# Top

**URL:** https://discuss.elastic.co/top.md?page=972&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 973

---

## [Changes to Advanced Settings in Kibana not reflected](https://discuss.elastic.co/t/changes-to-advanced-settings-in-kibana-not-reflected/137537)

<div class="topic-metadata">

**Author:** [@rohus24](https://discuss.elastic.co/u/rohus24)\
**Replies:** 2\
**Last updated:** [June 28, 2018, 2:12pm UTC](https://discuss.elastic.co/t/changes-to-advanced-settings-in-kibana-not-reflected/137537 "2018-06-28T14:12:12Z")

</div>

Hi All, Whenever I choose to view a dashboard with a time frame longer than 7 days, I get the following error: "Metrics: Max buckets exceeded: 10080 is greater than 2000, try a larger time interval in the panel options…

---

## [Parsing Cisco ACS logs](https://discuss.elastic.co/t/parsing-cisco-acs-logs/60887)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 2\
**Last updated:** [October 12, 2016, 3:05pm UTC](https://discuss.elastic.co/t/parsing-cisco-acs-logs/60887 "2016-10-12T15:05:53Z")

</div>

Hi, Is there is any predefined patterns through which Cisco ACS logs can be filtered like the syslog?

---

## [Same scroll id](https://discuss.elastic.co/t/same-scroll-id/50253)

<div class="topic-metadata">

**Author:** [@QD\_Wang](https://discuss.elastic.co/u/QD_Wang)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 2:11pm UTC](https://discuss.elastic.co/t/same-scroll-id/50253 "2016-05-18T14:11:19Z")

</div>

Hi There I am running into a very strange issue, here is query 1) first query http://localhost:9200/index/\_search?scroll=1m&size=10 2) next page http://localhost:9200/\_search/scroll?scroll=1m&scroll\_id=(Scroll …

---

## [Elastic Master Nodes not discovered exception on ECK](https://discuss.elastic.co/t/elastic-master-nodes-not-discovered-exception-on-eck/305929)

<div class="topic-metadata">

**Author:** [@adityasinghal26](https://discuss.elastic.co/u/adityasinghal26)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elastic-master-nodes-not-discovered-exception-on-eck/305929 "2022-05-30T15:06:39Z")

</div>

Hi, We have a 2 node cluster which has all master, data, ingest and ml roles. This ECK setup is deployed using Oracle Cloud for Kubernetes Engine (OKE). Recently, we were trying to upgrade the Kubernetes version on OKE…

---

## [Determining 'size' in \[\_source \] \[includes\] query](https://discuss.elastic.co/t/determining-size-in-source-includes-query/282451)

<div class="topic-metadata">

**Author:** [@clawrencia](https://discuss.elastic.co/u/clawrencia)\
**Replies:** 8\
**Last updated:** [August 25, 2021, 7:41am UTC](https://discuss.elastic.co/t/determining-size-in-source-includes-query/282451 "2021-08-25T07:41:04Z")

</div>

Hi guys, I am just wondering if it possible to set the size for a particular field when we query. The following here is my query. (Apologies for the mess, the query is done in the python elasticsearch API). GET /index\_…

---

## [Extract certain watcher fields](https://discuss.elastic.co/t/extract-certain-watcher-fields/227751)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 3\
**Last updated:** [April 15, 2020, 3:20pm UTC](https://discuss.elastic.co/t/extract-certain-watcher-fields/227751 "2020-04-15T15:20:14Z")

</div>

Hello, In this elastic search link: https://www.elastic.co/guide/en/watcher/2.3/input.html#input-search it specifies how to get a field value from a particular hit and it provides an example if we want to get the value …

---

## [Type conflicts for fields that are not indexed](https://discuss.elastic.co/t/type-conflicts-for-fields-that-are-not-indexed/210417)

<div class="topic-metadata">

**Author:** [@ninze](https://discuss.elastic.co/u/ninze)\
**Replies:** 3\
**Last updated:** [December 6, 2019, 12:01pm UTC](https://discuss.elastic.co/t/type-conflicts-for-fields-that-are-not-indexed/210417 "2019-12-06T12:01:19Z")

</div>

Hi, I am quite new to elasticsearch, excuse me if this has been answered before. Could not find the answer in the docs. I am logging some user-generated data to elasticsearch (browser fingerprint object generated by fi…

---

## [Workaround when ES hangs on stale NFS mount?](https://discuss.elastic.co/t/workaround-when-es-hangs-on-stale-nfs-mount/92669)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\
**Replies:** 3\
**Last updated:** [July 14, 2017, 3:10pm UTC](https://discuss.elastic.co/t/workaround-when-es-hangs-on-stale-nfs-mount/92669 "2017-07-14T15:10:09Z")

</div>

Hi all, it is a known issue that ES hangs on startup for a couple of minutes when there is a stale NFS mount on the system: https://github.com/elastic/elasticsearch/pull/24402 This is particularly a problem as also t…

---

## [Cloudwatchmetric beat - a beat for AWS CloudWatch metrics](https://discuss.elastic.co/t/cloudwatchmetric-beat-a-beat-for-aws-cloudwatch-metrics/102016)

<div class="topic-metadata">

**Author:** [@phillbaker](https://discuss.elastic.co/u/phillbaker)\
**Replies:** 0\
**Last updated:** [September 27, 2017, 5:55pm UTC](https://discuss.elastic.co/t/cloudwatchmetric-beat-a-beat-for-aws-cloudwatch-metrics/102016 "2017-09-27T17:55:46Z")

</div>

Hi all, I’m happy to announce that we released Cloudwatchmetric beat, a Beats plugin for pulling Cloudwatch metric data into elasticsearch. (We had seen similar beats for cloudwatch logs and other AWS data sources, but…

---

## [ES gateway timeout](https://discuss.elastic.co/t/es-gateway-timeout/35662)

<div class="topic-metadata">

**Author:** [@nivetha](https://discuss.elastic.co/u/nivetha)\
**Replies:** 6\
**Last updated:** [November 27, 2015, 1:37am UTC](https://discuss.elastic.co/t/es-gateway-timeout/35662 "2015-11-27T01:37:25Z")

</div>

I have upgraded elasticseach from 1.7.3 to 2.0.0. I restarted elasticsearch ,I stuck up with gateway. My curl command not working. Can u help me out with this. Here is my ES snippet.

---

## [Filebeat setup: 400 Bad Request no handler found for uri \[//\_ilm/policy/filebeat\]](https://discuss.elastic.co/t/filebeat-setup-400-bad-request-no-handler-found-for-uri-ilm-policy-filebeat/311900)

<div class="topic-metadata">

**Author:** [@Nick95](https://discuss.elastic.co/u/Nick95)\
**Replies:** 4\
**Last updated:** [August 18, 2022, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-setup-400-bad-request-no-handler-found-for-uri-ilm-policy-filebeat/311900 "2022-08-18T12:40:45Z")

</div>

Hi, I try to run a filebeat on a server. Elastic and Kibana are installed on another server and are pushed on 443 port via a nginx reverse proxy. Kibana GUI is working on the IP I set up (https with self-generated certi…

---

## [Logstash grok filter only extracting first match](https://discuss.elastic.co/t/logstash-grok-filter-only-extracting-first-match/218219)

<div class="topic-metadata">

**Author:** [@tmuon](https://discuss.elastic.co/u/tmuon)\
**Replies:** 4\
**Last updated:** [February 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-only-extracting-first-match/218219 "2020-02-11T13:50:40Z")

</div>

Hi. Elastic Stack 7.4 in use here. I'm using the grok filter in logstash to extract data from a connection event from a Cisco Firepower. The syslog data is sent to Filebeat on a separate computer and the Filebeat Cisco m…

---

## [Filebeat using accessive amount of memory on server](https://discuss.elastic.co/t/filebeat-using-accessive-amount-of-memory-on-server/189374)

<div class="topic-metadata">

**Author:** [@urvi](https://discuss.elastic.co/u/urvi)\
**Replies:** 4\
**Last updated:** [July 10, 2019, 1:09pm UTC](https://discuss.elastic.co/t/filebeat-using-accessive-amount-of-memory-on-server/189374 "2019-07-10T13:09:38Z")

</div>

Hello Team, I am using fileebat 6.5.1. We have server that produce large volume of data per day(75 gb). I am facing memory issue on this server for filebeat. Filebeat is keep on increasing memory usage every day almos…

---

## [Exclude keys](https://discuss.elastic.co/t/exclude-keys/142352)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 4\
**Last updated:** [August 10, 2018, 4:32am UTC](https://discuss.elastic.co/t/exclude-keys/142352 "2018-08-10T04:32:35Z")

</div>

Input file:kvoptions.log {"Name":"admin","ConfigurationObjectType":"ExecutionGroup"} Configuration file: input { file { path =\> "/home/murugar/Documents/kvoptions.log" type =\> "file" start\_position =\> "beginning…

---

## [Client node in elasticsearch cluster](https://discuss.elastic.co/t/client-node-in-elasticsearch-cluster/79731)

<div class="topic-metadata">

**Author:** [@thanghv55](https://discuss.elastic.co/u/thanghv55)\
**Replies:** 4\
**Last updated:** [March 24, 2017, 9:47am UTC](https://discuss.elastic.co/t/client-node-in-elasticsearch-cluster/79731 "2017-03-24T09:47:48Z")

</div>

Hi all, I set up a elasticsearch cluster includes nodes, 3 master nodes, 1 data node and 1 client node. i see the many topics said that it's need only one client node to handler request search, indexing,... from client…

---

## [Parent/child join approach?](https://discuss.elastic.co/t/parent-child-join-approach/49773)

<div class="topic-metadata">

**Author:** [@asanderson](https://discuss.elastic.co/u/asanderson)\
**Replies:** 4\
**Last updated:** [May 12, 2016, 2:42am UTC](https://discuss.elastic.co/t/parent-child-join-approach/49773 "2016-05-12T02:42:15Z")

</div>

Our ES data model includes an Entity parent document type and an EntityDetail child document type which has served us well; however, the big deficiency which I've postponed as long as possible hoping Lucene and Elasticse…

---

## [Multiline plugin not working as expected](https://discuss.elastic.co/t/multiline-plugin-not-working-as-expected/46623)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 4\
**Last updated:** [April 7, 2016, 4:49pm UTC](https://discuss.elastic.co/t/multiline-plugin-not-working-as-expected/46623 "2016-04-07T16:49:14Z")

</div>

I wanted individual field as a Logstash output. i.e. EventID, Level, Session ID, etc. My GROK pattern works fine on "https://grokdebug.herokuapp.com/" where individual values are extracted. But when placed in logstash, m…

---

## [Default elasticsearch template for logstash](https://discuss.elastic.co/t/default-elasticsearch-template-for-logstash/79685)

<div class="topic-metadata">

**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\
**Replies:** 1\
**Last updated:** [March 23, 2017, 5:20am UTC](https://discuss.elastic.co/t/default-elasticsearch-template-for-logstash/79685 "2017-03-23T05:20:59Z")

</div>

Where can I find the default index template which used by logstash to create elasticsearch index? (of version 5)

---

## [Slow search query issue \[5.5\]](https://discuss.elastic.co/t/slow-search-query-issue-5-5/97420)

<div class="topic-metadata">

**Author:** [@akubasa](https://discuss.elastic.co/u/akubasa)\
**Replies:** 5\
**Last updated:** [August 25, 2017, 2:50pm UTC](https://discuss.elastic.co/t/slow-search-query-issue-5-5/97420 "2017-08-25T14:50:02Z")

</div>

Dear Elastic community We are struggling with very slow search querys. We have ~ 10 Mio documents and 140 Shards on one node. Elasticsearch is running on 7GB Ram and 2cores. Each first request takes up to 15 seconds. H…

---

## [Filebeat Xpack](https://discuss.elastic.co/t/filebeat-xpack/132867)

<div class="topic-metadata">

**Author:** [@surendrakotte](https://discuss.elastic.co/u/surendrakotte)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 10:25pm UTC](https://discuss.elastic.co/t/filebeat-xpack/132867 "2018-05-23T22:25:58Z")

</div>

Hello, I am a newbie to ELK. I configured Elasticsearch/Kibana/FileBeat, config was working till xpack was installed. xpack authentication works fine for ElasticSearch/Kibana but filebeat has issues on restart: 2018-05…

---

## [Spark job fails with Elasticsearch 2.3.5 install](https://discuss.elastic.co/t/spark-job-fails-with-elasticsearch-2-3-5-install/58601)

<div class="topic-metadata">

**Author:** [@Isha](https://discuss.elastic.co/u/Isha)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 8:49pm UTC](https://discuss.elastic.co/t/spark-job-fails-with-elasticsearch-2-3-5-install/58601 "2016-11-07T20:49:45Z")

</div>

Hello, I had a ES Cluster Setup with ES version 1.7 and below command works without any issues 'spark-submit --num-executors 10 --name mc-es --jars lib/elasticsearch-hadoop-2.1.0.jar,lib/elasticsearch-spark\_2.11-2.1…

---

## [Shield with no SSL - Unable to login to Kibana](https://discuss.elastic.co/t/shield-with-no-ssl-unable-to-login-to-kibana/53733)

<div class="topic-metadata">

**Author:** [@missourian](https://discuss.elastic.co/u/missourian)\
**Replies:** 2\
**Last updated:** [June 23, 2016, 10:33pm UTC](https://discuss.elastic.co/t/shield-with-no-ssl-unable-to-login-to-kibana/53733 "2016-06-23T22:33:36Z")

</div>

I am unable to log into Kibana, I have added below role \*\*\*\* esuser utility\*\* my\_kibana\_user: cluster: - monitor indices: - names: 'logstash-' privileges: - view\_index\_metadata - read - names: '.kibana' privil…

---

## [Multiline Config from LS1.5.4 not working in LS2.0.0](https://discuss.elastic.co/t/multiline-config-from-ls1-5-4-not-working-in-ls2-0-0/35086)

<div class="topic-metadata">

**Author:** [@mad\_min](https://discuss.elastic.co/u/mad_min)\
**Replies:** 7\
**Last updated:** [November 20, 2015, 6:49pm UTC](https://discuss.elastic.co/t/multiline-config-from-ls1-5-4-not-working-in-ls2-0-0/35086 "2015-11-20T18:49:28Z")

</div>

Hi LS community, I am trying to migrate my LS setup from 1.5.4 (which doesnt seem to be happy with ES2.0.0) over to LS 2.0.0. Everything is the same except the change from 'host' --\> 'hosts'. However, I am not able t…

---

## [\_template vs \_index\_template](https://discuss.elastic.co/t/template-vs-index-template/274730)

<div class="topic-metadata">

**Author:** [@Jordi\_Cabre1](https://discuss.elastic.co/u/Jordi_Cabre1)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 12:10pm UTC](https://discuss.elastic.co/t/template-vs-index-template/274730 "2021-06-02T12:10:09Z")

</div>

I've just realized that ES has a \_/\_template and a \_/\_index\_template. What are they for? I was using code: PutIndexTemplateRequest ngramTemplate = new PutIndexTemplateRequest("ngram-template") .patterns(Arrays.asList…

---

## [Create Network Diagram](https://discuss.elastic.co/t/create-network-diagram/207547)

<div class="topic-metadata">

**Author:** [@Faten](https://discuss.elastic.co/u/Faten)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 1:06pm UTC](https://discuss.elastic.co/t/create-network-diagram/207547 "2019-11-13T13:06:10Z")

</div>

Hi, I am using Kibana 7.4 and I am trying to create a network diagram visualization, is there any tips and ways I can create a network diagram? I tried to download one plugin but it doesn't work with Kibana 7.4

---

## [Searching for newline or linebreak in a field](https://discuss.elastic.co/t/searching-for-newline-or-linebreak-in-a-field/130049)

<div class="topic-metadata">

**Author:** [@DoCoMeffen](https://discuss.elastic.co/u/DoCoMeffen)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 2:53am UTC](https://discuss.elastic.co/t/searching-for-newline-or-linebreak-in-a-field/130049 "2018-05-02T02:53:52Z")

</div>

I (somehow) got some text fields that contain line breaks and/or newlines and I'm having trouble constructing a query to locate these. I've tried "query": { "regexp":{ "user.firstname": "\\n" } } and "query": { "…

---

## [Запрос фразы с опечатками](https://discuss.elastic.co/t/topic/33512)

<div class="topic-metadata">

**Author:** [@MaWr](https://discuss.elastic.co/u/MaWr)\
**Replies:** 1\
**Last updated:** [November 2, 2015, 1:57pm UTC](https://discuss.elastic.co/t/topic/33512 "2015-11-02T13:57:49Z")

</div>

Добрый день! Есть простой индекс: { "settings" : { "analysis" : { "analyzer" : { "str\_search\_analyzer" : { "tokenizer" : "keyword", "filter" : \["lowercase"\] }, "str…

---

## [Transform large file from postgresql to elasticsearch](https://discuss.elastic.co/t/transform-large-file-from-postgresql-to-elasticsearch/211803)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 5\
**Last updated:** [December 18, 2019, 2:49pm UTC](https://discuss.elastic.co/t/transform-large-file-from-postgresql-to-elasticsearch/211803 "2019-12-18T14:49:21Z")

</div>

Hi everybody I have an issue when dealing with large table in postgresql. I have a table with about 1 millions rows, each row contains some text, about half of A4 page of length. I want to index this table into elastics…

---

## [Any way to add a Sum Total to a Horizontal Chart?](https://discuss.elastic.co/t/any-way-to-add-a-sum-total-to-a-horizontal-chart/193886)

<div class="topic-metadata">

**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\
**Replies:** 3\
**Last updated:** [August 6, 2019, 3:45pm UTC](https://discuss.elastic.co/t/any-way-to-add-a-sum-total-to-a-horizontal-chart/193886 "2019-08-06T15:45:54Z")

</div>

I've got a horizontal bar chart visualization that I've built in Kibana as below. The Y-Axis is an aggregation of Count. The Y-Axis is a Split Series of Terms. Is there any way to create an extra bar that shows the S…

---

## [\[502\] {"ok":false,"message":"Unable to connect to the server."}](https://discuss.elastic.co/t/502-ok-false-message-unable-to-connect-to-the-server/93078)

<div class="topic-metadata">

**Author:** [@ticcoid](https://discuss.elastic.co/u/ticcoid)\
**Replies:** 1\
**Last updated:** [July 21, 2017, 1:52pm UTC](https://discuss.elastic.co/t/502-ok-false-message-unable-to-connect-to-the-server/93078 "2017-07-21T13:52:48Z")

</div>

Hi there, We faced the following issue suddenly today: \[502\] {"ok":false,"message":"Unable to connect to the server."} Cluster ID: 306618 Can someone tell me whats going on? Thanks Christian

---

## [How to monitor transactions which pass through Rabbit MQ, producer & consumer are python clients](https://discuss.elastic.co/t/how-to-monitor-transactions-which-pass-through-rabbit-mq-producer-consumer-are-python-clients/332647)

<div class="topic-metadata">

**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\
**Replies:** 4\
**Last updated:** [May 17, 2023, 11:03am UTC](https://discuss.elastic.co/t/how-to-monitor-transactions-which-pass-through-rabbit-mq-producer-consumer-are-python-clients/332647 "2023-05-17T11:03:30Z")

</div>

Hi All, I want to "trace" distributed transactions which pass through "Rabbit MQ" through the Application. The clients for Rabbit MQ are written in python 2.x & Python 3,.x to consume and produce messages. When in Elas…

---

## [Trying to understand the behaviour of query string with double quotes](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768)

<div class="topic-metadata">

**Author:** [@peidaqi](https://discuss.elastic.co/u/peidaqi)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768 "2019-08-19T17:20:45Z")

</div>

I couldn't find a document that explains how the double quotes (exact string matches) in query strings work, so I did a bit of an experiment. Both the analyzer and search analyzer of my document field was created with a…

---

## [\_reindex and a random\_score query](https://discuss.elastic.co/t/-reindex-and-a-random-score-query/50198)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 6\
**Last updated:** [November 10, 2016, 9:32pm UTC](https://discuss.elastic.co/t/-reindex-and-a-random-score-query/50198 "2016-11-10T21:32:41Z")

</div>

Hi everybody! I've encountered an issue with the random score function when using the "\_reindex" command: POST /\_reindex { "size": 100, "source": { "index": "logstash-\*", "query": { "function\_sc…

---

## [Multiple languages documents](https://discuss.elastic.co/t/multiple-languages-documents/309885)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 8\
**Last updated:** [July 26, 2022, 8:31am UTC](https://discuss.elastic.co/t/multiple-languages-documents/309885 "2022-07-26T08:31:36Z")

</div>

Hi there :wave: Context Within a particular engine I will have documents in multiple languages. e.g Document 1 -\> english Document 2 -\> french Document 3 -\> slovenian ... At the same time, each of those documents cou…

---

## [Saving request.url variable in filebeat httpjson](https://discuss.elastic.co/t/saving-request-url-variable-in-filebeat-httpjson/286700)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 8\
**Last updated:** [October 19, 2021, 9:48am UTC](https://discuss.elastic.co/t/saving-request-url-variable-in-filebeat-httpjson/286700 "2021-10-19T09:48:14Z")

</div>

Good day! The question arose, is it possible to save the last received value of the request.url parameter and then read from it upon request? I use httpjson as an input module with the following settings: # ===========…

---

## [Not able to import GeoJson file using Kibana Maps](https://discuss.elastic.co/t/not-able-to-import-geojson-file-using-kibana-maps/258228)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 8\
**Last updated:** [December 23, 2020, 6:35am UTC](https://discuss.elastic.co/t/not-able-to-import-geojson-file-using-kibana-maps/258228 "2020-12-23T06:35:33Z")

</div>

Hi Team, I have created the custom geojson file for India region, when i try to import the file in kibana maps, it doesn't show any errors in elasticsearch log nor in the kibana UI. But i can see below error in kibana …

---

## [Unsupported symbol \[-\] in geohash](https://discuss.elastic.co/t/unsupported-symbol-in-geohash/268563)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [March 28, 2021, 3:06am UTC](https://discuss.elastic.co/t/unsupported-symbol-in-geohash/268563 "2021-03-28T03:06:57Z")

</div>

I am facing some issue while defining mapping for an index \[2021-03-27T23:27:36,733\]\[WARN \]\[logstash.outputs.elasticsearch\]\[packetbeat\]\[7bb6e349f13f74fc053ef83bdac5d84b4de038193ed7d008068e4432f88bd27d\] Could not index e…

---

## [How to perform a GetById from multiple indices](https://discuss.elastic.co/t/how-to-perform-a-getbyid-from-multiple-indices/29001)

<div class="topic-metadata">

**Author:** [@VinsYu](https://discuss.elastic.co/u/VinsYu)\
**Replies:** 2\
**Last updated:** [September 10, 2015, 11:03am UTC](https://discuss.elastic.co/t/how-to-perform-a-getbyid-from-multiple-indices/29001 "2015-09-10T11:03:09Z")

</div>

Use Case: I have two indices (archive and active). Now during search and retrieve, it should be able to perform the action on both indices. However, for update and create new documents, it should be able to execute the a…

---

## [How to schedule rule alert only on weekday and specific time](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145)

<div class="topic-metadata">

**Author:** [@ss02072805](https://discuss.elastic.co/u/ss02072805)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 7:40pm UTC](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145 "2022-02-04T19:40:48Z")

</div>

Assume, in the Kibana Alerting Framework. this configuration set up for metrics reported with that process.name Alert Type : Metric Threshold, on this configuration how to step up alerting only on weekday and speci…

---

## [Error calling webhook \[DEPTH\_ZERO\_SELF\_SIGNED\_CERT\]](https://discuss.elastic.co/t/error-calling-webhook-depth-zero-self-signed-cert/297065)

<div class="topic-metadata">

**Author:** [@angelolol](https://discuss.elastic.co/u/angelolol)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 3:05am UTC](https://discuss.elastic.co/t/error-calling-webhook-depth-zero-self-signed-cert/297065 "2022-02-23T03:05:15Z")

</div>

Hi, I´m working with webhook action where I´m trying to send a request to Jira but I get this error "error calling webhook \[DEPTH\_ZERO\_SELF\_SIGNED\_CERT\]", I change "xpack.actions.ssl.verificationMode : none" in the kiba…

---

## [Grouped bar chart in vega Kibana](https://discuss.elastic.co/t/grouped-bar-chart-in-vega-kibana/262088)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 3\
**Last updated:** [January 27, 2021, 6:38am UTC](https://discuss.elastic.co/t/grouped-bar-chart-in-vega-kibana/262088 "2021-01-27T06:38:33Z")

</div>

Hello Everyone I have a grouped bar chart which is plotted correctly in Vega online editor, but when I try the code in Kibana the graph is not plotted correctly. The desired graph should be like x- axis year groupe…

---

## [Error connect node elastic 5.4.3 spring boot 2M2 failed to load elasticsearch nodes : org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured nodes are available](https://discuss.elastic.co/t/error-connect-node-elastic-5-4-3-spring-boot-2m2-failed-to-load-elasticsearch-nodes-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-are-available/91486)

<div class="topic-metadata">

**Author:** [@iquirino88](https://discuss.elastic.co/u/iquirino88)\
**Replies:** 0\
**Last updated:** [June 30, 2017, 8:18pm UTC](https://discuss.elastic.co/t/error-connect-node-elastic-5-4-3-spring-boot-2m2-failed-to-load-elasticsearch-nodes-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-are-available/91486 "2017-06-30T20:18:06Z")

</div>

Hi guys! I'm new here! Im trying to connect with elasticsearch using a docker container, and the version 2.0.0.M2 of spring boot(spring-data-elastict-search), with version of elastic 5.4.3; And throws: :: Spring B…

---

## [Recovery Strategy for Elastic](https://discuss.elastic.co/t/recovery-strategy-for-elastic/58036)

<div class="topic-metadata">

**Author:** [@newelasticuser](https://discuss.elastic.co/u/newelasticuser)\
**Replies:** 3\
**Last updated:** [August 23, 2016, 1:51pm UTC](https://discuss.elastic.co/t/recovery-strategy-for-elastic/58036 "2016-08-23T13:51:01Z")

</div>

What is the recovery strategy for single data center built in VMware? Does Elastic support VMWare Site recovery Manager for any disaster or outage recovery? Currrently we have 3 node cluster on single data center(3 mas…

---

## [Is there any Elastic Search Meetups in Beijing China](https://discuss.elastic.co/t/is-there-any-elastic-search-meetups-in-beijing-china/113852)

<div class="topic-metadata">

**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\
**Replies:** 3\
**Last updated:** [January 15, 2018, 2:47am UTC](https://discuss.elastic.co/t/is-there-any-elastic-search-meetups-in-beijing-china/113852 "2018-01-15T02:47:52Z")

</div>

Hi Everyone, Is there any ElasticSearch Meetup in Beijing China 2018? If yes then please notify me, I would love to join and learn with others and if not then let's plan to arrange Elastic Search Meet up in Beijing. Pl…

---

## [Issue with elasticsearch backup using GCS](https://discuss.elastic.co/t/issue-with-elasticsearch-backup-using-gcs/271239)

<div class="topic-metadata">

**Author:** [@722826c085cfc824006d](https://discuss.elastic.co/u/722826c085cfc824006d)\
**Replies:** 0\
**Last updated:** [April 26, 2021, 10:01am UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-backup-using-gcs/271239 "2021-04-26T10:01:12Z")

</div>

We are running ES cluster as kuberntes pods in google cloud environment. We are planning to trigger the snapshots and need to store the data GCS bucket. As part of snapshot, we are creating the rep0, but the repo creat…

---

## [Removing "winlog" prefix in winlogbeat](https://discuss.elastic.co/t/removing-winlog-prefix-in-winlogbeat/242344)

<div class="topic-metadata">

**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\
**Replies:** 0\
**Last updated:** [July 23, 2020, 1:31pm UTC](https://discuss.elastic.co/t/removing-winlog-prefix-in-winlogbeat/242344 "2020-07-23T13:31:34Z")

</div>

Hello, I'm upgrading winlogbeat 5.4.1 to 7.8.0. I saw that some fields are now prefixed by "winlog" (example: event\_id became winlog\_event\_id). Is there a setting, or is it possible to add rule to remove this prefix ? …

---

## [Aggregate filter check value with all previous records](https://discuss.elastic.co/t/aggregate-filter-check-value-with-all-previous-records/91311)

<div class="topic-metadata">

**Author:** [@Tejas\_Ghutukade](https://discuss.elastic.co/u/Tejas_Ghutukade)\
**Replies:** 0\
**Last updated:** [June 29, 2017, 3:15pm UTC](https://discuss.elastic.co/t/aggregate-filter-check-value-with-all-previous-records/91311 "2017-06-29T15:15:55Z")

</div>

while reading the csv file in logstash i want to compare value with all the previous record and depending on the condition set a field with true or false. m able to compare with the immediate previous record but i want …

---

## [Aggregating object keys to achieve a sum](https://discuss.elastic.co/t/aggregating-object-keys-to-achieve-a-sum/296193)

<div class="topic-metadata">

**Author:** [@hugomeloo](https://discuss.elastic.co/u/hugomeloo)\
**Replies:** 5\
**Last updated:** [February 8, 2022, 1:10pm UTC](https://discuss.elastic.co/t/aggregating-object-keys-to-achieve-a-sum/296193 "2022-02-08T13:10:32Z")

</div>

I am trying to make an aggregation in which I can sum a number from a specific key of an object. As an example: curl -XPUT "localhost:9200/products/\_mapping" -H 'Content-Type: application/json' -d' { "properties": { …

---

## [Transport client frequent "node disconnected" messages](https://discuss.elastic.co/t/transport-client-frequent-node-disconnected-messages/178281)

<div class="topic-metadata">

**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\
**Replies:** 5\
**Last updated:** [April 25, 2019, 1:47pm UTC](https://discuss.elastic.co/t/transport-client-frequent-node-disconnected-messages/178281 "2019-04-25T13:47:14Z")

</div>

Hi, We are on ES 5.5 and use the Transport Client with sniff set to true to connect our services to our ES cluster via a load balancer. We only need the load balancer to discover the nodes (they change dynamically) but…

---

## [Are documents of different types indexed via one index?](https://discuss.elastic.co/t/are-documents-of-different-types-indexed-via-one-index/22784)

<div class="topic-metadata">

**Author:** [@11181](https://discuss.elastic.co/u/11181)\
**Replies:** 5\
**Last updated:** [December 23, 2015, 6:05pm UTC](https://discuss.elastic.co/t/are-documents-of-different-types-indexed-via-one-index/22784 "2015-12-23T18:05:53Z")

</div>

From ES document I understood that index is like database and document type is like table. Every table has its own indexes. Let's suppose we have one ES index with two document types (posts and book) and we have 10000…

[Previous page](https://discuss.elastic.co/top.md?page=971&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=973&per_page=50&period=all)
