# Top **URL:** https://discuss.elastic.co/top.md?page=926&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 927 --- ## [Upgrade elastic in kubernetes](https://discuss.elastic.co/t/upgrade-elastic-in-kubernetes/193232)
**Author:** [@soandosnc](https://discuss.elastic.co/u/soandosnc)\ **Replies:** 1\ **Last updated:** [August 1, 2019, 2:36pm UTC](https://discuss.elastic.co/t/upgrade-elastic-in-kubernetes/193232 "2019-08-01T14:36:00Z")
I have elastic 7.2 installed in kubernetes (via the elastic helm chart, secure example). How can I upgrade this to 7.3 (preferably in a rolling way)? --- ## [How to identify/display set of sequence data In the log file](https://discuss.elastic.co/t/how-to-identify-display-set-of-sequence-data-in-the-log-file/120043)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 7\ **Last updated:** [February 21, 2018, 6:08pm UTC](https://discuss.elastic.co/t/how-to-identify-display-set-of-sequence-data-in-the-log-file/120043 "2018-02-21T18:08:41Z")
I got one different use case from my client which I need to identify a set of log data which got recorded in sequence at any line in the log file and they want to view the identified sequence in Kibana and its related co… --- ## [Marvel Installation to Elastic Search 5.1.1](https://discuss.elastic.co/t/marvel-installation-to-elastic-search-5-1-1/68689)
**Author:** [@mrutyunjaya](https://discuss.elastic.co/u/mrutyunjaya)\ **Replies:** 1\ **Last updated:** [December 12, 2016, 3:25pm UTC](https://discuss.elastic.co/t/marvel-installation-to-elastic-search-5-1-1/68689 "2016-12-12T15:25:32Z")
What is syntax to install marvel to ES. I am using D:\\ES\_Installation\\bin\>elasticsearch-plugin -i elasticsearch/marvel/latest A tool for managing installed elasticsearch plugins Commands list - Lists installed ela… --- ## [Editing role in xpack returns strict dynamic mapping exception](https://discuss.elastic.co/t/editing-role-in-xpack-returns-strict-dynamic-mapping-exception/60470)
**Author:** [@nick.e](https://discuss.elastic.co/u/nick.e)\ **Replies:** 7\ **Last updated:** [October 25, 2016, 1:51pm UTC](https://discuss.elastic.co/t/editing-role-in-xpack-returns-strict-dynamic-mapping-exception/60470 "2016-10-25T13:51:03Z")
Hi, today I wanted to edit a role in Kibana. When saving the role, kibana throws the following error: \[strict\_dynamic\_mapping\_exception\] mapping set to strict, dynamic introduction of \[metadata\] within \[role\] is not … --- ## [Share search with search box but no Menu](https://discuss.elastic.co/t/share-search-with-search-box-but-no-menu/46428)
**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\ **Replies:** 4\ **Last updated:** [April 18, 2016, 4:42pm UTC](https://discuss.elastic.co/t/share-search-with-search-box-but-no-menu/46428 "2016-04-18T16:42:31Z")
Hi, is it possible to share (or embed) a search with only the search bar and none of the menu options (discover, visualize, etc...)? It seems that if you embed the search in a dashboard you also lose the search box. T… --- ## [Importing Kibana JSON files using API Call](https://discuss.elastic.co/t/importing-kibana-json-files-using-api-call/184984)
**Author:** [@shriharsha](https://discuss.elastic.co/u/shriharsha)\ **Replies:** 2\ **Last updated:** [June 10, 2019, 1:27pm UTC](https://discuss.elastic.co/t/importing-kibana-json-files-using-api-call/184984 "2019-06-10T13:27:48Z")
I have JSON file which has an Index and its corresponding Searches, Visualizations and Dashbords. Now I want to import that JSON file in to the kibana using the Import API call. I used the following api call to import a… --- ## [Docker Container Logstash not getting any logs](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062)
**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\ **Replies:** 2\ **Last updated:** [July 10, 2017, 5:21am UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062 "2017-07-10T05:21:06Z")
Hallo, I have a weird problem regarding docker with logstash. I have a logstash configuration which is working. Logstash is also booting up properly. Sadly it doesnt output anything to stdout or to my GELF output. dock… --- ## [Filebeat Fortinet Default Ingest Pipeline fails](https://discuss.elastic.co/t/filebeat-fortinet-default-ingest-pipeline-fails/238893)
**Author:** [@Mercwri](https://discuss.elastic.co/u/Mercwri)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 2:28pm UTC](https://discuss.elastic.co/t/filebeat-fortinet-default-ingest-pipeline-fails/238893 "2020-07-14T14:28:45Z")
I have multiple Fortinet devices pushing logs to a collector running Filebeat 7.8.0 with the Fortinet module enabled. All of the logs are being ingested but the pipeline fails at decoding/normalizing the timestamps. I g… --- ## [Incorrect values order on the X-axis](https://discuss.elastic.co/t/incorrect-values-order-on-the-x-axis/215003)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 6:21pm UTC](https://discuss.elastic.co/t/incorrect-values-order-on-the-x-axis/215003 "2020-01-16T18:21:26Z")
Hello, The X-axis values are ordered Alphabetically (Ascending), but the visualization is incorrect (see image attached): Here is the visState: { "title": "Characters damages per a day after registration", "typ… --- ## [Fields not highlighted in events and Kibana can not identify the field type](https://discuss.elastic.co/t/fields-not-highlighted-in-events-and-kibana-can-not-identify-the-field-type/96679)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 5\ **Last updated:** [August 14, 2017, 5:18pm UTC](https://discuss.elastic.co/t/fields-not-highlighted-in-events-and-kibana-can-not-identify-the-field-type/96679 "2017-08-14T17:18:28Z")
Some of the fields derived from the KV filter are not being highlighted in the events although i can see the fields in the left pane on Kibana console. But those fields are aggregatable and are not visible under fields i… --- ## [How to calculate difference of two dates and display the result in seconds(integer type) through scripted fields in kibana](https://discuss.elastic.co/t/how-to-calculate-difference-of-two-dates-and-display-the-result-in-seconds-integer-type-through-scripted-fields-in-kibana/168179)
**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\ **Replies:** 3\ **Last updated:** [February 19, 2019, 4:16pm UTC](https://discuss.elastic.co/t/how-to-calculate-difference-of-two-dates-and-display-the-result-in-seconds-integer-type-through-scripted-fields-in-kibana/168179 "2019-02-19T16:16:35Z")
I have two dates in a index t1 : February 12th 2019, 11:54:48.000 t2 : February 12th 2019, 11:56:10.000 the result t2-t1=execution time(in my case).Now how to calculate t2-t1 and display result in seconds .Here execu… --- ## [Get the transaction.id](https://discuss.elastic.co/t/get-the-transaction-id/151629)
**Author:** [@gp4004](https://discuss.elastic.co/u/gp4004)\ **Replies:** 3\ **Last updated:** [October 10, 2018, 7:23am UTC](https://discuss.elastic.co/t/get-the-transaction-id/151629 "2018-10-10T07:23:54Z")
Hi there, Is there any way to get the transaction.id of the current transaction agent side ? (I specify a name for the transactions using apm.setTransactionName('myName)) The idea is to add the transaction.id to the lo… --- ## [Exclude\_files regex](https://discuss.elastic.co/t/exclude-files-regex/63692)
**Author:** [@Winfield\_Henry](https://discuss.elastic.co/u/Winfield_Henry)\ **Replies:** 3\ **Last updated:** [October 24, 2016, 12:07pm UTC](https://discuss.elastic.co/t/exclude-files-regex/63692 "2016-10-24T12:07:44Z")
Hello, We have some duplicated log entries and would like to exclude a particular log file. There is an 'exclude\_files:' directive in the .yml config file, but we are having difficulty making that work. Question: Is … --- ## [Creating and testing a logstash pipeline in Kibana?](https://discuss.elastic.co/t/creating-and-testing-a-logstash-pipeline-in-kibana/167546)
**Author:** [@DigitalMachinist](https://discuss.elastic.co/u/DigitalMachinist)\ **Replies:** 1\ **Last updated:** [February 8, 2019, 9:40pm UTC](https://discuss.elastic.co/t/creating-and-testing-a-logstash-pipeline-in-kibana/167546 "2019-02-08T21:40:03Z")
I have an Elastic Cloud instance running Elasticsearch/Kibana 6.5 and I'm trying to use the new Management \> Logstash \> Pipelines panel to define a pipeline that runs on a schedule to update a field on each document in o… --- ## [How to debug elasticsearch with intellij idea](https://discuss.elastic.co/t/how-to-debug-elasticsearch-with-intellij-idea/72277)
**Author:** [@songfj](https://discuss.elastic.co/u/songfj)\ **Replies:** 1\ **Last updated:** [January 20, 2017, 1:28pm UTC](https://discuss.elastic.co/t/how-to-debug-elasticsearch-with-intellij-idea/72277 "2017-01-20T13:28:16Z")
Hello every one, I want debug the elasticsearch source code.But I meet the below error, please give me some help, thanks. The idea vm config: -Des.foreground=yes -Des.path.home=/Users/myname/projects/elasticsearch/core -… --- ## [TSVB Markdown to show sum of variables](https://discuss.elastic.co/t/tsvb-markdown-to-show-sum-of-variables/305878)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 2\ **Last updated:** [May 30, 2022, 7:50am UTC](https://discuss.elastic.co/t/tsvb-markdown-to-show-sum-of-variables/305878 "2022-05-30T07:50:24Z")
Hi guys, I have some problem with using markdown on TSVB: I would like to show a simple KPI (i.e: 1200) but this number should be a sum of 2 variables. In my documents I can select two filters: variable\_1 (filter fie… --- ## [Reporting stopped working due to version conflict](https://discuss.elastic.co/t/reporting-stopped-working-due-to-version-conflict/237109)
**Author:** [@gulycka](https://discuss.elastic.co/u/gulycka)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 6:54am UTC](https://discuss.elastic.co/t/reporting-stopped-working-due-to-version-conflict/237109 "2020-06-16T06:54:53Z")
Hi, recently I encountered issue with reporting plugin from X-Pack. We are running ELK stack with only Basic license for X-Pack, in version 7.5.2. Previously, reporting was working without any issues. Few days ago I … --- ## [Inspect Button in Kibana 5.0.2](https://discuss.elastic.co/t/inspect-button-in-kibana-5-0-2/68884)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 8:35pm UTC](https://discuss.elastic.co/t/inspect-button-in-kibana-5-0-2/68884 "2016-12-13T20:35:38Z")
Hi I'm trying to find Inspect button in kibana 5.0.2 as we can see kibana 3.1.2 has flexibility to select to see api request url is it possible in new kibana 5.0.2 ? curl -XGET '//localhost:9200/\_\_es/logstash-2016.12.… --- ## [Filebeat Cisco Module Nexus dissect\_parsing\_error](https://discuss.elastic.co/t/filebeat-cisco-module-nexus-dissect-parsing-error/265662)
**Author:** [@vqjanderson](https://discuss.elastic.co/u/vqjanderson)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 2:15pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-nexus-dissect-parsing-error/265662 "2021-04-08T14:15:26Z")
Not sure why these logs are not being parsed correctly. Are the optimized access logging logs not supported by the module? --- ## [Instantiate TransportClient in ES 7.8 help](https://discuss.elastic.co/t/instantiate-transportclient-in-es-7-8-help/248620)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 11:59am UTC](https://discuss.elastic.co/t/instantiate-transportclient-in-es-7-8-help/248620 "2020-09-15T11:59:01Z")
I would like to replace the way I instantiate TransportClient in 7.8 since our application is heavily dependent on TransportClient at the moment. TransportClient will be migrated to RestHighLevelClient. Settings setting… --- ## [HTTPS Traffic visualization on url](https://discuss.elastic.co/t/https-traffic-visualization-on-url/224783)
**Author:** [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Replies:** 5\ **Last updated:** [April 6, 2020, 5:33pm UTC](https://discuss.elastic.co/t/https-traffic-visualization-on-url/224783 "2020-04-06T17:33:24Z")
Hello, hope everyone is in good health. We want to monitor the amount of data (gb's) which are being send to a https endpoint from our logstash servers. To do so we installed packetbeat with the attached configuration. … --- ## [java.io.EOFException when installing plugins](https://discuss.elastic.co/t/java-io-eofexception-when-installing-plugins/111516)
**Author:** [@hun](https://discuss.elastic.co/u/hun)\ **Replies:** 5\ **Last updated:** [December 13, 2017, 3:16pm UTC](https://discuss.elastic.co/t/java-io-eofexception-when-installing-plugins/111516 "2017-12-13T15:16:37Z")
Hi community, I am trying to install some plugins on es version 5.6.5, but not able to do so due to the following thrown error: java.io.EOFException at java.io.DataInputStream.readUnsignedShort(DataInputStream.ja… --- ## [Winlogbeat not sending larger event message](https://discuss.elastic.co/t/winlogbeat-not-sending-larger-event-message/48053)
**Author:** [@jyothi.kadiri](https://discuss.elastic.co/u/jyothi.kadiri)\ **Replies:** 5\ **Last updated:** [April 21, 2016, 3:04pm UTC](https://discuss.elastic.co/t/winlogbeat-not-sending-larger-event-message/48053 "2016-04-21T15:04:03Z")
Receiving the below error message The data area passed to a system call is too small. is received in kibana in message\_error field. Any suggestions are apprecited. Is there any setting at winlogbeat to increase the m… --- ## [Logstash config query](https://discuss.elastic.co/t/logstash-config-query/36452)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 5\ **Last updated:** [December 5, 2015, 7:25pm UTC](https://discuss.elastic.co/t/logstash-config-query/36452 "2015-12-05T19:25:33Z")
Till now I had maintain single configuration file in logstash server that is called as logstash-server.conf. Now I would like to separate the configuration based on input criteria. my logstash service is pointed to defa… --- ## [Failing to capture oracle alert logs (kubernetes)](https://discuss.elastic.co/t/failing-to-capture-oracle-alert-logs-kubernetes/181963)
**Author:** [@Maurya\_M](https://discuss.elastic.co/u/Maurya_M)\ **Replies:** 7\ **Last updated:** [May 23, 2019, 12:17pm UTC](https://discuss.elastic.co/t/failing-to-capture-oracle-alert-logs-kubernetes/181963 "2019-05-23T12:17:11Z")
Hi, Having a setup wherein my oracle is deployed on kubernetes as statefulset, i need to monitor some logs other than the container logs, so from documentation and examples online was able create a filebeat config such … --- ## [Use \_bulk to import json db](https://discuss.elastic.co/t/use-bulk-to-import-json-db/121240)
**Author:** [@pereyrdi](https://discuss.elastic.co/u/pereyrdi)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 4:02pm UTC](https://discuss.elastic.co/t/use-bulk-to-import-json-db/121240 "2018-02-23T16:02:18Z")
Hello! Im migratin ES from version 2 to version 6.2, and I did backups of all index with elasticdump, it create a json with this format. {"\_index":"conn-scripts-dns","\_type":"devices","\_id":"201711281431118946304","\_sc… --- ## [Convert Incoming UTC timestamp to local time](https://discuss.elastic.co/t/convert-incoming-utc-timestamp-to-local-time/110125)
**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\ **Replies:** 1\ **Last updated:** [December 4, 2017, 12:41pm UTC](https://discuss.elastic.co/t/convert-incoming-utc-timestamp-to-local-time/110125 "2017-12-04T12:41:28Z")
Newbie here, Is there a way to convert the incoming timestamp from my log file into my local timezone, e.g. my file contains the timestamp in UTC "2017-12-01T07:30:32.425064Z", is there a way to convert this into "2017… --- ## [Do people use the Log viewer in Kibana?](https://discuss.elastic.co/t/do-people-use-the-log-viewer-in-kibana/294152)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 3\ **Last updated:** [January 12, 2022, 3:17pm UTC](https://discuss.elastic.co/t/do-people-use-the-log-viewer-in-kibana/294152 "2022-01-12T15:17:39Z")
We're currently setting up a POC where we - among other things - collect a whole bunch of logs from many different machines. The idea was to centralize logs so we don't have to go rummage around multiple machines to find… --- ## [Limit of total fields \[1000\] in index \[p\_bs\_api\_abcd\_2020\_23\] has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-p-bs-api-abcd-2020-23-has-been-exceeded/235476)
**Author:** [@Saravana\_Maadavan](https://discuss.elastic.co/u/Saravana_Maadavan)\ **Replies:** 8\ **Last updated:** [June 5, 2020, 8:25am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-p-bs-api-abcd-2020-23-has-been-exceeded/235476 "2020-06-05T08:25:05Z")
I have followed the steps discussed in link Increase total fields limit via creation of index in logstash but not able to resolve it. Kindly find below few snippets of the configuration files. output { elasticsearch { … --- ## [Why search.max\_buckets soft limit is 10000 ? What are the cons of increasing this size limit?](https://discuss.elastic.co/t/why-search-max-buckets-soft-limit-is-10000-what-are-the-cons-of-increasing-this-size-limit/207190)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 9:56pm UTC](https://discuss.elastic.co/t/why-search-max-buckets-soft-limit-is-10000-what-are-the-cons-of-increasing-this-size-limit/207190 "2019-11-14T21:56:10Z")
Also, why top\_hits window inside aggregation buckets is 100. Does that mean, increasing the window size to 10 times will have a significant toll on performance ? --- ## [Unable to get snapshot information from repository with Curator](https://discuss.elastic.co/t/unable-to-get-snapshot-information-from-repository-with-curator/160365)
**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 4:13pm UTC](https://discuss.elastic.co/t/unable-to-get-snapshot-information-from-repository-with-curator/160365 "2018-12-11T16:13:10Z")
Hi there! I configured both s3 repository in AWS, made a backup there, and it worked. But now, I want to test the restore action with Curator. I created new instance, installed ES, S3 plugin, curator, configured it to… --- ## [Kibana Region map does not show colors](https://discuss.elastic.co/t/kibana-region-map-does-not-show-colors/128903)
**Author:** [@haseebsabir](https://discuss.elastic.co/u/haseebsabir)\ **Replies:** 3\ **Last updated:** [April 23, 2018, 6:53pm UTC](https://discuss.elastic.co/t/kibana-region-map-does-not-show-colors/128903 "2018-04-23T18:53:04Z")
I am running Kibana version 6.2.3. I am trying to create a visualization using regional maps. It does show count at the bottom but it just does not show any colors on the maps. I get below warning when i try to run data… --- ## [Bool query with filter giving error](https://discuss.elastic.co/t/bool-query-with-filter-giving-error/16377)
**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\ **Replies:** 3\ **Last updated:** [March 17, 2014, 12:31pm UTC](https://discuss.elastic.co/t/bool-query-with-filter-giving-error/16377 "2014-03-17T12:31:04Z")
Hi, I'm trying to run the below bool query with filter range to fetch all the node data with CLOUD\_TYPE="AWS-EC2"" and NODE\_STATUS="ACTIVE". But I'm getting SearchPhaseExecutionException from elasticsearch. Please … --- ## [Running out of disk space with Elasticsearch - a solution](https://discuss.elastic.co/t/running-out-of-disk-space-with-elasticsearch-a-solution/48016)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 0\ **Last updated:** [April 21, 2016, 9:53am UTC](https://discuss.elastic.co/t/running-out-of-disk-space-with-elasticsearch-a-solution/48016 "2016-04-21T09:53:17Z")
We recently did a proof-of-concept project for a customer which ingested log events from various sources into a Kafka – Logstash – Elasticsearch – Kibana stack. For various reasons resources were tight. One problem which… --- ## [Elasticsearch 7 (Nest): Failed to parse mapping \[\_doc\]: Root mapping definition has unsupported parameters:](https://discuss.elastic.co/t/elasticsearch-7-nest-failed-to-parse-mapping-doc-root-mapping-definition-has-unsupported-parameters/183284)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 2\ **Last updated:** [May 30, 2019, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-nest-failed-to-parse-mapping-doc-root-mapping-definition-has-unsupported-parameters/183284 "2019-05-30T09:23:54Z")
I am getting the above error in ES 7. I think this is because of: removal of mapping types. My code used to work in ES 6. Since I am using NEST to generate my index, I am not sure how should I fix the issue? This is m… --- ## [Kibana development snapshot doesn't build](https://discuss.elastic.co/t/kibana-development-snapshot-doesnt-build/46324)
**Author:** [@johncst](https://discuss.elastic.co/u/johncst)\ **Replies:** 2\ **Last updated:** [April 5, 2016, 11:00pm UTC](https://discuss.elastic.co/t/kibana-development-snapshot-doesnt-build/46324 "2016-04-05T23:00:17Z")
I'm trying to build Kibana, and following the instructions in contributing.md. Under Linux, when trying to run the command npm run elasticsearch, I get: jc3@jc3-vgn:~/kibana$ npm run elasticsearch kibana@5.0.0-snapsho… --- ## [Excluding fields from results](https://discuss.elastic.co/t/excluding-fields-from-results/5638)
**Author:** [@Alexander\_Reelsen](https://discuss.elastic.co/u/Alexander_Reelsen)\ **Replies:** 2\ **Last updated:** [October 31, 2011, 4:50pm UTC](https://discuss.elastic.co/t/excluding-fields-from-results/5638 "2011-10-31T16:50:31Z")
Hi there, I just checked the docs, and it is possible to include only some fields in the response instead of the whole \_source variable. See http://www.elasticsearch.org/guide/reference/api/search/fields.html I'd… --- ## [Hide field of document in Kibana](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 10:56am UTC](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599 "2022-03-14T10:56:37Z")
Hi, We have made some dashboards in Kibana that also include the table with all the data of a specific index pattern. There is a new field ("hash") added in documents of some index patterns but we need to "hide" it in … --- ## [Custom logs ingest: how?](https://discuss.elastic.co/t/custom-logs-ingest-how/321928)
**Author:** [@Johannnnnn](https://discuss.elastic.co/u/Johannnnnn)\ **Replies:** 4\ **Last updated:** [January 3, 2023, 3:40pm UTC](https://discuss.elastic.co/t/custom-logs-ingest-how/321928 "2023-01-03T15:40:57Z")
I have a very simple logfile in json format that I want to send to elasticsearch The Filebeat quick setup page is not clear on how to make this work. This is an excerpt of the file to input. This is all the complexity … --- ## [Shards failed in Network screen](https://discuss.elastic.co/t/shards-failed-in-network-screen/252774)
**Author:** [@gnordli](https://discuss.elastic.co/u/gnordli)\ **Replies:** 6\ **Last updated:** [October 22, 2020, 6:54pm UTC](https://discuss.elastic.co/t/shards-failed-in-network-screen/252774 "2020-10-22T18:54:57Z")
I am using the Elastic Endpoint agents with 7.9.2. Elasticsearch is running in a single node cluster I am getting an error when in the network screen saying 5 of 7 shards have failed. curl -u elastic -X GET "127.0.0.1… --- ## [Where can I find the Graph API Document?](https://discuss.elastic.co/t/where-can-i-find-the-graph-api-document/45546)
**Author:** [@syang](https://discuss.elastic.co/u/syang)\ **Replies:** 6\ **Last updated:** [April 12, 2016, 1:07pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-graph-api-document/45546 "2016-04-12T13:07:31Z")
Elastic announced graph api recently https://www.elastic.co/elasticon/conf/2016/sf/graph-capabilities-in-the-elastic-stack, but I don't find any documentation for the graph API at the official documentation section https… --- ## [Visualize a value calculated from the per-bucket sum of one field divided by the per-bucket sum of another?](https://discuss.elastic.co/t/visualize-a-value-calculated-from-the-per-bucket-sum-of-one-field-divided-by-the-per-bucket-sum-of-another/254359)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 4:17am UTC](https://discuss.elastic.co/t/visualize-a-value-calculated-from-the-per-bucket-sum-of-one-field-divided-by-the-per-bucket-sum-of-another/254359 "2020-11-06T04:17:49Z")
I have data in JSON Lines format that contains statistics about the tasks performed by a system over an interval of time. (The specific definition of "task" here is not important.) Each line of JSON Lines contains, amon… --- ## [Horizontal scaling of Elasticsearch cluster](https://discuss.elastic.co/t/horizontal-scaling-of-elasticsearch-cluster/352147)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 5\ **Last updated:** [February 1, 2024, 12:33pm UTC](https://discuss.elastic.co/t/horizontal-scaling-of-elasticsearch-cluster/352147 "2024-02-01T12:33:19Z")
if I have index size of 2tb and node size is 1tb , In that case how index will split on another nodes and if i add new data nodes so how this data can be distribute, it will do automatically? Or I can do it manually. I w… --- ## [Unable to start Elasticsearch as a service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 5\ **Last updated:** [May 12, 2021, 2:21pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722 "2021-05-12T14:21:26Z")
Elasticsearch version: 7.12 Elasticsearch is installed as an RPM on RHEL 7.9 server. We running ELK on a single VM. For the path.data we have an NFS mounted. When I try to start elasticsearch with path.data set to /var… --- ## [Data node as Master Node](https://discuss.elastic.co/t/data-node-as-master-node/166627)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 5\ **Last updated:** [January 31, 2019, 8:02pm UTC](https://discuss.elastic.co/t/data-node-as-master-node/166627 "2019-01-31T20:02:46Z")
Is it good to have a cluster with the following 2 Ingest Nodes (doesnt do anything except routing the bulk request) 5 Data nodes (Also as master nodes) 1 coord node I see in documentation - there should be dedicated … --- ## [If the condition is two fields equal how to write?](https://discuss.elastic.co/t/if-the-condition-is-two-fields-equal-how-to-write/289531)
**Author:** [@KhalidDu](https://discuss.elastic.co/u/KhalidDu)\ **Replies:** 2\ **Last updated:** [November 19, 2021, 3:10am UTC](https://discuss.elastic.co/t/if-the-condition-is-two-fields-equal-how-to-write/289531 "2021-11-19T03:10:48Z")
Excuse me, I am a novice, so I would like to ask about the query ES, if the condition is two fields equal how to write? --- ## [How to set the document id dynamically with the column value from the table](https://discuss.elastic.co/t/how-to-set-the-document-id-dynamically-with-the-column-value-from-the-table/185064)
**Author:** [@ashokchinna](https://discuss.elastic.co/u/ashokchinna)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 4:18pm UTC](https://discuss.elastic.co/t/how-to-set-the-document-id-dynamically-with-the-column-value-from-the-table/185064 "2019-06-11T16:18:57Z")
I want to set the id value for each document in the elastic search. I am trying to set the account\_no as an id. However, when I tried to do, the id is set as the string value "%{account\_no}". The statement document\_id … --- ## [Ruby Filter output to Field](https://discuss.elastic.co/t/ruby-filter-output-to-field/1876)
**Author:** [@jruybal](https://discuss.elastic.co/u/jruybal)\ **Replies:** 2\ **Last updated:** [June 8, 2015, 5:58pm UTC](https://discuss.elastic.co/t/ruby-filter-output-to-field/1876 "2015-06-08T17:58:41Z")
I'm testing a ruby filter to build a small list of hosts that are producing less than a certain number of events per minute. Is there a standard method to get this output back into the event json? Currently I'm tryin… --- ## [Document produced by APM Server v8.7.1, which is newer than the installed APM integration (v8.2.0)](https://discuss.elastic.co/t/document-produced-by-apm-server-v8-7-1-which-is-newer-than-the-installed-apm-integration-v8-2-0/334568)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 7\ **Last updated:** [June 14, 2023, 9:36pm UTC](https://discuss.elastic.co/t/document-produced-by-apm-server-v8-7-1-which-is-newer-than-the-installed-apm-integration-v8-2-0/334568 "2023-06-14T21:36:41Z")
I have migrated data from an 8.2.0 cluster to a 8.7.1 cluster. Initially i had some problems with APM saying the ingestion pipelines did not exist. {"log.level":"error","@timestamp":"2023-05-26T13:23:03.102Z","log.origi… --- ## [Number of docs count does not match number of json file records](https://discuss.elastic.co/t/number-of-docs-count-does-not-match-number-of-json-file-records/275739)
**Author:** [@rafaell2](https://discuss.elastic.co/u/rafaell2)\ **Replies:** 7\ **Last updated:** [June 13, 2021, 9:58pm UTC](https://discuss.elastic.co/t/number-of-docs-count-does-not-match-number-of-json-file-records/275739 "2021-06-13T21:58:26Z")
Hi. I am trying to load a json file with 8 records from filebeats to logstash (latest verion 7.13). It looks like i have no errors but when i check number of records at Kibana Index Management i see docs counts = 1 (also… [Previous page](https://discuss.elastic.co/top.md?page=925&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=927&per_page=50&period=all)