# Top

**URL:** https://discuss.elastic.co/top.md?page=1010&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1011

---

## [Cannot add 10 or more rows to Visualize Library in table view in Kibana](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350)

<div class="topic-metadata">

**Author:** [@Stek\_new](https://discuss.elastic.co/u/Stek_new)\
**Replies:** 2\
**Last updated:** [March 16, 2022, 5:12am UTC](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350 "2022-03-16T05:12:27Z")

</div>

Hello! I cannot add 10 or more rows to Visualize Library in table view in Kibana Steps on how to reproduce the issue: Go Dev Tools and run the following query: POST logs-my\_app-default/\_doc { "@timestamp": "2099-…

---

## [Filebeat CEF module can't parse event as syslog rfc3164](https://discuss.elastic.co/t/filebeat-cef-module-cant-parse-event-as-syslog-rfc3164/226116)

<div class="topic-metadata">

**Author:** [@WBakeberg](https://discuss.elastic.co/u/WBakeberg)\
**Replies:** 2\
**Last updated:** [April 2, 2020, 8:30am UTC](https://discuss.elastic.co/t/filebeat-cef-module-cant-parse-event-as-syslog-rfc3164/226116 "2020-04-02T08:30:08Z")

</div>

Hello, we have just recently started ingesting syslog logs with the CEF module of Filebeat. We are receiving the error message: 2020-04-01T14:02:47.863-0500 ERROR \[syslog\] syslog/input.go:243 can't parse event as syslog…

---

## [Creating a snapshot of indices created with alias](https://discuss.elastic.co/t/creating-a-snapshot-of-indices-created-with-alias/131979)

<div class="topic-metadata">

**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\
**Replies:** 2\
**Last updated:** [May 15, 2018, 6:29pm UTC](https://discuss.elastic.co/t/creating-a-snapshot-of-indices-created-with-alias/131979 "2018-05-15T18:29:09Z")

</div>

I am using curator to create snapshots of my indices. I am also rolling over my indices with the rollover API. Here is what my index looks like when creating and rolling over. audit-2018.05.14-1 audit-2018.05.14-000002 …

---

## [Issue trying to access META-INF/services in custom plugin](https://discuss.elastic.co/t/issue-trying-to-access-meta-inf-services-in-custom-plugin/42382)

<div class="topic-metadata">

**Author:** [@Guilhem\_Legal](https://discuss.elastic.co/u/Guilhem_Legal)\
**Replies:** 2\
**Last updated:** [February 23, 2016, 3:02pm UTC](https://discuss.elastic.co/t/issue-trying-to-access-meta-inf-services-in-custom-plugin/42382 "2016-02-23T15:02:10Z")

</div>

Hi everyone, I'm currently developing a custom plugin for elasticSearch 2.2.0. One of my jar packaged in my plugin contain a file in META-INF/services and it seems to be blocked or ignored as when i call : ServiceLo…

---

## [Master High CPU](https://discuss.elastic.co/t/master-high-cpu/16837)

<div class="topic-metadata">

**Author:** [@RanjithVenkat](https://discuss.elastic.co/u/RanjithVenkat)\
**Replies:** 2\
**Last updated:** [April 8, 2014, 5:31am UTC](https://discuss.elastic.co/t/master-high-cpu/16837 "2014-04-08T05:31:50Z")

</div>

Hi, We are using Elasticsearch-0.90.5 in our search application. We have 3 master nodes and 3 data nodes each with heap size of 4gb running in JDK 1.6. We have our Node Client running in our APP\_SERVER. Elasticsea…

---

## [How to Improve ELK Performance](https://discuss.elastic.co/t/how-to-improve-elk-performance/307092)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 8\
**Last updated:** [June 23, 2022, 3:07pm UTC](https://discuss.elastic.co/t/how-to-improve-elk-performance/307092 "2022-06-23T15:07:44Z")

</div>

Hi Team, My flow is, JSON Logs files will be processed from FileBeat \> Logstash \> Elasticsearch. But it skips some data. In thread\_pool It shows below many rejected write requests. node-1 write 0 0 0 …

---

## [Score\_mode avg returns 1 for all documents](https://discuss.elastic.co/t/score-mode-avg-returns-1-for-all-documents/218822)

<div class="topic-metadata">

**Author:** [@wall](https://discuss.elastic.co/u/wall)\
**Replies:** 8\
**Last updated:** [March 19, 2020, 6:32am UTC](https://discuss.elastic.co/t/score-mode-avg-returns-1-for-all-documents/218822 "2020-03-19T06:32:50Z")

</div>

Hi Elasticians! I'm using function score with score\_mode avg and boost\_mode replace. And according to documentation I'm expecting the query function score to be overriden by the function score filters. This works as e…

---

## [Elasticsearch with bootstrap.mlockall causes server crash](https://discuss.elastic.co/t/elasticsearch-with-bootstrap-mlockall-causes-server-crash/15668)

<div class="topic-metadata">

**Author:** [@KingBob](https://discuss.elastic.co/u/KingBob)\
**Replies:** 8\
**Last updated:** [February 10, 2014, 3:49pm UTC](https://discuss.elastic.co/t/elasticsearch-with-bootstrap-mlockall-causes-server-crash/15668 "2014-02-10T15:49:59Z")

</div>

Hello, I hope someone can assist with this -- whenever I start Elasticsearch with the bootstrap.mlockall option enabled my entire server stops responding after a minute or two. There is nothing obvious in the l…

---

## [Logstash JDBC Input Plugin Connection Pooling](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-connection-pooling/337823)

<div class="topic-metadata">

**Author:** [@alromos](https://discuss.elastic.co/u/alromos)\
**Replies:** 4\
**Last updated:** [July 31, 2023, 11:08pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-connection-pooling/337823 "2023-07-31T23:08:35Z")

</div>

Our team is actively using Logstash JDBC Input plugin with MSSQL JDBC driver for reading some data from DB for further processing. Logstash version: 8.5.1 MSSQL JDBC version: 11.2.1.jre17 At the moment we are facing s…

---

## [Dedicated voting-only master nodes and repository access](https://discuss.elastic.co/t/dedicated-voting-only-master-nodes-and-repository-access/281787)

<div class="topic-metadata">

**Author:** [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 5:07pm UTC](https://discuss.elastic.co/t/dedicated-voting-only-master-nodes-and-repository-access/281787 "2021-08-18T17:07:58Z")

</div>

If I am deploying an Elasticsearch cluster across 2 on-premise data centres and want to place a dedicated voting-only master node in the cloud as an arbiter, would the dedicated voting-only master node still need access …

---

## [Speed Up Date range query](https://discuss.elastic.co/t/speed-up-date-range-query/242467)

<div class="topic-metadata">

**Author:** [@KBD-10](https://discuss.elastic.co/u/KBD-10)\
**Replies:** 4\
**Last updated:** [July 24, 2020, 9:02am UTC](https://discuss.elastic.co/t/speed-up-date-range-query/242467 "2020-07-24T09:02:55Z")

</div>

Hello every body, First of all I would like to thank you for your help. My problem is about query slow response. I have read a lot in the forum about the cluster configuration, shards and so on, and this is finally my …

---

## [Elasticsearch integration with IBM Websphere](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108)

<div class="topic-metadata">

**Author:** [@Amit\_Rajbhar](https://discuss.elastic.co/u/Amit_Rajbhar)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108 "2020-03-20T13:42:19Z")

</div>

In my organisation searching portlet names in portal hosted on IBM websphere is implemented using elastic search.I want to know how elastic search can be integrated with IBM websphere? .Also, how to know the installed el…

---

## [Does AWS SES API work with watcher?](https://discuss.elastic.co/t/does-aws-ses-api-work-with-watcher/151810)

<div class="topic-metadata">

**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Replies:** 4\
**Last updated:** [October 13, 2018, 5:45am UTC](https://discuss.elastic.co/t/does-aws-ses-api-work-with-watcher/151810 "2018-10-13T05:45:31Z")

</div>

Dear Team, I am a big fan of elk and your support team, but I have AWS SES email service so that is possible to configure email notification service via only AWS SES, please reply ASAP.

---

## [Compare aggregation result in Elastic Search to find repetitive users](https://discuss.elastic.co/t/compare-aggregation-result-in-elastic-search-to-find-repetitive-users/55471)

<div class="topic-metadata">

**Author:** [@sa35t](https://discuss.elastic.co/u/sa35t)\
**Replies:** 4\
**Last updated:** [August 14, 2016, 7:43pm UTC](https://discuss.elastic.co/t/compare-aggregation-result-in-elastic-search-to-find-repetitive-users/55471 "2016-08-14T19:43:46Z")

</div>

Hi, Basically I want to do something like this http://stackoverflow.com/questions/36711667/comparing-data-in-kibana Currently I can find unique users with in data range, but how do I compare it with my whole corpus t…

---

## [How to append a string to a value?](https://discuss.elastic.co/t/how-to-append-a-string-to-a-value/298542)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 3\
**Last updated:** [March 1, 2022, 7:53pm UTC](https://discuss.elastic.co/t/how-to-append-a-string-to-a-value/298542 "2022-03-01T19:53:57Z")

</div>

Hi, I would like to append the letter C to this key: "module-temp": 32.37 so that it looks like "module-temp": 32.37 C Tried this but didn't work: if ("\*" in \[module-temp\]) { mutate { replace =\> …

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/270797)

<div class="topic-metadata">

**Author:** [@overbid](https://discuss.elastic.co/u/overbid)\
**Replies:** 3\
**Last updated:** [April 27, 2021, 11:13am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/270797 "2021-04-27T11:13:42Z")

</div>

I'm trying to install via podman compose in 3 machines version: "3" services: es01: image: docker.elastic.co/elasticsearch/elasticsearch:7.12.0 container\_name: es01 environment: …

---

## [How to Auto login into embedded iframe on Kiosk mode screen](https://discuss.elastic.co/t/how-to-auto-login-into-embedded-iframe-on-kiosk-mode-screen/185807)

<div class="topic-metadata">

**Author:** [@Chris4](https://discuss.elastic.co/u/Chris4)\
**Replies:** 3\
**Last updated:** [June 14, 2019, 10:02am UTC](https://discuss.elastic.co/t/how-to-auto-login-into-embedded-iframe-on-kiosk-mode-screen/185807 "2019-06-14T10:02:13Z")

</div>

We use Kibana 7.1.0 We use a forwarding website on a windows IIS webserver which sends the browser to a full screen kibana dashboard. This computer is automatically restarting once a day and should auto open this monito…

---

## [Allow Filebeat to add folder names as fields](https://discuss.elastic.co/t/allow-filebeat-to-add-folder-names-as-fields/86144)

<div class="topic-metadata">

**Author:** [@AO-StreetArt](https://discuss.elastic.co/u/AO-StreetArt)\
**Replies:** 3\
**Last updated:** [May 18, 2017, 3:15pm UTC](https://discuss.elastic.co/t/allow-filebeat-to-add-folder-names-as-fields/86144 "2017-05-18T15:15:33Z")

</div>

One of the pieces of software we hoped to use Filebeat to collect logs for actually stores data in the file path to the log file. As executions are triggered via RESTful API, it builds a tree structure of folders based …

---

## [Read error looking for ack: read tcp 10.11.12.13:1223 i/o timeout](https://discuss.elastic.co/t/read-error-looking-for-ack-read-tcp-10-11-12-13-1223-i-o-timeout/23825)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 3\
**Last updated:** [July 23, 2015, 4:19am UTC](https://discuss.elastic.co/t/read-error-looking-for-ack-read-tcp-10-11-12-13-1223-i-o-timeout/23825 "2015-07-23T04:19:54Z")

</div>

I'm getting this error message on Logstash-Forwarder. Since the logs are not sent to Logstash-Server. I have cross verified the Network connection. There is no blocking / Disturbance in Network \[ Firewall, Server iptable…

---

## [How does can\_match functionality work](https://discuss.elastic.co/t/how-does-can-match-functionality-work/288164)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 7\
**Last updated:** [November 3, 2021, 2:21pm UTC](https://discuss.elastic.co/t/how-does-can-match-functionality-work/288164 "2021-11-03T14:21:36Z")

</div>

Just finished watching the video(@ruflin ):Deep dive into the new Elastic Indexing Strategy - YouTube and it's mentioned that because of the can\_match functionality, indices that don't have relevant documents won't be qu…

---

## [Elastic agent showing unhealthy with windows system](https://discuss.elastic.co/t/elastic-agent-showing-unhealthy-with-windows-system/265341)

<div class="topic-metadata">

**Author:** [@jaykansagara](https://discuss.elastic.co/u/jaykansagara)\
**Replies:** 1\
**Last updated:** [February 24, 2021, 5:29pm UTC](https://discuss.elastic.co/t/elastic-agent-showing-unhealthy-with-windows-system/265341 "2021-02-24T17:29:14Z")

</div>

hi, I have install Elastic Agent 7.11.1 on windows server 2012 and enroll it with Fleet. Agent policy has 2 different integration as bellow: System Endpoint security Elastic agent write the logs in windows server as…

---

## [Logstash停止時の挙動がバージョンにより異なる](https://discuss.elastic.co/t/logstash/234851)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 10:54am UTC](https://discuss.elastic.co/t/logstash/234851 "2020-06-02T10:54:52Z")

</div>

logstashを7.6から7.7にバージョンアップしました。 logstashをsystemctlコマンドで停止し、systemctl statusでステータスを確認したときの挙動と、ログの出力のされ方が7.6と7.7にで異なります。 7.6は正常に停止しているように見えるのですが、7.7は停止後のステータスがfailedになっており、停止時に何らかの異常が発生しているように見えます。原因について分かりますでしょうか？ 以下に、…

---

## [Is it possible to create snapshots to multiple repositories?](https://discuss.elastic.co/t/is-it-possible-to-create-snapshots-to-multiple-repositories/61826)

<div class="topic-metadata">

**Author:** [@Melanie\_Zamora](https://discuss.elastic.co/u/Melanie_Zamora)\
**Replies:** 1\
**Last updated:** [September 29, 2016, 5:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-snapshots-to-multiple-repositories/61826 "2016-09-29T17:20:45Z")

</div>

Hi, I am wondering if its possible to register more than one backup repository for snapshots. Basically I have different types of indices in my cluster and I want to backup one set to Azure, and another set to a local fi…

---

## [LDAPS and chain of certificates](https://discuss.elastic.co/t/ldaps-and-chain-of-certificates/250724)

<div class="topic-metadata">

**Author:** [@v.n](https://discuss.elastic.co/u/v.n)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 6:59am UTC](https://discuss.elastic.co/t/ldaps-and-chain-of-certificates/250724 "2020-10-15T06:59:54Z")

</div>

I try to set up authentication through Active Directory. My problem is in connection using LDAPS. We have our own CA service and all certificates are issued by one of them. So we have root CA, then Sub CA which issues al…

---

## [Type error no implicit conversion of NilClass into String with null date](https://discuss.elastic.co/t/type-error-no-implicit-conversion-of-nilclass-into-string-with-null-date/227547)

<div class="topic-metadata">

**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\
**Replies:** 2\
**Last updated:** [April 11, 2020, 10:00am UTC](https://discuss.elastic.co/t/type-error-no-implicit-conversion-of-nilclass-into-string-with-null-date/227547 "2020-04-11T10:00:22Z")

</div>

I'm having the following error when logstash try to index a null value in date field: Type error no implicit conversion of NilClass into String This is the complete stacktrace 2458 rufus-scheduler intercepted an er…

---

## [Not able to run the script to create dashboard in docker kibana](https://discuss.elastic.co/t/not-able-to-run-the-script-to-create-dashboard-in-docker-kibana/138999)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 2:30am UTC](https://discuss.elastic.co/t/not-able-to-run-the-script-to-create-dashboard-in-docker-kibana/138999 "2018-07-09T02:30:23Z")

</div>

I am using the following compose file. My objective is to create the kibana dashboard automatically when the docker container starts hence I created customize image for kibana. version: '3' services: elasticsearch: …

---

## [Unable to update ui setting request failed with status code: 429](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-429/290001)

<div class="topic-metadata">

**Author:** [@ftester](https://discuss.elastic.co/u/ftester)\
**Replies:** 5\
**Last updated:** [November 25, 2021, 10:59pm UTC](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-429/290001 "2021-11-25T22:59:19Z")

</div>

Hello guys, The Scinario: I have 4 dockers, elasticsearch, kibana, filebeat, dvwa. So basically, I should attack dvwa and see the apache logs on kibana dashboard. I use Ubuntu server 20.4 to set up the docker on it an…

---

## [Default password for ElasticSearch App Search](https://discuss.elastic.co/t/default-password-for-elasticsearch-app-search/187625)

<div class="topic-metadata">

**Author:** [@omairkhawaja](https://discuss.elastic.co/u/omairkhawaja)\
**Replies:** 5\
**Last updated:** [June 28, 2019, 3:48pm UTC](https://discuss.elastic.co/t/default-password-for-elasticsearch-app-search/187625 "2019-06-28T15:48:59Z")

</div>

I've followed the documentation and successfully enabled standard authentication on my Elasticsearch and spun up an ElsaticSearch App Search instance. My question is: What is the default password for Elastic Search app …

---

## [How to upload file in Kibana Plugin development?](https://discuss.elastic.co/t/how-to-upload-file-in-kibana-plugin-development/162056)

<div class="topic-metadata">

**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\
**Replies:** 5\
**Last updated:** [December 26, 2018, 8:29am UTC](https://discuss.elastic.co/t/how-to-upload-file-in-kibana-plugin-development/162056 "2018-12-26T08:29:00Z")

</div>

Hi, I'm Developing a Kibana Plugin where there is a need to take txt or xlsx files as input from users and process them at backend. I have generated the sample plugin using kibana plugin generator, in that I'm using eu…

---

## [Got error "No processor type exists with name \[attachment\]](https://discuss.elastic.co/t/got-error-no-processor-type-exists-with-name-attachment/267741)

<div class="topic-metadata">

**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\
**Replies:** 4\
**Last updated:** [March 19, 2021, 8:57am UTC](https://discuss.elastic.co/t/got-error-no-processor-type-exists-with-name-attachment/267741 "2021-03-19T08:57:20Z")

</div>

have installed ingest-attachment on the host, and also restart the service "sudo systemctl restart elasticsearch.service". and get the message on the host: elasticsearch@CNSHZ-Amarisoft-OptiPlex-7050:/usr/local/elastic…

---

## [Tag a message on the filebeat side to be able to filter on kibana ( HTTP response codes )](https://discuss.elastic.co/t/tag-a-message-on-the-filebeat-side-to-be-able-to-filter-on-kibana-http-response-codes/158500)

<div class="topic-metadata">

**Author:** [@Badb0y](https://discuss.elastic.co/u/Badb0y)\
**Replies:** 4\
**Last updated:** [November 30, 2018, 11:25am UTC](https://discuss.elastic.co/t/tag-a-message-on-the-filebeat-side-to-be-able-to-filter-on-kibana-http-response-codes/158500 "2018-11-30T11:25:13Z")

</div>

Hi, I have this configuration: filebeat.prospectors: - type: log enabled: true paths: - /var/log/messages - /var/log/secure - /var/log/audit/audit.log - /var/log/yum.log - /root/.bash\_history …

---

## [Using NEST (.NET client) with Elastic Cloud](https://discuss.elastic.co/t/using-nest-net-client-with-elastic-cloud/144240)

<div class="topic-metadata">

**Author:** [@tmenier](https://discuss.elastic.co/u/tmenier)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 12:40am UTC](https://discuss.elastic.co/t/using-nest-net-client-with-elastic-cloud/144240 "2018-08-22T00:40:36Z")

</div>

I'm connecting to an Elastic Cloud deployment of Elasticsearch with the NEST client for .NET. The deployment is based on the default "I/O Optimized" template. It has a single "instance", but 2 "zones." I am assuming that…

---

## [Logstash ingest & Logstash Indexer](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878)

<div class="topic-metadata">

**Author:** [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Replies:** 4\
**Last updated:** [March 7, 2018, 1:56pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878 "2018-03-07T13:56:03Z")

</div>

How to configure Logstash ingest nodes and logstash index nodes separately ? Heard logstash index and ingesters some where but no traces in elastic.co documentations. Correct me if invalid.

---

## [Saving a static dahboard in Kibana5](https://discuss.elastic.co/t/saving-a-static-dahboard-in-kibana5/74474)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 4\
**Last updated:** [February 13, 2017, 5:03pm UTC](https://discuss.elastic.co/t/saving-a-static-dahboard-in-kibana5/74474 "2017-02-13T17:03:20Z")

</div>

Hi, I have created a dashboard which I would like to save to a file which I can load after next clean installation of my ELK stack by using curl. Is this possible in Kibana5? I found some limited documentation for …

---

## ['totalHits' gets changed unexpectedly while scrolling SearchResponse](https://discuss.elastic.co/t/totalhits-gets-changed-unexpectedly-while-scrolling-searchresponse/3366)

<div class="topic-metadata">

**Author:** [@Alex\_Wajda](https://discuss.elastic.co/u/Alex_Wajda)\
**Replies:** 4\
**Last updated:** [October 11, 2010, 7:17pm UTC](https://discuss.elastic.co/t/totalhits-gets-changed-unexpectedly-while-scrolling-searchresponse/3366 "2010-10-11T19:17:20Z")

</div>

Hi guys, I'm scrolling the query result using the approach described here http://gist.github.com/517664 (elasticsearch version 0.10.0) For some reasons the total hits number unexpectedly decreases during scrolli…

---

## [Heavy CPU usage in APM Agents when APM-servers goes down](https://discuss.elastic.co/t/heavy-cpu-usage-in-apm-agents-when-apm-servers-goes-down/164254)

<div class="topic-metadata">

**Author:** [@pabloborh](https://discuss.elastic.co/u/pabloborh)\
**Replies:** 6\
**Last updated:** [January 15, 2019, 8:39am UTC](https://discuss.elastic.co/t/heavy-cpu-usage-in-apm-agents-when-apm-servers-goes-down/164254 "2019-01-15T08:39:47Z")

</div>

Hi! Yesterday i saw in one of my testing environment that agents was consuming a lot of CPU because they was trying to reconnect to APM Server (was down) Is it possible configure reconnection options to avoid that heav…

---

## [Is the filter aggregation broken?](https://discuss.elastic.co/t/is-the-filter-aggregation-broken/54658)

<div class="topic-metadata">

**Author:** [@chris16](https://discuss.elastic.co/u/chris16)\
**Replies:** 6\
**Last updated:** [July 7, 2016, 1:33pm UTC](https://discuss.elastic.co/t/is-the-filter-aggregation-broken/54658 "2016-07-07T13:33:43Z")

</div>

I'm getting a shard failure with Elasticsearch 2.3.3 due to a min aggregation being run on an inappropriate field however, the min aggregation is wrapped in a filter aggregation that I thought was supposed to avoid this. …

---

## [Kibana iframe share not work for chrome](https://discuss.elastic.co/t/kibana-iframe-share-not-work-for-chrome/87173)

<div class="topic-metadata">

**Author:** [@mt.michael](https://discuss.elastic.co/u/mt.michael)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 9:29pm UTC](https://discuss.elastic.co/t/kibana-iframe-share-not-work-for-chrome/87173 "2017-05-25T21:29:14Z")

</div>

I'm using version 5.1 for both kibana and elasticsearch. I'm trying to add visualization to my web by using those share embedded iframe. It works in firefox but not in chrome. I opened developer tools and it seems when…

---

## [Logstash and MQTT](https://discuss.elastic.co/t/logstash-and-mqtt/219932)

<div class="topic-metadata">

**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\
**Replies:** 0\
**Last updated:** [February 19, 2020, 9:41am UTC](https://discuss.elastic.co/t/logstash-and-mqtt/219932 "2020-02-19T09:41:38Z")

</div>

I have been looking for a way to get data from an MQTT broker into ES. The only thing i found were 2+ years old posts which didn't get me anywhere. This makes me wonder: Is there a specific reason why MQTT is not suppor…

---

## [What is the point and purpose of ca\_trusted\_fingerprint?](https://discuss.elastic.co/t/what-is-the-point-and-purpose-of-ca-trusted-fingerprint/329623)

<div class="topic-metadata">

**Author:** [@jba](https://discuss.elastic.co/u/jba)\
**Replies:** 3\
**Last updated:** [April 9, 2023, 5:40pm UTC](https://discuss.elastic.co/t/what-is-the-point-and-purpose-of-ca-trusted-fingerprint/329623 "2023-04-09T17:40:38Z")

</div>

What is the point of adding the ca\_trusted\_fingerprint parameter to an logstash-output-elasticsearch section in an output filter? Is it purely to defend against a possible attack on DNS servers? Misconfiguration of the E…

---

## [Failed on parsing mappings on index creation \[nyc\_taxis\]](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 8\
**Last updated:** [September 21, 2022, 11:03am UTC](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977 "2022-09-21T11:03:49Z")

</div>

Hi All, I got below error while running benchmarking with nyc\_taxis track. failed on parsing mappings on index creation \[nyc\_taxis\]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server…

---

## [Tomcat elastic-apm-agent, and application version in context path fails on ProtectionDomain](https://discuss.elastic.co/t/tomcat-elastic-apm-agent-and-application-version-in-context-path-fails-on-protectiondomain/184899)

<div class="topic-metadata">

**Author:** [@Paul\_Harris](https://discuss.elastic.co/u/Paul_Harris)\
**Replies:** 8\
**Last updated:** [June 12, 2019, 5:19am UTC](https://discuss.elastic.co/t/tomcat-elastic-apm-agent-and-application-version-in-context-path-fails-on-protectiondomain/184899 "2019-06-12T05:19:18Z")

</div>

I'm currently configuring a Java app in tomcat7 to use elastic-apm-agent. Java - elastic-apm-agent-1.6.1 Tomcat is running on a linux ec2-instance, its' currently at tomcat-7.0.94. I've copied the agent in, added the …

---

## [Elasticsearch cluster health intermittently flaps between 'GREEN' and 'YELLOW'](https://discuss.elastic.co/t/elasticsearch-cluster-health-intermittently-flaps-between-green-and-yellow/157136)

<div class="topic-metadata">

**Author:** [@kriket](https://discuss.elastic.co/u/kriket)\
**Replies:** 8\
**Last updated:** [December 5, 2018, 12:38am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-health-intermittently-flaps-between-green-and-yellow/157136 "2018-12-05T00:38:07Z")

</div>

Elasticsearch version = 5.6.8 We are running a 7 node cluster with "ZERO" replicas, like this: { "cluster\_name": "my\_cluster", "status": "green", "timed\_out": false, "number\_of\_nodes": 7, "number\_of\_data\_nodes": 7…

---

## [Curator 4.x error unable to complete action](https://discuss.elastic.co/t/curator-4-x-error-unable-to-complete-action/57164)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 3\
**Last updated:** [August 4, 2016, 1:51am UTC](https://discuss.elastic.co/t/curator-4-x-error-unable-to-complete-action/57164 "2016-08-04T01:51:38Z")

</div>

Hi, just installed curator 4.x but when run I get an error: \[root@elk01 curator\]# curator --dry-run --config /etc/curator/config.yml /etc/curator/close.yml 2016-08-04 10:13:58,583 INFO Action #1: close 2016-08-04 …

---

## [Problem with geo\_distance filter](https://discuss.elastic.co/t/problem-with-geo-distance-filter/3367)

<div class="topic-metadata">

**Author:** [@Sean\_Bowman](https://discuss.elastic.co/u/Sean_Bowman)\
**Replies:** 8\
**Last updated:** [March 30, 2011, 10:51am UTC](https://discuss.elastic.co/t/problem-with-geo-distance-filter/3367 "2011-03-30T10:51:27Z")

</div>

I tried following the examples, but I can't seem to make a geo\_distance (or any geo filter) work, using 0.10.0. Here's my steps, after starting the search index: $ curl -XPUT 'http://localhost:9200/test' $ curl …

---

## [How can I update visState value of a Visualization via ElasticSearch API?](https://discuss.elastic.co/t/how-can-i-update-visstate-value-of-a-visualization-via-elasticsearch-api/125704)

<div class="topic-metadata">

**Author:** [@nxthuong](https://discuss.elastic.co/u/nxthuong)\
**Replies:** 2\
**Last updated:** [March 28, 2018, 12:54am UTC](https://discuss.elastic.co/t/how-can-i-update-visstate-value-of-a-visualization-via-elasticsearch-api/125704 "2018-03-28T00:54:43Z")

</div>

I want to update my Kibana chart by update .kibana index. Here is what I'm doing: POST .kibana/doc/visualization:fdf49d50-2c2c-11e8-8116-8b096c761d1b/\_update { "script": "ctx.\_source.visualization.visState = params.v…

---

## [Kibana rule creation fails using REST API](https://discuss.elastic.co/t/kibana-rule-creation-fails-using-rest-api/296771)

<div class="topic-metadata">

**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\
**Replies:** 7\
**Last updated:** [February 9, 2022, 8:19pm UTC](https://discuss.elastic.co/t/kibana-rule-creation-fails-using-rest-api/296771 "2022-02-09T20:19:38Z")

</div>

I am trying to create a rule using REST API. I tried using curl and also using the console. I get the following error when I try to create the rule. \[types removal\] Specifying types in document index requests is deprec…

---

## [Systemd\[1\]: Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/systemd-1-failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/269634)

<div class="topic-metadata">

**Author:** [@Elam](https://discuss.elastic.co/u/Elam)\
**Replies:** 1\
**Last updated:** [April 14, 2021, 1:00am UTC](https://discuss.elastic.co/t/systemd-1-failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/269634 "2021-04-14T01:00:59Z")

</div>

Please some one have an idea how to start filebeats to read data from log and send it to elasticsearch. I have this issues: systemd\[1\]: Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch.…

---

## [Remote skip\_unavailable?how to set?](https://discuss.elastic.co/t/remote-skip-unavailable-how-to-set/136985)

<div class="topic-metadata">

**Author:** [@ququ](https://discuss.elastic.co/u/ququ)\
**Replies:** 7\
**Last updated:** [June 25, 2018, 1:59am UTC](https://discuss.elastic.co/t/remote-skip-unavailable-how-to-set/136985 "2018-06-25T01:59:06Z")

</div>

Follow the instrument in Cross cluster Search, use PUT \_cluster/settings { "persistent":{ "search.remote.cluster\*.skip\_unavailable":true } } reply as below: "error":{ "type":"illegal\_argument\_exception", "reas…

---

## [How to add new line in between string field](https://discuss.elastic.co/t/how-to-add-new-line-in-between-string-field/40257)

<div class="topic-metadata">

**Author:** [@srujani](https://discuss.elastic.co/u/srujani)\
**Replies:** 1\
**Last updated:** [December 16, 2016, 1:48pm UTC](https://discuss.elastic.co/t/how-to-add-new-line-in-between-string-field/40257 "2016-12-16T13:48:49Z")

</div>

Hi, Added the below configuration in logstash mutate { add\_field =\> \["temp", "Adapter Name: %{adaptername} Records Imported: %{records} Records Failed: %{\[failedrecords\]\[1\]} "\] i would like to display th…

[Previous page](https://discuss.elastic.co/top.md?page=1009&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1011&per_page=50&period=all)
