# Top

**URL:** https://discuss.elastic.co/top.md?page=998&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 999

---

## [Как правильно построить autocomplete для товаров в магазине](https://discuss.elastic.co/t/autocomplete/202887)

<div class="topic-metadata">

**Author:** [@Alexey\_Kapitonov](https://discuss.elastic.co/u/Alexey_Kapitonov)\
**Replies:** 5\
**Last updated:** [October 9, 2019, 6:18pm UTC](https://discuss.elastic.co/t/autocomplete/202887 "2019-10-09T18:18:41Z")

</div>

Добрый день, подскажите, как правильно построить autocomplete для товаров в магазине, чтобы при подаче на входе iPhone предлагались не товары а вариации продолжения фразы: iphone 6s iphone 11 16Gb как тут http://joxi…

---

## [Frequently gc in one node](https://discuss.elastic.co/t/frequently-gc-in-one-node/129199)

<div class="topic-metadata">

**Author:** [@andrewliuxxx](https://discuss.elastic.co/u/andrewliuxxx)\
**Replies:** 5\
**Last updated:** [April 30, 2018, 6:50am UTC](https://discuss.elastic.co/t/frequently-gc-in-one-node/129199 "2018-04-30T06:50:26Z")

</div>

I have a cluster with 120 nodes on 60 machines( 2 nodes on 1 machine). the version is 6.1.3. The cluster do nothing but indexing with a speed 1 million records every second. Several nodes will be out of memory about 5…

---

## [Увеличение времени выполнения поисковых запросов при Bulk Insert](https://discuss.elastic.co/t/bulk-insert/27714)

<div class="topic-metadata">

**Author:** [@ea\_fox](https://discuss.elastic.co/u/ea_fox)\
**Replies:** 5\
**Last updated:** [August 23, 2015, 8:17pm UTC](https://discuss.elastic.co/t/bulk-insert/27714 "2015-08-23T20:17:27Z")

</div>

Доброго времени суток. При добавление записей и индекс (bulk insert) или создании нового индекса и добавлением в него данных (Кластер в пределах одного физического сервера) сильно падает производительность при выполнении…

---

## [Too many files open](https://discuss.elastic.co/t/too-many-files-open/5162)

<div class="topic-metadata">

**Author:** [@mkleen](https://discuss.elastic.co/u/mkleen)\
**Replies:** 5\
**Last updated:** [August 15, 2011, 6:34pm UTC](https://discuss.elastic.co/t/too-many-files-open/5162 "2011-08-15T18:34:33Z")

</div>

Hello, i am running Elasticsearch on a Cent-OS and got the following error after running elastisearch for a couple of days. At the moment I have one single Instance of Elasticsearch running. How can I avoid to have…

---

## [Can we make basic authentication part of Open Source ES?](https://discuss.elastic.co/t/can-we-make-basic-authentication-part-of-open-source-es/209104)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 6:39pm UTC](https://discuss.elastic.co/t/can-we-make-basic-authentication-part-of-open-source-es/209104 "2019-11-22T18:39:03Z")

</div>

Hey all, This could be a sensitive topic, so I hope I'm able to address it tactfully. Can we please get basic authentication integrated into the open source version of Elasticsearch? And it should be turned on by defau…

---

## [Get distinct term values but order by another value](https://discuss.elastic.co/t/get-distinct-term-values-but-order-by-another-value/206012)

<div class="topic-metadata">

**Author:** [@J\_Weeda](https://discuss.elastic.co/u/J_Weeda)\
**Replies:** 2\
**Last updated:** [November 8, 2019, 12:05pm UTC](https://discuss.elastic.co/t/get-distinct-term-values-but-order-by-another-value/206012 "2019-11-08T12:05:06Z")

</div>

Hello, I struggling with a query to get the unique values for a term called metric from my index while sorting the result on a different (numeric) field: metric\_order. Consider below example: metric: metric\_order: A …

---

## [Uanble to extract Kibana 7.4.0](https://discuss.elastic.co/t/uanble-to-extract-kibana-7-4-0/203470)

<div class="topic-metadata">

**Author:** [@Marfig](https://discuss.elastic.co/u/Marfig)\
**Replies:** 2\
**Last updated:** [October 18, 2019, 2:35pm UTC](https://discuss.elastic.co/t/uanble-to-extract-kibana-7-4-0/203470 "2019-10-18T14:35:38Z")

</div>

Hi I'm new with Kibana. I have download elasticsearch, extracted the fil and install it with cmd. Now I have to do the same for Kibana, but I have problems to extract the zip file. When I'm trying, the Folder program ju…

---

## [How to update http.max\_content\_length in elastic cloud cluster](https://discuss.elastic.co/t/how-to-update-http-max-content-length-in-elastic-cloud-cluster/173577)

<div class="topic-metadata">

**Author:** [@Satendrakumar](https://discuss.elastic.co/u/Satendrakumar)\
**Replies:** 2\
**Last updated:** [April 1, 2019, 2:51pm UTC](https://discuss.elastic.co/t/how-to-update-http-max-content-length-in-elastic-cloud-cluster/173577 "2019-04-01T14:51:52Z")

</div>

I am using an elastic cloud cluster. getting error: Job aborted due to stage failure: Task 1782 in stage 1.0 failed 4 times, most recent failure: Lost task 1782.3 in stage 1.0 (TID 2191, 10.193.89.157, executor 6): org.…

---

## [Setting up 2 nodes on same machine](https://discuss.elastic.co/t/setting-up-2-nodes-on-same-machine/166858)

<div class="topic-metadata">

**Author:** [@Filip\_Pavlic](https://discuss.elastic.co/u/Filip_Pavlic)\
**Replies:** 2\
**Last updated:** [February 3, 2019, 9:55am UTC](https://discuss.elastic.co/t/setting-up-2-nodes-on-same-machine/166858 "2019-02-03T09:55:18Z")

</div>

Hi, I have read all that I could find about setting up two nodes, searched entire internet but I'm failing to set two nodes in same cluster on dev machine (test enviroment). What did I miss ? I have 2 elastic installat…

---

## [Custom Label in Legend for Pie Chart](https://discuss.elastic.co/t/custom-label-in-legend-for-pie-chart/96970)

<div class="topic-metadata">

**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 1:52pm UTC](https://discuss.elastic.co/t/custom-label-in-legend-for-pie-chart/96970 "2017-08-14T13:52:38Z")

</div>

So I have a field called logMessage. It looks like this: "Connection Terminated: book read from //host/stuff\_stuff:4294967295 failed (-268500976) (0) \[file.c\]\[2412\]" I want to make a pie chart with split slices on the …

---

## [Error on Master Nodes](https://discuss.elastic.co/t/error-on-master-nodes/51705)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 2\
**Last updated:** [June 2, 2016, 3:16pm UTC](https://discuss.elastic.co/t/error-on-master-nodes/51705 "2016-06-02T15:16:57Z")

</div>

ES 2.3.1 On my Master Nodes I am seeing the below error: \[2016-06-02 08:45:11,438\]\[INFO \]\[cluster.metadata \] \[MASTER\_NODE\_1\] \[cobalt-bro-2016.06.02\] update\_mapping \[BRO\] \[2016-06-02 08:54:55,933\]\[DEBUG\]\[acti…

---

## [General: ES response errors](https://discuss.elastic.co/t/general-es-response-errors/9988)

<div class="topic-metadata">

**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\
**Replies:** 2\
**Last updated:** [December 7, 2012, 7:08pm UTC](https://discuss.elastic.co/t/general-es-response-errors/9988 "2012-12-07T19:08:32Z")

</div>

Hi, Is there any way to distinguish error messages in responses between errors due to request error (eg wrong format etc) that will always be returned for specified request and errors due to server problems. I need …

---

## [ES - Index/Shard Recovery/ CorruptIndexException - footer mismatch](https://discuss.elastic.co/t/es-index-shard-recovery-corruptindexexception-footer-mismatch/20987)

<div class="topic-metadata">

**Author:** [@Mehmet\_Cem\_Gunturkun](https://discuss.elastic.co/u/Mehmet_Cem_Gunturkun)\
**Replies:** 2\
**Last updated:** [October 7, 2016, 4:36pm UTC](https://discuss.elastic.co/t/es-index-shard-recovery-corruptindexexception-footer-mismatch/20987 "2016-10-07T16:36:00Z")

</div>

Hey everyone, I have a problem about shards of nodes. After I restarted ES, it started to given an exception on recovery for some shards of the a node. curl -XGET "http:/localhost:9200/\_cat/shards my\_index …

---

## [Unsupported Media Type when calling import API](https://discuss.elastic.co/t/unsupported-media-type-when-calling-import-api/311742)

<div class="topic-metadata">

**Author:** [@Martin\_Hartmann](https://discuss.elastic.co/u/Martin_Hartmann)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 11:19am UTC](https://discuss.elastic.co/t/unsupported-media-type-when-calling-import-api/311742 "2022-08-10T11:19:51Z")

</div>

Hi. We run Kibana in v 7.17.3 and when calling the /api/saved\_objects/\_imports API, we get a 415 - Unsupported Media Type error as response for some clients. Our go client doesn't work: REQUEST: POST /api/saved\_objects/…

---

## [Flatten recursively a JSON to Logstash in Ruby](https://discuss.elastic.co/t/flatten-recursively-a-json-to-logstash-in-ruby/188076)

<div class="topic-metadata">

**Author:** [@Ayzoh](https://discuss.elastic.co/u/Ayzoh)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 4:03pm UTC](https://discuss.elastic.co/t/flatten-recursively-a-json-to-logstash-in-ruby/188076 "2019-06-28T16:03:40Z")

</div>

Hello, I have the following JSON to parse in Logstash : "payload": \[ { "route":"/v1/things", "method":"PUT", "status":200, "content-type":"json", "body":{ "licencePlate"…

---

## [How to disable indexing of unmapped fields](https://discuss.elastic.co/t/how-to-disable-indexing-of-unmapped-fields/15117)

<div class="topic-metadata">

**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\
**Replies:** 1\
**Last updated:** [January 6, 2014, 10:18pm UTC](https://discuss.elastic.co/t/how-to-disable-indexing-of-unmapped-fields/15117 "2014-01-06T22:18:23Z")

</div>

I updated my elasticsearch.yml file to disable automatic index creation (works great) and to disable indexing of unknown fields (not so great): \*action.auto\_create\_index: false\* \*index.mapper.dynamic: false\* I f…

---

## [Embedding visualization in Kibana custom plugin](https://discuss.elastic.co/t/embedding-visualization-in-kibana-custom-plugin/179400)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 6\
**Last updated:** [May 4, 2019, 12:37am UTC](https://discuss.elastic.co/t/embedding-visualization-in-kibana-custom-plugin/179400 "2019-05-04T00:37:44Z")

</div>

Hello Team, I have a use case to create custom UI Kibana plugin and show search results. I was able to create a custom plugin and install it in Kibana, but couldn't find the way to embed visualisation into the plugin. …

---

## [Logstash microsoft-sentinel-logstash-output-plugin](https://discuss.elastic.co/t/logstash-microsoft-sentinel-logstash-output-plugin/324787)

<div class="topic-metadata">

**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\
**Replies:** 2\
**Last updated:** [February 7, 2023, 5:27am UTC](https://discuss.elastic.co/t/logstash-microsoft-sentinel-logstash-output-plugin/324787 "2023-02-07T05:27:30Z")

</div>

Hello ELKs, Hope you doing well!! has anyone tried IF ELSE condition in "microsoft-sentinel-logstash-output-plugin" output logstash plugin? I'm trying to forward the logs based on log source type to respective DCR en…

---

## [Elasticsearch 7.10.2 Compatibility with Logstash 7.16.3](https://discuss.elastic.co/t/elasticsearch-7-10-2-compatibility-with-logstash-7-16-3/295889)

<div class="topic-metadata">

**Author:** [@andreakatie](https://discuss.elastic.co/u/andreakatie)\
**Replies:** 2\
**Last updated:** [January 31, 2022, 11:56pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-compatibility-with-logstash-7-16-3/295889 "2022-01-31T23:56:36Z")

</div>

I originally tried to upgrade Elasticsearch to 7.10.2 with the OpenDistro 1.13.1 update, but it keeps giving me an error (shown below). The compatibility matrix shows that they should work together. If anyone knows wheth…

---

## [Spark / Elasticsearch Exception: Maybe ES was overloaded?](https://discuss.elastic.co/t/spark-elasticsearch-exception-maybe-es-was-overloaded/71932)

<div class="topic-metadata">

**Author:** [@rjurney](https://discuss.elastic.co/u/rjurney)\
**Replies:** 2\
**Last updated:** [February 3, 2017, 11:39pm UTC](https://discuss.elastic.co/t/spark-elasticsearch-exception-maybe-es-was-overloaded/71932 "2017-02-03T23:39:47Z")

</div>

I am having trouble testing some of the code from my new book, Agile Data Science 2.0. I am writing from PySpark to Elasticsearch and keep running into an error. This is local Spark on one node with local elasticsearc…

---

## [Kibana Too Many Redirect After Remove X-Pack](https://discuss.elastic.co/t/kibana-too-many-redirect-after-remove-x-pack/71216)

<div class="topic-metadata">

**Author:** [@linroex](https://discuss.elastic.co/u/linroex)\
**Replies:** 2\
**Last updated:** [January 12, 2017, 3:46am UTC](https://discuss.elastic.co/t/kibana-too-many-redirect-after-remove-x-pack/71216 "2017-01-12T03:46:39Z")

</div>

Hi I remove X-Pack (elasticsearch-plugin remove x-pack ) then Kibana say "too many redirect" on browser. I try to clean cookie but not useful. please help me, thank you very much!

---

## [Increasing Performance](https://discuss.elastic.co/t/increasing-performance/46587)

<div class="topic-metadata">

**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\
**Replies:** 2\
**Last updated:** [April 6, 2016, 7:17pm UTC](https://discuss.elastic.co/t/increasing-performance/46587 "2016-04-06T19:17:13Z")

</div>

So I was wondering whats going to be the best way to increase the performance of our dashboards. Currently we do daily indexes, which are closed after 30 day and deleted after 90. Each index is also around 12Gb. We have …

---

## [Multi line logs](https://discuss.elastic.co/t/multi-line-logs/37700)

<div class="topic-metadata">

**Author:** [@Raboo](https://discuss.elastic.co/u/Raboo)\
**Replies:** 2\
**Last updated:** [December 21, 2015, 9:40pm UTC](https://discuss.elastic.co/t/multi-line-logs/37700 "2015-12-21T21:40:28Z")

</div>

Hi, I'm currently using fluentd/td-agent to ship logs to elasticsearch and use kibana for visualization. In fluentd you can specify when tailing logs which is the first line of a multi-line log(for instance java errors…

---

## [Can we add our own JSON format query and use it in Kibana?](https://discuss.elastic.co/t/can-we-add-our-own-json-format-query-and-use-it-in-kibana/26454)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [August 4, 2015, 10:41am UTC](https://discuss.elastic.co/t/can-we-add-our-own-json-format-query-and-use-it-in-kibana/26454 "2015-08-04T10:41:13Z")

</div>

HI Experts , Is it possible in Kibana 4.1 to write my own query in JSON format and paste it in Kibana Search bar , or somewhere else to search the things ? Thanks VG

---

## [Nested cardinality values way off with filter?](https://discuss.elastic.co/t/nested-cardinality-values-way-off-with-filter/17682)

<div class="topic-metadata">

**Author:** [@Phil\_Price](https://discuss.elastic.co/u/Phil_Price)\
**Replies:** 2\
**Last updated:** [May 22, 2014, 11:48pm UTC](https://discuss.elastic.co/t/nested-cardinality-values-way-off-with-filter/17682 "2014-05-22T23:48:59Z")

</div>

Hello, I'm trying to get produce the distribution of documents that matches vs don't match a query, and get the cardinality of a field for both sets. The idea is "Users who did" vs "Users who did not". In reality…

---

## [Not searching @message field by default (using Kibana)](https://discuss.elastic.co/t/not-searching-message-field-by-default-using-kibana/12187)

<div class="topic-metadata">

**Author:** [@subin](https://discuss.elastic.co/u/subin)\
**Replies:** 2\
**Last updated:** [June 3, 2013, 8:00am UTC](https://discuss.elastic.co/t/not-searching-message-field-by-default-using-kibana/12187 "2013-06-03T08:00:59Z")

</div>

I've updated ES template disabling '\_all' field searching and set the default field to search for as '@message'. But now when I enter a search-string (from message part of a log) into Kibana search bar, it doesn't…

---

## [To use the full set of free features in this distribution of Kibana, please update Elasticsearch to the default distribution](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-in-this-distribution-of-kibana-please-update-elasticsearch-to-the-default-distribution/352572)

<div class="topic-metadata">

**Author:** [@e-ferrari](https://discuss.elastic.co/u/e-ferrari)\
**Replies:** 8\
**Last updated:** [February 6, 2024, 10:05pm UTC](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-in-this-distribution-of-kibana-please-update-elasticsearch-to-the-default-distribution/352572 "2024-02-06T22:05:13Z")

</div>

Hi, from what i understand it seems i have the OSS version of elasticsearch installed, but not the OSS version of Kibana. So i need now this "default distribution". Where do i get it ? And now trying to connect to Kib…

---

## [Grok filter with multiple regex not working](https://discuss.elastic.co/t/grok-filter-with-multiple-regex-not-working/131031)

<div class="topic-metadata">

**Author:** [@Dazith\_Kj](https://discuss.elastic.co/u/Dazith_Kj)\
**Replies:** 8\
**Last updated:** [May 9, 2018, 10:02am UTC](https://discuss.elastic.co/t/grok-filter-with-multiple-regex-not-working/131031 "2018-05-09T10:02:27Z")

</div>

I have design the below simple regex pattern. And this was working fine for me. input { beats { port =\> "5044" ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" …

---

## [Elastic Agent to OpenTelemetry Collector](https://discuss.elastic.co/t/elastic-agent-to-opentelemetry-collector/338789)

<div class="topic-metadata">

**Author:** [@chadr](https://discuss.elastic.co/u/chadr)\
**Replies:** 3\
**Last updated:** [July 20, 2023, 4:15pm UTC](https://discuss.elastic.co/t/elastic-agent-to-opentelemetry-collector/338789 "2023-07-20T16:15:34Z")

</div>

Hi all, I am researching the capabilities of the current and future roadmap for the Elastic Agent. We have a very diverse infra/app/coding language environment. Specifically, I looking to understand if the Elastic Age…

---

## [Aggregateフィルタについて。重複してしまいます。](https://discuss.elastic.co/t/aggregate/186611)

<div class="topic-metadata">

**Author:** [@harad](https://discuss.elastic.co/u/harad)\
**Replies:** 3\
**Last updated:** [June 26, 2019, 6:38am UTC](https://discuss.elastic.co/t/aggregate/186611 "2019-06-26T06:38:00Z")

</div>

logstash のAggregateフィルタを使って、下記のように、同じIDを目印に、fieldの項目を配列にして一行にしたいと思っています。 inputはjdbc input pluginを使い、mysqlからデータを取ってきています。 |id\_field|field| |100 |AAA | |100 |BBB | |100 |CCC | |200 |DDD | |200 …

---

## [How to identify different ip address of different hosts with Metricbeat?](https://discuss.elastic.co/t/how-to-identify-different-ip-address-of-different-hosts-with-metricbeat/67301)

<div class="topic-metadata">

**Author:** [@qhlHelo](https://discuss.elastic.co/u/qhlHelo)\
**Replies:** 3\
**Last updated:** [November 29, 2016, 8:20pm UTC](https://discuss.elastic.co/t/how-to-identify-different-ip-address-of-different-hosts-with-metricbeat/67301 "2016-11-29T20:20:51Z")

</div>

I am using metricbeat to collect system metrics of linux and windows, just like the useage of cpu,memory and so on. Metricbeat currently only recognizes different hostnames of different hosts but I want to identify the s…

---

## [Kibana is dividing the urls](https://discuss.elastic.co/t/kibana-is-dividing-the-urls/64139)

<div class="topic-metadata">

**Author:** [@Leooel](https://discuss.elastic.co/u/Leooel)\
**Replies:** 3\
**Last updated:** [October 28, 2016, 3:59pm UTC](https://discuss.elastic.co/t/kibana-is-dividing-the-urls/64139 "2016-10-28T15:59:32Z")

</div>

Recently I created a grok to parse logs of Squid3, and all work normally to send all the data to elasticsearch. I can see everything normally on discover part, but when I create a graphic visualization, to analize the …

---

## [Kibana: Markers](https://discuss.elastic.co/t/kibana-markers/15869)

<div class="topic-metadata">

**Author:** [@Bernhard\_Berger](https://discuss.elastic.co/u/Bernhard_Berger)\
**Replies:** 3\
**Last updated:** [February 19, 2014, 1:58pm UTC](https://discuss.elastic.co/t/kibana-markers/15869 "2014-02-19T13:58:15Z")

</div>

Hey, I don't understand the Markers in the Histogram Settings in Kibana/Marvel. How often will the marker be drawn in the diagram (I always get only one marker with a "Top 5 of {Limit} events" tooltip)? Can I con…

---

## [Using Windows integration with policy that is applied to both Windows and Linux hosts](https://discuss.elastic.co/t/using-windows-integration-with-policy-that-is-applied-to-both-windows-and-linux-hosts/369152)

<div class="topic-metadata">

**Author:** [@Zaptros](https://discuss.elastic.co/u/Zaptros)\
**Replies:** 1\
**Last updated:** [October 21, 2024, 8:39pm UTC](https://discuss.elastic.co/t/using-windows-integration-with-policy-that-is-applied-to-both-windows-and-linux-hosts/369152 "2024-10-21T20:39:52Z")

</div>

Hi, is it a good idea to use an agent policy with the System and Windows integration for log collection for both Windows and Linux machines? Will the Windows integration consume too much resources on a OS it does not rea…

---

## [Фильтрация Message в логах Winlogbeat](https://discuss.elastic.co/t/message-winlogbeat/211456)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 4\
**Last updated:** [December 19, 2019, 9:28am UTC](https://discuss.elastic.co/t/message-winlogbeat/211456 "2019-12-19T09:28:51Z")

</div>

Добрый день. Планируем собирать логи авторизаций на контроллерах домена, чтобы смотреть кто логинится под одной учётной записью на несколько компьютеров. Поставили сбор событий с кодом 4,624, но есть одна проблема - лог…

---

## [ElasticSearch ( 5.5.2 ) X-Pack Active Directory Authentication Fails](https://discuss.elastic.co/t/elasticsearch-5-5-2-x-pack-active-directory-authentication-fails/154648)

<div class="topic-metadata">

**Author:** [@ramkrishna.cignex](https://discuss.elastic.co/u/ramkrishna.cignex)\
**Replies:** 4\
**Last updated:** [October 31, 2018, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-2-x-pack-active-directory-authentication-fails/154648 "2018-10-31T13:12:09Z")

</div>

Hi, I am using Elasticsearch and X-pack version 5.5.2. I am trying to configure X-Pack with Active directory and I am getting following error. \[2018-10-30T17:11:07,895\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[local-…

---

## [\[ALERTING\] Malfored URLs when trying to create a chained input watch](https://discuss.elastic.co/t/alerting-malfored-urls-when-trying-to-create-a-chained-input-watch/101932)

<div class="topic-metadata">

**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\
**Replies:** 4\
**Last updated:** [October 6, 2017, 12:54pm UTC](https://discuss.elastic.co/t/alerting-malfored-urls-when-trying-to-create-a-chained-input-watch/101932 "2017-10-06T12:54:17Z")

</div>

I am trying to create a chained input for watcher that involves reading response from an API and making another another API call to the service mentioned in the body of the first request. Here's what the input looks like…

---

## [Unassigned shards on data-streams indices following upgrade to 7.17.5](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130)

<div class="topic-metadata">

**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\
**Replies:** 5\
**Last updated:** [September 14, 2022, 5:08am UTC](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130 "2022-09-14T05:08:42Z")

</div>

Hey, Recently i have upgraded a few of our clusters from 7.12.0 to 7.17.5. After the upgrade two indices were created: .ds-.logs-deprecation.elasticsearch-default-2022.09.07-000001 and .ds-ilm-history-5-2022.09.07-000…

---

## [I'm trying to move my elastic stack to 7.16.2 (from 6.8.22) in docker-compose - but fails to get certificates generated](https://discuss.elastic.co/t/im-trying-to-move-my-elastic-stack-to-7-16-2-from-6-8-22-in-docker-compose-but-fails-to-get-certificates-generated/292675)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 5\
**Last updated:** [January 4, 2022, 1:06pm UTC](https://discuss.elastic.co/t/im-trying-to-move-my-elastic-stack-to-7-16-2-from-6-8-22-in-docker-compose-but-fails-to-get-certificates-generated/292675 "2022-01-04T13:06:49Z")

</div>

With the Log4J vulnerability I've been tasked to update our quite dated Elasticsearch stack. We were on 6.5.1, which I moved to 6.8.22 without issues. Now I want to move it to 7.16.2. There isn't that much with rollin…

---

## [Reindex parse\_exception](https://discuss.elastic.co/t/reindex-parse-exception/262824)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 5\
**Last updated:** [February 2, 2021, 4:11pm UTC](https://discuss.elastic.co/t/reindex-parse-exception/262824 "2021-02-02T16:11:28Z")

</div>

POST \_reindex?wait\_for\_completion=true { "source": { "index": "apm-7.8.1-transaction-000007", "query": { "match\_all": {} } }, "dest": { "index": "apm-7.8.1-transaction-new-000007", "pi…

---

## [Get different and specific results from Index](https://discuss.elastic.co/t/get-different-and-specific-results-from-index/175395)

<div class="topic-metadata">

**Author:** [@utkarshhis](https://discuss.elastic.co/u/utkarshhis)\
**Replies:** 5\
**Last updated:** [April 5, 2019, 6:38am UTC](https://discuss.elastic.co/t/get-different-and-specific-results-from-index/175395 "2019-04-05T06:38:38Z")

</div>

{ "\_index" : "test\_index", "\_type" : "test\_type", "\_id" : "test\_id", "\_version" : 7, "\_seq\_no" : 7, "\_primary\_term" : 4, "found" : true, "\_source" : { "attachments"…

---

## [Topbeats: mem.used\_p vs mem.actual\_used\_p](https://discuss.elastic.co/t/topbeats-mem-used-p-vs-mem-actual-used-p/49341)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 5\
**Last updated:** [May 11, 2016, 4:40pm UTC](https://discuss.elastic.co/t/topbeats-mem-used-p-vs-mem-actual-used-p/49341 "2016-05-11T16:40:27Z")

</div>

What is the difference between these two?? I am seeing some crazy variation between these two numbers, 95% vs. .37, (I presumed meant 37%). Why are these two numbers so out of sync??

---

## [How anonymize some fields?](https://discuss.elastic.co/t/how-anonymize-some-fields/36062)

<div class="topic-metadata">

**Author:** [@sampasei](https://discuss.elastic.co/u/sampasei)\
**Replies:** 5\
**Last updated:** [December 1, 2015, 5:35pm UTC](https://discuss.elastic.co/t/how-anonymize-some-fields/36062 "2015-12-01T17:35:31Z")

</div>

Hi, i have several logs as input: each record log has different field. I want to pass some fields and change the remaning ones: some fields are common to all records, others are totally different. There's a way to do th…

---

## [Need help with client node creation spring on localhost :(](https://discuss.elastic.co/t/need-help-with-client-node-creation-spring-on-localhost/5810)

<div class="topic-metadata">

**Author:** [@steam](https://discuss.elastic.co/u/steam)\
**Replies:** 5\
**Last updated:** [November 10, 2011, 10:01am UTC](https://discuss.elastic.co/t/need-help-with-client-node-creation-spring-on-localhost/5810 "2011-11-10T10:01:25Z")

</div>

Hello, I make intent to reuse class ElasticsearchNodeFactoryBean from article 'Elasticsearch with Spring' (http://techo-ecco.com/blog/elasticsearch-with-spring/). I have a problem with client node creation on l…

---

## [SOLVED - Error on query for ML Job](https://discuss.elastic.co/t/solved-error-on-query-for-ml-job/147869)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 11:01pm UTC](https://discuss.elastic.co/t/solved-error-on-query-for-ml-job/147869 "2018-09-09T23:01:43Z")

</div>

Hi, I am getting the following error on a single job: Job Validation Error: \[parsing\_exception\] \[query\_string\] unknown token \[START\_OBJECT\] after \[query\], with { line=1 & col=35 } :: {"path":"/usage-\*/\_search","query"…

---

## [Failed installing 'elasticsearch-service-x64' service](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137889)

<div class="topic-metadata">

**Author:** [@jintian](https://discuss.elastic.co/u/jintian)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 3:15am UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137889 "2018-06-29T03:15:16Z")

</div>

D:\\elasticsearch-6.3.0\\bin\>elasticsearch-service install Installing service : "elasticsearch-service-x64" Using JAVA\_HOME (64-bit): "D:\\java\_jdk" -XX:+UseConcMarkSweepGC;-XX:CMSInitiatingOccupancyFraction=75;-X…

---

## [External versioning and performance](https://discuss.elastic.co/t/external-versioning-and-performance/12028)

<div class="topic-metadata">

**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\
**Replies:** 7\
**Last updated:** [May 21, 2013, 10:07am UTC](https://discuss.elastic.co/t/external-versioning-and-performance/12028 "2013-05-21T10:07:14Z")

</div>

Hi there, Reading this: http://www.elasticsearch.org/guide/reference/api/index\_/ We might want to start using the epoch as the version for the stuff we index - are there any drawbacks for using such large integers…

---

## [Miscellaneous Questions on the back of Ricardo's all you want too know about filebeat](https://discuss.elastic.co/t/miscellaneous-questions-on-the-back-of-ricardos-all-you-want-too-know-about-filebeat/283528)

<div class="topic-metadata">

**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\
**Replies:** 7\
**Last updated:** [September 10, 2021, 12:44am UTC](https://discuss.elastic.co/t/miscellaneous-questions-on-the-back-of-ricardos-all-you-want-too-know-about-filebeat/283528 "2021-09-10T00:44:15Z")

</div>

As I was working through Ricardo's Youtube video I ended with the below below question, I posted them in the Video comment section but thinking might get more traction reposting here. I'm a total noob wrt EK still, and …

---

## [How to visualize a simple query](https://discuss.elastic.co/t/how-to-visualize-a-simple-query/82917)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 1\
**Last updated:** [April 19, 2017, 9:58pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-simple-query/82917 "2017-04-19T21:58:13Z")

</div>

I'm looking at your moving averages reference and would like an easy way to run similar queries and have the results graphed. Kibana gives me these options The console in DevTools is the ideal query writing tool howe…

---

## [Kibana Lens split chart](https://discuss.elastic.co/t/kibana-lens-split-chart/239120)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 9:53am UTC](https://discuss.elastic.co/t/kibana-lens-split-chart/239120 "2020-07-16T09:53:10Z")

</div>

Hi all, Can you confirm me if Lens support split chart? I can only found split series via "Break down by". Thanks,

[Previous page](https://discuss.elastic.co/top.md?page=997&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=999&per_page=50&period=all)
