# Top **URL:** https://discuss.elastic.co/top.md?page=814&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 815 --- ## [Range on Sum Aggregation](https://discuss.elastic.co/t/range-on-sum-aggregation/131066)
**Author:** [@Vijay\_arora1](https://discuss.elastic.co/u/Vijay_arora1)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 3:11am UTC](https://discuss.elastic.co/t/range-on-sum-aggregation/131066 "2018-05-11T03:11:01Z")
I am trying to write a query which would give me the count of Ids where sum total of transactions fall into a certain range. In terms of SQL query something like: Select ProductId from SaleTransactions where SalesQu… --- ## [Kibana Status page - what does it show?](https://discuss.elastic.co/t/kibana-status-page-what-does-it-show/35520)
**Author:** [@Den](https://discuss.elastic.co/u/Den)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 6:30pm UTC](https://discuss.elastic.co/t/kibana-status-page-what-does-it-show/35520 "2015-11-25T18:30:30Z")
On Kibana status page it shows Heap Used (GB). It is Kibana Heap or Elastic Search heap? Also it is growing, but we only query the data for the last day, does elasticsearch keep all indices in memory that is why it growi… --- ## [Custom/Derived Metric?](https://discuss.elastic.co/t/custom-derived-metric/235625)
**Author:** [@mpn17](https://discuss.elastic.co/u/mpn17)\ **Replies:** 3\ **Last updated:** [July 17, 2020, 1:54pm UTC](https://discuss.elastic.co/t/custom-derived-metric/235625 "2020-07-17T13:54:18Z")
Hi All! I'm new to Elasticsearch and Kibana and trying to figure out the best way to create a custom metric that takes into account the current value of other metrics. For example lets say I want to create a custom str… --- ## [Repository discovery and Sync on Redhat Satellite](https://discuss.elastic.co/t/repository-discovery-and-sync-on-redhat-satellite/188682)
**Author:** [@ajaisam](https://discuss.elastic.co/u/ajaisam)\ **Replies:** 3\ **Last updated:** [July 3, 2019, 2:54pm UTC](https://discuss.elastic.co/t/repository-discovery-and-sync-on-redhat-satellite/188682 "2019-07-03T14:54:18Z")
Hi all, I am trying to get the rpms from elastic synced to my Redhat Satellite server and I keep getting url not found. The url is "https://artifacts.elastic.co/packages/7.x/yum" Does anyone on the community have expe… --- ## [Adjust\_pure\_negative](https://discuss.elastic.co/t/adjust-pure-negative/184945)
**Author:** [@pangying](https://discuss.elastic.co/u/pangying)\ **Replies:** 0\ **Last updated:** [June 10, 2019, 8:34am UTC](https://discuss.elastic.co/t/adjust-pure-negative/184945 "2019-06-10T08:34:17Z")
请问有人知道下面这段是什么意思吗 "bool": { "adjust\_pure\_negative": true, "boost": 1 } --- ## [Grafana Shard Limit 1000](https://discuss.elastic.co/t/grafana-shard-limit-1000/77298)
**Author:** [@ariceELK](https://discuss.elastic.co/u/ariceELK)\ **Replies:** 3\ **Last updated:** [March 14, 2017, 1:26pm UTC](https://discuss.elastic.co/t/grafana-shard-limit-1000/77298 "2017-03-14T13:26:43Z")
Hi, Im using ES v5.2.0 and Grafana v4.1 Im getting an error in Grafana when the number of shards in ES is over 1000. Grafana won't display any data. Is there a setting to increase this limit ? Thanks Aidan --- ## [How to use the Java API to build an Aggregation from JSON in 6.2.4?](https://discuss.elastic.co/t/how-to-use-the-java-api-to-build-an-aggregation-from-json-in-6-2-4/131129)
**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\ **Replies:** 4\ **Last updated:** [May 25, 2018, 10:05am UTC](https://discuss.elastic.co/t/how-to-use-the-java-api-to-build-an-aggregation-from-json-in-6-2-4/131129 "2018-05-25T10:05:57Z")
I found the same question here. But this is not working in ES 6.2.4. In old version, we can do this: SearchRequestBuilder builder = client.prepareSearch(index); QueryBuilder queryBuilder = getQueryBuilder(query); bui… --- ## [Visulizing the count of words in a pdf](https://discuss.elastic.co/t/visulizing-the-count-of-words-in-a-pdf/122850)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 4\ **Last updated:** [March 8, 2018, 1:33pm UTC](https://discuss.elastic.co/t/visulizing-the-count-of-words-in-a-pdf/122850 "2018-03-08T13:33:23Z")
Hello, I want to make a visulation of the count of words in a pdf. I have enabled the datafield to true. I found here the response that i can make a term aggregation in the field that contains my pdf but that dosen't … --- ## [Rasppbery(ARM) install filebeat](https://discuss.elastic.co/t/rasppbery-arm-install-filebeat/207525)
**Author:** [@111236](https://discuss.elastic.co/u/111236)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 6:57pm UTC](https://discuss.elastic.co/t/rasppbery-arm-install-filebeat/207525 "2019-11-14T18:57:49Z")
i can't install filebeat on Rasppbery(ARM). I followed: https://www.elasticice.net/?p=92 How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3) http://www.programmersought.com/article/31601555670/ as a resu… --- ## [Terms query not working with nested documents](https://discuss.elastic.co/t/terms-query-not-working-with-nested-documents/175126)
**Author:** [@Harsha\_Yerasi](https://discuss.elastic.co/u/Harsha_Yerasi)\ **Replies:** 1\ **Last updated:** [April 12, 2019, 9:49am UTC](https://discuss.elastic.co/t/terms-query-not-working-with-nested-documents/175126 "2019-04-12T09:49:25Z")
Hi, I am using JAVA API to implement elasticsearch. I have a nested document in my index. I am trying to perform a terms query on that nested document. But It doesn't give any results. When I googled it I found the be… --- ## [Elasticsearch | Highlight of integer fields when wildcard is used](https://discuss.elastic.co/t/elasticsearch-highlight-of-integer-fields-when-wildcard-is-used/169762)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 5\ **Last updated:** [March 25, 2019, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-highlight-of-integer-fields-when-wildcard-is-used/169762 "2019-03-25T13:57:01Z")
I have indexed a document containing integers . Mapping of these fields are : "INTEGER\_FIELD": { "type": "integer", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } } Search query is : … --- ## [Stdin LogStash](https://discuss.elastic.co/t/stdin-logstash/89040)
**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\ **Replies:** 5\ **Last updated:** [June 12, 2017, 1:46pm UTC](https://discuss.elastic.co/t/stdin-logstash/89040 "2017-06-12T13:46:12Z")
Hi there, i am working to parse a log file that contains message with one line and multiline like below : Exception in thread "main" java.lang.NullPointerException at com.example.myproject.Book.getTitle(Book.ja… --- ## [Elastic Search Plugin Red - Kibana Timeout error request](https://discuss.elastic.co/t/elastic-search-plugin-red-kibana-timeout-error-request/100579)
**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\ **Replies:** 3\ **Last updated:** [September 18, 2017, 2:36pm UTC](https://discuss.elastic.co/t/elastic-search-plugin-red-kibana-timeout-error-request/100579 "2017-09-18T14:36:09Z")
Hello All, I started using the community catalog entry of elasticsearch under Rancher . It is a cluster of 2 data nodes, 1 master node, 1 client node. I started seeing a disconnect of Elasticsearch changing to status … --- ## [Best approach for adding columns to a simple Data Table visualization](https://discuss.elastic.co/t/best-approach-for-adding-columns-to-a-simple-data-table-visualization/238195)
**Author:** [@Reuven\_Weiser](https://discuss.elastic.co/u/Reuven_Weiser)\ **Replies:** 2\ **Last updated:** [July 1, 2020, 11:35am UTC](https://discuss.elastic.co/t/best-approach-for-adding-columns-to-a-simple-data-table-visualization/238195 "2020-07-01T11:35:34Z")
I'm trying to create some simple Data Table visualizations in Kibana 7.4.2, essentially mimicking the results of a Saved Search in Discover, with of course the added ability to download a CSV export. Assume my index is … --- ## [Logstash and ILM rollover](https://discuss.elastic.co/t/logstash-and-ilm-rollover/237450)
**Author:** [@nikita2206](https://discuss.elastic.co/u/nikita2206)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logstash-and-ilm-rollover/237450 "2020-06-17T14:46:01Z")
Every tutorial or manual out there talks about integrating Filebeat with ILM rollover. We're not using Filebeat (it doesn't really make sense to send logs through actual files when we could do that without involving file… --- ## [Message\_format in otput "file"](https://discuss.elastic.co/t/message-format-in-otput-file/32006)
**Author:** [@neolithik](https://discuss.elastic.co/u/neolithik)\ **Replies:** 7\ **Last updated:** [March 24, 2016, 7:13am UTC](https://discuss.elastic.co/t/message-format-in-otput-file/32006 "2016-03-24T07:13:02Z")
hello, i have in input json file like this { "\_index": "null", "\_type": "logs", "\_id": "Wh7cLM6uT0mmSLnqOrWxQw", "\_score": null, "\_source": { "host": "null", "@timestamp": "2015-10-12T12:09:12.338Z", … --- ## [Metricbeat Kibana dashboard not loading](https://discuss.elastic.co/t/metricbeat-kibana-dashboard-not-loading/229348)
**Author:** [@Keevin\_Ace\_Viray](https://discuss.elastic.co/u/Keevin_Ace_Viray)\ **Replies:** 8\ **Last updated:** [April 23, 2020, 7:33pm UTC](https://discuss.elastic.co/t/metricbeat-kibana-dashboard-not-loading/229348 "2020-04-23T19:33:02Z")
Hi, I have setup Metricbeat(System module) -\> Kafka -\> Logstash -\> Elasticsearch -\> Kibana on our Linux local environment. I can see from the Discovery tab in Kibana that there is a lot of hits coming from Metricbeat, b… --- ## [Security - how to avoid exposing app search keys (searchKey,host identifier,engineName) in search ui](https://discuss.elastic.co/t/security-how-to-avoid-exposing-app-search-keys-searchkey-host-identifier-enginename-in-search-ui/207993)
**Author:** [@Swapnil\_Ghorpade](https://discuss.elastic.co/u/Swapnil_Ghorpade)\ **Replies:** 8\ **Last updated:** [November 19, 2019, 12:23pm UTC](https://discuss.elastic.co/t/security-how-to-avoid-exposing-app-search-keys-searchkey-host-identifier-enginename-in-search-ui/207993 "2019-11-19T12:23:32Z")
I'm using app search with search ui GitHub - elastic/search-ui: Search UI. Libraries for the fast development of modern, engaging search experiences. Everything looks great about search ui except security. All keys Cred… --- ## [Problem accessing charts and artifacts from hetzner.de servers](https://discuss.elastic.co/t/problem-accessing-charts-and-artifacts-from-hetzner-de-servers/300840)
**Author:** [@nymous](https://discuss.elastic.co/u/nymous)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 8:11am UTC](https://discuss.elastic.co/t/problem-accessing-charts-and-artifacts-from-hetzner-de-servers/300840 "2022-03-30T08:11:23Z")
Hi folks! I have a strange issue with getting artifacts (debs, helm charts) from elastic.co for my cloud at Hetzner.de. Some servers are downloading them fine, but others just get 403 error. Is there a reason for that, d… --- ## [Filebeat not Generating Service Logs in Windows 10](https://discuss.elastic.co/t/filebeat-not-generating-service-logs-in-windows-10/228245)
**Author:** [@oneoneonepig](https://discuss.elastic.co/u/oneoneonepig)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 7:11am UTC](https://discuss.elastic.co/t/filebeat-not-generating-service-logs-in-windows-10/228245 "2020-04-16T07:11:53Z")
Filebeat is not generating service logs. It was installed using the script ".\\install-service-filebeat.ps1" It was generating logs few hours ago, it stops generating logs after I deleted the "logs" directory. All conf… --- ## [Log entry disappears between Logstash and Kibana](https://discuss.elastic.co/t/log-entry-disappears-between-logstash-and-kibana/225850)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 6\ **Last updated:** [April 3, 2020, 2:20pm UTC](https://discuss.elastic.co/t/log-entry-disappears-between-logstash-and-kibana/225850 "2020-04-03T14:20:09Z")
Hello, Logstash is processing an event with: eventid set to cowrie.command.input message and input containing Unix commands Mar 31 10:26:02 instance-42 logstash\[22592\]: { Mar 31 10:26:02 instance-42 logstash\[22592… --- ## [Mapper turns out to be very slow](https://discuss.elastic.co/t/mapper-turns-out-to-be-very-slow/131877)
**Author:** [@machong](https://discuss.elastic.co/u/machong)\ **Replies:** 6\ **Last updated:** [May 24, 2018, 3:52pm UTC](https://discuss.elastic.co/t/mapper-turns-out-to-be-very-slow/131877 "2018-05-24T15:52:36Z")
I'm using eshadoop lib to do some data process work. the hadoop application seems to get stuck when the mapper progress reached 80%. I tried to add some debug message into mapper and found that the program is not blocked… --- ## [Error since upgrade from 2.4.1 -\> 5.6.4](https://discuss.elastic.co/t/error-since-upgrade-from-2-4-1-5-6-4/108627)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 6:10am UTC](https://discuss.elastic.co/t/error-since-upgrade-from-2-4-1-5-6-4/108627 "2017-11-22T06:10:43Z")
I recently upgraded from 2.4.1 to 5.6.4 (on my way to 6.0 eventually...) and I'm seeing the following error every 10 seconds in the elasticsearch log when I have any of the monitoring tabs open in kibana. If I switch to… --- ## [Show country name instead of geohash\_grid in visualize-spy section under world map](https://discuss.elastic.co/t/show-country-name-instead-of-geohash-grid-in-visualize-spy-section-under-world-map/49181)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 6\ **Last updated:** [May 5, 2016, 11:20pm UTC](https://discuss.elastic.co/t/show-country-name-instead-of-geohash-grid-in-visualize-spy-section-under-world-map/49181 "2016-05-05T23:20:30Z")
Hi, For a world map visual, when I click on the down arrow at the bottom of the map, a section opens showing a table with the data for the map. Please see attached image. There is a "geohash\_grid" column that is not… --- ## [Return highlighted fragments and full highlighted field in same request](https://discuss.elastic.co/t/return-highlighted-fragments-and-full-highlighted-field-in-same-request/47047)
**Author:** [@patrick.gerzanics](https://discuss.elastic.co/u/patrick.gerzanics)\ **Replies:** 2\ **Last updated:** [April 12, 2016, 6:37am UTC](https://discuss.elastic.co/t/return-highlighted-fragments-and-full-highlighted-field-in-same-request/47047 "2016-04-12T06:37:52Z")
My apologies in advance as I'm new to ES. This is kind of a strange use-case, but we have a large text field that we would like to do 2 things with: 1. Show the first X chars of the body text with any search results hi… --- ## [Elastic Search with SQL connection getting issue:\[discovery.zen.ping.multicast\] \[Vibro\] multicast failed to start \[SocketException\[An invalid argument was supplied\]\], disabling. Consider using IPv4 only (by defining env. variable \`ES\_USE\_IPV4\`)](https://discuss.elastic.co/t/elastic-search-with-sql-connection-getting-issue-discovery-zen-ping-multicast-vibro-multicast-failed-to-start-socketexception-an-invalid-argument-was-supplied-disabling-consider-using-ipv4-only-by-defining-env-variable-es-use-ipv4/24936)
**Author:** [@poonam](https://discuss.elastic.co/u/poonam)\ **Replies:** 5\ **Last updated:** [July 7, 2015, 10:52am UTC](https://discuss.elastic.co/t/elastic-search-with-sql-connection-getting-issue-discovery-zen-ping-multicast-vibro-multicast-failed-to-start-socketexception-an-invalid-argument-was-supplied-disabling-consider-using-ipv4-only-by-defining-env-variable-es-use-ipv4/24936 "2015-07-07T10:52:23Z")
HI,i am trying to connect to sql database and feed data to elastic search engine.i used sense to feed data PUT http://localhost:9200/\_river/orders\_river/\_meta { "type":"jdbc", "jdbc": { "driver": "com.microso… --- ## [Memory Lock Setting Fails Bootstrap ES 6.1.1](https://discuss.elastic.co/t/memory-lock-setting-fails-bootstrap-es-6-1-1/117709)
**Author:** [@wrinehart](https://discuss.elastic.co/u/wrinehart)\ **Replies:** 0\ **Last updated:** [January 30, 2018, 10:10pm UTC](https://discuss.elastic.co/t/memory-lock-setting-fails-bootstrap-es-6-1-1/117709 "2018-01-30T22:10:47Z")
Howdy, I am having issues getting 'bootstrap.memory\_lock: true' working with an ES version 6.1.1 cluster. \[2018-01-30T15:52:39,313\]\[WARN \]\[o.e.b.JNANatives \] Unable to lock JVM Memory: error=12, reason=Cannot allocate … --- ## [Kibana to reload certificates on change](https://discuss.elastic.co/t/kibana-to-reload-certificates-on-change/214310)
**Author:** [@danlsgiga](https://discuss.elastic.co/u/danlsgiga)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 4:58pm UTC](https://discuss.elastic.co/t/kibana-to-reload-certificates-on-change/214310 "2020-01-09T16:58:40Z")
I have Kibana 7.5.1 running on Docker and certificates being managed by Vault (short lived certificates) in our environment. I noticed that when Vault replace the certificate and private\_key files, Kibana is not aware of… --- ## [Elasticsearch filter and input on different events](https://discuss.elastic.co/t/elasticsearch-filter-and-input-on-different-events/104716)
**Author:** [@falco\_rocks](https://discuss.elastic.co/u/falco_rocks)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-filter-and-input-on-different-events/104716 "2017-10-24T09:07:12Z")
Hello. I am having serious trouble understanding if this is even possible. I have an elasticsearch index containing two types of information: messages and parts. I want to unify some of the events in the index into a … --- ## [Logstash sends the log to elasticsearch and Syslog-ng or rsyslog(multiple outputs) which keeps the original log](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322)
**Author:** [@tobyvu](https://discuss.elastic.co/u/tobyvu)\ **Replies:** 7\ **Last updated:** [February 10, 2022, 4:17am UTC](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322 "2022-02-10T04:17:17Z")
I am wanting to configure the log from: Filebeat -\> Logstash -\> Elasticsearch and syslog-ng(or rsyslog). I configured with Syslog-ng to get the log following the instructions at: Sending logs from Logstash to syslog-ng … --- ## [How to Display Current Value of Metric](https://discuss.elastic.co/t/how-to-display-current-value-of-metric/63794)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 1\ **Last updated:** [October 24, 2016, 11:39pm UTC](https://discuss.elastic.co/t/how-to-display-current-value-of-metric/63794 "2016-10-24T23:39:27Z")
I'm trying to build visualizations to monitor a bunch of metrics on kafka. When looking at the options for aggregation in creating a visualization, there are things like max, min, avg, but is there an option for "latest"… --- ## [Change in Download URL Pattern?](https://discuss.elastic.co/t/change-in-download-url-pattern/51557)
**Author:** [@Alexander\_Trumper](https://discuss.elastic.co/u/Alexander_Trumper)\ **Replies:** 7\ **Last updated:** [June 10, 2016, 8:55am UTC](https://discuss.elastic.co/t/change-in-download-url-pattern/51557 "2016-06-10T08:55:48Z")
Hi, I just wondered why some download links point to https://download.elasticsearch.org instead of http://download.elastic.co for the new 5.0 alpha builds? Is this intended and will this be the new URL pattern? I as… --- ## [How to Generate UUID from Index Name?](https://discuss.elastic.co/t/how-to-generate-uuid-from-index-name/323979)
**Author:** [@Nebula](https://discuss.elastic.co/u/Nebula)\ **Replies:** 4\ **Last updated:** [January 26, 2023, 3:36am UTC](https://discuss.elastic.co/t/how-to-generate-uuid-from-index-name/323979 "2023-01-26T03:36:16Z")
Hello everyone, I have some index patterns setup in my Elasticsearch. I see the index name gets encoded as a UUID in the URL (the value for the key “index:” in the URL once an index is selected). How can I go about gen… --- ## [Can't import data to elasticsearch from csv, stops at "Successfully started Logstash API endpoint {:port=\>9600}"](https://discuss.elastic.co/t/cant-import-data-to-elasticsearch-from-csv-stops-at-successfully-started-logstash-api-endpoint-port-9600/167173)
**Author:** [@Pablo\_Yanez](https://discuss.elastic.co/u/Pablo_Yanez)\ **Replies:** 4\ **Last updated:** [February 5, 2019, 6:20pm UTC](https://discuss.elastic.co/t/cant-import-data-to-elasticsearch-from-csv-stops-at-successfully-started-logstash-api-endpoint-port-9600/167173 "2019-02-05T18:20:38Z")
I'm working on CentOS 7, this is my configuration file for Logstash: input { file { path =\> "/etc/logstash/files/Chile.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \["ID","region","population… --- ## [Visualizations size change in dashboard after import from Kibana 6.4.0 to Kibana 6.2.4](https://discuss.elastic.co/t/visualizations-size-change-in-dashboard-after-import-from-kibana-6-4-0-to-kibana-6-2-4/154238)
**Author:** [@barcomasile](https://discuss.elastic.co/u/barcomasile)\ **Replies:** 6\ **Last updated:** [October 29, 2018, 11:09am UTC](https://discuss.elastic.co/t/visualizations-size-change-in-dashboard-after-import-from-kibana-6-4-0-to-kibana-6-2-4/154238 "2018-10-29T11:09:29Z")
I exported every saved object (indices, searches, visualizations and dashboards) from an instance of Kibana 6.4.0 to another instance of Kibana 6.2.4 . The problem I encounter is after the import, the size of the panels… --- ## [Metricbeats sent through logstahs not showing up in dashboard](https://discuss.elastic.co/t/metricbeats-sent-through-logstahs-not-showing-up-in-dashboard/55249)
**Author:** [@rezz](https://discuss.elastic.co/u/rezz)\ **Replies:** 6\ **Last updated:** [January 18, 2017, 11:28am UTC](https://discuss.elastic.co/t/metricbeats-sent-through-logstahs-not-showing-up-in-dashboard/55249 "2017-01-18T11:28:13Z")
Hi Guys, I have installed following packages, metricbeat-5.0.0\_alpha4-1.x86\_64 logstash-5.0.0~alpha4-1.noarch kibana-5.0.0\_alpha4-1.x86\_64 elasticsearch-5.0.0\_alpha4-1.noarch and metricbeat work fine when I send it… --- ## [ESIntegTestCase nodePlugins issue when running from command line](https://discuss.elastic.co/t/esintegtestcase-nodeplugins-issue-when-running-from-command-line/71315)
**Author:** [@TronPaul](https://discuss.elastic.co/u/TronPaul)\ **Replies:** 6\ **Last updated:** [January 14, 2017, 3:05am UTC](https://discuss.elastic.co/t/esintegtestcase-nodeplugins-issue-when-running-from-command-line/71315 "2017-01-14T03:05:04Z")
I've got a fairly weird issue that I'm having trouble tracking down. I'm writing a plugin for a weighted average aggregation here. If I run the one integration test I have, WeightedAverageIT, via IntelliJ, the plugin I'm… --- ## [No cached mapping for this field!](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/235810)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [June 15, 2020, 2:07pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/235810 "2020-06-15T14:07:54Z")
Hello As the following image show i cant map many of my fields. I tried to refresh the index pattern but the problem persist. I checked the index template and i saw that dynamic mapping is enabled: I also used… --- ## [Performance Issue with Sub-Aggregations and Nested Document Structure?](https://discuss.elastic.co/t/performance-issue-with-sub-aggregations-and-nested-document-structure/76540)
**Author:** [@techtom](https://discuss.elastic.co/u/techtom)\ **Replies:** 2\ **Last updated:** [February 27, 2017, 6:59pm UTC](https://discuss.elastic.co/t/performance-issue-with-sub-aggregations-and-nested-document-structure/76540 "2017-02-27T18:59:32Z")
Hi, We have aggregations with sub-aggregations over several levels and a nested document structure. Running the aggregations takes up to 9 seconds with 20 million documents in the index. We are wondering whether 9 seco… --- ## [How to add payload to request in Kibana vis plugin?](https://discuss.elastic.co/t/how-to-add-payload-to-request-in-kibana-vis-plugin/72358)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 2\ **Last updated:** [January 24, 2017, 6:59am UTC](https://discuss.elastic.co/t/how-to-add-payload-to-request-in-kibana-vis-plugin/72358 "2017-01-24T06:59:46Z")
Hi, I am writing a Kibana visualization plugin, would like to collect some input from UI and sent as payload along with REST request to ES (I have ES API Plugin intercepting all the rest requests to parse the payload)… --- ## [Filter specific Message with logstash before sending to ElasticSearch](https://discuss.elastic.co/t/filter-specific-message-with-logstash-before-sending-to-elasticsearch/28584)
**Author:** [@Hayder\_Abbass](https://discuss.elastic.co/u/Hayder_Abbass)\ **Replies:** 2\ **Last updated:** [September 4, 2015, 7:52am UTC](https://discuss.elastic.co/t/filter-specific-message-with-logstash-before-sending-to-elasticsearch/28584 "2015-09-04T07:52:02Z")
Hello, I had like to know if it is possible to send only specific log messages to elasticsearch via logstash? E.G let's say I have these messages in my log file: 2015-08-14 12:21:03 \[31946\] PASS level2 10.249.10.70… --- ## [Possible to pass REST JSON query format to the Java API?](https://discuss.elastic.co/t/possible-to-pass-rest-json-query-format-to-the-java-api/2354)
**Author:** [@Matt\_Friedman](https://discuss.elastic.co/u/Matt_Friedman)\ **Replies:** 2\ **Last updated:** [June 11, 2015, 12:42pm UTC](https://discuss.elastic.co/t/possible-to-pass-rest-json-query-format-to-the-java-api/2354 "2015-06-11T12:42:14Z")
I have the following query string: {"query": {"filtered": { "query": {"match\_all": {}}, "filter": {"and": { "filters": \[ {"term": { "targetUsername": "testuser1" … --- ## [Error: ElasticSearch won't start when downgraded from 8.9.2 to 8.4.1](https://discuss.elastic.co/t/error-elasticsearch-wont-start-when-downgraded-from-8-9-2-to-8-4-1/342879)
**Author:** [@ujosyula](https://discuss.elastic.co/u/ujosyula)\ **Replies:** 8\ **Last updated:** [September 12, 2023, 8:52pm UTC](https://discuss.elastic.co/t/error-elasticsearch-wont-start-when-downgraded-from-8-9-2-to-8-4-1/342879 "2023-09-12T20:52:35Z")
I see this error when I try to downgrade. The version of elasticsearch is 8.4.1, but the service won't start. \[2023-09-12T09:52:39,253\]\[ERROR\]\[o.e.b.Elasticsearch \] fatal exception while booting Elasticsearch j… --- ## [Can filebeat export syslogs to remote syslog-server?](https://discuss.elastic.co/t/can-filebeat-export-syslogs-to-remote-syslog-server/117912)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 1\ **Last updated:** [February 1, 2018, 11:26am UTC](https://discuss.elastic.co/t/can-filebeat-export-syslogs-to-remote-syslog-server/117912 "2018-02-01T11:26:15Z")
Without using Logstash, is there a way to export syslog messages using Filebeat to Remote Syslog-server ? Looking at filebeat documentation for output options, I dont see remote logging to syslog-server. Looks like log… --- ## [Failed to reconnect to node](https://discuss.elastic.co/t/failed-to-reconnect-to-node/31473)
**Author:** [@danygor](https://discuss.elastic.co/u/danygor)\ **Replies:** 1\ **Last updated:** [October 6, 2015, 3:39pm UTC](https://discuss.elastic.co/t/failed-to-reconnect-to-node/31473 "2015-10-06T15:39:51Z")
Oftentimes, in my cluster, elasticsearch data nodes are trying to reach the elasticsearch master node using an IP addresses different from the one defined in master node's elasticsearch.yml with the statement: network… --- ## [Could not index event to Elasticsearch error creating index](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error-creating-index/146141)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 5\ **Last updated:** [August 27, 2018, 10:19am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error-creating-index/146141 "2018-08-27T10:19:20Z")
I am trying to parse my logs and trying to create a dynamic index. But somehow logstash is itself creating the index with a , in the pattern hence its failing. Can you please help me remove the comma. filter{ grok{ mat… --- ## [Issue with remove\_field](https://discuss.elastic.co/t/issue-with-remove-field/72978)
**Author:** [@blahnik](https://discuss.elastic.co/u/blahnik)\ **Replies:** 5\ **Last updated:** [January 27, 2017, 6:32pm UTC](https://discuss.elastic.co/t/issue-with-remove-field/72978 "2017-01-27T18:32:48Z")
I am having a hard time understanding why my filter to remove some fields is not working. I grabbed a sample of the JSON from kibana { "\_index": "logstash-2017.01.27", "\_type": "json", "\_score": 1, "\_source": { … --- ## [Elastic search doesn't start. No errors. No logs. Only one warning "cannot be run as root"](https://discuss.elastic.co/t/elastic-search-doesnt-start-no-errors-no-logs-only-one-warning-cannot-be-run-as-root/69399)
**Author:** [@tkgauri](https://discuss.elastic.co/u/tkgauri)\ **Replies:** 5\ **Last updated:** [December 19, 2016, 9:10am UTC](https://discuss.elastic.co/t/elastic-search-doesnt-start-no-errors-no-logs-only-one-warning-cannot-be-run-as-root/69399 "2016-12-19T09:10:16Z")
Elasticsearch version: 5.1.1 Plugins installed: \[\] JVM version: java version "1.8.0\_101" OS version: CentOS release 6.8 (Final) Description of the problem including expected versus actual behavior: Elastic search… --- ## [Logstash startup completed and then the system hangs logs are not passed into elastic search how can i overcome this?](https://discuss.elastic.co/t/logstash-startup-completed-and-then-the-system-hangs-logs-are-not-passed-into-elastic-search-how-can-i-overcome-this/38021)
**Author:** [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)\ **Replies:** 5\ **Last updated:** [December 29, 2015, 11:49am UTC](https://discuss.elastic.co/t/logstash-startup-completed-and-then-the-system-hangs-logs-are-not-passed-into-elastic-search-how-can-i-overcome-this/38021 "2015-12-29T11:49:04Z")
My command prompt shows logstash startup completed i changed the filename and tried pushing the log again but that doesnt help how can i overcome this problem --- ## [ElasticSearch Watcher Webhook and SSL trust issue](https://discuss.elastic.co/t/elasticsearch-watcher-webhook-and-ssl-trust-issue/267303)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-webhook-and-ssl-trust-issue/267303 "2021-03-17T09:30:28Z")
I'm running v7.8.1 ELK stack on GKE. I have setup a watcher alert which on action is supposed to POST to a URL externally using webhook to https://alertapi-uat.systems.uk.foo/api/do However, when it tries to fire the w… [Previous page](https://discuss.elastic.co/top.md?page=813&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=815&per_page=50&period=all)