# Top **URL:** https://discuss.elastic.co/top.md?page=973&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 974 --- ## [Is it possible to create a dynamic, rolling interval within a date\_histogram?](https://discuss.elastic.co/t/is-it-possible-to-create-a-dynamic-rolling-interval-within-a-date-histogram/78040)
**Author:** [@t.Farestad](https://discuss.elastic.co/u/t.Farestad)\ **Replies:** 2\ **Last updated:** [March 13, 2017, 9:11pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-dynamic-rolling-interval-within-a-date-histogram/78040 "2017-03-13T21:11:52Z")
One of our current monitors, uses a date\_histogram to break the last two days worth of data into buckets in hour intervals: "aggs": { "histo": { "date\_histogram": { … --- ## [Elasticsea start error](https://discuss.elastic.co/t/elasticsea-start-error/151569)
**Author:** [@pikaqiu](https://discuss.elastic.co/u/pikaqiu)\ **Replies:** 1\ **Last updated:** [October 12, 2018, 11:54am UTC](https://discuss.elastic.co/t/elasticsea-start-error/151569 "2018-10-12T11:54:37Z")
\[2018-10-09T15:36:36,829\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[node-1\] All shards failed for phase: \[query\] \[2018-10-09T15:36:36,829\]\[WARN \]\[r.suppressed \] path: /.kibana/\_search, params: {ignore\_unavail… --- ## [Problem with parsing json in syslog format](https://discuss.elastic.co/t/problem-with-parsing-json-in-syslog-format/252042)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 1:16am UTC](https://discuss.elastic.co/t/problem-with-parsing-json-in-syslog-format/252042 "2020-10-21T01:16:34Z")
Hi, can you please help me with logstash config? input { #tcp { # port =\> 5014 # type =\> syslog #} udp { port =\> 5014 type =\> syslog } } filter { … --- ## [Missing docker metadata in filebeat](https://discuss.elastic.co/t/missing-docker-metadata-in-filebeat/233095)
**Author:** [@eihkoh](https://discuss.elastic.co/u/eihkoh)\ **Replies:** 4\ **Last updated:** [May 19, 2020, 8:11am UTC](https://discuss.elastic.co/t/missing-docker-metadata-in-filebeat/233095 "2020-05-19T08:11:28Z")
Hi all, Somebody experiencing the same problem that filebeat doesn't send any docker metadata for the docker container logging? Symptom: Since docker version 19.x you need to configure "type=container" as filebeat.inp… --- ## [Dropping fields doesnt work](https://discuss.elastic.co/t/dropping-fields-doesnt-work/94469)
**Author:** [@randude](https://discuss.elastic.co/u/randude)\ **Replies:** 4\ **Last updated:** [July 25, 2017, 3:13pm UTC](https://discuss.elastic.co/t/dropping-fields-doesnt-work/94469 "2017-07-25T15:13:37Z")
Hi, I'd like to drop the beat fields. I've used the formal docs and added the processors part but the fields are still in the data for some reason. What am I doing wrong? This is my yaml file for metricbeat 5.5.0: m… --- ## [All shards unavailable after one master of the three left, ES 5.4](https://discuss.elastic.co/t/all-shards-unavailable-after-one-master-of-the-three-left-es-5-4/89352)
**Author:** [@j0hnni3](https://discuss.elastic.co/u/j0hnni3)\ **Replies:** 4\ **Last updated:** [June 18, 2017, 9:19am UTC](https://discuss.elastic.co/t/all-shards-unavailable-after-one-master-of-the-three-left-es-5-4/89352 "2017-06-18T09:19:36Z")
Hello everybody. We has ES 5.4 Cluster on Centos7 In the configuration: 3 master Node and 11 data node (14 nodes, 44 indices, 956 shards). Instances are running multiple elasticsearch nodes on 7 machine (Two Instance p… --- ## [Save a value to variable](https://discuss.elastic.co/t/save-a-value-to-variable/47642)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 4\ **Last updated:** [April 19, 2016, 10:32am UTC](https://discuss.elastic.co/t/save-a-value-to-variable/47642 "2016-04-19T10:32:30Z")
Hi All, Please suggest If it is possible to do a grok & perform a mathematical operation on grok result? Regards, Prateek --- ## [Case sensitivity](https://discuss.elastic.co/t/case-sensitivity/6285)
**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\ **Replies:** 4\ **Last updated:** [January 4, 2012, 2:18pm UTC](https://discuss.elastic.co/t/case-sensitivity/6285 "2012-01-04T14:18:04Z")
Are searches on elasticsearch case sensitive? Right now I'm searching the message field for "Term" and "term" and I get different results. Any way to change this behavior? I would like to be able to search without … --- ## [Unique Count DateTime Day](https://discuss.elastic.co/t/unique-count-datetime-day/122598)
**Author:** [@Danilo1](https://discuss.elastic.co/u/Danilo1)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 6:24pm UTC](https://discuss.elastic.co/t/unique-count-datetime-day/122598 "2018-03-08T18:24:28Z")
Is it possible to use a Unique Count in a field DateTime but only considering the Date not the time? --- ## [Enabling/Disabling \_source field query](https://discuss.elastic.co/t/enabling-disabling-source-field-query/170105)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 5\ **Last updated:** [March 5, 2019, 12:37pm UTC](https://discuss.elastic.co/t/enabling-disabling-source-field-query/170105 "2019-03-05T12:37:36Z")
I have gone through the merits and problems or disabling the \_source field. But my main query is that if I disable the \_source field then what am I supposed to expect as search result query. When I tried this then all I … --- ## [Elasticsearch query not returning the exact value](https://discuss.elastic.co/t/elasticsearch-query-not-returning-the-exact-value/54373)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 6\ **Last updated:** [July 5, 2016, 6:38am UTC](https://discuss.elastic.co/t/elasticsearch-query-not-returning-the-exact-value/54373 "2016-07-05T06:38:09Z")
Unable to get the values from my JSON data. my Data : {"web1":{"Uptime":1295843,"thr":408685,"nx01\_01":{"Uptime":157635,"Name":"nx01\_01","Bytes":14416383831,"TotalConnections":2},"timestamp": "2016-06-28 09:15:24",… --- ## [TCP Transport versus Transport Client settings](https://discuss.elastic.co/t/tcp-transport-versus-transport-client-settings/8709)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 6\ **Last updated:** [August 14, 2012, 7:17pm UTC](https://discuss.elastic.co/t/tcp-transport-versus-transport-client-settings/8709 "2012-08-14T19:17:36Z")
Trying to solve intermittent "NoNodeAvailableException: No node available" errors that occur while searching. Cluster consists of 4 nodes running 0.19.2 using multicast. Client is a singleton TransportClient configure… --- ## [Question about doing a rolling upgrade from 6.8.6 to 7.9.3](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659)
**Author:** [@johnbonanchovy](https://discuss.elastic.co/u/johnbonanchovy)\ **Replies:** 4\ **Last updated:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659 "2021-01-20T15:24:22Z")
Hi, We are preparing to do a rolling upgrade on a fairly large cluster. As part of that, we have done the rolling upgrade on a much smaller development cluster. We left it half upgraded to see how the services will beh… --- ## [Elasticsearch service throwing failed to parse exception while indexing content](https://discuss.elastic.co/t/elasticsearch-service-throwing-failed-to-parse-exception-while-indexing-content/253651)
**Author:** [@PravinC](https://discuss.elastic.co/u/PravinC)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 12:15am UTC](https://discuss.elastic.co/t/elasticsearch-service-throwing-failed-to-parse-exception-while-indexing-content/253651 "2020-11-03T00:15:21Z")
We are trying to index document in Elasticsearch with below structure, { "data": { "blocks": \[ { "block": { "note": "\Test\", "digital-asset-service": "" } }, … --- ## [How to create Multiple users and User roles for Kibana?](https://discuss.elastic.co/t/how-to-create-multiple-users-and-user-roles-for-kibana/122858)
**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 4:05pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-users-and-user-roles-for-kibana/122858 "2018-03-07T16:05:14Z")
Hi, I want to create multiple users and roles for kibana to monitoring the dashboards. So How can I do that? Thanks in Adavance. --- ## [Indexing unstructured data](https://discuss.elastic.co/t/indexing-unstructured-data/122665)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 1\ **Last updated:** [March 6, 2018, 8:22am UTC](https://discuss.elastic.co/t/indexing-unstructured-data/122665 "2018-03-06T08:22:31Z")
Hello,i've already indexed semi\_structured data (Csv Files) to elasticsearch using logstash. is it possible to index unstructured data to elasticsearch using logstash too ? if yes could you bring the documentation for … --- ## [Time Difference between Documents](https://discuss.elastic.co/t/time-difference-between-documents/60401)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 1\ **Last updated:** [September 13, 2016, 4:17pm UTC](https://discuss.elastic.co/t/time-difference-between-documents/60401 "2016-09-13T16:17:48Z")
I've done some searching, and best I can find is that this isn't possible.. We have logs that we are storing, and some of the logs indicate transactions take place as users step through the site. We would benefit from … --- ## [Elasticsearch Aggregation - Return a list of array from documents found](https://discuss.elastic.co/t/elasticsearch-aggregation-return-a-list-of-array-from-documents-found/257990)
**Author:** [@KuntalP](https://discuss.elastic.co/u/KuntalP)\ **Replies:** 3\ **Last updated:** [December 9, 2020, 6:01pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-return-a-list-of-array-from-documents-found/257990 "2020-12-09T18:01:37Z")
Hi All, I am querying a time series data using the aggregation functionality. The data to be queried is of categorical nature. I use date histogram to first create buckets. From these generated buckets, I wish to extra… --- ## [Kibana 7.6 : Reported number of Kibana instance is false](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 8\ **Last updated:** [March 2, 2020, 8:55am UTC](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946 "2020-03-02T08:55:15Z")
Hello there, After 7.6 upgrade, I noticed that the number of Kibana instance in Monitoring tab is not the good one. I checked that my 2 Kibana instance can join the cluster : it's OK. Monitoring still show only one Ki… --- ## [Elasticsearch stops ingesting data when node is down](https://discuss.elastic.co/t/elasticsearch-stops-ingesting-data-when-node-is-down/131804)
**Author:** [@igor.leao1](https://discuss.elastic.co/u/igor.leao1)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-ingesting-data-when-node-is-down/131804 "2018-05-14T23:36:50Z")
Hi there, I have an ES cluster which stops ingesting data every time a node is down. As it is a cluster used for debugging purposes only, it retains logs has no replication for most of its shards. There are 13 data nod… --- ## [Import/Export Visualisation](https://discuss.elastic.co/t/import-export-visualisation/121525)
**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\ **Replies:** 3\ **Last updated:** [March 14, 2018, 4:15am UTC](https://discuss.elastic.co/t/import-export-visualisation/121525 "2018-03-14T04:15:22Z")
Hello, I am trying to export visualizations and dashbeards from Kibana 5.6 installed in the server A to Kibana 5.6 installed in the server B. I have the same number of indexes and the same names. when I try to export t… --- ## [Metric Beat and Packet Beat Clarification](https://discuss.elastic.co/t/metric-beat-and-packet-beat-clarification/97401)
**Author:** [@abirami](https://discuss.elastic.co/u/abirami)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 12:32pm UTC](https://discuss.elastic.co/t/metric-beat-and-packet-beat-clarification/97401 "2017-08-18T12:32:22Z")
Hi All, I want to monitor JVM metrics using metric beat.Can I do that using some filter in process. if any one has done that please share the sample . 2)Using Packet beat , I want to capture traffic running with SCT… --- ## [Log formatting under lumberjack lost in filebeats](https://discuss.elastic.co/t/log-formatting-under-lumberjack-lost-in-filebeats/41296)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 3\ **Last updated:** [February 10, 2016, 3:58am UTC](https://discuss.elastic.co/t/log-formatting-under-lumberjack-lost-in-filebeats/41296 "2016-02-10T03:58:27Z")
Hey all, Ok so filebeats are now using yaml and not json. A while back I followed the advice of the logstash book and formatted my apache logs like this: LogFormat "{ \\ \\"host\\":\\"ref.example.com.example.com\\… --- ## [Logstash-forwarder working](https://discuss.elastic.co/t/logstash-forwarder-working/31707)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 3\ **Last updated:** [October 7, 2015, 10:52am UTC](https://discuss.elastic.co/t/logstash-forwarder-working/31707 "2015-10-07T10:52:48Z")
Hi, I have just started using Logstash-forwarder , I have created key and crt and then want to check whether is is fine or not, input { lumberjack { port =\> 9300 ssl\_certificate =\> "/elkt/software/bkup/logstash-1.5.… --- ## [Show total count on line graph when using split series bucket](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143)
**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 1:54am UTC](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143 "2020-10-30T01:54:14Z")
We have a line graph that shows the occurrence of an event over time, using count on the y axis and a date histogram on the x axis. If we add a split series sub bucket on the data (for example on the field "owner") it sp… --- ## [Beats Load Balancing Query](https://discuss.elastic.co/t/beats-load-balancing-query/44976)
**Author:** [@Chris\_Broll](https://discuss.elastic.co/u/Chris_Broll)\ **Replies:** 2\ **Last updated:** [March 21, 2016, 1:28pm UTC](https://discuss.elastic.co/t/beats-load-balancing-query/44976 "2016-03-21T13:28:12Z")
When I set up \*beat (v1.1) to forwarding to two logstash (v2.2.0) instances in a two node cluster using load balance in the yaml files and then stop the logstash service on host1 I am not seeing any metrics coming in. … --- ## [SNMPTraps for watcher](https://discuss.elastic.co/t/snmptraps-for-watcher/40347)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 2\ **Last updated:** [January 28, 2016, 2:09pm UTC](https://discuss.elastic.co/t/snmptraps-for-watcher/40347 "2016-01-28T14:09:32Z")
Does watcher support sending SNMPTraps as an action? --- ## [Visualizeでの特定点の色を変化させたい](https://discuss.elastic.co/t/visualize/25285)
**Author:** [@Manabu\_Higuchi](https://discuss.elastic.co/u/Manabu_Higuchi)\ **Replies:** 2\ **Last updated:** [July 15, 2015, 1:28am UTC](https://discuss.elastic.co/t/visualize/25285 "2015-07-15T01:28:35Z")
ElasticSearchに入れたデータをKibanaで可視化しているのですが、 特定の点(例えば2015/5/5 11:00:00など)において他の点とは違う色でグラフを表示をしたいです。 データとしてはElasticSearch内に以下のようなindexが保持されています。 | time | value | flag | |------|--------|-----| | ~~ | ~~ | ~~ | | 11:- … --- ## [\[SQL\] Expose \_source in SQL queries](https://discuss.elastic.co/t/sql-expose-source-in-sql-queries/170922)
**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\ **Replies:** 5\ **Last updated:** [March 6, 2019, 3:57pm UTC](https://discuss.elastic.co/t/sql-expose-source-in-sql-queries/170922 "2019-03-06T15:57:08Z")
Hi As far as I can see, it's not possible to select the \_source field in ES SQL. Attempting to do so in 6.5.4 returns an Unknown column exception. This would be a useful feature - in my case I don't want to index the la… --- ## [Move elastic license from one cluster to another](https://discuss.elastic.co/t/move-elastic-license-from-one-cluster-to-another/88034)
**Author:** [@dijam](https://discuss.elastic.co/u/dijam)\ **Replies:** 5\ **Last updated:** [June 20, 2017, 10:52am UTC](https://discuss.elastic.co/t/move-elastic-license-from-one-cluster-to-another/88034 "2017-06-20T10:52:24Z")
We have 5 nodes license and we are running a cluster of 3 nodes. We migrated this set up to new machines and they are running parallely at the moment without license. We wonder how can we migrate the license to the new c… --- ## [Logstash Null Value](https://discuss.elastic.co/t/logstash-null-value/56083)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 5\ **Last updated:** [July 22, 2016, 8:42am UTC](https://discuss.elastic.co/t/logstash-null-value/56083 "2016-07-22T08:42:29Z")
I want to display null value from the below log in Kibana. "Roles changed for user 'AIPTEST\\geetanjali.j.podal' from "" to "ContentAdmin"" I can able to capture at 'https://grokdebug.herokuapp.com/' by using below Patt… --- ## [Authentication role issues](https://discuss.elastic.co/t/authentication-role-issues/94032)
**Author:** [@Sannj](https://discuss.elastic.co/u/Sannj)\ **Replies:** 4\ **Last updated:** [July 25, 2017, 4:30pm UTC](https://discuss.elastic.co/t/authentication-role-issues/94032 "2017-07-25T16:30:31Z")
We are trying to use authentication roles to limit the data that is visible based on a value in that data. It looks like Granted Documents Query is the best option to do so. We have created a new user role - { "rando… --- ## [Kibana Homepage Not Loading](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758)
**Author:** [@guilloryg](https://discuss.elastic.co/u/guilloryg)\ **Replies:** 7\ **Last updated:** [August 31, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758 "2020-08-31T17:43:54Z")
Good Morning, I am running in an issue with the loading of the x.x.x.x:5601/app/home. In IE 11 I get a blank page and with Firefox it get a constant Elastic Loading. Has anyone experienced this issue and solved the pro… --- ## [Pagination using the java api](https://discuss.elastic.co/t/pagination-using-the-java-api/98675)
**Author:** [@YvesC](https://discuss.elastic.co/u/YvesC)\ **Replies:** 1\ **Last updated:** [August 30, 2017, 8:26am UTC](https://discuss.elastic.co/t/pagination-using-the-java-api/98675 "2017-08-30T08:26:42Z")
Hi all, I am currently in the progress of migrating our code to be compatible with ES 5.4 (we came from 2.3) I am using the Java API as described in the elasticsearch documentation (5.4) but came across something weird… --- ## [How to add multiple types to an index Elasticsearch 6.4](https://discuss.elastic.co/t/how-to-add-multiple-types-to-an-index-elasticsearch-6-4/151032)
**Author:** [@Sanjaybg](https://discuss.elastic.co/u/Sanjaybg)\ **Replies:** 2\ **Last updated:** [October 24, 2018, 6:37am UTC](https://discuss.elastic.co/t/how-to-add-multiple-types-to-an-index-elasticsearch-6-4/151032 "2018-10-24T06:37:02Z")
I am using Elasticsearch6.4 Java High Level REST Client. I am creating a index per customer and trying to add multiple types in that on demand. My code for adding type for a module goes like this RestHighLevelClient c… --- ## [How to use ruby code to realize “i = i + 1" operation](https://discuss.elastic.co/t/how-to-use-ruby-code-to-realize-i-i-1-operation/197646)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 9:19am UTC](https://discuss.elastic.co/t/how-to-use-ruby-code-to-realize-i-i-1-operation/197646 "2019-09-04T09:19:30Z")
Hi Experts, I' m using ruby code to parse my target log. Here is the source code: if "\_xmlparsefailure" not in \[tags\]{ ruby { code =\> ' res = \[\] … --- ## [Discover: unknown error, SearchError: unknown error](https://discuss.elastic.co/t/discover-unknown-error-searcherror-unknown-error/194989)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 4:20am UTC](https://discuss.elastic.co/t/discover-unknown-error-searcherror-unknown-error/194989 "2019-08-14T04:20:36Z")
Hi, Kibana is throwing this error for all queries: SearchError: unknown error at http://my-dev-elk:5601/bundles/kibana.bundle.js:2:520531 at processQueue (http://my-dev-elk:5601/built\_assets/dlls/vendors.bundle… --- ## [CURATOR: How to DELETE 2 days ago logs](https://discuss.elastic.co/t/curator-how-to-delete-2-days-ago-logs/173557)
**Author:** [@daniel.gutierrez](https://discuss.elastic.co/u/daniel.gutierrez)\ **Replies:** 3\ **Last updated:** [March 25, 2019, 7:17pm UTC](https://discuss.elastic.co/t/curator-how-to-delete-2-days-ago-logs/173557 "2019-03-25T19:17:48Z")
Hello! I hope someone can help me I need to take snapshot only for 1 day per day and I need to delete logs for 1 day per day In other words I want to take snapshots of today a month ago And delete logs of today a mo… --- ## [Kibana development environment issue](https://discuss.elastic.co/t/kibana-development-environment-issue/172390)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 3\ **Last updated:** [March 15, 2019, 3:13pm UTC](https://discuss.elastic.co/t/kibana-development-environment-issue/172390 "2019-03-15T15:13:30Z")
hi team, just trying to set dev environment and encounter the issue on the stage of installing yarn . it says "Kibana does not support the current Node.js version v10.15.3. Please use Node.js v10.15.2.". Using 6.6.2 --- ## [Creating index pattern loading does not finish in kibana](https://discuss.elastic.co/t/creating-index-pattern-loading-does-not-finish-in-kibana/148070)
**Author:** [@wonki](https://discuss.elastic.co/u/wonki)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 5:02am UTC](https://discuss.elastic.co/t/creating-index-pattern-loading-does-not-finish-in-kibana/148070 "2018-09-13T05:02:47Z")
Hi ! I succeed in create index using filebeat, logstash, elasticsearch and i can see this index in kibana well. But when i create index pattern in kibana, the loading is not finished. Why is this happened? Can you help… --- ## [Tracking any change to any of the multiple tables used in the join to create the index](https://discuss.elastic.co/t/tracking-any-change-to-any-of-the-multiple-tables-used-in-the-join-to-create-the-index/131007)
**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\ **Replies:** 2\ **Last updated:** [May 9, 2018, 9:52am UTC](https://discuss.elastic.co/t/tracking-any-change-to-any-of-the-multiple-tables-used-in-the-join-to-create-the-index/131007 "2018-05-09T09:52:41Z")
Continuing the discussion from JDBC and tracking\_column(s) questions: I want to update the index whenever any of any of the tables used in the join to create the index is updated in MySQL. I'm using jdbc input plugin. … --- ## [Decomissioning node question, does not start moving shards](https://discuss.elastic.co/t/decomissioning-node-question-does-not-start-moving-shards/94624)
**Author:** [@uschellh](https://discuss.elastic.co/u/uschellh)\ **Replies:** 2\ **Last updated:** [August 4, 2017, 7:14am UTC](https://discuss.elastic.co/t/decomissioning-node-question-does-not-start-moving-shards/94624 "2017-08-04T07:14:41Z")
Hello, we want to decomission nodes, i already excluded those nodes from allocation: "cluster.routing.allocation.exclude.\_name" ans also configured each index for the node where it should land (it will be 1 remaining o… --- ## [Kibana - Graph plugin - relevance of vertex distances?](https://discuss.elastic.co/t/kibana-graph-plugin-relevance-of-vertex-distances/48584)
**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\ **Replies:** 2\ **Last updated:** [April 28, 2016, 5:23pm UTC](https://discuss.elastic.co/t/kibana-graph-plugin-relevance-of-vertex-distances/48584 "2016-04-28T17:23:35Z")
In the Kibana Graph plugin, is there any significance to the distance between vertices? For example, the distance that the circled ones here are from the rest of the vertices? --- ## [AWS authentication requires a valid Date or x-amz-date header](https://discuss.elastic.co/t/aws-authentication-requires-a-valid-date-or-x-amz-date-header/43330)
**Author:** [@Azman\_Ahmad](https://discuss.elastic.co/u/Azman_Ahmad)\ **Replies:** 2\ **Last updated:** [March 7, 2016, 2:08am UTC](https://discuss.elastic.co/t/aws-authentication-requires-a-valid-date-or-x-amz-date-header/43330 "2016-03-07T02:08:27Z")
when I snapshots to AWS S3. Has 3 data nodes & 3 master nodes. all 6 nodes yml config aws plugin & aws s3 keys. Thanks in advance. --- ## [Create a map using country codes](https://discuss.elastic.co/t/create-a-map-using-country-codes/186070)
**Author:** [@Andreasky](https://discuss.elastic.co/u/Andreasky)\ **Replies:** 1\ **Last updated:** [June 17, 2019, 5:42pm UTC](https://discuss.elastic.co/t/create-a-map-using-country-codes/186070 "2019-06-17T17:42:50Z")
I want to make a visualisation in Kibana of phone calls made, by using the country code at the beginning of the phone number. Does someone know how to do this? --- ## [APM Node Agent: Exception is captured by APM, but is not being sent to the APM Server](https://discuss.elastic.co/t/apm-node-agent-exception-is-captured-by-apm-but-is-not-being-sent-to-the-apm-server/160595)
**Author:** [@alexpereira](https://discuss.elastic.co/u/alexpereira)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 1:52pm UTC](https://discuss.elastic.co/t/apm-node-agent-exception-is-captured-by-apm-but-is-not-being-sent-to-the-apm-server/160595 "2018-12-14T13:52:27Z")
We added the APM Node in our code inside the file server.js, being the first thing to load. However if there is an exception within the server.js file APM will capture the same but will not send it to the server. The fo… --- ## [Using JSON input filter in visualize](https://discuss.elastic.co/t/using-json-input-filter-in-visualize/137299)
**Author:** [@Ignacio\_Bustamante](https://discuss.elastic.co/u/Ignacio_Bustamante)\ **Replies:** 1\ **Last updated:** [June 26, 2018, 5:00pm UTC](https://discuss.elastic.co/t/using-json-input-filter-in-visualize/137299 "2018-06-26T17:00:58Z")
Hello! I have this field "additional\_info": { "subtype": "a", "app\_version": "1.0", "category": "category\_id", "type": "type\_id" } and i want to show in my data\_table visualize only the type. How can i do that usi… --- ## [Quota for indices](https://discuss.elastic.co/t/quota-for-indices/54706)
**Author:** [@lennylinux](https://discuss.elastic.co/u/lennylinux)\ **Replies:** 1\ **Last updated:** [July 5, 2016, 9:37am UTC](https://discuss.elastic.co/t/quota-for-indices/54706 "2016-07-05T09:37:11Z")
Hi, is there a way to limit indices? For example by number of documents, filesystem size, etc.? Kind regards, Lenny --- ## [Exception: Failed to execute phase](https://discuss.elastic.co/t/exception-failed-to-execute-phase/29375)
**Author:** [@Piyush\_Goyal](https://discuss.elastic.co/u/Piyush_Goyal)\ **Replies:** 1\ **Last updated:** [September 25, 2015, 5:33pm UTC](https://discuss.elastic.co/t/exception-failed-to-execute-phase/29375 "2015-09-25T17:33:22Z")
Hi Costin, Just wanted to check on the feasibility of actually using es-hadoop(spark) and elasticsearch to update a document count of 80 million spread among 32 shards. With the basic default configuration as per docum… --- ## [Send log filebeat, auditbeat, and winlogbeat](https://discuss.elastic.co/t/send-log-filebeat-auditbeat-and-winlogbeat/271226)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 8\ **Last updated:** [April 28, 2021, 8:42am UTC](https://discuss.elastic.co/t/send-log-filebeat-auditbeat-and-winlogbeat/271226 "2021-04-28T08:42:50Z")
hi guys, since i setting my elk stack with elastic security. and now they have ssl/tls and https but my beats family can't send log again. help me how to config beats so they can send log again. [Previous page](https://discuss.elastic.co/top.md?page=972&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=974&per_page=50&period=all)