# Top

**URL:** https://discuss.elastic.co/top.md?page=992&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 993

---

## [Error from ES Querystring query when fields are mentioned](https://discuss.elastic.co/t/error-from-es-querystring-query-when-fields-are-mentioned/172365)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 6\
**Last updated:** [March 20, 2019, 8:28am UTC](https://discuss.elastic.co/t/error-from-es-querystring-query-when-fields-are-mentioned/172365 "2019-03-20T08:28:23Z")

</div>

Hi , I have below query which is working fine when I don't specify fields , but when I want to search on few fields then I am getting something like All Shards failed...can you please resolve my issue.. Below is my que…

---

## [Kibana canvasrender options](https://discuss.elastic.co/t/kibana-canvasrender-options/250558)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 4\
**Last updated:** [October 1, 2020, 11:14pm UTC](https://discuss.elastic.co/t/kibana-canvasrender-options/250558 "2020-10-01T23:14:52Z")

</div>

Hello, Is there documentation about canvasrender options? I am trying to change the filling color of a gauge in canvas.

---

## [Support for ECK with a PSP](https://discuss.elastic.co/t/support-for-eck-with-a-psp/249454)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 4\
**Last updated:** [September 23, 2020, 6:18am UTC](https://discuss.elastic.co/t/support-for-eck-with-a-psp/249454 "2020-09-23T06:18:05Z")

</div>

I am trying to use ECK with PSP enabled in my self-hosted kubernetes cluster. It does not seem to work, and it has a weird deployment method of using a stateful set to deploy additional privileged containers. So, what p…

---

## [Index pattern - circuit break and cannot read property of null](https://discuss.elastic.co/t/index-pattern-circuit-break-and-cannot-read-property-of-null/189285)

<div class="topic-metadata">

**Author:** [@Simran\_Chauhan](https://discuss.elastic.co/u/Simran_Chauhan)\
**Replies:** 4\
**Last updated:** [July 10, 2019, 4:51am UTC](https://discuss.elastic.co/t/index-pattern-circuit-break-and-cannot-read-property-of-null/189285 "2019-07-10T04:51:54Z")

</div>

Hello , I have documented API's which include which tags they belong to, their request and response parameters, description, hostname. each API goes up to 2000+ lines and up to date, I have pushed approximately 200 such…

---

## [Csv filter convert to date doesn't work](https://discuss.elastic.co/t/csv-filter-convert-to-date-doesnt-work/105609)

<div class="topic-metadata">

**Author:** [@szgaljic](https://discuss.elastic.co/u/szgaljic)\
**Replies:** 4\
**Last updated:** [October 31, 2017, 6:04am UTC](https://discuss.elastic.co/t/csv-filter-convert-to-date-doesnt-work/105609 "2017-10-31T06:04:18Z")

</div>

I have a column called Birthday that is formatted as dd/MM/yyyy (i.e., 3/8/1983) and would like Logstash to treat this as a date when passing to Elasticsearch so the mapping is auto-generated as a date. This does not wo…

---

## [Grokking log file](https://discuss.elastic.co/t/grokking-log-file/51751)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 4\
**Last updated:** [June 3, 2016, 6:15am UTC](https://discuss.elastic.co/t/grokking-log-file/51751 "2016-06-03T06:15:41Z")

</div>

I have been using logstash to read a log file in which I have come across with some difficulty in grokking the log statement. The log pattern is like this "20160401-00:00:00","abc3ap5a","AB2","EAP-Production(Productio…

---

## [Installing elasticsearch logstash and kibana on a linux server error](https://discuss.elastic.co/t/installing-elasticsearch-logstash-and-kibana-on-a-linux-server-error/42931)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 4\
**Last updated:** [February 28, 2016, 10:29pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-logstash-and-kibana-on-a-linux-server-error/42931 "2016-02-28T22:29:27Z")

</div>

Hi, I was trying to install elastic search on a Linux server..however i get the following error saying it cannot find the java path which: no java in (/sbin:/usr/sbin:/bin:/usr/bin) Could not find any executable java…

---

## [Strange error message. To many dynamic script](https://discuss.elastic.co/t/strange-error-message-to-many-dynamic-script/207730)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 5\
**Last updated:** [November 15, 2019, 9:49pm UTC](https://discuss.elastic.co/t/strange-error-message-to-many-dynamic-script/207730 "2019-11-15T21:49:29Z")

</div>

Hello, guys, I am using the Palo Alto and Cisco ASA module in file beats and I suddenly started getting the following error message. error.message \[script\] Too many dynamic script compilations within, max: \[100/1m\]; pl…

---

## [Kibana doesn't see new index from elastic](https://discuss.elastic.co/t/kibana-doesnt-see-new-index-from-elastic/164027)

<div class="topic-metadata">

**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\
**Replies:** 5\
**Last updated:** [January 13, 2019, 5:56pm UTC](https://discuss.elastic.co/t/kibana-doesnt-see-new-index-from-elastic/164027 "2019-01-13T17:56:16Z")

</div>

Hi, I have created new index template on elastic search: "PUT /\_template/abc { "index\_patterns": \["abc\*"\], "mappings" : { "\_doc" : { "properties" : { "@timestamp" : { "type" : "date" }, "@version" : { "type" …

---

## [Is there an easy way to change the Lifecycle Policy of a Fleet managed data stream?](https://discuss.elastic.co/t/is-there-an-easy-way-to-change-the-lifecycle-policy-of-a-fleet-managed-data-stream/316941)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [October 24, 2022, 4:09pm UTC](https://discuss.elastic.co/t/is-there-an-easy-way-to-change-the-lifecycle-policy-of-a-fleet-managed-data-stream/316941 "2022-10-24T16:09:18Z")

</div>

Hello, I'm starting to use the Fleet Server and the Elastic Agent to be able to use some integrations and because of that I'm also using data streams for the first time. I have a fleet server and one agent running wher…

---

## [\[Metricbeat System\] Host overview does not display correct disk usage](https://discuss.elastic.co/t/metricbeat-system-host-overview-does-not-display-correct-disk-usage/115319)

<div class="topic-metadata">

**Author:** [@garin](https://discuss.elastic.co/u/garin)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 1:02pm UTC](https://discuss.elastic.co/t/metricbeat-system-host-overview-does-not-display-correct-disk-usage/115319 "2018-02-05T13:02:04Z")

</div>

When I view \[Metricbeat System\] Host overview , all the file paths give the same percentage number. I noticed that system.filesystem.used.pct is set to 0.18 for every single system.filesystem.mount\_point that contain…

---

## [Upgrade 1.7.5 to 5.X](https://discuss.elastic.co/t/upgrade-1-7-5-to-5-x/116679)

<div class="topic-metadata">

**Author:** [@Daniel\_Rodriguez](https://discuss.elastic.co/u/Daniel_Rodriguez)\
**Replies:** 2\
**Last updated:** [January 24, 2018, 8:23am UTC](https://discuss.elastic.co/t/upgrade-1-7-5-to-5-x/116679 "2018-01-24T08:23:22Z")

</div>

Elasticsearch version (bin/elasticsearch --version): Version: 2.4.6, Build: 5376dca/2017-07-18T12:17:44Z, JVM: 1.8.0\_151 Plugins installed: \[none\] JVM version (java -version): Version: 2.4.6, Build: 5376dca/2017-07-1…

---

## [Dynamic index not working according to month](https://discuss.elastic.co/t/dynamic-index-not-working-according-to-month/105980)

<div class="topic-metadata">

**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 9:32am UTC](https://discuss.elastic.co/t/dynamic-index-not-working-according-to-month/105980 "2017-11-01T09:32:39Z")

</div>

Hi, I have below define configuration input { beats { port =\> "5051" type =\> "haproxy\_66" } } output { if \[type\] == "haproxy\_66" { elasticsearch { hosts =\> "127.0.0.1:9200" index =\> "haproxy\_66-%{+YYYY-MM-dd}…

---

## [Mapping fields from logstash](https://discuss.elastic.co/t/mapping-fields-from-logstash/89251)

<div class="topic-metadata">

**Author:** [@akuznetsov](https://discuss.elastic.co/u/akuznetsov)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 3:53pm UTC](https://discuss.elastic.co/t/mapping-fields-from-logstash/89251 "2017-06-15T15:53:33Z")

</div>

hello, colleagues, We got a problem with logstash events. we can't save it in elasticsearch when we use ruby filter version elasticsearch is 5.2.2 logstash config ... filter { json { source …

---

## [5.4, "None of the configured nodes are available", occurs only randomly](https://discuss.elastic.co/t/5-4-none-of-the-configured-nodes-are-available-occurs-only-randomly/87180)

<div class="topic-metadata">

**Author:** [@sina309](https://discuss.elastic.co/u/sina309)\
**Replies:** 2\
**Last updated:** [May 31, 2017, 10:41am UTC](https://discuss.elastic.co/t/5-4-none-of-the-configured-nodes-are-available-occurs-only-randomly/87180 "2017-05-31T10:41:44Z")

</div>

Using ES 5.4, the configuration for local development is always fine, but starting the app in a production cluster giving me SOMETIMES: "None of the configured nodes are available: \[{#transport#-1}{mmm444333-IsVVBBFF}{…

---

## [Possible to rename Doctype](https://discuss.elastic.co/t/possible-to-rename-doctype/58766)

<div class="topic-metadata">

**Author:** [@newbie\_here](https://discuss.elastic.co/u/newbie_here)\
**Replies:** 2\
**Last updated:** [October 14, 2016, 8:21am UTC](https://discuss.elastic.co/t/possible-to-rename-doctype/58766 "2016-10-14T08:21:25Z")

</div>

Hi, I have a case in my streaming data where I need to rename my doctype to another for a temporary amount of time? Is it possible to rename the doctype of the index without disturbing other aspects of the Index.?

---

## [Error when creating email action with data attachment](https://discuss.elastic.co/t/error-when-creating-email-action-with-data-attachment/48676)

<div class="topic-metadata">

**Author:** [@eeivin](https://discuss.elastic.co/u/eeivin)\
**Replies:** 2\
**Last updated:** [April 28, 2016, 5:01pm UTC](https://discuss.elastic.co/t/error-when-creating-email-action-with-data-attachment/48676 "2016-04-28T17:01:58Z")

</div>

I have configured the following action for a watcher "actions" : { "watcher\_email" : { "email": { …

---

## [Read past EOF exception on .tis and .fdt file](https://discuss.elastic.co/t/read-past-eof-exception-on-tis-and-fdt-file/22129)

<div class="topic-metadata">

**Author:** [@Philipp\_Knobel](https://discuss.elastic.co/u/Philipp_Knobel)\
**Replies:** 2\
**Last updated:** [February 18, 2015, 6:30pm UTC](https://discuss.elastic.co/t/read-past-eof-exception-on-tis-and-fdt-file/22129 "2015-02-18T18:30:26Z")

</div>

Hi all, we recently had an issue with ES that it reported a file corruption (more specifically a read past EOF error) after some imports/deletion for a longer timeframe. ES reported on a few nodes a long garbage c…

---

## [High level rest client facing Connection refused when running docker image](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187)

<div class="topic-metadata">

**Author:** [@tutorj](https://discuss.elastic.co/u/tutorj)\
**Replies:** 1\
**Last updated:** [October 15, 2019, 7:20am UTC](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187 "2019-10-15T07:20:19Z")

</div>

Dear community, I'm new to elastic & i'm trying to cloud-ize my application via docker then kubernetes. I've built the same Springboot app as: To test this app: 1. Pull docker image a. docker pull docker.elastic.…

---

## [Security\_exception while Restoring Snapshot | ES 8.3.2](https://discuss.elastic.co/t/security-exception-while-restoring-snapshot-es-8-3-2/322511)

<div class="topic-metadata">

**Author:** [@zeus7](https://discuss.elastic.co/u/zeus7)\
**Replies:** 3\
**Last updated:** [January 5, 2023, 11:24am UTC](https://discuss.elastic.co/t/security-exception-while-restoring-snapshot-es-8-3-2/322511 "2023-01-05T11:24:26Z")

</div>

I m trying to restore snapshot from version 6.2.4 to 8.3.2, getting error : { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "current license…

---

## [Configure filebeat nginx module with ansible role](https://discuss.elastic.co/t/configure-filebeat-nginx-module-with-ansible-role/264661)

<div class="topic-metadata">

**Author:** [@elster](https://discuss.elastic.co/u/elster)\
**Replies:** 3\
**Last updated:** [February 19, 2021, 2:21pm UTC](https://discuss.elastic.co/t/configure-filebeat-nginx-module-with-ansible-role/264661 "2021-02-19T14:21:48Z")

</div>

Dear experts, Can you please lead me into the right direction how I have to customize the GitHub - elastic/ansible-beats: Ansible Beats Role role so that the nginx module is enabled and working? Thanks and br, Elmar

---

## [Curator 5.4 SSL module is not available](https://discuss.elastic.co/t/curator-5-4-ssl-module-is-not-available/108009)

<div class="topic-metadata">

**Author:** [@nradonicich](https://discuss.elastic.co/u/nradonicich)\
**Replies:** 3\
**Last updated:** [November 17, 2017, 4:07am UTC](https://discuss.elastic.co/t/curator-5-4-ssl-module-is-not-available/108009 "2017-11-17T04:07:57Z")

</div>

Hello, Installed curator 5.4 to manage a new ES6 instance (was RC1 now GA). When running curator against ES6 with X-Pack security (SSL enabled) an error is received from urllib3 seen from below debug log. This is on a RH…

---

## [Optimizing ES on AWS, frustrated & expensive](https://discuss.elastic.co/t/optimizing-es-on-aws-frustrated-expensive/29503)

<div class="topic-metadata">

**Author:** [@William\_Flanagan](https://discuss.elastic.co/u/William_Flanagan)\
**Replies:** 3\
**Last updated:** [September 29, 2015, 1:01pm UTC](https://discuss.elastic.co/t/optimizing-es-on-aws-frustrated-expensive/29503 "2015-09-29T13:01:22Z")

</div>

Hi all, We have 3 nodes running as r3.2xlarge (61GB RAM), with EBS storage. We're regularly getting Failed node errors due to out of memory concerns. We are doing aggregations on documents that are significant size (H…

---

## [Having problem enable logstash to talk to redis](https://discuss.elastic.co/t/having-problem-enable-logstash-to-talk-to-redis/25585)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 3\
**Last updated:** [July 15, 2015, 8:44am UTC](https://discuss.elastic.co/t/having-problem-enable-logstash-to-talk-to-redis/25585 "2015-07-15T08:44:39Z")

</div>

Hi, i installed logstash as a shipper on a window box with the help of nssm, and configured as below: input { file { type =\> "autolog" path =\> "E:/elkcluster/log" } } output { redis { host =\> "xxx.xxx.xxx.xxx…

---

## [Rally 2.0.2 released](https://discuss.elastic.co/t/rally-2-0-2-released/253404)

<div class="topic-metadata">

**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 8:59am UTC](https://discuss.elastic.co/t/rally-2-0-2-released/253404 "2020-10-27T08:59:09Z")

</div>

We have just released Rally 2.0.2. This is mostly a bug fix release also adding a few enhancements: The force-merge operation supports a polling mode which is useful if an intermediate proxy is in between the client an…

---

## [Kibana Visualization for list of string values](https://discuss.elastic.co/t/kibana-visualization-for-list-of-string-values/192426)

<div class="topic-metadata">

**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 6:44pm UTC](https://discuss.elastic.co/t/kibana-visualization-for-list-of-string-values/192426 "2019-07-29T18:44:37Z")

</div>

Hi, I have list of values for each columns as shown in the reference screenshot above. But while plotting pie-chart, or any visualization, it is just counting the number of records. Reference of Table Visualization o…

---

## [POST form data with Logstash http\_poller input plug-in](https://discuss.elastic.co/t/post-form-data-with-logstash-http-poller-input-plug-in/102362)

<div class="topic-metadata">

**Author:** [@Invigor](https://discuss.elastic.co/u/Invigor)\
**Replies:** 1\
**Last updated:** [October 1, 2017, 3:03am UTC](https://discuss.elastic.co/t/post-form-data-with-logstash-http-poller-input-plug-in/102362 "2017-10-01T03:03:43Z")

</div>

Hi, I'm trying to use the http\_poller input plug-in to recreate the curl statement below. curl --user xps\_client: --basic --data "username=admin&password=admin&scope=XPS\_API\_ALL&grant\_type=password" http://xps.invigori…

---

## [Catch-22 with minimum\_master\_nodes setting](https://discuss.elastic.co/t/catch-22-with-minimum-master-nodes-setting/31478)

<div class="topic-metadata">

**Author:** [@vhj](https://discuss.elastic.co/u/vhj)\
**Replies:** 7\
**Last updated:** [October 2, 2015, 2:18pm UTC](https://discuss.elastic.co/t/catch-22-with-minimum-master-nodes-setting/31478 "2015-10-02T14:18:52Z")

</div>

In my three node cluster I have minimum\_master\_nodes set to 2. Occasionally I need to drop down to 1 node for maintenance purposes. If I forget to set the minimum back to 1 before doing this then I end up stuck. Attem…

---

## [How to backup ES cluster](https://discuss.elastic.co/t/how-to-backup-es-cluster/24256)

<div class="topic-metadata">

**Author:** [@Nilesh\_Date](https://discuss.elastic.co/u/Nilesh_Date)\
**Replies:** 7\
**Last updated:** [July 1, 2015, 11:29am UTC](https://discuss.elastic.co/t/how-to-backup-es-cluster/24256 "2015-07-01T11:29:22Z")

</div>

I saw the documentation in below link regarding backing up cluster . https://www.elastic.co/guide/en/elasticsearch/guide/master/backing-up-your-cluster.html It says we can create shared repository to backup cluster. …

---

## [How to delete documents from Elasticsearch in Spark?](https://discuss.elastic.co/t/how-to-delete-documents-from-elasticsearch-in-spark/22986)

<div class="topic-metadata">

**Author:** [@dmitriyf](https://discuss.elastic.co/u/dmitriyf)\
**Replies:** 1\
**Last updated:** [March 30, 2015, 5:55pm UTC](https://discuss.elastic.co/t/how-to-delete-documents-from-elasticsearch-in-spark/22986 "2015-03-30T17:55:22Z")

</div>

Hello, I would like to delete documents from Elasticsearch in Spark. I found that this feature seems to be planned for elasticsearch-hadoop v2.1.0.Beta4 https://github.com/elastic/elasticsearch-hadoop/issues/348 C…

---

## [ElasticSearch distinct results by multiple fields with pagination](https://discuss.elastic.co/t/elasticsearch-distinct-results-by-multiple-fields-with-pagination/277455)

<div class="topic-metadata">

**Author:** [@adolbik](https://discuss.elastic.co/u/adolbik)\
**Replies:** 2\
**Last updated:** [July 3, 2021, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-distinct-results-by-multiple-fields-with-pagination/277455 "2021-07-03T07:52:08Z")

</div>

I have index with bunch of events (user viewed page, clicked something and etc.). I have a page in the system where I need to display uniq results (only one row per user + event + itemId). It means if we have 7 rows like…

---

## [ES Docker unsafe memory access](https://discuss.elastic.co/t/es-docker-unsafe-memory-access/153058)

<div class="topic-metadata">

**Author:** [@pciruzzi](https://discuss.elastic.co/u/pciruzzi)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 2:08pm UTC](https://discuss.elastic.co/t/es-docker-unsafe-memory-access/153058 "2018-10-22T14:08:53Z")

</div>

Hi, I'm using Docker Compose to start an ES (Version 5.5.3) for development. I followed the guide to do it from here. The problem is that, after some time, I get an error: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHa…

---

## [Getting error while trying to create knn index on elasticsearch version 8.7.1](https://discuss.elastic.co/t/getting-error-while-trying-to-create-knn-index-on-elasticsearch-version-8-7-1/342101)

<div class="topic-metadata">

**Author:** [@Sharad\_Nautiyal](https://discuss.elastic.co/u/Sharad_Nautiyal)\
**Replies:** 4\
**Last updated:** [September 4, 2023, 9:27am UTC](https://discuss.elastic.co/t/getting-error-while-trying-to-create-knn-index-on-elasticsearch-version-8-7-1/342101 "2023-09-04T09:27:08Z")

</div>

Below is the request I am sending while creating knn index: PUT posting { "settings": { "index": { "number\_of\_shards" :20, "number\_of\_replicas": 1, "knn":{ "algo\_param":{ "ef\_se…

---

## [Elastic Agent with Private Certificate Still not working](https://discuss.elastic.co/t/elastic-agent-with-private-certificate-still-not-working/246515)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 4:57pm UTC](https://discuss.elastic.co/t/elastic-agent-with-private-certificate-still-not-working/246515 "2020-09-02T16:57:28Z")

</div>

Hello there, I´m now using a private certificate (GoDaddy) and even so, I cannot make it to work. Bellow I got my ELK stack using the private certificate: Bellow I got the first step towards the enrolling: Bellow…

---

## [Docker Kibana 5 lacks x-pack?](https://discuss.elastic.co/t/docker-kibana-5-lacks-x-pack/66110)

<div class="topic-metadata">

**Author:** [@jmkgreen](https://discuss.elastic.co/u/jmkgreen)\
**Replies:** 4\
**Last updated:** [November 16, 2016, 9:35am UTC](https://discuss.elastic.co/t/docker-kibana-5-lacks-x-pack/66110 "2016-11-16T09:35:41Z")

</div>

According to https://www.elastic.co/guide/en/kibana/current/docker.html the Docker image of Kibana:5 includes x-pack. I accidentally built a container based on kibana:5 and installed x-pack manually. Comparing this wit…

---

## [Range query speed very slow](https://discuss.elastic.co/t/range-query-speed-very-slow/46400)

<div class="topic-metadata">

**Author:** [@KennFalcon](https://discuss.elastic.co/u/KennFalcon)\
**Replies:** 4\
**Last updated:** [April 7, 2016, 12:08pm UTC](https://discuss.elastic.co/t/range-query-speed-very-slow/46400 "2016-04-07T12:08:52Z")

</div>

I put about 1,000,000,000 data into a index of elasticsearch. The index has 10 shards. Each data has a field that is a time and the time is not analyzed. I range query data by the time. I use 100 threads to search it. T…

---

## [Replace analyzer on \_all field](https://discuss.elastic.co/t/replace-analyzer-on--all-field/20156)

<div class="topic-metadata">

**Author:** [@lasseschou](https://discuss.elastic.co/u/lasseschou)\
**Replies:** 4\
**Last updated:** [October 31, 2014, 8:25am UTC](https://discuss.elastic.co/t/replace-analyzer-on--all-field/20156 "2014-10-31T08:25:46Z")

</div>

Hi, I have a lot of data in my ES cluster. I'm using the \_all field for general search in my documents, but I recently found out that the standard analyzer doesn't tokenize words with dots inside (ex: www.google.com…

---

## [I can't connect my Logstash to ES Stack Monitoring please help](https://discuss.elastic.co/t/i-cant-connect-my-logstash-to-es-stack-monitoring-please-help/323465)

<div class="topic-metadata">

**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\
**Replies:** 6\
**Last updated:** [January 19, 2023, 7:43am UTC](https://discuss.elastic.co/t/i-cant-connect-my-logstash-to-es-stack-monitoring-please-help/323465 "2023-01-19T07:43:22Z")

</div>

I check the status of metricbeat, it says node\_stats/node\_stats.go:73 json: cannot unmarshal object into Go struct field .version of type string and could not fetch node pipelines: HTTP error 405 in : 405 Method…

---

## [Need help to sync between local instance and a remote one](https://discuss.elastic.co/t/need-help-to-sync-between-local-instance-and-a-remote-one/120296)

<div class="topic-metadata">

**Author:** [@itzik16](https://discuss.elastic.co/u/itzik16)\
**Replies:** 6\
**Last updated:** [February 17, 2018, 6:10pm UTC](https://discuss.elastic.co/t/need-help-to-sync-between-local-instance-and-a-remote-one/120296 "2018-02-17T18:10:05Z")

</div>

Hello, Im working on a project which collects temperature and humidity data from 47 sensors every 10 seconds and put the data from each sensor to his relative index (a0, a1,a2 etc..) with a timestamp I wrote a script t…

---

## [Filter query with bucketing performance optimization help needed](https://discuss.elastic.co/t/filter-query-with-bucketing-performance-optimization-help-needed/43179)

<div class="topic-metadata">

**Author:** [@spodgurskiy](https://discuss.elastic.co/u/spodgurskiy)\
**Replies:** 6\
**Last updated:** [March 3, 2016, 6:51pm UTC](https://discuss.elastic.co/t/filter-query-with-bucketing-performance-optimization-help-needed/43179 "2016-03-03T18:51:02Z")

</div>

Hello. We are running a ES cluster with 4 nodes, 2 shards, 3 indexes. Each index contains about 60Gb of data. I need to run a query with a complex filter but empty query part (scoring is not needed at all). The idea…

---

## [Words with some special character arenot displayed well after elasticsearch injection](https://discuss.elastic.co/t/words-with-some-special-character-arenot-displayed-well-after-elasticsearch-injection/276025)

<div class="topic-metadata">

**Author:** [@F\_Abde](https://discuss.elastic.co/u/F_Abde)\
**Replies:** 8\
**Last updated:** [June 16, 2021, 11:49pm UTC](https://discuss.elastic.co/t/words-with-some-special-character-arenot-displayed-well-after-elasticsearch-injection/276025 "2021-06-16T23:49:52Z")

</div>

Hello, I need you help, My data looks like this (My json files) {"index": {"\_id":2530}} {"visitor\_id": "4395667", "timestamp": "2020-08-07T10:24:00Z", "station\_id": "Place A"} {"index": {"\_id":2531}} {"visitor\_id": "43…

---

## [Generate PDF Report Fails](https://discuss.elastic.co/t/generate-pdf-report-fails/263537)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 10:56pm UTC](https://discuss.elastic.co/t/generate-pdf-report-fails/263537 "2021-02-08T22:56:55Z")

</div>

Hello, I have checked previous posts but still cannot find a solution. Kibana/Elastic version - 7.9.1 5 Elastic nodes 2 Kibana nodes Platinum licenses When I try to generate a pdf report, it fails. I also have a s…

---

## [I want to add a button to the dashboard of kibana](https://discuss.elastic.co/t/i-want-to-add-a-button-to-the-dashboard-of-kibana/208250)

<div class="topic-metadata">

**Author:** [@kobaya](https://discuss.elastic.co/u/kobaya)\
**Replies:** 3\
**Last updated:** [November 19, 2019, 3:43am UTC](https://discuss.elastic.co/t/i-want-to-add-a-button-to-the-dashboard-of-kibana/208250 "2019-11-19T03:43:30Z")

</div>

Hello. I am creating a dashboard with kibana. Is it possible to set a search statement that is frequently used for a button, etc., and search for that condition when it is pressed? Thank you. kobaya

---

## [How to do display amount in different currency after Currency conversion](https://discuss.elastic.co/t/how-to-do-display-amount-in-different-currency-after-currency-conversion/131793)

<div class="topic-metadata">

**Author:** [@rejathr](https://discuss.elastic.co/u/rejathr)\
**Replies:** 3\
**Last updated:** [May 15, 2018, 6:01pm UTC](https://discuss.elastic.co/t/how-to-do-display-amount-in-different-currency-after-currency-conversion/131793 "2018-05-15T18:01:33Z")

</div>

I am newbie to elastic/kibana and i am stuck with a problem. I have transactional records in which multiple currency types are used like doc - 1 { Amount : 500 Currency : USD } doc -2 { Amount : 100 Currency : …

---

## [Breaking change in 7.12-13: Date processor](https://discuss.elastic.co/t/breaking-change-in-7-12-13-date-processor/277092)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 4\
**Last updated:** [June 25, 2021, 6:22pm UTC](https://discuss.elastic.co/t/breaking-change-in-7-12-13-date-processor/277092 "2021-06-25T18:22:40Z")

</div>

I'd like to report a major breaking change that occurred in 7.12.1 (as originally reported and described here: Date filter problems after upgrade), and which I personally experienced when I upgraded from 7.11.1 to 7.13.2…

---

## [Using Filebeat with AWS ES with ingest-geoip disabled](https://discuss.elastic.co/t/using-filebeat-with-aws-es-with-ingest-geoip-disabled/209546)

<div class="topic-metadata">

**Author:** [@chiemeleakoma](https://discuss.elastic.co/u/chiemeleakoma)\
**Replies:** 2\
**Last updated:** [November 27, 2019, 5:38am UTC](https://discuss.elastic.co/t/using-filebeat-with-aws-es-with-ingest-geoip-disabled/209546 "2019-11-27T05:38:24Z")

</div>

I have setup filebeat with basic config as a proof of concept. After starting the service, i couldnt see any logs ingested by ES, but filebeat error log shows: 2019-11-26T15:56:28.174Z ERROR pipeline/output.go:100 Faile…

---

## [Refresh field list button in Kibana](https://discuss.elastic.co/t/refresh-field-list-button-in-kibana/186191)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 2\
**Last updated:** [June 19, 2019, 6:58pm UTC](https://discuss.elastic.co/t/refresh-field-list-button-in-kibana/186191 "2019-06-19T18:58:33Z")

</div>

Hi Elasticians, Is it possible perform refresh of field list (In section Management - Index Pattern) from command line, e.g.: using Curl and Kibana API? Vasek

---

## [Ruby code filter error](https://discuss.elastic.co/t/ruby-code-filter-error/67391)

<div class="topic-metadata">

**Author:** [@zahodi](https://discuss.elastic.co/u/zahodi)\
**Replies:** 2\
**Last updated:** [November 29, 2016, 10:37pm UTC](https://discuss.elastic.co/t/ruby-code-filter-error/67391 "2016-11-29T22:37:25Z")

</div>

Having a hard time pinpointing why I'm getting this error: My filter: filter { ruby { code =\> "event.set('archdate', Time.now.utc.strftime('%Y-%m-%dT%H:%M:%S%z')" } }

---

## [Elastic Search Warm Node Issue](https://discuss.elastic.co/t/elastic-search-warm-node-issue/174666)

<div class="topic-metadata">

**Author:** [@sagar\_arora1](https://discuss.elastic.co/u/sagar_arora1)\
**Replies:** 4\
**Last updated:** [March 31, 2019, 10:57am UTC](https://discuss.elastic.co/t/elastic-search-warm-node-issue/174666 "2019-03-31T10:57:24Z")

</div>

Hi Folks, Its been almost 3 months i am struggling with issue with my warm node, cluster architecture and issue is described below : Architecture : 3 Master Nodes ,5 Hot data nodes, 2 Warm Nodes (Spinning Disk) , 1 co…

---

## [Issue parsing non-standard timestamp (Cisco router log)](https://discuss.elastic.co/t/issue-parsing-non-standard-timestamp-cisco-router-log/133908)

<div class="topic-metadata">

**Author:** [@AJ\_NOURI](https://discuss.elastic.co/u/AJ_NOURI)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 4:16pm UTC](https://discuss.elastic.co/t/issue-parsing-non-standard-timestamp-cisco-router-log/133908 "2018-06-22T16:16:57Z")

</div>

I am trying to parse logs from Cisco router with the following format: 000022: Jan 02 15:42:11.048:%LINK-5-CHANGED: Interface Ethernet0, changed state to administratively down Notice the particular timestamp: Jan 02 1…

[Previous page](https://discuss.elastic.co/top.md?page=991&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=993&per_page=50&period=all)
