# Top

**URL:** https://discuss.elastic.co/top.md?page=825&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 826

---

## [Fingerprint plugin crashes](https://discuss.elastic.co/t/fingerprint-plugin-crashes/69468)

<div class="topic-metadata">

**Author:** [@IuriiSergiichuk](https://discuss.elastic.co/u/IuriiSergiichuk)\
**Replies:** 4\
**Last updated:** [December 20, 2016, 8:16am UTC](https://discuss.elastic.co/t/fingerprint-plugin-crashes/69468 "2016-12-20T08:16:48Z")

</div>

Hello there. I'm using ELK 5.1.1 stack and right now was trying to configure fingerprint plugin to generate hash-code for URL links. Here's part of configuration: input { http{ type =\> "frontend\_eve…

---

## [Is cross document query possible?](https://discuss.elastic.co/t/is-cross-document-query-possible/68403)

<div class="topic-metadata">

**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\
**Replies:** 4\
**Last updated:** [December 8, 2016, 3:45pm UTC](https://discuss.elastic.co/t/is-cross-document-query-possible/68403 "2016-12-08T15:45:27Z")

</div>

Hi i have an index called X in that index i have 1 document type and the documents are separated by the filed "type" (added by logstash) one type is called : type1 and one type is called : type2 both have one field that …

---

## [Cannot run elasticesarch in ubuntu](https://discuss.elastic.co/t/cannot-run-elasticesarch-in-ubuntu/50313)

<div class="topic-metadata">

**Author:** [@Hobbit](https://discuss.elastic.co/u/Hobbit)\
**Replies:** 4\
**Last updated:** [May 18, 2016, 8:26am UTC](https://discuss.elastic.co/t/cannot-run-elasticesarch-in-ubuntu/50313 "2016-05-18T08:26:19Z")

</div>

Hello! I followed the installation steps and when I try to run ./elasticsearch in my /bin/ path,this error came out: log4j:ERROR setFile(null,true) call failed. java.io.FileNotFoundException: /opt/elasticsearch-2.3.2/log…

---

## [Logstash jdbc config file with filter](https://discuss.elastic.co/t/logstash-jdbc-config-file-with-filter/218675)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 3\
**Last updated:** [February 12, 2020, 2:04pm UTC](https://discuss.elastic.co/t/logstash-jdbc-config-file-with-filter/218675 "2020-02-12T14:04:23Z")

</div>

Hey, I'm new with logstash jdbc plugin and somehow I set up the migration of data from MySQL database to Elasticsearch via Logstash by using this configuration: input { jdbc { jdbc\_driver\_library =\> "/usr/share/j…

---

## [How to create role mapping file](https://discuss.elastic.co/t/how-to-create-role-mapping-file/199459)

<div class="topic-metadata">

**Author:** [@sfgroups1](https://discuss.elastic.co/u/sfgroups1)\
**Replies:** 3\
**Last updated:** [October 18, 2019, 8:40am UTC](https://discuss.elastic.co/t/how-to-create-role-mapping-file/199459 "2019-10-18T08:40:34Z")

</div>

Hi, I am adding the LDAP authentication to my cluster, I need to create the group\_to\_role\_mapping.yml file for the roles. Is there an example I can follow? files: role\_mapping: "/mnt/elasticsearch/group\_…

---

## [Upgrade from \<6.0 -\>6.4 fails with ES\_PATH\_CONF must be set to the configuration path chown: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory](https://discuss.elastic.co/t/upgrade-from-6-0-6-4-fails-with-es-path-conf-must-be-set-to-the-configuration-path-chown-cannot-access-etc-elasticsearch-elasticsearch-keystore-no-such-file-or-directory/166803)

<div class="topic-metadata">

**Author:** [@lvempati](https://discuss.elastic.co/u/lvempati)\
**Replies:** 3\
**Last updated:** [February 4, 2019, 5:21pm UTC](https://discuss.elastic.co/t/upgrade-from-6-0-6-4-fails-with-es-path-conf-must-be-set-to-the-configuration-path-chown-cannot-access-etc-elasticsearch-elasticsearch-keystore-no-such-file-or-directory/166803 "2019-02-04T17:21:13Z")

</div>

Hello, This problem has been raised multiple times but no resolution on any of the threads. I am hoping to get resolution on this one. On CentOS 7, RPM update from a version \< 6.0 -\> 6.4 fails with this message and ser…

---

## [Parse nested key-values](https://discuss.elastic.co/t/parse-nested-key-values/139771)

<div class="topic-metadata">

**Author:** [@tgaudin](https://discuss.elastic.co/u/tgaudin)\
**Replies:** 8\
**Last updated:** [July 18, 2018, 2:52pm UTC](https://discuss.elastic.co/t/parse-nested-key-values/139771 "2018-07-18T14:52:22Z")

</div>

Hi, I am trying to parse Oracle listener.log file. Here is a sample: 29-NOV. -2017 14:34:48 \* (CONNECT\_DATA=(CID=(PROGRAM=)(HOST=localhost)(USER=grid))(COMMAND=status)(ARGUMENTS=64)(SERVICE=LISTENER)(VERSION=203424000)…

---

## [Help with ElasticSearch Bulk index api](https://discuss.elastic.co/t/help-with-elasticsearch-bulk-index-api/133022)

<div class="topic-metadata">

**Author:** [@lo\_ronk](https://discuss.elastic.co/u/lo_ronk)\
**Replies:** 2\
**Last updated:** [May 29, 2018, 4:14pm UTC](https://discuss.elastic.co/t/help-with-elasticsearch-bulk-index-api/133022 "2018-05-29T16:14:35Z")

</div>

Hello -- This may be an obvious fix so I apologize as I am very new to the Elastic Search platform but I am attempting to use the Elastic Search Bulk API to index some data but am running into issues. Please find what …

---

## [Grok message pattern for log4j application log sample](https://discuss.elastic.co/t/grok-message-pattern-for-log4j-application-log-sample/90356)

<div class="topic-metadata">

**Author:** [@Bharath\_Raju](https://discuss.elastic.co/u/Bharath_Raju)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 6:59am UTC](https://discuss.elastic.co/t/grok-message-pattern-for-log4j-application-log-sample/90356 "2017-06-22T06:59:24Z")

</div>

I have below set of log4j lines in the log file - 2017 Jun 13 01:56:51:303 GMT +5 BW.CustomerInfo Info \[BW-Core\] BWENGINE-300001 Process Engine version 5.10.0, build V80\_Hotfix08, 2013-5-27 2017 Jun 13 01:56:51:305 …

---

## [org.elasticsearch.ElasticsearchParseException: No processor type exists with name "my plugin name"](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchparseexception-no-processor-type-exists-with-name-my-plugin-name/71990)

<div class="topic-metadata">

**Author:** [@deerawan](https://discuss.elastic.co/u/deerawan)\
**Replies:** 2\
**Last updated:** [January 19, 2017, 6:38am UTC](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchparseexception-no-processor-type-exists-with-name-my-plugin-name/71990 "2017-01-19T06:38:30Z")

</div>

Elasticsearch version: 5.0.0 Plugins installed: my custom processor plugin JVM version: 1.8.0\_111 OS version: OSX El Capitan Description of the problem including expected versus actual behavior: I created my custom…

---

## [Java apm-agent http status codes not correctly identified](https://discuss.elastic.co/t/java-apm-agent-http-status-codes-not-correctly-identified/149156)

<div class="topic-metadata">

**Author:** [@Alumino](https://discuss.elastic.co/u/Alumino)\
**Replies:** 5\
**Last updated:** [September 27, 2018, 6:46am UTC](https://discuss.elastic.co/t/java-apm-agent-http-status-codes-not-correctly-identified/149156 "2018-09-27T06:46:09Z")

</div>

Hi there Elastic community I was testing the APM Java Agent to know what we can do with it. This is my test environment: java spring app with one end point to receive requests. apache tomcat to run the app. elastic-ap…

---

## [Converting string to date fields](https://discuss.elastic.co/t/converting-string-to-date-fields/199287)

<div class="topic-metadata">

**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 8:13pm UTC](https://discuss.elastic.co/t/converting-string-to-date-fields/199287 "2019-09-12T20:13:22Z")

</div>

Hi, I have two fields that are tagged as string I want to produce the same fields that will be as a date field. (I have no problem creating new fields from existing fields). Attached Image. Would appreciate help many …

---

## [Yarn build failed](https://discuss.elastic.co/t/yarn-build-failed/147149)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 7\
**Last updated:** [September 10, 2018, 4:53pm UTC](https://discuss.elastic.co/t/yarn-build-failed/147149 "2018-09-10T16:53:57Z")

</div>

yarn build failed: \[14:04:35\] Error: getaddrinfo ENOTFOUND s3.amazonaws.com s3.amazonaws.com:443 at errnoException (dns.js:50:10) at GetAddrInfoReqWrap.onlookup \[as oncomplete\] (dns.js:92:26) error Command faile…

---

## [Search for available dates?](https://discuss.elastic.co/t/search-for-available-dates/127317)

<div class="topic-metadata">

**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\
**Replies:** 7\
**Last updated:** [April 9, 2018, 12:48pm UTC](https://discuss.elastic.co/t/search-for-available-dates/127317 "2018-04-09T12:48:54Z")

</div>

Hi , We want to make a search engine for available rooms based on date user input. I have searched and come up with this solution. PUT /rooms { "mappings": { "room": { "properties": { "room\_num": …

---

## [Filebeat making too many log files and refuses to send JSON strings](https://discuss.elastic.co/t/filebeat-making-too-many-log-files-and-refuses-to-send-json-strings/119752)

<div class="topic-metadata">

**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-making-too-many-log-files-and-refuses-to-send-json-strings/119752 "2018-02-14T14:41:38Z")

</div>

I'm using filebeats to directly ship my logs to ES cluster. The log file has one Json per line. I'm also asking filebeat to generate it's own logs in debug mode by log rotation. Here are logging settings: logging.level…

---

## [How to get difference of min timestamp and max timestamp?](https://discuss.elastic.co/t/how-to-get-difference-of-min-timestamp-and-max-timestamp/199589)

<div class="topic-metadata">

**Author:** [@samath\_kumar](https://discuss.elastic.co/u/samath_kumar)\
**Replies:** 2\
**Last updated:** [September 17, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-to-get-difference-of-min-timestamp-and-max-timestamp/199589 "2019-09-17T08:58:05Z")

</div>

I am new to kibana and elastic search, i want a metrics for average , total , longest of the timespans generated by taking difference of max and min timestamp fields. First I got min and max timestamps from the visualiza…

---

## [Update documentation for path.settings?](https://discuss.elastic.co/t/update-documentation-for-path-settings/126815)

<div class="topic-metadata">

**Author:** [@ElasticN00b](https://discuss.elastic.co/u/ElasticN00b)\
**Replies:** 2\
**Last updated:** [April 5, 2018, 12:37am UTC](https://discuss.elastic.co/t/update-documentation-for-path-settings/126815 "2018-04-05T00:37:32Z")

</div>

Greetings programs! While I was trying to set up logstash I was running into a fun error: \[2018-04-04T14:19:05,689\]\[INFO \]\[logstash.config.source.local.configpathloader\] No config files found in path {:path=\>"/etc/logs…

---

## [Multiline FIlebeat configuration for custom log](https://discuss.elastic.co/t/multiline-filebeat-configuration-for-custom-log/75301)

<div class="topic-metadata">

**Author:** [@prosenjit](https://discuss.elastic.co/u/prosenjit)\
**Replies:** 2\
**Last updated:** [February 17, 2017, 11:00am UTC](https://discuss.elastic.co/t/multiline-filebeat-configuration-for-custom-log/75301 "2017-02-17T11:00:39Z")

</div>

Hi , I have successfully set up real time centralized logging. The only issue that remains is the custom logs. It has mutiple lines for a single event. Since my shipper(filebeat) sends these logs to the buffer(Redis), I …

---

## [How to create aliases for all indices of a pattern?](https://discuss.elastic.co/t/how-to-create-aliases-for-all-indices-of-a-pattern/28155)

<div class="topic-metadata">

**Author:** [@paul\_nibin](https://discuss.elastic.co/u/paul_nibin)\
**Replies:** 2\
**Last updated:** [August 28, 2015, 10:56am UTC](https://discuss.elastic.co/t/how-to-create-aliases-for-all-indices-of-a-pattern/28155 "2015-08-28T10:56:10Z")

</div>

I want to add multiple filtered alilases to all indexes of the pattern "metrics-DD.MM.YYYY". Each filtered alias is for particular(the user field in the document has the userInformation. This is the field, I have used …

---

## [Unable to uninstall Endgame Sensor](https://discuss.elastic.co/t/unable-to-uninstall-endgame-sensor/258051)

<div class="topic-metadata">

**Author:** [@Greg\_Schles](https://discuss.elastic.co/u/Greg_Schles)\
**Replies:** 3\
**Last updated:** [January 12, 2022, 4:40pm UTC](https://discuss.elastic.co/t/unable-to-uninstall-endgame-sensor/258051 "2022-01-12T16:40:15Z")

</div>

Hello, I'm not able to remove an old sensor from some machines (Win 10). Command being ran: SensorWindowsInstaller-Sensor1.exe -c SensorWindowsInstaller-Sensor1.cfg -k API\_KEY\_REDACTED\_HERE -d false -l install.log L…

---

## [KQL Query for non alphanumeric character sets](https://discuss.elastic.co/t/kql-query-for-non-alphanumeric-character-sets/204558)

<div class="topic-metadata">

**Author:** [@Ericrs22](https://discuss.elastic.co/u/Ericrs22)\
**Replies:** 4\
**Last updated:** [October 25, 2019, 5:36pm UTC](https://discuss.elastic.co/t/kql-query-for-non-alphanumeric-character-sets/204558 "2019-10-25T17:36:46Z")

</div>

I've been checking manually for Brute Force attempts and I've noticed 99% of them come from attacks using Cyrillic character sets. I've been trying to find the right query to setup an alert when we find non alphanumeric…

---

## [Central Management filebeat enrollment fail](https://discuss.elastic.co/t/central-management-filebeat-enrollment-fail/160412)

<div class="topic-metadata">

**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\
**Replies:** 4\
**Last updated:** [January 4, 2019, 1:50pm UTC](https://discuss.elastic.co/t/central-management-filebeat-enrollment-fail/160412 "2019-01-04T13:50:41Z")

</div>

Hi I'm trying to enroll filebeat to the Central Management but since I use a custom cert I have this error Error while enrolling: fail to execute the HTTP POST request: Post https://+++++++++/api/beats/agent/++++-++++…

---

## [Лучшие практики по уменьшению размера индексов](https://discuss.elastic.co/t/topic/161121)

<div class="topic-metadata">

**Author:** [@Vladimir\_Pavlovsky](https://discuss.elastic.co/u/Vladimir_Pavlovsky)\
**Replies:** 4\
**Last updated:** [December 19, 2018, 8:03pm UTC](https://discuss.elastic.co/t/topic/161121 "2018-12-19T20:03:21Z")

</div>

Коллеги, добрый день! Какие есть рекомендации по уменьшению размера индекса? Из того, что я знаю: Удаление лишних полей из теплейта Включение сжатия данных в настройках темплейта Отключение doc\_values для тех полей, …

---

## [Elasticsearch org.apache.logging.log4j.core.impl.ThrowableProxy](https://discuss.elastic.co/t/elasticsearch-org-apache-logging-log4j-core-impl-throwableproxy/68268)

<div class="topic-metadata">

**Author:** [@francois](https://discuss.elastic.co/u/francois)\
**Replies:** 6\
**Last updated:** [December 7, 2016, 3:39pm UTC](https://discuss.elastic.co/t/elasticsearch-org-apache-logging-log4j-core-impl-throwableproxy/68268 "2016-12-07T15:39:44Z")

</div>

Hi, I use Elastic 5.0.2 (via maven) in a web app (running on Tomcat 8.5). Also I use Log4J 2.7. I use the java client new PreBuiltTransportClient(settings).addTransportAddress(inetSocketTransportAddress); If the co…

---

## [Logs shipping to redis queue](https://discuss.elastic.co/t/logs-shipping-to-redis-queue/44875)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 6\
**Last updated:** [March 21, 2016, 2:24am UTC](https://discuss.elastic.co/t/logs-shipping-to-redis-queue/44875 "2016-03-21T02:24:10Z")

</div>

I'm shipping some logs from server 1 to server 2 using logstash-shipper and receiving the message on redisqueue on server 2 the config file i'm using is this: input { file { path =\> "/path/to/my/logfile.log" type =\> …

---

## [Regarding @timestamp](https://discuss.elastic.co/t/regarding-timestamp/40350)

<div class="topic-metadata">

**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\
**Replies:** 6\
**Last updated:** [March 10, 2016, 3:16pm UTC](https://discuss.elastic.co/t/regarding-timestamp/40350 "2016-03-10T15:16:31Z")

</div>

We are trying to get the range of logs between two timestamps. The @timestamp value is used to retreive the data.The issue is when two logs having the @timestamp value the logs are not sorted correctly. Please sugges tif…

---

## [Top ten urls with elasticsearch](https://discuss.elastic.co/t/top-ten-urls-with-elasticsearch/17388)

<div class="topic-metadata">

**Author:** [@Ha\_Lan\_Quyen](https://discuss.elastic.co/u/Ha_Lan_Quyen)\
**Replies:** 6\
**Last updated:** [May 8, 2014, 1:55am UTC](https://discuss.elastic.co/t/top-ten-urls-with-elasticsearch/17388 "2014-05-08T01:55:48Z")

</div>

Hi everyone, I just begin to use elasticsearch for report. When have a request access to my website then I will index that by using elasticsearch with some information like: url, date, host.. and now i want to get…

---

## [Regarding memory consumption in elastic search](https://discuss.elastic.co/t/regarding-memory-consumption-in-elastic-search/9816)

<div class="topic-metadata">

**Author:** [@Shirsh\_Bansal](https://discuss.elastic.co/u/Shirsh_Bansal)\
**Replies:** 6\
**Last updated:** [November 26, 2012, 11:26am UTC](https://discuss.elastic.co/t/regarding-memory-consumption-in-elastic-search/9816 "2012-11-26T11:26:59Z")

</div>

Hi I am currently using elasticsearch 0.9.19. The machine I am using is havng around 300Gb disk space and the RAM on it is around 23Gb. I have allocated around 10Gb of ram to elastic search. My operations are writ…

---

## [\[error when put index template \]Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/error-when-put-index-template-root-mapping-definition-has-unsupported-parameters/210517)

<div class="topic-metadata">

**Author:** [@Frank\_Wang](https://discuss.elastic.co/u/Frank_Wang)\
**Replies:** 1\
**Last updated:** [December 5, 2019, 6:07am UTC](https://discuss.elastic.co/t/error-when-put-index-template-root-mapping-definition-has-unsupported-parameters/210517 "2019-12-05T06:07:56Z")

</div>

I send following cmd to kibana.dev tool, and get error. what I did wrong? My elasticSearch version is 6.8.0 { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason": "Root mapping definition has unsup…

---

## [Elasticsearch访问权限xpack](https://discuss.elastic.co/t/elasticsearch-xpack/276736)

<div class="topic-metadata">

**Author:** [@peng-elasticsearch](https://discuss.elastic.co/u/peng-elasticsearch)\
**Replies:** 5\
**Last updated:** [July 9, 2021, 5:30pm UTC](https://discuss.elastic.co/t/elasticsearch-xpack/276736 "2021-07-09T17:30:25Z")

</div>

elasticsearch6.3.1版本申请免费基础版license证书，上传导入证书报错问题； 上传导入命令： curl -XPOST -u elastic:123456 http://127.0.0.1:9200/\_xpack/license/start\_basic?acknowledge=true -H "Content-Type: application/json" -d @license.json 执行结果返回：{"ac…

---

## [Requête pour récupérer champs avec java sous elasticsearch version 6.6](https://discuss.elastic.co/t/requete-pour-recuperer-champs-avec-java-sous-elasticsearch-version-6-6/178686)

<div class="topic-metadata">

**Author:** [@hafid](https://discuss.elastic.co/u/hafid)\
**Replies:** 8\
**Last updated:** [May 2, 2019, 10:58am UTC](https://discuss.elastic.co/t/requete-pour-recuperer-champs-avec-java-sous-elasticsearch-version-6-6/178686 "2019-05-02T10:58:28Z")

</div>

Bonjour Jai indexer des documents et jai besoin de récupérer uniquement ces champs en JAVA que j'arrive à visiualiser avec le plugin chrome elasticsearh HEAD. LES CHAMPS RECHERCHE: "attachment": { "date": "2009-03-2…

---

## [Document\_id is value](https://discuss.elastic.co/t/document-id-is-value/256969)

<div class="topic-metadata">

**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\
**Replies:** 2\
**Last updated:** [November 29, 2020, 12:57am UTC](https://discuss.elastic.co/t/document-id-is-value/256969 "2020-11-29T00:57:12Z")

</div>

Hi all, when I run the logstash config, why is my document id its value? Any one can help me? This is my configuration logstash input { http\_poller { urls =\> { users =\> { metho…

---

## [Mask sensitive PII data inside Kibana UI](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920)

<div class="topic-metadata">

**Author:** [@uraf78](https://discuss.elastic.co/u/uraf78)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 4:54pm UTC](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920 "2020-06-12T16:54:07Z")

</div>

I need to mask sensitive PII fields (email, user name, ip ...) inside Kibana This sensitive PII data should be stored without any manipulation in Elasticsearch but should be masked on Kibana UI I already uses similar f…

---

## [Logstash as a windows service](https://discuss.elastic.co/t/logstash-as-a-windows-service/129293)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [April 24, 2018, 10:38pm UTC](https://discuss.elastic.co/t/logstash-as-a-windows-service/129293 "2018-04-24T22:38:25Z")

</div>

Could someone help me in installing the Logstash CONF file as a windows service, till date we are running with the command prompt, which will stuck quite often. so wanted to have it as windows service and keep running fo…

---

## [Logstash collectd config](https://discuss.elastic.co/t/logstash-collectd-config/87576)

<div class="topic-metadata">

**Author:** [@shrwn](https://discuss.elastic.co/u/shrwn)\
**Replies:** 7\
**Last updated:** [May 31, 2017, 10:16am UTC](https://discuss.elastic.co/t/logstash-collectd-config/87576 "2017-05-31T10:16:55Z")

</div>

Hi All, I have done logstash and collectd config as mentioned below: logstash.conf: output { redis { host =\> \["0.0.0.0", "0.0.0.1"\] data\_type =\> "list" key =\> "abc" password =\> "xyz" } } input { u…

---

## [Failed starting 'elasticsearch-service-x64' service windows 7](https://discuss.elastic.co/t/failed-starting-elasticsearch-service-x64-service-windows-7/83018)

<div class="topic-metadata">

**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\
**Replies:** 1\
**Last updated:** [April 20, 2017, 11:25am UTC](https://discuss.elastic.co/t/failed-starting-elasticsearch-service-x64-service-windows-7/83018 "2017-04-20T11:25:27Z")

</div>

Hi, I install elasticsearch and i install elasticsearch service but he can't start : C:\\Project\\elk\\elasticsearch\\bin\>elasticsearch-service.bat install Installing service : "elasticsearch-service-x64" Using JA…

---

## [Can ES correctly re-balance shards when all master nodes down?](https://discuss.elastic.co/t/can-es-correctly-re-balance-shards-when-all-master-nodes-down/38461)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 7\
**Last updated:** [January 8, 2016, 5:59am UTC](https://discuss.elastic.co/t/can-es-correctly-re-balance-shards-when-all-master-nodes-down/38461 "2016-01-08T05:59:51Z")

</div>

Our cluster has 3 dedicated master nodes, 3 dedicated client nodes and several data nodes. I know ES query still works even all master nodes down. But what will happen when some of data nodes down? Can ES still re-bala…

---

## [Kibana not working properly on Internet Explorer](https://discuss.elastic.co/t/kibana-not-working-properly-on-internet-explorer/23189)

<div class="topic-metadata">

**Author:** [@GFT\_Developer](https://discuss.elastic.co/u/GFT_Developer)\
**Replies:** 1\
**Last updated:** [April 12, 2015, 12:03am UTC](https://discuss.elastic.co/t/kibana-not-working-properly-on-internet-explorer/23189 "2015-04-12T00:03:32Z")

</div>

Hi, we are encountering a problem with Kibana 4 on Internet Explorer. On Firefox everything works fine. On IE, Visualizations and Settings work properly, while Discover and Dashboard give an "Access Denied" error.…

---

## [Creating a scripted field that returns the \_Id field value](https://discuss.elastic.co/t/creating-a-scripted-field-that-returns-the-id-field-value/110147)

<div class="topic-metadata">

**Author:** [@veronica\_rivas](https://discuss.elastic.co/u/veronica_rivas)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 5:42pm UTC](https://discuss.elastic.co/t/creating-a-scripted-field-that-returns-the-id-field-value/110147 "2017-12-07T17:42:36Z")

</div>

Hi there!!! I want to create a scripted field that returns the "\_id" field value, in order to visualize it in a table with the information of each log, but I'm not being able to solve it so far. I tried to do it using…

---

## [Allow Visible/Hide value in Kibana dashboard](https://discuss.elastic.co/t/allow-visible-hide-value-in-kibana-dashboard/228125)

<div class="topic-metadata">

**Author:** [@Yaniv\_Nuriel](https://discuss.elastic.co/u/Yaniv_Nuriel)\
**Replies:** 4\
**Last updated:** [April 15, 2020, 3:24pm UTC](https://discuss.elastic.co/t/allow-visible-hide-value-in-kibana-dashboard/228125 "2020-04-15T15:24:22Z")

</div>

Hey, I created a line chart with 2 Y-axis, now I want to allow the user to hide a specific field. See the current output: I wish there was something like checkbox near the field so I can decide which value I want to…

---

## [Search analyzer not work](https://discuss.elastic.co/t/search-analyzer-not-work/188776)

<div class="topic-metadata">

**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\
**Replies:** 6\
**Last updated:** [July 5, 2019, 8:25am UTC](https://discuss.elastic.co/t/search-analyzer-not-work/188776 "2019-07-05T08:25:45Z")

</div>

Hi, I've set a custom analyzer, but it seems not work when doing search. ElasticSearch version: 7.0.1 Create index: PUT /analyze\_email { "settings": { "number\_of\_shards": "1", "number\_of\_replicas":…

---

## [Help grokking a syslog](https://discuss.elastic.co/t/help-grokking-a-syslog/109862)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 6\
**Last updated:** [December 6, 2017, 10:26am UTC](https://discuss.elastic.co/t/help-grokking-a-syslog/109862 "2017-12-06T10:26:12Z")

</div>

Hello, i need some help to grok this. Should i use the CEF pattern or just manually hack away at my own? I cant seem to find any built-in patterns that work.. The message looks like part of it is syslog, part is key=v…

---

## [Need help grokking gradle build](https://discuss.elastic.co/t/need-help-grokking-gradle-build/103927)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 6\
**Last updated:** [November 7, 2017, 11:41pm UTC](https://discuss.elastic.co/t/need-help-grokking-gradle-build/103927 "2017-11-07T23:41:57Z")

</div>

I am adding a test fixture to a plugin of mine and I am using the elasticsearch build tools defined in the build plugin. I am using the example-fixture as a guide: The plugin is recognized correctly and things work …

---

## [Nodes discovery after upgrading from 1.7.1 to 2.2.0](https://discuss.elastic.co/t/nodes-discovery-after-upgrading-from-1-7-1-to-2-2-0/42061)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 6\
**Last updated:** [February 17, 2016, 9:23pm UTC](https://discuss.elastic.co/t/nodes-discovery-after-upgrading-from-1-7-1-to-2-2-0/42061 "2016-02-17T21:23:01Z")

</div>

I have upgraded from 1.7.1 to 2.2.0 and the nodes cannot form a cluster I have successfully installed cloud-aws plugin Here is elasticsearch.yml configuration path.data: /var/data/elasticsearch cluster.name: Mycompany…

---

## [Does Elastic Cloud provide Logstash SaaS as well?](https://discuss.elastic.co/t/does-elastic-cloud-provide-logstash-saas-as-well/44148)

<div class="topic-metadata">

**Author:** [@Ignasi\_Fosch](https://discuss.elastic.co/u/Ignasi_Fosch)\
**Replies:** 1\
**Last updated:** [March 12, 2016, 1:53am UTC](https://discuss.elastic.co/t/does-elastic-cloud-provide-logstash-saas-as-well/44148 "2016-03-12T01:53:57Z")

</div>

I tried to found this question in the forum unsuccessfully, but maybe I was not really good at that, so my apologies if there is such question already there. Just evaluating Elastic Cloud as ELK SaaS, and wondered if i…

---

## [Is it possible to do aggregations using Logstash](https://discuss.elastic.co/t/is-it-possible-to-do-aggregations-using-logstash/23941)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 3\
**Last updated:** [November 7, 2015, 4:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-do-aggregations-using-logstash/23941 "2015-11-07T16:00:56Z")

</div>

Can we do aggregations with logstash? I want to read data from elasticsearch, say for last 10 mins and aggregate over a field and perform metrics over this aggregated data. Is it possible? Thanks.

---

## [Could not locate that index-pattern-field(id: field name)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-field-name/94633)

<div class="topic-metadata">

**Author:** [@shubhrant](https://discuss.elastic.co/u/shubhrant)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 2:43pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-field-name/94633 "2017-07-28T14:43:45Z")

</div>

I have download the dashboard form https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.5.1.zip: and import in the kibana but the problem is for every dashboard request it is showing error t…

---

## [Start Filebeat in the foreground for supervisord](https://discuss.elastic.co/t/start-filebeat-in-the-foreground-for-supervisord/77694)

<div class="topic-metadata">

**Author:** [@Vinod\_Rai](https://discuss.elastic.co/u/Vinod_Rai)\
**Replies:** 1\
**Last updated:** [March 11, 2017, 12:04am UTC](https://discuss.elastic.co/t/start-filebeat-in-the-foreground-for-supervisord/77694 "2017-03-11T00:04:10Z")

</div>

From the official filebeat docs : If you use an init.d script to start Filebeat on deb or rpm, you can’t specify command line flags (see Command Line Options). To specify flags, start Filebeat in the foreground. I'm …

---

## [Elasticesearch and event correlation](https://discuss.elastic.co/t/elasticesearch-and-event-correlation/12315)

<div class="topic-metadata">

**Author:** [@John\_Zhang](https://discuss.elastic.co/u/John_Zhang)\
**Replies:** 1\
**Last updated:** [February 4, 2014, 9:07pm UTC](https://discuss.elastic.co/t/elasticesearch-and-event-correlation/12315 "2014-02-04T21:07:18Z")

</div>

Hi guys, I am one newer for elasticesearch. I am trying ElasticSearch +Kibana + Logstash for my security log management, I also need do event correlation on this platform, like what Simple Event Correlator (S…

---

## [Shard rebalance issue on addition of new data nodes across the cluster](https://discuss.elastic.co/t/shard-rebalance-issue-on-addition-of-new-data-nodes-across-the-cluster/105414)

<div class="topic-metadata">

**Author:** [@chitender](https://discuss.elastic.co/u/chitender)\
**Replies:** 5\
**Last updated:** [October 27, 2017, 12:38pm UTC](https://discuss.elastic.co/t/shard-rebalance-issue-on-addition-of-new-data-nodes-across-the-cluster/105414 "2017-10-27T12:38:58Z")

</div>

we were running ES cluster version 2.4.0 with 3 master, 3data nodes and one client node. this time shards were evenly distributed to all three data nodes. now to increase the storage and computing power we added the two …

[Previous page](https://discuss.elastic.co/top.md?page=824&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=826&per_page=50&period=all)
