# Top **URL:** https://discuss.elastic.co/top.md?page=1022&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1023 --- ## [Working example - ELK](https://discuss.elastic.co/t/working-example-elk/27363)
**Author:** [@Ashutosh\_Sharma1](https://discuss.elastic.co/u/Ashutosh_Sharma1)\ **Replies:** 1\ **Last updated:** [August 14, 2015, 5:58am UTC](https://discuss.elastic.co/t/working-example-elk/27363 "2015-08-14T05:58:29Z")
I tried searching a lot of complete working examples for ELK like: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-4-on-ubuntu-14-04 and and some others but not fi… --- ## [Mutate gsub pattern help for filter](https://discuss.elastic.co/t/mutate-gsub-pattern-help-for-filter/299020)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 6\ **Last updated:** [March 8, 2022, 10:54pm UTC](https://discuss.elastic.co/t/mutate-gsub-pattern-help-for-filter/299020 "2022-03-08T22:54:13Z")
Hello, still new using regular expressions I currently am working on this to parse in my "message": {"groupByActivity":false,"exampleDevices":\[{"ip":"1.2.3.4","hostname":"example.hostname.com","sid":123456,"subnet":"som… --- ## [Elasticsearch running on Docker failing in taking snapshots and restore](https://discuss.elastic.co/t/elasticsearch-running-on-docker-failing-in-taking-snapshots-and-restore/225616)
**Author:** [@620528](https://discuss.elastic.co/u/620528)\ **Replies:** 6\ **Last updated:** [March 31, 2020, 10:58am UTC](https://discuss.elastic.co/t/elasticsearch-running-on-docker-failing-in-taking-snapshots-and-restore/225616 "2020-03-31T10:58:11Z")
Below is the logs taken from Curator while running snapshot. Can someone please help me on this ? 2020-03-30 02:02:52,095 WARNING elasticsearch log\_request\_fail:149 PUT http://localhost:9200/\_snapsho… --- ## [Rally test failed with SSL error](https://discuss.elastic.co/t/rally-test-failed-with-ssl-error/181650)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [May 21, 2019, 8:43pm UTC](https://discuss.elastic.co/t/rally-test-failed-with-ssl-error/181650 "2019-05-21T20:43:02Z")
Installed rally today to setup benchmarking test. but it fails with some kind of SSL certificate error. I do not have any security setup on my elasticsearch. but going out from this machine to internet need http proxy w… --- ## [How can I get all key-value pairs for the object with Painless?](https://discuss.elastic.co/t/how-can-i-get-all-key-value-pairs-for-the-object-with-painless/169263)
**Author:** [@e328d7523d137d40a2ab](https://discuss.elastic.co/u/e328d7523d137d40a2ab)\ **Replies:** 0\ **Last updated:** [February 20, 2019, 4:56pm UTC](https://discuss.elastic.co/t/how-can-i-get-all-key-value-pairs-for-the-object-with-painless/169263 "2019-02-20T16:56:08Z")
So, I can get access to object values this way: doc\['field.KEY'\].value But how can I get all key-value pairs for the object? Like field.entrySet() ? --- ## [Logstash plugin authenticate WebHDFS with Knox](https://discuss.elastic.co/t/logstash-plugin-authenticate-webhdfs-with-knox/140067)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 12:23am UTC](https://discuss.elastic.co/t/logstash-plugin-authenticate-webhdfs-with-knox/140067 "2018-07-16T00:23:06Z")
Does someone know if logstash plugin support authentication with Knox ? I'm running logstash-6.3.1 (not ELK distribution) locally on windows trying to push data to hdfs (on remote server) with webhdfs and authenticate w… --- ## [Translog recovery stuck\[ES 6.0\]](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 4\ **Last updated:** [September 2, 2019, 6:46pm UTC](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658 "2019-09-02T18:46:50Z")
It seems that the shard recovery for replica is stuck in translog recovery loop. The recovery stage for index goes through but the translog stage gets stuck at 100% with no activity for 30m causing a shard-failed and the… --- ## [Directions for installing gssapi to use logstash webhdfs plugin with kerberos](https://discuss.elastic.co/t/directions-for-installing-gssapi-to-use-logstash-webhdfs-plugin-with-kerberos/185049)
**Author:** [@preddy75](https://discuss.elastic.co/u/preddy75)\ **Replies:** 4\ **Last updated:** [June 13, 2019, 6:34pm UTC](https://discuss.elastic.co/t/directions-for-installing-gssapi-to-use-logstash-webhdfs-plugin-with-kerberos/185049 "2019-06-13T18:34:50Z")
Hi, I am running logstash 6.4.2 (no modifications). I am getting gssapi not found in my scenario below. I am research now how to install gssapi. I would appreciate any information at all on doing this. I have found the … --- ## [Grok performance](https://discuss.elastic.co/t/grok-performance/112577)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 4:04pm UTC](https://discuss.elastic.co/t/grok-performance/112577 "2017-12-21T16:04:55Z")
hi there! i use multiple grok match patterns in my logstash filter. eg: filter { grok { # grok1 break\_on\_match =\> true match =\> { "message" =\> \[ "^(?\\\d{4}-\\d{2}-\\d{2}\\s\\d{2}:\\d{2}:\\d{2},\\d{1,3}).?(… --- ## [Monitor Siebel URL : Heartbeat](https://discuss.elastic.co/t/monitor-siebel-url-heartbeat/78162)
**Author:** [@dkris1](https://discuss.elastic.co/u/dkris1)\ **Replies:** 4\ **Last updated:** [March 16, 2017, 1:51pm UTC](https://discuss.elastic.co/t/monitor-siebel-url-heartbeat/78162 "2017-03-16T13:51:59Z")
Hi All, We have couple of siebel instances and we want to monitor their urls. The YML i use looks like this. How ever i could only see Kibana url in elastic search. Am i missing anything ? - type: http urls: \["h… --- ## [Lost or corrupt elasticsearch indicies](https://discuss.elastic.co/t/lost-or-corrupt-elasticsearch-indicies/51045)
**Author:** [@stevebeattie](https://discuss.elastic.co/u/stevebeattie)\ **Replies:** 4\ **Last updated:** [May 27, 2016, 11:43am UTC](https://discuss.elastic.co/t/lost-or-corrupt-elasticsearch-indicies/51045 "2016-05-27T11:43:31Z")
Hi, I have an ELK server running that monitors our production IHS (Apache) web servers. The ELK server was running well until today when I think that elasticsearch ran out of space on the file system used to store the d… --- ## [Filebeat duplicating events always (twice)](https://discuss.elastic.co/t/filebeat-duplicating-events-always-twice/216954)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 9:45am UTC](https://discuss.elastic.co/t/filebeat-duplicating-events-always-twice/216954 "2020-01-30T09:45:19Z")
Hello All, two days with this issue without find out the solution. Enviroment: filebeat on Windows sending .txt files to logstash into another machine. One file, one event whole file (multiline) Problem filebeat alwa… --- ## [Elasticsearch being unstable](https://discuss.elastic.co/t/elasticsearch-being-unstable/13749)
**Author:** [@pranav\_amin](https://discuss.elastic.co/u/pranav_amin)\ **Replies:** 3\ **Last updated:** [September 27, 2013, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-being-unstable/13749 "2013-09-27T15:40:28Z")
Hi, Version used - 0.90.3 I was doing some performance benchmark, hence thought to load Elastic search with 50 Million documents, each of 2k size. After some time, it started giving error, the cluster went in… --- ## [如何对dashboard不同user做权限控制？](https://discuss.elastic.co/t/dashboard-user/122480)
**Author:** [@cbw1230](https://discuss.elastic.co/u/cbw1230)\ **Replies:** 2\ **Last updated:** [April 26, 2018, 6:02am UTC](https://discuss.elastic.co/t/dashboard-user/122480 "2018-04-26T06:02:34Z")
公司准备使用elastic + kibana + xpack, 如何做到dashboard对不同user做权限控制？ 例如：userA 能查看dashboard ，userB 就不能查看dashboard 虽然已经通过 kibana\_dashboard\_only\_user 控制只显示dashboard功能，但是不能对role或user的权限控制 --- ## [Calculate time delta between log entries with matching ID and matching Command](https://discuss.elastic.co/t/calculate-time-delta-between-log-entries-with-matching-id-and-matching-command/109435)
**Author:** [@Toon\_Van\_Eyck](https://discuss.elastic.co/u/Toon_Van_Eyck)\ **Replies:** 2\ **Last updated:** [November 30, 2017, 3:01pm UTC](https://discuss.elastic.co/t/calculate-time-delta-between-log-entries-with-matching-id-and-matching-command/109435 "2017-11-30T15:01:11Z")
I have some logs in my elasticsearch database formated like this: Timestamp | ID | Command ------------------------------------+-------+--------------------------- November 24th 2017, 14:49… --- ## [Logstash jdbc type conflicts with statement field](https://discuss.elastic.co/t/logstash-jdbc-type-conflicts-with-statement-field/78121)
**Author:** [@copywrite](https://discuss.elastic.co/u/copywrite)\ **Replies:** 2\ **Last updated:** [March 14, 2017, 10:20am UTC](https://discuss.elastic.co/t/logstash-jdbc-type-conflicts-with-statement-field/78121 "2017-03-14T10:20:18Z")
i have a conf as follows input { jdbc { statement =\> 'select type from item' type =\> "item" } } output { elasticsearch { document\_type =\> '%{type}' } } the output type value … --- ## [Elastic APM - Java Spring Webflux - java.lang.IllegalStateException: The request object has been recycled and is no longer associated with this facade](https://discuss.elastic.co/t/elastic-apm-java-spring-webflux-java-lang-illegalstateexception-the-request-object-has-been-recycled-and-is-no-longer-associated-with-this-facade/350199)
**Author:** [@Chandan\_V\_A](https://discuss.elastic.co/u/Chandan_V_A)\ **Replies:** 7\ **Last updated:** [January 9, 2024, 1:37pm UTC](https://discuss.elastic.co/t/elastic-apm-java-spring-webflux-java-lang-illegalstateexception-the-request-object-has-been-recycled-and-is-no-longer-associated-with-this-facade/350199 "2024-01-09T13:37:05Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Elasticsearch 8.5.0 docker fail elasticsearch-reset-password](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575 "2022-11-10T06:22:49Z")
Hi. Today I've update my develop single cluster from 8.4.X to 8.5.0 When I've tried to reset password get error (same from host that from terminal of docker desktop) ❯ docker exec -it sitelight-es01 /usr/share/elastic… --- ## [Watcher threshold rule does not trigger automatically but manual executes fine](https://discuss.elastic.co/t/watcher-threshold-rule-does-not-trigger-automatically-but-manual-executes-fine/220246)
**Author:** [@kaushikrishna](https://discuss.elastic.co/u/kaushikrishna)\ **Replies:** 7\ **Last updated:** [March 2, 2020, 9:40pm UTC](https://discuss.elastic.co/t/watcher-threshold-rule-does-not-trigger-automatically-but-manual-executes-fine/220246 "2020-03-02T21:40:05Z")
List item Hello, I have just written an advanced watcher rule for threshold alerting (CPU), this rule works fine when I execute the rule using simulate and even sends the alert to slack. However, after saving the rule… --- ## [JSON parsing errors when using Mustache Conditional](https://discuss.elastic.co/t/json-parsing-errors-when-using-mustache-conditional/134109)
**Author:** [@dmbaughman](https://discuss.elastic.co/u/dmbaughman)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 7:45am UTC](https://discuss.elastic.co/t/json-parsing-errors-when-using-mustache-conditional/134109 "2018-06-01T07:45:51Z")
Hey everyone. I'm new to Elasticsearch, and am trying to figure out how to use Search Templates. They seem like a very promising way to simplify client-size search requests. But when I try to upload a template that us… --- ## [How to subtract field value from constant and display in Timelion?](https://discuss.elastic.co/t/how-to-subtract-field-value-from-constant-and-display-in-timelion/113765)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [January 2, 2018, 6:14pm UTC](https://discuss.elastic.co/t/how-to-subtract-field-value-from-constant-and-display-in-timelion/113765 "2018-01-02T18:14:18Z")
Hi, I am using ELK GA 5.0.0. I have a timelion visualization like below; .es(index=myindex-\*,q='fielda:data1',metric=max:my\_info\_a).label("Max") This plots max value of my field my\_info\_a. But what I want is, I want t… --- ## [Elasticsearch - transport client singleton](https://discuss.elastic.co/t/elasticsearch-transport-client-singleton/22719)
**Author:** [@11181](https://discuss.elastic.co/u/11181)\ **Replies:** 1\ **Last updated:** [March 17, 2015, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-transport-client-singleton/22719 "2015-03-17T22:17:56Z")
I am newbie in elastic and I don't understand how should I work with transport client connections. Should I use singleton for Client, something like class ElasticClientManager { private static Client client; p… --- ## [Dynamically change the index for Elasticsearch in Logstash output](https://discuss.elastic.co/t/dynamically-change-the-index-for-elasticsearch-in-logstash-output/244788)
**Author:** [@udesh](https://discuss.elastic.co/u/udesh)\ **Replies:** 5\ **Last updated:** [August 13, 2020, 11:47pm UTC](https://discuss.elastic.co/t/dynamically-change-the-index-for-elasticsearch-in-logstash-output/244788 "2020-08-13T23:47:31Z")
'Hi All, I'm trying to change the logstash.config file according to a log file. The log file consists three different types of log records which generated through my java application. logstash.config file is as follow… --- ## [Is it possible to have Auditbeat filter before sending the results](https://discuss.elastic.co/t/is-it-possible-to-have-auditbeat-filter-before-sending-the-results/158210)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 5\ **Last updated:** [December 10, 2018, 3:58pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-auditbeat-filter-before-sending-the-results/158210 "2018-12-10T15:58:41Z")
I'd like to filter out a number of processes, before Auditbeat sends to Logstash. Sure the filter works on Logstash, but it is causing lots of reporting and network traffic that could be avoided. So Auditbeat is on one … --- ## [Searching multiple fields(x,y) in Elasticsearch index "A" for entries in present in a field(z) in different index "B"](https://discuss.elastic.co/t/searching-multiple-fields-x-y-in-elasticsearch-index-a-for-entries-in-present-in-a-field-z-in-different-index-b/41753)
**Author:** [@Natarajan\_venkataram](https://discuss.elastic.co/u/Natarajan_venkataram)\ **Replies:** 5\ **Last updated:** [February 15, 2016, 4:02pm UTC](https://discuss.elastic.co/t/searching-multiple-fields-x-y-in-elasticsearch-index-a-for-entries-in-present-in-a-field-z-in-different-index-b/41753 "2016-02-15T16:02:35Z")
Hi, I have a index which captures logs from various security devices at the perimeter. I want to check for possible connections from/to blacklisted IPs. I have a index, which has the logs of the device and another in… --- ## [Logstash pipeline error at line 1 column 1](https://discuss.elastic.co/t/logstash-pipeline-error-at-line-1-column-1/280746)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 4\ **Last updated:** [August 9, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-at-line-1-column-1/280746 "2021-08-09T16:05:57Z")
I get this error: \[2021-08-08T20:15:12,553\]\[INFO \]\[logstash.agent \] Successfully started Logstash API endpoint {:port=\>9600} \[2021-08-08T20:15:13,441\]\[ERROR\]\[logstash.agent \] Failed to execute action… --- ## [【ingest node】別のindexのデータを登録する方法について](https://discuss.elastic.co/t/ingest-node-index/245375)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [August 21, 2020, 6:25am UTC](https://discuss.elastic.co/t/ingest-node-index/245375 "2020-08-21T06:25:24Z")
お世話になります。 ingest node(またはLogstash等)にて、以下が実現できるかご教示をお願い致します。 ▼実現したいこと ・ingest nodeでA indexにデータ登録する際に、B indexのデータも併せて登録したい(B indexは予め登録しておく) ・A indexとB indexは共通のキー項目が存在しないため、C indexという紐づけindexを予め登録しておき参照した上で登録したい 例： … --- ## [Kibana Spaces: Only show certain Indices](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437)
**Author:** [@N\_P](https://discuss.elastic.co/u/N_P)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437 "2020-05-14T17:19:46Z")
Hi everyone, Does anyone know if it is possible to only show certain indices for a particular kibana space? Currently I have multiple spaces and data is able to be seen from different spaces. Thanks, Neil --- ## [Parsing only a limited set of fields in JSON](https://discuss.elastic.co/t/parsing-only-a-limited-set-of-fields-in-json/133885)
**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\ **Replies:** 4\ **Last updated:** [May 31, 2018, 9:17am UTC](https://discuss.elastic.co/t/parsing-only-a-limited-set-of-fields-in-json/133885 "2018-05-31T09:17:42Z")
I need to parse a JSON log message but keep only a few fields. Is it possible to couple the JSON filter plugin (https://www.elastic.co/guide/en/logstash/current/plugins-filters-json.html) with the KV filter plugin (http… --- ## [Get all data from sharepoint to Workplace search](https://discuss.elastic.co/t/get-all-data-from-sharepoint-to-workplace-search/263119)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 6\ **Last updated:** [February 16, 2021, 1:36pm UTC](https://discuss.elastic.co/t/get-all-data-from-sharepoint-to-workplace-search/263119 "2021-02-16T13:36:45Z")
Hi I setup Workplace search and make a source connection to sharepoint as I got instruction from this url https://www.elastic.co/guide/en/workplace-search/current/workplace-search-sharepoint-online-connector.html It is… --- ## [BulkProcessor best practice for heavy ingestion](https://discuss.elastic.co/t/bulkprocessor-best-practice-for-heavy-ingestion/217263)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 6:27pm UTC](https://discuss.elastic.co/t/bulkprocessor-best-practice-for-heavy-ingestion/217263 "2020-02-07T18:27:51Z")
We want to reindex documents into our new 7.2 ES cluster from our old 1.7 ES cluster (around 2TB of data) For indexing purpose, we are going to use the BulkProcessor API. We had three approaches in mind Have N (confi… --- ## [Elasticsearch overcommit (VSZ) 300-900%](https://discuss.elastic.co/t/elasticsearch-overcommit-vsz-300-900/211919)
**Author:** [@111266](https://discuss.elastic.co/u/111266)\ **Replies:** 6\ **Last updated:** [December 16, 2019, 10:36am UTC](https://discuss.elastic.co/t/elasticsearch-overcommit-vsz-300-900/211919 "2019-12-16T10:36:25Z")
Hello. I dont know why i have very high VSZ (virtual memory size) ~ 800-900%, heap 4gb in settings PID PPID CMD RSS VSZ %MEM %CPU 11554 1 /usr/bin/java -Xms4g -Xmx4g j… --- ## [Unable to start Elasticsearch Error with exit code](https://discuss.elastic.co/t/unable-to-start-elasticsearch-error-with-exit-code/157630)
**Author:** [@Bishwadeep\_Kc](https://discuss.elastic.co/u/Bishwadeep_Kc)\ **Replies:** 1\ **Last updated:** [November 21, 2018, 6:52am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-error-with-exit-code/157630 "2018-11-21T06:52:24Z")
Hi, I installed Elasticsearch version 5.6.13 on my ubuntu system. When I try to start the Elasticsearch service, it wont run. I updated my elasticsearch.yml file(configuration added below) . I have added the output of t… --- ## [Is there a request timeout parameter for spark connector?](https://discuss.elastic.co/t/is-there-a-request-timeout-parameter-for-spark-connector/86712)
**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\ **Replies:** 1\ **Last updated:** [May 26, 2017, 3:00pm UTC](https://discuss.elastic.co/t/is-there-a-request-timeout-parameter-for-spark-connector/86712 "2017-05-26T15:00:26Z")
Occasionally I see request timeout at phase/query+fetcher/scroll. I think it's because the cluster is busy and the request didn't come back in 5 minutes (the default scroll timeout) and I see in log that the request was … --- ## [How to recover from split log messages](https://discuss.elastic.co/t/how-to-recover-from-split-log-messages/313579)
**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\ **Replies:** 3\ **Last updated:** [September 2, 2022, 10:20pm UTC](https://discuss.elastic.co/t/how-to-recover-from-split-log-messages/313579 "2022-09-02T22:20:47Z")
There appears to be a years-long-standing issue with large ( longer than 16KB) messages getting split into parts and appearing on Kibana in multiple lines. Such long messages typically include Java exception stack traces… --- ## [Fetch installed software details in Elasticsearch using elastic beats](https://discuss.elastic.co/t/fetch-installed-software-details-in-elasticsearch-using-elastic-beats/294527)
**Author:** [@Tirtharaj\_Karbotkar1](https://discuss.elastic.co/u/Tirtharaj_Karbotkar1)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 11:13am UTC](https://discuss.elastic.co/t/fetch-installed-software-details-in-elasticsearch-using-elastic-beats/294527 "2022-01-25T11:13:27Z")
Hi all, I am trying to fetch installed software details from my system (windows) into the Elasticsearch. Does any one have idea how to do the same? I have tried using metricbeat but at most I can get the running proce… --- ## [Error loading kibana iframe](https://discuss.elastic.co/t/error-loading-kibana-iframe/284317)
**Author:** [@Nanelastic](https://discuss.elastic.co/u/Nanelastic)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 7:17pm UTC](https://discuss.elastic.co/t/error-loading-kibana-iframe/284317 "2021-09-15T19:17:20Z")
I am trying to load kibana visualizations using iframe . I copied iframe code using share option in kibana. I put the copied links in a html code to load two iframes sided by side. When i try to load the html page in c… --- ## [Importing dashboard and index pattern on ECK](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 2:02pm UTC](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341 "2021-07-01T14:02:51Z")
Hey there, I am currently playing around on ECK on minikube on macOS and I was wondering how to load previously saved Saved Objects. The idea I had was to create a pod, mount the .ndjson and push it with curl to the ki… --- ## [Not seeing data in APM Kibana App](https://discuss.elastic.co/t/not-seeing-data-in-apm-kibana-app/273224)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 3\ **Last updated:** [May 19, 2021, 11:23am UTC](https://discuss.elastic.co/t/not-seeing-data-in-apm-kibana-app/273224 "2021-05-19T11:23:55Z")
Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: 7.10.0 APM Agent language and version: Python 6.1.3 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.)… --- ## [Huge Data Transfer between Elasticsearch Nodes](https://discuss.elastic.co/t/huge-data-transfer-between-elasticsearch-nodes/248933)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 8\ **Last updated:** [September 23, 2020, 9:01am UTC](https://discuss.elastic.co/t/huge-data-transfer-between-elasticsearch-nodes/248933 "2020-09-23T09:01:09Z")
Hi Team, We are running a 4 node cluster as below. Data Node 1 (hot data, master,ingest) Data Node 2 (hot data, master,ingest) Data Node 3 (warm data, voting-only master) Data Node 4 (warm data) We are seeing huge … --- ## [Allow vector functions in script fields context](https://discuss.elastic.co/t/allow-vector-functions-in-script-fields-context/247884)
**Author:** [@Denne](https://discuss.elastic.co/u/Denne)\ **Replies:** 3\ **Last updated:** [September 21, 2020, 1:32pm UTC](https://discuss.elastic.co/t/allow-vector-functions-in-script-fields-context/247884 "2020-09-21T13:32:30Z")
Hi! I use for a very specific use case script fields for scoring different attributes of documents using custom painless scripts, where the query context is used for filtering non-relevant documents (in the example bel… --- ## [What will be the beneficial if I do not analyze a text field?](https://discuss.elastic.co/t/what-will-be-the-beneficial-if-i-do-not-analyze-a-text-field/169408)
**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\ **Replies:** 3\ **Last updated:** [February 22, 2019, 2:55pm UTC](https://discuss.elastic.co/t/what-will-be-the-beneficial-if-i-do-not-analyze-a-text-field/169408 "2019-02-22T14:55:33Z")
I find that some of my data has to be stored as text field (The are long, not used for sort, aggregation). But I also do not need to search based on the content of these fields. So I think I should specify the field not… --- ## [Getting "Plugin does not exist" when trying to install search-guard-ssl plugin](https://discuss.elastic.co/t/getting-plugin-does-not-exist-when-trying-to-install-search-guard-ssl-plugin/59906)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 9:09pm UTC](https://discuss.elastic.co/t/getting-plugin-does-not-exist-when-trying-to-install-search-guard-ssl-plugin/59906 "2016-09-06T21:09:34Z")
i'm following the instructions from search-guard-ssl-git-docs to install the sg-ssl plugin, and am doing either the com.\* or the file:///path/sg-plugin.zip way. I do \* cd to ES installation directory \* Run /opt/logstash… --- ## [Strange behaviour - Logstash forwarder read logs fine however the logfile is 0 byte](https://discuss.elastic.co/t/strange-behaviour-logstash-forwarder-read-logs-fine-however-the-logfile-is-0-byte/2033)
**Author:** [@m\_abdelfattah](https://discuss.elastic.co/u/m_abdelfattah)\ **Replies:** 0\ **Last updated:** [June 5, 2015, 6:03pm UTC](https://discuss.elastic.co/t/strange-behaviour-logstash-forwarder-read-logs-fine-however-the-logfile-is-0-byte/2033 "2015-06-05T18:03:07Z")
We are using Logstash-forwarder to send Nginx access logs to remote Logstash server, but there is something strange, that the access.log file size is 0 byte and nginx is writing to access.log.1 ( I know this is not the r… --- ## [Kibana gauge visualization](https://discuss.elastic.co/t/kibana-gauge-visualization/303244)
**Author:** [@wagnar](https://discuss.elastic.co/u/wagnar)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 8:25am UTC](https://discuss.elastic.co/t/kibana-gauge-visualization/303244 "2022-04-28T08:25:58Z")
I am trying to achieve one usecase, i want to see the sales per country vs targeted sales for that particular country with the help of guage chart. But I'm not able to see add the targeted value for each country. |Count… --- ## [Kibana Lens/Line customizations](https://discuss.elastic.co/t/kibana-lens-line-customizations/295783)
**Author:** [@GustavoEH](https://discuss.elastic.co/u/GustavoEH)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 6:03pm UTC](https://discuss.elastic.co/t/kibana-lens-line-customizations/295783 "2022-02-01T18:03:44Z")
Hello, I created a Line view in Kibana to see the data I'm getting from different exchanges, but I' having difficulties to customize the view. As I don't have much experience with Kibana, now I'm not sure if Lens/Line i… --- ## [Hive external table performance issue](https://discuss.elastic.co/t/hive-external-table-performance-issue/141965)
**Author:** [@Serge\_Lashdev](https://discuss.elastic.co/u/Serge_Lashdev)\ **Replies:** 2\ **Last updated:** [July 27, 2018, 4:48pm UTC](https://discuss.elastic.co/t/hive-external-table-performance-issue/141965 "2018-07-27T16:48:36Z")
Hi there, I created an external table in hive to query indices in ES whith the following statement. CREATE EXTERNAL TABLE svaadclog ( bytexfr BIGINT, httpquery STRING, httpreferer STRING, httpresultcode INT, ipsrc… --- ## [Can't parse boolean value \[0\], expected \[true\] or \[false\]](https://discuss.elastic.co/t/cant-parse-boolean-value-0-expected-true-or-false/131856)
**Author:** [@yedu12312](https://discuss.elastic.co/u/yedu12312)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 8:05am UTC](https://discuss.elastic.co/t/cant-parse-boolean-value-0-expected-true-or-false/131856 "2018-05-15T08:05:22Z")
Hi, I am using 6.1.2 of Kibana. On the dashboard I have a Pie Chart which shows true and false on it. When I click on true section I am getting this error. Error: Request to Elasticsearch failed: {"error":{"root\_cause"… --- ## [Sort on multiple Buckets value](https://discuss.elastic.co/t/sort-on-multiple-buckets-value/130645)
**Author:** [@gargnaukri](https://discuss.elastic.co/u/gargnaukri)\ **Replies:** 2\ **Last updated:** [May 5, 2018, 9:32am UTC](https://discuss.elastic.co/t/sort-on-multiple-buckets-value/130645 "2018-05-05T09:32:33Z")
Hi, I have an Index named "requirement" which has a child named as "application\_activity". In this case i need to sort the multiple bucket based on their value. I am able to prepare the buckets as I want using multi le… --- ## [PFSense logs in ELK Stack](https://discuss.elastic.co/t/pfsense-logs-in-elk-stack/197267)
**Author:** [@mohamad.faisel](https://discuss.elastic.co/u/mohamad.faisel)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 7:10am UTC](https://discuss.elastic.co/t/pfsense-logs-in-elk-stack/197267 "2019-08-29T07:10:40Z")
Hi, I have installed the ELK Stack on a server followed steps published in Digital Ocean tutorial (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubunt… [Previous page](https://discuss.elastic.co/top.md?page=1021&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1023&per_page=50&period=all)