# Top **URL:** https://discuss.elastic.co/top.md?page=812&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 813 --- ## [elasticsearch.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[cluster:monitor/main\] is unauthorized for user\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*this action is grante d by the cluster privileges \[monitor,manage,all\]')](https://discuss.elastic.co/t/elasticsearch-authorizationexception-authorizationexception-403-security-exception-action-cluster-monitor-main-is-unauthorized-for-user-this-action-is-grante-d-by-the-cluster-privileges-monitor-manage-all/323499)
**Author:** [@savitaSUtar](https://discuss.elastic.co/u/savitaSUtar)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-authorizationexception-authorizationexception-403-security-exception-action-cluster-monitor-main-is-unauthorized-for-user-this-action-is-grante-d-by-the-cluster-privileges-monitor-manage-all/323499 "2023-01-19T11:42:54Z")
I am writting a Elastic search connection code from python like : es = Elasticsearch("url", basic\_auth=("Username", "password")) print(es.info()) but getting error as : elasticsearch.AuthorizationException: Authorizat… --- ## [Logstash translate filter - multiple matches](https://discuss.elastic.co/t/logstash-translate-filter-multiple-matches/144401)
**Author:** [@lens](https://discuss.elastic.co/u/lens)\ **Replies:** 7\ **Last updated:** [September 4, 2018, 1:37pm UTC](https://discuss.elastic.co/t/logstash-translate-filter-multiple-matches/144401 "2018-09-04T13:37:31Z")
I have a situation where I am using a dictionary file with the translate filter. The keys are IPs or regexes for the IPs in IP blocks. What happens if an IP matches more than one dictionary entry, eg it's listed individu… --- ## [Indexing Rate Watch](https://discuss.elastic.co/t/indexing-rate-watch/110544)
**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\ **Replies:** 7\ **Last updated:** [December 21, 2017, 6:03pm UTC](https://discuss.elastic.co/t/indexing-rate-watch/110544 "2017-12-21T18:03:45Z")
I would like to create a Watch for when the indexing rate for a specific index is 0 /s. How does the default monitoring dashboard Indexing Rate graph pull the data in? I am having trouble finding an API to call in the wa… --- ## [How could I reset the cluster configuration value](https://discuss.elastic.co/t/how-could-i-reset-the-cluster-configuration-value/19161)
**Author:** [@Pavel\_P](https://discuss.elastic.co/u/Pavel_P)\ **Replies:** 1\ **Last updated:** [August 8, 2014, 11:34am UTC](https://discuss.elastic.co/t/how-could-i-reset-the-cluster-configuration-value/19161 "2014-08-08T11:34:20Z")
Hi, Once I've set the configuration value from default to some custom, like this way: curl -XPUT http://localhost:9200/\_cluster/settings -d ' { "transient": { "indices.fielddata.breaker.limit": "40%" } } ' So… --- ## [Supprimer \_grokparsefailure si match avec kv](https://discuss.elastic.co/t/supprimer--grokparsefailure-si-match-avec-kv/86915)
**Author:** [@mikygee](https://discuss.elastic.co/u/mikygee)\ **Replies:** 3\ **Last updated:** [May 25, 2017, 10:12am UTC](https://discuss.elastic.co/t/supprimer--grokparsefailure-si-match-avec-kv/86915 "2017-05-25T10:12:12Z")
Bonjour, Je ne parviens pas à supprimer \_grokparsefailure même lorsqu'il y a un match de regexp filter { if \[logsource\] == "1.1.1.1" { kv { source =\> "message" exclude\_keys =\> \[ "type", "subtype" … --- ## [Query Elastic APM Data for Custom Dashboard](https://discuss.elastic.co/t/query-elastic-apm-data-for-custom-dashboard/328107)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [March 21, 2023, 4:02pm UTC](https://discuss.elastic.co/t/query-elastic-apm-data-for-custom-dashboard/328107 "2023-03-21T16:02:29Z")
As our company's Elastic Cloud admin (v8.6.2), I have some users who would EITHER like to include a component from the Obervability-\>APM Overview as part of a custom dashboard OR build a similar visualization from APM da… --- ## [RemoteTransportException cannot be cast to class org.elasticsearch.index.IndexNotFoundException after upgrade to 7.11.2 from 7.6.0](https://discuss.elastic.co/t/remotetransportexception-cannot-be-cast-to-class-org-elasticsearch-index-indexnotfoundexception-after-upgrade-to-7-11-2-from-7-6-0/268121)
**Author:** [@Brady\_Davis](https://discuss.elastic.co/u/Brady_Davis)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 3:46pm UTC](https://discuss.elastic.co/t/remotetransportexception-cannot-be-cast-to-class-org-elasticsearch-index-indexnotfoundexception-after-upgrade-to-7-11-2-from-7-6-0/268121 "2021-04-12T15:46:19Z")
Hello, We recently upgraded our elasticsearch stack to 7.11.2 from 7.6.0 and are seeing an issue when attempting PUTS on indexes that don't exist: "message": "failed to handle exception response \[org.elasticsearch.tran… --- ## [Determine Nested Object Count in Elasticsearch Document](https://discuss.elastic.co/t/determine-nested-object-count-in-elasticsearch-document/354648)
**Author:** [@Kaushal](https://discuss.elastic.co/u/Kaushal)\ **Replies:** 5\ **Last updated:** [March 11, 2024, 12:58pm UTC](https://discuss.elastic.co/t/determine-nested-object-count-in-elasticsearch-document/354648 "2024-03-11T12:58:54Z")
Hello, Elasticsearch community, I'm currently working with Elasticsearch and have a scenario where I need to identify the count of nested objects within a document. The document structure includes nested fields, and I'm… --- ## [Kibana Export to CSV Date Period Problem](https://discuss.elastic.co/t/kibana-export-to-csv-date-period-problem/239557)
**Author:** [@aglush](https://discuss.elastic.co/u/aglush)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 1:14pm UTC](https://discuss.elastic.co/t/kibana-export-to-csv-date-period-problem/239557 "2020-07-14T13:14:58Z")
I have noticed the following anomaly (defect?) in Kibana's export Query Results to CSV behavior: Export to CSV does not correspond to selection criteria and returned results by the query. For example search for the last … --- ## [Refresh\_interval](https://discuss.elastic.co/t/refresh-interval/215420)
**Author:** [@111276](https://discuss.elastic.co/u/111276)\ **Replies:** 5\ **Last updated:** [January 29, 2020, 5:55pm UTC](https://discuss.elastic.co/t/refresh-interval/215420 "2020-01-29T17:55:14Z")
hello I have eight elasticsearch data nodes (ver. 6.4.1) (8 shards, 2 replica) they have following data indexed disk size : 21.5GB Document Count : 67.7m Segment Count : 336 A large amount of data is bached and ind… --- ## [Elasticsearch Indices and Space](https://discuss.elastic.co/t/elasticsearch-indices-and-space/36536)
**Author:** [@Jackal9301](https://discuss.elastic.co/u/Jackal9301)\ **Replies:** 5\ **Last updated:** [December 9, 2015, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-indices-and-space/36536 "2015-12-09T15:17:29Z")
I'm starting an elasticsearch instance and i'm importing logs from logstash. Kibana is how I am viewing them after. My question is how does elasticsearch index the data? I create fields in logstash I want to search by ho… --- ## [401 Unauthorized Error](https://discuss.elastic.co/t/401-unauthorized-error/99460)
**Author:** [@Ratnakar\_Sadasyula](https://discuss.elastic.co/u/Ratnakar_Sadasyula)\ **Replies:** 1\ **Last updated:** [September 6, 2017, 11:12am UTC](https://discuss.elastic.co/t/401-unauthorized-error/99460 "2017-09-06T11:12:36Z")
Hi I installed MetricBeat 5.5.x on Windows along with ElasticSearch 5.5.2, I started ElasticSearch and MetricBeat, confirmed it is running with localhost:9200 I also started MetricBeat, however in the log file this i… --- ## [Beta issues](https://discuss.elastic.co/t/beta-issues/61987)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 6\ **Last updated:** [October 4, 2016, 9:05pm UTC](https://discuss.elastic.co/t/beta-issues/61987 "2016-10-04T21:05:45Z")
Guess that's why they call it a beta :wink: Per first-event \[07:07:33 @tester:/usr/share/logstash$\] bin/logstash -e 'input { stdin { } } output { stdout {} }' ArgumentError: Path "/usr/share/logstash/data" is not a di… --- ## [Kv variable with multiple types](https://discuss.elastic.co/t/kv-variable-with-multiple-types/42102)
**Author:** [@angelsmile](https://discuss.elastic.co/u/angelsmile)\ **Replies:** 6\ **Last updated:** [February 24, 2016, 6:31pm UTC](https://discuss.elastic.co/t/kv-variable-with-multiple-types/42102 "2016-02-24T18:31:43Z")
Hi, I have used kv filter in logstash configuration file. A variable "jobname" created by kv originally had the type of integer according to its value, "jobname=40000" but now in some documents the values of the v… --- ## [Filebeat kubernetes provider mixed logs another containers from same pod](https://discuss.elastic.co/t/filebeat-kubernetes-provider-mixed-logs-another-containers-from-same-pod/283784)
**Author:** [@froheik](https://discuss.elastic.co/u/froheik)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 3:55pm UTC](https://discuss.elastic.co/t/filebeat-kubernetes-provider-mixed-logs-another-containers-from-same-pod/283784 "2021-09-13T15:55:45Z")
Hi guys. May be anyone can check that? Im using daemonset of filebeat 7.14.1 in openshift cluster with config filebeat.autodiscover: providers: - type: kubernetes include\_pod\_uid: true … --- ## [Visualization Filters not applied in DashBoard](https://discuss.elastic.co/t/visualization-filters-not-applied-in-dashboard/184624)
**Author:** [@ChristianSousa](https://discuss.elastic.co/u/ChristianSousa)\ **Replies:** 4\ **Last updated:** [June 6, 2019, 10:37pm UTC](https://discuss.elastic.co/t/visualization-filters-not-applied-in-dashboard/184624 "2019-06-06T22:37:14Z")
So I have made a visualization that has some data filtered out by name. However when I put this visualization on a dashboard the filter was not applied to the visualization. I also don't want to apply this filter to the … --- ## [Metricbeat stuck on "net/http: request canceled (Client.Timeout exceeded while awaiting headers)"](https://discuss.elastic.co/t/metricbeat-stuck-on-net-http-request-canceled-client-timeout-exceeded-while-awaiting-headers/273177)
**Author:** [@just-a-devops-mby](https://discuss.elastic.co/u/just-a-devops-mby)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 2:23pm UTC](https://discuss.elastic.co/t/metricbeat-stuck-on-net-http-request-canceled-client-timeout-exceeded-while-awaiting-headers/273177 "2021-05-17T14:23:05Z")
Hi! I'm having trouble with loading template into Elasticsearch. My cluster currently contains only one VM. Since i finished it's set up i moved into shipping data from the external VM via Metricbeat... and it didn't … --- ## [Kibana 8.14.0/7.17.22 Security Update (ESA-2024-10)](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 2:09pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502 "2024-06-14T14:09:17Z")
Kibana open redirect issue (ESA-2024-10). An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. Affected Versio… --- ## [Grok Parse Error, and input to output formatting using grok and json\_encode filter](https://discuss.elastic.co/t/grok-parse-error-and-input-to-output-formatting-using-grok-and-json-encode-filter/123285)
**Author:** [@Prabh\_Natt](https://discuss.elastic.co/u/Prabh_Natt)\ **Replies:** 3\ **Last updated:** [March 13, 2018, 9:53pm UTC](https://discuss.elastic.co/t/grok-parse-error-and-input-to-output-formatting-using-grok-and-json-encode-filter/123285 "2018-03-13T21:53:38Z")
Error in command prompt: { "@timestamp" =\> 2018-03-09T14:18:26.524Z, "tags" =\> \[ \[0\] "\_grokparsefailure" \], "json\_message" =\> "input : {" } { "@timestamp" =\> 2018-03-09T14:18:26.524Z, "tags" =\> \[ \[0\] "\_grokpar… --- ## [Kibana 4.4.1, 4.3.2, 4.1.5 - Updated node.js versions due to upstream vulnerabilities](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643)
**Author:** [@Court](https://discuss.elastic.co/u/Court)\ **Replies:** 0\ **Last updated:** [February 12, 2016, 5:01pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643 "2016-02-12T17:01:35Z")
Summary: The bundled versions of node.js in Kibana contain HTTP-related security vulnerabilities. Fixed versions of node.js were recently released. For the original node.js security announcement, see https://nodejs.… --- ## [Splitting a column in a csv](https://discuss.elastic.co/t/splitting-a-column-in-a-csv/72043)
**Author:** [@Pokecallum](https://discuss.elastic.co/u/Pokecallum)\ **Replies:** 7\ **Last updated:** [January 24, 2017, 11:00am UTC](https://discuss.elastic.co/t/splitting-a-column-in-a-csv/72043 "2017-01-24T11:00:11Z")
I have a csv file simular to this Date|ID|Recipient|Subject 1-01-2016|123|test@test.com|A test 2-01-2016|124|test@test.com, test123@test.com|another test Sorry if this gets confusing, I have used | to show where each… --- ## [Logstash not starting with 'Cannot allocate memory' error](https://discuss.elastic.co/t/logstash-not-starting-with-cannot-allocate-memory-error/88558)
**Author:** [@aarishramesh](https://discuss.elastic.co/u/aarishramesh)\ **Replies:** 0\ **Last updated:** [June 7, 2017, 10:59am UTC](https://discuss.elastic.co/t/logstash-not-starting-with-cannot-allocate-memory-error/88558 "2017-06-07T10:59:47Z")
I have set up ELK in my aws t2.medium instance (4 GB RAM) & it was working fine until today morning when logstash failed. This was the error I encountered while trying to start logstash Java HotSpot(TM) 64-Bit Server V… --- ## [Problem starting elasticsearch: "\\Common not expected"](https://discuss.elastic.co/t/problem-starting-elasticsearch-common-not-expected/132826)
**Author:** [@Samuele\_Colmi](https://discuss.elastic.co/u/Samuele_Colmi)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 7:50pm UTC](https://discuss.elastic.co/t/problem-starting-elasticsearch-common-not-expected/132826 "2018-05-23T19:50:53Z")
Hello, I just installed elasticsearch and logstash on a Windows 10 (Java 1.8). The problem occourses when i try to run elasticsearch from terminal with: bin\\elasticsearch.bat it returns "\\Common not expected". i was f… --- ## [Discover: Failed to parse query](https://discuss.elastic.co/t/discover-failed-to-parse-query/121686)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [March 2, 2018, 10:53am UTC](https://discuss.elastic.co/t/discover-failed-to-parse-query/121686 "2018-03-02T10:53:18Z")
Hi, I believe that some of my logs make failed parsing process. Any help is appreciated. Below is the massage in Kibana Interface. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"query\_shard\_… --- ## [Logstash node memory settings](https://discuss.elastic.co/t/logstash-node-memory-settings/92475)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [July 12, 2017, 5:41pm UTC](https://discuss.elastic.co/t/logstash-node-memory-settings/92475 "2017-07-12T17:41:50Z")
Logstash node has 16GB RAM and max and min heap size has been set to 8GB. Seeing the following error when testing the logstash pipeline. What is the recommended setting to avoid this issue? Less than 8GB for min and ma… --- ## [Kibana \[6.7.2\] How to customize left navigation bar?](https://discuss.elastic.co/t/kibana-6-7-2-how-to-customize-left-navigation-bar/181643)
**Author:** [@swood1](https://discuss.elastic.co/u/swood1)\ **Replies:** 5\ **Last updated:** [May 21, 2019, 12:33pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-how-to-customize-left-navigation-bar/181643 "2019-05-21T12:33:01Z")
I am trying to change the color of the left nav bar in kibana 6.7.2. I've opened up dev tools and found the class definition where the background color is applied. I've found the \_global\_nav.scss file where the css i… --- ## [Split bars on visualisation by using custom query](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411)
**Author:** [@byakku](https://discuss.elastic.co/u/byakku)\ **Replies:** 5\ **Last updated:** [July 5, 2018, 3:37pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411 "2018-07-05T15:37:37Z")
Hello everyone. I have two folders in my source (using wildcards) and I have created visualisation based on this. The big picture is that, I'm visualising amount of errors/failed builds from Jenkins log, now I want to … --- ## [Is there any way to set backup as full or incremental manually?](https://discuss.elastic.co/t/is-there-any-way-to-set-backup-as-full-or-incremental-manually/56808)
**Author:** [@leonzhan](https://discuss.elastic.co/u/leonzhan)\ **Replies:** 5\ **Last updated:** [July 31, 2016, 2:26am UTC](https://discuss.elastic.co/t/is-there-any-way-to-set-backup-as-full-or-incremental-manually/56808 "2016-07-31T02:26:46Z")
As I known, the first snapshot backup after creating repo is full backup, after that, it's incremental by default. But it seems there is no way to set the mode manually. Is there any one has the experience, please share,… --- ## [Scripted field: Read field data from a document using doc\[‘some\_field’\].value return null in some cases](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-field-value-return-null-in-some-cases/187385)
**Author:** [@dreamer1](https://discuss.elastic.co/u/dreamer1)\ **Replies:** 6\ **Last updated:** [July 30, 2019, 9:00am UTC](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-field-value-return-null-in-some-cases/187385 "2019-07-30T09:00:26Z")
hi, on my document I have a field always populated. It's a string field and it can contains data like json or XML. I created this scripted field to find problem. def myField = doc\['myfield'\].value; if (payload != nu… --- ## [Unable to install the elapsed plugin on windows](https://discuss.elastic.co/t/unable-to-install-the-elapsed-plugin-on-windows/74609)
**Author:** [@GautamP](https://discuss.elastic.co/u/GautamP)\ **Replies:** 6\ **Last updated:** [February 13, 2017, 8:46am UTC](https://discuss.elastic.co/t/unable-to-install-the-elapsed-plugin-on-windows/74609 "2017-02-13T08:46:46Z")
Continuing the discussion from Query to access distinct fields from different documents: I'm trying to install the logstash elapsed plugin on windows 7. I ran the code C:\\ELK\\logstash-5.2.0\\bin\>logstash-plugin.bat in… --- ## [Kibana search for last 24h wait for warm nodes](https://discuss.elastic.co/t/kibana-search-for-last-24h-wait-for-warm-nodes/71968)
**Author:** [@mkostrikin](https://discuss.elastic.co/u/mkostrikin)\ **Replies:** 6\ **Last updated:** [January 19, 2017, 6:30am UTC](https://discuss.elastic.co/t/kibana-search-for-last-24h-wait-for-warm-nodes/71968 "2017-01-19T06:30:18Z")
Hello, We have a ELK stack with hot/warm ES nodes, 3 node for hot and 3 node for warm. We keep 7 days in hot, older moved to warm. We expect searches for last 24 hour will load only hot ES nodes, but kibana keep waiti… --- ## [How to port dev tool queries to into the dashboard?](https://discuss.elastic.co/t/how-to-port-dev-tool-queries-to-into-the-dashboard/134678)
**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 2:53pm UTC](https://discuss.elastic.co/t/how-to-port-dev-tool-queries-to-into-the-dashboard/134678 "2018-06-06T14:53:02Z")
We are about to onboard Elasticsearch + Kibana in our environment. That said, I have been using Kibana dev tools to run queries and I have gotten a pretty good feel for it now. Now that I have gotten past that hurdle, … --- ## [Aggregate based on regular expression in service url](https://discuss.elastic.co/t/aggregate-based-on-regular-expression-in-service-url/92530)
**Author:** [@Arnab\_Karmakar](https://discuss.elastic.co/u/Arnab_Karmakar)\ **Replies:** 3\ **Last updated:** [July 11, 2017, 8:21pm UTC](https://discuss.elastic.co/t/aggregate-based-on-regular-expression-in-service-url/92530 "2017-07-11T20:21:20Z")
Currently API looks like /AddressWEB/address/v5/addresses/some\_dynamic\_id. Now the way I am able to create the visualization, in that unique row is coming for each some\_dynamic\_id. But I want to get a single row like … --- ## [How to output errors to console? APM is only sending them to the server](https://discuss.elastic.co/t/how-to-output-errors-to-console-apm-is-only-sending-them-to-the-server/236102)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [June 7, 2020, 6:58pm UTC](https://discuss.elastic.co/t/how-to-output-errors-to-console-apm-is-only-sending-them-to-the-server/236102 "2020-06-07T18:58:17Z")
Hello, I'd like to print the errors to console (stdout, stderr) instead of only sending them to the APM server. Acctually what is happening now is that even compilation errors (Typescript) are being sent to the server, … --- ## [Elastic Cloud Enterprise beta1 released!](https://discuss.elastic.co/t/elastic-cloud-enterprise-beta1-released/77267)
**Author:** [@uricohen](https://discuss.elastic.co/u/uricohen)\ **Replies:** 0\ **Last updated:** [March 3, 2017, 6:02am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-beta1-released/77267 "2017-03-03T06:02:18Z")
Hi all We're happy to announce the release of Elastic Cloud Enterprise beta1. This marks a significant milestone towards the first GA version of Elastic Cloud Enterprise, and contains most of the features planned for … --- ## [Logstash import file from url](https://discuss.elastic.co/t/logstash-import-file-from-url/281067)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 8\ **Last updated:** [August 13, 2021, 12:10pm UTC](https://discuss.elastic.co/t/logstash-import-file-from-url/281067 "2021-08-13T12:10:22Z")
I am new to Elasticsearch and Logstash, i just need to parse json data from url. Json link is : https://www.circl.lu/doc/misp/feed-osint/0165e5d7-51e6-4c2e-a382-1dd1e706f7bb.json this is my logstash conf file: input {… --- ## [Need help with a metric count](https://discuss.elastic.co/t/need-help-with-a-metric-count/199961)
**Author:** [@richard\_hobbs](https://discuss.elastic.co/u/richard_hobbs)\ **Replies:** 8\ **Last updated:** [September 19, 2019, 6:49am UTC](https://discuss.elastic.co/t/need-help-with-a-metric-count/199961 "2019-09-19T06:49:47Z")
Hi all, i am new here and i am learning the programming but i am very new so please bear with me and i do hope some kind soul can help me with my troubles. I am looking for a metric widget to show a number of products i… --- ## [Elasticsearch random scoring with filters](https://discuss.elastic.co/t/elasticsearch-random-scoring-with-filters/157253)
**Author:** [@abeering](https://discuss.elastic.co/u/abeering)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 12:15am UTC](https://discuss.elastic.co/t/elasticsearch-random-scoring-with-filters/157253 "2018-11-20T00:15:38Z")
I've got a situation, using ES 6.2, where I can either perform a bool or a random\_score , but not both at the same time. Here is one of those potential queries: { "from": 0, "size": 50, "query": { "function… --- ## [Logstash filling daemon.log](https://discuss.elastic.co/t/logstash-filling-daemon-log/151154)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 7\ **Last updated:** [October 9, 2018, 9:21am UTC](https://discuss.elastic.co/t/logstash-filling-daemon-log/151154 "2018-10-09T09:21:56Z")
Hi, Since two days I run into a huge problem with my logstash. It runs fine during the day, but at night it runs crazy like feeding a mogwai after midnight. and I always get the same messages in my daemon.log: Oct 5… --- ## [Visualization Export - CSV](https://discuss.elastic.co/t/visualization-export-csv/179919)
**Author:** [@Rodrigo\_Padua](https://discuss.elastic.co/u/Rodrigo_Padua)\ **Replies:** 1\ **Last updated:** [May 9, 2019, 3:07am UTC](https://discuss.elastic.co/t/visualization-export-csv/179919 "2019-05-09T03:07:54Z")
Hello Everyone! I am using the visualization: "ElastiFlow: Source Autonomous Systems (bytes) - donut" to retrieve some data from my customer's equipment. As you can see below on the image, there are information about … --- ## [Two index pattern for same index, need to set different default time filter for each index pattern](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 2:39pm UTC](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829 "2021-03-02T14:39:35Z")
Hi, We have two timestamps in our document, during the index pattern creation we can only choose one timestamp for each index pattern, and that timestamp will affect the Kibana's Discover graph and the upper right corn… --- ## [Elastic, Xpack, users cannot be retrieved as native user service has not been started](https://discuss.elastic.co/t/elastic-xpack-users-cannot-be-retrieved-as-native-user-service-has-not-been-started/88701)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 5\ **Last updated:** [June 12, 2017, 10:04am UTC](https://discuss.elastic.co/t/elastic-xpack-users-cannot-be-retrieved-as-native-user-service-has-not-been-started/88701 "2017-06-12T10:04:46Z")
I have been playing around with ES for a while now. It got a stage where the company wants to see a demo of the monitoring / security functions that ES offer. I have been using a version of the Ansible playbook, with … --- ## [+1 for automatic acknowledgement in watcher](https://discuss.elastic.co/t/1-for-automatic-acknowledgement-in-watcher/87824)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 5\ **Last updated:** [June 2, 2017, 12:29am UTC](https://discuss.elastic.co/t/1-for-automatic-acknowledgement-in-watcher/87824 "2017-06-02T00:29:17Z")
Hi, I see a couple questions from last year about the capability to automatically acknowledge a watch within the definition of a watch itself (including links to those questions below, for reference). Are there any upd… --- ## [Why does cluster.routing.allocation.exclude.\_ip only work as a transient, not persistent setting?](https://discuss.elastic.co/t/why-does-cluster-routing-allocation-exclude-ip-only-work-as-a-transient-not-persistent-setting/344419)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 3\ **Last updated:** [October 5, 2023, 7:12am UTC](https://discuss.elastic.co/t/why-does-cluster-routing-allocation-exclude-ip-only-work-as-a-transient-not-persistent-setting/344419 "2023-10-05T07:12:47Z")
Just a sanity check... trying to remove a node by setting cluster.routing.allocation.exclude.\_ip does not seem to have any effect if it's a persistent setting. Tested with elasticesarch 7.17.13 on a 3-node cluster. When … --- ## [Update array on source](https://discuss.elastic.co/t/update-array-on-source/44951)
**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 9:49am UTC](https://discuss.elastic.co/t/update-array-on-source/44951 "2016-03-21T09:49:33Z")
Hi guys, I use Elasticsearch 2.2.0 and I tried to update array inside a source here is my source { "list":\[ { "tweet\_id":"1", "a":"b" }, { "tweet\_id":"123", "a":"… --- ## [Kibana 4.4.0 - error on sratrup](https://discuss.elastic.co/t/kibana-4-4-0-error-on-sratrup/40368)
**Author:** [@pavelb](https://discuss.elastic.co/u/pavelb)\ **Replies:** 3\ **Last updated:** [January 31, 2016, 9:51am UTC](https://discuss.elastic.co/t/kibana-4-4-0-error-on-sratrup/40368 "2016-01-31T09:51:18Z")
Hi, I've downloaded kibana 4.4.0 from GIT (zip file) and get the following error on startup. Could someone help? module.js:340 throw err; ^ Error: Cannot find module 'lodash' at Function.Module.\_res… --- ## [What's the logic or algorithm for allocation of primary shard or replica when node joins cluster?](https://discuss.elastic.co/t/whats-the-logic-or-algorithm-for-allocation-of-primary-shard-or-replica-when-node-joins-cluster/9442)
**Author:** [@SuoNayi](https://discuss.elastic.co/u/SuoNayi)\ **Replies:** 3\ **Last updated:** [October 25, 2012, 2:54am UTC](https://discuss.elastic.co/t/whats-the-logic-or-algorithm-for-allocation-of-primary-shard-or-replica-when-node-joins-cluster/9442 "2012-10-25T02:54:18Z")
Hi all, I have googled a lot but found nothing about the logic for allocation of shard and replica when node joins the cluster. If it's not evenly distributed shards and replicas, can I controll alloc… --- ## [Does ignoreFilterIfFieldNotInIndex still work?](https://discuss.elastic.co/t/does-ignorefilteriffieldnotinindex-still-work/161544)
**Author:** [@dimitriwalters](https://discuss.elastic.co/u/dimitriwalters)\ **Replies:** 6\ **Last updated:** [January 15, 2019, 8:05pm UTC](https://discuss.elastic.co/t/does-ignorefilteriffieldnotinindex-still-work/161544 "2019-01-15T20:05:26Z")
It currently doesn't work for me - situation being I have a dashboard with two indices and filtering by a field from one of them does not ignore the filter on visuals for the other index. I see this issue on GitHub, w… --- ## [How can we index array of attachments](https://discuss.elastic.co/t/how-can-we-index-array-of-attachments/19499)
**Author:** [@sekharreddy\_mandapat](https://discuss.elastic.co/u/sekharreddy_mandapat)\ **Replies:** 6\ **Last updated:** [August 27, 2014, 6:31pm UTC](https://discuss.elastic.co/t/how-can-we-index-array-of-attachments/19499 "2014-08-27T18:31:35Z")
We have requirement of indexing email which have multiple attachments and we have to highlight the search results. How can i map the highlight string array to my multiple attachments. My index mapping is { "d… --- ## [Data Table timestamp on aggregation](https://discuss.elastic.co/t/data-table-timestamp-on-aggregation/114707)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 10:09pm UTC](https://discuss.elastic.co/t/data-table-timestamp-on-aggregation/114707 "2018-01-09T22:09:40Z")
Hello, Kind of stuck on this one so any help would be greatly appreciated. Lets say my data looks like this: monitoringtable: apples value: 100 timestamp: 1-min-interval monitoringtable: bannana value: 3000 times… [Previous page](https://discuss.elastic.co/top.md?page=811&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=813&per_page=50&period=all)