# Top

**URL:** https://discuss.elastic.co/top.md?page=845&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 846

---

## [Kibana ES incomptibility](https://discuss.elastic.co/t/kibana-es-incomptibility/55134)

<div class="topic-metadata">

**Author:** [@amitak](https://discuss.elastic.co/u/amitak)\
**Replies:** 5\
**Last updated:** [July 17, 2016, 5:10pm UTC](https://discuss.elastic.co/t/kibana-es-incomptibility/55134 "2016-07-17T17:10:43Z")

</div>

Hi, I have installed ES v5.0.0-alpha4 and Kibana 4.5.2 on my windows 10 machine. I get following error. \[error\]\[status\]\[plugin:elasticsearch\] Status changed from yellow to red - This version of Kibana requires Elastic…

---

## [Kibana upgrade from 4.0.3 to 4.1.1 very slow](https://discuss.elastic.co/t/kibana-upgrade-from-4-0-3-to-4-1-1-very-slow/29575)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 5\
**Last updated:** [October 6, 2015, 3:19pm UTC](https://discuss.elastic.co/t/kibana-upgrade-from-4-0-3-to-4-1-1-very-slow/29575 "2015-10-06T15:19:14Z")

</div>

We were running Kibana 4.0.3 with good performance but after upgrading to Kibana 4.1.1 the browser seems to hang, sometimes reporting slow script warning. It eventually completes whatever action I started but it can take…

---

## [A bug in elasticsearch.yml configuration file. Cannot set an empty string as value](https://discuss.elastic.co/t/a-bug-in-elasticsearch-yml-configuration-file-cannot-set-an-empty-string-as-value/25381)

<div class="topic-metadata">

**Author:** [@foresightyj](https://discuss.elastic.co/u/foresightyj)\
**Replies:** 1\
**Last updated:** [July 13, 2015, 8:44am UTC](https://discuss.elastic.co/t/a-bug-in-elasticsearch-yml-configuration-file-cannot-set-an-empty-string-as-value/25381 "2015-07-13T08:44:48Z")

</div>

Original title of this post was "A bug in the shingle token filter's token\_separator option, same configuration but different behavior between json and yaml". I changed it to better reflect the nature of the problem. The…

---

## [Unassigned.reason CLUSTER\_RECOVERED](https://discuss.elastic.co/t/unassigned-reason-cluster-recovered/327370)

<div class="topic-metadata">

**Author:** [@frankmehlhop.com](https://discuss.elastic.co/u/frankmehlhop.com)\
**Replies:** 1\
**Last updated:** [March 9, 2023, 8:05pm UTC](https://discuss.elastic.co/t/unassigned-reason-cluster-recovered/327370 "2023-03-09T20:05:34Z")

</div>

My health status is only yellow instead of green. { "cluster\_name" : "elasticsearch", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 1, "number\_of\_data\_nodes" : 1, "active\_primary\_shards" : 22…

---

## [Vega in Kibana 6.8 | Cannot tap on a relative url in "href" | vega.enableExternalUrls | External URLs are not enabled](https://discuss.elastic.co/t/vega-in-kibana-6-8-cannot-tap-on-a-relative-url-in-href-vega-enableexternalurls-external-urls-are-not-enabled/241766)

<div class="topic-metadata">

**Author:** [@hkhanz](https://discuss.elastic.co/u/hkhanz)\
**Replies:** 7\
**Last updated:** [July 20, 2020, 5:53pm UTC](https://discuss.elastic.co/t/vega-in-kibana-6-8-cannot-tap-on-a-relative-url-in-href-vega-enableexternalurls-external-urls-are-not-enabled/241766 "2020-07-20T17:53:43Z")

</div>

I am trying to create a very simple - but ultimately super practical example - of tapping a bar segment inside a Vega visualization and being able to go to the appropriate /discover url for the data. When I try to do th…

---

## [Union query](https://discuss.elastic.co/t/union-query/218192)

<div class="topic-metadata">

**Author:** [@mehmetozalp](https://discuss.elastic.co/u/mehmetozalp)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 10:11am UTC](https://discuss.elastic.co/t/union-query/218192 "2020-02-07T10:11:52Z")

</div>

Hi can i do this query in elasticsearch? My elasticsearch is last version. Thank you. (SELECT \* FROM images where file\_id = 0) UNION (SELECT \* FROM images where file\_id \> 0 Group by image\_path,file\_id) LIMIT 20,2…

---

## [Controls Visualization does not work when it is imported](https://discuss.elastic.co/t/controls-visualization-does-not-work-when-it-is-imported/191765)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 4\
**Last updated:** [July 23, 2019, 5:06pm UTC](https://discuss.elastic.co/t/controls-visualization-does-not-work-when-it-is-imported/191765 "2019-07-23T17:06:25Z")

</div>

Hi, everyone I have an issue when I import some visualizations on Elastic Stack 6.8.0. Kibana warns me that these visualizations have another index pattern. I set the new index pattern and visualiations are imported …

---

## [Remove special characters in a filed value](https://discuss.elastic.co/t/remove-special-characters-in-a-filed-value/107016)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 3:43pm UTC](https://discuss.elastic.co/t/remove-special-characters-in-a-filed-value/107016 "2017-11-28T15:43:55Z")

</div>

In my logstash filter, I received following filed and its value.. In order to remove duplicate filed value, first I need to remove special characters in that filed value. For given sample the field name "log\_name" liste…

---

## [Custom search analyzer problem](https://discuss.elastic.co/t/custom-search-analyzer-problem/63584)

<div class="topic-metadata">

**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\
**Replies:** 8\
**Last updated:** [October 21, 2016, 10:00am UTC](https://discuss.elastic.co/t/custom-search-analyzer-problem/63584 "2016-10-21T10:00:27Z")

</div>

Hi, i'm using es 5.0 rc1 and this is my use-case: I have 2 custom analyzer that i want use only when i do a search but i don't want set them on field so: mappings: { "settings": { "number\_of\_shards": 5, "number\_…

---

## [New filter Editor do not suggest values](https://discuss.elastic.co/t/new-filter-editor-do-not-suggest-values/104021)

<div class="topic-metadata">

**Author:** [@arieltk](https://discuss.elastic.co/u/arieltk)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 12:52pm UTC](https://discuss.elastic.co/t/new-filter-editor-do-not-suggest-values/104021 "2017-10-16T12:52:03Z")

</div>

Hello all, According to the documentation, when using the new "Add filter" values suggestion should be presented, as shown in https://github.com/elastic/kibana/pull/11375 However when I use it no values are suggested. …

---

## [Optimised Keep Alive Time for Scroll API](https://discuss.elastic.co/t/optimised-keep-alive-time-for-scroll-api/227284)

<div class="topic-metadata">

**Author:** [@Ulpcan](https://discuss.elastic.co/u/Ulpcan)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 10:14am UTC](https://discuss.elastic.co/t/optimised-keep-alive-time-for-scroll-api/227284 "2020-04-09T10:14:12Z")

</div>

Hello, I want export my documents using Scroll API or search after request but I can't decide which one should I use. First of all, I have 2 different index. First one is constant, I mean index document size is constan…

---

## [Bulk index not returning source](https://discuss.elastic.co/t/bulk-index-not-returning-source/98353)

<div class="topic-metadata">

**Author:** [@dbrezoev](https://discuss.elastic.co/u/dbrezoev)\
**Replies:** 4\
**Last updated:** [August 28, 2017, 1:00pm UTC](https://discuss.elastic.co/t/bulk-index-not-returning-source/98353 "2017-08-28T13:00:41Z")

</div>

HI, is there a way to return the whole \_source object when using bulkIndex operation ? And how ? I am using the javascript api if that matters. Thanks

---

## [Add support to access remote logs](https://discuss.elastic.co/t/add-support-to-access-remote-logs/77081)

<div class="topic-metadata">

**Author:** [@procule](https://discuss.elastic.co/u/procule)\
**Replies:** 3\
**Last updated:** [March 3, 2017, 3:57am UTC](https://discuss.elastic.co/t/add-support-to-access-remote-logs/77081 "2017-03-03T03:57:40Z")

</div>

Hi again, Following this topic: https://discuss.elastic.co/t/winlogbeat-yml-should-specify-the-api-attribute-is-available/77079/1 In the Winlogbeat code, "localhost" is hardcoded as the Event Log session/log: Here …

---

## [Could you advise me on determining which version of JDK is embedded with Elasticsearch 7.17.14 on RHEL7 - OpenJDK 20 or 21?](https://discuss.elastic.co/t/could-you-advise-me-on-determining-which-version-of-jdk-is-embedded-with-elasticsearch-7-17-14-on-rhel7-openjdk-20-or-21/347294)

<div class="topic-metadata">

**Author:** [@Domnic\_Raj\_D](https://discuss.elastic.co/u/Domnic_Raj_D)\
**Replies:** 3\
**Last updated:** [December 9, 2023, 5:52pm UTC](https://discuss.elastic.co/t/could-you-advise-me-on-determining-which-version-of-jdk-is-embedded-with-elasticsearch-7-17-14-on-rhel7-openjdk-20-or-21/347294 "2023-12-09T17:52:37Z")

</div>

I have collected all breaking changes and deprecations of the ELK stack (Elasticsearch, Kibana, Logstash, Beats) for 7.9 to 7.17.14. Is there anything I need to focus on before moving to the upgrade plan? If you don't mi…

---

## [HTTP error 401 on /api/licensing/info](https://discuss.elastic.co/t/http-error-401-on-api-licensing-info/281542)

<div class="topic-metadata">

**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\
**Replies:** 3\
**Last updated:** [August 28, 2021, 4:04am UTC](https://discuss.elastic.co/t/http-error-401-on-api-licensing-info/281542 "2021-08-28T04:04:42Z")

</div>

Hi everyone, When browsing in Kibana interface i often get disconnected with the message "SESSION\_EXPIRED" and got redirected to the login page Checking in the Kibana logs i see that right before getting disconnected t…

---

## [Подскажите по разделению на два типа лога в разные индексы через filebeat -\> logstash -\> elastic](https://discuss.elastic.co/t/filebeat-logstash-elastic/198834)

<div class="topic-metadata">

**Author:** [@Jhonny-2005](https://discuss.elastic.co/u/Jhonny-2005)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-logstash-elastic/198834 "2019-09-12T14:40:23Z")

</div>

Добрый день. Я только начинающий в настройке. Есть два типа логов. Собственно лог1 и лог2. Мне нужно, чтобы по ним было создано два типа индекса. И обрабатывались они по разным фильтрам. В Filebeat сделал такие настрой…

---

## [Flush vs clear index cache](https://discuss.elastic.co/t/flush-vs-clear-index-cache/142606)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 0\
**Last updated:** [August 1, 2018, 3:12pm UTC](https://discuss.elastic.co/t/flush-vs-clear-index-cache/142606 "2018-08-01T15:12:00Z")

</div>

Would you explain to me what is the difference between flush and clear index cache actions. I need more explanation and when we should use these actions. I read about it in: https://www.elastic.co/guide/en/elasticsearc…

---

## [Memory req for ES in very small-scale operation?](https://discuss.elastic.co/t/memory-req-for-es-in-very-small-scale-operation/89759)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 3\
**Last updated:** [June 17, 2017, 7:22am UTC](https://discuss.elastic.co/t/memory-req-for-es-in-very-small-scale-operation/89759 "2017-06-17T07:22:48Z")

</div>

Hi, I am trying to use Elasticsearch for something very basic and small-scale and am wondering if ES can be configured to run with 1GB of RAM at all. I need to run ES, Logstash and Kibana (ELK). This is for a Ubuntu ser…

---

## [Value of index.blocks.write is auto changed to false](https://discuss.elastic.co/t/value-of-index-blocks-write-is-auto-changed-to-false/252207)

<div class="topic-metadata">

**Author:** [@kamils468](https://discuss.elastic.co/u/kamils468)\
**Replies:** 2\
**Last updated:** [October 19, 2020, 11:48am UTC](https://discuss.elastic.co/t/value-of-index-blocks-write-is-auto-changed-to-false/252207 "2020-10-19T11:48:53Z")

</div>

ES ver. 7.4 I want to block all write actions (create/update/delete) to my index. I need it to copy docs to another index using reindex action and keep 100% consistency between indicies. So what I do is: curl -X PUT \\…

---

## [Delete field mapping](https://discuss.elastic.co/t/delete-field-mapping/70756)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 2\
**Last updated:** [January 7, 2017, 10:03am UTC](https://discuss.elastic.co/t/delete-field-mapping/70756 "2017-01-07T10:03:20Z")

</div>

Hi all, Is there any way to delete the particular field mapping alone from the mapping type?

---

## [ElasticSearch Hadoop integration use-cases](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-use-cases/28538)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 2\
**Last updated:** [December 1, 2016, 8:25am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-use-cases/28538 "2016-12-01T08:25:41Z")

</div>

Hi All, I am looking for real world business use-case scenarios of ES-Hadoop eco system integration, I have come across couple of webinars, but thats pretty much about it, more insights would helpful. Thanks, Tarun

---

## [RESOLVED Logstash fails when output set to elasticsearch "SSLConnectionSocketFactory not found in packages"](https://discuss.elastic.co/t/resolved-logstash-fails-when-output-set-to-elasticsearch-sslconnectionsocketfactory-not-found-in-packages/41407)

<div class="topic-metadata">

**Author:** [@dmx555](https://discuss.elastic.co/u/dmx555)\
**Replies:** 2\
**Last updated:** [June 13, 2016, 10:43am UTC](https://discuss.elastic.co/t/resolved-logstash-fails-when-output-set-to-elasticsearch-sslconnectionsocketfactory-not-found-in-packages/41407 "2016-06-13T10:43:39Z")

</div>

Someone else is probably going to experience the same problem so thought I'd explain how I solve it : simply unset CLASSPATH. AS I am running from a shell which runs HDFS commands and this already sets up a CLASSPATH. l…

---

## [How to handle logstash logs in ubuntu 18.04](https://discuss.elastic.co/t/how-to-handle-logstash-logs-in-ubuntu-18-04/162828)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 5\
**Last updated:** [January 10, 2019, 4:40pm UTC](https://discuss.elastic.co/t/how-to-handle-logstash-logs-in-ubuntu-18-04/162828 "2019-01-10T16:40:36Z")

</div>

i have couple of problem. The logstash document says logs saved in /var/log/logstash folder, but in my case log is saved in /usr/share/logstash/log folder ? so why is that ? Other problem i am having is ubuntu syslog…

---

## [What is the difference between "-oss" and regular docker images](https://discuss.elastic.co/t/what-is-the-difference-between-oss-and-regular-docker-images/205000)

<div class="topic-metadata">

**Author:** [@john\_eapen](https://discuss.elastic.co/u/john_eapen)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 6:01am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-oss-and-regular-docker-images/205000 "2019-10-24T06:01:45Z")

</div>

What are the differences in terms of features and more importantly, are there different validations/ checks etc with one over the other ?. I am using filebeat with kibana and elasticsearch. ( all docker containers with…

---

## [Installation time issue](https://discuss.elastic.co/t/installation-time-issue/183946)

<div class="topic-metadata">

**Author:** [@narendral](https://discuss.elastic.co/u/narendral)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 4:32am UTC](https://discuss.elastic.co/t/installation-time-issue/183946 "2019-06-18T04:32:12Z")

</div>

Environment OS: Ubuntu 16.04 LTS ES: 6.7.1 Package: Debian package I'm facing the issue when applying step 4 from given into document. ERROR sudo dpkg --install elasticsearch-oss-6.7.1.deb (Reading database ... 6…

---

## [How can I show all series data for the vega/vaga lite tooltip like tsvb](https://discuss.elastic.co/t/how-can-i-show-all-series-data-for-the-vega-vaga-lite-tooltip-like-tsvb/252222)

<div class="topic-metadata">

**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\
**Replies:** 4\
**Last updated:** [October 19, 2020, 4:05am UTC](https://discuss.elastic.co/t/how-can-i-show-all-series-data-for-the-vega-vaga-lite-tooltip-like-tsvb/252222 "2020-10-19T04:05:24Z")

</div>

Dear Vega/vaga lite experts, How can I show all series data for the vega/vaga lite tooltip like tsvb (just like the following graph)? Thanks for ur help in advance! Thanks, Roy

---

## [What logstash input plugins can you set sincedb\_path for?](https://discuss.elastic.co/t/what-logstash-input-plugins-can-you-set-sincedb-path-for/187443)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 9:25pm UTC](https://discuss.elastic.co/t/what-logstash-input-plugins-can-you-set-sincedb-path-for/187443 "2019-06-26T21:25:24Z")

</div>

I have seen some Logstash configuration online like this: input { file { start\_position =\> "beginning" sincedb\_path =\> "/pathToSincedb/sincedb" path =\> "/pathToYourData/\*" } } As we can see, there is th…

---

## [Problems with URL template](https://discuss.elastic.co/t/problems-with-url-template/28786)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 4\
**Last updated:** [September 9, 2015, 11:43am UTC](https://discuss.elastic.co/t/problems-with-url-template/28786 "2015-09-09T11:43:25Z")

</div>

So I have a field called "transact" and with string type. I have applied URL formating with the following URL template: http://company.net/profiles?user\_id={­{value}­}. But when I expand data in "Discover", I can see a l…

---

## [How to find duplicate numbers in multiple fields?](https://discuss.elastic.co/t/how-to-find-duplicate-numbers-in-multiple-fields/194346)

<div class="topic-metadata">

**Author:** [@Smkumaran](https://discuss.elastic.co/u/Smkumaran)\
**Replies:** 6\
**Last updated:** [August 22, 2019, 4:04am UTC](https://discuss.elastic.co/t/how-to-find-duplicate-numbers-in-multiple-fields/194346 "2019-08-22T04:04:01Z")

</div>

Hello, Can anyone help me on this please?. I need to match the same values with two different index's and 4 fields in total and then get the results if all four only matches. Example : Index-1 : log-1 Fields : cause…

---

## [HTTP/1.1 500 Server Error{"message":null}](https://discuss.elastic.co/t/http-1-1-500-server-error-message-null/181598)

<div class="topic-metadata">

**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\
**Replies:** 6\
**Last updated:** [May 17, 2019, 3:08pm UTC](https://discuss.elastic.co/t/http-1-1-500-server-error-message-null/181598 "2019-05-17T15:08:19Z")

</div>

Hi, I am encountering error from \_bulk endpoint but I can't solve since the error message sent by ES is null. I am calling the \_bulk endpoint via ES REST API. Here is a snippet of the stacktrace I am getting: HTTP/1.1 …

---

## [Filebeat vs logstash for handling multiline](https://discuss.elastic.co/t/filebeat-vs-logstash-for-handling-multiline/81713)

<div class="topic-metadata">

**Author:** [@santhosh244](https://discuss.elastic.co/u/santhosh244)\
**Replies:** 6\
**Last updated:** [April 9, 2017, 5:18pm UTC](https://discuss.elastic.co/t/filebeat-vs-logstash-for-handling-multiline/81713 "2017-04-09T17:18:56Z")

</div>

Hi, We have 40 instances sending logs parallely to centralized logstash via filebeat. We have tried multiline codec with logstash and filebeat both as well. Both seems to be working. But we see few issues with logs…

---

## [Error installing lang-javascript plugin in Elasticsearch 2.3.2](https://discuss.elastic.co/t/error-installing-lang-javascript-plugin-in-elasticsearch-2-3-2/51445)

<div class="topic-metadata">

**Author:** [@jzrobot](https://discuss.elastic.co/u/jzrobot)\
**Replies:** 6\
**Last updated:** [June 11, 2016, 9:48am UTC](https://discuss.elastic.co/t/error-installing-lang-javascript-plugin-in-elasticsearch-2-3-2/51445 "2016-06-11T09:48:47Z")

</div>

I tried installing the lang-javascript plugin. I had to dowload the file from my browser, because the connection was blocked from cmd. I used the url showed on my console: lang-js plugin I tried to install it on my node …

---

## [No handler for type \[attachment\] declared on field \[content\]](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-content/117375)

<div class="topic-metadata">

**Author:** [@Royner\_Valerio\_Valve](https://discuss.elastic.co/u/Royner_Valerio_Valve)\
**Replies:** 2\
**Last updated:** [January 28, 2018, 6:15pm UTC](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-content/117375 "2018-01-28T18:15:39Z")

</div>

I was working with ingest attachment but when I delete current index because I wanted to regenerate my index but I'm getting this error: { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason": …

---

## [Sorting in a double field](https://discuss.elastic.co/t/sorting-in-a-double-field/3136)

<div class="topic-metadata">

**Author:** [@ajgamer](https://discuss.elastic.co/u/ajgamer)\
**Replies:** 2\
**Last updated:** [July 22, 2010, 6:22pm UTC](https://discuss.elastic.co/t/sorting-in-a-double-field/3136 "2010-07-22T18:22:37Z")

</div>

Hi, I'm trying to sort on a double field(score based sorting) and I'm unable to sort based on score values. My score mapping looks something like this. score" : { "omit\_term\_freq\_and\_positions" :…

---

## ['Unable to process GET request to elasticsearch URL' in Zammad](https://discuss.elastic.co/t/unable-to-process-get-request-to-elasticsearch-url-in-zammad/373650)

<div class="topic-metadata">

**Author:** [@Laszlo\_Horvath](https://discuss.elastic.co/u/Laszlo_Horvath)\
**Replies:** 8\
**Last updated:** [January 25, 2025, 8:57pm UTC](https://discuss.elastic.co/t/unable-to-process-get-request-to-elasticsearch-url-in-zammad/373650 "2025-01-25T20:57:08Z")

</div>

Hello all, I am new to Elastic products, so forgive my ignorance. I've installed Zammad on a Debian server today, everything went well but the search indexing, even though Elasticsearch service is up and running. When…

---

## [Multiple index pattern of same name](https://discuss.elastic.co/t/multiple-index-pattern-of-same-name/236210)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 7:17pm UTC](https://discuss.elastic.co/t/multiple-index-pattern-of-same-name/236210 "2020-06-24T19:17:09Z")

</div>

Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s…

---

## [Force reroute of a primary to a particular node](https://discuss.elastic.co/t/force-reroute-of-a-primary-to-a-particular-node/213617)

<div class="topic-metadata">

**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\
**Replies:** 3\
**Last updated:** [January 2, 2020, 10:42pm UTC](https://discuss.elastic.co/t/force-reroute-of-a-primary-to-a-particular-node/213617 "2020-01-02T22:42:33Z")

</div>

We are operating a very large ES 7.0 cluster where many indices have no replicas. Once the index has turned green, is there a way to force reroute its primary shard to another node within the cluster?

---

## [Elasticsearch Cluster D/C Issues. One sees the other the others doesn't](https://discuss.elastic.co/t/elasticsearch-cluster-d-c-issues-one-sees-the-other-the-others-doesnt/39438)

<div class="topic-metadata">

**Author:** [@Michel\_Laporte](https://discuss.elastic.co/u/Michel_Laporte)\
**Replies:** 8\
**Last updated:** [January 20, 2016, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-d-c-issues-one-sees-the-other-the-others-doesnt/39438 "2016-01-20T14:38:24Z")

</div>

Hi, I have a bit of an issue. I have ES running on a cluster at the office consisting of 4 nodes. (2 Data and 3 master eligible) I am using Graylog as the data collectors and ES to store the information. This is my c…

---

## [How can I change the background colour of Dashboard in 5.3.3](https://discuss.elastic.co/t/how-can-i-change-the-background-colour-of-dashboard-in-5-3-3/94283)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 5:55pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-background-colour-of-dashboard-in-5-3-3/94283 "2017-07-24T17:55:48Z")

</div>

By default, we get white colour as a background of dashboard but I want grey colour as background how can I achieve the same

---

## [Change Kibana 5.2.0 Icon](https://discuss.elastic.co/t/change-kibana-5-2-0-icon/74545)

<div class="topic-metadata">

**Author:** [@salvadors](https://discuss.elastic.co/u/salvadors)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 6:53pm UTC](https://discuss.elastic.co/t/change-kibana-5-2-0-icon/74545 "2017-02-09T18:53:39Z")

</div>

Hi, Is there any way to change Kibana icon to a different icon? We did it in previous versions replacing the kibana.svg file...however, it is not working in this version. Thanks!

---

## [Logstash Stuck Indexing Pipeline and throwing Error - warning: already initialized constant Manticore::Client::HttpPost](https://discuss.elastic.co/t/logstash-stuck-indexing-pipeline-and-throwing-error-warning-already-initialized-constant-manticore-httppost/345948)

<div class="topic-metadata">

**Author:** [@mnasim1](https://discuss.elastic.co/u/mnasim1)\
**Replies:** 5\
**Last updated:** [November 3, 2023, 5:52am UTC](https://discuss.elastic.co/t/logstash-stuck-indexing-pipeline-and-throwing-error-warning-already-initialized-constant-manticore-httppost/345948 "2023-11-03T05:52:57Z")

</div>

Logstash was running fine and successfully reading data from the Postgres Database for indexing. However, it suddenly started throwing the following errors, causing the indexing pipeline to become stuck: logstash-8.6.2…

---

## [Machine Learning: Rare function not working as expected](https://discuss.elastic.co/t/machine-learning-rare-function-not-working-as-expected/92108)

<div class="topic-metadata">

**Author:** [@mev](https://discuss.elastic.co/u/mev)\
**Replies:** 3\
**Last updated:** [July 10, 2017, 3:45pm UTC](https://discuss.elastic.co/t/machine-learning-rare-function-not-working-as-expected/92108 "2017-07-10T15:45:54Z")

</div>

Hi all, I am experimenting with using ML to identify anomalies for rare children of a parent by host. My data looks as follows: { "@timestamp": "2017-01-01T01:01:01.799Z", "combined\_name": "parent1\_child1", …

---

## [Composite Aggregation Query Fails On ElasticSearch 6.3.2](https://discuss.elastic.co/t/composite-aggregation-query-fails-on-elasticsearch-6-3-2/164542)

<div class="topic-metadata">

**Author:** [@ganesh4991](https://discuss.elastic.co/u/ganesh4991)\
**Replies:** 2\
**Last updated:** [January 18, 2019, 4:07pm UTC](https://discuss.elastic.co/t/composite-aggregation-query-fails-on-elasticsearch-6-3-2/164542 "2019-01-18T16:07:06Z")

</div>

I have a Composite Aggregation query executing locally on ElasticSearch Version 6.4.2 using the Java High Level Rest Client. The query runs fine and the result is same as when running the query on Kibana console. Howeve…

---

## [Add discover page in dashboard kibana 4](https://discuss.elastic.co/t/add-discover-page-in-dashboard-kibana-4/25370)

<div class="topic-metadata">

**Author:** [@junior\_h](https://discuss.elastic.co/u/junior_h)\
**Replies:** 2\
**Last updated:** [July 13, 2015, 5:56pm UTC](https://discuss.elastic.co/t/add-discover-page-in-dashboard-kibana-4/25370 "2015-07-13T17:56:55Z")

</div>

Is there any way to add discover page in kibana 4? It is very useful to know all events and graph in the same page. Moreover, I see it can be done in kibana 3. \[image\] Thanks

---

## [Where is the "doc" mapping defined?](https://discuss.elastic.co/t/where-is-the-doc-mapping-defined/168053)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 3\
**Last updated:** [February 14, 2019, 10:56am UTC](https://discuss.elastic.co/t/where-is-the-doc-mapping-defined/168053 "2019-02-14T10:56:51Z")

</div>

Since 6.0 we have been using the mapping/\_type of doc in all our ES Indices. As we have now upgraded to 6.5 we want to migrate to the (almost official) \_doc mapping type. We tried this by creating a new index with the \_…

---

## [ES password containing comma can't be passed as environment variable](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450)

<div class="topic-metadata">

**Author:** [@BitPatty](https://discuss.elastic.co/u/BitPatty)\
**Replies:** 1\
**Last updated:** [January 17, 2022, 4:36pm UTC](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450 "2022-01-17T16:36:25Z")

</div>

I'm passing the password as environment variable to heartbeat.yml on ES 7.16.1 as follows: heartbeat.yml: output: elasticsearch: password: '${ELASTICSEARCH\_PASSWORD}' When using ELASTICSEARCH\_PASSWORD="foo,bar" …

---

## [How to avoid host.name field in filebeat](https://discuss.elastic.co/t/how-to-avoid-host-name-field-in-filebeat/327578)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 4\
**Last updated:** [March 21, 2023, 4:06pm UTC](https://discuss.elastic.co/t/how-to-avoid-host-name-field-in-filebeat/327578 "2023-03-21T16:06:24Z")

</div>

Hi Team, I am sending data to elasticsearch using filebeat once the file were harvested I can see field host.name where the value is hostname of the VM { "\_index": "filebeat-7.17.6-2023.03.13-000001", "\_type":…

---

## [Gradient color fill in shapes in kibana canvas](https://discuss.elastic.co/t/gradient-color-fill-in-shapes-in-kibana-canvas/189242)

<div class="topic-metadata">

**Author:** [@Vartika\_Srivastava](https://discuss.elastic.co/u/Vartika_Srivastava)\
**Replies:** 4\
**Last updated:** [July 8, 2019, 5:22pm UTC](https://discuss.elastic.co/t/gradient-color-fill-in-shapes-in-kibana-canvas/189242 "2019-07-08T17:22:15Z")

</div>

Hi, how to fill gradient color in shapes in kibana canvas? I tried - "shape "square" fill="linear-gradient(to right, red , yellow)" border="rgba(255,255,255,0)" borderWidth=0 maintainAspect=false | render " but it…

---

## [Mensaje de error al indexar datos](https://discuss.elastic.co/t/mensaje-de-error-al-indexar-datos/60113)

<div class="topic-metadata">

**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\
**Replies:** 4\
**Last updated:** [September 14, 2016, 12:30pm UTC](https://discuss.elastic.co/t/mensaje-de-error-al-indexar-datos/60113 "2016-09-14T12:30:54Z")

</div>

Buenas, en uno de los nodos clientes estoy recibiendo el mensaje: \[2016-09-08 19:48:29,158\]\[WARN \]\[transport \] \[G-ES-CLIENT-01\] Transport response handler not found of id \[18558\] En el otro nodo no …

---

## [Watcher issue in x-pack](https://discuss.elastic.co/t/watcher-issue-in-x-pack/48508)

<div class="topic-metadata">

**Author:** [@udaykirankona](https://discuss.elastic.co/u/udaykirankona)\
**Replies:** 4\
**Last updated:** [April 27, 2016, 11:33am UTC](https://discuss.elastic.co/t/watcher-issue-in-x-pack/48508 "2016-04-27T11:33:10Z")

</div>

Hi guys, I installed ES. logstash. kibana 5.0 with x-pack. when I am trying to run following command curl --user watching:watching -XGET 'http://localhost:9200/.watcher-history\*/\_search?pretty' I am getting follo…

[Previous page](https://discuss.elastic.co/top.md?page=844&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=846&per_page=50&period=all)
