# Elasticsearch

**URL:** https://community.grafana.com/c/support/elasticsearch/14.md

[Latest](https://community.grafana.com/latest.md) · [Categories](https://community.grafana.com/categories.md) · [Tags](https://community.grafana.com/tags.md)

---

## [About the Elasticsearch Category](https://community.grafana.com/t/about-the-elasticsearch-category/91745)

<div class="topic-metadata">

**Author:** [@usman.ahmad](https://community.grafana.com/u/usman.ahmad)\
**Replies:** 0\
**Last updated:** [July 18, 2023, 1:11pm UTC](https://community.grafana.com/t/about-the-elasticsearch-category/91745 "2023-07-18T13:11:00Z")

</div>

Documentation about: Elasticsearch Data source: NOTE: The Data source is supported for the following Elasticsearch versions: v7.16+ v8.x

---

## [How to display elasticsearch data Difference graph](https://community.grafana.com/t/how-to-display-elasticsearch-data-difference-graph/23087)

<div class="topic-metadata">

**Author:** [@nakarkashi](https://community.grafana.com/u/nakarkashi)\
**Replies:** 5\
**Last updated:** [July 24, 2026, 3:01am UTC](https://community.grafana.com/t/how-to-display-elasticsearch-data-difference-graph/23087 "2026-07-24T03:01:08Z")

</div>

Hi, I have some number data collected every day from elasticseach I have a question ・ How to get and draw difference data for each day ex) November1 HOST A:100 HOST B:300 November2 HOST A:120 HOST B:280 Graph …

---

## [Stacked Bars with Elasticsearch/Lucene in Grafana 12.3.1](https://community.grafana.com/t/stacked-bars-with-elasticsearch-lucene-in-grafana-12-3-1/161373)

<div class="topic-metadata">

**Author:** [@wetajoe](https://community.grafana.com/u/wetajoe)\
**Replies:** 0\
**Last updated:** [January 28, 2026, 4:41am UTC](https://community.grafana.com/t/stacked-bars-with-elasticsearch-lucene-in-grafana-12-3-1/161373 "2026-01-28T04:41:47Z")

</div>

What Grafana version and what operating system are you using? 12.3.1, Ubuntu 22. What are you trying to achieve? Using an Elasticsearch data source and a Lucene query, I have a horizontal bar chart showing the top 5…

---

## [Elasticsearch: how to display nested fields](https://community.grafana.com/t/elasticsearch-how-to-display-nested-fields/160137)

<div class="topic-metadata">

**Author:** [@rahulup893](https://community.grafana.com/u/rahulup893)\
**Replies:** 2\
**Last updated:** [December 12, 2025, 7:27am UTC](https://community.grafana.com/t/elasticsearch-how-to-display-nested-fields/160137 "2025-12-12T07:27:20Z")

</div>

“In my Elasticsearch index, some data is stored in nested fields. I need to display aggregated data from those nested fields in a dashboard column. Is this possible in grafana?”

---

## [Appending data in a table](https://community.grafana.com/t/appending-data-in-a-table/159523)

<div class="topic-metadata">

**Author:** [@micahgould1](https://community.grafana.com/u/micahgould1)\
**Replies:** 0\
**Last updated:** [November 19, 2025, 9:00am UTC](https://community.grafana.com/t/appending-data-in-a-table/159523 "2025-11-19T09:00:37Z")

</div>

So my data structure in elastic search is very complicated, but basically there can be up to 5 different ages in each document. The are each called age, age\_2, age\_3, age\_4, age\_5. I’ve created queries and transformat…

---

## [Best way to filter data from Elasticsearch](https://community.grafana.com/t/best-way-to-filter-data-from-elasticsearch/159094)

<div class="topic-metadata">

**Author:** [@micahgould1](https://community.grafana.com/u/micahgould1)\
**Replies:** 6\
**Last updated:** [November 5, 2025, 8:41am UTC](https://community.grafana.com/t/best-way-to-filter-data-from-elasticsearch/159094 "2025-11-05T08:41:19Z")

</div>

Note: Due to my company’s policy I can not post an specific details about the data, just broad ones, so any exact names for things have been removed or changed. I am using Grafana v12.2.1 running inside a docker contain…

---

## [Grafana table cannot show completed data sometimes](https://community.grafana.com/t/grafana-table-cannot-show-completed-data-sometimes/10052)

<div class="topic-metadata">

**Author:** [@haoyi13579](https://community.grafana.com/u/haoyi13579)\
**Replies:** 9\
**Last updated:** [August 25, 2025, 2:57pm UTC](https://community.grafana.com/t/grafana-table-cannot-show-completed-data-sometimes/10052 "2025-08-25T14:57:46Z")

</div>

Hi everyone, I am working on using grafana to show some data in a table. However it sometimes will lack some data. It needs to refresh several times until it show all data correctly and after few refresh period, it will…

---

## [How to use the "top metrics" in grafana elasticsearch query editor](https://community.grafana.com/t/how-to-use-the-top-metrics-in-grafana-elasticsearch-query-editor/154470)

<div class="topic-metadata">

**Author:** [@bolinlee](https://community.grafana.com/u/bolinlee)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 3:27pm UTC](https://community.grafana.com/t/how-to-use-the-top-metrics-in-grafana-elasticsearch-query-editor/154470 "2025-07-30T15:27:06Z")

</div>

What Grafana version and what operating system are you using? I’m using the grafana-enterprise-12.0.2,operating system is win10 What are you trying to achieve? I want to show a top metric of a field after I group …

---

## [Query in Elasticsearch 7.5](https://community.grafana.com/t/query-in-elasticsearch-7-5/153102)

<div class="topic-metadata">

**Author:** [@marecellotarantino](https://community.grafana.com/u/marecellotarantino)\
**Replies:** 0\
**Last updated:** [June 21, 2025, 11:21am UTC](https://community.grafana.com/t/query-in-elasticsearch-7-5/153102 "2025-06-21T11:21:41Z")

</div>

Hello everyone, i created a data source with elasticsearch (i use grafana 7.5). i can’t create my query. suppose i have a “contacts” index that contains a list of contacts composed by name, surname, address, update\_date.…

---

## [About grafana v9.4.3 and elasticsearch v7.17.25](https://community.grafana.com/t/about-grafana-v9-4-3-and-elasticsearch-v7-17-25/152486)

<div class="topic-metadata">

**Author:** [@liyy](https://community.grafana.com/u/liyy)\
**Replies:** 3\
**Last updated:** [June 13, 2025, 12:55am UTC](https://community.grafana.com/t/about-grafana-v9-4-3-and-elasticsearch-v7-17-25/152486 "2025-06-13T00:55:12Z")

</div>

Grafana v9.4.3,Elasticsearch v7.17.25 I want to create a dashboard by data source elasticsearch First, I configuration es datasource in Grafana,it’s working. But when I create a new dash board and I select es as datasou…

---

## [Aggregation issue for multiple aggregation value selection](https://community.grafana.com/t/aggregation-issue-for-multiple-aggregation-value-selection/151856)

<div class="topic-metadata">

**Author:** [@sayalinaidu](https://community.grafana.com/u/sayalinaidu)\
**Replies:** 0\
**Last updated:** [June 3, 2025, 9:16am UTC](https://community.grafana.com/t/aggregation-issue-for-multiple-aggregation-value-selection/151856 "2025-06-03T09:16:09Z")

</div>

I have created three varibales agg1=id.keyword,name.keyword,surname.keyword agg2=id.keyword,name.keyword,surname.keyword agg3=id.keyword,name.keyword,surname.keyword i have elastic source database i select one vaari…

---

## [Variable getting first 10 characters of timestamp](https://community.grafana.com/t/variable-getting-first-10-characters-of-timestamp/73998)

<div class="topic-metadata">

**Author:** [@itrycode](https://community.grafana.com/u/itrycode)\
**Replies:** 1\
**Last updated:** [April 28, 2025, 7:50am UTC](https://community.grafana.com/t/variable-getting-first-10-characters-of-timestamp/73998 "2025-04-28T07:50:32Z")

</div>

I am using Grafana 7.3 and in Windows 10 I am trying to get the date from this (2022-10-12T03:10:48.021Z) timestamp, which is becoming the first 10 characters. I tried different approaches using regex, and my recent on…

---

## [Elasticsearch aggregation of aggregation query](https://community.grafana.com/t/elasticsearch-aggregation-of-aggregation-query/148684)

<div class="topic-metadata">

**Author:** [@petew](https://community.grafana.com/u/petew)\
**Replies:** 0\
**Last updated:** [April 21, 2025, 9:33pm UTC](https://community.grafana.com/t/elasticsearch-aggregation-of-aggregation-query/148684 "2025-04-21T21:33:00Z")

</div>

TL;DR; how do I aggregate multiple series to give a sum value for each point in time, and then aggregate this sum-series by percentiles across time? I collect data on a 30 second cadence from multiple hosts and ship it …

---

## [Grafana math Expression where one of the operands is an empty Query](https://community.grafana.com/t/grafana-math-expression-where-one-of-the-operands-is-an-empty-query/146643)

<div class="topic-metadata">

**Author:** [@markhand](https://community.grafana.com/u/markhand)\
**Replies:** 0\
**Last updated:** [March 18, 2025, 10:00pm UTC](https://community.grafana.com/t/grafana-math-expression-where-one-of-the-operands-is-an-empty-query/146643 "2025-03-18T22:00:45Z")

</div>

What Grafana version and what operating system are you using? v11.3.2 on Linux What are you trying to achieve? I want to use an Expression to perform a calculation from a Sum Query which might have yielded empty res…

---

## [Issue with Filtering Paths Using Regex in Grafana and Elasticsearch](https://community.grafana.com/t/issue-with-filtering-paths-using-regex-in-grafana-and-elasticsearch/139960)

<div class="topic-metadata">

**Author:** [@alz01](https://community.grafana.com/u/alz01)\
**Replies:** 6\
**Last updated:** [March 6, 2025, 10:58am UTC](https://community.grafana.com/t/issue-with-filtering-paths-using-regex-in-grafana-and-elasticsearch/139960 "2025-03-06T10:58:12Z")

</div>

Hi! Im trying to split some Elasticsearch values (jenkins jobs dir paths) into variables, so I can filter by job the dashboard. The structure of the field is: DSI/enviroment/folder\_1/folder\_2/job. So, I have different…

---

## [Elastic search and counters](https://community.grafana.com/t/elastic-search-and-counters/14176)

<div class="topic-metadata">

**Author:** [@epacke](https://community.grafana.com/u/epacke)\
**Replies:** 10\
**Last updated:** [March 5, 2025, 11:28pm UTC](https://community.grafana.com/t/elastic-search-and-counters/14176 "2025-03-05T23:28:28Z")

</div>

Dear experts I am trying to graph sflow data in Elastic Search but I can’t get it to work as I would like it to. The challenge that I am facing is that the data is counters and continuously increasing. This does not mak…

---

## [Group by value mappings](https://community.grafana.com/t/group-by-value-mappings/144987)

<div class="topic-metadata">

**Author:** [@adrianca](https://community.grafana.com/u/adrianca)\
**Replies:** 0\
**Last updated:** [February 26, 2025, 5:42am UTC](https://community.grafana.com/t/group-by-value-mappings/144987 "2025-02-26T05:42:10Z")

</div>

Hi all I have a EL query which I group by responseType. I have the following value mappings 0 OK 19 NOK-OK 05 NOK-OK 57 NOK-OK 55 NOK-OK 14 NOK-OK 03 NOK-OK 12 NOK-NOK 96 NOK-NOK 87 O…

---

## [Filtering problem](https://community.grafana.com/t/filtering-problem/144472)

<div class="topic-metadata">

**Author:** [@aizikadi50](https://community.grafana.com/u/aizikadi50)\
**Replies:** 4\
**Last updated:** [February 25, 2025, 11:55am UTC](https://community.grafana.com/t/filtering-problem/144472 "2025-02-25T11:55:22Z")

</div>

i have grafana v10.3.3 and I’ve created a panel with elasticsearch data source of a timeseries graph. with the following query: aggregation- count, group by-terms, by- ServerName.keyword, Top 10, Min Doc Count Order by: …

---

## [Elasticsearch dashboard variable does not provide results](https://community.grafana.com/t/elasticsearch-dashboard-variable-does-not-provide-results/142084)

<div class="topic-metadata">

**Author:** [@armanossiloko](https://community.grafana.com/u/armanossiloko)\
**Replies:** 1\
**Last updated:** [February 1, 2025, 2:05am UTC](https://community.grafana.com/t/elasticsearch-dashboard-variable-does-not-provide-results/142084 "2025-02-01T02:05:27Z")

</div>

I am trying to set up a logs monitoring where I can filter logs by log.level and labels.Application fields from a .NET application which uses a Serilog sink for Elastic. I have created a dashboard variable and defined s…

---

## [Grafana 10.2.3 Elasticsearch plugin error - An error occurred within the plugin](https://community.grafana.com/t/grafana-10-2-3-elasticsearch-plugin-error-an-error-occurred-within-the-plugin/112286)

<div class="topic-metadata">

**Author:** [@stastech1991](https://community.grafana.com/u/stastech1991)\
**Replies:** 6\
**Last updated:** [January 13, 2025, 11:23am UTC](https://community.grafana.com/t/grafana-10-2-3-elasticsearch-plugin-error-an-error-occurred-within-the-plugin/112286 "2025-01-13T11:23:58Z")

</div>

I recently upgraded Grafana from 10.0.9 to 10.2.3 and I’m observing the following errors for each of my elasticsearch datasources: message: “An error occurred within the plugin” messageId: “plugin.downstreamError” GET…

---

## [How to add message field from elasticsearch logs into grafana email alerts](https://community.grafana.com/t/how-to-add-message-field-from-elasticsearch-logs-into-grafana-email-alerts/120288)

<div class="topic-metadata">

**Author:** [@aaditya](https://community.grafana.com/u/aaditya)\
**Replies:** 9\
**Last updated:** [January 10, 2025, 10:25am UTC](https://community.grafana.com/t/how-to-add-message-field-from-elasticsearch-logs-into-grafana-email-alerts/120288 "2025-01-10T10:25:46Z")

</div>

Grafana version: 10.3.3 I want to get fields from elasticsearch logs in body of emails alerts grafana. Specifically, a “Message” field in logs generated by elasticsearch. I am trying to get this in alert emails similar …

---

## [Access specific field (elasticsearch as datasource)](https://community.grafana.com/t/access-specific-field-elasticsearch-as-datasource/129251)

<div class="topic-metadata">

**Author:** [@mbru](https://community.grafana.com/u/mbru)\
**Replies:** 11\
**Last updated:** [December 3, 2024, 11:29am UTC](https://community.grafana.com/t/access-specific-field-elasticsearch-as-datasource/129251 "2024-12-03T11:29:30Z")

</div>

Hello, I have set Elasticsearch as datasource which works correctly. I would like to filter for specific documents and see the value of this specific field which is called “count” in the filtered document. The Lucene q…

---

## [Elasticsearch : usage of runtime fields in Grafana](https://community.grafana.com/t/elasticsearch-usage-of-runtime-fields-in-grafana/83915)

<div class="topic-metadata">

**Author:** [@ericaroue](https://community.grafana.com/u/ericaroue)\
**Replies:** 2\
**Last updated:** [November 7, 2024, 2:21pm UTC](https://community.grafana.com/t/elasticsearch-usage-of-runtime-fields-in-grafana/83915 "2024-11-07T14:21:10Z")

</div>

What Grafana version and what operating system are you using? V9.4.1 on linux What are you trying to achieve? I defined some runtime fields in an elasticsearch index, and I would like to query them in a dashboard …

---

## [Different timeframes on the same panel for data comparison](https://community.grafana.com/t/different-timeframes-on-the-same-panel-for-data-comparison/135889)

<div class="topic-metadata">

**Author:** [@pietrom](https://community.grafana.com/u/pietrom)\
**Replies:** 0\
**Last updated:** [November 7, 2024, 9:26am UTC](https://community.grafana.com/t/different-timeframes-on-the-same-panel-for-data-comparison/135889 "2024-11-07T09:26:27Z")

</div>

Hello everyone! I am using Grafana 11.2.2 and I am querying data from Elastic search. I have a dashboard with multiple panels and alerts set but I am not finding a solution (even online) on what I want to do. In 1 pan…

---

## [Elasticsearch Datasource cannot connect to secure Elasticsearch](https://community.grafana.com/t/elasticsearch-datasource-cannot-connect-to-secure-elasticsearch/134534)

<div class="topic-metadata">

**Author:** [@fvanderhoevenconclus](https://community.grafana.com/u/fvanderhoevenconclus)\
**Replies:** 3\
**Last updated:** [October 18, 2024, 8:56am UTC](https://community.grafana.com/t/elasticsearch-datasource-cannot-connect-to-secure-elasticsearch/134534 "2024-10-18T08:56:51Z")

</div>

What Grafana version and what operating system are you using? 11.1.0 What are you trying to achieve? Trying to configure the Elasticsearch datasource to connect to a secured cluster (username/password authenticati…

---

## [Grafana dashboard for netflow using elasticsearch data source](https://community.grafana.com/t/grafana-dashboard-for-netflow-using-elasticsearch-data-source/134247)

<div class="topic-metadata">

**Author:** [@unniak](https://community.grafana.com/u/unniak)\
**Replies:** 0\
**Last updated:** [October 15, 2024, 6:38am UTC](https://community.grafana.com/t/grafana-dashboard-for-netflow-using-elasticsearch-data-source/134247 "2024-10-15T06:38:01Z")

</div>

Grafana version: 11.1.4 I have installed elasticsearch with filebeat for collecting Netflow data from GW routers. Grafana-server is also in the same server. I want to create network traffic monitoring dashboards in Graf…

---

## [Link to updated documentation](https://community.grafana.com/t/link-to-updated-documentation/133033)

<div class="topic-metadata">

**Author:** [@fsuarez](https://community.grafana.com/u/fsuarez)\
**Replies:** 2\
**Last updated:** [September 26, 2024, 7:04pm UTC](https://community.grafana.com/t/link-to-updated-documentation/133033 "2024-09-26T19:04:20Z")

</div>

Hi Sorry if this is not the right place to ask about this. If you think this belongs to another forum, please let me know. I’m trying to figure out all these configurations etc. I’m especially interested in Rate, …

---

## [Limit users to access Variable values](https://community.grafana.com/t/limit-users-to-access-variable-values/8513)

<div class="topic-metadata">

**Author:** [@andrewjames0304](https://community.grafana.com/u/andrewjames0304)\
**Replies:** 14\
**Last updated:** [September 24, 2024, 2:17pm UTC](https://community.grafana.com/t/limit-users-to-access-variable-values/8513 "2024-09-24T14:17:08Z")

</div>

Hi Team, I have created a dashboard which works based on the values of Variables (templating). The values of those variables are company names. Do we have any options to limit an user to use selected values from the dro…

---

## [Average Metric in Grafana Time Series Panel gives total different Graph result than when it is created in Kibana](https://community.grafana.com/t/average-metric-in-grafana-time-series-panel-gives-total-different-graph-result-than-when-it-is-created-in-kibana/129244)

<div class="topic-metadata">

**Author:** [@imasmvdb](https://community.grafana.com/u/imasmvdb)\
**Replies:** 1\
**Last updated:** [August 23, 2024, 7:00am UTC](https://community.grafana.com/t/average-metric-in-grafana-time-series-panel-gives-total-different-graph-result-than-when-it-is-created-in-kibana/129244 "2024-08-23T07:00:17Z")

</div>

What Grafana version and what operating system are you using? Grafana 11.1.2 on Ubuntu 22\_04 What are you trying to achieve? Creating a time series graph with counter data from Elasticsearch that gives the same ou…

---

## [How to Calculate Time Difference Between Two Timestamps in Grafana Using Elasticsearch Data Source](https://community.grafana.com/t/how-to-calculate-time-difference-between-two-timestamps-in-grafana-using-elasticsearch-data-source/128922)

<div class="topic-metadata">

**Author:** [@manojprabhakar0911](https://community.grafana.com/u/manojprabhakar0911)\
**Replies:** 3\
**Last updated:** [August 19, 2024, 11:37am UTC](https://community.grafana.com/t/how-to-calculate-time-difference-between-two-timestamps-in-grafana-using-elasticsearch-data-source/128922 "2024-08-19T11:37:51Z")

</div>

Hi community, I’m working on a dashboard using Grafana with Elasticsearch as the data source. I need to calculate the difference between two timestamp fields (timestamp1 and current time) and display this difference on …

[Next page](https://community.grafana.com/c/support/elasticsearch/14.md?page=1)
