# Top

**URL:** https://discuss.elastic.co/top.md?page=1013&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1014

---

## [Unable to sort kibana based on timestamp in UI but API call works](https://discuss.elastic.co/t/unable-to-sort-kibana-based-on-timestamp-in-ui-but-api-call-works/99873)

<div class="topic-metadata">

**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\
**Replies:** 2\
**Last updated:** [September 11, 2017, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-sort-kibana-based-on-timestamp-in-ui-but-api-call-works/99873 "2017-09-11T16:21:01Z")

</div>

I am having an issue where am unable to sort logs in kibana based on kibana in our production environment but works fine in pre-production. Our index pattern is logstash-cos-\* and time field is set to @timestamp. In one …

---

## [Two difference group\_id get a same consumer of kafka](https://discuss.elastic.co/t/two-difference-group-id-get-a-same-consumer-of-kafka/58121)

<div class="topic-metadata">

**Author:** [@da\_Teng](https://discuss.elastic.co/u/da_Teng)\
**Replies:** 2\
**Last updated:** [August 16, 2016, 1:16pm UTC](https://discuss.elastic.co/t/two-difference-group-id-get-a-same-consumer-of-kafka/58121 "2016-08-16T13:16:40Z")

</div>

I use two logstash server with two difference group\_id in input.kafka to get log data from kafka-input and ,but they become a same consumer and average the log data. What the error I am not discover? This is logstash-1…

---

## [Logstash in Kubernetes Not Using ServiceAccount with IAM Role](https://discuss.elastic.co/t/logstash-in-kubernetes-not-using-serviceaccount-with-iam-role/286081)

<div class="topic-metadata">

**Author:** [@xzxpurple2017](https://discuss.elastic.co/u/xzxpurple2017)\
**Replies:** 3\
**Last updated:** [October 18, 2021, 7:02pm UTC](https://discuss.elastic.co/t/logstash-in-kubernetes-not-using-serviceaccount-with-iam-role/286081 "2021-10-18T19:02:59Z")

</div>

I have a Logstash input to pull logs from S3. I attached a serviceaccount with IAM role to interact with S3 to the Logstash stateful set. I checked that the env variables on the container have AWS\_ROLE\_ARN and AWS\_WEB\_…

---

## [Watcher: ERROR with multiple emails in to/cc fields via template](https://discuss.elastic.co/t/watcher-error-with-multiple-emails-in-to-cc-fields-via-template/100496)

<div class="topic-metadata">

**Author:** [@pabloc](https://discuss.elastic.co/u/pabloc)\
**Replies:** 3\
**Last updated:** [October 9, 2017, 7:46pm UTC](https://discuss.elastic.co/t/watcher-error-with-multiple-emails-in-to-cc-fields-via-template/100496 "2017-10-09T19:46:14Z")

</div>

Hello, I'm experiencing the exact problem detailed in the bellow which seems to be closed with no solution. I'm running version 2.4.1. Any news on this? Thank you.

---

## [Delete type in index using java api](https://discuss.elastic.co/t/delete-type-in-index-using-java-api/91936)

<div class="topic-metadata">

**Author:** [@v.kumar](https://discuss.elastic.co/u/v.kumar)\
**Replies:** 3\
**Last updated:** [July 5, 2017, 9:18pm UTC](https://discuss.elastic.co/t/delete-type-in-index-using-java-api/91936 "2017-07-05T21:18:14Z")

</div>

Hi All, I want to one type in index but not mapping. I am using ES 2.2 . How can i do that. Using curl I can do like DELETE /indexName/type/\_query { "query": { "match": { "hd": "Open" } } } I…

---

## [How to improve performance of elasticsearch input in Logstash](https://discuss.elastic.co/t/how-to-improve-performance-of-elasticsearch-input-in-logstash/58513)

<div class="topic-metadata">

**Author:** [@MikeM](https://discuss.elastic.co/u/MikeM)\
**Replies:** 3\
**Last updated:** [August 22, 2016, 9:24pm UTC](https://discuss.elastic.co/t/how-to-improve-performance-of-elasticsearch-input-in-logstash/58513 "2016-08-22T21:24:35Z")

</div>

I want to use logstash to pull current elasticsearch documents, run them through filters, and then update them in the same cluster. I am trying to figure out how to get the best performance, and I'm first looking at the…

---

## [Top N - how to link to dashboard with filter instead of query](https://discuss.elastic.co/t/top-n-how-to-link-to-dashboard-with-filter-instead-of-query/141687)

<div class="topic-metadata">

**Author:** [@derentis](https://discuss.elastic.co/u/derentis)\
**Replies:** 1\
**Last updated:** [July 26, 2018, 6:54pm UTC](https://discuss.elastic.co/t/top-n-how-to-link-to-dashboard-with-filter-instead-of-query/141687 "2018-07-26T18:54:34Z")

</div>

I have a customized Systems Overview dashboard for Beats data, and I wanted it to link to a Host Details dashboard by drilling down not by query, because query doesn't correctly filter some of the visualizations, but by …

---

## [Creating custom tracks in Rally with Docker image](https://discuss.elastic.co/t/creating-custom-tracks-in-rally-with-docker-image/234515)

<div class="topic-metadata">

**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 2:57pm UTC](https://discuss.elastic.co/t/creating-custom-tracks-in-rally-with-docker-image/234515 "2020-05-27T14:57:32Z")

</div>

I am trying to create a custom track from an existing index using the instructions in the Rally documentation page. I am running Rally as a Docker Image. Following is the commad that I used to create the track docker …

---

## [Kibana is not ready yet error after v7.16.2 Upgrade](https://discuss.elastic.co/t/kibana-is-not-ready-yet-error-after-v7-16-2-upgrade/293652)

<div class="topic-metadata">

**Author:** [@vincpas](https://discuss.elastic.co/u/vincpas)\
**Replies:** 5\
**Last updated:** [January 22, 2022, 9:15pm UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet-error-after-v7-16-2-upgrade/293652 "2022-01-22T21:15:02Z")

</div>

I have completed upgrading Elasticsearch cluster from 7.10.2 to 7.16.2. After completing Kibana upgrade from 7.10.2 to 7.16.2, I am now getting Kibana is not ready yet error. I verified the Elasticsearch cluster is in go…

---

## [Heartbeath - error: Please make sure that multiple beats are not sharing the same data path (path.data)](https://discuss.elastic.co/t/heartbeath-error-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/339396)

<div class="topic-metadata">

**Author:** [@yari\_arcopinto](https://discuss.elastic.co/u/yari_arcopinto)\
**Replies:** 8\
**Last updated:** [July 31, 2023, 1:45pm UTC](https://discuss.elastic.co/t/heartbeath-error-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/339396 "2023-07-31T13:45:16Z")

</div>

Hello to all, I have installed on my ubuntu server the module Heartbeat for monitoring the healthy of infrastructure server, by the way i'm facing with the issue: Please make sure that multiple beats are not sharing th…

---

## [Help needed in making a query for elastic search](https://discuss.elastic.co/t/help-needed-in-making-a-query-for-elastic-search/250477)

<div class="topic-metadata">

**Author:** [@vishalYadav](https://discuss.elastic.co/u/vishalYadav)\
**Replies:** 8\
**Last updated:** [October 4, 2020, 8:20am UTC](https://discuss.elastic.co/t/help-needed-in-making-a-query-for-elastic-search/250477 "2020-10-04T08:20:26Z")

</div>

Hey,I am working on a index which has 300 fieds in it.Now there is a requirement where i have to make 2 field irrelevent for searching in that index.As of now i am using \*.\* to search . i studied somewhere we can mak…

---

## [APM config overriding](https://discuss.elastic.co/t/apm-config-overriding/207854)

<div class="topic-metadata">

**Author:** [@Svetlana\_Nikitina](https://discuss.elastic.co/u/Svetlana_Nikitina)\
**Replies:** 8\
**Last updated:** [December 5, 2019, 4:56pm UTC](https://discuss.elastic.co/t/apm-config-overriding/207854 "2019-12-05T16:56:14Z")

</div>

Guys, first of all thank you for fixing this issue APM config\_file location We have switched to 1.11.0 and it works like a charm ATM I am experiencing anther issue with configs Docs say that: The first configuration…

---

## [Postman data into http\_poller method](https://discuss.elastic.co/t/postman-data-into-http-poller-method/141690)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 8\
**Last updated:** [July 31, 2018, 1:35pm UTC](https://discuss.elastic.co/t/postman-data-into-http-poller-method/141690 "2018-07-31T13:35:59Z")

</div>

Hi all, We are working on fetching data from a monitoring tool into elastic search, the integration is possible through postman wherein i'll pass user credentials and a service tag to get the output. Is there a way in …

---

## [Runtime field not appearing in search results](https://discuss.elastic.co/t/runtime-field-not-appearing-in-search-results/325425)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 2\
**Last updated:** [February 14, 2023, 12:54am UTC](https://discuss.elastic.co/t/runtime-field-not-appearing-in-search-results/325425 "2023-02-14T00:54:00Z")

</div>

I'm trying to set up a run time field to calculate the total of an e-commerce purchase. But there is something wrong with the way I'm declaring run time field, and it might have something to do with nested objects. Fir…

---

## [Does Elastic Cloud have any hard limits on http.max\_content\_length](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 2\
**Last updated:** [September 13, 2022, 12:21pm UTC](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285 "2022-09-13T12:21:28Z")

</div>

Hi, we are currently running AWS OpenSearch and are hitting some hard limits on http.max\_content\_length. This is a non-configurable 100mb limit. We are using Logstash to process events from Filebeat and hitting an endles…

---

## [Type为text 的情况下，设置"index"为 "not\_analyzed"好像不起作用](https://discuss.elastic.co/t/type-text-index-not-analyzed/135285)

<div class="topic-metadata">

**Author:** [@hubiao](https://discuss.elastic.co/u/hubiao)\
**Replies:** 2\
**Last updated:** [June 28, 2018, 9:06am UTC](https://discuss.elastic.co/t/type-text-index-not-analyzed/135285 "2018-06-28T09:06:27Z")

</div>

"properties": { "columns": { "properties": { "id": { "type": "keyword", "index": "not\_analyzed" }, "name": { "type": "keyword", "index": "not\_analyzed" }, …

---

## [How to install filebeat on Linux 3.10.0-327.18.2.el7.ppc64 GNU/Linux OS running on Power8?](https://discuss.elastic.co/t/how-to-install-filebeat-on-linux-3-10-0-327-18-2-el7-ppc64-gnu-linux-os-running-on-power8/60529)

<div class="topic-metadata">

**Author:** [@VIJAYP](https://discuss.elastic.co/u/VIJAYP)\
**Replies:** 2\
**Last updated:** [September 14, 2016, 6:15pm UTC](https://discuss.elastic.co/t/how-to-install-filebeat-on-linux-3-10-0-327-18-2-el7-ppc64-gnu-linux-os-running-on-power8/60529 "2016-09-14T18:15:59Z")

</div>

Hi, I'm trying to install Filebeat on Linux 3.10.0-327.18.2.el7.ppc64 GNU/Linux OS which is running on Power 8 PC. I tried to install filebeats referring https://www.elastic.co/guide/en/beats/filebeat/current/fileb…

---

## [callWithRequest called with an invalid endpoint: client.search Error in kibana](https://discuss.elastic.co/t/callwithrequest-called-with-an-invalid-endpoint-client-search-error-in-kibana/55691)

<div class="topic-metadata">

**Author:** [@Krugar\_Kali](https://discuss.elastic.co/u/Krugar_Kali)\
**Replies:** 2\
**Last updated:** [July 18, 2016, 7:19pm UTC](https://discuss.elastic.co/t/callwithrequest-called-with-an-invalid-endpoint-client-search-error-in-kibana/55691 "2016-07-18T19:19:59Z")

</div>

Hey guys, I am trying to develop a visualization plugin for kibana. I was following TIm Roes tutorial and changed the code in the given link as follows : server.route({ path: '/api/traffic\_light\_vis/search/{na…

---

## [Java API TransportClient Threadpool](https://discuss.elastic.co/t/java-api-transportclient-threadpool/22730)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\
**Replies:** 2\
**Last updated:** [March 18, 2015, 8:16am UTC](https://discuss.elastic.co/t/java-api-transportclient-threadpool/22730 "2015-03-18T08:16:21Z")

</div>

Hi all, I would like to understand how TransportClient works in terms of how it uses it's thread pool. - As it uses a threadpool I assume that every request is performed in it's own thread - is that corre…

---

## [Heatmap will show success rate using vega-lite or vega](https://discuss.elastic.co/t/heatmap-will-show-success-rate-using-vega-lite-or-vega/297600)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 7\
**Last updated:** [February 23, 2022, 2:48pm UTC](https://discuss.elastic.co/t/heatmap-will-show-success-rate-using-vega-lite-or-vega/297600 "2022-02-23T14:48:50Z")

</div>

Hi Everyone, I need to create a heatmap that will show the success rate for the two Types of Partners. Now let me brief you about my requirement. We have transaction-level data for two types of partners, ex: Type A, …

---

## [Logstash is not loading the filter conf files](https://discuss.elastic.co/t/logstash-is-not-loading-the-filter-conf-files/241699)

<div class="topic-metadata">

**Author:** [@kittu9999](https://discuss.elastic.co/u/kittu9999)\
**Replies:** 7\
**Last updated:** [August 7, 2020, 3:43am UTC](https://discuss.elastic.co/t/logstash-is-not-loading-the-filter-conf-files/241699 "2020-08-07T03:43:55Z")

</div>

HI Team, we have upgrade our ELK stack from V5.0.1 to V6.8.1. Basically we moved to docker containers. we are having an issue with new logstash and the necessary fields are not showing in kibana. we have the same conf…

---

## [Numeric が出るはずのbuckets\_pathにおけるgot: \[Object\[\]\]エラーについて](https://discuss.elastic.co/t/numeric-buckets-path-got-object/233699)

<div class="topic-metadata">

**Author:** [@111341](https://discuss.elastic.co/u/111341)\
**Replies:** 7\
**Last updated:** [May 22, 2020, 7:19am UTC](https://discuss.elastic.co/t/numeric-buckets-path-got-object/233699 "2020-05-22T07:19:39Z")

</div>

お世話になります。質問させていただきます。 現在、aggsで出力された中央値を条件に使おうとしています。 サンプルクエリでは、中央値の出力までは出来ていますが、計算に使おうとすると、 "type": "aggregation\_execution\_exception", "reason": "buckets\_path must reference either a number value or a single val…

---

## [Kibana and Elasticsearch not communicating with each other](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124)

<div class="topic-metadata">

**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 9:19am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124 "2019-08-09T09:19:58Z")

</div>

Elasticsearch and Kibana are running on different VMs. I have tried about every setting in each of them to get them to communicate. Each are version 7.3. When I test Kibana I get the message Kibana not ready yet. Not…

---

## [Understanding scaling for a read heavy cluster](https://discuss.elastic.co/t/understanding-scaling-for-a-read-heavy-cluster/275322)

<div class="topic-metadata">

**Author:** [@andyleanlibrary](https://discuss.elastic.co/u/andyleanlibrary)\
**Replies:** 3\
**Last updated:** [June 10, 2021, 1:05am UTC](https://discuss.elastic.co/t/understanding-scaling-for-a-read-heavy-cluster/275322 "2021-06-10T01:05:36Z")

</div>

Hi, I'm trying to understand how to scale an Elasticsearch cluster which is extremely slow right now! Can anyone help? It's approx. 124,000,000 documents totalling about 60GB. I index the data once per month. In term…

---

## [Elastic Rolling upgrade 6.6.0 to 6.8](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 3\
**Last updated:** [November 7, 2019, 3:33pm UTC](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967 "2019-11-07T15:33:43Z")

</div>

Today, I tried to upgrade my 5 nodes cluster from 6.6.1 to 6.8. I planned to apply the rolling upgrade procedure I found here: https://www.elastic.co/guide/en/elasticsearch/reference/6.8/rolling-upgrades.html I then d…

---

## [Rollup job failed to find field](https://discuss.elastic.co/t/rollup-job-failed-to-find-field/144233)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 11:32am UTC](https://discuss.elastic.co/t/rollup-job-failed-to-find-field/144233 "2018-08-22T11:32:21Z")

</div>

I tried to create a data rollup on data that was pulled in from Logstash but I was getting error: failed to find field \[@timestamp\] and \[missing\] is not provided. This is the error in the /var/log/elasticsearch folder. …

---

## [Nested KV Filter in logstash](https://discuss.elastic.co/t/nested-kv-filter-in-logstash/130223)

<div class="topic-metadata">

**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\
**Replies:** 3\
**Last updated:** [May 11, 2018, 3:30pm UTC](https://discuss.elastic.co/t/nested-kv-filter-in-logstash/130223 "2018-05-11T15:30:30Z")

</div>

Hi, Here is a line from my audit.log file "type=CRED\_DISP msg=audit(1525254633.039:542208): pid=35761 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam\_env,pam\_fprintd acct="root" exe="/usr/bin/sudo…

---

## [NEST 5.5 Attribute mapping and custom JsonConverter not working](https://discuss.elastic.co/t/nest-5-5-attribute-mapping-and-custom-jsonconverter-not-working/96770)

<div class="topic-metadata">

**Author:** [@Kennethtruyers](https://discuss.elastic.co/u/Kennethtruyers)\
**Replies:** 3\
**Last updated:** [August 15, 2017, 1:31am UTC](https://discuss.elastic.co/t/nest-5-5-attribute-mapping-and-custom-jsonconverter-not-working/96770 "2017-08-15T01:31:16Z")

</div>

We're using Nest 5.5.0 and attribute mapping to create our indices in Elasticsearch. As part of some of our attributes, we're using custom JsonConverters. We're migrating from 1.7.3, where this mapping was handled corre…

---

## [Increase in response time for aggregations in 7.10.1](https://discuss.elastic.co/t/increase-in-response-time-for-aggregations-in-7-10-1/276295)

<div class="topic-metadata">

**Author:** [@rgopalan](https://discuss.elastic.co/u/rgopalan)\
**Replies:** 6\
**Last updated:** [July 19, 2021, 12:54am UTC](https://discuss.elastic.co/t/increase-in-response-time-for-aggregations-in-7-10-1/276295 "2021-07-19T00:54:56Z")

</div>

Hi, We recently upgraded our ElasticSearch cluster from 7.7 to 7.10.1 and we are seeing an increase in the response time. One query that uses aggregations has seen the response time increase by 1-1.5s. Setup \* 3 Mast…

---

## [Elasticsearch cluster is down](https://discuss.elastic.co/t/elasticsearch-cluster-is-down/207917)

<div class="topic-metadata">

**Author:** [@yaminisridaran](https://discuss.elastic.co/u/yaminisridaran)\
**Replies:** 4\
**Last updated:** [November 15, 2019, 4:04pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-is-down/207917 "2019-11-15T16:04:50Z")

</div>

We have deployed elasticsearch cluster on kubernetes cluster. We have deployed 3 master nodes, 3 client nodes and 5 data nodes. We are able to ping the endpoint ips mentioned in the logs from the master,client and dat…

---

## [Why \_grokparsefailure?](https://discuss.elastic.co/t/why-grokparsefailure/160113)

<div class="topic-metadata">

**Author:** [@trelo](https://discuss.elastic.co/u/trelo)\
**Replies:** 4\
**Last updated:** [December 13, 2018, 12:24pm UTC](https://discuss.elastic.co/t/why-grokparsefailure/160113 "2018-12-13T12:24:20Z")

</div>

Hi, here is my config: input { stdin {} file { codec =\> multiline { pattern =\> "^{%{DATESTAMP\_EVENTLOG}" what =\> "previous" negate =\> true multiline\_tag =\> "" } path =\> "/tmp/test…

---

## [Exception when installing S3 plugin](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 4\
**Last updated:** [April 30, 2018, 4:29pm UTC](https://discuss.elastic.co/t/exception-when-installing-s3-plugin/130010 "2018-04-30T16:29:11Z")

</div>

I’ve received the following exception when trying to install the S3 plugin on one of the new nodes. I was able to install it on my older nodes and don’t recall running into this problem before. OS: Ubuntu 18.04 LTS JRE…

---

## [Elasticsearch can't find java!](https://discuss.elastic.co/t/elasticsearch-cant-find-java/110918)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 4\
**Last updated:** [December 9, 2017, 6:30am UTC](https://discuss.elastic.co/t/elasticsearch-cant-find-java/110918 "2017-12-09T06:30:44Z")

</div>

I install elasticsearch 6.0.1(latest version) set up the path \[image\] \[image\] thank you in advance!

---

## [Replace @timestamp with Time field in my log](https://discuss.elastic.co/t/replace-timestamp-with-time-field-in-my-log/94526)

<div class="topic-metadata">

**Author:** [@Sri\_Divya\_Ayalasomay](https://discuss.elastic.co/u/Sri_Divya_Ayalasomay)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 1:22pm UTC](https://discuss.elastic.co/t/replace-timestamp-with-time-field-in-my-log/94526 "2017-08-08T13:22:27Z")

</div>

I am trying to replace time field in my log time : here is my config file: I am new to elastic search , tried couple of things but failed. nput { file{ path=\>"C:\\logs\\testing1.csv" start\_position=\>"beginning" } } fi…

---

## [Exporting a table with many many fields from the original csv](https://discuss.elastic.co/t/exporting-a-table-with-many-many-fields-from-the-original-csv/53033)

<div class="topic-metadata">

**Author:** [@luis](https://discuss.elastic.co/u/luis)\
**Replies:** 4\
**Last updated:** [June 22, 2016, 3:45pm UTC](https://discuss.elastic.co/t/exporting-a-table-with-many-many-fields-from-the-original-csv/53033 "2016-06-22T15:45:25Z")

</div>

Hi, I have a csv file something like this: start-time,end-time,name,surname,age,address,distance-foot,distance-bike 10:03:34 day1,10:54:32 day1,john,smith,25,somestreet,5,25 ... 17:23:01 day1, 18:10:10 day1,john, smi…

---

## [And/Or Filter using Java API](https://discuss.elastic.co/t/and-or-filter-using-java-api/7672)

<div class="topic-metadata">

**Author:** [@ama\_sindhuc](https://discuss.elastic.co/u/ama_sindhuc)\
**Replies:** 4\
**Last updated:** [April 5, 2014, 8:52am UTC](https://discuss.elastic.co/t/and-or-filter-using-java-api/7672 "2014-04-05T08:52:06Z")

</div>

Hi I have indexed the following document (as indicated below) in elastic search and attempting to apply a filter query using Java API (code below) However I am not receiving any results . Code is indicated bel…

---

## [Beats 5.6 and Kafka 1.0 SSL handshake error](https://discuss.elastic.co/t/beats-5-6-and-kafka-1-0-ssl-handshake-error/114145)

<div class="topic-metadata">

**Author:** [@jmtmoulin](https://discuss.elastic.co/u/jmtmoulin)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:53am UTC](https://discuss.elastic.co/t/beats-5-6-and-kafka-1-0-ssl-handshake-error/114145 "2018-01-05T11:53:45Z")

</div>

I hope I am publishing this is in the right spot, since this involves more than just beats. Currently I am having issues communicating with kafka using beats (filebeat, metricbeat) with SSL. I’m at the point where I do k…

---

## [Concatenation of two fields](https://discuss.elastic.co/t/concatenation-of-two-fields/317691)

<div class="topic-metadata">

**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 3:20pm UTC](https://discuss.elastic.co/t/concatenation-of-two-fields/317691 "2022-10-31T15:20:16Z")

</div>

Hello, I want to concatenate/combine/merge two or three fields and assign this combined value to new field (mapping created for new field) after indexing. could you please suggest how to do this? Thanks!

---

## [Add Multiple input plugins in Logstash](https://discuss.elastic.co/t/add-multiple-input-plugins-in-logstash/123585)

<div class="topic-metadata">

**Author:** [@zakkhan](https://discuss.elastic.co/u/zakkhan)\
**Replies:** 2\
**Last updated:** [March 13, 2018, 1:48pm UTC](https://discuss.elastic.co/t/add-multiple-input-plugins-in-logstash/123585 "2018-03-13T13:48:25Z")

</div>

I need to add two different input plugins in logstash i.e. Filebeat and jdbc but only jdbc is working. I am not sure is this the right way i am adding both of them? Please let me know what to do in this kind of scenario: …

---

## [Stale data retuned after index request](https://discuss.elastic.co/t/stale-data-retuned-after-index-request/7337)

<div class="topic-metadata">

**Author:** [@Andrius\_Juozapaitis](https://discuss.elastic.co/u/Andrius_Juozapaitis)\
**Replies:** 2\
**Last updated:** [April 16, 2012, 2:07pm UTC](https://discuss.elastic.co/t/stale-data-retuned-after-index-request/7337 "2012-04-16T14:07:14Z")

</div>

Hey, I am probably just missing something obvious, but I am getting stale data when searching right after the index update: \[code\] Settings settings = ImmutableSettings.settingsBuilder().put("client.tra…

---

## [Audit authentication failed](https://discuss.elastic.co/t/audit-authentication-failed/216467)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 0\
**Last updated:** [January 24, 2020, 4:05pm UTC](https://discuss.elastic.co/t/audit-authentication-failed/216467 "2020-01-24T16:05:23Z")

</div>

Hi, I'm using elk stack in version 6.8.3, I have enabled security function, it's OK. Each beats needs an account to send logs to elasticsearch. But I would like to track the authentication failed from agent and from Ki…

---

## [Want to parse a nested json form filebeat to elasticsearch](https://discuss.elastic.co/t/want-to-parse-a-nested-json-form-filebeat-to-elasticsearch/187771)

<div class="topic-metadata">

**Author:** [@yuvaram\_mohan](https://discuss.elastic.co/u/yuvaram_mohan)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 7:17am UTC](https://discuss.elastic.co/t/want-to-parse-a-nested-json-form-filebeat-to-elasticsearch/187771 "2019-06-27T07:17:34Z")

</div>

Hello! I am having a hard time finding the right configuration for Filebeat to be able to correctly parse nested JSON log lines. filbeat.yml file \</ filebeat.inputs: type: log enabled: true paths: D:/Development…

---

## [Adding a document to elasticsearch database with high level rest api](https://discuss.elastic.co/t/adding-a-document-to-elasticsearch-database-with-high-level-rest-api/171732)

<div class="topic-metadata">

**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\
**Replies:** 5\
**Last updated:** [March 11, 2019, 12:08pm UTC](https://discuss.elastic.co/t/adding-a-document-to-elasticsearch-database-with-high-level-rest-api/171732 "2019-03-11T12:08:00Z")

</div>

IndexRequest request = new IndexRequest (); request.index("indextest") .type(type) .id(id) .source("title",v.getTitle(),"visState",v.getVisState(),"kibanaSavedObjectM…

---

## [Python flask agent - nfailed to submit message](https://discuss.elastic.co/t/python-flask-agent-nfailed-to-submit-message/156686)

<div class="topic-metadata">

**Author:** [@sebasd44](https://discuss.elastic.co/u/sebasd44)\
**Replies:** 5\
**Last updated:** [November 14, 2018, 6:56pm UTC](https://discuss.elastic.co/t/python-flask-agent-nfailed-to-submit-message/156686 "2018-11-14T18:56:14Z")

</div>

Hello all, i installed the apm server and runing after using a flask app only for testing the apm agent i'm getting an error from the agent perspective Connection to APM Server timed out (url: http://X.X.X.X:8200/v…

---

## [Setting up elasticsearch on win 2008 production server](https://discuss.elastic.co/t/setting-up-elasticsearch-on-win-2008-production-server/49548)

<div class="topic-metadata">

**Author:** [@yousata](https://discuss.elastic.co/u/yousata)\
**Replies:** 5\
**Last updated:** [May 10, 2016, 7:45am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-on-win-2008-production-server/49548 "2016-05-10T07:45:46Z")

</div>

I need to configure elasticsearch so that it is accessible with sub domain, e.g. test.web.com over https and http. I can access it with ip of the server and appending it with port :9200 but the requirement is i want to a…

---

## [Embed Kibana 7.3.1 in iframe behind nginx?](https://discuss.elastic.co/t/embed-kibana-7-3-1-in-iframe-behind-nginx/197481)

<div class="topic-metadata">

**Author:** [@NetwarSystem](https://discuss.elastic.co/u/NetwarSystem)\
**Replies:** 3\
**Last updated:** [August 30, 2019, 10:27pm UTC](https://discuss.elastic.co/t/embed-kibana-7-3-1-in-iframe-behind-nginx/197481 "2019-08-30T22:27:00Z")

</div>

I have a single VM with Elastic 7.3.1 and Kibana 7.3.1 - a fresh install, just so I can do this without stepping on production stuff. The system works fine, log in with username and password, that's great. The nginx reve…

---

## [Modify the uri of the incoming request - Rest Filter](https://discuss.elastic.co/t/modify-the-uri-of-the-incoming-request-rest-filter/118978)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 9:33am UTC](https://discuss.elastic.co/t/modify-the-uri-of-the-incoming-request-rest-filter/118978 "2018-02-09T09:33:01Z")

</div>

Hi All, I have a custom plugin which implements RestHandler and intercepts the incoming request via the handleRequest method. I have a requirement that if the incoming query uri is like /\*/\_search then i need to repl…

---

## [Logstash Monitoring - Core Operations](https://discuss.elastic.co/t/logstash-monitoring-core-operations/100329)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 3\
**Last updated:** [September 13, 2017, 4:58pm UTC](https://discuss.elastic.co/t/logstash-monitoring-core-operations/100329 "2017-09-13T16:58:16Z")

</div>

I have a question related to slide 452 in core operations . It mentions as below configure your Logstash nodes to send metrics to your production cluster (not your Monitoring cluster): 452 xpack.monitoring.elasticse…

---

## [Filebeat panics on CentOS 7.2 when stdin is defined as an input](https://discuss.elastic.co/t/filebeat-panics-on-centos-7-2-when-stdin-is-defined-as-an-input/52450)

<div class="topic-metadata">

**Author:** [@gaahrdner](https://discuss.elastic.co/u/gaahrdner)\
**Replies:** 3\
**Last updated:** [June 13, 2016, 5:06pm UTC](https://discuss.elastic.co/t/filebeat-panics-on-centos-7-2-when-stdin-is-defined-as-an-input/52450 "2016-06-13T17:06:59Z")

</div>

I can't seem to get stdin working as an input for filebeat when it's running as service under systemd. \[root@x.x.x.x log\]# hostnamectl Static hostname:xxxx Transient hostname:xxxx Icon name: computer-vm …

---

## ["index": "not\_analyzed" in elasticsearch](https://discuss.elastic.co/t/index-not-analyzed-in-elasticsearch/49567)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 3\
**Last updated:** [May 10, 2016, 10:46am UTC](https://discuss.elastic.co/t/index-not-analyzed-in-elasticsearch/49567 "2016-05-10T10:46:33Z")

</div>

i have delete mapping with the cmd curl -XDELETE 'http://localhost:9200/logstash\_log\*/' in my conf ,i have defined the index as follow, output { elasticsearch { hosts =\> localhost index =\> "logstash\_log-%{+YY…

[Previous page](https://discuss.elastic.co/top.md?page=1012&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1014&per_page=50&period=all)
