# Top

**URL:** https://discuss.elastic.co/top.md?page=880&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 881

---

## [Heartbeat i/o timeout](https://discuss.elastic.co/t/heartbeat-i-o-timeout/197402)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 4\
**Last updated:** [September 5, 2019, 1:34am UTC](https://discuss.elastic.co/t/heartbeat-i-o-timeout/197402 "2019-09-05T01:34:45Z")

</div>

ECE 2.3 RHEL 7.6 (Maipo) Redis server v=5.0.3 I'm having trouble with an application of ours connecting to Heartbeat. From what I've researched Redis should be listening on ports 6379, 6380, 16379 and 16380, which Re…

---

## [How can I download content from Elasticsearch](https://discuss.elastic.co/t/how-can-i-download-content-from-elasticsearch/180535)

<div class="topic-metadata">

**Author:** [@smshabab11](https://discuss.elastic.co/u/smshabab11)\
**Replies:** 4\
**Last updated:** [May 14, 2019, 5:37am UTC](https://discuss.elastic.co/t/how-can-i-download-content-from-elasticsearch/180535 "2019-05-14T05:37:31Z")

</div>

I have an UI to upload document which is getting indexed in Elasticsearch 7.0. I want to download the file from elasticsearch after getting indexed by clicking download button . Need suggestion ASAP.

---

## [Configure NFS for backups](https://discuss.elastic.co/t/configure-nfs-for-backups/101838)

<div class="topic-metadata">

**Author:** [@adesouza](https://discuss.elastic.co/u/adesouza)\
**Replies:** 4\
**Last updated:** [September 27, 2017, 8:25am UTC](https://discuss.elastic.co/t/configure-nfs-for-backups/101838 "2017-09-27T08:25:25Z")

</div>

Hi, I'm trying out ECE and I'd like to setup an NFS repository for my cluster backups as I don't have S3 compatible storage available. How do I go about doing this i.e. how do i mount my NFS share on my nodes? Thanks, …

---

## [Disable date detection for already created type](https://discuss.elastic.co/t/disable-date-detection-for-already-created-type/65174)

<div class="topic-metadata">

**Author:** [@necrolax](https://discuss.elastic.co/u/necrolax)\
**Replies:** 4\
**Last updated:** [November 7, 2016, 11:43am UTC](https://discuss.elastic.co/t/disable-date-detection-for-already-created-type/65174 "2016-11-07T11:43:28Z")

</div>

Hi All, I tried disabling date detection before a type being created dynamically but Is there a way I can disable date detection for already created type?

---

## [Question about Marvel Basic license installation](https://discuss.elastic.co/t/question-about-marvel-basic-license-installation/40134)

<div class="topic-metadata">

**Author:** [@n.maire](https://discuss.elastic.co/u/n.maire)\
**Replies:** 4\
**Last updated:** [January 26, 2016, 4:07pm UTC](https://discuss.elastic.co/t/question-about-marvel-basic-license-installation/40134 "2016-01-26T16:07:14Z")

</div>

Hi, A few months back I installed our first ELK cluster to store and report on our web proxies logs, but back then I didn't have the time to setup the license and since then the trial license has expired. I've just had…

---

## [Es mapreduce integration test fails since 2.0](https://discuss.elastic.co/t/es-mapreduce-integration-test-fails-since-2-0/33367)

<div class="topic-metadata">

**Author:** [@Kamil\_Dziublinski](https://discuss.elastic.co/u/Kamil_Dziublinski)\
**Replies:** 4\
**Last updated:** [November 7, 2015, 8:27am UTC](https://discuss.elastic.co/t/es-mapreduce-integration-test-fails-since-2-0/33367 "2015-11-07T08:27:15Z")

</div>

Hey guys, I have an IT test for my MR job that does the following: 1) Precreates index with mapping 2) Creates test parquet files 3) Executes MR job that reads parquet files and using EsOutputFromat stores them into ES…

---

## [Creating, Updating, Validating and Rebuilding Index using Java API](https://discuss.elastic.co/t/creating-updating-validating-and-rebuilding-index-using-java-api/10448)

<div class="topic-metadata">

**Author:** [@Mxims\_2](https://discuss.elastic.co/u/Mxims_2)\
**Replies:** 4\
**Last updated:** [January 29, 2013, 1:31am UTC](https://discuss.elastic.co/t/creating-updating-validating-and-rebuilding-index-using-java-api/10448 "2013-01-29T01:31:54Z")

</div>

Hi - I am using TransportClient to connect to 3 nodes on my cluster. All nodes are identical to each other. Using Java API - - How do I create a new Index with a given type? - Once I create the index, …

---

## [Match query with suggestion search](https://discuss.elastic.co/t/match-query-with-suggestion-search/113706)

<div class="topic-metadata">

**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 3:10am UTC](https://discuss.elastic.co/t/match-query-with-suggestion-search/113706 "2018-01-08T03:10:43Z")

</div>

I have created a mapping of index searchable: PUT searchable { "mappings": { "searchCol" : { "properties" : { "suggest" : { "type" : "completion" …

---

## [Prune filter does not work](https://discuss.elastic.co/t/prune-filter-does-not-work/299274)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 6\
**Last updated:** [March 10, 2022, 8:15pm UTC](https://discuss.elastic.co/t/prune-filter-does-not-work/299274 "2022-03-10T20:15:00Z")

</div>

good morning, hope you are well I have a problem with the "prune" filter in logstash and I have a configuration file in logstash in which the objective is to take the data from filebeat-netflow and go through the pipe i…

---

## [Yarn kbn bootstrap](https://discuss.elastic.co/t/yarn-kbn-bootstrap/275603)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 6\
**Last updated:** [June 10, 2021, 5:57pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap/275603 "2021-06-10T17:57:09Z")

</div>

Hello there, I am trying to build Kibana from the source and following this link. but when I run yarn kbn bootstrap. I received the following error. D:\\Kibana-development\\kibana\>yarn kbn bootstrap yarn run v1.22.1 $…

---

## [Question about default refresh\_interval and upsert](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581)

<div class="topic-metadata">

**Author:** [@dbrt](https://discuss.elastic.co/u/dbrt)\
**Replies:** 6\
**Last updated:** [December 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581 "2020-12-04T12:17:40Z")

</div>

Hello everyone, First of all, I am pretty new to ElasticSearch; please forgive me if the answer to my questions are obvious. We have switched to ElasticSearch 7.x from ElasticSearch 6.8 and I was very interested by the…

---

## [Error: ImagePullBackOff](https://discuss.elastic.co/t/error-imagepullbackoff/317687)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 4\
**Last updated:** [October 28, 2022, 4:45pm UTC](https://discuss.elastic.co/t/error-imagepullbackoff/317687 "2022-10-28T16:45:06Z")

</div>

Hello, I want to deploy quickstart example of elk, kibana, fleet server using this example but pods cannot start because NAMESPACE NAME READY STATUS REST…

---

## [How to import vsphere dashboards in Kibana](https://discuss.elastic.co/t/how-to-import-vsphere-dashboards-in-kibana/218793)

<div class="topic-metadata">

**Author:** [@Quentinotd](https://discuss.elastic.co/u/Quentinotd)\
**Replies:** 4\
**Last updated:** [February 18, 2020, 3:02pm UTC](https://discuss.elastic.co/t/how-to-import-vsphere-dashboards-in-kibana/218793 "2020-02-18T15:02:23Z")

</div>

Hello, I've been using metricbeat with an elk stack for couple days and i'm now trying to get dashboards for vsphere. I've read the doc on the wiki, and they mention that there are dashboards available for Vsphere modu…

---

## [Xml filter with keyvalue pair](https://discuss.elastic.co/t/xml-filter-with-keyvalue-pair/157613)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 4\
**Last updated:** [November 26, 2018, 4:50pm UTC](https://discuss.elastic.co/t/xml-filter-with-keyvalue-pair/157613 "2018-11-26T16:50:55Z")

</div>

Hi, I have an xml input like this, which has a keyValue, containing , and . The multiple in caused logstash to have data type mismatch. Is there a way in the xml filter to map as the field name and as the value o…

---

## [Packet loss in af\_packetbeat mode](https://discuss.elastic.co/t/packet-loss-in-af-packetbeat-mode/154186)

<div class="topic-metadata">

**Author:** [@Ezy2015](https://discuss.elastic.co/u/Ezy2015)\
**Replies:** 4\
**Last updated:** [November 5, 2018, 8:42am UTC](https://discuss.elastic.co/t/packet-loss-in-af-packetbeat-mode/154186 "2018-11-05T08:42:23Z")

</div>

Packetbeat Version: 6.2.4 Operating System: ubuntu16.04 Hello, I found packetbeat lost packets when capture mirrored HTTP traffic.The way I found is that I send 100 packets every 10 minutes, and then count how many pac…

---

## [Kibana 5, terms and aggregations](https://discuss.elastic.co/t/kibana-5-terms-and-aggregations/67744)

<div class="topic-metadata">

**Author:** [@nielsk](https://discuss.elastic.co/u/nielsk)\
**Replies:** 4\
**Last updated:** [December 5, 2016, 7:10am UTC](https://discuss.elastic.co/t/kibana-5-terms-and-aggregations/67744 "2016-12-05T07:10:57Z")

</div>

In Kibana 4 I had simple bar charts that showed on the X-Axis the time and on the Y-Axis I had a Split Bar, Sub Aggreation Terms, Field Hostname.raw and then it showed me the Top5 according to my saved search. In Kiban…

---

## [Logstash-Filter-Elasticsearch Slow](https://discuss.elastic.co/t/logstash-filter-elasticsearch-slow/110583)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 5\
**Last updated:** [December 22, 2017, 1:10am UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-slow/110583 "2017-12-22T01:10:31Z")

</div>

Hi, I am getting slow performance when using logstash-filter-elasticsearch. Even with small volumes of data. I've tried this in multiple versions from 5.3 up to 6.0 of both ES & LS. By way of example here is a config f…

---

## [Charting an IP flow based metric](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257)

<div class="topic-metadata">

**Author:** [@mgillott](https://discuss.elastic.co/u/mgillott)\
**Replies:** 5\
**Last updated:** [August 17, 2017, 5:15pm UTC](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257 "2017-08-17T17:15:05Z")

</div>

I have a series of IP flows with an associated metric that I want to present as a line chart . The flows (SA, DA, SP, DP, AF) have been indexed & the addresses mapped the correct type (“IP”). I now want to visualize the…

---

## [Using Logstash JDBC connector for geo\_shape datatype](https://discuss.elastic.co/t/using-logstash-jdbc-connector-for-geo-shape-datatype/80767)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 5\
**Last updated:** [April 3, 2017, 2:16pm UTC](https://discuss.elastic.co/t/using-logstash-jdbc-connector-for-geo-shape-datatype/80767 "2017-04-03T14:16:27Z")

</div>

Can we use the Logstash JDBC connector to store data into geo\_shape datatype field? The sql statement outputs 2 columns \[Latitude\] and \[Longitude\], how do we use these columns to create a geo\_shape field and Index into E…

---

## [Paging With Completion Suggester](https://discuss.elastic.co/t/paging-with-completion-suggester/20358)

<div class="topic-metadata">

**Author:** [@Michael\_Delaney](https://discuss.elastic.co/u/Michael_Delaney)\
**Replies:** 3\
**Last updated:** [October 21, 2014, 1:17pm UTC](https://discuss.elastic.co/t/paging-with-completion-suggester/20358 "2014-10-21T13:17:12Z")

</div>

Hi, I want to page my completion suggester results. at present I have a request like the following: var skip = (pageNumber - 1) \* this.pageSize; this.client.suggest({ index: 'books', …

---

## [Iostat grok logstash](https://discuss.elastic.co/t/iostat-grok-logstash/70424)

<div class="topic-metadata">

**Author:** [@Pedro\_Vilas-Boas](https://discuss.elastic.co/u/Pedro_Vilas-Boas)\
**Replies:** 7\
**Last updated:** [January 3, 2017, 2:09pm UTC](https://discuss.elastic.co/t/iostat-grok-logstash/70424 "2017-01-03T14:09:41Z")

</div>

Hey, im trying to process logs from iostat, the problem is i have different machines with 1 or 2 disks, which means i have logs with different number of lines Example: 2017-01-03T10:41:35+0000 Device: tps …

---

## [Elastic Search - How to delete old records and improve performance](https://discuss.elastic.co/t/elastic-search-how-to-delete-old-records-and-improve-performance/22992)

<div class="topic-metadata">

**Author:** [@AALISHE](https://discuss.elastic.co/u/AALISHE)\
**Replies:** 7\
**Last updated:** [April 1, 2015, 2:59am UTC](https://discuss.elastic.co/t/elastic-search-how-to-delete-old-records-and-improve-performance/22992 "2015-04-01T02:59:32Z")

</div>

Hi all, I have a production box running old ES "0.20.3" .. I need help in cleaning data back from 2012 ... because although I moved the whole indexs to a machine with 6 SSD drives ... queries got better .. but sti…

---

## [Can we use Elasticsearch-dsl-py 7.4 with Elasticsearch-8.x?](https://discuss.elastic.co/t/can-we-use-elasticsearch-dsl-py-7-4-with-elasticsearch-8-x/299402)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 2\
**Last updated:** [March 14, 2022, 10:05am UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-dsl-py-7-4-with-elasticsearch-8-x/299402 "2022-03-14T10:05:03Z")

</div>

We have some Python programs that use Elasticsearch-dsl-py and Elasticsearch-py Python clients to process Elasticsearch data. We are considering upgrading to Elasticsearch-8. From PyPI we can see that elasticsearch-py-8.…

---

## [Unable To Add Custom Analyzer](https://discuss.elastic.co/t/unable-to-add-custom-analyzer/230816)

<div class="topic-metadata">

**Author:** [@Prakash\_Choudhary](https://discuss.elastic.co/u/Prakash_Choudhary)\
**Replies:** 2\
**Last updated:** [May 4, 2020, 7:40am UTC](https://discuss.elastic.co/t/unable-to-add-custom-analyzer/230816 "2020-05-04T07:40:28Z")

</div>

Hi , I am trying to create a new index in open source elastic search cluster and unable to create customer analyser facing the issue. I required help please help me in this to resolve issue, { \* "error": { \* "root…

---

## [Apm server as kubernetes daemonset?](https://discuss.elastic.co/t/apm-server-as-kubernetes-daemonset/161307)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 2\
**Last updated:** [December 21, 2018, 11:45am UTC](https://discuss.elastic.co/t/apm-server-as-kubernetes-daemonset/161307 "2018-12-21T11:45:07Z")

</div>

I want to start deploying pods with elastic apm monitoring. To this end I need to (?) get the apm server deployed as a daemonset so it will be available on every k8 node. So far no luck from a test java app. I checked t…

---

## [How to split nested fields into separate events?](https://discuss.elastic.co/t/how-to-split-nested-fields-into-separate-events/55219)

<div class="topic-metadata">

**Author:** [@pixelrebel](https://discuss.elastic.co/u/pixelrebel)\
**Replies:** 2\
**Last updated:** [July 11, 2016, 8:31pm UTC](https://discuss.elastic.co/t/how-to-split-nested-fields-into-separate-events/55219 "2016-07-11T20:31:59Z")

</div>

Example of incoming nested data below. Ultimately, I want logstash to submit 9 events for this single object. 1 of type storage 2 of type volume 3 of type share and 3 of type client I'm looking for something like the spl…

---

## [How to fetch data from Elasticseach and display in React using APIs](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197)

<div class="topic-metadata">

**Author:** [@khlinten\_demelash](https://discuss.elastic.co/u/khlinten_demelash)\
**Replies:** 8\
**Last updated:** [January 2, 2023, 8:03am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197 "2023-01-02T08:03:47Z")

</div>

Hello, I'm from Ethiopia, and I'm working in Front-end Website Development. am using ReactJS and Elasticsearch. I'm getting trouble fetching data from Elasticsearch(https://192.168.1.3:9200/clientesafewindows-logstash/\_…

---

## [Marvel - monitoring multiple ES clusters by one Monitoring ES cluster](https://discuss.elastic.co/t/marvel-monitoring-multiple-es-clusters-by-one-monitoring-es-cluster/16678)

<div class="topic-metadata">

**Author:** [@aristechnologypartne](https://discuss.elastic.co/u/aristechnologypartne)\
**Replies:** 3\
**Last updated:** [October 6, 2014, 2:47pm UTC](https://discuss.elastic.co/t/marvel-monitoring-multiple-es-clusters-by-one-monitoring-es-cluster/16678 "2014-10-06T14:47:04Z")

</div>

Hi there, I have installed a 3 node ES "Monitoring" cluster and configured two other ES clusters (10 nodes one an 3 nodes one) to send data to it. The data gathering / storage seems to be working fine, but the d…

---

## [Java no class def found error while installing elasticsearch?](https://discuss.elastic.co/t/java-no-class-def-found-error-while-installing-elasticsearch/6260)

<div class="topic-metadata">

**Author:** [@Jason\_Jiang](https://discuss.elastic.co/u/Jason_Jiang)\
**Replies:** 3\
**Last updated:** [December 31, 2011, 10:56pm UTC](https://discuss.elastic.co/t/java-no-class-def-found-error-while-installing-elasticsearch/6260 "2011-12-31T22:56:40Z")

</div>

I followed these steps on https://github.com/karmi/tire to install elasticsearch curl -k -L -o elasticsearch-0.17.6.tar.gz http://github.com/downloads/elasticsearch/elasticsearch/elasticsearch-0.17.6.tar.gz tar -…

---

## [Create index with the same name as request path value, using ElasticSearch output](https://discuss.elastic.co/t/create-index-with-the-same-name-as-request-path-value-using-elasticsearch-output/175986)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 6\
**Last updated:** [April 9, 2019, 11:25am UTC](https://discuss.elastic.co/t/create-index-with-the-same-name-as-request-path-value-using-elasticsearch-output/175986 "2019-04-09T11:25:01Z")

</div>

This is my logstash.conf: input { http { host =\> "127.0.0.1" port =\> 31311 } } output { elasticsearch { hosts =\> \["http://localhost:9200"\] } stdout { codec =\> "rubydebug" } } As a test, I r…

---

## [Ignoring the 'pipelines.yml' file because modules or command line options are specified 문의](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified/155116)

<div class="topic-metadata">

**Author:** [@Minkyu\_Park](https://discuss.elastic.co/u/Minkyu_Park)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 5:40am UTC](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified/155116 "2018-11-23T05:40:51Z")

</div>

안녕하세요. 윈도우10기반의 환경의 엘라스틱 스택 6.4.2 버전에서, 엘라스틱 스택 책을 따라서, 로그스태시 설치후 책에 나온 예제를 실행시킬려고 하는데 계속해서 Ignoring the 'pipelines.yml' file because modules or command line options are specified 와 같은 오류가 나며 출력이 안되는데 이부분을 해결하고 싶습니다. 기…

---

## [Filebeat is not able to connect to logstash](https://discuss.elastic.co/t/filebeat-is-not-able-to-connect-to-logstash/236066)

<div class="topic-metadata">

**Author:** [@NetRajan](https://discuss.elastic.co/u/NetRajan)\
**Replies:** 4\
**Last updated:** [June 9, 2020, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-is-not-able-to-connect-to-logstash/236066 "2020-06-09T13:59:16Z")

</div>

I am using filebeat version 7.6.2 Trying to connect to logstash and getting following error. Failed to connect to backoff(async(tcp://dnslogstash.net:5044)): EOF logstash is configured with SSL certificate. I am able…

---

## [Is it possible to write single query for exact match and partial match](https://discuss.elastic.co/t/is-it-possible-to-write-single-query-for-exact-match-and-partial-match/58086)

<div class="topic-metadata">

**Author:** [@Tatireddy\_Reddy](https://discuss.elastic.co/u/Tatireddy_Reddy)\
**Replies:** 4\
**Last updated:** [February 13, 2017, 9:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-write-single-query-for-exact-match-and-partial-match/58086 "2017-02-13T21:53:51Z")

</div>

Hi All, Am new to elastic search. Can you please let us know is it possible to write single query for exact match and partial match. My secanrio: if there is no documents found for exact match it has returns the part…

---

## [How to change the count on the kibana page?](https://discuss.elastic.co/t/how-to-change-the-count-on-the-kibana-page/54850)

<div class="topic-metadata">

**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 2:53pm UTC](https://discuss.elastic.co/t/how-to-change-the-count-on-the-kibana-page/54850 "2016-07-07T14:53:11Z")

</div>

The default is 500, does it mean only 500 records we can see?

---

## [ElasticSearch 8.7 initial single node setting fails](https://discuss.elastic.co/t/elasticsearch-8-7-initial-single-node-setting-fails/330870)

<div class="topic-metadata">

**Author:** [@Pfiffikus](https://discuss.elastic.co/u/Pfiffikus)\
**Replies:** 2\
**Last updated:** [April 27, 2023, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-8-7-initial-single-node-setting-fails/330870 "2023-04-27T07:22:09Z")

</div>

I get elasticsearch-create-enrollment-token -s kibana ERROR: Failed to determine the health of the cluster. Unexpected http status \[401\] for xpack: security: authc: realms: file: file1: …

---

## [Dark / Light mode in Dashboards](https://discuss.elastic.co/t/dark-light-mode-in-dashboards/215191)

<div class="topic-metadata">

**Author:** [@rosamar](https://discuss.elastic.co/u/rosamar)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 2:29pm UTC](https://discuss.elastic.co/t/dark-light-mode-in-dashboards/215191 "2020-01-17T14:29:45Z")

</div>

Is there a way to have an option within the Dashboard to switch between dark and light mode, or even better to link it to the app state related to the same style-modification ability? I am working on a Vue/Vuetify/Vuex …

---

## [Query function script score if multiple values in a field](https://discuss.elastic.co/t/query-function-script-score-if-multiple-values-in-a-field/144181)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 2\
**Last updated:** [August 15, 2018, 6:31am UTC](https://discuss.elastic.co/t/query-function-script-score-if-multiple-values-in-a-field/144181 "2018-08-15T06:31:44Z")

</div>

Hi, I have a question about creating the following query: My field location can store multiple values in it, e.g.: "geolocations": \[ "51.2171728, 8.654843", "50.2171728, 8.645487", \] Is it possible to incre…

---

## [Last line of log not picked up by logstash](https://discuss.elastic.co/t/last-line-of-log-not-picked-up-by-logstash/95286)

<div class="topic-metadata">

**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 7:24am UTC](https://discuss.elastic.co/t/last-line-of-log-not-picked-up-by-logstash/95286 "2017-08-01T07:24:59Z")

</div>

Hi I am using logstash version 5 and trying to parse a log file. When there are 10 records in the log file, logstash processes only 9. Not picking up the last line of the log. I picked the last record and tried to par…

---

## [Parsing email data with regex in scripted field](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593)

<div class="topic-metadata">

**Author:** [@whyptrap](https://discuss.elastic.co/u/whyptrap)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 7:08am UTC](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593 "2020-06-26T07:08:22Z")

</div>

Hello, i am newbie in ELK stack. I want to create new field using scripted field in kibana. The new field contain parsed email data from exist field that contain email data too. I just want to get string before @ charact…

---

## [Filbeat not Starting after enabling Security](https://discuss.elastic.co/t/filbeat-not-starting-after-enabling-security/149611)

<div class="topic-metadata">

**Author:** [@hegdedarsh](https://discuss.elastic.co/u/hegdedarsh)\
**Replies:** 5\
**Last updated:** [September 25, 2018, 6:00am UTC](https://discuss.elastic.co/t/filbeat-not-starting-after-enabling-security/149611 "2018-09-25T06:00:09Z")

</div>

Hi, All the beats were working fine till i had not enabled security(username/password). But when i enabled it, everything went down, and when i try to start the filebeat, it throws an the below error Error:- 2018-09-24…

---

## [Can we use sub aggregation after top metric aggregation](https://discuss.elastic.co/t/can-we-use-sub-aggregation-after-top-metric-aggregation/330957)

<div class="topic-metadata">

**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\
**Replies:** 7\
**Last updated:** [May 3, 2023, 8:53am UTC](https://discuss.elastic.co/t/can-we-use-sub-aggregation-after-top-metric-aggregation/330957 "2023-05-03T08:53:41Z")

</div>

I want to get sum of latest value of a field . With several conditions which is applied over other fields. I am working on time series data and want to get information from last poled value. Example Data:- A B C …

---

## [Kibana Canvas: createTable creates duplicate rows](https://discuss.elastic.co/t/kibana-canvas-createtable-creates-duplicate-rows/301210)

<div class="topic-metadata">

**Author:** [@JeroenK](https://discuss.elastic.co/u/JeroenK)\
**Replies:** 7\
**Last updated:** [May 23, 2022, 3:52pm UTC](https://discuss.elastic.co/t/kibana-canvas-createtable-creates-duplicate-rows/301210 "2022-05-23T15:52:42Z")

</div>

Hi, I want to create a bar chart in canvas with a consistent 10 bars even if there is no data for 10 bars. It is for a competition and, for example, at the beginning of the week there might not be enough data to have 10 …

---

## [Configuring docs\_value in Marvel](https://discuss.elastic.co/t/configuring-docs-value-in-marvel/24932)

<div class="topic-metadata">

**Author:** [@raz](https://discuss.elastic.co/u/raz)\
**Replies:** 7\
**Last updated:** [July 8, 2015, 5:27am UTC](https://discuss.elastic.co/t/configuring-docs-value-in-marvel/24932 "2015-07-08T05:27:56Z")

</div>

My Field data cache is full and I want to understand the reason in Marvel. But marvel use field data cache so It has hard time to bring the data. Can I configure Marvel to use docs\_value so that it won't use field data c…

---

## [Provide Authentication In Head](https://discuss.elastic.co/t/provide-authentication-in-head/8861)

<div class="topic-metadata">

**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\
**Replies:** 3\
**Last updated:** [December 7, 2013, 10:50pm UTC](https://discuss.elastic.co/t/provide-authentication-in-head/8861 "2013-12-07T22:50:54Z")

</div>

Hi All, Can Anybody tell me how we can provide authentication in ES head....so nobody wants to delete my index or create an index etc....is it possible in Elasticsearch. Thanx Regards, Sumit Gupta

---

## [Explore underlying data require Write permissions to Dashboard](https://discuss.elastic.co/t/explore-underlying-data-require-write-permissions-to-dashboard/264326)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 4\
**Last updated:** [February 24, 2021, 5:35pm UTC](https://discuss.elastic.co/t/explore-underlying-data-require-write-permissions-to-dashboard/264326 "2021-02-24T17:35:10Z")

</div>

Hi, Please see this: https://github.com/elastic/kibana/issues/83279. I have also noticed that just now. Is this really a bug? if not, can you please provide guidance how to troubleshoot? Thanks.

---

## [Elasticsearch and Docker Generating http\_ca.crt](https://discuss.elastic.co/t/elasticsearch-and-docker-generating-http-ca-crt/299011)

<div class="topic-metadata">

**Author:** [@SwampyFox](https://discuss.elastic.co/u/SwampyFox)\
**Replies:** 2\
**Last updated:** [March 9, 2022, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-and-docker-generating-http-ca-crt/299011 "2022-03-09T08:40:26Z")

</div>

I have followed the instructions on installing Elasticsearch on Docker for version 8.0.1. I am able to run the curl command against "https://localhost:9200" with the http\_ca.crt and the password generated for the elasti…

---

## [ILM not working after licence expires](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646)

<div class="topic-metadata">

**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:53pm UTC](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646 "2019-09-30T15:53:44Z")

</div>

After trying out Machine Learning trial licence i notice that Index Lifecycle Management is no longer working. The error i get is 403: Forbidden. You cannot use Index Management because your trial license has expired. …

---

## [Apply or discard your changes before saving](https://discuss.elastic.co/t/apply-or-discard-your-changes-before-saving/111181)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 9:50pm UTC](https://discuss.elastic.co/t/apply-or-discard-your-changes-before-saving/111181 "2017-12-11T21:50:49Z")

</div>

I'm on Kibana 6.0.1 and am attempting to modify an existing visualization. After adding additional filters to the saved visualization, I'm unable to save as "Save" is greyed out. When hovering over the Save button, a too…

---

## [Content type detection for rest requests is deprecated](https://discuss.elastic.co/t/content-type-detection-for-rest-requests-is-deprecated/85814)

<div class="topic-metadata">

**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 8:08pm UTC](https://discuss.elastic.co/t/content-type-detection-for-rest-requests-is-deprecated/85814 "2017-05-15T20:08:52Z")

</div>

Hi, I've upgraded from 5.1.1 to 5.4.0 and my two nodes that receive data from logstash is dumping a lot of the below into the \_depreciation log. I am still in the process of upgrading all my Logstash instances form 5.1…

---

## [Elasticserch does not run after installing Search Guard](https://discuss.elastic.co/t/elasticserch-does-not-run-after-installing-search-guard/62414)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 2\
**Last updated:** [October 7, 2016, 12:55pm UTC](https://discuss.elastic.co/t/elasticserch-does-not-run-after-installing-search-guard/62414 "2016-10-07T12:55:55Z")

</div>

ES nodes fail to start with floragunn search-guard installed deals with v1.x. I have these versions. ES v2.4.1 SG-SSL v 2.4.1.16 SG v2.4.1.6 CentOS 7.2 Im able to run ES with SSL. I generated the certs/keys via the e…

[Previous page](https://discuss.elastic.co/top.md?page=879&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=881&per_page=50&period=all)
