# Top **URL:** https://discuss.elastic.co/top.md?page=917&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 918 --- ## [There is no log in discover part of kibana](https://discuss.elastic.co/t/there-is-no-log-in-discover-part-of-kibana/177839)
**Author:** [@Mohammad\_hossein\_Taj](https://discuss.elastic.co/u/Mohammad_hossein_Taj)\ **Replies:** 5\ **Last updated:** [April 26, 2019, 11:19am UTC](https://discuss.elastic.co/t/there-is-no-log-in-discover-part-of-kibana/177839 "2019-04-26T11:19:18Z")
I'm trying to send logs from filebeat to logstash but after running logstash and filebeat I can't see any log . it's my steps: run elasticsearch and kibana add a .conf file named "beatsToElasticSearchPipeline.conf" to … --- ## [Can I print out bitset cache sizes by filter (or what's eating my heap)?](https://discuss.elastic.co/t/can-i-print-out-bitset-cache-sizes-by-filter-or-whats-eating-my-heap/33103)
**Author:** [@Nikita\_Tovstoles](https://discuss.elastic.co/u/Nikita_Tovstoles)\ **Replies:** 5\ **Last updated:** [August 3, 2016, 7:38pm UTC](https://discuss.elastic.co/t/can-i-print-out-bitset-cache-sizes-by-filter-or-whats-eating-my-heap/33103 "2016-08-03T19:38:58Z")
After starting to make liberal use of nested properties to simulate (denormalized) many-to-many relations, our ES server started routinely throwing OutOfMemory errors several hours after startup under routine, moderate u… --- ## [7.2.0: Unknown setting 'ssl' for redis -\> canot connect to redis via TLS](https://discuss.elastic.co/t/7-2-0-unknown-setting-ssl-for-redis-canot-connect-to-redis-via-tls/190184)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [August 17, 2019, 4:55pm UTC](https://discuss.elastic.co/t/7-2-0-unknown-setting-ssl-for-redis-canot-connect-to-redis-via-tls/190184 "2019-08-17T16:55:34Z")
Hi, I am using redis behind stunnel to gain TLS encryption for redis. Filebeat is running fine, ships it's data sucessfully to redis database. Now I want to establish secured connection from logstash to redis. I updat… --- ## [運行logstash-plugin list 命令失敗](https://discuss.elastic.co/t/logstash-plugin-list/198614)
**Author:** [@111203](https://discuss.elastic.co/u/111203)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 3:03am UTC](https://discuss.elastic.co/t/logstash-plugin-list/198614 "2019-09-12T03:03:03Z")
我在Logstash folder 下運行logstash-plugin命令會出現 unknown encoding name - MS950 環境/版本: logstash: 6.8.1 OS : Win 10 請問有人知道如何解決嗎? 謝謝 --- ## [ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, { at line 24, column 7](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-24-column-7/173833)
**Author:** [@sblancocr](https://discuss.elastic.co/u/sblancocr)\ **Replies:** 6\ **Last updated:** [March 26, 2019, 2:47pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-24-column-7/173833 "2019-03-26T14:47:40Z")
Hi. I installed a logstash and show me next error log: \[2019-03-25T15:36:16,145\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.6.1"} \[2019-03-25T15:36:18,147\]\[ERROR\]\[logstash.agent … --- ## [Dynamic Sampling Rates](https://discuss.elastic.co/t/dynamic-sampling-rates/163083)
**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\ **Replies:** 6\ **Last updated:** [January 7, 2019, 2:05pm UTC](https://discuss.elastic.co/t/dynamic-sampling-rates/163083 "2019-01-07T14:05:19Z")
Hello again! We are wondering if Elastic APM has a way to enable dynamic sampling, meaning having the ability to change sampling rates on the fly without needing to restart services and agents. One of the use case for … --- ## [Slow simple aggregation related to a not analyzed string](https://discuss.elastic.co/t/slow-simple-aggregation-related-to-a-not-analyzed-string/66117)
**Author:** [@gleroy](https://discuss.elastic.co/u/gleroy)\ **Replies:** 6\ **Last updated:** [November 24, 2016, 5:23pm UTC](https://discuss.elastic.co/t/slow-simple-aggregation-related-to-a-not-analyzed-string/66117 "2016-11-24T17:23:45Z")
Hello, I noticed that some queries/aggregations were very slow related to their size, on elasticsearch 2.4. curl -XPOST 'localhost:9201/logstash\_netflow\_client\_v12-2016.11.11/\_search?pretty' -d' { "query": { "f… --- ## [Poor performance updating](https://discuss.elastic.co/t/poor-performance-updating/6703)
**Author:** [@haarts](https://discuss.elastic.co/u/haarts)\ **Replies:** 6\ **Last updated:** [February 16, 2012, 9:55am UTC](https://discuss.elastic.co/t/poor-performance-updating/6703 "2012-02-16T09:55:23Z")
Dear list, We were stoked when we found out about the updating feature in the recent 0.19.0rc2 release. We have been eagerly experimenting with it but are disappointed by it's performance. Hopefully you can tell u… --- ## [java.io.StreamCorruptedException](https://discuss.elastic.co/t/java-io-streamcorruptedexception/197485)
**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\ **Replies:** 7\ **Last updated:** [September 4, 2019, 8:13am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception/197485 "2019-09-04T08:13:30Z")
Hi , When I am trying to connect DataNode with Master Node Getting error below as written below: {"type": "server", "timestamp": "2019-08-30T12:08:21,959+0000", "level": "WARN", "component": "o.e.c.c.ClusterFormationFa… --- ## [Elasticsearch docker image for i386 architecture is needed](https://discuss.elastic.co/t/elasticsearch-docker-image-for-i386-architecture-is-needed/146425)
**Author:** [@Turmer](https://discuss.elastic.co/u/Turmer)\ **Replies:** 7\ **Last updated:** [September 7, 2018, 4:50am UTC](https://discuss.elastic.co/t/elasticsearch-docker-image-for-i386-architecture-is-needed/146425 "2018-09-07T04:50:54Z")
Where can I find elasticsearch docker image for i386 architecture? I know it is not officially supported, but an unofficial one would suffice. If there is no such image, how can I build one locally? Any help would be muc… --- ## [Elastic Logstash Helm Chart Doesn't Pass Readiness Probe](https://discuss.elastic.co/t/elastic-logstash-helm-chart-doesnt-pass-readiness-probe/218835)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 6:53pm UTC](https://discuss.elastic.co/t/elastic-logstash-helm-chart-doesnt-pass-readiness-probe/218835 "2020-02-11T18:53:00Z")
I have multiple logstash pods deployed, segregated by function. I am experiencing an issue where, when I have xpack.monitoring configured, the helm chart readiness and liveness probes don't ever show that the pod is read… --- ## [How to become an ElasticSearch expert](https://discuss.elastic.co/t/how-to-become-an-elasticsearch-expert/164057)
**Author:** [@ordner](https://discuss.elastic.co/u/ordner)\ **Replies:** 1\ **Last updated:** [January 13, 2019, 10:07pm UTC](https://discuss.elastic.co/t/how-to-become-an-elasticsearch-expert/164057 "2019-01-13T22:07:19Z")
Hi. I have been on my current project for about a year now and in that time I have had the chance to get to know ElasticSearch from the request side in all its glory: making requests from the browser natively and with… --- ## [Get by Id Missing in Current C#/NEST Documentation](https://discuss.elastic.co/t/get-by-id-missing-in-current-c-nest-documentation/153496)
**Author:** [@iinuwa](https://discuss.elastic.co/u/iinuwa)\ **Replies:** 1\ **Last updated:** [October 23, 2018, 2:13am UTC](https://discuss.elastic.co/t/get-by-id-missing-in-current-c-nest-documentation/153496 "2018-10-23T02:13:22Z")
Hello, I am wondering what is the best way to query by document Id. In previous versions of the NEST documentation, there was an example of using the Get() method of the ElasticClient class, e.g. 1.x Documentation. The … --- ## [Elasticsearch API: search with id filter VS get](https://discuss.elastic.co/t/elasticsearch-api-search-with-id-filter-vs-get/54942)
**Author:** [@LiorY89](https://discuss.elastic.co/u/LiorY89)\ **Replies:** 1\ **Last updated:** [July 7, 2016, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-api-search-with-id-filter-vs-get/54942 "2016-07-07T12:22:31Z")
I have list of ids, which i need to retrieve is there any difference using multi-get and using a search with an id filter? is the GET faster? --- ## [Kafka optimal configuration](https://discuss.elastic.co/t/kafka-optimal-configuration/34554)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 1\ **Last updated:** [November 19, 2015, 7:00pm UTC](https://discuss.elastic.co/t/kafka-optimal-configuration/34554 "2015-11-19T19:00:45Z")
I am trying to use Kafka to replace redis. I am curious if anyone can help with this question I have three brokers that would have 4 topics. Each topic would have dedicated three logstash indexers. My question shoul… --- ## [Search on the nth element in an array](https://discuss.elastic.co/t/search-on-the-nth-element-in-an-array/14008)
**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\ **Replies:** 1\ **Last updated:** [October 18, 2013, 9:49am UTC](https://discuss.elastic.co/t/search-on-the-nth-element-in-an-array/14008 "2013-10-18T09:49:59Z")
If I have an array in my index { "myArray":{ { myValue:50 }, { myValue:160 } } } Is there a way to search on objects in the array by specifying the array index value, in the example below I want to searc… --- ## [Can Elastic Stack replace tools like zabbix?](https://discuss.elastic.co/t/can-elastic-stack-replace-tools-like-zabbix/340357)
**Author:** [@musialny](https://discuss.elastic.co/u/musialny)\ **Replies:** 3\ **Last updated:** [August 9, 2023, 2:57pm UTC](https://discuss.elastic.co/t/can-elastic-stack-replace-tools-like-zabbix/340357 "2023-08-09T14:57:42Z")
Is Elasticsearch stack capable of distribute network monitoring? --- ## [Adding a negative boost in a multi\_match query](https://discuss.elastic.co/t/adding-a-negative-boost-in-a-multi-match-query/335534)
**Author:** [@daansk44](https://discuss.elastic.co/u/daansk44)\ **Replies:** 3\ **Last updated:** [June 13, 2023, 2:52pm UTC](https://discuss.elastic.co/t/adding-a-negative-boost-in-a-multi-match-query/335534 "2023-06-13T14:52:49Z")
Hi everyone, I just started with Elastic Search I wanted to make some items in the query less relevant, so I am trying to give them a negative boost (make the two items in the must\_not sub-query less relevant). And exa… --- ## [High system load during search when total index size is large](https://discuss.elastic.co/t/high-system-load-during-search-when-total-index-size-is-large/274439)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 8\ **Last updated:** [June 28, 2021, 6:56pm UTC](https://discuss.elastic.co/t/high-system-load-during-search-when-total-index-size-is-large/274439 "2021-06-28T18:56:56Z")
I have a cluster setup where some nodes can experience high system load for a specific index. Index The index is time-based, and is named as such: index-2021.03 index-2021.04 index-2021.05 In other words, I begin a n… --- ## [Unexpected docvalues type NONE for field '\_parent'](https://discuss.elastic.co/t/unexpected-docvalues-type-none-for-field--parent/86518)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 7:46pm UTC](https://discuss.elastic.co/t/unexpected-docvalues-type-none-for-field--parent/86518 "2017-05-22T19:46:42Z")
Hi, I am migrating to Elastic Search 5.2.2 from 2.3.1, we have successfully migrated index from 2.3.1 to 5.2.2 through Snapshot and Restore. When I am trying to update Index on 5.2.2 with updated data I am … --- ## [Elasticsearch repositoryが作成できない](https://discuss.elastic.co/t/elasticsearch-repository/258383)
**Author:** [@\_Username](https://discuss.elastic.co/u/_Username)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 7:19am UTC](https://discuss.elastic.co/t/elasticsearch-repository/258383 "2020-12-14T07:19:06Z")
【問合せ内容】 Elasticsearchのsnapshot取得のため、リポジトリを作成しようとしているが、【現象】エラーが発生してリポジトリを作成できない。 同じ事象の情報や、原因調査方法など、助言をいただきたく、宜しくお願いいたします。 【環境】 Windows10 PRO(バージョン 1909)(※開発環境のため、スタンドアロン) Elasticsearch 7.9.2 kibana 7.9.2 【参考】 スナップシ… --- ## [Secure my ELK - nginx credentials](https://discuss.elastic.co/t/secure-my-elk-nginx-credentials/170521)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 2\ **Last updated:** [March 5, 2019, 9:37pm UTC](https://discuss.elastic.co/t/secure-my-elk-nginx-credentials/170521 "2019-03-05T21:37:54Z")
Hello, I was trying to secure my cluster, so I am using X-Pack to define users to each roles. I was trying to embed dashboards in an external web page. The user, when logged in my web page, should be able to see the kib… --- ## [Gsub syntax to remove all before \\](https://discuss.elastic.co/t/gsub-syntax-to-remove-all-before/103243)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 2\ **Last updated:** [October 9, 2017, 5:08pm UTC](https://discuss.elastic.co/t/gsub-syntax-to-remove-all-before/103243 "2017-10-09T17:08:31Z")
Hi, I'm trying to write up a gsub to remove everything before a slash. My input will come in the format of something similar to: LP-45XP\\joe.bloggs 3G49-2AP\\john.doe random\_PC-domain\_name\\random\_firstname.random\_last… --- ## [Java API - is FilterBuilders removed on es5.2?](https://discuss.elastic.co/t/java-api-is-filterbuilders-removed-on-es5-2/79575)
**Author:** [@idanhagai](https://discuss.elastic.co/u/idanhagai)\ **Replies:** 2\ **Last updated:** [March 22, 2017, 3:04pm UTC](https://discuss.elastic.co/t/java-api-is-filterbuilders-removed-on-es5-2/79575 "2017-03-22T15:04:05Z")
If yes, what's the alternative ? --- ## [PANW module timezone offset](https://discuss.elastic.co/t/panw-module-timezone-offset/191360)
**Author:** [@seatsea](https://discuss.elastic.co/u/seatsea)\ **Replies:** 4\ **Last updated:** [July 23, 2019, 10:33am UTC](https://discuss.elastic.co/t/panw-module-timezone-offset/191360 "2019-07-23T10:33:33Z")
I have a Paloalto firewall configured with the local timezone Europe/Paris sending syslog to a Filebeat Docker container using the default timezone of UTC using the PANW module. Setting var.convert\_timezone: true does n… --- ## [False Positive Report](https://discuss.elastic.co/t/false-positive-report/311191)
**Author:** [@ChristianR](https://discuss.elastic.co/u/ChristianR)\ **Replies:** 6\ **Last updated:** [August 30, 2022, 7:06am UTC](https://discuss.elastic.co/t/false-positive-report/311191 "2022-08-30T07:06:42Z")
Hi, we followed your advice and forwarded a false positive report to fp\_reports@elastic.co but have not received any response. Pls advise: Filename: mavwin\_8\_35\_0\_9.exe Hash (SHA256): 3987CB0CCDD1FABB879AF8E59EB847E104… --- ## [Logstash pipeline.workers](https://discuss.elastic.co/t/logstash-pipeline-workers/316053)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 1\ **Last updated:** [October 7, 2022, 4:31pm UTC](https://discuss.elastic.co/t/logstash-pipeline-workers/316053 "2022-10-07T16:31:47Z")
Hello! Currently we have our pipeline.yml without defined workers. We understand that we take by default the number of cpu cores of the machine. Should we define all in pipeline.worker: 1 ? How do we decide which work… --- ## [Logstash 1.5.0 grok regular expression . now includes also end of line character](https://discuss.elastic.co/t/logstash-1-5-0-grok-regular-expression-now-includes-also-end-of-line-character/970)
**Author:** [@Constantin\_Rata](https://discuss.elastic.co/u/Constantin_Rata)\ **Replies:** 1\ **Last updated:** [May 31, 2017, 3:46pm UTC](https://discuss.elastic.co/t/logstash-1-5-0-grok-regular-expression-now-includes-also-end-of-line-character/970 "2017-05-31T15:46:51Z")
Hi. I try to parse a log file that contains a stack trace. I use multiline coded in order to join multiple lines in one event. After I do this I want to use grok to identify the exception and store everything until end o… --- ## [Should I set the zero value of a floating-point field to 0.0 rather than 0, to help dynamic detection?](https://discuss.elastic.co/t/should-i-set-the-zero-value-of-a-floating-point-field-to-0-0-rather-than-0-to-help-dynamic-detection/77929)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 1\ **Last updated:** [March 28, 2017, 4:24am UTC](https://discuss.elastic.co/t/should-i-set-the-zero-value-of-a-floating-point-field-to-0-0-rather-than-0-to-help-dynamic-detection/77929 "2017-03-28T04:24:39Z")
I think the answer is “Yes”, but I thought it was worth asking this question. Perhaps the answer is “No” or “It doesn’t matter”; in which case, I’ll have learned something about dynamic mapping, and I can save bytes by o… --- ## [Truncate part of a value of a string field in Kibana?](https://discuss.elastic.co/t/truncate-part-of-a-value-of-a-string-field-in-kibana/71705)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 11:54pm UTC](https://discuss.elastic.co/t/truncate-part-of-a-value-of-a-string-field-in-kibana/71705 "2017-01-16T23:54:38Z")
I'm having a field called userid (analyzed and the datatype is text) and all it's value pretend to be as follows: sometext@something.super newtext@something.super So what I need is, to trim the above value so that I… --- ## [Default JAVA\_OPTS in elasticsearch.in.sh](https://discuss.elastic.co/t/default-java-opts-in-elasticsearch-in-sh/37095)
**Author:** [@aman](https://discuss.elastic.co/u/aman)\ **Replies:** 1\ **Last updated:** [December 14, 2015, 7:04pm UTC](https://discuss.elastic.co/t/default-java-opts-in-elasticsearch-in-sh/37095 "2015-12-14T19:04:20Z")
I tried opening \[\[ the ticket with elasticsearch-puppet but was sent here instead: elasticsearch.in.sh (/usr/share/elasticsearch/bin/elasticsearch.in.sh on Ubuntu 12.04) contains following JAVA\_OPTS defaults: JA… --- ## [Logstash keystore Permisson denied](https://discuss.elastic.co/t/logstash-keystore-permisson-denied/213590)
**Author:** [@zeleznypa](https://discuss.elastic.co/u/zeleznypa)\ **Replies:** 5\ **Last updated:** [January 6, 2020, 7:40am UTC](https://discuss.elastic.co/t/logstash-keystore-permisson-denied/213590 "2020-01-06T07:40:59Z")
We have configured smb shared folder between elastic stack servers, that contain the logstash.keystore file. This storage is mounted in for example /mnt/elastic folder the file /mnt/elastic/logstash.keystore is symlink… --- ## [Null values appear in line chart with value 0.00](https://discuss.elastic.co/t/null-values-appear-in-line-chart-with-value-0-00/158294)
**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\ **Replies:** 5\ **Last updated:** [November 28, 2018, 2:24pm UTC](https://discuss.elastic.co/t/null-values-appear-in-line-chart-with-value-0-00/158294 "2018-11-28T14:24:48Z")
Good morning, I have a doubt, i have an index with a lot of values of a field with null values in search. When i plot this field in line chart of kibana this all values appears with the 0.00 value. Why catch the value 0… --- ## [Send data to right pipeline from two CSV files](https://discuss.elastic.co/t/send-data-to-right-pipeline-from-two-csv-files/126700)
**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\ **Replies:** 5\ **Last updated:** [April 5, 2018, 8:42pm UTC](https://discuss.elastic.co/t/send-data-to-right-pipeline-from-two-csv-files/126700 "2018-04-05T20:42:10Z")
Hello, I am trying to understand workflow Filebeat ---\> Beats/Logstash ---\> Right pipeline. For example, we can have two CSVfiles with the same structure. Both data stream is sending to the Beats who listen on port 504… --- ## [Filebeat for naxsi waf log](https://discuss.elastic.co/t/filebeat-for-naxsi-waf-log/106951)
**Author:** [@qingweiqm](https://discuss.elastic.co/u/qingweiqm)\ **Replies:** 5\ **Last updated:** [November 10, 2017, 2:22pm UTC](https://discuss.elastic.co/t/filebeat-for-naxsi-waf-log/106951 "2017-11-10T14:22:11Z")
hi, there I was trying to build a filebeat module for naxsi waf log. the log is on /usr/local/shadow/logs/shadow\_waf.log the log format is below: 2017/09/07 18:26:21 \[error\] 1097#0: SHADOW\_WAF: 109720&ip=172.16.144.1&s… --- ## [Elasticsearch stops after running for a week](https://discuss.elastic.co/t/elasticsearch-stops-after-running-for-a-week/248137)
**Author:** [@Mason](https://discuss.elastic.co/u/Mason)\ **Replies:** 3\ **Last updated:** [September 10, 2020, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch-stops-after-running-for-a-week/248137 "2020-09-10T09:22:43Z")
I am using ELK stack (Elasticsearch and Kibana ) in a docker setup to monitor one of our application which is running in docker. This is a dedicated machine. I use filebeats to send logs to the ELK. Filebeats also run in… --- ## [Elasticsearch sort based on element in multivalue field](https://discuss.elastic.co/t/elasticsearch-sort-based-on-element-in-multivalue-field/60039)
**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\ **Replies:** 3\ **Last updated:** [September 12, 2016, 11:23pm UTC](https://discuss.elastic.co/t/elasticsearch-sort-based-on-element-in-multivalue-field/60039 "2016-09-12T23:23:14Z")
Is it possible to sort based on element existing in multi value field? Example: a) document with "111" put test/test/1 { "bit\_position" : \[ 1, 2, 3 \] } b) document with 010 put test… --- ## [Search multiple fields using multiple text values](https://discuss.elastic.co/t/search-multiple-fields-using-multiple-text-values/314903)
**Author:** [@sadiki-dev](https://discuss.elastic.co/u/sadiki-dev)\ **Replies:** 2\ **Last updated:** [September 22, 2022, 1:28am UTC](https://discuss.elastic.co/t/search-multiple-fields-using-multiple-text-values/314903 "2022-09-22T01:28:50Z")
I work with address searching. and I want to search with two formats (multiple values) of an adress using multiple fields. adress is a text input not a keyword. For example : user\_address = 88 South East Street Raeford… --- ## [Elasticsearch mapping - Different types of data in same field](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526 "2022-06-17T16:21:45Z")
I am trying to create a mapping for my Elasticsearch that would make me insert both an array and a string into my field "value". The following shows the data I want inserted: { "Data": \[{ "key": "keyNa… --- ## [Installing beats dashboard into kibana, version 6.x](https://discuss.elastic.co/t/installing-beats-dashboard-into-kibana-version-6-x/103952)
**Author:** [@chirgeo](https://discuss.elastic.co/u/chirgeo)\ **Replies:** 2\ **Last updated:** [October 20, 2017, 5:48am UTC](https://discuss.elastic.co/t/installing-beats-dashboard-into-kibana-version-6-x/103952 "2017-10-20T05:48:06Z")
Hi. I'm testing metricbeat:6.0.0-rc1 and confused on how to import dashboards into kibana when using as output logstash in an automated way(using ansible). I'm installing metricbeat which is configured default to send … --- ## [Mappings, timestamps and templates](https://discuss.elastic.co/t/mappings-timestamps-and-templates/94141)
**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 2:14pm UTC](https://discuss.elastic.co/t/mappings-timestamps-and-templates/94141 "2017-07-26T14:14:21Z")
I have imported data into Elastic using the CSV plugin. The first two fields are a timestamp which I would like to perform analysis on in Elastic and Kibana. The issue I have is the the two time stamp fields are being im… --- ## [Completion Suggester : Support for numeric value completion suggestion](https://discuss.elastic.co/t/completion-suggester-support-for-numeric-value-completion-suggestion/19135)
**Author:** [@Hemant](https://discuss.elastic.co/u/Hemant)\ **Replies:** 2\ **Last updated:** [August 12, 2014, 9:10am UTC](https://discuss.elastic.co/t/completion-suggester-support-for-numeric-value-completion-suggestion/19135 "2014-08-12T09:10:44Z")
Hello, I was trying the following use cases using completion suggester - 1. Suggest Song on search song by id - numeric value(long) - \*\*\*\*\*\*\* 2. Suggest Song by Song Title and some more use cases, but that does… --- ## [Question About Migrating Watchers From 5.3 to 6.8](https://discuss.elastic.co/t/question-about-migrating-watchers-from-5-3-to-6-8/201564)
**Author:** [@elasticTrouble](https://discuss.elastic.co/u/elasticTrouble)\ **Replies:** 6\ **Last updated:** [September 30, 2019, 4:35pm UTC](https://discuss.elastic.co/t/question-about-migrating-watchers-from-5-3-to-6-8/201564 "2019-09-30T16:35:00Z")
Hey ES crew, I'm nearing the end of my project to migrate our on-prem 5.3 ES cluster to a 6.8 AWS ES hosted cluster. One of the final things I need to accomplish is migrating the watchers stored on our on-prem instance … --- ## [How to process the nest object (from ES response) in search-ui](https://discuss.elastic.co/t/how-to-process-the-nest-object-from-es-response-in-search-ui/208844)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 4\ **Last updated:** [November 22, 2019, 11:42am UTC](https://discuss.elastic.co/t/how-to-process-the-nest-object-from-es-response-in-search-ui/208844 "2019-11-22T11:42:58Z")
I now this is for App Search, but not sure where to post this search-ui for elasticsearch question. In a hard way that I learned that search-ui is expecting the 'id' field in the elasticsearch index hence the response. … --- ## [Filebeat on kubernetes as non root?](https://discuss.elastic.co/t/filebeat-on-kubernetes-as-non-root/195949)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 6:49pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-as-non-root/195949 "2019-08-22T18:49:14Z")
Hi, What possibilities do I have to run filebeat in kubernetes as non-root user and access the docker container logs? Our datacenter team don't really like privileged root processes :wink: So I want to avoid if possibl… --- ## [How document frequency is getting updated in Elasticsearch?](https://discuss.elastic.co/t/how-document-frequency-is-getting-updated-in-elasticsearch/65667)
**Author:** [@banu](https://discuss.elastic.co/u/banu)\ **Replies:** 7\ **Last updated:** [November 11, 2016, 11:16pm UTC](https://discuss.elastic.co/t/how-document-frequency-is-getting-updated-in-elasticsearch/65667 "2016-11-11T23:16:37Z")
How doc frequency getting updated ? Whenever we update new documents or entries? Or any thing which ES decides? we have analyzed and could not find a proper solution for this ? --- ## [Aggregations on nested objects](https://discuss.elastic.co/t/aggregations-on-nested-objects/36986)
**Author:** [@Mathias\_Schreiber](https://discuss.elastic.co/u/Mathias_Schreiber)\ **Replies:** 7\ **Last updated:** [December 11, 2015, 3:16pm UTC](https://discuss.elastic.co/t/aggregations-on-nested-objects/36986 "2015-12-11T15:16:58Z")
Hi community, I am in the very early stage of my application so I'm spending most of my time on mapping and testing out things. Scenario: Think about something like any App store out there. So I thought of having a doc… --- ## [Deploying New Elastic Cluster and Migrate Live Logs](https://discuss.elastic.co/t/deploying-new-elastic-cluster-and-migrate-live-logs/278092)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 8\ **Last updated:** [July 8, 2021, 8:22am UTC](https://discuss.elastic.co/t/deploying-new-elastic-cluster-and-migrate-live-logs/278092 "2021-07-08T08:22:48Z")
Hi folks, I have following use case: I want to install a new 7.13.2 Elasticsearch cluster on some brand new VMs and migrate the indices and global cluster state from 7.6.2 cluster into it. The challenge is: there are … --- ## [ECK Operator Deployment and maintenance using helm](https://discuss.elastic.co/t/eck-operator-deployment-and-maintenance-using-helm/231608)
**Author:** [@singharunk](https://discuss.elastic.co/u/singharunk)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 3:38pm UTC](https://discuss.elastic.co/t/eck-operator-deployment-and-maintenance-using-helm/231608 "2021-01-15T15:38:05Z")
Hi Team, I am planning to deploy ECK operator and manage Elasticsearch/Kibana deployment using Helm. Is it a good idea ? Any OOTB repository for ECK helm is available ? Regards Ak --- ## [Kibana Cases Analytics](https://discuss.elastic.co/t/kibana-cases-analytics/265116)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 6:55am UTC](https://discuss.elastic.co/t/kibana-cases-analytics/265116 "2021-02-23T06:55:39Z")
Hello, I need to do some basic analytics on the Kibana cases we created until now. Where are these cases indexed? For example I added some tags and I want to visualise the amount of cases out of all cases that have cert… [Previous page](https://discuss.elastic.co/top.md?page=916&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=918&per_page=50&period=all)