# Top **URL:** https://discuss.elastic.co/top.md?page=1018&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1019 --- ## [How to Monitor the process using metricbeat](https://discuss.elastic.co/t/how-to-monitor-the-process-using-metricbeat/318525)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 5\ **Last updated:** [November 10, 2022, 6:32am UTC](https://discuss.elastic.co/t/how-to-monitor-the-process-using-metricbeat/318525 "2022-11-10T06:32:55Z")
How to Monitor the process using metricbeat in windows. Should we include the process details in the configuration yml of metricbeat? currently without mentioning any process details in config file its only showing proc… --- ## [Removing the Observability App in Kibana 7.9.3](https://discuss.elastic.co/t/removing-the-observability-app-in-kibana-7-9-3/260846)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 6:32pm UTC](https://discuss.elastic.co/t/removing-the-observability-app-in-kibana-7-9-3/260846 "2021-01-12T18:32:08Z")
Hi, I am trying to remove Observability from the navigation menu. There does not appear to be an option in the Edit space settings. --- ## [How does Cross Cluster Replication work during a DR failover?](https://discuss.elastic.co/t/how-does-cross-cluster-replication-work-during-a-dr-failover/230734)
**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\ **Replies:** 5\ **Last updated:** [May 12, 2020, 5:40am UTC](https://discuss.elastic.co/t/how-does-cross-cluster-replication-work-during-a-dr-failover/230734 "2020-05-12T05:40:35Z")
Happy Scenario We have setup ES on two data-centers - A and B. Data is coming to A from Kafka/Spark combination hosted in A too. ES in B has a follower index. ES in A has a leader index. Both A and B elastic cluster… --- ## [Help - i'm trying Timelion but I don't have a date/timestamp field :)](https://discuss.elastic.co/t/help-im-trying-timelion-but-i-dont-have-a-date-timestamp-field/108471)
**Author:** [@gosha1128](https://discuss.elastic.co/u/gosha1128)\ **Replies:** 5\ **Last updated:** [November 21, 2017, 7:33am UTC](https://discuss.elastic.co/t/help-im-trying-timelion-but-i-dont-have-a-date-timestamp-field/108471 "2017-11-21T07:33:02Z")
Hi, I have a lot of custom data in ES, but there is no date or timestamp field. I have instead a large integer that represents UNIX time in microseconds. Can I still use Timelion ? Or do I need to do other another vi… --- ## [Tune logstash JDBC input for huge datasets](https://discuss.elastic.co/t/tune-logstash-jdbc-input-for-huge-datasets/330160)
**Author:** [@Marco\_Lagalla](https://discuss.elastic.co/u/Marco_Lagalla)\ **Replies:** 4\ **Last updated:** [April 18, 2023, 9:18am UTC](https://discuss.elastic.co/t/tune-logstash-jdbc-input-for-huge-datasets/330160 "2023-04-18T09:18:39Z")
Hi all! I am trying to migrate a very huge dataset from a source oracle database to Elasticsearch. The data that I am trying to migrate is contained in a single table, which is partitioned weekly, based on a timestamp … --- ## [Filebeat o365 module - Parsing o365.audit.data field](https://discuss.elastic.co/t/filebeat-o365-module-parsing-o365-audit-data-field/261591)
**Author:** [@opiedrah](https://discuss.elastic.co/u/opiedrah)\ **Replies:** 4\ **Last updated:** [February 3, 2021, 12:24pm UTC](https://discuss.elastic.co/t/filebeat-o365-module-parsing-o365-audit-data-field/261591 "2021-02-03T12:24:52Z")
Hi, I have filebeat 7.10 running with module o365 beat. Similar to how extendedproperties filed for azure active directory workload is parsed. How can i parse this o365.audit.data filed. the value in this field looks… --- ## [Bad request when refreshing index pattern fields](https://discuss.elastic.co/t/bad-request-when-refreshing-index-pattern-fields/220202)
**Author:** [@ridago](https://discuss.elastic.co/u/ridago)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 2:35pm UTC](https://discuss.elastic.co/t/bad-request-when-refreshing-index-pattern-fields/220202 "2020-03-03T14:35:17Z")
After trying to setup ILM on my elasticsearch index i was suddenly no longer able to refresh index patterns. I just get Error fetching fields for index pattern... and the error is always Bad request, but it refers to dif… --- ## [Bulk index with java rest client](https://discuss.elastic.co/t/bulk-index-with-java-rest-client/113432)
**Author:** [@Ionel-Mihai\_Motoc](https://discuss.elastic.co/u/Ionel-Mihai_Motoc)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 10:03am UTC](https://discuss.elastic.co/t/bulk-index-with-java-rest-client/113432 "2018-01-17T10:03:31Z")
Hello, I'm having a cluster with 2 nodes (one with 8GB and the other with 16 GB heap, both having 4 CPU cors) and i'm trying to index documents using bulk API with RestHighLevelClient. I'm creating bulks of 30000 docs,… --- ## [Filebeat fails? file.go:84: Fail to convert the event to JSON - reflect.Value.IsNil on zero Value](https://discuss.elastic.co/t/filebeat-fails-file-go-84-fail-to-convert-the-event-to-json-reflect-value-isnil-on-zero-value/44877)
**Author:** [@dromrell](https://discuss.elastic.co/u/dromrell)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 10:40pm UTC](https://discuss.elastic.co/t/filebeat-fails-file-go-84-fail-to-convert-the-event-to-json-reflect-value-isnil-on-zero-value/44877 "2016-03-21T22:40:20Z")
I am trying to ingest some large log files into ELK. Recently setup Filebeat to monitor a watch folder that I drop logs into. This has been working great on my sample data. As I copy over a directory with a days worth… --- ## [Time-lion en pratique](https://discuss.elastic.co/t/time-lion-en-pratique/39905)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 4\ **Last updated:** [February 11, 2016, 6:17pm UTC](https://discuss.elastic.co/t/time-lion-en-pratique/39905 "2016-02-11T18:17:25Z")
Bonjour, Je viens d'installer TimeLion, j'ai un index elasticsearch qui s'appelle "logstash\_baie\_z\_io\_mb" avec plusieurs colonnes dont "IOs", j'essaye donc ds timelion de faire un graph en mettant .es(logstash\_baie\_z\_i… --- ## [How do I set the pubblish\_address in logstash?](https://discuss.elastic.co/t/how-do-i-set-the-pubblish-address-in-logstash/34935)
**Author:** [@danilo\_gimenez\_ramos](https://discuss.elastic.co/u/danilo_gimenez_ramos)\ **Replies:** 4\ **Last updated:** [November 24, 2015, 11:26am UTC](https://discuss.elastic.co/t/how-do-i-set-the-pubblish-address-in-logstash/34935 "2015-11-24T11:26:51Z")
Hi, I see a lot of discussions on how to set the publish address on logstash, but all answers refers to config the bind\_host on elasticsearch server rather than logstash. My problem is, I have many servers where I ins… --- ## [Elasticsearch authentication in Docker Swarm mode](https://discuss.elastic.co/t/elasticsearch-authentication-in-docker-swarm-mode/296293)
**Author:** [@FleaLes](https://discuss.elastic.co/u/FleaLes)\ **Replies:** 7\ **Last updated:** [February 4, 2022, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-authentication-in-docker-swarm-mode/296293 "2022-02-04T13:55:28Z")
I have upgraded my Dev environment ELK stack to v 7.10.2 and I have authentication issues with connecting Kibana to Elasticsearch. Scenario The ELK stack is in Docker containers deployed in Swarm mode via a docker-comp… --- ## [SSL handshake error with logstash 7.8.0 kafka integration](https://discuss.elastic.co/t/ssl-handshake-error-with-logstash-7-8-0-kafka-integration/244894)
**Author:** [@t1m\_e](https://discuss.elastic.co/u/t1m_e)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 2:21pm UTC](https://discuss.elastic.co/t/ssl-handshake-error-with-logstash-7-8-0-kafka-integration/244894 "2020-08-13T14:21:28Z")
I'm having a hard time to make the kafka integration to work with logstash 7.8.0 and 7.8.1. My setup is relatively simple. I'm using self-signed certificates stored in a jks keystore. The logstash input is configured to… --- ## [Filebeat not sending log files](https://discuss.elastic.co/t/filebeat-not-sending-log-files/144911)
**Author:** [@beel](https://discuss.elastic.co/u/beel)\ **Replies:** 1\ **Last updated:** [August 24, 2018, 2:34pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-log-files/144911 "2018-08-24T14:34:00Z")
Hi everybody, I 'm beginner in ElasticStack. I'm using version 6.3.2. to test it. I'm installing Filebeat, Logstash, Elasticsearch and Kibana as service on windows 10. Normlay filebeat must recover the logfiles and s… --- ## [How to backup kibana index?](https://discuss.elastic.co/t/how-to-backup-kibana-index/134002)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 1\ **Last updated:** [May 31, 2018, 9:34am UTC](https://discuss.elastic.co/t/how-to-backup-kibana-index/134002 "2018-05-31T09:34:46Z")
Hello, I want know how i can backup all kibana index of my ES 5 cluster. Behind, an externe backup application comes in to retrieve backup of kibana index. Ty --- ## [Kibana Timelion and Pie Chart groupings](https://discuss.elastic.co/t/kibana-timelion-and-pie-chart-groupings/93457)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 1\ **Last updated:** [July 18, 2017, 9:56pm UTC](https://discuss.elastic.co/t/kibana-timelion-and-pie-chart-groupings/93457 "2017-07-18T21:56:29Z")
I am currently working on a project that reads in logs from a file. The problem is that these logs roll over often and therefore have names like support.csv, support1.csv, etc. In Kibana visulations like Timelion and Pie… --- ## [How to know if filebeat has read all the logs in the folder](https://discuss.elastic.co/t/how-to-know-if-filebeat-has-read-all-the-logs-in-the-folder/57899)
**Author:** [@sruthib](https://discuss.elastic.co/u/sruthib)\ **Replies:** 1\ **Last updated:** [August 12, 2016, 2:04pm UTC](https://discuss.elastic.co/t/how-to-know-if-filebeat-has-read-all-the-logs-in-the-folder/57899 "2016-08-12T14:04:52Z")
1) How log does it basically take to read a file of 1 MB size?? It is taking around 5 mins for me which is a long time. Is there any parameter that i should keep in mind to make the processing time better. 2) And suppo… --- ## [How to drill down from graph to another graph?](https://discuss.elastic.co/t/how-to-drill-down-from-graph-to-another-graph/170651)
**Author:** [@r\_fyffe](https://discuss.elastic.co/u/r_fyffe)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 4:09pm UTC](https://discuss.elastic.co/t/how-to-drill-down-from-graph-to-another-graph/170651 "2019-03-07T16:09:25Z")
I'm currently using kibana 6.6 and i'm trying to see if it's possible to drill down from a vertices on the graph to another graph? --- ## [Kibana Hangs at "Creating Index Pattern...."](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern/162868)
**Author:** [@Jon-UWEC](https://discuss.elastic.co/u/Jon-UWEC)\ **Replies:** 2\ **Last updated:** [January 4, 2019, 3:06pm UTC](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern/162868 "2019-01-04T15:06:46Z")
I am receiving the following error when trying to create an index pattern in Kibana. Kibana itself just sits at "creating index pattern..." forever, but this error comes up in the elasticsearch logs. \[org.elasticsearch.… --- ## [Logstash log files not in /var/log/logstash](https://discuss.elastic.co/t/logstash-log-files-not-in-var-log-logstash/118383)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [February 6, 2018, 2:59am UTC](https://discuss.elastic.co/t/logstash-log-files-not-in-var-log-logstash/118383 "2018-02-06T02:59:53Z")
Hi, Logstash put the logs in /usr/share/logstash/logs. How can we change it to put the logs in /var/logstash instead? Here's my yml config.reload.automatic: true path.config: /etc/logstash/conf.d/\*.conf path.data: /va… --- ## [Rollup API in Xpack Basic?](https://discuss.elastic.co/t/rollup-api-in-xpack-basic/163757)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 3\ **Last updated:** [January 10, 2019, 8:08pm UTC](https://discuss.elastic.co/t/rollup-api-in-xpack-basic/163757 "2019-01-10T20:08:02Z")
Hello! Is Rollup API available for the basic license? Also does Basic license have some limitations of nodes or use-cases (personal use vs business use)? --- ## [Multi-line scripts in kibana's json input](https://discuss.elastic.co/t/multi-line-scripts-in-kibanas-json-input/232198)
**Author:** [@geo909](https://discuss.elastic.co/u/geo909)\ **Replies:** 0\ **Last updated:** [May 12, 2020, 10:27am UTC](https://discuss.elastic.co/t/multi-line-scripts-in-kibanas-json-input/232198 "2020-05-12T10:27:13Z")
Dear all, I'm trying to understand how to use scripted fields in Kibana's JSON input, and I am having a hard time with multi-line scripts. For example, I have a line visualization and I want to define a metric on the Y… --- ## [Logstash 5.0 parsing jason](https://discuss.elastic.co/t/logstash-5-0-parsing-jason/72681)
**Author:** [@fabian](https://discuss.elastic.co/u/fabian)\ **Replies:** 8\ **Last updated:** [February 15, 2017, 12:57pm UTC](https://discuss.elastic.co/t/logstash-5-0-parsing-jason/72681 "2017-02-15T12:57:56Z")
I'm new to Elasticsearch 5.0 with Logstash 5.0 and I want to parse some bigger json file. I put an example on Json File. What I try to do is split the json on Data.InstallAnalysis.Analysis.TCommServerInstallAnalysis.\* … --- ## [Grok for JVM console log](https://discuss.elastic.co/t/grok-for-jvm-console-log/62344)
**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\ **Replies:** 8\ **Last updated:** [October 6, 2016, 11:55am UTC](https://discuss.elastic.co/t/grok-for-jvm-console-log/62344 "2016-10-06T11:55:18Z")
I want to parse the JVM console logs ignoring the initial load and just considering the actual logs which starts with \[0;31m2016-09-29 04:00:03,264 timestamp. I am not able to understand the starting point and how to i… --- ## [APM 7.11 services missing if no traffic](https://discuss.elastic.co/t/apm-7-11-services-missing-if-no-traffic/264310)
**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 1:00pm UTC](https://discuss.elastic.co/t/apm-7-11-services-missing-if-no-traffic/264310 "2021-02-22T13:00:30Z")
Since upgrading Elasticsearch, Kibana, and APM-server to the the newest version (7.11), on the APM tab under Observability, if there is no traffic on a particular service for the time frame selected, the service no longe… --- ## [Multiple pipelines in one logstash and kafka](https://discuss.elastic.co/t/multiple-pipelines-in-one-logstash-and-kafka/122507)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [March 5, 2018, 12:36pm UTC](https://discuss.elastic.co/t/multiple-pipelines-in-one-logstash-and-kafka/122507 "2018-03-05T12:36:47Z")
Hi, currently we are using following chain: logfile -\> filebeat -\> logstash -\> elasticsearch. Sometimes I see in our logs, that filebeat cannot connect or is rejected by logstash. Thats why I am considering introduci… --- ## [Error restoring state from URL when Opening Dashboards](https://discuss.elastic.co/t/error-restoring-state-from-url-when-opening-dashboards/295471)
**Author:** [@chjimenez](https://discuss.elastic.co/u/chjimenez)\ **Replies:** 3\ **Last updated:** [January 31, 2022, 3:31pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-when-opening-dashboards/295471 "2022-01-31T15:31:20Z")
Hello, Since I updated from 6.8.0 to 7.16,3 always get this error " Error restoring state from URL Unable to completely restore the URL, be sure to use the share functionality." when opening any Dashboard. BUT dashboard… --- ## [Retrieve Hour and Day from Timestamp](https://discuss.elastic.co/t/retrieve-hour-and-day-from-timestamp/216093)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 4:10pm UTC](https://discuss.elastic.co/t/retrieve-hour-and-day-from-timestamp/216093 "2020-01-27T16:10:05Z")
Hello! My code here is getting the hour and day from a newly (and more accurate) timestamp. The timestamp is updated with a -0600 for the timezone. When I retrieve the hour from this timestamp, it doesn't include the fa… --- ## [Curator delete indices action stops intermittently](https://discuss.elastic.co/t/curator-delete-indices-action-stops-intermittently/181984)
**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 3:27pm UTC](https://discuss.elastic.co/t/curator-delete-indices-action-stops-intermittently/181984 "2019-05-21T15:27:55Z")
Hi, I am able to delete indices using curator but i am getting below error intermittently and then the process stops. 2019-05-21 16:08:22,022 ERROR curator.actions.delete\_indices \_verify\_result:489 The fol… --- ## [How can I bind my elb to Elasticsearch cluster on ECE](https://discuss.elastic.co/t/how-can-i-bind-my-elb-to-elasticsearch-cluster-on-ece/92795)
**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 2:33am UTC](https://discuss.elastic.co/t/how-can-i-bind-my-elb-to-elasticsearch-cluster-on-ece/92795 "2017-07-14T02:33:20Z")
Hi ECE I created an elb in front of my ECE cluster. So I can use url to access like this. http:// \[ELB\_DNS\] :12400/#/region/ece-region/allocators Therefore, I replace the IP in the cluster endpoint From \[ip\].ip.es.io… --- ## [X-pack compatibility with ES and Kibana](https://discuss.elastic.co/t/x-pack-compatibility-with-es-and-kibana/80669)
**Author:** [@lalitr](https://discuss.elastic.co/u/lalitr)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 1:58pm UTC](https://discuss.elastic.co/t/x-pack-compatibility-with-es-and-kibana/80669 "2017-03-30T13:58:52Z")
Hi, As per compatibility matrix here # https://www.elastic.co/support/matrix#show\_compatibility i should be able to use something like below; Elasticsearch 5.1.1, Kibana 5.1.2 and X-pack 5.1.1. But when we try to in… --- ## [Logstash and OpenBSD format logs](https://discuss.elastic.co/t/logstash-and-openbsd-format-logs/39098)
**Author:** [@Devnull](https://discuss.elastic.co/u/Devnull)\ **Replies:** 3\ **Last updated:** [January 13, 2016, 1:08pm UTC](https://discuss.elastic.co/t/logstash-and-openbsd-format-logs/39098 "2016-01-13T13:08:56Z")
Am sending OpenBSD logs to logstash via a syslog input. Logstash however, appears to be having trouble digesting the OpenBSD format, it adds a "grokparsefailuresysloginput" tag. This is the message format : \<30\>Jan … --- ## [Filebeat slow to send logs to logstash](https://discuss.elastic.co/t/filebeat-slow-to-send-logs-to-logstash/211765)
**Author:** [@yberrada](https://discuss.elastic.co/u/yberrada)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 10:00am UTC](https://discuss.elastic.co/t/filebeat-slow-to-send-logs-to-logstash/211765 "2019-12-13T10:00:22Z")
Hello all, Logstash & Filebeat version: 5.5.1 I am new to the ELK stack. I have set up a elasticsearch cluster on k8s. In the begining filebeat was very slow to send logs to logstash ( took hours ) and the logs of fil… --- ## [Kibana 7.3.0 fails on import of objects exported with 7.2.1](https://discuss.elastic.co/t/kibana-7-3-0-fails-on-import-of-objects-exported-with-7-2-1/196114)
**Author:** [@micha\_m](https://discuss.elastic.co/u/micha_m)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 2:37pm UTC](https://discuss.elastic.co/t/kibana-7-3-0-fails-on-import-of-objects-exported-with-7-2-1/196114 "2019-08-26T14:37:12Z")
I exported some objects (index patterns and visualisations) with all dependencies in Kibana 7.2.1 in ndjson format. Trying to import these files as saved objects in Kibana 7.3.0 failed with message "Sorry, there was an e… --- ## [Logstash: unable to read a file in windows](https://discuss.elastic.co/t/logstash-unable-to-read-a-file-in-windows/151111)
**Author:** [@mails2amit.k](https://discuss.elastic.co/u/mails2amit.k)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 2:01pm UTC](https://discuss.elastic.co/t/logstash-unable-to-read-a-file-in-windows/151111 "2018-10-08T14:01:47Z")
Hi Team, I dont see the logstash is reading the input file I have given. is there any problem in my config file? Output file is not getting generated. and my input file has 3 lines of text only. config file - Desktop\\… --- ## [Logstash problem accessing symbolic link config-file during start-up](https://discuss.elastic.co/t/logstash-problem-accessing-symbolic-link-config-file-during-start-up/94129)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 7:44am UTC](https://discuss.elastic.co/t/logstash-problem-accessing-symbolic-link-config-file-during-start-up/94129 "2017-07-26T07:44:21Z")
Hi, I have a file : c:\\elk\\checkout\\logstash\\bin\\logstash.conf I created a hard symbolic link so that this file is linked to the location where logstash is running. mklink /D C:\\dev\\elk\\logstash-5.4.0\\bin\\logstash.co… --- ## [Using non-timestamp field in dashboard visualisation](https://discuss.elastic.co/t/using-non-timestamp-field-in-dashboard-visualisation/39272)
**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\ **Replies:** 2\ **Last updated:** [January 22, 2016, 6:39pm UTC](https://discuss.elastic.co/t/using-non-timestamp-field-in-dashboard-visualisation/39272 "2016-01-22T18:39:08Z")
Hi We are using elastic search index with multiple timestamp fields(e.g. T1 & T2). One of the time-stamp (e.g. T1) we made it as "timestamp" field in Kibana to be used to vary with time. We have created a visualization w… --- ## [Group by "field" OR group by missing "field"](https://discuss.elastic.co/t/group-by-field-or-group-by-missing-field/27321)
**Author:** [@vit](https://discuss.elastic.co/u/vit)\ **Replies:** 2\ **Last updated:** [August 13, 2015, 11:53am UTC](https://discuss.elastic.co/t/group-by-field-or-group-by-missing-field/27321 "2015-08-13T11:53:42Z")
I have a difficulties with elasticsearch. Here is what I want to do: Let's say unit of my index looks like this: { transacId: "qwerty", amount: 150, userId: "adsf", client: "mobile", goal: "purchase" } I… --- ## [Can't get geo\_point dynamic mapping to work](https://discuss.elastic.co/t/cant-get-geo-point-dynamic-mapping-to-work/3680)
**Author:** [@skaffman\_2](https://discuss.elastic.co/u/skaffman_2)\ **Replies:** 2\ **Last updated:** [December 20, 2010, 8:21pm UTC](https://discuss.elastic.co/t/cant-get-geo-point-dynamic-mapping-to-work/3680 "2010-12-20T20:21:54Z")
Folks, I've been using the information in the blog post at http://www.elasticsearch.com/blog/2010/08/16/geo\_location\_and\_search.html to have a play with the geo\_point type mapping, specifically how it hands dynamic… --- ## [JVM crash with Java 17.0.2 + Agent 1.26.0](https://discuss.elastic.co/t/jvm-crash-with-java-17-0-2-agent-1-26-0/305890)
**Author:** [@rekadowney](https://discuss.elastic.co/u/rekadowney)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 1:43am UTC](https://discuss.elastic.co/t/jvm-crash-with-java-17-0-2-agent-1-26-0/305890 "2022-06-01T01:43:19Z")
Our application run in K8S, and found serveral restart event with jvm crash. crash\_file --- ## [Kibana server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/282694)
**Author:** [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 7:33pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/282694 "2021-08-27T19:33:51Z")
Hey everyone! Please I need fixing this error. Currently ruining from a docker container {"type":"log","@timestamp":"2021-08-27T16:29:22+00:00","tags":\["warning","plugins","actions","actions"\],"pid":1215,"message":"APIs… --- ## [Kibana export issues (xpack.reporting.encryptionKey, timeout and data too large)](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [April 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408 "2021-04-11T14:30:07Z")
I have a three node cluster running in my homelab. It is a virtualised environment (ESXi) with Ubuntu server OS (LTS) & two nodes being data nodes & the third one being a voting only node. Both the data nodes run a Kiban… --- ## [Getting only items from "array\_compare" condition is met](https://discuss.elastic.co/t/getting-only-items-from-array-compare-condition-is-met/123959)
**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\ **Replies:** 4\ **Last updated:** [March 28, 2018, 3:01pm UTC](https://discuss.elastic.co/t/getting-only-items-from-array-compare-condition-is-met/123959 "2018-03-28T15:01:55Z")
Hello Everyone, I am trying to get IP-address that is been used to register more that 2 users and flag the IP as anomolous. I tried to do "aggs" by grouping by IPaddress with the "array\_compare" condition. Once the co… --- ## [Configure "Winlogbeat" for Logstash](https://discuss.elastic.co/t/configure-winlogbeat-for-logstash/97870)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 4\ **Last updated:** [August 26, 2017, 6:53am UTC](https://discuss.elastic.co/t/configure-winlogbeat-for-logstash/97870 "2017-08-26T06:53:06Z")
Hello. I installed “Logstash”, “Elasticsearch” and “Kibana” on my Linux Box. I install Winlogbeat on my Windows server and I like to forward Windows Event Log to my Linux Box. my Winlogbeat configuration is : #========… --- ## [Have Beats to include authentication token in header](https://discuss.elastic.co/t/have-beats-to-include-authentication-token-in-header/68341)
**Author:** [@susanhua](https://discuss.elastic.co/u/susanhua)\ **Replies:** 4\ **Last updated:** [December 9, 2016, 12:56pm UTC](https://discuss.elastic.co/t/have-beats-to-include-authentication-token-in-header/68341 "2016-12-09T12:56:52Z")
We want to have Beats installed on thousands of client machine and have Beats send data to Logstash. Can we have Beats make API call to get an authentication token and include in header? Then proxy on Logstash will proce… --- ## [Logstash and redis High Availability](https://discuss.elastic.co/t/logstash-and-redis-high-availability/42275)
**Author:** [@Python\_Coder](https://discuss.elastic.co/u/Python_Coder)\ **Replies:** 4\ **Last updated:** [February 21, 2016, 5:47pm UTC](https://discuss.elastic.co/t/logstash-and-redis-high-availability/42275 "2016-02-21T17:47:37Z")
I have currently 2 Redis instances in active active modes using Redhat cluster and i'm feeding them with log shippers, We have 2 other servers with Logstash installed by which events would be popped up from both redis se… --- ## [Error while restoring snapshot](https://discuss.elastic.co/t/error-while-restoring-snapshot/26133)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 4\ **Last updated:** [July 23, 2015, 10:13am UTC](https://discuss.elastic.co/t/error-while-restoring-snapshot/26133 "2015-07-23T10:13:56Z")
Hello, i'm getting this error while restoring my snapshot snapshotname: elasticindexsnapshot repo name : snapshotrepo directory: /home/snapshotrepo I have changed the elasticsearch.yml and updated it : path.repo: /… --- ## [Kibana error after upgrade to version 8.0 from 7.17.0 \[No validation schema has been defined for \[xpack.canvas\]](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-from-7-17-0-no-validation-schema-has-been-defined-for-xpack-canvas/298352)
**Author:** [@sumitpramanik](https://discuss.elastic.co/u/sumitpramanik)\ **Replies:** 5\ **Last updated:** [March 10, 2022, 9:37am UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-from-7-17-0-no-validation-schema-has-been-defined-for-xpack-canvas/298352 "2022-03-10T09:37:07Z")
Hi, I have updated my elasticstack from version 7.17 to 8.0 recenly. All of my 3 Elasticsearch nodes and 2 logstash nodes are working fine. But whenever I am trying to upgrade to Kibana version 8.0 it is thowing below e… --- ## [Alerting on derivative](https://discuss.elastic.co/t/alerting-on-derivative/148765)
**Author:** [@torbjornkarlsson](https://discuss.elastic.co/u/torbjornkarlsson)\ **Replies:** 5\ **Last updated:** [September 20, 2018, 7:55pm UTC](https://discuss.elastic.co/t/alerting-on-derivative/148765 "2018-09-20T19:55:07Z")
Hi. It is fairly easy to create a visualization that shows spikes in number of requests (using derivative). But how do I go about to create a watcher that triggers on a big increase in number of requests? Ideally, we w… --- ## [Change the format of dates & calculate the difference](https://discuss.elastic.co/t/change-the-format-of-dates-calculate-the-difference/54899)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 5\ **Last updated:** [July 7, 2016, 7:19am UTC](https://discuss.elastic.co/t/change-the-format-of-dates-calculate-the-difference/54899 "2016-07-07T07:19:18Z")
I am having a csv. In that I am having two times like this Wed May 18 23:00:01.000 2016 | Wed May 18 23:01:32.236 2016 I want to change this as date format and find the difference between them. I tried like this. But w… [Previous page](https://discuss.elastic.co/top.md?page=1017&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1019&per_page=50&period=all)