# Top

**URL:** https://discuss.elastic.co/top.md?page=1029&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1030

---

## [Customizable axis labels in TSVB Time Series Visualization](https://discuss.elastic.co/t/customizable-axis-labels-in-tsvb-time-series-visualization/254708)

<div class="topic-metadata">

**Author:** [@akash\_keswani](https://discuss.elastic.co/u/akash_keswani)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 1:56pm UTC](https://discuss.elastic.co/t/customizable-axis-labels-in-tsvb-time-series-visualization/254708 "2020-11-11T13:56:05Z")

</div>

Hi, Can anyone help me on how can we customize axis labels in TSVB Time Series Visualization - e.g. instead of 'per x weeks ' as a x-axis label, I'd really like the ability to relabel it to what i want.

---

## [How to get Log Patterns similar to what Logz.io does?](https://discuss.elastic.co/t/how-to-get-log-patterns-similar-to-what-logz-io-does/287449)

<div class="topic-metadata">

**Author:** [@Urbano\_Freitas](https://discuss.elastic.co/u/Urbano_Freitas)\
**Replies:** 3\
**Last updated:** [October 28, 2021, 6:56pm UTC](https://discuss.elastic.co/t/how-to-get-log-patterns-similar-to-what-logz-io-does/287449 "2021-10-28T18:56:08Z")

</div>

Hi everyone, One thing I really would love to have in Elastic is a easy way to find patterns in logs like Logz.io does: https://logz.io/platform/features/log-patterns/ I have been playing with Elastic Machine Learning …

---

## ["Custom Rollover" index name in ILM policy configuration](https://discuss.elastic.co/t/custom-rollover-index-name-in-ilm-policy-configuration/179003)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\
**Replies:** 2\
**Last updated:** [April 30, 2019, 2:55pm UTC](https://discuss.elastic.co/t/custom-rollover-index-name-in-ilm-policy-configuration/179003 "2019-04-30T14:55:44Z")

</div>

Hi Team, I wanted to know if there is any way where I can specify the roll\_over index name in the ILM policy. I see only condition parameter supported. "logs-hotwarm-policy" : { "version" : 2, "modified\_date" : "xx…

---

## [Error when restart logstash LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError](https://discuss.elastic.co/t/error-when-restart-logstash-logstash-hostunreachableerror/278687)

<div class="topic-metadata">

**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\
**Replies:** 4\
**Last updated:** [July 15, 2021, 2:36am UTC](https://discuss.elastic.co/t/error-when-restart-logstash-logstash-hostunreachableerror/278687 "2021-07-15T02:36:45Z")

</div>

Hello I install Logstash in Ubuntu 18. After changed ip from 192.168.186.147 to 192.168.186.157 I also fixed the .yml and conf.d but it's cant restart with error. /var/log/logstash/logstash-plain.log \[2021-07-14T22:18…

---

## [Index template setting overwrite](https://discuss.elastic.co/t/index-template-setting-overwrite/250528)

<div class="topic-metadata">

**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Replies:** 4\
**Last updated:** [October 4, 2020, 5:44pm UTC](https://discuss.elastic.co/t/index-template-setting-overwrite/250528 "2020-10-04T17:44:26Z")

</div>

Hi Team, I have a problem with the elasticsearch index template setting. below is a custom config i have updated in the index template setting to keep the index in hot nodes, "routing": { "allocation": { "require…

---

## [o.e.b.Bootstrap](https://discuss.elastic.co/t/o-e-b-bootstrap/250365)

<div class="topic-metadata">

**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\
**Replies:** 4\
**Last updated:** [September 30, 2020, 6:52am UTC](https://discuss.elastic.co/t/o-e-b-bootstrap/250365 "2020-09-30T06:52:47Z")

</div>

\[2020-09-29T15:25:43,752\]\[ERROR\]\[o.e.b.Bootstrap \] \[VDCGraylogNode02\] Exception java.lang.IllegalArgumentException: node settings must not contain any index level settings at org.elasticsearch.common.settings.…

---

## [Difference between Basic License and Elastic license](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 5:06pm UTC](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618 "2019-09-30T17:06:57Z")

</div>

Hi all, I am clear about Apache 2.0 and Elastic license but I would like to know the difference between these two license . Thanks

---

## [Help me understand how ES calculate the score to match query](https://discuss.elastic.co/t/help-me-understand-how-es-calculate-the-score-to-match-query/22594)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 4\
**Last updated:** [March 11, 2015, 5:54am UTC](https://discuss.elastic.co/t/help-me-understand-how-es-calculate-the-score-to-match-query/22594 "2015-03-11T05:54:26Z")

</div>

I have two documents as follows: 1. { "title":"xbox" } 2. { "title":"xbox xbox xbox" } Then I search the documents with following query: { "query":{"match":{"title":"xbox"}} } ES returns result as fo…

---

## [Beats load balancer feature vs F5 Load balancer](https://discuss.elastic.co/t/beats-load-balancer-feature-vs-f5-load-balancer/286332)

<div class="topic-metadata">

**Author:** [@Ismaeel\_Enjreny](https://discuss.elastic.co/u/Ismaeel_Enjreny)\
**Replies:** 0\
**Last updated:** [October 11, 2021, 5:10am UTC](https://discuss.elastic.co/t/beats-load-balancer-feature-vs-f5-load-balancer/286332 "2021-10-11T05:10:53Z")

</div>

Beats (Filebeat and Heartbeat) provide a way to do load balancing when they send data to output (to Logstash or Elasticsearch), the configuration include the following points: hosts: \["localhost:5044", "localhost:5045"\]…

---

## [Handling lost replicas in preemptible instances](https://discuss.elastic.co/t/handling-lost-replicas-in-preemptible-instances/192462)

<div class="topic-metadata">

**Author:** [@aclowkey](https://discuss.elastic.co/u/aclowkey)\
**Replies:** 0\
**Last updated:** [July 26, 2019, 2:31pm UTC](https://discuss.elastic.co/t/handling-lost-replicas-in-preemptible-instances/192462 "2019-07-26T14:31:43Z")

</div>

I have a set up which has two instance groups on GCP: One is just a normal instance group, and the other is preemptible. The preemptible instance group is autoscaled based on QPS. At this moment, the setup is that of an…

---

## [Heartbeat timeout](https://discuss.elastic.co/t/heartbeat-timeout/262509)

<div class="topic-metadata">

**Author:** [@rckvanwijk](https://discuss.elastic.co/u/rckvanwijk)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 1:18pm UTC](https://discuss.elastic.co/t/heartbeat-timeout/262509 "2021-02-09T13:18:14Z")

</div>

Hi there, we've got several heartbeats running for the uptime monitoring aspect. Usually it works fine but sometimes the uptime says the applications are down (while our second tool and our manual tests say they are not…

---

## [Using Collapse in elastic low level client with Hibernate Search](https://discuss.elastic.co/t/using-collapse-in-elastic-low-level-client-with-hibernate-search/256616)

<div class="topic-metadata">

**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\
**Replies:** 5\
**Last updated:** [November 25, 2020, 1:47pm UTC](https://discuss.elastic.co/t/using-collapse-in-elastic-low-level-client-with-hibernate-search/256616 "2020-11-25T13:47:00Z")

</div>

Using Collapse in elastic low level client with Hibernate Search. How to use Collapse in Java Code as it is working in query search in browser with Collapse on field but with elastic low level client with Hibernate Sear…

---

## [How to downgrade Elasticsearch 5.6.x Snapshot version?](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-5-6-x-snapshot-version/242423)

<div class="topic-metadata">

**Author:** [@Jayden\_Chew](https://discuss.elastic.co/u/Jayden_Chew)\
**Replies:** 5\
**Last updated:** [July 24, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-5-6-x-snapshot-version/242423 "2020-07-24T05:13:33Z")

</div>

I've been attempting to migrate about 3TB of data from an AWS Elasticsearch Service cluster to a self managed Elasticsearch cluster made with EC2 instances. I was going to use snapshots to help with transferring all this…

---

## [Curator CRON problem](https://discuss.elastic.co/t/curator-cron-problem/140313)

<div class="topic-metadata">

**Author:** [@frenkye](https://discuss.elastic.co/u/frenkye)\
**Replies:** 5\
**Last updated:** [July 24, 2018, 1:32pm UTC](https://discuss.elastic.co/t/curator-cron-problem/140313 "2018-07-24T13:32:11Z")

</div>

Hi, I having problem with curator set as cron and last think I could think of is there is some check in the binary which don't allow it. When I run it in shell it work OK, write into the /var/log/curator.log and does i…

---

## [\_bulk occasionally failing, not giving me enough info](https://discuss.elastic.co/t/-bulk-occasionally-failing-not-giving-me-enough-info/96491)

<div class="topic-metadata">

**Author:** [@roborich](https://discuss.elastic.co/u/roborich)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 9:00pm UTC](https://discuss.elastic.co/t/-bulk-occasionally-failing-not-giving-me-enough-info/96491 "2017-08-10T21:00:26Z")

</div>

I am importing data from a csv -\> logstash -\> elasticsearch and about 1% of my data ends up vanishing. Logstash doesn’t have anything showing up in the logs. However elasticsearch is showing this error for each missing…

---

## [Harvester\_buffer\_size - why increase it?](https://discuss.elastic.co/t/harvester-buffer-size-why-increase-it/299226)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [March 14, 2022, 10:04am UTC](https://discuss.elastic.co/t/harvester-buffer-size-why-increase-it/299226 "2022-03-14T10:04:49Z")

</div>

The documentation says what the harvest\_buffer\_size setting of the log input is for, but I don't see anything about why one might want to change it. I noticed that a Filebeat 7.17 instance on a CentOS 7 server that is…

---

## [REST API or Logstash for add/update/delete records in Elastic Index?](https://discuss.elastic.co/t/rest-api-or-logstash-for-add-update-delete-records-in-elastic-index/102396)

<div class="topic-metadata">

**Author:** [@west415](https://discuss.elastic.co/u/west415)\
**Replies:** 2\
**Last updated:** [October 3, 2017, 6:32am UTC](https://discuss.elastic.co/t/rest-api-or-logstash-for-add-update-delete-records-in-elastic-index/102396 "2017-10-03T06:32:40Z")

</div>

We have a MySQL database and are using Elastic 5.4 and wanted to know out of the below two options of getting data from MySQL into our ES index which is preferred and why (if possible) As records are added, updated, a…

---

## [Multiple Document Evaluation](https://discuss.elastic.co/t/multiple-document-evaluation/176545)

<div class="topic-metadata">

**Author:** [@tanmays](https://discuss.elastic.co/u/tanmays)\
**Replies:** 6\
**Last updated:** [April 12, 2019, 9:21am UTC](https://discuss.elastic.co/t/multiple-document-evaluation/176545 "2019-04-12T09:21:48Z")

</div>

I want to get the sum of particular value coming in each document and want to get the overall result. Is this possible using painless? If not, is there any alternative for the same?

---

## [Filebeat autodiscovery: appenders](https://discuss.elastic.co/t/filebeat-autodiscovery-appenders/126009)

<div class="topic-metadata">

**Author:** [@pytimer](https://discuss.elastic.co/u/pytimer)\
**Replies:** 6\
**Last updated:** [March 31, 2018, 5:33am UTC](https://discuss.elastic.co/t/filebeat-autodiscovery-appenders/126009 "2018-03-31T05:33:08Z")

</div>

Hi, I would like to set up Filebeat configuration with kubernetes autodiscovery provider to collect all namespaces pods logs. I use templates work well , but when i use appenders, filebeat run is wrong. i also use file…

---

## [Logstash flags XML header in log message as \_jsonparsefailure?](https://discuss.elastic.co/t/logstash-flags-xml-header-in-log-message-as--jsonparsefailure/77885)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 6\
**Last updated:** [March 9, 2017, 3:29pm UTC](https://discuss.elastic.co/t/logstash-flags-xml-header-in-log-message-as--jsonparsefailure/77885 "2017-03-09T15:29:45Z")

</div>

I've narrowed one of my \_jsonparsefailure to an XML header, shown below. The XML is "part" of the log that our application sends out. 2017-02-27 14:01:30,215 INFO :SimpleThreadPoolWorker-4 \[jdbc.sqlonly\] batching 1 s…

---

## [Icon in Kibana](https://discuss.elastic.co/t/icon-in-kibana/275306)

<div class="topic-metadata">

**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\
**Replies:** 4\
**Last updated:** [June 9, 2021, 12:23pm UTC](https://discuss.elastic.co/t/icon-in-kibana/275306 "2021-06-09T12:23:08Z")

</div>

Hello, I want to know if it is possible to create a visualisation in kibana with a custom icon. For exemple, i have a field X and i want to put an icon depending on the value of the field in data table. Is that possib…

---

## [Xml file parsing](https://discuss.elastic.co/t/xml-file-parsing/165550)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 4\
**Last updated:** [January 24, 2019, 11:48pm UTC](https://discuss.elastic.co/t/xml-file-parsing/165550 "2019-01-24T23:48:22Z")

</div>

here is a sample of my xml file this is the first time I want to use an xml filter and I am lost. how can I use an xsd structure for it and how can I map value types

---

## [Travis errors on chmod command after generating new Beat](https://discuss.elastic.co/t/travis-errors-on-chmod-command-after-generating-new-beat/95856)

<div class="topic-metadata">

**Author:** [@makkes](https://discuss.elastic.co/u/makkes)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 7:06pm UTC](https://discuss.elastic.co/t/travis-errors-on-chmod-command-after-generating-new-beat/95856 "2017-08-08T19:06:19Z")

</div>

Hi everyone, I've just created a new Beat using the documentation from https://www.elastic.co/guide/en/beats/libbeat/current/new-beat.html. However, the generated .travis.yml file causes Travis to fail: The chmod cal…

---

## [Can I add (arbitrary) new fields from inside a grok pattern?](https://discuss.elastic.co/t/can-i-add-arbitrary-new-fields-from-inside-a-grok-pattern/76497)

<div class="topic-metadata">

**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Replies:** 4\
**Last updated:** [March 2, 2017, 7:43am UTC](https://discuss.elastic.co/t/can-i-add-arbitrary-new-fields-from-inside-a-grok-pattern/76497 "2017-03-02T07:43:54Z")

</div>

Hi, I have been making use of freely available logstash configs and patterns, like this (https://github.com/nxhack/logstash/blob/master/patterns/sshd) awesome one for SSHD. I've copied a small section of the file for …

---

## [Can Elasticsearch be configured to remove old data regularly?](https://discuss.elastic.co/t/can-elasticsearch-be-configured-to-remove-old-data-regularly/70502)

<div class="topic-metadata">

**Author:** [@Qian\_Zhang](https://discuss.elastic.co/u/Qian_Zhang)\
**Replies:** 4\
**Last updated:** [January 4, 2017, 3:04am UTC](https://discuss.elastic.co/t/can-elasticsearch-be-configured-to-remove-old-data-regularly/70502 "2017-01-04T03:04:25Z")

</div>

Hi, I am using Elasticsearch 2.4.1, and have Logstash 2.4.1 and Heapster 1.2.0 to send logs and performance metrics to Elasticsearch, my index are like this: $ curl 127.0.0.1:9200/\_cat/indices?v health status index …

---

## [Logstash - Problem when index first line of a csv file with "?"](https://discuss.elastic.co/t/logstash-problem-when-index-first-line-of-a-csv-file-with/52098)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 4\
**Last updated:** [June 16, 2016, 12:05pm UTC](https://discuss.elastic.co/t/logstash-problem-when-index-first-line-of-a-csv-file-with/52098 "2016-06-16T12:05:57Z")

</div>

Hi, Whenever I index a CSV file , the first line is preceded by a question mark "?". So my date is not properly indexed. "Date": "?2015-01-01 01:00:00", So the date is not correctly read: ttags \_dateparsefailu…

---

## [unicodeSetFilter in analysis-icu ignored](https://discuss.elastic.co/t/unicodesetfilter-in-analysis-icu-ignored/45432)

<div class="topic-metadata">

**Author:** [@Barsk](https://discuss.elastic.co/u/Barsk)\
**Replies:** 4\
**Last updated:** [March 30, 2016, 12:43pm UTC](https://discuss.elastic.co/t/unicodesetfilter-in-analysis-icu-ignored/45432 "2016-03-30T12:43:22Z")

</div>

Upgraded to ES 2.2.1 from a very old 0.18 installation and I have run inte a problem. I have two environments where I have configured an analysis-icu analyzer. In the first envoronment (win 7) everytyhing works perfectly…

---

## [Yarn start error: Permission denied](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501)

<div class="topic-metadata">

**Author:** [@wenqi73](https://discuss.elastic.co/u/wenqi73)\
**Replies:** 1\
**Last updated:** [August 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501 "2021-08-09T13:12:02Z")

</div>

I tried to develop kibana and run the commands in Getting started | Kibana Guide \[7.14\] | Elastic, when I run yarn start --run-examples the terminal threw an error: user/git/kibana/node\_modules/lmdb-store/index.js:77 …

---

## [Unable to uninstall x-pack from elastic search 6.1.2 docker image](https://discuss.elastic.co/t/unable-to-uninstall-x-pack-from-elastic-search-6-1-2-docker-image/116325)

<div class="topic-metadata">

**Author:** [@Bobin\_Jose](https://discuss.elastic.co/u/Bobin_Jose)\
**Replies:** 1\
**Last updated:** [January 20, 2018, 5:08am UTC](https://discuss.elastic.co/t/unable-to-uninstall-x-pack-from-elastic-search-6-1-2-docker-image/116325 "2018-01-20T05:08:15Z")

</div>

I am unable to uninstall x-pack from es 6.1.2 docker image.I have tried with root/elasticsearch user.I am getting the below error message. \[root@e1e91a610ab5 bin\]# ./elasticsearch-plugin remove x-pack --purge -\> remo…

---

## [ETL tool recommendations](https://discuss.elastic.co/t/etl-tool-recommendations/70509)

<div class="topic-metadata">

**Author:** [@benpolzin](https://discuss.elastic.co/u/benpolzin)\
**Replies:** 1\
**Last updated:** [January 4, 2017, 5:01am UTC](https://discuss.elastic.co/t/etl-tool-recommendations/70509 "2017-01-04T05:01:00Z")

</div>

Anyone have ETL tool recommendations to share? Specifically looking for ones that handle the T part to transform data. I need to search through docs in Elastic (log events), perform some more advanced parsing & formattin…

---

## [Term aggregations and filtering values with the Java client](https://discuss.elastic.co/t/term-aggregations-and-filtering-values-with-the-java-client/22520)

<div class="topic-metadata">

**Author:** [@JZ1](https://discuss.elastic.co/u/JZ1)\
**Replies:** 1\
**Last updated:** [March 5, 2015, 9:45am UTC](https://discuss.elastic.co/t/term-aggregations-and-filtering-values-with-the-java-client/22520 "2015-03-05T09:45:47Z")

</div>

Hi all, According to the documentation online and I quote: "It is possible to filter the values for which buckets will be created. This can be done using the include and exclude parameters which are based on re…

---

## [Logstash-input-jmx new feature proposal](https://discuss.elastic.co/t/logstash-input-jmx-new-feature-proposal/31388)

<div class="topic-metadata">

**Author:** [@graziano1955](https://discuss.elastic.co/u/graziano1955)\
**Replies:** 1\
**Last updated:** [September 30, 2015, 9:18am UTC](https://discuss.elastic.co/t/logstash-input-jmx-new-feature-proposal/31388 "2015-09-30T09:18:21Z")

</div>

Hi, I used the JMX plugin to capture data from a WSO2 platform nodes, reading the attributes exposed by their JMX Beans. But not all data can be captured reading attributes, many data can be read only invoking specific…

---

## [Installation of elasticsearch on Debian 10 hangs](https://discuss.elastic.co/t/installation-of-elasticsearch-on-debian-10-hangs/202794)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 8\
**Last updated:** [December 4, 2019, 1:31pm UTC](https://discuss.elastic.co/t/installation-of-elasticsearch-on-debian-10-hangs/202794 "2019-12-04T13:31:32Z")

</div>

Hi, The installation of elasticsearch on a debian 10 using the repo hangs forever. The culprits seems to be the Java version checker: root 3977 3.4 1.9 261376 160304 pts/0 Sl+ 10:41 0:01 \\\_ aptitud…

---

## [Problem with add\_tag](https://discuss.elastic.co/t/problem-with-add-tag/194426)

<div class="topic-metadata">

**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\
**Replies:** 8\
**Last updated:** [August 8, 2019, 2:45pm UTC](https://discuss.elastic.co/t/problem-with-add-tag/194426 "2019-08-08T14:45:10Z")

</div>

Hello, I would like to change the tags field to a lowercase field. My original message like this: { "@timestamp": "2019-08-08T13:33:38.86", "appid": "bla", "tags": \[ "SUCC:AUTHEN"\] } My filter: mutate { rename =\> { …

---

## [Unable to rollback the elasticsearch load](https://discuss.elastic.co/t/unable-to-rollback-the-elasticsearch-load/127153)

<div class="topic-metadata">

**Author:** [@nevilleonline](https://discuss.elastic.co/u/nevilleonline)\
**Replies:** 8\
**Last updated:** [April 10, 2018, 8:05pm UTC](https://discuss.elastic.co/t/unable-to-rollback-the-elasticsearch-load/127153 "2018-04-10T20:05:39Z")

</div>

Hi we are using elastic on edx analytics and while running moduleengagementworkflowtask. I am very new to elasticsearch. can anyone help me with the below error. 2018-04-07 10:01:36,862 INFO 80774 \[luigi-interface\] work…

---

## [APM Java Agent - AccessControlException](https://discuss.elastic.co/t/apm-java-agent-accesscontrolexception/218385)

<div class="topic-metadata">

**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 6:24pm UTC](https://discuss.elastic.co/t/apm-java-agent-accesscontrolexception/218385 "2020-02-17T18:24:44Z")

</div>

APM Server version: 7.5.2 APM Agent language and version: Java, 1.12.0 Tomcat Server Version: 8.5.34 JDK Version: 11.0.1 Copying the APM Java agent to the following location while building the docker image /usr/loca…

---

## [Can I edit the event onclick over one chart(histogram-piechart)?](https://discuss.elastic.co/t/can-i-edit-the-event-onclick-over-one-chart-histogram-piechart/82178)

<div class="topic-metadata">

**Author:** [@Gualberto\_Vannini](https://discuss.elastic.co/u/Gualberto_Vannini)\
**Replies:** 2\
**Last updated:** [April 13, 2017, 1:21pm UTC](https://discuss.elastic.co/t/can-i-edit-the-event-onclick-over-one-chart-histogram-piechart/82178 "2017-04-13T13:21:22Z")

</div>

I made an histogram through Kibana and until here everything is fine. When i click over one column happen this: I really don't like this visual whit just the one REALLY big column so I want to edit the "onclick eve…

---

## [Failure to import data with logstash into elasticsearch](https://discuss.elastic.co/t/failure-to-import-data-with-logstash-into-elasticsearch/24643)

<div class="topic-metadata">

**Author:** [@jasonc](https://discuss.elastic.co/u/jasonc)\
**Replies:** 2\
**Last updated:** [July 17, 2015, 4:06pm UTC](https://discuss.elastic.co/t/failure-to-import-data-with-logstash-into-elasticsearch/24643 "2015-07-17T16:06:25Z")

</div>

Using a kafka input, I'm getting the following error when importing data from a topic\_id: {:exception=\>#\<ArgumentError: comparison of String with 13 failed\>, :backtrace=\>\["org/jruby/RubyComparable.java:168:in \`\<'", "…

---

## [Kibana Alerting Missing Issue](https://discuss.elastic.co/t/kibana-alerting-missing-issue/254840)

<div class="topic-metadata">

**Author:** [@jaeyunkim](https://discuss.elastic.co/u/jaeyunkim)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 4:34pm UTC](https://discuss.elastic.co/t/kibana-alerting-missing-issue/254840 "2020-11-12T16:34:13Z")

</div>

Hi, I'm monitoring the log alarm through Kibana. But there is a problem. There are times when the alarm doesn't come from Kibana. When I checked if there was no log, it was there. The alarm is set to activate once a…

---

## [Kibana not displaying data of more than one type in a particular index](https://discuss.elastic.co/t/kibana-not-displaying-data-of-more-than-one-type-in-a-particular-index/105233)

<div class="topic-metadata">

**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\
**Replies:** 3\
**Last updated:** [October 27, 2017, 10:13am UTC](https://discuss.elastic.co/t/kibana-not-displaying-data-of-more-than-one-type-in-a-particular-index/105233 "2017-10-27T10:13:26Z")

</div>

Hi, I have an index called history. I get data into this index through logstash and the data comes under the type clear. Now i am sending few data through perl which collects data from elasticsearch do some processing a…

---

## [Missing prepareSearch() method in RestHighLevelClient](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631)

<div class="topic-metadata">

**Author:** [@cmpich](https://discuss.elastic.co/u/cmpich)\
**Replies:** 3\
**Last updated:** [April 29, 2021, 6:13pm UTC](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631 "2021-04-29T18:13:05Z")

</div>

I am trying to use Aggregation API and for that documentation tells me to use SearchResponse sr = node.client().prepareSearch() .setQuery( /\* your query \*/ ) .addAggregation( /\* add an aggregation \*/ ) …

---

## [Kibana index shows index management but not in index patterns](https://discuss.elastic.co/t/kibana-index-shows-index-management-but-not-in-index-patterns/213572)

<div class="topic-metadata">

**Author:** [@bohm](https://discuss.elastic.co/u/bohm)\
**Replies:** 3\
**Last updated:** [January 2, 2020, 4:29pm UTC](https://discuss.elastic.co/t/kibana-index-shows-index-management-but-not-in-index-patterns/213572 "2020-01-02T16:29:48Z")

</div>

Hello, Single node ELK 6.8 setup with an default index pattern logstash-\* . Looking in Index Management shows logstash-ftp- index but when I open Index Patterns there is no logstash-ftp-\* pattern to choose from. Also th…

---

## [No config files found in path](https://discuss.elastic.co/t/no-config-files-found-in-path/155889)

<div class="topic-metadata">

**Author:** [@fjblau](https://discuss.elastic.co/u/fjblau)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 12:56pm UTC](https://discuss.elastic.co/t/no-config-files-found-in-path/155889 "2018-11-08T12:56:38Z")

</div>

Getting: No config files found in path {:path=\>"/iappl/log\_conf/current/configs/cust/logstash.conf"} pipelines.yml: pipeline.id: scania path.config: "/iappl/log\_conf/current/configs/cust/logstash.conf" pipeline.wor…

---

## [Does elastic support wildcard for fieldnames in sort filter](https://discuss.elastic.co/t/does-elastic-support-wildcard-for-fieldnames-in-sort-filter/154893)

<div class="topic-metadata">

**Author:** [@Raghavan\_TV](https://discuss.elastic.co/u/Raghavan_TV)\
**Replies:** 3\
**Last updated:** [November 1, 2018, 1:12pm UTC](https://discuss.elastic.co/t/does-elastic-support-wildcard-for-fieldnames-in-sort-filter/154893 "2018-11-01T13:12:13Z")

</div>

This is our sample document that is indexed { "details": { "orderID": "O1", "createdon": "2019-02-23", "status": "NEW" …

---

## [Can AWS ElasticSearch Kibana use the APM UI?](https://discuss.elastic.co/t/can-aws-elasticsearch-kibana-use-the-apm-ui/153103)

<div class="topic-metadata">

**Author:** [@Yowu](https://discuss.elastic.co/u/Yowu)\
**Replies:** 3\
**Last updated:** [October 19, 2018, 5:01am UTC](https://discuss.elastic.co/t/can-aws-elasticsearch-kibana-use-the-apm-ui/153103 "2018-10-19T05:01:51Z")

</div>

AWS ElasticSearch 와 APM Server 를 사용하여 구성을 마쳤지만 AWS 에서 제공하는 Kibana 에서 APM UI 를 사용할 수 없습니다. AWS 에서 제공하는 Kibana UI 에 APM UI 를 추가 할 수 있습니까? Elastic Cloud 에서 6.4 버전 이후로 APM UI 를 제공한다고 확인했습니다. (Elastic Cloud Kibana & APM UI)…

---

## [Failed to install template {:message=\>"Got response code '400' contacting Elasticsearch at URL 'http://x.x.x.x:9200/\_template/ecs-logstash'",](https://discuss.elastic.co/t/failed-to-install-template-message-got-response-code-400-contacting-elasticsearch-at-url-http-x-x-x-x-9200-template-ecs-logstash/351578)

<div class="topic-metadata">

**Author:** [@sunnysigara](https://discuss.elastic.co/u/sunnysigara)\
**Replies:** 5\
**Last updated:** [January 26, 2024, 7:13am UTC](https://discuss.elastic.co/t/failed-to-install-template-message-got-response-code-400-contacting-elasticsearch-at-url-http-x-x-x-x-9200-template-ecs-logstash/351578 "2024-01-26T07:13:27Z")

</div>

Using a default mapping template {:es\_version=\>7, :ecs\_compatibility=\>:v8} gives me this error, \[2024-01-23T02:24:07,381\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Elasticsearch version determined (7.13.3) {:es\_versi…

---

## [Calculate daily new users (never seen before) to a website](https://discuss.elastic.co/t/calculate-daily-new-users-never-seen-before-to-a-website/234404)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 5\
**Last updated:** [May 27, 2020, 5:32am UTC](https://discuss.elastic.co/t/calculate-daily-new-users-never-seen-before-to-a-website/234404 "2020-05-27T05:32:51Z")

</div>

I referred the above link but cannot understand how to build a visualization in Kibana for daily unique new users (that we have never seen before. The following is a simplified look at our mappings in Elastic search {…

---

## [Fleet Agent Cannot Export to CSV](https://discuss.elastic.co/t/fleet-agent-cannot-export-to-csv/374752)

<div class="topic-metadata">

**Author:** [@kulisiber](https://discuss.elastic.co/u/kulisiber)\
**Replies:** 4\
**Last updated:** [February 19, 2025, 2:43pm UTC](https://discuss.elastic.co/t/fleet-agent-cannot-export-to-csv/374752 "2025-02-19T14:43:19Z")

</div>

I have a need to list all fleet agents with status and such for document purposes. I didn't find an export agent feature like on the Wazuh Dashboard. As a result, I tried to query Dev Tools but still didn't get the right…

---

## [Painless scripts: "else if" and ternary conditionals checking field existence don't work properly](https://discuss.elastic.co/t/painless-scripts-else-if-and-ternary-conditionals-checking-field-existence-dont-work-properly/200021)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 7:18pm UTC](https://discuss.elastic.co/t/painless-scripts-else-if-and-ternary-conditionals-checking-field-existence-dont-work-properly/200021 "2019-09-18T19:18:10Z")

</div>

ES: 6.1.1 NEST: 6.1 As I've researched, I've tried two different methods of conditionally populating a "date" variable using both containsKey and doc\['field'\].value != null with the same outcome. I've used both "else …

---

## [Indexing a Modbus over TCP packet with Logstash](https://discuss.elastic.co/t/indexing-a-modbus-over-tcp-packet-with-logstash/44622)

<div class="topic-metadata">

**Author:** [@nba](https://discuss.elastic.co/u/nba)\
**Replies:** 1\
**Last updated:** [January 30, 2017, 7:02am UTC](https://discuss.elastic.co/t/indexing-a-modbus-over-tcp-packet-with-logstash/44622 "2017-01-30T07:02:52Z")

</div>

I am trying to index a pcap capture witch composed by a Modbus/TCP encapsulation. So before writing my own modbus.conf file to parse all field, I want to know is there something like that ? I am looking for a simply pcap…

[Previous page](https://discuss.elastic.co/top.md?page=1028&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1030&per_page=50&period=all)
