# Top

**URL:** https://discuss.elastic.co/top.md?page=823&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 824

---

## [Link level in a post](https://discuss.elastic.co/t/link-level-in-a-post/151)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 2\
**Last updated:** [May 5, 2015, 8:56am UTC](https://discuss.elastic.co/t/link-level-in-a-post/151 "2015-05-05T08:56:43Z")

</div>

Thanks, Tyler, for increasing the link level from 2 to 5. I'm afraid it still does not work, because the forum software does not count the referred Github issue as link, but expands it and counts the links in the issue…

---

## [Newline is missing when adding file in bulk API](https://discuss.elastic.co/t/newline-is-missing-when-adding-file-in-bulk-api/120018)

<div class="topic-metadata">

**Author:** [@tomak](https://discuss.elastic.co/u/tomak)\
**Replies:** 5\
**Last updated:** [February 15, 2018, 5:41pm UTC](https://discuss.elastic.co/t/newline-is-missing-when-adding-file-in-bulk-api/120018 "2018-02-15T17:41:41Z")

</div>

I want to add the following line which is in a separate JSON file using the bulk API {"index":{"\_id":"53e23f5ae4b0ef99cb360835"}} I use the command curl -XPOST -H 'Content-Type: application/json' localhost:9200/cheape…

---

## [Filebeat multiline - escaping curly parenthesis](https://discuss.elastic.co/t/filebeat-multiline-escaping-curly-parenthesis/62092)

<div class="topic-metadata">

**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\
**Replies:** 5\
**Last updated:** [October 3, 2016, 6:25pm UTC](https://discuss.elastic.co/t/filebeat-multiline-escaping-curly-parenthesis/62092 "2016-10-03T18:25:10Z")

</div>

We have filebeat.yml that processes multiline filter as: multiline: pattern: '^\\{Heap before' negate: true match: after we want to start new record whenever the pattern "{Heap before" is encountered; we see…

---

## [How to filebeat logs in all levels?](https://discuss.elastic.co/t/how-to-filebeat-logs-in-all-levels/45656)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 5\
**Last updated:** [March 30, 2016, 9:23am UTC](https://discuss.elastic.co/t/how-to-filebeat-logs-in-all-levels/45656 "2016-03-30T09:23:54Z")

</div>

hello, I'm trying to have filebeat create logs in all the levels (info, error, debug etc) in order to debug it's work, but I don't understand how to edit the .yml config file correctly in order to make this happen. Can…

---

## [Elasticsearch vs solr : indexing speed](https://discuss.elastic.co/t/elasticsearch-vs-solr-indexing-speed/4243)

<div class="topic-metadata">

**Author:** [@massi](https://discuss.elastic.co/u/massi)\
**Replies:** 5\
**Last updated:** [April 18, 2011, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-vs-solr-indexing-speed/4243 "2011-04-18T05:19:50Z")

</div>

Hi Guys, What do you think of this article: http://dmurphy747.wordpress.com/2011/04/02/solr-vs-elasticsearch-deathmatch/ where elasticsearch and solr are compared with regard to the indexing speed? A quote from …

---

## [How to display the particular field value from the json to y-axis in kibana?](https://discuss.elastic.co/t/how-to-display-the-particular-field-value-from-the-json-to-y-axis-in-kibana/89803)

<div class="topic-metadata">

**Author:** [@dhinesh\_raja](https://discuss.elastic.co/u/dhinesh_raja)\
**Replies:** 1\
**Last updated:** [June 19, 2017, 8:35pm UTC](https://discuss.elastic.co/t/how-to-display-the-particular-field-value-from-the-json-to-y-axis-in-kibana/89803 "2017-06-19T20:35:02Z")

</div>

I need to display the exact value of the Price field from the below json in the y-axis in timelion in kibana 4.6.4. I have tried the following query, but it is taking the max value of the field Price not the exact value.…

---

## [/opt/logstash/bin/logstash](https://discuss.elastic.co/t/opt-logstash-bin-logstash/73889)

<div class="topic-metadata">

**Author:** [@ELKSERVER](https://discuss.elastic.co/u/ELKSERVER)\
**Replies:** 1\
**Last updated:** [February 5, 2017, 9:25am UTC](https://discuss.elastic.co/t/opt-logstash-bin-logstash/73889 "2017-02-05T09:25:29Z")

</div>

sudo /opt/logstash/bin/logstash --configtest -f /etc/logstash/conf.d/ Thats the line digitalocean has me putting in when building my ELK server with Ubuntu 16.04. That line is suppose to return "Configuration OK" but m…

---

## [Setting up tags for documents in collection with search by elasticsearch](https://discuss.elastic.co/t/setting-up-tags-for-documents-in-collection-with-search-by-elasticsearch/32751)

<div class="topic-metadata">

**Author:** [@\_axl](https://discuss.elastic.co/u/_axl)\
**Replies:** 1\
**Last updated:** [October 22, 2015, 10:05am UTC](https://discuss.elastic.co/t/setting-up-tags-for-documents-in-collection-with-search-by-elasticsearch/32751 "2015-10-22T10:05:04Z")

</div>

I have collection in mongo with about 5 millions documents, number may increase to houndereds of millions. I have to implement searching and aggregation through this collection. I installed elasticsearch with mongodb r…

---

## [Path config for custom log integration?](https://discuss.elastic.co/t/path-config-for-custom-log-integration/262158)

<div class="topic-metadata">

**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\
**Replies:** 4\
**Last updated:** [January 25, 2021, 8:16pm UTC](https://discuss.elastic.co/t/path-config-for-custom-log-integration/262158 "2021-01-25T20:16:53Z")

</div>

Hello, I'm trying out the elastic agent feature in a test cluster but I haven't been able to figure out how to ship custom logs to it. In the integration, I've specified the log path to be path/to/my/logs: I was abl…

---

## [Overlay timeseries for different date fields within a same index](https://discuss.elastic.co/t/overlay-timeseries-for-different-date-fields-within-a-same-index/217019)

<div class="topic-metadata">

**Author:** [@IvanHerreros](https://discuss.elastic.co/u/IvanHerreros)\
**Replies:** 4\
**Last updated:** [February 5, 2020, 4:18pm UTC](https://discuss.elastic.co/t/overlay-timeseries-for-different-date-fields-within-a-same-index/217019 "2020-02-05T16:18:54Z")

</div>

Hi, problem: say i have an index were documents have a "createdOn" and a "publishedOn" fields. I want to draw two time series within a same plot, displaying the histogram counts for the two different fields. Then I can…

---

## [Response Headers http\_poller](https://discuss.elastic.co/t/response-headers-http-poller/80739)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 4\
**Last updated:** [March 31, 2017, 12:17pm UTC](https://discuss.elastic.co/t/response-headers-http-poller/80739 "2017-03-31T12:17:41Z")

</div>

Is it possible to access the response headers from events processed by the http\_poller input plugin? I'm working with the Microsoft Table Service REST API: https://docs.microsoft.com/en-us/rest/api/storageservices/filese…

---

## [Elasticsearch for ecommerce displaying product prices with vat calculations](https://discuss.elastic.co/t/elasticsearch-for-ecommerce-displaying-product-prices-with-vat-calculations/72849)

<div class="topic-metadata">

**Author:** [@sebaherrera](https://discuss.elastic.co/u/sebaherrera)\
**Replies:** 4\
**Last updated:** [January 27, 2017, 5:41pm UTC](https://discuss.elastic.co/t/elasticsearch-for-ecommerce-displaying-product-prices-with-vat-calculations/72849 "2017-01-27T17:41:41Z")

</div>

Scope: I would like to use Elasticsearch services for an ecommerce search engine. Situation: I found a limitation, I checked search engine based on Lucene like style services (eg:Algolia, Solr & Elasticsearch)) and…

---

## [Failed to load metata when restarting elasticsearch](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709)

<div class="topic-metadata">

**Author:** [@bruce2](https://discuss.elastic.co/u/bruce2)\
**Replies:** 7\
**Last updated:** [January 14, 2022, 8:23am UTC](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709 "2022-01-14T08:23:05Z")

</div>

When I restart a node of the elasticsearch cluster, it failed to start. I set log level to trace. The logs is like below: \[2022-01-05T19:2...\]\[TRACE\]\[o.e.g.PersistedClusterStateService\] \[HOSTNAME\] found index metadata …

---

## [How to interact with .NET NEST object methods from powershell?](https://discuss.elastic.co/t/how-to-interact-with-net-nest-object-methods-from-powershell/276568)

<div class="topic-metadata">

**Author:** [@dreic](https://discuss.elastic.co/u/dreic)\
**Replies:** 7\
**Last updated:** [July 1, 2021, 4:53pm UTC](https://discuss.elastic.co/t/how-to-interact-with-net-nest-object-methods-from-powershell/276568 "2021-07-01T16:53:05Z")

</div>

How to call method of .NET object in powershell (Elasticsearch NEST .NET client). This is basic example of .NET code for NEST client and I am trying to write PS equivalent but I am failing in setting object value. Is thi…

---

## [6.5.0 - Hide "Space" from user?](https://discuss.elastic.co/t/6-5-0-hide-space-from-user/157293)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 7\
**Last updated:** [November 21, 2018, 12:41am UTC](https://discuss.elastic.co/t/6-5-0-hide-space-from-user/157293 "2018-11-21T00:41:59Z")

</div>

Hi, Is there any option to hide a Space from a certain user? I couldn't find any.

---

## [Ruby filter usage to divide value and create new events](https://discuss.elastic.co/t/ruby-filter-usage-to-divide-value-and-create-new-events/75020)

<div class="topic-metadata">

**Author:** [@pavlik](https://discuss.elastic.co/u/pavlik)\
**Replies:** 1\
**Last updated:** [February 17, 2017, 8:36am UTC](https://discuss.elastic.co/t/ruby-filter-usage-to-divide-value-and-create-new-events/75020 "2017-02-17T08:36:18Z")

</div>

Hello, I have the following event: "message" =\> "2017-01-02 08:00;2017-01-02 09:00;30;Item1, Item2, Item3", "@version" =\> "1", "@timestamp" =\> "2017-01-02T08:00:00.000Z", …

---

## [ElasticSearch SearchRequestBuilder java.lang.NoClassDefFoundError: com.fasterxml.jackson.core.JsonGenerator](https://discuss.elastic.co/t/elasticsearch-searchrequestbuilder-java-lang-noclassdeffounderror-com-fasterxml-jackson-core-jsongenerator/41101)

<div class="topic-metadata">

**Author:** [@raaj\_mndl](https://discuss.elastic.co/u/raaj_mndl)\
**Replies:** 1\
**Last updated:** [February 6, 2016, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-searchrequestbuilder-java-lang-noclassdeffounderror-com-fasterxml-jackson-core-jsongenerator/41101 "2016-02-06T15:43:33Z")

</div>

I am using ElasticSearch 2.1.1 version. Using a java client I am trying to execute a search request. SearchResponse searchResp = client.prepareSearch(index) .setTypes(type) .setQuery(QueryBuilders.matchQuery("field", …

---

## [Is it possible to access mysql server in script filter with groovy](https://discuss.elastic.co/t/is-it-possible-to-access-mysql-server-in-script-filter-with-groovy/26049)

<div class="topic-metadata">

**Author:** [@yehua984710](https://discuss.elastic.co/u/yehua984710)\
**Replies:** 7\
**Last updated:** [July 26, 2015, 3:26am UTC](https://discuss.elastic.co/t/is-it-possible-to-access-mysql-server-in-script-filter-with-groovy/26049 "2015-07-26T03:26:08Z")

</div>

I want to access our mysql server in groovy script filter to do some query with value of some fields. Is it possible to do this?

---

## [How to create react plugin for kibana](https://discuss.elastic.co/t/how-to-create-react-plugin-for-kibana/124751)

<div class="topic-metadata">

**Author:** [@zhDmitry](https://discuss.elastic.co/u/zhDmitry)\
**Replies:** 2\
**Last updated:** [March 20, 2018, 11:56am UTC](https://discuss.elastic.co/t/how-to-create-react-plugin-for-kibana/124751 "2018-03-20T11:56:00Z")

</div>

I used https://github.com/elastic/template-kibana-plugin/ for building plugin but uses angular for plugin development. There is a way to build plugin using react ? Some guides and info would be useful. Thx

---

## [Script fields in query not showing up in Kibana visualize aggregation](https://discuss.elastic.co/t/script-fields-in-query-not-showing-up-in-kibana-visualize-aggregation/61971)

<div class="topic-metadata">

**Author:** [@satheeshravir](https://discuss.elastic.co/u/satheeshravir)\
**Replies:** 2\
**Last updated:** [October 5, 2016, 10:03pm UTC](https://discuss.elastic.co/t/script-fields-in-query-not-showing-up-in-kibana-visualize-aggregation/61971 "2016-10-05T22:03:53Z")

</div>

I am using the following search query in Kibana. Its returning the expected results. I am trying to aggregate vertical bar chart visualization using the script field. But the script fields "duration" and "state" isn't sh…

---

## [Network Maps](https://discuss.elastic.co/t/network-maps/358515)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [May 3, 2024, 3:09pm UTC](https://discuss.elastic.co/t/network-maps/358515 "2024-05-03T15:09:39Z")

</div>

Hello, I wonder if anyone has figured out how to create a network topology map in Elastic? I have tried Graphs but that doesn't seem viable. I am considering creating a custom visualization using vega but wanted to se…

---

## [Connecting to logstash with Basic Authentication](https://discuss.elastic.co/t/connecting-to-logstash-with-basic-authentication/267121)

<div class="topic-metadata">

**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 8:28pm UTC](https://discuss.elastic.co/t/connecting-to-logstash-with-basic-authentication/267121 "2021-03-12T20:28:01Z")

</div>

Hello, I am using HTTP input plugin in logstash config. I have been always sending data to logstash over HTTP POST method by using logstash API like this; curl -XPOST http://\<logstashIP\>:9605 -d '{"my": "data"}' also …

---

## [Limit Of Total Fields in index has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-in-index-has-been-exceeded/142143)

<div class="topic-metadata">

**Author:** [@Akhilesh-Tiwari](https://discuss.elastic.co/u/Akhilesh-Tiwari)\
**Replies:** 3\
**Last updated:** [July 30, 2018, 9:58am UTC](https://discuss.elastic.co/t/limit-of-total-fields-in-index-has-been-exceeded/142143 "2018-07-30T09:58:45Z")

</div>

Hi Team, when i am trying to push data from Filebeat to logstash and elasticsearch by using my log file,I am getting an exception. "Java.lang.IllegalArgumentException:Limit Of Total Fields \[1000\] in index has been exc…

---

## [How to filter a specific field and how to filter on a wildcard field such as \`/cars/\*\`?](https://discuss.elastic.co/t/how-to-filter-a-specific-field-and-how-to-filter-on-a-wildcard-field-such-as-cars/53249)

<div class="topic-metadata">

**Author:** [@fikse](https://discuss.elastic.co/u/fikse)\
**Replies:** 3\
**Last updated:** [June 20, 2016, 4:46pm UTC](https://discuss.elastic.co/t/how-to-filter-a-specific-field-and-how-to-filter-on-a-wildcard-field-such-as-cars/53249 "2016-06-20T16:46:02Z")

</div>

I have this index: { "\_index": "logstash-2015.12.15", "\_type": "logs", "\_id": "AVVVW\_wekW28kZ0eUiUh", "\_version": 1, "\_score": 1, "\_source": { "message": "127.0.0.1 - - \[15/Dec/2015:18:50:15 -0500\] "G…

---

## [Kibana 3.1.3](https://discuss.elastic.co/t/kibana-3-1-3/26664)

<div class="topic-metadata">

**Author:** [@rashid](https://discuss.elastic.co/u/rashid)\
**Replies:** 0\
**Last updated:** [July 31, 2015, 8:35pm UTC](https://discuss.elastic.co/t/kibana-3-1-3/26664 "2015-07-31T20:35:27Z")

</div>

We've identified two content sanitation issues in Kibana 3. While these are low impact and difficult to trigger we're releasing Kibana 3.1.3 to correct them: https://www.elastic.co/downloads/past-releases/kibana-3-1-3

---

## [Non-Uniform Drive Space Across Nodes](https://discuss.elastic.co/t/non-uniform-drive-space-across-nodes/18065)

<div class="topic-metadata">

**Author:** [@ES\_USER1](https://discuss.elastic.co/u/ES_USER1)\
**Replies:** 5\
**Last updated:** [June 13, 2014, 4:55pm UTC](https://discuss.elastic.co/t/non-uniform-drive-space-across-nodes/18065 "2014-06-13T16:55:11Z")

</div>

How does Elasticsearch handle nodes that do not have the same amount of disk space on each node. Looking at the example below does ES limit storage to that of the smaller one or does it make use of all the space j…

---

## [Visualization: Display missing values on filter aggregation](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586)

<div class="topic-metadata">

**Author:** [@kimjavier43](https://discuss.elastic.co/u/kimjavier43)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 2:09pm UTC](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586 "2020-06-26T14:09:19Z")

</div>

Hello, Is there a way to include missing fields in filters aggregation like in terms aggregation? Thanks,

---

## [Way to track index changes?](https://discuss.elastic.co/t/way-to-track-index-changes/14757)

<div class="topic-metadata">

**Author:** [@Josh\_Harrison](https://discuss.elastic.co/u/Josh_Harrison)\
**Replies:** 4\
**Last updated:** [December 10, 2013, 5:08pm UTC](https://discuss.elastic.co/t/way-to-track-index-changes/14757 "2013-12-10T17:08:23Z")

</div>

I'm looking for the optimal way to track record additions or changes. So, say I've got data coming in. This data has timestamps, but the timestamps don't correspond with the insertion time, and there's no expectatio…

---

## [Using Interface Derived Classes with NEST](https://discuss.elastic.co/t/using-interface-derived-classes-with-nest/47150)

<div class="topic-metadata">

**Author:** [@Zorlack](https://discuss.elastic.co/u/Zorlack)\
**Replies:** 2\
**Last updated:** [April 15, 2016, 6:47pm UTC](https://discuss.elastic.co/t/using-interface-derived-classes-with-nest/47150 "2016-04-15T18:47:52Z")

</div>

I'm having trouble using NEST's strongly-type objects with a nested list of Interface-Derived user roles. I've posted a question about it on StackOverflow: http://stackoverflow.com/questions/36578801/using-interface-de…

---

## [Type string in a multiple input Http\_Poller for different Grok pattern](https://discuss.elastic.co/t/type-string-in-a-multiple-input-http-poller-for-different-grok-pattern/211481)

<div class="topic-metadata">

**Author:** [@kamalesh](https://discuss.elastic.co/u/kamalesh)\
**Replies:** 3\
**Last updated:** [January 9, 2020, 5:10pm UTC](https://discuss.elastic.co/t/type-string-in-a-multiple-input-http-poller-for-different-grok-pattern/211481 "2020-01-09T17:10:10Z")

</div>

Hi All, I am trying to using multiple Url's for the http\_poller and need to use a different Grok patterns for each of the Url's I am aware that i can make use of type string in the Input plugins and make Grok patterns …

---

## [Customized role not able to view data in Kibana](https://discuss.elastic.co/t/customized-role-not-able-to-view-data-in-kibana/53127)

<div class="topic-metadata">

**Author:** [@Wei\_Huang](https://discuss.elastic.co/u/Wei_Huang)\
**Replies:** 3\
**Last updated:** [July 11, 2016, 8:35am UTC](https://discuss.elastic.co/t/customized-role-not-able-to-view-data-in-kibana/53127 "2016-07-11T08:35:26Z")

</div>

Hey, guys Following the training video of x-pack, I tried to set up my own role/user for reading certain index. I added a new user and tried to assign the "kibana" role to this user along with the customized role, but …

---

## [Vega select box aggregations](https://discuss.elastic.co/t/vega-select-box-aggregations/299028)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 5\
**Last updated:** [March 16, 2022, 8:06pm UTC](https://discuss.elastic.co/t/vega-select-box-aggregations/299028 "2022-03-16T20:06:56Z")

</div>

Hello, I need to create a chart where Y axis can be changed based on a select box. I saw this example in Vega, but not sure how to replicate in Elasticsearch. Link to visualization: Vega Editor thanks

---

## [Persist Elasticsearch/Kibana Keystores with Docker](https://discuss.elastic.co/t/persist-elasticsearch-kibana-keystores-with-docker/283099)

<div class="topic-metadata">

**Author:** [@Stef\_Nestor](https://discuss.elastic.co/u/Stef_Nestor)\
**Replies:** 1\
**Last updated:** [September 1, 2021, 10:08pm UTC](https://discuss.elastic.co/t/persist-elasticsearch-kibana-keystores-with-docker/283099 "2021-09-01T22:08:02Z")

</div>

Goal: persist Elasticsearch/Kibana keystores across Docker sessions by mounting data directory Common errors: Exception in thread "main" java.nio.file.FileSystemException: /usr/share/elasticsearch/config/elasticsearch…

---

## [Octagon Analytics - Native iOS Mobile App for Kibana](https://discuss.elastic.co/t/octagon-analytics-native-ios-mobile-app-for-kibana/223868)

<div class="topic-metadata">

**Author:** [@octagon.mobile](https://discuss.elastic.co/u/octagon.mobile)\
**Replies:** 1\
**Last updated:** [March 24, 2020, 7:58pm UTC](https://discuss.elastic.co/t/octagon-analytics-native-ios-mobile-app-for-kibana/223868 "2020-03-24T19:58:48Z")

</div>

"Octagon Analytics" - Native iOS application for Kibana. AND it's an OPEN SOURCE project !!! You can find it over here. You can also download the demo project from the App Store. NOTE: To make this app compatible wit…

---

## [Reindexing increase the size of the reindexed index](https://discuss.elastic.co/t/reindexing-increase-the-size-of-the-reindexed-index/210055)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 7\
**Last updated:** [December 4, 2019, 12:44pm UTC](https://discuss.elastic.co/t/reindexing-increase-the-size-of-the-reindexed-index/210055 "2019-12-04T12:44:19Z")

</div>

Dear all After i reindex some index of mine most of their size increase like double and sometime the indexing doesnot work Can someone explain to to why? Thanks very much

---

## [Canvas Timelion datasource not returning results (using custom timeField)](https://discuss.elastic.co/t/canvas-timelion-datasource-not-returning-results-using-custom-timefield/123160)

<div class="topic-metadata">

**Author:** [@Jim\_Boutcher](https://discuss.elastic.co/u/Jim_Boutcher)\
**Replies:** 7\
**Last updated:** [April 4, 2018, 3:59am UTC](https://discuss.elastic.co/t/canvas-timelion-datasource-not-returning-results-using-custom-timefield/123160 "2018-04-04T03:59:11Z")

</div>

Running ES 6.2, installed latest Canvas, and I'm unable to get the timelion datasources working correctly. All data returned is 0. I loaded a few million documents into an index, timeseries data, for Feb 2018. I'm easil…

---

## [Snapshot automation sequencing question](https://discuss.elastic.co/t/snapshot-automation-sequencing-question/58740)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 7\
**Last updated:** [August 26, 2016, 4:58pm UTC](https://discuss.elastic.co/t/snapshot-automation-sequencing-question/58740 "2016-08-26T16:58:50Z")

</div>

Hi, My team is developing c# service to automate snapshot management. It creates and deletes snapshots and writes out a log of existing snapshots and their status, etc. We have a "source" defined for each snapshot, a…

---

## [Elasticsearch isn't making new indices have replicas](https://discuss.elastic.co/t/elasticsearch-isnt-making-new-indices-have-replicas/42626)

<div class="topic-metadata">

**Author:** [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\
**Replies:** 7\
**Last updated:** [February 26, 2016, 6:42pm UTC](https://discuss.elastic.co/t/elasticsearch-isnt-making-new-indices-have-replicas/42626 "2016-02-26T18:42:47Z")

</div>

Despite: index.number\_of\_replicas: 2 in /etc/elasticsearch/elasticsearch.yml on my cluster nodes new indices are not being replicated: summary | awk '$5 == 0' health status index pri rep doc…

---

## [How to change index status from warm to hot](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398)

<div class="topic-metadata">

**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 9:24pm UTC](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398 "2021-01-18T21:24:38Z")

</div>

Hi How can I change the index from warm to hot? Regards Oscar

---

## [Logstash 2.1: Dynamically Altering Field Names](https://discuss.elastic.co/t/logstash-2-1-dynamically-altering-field-names/36845)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 5\
**Last updated:** [January 28, 2016, 4:46am UTC](https://discuss.elastic.co/t/logstash-2-1-dynamically-altering-field-names/36845 "2016-01-28T04:46:52Z")

</div>

Hi, I've seen an issue in recent days with sending data to elasticsearch 2.1 where inbound messages contained an "uid" field which clashed with the type of the in-built meta-field "uid". This led to indexing failing, sha…

---

## [Search on only parent documents?](https://discuss.elastic.co/t/search-on-only-parent-documents/8685)

<div class="topic-metadata">

**Author:** [@shane](https://discuss.elastic.co/u/shane)\
**Replies:** 5\
**Last updated:** [August 9, 2012, 9:04pm UTC](https://discuss.elastic.co/t/search-on-only-parent-documents/8685 "2012-08-09T21:04:38Z")

</div>

This might be a simple question, and if so I apologize, but I'm not sure how to go about this. How would I execute a query against only top-level documents? I have an index of documents, some have child documents,…

---

## [Change HTTP SSL security without private key of CA](https://discuss.elastic.co/t/change-http-ssl-security-without-private-key-of-ca/331465)

<div class="topic-metadata">

**Author:** [@Alex\_Fan](https://discuss.elastic.co/u/Alex_Fan)\
**Replies:** 4\
**Last updated:** [May 12, 2023, 2:31am UTC](https://discuss.elastic.co/t/change-http-ssl-security-without-private-key-of-ca/331465 "2023-05-12T02:31:28Z")

</div>

We just installed ELK stack v8.5.1 on RHEL linux server and the elasticsearch is using the generated certs and I can generate the enrollment token for my Kibana to connect. However, we want to use our corporate internal …

---

## [Kibana on graylog](https://discuss.elastic.co/t/kibana-on-graylog/267981)

<div class="topic-metadata">

**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\
**Replies:** 4\
**Last updated:** [March 23, 2021, 9:20am UTC](https://discuss.elastic.co/t/kibana-on-graylog/267981 "2021-03-23T09:20:51Z")

</div>

Hello, I currently use graylog as a SIEM. So I have ElasticSearch install on the same sermer. All my elasticsearch data are in /mnt/graylog/elasticsearch/nodes/0/indices. I would like to install kibana on this same se…

---

## [Elasticsearch 2.4 nodes does not form cluster with ConnectTransportException](https://discuss.elastic.co/t/elasticsearch-2-4-nodes-does-not-form-cluster-with-connecttransportexception/62480)

<div class="topic-metadata">

**Author:** [@vvs14](https://discuss.elastic.co/u/vvs14)\
**Replies:** 4\
**Last updated:** [October 12, 2016, 6:55am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-nodes-does-not-form-cluster-with-connecttransportexception/62480 "2016-10-12T06:55:45Z")

</div>

I am already running ELK stack with Elasticsearch(ES) 1.7 with docker container with 3 nodes, each running one ES container, running behind nginx server. Now I am trying to upgrade ES to 2.4.0. Root user is not allowed …

---

## [Login Dialog with Shield and Kibana 3?](https://discuss.elastic.co/t/login-dialog-with-shield-and-kibana-3/23791)

<div class="topic-metadata">

**Author:** [@kyletippetts](https://discuss.elastic.co/u/kyletippetts)\
**Replies:** 4\
**Last updated:** [June 17, 2015, 3:34pm UTC](https://discuss.elastic.co/t/login-dialog-with-shield-and-kibana-3/23791 "2015-06-17T15:34:11Z")

</div>

I've installed and configured Elasticsearch (latest) and Shield (latest). I've set up Kibana 3. I've made all the configuration changes in the long version of the Shield setup (including trying the shield.authc configura…

---

## [How to parse nginx log using filebeat](https://discuss.elastic.co/t/how-to-parse-nginx-log-using-filebeat/186266)

<div class="topic-metadata">

**Author:** [@prashantgcloud](https://discuss.elastic.co/u/prashantgcloud)\
**Replies:** 2\
**Last updated:** [June 25, 2019, 6:29am UTC](https://discuss.elastic.co/t/how-to-parse-nginx-log-using-filebeat/186266 "2019-06-25T06:29:11Z")

</div>

I have setup Elasticsearch and kibana using AWS Elastic search service so can't install below plugin : bin/elasticsearch-plugin install ingest-geoip bin/elasticsearch-plugin install ingest-user-agent I have installed …

---

## [Json field check filter](https://discuss.elastic.co/t/json-field-check-filter/165702)

<div class="topic-metadata">

**Author:** [@paano](https://discuss.elastic.co/u/paano)\
**Replies:** 2\
**Last updated:** [February 6, 2019, 11:20pm UTC](https://discuss.elastic.co/t/json-field-check-filter/165702 "2019-02-06T23:20:05Z")

</div>

in logstash, adding a filter check based on key field to add tag does not work. sample json: { "eventSource" : { "objectName": "EVENT.Q1", "objectType" : "Queue" }, "eventType" : { "name" : "Com…

---

## [Return matched nested object instead of root parent document](https://discuss.elastic.co/t/return-matched-nested-object-instead-of-root-parent-document/29464)

<div class="topic-metadata">

**Author:** [@shekhar](https://discuss.elastic.co/u/shekhar)\
**Replies:** 2\
**Last updated:** [September 20, 2015, 11:47pm UTC](https://discuss.elastic.co/t/return-matched-nested-object-instead-of-root-parent-document/29464 "2015-09-20T23:47:12Z")

</div>

I want nested query to return only matched nested object for nested field instead of root parent document, I s it possible ?

---

## [Integrate ELK with keycloak for SSO](https://discuss.elastic.co/t/integrate-elk-with-keycloak-for-sso/152821)

<div class="topic-metadata">

**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 12:09pm UTC](https://discuss.elastic.co/t/integrate-elk-with-keycloak-for-sso/152821 "2018-10-17T12:09:01Z")

</div>

Hi, Can ELK stack with x-pack be integrated with keycloak for Single Sign On ? If yes, can you please guide us to the document which talks about this integration. Thanks & Regards, Mahesh

---

## [Syslog type](https://discuss.elastic.co/t/syslog-type/130768)

<div class="topic-metadata">

**Author:** [@Badb0y](https://discuss.elastic.co/u/Badb0y)\
**Replies:** 8\
**Last updated:** [May 15, 2018, 5:19am UTC](https://discuss.elastic.co/t/syslog-type/130768 "2018-05-15T05:19:48Z")

</div>

Hi, From the newest version of filebeat the syslog type has been removed. If I compare the log from logstash as syslog format to the filebeat log format the following things are missing from the log which is obvious be…

[Previous page](https://discuss.elastic.co/top.md?page=822&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=824&per_page=50&period=all)
