# Top

**URL:** https://discuss.elastic.co/top.md?page=871&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 872

---

## [Sorting Problem, ClassCastException](https://discuss.elastic.co/t/sorting-problem-classcastexception/18911)

<div class="topic-metadata">

**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\
**Replies:** 2\
**Last updated:** [August 6, 2014, 10:46am UTC](https://discuss.elastic.co/t/sorting-problem-classcastexception/18911 "2014-08-06T10:46:08Z")

</div>

In my document I have field called created like "2014-07-25T06:02:00", the mappings is: created: { format: dateOptionalTime type: date } Here with the range query on that is fine, but why sort on that fie…

---

## [Логирование Squid и Exchange](https://discuss.elastic.co/t/squid-exchange/200476)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 8\
**Last updated:** [September 23, 2019, 1:55pm UTC](https://discuss.elastic.co/t/squid-exchange/200476 "2019-09-23T13:55:09Z")

</div>

Добрый день. Возникло желание для этих двух систем настроить долговременное хранение логов. Поиск готовых решений привел к некоторым результатам, но есть некоторые проблемы: Squid. Он генерирует огромное, для нашей и…

---

## [Kibana Time filter time filter](https://discuss.elastic.co/t/kibana-time-filter-time-filter/142230)

<div class="topic-metadata">

**Author:** [@logesh\_j](https://discuss.elastic.co/u/logesh_j)\
**Replies:** 8\
**Last updated:** [July 31, 2018, 2:58pm UTC](https://discuss.elastic.co/t/kibana-time-filter-time-filter/142230 "2018-07-31T14:58:21Z")

</div>

In Kibana 6.3 the absolute value is not getting correctly for the selections {from: "now/d", to: "now/d", display: "Today", section: 0, $$hashKey: "object:223"}, {from: "now/w", to: "now/w", display: "This week", secti…

---

## [Add multiple types in filebeat for logstash output](https://discuss.elastic.co/t/add-multiple-types-in-filebeat-for-logstash-output/121909)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 3\
**Last updated:** [February 28, 2018, 6:01pm UTC](https://discuss.elastic.co/t/add-multiple-types-in-filebeat-for-logstash-output/121909 "2018-02-28T18:01:18Z")

</div>

Is there a way I can have multiple types with filebeat and logstash? I have multiple app logs I want to send to different indices. BUT they will be processed the same way I want to do something like this: filebeat.pros…

---

## [Not enough capacity... why?](https://discuss.elastic.co/t/not-enough-capacity-why/94432)

<div class="topic-metadata">

**Author:** [@JohnnyB](https://discuss.elastic.co/u/JohnnyB)\
**Replies:** 3\
**Last updated:** [July 25, 2017, 12:23pm UTC](https://discuss.elastic.co/t/not-enough-capacity-why/94432 "2017-07-25T12:23:15Z")

</div>

Hi ECE Support team, I'm trying to allocate clusters on my ECE platform but construtor always tell me that there not enought capacity. I have a 3 zones plateforme for tests purpose with one in maintenance mode (bat-e o…

---

## [How to define mappings using Java API](https://discuss.elastic.co/t/how-to-define-mappings-using-java-api/6352)

<div class="topic-metadata">

**Author:** [@Lorrin\_Nelson](https://discuss.elastic.co/u/Lorrin_Nelson)\
**Replies:** 3\
**Last updated:** [May 8, 2014, 9:49pm UTC](https://discuss.elastic.co/t/how-to-define-mappings-using-java-api/6352 "2014-05-08T21:49:43Z")

</div>

Could someone share a working example of using the Java API to define type mappings? I'm trying things like: Settings.Builder indexSettings = ImmutableSettings.settingsBuilder().loadFromSource( XContentFactory.json…

---

## [Using basic license](https://discuss.elastic.co/t/using-basic-license/110296)

<div class="topic-metadata">

**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 7:17am UTC](https://discuss.elastic.co/t/using-basic-license/110296 "2017-12-07T07:17:37Z")

</div>

hello, i have question about using basic license i installed on elasticsearch 6.0.0, kibana 6.0.0 x-pack plugin. Then i set next parameteres in configurations files: kibana.yml: xpack.graph.enabled: false xpack.ml.e…

---

## [Formato de Hora y Fecha](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346)

<div class="topic-metadata">

**Author:** [@Jelssy\_Pomar\_Alvan](https://discuss.elastic.co/u/Jelssy_Pomar_Alvan)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 4:55am UTC](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346 "2021-02-16T04:55:44Z")

</div>

Hola, soy nueva en Kibana, tengo una Tabla con 2 columnas (fechaini y fechafin) con formato "dd/mm/yyyy hh:mm:ss" . Necesito cambiar este formato a "hh:mm:ss" y luego hacer una resta de estos 2 campos. Por ejemplo: 19:…

---

## [Indexing PDF file in ElasticSearch using Java Code](https://discuss.elastic.co/t/indexing-pdf-file-in-elasticsearch-using-java-code/142256)

<div class="topic-metadata">

**Author:** [@preraktiwari](https://discuss.elastic.co/u/preraktiwari)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 8:59pm UTC](https://discuss.elastic.co/t/indexing-pdf-file-in-elasticsearch-using-java-code/142256 "2018-07-31T20:59:33Z")

</div>

I am trying to Index PDF files in elastic search using Java code. So far I have written following code to save the pdf in ES. The code is working fine and I am able to save the Base64 encoded string of my PDF in ES. I wa…

---

## ["Access Denied" when I try to execute "curl -XGET localhost:9200"](https://discuss.elastic.co/t/access-denied-when-i-try-to-execute-curl-xget-localhost-9200/38565)

<div class="topic-metadata">

**Author:** [@Young\_Heon\_Kim](https://discuss.elastic.co/u/Young_Heon_Kim)\
**Replies:** 1\
**Last updated:** [March 2, 2016, 1:41pm UTC](https://discuss.elastic.co/t/access-denied-when-i-try-to-execute-curl-xget-localhost-9200/38565 "2016-03-02T13:41:20Z")

</div>

Hi All. I try to use elasticsearch for my job. But I found some error when I use it. I can connect http://my\_id\_address:9200 using my browser. { status: 200, name: "Dreadnought", cluster\_name: "elasticsearch", ve…

---

## [Adding a button to top-navbar through plugin in kibana 6.2.1](https://discuss.elastic.co/t/adding-a-button-to-top-navbar-through-plugin-in-kibana-6-2-1/121559)

<div class="topic-metadata">

**Author:** [@Sunny\_Sachan](https://discuss.elastic.co/u/Sunny_Sachan)\
**Replies:** 4\
**Last updated:** [March 1, 2018, 6:32pm UTC](https://discuss.elastic.co/t/adding-a-button-to-top-navbar-through-plugin-in-kibana-6-2-1/121559 "2018-03-01T18:32:34Z")

</div>

Hi all, I want to add a button to the top nav bar where fullscreen, share etc button exist in kibana 6.2.1, I am using plugin-generator version 7.0.1 and want that button to be displayed when dashboard tab is selected p…

---

## [RabbitMQ input plugin: add\_field doesn't write @metadata](https://discuss.elastic.co/t/rabbitmq-input-plugin-add-field-doesnt-write-metadata/82152)

<div class="topic-metadata">

**Author:** [@gertvv](https://discuss.elastic.co/u/gertvv)\
**Replies:** 4\
**Last updated:** [April 18, 2017, 8:33am UTC](https://discuss.elastic.co/t/rabbitmq-input-plugin-add-field-doesnt-write-metadata/82152 "2017-04-18T08:33:13Z")

</div>

This is using logstash 5.2.0 and the version of the RabbitMQ plugin that comes with it. input { rabbitmq { ... add\_field =\> { "\[@metadata\]\[indexType\]" =\> "myindex" } } output { elasticsearch { …

---

## [Does the saved objects export file of kibana includ scripted field?](https://discuss.elastic.co/t/does-the-saved-objects-export-file-of-kibana-includ-scripted-field/28983)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 4\
**Last updated:** [September 11, 2015, 5:32am UTC](https://discuss.elastic.co/t/does-the-saved-objects-export-file-of-kibana-includ-scripted-field/28983 "2015-09-11T05:32:05Z")

</div>

Hi All, I test the saved object export/import of kibana, and then scripted field are missing, all of saved objects which used that scripted field are broken Jason

---

## [ES-Hadoop peer-to-peer architecture](https://discuss.elastic.co/t/es-hadoop-peer-to-peer-architecture/62113)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 5\
**Last updated:** [February 24, 2017, 12:58pm UTC](https://discuss.elastic.co/t/es-hadoop-peer-to-peer-architecture/62113 "2017-02-24T12:58:18Z")

</div>

In Elasticsearch for Hadoop on page 137 it says Here, we can see the correlation between the units of parallelism of two systems. The preceding diagram shows that there are two discrete-distributed systems on two side…

---

## [IPAM integration](https://discuss.elastic.co/t/ipam-integration/72532)

<div class="topic-metadata">

**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\
**Replies:** 5\
**Last updated:** [January 25, 2017, 3:31am UTC](https://discuss.elastic.co/t/ipam-integration/72532 "2017-01-25T03:31:28Z")

</div>

Hi, Is there anyone out there combining an IPAM with Kibana, ES or logstash ? I'm looking for a way to group syslog-messages and maybe beats data based on host or subnet. We have one or more vlans for an applica…

---

## [Watcher name and description](https://discuss.elastic.co/t/watcher-name-and-description/210408)

<div class="topic-metadata">

**Author:** [@luksi1](https://discuss.elastic.co/u/luksi1)\
**Replies:** 6\
**Last updated:** [December 9, 2019, 2:58pm UTC](https://discuss.elastic.co/t/watcher-name-and-description/210408 "2019-12-09T14:58:17Z")

</div>

Am I missing something in the Watcher API? I don't see any way to add a name with spaces or a description via the API. https://www.elastic.co/guide/en/elasticsearch/reference/current/watcher-api-put-watch.html

---

## [Logstash will not create an index pattern in elastic search](https://discuss.elastic.co/t/logstash-will-not-create-an-index-pattern-in-elastic-search/246992)

<div class="topic-metadata">

**Author:** [@stor314](https://discuss.elastic.co/u/stor314)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 6:08pm UTC](https://discuss.elastic.co/t/logstash-will-not-create-an-index-pattern-in-elastic-search/246992 "2020-08-31T18:08:23Z")

</div>

I am an extreme beginner with the elastic stack, I'm simply trying to create a very simple setup with elasticsearch logstash and kibana on my local machine. All of them are installed and are able to run, using versions 7…

---

## [Reindexing not copying all data](https://discuss.elastic.co/t/reindexing-not-copying-all-data/230837)

<div class="topic-metadata">

**Author:** [@alajangi](https://discuss.elastic.co/u/alajangi)\
**Replies:** 3\
**Last updated:** [May 4, 2020, 5:52pm UTC](https://discuss.elastic.co/t/reindexing-not-copying-all-data/230837 "2020-05-04T17:52:39Z")

</div>

Hi, my elasticsearch version is 6.5.1 I want to clone an index, I am doing it in kibana devtools console, POST \_reindex { "source": { "index": "source" }, "dest": { "index": "dest" } } I am unable…

---

## [Default Elasticsearch ECK Installation stuck on "readiness probe failed"](https://discuss.elastic.co/t/default-elasticsearch-eck-installation-stuck-on-readiness-probe-failed/323553)

<div class="topic-metadata">

**Author:** [@Melvin\_Suter](https://discuss.elastic.co/u/Melvin_Suter)\
**Replies:** 1\
**Last updated:** [February 15, 2023, 9:47pm UTC](https://discuss.elastic.co/t/default-elasticsearch-eck-installation-stuck-on-readiness-probe-failed/323553 "2023-02-15T21:47:48Z")

</div>

Hi there I need help. I'm at the end of my knowledge and I can't get elasticsearch to work on my kubernetes cluster. My kubernetes version: v1.24.8+rke2r1 I installed ECK without any issues. (Kibana for instance works…

---

## [How to create a runtime field to create an alert?](https://discuss.elastic.co/t/how-to-create-a-runtime-field-to-create-an-alert/312997)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 7\
**Last updated:** [September 7, 2022, 6:48am UTC](https://discuss.elastic.co/t/how-to-create-a-runtime-field-to-create-an-alert/312997 "2022-09-07T06:48:42Z")

</div>

Hi, I've created a field with a script to set the boolean "office\_hours" to true of false depending on the log hours. My painless script is : def office; if (doc\['@timestamp'\].value.hour \< 5 || doc\['@timestamp'\].value.…

---

## [How to show last n records in ascending order in kibana dashboard](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323)

<div class="topic-metadata">

**Author:** [@ajain16](https://discuss.elastic.co/u/ajain16)\
**Replies:** 7\
**Last updated:** [December 8, 2020, 10:49am UTC](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323 "2020-12-08T10:49:22Z")

</div>

Hi All, We have data and time field in X axis and we are showing data on X axis from today to today+25 records. e.g 3Dec, 2 Dec, 1 Dec, 30 Nov, 29 Nov etc. We need to show total 25 data count in reverse order. e.g 25 …

---

## [7.10 ECONNREFUSED on Kibana](https://discuss.elastic.co/t/7-10-econnrefused-on-kibana/257838)

<div class="topic-metadata">

**Author:** [@CLeO\_Zap](https://discuss.elastic.co/u/CLeO_Zap)\
**Replies:** 7\
**Last updated:** [December 7, 2020, 2:38pm UTC](https://discuss.elastic.co/t/7-10-econnrefused-on-kibana/257838 "2020-12-07T14:38:57Z")

</div>

Hi All, I have a bit of a problem, I currently have a VM (Centos) running Elasticsearch 7.10, and a different VM (Centos ) running Kibana 7.10 and Nginx. The error I'm getting is: Dec 07 11:17:07 slazKIB02 kibana\[905…

---

## [Can I pass application logs to filebeat?](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574)

<div class="topic-metadata">

**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Replies:** 7\
**Last updated:** [July 20, 2020, 7:27am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574 "2020-07-20T07:27:04Z")

</div>

I want to pass application logs to filebeat . Can I pass ? if yes then how should I pass?

---

## [Kibana simple value plotting without aggregation](https://discuss.elastic.co/t/kibana-simple-value-plotting-without-aggregation/104550)

<div class="topic-metadata">

**Author:** [@Bony\_Simon](https://discuss.elastic.co/u/Bony_Simon)\
**Replies:** 1\
**Last updated:** [October 21, 2017, 12:28pm UTC](https://discuss.elastic.co/t/kibana-simple-value-plotting-without-aggregation/104550 "2017-10-21T12:28:00Z")

</div>

We need to plot graphs using timelion/kibana without performing any aggregation but this feature is not available. I have searched over various forums and found that many people are facing the same issue and feature requ…

---

## [Getting crazy with nnotes.dll](https://discuss.elastic.co/t/getting-crazy-with-nnotes-dll/349544)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 8\
**Last updated:** [January 11, 2024, 3:41pm UTC](https://discuss.elastic.co/t/getting-crazy-with-nnotes-dll/349544 "2024-01-11T15:41:53Z")

</div>

Yes - i am using HCL Notes / Domino in release 12 and 14 (the newest one). Elastic Endpoint Security is driving me crazy as it is putting the file "nnotes.dll" into quartantain. I tested rule exception and endpoint exc…

---

## [labelLimit doesn't work in legend update (Vega)](https://discuss.elastic.co/t/labellimit-doesnt-work-in-legend-update-vega/154839)

<div class="topic-metadata">

**Author:** [@Lidiya\_Chernova](https://discuss.elastic.co/u/Lidiya_Chernova)\
**Replies:** 8\
**Last updated:** [November 29, 2018, 11:56am UTC](https://discuss.elastic.co/t/labellimit-doesnt-work-in-legend-update-vega/154839 "2018-11-29T11:56:08Z")

</div>

Hi there! I have an issue with length of legend labels, because my text doesn't go in the standart length and a command for widening doesn't work. Could you please give a reccomendation about how to use that command cor…

---

## [Elasticsearch time chart](https://discuss.elastic.co/t/elasticsearch-time-chart/98532)

<div class="topic-metadata">

**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\
**Replies:** 8\
**Last updated:** [August 30, 2017, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532 "2017-08-30T11:45:03Z")

</div>

I would like to create a time chart which searches a keyword through multiple indexes and finally forms a graph which shows the repetition of keyword through days. Can anyone help me with how to do this?

---

## [Error :Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/error-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/192195)

<div class="topic-metadata">

**Author:** [@vaseem](https://discuss.elastic.co/u/vaseem)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 4:49pm UTC](https://discuss.elastic.co/t/error-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/192195 "2019-07-31T16:49:35Z")

</div>

Hi, I am getting the following error while running elastic search using "yarn es source" │ info \[o.e.x.s.a.AuthenticationService\] \[vaseem-virtual-machine\] Authentication of \[elastic\] was terminated by realm \[reserved\] …

---

## [Change the default index pattern of winlogbeat?](https://discuss.elastic.co/t/change-the-default-index-pattern-of-winlogbeat/136478)

<div class="topic-metadata">

**Author:** [@brisingertrece](https://discuss.elastic.co/u/brisingertrece)\
**Replies:** 2\
**Last updated:** [June 19, 2018, 3:35pm UTC](https://discuss.elastic.co/t/change-the-default-index-pattern-of-winlogbeat/136478 "2018-06-19T15:35:35Z")

</div>

Hi, I am trying to change the default pattern for the indexes generated by winlogbeat. I have followed the indications of the official documentation, but at some point I have missed something ... winlogbeat.yml: #===…

---

## [Pagination, sorted and aggregation on data](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291)

<div class="topic-metadata">

**Author:** [@StephenGuo](https://discuss.elastic.co/u/StephenGuo)\
**Replies:** 4\
**Last updated:** [October 31, 2022, 2:54am UTC](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291 "2022-10-31T02:54:53Z")

</div>

Hi I have a group of user access data which contain the user name, access timestamp, and some of other info. There will be multiple records with the same username but different access timestamp. What I want is to do i…

---

## [Using certificates on logstash output plugin](https://discuss.elastic.co/t/using-certificates-on-logstash-output-plugin/233967)

<div class="topic-metadata">

**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\
**Replies:** 4\
**Last updated:** [May 24, 2020, 11:47am UTC](https://discuss.elastic.co/t/using-certificates-on-logstash-output-plugin/233967 "2020-05-24T11:47:51Z")

</div>

Hi, Is it possible to use certificates to connect logstash to elasticsearch, the same way it is possible with the beat input plugin? Best, Francis

---

## [Auditbeat 7.4 crashing - too many open files](https://discuss.elastic.co/t/auditbeat-7-4-crashing-too-many-open-files/202653)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 4\
**Last updated:** [October 14, 2019, 10:48pm UTC](https://discuss.elastic.co/t/auditbeat-7-4-crashing-too-many-open-files/202653 "2019-10-14T22:48:43Z")

</div>

Seeing errors like these in journal: Oct 02 18:26:50 hostname auditbeat\[30239\]: 2019-10-02T18:26:50.004Z ERROR instance/beat.go:878 Exiting: 1 error: 1 error: system/socket dataset setup failed: …

---

## [/etc/init.d/elasticsearch fails at system boot](https://discuss.elastic.co/t/etc-init-d-elasticsearch-fails-at-system-boot/17371)

<div class="topic-metadata">

**Author:** [@Zacharie\_Elcor](https://discuss.elastic.co/u/Zacharie_Elcor)\
**Replies:** 4\
**Last updated:** [May 7, 2014, 5:57pm UTC](https://discuss.elastic.co/t/etc-init-d-elasticsearch-fails-at-system-boot/17371 "2014-05-07T17:57:55Z")

</div>

Hi, I installed elasticsearch 1.1.1 from rpm package on redhat 6.2 Init script /etc/init.d/elasticsearch is installed and run at server boot but \*no java process is started or \*it dies silently. No log in /var/…

---

## [What encoding to use in XContentBuilder?](https://discuss.elastic.co/t/what-encoding-to-use-in-xcontentbuilder/9857)

<div class="topic-metadata">

**Author:** [@Atharva\_Patel](https://discuss.elastic.co/u/Atharva_Patel)\
**Replies:** 4\
**Last updated:** [November 28, 2012, 4:47pm UTC](https://discuss.elastic.co/t/what-encoding-to-use-in-xcontentbuilder/9857 "2012-11-28T16:47:44Z")

</div>

In Java API, the class org.elasticsearch.common.xcontent.XContentBuilder have method: public XContentBuilder rawField(String fieldName, InputStream content) throws IOException { generator.writeRawField(fieldName,…

---

## [AWS ElasticSearch Service - Live-Live Replication across Regions](https://discuss.elastic.co/t/aws-elasticsearch-service-live-live-replication-across-regions/235632)

<div class="topic-metadata">

**Author:** [@mehak](https://discuss.elastic.co/u/mehak)\
**Replies:** 5\
**Last updated:** [June 4, 2020, 5:31am UTC](https://discuss.elastic.co/t/aws-elasticsearch-service-live-live-replication-across-regions/235632 "2020-06-04T05:31:52Z")

</div>

Hi Everybody, I would need a suggestion for Disaster recovery scenario. Currently, we have an AWS ElasticSearch instance(version 7.4) that acts as a data source for Jaeger. This instance sits in Virginia region (us-eas…

---

## [Consume a rest Api like openweather websites by logstash to store in elasticsearch](https://discuss.elastic.co/t/consume-a-rest-api-like-openweather-websites-by-logstash-to-store-in-elasticsearch/180850)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 5\
**Last updated:** [May 16, 2019, 12:34pm UTC](https://discuss.elastic.co/t/consume-a-rest-api-like-openweather-websites-by-logstash-to-store-in-elasticsearch/180850 "2019-05-16T12:34:23Z")

</div>

I am new to elasticsearch. What I am looking for is to be able to call any external webservices like openweather which requires any api key or either id and password, and be able to consume the response by logstash in js…

---

## [Date Filter not working with IST](https://discuss.elastic.co/t/date-filter-not-working-with-ist/165219)

<div class="topic-metadata">

**Author:** [@Harsh\_Sharma](https://discuss.elastic.co/u/Harsh_Sharma)\
**Replies:** 6\
**Last updated:** [January 23, 2019, 9:14am UTC](https://discuss.elastic.co/t/date-filter-not-working-with-ist/165219 "2019-01-23T09:14:00Z")

</div>

Hi, I'm using logstash 6.5.4. Below is my sample log & input file - Sample log - 2019-01-12 13:10:38 IST,9898989898,HHH-444 2019-01-12 13:11:38 IST,9898989897,HHH-555 filter{ if "test111" in \[log\_type\] { …

---

## [Term vectors for computing document similarity](https://discuss.elastic.co/t/term-vectors-for-computing-document-similarity/10311)

<div class="topic-metadata">

**Author:** [@Aditya\_Rajgarhia](https://discuss.elastic.co/u/Aditya_Rajgarhia)\
**Replies:** 6\
**Last updated:** [April 25, 2014, 12:43pm UTC](https://discuss.elastic.co/t/term-vectors-for-computing-document-similarity/10311 "2014-04-25T12:43:54Z")

</div>

Hello, I'm trying to build some search features for a website. I don't have any prior experience with search and decided to go with elasticsearch mostly because of the ease of use. I am indexing two types of do…

---

## [Performance implications of multiple primary shards for one index on the same data node](https://discuss.elastic.co/t/performance-implications-of-multiple-primary-shards-for-one-index-on-the-same-data-node/273859)

<div class="topic-metadata">

**Author:** [@dotjim](https://discuss.elastic.co/u/dotjim)\
**Replies:** 3\
**Last updated:** [May 27, 2021, 10:49pm UTC](https://discuss.elastic.co/t/performance-implications-of-multiple-primary-shards-for-one-index-on-the-same-data-node/273859 "2021-05-27T22:49:34Z")

</div>

Hi there, I have an Elastic Cloud cluster running v7.10.2 with three data nodes, three dedicated masters and three coordinates nodes. One index is currently 150GB, spanning three primary shards (one per data node) with…

---

## [Heat map Y-axis reverse order](https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685)

<div class="topic-metadata">

**Author:** [@a18](https://discuss.elastic.co/u/a18)\
**Replies:** 3\
**Last updated:** [April 21, 2020, 9:27am UTC](https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685 "2020-04-21T09:27:26Z")

</div>

Hi everyone! I am currently working on a heat map on Kibana 6.1.1. I am using histogram aggreagation for both X-axis and Y-axis. When setting the y-axis, I would like it to be sorted in descending order from top to botto…

---

## ["TypeError: Cannot read property 'filter' of undefined" In elastic cloud APM](https://discuss.elastic.co/t/typeerror-cannot-read-property-filter-of-undefined-in-elastic-cloud-apm/205097)

<div class="topic-metadata">

**Author:** [@Oded\_Shafran](https://discuss.elastic.co/u/Oded_Shafran)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 7:02pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-filter-of-undefined-in-elastic-cloud-apm/205097 "2019-10-24T19:02:45Z")

</div>

I have 7.4.1 cluster in the Elastic Cloud, enabled APM and when going to the APM tab in the management console - I am getting: Error TypeError: Cannot read property 'filter' of undefined at getDeploymentSize (https://…

---

## [Using a separate Kibana server with APM and an AWS ES Cluster](https://discuss.elastic.co/t/using-a-separate-kibana-server-with-apm-and-an-aws-es-cluster/196153)

<div class="topic-metadata">

**Author:** [@Auroan](https://discuss.elastic.co/u/Auroan)\
**Replies:** 3\
**Last updated:** [August 21, 2019, 8:15pm UTC](https://discuss.elastic.co/t/using-a-separate-kibana-server-with-apm-and-an-aws-es-cluster/196153 "2019-08-21T20:15:29Z")

</div>

I working with a colleague on an AWS hosted ES solution where APM is going to be used. We understand that the APM Kibana UI is incompatible with ES as a Service on AWS, using the built in Kibana Plugin. However, If we …

---

## [Break a single line into one multiline event](https://discuss.elastic.co/t/break-a-single-line-into-one-multiline-event/107253)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 3\
**Last updated:** [November 14, 2017, 3:39pm UTC](https://discuss.elastic.co/t/break-a-single-line-into-one-multiline-event/107253 "2017-11-14T15:39:42Z")

</div>

I need to break down a single event into one multi-line event. e.g. single one-line event: {"node47-domain":{"name":"node47-domain"},"node1208-domain":{"name":"node1208-domain"},"node170-domain":{"name":"node170-domai…

---

## [Performance Transport vs REST client](https://discuss.elastic.co/t/performance-transport-vs-rest-client/95876)

<div class="topic-metadata">

**Author:** [@Tobsucht](https://discuss.elastic.co/u/Tobsucht)\
**Replies:** 3\
**Last updated:** [August 11, 2017, 9:58am UTC](https://discuss.elastic.co/t/performance-transport-vs-rest-client/95876 "2017-08-11T09:58:19Z")

</div>

I’m having trouble with the performance of the Transportclient using the Java API, which is magnitudes slower compared to using the REST client. If found a similiar thread here: https://discuss.elastic.co/t/java-transp…

---

## [Is there a tool to rebalance shards across multiple path.data paths?](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 4\
**Last updated:** [February 2, 2021, 8:24am UTC](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853 "2021-02-02T08:24:09Z")

</div>

I have 5 data nodes in my cluster, all of them split the data across two disks. There should be plenty of space for my data, but because elasticsearch allocates shards to disks based on shard count rather than size (and …

---

## [Export filtered data from dashboard](https://discuss.elastic.co/t/export-filtered-data-from-dashboard/212009)

<div class="topic-metadata">

**Author:** [@Aravinda\_Kolla](https://discuss.elastic.co/u/Aravinda_Kolla)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 6:14am UTC](https://discuss.elastic.co/t/export-filtered-data-from-dashboard/212009 "2019-12-17T06:14:58Z")

</div>

I have some filters applied on a dashboard. I want to export the filtered data as a csv. How can I do it ?

---

## [What's the difference between dot indices and non-dot indices](https://discuss.elastic.co/t/whats-the-difference-between-dot-indices-and-non-dot-indices/137819)

<div class="topic-metadata">

**Author:** [@\_princesscode](https://discuss.elastic.co/u/_princesscode)\
**Replies:** 2\
**Last updated:** [June 28, 2018, 5:37pm UTC](https://discuss.elastic.co/t/whats-the-difference-between-dot-indices-and-non-dot-indices/137819 "2018-06-28T17:37:37Z")

</div>

This is probably a dumb question, but what's the difference between the .indices and the normal indices. I'm assuming that .indices are used for more core indices for holding configuration/settings (ex: .kibana). Is the…

---

## [Kibana4の表示について MB⇒ bps変換](https://discuss.elastic.co/t/kibana4-mb-bps/54564)

<div class="topic-metadata">

**Author:** [@beginer](https://discuss.elastic.co/u/beginer)\
**Replies:** 2\
**Last updated:** [July 2, 2016, 3:11pm UTC](https://discuss.elastic.co/t/kibana4-mb-bps/54564 "2016-07-02T15:11:29Z")

</div>

はじめまして ビギナーです よろしくお願いします 最近kibana4を利用しnginxのlogから 単位時間の流量（MB）とトラフィック（bps）を表示しようと 検討しています 単位時間の流量（MB）は logの中から送信量の合計 トラフィック（bps）は上記を1秒単位にし 8倍（1byte⇒8bit） 流量（MB）は普通に表示できましたが kibana4で 表示時に8倍（1byte⇒8bit）して 表示する方法がわかりませ…

---

## [Reindex creating a lot of deleted documents](https://discuss.elastic.co/t/reindex-creating-a-lot-of-deleted-documents/178405)

<div class="topic-metadata">

**Author:** [@developer-g](https://discuss.elastic.co/u/developer-g)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 7:18am UTC](https://discuss.elastic.co/t/reindex-creating-a-lot-of-deleted-documents/178405 "2019-04-26T07:18:12Z")

</div>

Hello, I've been doing a bit reindexing on my cluster to change the analyser type on a field. No other settings are changed. To clarify: index AAA is the source and BBB is the destination. AAA has a field called dat…

---

## [Agent List](https://discuss.elastic.co/t/agent-list/318673)

<div class="topic-metadata">

**Author:** [@branden.heifner](https://discuss.elastic.co/u/branden.heifner)\
**Replies:** 4\
**Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/agent-list/318673 "2022-11-14T18:21:40Z")

</div>

Hello, Is there an API or some other method to export a list of agents enrolled with the fleet server and their status (Healthy, Offline, etc.)? What I need to do is audit the agents currently enrolled with fleet with o…

[Previous page](https://discuss.elastic.co/top.md?page=870&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=872&per_page=50&period=all)
