# Top

**URL:** https://discuss.elastic.co/top.md?page=853&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 854

---

## [Remove Empty String Value](https://discuss.elastic.co/t/remove-empty-string-value/170560)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 8:59pm UTC](https://discuss.elastic.co/t/remove-empty-string-value/170560 "2019-03-01T20:59:27Z")

</div>

Running Logstash 6.4.1 I have a field that contains an array of numbers. I am converting the field to string values so that I can translate them to their text values with gsub. All of this works great, except that for…

---

## [Fatal error: Cannot delete files/folders outside the current working directory](https://discuss.elastic.co/t/fatal-error-cannot-delete-files-folders-outside-the-current-working-directory/190299)

<div class="topic-metadata">

**Author:** [@mxplusb](https://discuss.elastic.co/u/mxplusb)\
**Replies:** 2\
**Last updated:** [July 18, 2019, 11:29am UTC](https://discuss.elastic.co/t/fatal-error-cannot-delete-files-folders-outside-the-current-working-directory/190299 "2019-07-18T11:29:28Z")

</div>

I was reading through this post, and I have the exact same issue on Kibana 6.4.3: FATAL Error: Cannot delete files/folders outside the current working directory. Can be overriden with the \`force\` option. at safeChec…

---

## [Enable set fielddata=true in Kibana](https://discuss.elastic.co/t/enable-set-fielddata-true-in-kibana/155871)

<div class="topic-metadata">

**Author:** [@roopeshetty](https://discuss.elastic.co/u/roopeshetty)\
**Replies:** 2\
**Last updated:** [November 9, 2018, 11:11am UTC](https://discuss.elastic.co/t/enable-set-fielddata-true-in-kibana/155871 "2018-11-09T11:11:14Z")

</div>

All I want is to run this below commands in DEV Tools – Console of Kibana in order to enable set fielddata=true on one my newly created field “Days\_Remaining” (this new field we created using Grok filter in logstash.json…

---

## [Curator over SSL](https://discuss.elastic.co/t/curator-over-ssl/52303)

<div class="topic-metadata">

**Author:** [@ympark](https://discuss.elastic.co/u/ympark)\
**Replies:** 2\
**Last updated:** [June 13, 2016, 7:32am UTC](https://discuss.elastic.co/t/curator-over-ssl/52303 "2016-06-13T07:32:33Z")

</div>

Hi, Thank you for providing such good applications! I am using Elasticsearch.curator to manage indices. Recently I started working with a Security plugin (Search Guard, Not Shield). Basically my problem is curator wit…

---

## [Anchored Regex on array of tags](https://discuss.elastic.co/t/anchored-regex-on-array-of-tags/45741)

<div class="topic-metadata">

**Author:** [@Ronan\_Foucher](https://discuss.elastic.co/u/Ronan_Foucher)\
**Replies:** 2\
**Last updated:** [March 30, 2016, 4:56pm UTC](https://discuss.elastic.co/t/anchored-regex-on-array-of-tags/45741 "2016-03-30T16:56:57Z")

</div>

Hi, So I'm having a hard time getting my anchored regex to work the way I want on my array of tags (I disabled analyzing) { "doc": { "mappings": { "info": { "properties": { …

---

## [FIlebeat 5.0.1 crashing](https://discuss.elastic.co/t/filebeat-5-0-1-crashing/75445)

<div class="topic-metadata">

**Author:** [@Ashwani\_Gupta](https://discuss.elastic.co/u/Ashwani_Gupta)\
**Replies:** 4\
**Last updated:** [February 21, 2017, 11:31am UTC](https://discuss.elastic.co/t/filebeat-5-0-1-crashing/75445 "2017-02-21T11:31:09Z")

</div>

Hi, I have a set up of filebeat -\>logstash -\> elasticsearch on 16 core RHEL I recently upgraded my filebeat from 1.0.0 to 5.0.1 and logstash from 2.1.1 to 2.4.0 2 days back. Filebeat suddenly gets stopped twice in …

---

## [Is there a systemd units file available for logstash 1.5 on centOS 7](https://discuss.elastic.co/t/is-there-a-systemd-units-file-available-for-logstash-1-5-on-centos-7/32937)

<div class="topic-metadata">

**Author:** [@JamesNJ](https://discuss.elastic.co/u/JamesNJ)\
**Replies:** 1\
**Last updated:** [October 25, 2015, 11:49pm UTC](https://discuss.elastic.co/t/is-there-a-systemd-units-file-available-for-logstash-1-5-on-centos-7/32937 "2015-10-25T23:49:35Z")

</div>

I loaded my CentOS 7 logstash 1.5 via yum from: http://packages.elasticsearch.org/logstash/1.5/centos However it doesn't seem to come with a systemd units file (elasticsearch has one). There is an /etc/init.d/logstash…

---

## [How to do "housekeeping"](https://discuss.elastic.co/t/how-to-do-housekeeping/13405)

<div class="topic-metadata">

**Author:** [@OhNo](https://discuss.elastic.co/u/OhNo)\
**Replies:** 1\
**Last updated:** [August 30, 2013, 10:51am UTC](https://discuss.elastic.co/t/how-to-do-housekeeping/13405 "2013-08-30T10:51:10Z")

</div>

Hey folks, i use elasticsearch to index my derby Database and so use the river-jdbc plugin. Now i have a few questions: - How can i refresh my index manually, after i changed some data in my db? For test purpos…

---

## [Getting java.lang.ArrayIndexOutOfBoundsException while searching](https://discuss.elastic.co/t/getting-java-lang-arrayindexoutofboundsexception-while-searching/35756)

<div class="topic-metadata">

**Author:** [@Anusha](https://discuss.elastic.co/u/Anusha)\
**Replies:** 5\
**Last updated:** [December 8, 2015, 10:07am UTC](https://discuss.elastic.co/t/getting-java-lang-arrayindexoutofboundsexception-while-searching/35756 "2015-12-08T10:07:02Z")

</div>

Hi Team, I am using java api to get the search response, SearchResponse response = client.prepareSearch(index).setTypes(indextype).setSize(7878151).execute().actionGet(); Am getting the following Exception: Excep…

---

## [Keystore need help](https://discuss.elastic.co/t/keystore-need-help/25988)

<div class="topic-metadata">

**Author:** [@quejinho](https://discuss.elastic.co/u/quejinho)\
**Replies:** 5\
**Last updated:** [July 23, 2015, 12:12pm UTC](https://discuss.elastic.co/t/keystore-need-help/25988 "2015-07-23T12:12:18Z")

</div>

My english is quite bad. I need a bit of help with creating the secure connection with keystore from my logstash -\> transport -\> shield . Without doing anything with CA how is it possible ? Can someone guide me with i…

---

## [Logstash - rabbitmq config to get multiple queues data to multiple elastic indeces](https://discuss.elastic.co/t/logstash-rabbitmq-config-to-get-multiple-queues-data-to-multiple-elastic-indeces/328520)

<div class="topic-metadata">

**Author:** [@qrshat](https://discuss.elastic.co/u/qrshat)\
**Replies:** 5\
**Last updated:** [March 25, 2023, 10:20pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-config-to-get-multiple-queues-data-to-multiple-elastic-indeces/328520 "2023-03-25T22:20:13Z")

</div>

scenario: rabbitmq have different queues more than three. I want to make logstash configuration to get data from the rabbitmq queue and index this data to Elasticsearch. In order to that I have created logstash conf fi…

---

## [My ela cluster failed to load metadata when running, but I can't see the other problem. If there is the same problem, please help to take a look](https://discuss.elastic.co/t/my-ela-cluster-failed-to-load-metadata-when-running-but-i-cant-see-the-other-problem-if-there-is-the-same-problem-please-help-to-take-a-look/326286)

<div class="topic-metadata">

**Author:** [@limedong1](https://discuss.elastic.co/u/limedong1)\
**Replies:** 8\
**Last updated:** [February 27, 2023, 3:17am UTC](https://discuss.elastic.co/t/my-ela-cluster-failed-to-load-metadata-when-running-but-i-cant-see-the-other-problem-if-there-is-the-same-problem-please-help-to-take-a-look/326286 "2023-02-27T03:17:01Z")

</div>

Here is the error message： {"@timestamp":"2023-02-23T08:43:40.767Z", "log.level":"ERROR", "message":"fatal exception while booting Elasticsearch", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elastic…

---

## [Elasticsearch build failure](https://discuss.elastic.co/t/elasticsearch-build-failure/276965)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 3\
**Last updated:** [June 25, 2021, 6:55pm UTC](https://discuss.elastic.co/t/elasticsearch-build-failure/276965 "2021-06-25T18:55:57Z")

</div>

Hello, I was running ELK from source, and today I run "git pull" and tried to build again, but when I run "./gradlew assemble" I am getting these errors : FAILURE: Build failed with an exception. \* What went wrong: A …

---

## [Not all transactions/spans are sent from agent / stored in elastic and worse when using addLabels](https://discuss.elastic.co/t/not-all-transactions-spans-are-sent-from-agent-stored-in-elastic-and-worse-when-using-addlabels/179961)

<div class="topic-metadata">

**Author:** [@sammaxwell](https://discuss.elastic.co/u/sammaxwell)\
**Replies:** 8\
**Last updated:** [May 7, 2019, 6:44pm UTC](https://discuss.elastic.co/t/not-all-transactions-spans-are-sent-from-agent-stored-in-elastic-and-worse-when-using-addlabels/179961 "2019-05-07T18:44:26Z")

</div>

Kibana version: 6.7.1 Elasticsearch version: 6.7.1 APM Server version: 6.6.1 APM Agent language and version: nodejs 2.11.0 Description of the problem including expected versus actual behavior. Please include screensh…

---

## [HTTP Poller in Logstash - input separation to multiple fields](https://discuss.elastic.co/t/http-poller-in-logstash-input-separation-to-multiple-fields/142910)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 3\
**Last updated:** [August 3, 2018, 4:42pm UTC](https://discuss.elastic.co/t/http-poller-in-logstash-input-separation-to-multiple-fields/142910 "2018-08-03T16:42:21Z")

</div>

Hello, I have just started my adventure with Logstash. I would like to create new json in elasticsearch for every new line. By default whole file is loaded in a message field: Kibana output: { "\_index": "blacklists…

---

## [How to configure metricbeat to monitor JVM memory](https://discuss.elastic.co/t/how-to-configure-metricbeat-to-monitor-jvm-memory/125106)

<div class="topic-metadata">

**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\
**Replies:** 3\
**Last updated:** [March 22, 2018, 12:08pm UTC](https://discuss.elastic.co/t/how-to-configure-metricbeat-to-monitor-jvm-memory/125106 "2018-03-22T12:08:45Z")

</div>

I Have to monitor my server JVM heap , garbage collections analysis in metricbeat. How to do it?

---

## [Send logs from Windows without agent / winlogbeat / filebeat](https://discuss.elastic.co/t/send-logs-from-windows-without-agent-winlogbeat-filebeat/120600)

<div class="topic-metadata">

**Author:** [@Roy\_Binderman](https://discuss.elastic.co/u/Roy_Binderman)\
**Replies:** 3\
**Last updated:** [February 21, 2018, 2:35pm UTC](https://discuss.elastic.co/t/send-logs-from-windows-without-agent-winlogbeat-filebeat/120600 "2018-02-21T14:35:47Z")

</div>

Hi - I'm new to ELK-Stack, I've managed to install & config the ELK stack on Ubuntu server (I'm a professional Linux sysadmin...) and to setup the winlogbeat on a windows client, I wonder if there is a way to send logs f…

---

## [A clarification about index aliases is needed here](https://discuss.elastic.co/t/a-clarification-about-index-aliases-is-needed-here/50125)

<div class="topic-metadata">

**Author:** [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)\
**Replies:** 8\
**Last updated:** [May 18, 2016, 1:50pm UTC](https://discuss.elastic.co/t/a-clarification-about-index-aliases-is-needed-here/50125 "2016-05-18T13:50:22Z")

</div>

Hi, Is it possible to create an index alias that when users will connect to (for example by using Kibana) they will see only part of the data (for example - only SOME of the types that exist on the relevant index)? I…

---

## [Elasticsearch Malformed Query, Expected \[END\_OBJECT\] but found \[Field\_Name\]](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/329072)

<div class="topic-metadata">

**Author:** [@elrozario](https://discuss.elastic.co/u/elrozario)\
**Replies:** 2\
**Last updated:** [March 31, 2023, 7:33pm UTC](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/329072 "2023-03-31T19:33:54Z")

</div>

Hello, I am trying to run reindex with query but getting the error Malformed Query, Expected \[END\_OBJECT\] but found \[Field\_Name\]. { "source": { "index": "index-\*", "\_source" : \[ "@timestamp", "message"\], …

---

## [Painless max script size limit?](https://discuss.elastic.co/t/painless-max-script-size-limit/289707)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 2\
**Last updated:** [November 19, 2021, 5:58pm UTC](https://discuss.elastic.co/t/painless-max-script-size-limit/289707 "2021-11-19T17:58:14Z")

</div>

It used to be that the total size of a painless stored script was 16384, from a hard-coded system limit I've seen referenced before as MAXIMUM\_SOURCE\_LENGTH = 16384. I've run into the limit within the last few years and…

---

## [Elasticserach Error](https://discuss.elastic.co/t/elasticserach-error/95627)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 12:41pm UTC](https://discuss.elastic.co/t/elasticserach-error/95627 "2017-08-03T12:41:52Z")

</div>

File “/usr/lib/python2.7/site-packages/elasticsearch/connection/base.py”, line 125, in \_raise\_error raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)(status\_code, error\_message, additional\_info) elasticsearch.exce…

---

## [Accessing Watcher Payload for Buckets](https://discuss.elastic.co/t/accessing-watcher-payload-for-buckets/83209)

<div class="topic-metadata">

**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 7:04am UTC](https://discuss.elastic.co/t/accessing-watcher-payload-for-buckets/83209 "2017-04-25T07:04:59Z")

</div>

HI Community, was working on a watch to compare the 7 days for errors. now I only got the problem, how can i access it to compared it? :confused: "result": { "execution\_time": "2017-04-21T12:32:53.804Z", "ex…

---

## [Logstash 2.2.0 File Input ignores sincedb\_path option when running as a service](https://discuss.elastic.co/t/logstash-2-2-0-file-input-ignores-sincedb-path-option-when-running-as-a-service/41516)

<div class="topic-metadata">

**Author:** [@Eric\_Howard](https://discuss.elastic.co/u/Eric_Howard)\
**Replies:** 2\
**Last updated:** [February 14, 2016, 11:30am UTC](https://discuss.elastic.co/t/logstash-2-2-0-file-input-ignores-sincedb-path-option-when-running-as-a-service/41516 "2016-02-14T11:30:53Z")

</div>

This is with Logstash 2.2.0 I have the following input in my configuration file: input { file { path =\> /opt/logstash/file.txt start\_position =\> "beginning" sincedb\_path =\> "/opt/logstash/sinced…

---

## ["Too many open files" error on Mac OSX](https://discuss.elastic.co/t/too-many-open-files-error-on-mac-osx/11940)

<div class="topic-metadata">

**Author:** [@Allen\_Wyatt](https://discuss.elastic.co/u/Allen_Wyatt)\
**Replies:** 2\
**Last updated:** [June 30, 2014, 3:54pm UTC](https://discuss.elastic.co/t/too-many-open-files-error-on-mac-osx/11940 "2014-06-30T15:54:33Z")

</div>

Elasticsearch is giving me "Too many open files" errors on my macbook running OSX 10.8.3 and I can not figure out how to configure Elasticsearch to use more files. I've found several web pages showing how to incre…

---

## [NGINX access grok pattern](https://discuss.elastic.co/t/nginx-access-grok-pattern/104885)

<div class="topic-metadata">

**Author:** [@gotjoshua](https://discuss.elastic.co/u/gotjoshua)\
**Replies:** 1\
**Last updated:** [October 23, 2017, 1:31pm UTC](https://discuss.elastic.co/t/nginx-access-grok-pattern/104885 "2017-10-23T13:31:33Z")

</div>

Lets take this message as an example: message: sub.ourhost.org 10.10.10.10 - - \[23/Oct/2017:09:30:23 +0000\] "POST /api/v4/jobs/request HTTP/1.1" 204 0 "-" "gitlab-runner 10.0.1 (10-0-stable; go1.8.3; linux/amd64)" If…

---

## [Using Latitude and Longitude data for Geohash location for tile map](https://discuss.elastic.co/t/using-latitude-and-longitude-data-for-geohash-location-for-tile-map/41448)

<div class="topic-metadata">

**Author:** [@Wolls013](https://discuss.elastic.co/u/Wolls013)\
**Replies:** 1\
**Last updated:** [February 12, 2016, 12:13am UTC](https://discuss.elastic.co/t/using-latitude-and-longitude-data-for-geohash-location-for-tile-map/41448 "2016-02-12T00:13:46Z")

</div>

Hi everyone, I'm pretty new to the ELK stack and looking for some guidance on using some of my data on the tile map. All of my events already contain Latitude and Longitude data so i'm curious about how I can use the…

---

## [How to handle multiple app logs using single log-stash instance](https://discuss.elastic.co/t/how-to-handle-multiple-app-logs-using-single-log-stash-instance/37472)

<div class="topic-metadata">

**Author:** [@sampath\_methuku](https://discuss.elastic.co/u/sampath_methuku)\
**Replies:** 1\
**Last updated:** [December 17, 2015, 3:37pm UTC](https://discuss.elastic.co/t/how-to-handle-multiple-app-logs-using-single-log-stash-instance/37472 "2015-12-17T15:37:03Z")

</div>

we have 5 types apps which generates log in different format , and I want to store these 5 apps logs in 5 different indexes , but I want to use only single log-stash instance . to differentiate the input at logstash l…

---

## [Uninstalling x-pack plugin from Kibana Docker image (5.6.1) broken: Unable to remove plugin because of error: "ENOTEMPTY: directory not empty, rmdir '/usr/share/kibana/plugins/x-pack/.phantom'"](https://discuss.elastic.co/t/uninstalling-x-pack-plugin-from-kibana-docker-image-5-6-1-broken-unable-to-remove-plugin-because-of-error-enotempty-directory-not-empty-rmdir-usr-share-kibana-plugins-x-pack-phantom/101744)

<div class="topic-metadata">

**Author:** [@kspear](https://discuss.elastic.co/u/kspear)\
**Replies:** 4\
**Last updated:** [October 10, 2017, 5:53pm UTC](https://discuss.elastic.co/t/uninstalling-x-pack-plugin-from-kibana-docker-image-5-6-1-broken-unable-to-remove-plugin-because-of-error-enotempty-directory-not-empty-rmdir-usr-share-kibana-plugins-x-pack-phantom/101744 "2017-10-10T17:53:52Z")

</div>

Relates to this GitHub issue (now closed). Opening a thread here at the suggestion of kobelb, who closed the original GitHub issue. I can confirm, though, that the problem is present as of the latest available Kibana Do…

---

## [Filebeat is not sending the logs to the logstash](https://discuss.elastic.co/t/filebeat-is-not-sending-the-logs-to-the-logstash/141101)

<div class="topic-metadata">

**Author:** [@siva1](https://discuss.elastic.co/u/siva1)\
**Replies:** 5\
**Last updated:** [July 25, 2018, 4:45pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-the-logs-to-the-logstash/141101 "2018-07-25T16:45:37Z")

</div>

Hi All, I am using filebeat and ELK stack. I am not getting any logs from the filebeat to Logstash. Can anyone help me. Its very urgent. Filebeat version : 6.0.0 ELK stack(sebp/elk) : 6.0.0 Filebeat.config :-- fileb…

---

## [Filebeats with postgresql module, custom log\_line\_prefix](https://discuss.elastic.co/t/filebeats-with-postgresql-module-custom-log-line-prefix/204457)

<div class="topic-metadata">

**Author:** [@mashuma](https://discuss.elastic.co/u/mashuma)\
**Replies:** 3\
**Last updated:** [October 22, 2019, 1:59pm UTC](https://discuss.elastic.co/t/filebeats-with-postgresql-module-custom-log-line-prefix/204457 "2019-10-22T13:59:13Z")

</div>

Hello, I'm struggling to set up filebeats with postrgesql module in order to ship postgresql logs to Elastic. The logs can be seen in Kibana, however they are not parsed and present following error message Provided Gr…

---

## [Yii2 logs to es via logstash](https://discuss.elastic.co/t/yii2-logs-to-es-via-logstash/191960)

<div class="topic-metadata">

**Author:** [@manish\_kaushik](https://discuss.elastic.co/u/manish_kaushik)\
**Replies:** 3\
**Last updated:** [July 24, 2019, 4:02pm UTC](https://discuss.elastic.co/t/yii2-logs-to-es-via-logstash/191960 "2019-07-24T16:02:42Z")

</div>

\`I have been trying to index the logs to elasticsearch and making custom grok patterns. I have created some pattern but unable to complete the rest to match it. I would like to know whether i am dong right and if there i…

---

## [Logstash kafka input not working](https://discuss.elastic.co/t/logstash-kafka-input-not-working/180171)

<div class="topic-metadata">

**Author:** [@RonenNess](https://discuss.elastic.co/u/RonenNess)\
**Replies:** 3\
**Last updated:** [May 12, 2019, 11:54am UTC](https://discuss.elastic.co/t/logstash-kafka-input-not-working/180171 "2019-05-12T11:54:51Z")

</div>

Hello, I have this very simple logstash config: input { kafka { topics =\> \["analytics"\] bootstrap\_servers =\> "HSTSCSRP2:9092" auto\_offset\_reset =\> "earliest" } } output { elasticse…

---

## [How to apply an ILM to a rollup index](https://discuss.elastic.co/t/how-to-apply-an-ilm-to-a-rollup-index/226849)

<div class="topic-metadata">

**Author:** [@rhalliday](https://discuss.elastic.co/u/rhalliday)\
**Replies:** 2\
**Last updated:** [April 7, 2020, 8:53am UTC](https://discuss.elastic.co/t/how-to-apply-an-ilm-to-a-rollup-index/226849 "2020-04-07T08:53:42Z")

</div>

We are creating an aggregated set of data using the rollup job feature in Elasticsearch 7.5.2. Creating the rollup job works and we have an index that contains the aggregated data, but we're using a hot/warm architecture…

---

## [Use distance on dense vectors in relevance score (at query time)](https://discuss.elastic.co/t/use-distance-on-dense-vectors-in-relevance-score-at-query-time/217012)

<div class="topic-metadata">

**Author:** [@thomas-chauvet](https://discuss.elastic.co/u/thomas-chauvet)\
**Replies:** 2\
**Last updated:** [February 4, 2020, 3:21pm UTC](https://discuss.elastic.co/t/use-distance-on-dense-vectors-in-relevance-score-at-query-time/217012 "2020-02-04T15:21:21Z")

</div>

I use elasticsearch to combine different things: search in text score based on dense vector (cosine similarity) I use a query with function\_score. The first part is the search in the text (giving a score) and THEN a s…

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/93921)

<div class="topic-metadata">

**Author:** [@PhillippOhlandt](https://discuss.elastic.co/u/PhillippOhlandt)\
**Replies:** 2\
**Last updated:** [July 20, 2017, 8:39pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/93921 "2017-07-20T20:39:01Z")

</div>

Hey, I want to index a nested array. It works fine for some of my data, but sometimes I get the error from the title. The string it complains on (which is an array key): Ask Questions\\n\\nJoin the discussion...\\n\\n…

---

## [Elasticsearch Split brain Mechanism?](https://discuss.elastic.co/t/elasticsearch-split-brain-mechanism/80777)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 7:21am UTC](https://discuss.elastic.co/t/elasticsearch-split-brain-mechanism/80777 "2017-03-31T07:21:39Z")

</div>

Hi, I went through the split brain mechanism documentation in elastic.co . I have few doubts regarding documentation part: Scenario 1: two master-eligible nodes,minimum\_master\_nodes =1 1) Any data that has been wri…

---

## [Capturing stack traces from GraphQLErrors in Apollo Server](https://discuss.elastic.co/t/capturing-stack-traces-from-graphqlerrors-in-apollo-server/212563)

<div class="topic-metadata">

**Author:** [@bstebar](https://discuss.elastic.co/u/bstebar)\
**Replies:** 1\
**Last updated:** [January 14, 2020, 7:06am UTC](https://discuss.elastic.co/t/capturing-stack-traces-from-graphqlerrors-in-apollo-server/212563 "2020-01-14T07:06:58Z")

</div>

Kibana version: 7.5.0 Elasticsearch version: 7.5.0 APM Server version: 7.5.0 APM Agent language and version: Node.js Agent 3.3.0 Browser version: Google Chrome Version 79.0.3945.88 (Official Build) (64-bit) Original…

---

## [A fix for 'A document doesn't have a value for a field' doesn't work anymore](https://discuss.elastic.co/t/a-fix-for-a-document-doesnt-have-a-value-for-a-field-doesnt-work-anymore/212730)

<div class="topic-metadata">

**Author:** [@Devopsio](https://discuss.elastic.co/u/Devopsio)\
**Replies:** 1\
**Last updated:** [December 23, 2019, 1:46pm UTC](https://discuss.elastic.co/t/a-fix-for-a-document-doesnt-have-a-value-for-a-field-doesnt-work-anymore/212730 "2019-12-23T13:46:08Z")

</div>

Hi. I have a scripted field below and when I'm trying to visualize it by the field, it throws a 400 error, "A document doesn't have a value for a field". I've tried suggestions on the forum but none of them work. Were th…

---

## [ML alerts triggering on interim result](https://discuss.elastic.co/t/ml-alerts-triggering-on-interim-result/158408)

<div class="topic-metadata">

**Author:** [@benpolzin](https://discuss.elastic.co/u/benpolzin)\
**Replies:** 7\
**Last updated:** [November 30, 2018, 5:46pm UTC](https://discuss.elastic.co/t/ml-alerts-triggering-on-interim-result/158408 "2018-11-30T17:46:19Z")

</div>

After upgrading from 6.3 to 6.5.0 I've been getting Watcher alerts from ML jobs that are false positives. If I click on the alert link fairly quickly I see 0 hits when there should be some large number, but it also says …

---

## [Cannot access Kibana from the browser](https://discuss.elastic.co/t/cannot-access-kibana-from-the-browser/249848)

<div class="topic-metadata">

**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\
**Replies:** 6\
**Last updated:** [September 24, 2020, 10:01pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-from-the-browser/249848 "2020-09-24T22:01:24Z")

</div>

I am using a basic license with Logstash, Elasticsearch and Kibana. I am able to start all services successfully but Kibana cannot be accessed from the browser. It used to work but suddenly stop when reaching the hostnam…

---

## [Search syntax](https://discuss.elastic.co/t/search-syntax/31653)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 6\
**Last updated:** [October 6, 2015, 2:03pm UTC](https://discuss.elastic.co/t/search-syntax/31653 "2015-10-06T14:03:06Z")

</div>

In Discover I am searching like this: event:"auth". I thought that would ONLY match the string auth in the event field, since I have quoted the string. But it also results in hits where auth is included in other fields. …

---

## [Terms\_set within a nested query](https://discuss.elastic.co/t/terms-set-within-a-nested-query/218852)

<div class="topic-metadata">

**Author:** [@edragom](https://discuss.elastic.co/u/edragom)\
**Replies:** 0\
**Last updated:** [February 11, 2020, 7:28pm UTC](https://discuss.elastic.co/t/terms-set-within-a-nested-query/218852 "2020-02-11T19:28:44Z")

</div>

Is it possible to use a terms\_set within a nested query? I haven't be able to find any examples or documentation. Various testing attempts have failed. Most recently it has looked like... Mappings as... { "mappings":…

---

## [\[CH\] ES Meetup in Geneva - Switzerland, 3rd September 2019](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-3rd-september-2019/195441)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 0\
**Last updated:** [August 16, 2019, 7:04am UTC](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-3rd-september-2019/195441 "2019-08-16T07:04:00Z")

</div>

For our next Elastic meetup in Western Switzerland that will be hosted by Banque Pictet in Geneva, we're happy to announce two great talks: The first talk by Loïc Dumont (from Banque Pictet) will be focused on how they …

---

## [Throttle filter: Notify on throttle](https://discuss.elastic.co/t/throttle-filter-notify-on-throttle/261861)

<div class="topic-metadata">

**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\
**Replies:** 8\
**Last updated:** [January 24, 2021, 4:51pm UTC](https://discuss.elastic.co/t/throttle-filter-notify-on-throttle/261861 "2021-01-24T16:51:15Z")

</div>

When using the throttle filter, how would I go about notifying one event once the throttle has triggered? Meaning if I allow 5 events per minute, I'd like to know somehow if there has been a 6th event and send a mail or…

---

## [Roles from roles.yml are not visible in Kibana](https://discuss.elastic.co/t/roles-from-roles-yml-are-not-visible-in-kibana/188970)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 3\
**Last updated:** [July 5, 2019, 9:29pm UTC](https://discuss.elastic.co/t/roles-from-roles-yml-are-not-visible-in-kibana/188970 "2019-07-05T21:29:40Z")

</div>

When I use GET /\_security/role/ in Dev tools, I can't see the roles that are defined in roles.yml. How can I see those roles in Kibana ?

---

## [Horizontal scroll in kibana discover](https://discuss.elastic.co/t/horizontal-scroll-in-kibana-discover/150857)

<div class="topic-metadata">

**Author:** [@kishore\_narni](https://discuss.elastic.co/u/kishore_narni)\
**Replies:** 4\
**Last updated:** [November 5, 2018, 11:03am UTC](https://discuss.elastic.co/t/horizontal-scroll-in-kibana-discover/150857 "2018-11-05T11:03:23Z")

</div>

When iam seeing the data through kibana search. This horizontal scrollbar issue is big trouble for us especially when there are more number of columns and rows. While seeing the data, horizontal scroll bar is appearing…

---

## [Kibana dev environment - npm start error](https://discuss.elastic.co/t/kibana-dev-environment-npm-start-error/77870)

<div class="topic-metadata">

**Author:** [@rockdale](https://discuss.elastic.co/u/rockdale)\
**Replies:** 4\
**Last updated:** [March 23, 2017, 5:17pm UTC](https://discuss.elastic.co/t/kibana-dev-environment-npm-start-error/77870 "2017-03-23T17:17:10Z")

</div>

I am trying to write a plugin for Kibana 4.4.2 - that the version we are still using. I got the source code by git clone and download as zip - both have the same error when I run npm start. I also installed the latest n…

---

## [How to stream results on a websocket with percolator?](https://discuss.elastic.co/t/how-to-stream-results-on-a-websocket-with-percolator/8341)

<div class="topic-metadata">

**Author:** [@Sebastien\_Lorber](https://discuss.elastic.co/u/Sebastien_Lorber)\
**Replies:** 4\
**Last updated:** [July 7, 2012, 1:30pm UTC](https://discuss.elastic.co/t/how-to-stream-results-on-a-websocket-with-percolator/8341 "2012-07-07T13:30:22Z")

</div>

Hello What i would like to do is: - User1 and User2 are friend - Both have an open websocket - User1 post a new document - Because of friendship, User2 receives the document within the websocket I've checke…

---

## [How to increase number of shards in parallel that are initializing or relocating](https://discuss.elastic.co/t/how-to-increase-number-of-shards-in-parallel-that-are-initializing-or-relocating/294946)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 7:59pm UTC](https://discuss.elastic.co/t/how-to-increase-number-of-shards-in-parallel-that-are-initializing-or-relocating/294946 "2022-01-20T19:59:47Z")

</div>

Hello. I use Elasticsearch 6.8 in a cluster of 8 servers. Sometimes I need to do some hardware task on one of servers and need to move shards from that node to others or initilaize them on other nodes. Before start I ru…

---

## [Datatable visualization row background color conditional formatting](https://discuss.elastic.co/t/datatable-visualization-row-background-color-conditional-formatting/166551)

<div class="topic-metadata">

**Author:** [@riteshun](https://discuss.elastic.co/u/riteshun)\
**Replies:** 1\
**Last updated:** [January 31, 2019, 8:56pm UTC](https://discuss.elastic.co/t/datatable-visualization-row-background-color-conditional-formatting/166551 "2019-01-31T20:56:34Z")

</div>

Is there a way to achieve conditional formatting in a datatable visualization.. we would like to have row background red in case a column value is over certain percentage. Thanks

[Previous page](https://discuss.elastic.co/top.md?page=852&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=854&per_page=50&period=all)
