# Top

**URL:** https://discuss.elastic.co/top.md?page=1020&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1021

---

## [My Mapping with python is not working](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545)

<div class="topic-metadata">

**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\
**Replies:** 8\
**Last updated:** [April 18, 2022, 10:34am UTC](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545 "2022-04-18T10:34:02Z")

</div>

Hello community, I was trying to upload a simple csv-File but unfortunatelty my Mapping is not working. All my fields are still "keywords". What am I missing? def csv\_reader(filename,indexname): # connection to Ela…

---

## [Docker Swarm - Internode Communication Issue](https://discuss.elastic.co/t/docker-swarm-internode-communication-issue/294176)

<div class="topic-metadata">

**Author:** [@Darryl\_Idle](https://discuss.elastic.co/u/Darryl_Idle)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 4:31pm UTC](https://discuss.elastic.co/t/docker-swarm-internode-communication-issue/294176 "2022-01-12T16:31:14Z")

</div>

Hi, My environment for ELK is a Docker Swarm setup. Three containers on three individual hosts to utilize distributed storage. I'm using Swarmpit as my orchestrator to compose the stack as follows: version: '3.3' servi…

---

## [Cannot compute used swap when total swap is 0 and free swap is 0](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0/277128)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 12:35am UTC](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0/277128 "2021-06-28T00:35:12Z")

</div>

Hello World! My logs are getting flooded with following message: cannot compute used swap when total swap is 0 and free swap is 0 I assume it's safe to ignore since it's not recommended to have swap enabled anyways,…

---

## [No kibana plugins found in archive](https://discuss.elastic.co/t/no-kibana-plugins-found-in-archive/271851)

<div class="topic-metadata">

**Author:** [@vel1024](https://discuss.elastic.co/u/vel1024)\
**Replies:** 2\
**Last updated:** [May 1, 2021, 5:53am UTC](https://discuss.elastic.co/t/no-kibana-plugins-found-in-archive/271851 "2021-05-01T05:53:31Z")

</div>

Hi, I'm trying to install kibana-xlsx-import plugins https://github.com/Orange-OpenSource/kibana-xlsx-import , but i got this error. How to solve this problem? OS : Windows 10 Elasticsearch, Kibana : 7.12.0 Docker…

---

## [Reverse proxy + XPACK](https://discuss.elastic.co/t/reverse-proxy-xpack/267433)

<div class="topic-metadata">

**Author:** [@macaulaysouza](https://discuss.elastic.co/u/macaulaysouza)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 11:36pm UTC](https://discuss.elastic.co/t/reverse-proxy-xpack/267433 "2021-04-07T23:36:34Z")

</div>

Hi, I'm trying to setup Nginx to do reverse proxy but I'm struggling to make the X-PACK authentication work. My infrastruture is composed by HTTPS load balancer + NGINX + Kibana. I'm currently accessing my Kibana by I…

---

## [Rename the message field from the original log](https://discuss.elastic.co/t/rename-the-message-field-from-the-original-log/234674)

<div class="topic-metadata">

**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\
**Replies:** 2\
**Last updated:** [May 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/rename-the-message-field-from-the-original-log/234674 "2020-05-29T13:29:34Z")

</div>

I have a log line. 1590644837.665697 2020-05-28 07:47:17,665 to:004915122898981|id:Hello there|status\_code:SentSMSOK|status\_message:abc.exmaple.com - 200|message:(2020-05-28 07:46:41) TEST: stuck-daily@example.com…

---

## [Count number of elements in an array](https://discuss.elastic.co/t/count-number-of-elements-in-an-array/134568)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 2\
**Last updated:** [June 5, 2018, 2:50pm UTC](https://discuss.elastic.co/t/count-number-of-elements-in-an-array/134568 "2018-06-05T14:50:33Z")

</div>

Hi I have a json that contains an array on it. The structure is something like this: {date:xxx, stock: \[ {name: xxx : status:OK}, {name: yyy : status:OK}, {name: zzz : status:KO}, {name: xxz : status:OK},\]} I woul…

---

## [Can Winlogbeat output to syslog?](https://discuss.elastic.co/t/can-winlogbeat-output-to-syslog/75624)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 2\
**Last updated:** [February 22, 2017, 10:58pm UTC](https://discuss.elastic.co/t/can-winlogbeat-output-to-syslog/75624 "2017-02-22T22:58:20Z")

</div>

In my winlogbeat.yml file, there is a section for sending to syslog. I don't see where I configure a target IP.

---

## [ES partial matching (ngram) use case](https://discuss.elastic.co/t/es-partial-matching-ngram-use-case/29382)

<div class="topic-metadata">

**Author:** [@mhmtnlr](https://discuss.elastic.co/u/mhmtnlr)\
**Replies:** 2\
**Last updated:** [September 17, 2015, 2:28pm UTC](https://discuss.elastic.co/t/es-partial-matching-ngram-use-case/29382 "2015-09-17T14:28:39Z")

</div>

hi everybody I have an index for keeping book records such as; ElasticSearch Cookbook ElasticSearch Server Mastering ElasticSearch ElasticSearch i have more than 2M records. search cases: search term --- ex…

---

## [Replace @timestamp with actual timestamp from log file with two different formats](https://discuss.elastic.co/t/replace-timestamp-with-actual-timestamp-from-log-file-with-two-different-formats/271264)

<div class="topic-metadata">

**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\
**Replies:** 5\
**Last updated:** [April 26, 2021, 8:25pm UTC](https://discuss.elastic.co/t/replace-timestamp-with-actual-timestamp-from-log-file-with-two-different-formats/271264 "2021-04-26T20:25:38Z")

</div>

Hi, I am trying to index my mail-relay log files to Elastic search. All the log entries are being indexed into a field named message . @timestamp field shows the time the entry was indexed and not the timestamp from the…

---

## [Use wildcards to search in Kibana](https://discuss.elastic.co/t/use-wildcards-to-search-in-kibana/161109)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 5\
**Last updated:** [December 17, 2018, 4:08pm UTC](https://discuss.elastic.co/t/use-wildcards-to-search-in-kibana/161109 "2018-12-17T16:08:46Z")

</div>

Hi, I have an index where I store file names and their full paths like this {"file\_name": "abc-01\_00", "full\_path":"D:\\\\UAE\\\\Data\\\\abc-01\\\\abc-01\_00.clc"} These files represent a series, so the next file name in the s…

---

## [How to associate Grok fields with Elasticsearch/Kibana "Available Fields"?](https://discuss.elastic.co/t/how-to-associate-grok-fields-with-elasticsearch-kibana-available-fields/54458)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 5\
**Last updated:** [June 30, 2016, 8:00pm UTC](https://discuss.elastic.co/t/how-to-associate-grok-fields-with-elasticsearch-kibana-available-fields/54458 "2016-06-30T20:00:10Z")

</div>

I was able to Grok my logs to produce this example line in my logstash.json file. Here's my Grok filter grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:logdate}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}:%{DATA…

---

## [Elasticsearch-mapper-attachments : Loosing file.content on \_update](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-loosing-file-content-on--update/46790)

<div class="topic-metadata">

**Author:** [@ptrussart](https://discuss.elastic.co/u/ptrussart)\
**Replies:** 5\
**Last updated:** [April 11, 2016, 7:56am UTC](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-loosing-file-content-on--update/46790 "2016-04-11T07:56:46Z")

</div>

Hi, I have a problem linked on the mapping I use : PUT documents/myDoc/\_mapping { "myDoc": { "\_source": { "excludes": \[ "file" \] }, "properties":…

---

## [Transport response handler not found of id \[1\]](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id-1/264418)

<div class="topic-metadata">

**Author:** [@admin\_labs](https://discuss.elastic.co/u/admin_labs)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 7:26am UTC](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id-1/264418 "2021-03-02T07:26:20Z")

</div>

Hey there, We are being haunted by this Warning/error " Transport response handler not found of id \[1\]" from the past week., can someone please help us explain and resolve this issue. we are running elasticsearch as a …

---

## [My First Canvas Try](https://discuss.elastic.co/t/my-first-canvas-try/159074)

<div class="topic-metadata">

**Author:** [@Luiz\_Mauricio\_Barcel](https://discuss.elastic.co/u/Luiz_Mauricio_Barcel)\
**Replies:** 2\
**Last updated:** [December 13, 2018, 12:09pm UTC](https://discuss.elastic.co/t/my-first-canvas-try/159074 "2018-12-13T12:09:44Z")

</div>

I´m following the steps in this link to my first Canvas. The second step to ElasticSearchSQL is working fine. But the first step, I´m getting the error message: Expression failed with the message: \[esdocs\] \> Canvas d…

---

## [Read Nested JSON Using FIle Beat](https://discuss.elastic.co/t/read-nested-json-using-file-beat/127883)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 1\
**Last updated:** [April 13, 2018, 3:20pm UTC](https://discuss.elastic.co/t/read-nested-json-using-file-beat/127883 "2018-04-13T15:20:07Z")

</div>

We are having logs in JSON format, but the JSON message can have a nested structure. How can we read nested JSON using File Beat?

---

## [Why delete document by id not support index wildcard](https://discuss.elastic.co/t/why-delete-document-by-id-not-support-index-wildcard/117010)

<div class="topic-metadata">

**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\
**Replies:** 1\
**Last updated:** [January 25, 2018, 9:31am UTC](https://discuss.elastic.co/t/why-delete-document-by-id-not-support-index-wildcard/117010 "2018-01-25T09:31:51Z")

</div>

Recently, I found that the delete document by id have to through delete by query. POST /blog-\*/messages/\_delete\_by\_query?pretty { "query": { "match": { "\_id": "N1H$K4Xtsra" } } } Is there any plan to …

---

## [Ingesting data from Spark to Elasticsearch with index template](https://discuss.elastic.co/t/ingesting-data-from-spark-to-elasticsearch-with-index-template/59333)

<div class="topic-metadata">

**Author:** [@Akshay\_Mhetre](https://discuss.elastic.co/u/Akshay_Mhetre)\
**Replies:** 1\
**Last updated:** [August 31, 2016, 11:05pm UTC](https://discuss.elastic.co/t/ingesting-data-from-spark-to-elasticsearch-with-index-template/59333 "2016-08-31T23:05:13Z")

</div>

In our existing design we are using logstash to fetch data from Kafka (JSON) and put it in ElasticSearch. We are also using index template mapping while inserting data from logstash to ES and this could be done by sett…

---

## [Elastic SIEM integration with Palo Alto Network FIrewall](https://discuss.elastic.co/t/elastic-siem-integration-with-palo-alto-network-firewall/209929)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 6:54am UTC](https://discuss.elastic.co/t/elastic-siem-integration-with-palo-alto-network-firewall/209929 "2019-11-29T06:54:50Z")

</div>

Hi Team, We are integrating Palo Alto Firewall device with Elastic siem. For this we have enabled firewall data on 514 and receiving the same. We want to use the ECS mapping for auto population of SIEM dashboard At fil…

---

## [Filebeat cannot keep up](https://discuss.elastic.co/t/filebeat-cannot-keep-up/135628)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-cannot-keep-up/135628 "2018-06-15T14:45:00Z")

</div>

HI All, I am using filebeat to send events to logstash. These event are produced at a rate between 300 ~ 800 events p/s. If I look at my log and look at the events I see a 4 ~ 6 hours difference where the events pushed …

---

## [Select and move multiple canvas elements](https://discuss.elastic.co/t/select-and-move-multiple-canvas-elements/178293)

<div class="topic-metadata">

**Author:** [@rcodestuff](https://discuss.elastic.co/u/rcodestuff)\
**Replies:** 3\
**Last updated:** [April 30, 2019, 8:48pm UTC](https://discuss.elastic.co/t/select-and-move-multiple-canvas-elements/178293 "2019-04-30T20:48:46Z")

</div>

Hi , I am using version 6.6.2. Currently I can select and move one element at a time in canvas. Is it possible to select multiple elements and move them all at once? Or select all elements in a region drawn by mouse mo…

---

## [Query HDFS data using ES and Kibana](https://discuss.elastic.co/t/query-hdfs-data-using-es-and-kibana/175787)

<div class="topic-metadata">

**Author:** [@leekk8](https://discuss.elastic.co/u/leekk8)\
**Replies:** 3\
**Last updated:** [April 9, 2019, 7:50am UTC](https://discuss.elastic.co/t/query-hdfs-data-using-es-and-kibana/175787 "2019-04-09T07:50:20Z")

</div>

Hi, I would like to setup a Kibana GUI to query some log files in HDFS. So, I'm looking at the Hadoop-ES connector if this can help to meet my requirement. However, there are few doubts I have now. Do I need to store …

---

## [Field - Limit length](https://discuss.elastic.co/t/field-limit-length/90954)

<div class="topic-metadata">

**Author:** [@medley](https://discuss.elastic.co/u/medley)\
**Replies:** 3\
**Last updated:** [June 27, 2017, 12:54pm UTC](https://discuss.elastic.co/t/field-limit-length/90954 "2017-06-27T12:54:12Z")

</div>

Hello, Is it possible to limit the length of a field ? I am using Logstash 5.2.1. M.

---

## [Elasticsearch suddenly stopped working on one node](https://discuss.elastic.co/t/elasticsearch-suddenly-stopped-working-on-one-node/45475)

<div class="topic-metadata">

**Author:** [@Michael1](https://discuss.elastic.co/u/Michael1)\
**Replies:** 3\
**Last updated:** [April 15, 2016, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-stopped-working-on-one-node/45475 "2016-04-15T13:55:14Z")

</div>

Output of 'sudo docker logs elasticsearch' is below :: \[2016-03-25 19:05:15,465\]\[INFO \]\[node \] \[STG1 - Wolverine\] version\[2.1.1\], pid\[1\], build\[40e2c53/2015-12-15T13:05:55Z\] \[2016-03-25 19:05:15,466…

---

## [Remain json data as field in Logstash](https://discuss.elastic.co/t/remain-json-data-as-field-in-logstash/31784)

<div class="topic-metadata">

**Author:** [@Ducheol\_Kim](https://discuss.elastic.co/u/Ducheol_Kim)\
**Replies:** 3\
**Last updated:** [October 7, 2015, 7:44pm UTC](https://discuss.elastic.co/t/remain-json-data-as-field-in-logstash/31784 "2015-10-07T19:44:09Z")

</div>

Hi Guys. Currently, I'm building component which log json data in ES. So I'm trying to use below grok filter pattern to parse , but it isn't work. Input Tue, 06 Oct 2015 20:04:15 +0000 - http://localhost/testurl?id…

---

## [Recent Kibana security update \[7.17\]](https://discuss.elastic.co/t/recent-kibana-security-update-7-17/296219)

<div class="topic-metadata">

**Author:** [@falcantara](https://discuss.elastic.co/u/falcantara)\
**Replies:** 3\
**Last updated:** [February 18, 2022, 2:12am UTC](https://discuss.elastic.co/t/recent-kibana-security-update-7-17/296219 "2022-02-18T02:12:58Z")

</div>

I was looking at this update here: https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215 and I saw that this vulnerability had low privileges. I'm assuming that with vulnerability in order to exploit you need…

---

## [Kibana tile map metric color range manual definition](https://discuss.elastic.co/t/kibana-tile-map-metric-color-range-manual-definition/105258)

<div class="topic-metadata">

**Author:** [@Alexandre\_Juma](https://discuss.elastic.co/u/Alexandre_Juma)\
**Replies:** 3\
**Last updated:** [November 6, 2017, 4:17pm UTC](https://discuss.elastic.co/t/kibana-tile-map-metric-color-range-manual-definition/105258 "2017-11-06T16:17:09Z")

</div>

Hello all, Does anyone know how to manually define the ranges associated with metric color in tile maps? Apparently kibana defines the range interval with 5 colors using (max-min)/5 but that doesn't help dealing with o…

---

## [Fleet integrations page failing to load](https://discuss.elastic.co/t/fleet-integrations-page-failing-to-load/345473)

<div class="topic-metadata">

**Author:** [@tdanno](https://discuss.elastic.co/u/tdanno)\
**Replies:** 4\
**Last updated:** [October 25, 2023, 7:19pm UTC](https://discuss.elastic.co/t/fleet-integrations-page-failing-to-load/345473 "2023-10-25T19:19:32Z")

</div>

On three separate clusters in three different parts of the world everything is functioning fine except the ability to fully load the integrations page- it seems like whatever it needs to do to reach out to the central re…

---

## [Get sum of doc\_count values in aggregation](https://discuss.elastic.co/t/get-sum-of-doc-count-values-in-aggregation/142022)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 1\
**Last updated:** [July 28, 2018, 10:25am UTC](https://discuss.elastic.co/t/get-sum-of-doc-count-values-in-aggregation/142022 "2018-07-28T10:25:15Z")

</div>

I'd like to get the total number of doc\_count values for an aggregation. At the moment, I have: { "size": 0, "query":{ "function\_score":{ "query":{ "bool":{ "fi…

---

## [Cannot detect ES version](https://discuss.elastic.co/t/cannot-detect-es-version/67834)

<div class="topic-metadata">

**Author:** [@wow148](https://discuss.elastic.co/u/wow148)\
**Replies:** 1\
**Last updated:** [December 2, 2016, 11:57pm UTC](https://discuss.elastic.co/t/cannot-detect-es-version/67834 "2016-12-02T23:57:29Z")

</div>

Hi Everyone, i trying to connect hive with elasticsearch using the ES-Hadoop Connector but i receive this error: "java.sql.SQLException: Error while processing statement: FAILED: Execution Error, return code 1 from o…

---

## [AccessControlException when accessing local file from plugin](https://discuss.elastic.co/t/accesscontrolexception-when-accessing-local-file-from-plugin/33658)

<div class="topic-metadata">

**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\
**Replies:** 1\
**Last updated:** [November 3, 2015, 5:36pm UTC](https://discuss.elastic.co/t/accesscontrolexception-when-accessing-local-file-from-plugin/33658 "2015-11-03T17:36:14Z")

</div>

I have an indexing plug-in that requires to access local files. The plug-in worked fine under elasticsearch 1.7, but with 2.0 I get the following error: IndexCreationException\[failed to create index\]; nested: Except…

---

## [ElasticSearch and parallelization](https://discuss.elastic.co/t/elasticsearch-and-parallelization/10691)

<div class="topic-metadata">

**Author:** [@Dave\_O](https://discuss.elastic.co/u/Dave_O)\
**Replies:** 1\
**Last updated:** [February 11, 2013, 12:54pm UTC](https://discuss.elastic.co/t/elasticsearch-and-parallelization/10691 "2013-02-11T12:54:09Z")

</div>

I have terabytes of data that I need to index. In my environment I have lots and lots of data but minimal concurrent queries. I'm curious how parallelization works with ES. This is a hypothetical scenario. L…

---

## [Can Elasticsearch provide offsets of highlighted words?](https://discuss.elastic.co/t/can-elasticsearch-provide-offsets-of-highlighted-words/295323)

<div class="topic-metadata">

**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\
**Replies:** 4\
**Last updated:** [February 1, 2022, 11:18am UTC](https://discuss.elastic.co/t/can-elasticsearch-provide-offsets-of-highlighted-words/295323 "2022-02-01T11:18:38Z")

</div>

We are having OCRed text of PDFs searchable in Elasticsearch. Also we have stored original PDFs, passing highlighted terms from Elasticsearch in URL and with custom library we highlight the words in PDFs. But we would …

---

## [In logstash, How can we check if a data exists another elastic search index?](https://discuss.elastic.co/t/in-logstash-how-can-we-check-if-a-data-exists-another-elastic-search-index/254709)

<div class="topic-metadata">

**Author:** [@meghavinam](https://discuss.elastic.co/u/meghavinam)\
**Replies:** 4\
**Last updated:** [November 9, 2020, 8:26am UTC](https://discuss.elastic.co/t/in-logstash-how-can-we-check-if-a-data-exists-another-elastic-search-index/254709 "2020-11-09T08:26:47Z")

</div>

I want to sync set of data from mysql to elastic search. That time i need to remove if same data exists in another index

---

## [The Docs search on elastic.co is not working](https://discuss.elastic.co/t/the-docs-search-on-elastic-co-is-not-working/183443)

<div class="topic-metadata">

**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\
**Replies:** 4\
**Last updated:** [May 31, 2019, 1:07am UTC](https://discuss.elastic.co/t/the-docs-search-on-elastic-co-is-not-working/183443 "2019-05-31T01:07:18Z")

</div>

Sorry if it's not the right place but there's problem to search the docs, for example if I search "multi" with version 7.0 and above I have several results in the suggest list and in the result page. For version 7.1 ther…

---

## [How to use ESIntegTestCase to load plugins in elasticsearch 5.6.3?](https://discuss.elastic.co/t/how-to-use-esintegtestcase-to-load-plugins-in-elasticsearch-5-6-3/104807)

<div class="topic-metadata">

**Author:** [@tavandung12](https://discuss.elastic.co/u/tavandung12)\
**Replies:** 4\
**Last updated:** [October 23, 2017, 8:54am UTC](https://discuss.elastic.co/t/how-to-use-esintegtestcase-to-load-plugins-in-elasticsearch-5-6-3/104807 "2017-10-23T08:54:04Z")

</div>

here is my source code: @ClusterScope(scope = Scope.SUITE) public class MyExpertScriptEngineTest extends ESIntegTestCase { public MyExpertScriptEngineTest() { System.setProperty(TESTS\_CLUSTER, "localhost:9300"); …

---

## [Filebeat to ouput which pattern matched from the include\_lines list](https://discuss.elastic.co/t/filebeat-to-ouput-which-pattern-matched-from-the-include-lines-list/88600)

<div class="topic-metadata">

**Author:** [@ragurajendran86](https://discuss.elastic.co/u/ragurajendran86)\
**Replies:** 4\
**Last updated:** [June 14, 2017, 9:24am UTC](https://discuss.elastic.co/t/filebeat-to-ouput-which-pattern-matched-from-the-include-lines-list/88600 "2017-06-14T09:24:57Z")

</div>

We use file beat extensively to capture exception in the log files. We define all the error pattern inside the include\_lines in the prospector section in array. This can identify the error pattern and using multi line it…

---

## [Encounter an error when Update License](https://discuss.elastic.co/t/encounter-an-error-when-update-license/69974)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 4\
**Last updated:** [December 26, 2016, 6:39am UTC](https://discuss.elastic.co/t/encounter-an-error-when-update-license/69974 "2016-12-26T06:39:52Z")

</div>

i updated the marvel using a basic license,then encountered an error "{"error":{"root\_cause":\[{"type":"parse\_exception","reason":"Failed to derive xcontent"}\],"type":"parse\_exception","reason":"Failed to derive xcontent…

---

## [Default security parameters are not coming in elasticsearch--- default super user password is not set](https://discuss.elastic.co/t/default-security-parameters-are-not-coming-in-elasticsearch-default-super-user-password-is-not-set/308709)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 2\
**Last updated:** [July 2, 2022, 9:06pm UTC](https://discuss.elastic.co/t/default-security-parameters-are-not-coming-in-elasticsearch-default-super-user-password-is-not-set/308709 "2022-07-02T21:06:38Z")

</div>

Hi , I have installed Elasticsearch 8.3 from RPM repository and it installed properly. started Elasticsearch on linxe machine. but i could see some issue in elasticsearch logs. \[2022-07-02T10:48:00,891\]\[INFO \]\[o.e.x.s.I…

---

## [Filebeat 7.3.1 - Exiting: setup.template.name and setup.template.pattern have to be set if index name is modified](https://discuss.elastic.co/t/filebeat-7-3-1-exiting-setup-template-name-and-setup-template-pattern-have-to-be-set-if-index-name-is-modified/266204)

<div class="topic-metadata">

**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\
**Replies:** 2\
**Last updated:** [March 5, 2021, 9:52am UTC](https://discuss.elastic.co/t/filebeat-7-3-1-exiting-setup-template-name-and-setup-template-pattern-have-to-be-set-if-index-name-is-modified/266204 "2021-03-05T09:52:50Z")

</div>

Hi, I'm using Elastic Stack 7.3.1 and Filebeat 7.3.1. Now, when I try to start the filebeat, the following message appears: PS C:\\filebeat-7.3.1-windows-x86\_64\> .\\filebeat.exe Exiting: setup.template.name and setup.tem…

---

## [Spark-SQL: Ensure SQL query gets translated to ES query](https://discuss.elastic.co/t/spark-sql-ensure-sql-query-gets-translated-to-es-query/40661)

<div class="topic-metadata">

**Author:** [@Robbie](https://discuss.elastic.co/u/Robbie)\
**Replies:** 2\
**Last updated:** [February 21, 2016, 5:25pm UTC](https://discuss.elastic.co/t/spark-sql-ensure-sql-query-gets-translated-to-es-query/40661 "2016-02-21T17:25:20Z")

</div>

Hi, I am attempting to get started with the spark elasticsearch connector, and I notice that my SQL query never gets translated to ES search query with pushdown enabled. Could you let me know what is wrong in the foll…

---

## [Disable login kibana 8.2](https://discuss.elastic.co/t/disable-login-kibana-8-2/304599)

<div class="topic-metadata">

**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\
**Replies:** 5\
**Last updated:** [May 14, 2022, 2:19pm UTC](https://discuss.elastic.co/t/disable-login-kibana-8-2/304599 "2022-05-14T14:19:59Z")

</div>

We are using eck operator and oauth2-proxy for single sign on. And we want to disable the kibana login page so that after successful sign in, oauth2 directly will take the user to dashboard. But how should we do that? wh…

---

## [Filebeat input in Logstash is losing fields](https://discuss.elastic.co/t/filebeat-input-in-logstash-is-losing-fields/169460)

<div class="topic-metadata">

**Author:** [@Eni\_Sinanaj](https://discuss.elastic.co/u/Eni_Sinanaj)\
**Replies:** 5\
**Last updated:** [February 21, 2019, 4:57pm UTC](https://discuss.elastic.co/t/filebeat-input-in-logstash-is-losing-fields/169460 "2019-02-21T16:57:43Z")

</div>

I have the following infrastructure: ELK installed as docker containers, each in its own container. And on a virtual machine running CentOS I installed nginx web server and Filebeat to collect the logs. I enabled the n…

---

## [How to keep Database and Elasticsearch consistent using Logstash](https://discuss.elastic.co/t/how-to-keep-database-and-elasticsearch-consistent-using-logstash/157718)

<div class="topic-metadata">

**Author:** [@patrick007](https://discuss.elastic.co/u/patrick007)\
**Replies:** 5\
**Last updated:** [November 22, 2018, 10:58am UTC](https://discuss.elastic.co/t/how-to-keep-database-and-elasticsearch-consistent-using-logstash/157718 "2018-11-22T10:58:15Z")

</div>

I have a Relational database, I have used Logstash to migrate my Relational Postgres data to elasticsearch. Now how can I keep my Database and Elasticsearch Server in sync?

---

## [Authenticated webhook watcher integrations](https://discuss.elastic.co/t/authenticated-webhook-watcher-integrations/143578)

<div class="topic-metadata">

**Author:** [@kcphysics](https://discuss.elastic.co/u/kcphysics)\
**Replies:** 5\
**Last updated:** [August 10, 2018, 7:09am UTC](https://discuss.elastic.co/t/authenticated-webhook-watcher-integrations/143578 "2018-08-10T07:09:28Z")

</div>

I am trying to figure out a way to get a watcher webhook to authenticate with a Bearer Token style authentication, where a request with credentials is sent, a bearer token is received, and that bearer token can be used i…

---

## [Grok Patterns not execute properly on logstash filter](https://discuss.elastic.co/t/grok-patterns-not-execute-properly-on-logstash-filter/102418)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 5\
**Last updated:** [October 5, 2017, 5:22am UTC](https://discuss.elastic.co/t/grok-patterns-not-execute-properly-on-logstash-filter/102418 "2017-10-05T05:22:45Z")

</div>

I have following log which has to be normalized using grok patterns. \<46\>Sep 29 12:10:36 SXX-XX-XO SFIMS: \[133:51:1\] dcerpc2: SMB - Outstanding requests with the same MID \[Impact: Currently Not Vulnerable\] From \\"XXX-XO…

---

## [Handling of large fields (strings or attachments) in Kibana](https://discuss.elastic.co/t/handling-of-large-fields-strings-or-attachments-in-kibana/41228)

<div class="topic-metadata">

**Author:** [@Alexander\_Sheredin](https://discuss.elastic.co/u/Alexander_Sheredin)\
**Replies:** 5\
**Last updated:** [February 8, 2016, 10:08pm UTC](https://discuss.elastic.co/t/handling-of-large-fields-strings-or-attachments-in-kibana/41228 "2016-02-08T22:08:22Z")

</div>

Hello, I am trying to use Kibana 4 to browse my index. The index contains just few douments, but the documents have huge string fields which are not supposed to be searchable but need to be stored (index is set to "no" f…

---

## [Two fields](https://discuss.elastic.co/t/two-fields/171808)

<div class="topic-metadata">

**Author:** [@Shahnaz](https://discuss.elastic.co/u/Shahnaz)\
**Replies:** 3\
**Last updated:** [March 19, 2019, 9:35pm UTC](https://discuss.elastic.co/t/two-fields/171808 "2019-03-19T21:35:14Z")

</div>

How can I get division of two different fields? For example I want to get the following value and check if it is more than 95% is: Count(successful attempts)/count(attempts)\*100 If it is I want to show it in green ligh…

---

## [High CPU](https://discuss.elastic.co/t/high-cpu/155151)

<div class="topic-metadata">

**Author:** [@David\_Sedeno](https://discuss.elastic.co/u/David_Sedeno)\
**Replies:** 3\
**Last updated:** [November 7, 2018, 8:14am UTC](https://discuss.elastic.co/t/high-cpu/155151 "2018-11-07T08:14:56Z")

</div>

We have a 6 node cluster (1 ingest, 5 data, 8G jvm heap each) Sometimes we have a peak cpu in the data nodes, going to 100% cpu and the ingest node refuse to process more querys. One of the node has a GC at that time…

---

## [Kibana shows blank page for large indices](https://discuss.elastic.co/t/kibana-shows-blank-page-for-large-indices/121108)

<div class="topic-metadata">

**Author:** [@melissachang](https://discuss.elastic.co/u/melissachang)\
**Replies:** 3\
**Last updated:** [February 23, 2018, 8:23pm UTC](https://discuss.elastic.co/t/kibana-shows-blank-page-for-large-indices/121108 "2018-02-23T20:23:41Z")

</div>

If I point Kibana to an ElasticSearch with small indices, Kibana loads right away. If I point Kibana to an ElasticSearch with large indices, I see this blank page. It's been 25 minutes and I still see the blank page. He…

[Previous page](https://discuss.elastic.co/top.md?page=1019&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1021&per_page=50&period=all)
