsdriver](https://discuss.elastic.co/u/lfsdriver)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 11:38am UTC](https://discuss.elastic.co/t/impossible-travel-detection/359454 "2024-05-14T11:38:08Z")
Hi all, Just looking for a bit of advice regarding creating a transform job for detecting Impossible Travel Activity. We have had some success already however, it appears the Painless script is often using the wrong so… --- ## [Filebeat Stats and Metrics](https://discuss.elastic.co/t/filebeat-stats-and-metrics/227408)
**Author:** [@Emily\_Hontoria](https://discuss.elastic.co/u/Emily_Hontoria)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 11:16pm UTC](https://discuss.elastic.co/t/filebeat-stats-and-metrics/227408 "2020-04-09T23:16:14Z")
Hi folks, I am trying to better understand the metrics I am currently seeing from the filebeat /stats call. Specifically looking to understand exactly what these metrics are: u'filebeat': {u'events': {u'active': 12… --- ## [Query\_string 'OR' doesn't work with keyword fields unless explicitly queried with OR](https://discuss.elastic.co/t/query-string-or-doesnt-work-with-keyword-fields-unless-explicitly-queried-with-or/185604)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 10:57am UTC](https://discuss.elastic.co/t/query-string-or-doesnt-work-with-keyword-fields-unless-explicitly-queried-with-or/185604 "2019-06-13T10:57:44Z")
ES versions tested with: 6.5.4, 7.0.0. Mapping: { "index-name": { "aliases": {}, "mappings": { "doc": { "dynamic": "false", "properties": { "content": { "type": "text" … --- ## [APM server deployed via fleet cannot connect to Kibana](https://discuss.elastic.co/t/apm-server-deployed-via-fleet-cannot-connect-to-kibana/282457)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 2:43am UTC](https://discuss.elastic.co/t/apm-server-deployed-via-fleet-cannot-connect-to-kibana/282457 "2021-08-30T02:43:36Z")
Hi, I experience problems with APM server deployed via fleet. Kibana version: 7.14.0 Elasticsearch version: 7.14.0 APM Server version: 7.14.0 Original install method (e.g. download page, yum, deb, from source, etc.)… --- ## [How to get Data Table Visualization with Top Hit show the last result for the bucket?](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491)
**Author:** [@Chris\_Portka](https://discuss.elastic.co/u/Chris_Portka)\ **Replies:** 4\ **Last updated:** [February 18, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491 "2021-02-18T17:47:33Z")
I have documents coming into elasticsearch that have a host field (string) and an update timestamp (string). I want to show a table of all unique hosts with their last update time. I created a data table visualization … --- ## [Data query issues with elasticsearch 6.8](https://discuss.elastic.co/t/data-query-issues-with-elasticsearch-6-8/237637)
**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 1:29am UTC](https://discuss.elastic.co/t/data-query-issues-with-elasticsearch-6-8/237637 "2020-06-23T01:29:48Z")
we have 5 node cassandra and 3 node elasticsearch for indexes in a cluster , For smaller count data retrieval is working with queries but when there are large count query is failing with below error. method \[POST\], hos… --- ## [Metricbeat Prometheus module not support match query](https://discuss.elastic.co/t/metricbeat-prometheus-module-not-support-match-query/177571)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 4\ **Last updated:** [April 24, 2019, 1:43am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-module-not-support-match-query/177571 "2019-04-24T01:43:02Z")
Metricbeat: 7.0.0 config: metricbeat.modules: module: prometheus period: 10s hosts: \["\"\] metrics\_path: '/federate' query: 'match\[\]': '{name!=""}' namespace: example This will result in: "error… --- ## [Configure an Index pattern. Unable to fetch mapping](https://discuss.elastic.co/t/configure-an-index-pattern-unable-to-fetch-mapping/64476)
**Author:** [@Pengyuan\_Zhou](https://discuss.elastic.co/u/Pengyuan_Zhou)\ **Replies:** 4\ **Last updated:** [October 31, 2016, 9:45pm UTC](https://discuss.elastic.co/t/configure-an-index-pattern-unable-to-fetch-mapping/64476 "2016-10-31T21:45:30Z")
Hi all, I'm using Elasticsearch, Logstash and Kibana to visualize network packet dump file (csv). The data in csv is like this: source address, destination address, frame lenth 7a07:2fe4:9f07:d674:ba09:34e4:ba09:35ac,7… --- ## [Cluster crash after exceeding cluster.max\_shards\_per\_node](https://discuss.elastic.co/t/cluster-crash-after-exceeding-cluster-max-shards-per-node/192933)
**Author:** [@jmb](https://discuss.elastic.co/u/jmb)\ **Replies:** 3\ **Last updated:** [July 31, 2019, 6:29am UTC](https://discuss.elastic.co/t/cluster-crash-after-exceeding-cluster-max-shards-per-node/192933 "2019-07-31T06:29:58Z")
With the introduction of the cluster.max\_shards\_per\_node setting, we found on upgrading 6.8-\>7.x that we had to prune a lot of old indices to bring our shard count down. At the weekend, we had a cluster outage (QA, thank… [Previous page](https://discuss.elastic.co/top.md?page=800&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=802&per_page=50&period=all)