# Top **URL:** https://discuss.elastic.co/top.md?page=977&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 978 --- ## [Time difference in last\_run\_metadata\_path file when Logstash and source database are in different timezones](https://discuss.elastic.co/t/time-difference-in-last-run-metadata-path-file-when-logstash-and-source-database-are-in-different-timezones/240190)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 7:35am UTC](https://discuss.elastic.co/t/time-difference-in-last-run-metadata-path-file-when-logstash-and-source-database-are-in-different-timezones/240190 "2020-07-09T07:35:29Z")
Hello, Our ELK Stack is placed in UTC timezone (OS timezone is set to UTC). The database from which we pull the data from using JDBC is in CET (UTC+2) timezone. The config file for the pipeline looks like this: jdbc … --- ## [Using "lte" : "Now" in Watcher Date Range giving Unusual behaviour](https://discuss.elastic.co/t/using-lte-now-in-watcher-date-range-giving-unusual-behaviour/214865)
**Author:** [@Will\_Monkeys](https://discuss.elastic.co/u/Will_Monkeys)\ **Replies:** 3\ **Last updated:** [January 28, 2020, 4:36pm UTC](https://discuss.elastic.co/t/using-lte-now-in-watcher-date-range-giving-unusual-behaviour/214865 "2020-01-28T16:36:35Z")
Hey! I'm trying to set up a Watcher that fires any time a document enter a given index, with the property Command containing the phrase "New Workset". I got a query from the Discover tab \> Inspect, then coped and paste… --- ## [Can't install elasticsearch-analysis-phonetic on Ubuntu](https://discuss.elastic.co/t/cant-install-elasticsearch-analysis-phonetic-on-ubuntu/13878)
**Author:** [@Thomaz\_de\_Oliveira\_d](https://discuss.elastic.co/u/Thomaz_de_Oliveira_d)\ **Replies:** 3\ **Last updated:** [October 9, 2013, 5:15pm UTC](https://discuss.elastic.co/t/cant-install-elasticsearch-analysis-phonetic-on-ubuntu/13878 "2013-10-09T17:15:55Z")
Hi! I was able to correctly install with "bin/plugin -install elasticsearch/elasticsearch-analysis-phonetic" on a Debian machine but on the ubuntu it doesn't seems to work. It corectly installs, but when I try… --- ## [MapperParsingException\[failed to parse\] \]; nested: NotXContentException](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse-nested-notxcontentexception/45340)
**Author:** [@rshaikh](https://discuss.elastic.co/u/rshaikh)\ **Replies:** 0\ **Last updated:** [March 24, 2016, 12:06pm UTC](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse-nested-notxcontentexception/45340 "2016-03-24T12:06:37Z")
Hi, We have deleted and recreate it using new mapping. This was done in development environment to implement new features. Unfortunately, after making these changes we were not able to push data to elastic cluster. W… --- ## [JSON Array by index](https://discuss.elastic.co/t/json-array-by-index/176057)
**Author:** [@Jacob-N](https://discuss.elastic.co/u/Jacob-N)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 10:25am UTC](https://discuss.elastic.co/t/json-array-by-index/176057 "2019-04-10T10:25:57Z")
I am parsing a JSON from http\_poller. The JSON contains an array of coordinates with 3 numbers in the array. Only the first 2 are the lat and longitude and I would like to discard the 3rd number for the time being. Is it… --- ## [ELK Stack 6.6 Kibana did not load properly](https://discuss.elastic.co/t/elk-stack-6-6-kibana-did-not-load-properly/167656)
**Author:** [@groot\_dev](https://discuss.elastic.co/u/groot_dev)\ **Replies:** 2\ **Last updated:** [February 9, 2019, 1:05am UTC](https://discuss.elastic.co/t/elk-stack-6-6-kibana-did-not-load-properly/167656 "2019-02-09T01:05:59Z")
Hi everyone, I am new to ELK Stack and sorry in advance for the trouble. I looked through disscusion and could not resolve my issue anyways. I am on MacOS Mojave 10.14 Installed ES, Logstash and Kibana through brew se… --- ## [Logstash jdbc plugin not installed](https://discuss.elastic.co/t/logstash-jdbc-plugin-not-installed/106800)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 2\ **Last updated:** [November 8, 2017, 6:33am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-not-installed/106800 "2017-11-08T06:33:59Z")
How can I install logstash jdbc plugin.... I enter the logstash directory like below: cd /etc/logstash and then there I write this command bin/logstash-plugin install logstash-input-jdbc as mention in elastic doc ur… --- ## [How to ignore exceptions when bulk update with pyspark if doc doesn't exist](https://discuss.elastic.co/t/how-to-ignore-exceptions-when-bulk-update-with-pyspark-if-doc-doesnt-exist/90739)
**Author:** [@tree](https://discuss.elastic.co/u/tree)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 1:17pm UTC](https://discuss.elastic.co/t/how-to-ignore-exceptions-when-bulk-update-with-pyspark-if-doc-doesnt-exist/90739 "2017-06-27T13:17:05Z")
Hi, I am trying to do an update operation with elasticsearch hadoop package in pyspark. It says on the documentation that if no data is found, an exception is thrown. What is the best way to handle this exception? Or i… --- ## [New install GET works, PUT 'No route to host'](https://discuss.elastic.co/t/new-install-get-works-put-no-route-to-host/68419)
**Author:** [@yannisps](https://discuss.elastic.co/u/yannisps)\ **Replies:** 2\ **Last updated:** [December 8, 2016, 12:08pm UTC](https://discuss.elastic.co/t/new-install-get-works-put-no-route-to-host/68419 "2016-12-08T12:08:12Z")
Installed earlier version and I am trying to create the first index. At each PUT command, I receive a 'No route to host' It is the simplest of the installations with the following information: curl -XGET '192.168.2.1… --- ## [How to aggregate events containing array having duplicate hash in logstash](https://discuss.elastic.co/t/how-to-aggregate-events-containing-array-having-duplicate-hash-in-logstash/144590)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 4\ **Last updated:** [August 16, 2018, 2:15am UTC](https://discuss.elastic.co/t/how-to-aggregate-events-containing-array-having-duplicate-hash-in-logstash/144590 "2018-08-16T02:15:17Z")
The structure of the data is- { brand\_id, { models \[ { model\_id, model\_number, model\_name } \] } } Below is the logstash output. C:\\Program Files\\Elasti… --- ## [Export Everything - Missing scrollId](https://discuss.elastic.co/t/export-everything-missing-scrollid/89348)
**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\ **Replies:** 4\ **Last updated:** [June 15, 2017, 7:58am UTC](https://discuss.elastic.co/t/export-everything-missing-scrollid/89348 "2017-06-15T07:58:51Z")
Hello there, I'm using Kibana 5.4.0 where Kibana is operating behind a web-server and is using x-pack security. I've created some visualizations and dashboards. When I navigate to management-\>Saved Objects and click 'Exp… --- ## [Need opinion on deploying es on a server](https://discuss.elastic.co/t/need-opinion-on-deploying-es-on-a-server/48218)
**Author:** [@satya\_fury](https://discuss.elastic.co/u/satya_fury)\ **Replies:** 4\ **Last updated:** [April 23, 2016, 1:50pm UTC](https://discuss.elastic.co/t/need-opinion-on-deploying-es-on-a-server/48218 "2016-04-23T13:50:43Z")
Hi, I will be deploying a web application based on es on a single server , which we got at our disposal. Its has fair amount of RAM, around 64gigs and good enough processor. First I have a query regarding deploying mul… --- ## [Kibana 5.4 bucket\_script visualization](https://discuss.elastic.co/t/kibana-5-4-bucket-script-visualization/86475)
**Author:** [@Kazark](https://discuss.elastic.co/u/Kazark)\ **Replies:** 1\ **Last updated:** [May 19, 2017, 9:36pm UTC](https://discuss.elastic.co/t/kibana-5-4-bucket-script-visualization/86475 "2017-05-19T21:36:04Z")
I can run this query through the Dev Tools in Kibana 5.4, but I cannot find any way to build a visualization off it: { "query": { "constant\_score": { "filter": { "match": { "activitytype":… --- ## [Derivative aggregation to convert from counter to rate value](https://discuss.elastic.co/t/derivative-aggregation-to-convert-from-counter-to-rate-value/50965)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 1\ **Last updated:** [May 27, 2016, 2:16am UTC](https://discuss.elastic.co/t/derivative-aggregation-to-convert-from-counter-to-rate-value/50965 "2016-05-27T02:16:20Z")
Hi everyone, We are using collectd to gather NIC stats from multiple hosts and ship them to our ES cluster using logstash. The collected data looks as follows: {"@timestamp":"2016-05-25T10:00:30.000+0100", "host":"… --- ## [Slower query performance after upgrade to 6.2.0 ES](https://discuss.elastic.co/t/slower-query-performance-after-upgrade-to-6-2-0-es/147318)
**Author:** [@Tosh](https://discuss.elastic.co/u/Tosh)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 4:58pm UTC](https://discuss.elastic.co/t/slower-query-performance-after-upgrade-to-6-2-0-es/147318 "2018-09-11T16:58:42Z")
Hi , We recently upgraded from elastic 2.3 to 6.2 . The search queries seem to be taking more response time than before for the same number of requests . The difference from the config perspective that we saw was that … --- ## [Parse Elasticsearch json logs in filebeat](https://discuss.elastic.co/t/parse-elasticsearch-json-logs-in-filebeat/322533)
**Author:** [@qwinkler](https://discuss.elastic.co/u/qwinkler)\ **Replies:** 6\ **Last updated:** [January 13, 2023, 2:20pm UTC](https://discuss.elastic.co/t/parse-elasticsearch-json-logs-in-filebeat/322533 "2023-01-13T14:20:29Z")
Hello. I want to properly collect Elasticsearch logs. I have the following architecture. On the Linux node, I have Docker installed. I configured the Journald logging driver using official documentation (Journald loggin… --- ## [Scripted fields - tengo problemas con tomar la fecha del timestap](https://discuss.elastic.co/t/scripted-fields-tengo-problemas-con-tomar-la-fecha-del-timestap/234433)
**Author:** [@Osvaldo\_Mendez](https://discuss.elastic.co/u/Osvaldo_Mendez)\ **Replies:** 6\ **Last updated:** [May 30, 2020, 8:52pm UTC](https://discuss.elastic.co/t/scripted-fields-tengo-problemas-con-tomar-la-fecha-del-timestap/234433 "2020-05-30T20:52:19Z")
Hola Quiero crear un campo calculado en Kibana, pero no me deja recortarlo para dejar solo la fecha, estoy tratando de hacer esto y da error: def fecha = doc\['timestamp'\].value; return fecha.substring(0,9); Saludos, --- ## [Give logstash two different log files with filebeat but i only get one in Elasticsearch](https://discuss.elastic.co/t/give-logstash-two-different-log-files-with-filebeat-but-i-only-get-one-in-elasticsearch/180749)
**Author:** [@Axel\_Kruger](https://discuss.elastic.co/u/Axel_Kruger)\ **Replies:** 6\ **Last updated:** [May 13, 2019, 1:54pm UTC](https://discuss.elastic.co/t/give-logstash-two-different-log-files-with-filebeat-but-i-only-get-one-in-elasticsearch/180749 "2019-05-13T13:54:01Z")
Hey, i'v got the problem that i have only one input in to logstash via filebeat but two difrent logfiles, a liferaylog an a apache Acceess\_log. i can see that filebeat analyse that two files and send it tp logstash. IN… --- ## [Twitter client inside kibana plugin (app or vis)](https://discuss.elastic.co/t/twitter-client-inside-kibana-plugin-app-or-vis/83229)
**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\ **Replies:** 6\ **Last updated:** [May 29, 2017, 2:05pm UTC](https://discuss.elastic.co/t/twitter-client-inside-kibana-plugin-app-or-vis/83229 "2017-05-29T14:05:03Z")
Hi all, I'm trying to import this package: https://www.npmjs.com/package/twitter-node-client inside Kibana to query Twitter API. I need an advice on how to structure this, because if I simply 'npm install' library I've … --- ## [MongoDB + SOLR integration](https://discuss.elastic.co/t/mongodb-solr-integration/5876)
**Author:** [@shreyas](https://discuss.elastic.co/u/shreyas)\ **Replies:** 6\ **Last updated:** [November 17, 2011, 4:26am UTC](https://discuss.elastic.co/t/mongodb-solr-integration/5876 "2011-11-17T04:26:08Z")
Guys, People might have already asked question about ES + MongoDB integration. But google didn't return any result for "mongodb integration" :p So, has anyone successfully integrated mongodb with ES? Is SOLR b… --- ## [Possible to run with EBS instead of instance store?](https://discuss.elastic.co/t/possible-to-run-with-ebs-instead-of-instance-store/196569)
**Author:** [@VBDave](https://discuss.elastic.co/u/VBDave)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 8:31am UTC](https://discuss.elastic.co/t/possible-to-run-with-ebs-instead-of-instance-store/196569 "2019-09-05T08:31:57Z")
Hi there, We're currently running an elastic cluster for an ELK backend, on i3.2xlarge EC2 instances in AWS and using the local Instance Store to store the data partition on, which is generally what is recommended in th… --- ## [Delete .security index](https://discuss.elastic.co/t/delete-security-index/105113)
**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 1:54am UTC](https://discuss.elastic.co/t/delete-security-index/105113 "2017-10-25T01:54:58Z")
How can i delete .security index in 5.4? --- ## [How to query new documents only? Order by \_uid?](https://discuss.elastic.co/t/how-to-query-new-documents-only-order-by--uid/66723)
**Author:** [@pmorch](https://discuss.elastic.co/u/pmorch)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 7:54pm UTC](https://discuss.elastic.co/t/how-to-query-new-documents-only-order-by--uid/66723 "2016-11-21T19:54:35Z")
Hi, total ELK newbie here. I think I'm missing some vital basic information. And it doesn't help that I can't search for e.g. "\_uid" and "@timestamp", only "uid" and "timestamp" in both Google and here in Discuss... An… --- ## [Context Suggester: FST size estimate (RAM)](https://discuss.elastic.co/t/context-suggester-fst-size-estimate-ram/252642)
**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\ **Replies:** 5\ **Last updated:** [October 26, 2020, 9:03am UTC](https://discuss.elastic.co/t/context-suggester-fst-size-estimate-ram/252642 "2020-10-26T09:03:24Z")
I've heard about the high memory (heap) occupancy in case FST. Is there any thumb rule I can use to calculate the size of FST / heap given the amount of data that'll be fed as input to suggester. Any benchmarking studie… --- ## [Restrict communication to elsticsearch cluster using searchguard](https://discuss.elastic.co/t/restrict-communication-to-elsticsearch-cluster-using-searchguard/90317)
**Author:** [@navyagoli](https://discuss.elastic.co/u/navyagoli)\ **Replies:** 5\ **Last updated:** [June 22, 2017, 11:16am UTC](https://discuss.elastic.co/t/restrict-communication-to-elsticsearch-cluster-using-searchguard/90317 "2017-06-22T11:16:40Z")
Hi I would like to restrict elasticsearch cluster communication to certain IPs using searchguard plugin. I have researched alot on this and could not find a solution for this. I found that it is possible with Shi… --- ## [Exporting data from one elk cluster to another elk cluster](https://discuss.elastic.co/t/exporting-data-from-one-elk-cluster-to-another-elk-cluster/62433)
**Author:** [@shankarbala](https://discuss.elastic.co/u/shankarbala)\ **Replies:** 5\ **Last updated:** [October 7, 2016, 9:05pm UTC](https://discuss.elastic.co/t/exporting-data-from-one-elk-cluster-to-another-elk-cluster/62433 "2016-10-07T21:05:47Z")
HI i am trying to import data from one elk cluster to another elk cluster using logstash..but it gives error as below..(i am using logstash 2.4)..here is the logstash conf input { elasticsearch { hosts =\> \["old… --- ## [ES 5.2.2 data node crash (OutOfMemoryError)](https://discuss.elastic.co/t/es-5-2-2-data-node-crash-outofmemoryerror/120415)
**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\ **Replies:** 8\ **Last updated:** [February 19, 2018, 3:31pm UTC](https://discuss.elastic.co/t/es-5-2-2-data-node-crash-outofmemoryerror/120415 "2018-02-19T15:31:44Z")
Hi, I have 4 cold elastic search data nodes that some time receive OutOfMemoryError. It seems to be related to moving indexes to these nodes. The cold nodes spec is: 8 Cores, 32 GB (16 assigned to JVM) 5 spinning disks … --- ## [ILM how to delete index after days](https://discuss.elastic.co/t/ilm-how-to-delete-index-after-days/265490)
**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 12:09am UTC](https://discuss.elastic.co/t/ilm-how-to-delete-index-after-days/265490 "2021-03-01T00:09:39Z")
My Enviroment { "name" : "5D776AA", "cluster\_name" : "rust-cluster", "cluster\_uuid" : "unlQZ9RcTTy34WDJkHZ1wA", "version" : { "number" : "7.10.2", "build\_flavor" : "default", "build\_type" : "deb", … --- ## [Elasticsearch unable to free up heap but taking heap dump freed up 8GB](https://discuss.elastic.co/t/elasticsearch-unable-to-free-up-heap-but-taking-heap-dump-freed-up-8gb/79154)
**Author:** [@mesfin](https://discuss.elastic.co/u/mesfin)\ **Replies:** 3\ **Last updated:** [March 20, 2017, 2:38am UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-free-up-heap-but-taking-heap-dump-freed-up-8gb/79154 "2017-03-20T02:38:24Z")
We had an incident in our ES cluster of 98 data nodes and 3 master nodes. The version of ES is 2.4.2. The cause of the incident was multiple aggregations on an analyzed field run on very big indices. Two nodes had OutOfM… --- ## [How to export everything in kibana 4.0.2 version dashboards](https://discuss.elastic.co/t/how-to-export-everything-in-kibana-4-0-2-version-dashboards/51846)
**Author:** [@sdarbha](https://discuss.elastic.co/u/sdarbha)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 4:15am UTC](https://discuss.elastic.co/t/how-to-export-everything-in-kibana-4-0-2-version-dashboards/51846 "2016-06-13T04:15:03Z")
Hi, We are currently lookinng to export visualization/dashboards from kibana 4.0.2, we found that there is no such option in version 4.0.2. We are planning to upgrade to ES 2.3.3 for which we have to upgrade kibana as … --- ## [\[ANN\] output-status : Monitoring logstash with http](https://discuss.elastic.co/t/ann-output-status-monitoring-logstash-with-http/39859)
**Author:** [@athoune](https://discuss.elastic.co/u/athoune)\ **Replies:** 3\ **Last updated:** [January 25, 2016, 9:22am UTC](https://discuss.elastic.co/t/ann-output-status-monitoring-logstash-with-http/39859 "2016-01-25T09:22:33Z")
Heartbeat is a great tool to provide constant flow of events. But, what can I do with such events? logging to a file and watch the modification date? pushing the event to my monitoring tool? Status page, juste like Ela… --- ## [Highly Custom Distributed Tracing?](https://discuss.elastic.co/t/highly-custom-distributed-tracing/187206)
**Author:** [@Braden\_Rockwell](https://discuss.elastic.co/u/Braden_Rockwell)\ **Replies:** 7\ **Last updated:** [June 28, 2019, 9:12am UTC](https://discuss.elastic.co/t/highly-custom-distributed-tracing/187206 "2019-06-28T09:12:20Z")
So I would love to get distributed tracing working for our application but there is a case here when we do not use the standard infrastructure and move to a websocket. Essentially there are cases when we go \`API --\> Web… --- ## [Elasticsearch 节点数据盘数量不一致导致数据分布异常](https://discuss.elastic.co/t/elasticsearch/148550)
**Author:** [@79bcf509ed50dc69709a](https://discuss.elastic.co/u/79bcf509ed50dc69709a)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 1:47am UTC](https://discuss.elastic.co/t/elasticsearch/148550 "2018-09-19T01:47:26Z")
你好，我的elasticsearch集群有20个节点，其中19个节点，每个节点有3块数据盘，单磁盘使用量在60%左右，剩下的一个节点有1块数据盘，然后发现这个节点磁盘使用量将近90%，请问如何解决类似的问题？ --- ## [Useragent filter plugin not working for subfields?](https://discuss.elastic.co/t/useragent-filter-plugin-not-working-for-subfields/145571)
**Author:** [@prprt](https://discuss.elastic.co/u/prprt)\ **Replies:** 7\ **Last updated:** [August 23, 2018, 2:34pm UTC](https://discuss.elastic.co/t/useragent-filter-plugin-not-working-for-subfields/145571 "2018-08-23T14:34:42Z")
I have the following Useragent filter plugin configuration in Logstash 6.3.2 which does work for my Apache logs, but not for Nginx or HAProxy logs. I have double checked that the referenced field names are correct. My A… --- ## [Centralized pipeline management - pipeline terminating](https://discuss.elastic.co/t/centralized-pipeline-management-pipeline-terminating/116357)
**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 9:28pm UTC](https://discuss.elastic.co/t/centralized-pipeline-management-pipeline-terminating/116357 "2018-01-26T21:28:22Z")
Hello community, I am trying to use the centralize pipeline management feature , I followed the document https://www.elastic.co/guide/en/logstash/6.0/logstash-centralized-pipeline-management.html I have a x-pack licenc… --- ## [Logstash Multiple files config](https://discuss.elastic.co/t/logstash-multiple-files-config/65104)
**Author:** [@brunopsitech](https://discuss.elastic.co/u/brunopsitech)\ **Replies:** 1\ **Last updated:** [November 7, 2016, 3:55am UTC](https://discuss.elastic.co/t/logstash-multiple-files-config/65104 "2016-11-07T03:55:57Z")
Hi, i try to make multiple files for every service. I have two files ( squid.conf and dansguardian.conf ). When i execute logstash with only one config file, i have 63 fiels in Squid and 33 in Dansguardian. But if if put… --- ## [Wild card query with case insensitive search](https://discuss.elastic.co/t/wild-card-query-with-case-insensitive-search/23692)
**Author:** [@Sagar\_Shah](https://discuss.elastic.co/u/Sagar_Shah)\ **Replies:** 1\ **Last updated:** [May 27, 2015, 1:48am UTC](https://discuss.elastic.co/t/wild-card-query-with-case-insensitive-search/23692 "2015-05-27T01:48:22Z")
Hello everyone, We are trying to replace application log storage from postgres db with elastic search. We had two features in postgres that should not get affected. 1. Perform case insensitive search 2. Perform wil… --- ## [Confused about Shingle behavior](https://discuss.elastic.co/t/confused-about-shingle-behavior/9689)
**Author:** [@polyfractal](https://discuss.elastic.co/u/polyfractal)\ **Replies:** 7\ **Last updated:** [November 13, 2012, 10:06pm UTC](https://discuss.elastic.co/t/confused-about-shingle-behavior/9689 "2012-11-13T22:06:46Z")
I'm really struggling to get proper shingle searching to work. I've tried dozens of variations, using text, string\_query, bools, dis\_max. The whole works. I simply cannot get it to function the way that I want. I… --- ## [ECS Format and Index Mappings](https://discuss.elastic.co/t/ecs-format-and-index-mappings/336740)
**Author:** [@lxk3](https://discuss.elastic.co/u/lxk3)\ **Replies:** 1\ **Last updated:** [June 23, 2023, 1:59pm UTC](https://discuss.elastic.co/t/ecs-format-and-index-mappings/336740 "2023-06-23T13:59:57Z")
Hello there, we want to use the ECS log format for our new applications. We already use datastreams with index templates and predefined mappings and I was wondering if we need to write a new mapping for ECS or if there … --- ## [Use of dynamic\_template in \_index\_template](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 7:41pm UTC](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453 "2021-01-21T19:41:59Z")
Hi all, Is it possible to use dynamic\_template in the newly introduced \_index\_template ? If yes, do you have any example of how to use it ? If not, how should I declare some dynamic\_template with the use of \_index\_tem… --- ## [Timestamp on y-axis vs custom field on x-axis](https://discuss.elastic.co/t/timestamp-on-y-axis-vs-custom-field-on-x-axis/185507)
**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\ **Replies:** 4\ **Last updated:** [June 17, 2019, 6:29pm UTC](https://discuss.elastic.co/t/timestamp-on-y-axis-vs-custom-field-on-x-axis/185507 "2019-06-17T18:29:08Z")
I am trying to plot a custom field on the x-axis with the timestamp on the y-axis. I see that I can choose among different fields on the x-axis but the y-axis is fixed to different data metrics like count. How can I cust… --- ## [Liferay and elastic-apm-agent 0.7.0](https://discuss.elastic.co/t/liferay-and-elastic-apm-agent-0-7-0/149278)
**Author:** [@icefish-creativ](https://discuss.elastic.co/u/icefish-creativ)\ **Replies:** 4\ **Last updated:** [September 21, 2018, 1:39pm UTC](https://discuss.elastic.co/t/liferay-and-elastic-apm-agent-0-7-0/149278 "2018-09-21T13:39:10Z")
Hi i testing the Agent with Liferay 7.1.10/Tomcat. Liferay is starting but without function. I'm not sure what's the right Value for this Parameter is = -Delastic.apm.application\_packages=org.example, i have set it to c… --- ## [Elasticsearch 6.2 start but keep throwing an error message](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033)
**Author:** [@branislav](https://discuss.elastic.co/u/branislav)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033 "2018-03-16T11:02:37Z")
Hello, maybe someone encounter this error Feb 08 11:23:20 elasticshsearch04 elasticsearch\[1263\]: at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:291) Feb 08 11:23:20 elasticshsearch04 elasticsearch\[1263\]: … --- ## [Risk on using VPS](https://discuss.elastic.co/t/risk-on-using-vps/32056)
**Author:** [@ccir105](https://discuss.elastic.co/u/ccir105)\ **Replies:** 4\ **Last updated:** [October 13, 2015, 5:43am UTC](https://discuss.elastic.co/t/risk-on-using-vps/32056 "2015-10-13T05:43:27Z")
Hello elastic team. I am using elastic search 1.7 version in a linux VPS with the default configuration. I downloaded the tar file and ran it in my server. Can there any risk of using like this ? --- ## [Failed to deserialize exception response from stream](https://discuss.elastic.co/t/failed-to-deserialize-exception-response-from-stream/12286)
**Author:** [@eonnen](https://discuss.elastic.co/u/eonnen)\ **Replies:** 4\ **Last updated:** [June 7, 2013, 8:34am UTC](https://discuss.elastic.co/t/failed-to-deserialize-exception-response-from-stream/12286 "2013-06-07T08:34:09Z")
In attempting to set up a basic two node cluster, any replication seems to fail. I'm unable to tell exactly why it's failing because the response exception cannot be parsed. If I run a single node, add some data then… --- ## [Using Canvas to conditionally format an element powered by a query based on a previous timeframe of the same query](https://discuss.elastic.co/t/using-canvas-to-conditionally-format-an-element-powered-by-a-query-based-on-a-previous-timeframe-of-the-same-query/226666)
**Author:** [@dgbarrow](https://discuss.elastic.co/u/dgbarrow)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 11:18am UTC](https://discuss.elastic.co/t/using-canvas-to-conditionally-format-an-element-powered-by-a-query-based-on-a-previous-timeframe-of-the-same-query/226666 "2020-04-20T11:18:42Z")
Hi all, I am currently working on a dashboard to enable me to display a traffic light system showing errors by my column "callsite". I have worked out how to conditionally format, and I have worked out how to create a s… --- ## [Problem during running docker build](https://discuss.elastic.co/t/problem-during-running-docker-build/251567)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 11:21am UTC](https://discuss.elastic.co/t/problem-during-running-docker-build/251567 "2020-10-12T11:21:02Z")
Hi, I wanted to implement microservices application with elastic apm using docker so followed this guide. Guide link I am new to docker. However i faced issue running docker-compose up --build. Please help resolve. O… --- ## [How to add max buckets](https://discuss.elastic.co/t/how-to-add-max-buckets/250304)
**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 9:13am UTC](https://discuss.elastic.co/t/how-to-add-max-buckets/250304 "2020-09-29T09:13:23Z")
Hi- I keep getting this error- Is it possible to add the max buckets on kibana? Or do I have to add it on elasticsearch?? Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"too\_many\_buckets\_exception","r… --- ## [Head plugin not working](https://discuss.elastic.co/t/head-plugin-not-working/41533)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [February 11, 2016, 8:39pm UTC](https://discuss.elastic.co/t/head-plugin-not-working/41533 "2016-02-11T20:39:43Z")
I installed head but the browser cannot access the plugin. Here is what i get: ubuntu@ip-10-0-0-230:~$ ./elasticsearch-2.0.0/bin/plugin list Installed plugins in /home/ubuntu/elasticsearch-2.0.0/plugins: - licens… --- ## [How to create a crontab file for user elasticsearch](https://discuss.elastic.co/t/how-to-create-a-crontab-file-for-user-elasticsearch/172107)
**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\ **Replies:** 1\ **Last updated:** [March 13, 2019, 6:32pm UTC](https://discuss.elastic.co/t/how-to-create-a-crontab-file-for-user-elasticsearch/172107 "2019-03-13T18:32:17Z")
I want to run a crontab job on elastic search docker image here is my docker file \[FROM docker.elastic.co/elasticsearch/elasticsearch:6.6.0 ENV PATH=$PATH:/usr/share/elasticsearch/bin RUN yum -y update RUN yum -y in… [Previous page](https://discuss.elastic.co/top.md?page=976&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=978&per_page=50&period=all)