# Top **URL:** https://discuss.elastic.co/top.md?page=881&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 882 --- ## [Connecting documents from different kibana indexes](https://discuss.elastic.co/t/connecting-documents-from-different-kibana-indexes/271983)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 8\ **Last updated:** [May 17, 2021, 7:36am UTC](https://discuss.elastic.co/t/connecting-documents-from-different-kibana-indexes/271983 "2021-05-17T07:36:16Z")
Hello Elastic-Community, I am wondering if there is a way to connect two datasets from two different indexes with each other to create a visualization. For example: From Index\_1 I receive general informations of a dev… --- ## [Imap input plugin download attachment](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966)
**Author:** [@Aditya\_Srivastava1](https://discuss.elastic.co/u/Aditya_Srivastava1)\ **Replies:** 8\ **Last updated:** [December 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966 "2020-12-17T17:30:51Z")
Hi, I am using imap input plugin to fetch email along with attachments. Below configuration gets me multiple fields but does not get the attachment content. Can anyone help here how to download attachments while connec… --- ## [Unable to import\_dashboards](https://discuss.elastic.co/t/unable-to-import-dashboards/79739)
**Author:** [@michaelmaass](https://discuss.elastic.co/u/michaelmaass)\ **Replies:** 8\ **Last updated:** [March 23, 2017, 2:17pm UTC](https://discuss.elastic.co/t/unable-to-import-dashboards/79739 "2017-03-23T14:17:34Z")
trying to find out how to install Dashboards I face the challenge that Import\_dashboards.exe Fails to download file: https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.2.2.zip that is how… --- ## [Unable to create elk cluster due to Node validation error](https://discuss.elastic.co/t/unable-to-create-elk-cluster-due-to-node-validation-error/343117)
**Author:** [@Bhakti\_Bhabal](https://discuss.elastic.co/u/Bhakti_Bhabal)\ **Replies:** 4\ **Last updated:** [September 18, 2023, 9:45am UTC](https://discuss.elastic.co/t/unable-to-create-elk-cluster-due-to-node-validation-error/343117 "2023-09-18T09:45:46Z")
Hello All, I am setting up elastic cluster in my environment. I have setup a master node and i want the elastic to run on the IP address of master node in order to get the clustering working . When i add the below lines… --- ## [Shard failed at ElasticSearch / Docker / Windows](https://discuss.elastic.co/t/shard-failed-at-elasticsearch-docker-windows/162459)
**Author:** [@eiri](https://discuss.elastic.co/u/eiri)\ **Replies:** 4\ **Last updated:** [December 31, 2018, 8:51am UTC](https://discuss.elastic.co/t/shard-failed-at-elasticsearch-docker-windows/162459 "2018-12-31T08:51:32Z")
I have a (development) single node elasticsearch server under Windows 10/Docker. Creating the server and an index completes successfully. After filling the index with about 1.7 milion documents the shard fails, causing a… --- ## [HTML sanitisation for Kibana link](https://discuss.elastic.co/t/html-sanitisation-for-kibana-link/142753)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 4\ **Last updated:** [August 7, 2018, 5:14am UTC](https://discuss.elastic.co/t/html-sanitisation-for-kibana-link/142753 "2018-08-07T05:14:33Z")
Greetings I'm implementing a spam detection tool using Watcher. Right now, I'm just going through the last 5 minutes of logs, and reporting any messages (grouped by the subject) which exceed some defined thresholds. Th… --- ## [Geo\_shape mapping issue](https://discuss.elastic.co/t/geo-shape-mapping-issue/137107)
**Author:** [@alakh\_kumar](https://discuss.elastic.co/u/alakh_kumar)\ **Replies:** 4\ **Last updated:** [June 24, 2018, 4:13am UTC](https://discuss.elastic.co/t/geo-shape-mapping-issue/137107 "2018-06-24T04:13:28Z")
I am using : Magento Version : CE Version 2.1 ElasticSuite Version :2.3 when i try to map geo\_shape it showing me error message : mapper\_parsing\_exception: Mapping definition for \[coordinates\] has unsupported paramete… --- ## [Elasticsearch timeout issues](https://discuss.elastic.co/t/elasticsearch-timeout-issues/134011)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 4\ **Last updated:** [May 31, 2018, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issues/134011 "2018-05-31T10:05:32Z")
Hi, I am repeatedly facing timeout issues while visualizing data ki Kibana. Here are the logs I saw when the timeout used to occur: \[2018-05-31T09:05:08,785\]\[DEBUG\]\[o.e.a.a.c.n.s.TransportNodesStatsAction\] \[GXT24Jx\] f… --- ## [Archiving Data into AWS S3 Bucket](https://discuss.elastic.co/t/archiving-data-into-aws-s3-bucket/25007)
**Author:** [@tanveer3](https://discuss.elastic.co/u/tanveer3)\ **Replies:** 1\ **Last updated:** [July 7, 2015, 5:48am UTC](https://discuss.elastic.co/t/archiving-data-into-aws-s3-bucket/25007 "2015-07-07T05:48:31Z")
Hi All I have to take backup of data from Elastic Search and move to AWS S3 Bucket. How could we do it. Thanks Tanweer --- ## [Search for an exact Date, ignoring the time\_zone](https://discuss.elastic.co/t/search-for-an-exact-date-ignoring-the-time-zone/332716)
**Author:** [@wil93](https://discuss.elastic.co/u/wil93)\ **Replies:** 5\ **Last updated:** [May 8, 2023, 12:47pm UTC](https://discuss.elastic.co/t/search-for-an-exact-date-ignoring-the-time-zone/332716 "2023-05-08T12:47:16Z")
Given the following document: PUT /examples/\_doc/1 { "item": "Phone X", "price": 799, "lastUpdateDate" : "2023-05-01T01:00:00+02:00" } No explicit 'Mapping' for index 'examples' is provided (Elasticsearch will t… --- ## [How to convert KVpair value from string to an integer in logstash pipeline](https://discuss.elastic.co/t/how-to-convert-kvpair-value-from-string-to-an-integer-in-logstash-pipeline/196421)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 5\ **Last updated:** [August 24, 2019, 4:27pm UTC](https://discuss.elastic.co/t/how-to-convert-kvpair-value-from-string-to-an-integer-in-logstash-pipeline/196421 "2019-08-24T16:27:01Z")
I have a setup as below source for kvpair: Duration: {2297} | Kernel: {171} | User: {1218} KVblock is as below kv { trim\_value =\> " {}\\r\\n" trim\_key =\> " \\r\\n" value\_split =\> ":" … --- ## [Convert float to int in a scripted field](https://discuss.elastic.co/t/convert-float-to-int-in-a-scripted-field/195400)
**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\ **Replies:** 5\ **Last updated:** [August 16, 2019, 1:24am UTC](https://discuss.elastic.co/t/convert-float-to-int-in-a-scripted-field/195400 "2019-08-16T01:24:23Z")
Hi, using Kibana 5.4.1 My documents have 2 date-type fields: "starttime" and "endtime". I am trying to create a scripted field with the difference, in hours. In the script box, I have this (doc\['endtime'\].value - doc… --- ## [Push data into elasticsearch indices from logstash via http](https://discuss.elastic.co/t/push-data-into-elasticsearch-indices-from-logstash-via-http/155183)
**Author:** [@BoffinPanda](https://discuss.elastic.co/u/BoffinPanda)\ **Replies:** 5\ **Last updated:** [November 2, 2018, 3:17pm UTC](https://discuss.elastic.co/t/push-data-into-elasticsearch-indices-from-logstash-via-http/155183 "2018-11-02T15:17:22Z")
I am trying to push my data which I am collecting from various sensors into elasticsearch. I am able to push my data directly into elasticsearch indices using the post method. I am now attempting to push the data via l… --- ## [PREVENT USER FROM DELETING INDEX](https://discuss.elastic.co/t/prevent-user-from-deleting-index/299322)
**Author:** [@Darshil\_Shah](https://discuss.elastic.co/u/Darshil_Shah)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 12:39pm UTC](https://discuss.elastic.co/t/prevent-user-from-deleting-index/299322 "2022-03-11T12:39:58Z")
I have created one role from Kibana in which i have given read and write privilege , but the users are still able to delete index with \_delete\_by\_query API call. How can i prevent user from deleting index ? --- ## [ILM stalled by waiting for shard to be active](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618)
**Author:** [@AdamZ](https://discuss.elastic.co/u/AdamZ)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 3:26pm UTC](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618 "2021-07-14T15:26:45Z")
Hello! I have an ILM Policy configured but it stops at rollover phase. I checked one of the indexes with this query: GET /apm-7.10.0-error-000001/\_ilm/explain?human And the response is: { "indices" : { "apm-7.… --- ## [Elasticsearch stopping and getting network exception](https://discuss.elastic.co/t/elasticsearch-stopping-and-getting-network-exception/224515)
**Author:** [@shubham\_hate](https://discuss.elastic.co/u/shubham_hate)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-stopping-and-getting-network-exception/224515 "2020-03-24T13:54:22Z")
Hello, I have deployed single node on machine, while starting the elasticsearch is getting stopped and returns and exception no-up and running site-local private address found, got... Please find the below log of ES. N… --- ## [K8S Node level logging as non-root user?](https://discuss.elastic.co/t/k8s-node-level-logging-as-non-root-user/193603)
**Author:** [@carlsoane](https://discuss.elastic.co/u/carlsoane)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 5:20pm UTC](https://discuss.elastic.co/t/k8s-node-level-logging-as-non-root-user/193603 "2020-01-31T17:20:42Z")
I'm trying to perform node level logging in a kubernetes cluster using Filebeat. I've installed Filebeat as a daemonset and it is reading logs from /var/lib/docker/containers//\*.log successfully. My concern is that I am … --- ## [Transport.go:125: ssl client failed to connect](https://discuss.elastic.co/t/transport-go-125-ssl-client-failed-to-connect/119475)
**Author:** [@Pierre\_What\_s\_Up\_Sca](https://discuss.elastic.co/u/Pierre_What_s_Up_Sca)\ **Replies:** 3\ **Last updated:** [February 13, 2018, 12:51pm UTC](https://discuss.elastic.co/t/transport-go-125-ssl-client-failed-to-connect/119475 "2018-02-13T12:51:30Z")
I am trying to connect filebeat to logstash but I have this error : ● filebeat.service - filebeat Loaded: loaded (/usr/lib/systemd/system/filebeat.service; enabled; vendor preset: disabled) Active: active (running) si… --- ## [Logstash status failed,why its not showing logstash is inactive when i stop logstatsh](https://discuss.elastic.co/t/logstash-status-failed-why-its-not-showing-logstash-is-inactive-when-i-stop-logstatsh/91747)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 2:20pm UTC](https://discuss.elastic.co/t/logstash-status-failed-why-its-not-showing-logstash-is-inactive-when-i-stop-logstatsh/91747 "2017-07-05T14:20:54Z")
root@dev01:~# service logstash stop root@dev01:~# service logstash status ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: Active: failed (Result: exit-cod… --- ## [Backups need a Shared Mount?](https://discuss.elastic.co/t/backups-need-a-shared-mount/85605)
**Author:** [@dusts66](https://discuss.elastic.co/u/dusts66)\ **Replies:** 3\ **Last updated:** [May 13, 2017, 3:58am UTC](https://discuss.elastic.co/t/backups-need-a-shared-mount/85605 "2017-05-13T03:58:37Z")
Looking at backing up my elasticsearch index on a small three node cluster. The \_snapshot api states a need for a shared mount. If that is not a viable option what's the best/efficient way to backup. The nodes run on … --- ## [Learn from the creators of the Learning to Rank plugin!](https://discuss.elastic.co/t/learn-from-the-creators-of-the-learning-to-rank-plugin/248847)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 1\ **Last updated:** [October 12, 2020, 2:15pm UTC](https://discuss.elastic.co/t/learn-from-the-creators-of-the-learning-to-rank-plugin/248847 "2020-10-12T14:15:49Z")
Hi all, You may know of OpenSource Connections - we built and maintain the Elasticsearch Learning to Rank plugin https://github.com/o19s/elasticsearch-learning-to-rank . We're running training on LTR from 20-23 October h… --- ## [How to boost higher ngrams?](https://discuss.elastic.co/t/how-to-boost-higher-ngrams/174159)
**Author:** [@xxviktor](https://discuss.elastic.co/u/xxviktor)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 3:13pm UTC](https://discuss.elastic.co/t/how-to-boost-higher-ngrams/174159 "2019-03-27T15:13:06Z")
Hi, I am working on index where I need to provide results even for one letter search. Default tokenizer is currently set to ngram with range from 1 to 5. My search query is running across multiple fields and for some en… --- ## [Illegal\_argument\_exception Text Fields are not Optmised](https://discuss.elastic.co/t/illegal-argument-exception-text-fields-are-not-optmised/375386)
**Author:** [@user-27022024](https://discuss.elastic.co/u/user-27022024)\ **Replies:** 2\ **Last updated:** [March 5, 2025, 4:40pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-text-fields-are-not-optmised/375386 "2025-03-05T16:40:25Z")
I have started getting this error when trying to run an average and median on a what certainly used to be mapped as a number. Type: illegal\_argument\_exception Reason: Text fields are not optimised for operations that r… --- ## [ES5: Correct RestClient.FailureListener behaviour & retry logic](https://discuss.elastic.co/t/es5-correct-restclient-failurelistener-behaviour-retry-logic/68211)
**Author:** [@trisport88](https://discuss.elastic.co/u/trisport88)\ **Replies:** 2\ **Last updated:** [December 6, 2016, 8:10pm UTC](https://discuss.elastic.co/t/es5-correct-restclient-failurelistener-behaviour-retry-logic/68211 "2016-12-06T20:10:08Z")
Hi, I have been using the ES5 RestClient which I am building as follows: RestClient.builder(hosts) .setFailureListener(failureListener) .build(); The failureListener that I have created simply logs a message that … --- ## [Grok filter for cyberoam syslogs](https://discuss.elastic.co/t/grok-filter-for-cyberoam-syslogs/25618)
**Author:** [@Andreas](https://discuss.elastic.co/u/Andreas)\ **Replies:** 2\ **Last updated:** [September 12, 2016, 9:17am UTC](https://discuss.elastic.co/t/grok-filter-for-cyberoam-syslogs/25618 "2016-09-12T09:17:28Z")
Hi all, i have been experementing with ELK the last 2 weeks. And it looks very good! But my main goal is to analyze our own firewall logs. But it dosnt look like my syslog filter can match any fields. I didnt get any d… --- ## [Filter file.path](https://discuss.elastic.co/t/filter-file-path/300695)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 2\ **Last updated:** [March 26, 2022, 4:42pm UTC](https://discuss.elastic.co/t/filter-file-path/300695 "2022-03-26T16:42:09Z")
Hi, I would like to filter the logs by the path /server/www/html/log.es/logs/access.log and I have no idea how to do it if anyone can help. --- ## [Chaos engineering in Elasticsearch](https://discuss.elastic.co/t/chaos-engineering-in-elasticsearch/158293)
**Author:** [@sumanthkumarc](https://discuss.elastic.co/u/sumanthkumarc)\ **Replies:** 1\ **Last updated:** [November 27, 2018, 10:35am UTC](https://discuss.elastic.co/t/chaos-engineering-in-elasticsearch/158293 "2018-11-27T10:35:22Z")
How can i break Elasticsearch in controlled manner, so that i can test its resiliency in my environment. I do understand that we could tamper with the external factors like memory , network, cpu etc, but i was just wonde… --- ## [Can I connect the Kibana straight to a master node with out a coordinator?](https://discuss.elastic.co/t/can-i-connect-the-kibana-straight-to-a-master-node-with-out-a-coordinator/83305)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 1\ **Last updated:** [April 23, 2017, 7:57am UTC](https://discuss.elastic.co/t/can-i-connect-the-kibana-straight-to-a-master-node-with-out-a-coordinator/83305 "2017-04-23T07:57:32Z")
Hi Can I create a cluster by connecting the Kibana straight to the ES master node without using a coordinator node? If no can you explain me why not? Many Thanks to all the helpers! --- ## [Show the number in a graph](https://discuss.elastic.co/t/show-the-number-in-a-graph/54715)
**Author:** [@stefan.witt](https://discuss.elastic.co/u/stefan.witt)\ **Replies:** 4\ **Last updated:** [August 2, 2016, 6:08am UTC](https://discuss.elastic.co/t/show-the-number-in-a-graph/54715 "2016-08-02T06:08:08Z")
Hello, i transfered a log into logstash. in this log, there is a number. with the filter, i make a field and there i save the number. And now i want Kibana to show just these Number. i don't need a aggegation, how … --- ## [\[Need Help\] Multiple pattern in one log file](https://discuss.elastic.co/t/need-help-multiple-pattern-in-one-log-file/25357)
**Author:** [@SiegeLion](https://discuss.elastic.co/u/SiegeLion)\ **Replies:** 4\ **Last updated:** [July 11, 2015, 5:50am UTC](https://discuss.elastic.co/t/need-help-multiple-pattern-in-one-log-file/25357 "2015-07-11T05:50:36Z")
I am trying to send xtreemfs log files to logstash and parse them into elastic search A problem with xtreemfs log files is that they begin with some thing like ########### Configuration ########### # Stuff # More Stu… --- ## [How does shingle filter work on match\_phrase in query phase?](https://discuss.elastic.co/t/how-does-shingle-filter-work-on-match-phrase-in-query-phase/18225)
**Author:** [@11153](https://discuss.elastic.co/u/11153)\ **Replies:** 4\ **Last updated:** [June 20, 2014, 1:11pm UTC](https://discuss.elastic.co/t/how-does-shingle-filter-work-on-match-phrase-in-query-phase/18225 "2014-06-20T13:11:42Z")
How does shingle filter work on match\_phrase in query phase? After analyzing phrase "t1 t2 t3", shingle filter produced five tokens, t1 t2 t3 "t1 t2" "t2 t3" Will match\_phrase still give "t1 t2 t3"… --- ## [Error : "java.lang.OutOfMemoryError: unable to create new native thread"](https://discuss.elastic.co/t/error-java-lang-outofmemoryerror-unable-to-create-new-native-thread/3248)
**Author:** [@Abdurrahim\_Eke](https://discuss.elastic.co/u/Abdurrahim_Eke)\ **Replies:** 4\ **Last updated:** [February 20, 2014, 11:11am UTC](https://discuss.elastic.co/t/error-java-lang-outofmemoryerror-unable-to-create-new-native-thread/3248 "2014-02-20T11:11:03Z")
Hi, I was testing async indexing to an Elastic Search Node via java transport api , the ES node have actually 1GB of memory via settings - Xms1G^ -Xmx1G^ . ES Node was running on Windows XP ( same problem occur… --- ## [Can not run elastic after add keystore](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347)
**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Replies:** 6\ **Last updated:** [August 31, 2020, 3:46am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347 "2020-08-31T03:46:47Z")
Hi Recently trying to use elasticsearch keystore when I trying to restart elastic service when a new key added like "mypassword" to created elasticsearch.keystore, got a weird error Aug 10 10:08:04 debian elasticsearc… --- ## [Source of default apm dashboards](https://discuss.elastic.co/t/source-of-default-apm-dashboards/187674)
**Author:** [@karlpokus](https://discuss.elastic.co/u/karlpokus)\ **Replies:** 8\ **Last updated:** [July 4, 2019, 8:23am UTC](https://discuss.elastic.co/t/source-of-default-apm-dashboards/187674 "2019-07-04T08:23:03Z")
Can I get the source for the default kibana apm dashboards? There's no right clicking anywhere. --- ## [Packetbeat compatibable with Elastic 2.4](https://discuss.elastic.co/t/packetbeat-compatibable-with-elastic-2-4/68595)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 8\ **Last updated:** [December 9, 2016, 8:54pm UTC](https://discuss.elastic.co/t/packetbeat-compatibable-with-elastic-2-4/68595 "2016-12-09T20:54:40Z")
Is any of the versions of packetbeat compatible with Elasticsearch 2.4 I am getting a lot of "can't contain '." in the field name" I am running the de\_dot filter but was hoping I am just running the wrong version of p… --- ## [Logstash or Spark -- Elasticsearch](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313)
**Author:** [@alvgoro](https://discuss.elastic.co/u/alvgoro)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313 "2021-04-06T16:05:13Z")
Hi there! I was searching on Google and this forum but I am still undecided. I would like to develop a system which collects logs from several servers and then analyze them. I thinked about Beats to collect logs (and … --- ## [Elastic APM Java Annotation API](https://discuss.elastic.co/t/elastic-apm-java-annotation-api/157009)
**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 2:36pm UTC](https://discuss.elastic.co/t/elastic-apm-java-annotation-api/157009 "2018-11-16T14:36:25Z")
I'm trying to test the Annotation API on a Spring application but I get a compile-time error "cannot find symbol" related to the annotations for both @CaptureScan() and @CaptureTransaction(). I've already configured app… --- ## [How to create line visualization from log firewall automatically](https://discuss.elastic.co/t/how-to-create-line-visualization-from-log-firewall-automatically/100239)
**Author:** [@baharudin\_yusuf](https://discuss.elastic.co/u/baharudin_yusuf)\ **Replies:** 5\ **Last updated:** [September 12, 2017, 5:25pm UTC](https://discuss.elastic.co/t/how-to-create-line-visualization-from-log-firewall-automatically/100239 "2017-09-12T17:25:03Z")
how to make line visualization of log firewall automatically with csv data format? I want to show the ip address is connected or disconnected at any time, suppose x is the clock and y is the ip address. of the many ip ad… --- ## [Kibana RegEx not working as expected?](https://discuss.elastic.co/t/kibana-regex-not-working-as-expected/16546)
**Author:** [@Janet](https://discuss.elastic.co/u/Janet)\ **Replies:** 5\ **Last updated:** [March 24, 2014, 6:05pm UTC](https://discuss.elastic.co/t/kibana-regex-not-working-as-expected/16546 "2014-03-24T18:05:06Z")
I'm running ES 1.0.1 and Kibana 3 milestone 5. I'm trying to use regex in my kibana searches, as described at http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-regexp-query.html#regexp-syn… --- ## [Online Interactive Analyzer Explorer](https://discuss.elastic.co/t/online-interactive-analyzer-explorer/143596)
**Author:** [@gtalarico](https://discuss.elastic.co/u/gtalarico)\ **Replies:** 1\ **Last updated:** [August 9, 2018, 12:28am UTC](https://discuss.elastic.co/t/online-interactive-analyzer-explorer/143596 "2018-08-09T00:28:23Z")
Hi, first time posting here. I started using elasticsearch just a few weeks ago and I love the product. I took me some a couple days to learn my way around and wrap my head around the concepts, in particular analyzers… --- ## [Indices:data/read/search exception](https://discuss.elastic.co/t/indices-data-read-search-exception/64939)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [November 4, 2016, 12:07pm UTC](https://discuss.elastic.co/t/indices-data-read-search-exception/64939 "2016-11-04T12:07:16Z")
Hello, I am getting this in Kibana: plugin:elasticsearch \[security\_exception\] action \[indices:data/read/search\] is unauthorized for user \[kibana-server\] XGET /\_shield/user?pretty gives me this { "kibana-server"… --- ## [ELK sizing guidance](https://discuss.elastic.co/t/elk-sizing-guidance/256999)
**Author:** [@Raghava\_Reddy\_Kapu\_V](https://discuss.elastic.co/u/Raghava_Reddy_Kapu_V)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 2:48am UTC](https://discuss.elastic.co/t/elk-sizing-guidance/256999 "2020-12-02T02:48:47Z")
Hi, I am considering the ELK stack in a large telco opportunity in the MEA region as the propsosed log management solutions (Humio, Splunk Enterprise, etc,.) are turning out to be expensive in the overall solution approa… --- ## [Watcher / Alerting: Time issues with frequent watch](https://discuss.elastic.co/t/watcher-alerting-time-issues-with-frequent-watch/68710)
**Author:** [@nick.e](https://discuss.elastic.co/u/nick.e)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 3:38am UTC](https://discuss.elastic.co/t/watcher-alerting-time-issues-with-frequent-watch/68710 "2016-12-14T03:38:23Z")
I am searching for a way to let an important watch trigger frequently about every 5 seconds. The problem is, that sometimes an event takes some time to be sent by a Beat, filtered by Logstash and indexed by Elasticsearc… --- ## [Hive ES Hadoop not finding ES cluster](https://discuss.elastic.co/t/hive-es-hadoop-not-finding-es-cluster/60181)
**Author:** [@darshanpandya](https://discuss.elastic.co/u/darshanpandya)\ **Replies:** 2\ **Last updated:** [September 14, 2016, 9:34pm UTC](https://discuss.elastic.co/t/hive-es-hadoop-not-finding-es-cluster/60181 "2016-09-14T21:34:14Z")
hello all, Elasticsearch cluster is different from hadoiop cluster and connectivity is tested between the data nodes and elastic search I am able to create a collection in ElasticSearch but I am not able to run a MapRe… --- ## [Difference between results of two queries](https://discuss.elastic.co/t/difference-between-results-of-two-queries/270991)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 2:40pm UTC](https://discuss.elastic.co/t/difference-between-results-of-two-queries/270991 "2021-04-26T14:40:26Z")
Hi! I'm stuck and I really need help. Here is my use case: I would like to perform two queries and get as final result the difference between those two queries based on a specific field. Let's assume that I have these … --- ## [Logstash keeps restarting and load CPU](https://discuss.elastic.co/t/logstash-keeps-restarting-and-load-cpu/129242)
**Author:** [@Tellur](https://discuss.elastic.co/u/Tellur)\ **Replies:** 4\ **Last updated:** [April 24, 2018, 8:04am UTC](https://discuss.elastic.co/t/logstash-keeps-restarting-and-load-cpu/129242 "2018-04-24T08:04:07Z")
Hello! I have CentOS with Logstash + JDBC + Elasticsearch to sync data between MySQL database and Elasticsearch. It works great, but I have noticed that Logstash highly loads CPU. I read all topics here and found that L… --- ## [Displaying filters next to log messages in the dashboard](https://discuss.elastic.co/t/displaying-filters-next-to-log-messages-in-the-dashboard/95325)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 4\ **Last updated:** [August 3, 2017, 4:48pm UTC](https://discuss.elastic.co/t/displaying-filters-next-to-log-messages-in-the-dashboard/95325 "2017-08-03T16:48:07Z")
Hi, I am able to show the log messages on the dashboard. However I also want to show the filters next to the messages like shown here (bottom left). I know I can apply the same filters by expanding the message but this … --- ## [Groovy parseText to json](https://discuss.elastic.co/t/groovy-parsetext-to-json/69955)
**Author:** [@kevin\_chen](https://discuss.elastic.co/u/kevin_chen)\ **Replies:** 4\ **Last updated:** [December 27, 2016, 6:39am UTC](https://discuss.elastic.co/t/groovy-parsetext-to-json/69955 "2016-12-27T06:39:15Z")
I want to parse Text to json in groovy script but get errors: failed to load/compile script \[my\_script\] This is my\_script.groovy file: d=doc\['data'\].value //d='data=%7B%22request%22%3A%7B%22model%22%3A%22Score%22%2… --- ## [Per MongoDB shard per ElasticSearch cluster?](https://discuss.elastic.co/t/per-mongodb-shard-per-elasticsearch-cluster/9454)
**Author:** [@Liang\_Yu\_Chou](https://discuss.elastic.co/u/Liang_Yu_Chou)\ **Replies:** 4\ **Last updated:** [June 2, 2016, 12:22pm UTC](https://discuss.elastic.co/t/per-mongodb-shard-per-elasticsearch-cluster/9454 "2016-06-02T12:22:38Z")
Hello all, I'm trying to incorporate ElasticSearch with our existing MongoDB database. Currently we have a mongo collection separated to three mongo shards. Does that mean I have to use three ElasticSearch clusters f… --- ## [Is re-election/assignment of the master node possible?](https://discuss.elastic.co/t/is-re-election-assignment-of-the-master-node-possible/20960)
**Author:** [@Erik\_theRed](https://discuss.elastic.co/u/Erik_theRed)\ **Replies:** 4\ **Last updated:** [November 28, 2014, 9:31am UTC](https://discuss.elastic.co/t/is-re-election-assignment-of-the-master-node-possible/20960 "2014-11-28T09:31:37Z")
Is there any notion triggering a re-election of the master node? I'm currently running 1.2.4, and I have an instance that is scheduled for retirement (my favorite!) and it just so happens that it's my master node.… [Previous page](https://discuss.elastic.co/top.md?page=880&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=882&per_page=50&period=all)