# Top **URL:** https://discuss.elastic.co/top.md?page=877&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 878 --- ## [RHEL Installation fails: No such file or directory: '/elastic\_cloud\_apps/bootstrap-initiator/bootstrap\_initiator/prerequisite/tmp](https://discuss.elastic.co/t/rhel-installation-fails-no-such-file-or-directory-elastic-cloud-apps-bootstrap-initiator-bootstrap-initiator-prerequisite-tmp/231011)
**Author:** [@adam.gantt\_va](https://discuss.elastic.co/u/adam.gantt_va)\ **Replies:** 7\ **Last updated:** [May 22, 2020, 3:14pm UTC](https://discuss.elastic.co/t/rhel-installation-fails-no-such-file-or-directory-elastic-cloud-apps-bootstrap-initiator-bootstrap-initiator-prerequisite-tmp/231011 "2020-05-22T15:14:27Z")
Configured RHEL and installed Docker following the steps from https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configure-hosts-rhel-centos.html Performed steps for installing offline https://www.elastic.co/g… --- ## [I have data in my ealsticsearch,but i can not find it in my kibana](https://discuss.elastic.co/t/i-have-data-in-my-ealsticsearch-but-i-can-not-find-it-in-my-kibana/113261)
**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Replies:** 7\ **Last updated:** [December 29, 2017, 4:00am UTC](https://discuss.elastic.co/t/i-have-data-in-my-ealsticsearch-but-i-can-not-find-it-in-my-kibana/113261 "2017-12-29T04:00:38Z")
In my elasticsearch cluster, i have an index as following: \[image\] but now when i create the index in my kibana,i can see nothing,where is the problem? --- ## [Cluster setup questions and rollover logstash ingestion to elasticsearch](https://discuss.elastic.co/t/cluster-setup-questions-and-rollover-logstash-ingestion-to-elasticsearch/95796)
**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\ **Replies:** 7\ **Last updated:** [August 6, 2017, 8:58pm UTC](https://discuss.elastic.co/t/cluster-setup-questions-and-rollover-logstash-ingestion-to-elasticsearch/95796 "2017-08-06T20:58:21Z")
Hi, I am not sure if its possible to do this, but I am setting up a cluster setup and I wanted to make sure I do everything right. I have 3 nodes, all of them have same configuration (392gb ram, 32 core, 3TB SSD each). … --- ## [How to add lookup fields to kibana visualization?](https://discuss.elastic.co/t/how-to-add-lookup-fields-to-kibana-visualization/260662)
**Author:** [@Rithwik\_Pat](https://discuss.elastic.co/u/Rithwik_Pat)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 12:17pm UTC](https://discuss.elastic.co/t/how-to-add-lookup-fields-to-kibana-visualization/260662 "2021-01-11T12:17:02Z")
Say I am using lens to find all product ids in an index with a certain criteria and display in a table. Then I want to lookup the product id in another index to get the product name. So finally the result is a table that… --- ## [How to add "null" value in elastic search field if data is empty?](https://discuss.elastic.co/t/how-to-add-null-value-in-elastic-search-field-if-data-is-empty/247886)
**Author:** [@rifas\_ali\_pbi](https://discuss.elastic.co/u/rifas_ali_pbi)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 3:26pm UTC](https://discuss.elastic.co/t/how-to-add-null-value-in-elastic-search-field-if-data-is-empty/247886 "2020-10-16T15:26:25Z")
--- ## [Trying to create an index template to create a data stream](https://discuss.elastic.co/t/trying-to-create-an-index-template-to-create-a-data-stream/242089)
**Author:** [@randoran](https://discuss.elastic.co/u/randoran)\ **Replies:** 3\ **Last updated:** [July 22, 2020, 11:35pm UTC](https://discuss.elastic.co/t/trying-to-create-an-index-template-to-create-a-data-stream/242089 "2020-07-22T23:35:51Z")
I'm attempting to follow this tutorial https://www.elastic.co/guide/en/elasticsearch/reference/7.x/getting-started-index-lifecycle-management.html And I am at the point where it says to Create an index template PUT \_i… --- ## [Delete all data streams when delete index through data stream API](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:06am UTC](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804 "2021-10-18T05:06:06Z")
I have index "test-index", and other data streams but "test index" data stream. When I try to delete this "test-index" index through data stream API (and "test-index" data stream does not exist), I get "acknowledge: tru… --- ## [Logstash stops processing the logs after sometime for tcp input](https://discuss.elastic.co/t/logstash-stops-processing-the-logs-after-sometime-for-tcp-input/169818)
**Author:** [@vsskrishna](https://discuss.elastic.co/u/vsskrishna)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 6:23am UTC](https://discuss.elastic.co/t/logstash-stops-processing-the-logs-after-sometime-for-tcp-input/169818 "2019-03-18T06:23:51Z")
Hi, In my ELK stack(5.6.1), I have configured my logstash to listen on both TCP(5000) and filebeat(5044) input. Logs coming from filebeat is working fine but logs coming from TCP stops after some time without any error… --- ## [Add NOW timestamp to field w/o use of @timestamp](https://discuss.elastic.co/t/add-now-timestamp-to-field-w-o-use-of-timestamp/110773)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 4\ **Last updated:** [December 8, 2017, 5:45pm UTC](https://discuss.elastic.co/t/add-now-timestamp-to-field-w-o-use-of-timestamp/110773 "2017-12-08T17:45:08Z")
i've been trying to add the "@received\_at" timestamp that indicates when logstash received the log message. this helps us determine if our logging infrastructure is lagging behind our logging events. The logs we receive … --- ## [Logs not showing in fleet](https://discuss.elastic.co/t/logs-not-showing-in-fleet/295690)
**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 11:34am UTC](https://discuss.elastic.co/t/logs-not-showing-in-fleet/295690 "2022-02-01T11:34:50Z")
Good Morning, I have a fleet server with 2 hosts : The "kali" host has the following integrations installed with the elastic agent : I followed the installation steps from the elastic official webpage and the el… --- ## [How does Kibana get available fields stats?](https://discuss.elastic.co/t/how-does-kibana-get-available-fields-stats/75766)
**Author:** [@ezequielo](https://discuss.elastic.co/u/ezequielo)\ **Replies:** 5\ **Last updated:** [February 23, 2017, 3:43pm UTC](https://discuss.elastic.co/t/how-does-kibana-get-available-fields-stats/75766 "2017-02-23T15:43:51Z")
I am currently working on a search page for my application. Since I already have a front-end I couldn't use Kibana directly, but I like some ideas such as the stats displayed in available fields. So, how does Kibana … --- ## [Cannot read field \\"outputs\\" because \\"this.fst\\" is null](https://discuss.elastic.co/t/cannot-read-field-outputs-because-this-fst-is-null/267060)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 6\ **Last updated:** [March 29, 2021, 10:08am UTC](https://discuss.elastic.co/t/cannot-read-field-outputs-because-this-fst-is-null/267060 "2021-03-29T10:08:02Z")
Hi everyone. I've got a very strange problem: when I used dsl like: GET index/\_search { "query": { "bool": { "must": \[ { "match\_phrase": { "name": "some words here" } … --- ## [Problem date\_histogram in vega with aggregation](https://discuss.elastic.co/t/problem-date-histogram-in-vega-with-aggregation/228487)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 6\ **Last updated:** [April 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/problem-date-histogram-in-vega-with-aggregation/228487 "2020-04-17T17:30:52Z")
Hello everyone, I'm trying to create a graph with vega. A date histogram graph from an aggregation, but it is not working. In Kibana, it shows me the following error. \_.aggregations is undefined Would you mind to make… --- ## [Logstash not appending date to ES indices](https://discuss.elastic.co/t/logstash-not-appending-date-to-es-indices/211349)
**Author:** [@scriner](https://discuss.elastic.co/u/scriner)\ **Replies:** 6\ **Last updated:** [December 11, 2019, 2:31pm UTC](https://discuss.elastic.co/t/logstash-not-appending-date-to-es-indices/211349 "2019-12-11T14:31:46Z")
Hello, I'm currently working through upgrading a 2.6 ELK setup to 7.5 on a new server using what I can from the old config. The goal is to send rsyslog data from clients to Logstash. Previously, this worked (mostly) fin… --- ## [Fields Mapping | not\_analyzed](https://discuss.elastic.co/t/fields-mapping-not-analyzed/56940)
**Author:** [@dneto](https://discuss.elastic.co/u/dneto)\ **Replies:** 6\ **Last updated:** [August 8, 2016, 7:13pm UTC](https://discuss.elastic.co/t/fields-mapping-not-analyzed/56940 "2016-08-08T19:13:10Z")
Hi Friends, I'm starting using the ELK Stack to create a sort of Log Archiving and Log Analyses tool to my team. I have some firewalls and need change some fields to not\_analyzed. I don't know why, but when I load … --- ## [Avg bucket aggregation over date histogram returns incorrect value when having empty bucket](https://discuss.elastic.co/t/avg-bucket-aggregation-over-date-histogram-returns-incorrect-value-when-having-empty-bucket/188911)
**Author:** [@jayqian](https://discuss.elastic.co/u/jayqian)\ **Replies:** 0\ **Last updated:** [July 4, 2019, 12:22pm UTC](https://discuss.elastic.co/t/avg-bucket-aggregation-over-date-histogram-returns-incorrect-value-when-having-empty-bucket/188911 "2019-07-04T12:22:56Z")
Hello all, we build the below query to get the average value of the sales aggregation in the date histogram but we find the value returned seem incorrect. We use extended\_bound to show the empty buckets so that the avg … --- ## [Query empty object](https://discuss.elastic.co/t/query-empty-object/127747)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 7:26am UTC](https://discuss.elastic.co/t/query-empty-object/127747 "2018-04-12T07:26:11Z")
Hello everyone, How can I query an empty object something like below "field" : {} In mapping this is mapped to an Object type. --- ## [\[SOLVED \]Elasticsearch-py scroll-id http.client.BadStatusLine: ''](https://discuss.elastic.co/t/solved-elasticsearch-py-scroll-id-http-client-badstatusline/54057)
**Author:** [@zendel](https://discuss.elastic.co/u/zendel)\ **Replies:** 2\ **Last updated:** [June 28, 2016, 8:58am UTC](https://discuss.elastic.co/t/solved-elasticsearch-py-scroll-id-http-client-badstatusline/54057 "2016-06-28T08:58:09Z")
Hello, Name: elasticsearch Version: 2.3.0 Location: /usr/lib/python3.4/site-packages Requires: urllib3 When i use scan/scroll with a large result (\>1M), i have this error : GET http://localhost:9200/\_search/scro… --- ## [Elastic-Agent takes up too much disk space](https://discuss.elastic.co/t/elastic-agent-takes-up-too-much-disk-space/344429)
**Author:** [@swtrux](https://discuss.elastic.co/u/swtrux)\ **Replies:** 3\ **Last updated:** [October 5, 2023, 1:32pm UTC](https://discuss.elastic.co/t/elastic-agent-takes-up-too-much-disk-space/344429 "2023-10-05T13:32:50Z")
The size of elastic-agent continues to increase with every version: 8.8 1.7G 8.7 1.4G 8.6 1.2G 8.5 415M 1.7GB for this package size is way too big. We are looking at moving to elastic-agent but can't have over 2000 … --- ## [Create Index using RestHighLevelClient](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 7:42am UTC](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302 "2020-12-02T07:42:34Z")
IndexRequest indexRequest = new IndexRequest("my\_index"); indexRequest.create(true); indexRequest.source("{\\n" + " \\"settings\\" : {\\n" + " \\"number\_of\_shards\\" : … --- ## [Problem with Endpoint Security Initiation](https://discuss.elastic.co/t/problem-with-endpoint-security-initiation/316419)
**Author:** [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Replies:** 7\ **Last updated:** [October 27, 2022, 12:50pm UTC](https://discuss.elastic.co/t/problem-with-endpoint-security-initiation/316419 "2022-10-27T12:50:35Z")
Hello, I'm trying to initialize Security Endpoint on a Linux Ubuntu 20.04.4 LTS. After that I had a 13 problems for example: "Configure File Events Failure enabling file events; current state is disabled". I tried to di… --- ## [Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record:](https://discuss.elastic.co/t/exception-during-establishing-a-ssl-connection-io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/231165)
**Author:** [@Nirosh\_Kumar](https://discuss.elastic.co/u/Nirosh_Kumar)\ **Replies:** 1\ **Last updated:** [May 5, 2020, 2:07pm UTC](https://discuss.elastic.co/t/exception-during-establishing-a-ssl-connection-io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/231165 "2020-05-05T14:07:16Z")
Hello, I have installed elastic search 7.6.2 with HTTP support which is working fine. But, when I installed the same version with https enabled, I am getting below error when I start the elasticsearch. search guard 7.6… --- ## [What is the role that enable user to download pdf report?](https://discuss.elastic.co/t/what-is-the-role-that-enable-user-to-download-pdf-report/117937)
**Author:** [@adithep](https://discuss.elastic.co/u/adithep)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 11:52pm UTC](https://discuss.elastic.co/t/what-is-the-role-that-enable-user-to-download-pdf-report/117937 "2018-02-09T23:52:06Z")
I am using elastic cloud and gave reporting\_user role to a user I just created. That user can download CSV report no problem. But when I tried to download printable PDF from dashboard, I get error: max attempted reached… --- ## [Search-ui - can we use signed keys without building a custom connector?](https://discuss.elastic.co/t/search-ui-can-we-use-signed-keys-without-building-a-custom-connector/295776)
**Author:** [@Adonis\_Panagidis](https://discuss.elastic.co/u/Adonis_Panagidis)\ **Replies:** 1\ **Last updated:** [January 31, 2022, 8:35am UTC](https://discuss.elastic.co/t/search-ui-can-we-use-signed-keys-without-building-a-custom-connector/295776 "2022-01-31T08:35:54Z")
What's the recommended way of avoiding to expose the searchKey in the front-end react code? I was thinking to build a service to return the searchKey but I think using the same searchKey for all end users is not ideal. … --- ## [Does read-only index option really affect the performace?](https://discuss.elastic.co/t/does-read-only-index-option-really-affect-the-performace/205081)
**Author:** [@boubakr](https://discuss.elastic.co/u/boubakr)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 3:32pm UTC](https://discuss.elastic.co/t/does-read-only-index-option-really-affect-the-performace/205081 "2019-10-24T15:32:58Z")
Does read-only option really affect the performace? If yes, how? If not why? My scenario is this: I've daily indexes with lots of documets (from 5/10 to 100 GB per day, it depens). If each day I make the indexes of yes… --- ## [\[logstash.outputs.kafka \] Sending batch to Kafka failed](https://discuss.elastic.co/t/logstash-outputs-kafka-sending-batch-to-kafka-failed/212942)
**Author:** [@gloria\_xie](https://discuss.elastic.co/u/gloria_xie)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 7:15am UTC](https://discuss.elastic.co/t/logstash-outputs-kafka-sending-batch-to-kafka-failed/212942 "2019-12-27T07:15:45Z")
hi everyone, i am using logstash to sink data from one kafka topic A to another kafka topic B; whenever A produced data,B will receive it immediately; everything works fine,but i keep getting this message in the log … --- ## [Mac verify error: Invalid Password? while creating certificates](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 11:14pm UTC](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443 "2022-11-09T23:14:24Z")
Creating certificates for elasticSearch install via docker-compose. Gets an error 'Mac verify error: Invalid Password?' while running the command: sudo docker-compose -f create-certs.yml run --rm create\_certs I'm creati… --- ## [Finding multiple exact value](https://discuss.elastic.co/t/finding-multiple-exact-value/168043)
**Author:** [@dinaWork](https://discuss.elastic.co/u/dinaWork)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 2:19pm UTC](https://discuss.elastic.co/t/finding-multiple-exact-value/168043 "2019-02-12T14:19:45Z")
I would like to query elastic search , query if field is one of a list how do I do that in elastic 6.0.0? for example these are my documents: {"name" : "jim","company": "a"} {"name" : "jack","company": "a"} {"name" : … --- ## [Grok or Dissect?](https://discuss.elastic.co/t/grok-or-dissect/198520)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:29am UTC](https://discuss.elastic.co/t/grok-or-dissect/198520 "2019-09-09T05:29:37Z")
In my (many, many) filters I use both grok and dissect but I wonder what's recommended? is one faster then the other? --- ## [Variation of the '"field" is a required parameter' error](https://discuss.elastic.co/t/variation-of-the-field-is-a-required-parameter-error/89081)
**Author:** [@bhatch](https://discuss.elastic.co/u/bhatch)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 7:35pm UTC](https://discuss.elastic.co/t/variation-of-the-field-is-a-required-parameter-error/89081 "2017-06-12T19:35:31Z")
We upgraded to 5.4.1 last night from 2.X. Most everything is working, but a few of our visualizations are not. They are receiving the error message "Saved "field" parameter is now invalid. Please select a new field." I … --- ## [How Do I Add a Second Node?](https://discuss.elastic.co/t/how-do-i-add-a-second-node/62102)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 2\ **Last updated:** [October 3, 2016, 7:54pm UTC](https://discuss.elastic.co/t/how-do-i-add-a-second-node/62102 "2016-10-03T19:54:14Z")
I installed Elasticsearch on Centos 6.7 using Yum and started pumping documents in (about 450K worth) and now see that my \_cluster health is showing yellow. I want to add another node but want to make sure that I underst… --- ## [Where the configuration is stored elasticsearch in docker container](https://discuss.elastic.co/t/where-the-configuration-is-stored-elasticsearch-in-docker-container/301787)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [May 4, 2022, 3:53pm UTC](https://discuss.elastic.co/t/where-the-configuration-is-stored-elasticsearch-in-docker-container/301787 "2022-05-04T15:53:19Z")
Hi I'm trying to understand where is stored configuration when I've created node by docker compose? It was set only as environment variable? an example my config: es\_data\_hdd\_9\_1: image: pri\_rep/elk-docker/elasti… --- ## [Several kibana services on RH systemd](https://discuss.elastic.co/t/several-kibana-services-on-rh-systemd/72177)
**Author:** [@ericpietro](https://discuss.elastic.co/u/ericpietro)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 10:37am UTC](https://discuss.elastic.co/t/several-kibana-services-on-rh-systemd/72177 "2017-01-20T10:37:02Z")
hi, I have kibana 4.5.1 on Linux RH7.2, systemd I start and stop kibana by using systemctl (kibana.service). My goal : i want to manage a second kibana service. I copy /opt/kibana to /opt/kibana2 I modify the kibana.yml… --- ## [Kibana - Disable searching on analyzed fields](https://discuss.elastic.co/t/kibana-disable-searching-on-analyzed-fields/32392)
**Author:** [@R30221](https://discuss.elastic.co/u/R30221)\ **Replies:** 3\ **Last updated:** [October 16, 2015, 9:43pm UTC](https://discuss.elastic.co/t/kibana-disable-searching-on-analyzed-fields/32392 "2015-10-16T21:43:39Z")
Is it possible to set Kibana to disable running aggregations on analyzed fields? We currently use Kibana as an ES front to search our application logs, and is available to many developers in the company. Though otherw… --- ## [Elasticsearch Input Plugin - Index field string to match system date](https://discuss.elastic.co/t/elasticsearch-input-plugin-index-field-string-to-match-system-date/27304)
**Author:** [@Cjtow](https://discuss.elastic.co/u/Cjtow)\ **Replies:** 3\ **Last updated:** [August 13, 2015, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-index-field-string-to-match-system-date/27304 "2015-08-13T10:24:51Z")
Good morning/afternoon/evening/hi, using logstash version 1.5.3 Sorry if this has been bought up before, I have been searching for a while and can't find anything. Life story, you don't need to read I've been working… --- ## [Error while generating a kibana(7.11.1) plugin](https://discuss.elastic.co/t/error-while-generating-a-kibana-7-11-1-plugin/265935)
**Author:** [@Saurabh\_Patil](https://discuss.elastic.co/u/Saurabh_Patil)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 8:58pm UTC](https://discuss.elastic.co/t/error-while-generating-a-kibana-7-11-1-plugin/265935 "2021-03-04T20:58:01Z")
Hello, I am trying to create a custom kibana, I am following the steps. I have downloaded the kibana-master as zip. I have yarn installed on my system also node.js(14.16.0) as per kibana requirements. When I am runni… --- ## [\[ES 5.3\] How do I set plugin settings?](https://discuss.elastic.co/t/es-5-3-how-do-i-set-plugin-settings/83274)
**Author:** [@ddmichael](https://discuss.elastic.co/u/ddmichael)\ **Replies:** 5\ **Last updated:** [May 3, 2017, 8:33pm UTC](https://discuss.elastic.co/t/es-5-3-how-do-i-set-plugin-settings/83274 "2017-05-03T20:33:04Z")
I am writing an integration test for elasticsearch 5.3. (note: placing and overriding the refresh interval in the node settings was working on elasticsearch 1.7) public class ProtectedWordsIndexTests extends ESIntegTest… --- ## [Nested aggregation against key value pairs](https://discuss.elastic.co/t/nested-aggregation-against-key-value-pairs/20425)
**Author:** [@Jay\_Hilden](https://discuss.elastic.co/u/Jay_Hilden)\ **Replies:** 5\ **Last updated:** [October 27, 2014, 7:27pm UTC](https://discuss.elastic.co/t/nested-aggregation-against-key-value-pairs/20425 "2014-10-27T19:27:53Z")
I have an ES type with a nested KeyValuePair type. What I'm trying to do is a terms aggregation on both the key and value fields such that I'd get the following results: Key1 - Value1: DocCount = 10 Key1 - Value… --- ## [Flattened Type Not Working in version 7.4](https://discuss.elastic.co/t/flattened-type-not-working-in-version-7-4/234513)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 6\ **Last updated:** [May 27, 2020, 2:57pm UTC](https://discuss.elastic.co/t/flattened-type-not-working-in-version-7-4/234513 "2020-05-27T14:57:24Z")
I'm using AWS elasticsearch { "mappings":{ "properties": { "name": { "type": "text" }, "info": { "type": "flattened" } } } } Errror message is ::: { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_… --- ## [How to install marvel 2.2.0?](https://discuss.elastic.co/t/how-to-install-marvel-2-2-0/46937)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 6\ **Last updated:** [April 11, 2016, 4:38am UTC](https://discuss.elastic.co/t/how-to-install-marvel-2-2-0/46937 "2016-04-11T04:38:04Z")
Hi all, I have installed elasticsearch 2.2.0 deb package in ubuntu and after that I have installed kibana 4.4.0 aswell.After that I have marvel 2.2.0 and I have opened localhost:5601 and It has opened. My question is… --- ## [POST'ing Search Template as REST API causes Elastic to fail on start](https://discuss.elastic.co/t/posting-search-template-as-rest-api-causes-elastic-to-fail-on-start/82552)
**Author:** [@pjmtdw](https://discuss.elastic.co/u/pjmtdw)\ **Replies:** 3\ **Last updated:** [April 21, 2017, 2:16pm UTC](https://discuss.elastic.co/t/posting-search-template-as-rest-api-causes-elastic-to-fail-on-start/82552 "2017-04-21T14:16:59Z")
I'm using Elasticsearch 5.3.0, with java version "1.8.0\_121", on Linux. Also confirmed the same behavior with latest commit of 5.x and master branch. Is this an intended behavior? According to Pre Registered Templates,… --- ## [Basic Apache Filebeat Log question - missing fields](https://discuss.elastic.co/t/basic-apache-filebeat-log-question-missing-fields/213103)
**Author:** [@Shorthills](https://discuss.elastic.co/u/Shorthills)\ **Replies:** 8\ **Last updated:** [December 27, 2019, 4:10pm UTC](https://discuss.elastic.co/t/basic-apache-filebeat-log-question-missing-fields/213103 "2019-12-27T16:10:02Z")
Hi, Sorry for the newbie question: I'm able to pull in my apache logs and when I try to filter by apache2.access.response\_code , I get zilch. I looked and the response code data is in the message from apache. Is the p… --- ## [POC elastic search - correctness & exactitude of stats](https://discuss.elastic.co/t/poc-elastic-search-correctness-exactitude-of-stats/155881)
**Author:** [@msc29](https://discuss.elastic.co/u/msc29)\ **Replies:** 8\ **Last updated:** [November 8, 2018, 3:34pm UTC](https://discuss.elastic.co/t/poc-elastic-search-correctness-exactitude-of-stats/155881 "2018-11-08T15:34:32Z")
Hi, We're about to start a POC with elastic search. Prior to posting here, I read so many blogs/answers/topics/... regarding the fact ES is fast, but can return incorrect or approximate results... What we need to be a… --- ## [Network map](https://discuss.elastic.co/t/network-map/96848)
**Author:** [@pierre1](https://discuss.elastic.co/u/pierre1)\ **Replies:** 1\ **Last updated:** [August 13, 2017, 11:02pm UTC](https://discuss.elastic.co/t/network-map/96848 "2017-08-13T23:02:07Z")
hey, i have two questions, he exist network map as zabbix, centron or other ? and he exist a network weathermap as cacti for exemple ? thank you :wink: --- ## [Multiple Indices vs Single Index with Alias](https://discuss.elastic.co/t/multiple-indices-vs-single-index-with-alias/175938)
**Author:** [@reachnavneeth](https://discuss.elastic.co/u/reachnavneeth)\ **Replies:** 4\ **Last updated:** [April 25, 2019, 4:33pm UTC](https://discuss.elastic.co/t/multiple-indices-vs-single-index-with-alias/175938 "2019-04-25T16:33:18Z")
Hi, I have an update heavy use case where each record gets updated multiple times every minute. There will only be several million documents with each of size less than 4KB. Also the rate at which the documents in each … --- ## [Failed to parse \[system.filesystem.files\]: Numeric value (18446744073709551615) out of range of long](https://discuss.elastic.co/t/failed-to-parse-system-filesystem-files-numeric-value-18446744073709551615-out-of-range-of-long/66860)
**Author:** [@max0x7ba](https://discuss.elastic.co/u/max0x7ba)\ **Replies:** 4\ **Last updated:** [November 22, 2016, 4:28pm UTC](https://discuss.elastic.co/t/failed-to-parse-system-filesystem-files-numeric-value-18446744073709551615-out-of-range-of-long/66860 "2016-11-22T16:28:21Z")
Elasticsearch version: elasticsearch-5.0.0 metricbeat-5.0.1 Plugins installed: None JVM version: java version "1.8.0\_45" Java(TM) SE Runtime Environment (build 1.8.0\_45-b14) Java HotSpot(TM) 64-Bit Server VM (build 2… --- ## [Date parsing log without date in it](https://discuss.elastic.co/t/date-parsing-log-without-date-in-it/41435)
**Author:** [@yammy](https://discuss.elastic.co/u/yammy)\ **Replies:** 3\ **Last updated:** [February 11, 2016, 7:11pm UTC](https://discuss.elastic.co/t/date-parsing-log-without-date-in-it/41435 "2016-02-11T19:11:27Z")
I have a log that I need to collect, however it only contains the timestamp at the begining with no date. Example: 145231.hostname!process1.19022.2799412992.0: msg1 "INFO: msg2" I am successfully parsing the data with… --- ## [Mixed JSON input and Other Log files with Multiline codec](https://discuss.elastic.co/t/mixed-json-input-and-other-log-files-with-multiline-codec/36696)
**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\ **Replies:** 3\ **Last updated:** [December 9, 2015, 10:50am UTC](https://discuss.elastic.co/t/mixed-json-input-and-other-log-files-with-multiline-codec/36696 "2015-12-09T10:50:52Z")
I have the following configured for input. My situation that I have a mix of different file formats that I need to process. Some files are the generic type of file, that have the same start pattern for multiline, (a d… --- ## [Bulk import response times](https://discuss.elastic.co/t/bulk-import-response-times/27918)
**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\ **Replies:** 3\ **Last updated:** [August 31, 2015, 3:04pm UTC](https://discuss.elastic.co/t/bulk-import-response-times/27918 "2015-08-31T15:04:32Z")
Hi, We are observing increasing response times to bulk index requests with passage of time. Setup: ES version 1.7.1, 3 master nodes, 5 data nodes (m3.xlarge - 4 core, 7.5g heap space, 15g ram, data written to 2 SSD ins… --- ## [ES with plugin OMELASTICSEARCH (rsyslog) Content type detection for rest requests is deprecated](https://discuss.elastic.co/t/es-with-plugin-omelasticsearch-rsyslog-content-type-detection-for-rest-requests-is-deprecated/101678)
**Author:** [@Pierre31](https://discuss.elastic.co/u/Pierre31)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 11:07am UTC](https://discuss.elastic.co/t/es-with-plugin-omelasticsearch-rsyslog-content-type-detection-for-rest-requests-is-deprecated/101678 "2017-09-25T11:07:15Z")
Hello I work with Elasticsearch 5.2 with OMELASTICSEARCH RSYSLOG plugin in RH EL 7.3. Plugin version is : rsyslog-elasticsearch-7.4.7-16 It works well , but log file : elasticsearch\_deprecation.log fills every second … [Previous page](https://discuss.elastic.co/top.md?page=876&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=878&per_page=50&period=all)