# Top **URL:** https://discuss.elastic.co/top.md?page=989&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 990 --- ## ["Failed to configure logging" error on start up](https://discuss.elastic.co/t/failed-to-configure-logging-error-on-start-up/18985)
**Author:** [@Peter\_Li](https://discuss.elastic.co/u/Peter_Li)\ **Replies:** 2\ **Last updated:** [July 31, 2014, 4:18pm UTC](https://discuss.elastic.co/t/failed-to-configure-logging-error-on-start-up/18985 "2014-07-31T16:18:40Z")
I have a setup with multiple servers. The file tree for each is like the following: /data/ configs/ elastic-1.yml logging-1.yml scripts/ (empty) elastic-core/ (from distribution) … --- ## [Doubts in Filebeat](https://discuss.elastic.co/t/doubts-in-filebeat/55079)
**Author:** [@Pedro\_Lopes](https://discuss.elastic.co/u/Pedro_Lopes)\ **Replies:** 6\ **Last updated:** [July 11, 2016, 4:39pm UTC](https://discuss.elastic.co/t/doubts-in-filebeat/55079 "2016-07-11T16:39:05Z")
Hello guys, I have a filebeat.yml that works perfectly sending csv files to logstash, and then logstash to elastic. If I add a new file to any of the folders filebeats starts it's magic. But if I add data to the end … --- ## [Set Elastic to search in other language](https://discuss.elastic.co/t/set-elastic-to-search-in-other-language/74696)
**Author:** [@Pabouk](https://discuss.elastic.co/u/Pabouk)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 8:57am UTC](https://discuss.elastic.co/t/set-elastic-to-search-in-other-language/74696 "2017-02-23T08:57:28Z")
Hello there! I'm a new user of Elasticsearch and I'm trying to set my index to work with other language (with czech language). I have read some tutorials about analyzers and tryed to use the example code. The problem i… --- ## [Cannot race. too many values to unpack (expected 2) error while benchmarking](https://discuss.elastic.co/t/cannot-race-too-many-values-to-unpack-expected-2-error-while-benchmarking/327214)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 8\ **Last updated:** [March 10, 2023, 9:02am UTC](https://discuss.elastic.co/t/cannot-race-too-many-values-to-unpack-expected-2-error-while-benchmarking/327214 "2023-03-10T09:02:08Z")
/ /\_/ / \_\_ \`/ / / / / / \[pod/benchmark-rb8nf/benchmark\] / \_, \_/ /\_/ / / / /\_/ / \[pod/benchmark-rb8nf/benchmark\] /\_/ |\_|\\\_\_,\_/\_/\_/\\\_\_, / \[pod/benchmark-rb8nf/benchmark\] /\_\_\_\_/ \[pod/benchmark-rb8nf/benchma… --- ## [SQL commands from Tutorial - SQL command skips "type"](https://discuss.elastic.co/t/sql-commands-from-tutorial-sql-command-skips-type/224582)
**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\ **Replies:** 8\ **Last updated:** [April 3, 2020, 4:26pm UTC](https://discuss.elastic.co/t/sql-commands-from-tutorial-sql-command-skips-type/224582 "2020-04-03T16:26:26Z")
Although we mention Index (library) and type (book) when inserting records, SQL query only mentions index name. Can you please explain this? Thank you POST /\_sql?format=txt { "query": "SELECT \* FROM library WHERE rele… --- ## [Logstash + logstash.service holdoff time over](https://discuss.elastic.co/t/logstash-logstash-service-holdoff-time-over/89713)
**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\ **Replies:** 0\ **Last updated:** [June 16, 2017, 12:26pm UTC](https://discuss.elastic.co/t/logstash-logstash-service-holdoff-time-over/89713 "2017-06-16T12:26:44Z")
Hi, I use Logstash 5.1. My Logstash restart alone. In /var/log/message i see : logstash: Sending Logstash's logs to /var/log/logstash which is now configured via log4j2.properties systemd: logstash.service holdo… --- ## [Global variables in Kibana?](https://discuss.elastic.co/t/global-variables-in-kibana/227023)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [April 8, 2020, 9:36pm UTC](https://discuss.elastic.co/t/global-variables-in-kibana/227023 "2020-04-08T21:36:04Z")
Is this possible to create some global variable for Kibana and use it in search queries? or even there are some buildin variables such as Kibana IP etc? for example I would like to query Kibana such as: some.field:$kib… --- ## [Tags in modules](https://discuss.elastic.co/t/tags-in-modules/156066)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 1\ **Last updated:** [November 12, 2018, 8:45pm UTC](https://discuss.elastic.co/t/tags-in-modules/156066 "2018-11-12T20:45:01Z")
Can we use tags in modules, I was trying to tag the logs in elasticsearch module but the tag is not assigned to the particular path module: elasticsearch server: enabled: true var.paths: \["/var/log/elasticsearch/se… --- ## [Terms aggregation on named queries](https://discuss.elastic.co/t/terms-aggregation-on-named-queries/62595)
**Author:** [@jonsgreen](https://discuss.elastic.co/u/jonsgreen)\ **Replies:** 1\ **Last updated:** [October 10, 2016, 10:56am UTC](https://discuss.elastic.co/t/terms-aggregation-on-named-queries/62595 "2016-10-10T10:56:32Z")
I was hoping to be able to do a terms aggregation on the 'matched\_queries' field that is generated when doing a named query. Since the matched\_queries is added outside the document it is not accessible as a field for a t… --- ## [S3 assets log](https://discuss.elastic.co/t/s3-assets-log/58401)
**Author:** [@luisgzvs](https://discuss.elastic.co/u/luisgzvs)\ **Replies:** 7\ **Last updated:** [August 23, 2016, 5:35pm UTC](https://discuss.elastic.co/t/s3-assets-log/58401 "2016-08-23T17:35:14Z")
Hi guys, I need help with this topic, I have to analice assets\_logs from AWS bucket, I've dowloaded them to my local machine, but the problem is when I use this command to get @timestamp from log message, the log example… --- ## [Is there a way to use APM in ASP.NET Framework 4.6.1](https://discuss.elastic.co/t/is-there-a-way-to-use-apm-in-asp-net-framework-4-6-1/295055)
**Author:** [@Vitor\_Dias](https://discuss.elastic.co/u/Vitor_Dias)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 5:49pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-apm-in-asp-net-framework-4-6-1/295055 "2022-02-07T17:49:59Z")
we have a .net framework 4.6.1 application. Is there any way to install the APM package on it? --- ## [How to do index-time synonyms](https://discuss.elastic.co/t/how-to-do-index-time-synonyms/136405)
**Author:** [@chung](https://discuss.elastic.co/u/chung)\ **Replies:** 5\ **Last updated:** [June 20, 2018, 5:51am UTC](https://discuss.elastic.co/t/how-to-do-index-time-synonyms/136405 "2018-06-20T05:51:12Z")
I am trying to make a synonym for a category so that voucher and gift card mean the same thing in index time. So when users type in voucher or gift card, elasticsearch returns the same results. For some reasons, the set… --- ## [X-pack Watcher email alert with full information stripped from JSON file](https://discuss.elastic.co/t/x-pack-watcher-email-alert-with-full-information-stripped-from-json-file/119667)
**Author:** [@Jay.Dhillon](https://discuss.elastic.co/u/Jay.Dhillon)\ **Replies:** 5\ **Last updated:** [February 19, 2018, 8:17am UTC](https://discuss.elastic.co/t/x-pack-watcher-email-alert-with-full-information-stripped-from-json-file/119667 "2018-02-19T08:17:20Z")
How can define Watcher watches script to detect a keyword from JSON files? and How to include more information from JSON file(From Azure EventHUB)? Currently using below Advanced JSON watch but seems like not working. { … --- ## [Config Error 403: "error":{"message":"blocked by: \[FORBIDDEN/8/index write (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\];","name":"Error","stack":"\[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512)
**Author:** [@Ashish\_Manjrekar](https://discuss.elastic.co/u/Ashish_Manjrekar)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 7:31am UTC](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512 "2021-07-01T07:31:58Z")
Can someone help me understand the below issue. Also, if any resolution available. {"type":"error","@timestamp":"2021-04-25T01:41:28Z","tags":,"pid":3076,"level":"error","error":{"message":"blocked by: \[FORBIDDEN/8/inde… --- ## [Getting error while configuring metricbeat for Oracle module](https://discuss.elastic.co/t/getting-error-while-configuring-metricbeat-for-oracle-module/244402)
**Author:** [@puja](https://discuss.elastic.co/u/puja)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 12:58pm UTC](https://discuss.elastic.co/t/getting-error-while-configuring-metricbeat-for-oracle-module/244402 "2020-08-12T12:58:47Z")
I am using 7.7.0 version of ELK stack and trying to configure Oracle module of metricbeat. Below is my oracle.yml - Module: oracle Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.6/metricbeat-module-oracle.htm… --- ## [How to merge JSON documents when ingesting?](https://discuss.elastic.co/t/how-to-merge-json-documents-when-ingesting/105096)
**Author:** [@colinphillips](https://discuss.elastic.co/u/colinphillips)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 6:33pm UTC](https://discuss.elastic.co/t/how-to-merge-json-documents-when-ingesting/105096 "2017-10-25T18:33:12Z")
I'm new to logstash / beats and I'm wondering how best to go about transforming / merging two JSON documents. Here's an example of what I'm trying to do: Document 1: { "id": 1234, "things": \[ { "id": "1234", "lat… --- ## [Timelion shows 0 count in .monotoring-\* indices](https://discuss.elastic.co/t/timelion-shows-0-count-in-monotoring-indices/89735)
**Author:** [@Nikolay\_Shushkin](https://discuss.elastic.co/u/Nikolay_Shushkin)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 10:48am UTC](https://discuss.elastic.co/t/timelion-shows-0-count-in-monotoring-indices/89735 "2017-06-19T10:48:35Z")
There are .monitoring indices in elasticsearch, but timelion shows 0 count in all of them green open .monitoring-es-2-2017.06.15 pFz6Q-zmR124GWlrBndM4A 1 1 2549064 30425 2.9gb … --- ## [ES 5.x does not create the PID file when starting with bin/elasticsearch -d -p pid](https://discuss.elastic.co/t/es-5-x-does-not-create-the-pid-file-when-starting-with-bin-elasticsearch-d-p-pid/85321)
**Author:** [@Duy\_Do](https://discuss.elastic.co/u/Duy_Do)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 3:50am UTC](https://discuss.elastic.co/t/es-5-x-does-not-create-the-pid-file-when-starting-with-bin-elasticsearch-d-p-pid/85321 "2017-05-11T03:50:06Z")
According the official document Elasticsearch should create a PID file when starting with the command bin/elasticsearch -d -p pid but it does not. ES versions: 5.x OS: macOS Sierra Java: 1.8.0\_91 All the versions 1.x &… --- ## ["Beats input: unhandled exception", :exception=\>#RuntimeError: Unknown frame type: \`48\`](https://discuss.elastic.co/t/beats-input-unhandled-exception-exception-runtimeerror-unknown-frame-type-48/61399)
**Author:** [@rlonberg](https://discuss.elastic.co/u/rlonberg)\ **Replies:** 2\ **Last updated:** [September 23, 2016, 8:39pm UTC](https://discuss.elastic.co/t/beats-input-unhandled-exception-exception-runtimeerror-unknown-frame-type-48/61399 "2016-09-23T20:39:16Z")
Hi All, I've been running the ELK stack successfully for a few weeks now, my setup is: filebeat+winlogbeat+topbeat on remote windows servers --to--\> logstash on a linux env. However, recently my logstash instance has… --- ## [EADDRINUSE error="Address already in use - bind(2) for \\"0.0.0.0\\" port 5044"](https://discuss.elastic.co/t/eaddrinuse-error-address-already-in-use-bind-2-for-0-0-0-0-port-5044/175059)
**Author:** [@Phillip\_Groven](https://discuss.elastic.co/u/Phillip_Groven)\ **Replies:** 3\ **Last updated:** [April 2, 2019, 11:28pm UTC](https://discuss.elastic.co/t/eaddrinuse-error-address-already-in-use-bind-2-for-0-0-0-0-port-5044/175059 "2019-04-02T23:28:43Z")
I am setting up an EFK cluster and filebeats are not being received I believe the error is due to the following EADDRINUSE error="Address already in use - bind(2) for "0.0.0.0" port 5044" when elasticserch and td-agent … --- ## [Timelion problem](https://discuss.elastic.co/t/timelion-problem/53010)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 10:34am UTC](https://discuss.elastic.co/t/timelion-problem/53010 "2016-07-05T10:34:37Z")
Running timelion "first-run" wizard throws the following error: Timelion: Error: in cell #1: \[reduce\_search\_phase\_exception\] \[reduce\] OK Error: in cell #1: \[reduce\_search\_phase\_exception\] \[reduce\] at throwWithCel… --- ## [Logstash 1.5.0 RC3 - Patterns](https://discuss.elastic.co/t/logstash-1-5-0-rc3-patterns/487)
**Author:** [@Szymon\_Raclawicki](https://discuss.elastic.co/u/Szymon_Raclawicki)\ **Replies:** 3\ **Last updated:** [May 11, 2015, 10:39am UTC](https://discuss.elastic.co/t/logstash-1-5-0-rc3-patterns/487 "2015-05-11T10:39:50Z")
Hi Guys, I think I got a bit lost since the upgrade to 1.5.0. Basically, right now I am not sure where are the patterns? Do I need to install logstash-patterns-core? Is there any documentation showing how I can install… --- ## [Logstash querying elasticsearch timeout error](https://discuss.elastic.co/t/logstash-querying-elasticsearch-timeout-error/339085)
**Author:** [@willsy](https://discuss.elastic.co/u/willsy)\ **Replies:** 4\ **Last updated:** [July 31, 2023, 7:09am UTC](https://discuss.elastic.co/t/logstash-querying-elasticsearch-timeout-error/339085 "2023-07-31T07:09:33Z")
Hello, I have the following error; just seeing if anyone knows where i am setting this? i originally put the timeout setting in the testpipeline.conf for logstash. Any help is greatly appreciated \[2023-07-24T11:59:41,3… --- ## [Test for field name containing special characters](https://discuss.elastic.co/t/test-for-field-name-containing-special-characters/226117)
**Author:** [@sampas](https://discuss.elastic.co/u/sampas)\ **Replies:** 4\ **Last updated:** [April 1, 2020, 8:10pm UTC](https://discuss.elastic.co/t/test-for-field-name-containing-special-characters/226117 "2020-04-01T20:10:35Z")
I want to test a field name to see if it contains a "%" character and drop it if it does. I do a KV on web logs, and we regularly see threat actors trying to escape application logic with long strings in the URI, e.g. b… --- ## [Terms stats API](https://discuss.elastic.co/t/terms-stats-api/67508)
**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\ **Replies:** 4\ **Last updated:** [November 30, 2016, 1:59pm UTC](https://discuss.elastic.co/t/terms-stats-api/67508 "2016-11-30T13:59:17Z")
Hi, I've been reading and using the Field stats APi (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-field-stats.html) to retrieve field-level statistics. I couldn't find a similar term-level A… --- ## [Force document on top](https://discuss.elastic.co/t/force-document-on-top/29702)
**Author:** [@Linus\_Pettersson](https://discuss.elastic.co/u/Linus_Pettersson)\ **Replies:** 4\ **Last updated:** [September 21, 2015, 2:30pm UTC](https://discuss.elastic.co/t/force-document-on-top/29702 "2015-09-21T14:30:11Z")
Hi! I would like to put some items first in my search results. Let me explain by giving an example. Example: Let's say I have a forum with pinned items. The pinned items has an order. Now, when I search, I would like… --- ## [Key of Elasticsearch](https://discuss.elastic.co/t/key-of-elasticsearch/52406)
**Author:** [@wldbs0508](https://discuss.elastic.co/u/wldbs0508)\ **Replies:** 6\ **Last updated:** [June 16, 2016, 4:55pm UTC](https://discuss.elastic.co/t/key-of-elasticsearch/52406 "2016-06-16T16:55:01Z")
Hi, I would like to connect my DB with ES through Logstash. My DB doesn't have one unique key but has multiple columns as key. For example, if DB has A, B, C, and D columns and combination of A, B, and C are unique. Howe… --- ## [Convert a legacy template into a composable template?](https://discuss.elastic.co/t/convert-a-legacy-template-into-a-composable-template/276145)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 1:06pm UTC](https://discuss.elastic.co/t/convert-a-legacy-template-into-a-composable-template/276145 "2021-06-16T13:06:07Z")
Hello There is a legacy template with a lot of good default mappings that I want to use as a base (a base template, even though it is rudundent) That being said, I want to use it as a composable template. Is there a wa… --- ## [Unable to connect to Elasticsearch client running locally: receiving 'connection refused' on KOTLIN](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-client-running-locally-receiving-connection-refused-on-kotlin/327215)
**Author:** [@GAETANO\_SIMONELLI](https://discuss.elastic.co/u/GAETANO_SIMONELLI)\ **Replies:** 2\ **Last updated:** [March 8, 2023, 4:05pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-client-running-locally-receiving-connection-refused-on-kotlin/327215 "2023-03-08T16:05:49Z")
I am experiencing connection issues with my Elasticsearch client running locally. Specifically, when I try to connect using localhost in the RestClient.builder, I receive a java.net.connectException: connection refused e… --- ## [Wazuh SIEM + Winlogbeat](https://discuss.elastic.co/t/wazuh-siem-winlogbeat/292490)
**Author:** [@IvanYboa](https://discuss.elastic.co/u/IvanYboa)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 6:21pm UTC](https://discuss.elastic.co/t/wazuh-siem-winlogbeat/292490 "2022-01-07T18:21:08Z")
Hi! I'm new at Elasticsearch and I'm implementing the SIEM Wazuh. The team of wazuh has their own agent to collect the logs, but in the company where I'm working want that some machines run the Wazuh agents and other ma… --- ## [Watcher webhook outlook ssl exception](https://discuss.elastic.co/t/watcher-webhook-outlook-ssl-exception/116114)
**Author:** [@AbdulH](https://discuss.elastic.co/u/AbdulH)\ **Replies:** 2\ **Last updated:** [January 23, 2018, 11:44am UTC](https://discuss.elastic.co/t/watcher-webhook-outlook-ssl-exception/116114 "2018-01-23T11:44:39Z")
I've getting the following error trying to configure the Elasticsearch watcher with webhooks to connect to Microsoft Teams: s\_s\_l\_exception:Unrecognized SSL message, plaintext connection? This is my config: "metadata… --- ## [Race condition](https://discuss.elastic.co/t/race-condition/11173)
**Author:** [@troy](https://discuss.elastic.co/u/troy)\ **Replies:** 2\ **Last updated:** [March 17, 2013, 1:11am UTC](https://discuss.elastic.co/t/race-condition/11173 "2013-03-17T01:11:12Z")
I'm using couchdb for storage for a Node.js app I've written. I was using the couchriver plugin to get data into Elasticsearch from couch, but I wanted to perform some substantial manipulation of the different docume… --- ## [Using Regex in Query via Kibana](https://discuss.elastic.co/t/using-regex-in-query-via-kibana/16796)
**Author:** [@Richard\_Raseley](https://discuss.elastic.co/u/Richard_Raseley)\ **Replies:** 5\ **Last updated:** [June 9, 2014, 4:13pm UTC](https://discuss.elastic.co/t/using-regex-in-query-via-kibana/16796 "2014-06-09T16:13:46Z")
I am having some difficulty in accomplishing a task that should be pretty straight-forward (based on my limited ES / Kibana knowledge) - using regex as part of a query in Kibana. Here (https://gist.github.com/rich… --- ## [Security and AccessControl](https://discuss.elastic.co/t/security-and-accesscontrol/9241)
**Author:** [@TheOutlander\_2](https://discuss.elastic.co/u/TheOutlander_2)\ **Replies:** 5\ **Last updated:** [October 19, 2012, 1:09am UTC](https://discuss.elastic.co/t/security-and-accesscontrol/9241 "2012-10-19T01:09:59Z")
1. Is ElasticSearch PCI DSS compliant? 2. What is the recommended strategy for access control? Is it fail-safe? Thanks, Nick -- --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/297651)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 3\ **Last updated:** [February 19, 2022, 3:31pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/297651 "2022-02-19T15:31:55Z")
Hello Everyone I am unable to start filebeat service, getting below error: filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/usr/lib/systemd/system/filebeat.serv… --- ## [After setting PKI realm on ElasticSearch unable to login to Kibana](https://discuss.elastic.co/t/after-setting-pki-realm-on-elasticsearch-unable-to-login-to-kibana/142434)
**Author:** [@UserSam](https://discuss.elastic.co/u/UserSam)\ **Replies:** 8\ **Last updated:** [August 1, 2018, 7:01am UTC](https://discuss.elastic.co/t/after-setting-pki-realm-on-elasticsearch-unable-to-login-to-kibana/142434 "2018-08-01T07:01:29Z")
I've setup PKI realm on ElasticSearch but after that I'm not able to login to Kibana. It shows the following message: "Login is currently disabled. Administrators should consult the Kibana logs for more details." log … --- ## [prepareCount API deprecated from 2.1. The alternate not working](https://discuss.elastic.co/t/preparecount-api-deprecated-from-2-1-the-alternate-not-working/39058)
**Author:** [@trupti\_mali](https://discuss.elastic.co/u/trupti_mali)\ **Replies:** 3\ **Last updated:** [January 14, 2016, 9:38am UTC](https://discuss.elastic.co/t/preparecount-api-deprecated-from-2-1-the-alternate-not-working/39058 "2016-01-14T09:38:22Z")
Hi, PrepareCount API has been deprecated from 2.1 . I was trying the alternate way of using prepareSearch with setSize as zero. But that didnt seem to work. It basically returned me no values at all. SearchRequestBui… --- ## [Issue in restoring an Elastic Snapshot](https://discuss.elastic.co/t/issue-in-restoring-an-elastic-snapshot/343329)
**Author:** [@girolamo](https://discuss.elastic.co/u/girolamo)\ **Replies:** 7\ **Last updated:** [October 4, 2023, 3:08pm UTC](https://discuss.elastic.co/t/issue-in-restoring-an-elastic-snapshot/343329 "2023-10-04T15:08:18Z")
Hello there, I'm having issues restoring an elasticsearch snapshot. I've tried: POST \_snapshot/snapshot\_repo/snap-EIHidJXeQWuHpnGfzR04Uw/\_restore { "indices": "target\_indicies" } but I've got: { "error" : { "ro… --- ## [Problem parsing Json from Beats](https://discuss.elastic.co/t/problem-parsing-json-from-beats/95177)
**Author:** [@dgoering](https://discuss.elastic.co/u/dgoering)\ **Replies:** 1\ **Last updated:** [July 31, 2017, 1:02pm UTC](https://discuss.elastic.co/t/problem-parsing-json-from-beats/95177 "2017-07-31T13:02:07Z")
Hello I am new to the Elastic stack and am trying to get a fairly simple setup running: logback \> filebeats \> logstash \> elasticsearch \> Kibana I am using the logstash encoder in logback to create log entries as json f… --- ## [Custom datetime picker in Kibana dashboard](https://discuss.elastic.co/t/custom-datetime-picker-in-kibana-dashboard/242833)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 3:17pm UTC](https://discuss.elastic.co/t/custom-datetime-picker-in-kibana-dashboard/242833 "2020-07-31T15:17:21Z")
Hi , When in full screen mode , the date time picker is not visible . Is there any way where I can enable or add custom data time picker in Kibana dashboard ? I checked it is availabke for Kibana-Canvas feature howeve… --- ## [How to aggregate multiple events into single output](https://discuss.elastic.co/t/how-to-aggregate-multiple-events-into-single-output/239536)
**Author:** [@pvaithee07](https://discuss.elastic.co/u/pvaithee07)\ **Replies:** 4\ **Last updated:** [July 21, 2020, 4:42am UTC](https://discuss.elastic.co/t/how-to-aggregate-multiple-events-into-single-output/239536 "2020-07-21T04:42:25Z")
Hi All - I am trying to create a logstash pipeline, that reads all the events in that pipeline, aggregates and produces one single output to elastic search. i/p looks like this - ''' { 'entity': '1212', ... }, { … --- ## [How to calculate score by dividing number of occurences per field length?](https://discuss.elastic.co/t/how-to-calculate-score-by-dividing-number-of-occurences-per-field-length/212625)
**Author:** [@Slawomir\_Balcerzak](https://discuss.elastic.co/u/Slawomir_Balcerzak)\ **Replies:** 4\ **Last updated:** [December 20, 2019, 3:05pm UTC](https://discuss.elastic.co/t/how-to-calculate-score-by-dividing-number-of-occurences-per-field-length/212625 "2019-12-20T15:05:14Z")
I would like to implement my own scoring algorithm using script\_score. It should to take count of occurrences of searched words and divide this number by field length. But I don't know how to gather those two variables f… --- ## [JVM Heap size too large?](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 4:42am UTC](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312 "2019-11-14T04:42:33Z")
Hi, The heap size on all our nodes is set to 30GB, but having read A Heap of Trouble, and looking at the graphs in the Kibana Stack Monitoring application, I believe our heap size is likely too large: The graphs for … --- ## [Kibana iframe url loads and suddenly disappears in chrome](https://discuss.elastic.co/t/kibana-iframe-url-loads-and-suddenly-disappears-in-chrome/98168)
**Author:** [@venkatesanvaishali](https://discuss.elastic.co/u/venkatesanvaishali)\ **Replies:** 4\ **Last updated:** [September 1, 2017, 1:35pm UTC](https://discuss.elastic.co/t/kibana-iframe-url-loads-and-suddenly-disappears-in-chrome/98168 "2017-09-01T13:35:53Z")
Hi, I am using 2 Iframes in my webpage. Both iframes have kibana URL loaded and they are aligned side by side by adjusting webpage width. When i’m trying to load the webpage, both iframes are loading fine. But after 2-3… --- ## [Advanced JSON input of Parent Pipeline Aggregation of Metric Aggregation](https://discuss.elastic.co/t/advanced-json-input-of-parent-pipeline-aggregation-of-metric-aggregation/179080)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 2\ **Last updated:** [May 3, 2019, 9:03am UTC](https://discuss.elastic.co/t/advanced-json-input-of-parent-pipeline-aggregation-of-metric-aggregation/179080 "2019-05-03T09:03:37Z")
When making a normal metric aggregation i can modify the values before plotting them in a line chart via the advanced JSON input like this for example: {"script": { "inline": "Math.abs(\_value)", "lang": "painless"}} Bu… --- ## [APM with Play 2.x Framework](https://discuss.elastic.co/t/apm-with-play-2-x-framework/138511)
**Author:** [@thanghv55](https://discuss.elastic.co/u/thanghv55)\ **Replies:** 2\ **Last updated:** [July 10, 2018, 3:53am UTC](https://discuss.elastic.co/t/apm-with-play-2-x-framework/138511 "2018-07-10T03:53:02Z")
Hi everyone, I want to intergated APM of elastic with Play framework in java, however i only found that apm with tomcat or spring. Please give me some advices. Thanks so much! --- ## [Elasticsearch shared storage advice](https://discuss.elastic.co/t/elasticsearch-shared-storage-advice/68885)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 12:37am UTC](https://discuss.elastic.co/t/elasticsearch-shared-storage-advice/68885 "2016-12-14T00:37:07Z")
Hi there guys I'm configuring an ES cluster ( 3 nodes ) and will required 4TB to store it's data ( data retention ), my idea is to configure a LUN from our storage and map it to the nodes and use OCFS2, I'd like to … --- ## [Return the tokens of a field](https://discuss.elastic.co/t/return-the-tokens-of-a-field/9518)
**Author:** [@Kennedy\_Idialu](https://discuss.elastic.co/u/Kennedy_Idialu)\ **Replies:** 2\ **Last updated:** [November 2, 2012, 2:10am UTC](https://discuss.elastic.co/t/return-the-tokens-of-a-field/9518 "2012-11-02T02:10:36Z")
How can I have the tokens of a particular field returned in the result For example, A GET request curl -XGET 'http://localhost:9200/twitter/tweet/1' returns {"\_index" : "twitter","\_type" : "tweet","\_id" : … --- ## [How Come match\_phrase does not work when "." present?](https://discuss.elastic.co/t/how-come-match-phrase-does-not-work-when-present/187079)
**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\ **Replies:** 6\ **Last updated:** [July 2, 2019, 1:08pm UTC](https://discuss.elastic.co/t/how-come-match-phrase-does-not-work-when-present/187079 "2019-07-02T13:08:39Z")
I have a field called "name". I run a match\_phrase with name query "17p13". It finds a record with exactly that name and another with "(del)17p13", but NOT one with "17p13.1". "name" mapping is set to text. This seems… --- ## [Order By eliminar resultados que cominzan con caracter determinado](https://discuss.elastic.co/t/order-by-eliminar-resultados-que-cominzan-con-caracter-determinado/114550)
**Author:** [@leandrobara](https://discuss.elastic.co/u/leandrobara)\ **Replies:** 6\ **Last updated:** [January 8, 2018, 7:31pm UTC](https://discuss.elastic.co/t/order-by-eliminar-resultados-que-cominzan-con-caracter-determinado/114550 "2018-01-08T19:31:07Z")
Estimados, cuando hago un order by quiero que los resultados que comienzan con acento o caracteres raro, no los muestre. Por ejemplo si hago un order by Z-A quiero que me excluya todos los resultados que comienzan con co… [Previous page](https://discuss.elastic.co/top.md?page=988&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=990&per_page=50&period=all)