# Top **URL:** https://discuss.elastic.co/top.md?page=949&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 950 --- ## [Largest and average doc size in elasticsearch](https://discuss.elastic.co/t/largest-and-average-doc-size-in-elasticsearch/28388)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 1\ **Last updated:** [September 1, 2015, 6:20am UTC](https://discuss.elastic.co/t/largest-and-average-doc-size-in-elasticsearch/28388 "2015-09-01T06:20:08Z")
I am considering to move to a different broker for logstash. One of the metrics needed to size the cluster is largest and average doc size. Does Elasticsearch keep track of this? Am i able to query this out of elasticsea… --- ## [IllegalArgumentException: empty text / unassigned shards](https://discuss.elastic.co/t/illegalargumentexception-empty-text-unassigned-shards/12015)
**Author:** [@nordsee\_2](https://discuss.elastic.co/u/nordsee_2)\ **Replies:** 1\ **Last updated:** [May 18, 2013, 9:46am UTC](https://discuss.elastic.co/t/illegalargumentexception-empty-text-unassigned-shards/12015 "2013-05-18T09:46:05Z")
Hi, I'm running an elasticsearch cluster with two nodes until suddenly some shards don't get assigned any more: curl -X GET 'localhost:9200/\_cluster/health?pretty=1' { "cluster\_name" : "test", "status" : "… --- ## [FILEBEAT - GOOGLE CLOUD MODULE - PUB/SUB](https://discuss.elastic.co/t/filebeat-google-cloud-module-pub-sub/244804)
**Author:** [@juaromu](https://discuss.elastic.co/u/juaromu)\ **Replies:** 6\ **Last updated:** [August 14, 2020, 9:49pm UTC](https://discuss.elastic.co/t/filebeat-google-cloud-module-pub-sub/244804 "2020-08-14T21:49:49Z")
Hi there: Running Filebeat, 7.8.1 and using the Google Cloud Module, PUB/SUB, to pull out VPC Firewall Logs. Getting an error (I believe JSON related) when Filebeat starts: ERROR \[google.pubsub\] googlepu… --- ## [Is it possible to have one dashboard from two different Kibana servers?](https://discuss.elastic.co/t/is-it-possible-to-have-one-dashboard-from-two-different-kibana-servers/214858)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 3:39pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-one-dashboard-from-two-different-kibana-servers/214858 "2020-01-14T15:39:04Z")
I have two different kibana servers and I wanted to know if it would be possible to create visualizations from both kibana servers into one dashboard for either server. Thank you in advance --- ## [Unit testing elasticsearch in Java](https://discuss.elastic.co/t/unit-testing-elasticsearch-in-java/166519)
**Author:** [@Chandan\_Ray](https://discuss.elastic.co/u/Chandan_Ray)\ **Replies:** 6\ **Last updated:** [January 31, 2019, 1:49pm UTC](https://discuss.elastic.co/t/unit-testing-elasticsearch-in-java/166519 "2019-01-31T13:49:36Z")
I am using Elasticsearch 5.6.7. I am new to elasticsearch testing and was curious to know if I could unit test my dao classes without running an elasticsearch in my system. Was unable to find any detailed information o… --- ## [Geo\_bounding\_box Filter for a n00b](https://discuss.elastic.co/t/geo-bounding-box-filter-for-a-n00b/67254)
**Author:** [@jardineworks](https://discuss.elastic.co/u/jardineworks)\ **Replies:** 6\ **Last updated:** [November 28, 2016, 1:57pm UTC](https://discuss.elastic.co/t/geo-bounding-box-filter-for-a-n00b/67254 "2016-11-28T13:57:01Z")
Hey Guys, First off, my disclaimer. I'm a total n00b to ES. I'm trying to see if it can solve my current problem, which I am almost positive it can -- but time is of the essence here and after several hours of monkeyin… --- ## [Unknown error on graphs when generating a report](https://discuss.elastic.co/t/unknown-error-on-graphs-when-generating-a-report/60116)
**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\ **Replies:** 6\ **Last updated:** [September 12, 2016, 8:58pm UTC](https://discuss.elastic.co/t/unknown-error-on-graphs-when-generating-a-report/60116 "2016-09-12T20:58:17Z")
I get the following when trying to generate reportes. We just upgraded to Kibana 4.6.1 and ELK 2.4.0 I s there some permissions that need to be added or something? --- ## [Sending data using JDBC input](https://discuss.elastic.co/t/sending-data-using-jdbc-input/59341)
**Author:** [@ramongo](https://discuss.elastic.co/u/ramongo)\ **Replies:** 6\ **Last updated:** [September 6, 2016, 2:19pm UTC](https://discuss.elastic.co/t/sending-data-using-jdbc-input/59341 "2016-09-06T14:19:44Z")
Hi Specialists! I'm trying to send data from an JDBC input (SQLServer 2008) to a SYSLOG Server, I don't want the column names...just the result set in line mode. When I specify this , the output is shown in the followin… --- ## [\_grokparsefailure still happening for a small number of IIS log entries - how to track them down?](https://discuss.elastic.co/t/-grokparsefailure-still-happening-for-a-small-number-of-iis-log-entries-how-to-track-them-down/33476)
**Author:** [@mc1903](https://discuss.elastic.co/u/mc1903)\ **Replies:** 6\ **Last updated:** [November 5, 2015, 5:35pm UTC](https://discuss.elastic.co/t/-grokparsefailure-still-happening-for-a-small-number-of-iis-log-entries-how-to-track-them-down/33476 "2015-11-05T17:35:45Z")
So, moving on from my previous 2 posts. I am making good progress, slowly admittedly, but I am learning a heck of a lot as I go! I am still having a very small number (approx \<0.1%) of my IIS log entries failing with \_… --- ## [Elastic\_agent.process not found](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804)
**Author:** [@Xigrealf](https://discuss.elastic.co/u/Xigrealf)\ **Replies:** 5\ **Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804 "2022-11-14T18:21:22Z")
Hello, I am currently trying to set up Elastic Stack. After i've installed elasticsearch, kibana and enrolled my elastic-agent to the fleet server i can see that my agent looks healthy in kibana but when i click view ag… --- ## [How to Parse JSON Input using Filter Plugins?](https://discuss.elastic.co/t/how-to-parse-json-input-using-filter-plugins/169836)
**Author:** [@pavan1991](https://discuss.elastic.co/u/pavan1991)\ **Replies:** 5\ **Last updated:** [February 25, 2019, 5:35pm UTC](https://discuss.elastic.co/t/how-to-parse-json-input-using-filter-plugins/169836 "2019-02-25T17:35:09Z")
Team, I am New to Elastic Stack and need your help to setup the same in my environment. Setup : We are planning to disable Stackdriver logging in our Google Cloud Platform and instead we want to use ELK to display thes… --- ## [Issue with logstash input elasticsearch plugin with ES 5.4](https://discuss.elastic.co/t/issue-with-logstash-input-elasticsearch-plugin-with-es-5-4/85110)
**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\ **Replies:** 5\ **Last updated:** [May 11, 2017, 7:45am UTC](https://discuss.elastic.co/t/issue-with-logstash-input-elasticsearch-plugin-with-es-5-4/85110 "2017-05-11T07:45:34Z")
HI this conf works with ES 5.3 input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "sirene" query =\> '{"query": {"query\_string" : {"query": "(CODGEO:60471 AND provider:sp\_mairie)"}}}' } } output… --- ## [EC2 instance hanging after a few hours](https://discuss.elastic.co/t/ec2-instance-hanging-after-a-few-hours/6167)
**Author:** [@Douglas\_Muth](https://discuss.elastic.co/u/Douglas_Muth)\ **Replies:** 5\ **Last updated:** [December 16, 2011, 6:27pm UTC](https://discuss.elastic.co/t/ec2-instance-hanging-after-a-few-hours/6167 "2011-12-16T18:27:03Z")
Good Morning, I'm a long-time listener, first-time caller. :-) I'm having some problems trying to get Elastic Search working at $WORK. Specifically, that the machine it's running on becomes unresponsive after a… --- ## [Issue with creating new Beat](https://discuss.elastic.co/t/issue-with-creating-new-beat/260339)
**Author:** [@yuv](https://discuss.elastic.co/u/yuv)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 12:30pm UTC](https://discuss.elastic.co/t/issue-with-creating-new-beat/260339 "2021-01-06T12:30:25Z")
Hi, i've followed the following documentation https://www.elastic.co/guide/en/beats/devguide/7.11/new-beat.html for creating new beat. While i'm trying to build it i got the below issues. What i'm i doing wrong ? how … --- ## [Timeout on Kibana](https://discuss.elastic.co/t/timeout-on-kibana/334444)
**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\ **Replies:** 8\ **Last updated:** [June 7, 2023, 12:01pm UTC](https://discuss.elastic.co/t/timeout-on-kibana/334444 "2023-06-07T12:01:00Z")
Hello, Getting this error on Kibana graph is I select the period higher than 5 days (probably too many datapoints): Tried increasing elasticsearch.requestTimeout: 900000 (and restarted kibana service) but this messa… --- ## [Unable to start filebeat getting Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://localhost:5601: Failed to parse JSON response: invalid character '\<' l](https://discuss.elastic.co/t/unable-to-start-filebeat-getting-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch-at-http-localhost-failed-to-parse-json-response-invalid-character-l/300412)
**Author:** [@sureshaws](https://discuss.elastic.co/u/sureshaws)\ **Replies:** 3\ **Last updated:** [March 24, 2022, 3:01pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-getting-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch-at-http-localhost-failed-to-parse-json-response-invalid-character-l/300412 "2022-03-24T15:01:14Z")
Getting the below error Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://localhost:5601: Failed to parse JSON response: invalid character '\<' l … --- ## [Index got corrupted without any crash](https://discuss.elastic.co/t/index-got-corrupted-without-any-crash/240895)
**Author:** [@chelawatankit](https://discuss.elastic.co/u/chelawatankit)\ **Replies:** 8\ **Last updated:** [July 13, 2020, 7:41am UTC](https://discuss.elastic.co/t/index-got-corrupted-without-any-crash/240895 "2020-07-13T07:41:16Z")
Hi, We have one single node elastic cluster which was running fine till last week. From last week we saw frequently one index got corrupted and went in 'RED' state without any system crash and disk space problem. When … --- ## [Unable to see scripted fields in Time series visualization](https://discuss.elastic.co/t/unable-to-see-scripted-fields-in-time-series-visualization/136627)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 8\ **Last updated:** [June 20, 2018, 10:57am UTC](https://discuss.elastic.co/t/unable-to-see-scripted-fields-in-time-series-visualization/136627 "2018-06-20T10:57:17Z")
Hi, I've added three numeric scripted fields in kibana. But I am not able to see them when I try to build time series visualization. I read in the documents that " You can use scripted fields in your visualizations." B… --- ## [Index size increase dramatically](https://discuss.elastic.co/t/index-size-increase-dramatically/62512)
**Author:** [@AdaYang](https://discuss.elastic.co/u/AdaYang)\ **Replies:** 8\ **Last updated:** [October 7, 2016, 10:43pm UTC](https://discuss.elastic.co/t/index-size-increase-dramatically/62512 "2016-10-07T22:43:34Z")
I am running a 3-nodes v2.4.0 elasticsearch cluster mainly indexing pdf files. I was using Base64.getEncoder().encodeToString(bytes) for the pdf content. This method is using a deprecated String method which cause some … --- ## [How hard to upgrade Kibana from 4.5.1 (or 4.5.2) to latest 4.5.x](https://discuss.elastic.co/t/how-hard-to-upgrade-kibana-from-4-5-1-or-4-5-2-to-latest-4-5-x/59617)
**Author:** [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\ **Replies:** 8\ **Last updated:** [September 3, 2016, 11:16pm UTC](https://discuss.elastic.co/t/how-hard-to-upgrade-kibana-from-4-5-1-or-4-5-2-to-latest-4-5-x/59617 "2016-09-03T23:16:16Z")
Hello. I have 1 ELK Cluster that has Kibana 4.5.1 that I would like to upgrade to the latest 4.5.x train so I can use maps. I also have another ELK Cluster that has Kibana 4.5.2 that again would like to upgrade to the … --- ## [RemoteTransportException](https://discuss.elastic.co/t/remotetransportexception/3153)
**Author:** [@David\_Jensen\_2](https://discuss.elastic.co/u/David_Jensen_2)\ **Replies:** 3\ **Last updated:** [July 26, 2010, 9:54pm UTC](https://discuss.elastic.co/t/remotetransportexception/3153 "2010-07-26T21:54:31Z")
Has anybody seen an error like this? I've loaded 10M record into 5 shards and 1 replica. I ran a search today and got this. I'm still indexing records while I performed this search. Here's the response that I rece… --- ## [Various issues with S3 Snapshots](https://discuss.elastic.co/t/various-issues-with-s3-snapshots/94337)
**Author:** [@eirc](https://discuss.elastic.co/u/eirc)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 1:41pm UTC](https://discuss.elastic.co/t/various-issues-with-s3-snapshots/94337 "2017-07-24T13:41:08Z")
Hello, using the repository S3 plugin to take snapshots to S3 and I'm having various issues here. After having this live for some months with an increasing number of snapshots the snapshot list calls to Elasticsearch g… --- ## [Analysis-icu plugin can't be verified - missing plugin-descriptor.properties?](https://discuss.elastic.co/t/analysis-icu-plugin-cant-be-verified-missing-plugin-descriptor-properties/50159)
**Author:** [@fan-elastic](https://discuss.elastic.co/u/fan-elastic)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 1:06pm UTC](https://discuss.elastic.co/t/analysis-icu-plugin-cant-be-verified-missing-plugin-descriptor-properties/50159 "2016-05-17T13:06:33Z")
Greetings Folks - I'm wondering if anyone else is experiencing the same issue. I'm trying to install the analysis-icu plugin for elasticsearch and getting an error saying it can't be verified. Here's the command I us… --- ## [Detect filebeat retries to remove duplicates in the server side](https://discuss.elastic.co/t/detect-filebeat-retries-to-remove-duplicates-in-the-server-side/47754)
**Author:** [@palmerabollo](https://discuss.elastic.co/u/palmerabollo)\ **Replies:** 2\ **Last updated:** [April 19, 2016, 12:35pm UTC](https://discuss.elastic.co/t/detect-filebeat-retries-to-remove-duplicates-in-the-server-side/47754 "2016-04-19T12:35:37Z")
I'm using filebeat to send logs to a remote logstash endpoint. Is there a flag or any way to detect if a log has already been sent? That is, detect if it is a retry. I think filebeat adds a @timestamp field (I could … --- ## [Graph with nested datatypes](https://discuss.elastic.co/t/graph-with-nested-datatypes/46376)
**Author:** [@tomasfalt](https://discuss.elastic.co/u/tomasfalt)\ **Replies:** 2\ **Last updated:** [April 6, 2016, 7:52am UTC](https://discuss.elastic.co/t/graph-with-nested-datatypes/46376 "2016-04-06T07:52:54Z")
Hi, I just wonder if it's possible to do graph queries on documents with nested datatypes? Thanks, Tomas Fält --- ## [How to Discard Empty Fields When Searching?](https://discuss.elastic.co/t/how-to-discard-empty-fields-when-searching/14009)
**Author:** [@Eric\_4](https://discuss.elastic.co/u/Eric_4)\ **Replies:** 2\ **Last updated:** [October 20, 2013, 2:43pm UTC](https://discuss.elastic.co/t/how-to-discard-empty-fields-when-searching/14009 "2013-10-20T14:43:46Z")
Hi, I am running following query. Basically I want to exclude all the documents where \*lastname\* starts with a number. The first set of documents in the result set are the ones \*where lastname field is empty\*. I s… --- ## [Synonym expansion only during search time?](https://discuss.elastic.co/t/synonym-expansion-only-during-search-time/4659)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 2\ **Last updated:** [July 27, 2011, 6:49am UTC](https://discuss.elastic.co/t/synonym-expansion-only-during-search-time/4659 "2011-07-27T06:49:04Z")
Hi, I would like to make a synonym for "ws". It should translate to "web service". After some experiments I found out that using a synonym filter is not a good solution for this because if I use a rule like "ws =\> w… --- ## [Logstash and NXLOG Config?](https://discuss.elastic.co/t/logstash-and-nxlog-config/52996)
**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 8:52pm UTC](https://discuss.elastic.co/t/logstash-and-nxlog-config/52996 "2016-06-16T20:52:35Z")
Im trying to configure NXLOG and Logstash to send info to the ELK Stack. Im having trouble setting it up, my error is: :message=\>"Pipeline aborted due to error", :exception=\>#\ **Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 8:24pm UTC](https://discuss.elastic.co/t/no-recovery-message-generated-when-using-elasticsearch-query-kibana-alert-type/309126 "2022-07-07T20:24:11Z") Hello, I want to deploy notification based on custom query. For this scenario, I use logstash to fetch data from devices I want to catch all new documents where i.e. the field "failover.status.message" has a different… --- ## [Match\_phrase score calculation](https://discuss.elastic.co/t/match-phrase-score-calculation/171243)
**Author:** [@kkendzia](https://discuss.elastic.co/u/kkendzia)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 6:27am UTC](https://discuss.elastic.co/t/match-phrase-score-calculation/171243 "2019-03-11T06:27:08Z")
Hi, we are currently working with elasticsearch 6.6 and we have troubles with match\_phrase and the calculated score. Whats the setting similarity setting is at the moment this: "scripted\_wc": { "type": "scripted", … --- ## [Kibana missing chunks of data by time](https://discuss.elastic.co/t/kibana-missing-chunks-of-data-by-time/106947)
**Author:** [@jeopardy](https://discuss.elastic.co/u/jeopardy)\ **Replies:** 4\ **Last updated:** [November 9, 2017, 8:50pm UTC](https://discuss.elastic.co/t/kibana-missing-chunks-of-data-by-time/106947 "2017-11-09T20:50:46Z")
Hey all. New user here. Trying out Kibana, particularly with a focus on X-pack features. Right now, I'm running into an issue when I visualize my data. It seems that I'm missing chunks of hours from my data, which spans … --- ## [Multiline codec in Filebeat is not working](https://discuss.elastic.co/t/multiline-codec-in-filebeat-is-not-working/92313)
**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\ **Replies:** 4\ **Last updated:** [July 10, 2017, 1:22pm UTC](https://discuss.elastic.co/t/multiline-codec-in-filebeat-is-not-working/92313 "2017-07-10T13:22:28Z")
I am trying to parse catalina.out file using Logstash. All my logs starts with an timestamp field like : 2017-06-20 07:12:55.226 I tried couple of multiline patterns in filebeat yml but nothing seems to be working: pat… --- ## [Duplicate nodes](https://discuss.elastic.co/t/duplicate-nodes/80432)
**Author:** [@Azfar](https://discuss.elastic.co/u/Azfar)\ **Replies:** 4\ **Last updated:** [March 29, 2017, 11:40am UTC](https://discuss.elastic.co/t/duplicate-nodes/80432 "2017-03-29T11:40:42Z")
We are on ElasticSearch 2.4.4. Suddenly elasticsearch start writing duplicate data and after checking the logs and data we found that another instance of elasticseach was started by Monit (https://mmonit.com/monit/) af… --- ## [What is the recommended way to unit test components using RestHighLevelClient?](https://discuss.elastic.co/t/what-is-the-recommended-way-to-unit-test-components-using-resthighlevelclient/148961)
**Author:** [@chakradarraju](https://discuss.elastic.co/u/chakradarraju)\ **Replies:** 1\ **Last updated:** [October 9, 2018, 3:49am UTC](https://discuss.elastic.co/t/what-is-the-recommended-way-to-unit-test-components-using-resthighlevelclient/148961 "2018-10-09T03:49:35Z")
There is exact same request made few months back: RestHighLevelClient mocking But it was auto closed without an explanation. I tried using ESIntegTestCase and ran into endless slf4j, log4j incompatibility issues. Bein… --- ## [What does "script.cache.max\_size" and "script.cache.max\_size" mean?](https://discuss.elastic.co/t/what-does-script-cache-max-size-and-script-cache-max-size-mean/142454)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 2\ **Last updated:** [August 9, 2018, 6:53am UTC](https://discuss.elastic.co/t/what-does-script-cache-max-size-and-script-cache-max-size-mean/142454 "2018-08-09T06:53:40Z")
I want do update by script.But my scropt source is too large,about ten thousand characters. If I use Inline scripts,it is so heavy to http request(builk update).So I want use sotred scripts,but I see this. You can conf… --- ## [Kibana 5 Index Patterns: Why some fields are unchecked for Searchable](https://discuss.elastic.co/t/kibana-5-index-patterns-why-some-fields-are-unchecked-for-searchable/70364)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 2\ **Last updated:** [January 5, 2017, 8:14am UTC](https://discuss.elastic.co/t/kibana-5-index-patterns-why-some-fields-are-unchecked-for-searchable/70364 "2017-01-05T08:14:28Z")
Hi, I am using Kibana 5.1 In Index Patterns,for topbeat-\* index why some fields are not searchable ? In Visualization section, whichever chart I create, all the unchecked fields under Searchable column do not appea… --- ## [Kibana listening but webui can't be displayed](https://discuss.elastic.co/t/kibana-listening-but-webui-cant-be-displayed/62184)
**Author:** [@Simone\_Decesaris](https://discuss.elastic.co/u/Simone_Decesaris)\ **Replies:** 2\ **Last updated:** [October 27, 2016, 11:28am UTC](https://discuss.elastic.co/t/kibana-listening-but-webui-cant-be-displayed/62184 "2016-10-27T11:28:51Z")
Hi all, we have installed elasticsearch 2.4 and kibana 4.6 with no errors, but when we try to open webui from browser we riceived that the page can’t be displayed. This is my log file and kibana.yml: {"type":"log",… --- ## [What are the Sense's columns meanings for GET \_cat/indices?](https://discuss.elastic.co/t/what-are-the-senses-columns-meanings-for-get--cat-indices/29658)
**Author:** [@drortrie](https://discuss.elastic.co/u/drortrie)\ **Replies:** 2\ **Last updated:** [September 21, 2015, 8:53am UTC](https://discuss.elastic.co/t/what-are-the-senses-columns-meanings-for-get--cat-indices/29658 "2015-09-21T08:53:25Z")
Hi, I couldn't find anywhere what are the meanings of the columns at the Sense site for "GET \_cat/indices" (indices endpoint). If i'll try to guess - yellow open .marvel-kibana 1 … --- ## [Kibana canvas vertical bar graph x-axis numbers in descending order and labelling axes](https://discuss.elastic.co/t/kibana-canvas-vertical-bar-graph-x-axis-numbers-in-descending-order-and-labelling-axes/226787)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 11:35am UTC](https://discuss.elastic.co/t/kibana-canvas-vertical-bar-graph-x-axis-numbers-in-descending-order-and-labelling-axes/226787 "2020-04-07T11:35:11Z")
Hi, I have a vertical bar graph element created. Below is the expression: filters "app\_downloads" | essql query="SELECT id, short\_version, unique\_count FROM \\"test\_release\*\\"" | pointseries x="id" y="unique\_count" col… --- ## [Logstash set hour %{+HH} timezone on strings?](https://discuss.elastic.co/t/logstash-set-hour-hh-timezone-on-strings/75236)
**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 9:13am UTC](https://discuss.elastic.co/t/logstash-set-hour-hh-timezone-on-strings/75236 "2017-02-16T09:13:33Z")
Hi When dealing with Logstash dates, anyone can easily convert a text string date field to a real date (with proper TZ and DST) using date filter: date { timezone =\> "Europe/Madrid" match =\> \["mytim… --- ## [Exclude indices from role?](https://discuss.elastic.co/t/exclude-indices-from-role/73966)
**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\ **Replies:** 3\ **Last updated:** [February 5, 2017, 2:07pm UTC](https://discuss.elastic.co/t/exclude-indices-from-role/73966 "2017-02-05T14:07:18Z")
Is it possible to exclude indices from roles? For example, say I have the following indices: logstash-access-iis-\[date\] logstash-access-tomcat-\[date\] logstash-application-log4net-\[date\] logstash-application-log4j-\[d… --- ## [WIndows 2003 - Winlogbeat x32 alpha4](https://discuss.elastic.co/t/windows-2003-winlogbeat-x32-alpha4/57386)
**Author:** [@BongoEADGC6](https://discuss.elastic.co/u/BongoEADGC6)\ **Replies:** 3\ **Last updated:** [August 8, 2016, 6:56pm UTC](https://discuss.elastic.co/t/windows-2003-winlogbeat-x32-alpha4/57386 "2016-08-08T18:56:03Z")
I'm having an issue where all the fields under event\_data are named param1, param2, param3, param4, etc. This does not happen when using the x64 version of the software however. Is there a compatibility issue with Wind… --- ## [How to get percentage of failed tests from all results](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 5\ **Last updated:** [September 7, 2021, 6:59pm UTC](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818 "2021-09-07T18:59:21Z")
Hi All, I'm using v 7.11.1 I have this data structure in elastic: { "\_index" : "stamshay", "\_type" : "\_doc", "\_id" : "ub0ll3sB2oqJ9931yhZw", "\_score" : 1.0, "\_source" : { "buildVersion" : "1.1.1.1", "testcase" … --- ## [Возможности аналитики в Elasticsearch](https://discuss.elastic.co/t/elasticsearch/211714)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 5\ **Last updated:** [December 13, 2019, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch/211714 "2019-12-13T13:34:21Z")
Добрый вечер! Прежде чем поднять вопрос перед шефом о приобретении соответствующего (не очень дешёвого..) железа для ES кластера, хотел бы знать предназначен ли ES для решения следующих типичных аналитических задач: … --- ## [Logstash not sending all data to elasticsearch](https://discuss.elastic.co/t/logstash-not-sending-all-data-to-elasticsearch/330025)
**Author:** [@Koi\_Kin](https://discuss.elastic.co/u/Koi_Kin)\ **Replies:** 7\ **Last updated:** [May 4, 2023, 11:18am UTC](https://discuss.elastic.co/t/logstash-not-sending-all-data-to-elasticsearch/330025 "2023-05-04T11:18:13Z")
I have a simple jdbc connector without filter to fetch data from database to feed the elasticsearch with. input { jdbc { jdbc\_connection\_string =\> "#connectionstring" jdbc\_user =\> "#username" jdb… --- ## [Importing by hand the search / visualization / dashboard of metricbeats in Kibana 5.5.0](https://discuss.elastic.co/t/importing-by-hand-the-search-visualization-dashboard-of-metricbeats-in-kibana-5-5-0/126911)
**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\ **Replies:** 7\ **Last updated:** [April 11, 2018, 11:44am UTC](https://discuss.elastic.co/t/importing-by-hand-the-search-visualization-dashboard-of-metricbeats-in-kibana-5-5-0/126911 "2018-04-11T11:44:36Z")
Hello, I am generating a lot of metricbeats that go through some intermediates systems which means the events can reach the Elasticsearch but the import of example dashboard will fail. However, from the metricbeats arc… --- ## [How to "reindex" a field with "source" disabled and "store: true"?](https://discuss.elastic.co/t/how-to-reindex-a-field-with-source-disabled-and-store-true/309817)
**Author:** [@huuyafwww](https://discuss.elastic.co/u/huuyafwww)\ **Replies:** 4\ **Last updated:** [July 18, 2022, 12:52pm UTC](https://discuss.elastic.co/t/how-to-reindex-a-field-with-source-disabled-and-store-true/309817 "2022-07-18T12:52:15Z")
I am currently looking to optimize the performance of indexing and search on fields with very large text in them. And I have already read the following articles and previous forum posts. Searching in a large text fiel… --- ## [Convert YYYY-MM-DD-HH.MM.SS to date](https://discuss.elastic.co/t/convert-yyyy-mm-dd-hh-mm-ss-to-date/293820)
**Author:** [@Hooman24](https://discuss.elastic.co/u/Hooman24)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 5:35am UTC](https://discuss.elastic.co/t/convert-yyyy-mm-dd-hh-mm-ss-to-date/293820 "2022-01-10T05:35:20Z")
Hi I have a dateTime field with the following format: yyyy-mm-dd-HH.mm.ss I want to use this field as a date time field in ELK. I don't know how to change 11th position of the string('-') to 'T' to convert this field … --- ## [ES6 - range query on float in not exact](https://discuss.elastic.co/t/es6-range-query-on-float-in-not-exact/186740)
**Author:** [@theonlyalterego](https://discuss.elastic.co/u/theonlyalterego)\ **Replies:** 1\ **Last updated:** [June 20, 2019, 6:51pm UTC](https://discuss.elastic.co/t/es6-range-query-on-float-in-not-exact/186740 "2019-06-20T18:51:36Z")
My problem is when running the below range query against a float I am getting a value outside the range. specifically the value 518832000000 is greater than the "LTE" value of 518831999999. MAPPING "birthDate": { … --- ## [How to split string into array of objects using logstash?](https://discuss.elastic.co/t/how-to-split-string-into-array-of-objects-using-logstash/135370)
**Author:** [@stevefai](https://discuss.elastic.co/u/stevefai)\ **Replies:** 1\ **Last updated:** [June 11, 2018, 1:48pm UTC](https://discuss.elastic.co/t/how-to-split-string-into-array-of-objects-using-logstash/135370 "2018-06-11T13:48:18Z")
Hello, I'm trying to save some Java stacktrace data into Elasticsearch using Logstash. Each event contains a multiline string like: "exception1: Exception Message 1 exception2: Exception Message 2 exception3: Except… [Previous page](https://discuss.elastic.co/top.md?page=948&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=950&per_page=50&period=all)