# Top

**URL:** https://discuss.elastic.co/top.md?page=1032&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1033

---

## [Watcher Could not connect to SMTP host](https://discuss.elastic.co/t/watcher-could-not-connect-to-smtp-host/120775)

<div class="topic-metadata">

**Author:** [@Ekaterina](https://discuss.elastic.co/u/Ekaterina)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 10:35am UTC](https://discuss.elastic.co/t/watcher-could-not-connect-to-smtp-host/120775 "2018-02-23T10:35:17Z")

</div>

Hi All, I have recently got free elastic cloud trial. I am trying to create simple watcher that would send an emails, but it is failing on email sending stage I have whitelisted needed email addresses, but error seems …

---

## [Queries on keyword field are extremely slow](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833)

<div class="topic-metadata">

**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\
**Replies:** 4\
**Last updated:** [December 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833 "2021-12-04T08:52:25Z")

</div>

I use Elasticsearch for text search. Sentences used for indexing are first split into words and then each word is attached with its corresponding POS tag as below: Raw sentence: word1 word2 word3 word4. Sentence for i…

---

## [Count map in kibana new version](https://discuss.elastic.co/t/count-map-in-kibana-new-version/270200)

<div class="topic-metadata">

**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\
**Replies:** 1\
**Last updated:** [April 15, 2021, 12:10pm UTC](https://discuss.elastic.co/t/count-map-in-kibana-new-version/270200 "2021-04-15T12:10:13Z")

</div>

hi, I am unable to create count map in new version kibana because there is missing metric section in layer setting. I have attached image also. please anyone knows how to do it?

---

## [Filebeat timestamp conversion from PST to EST](https://discuss.elastic.co/t/filebeat-timestamp-conversion-from-pst-to-est/265414)

<div class="topic-metadata">

**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 11:22pm UTC](https://discuss.elastic.co/t/filebeat-timestamp-conversion-from-pst-to-est/265414 "2021-03-11T23:22:44Z")

</div>

Input file has PST timestamp like "2020 Feb 12 13:54:07:447 GMT -0800" in a message event like below: 2020 Feb 12 13:54:07:447 GMT -0800 myservice Error \[mybusinessworks\] BWENGINE-100001 process initialization failed fo…

---

## [How to handle empty result in jdbc\_streaming filter plugin in Logstash](https://discuss.elastic.co/t/how-to-handle-empty-result-in-jdbc-streaming-filter-plugin-in-logstash/246347)

<div class="topic-metadata">

**Author:** [@naveen007](https://discuss.elastic.co/u/naveen007)\
**Replies:** 4\
**Last updated:** [August 26, 2020, 7:42am UTC](https://discuss.elastic.co/t/how-to-handle-empty-result-in-jdbc-streaming-filter-plugin-in-logstash/246347 "2020-08-26T07:42:36Z")

</div>

Hi, I'm using the jdbc\_streaming filter plugin to get data from query. But in some case query return empty result or null value. parameters =\> { "firstName" =\> "firstName" } statement =\> "SELECT DISTINCT…

---

## [Geoloc dans une Vue Maps de Kibana à partir d'indicatifs pays de numéros de téléphones d'appelants](https://discuss.elastic.co/t/geoloc-dans-une-vue-maps-de-kibana-a-partir-dindicatifs-pays-de-numeros-de-telephones-dappelants/238529)

<div class="topic-metadata">

**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\
**Replies:** 1\
**Last updated:** [June 25, 2020, 9:41pm UTC](https://discuss.elastic.co/t/geoloc-dans-une-vue-maps-de-kibana-a-partir-dindicatifs-pays-de-numeros-de-telephones-dappelants/238529 "2020-06-25T21:41:17Z")

</div>

Bonjour, Qui pourrait m'expliquer svp comment à partir de documents indexés dans elasticsearch qui contiennent un champ renseignant sur l'indicatif pays d'un numéro de téléphone (exemple 0033 pour la France, 0034 pour l…

---

## [Insert Object Data using Update](https://discuss.elastic.co/t/insert-object-data-using-update/123871)

<div class="topic-metadata">

**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\
**Replies:** 4\
**Last updated:** [March 14, 2018, 1:06pm UTC](https://discuss.elastic.co/t/insert-object-data-using-update/123871 "2018-03-14T13:06:50Z")

</div>

Hi, I would like adding data to my new added properties. So, I have ran mapping again to update my last index mapping by adding this property: "author": { "properties": { "id": { "type": "integer" }, …

---

## [Heartbeat : log http response](https://discuss.elastic.co/t/heartbeat-log-http-response/85515)

<div class="topic-metadata">

**Author:** [@demethyl](https://discuss.elastic.co/u/demethyl)\
**Replies:** 4\
**Last updated:** [May 15, 2017, 8:02am UTC](https://discuss.elastic.co/t/heartbeat-log-http-response/85515 "2017-05-15T08:02:14Z")

</div>

Hi, i made a very fancy /ping uri on my servers, to have jvm infos & more stuff I wanted to use heartbeat to check status avaibility and stock the whole json response into ES documents i cant find how to do this : an…

---

## [Beats Input Exception](https://discuss.elastic.co/t/beats-input-exception/55537)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 4\
**Last updated:** [November 28, 2016, 4:40pm UTC](https://discuss.elastic.co/t/beats-input-exception/55537 "2016-11-28T16:40:10Z")

</div>

Hi, Would appreciate your input into this exception I'm seeing with the beats input: {: timestamp =\> "2016-07-14T16:18:11.269000+0100", : message =\> "Beats input: unhandled exception", : exception =\> # \< NoMethodError:…

---

## [Getting Topbeat stats from a remote server](https://discuss.elastic.co/t/getting-topbeat-stats-from-a-remote-server/53551)

<div class="topic-metadata">

**Author:** [@aadiwarden](https://discuss.elastic.co/u/aadiwarden)\
**Replies:** 4\
**Last updated:** [June 21, 2016, 8:50pm UTC](https://discuss.elastic.co/t/getting-topbeat-stats-from-a-remote-server/53551 "2016-06-21T20:50:03Z")

</div>

Hi, A little new to topbeat and didnt see any related article so I thought I'd ask. Is it possible to gather the stats from a set of remote servers by installing topbeat only in the main server? If its something eas…

---

## [How to or is there a way to get Dashboards on Kibana to rotate between other dashboards?](https://discuss.elastic.co/t/how-to-or-is-there-a-way-to-get-dashboards-on-kibana-to-rotate-between-other-dashboards/205276)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 3\
**Last updated:** [October 28, 2019, 8:25pm UTC](https://discuss.elastic.co/t/how-to-or-is-there-a-way-to-get-dashboards-on-kibana-to-rotate-between-other-dashboards/205276 "2019-10-28T20:25:44Z")

</div>

Hey, Just a little question. Am on ELK 7.4.0. I am working with some dashboards within Kibana, have created a few of them. The list of dashboards are great but is there a possible way of getting, for example three dash…

---

## [How to modify default \_score to 0?](https://discuss.elastic.co/t/how-to-modify-default-score-to-0/160111)

<div class="topic-metadata">

**Author:** [@920663d69ffd7d4add49](https://discuss.elastic.co/u/920663d69ffd7d4add49)\
**Replies:** 3\
**Last updated:** [December 10, 2018, 8:57am UTC](https://discuss.elastic.co/t/how-to-modify-default-score-to-0/160111 "2018-12-10T08:57:49Z")

</div>

I tried function\_score query with some filters whose weights are less than 1. However, the max\_score of the result is 1 by default (documents matches none of the filters are scored 1 by default).

---

## [Is filebeat able to index in elasticsearch with the date of the log line it reads, not the the date of the day?](https://discuss.elastic.co/t/is-filebeat-able-to-index-in-elasticsearch-with-the-date-of-the-log-line-it-reads-not-the-the-date-of-the-day/60619)

<div class="topic-metadata">

**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\
**Replies:** 3\
**Last updated:** [September 16, 2016, 8:02am UTC](https://discuss.elastic.co/t/is-filebeat-able-to-index-in-elasticsearch-with-the-date-of-the-log-line-it-reads-not-the-the-date-of-the-day/60619 "2016-09-16T08:02:10Z")

</div>

Hello, I'm wondering if filebeat is able to index in elasticsearch with the date of the log line it reads, not the the date of the day? -- What I want to put in place: \*.log (from august 2016) \> filebeat \> elastisearc…

---

## [How do I sync these two values with with a vertical bar chart in kibana?](https://discuss.elastic.co/t/how-do-i-sync-these-two-values-with-with-a-vertical-bar-chart-in-kibana/52774)

<div class="topic-metadata">

**Author:** [@Akashi\_Seih](https://discuss.elastic.co/u/Akashi_Seih)\
**Replies:** 3\
**Last updated:** [June 15, 2016, 5:01pm UTC](https://discuss.elastic.co/t/how-do-i-sync-these-two-values-with-with-a-vertical-bar-chart-in-kibana/52774 "2016-06-15T17:01:39Z")

</div>

Hi, I have a JSON file which I have on my Elasticsearch: http://hostcode.sourceforge.net/view/6074.txt As you can see, it's a HAR file. The two values that I am interested in is URL and "time" (response time). I have t…

---

## [(Problem) ELK + Amazon S3 + Apache Access Logs](https://discuss.elastic.co/t/problem-elk-amazon-s3-apache-access-logs/51085)

<div class="topic-metadata">

**Author:** [@jnunez](https://discuss.elastic.co/u/jnunez)\
**Replies:** 3\
**Last updated:** [May 28, 2016, 12:53am UTC](https://discuss.elastic.co/t/problem-elk-amazon-s3-apache-access-logs/51085 "2016-05-28T00:53:10Z")

</div>

Hi friends, I'm implementing an ELK with apache access logs stores on Amazon S3, but I have a problem when I try to view the graph on Kibana, the dates in the graph doesn't coincide with the dates in logs files. Here a …

---

## [Catch SNMP traps from windows for every 5minutes](https://discuss.elastic.co/t/catch-snmp-traps-from-windows-for-every-5minutes/38846)

<div class="topic-metadata">

**Author:** [@Jansi](https://discuss.elastic.co/u/Jansi)\
**Replies:** 3\
**Last updated:** [January 12, 2016, 7:47am UTC](https://discuss.elastic.co/t/catch-snmp-traps-from-windows-for-every-5minutes/38846 "2016-01-12T07:47:14Z")

</div>

Hi, Can anyone please let me know how to collect the snmp traps from windows system using CentOS machine for every 5minutes using Logstash? Also i needs to know how to get trap by mentioning the OID using Logstash? …

---

## [Data too large error](https://discuss.elastic.co/t/data-too-large-error/19003)

<div class="topic-metadata">

**Author:** [@Rhys\_Campbell](https://discuss.elastic.co/u/Rhys_Campbell)\
**Replies:** 3\
**Last updated:** [April 22, 2015, 9:57pm UTC](https://discuss.elastic.co/t/data-too-large-error/19003 "2015-04-22T21:57:29Z")

</div>

I occasionally get the following error in Kibana from elasticsearch \*1. \* \*Oops!ElasticsearchException\[org.elasticsearch.common.breaker.CircuitBreakingException:Data too large, data for field \[@timestamp\]…

---

## [Configuration round robin for elasticseach](https://discuss.elastic.co/t/configuration-round-robin-for-elasticseach/181815)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 2\
**Last updated:** [May 24, 2019, 3:18pm UTC](https://discuss.elastic.co/t/configuration-round-robin-for-elasticseach/181815 "2019-05-24T15:18:42Z")

</div>

Hello, I have some questions about the output configuration of winlogbeat. Today, I have this for a windows server : output.elasticsearch: hosts: \["serverA:9200"\] I want to add another server in case of failure of…

---

## [IllegalArgumentException: None of the ciphers are supported by this JVM](https://discuss.elastic.co/t/illegalargumentexception-none-of-the-ciphers-are-supported-by-this-jvm/97267)

<div class="topic-metadata">

**Author:** [@anastass](https://discuss.elastic.co/u/anastass)\
**Replies:** 2\
**Last updated:** [August 16, 2017, 1:59pm UTC](https://discuss.elastic.co/t/illegalargumentexception-none-of-the-ciphers-are-supported-by-this-jvm/97267 "2017-08-16T13:59:36Z")

</div>

Dear Elastic Team, I have installed X-Pack 5.5.1 on SUSE Linux Enterprise Server 12 SP2 using the following commands: cd /tmp/elastic-depot wget https://artifacts.elastic.co/downloads/packs/x-pack/x-pack-5.5.1.zip /u…

---

## [Elasticsearch-angular.js authentication issue](https://discuss.elastic.co/t/elasticsearch-angular-js-authentication-issue/34412)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [November 15, 2015, 4:15am UTC](https://discuss.elastic.co/t/elasticsearch-angular-js-authentication-issue/34412 "2015-11-15T04:15:50Z")

</div>

Hi, I am re-posting this here as there might be lot of UI developers here. I am using elasticsearch-angular.js client to connect to my ES instance which has custom security plugin installed. Below is the code i am us…

---

## [Elaticsearch 5 Xpack setup getting exception](https://discuss.elastic.co/t/elaticsearch-5-xpack-setup-getting-exception/58235)

<div class="topic-metadata">

**Author:** [@gaurav\_S\_javheri](https://discuss.elastic.co/u/gaurav_S_javheri)\
**Replies:** 1\
**Last updated:** [September 5, 2016, 3:30pm UTC](https://discuss.elastic.co/t/elaticsearch-5-xpack-setup-getting-exception/58235 "2016-09-05T15:30:37Z")

</div>

Elasticsearch 5.0.0-alpha4, Build: 3f5b994/2016-06-27T16:23:46.861Z, JVM: 1.8.0\_91 is installed with Xpack plugin. Xpack pluging is configured for authentication and SSL encryption. below is xpack configuration xp…

---

## [Custom Kibana Plugin](https://discuss.elastic.co/t/custom-kibana-plugin/105209)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 6\
**Last updated:** [November 12, 2017, 12:45pm UTC](https://discuss.elastic.co/t/custom-kibana-plugin/105209 "2017-11-12T12:45:20Z")

</div>

Hi there, I'm about to start to dig a bit into the developing plugins world and I'd like to describe what I'd like to do an get any advice or recommendations if you have any. I'm building a new vertical bar chart where…

---

## [How to avoid multiple word matches without changing index\_option](https://discuss.elastic.co/t/how-to-avoid-multiple-word-matches-without-changing-index-option/92259)

<div class="topic-metadata">

**Author:** [@sid\_1199](https://discuss.elastic.co/u/sid_1199)\
**Replies:** 6\
**Last updated:** [July 7, 2017, 1:05pm UTC](https://discuss.elastic.co/t/how-to-avoid-multiple-word-matches-without-changing-index-option/92259 "2017-07-07T13:05:39Z")

</div>

I have a query running on my index as follows: GET /index/type/\_search?search\_type=dfs\_query\_then\_fetch { "query": { "bool": { "must": \[{"match": { "field": {"query":"search\_value","boost":2}}\] } } } …

---

## [Logstash 1.5.6 consuming CPU when no incoming traffic](https://discuss.elastic.co/t/logstash-1-5-6-consuming-cpu-when-no-incoming-traffic/40956)

<div class="topic-metadata">

**Author:** [@Karol\_Stojek](https://discuss.elastic.co/u/Karol_Stojek)\
**Replies:** 6\
**Last updated:** [February 25, 2016, 6:29am UTC](https://discuss.elastic.co/t/logstash-1-5-6-consuming-cpu-when-no-incoming-traffic/40956 "2016-02-25T06:29:01Z")

</div>

I have a logstash listening on a single port that has accepted traffic from filebeats. It was working fine for a few hours. Now I've stopped all the filebeats, there is no incomming traffic on the listened port. But …

---

## [Index corrupt exception](https://discuss.elastic.co/t/index-corrupt-exception/319883)

<div class="topic-metadata">

**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\
**Replies:** 4\
**Last updated:** [November 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/index-corrupt-exception/319883 "2022-11-28T07:52:09Z")

</div>

Hi, We are seeing the Filesystem corruption issue. Due to this two shards are not accessible on the cluster. There is no issue from the hardware end and all other shards are accessible and available. Error: "store\_exc…

---

## [How I can create a track button to track events like http](https://discuss.elastic.co/t/how-i-can-create-a-track-button-to-track-events-like-http/243589)

<div class="topic-metadata">

**Author:** [@alexandreservian](https://discuss.elastic.co/u/alexandreservian)\
**Replies:** 4\
**Last updated:** [August 10, 2020, 4:03pm UTC](https://discuss.elastic.co/t/how-i-can-create-a-track-button-to-track-events-like-http/243589 "2020-08-10T16:03:07Z")

</div>

Kibana version :7.6.2 APM Agent language and version : elastic/apm-rum@5.30.0 Browser version : google chrome 84.0.4147.105 Original install method (e.g. download page, yum, deb, from source, etc.) and version : n…

---

## [Multiple grok parsing not extracting all the fields](https://discuss.elastic.co/t/multiple-grok-parsing-not-extracting-all-the-fields/213764)

<div class="topic-metadata">

**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\
**Replies:** 4\
**Last updated:** [January 7, 2020, 2:28am UTC](https://discuss.elastic.co/t/multiple-grok-parsing-not-extracting-all-the-fields/213764 "2020-01-07T02:28:51Z")

</div>

Trying to extract some fields from the msgbody field using grok , but only the first field in the gork gets extracted. interested Fields - corId, controller, httpStatusText and uri Sample Data - 2020-01-03 10:44:17,02…

---

## [Help with \_jsonparsefailure?](https://discuss.elastic.co/t/help-with--jsonparsefailure/76446)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 4\
**Last updated:** [February 28, 2017, 3:37pm UTC](https://discuss.elastic.co/t/help-with--jsonparsefailure/76446 "2017-02-28T15:37:29Z")

</div>

I have a multi-line java exception log that I'm correctly sending via rsyslog from a remote server to my ELK stack, like the one below (sorry for the verbosity). It looks, to me, like a valid json file. { "type":"pe-lo…

---

## [Beats not outputting to logstash like expected](https://discuss.elastic.co/t/beats-not-outputting-to-logstash-like-expected/43955)

<div class="topic-metadata">

**Author:** [@jcarapet](https://discuss.elastic.co/u/jcarapet)\
**Replies:** 5\
**Last updated:** [March 10, 2016, 10:56pm UTC](https://discuss.elastic.co/t/beats-not-outputting-to-logstash-like-expected/43955 "2016-03-10T22:56:04Z")

</div>

Trying to troubleshoot issue with filebeat outputting to logstash. Determined it is a config issue, though cannot determine where the config issue lies. the filebeat.yml passes yaml lint, configtest, and is showing in de…

---

## [Problem with react routing issue in Kibana Plugin](https://discuss.elastic.co/t/problem-with-react-routing-issue-in-kibana-plugin/212719)

<div class="topic-metadata">

**Author:** [@RaghibHuda](https://discuss.elastic.co/u/RaghibHuda)\
**Replies:** 3\
**Last updated:** [January 1, 2020, 9:57am UTC](https://discuss.elastic.co/t/problem-with-react-routing-issue-in-kibana-plugin/212719 "2020-01-01T09:57:43Z")

</div>

I am developing a Kibana Plugin. I have got an error like this Uncaught Error: Invalid hook call. Hooks can only be called inside of the body of a function component. This could happen for one of the following reasons: …

---

## [Date Histogram: Can I force the last bucket to be a full interval?](https://discuss.elastic.co/t/date-histogram-can-i-force-the-last-bucket-to-be-a-full-interval/102852)

<div class="topic-metadata">

**Author:** [@mdoh2](https://discuss.elastic.co/u/mdoh2)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 2:34am UTC](https://discuss.elastic.co/t/date-histogram-can-i-force-the-last-bucket-to-be-a-full-interval/102852 "2017-10-12T02:34:10Z")

</div>

Hi! Is it possible to have the intervals count backwards from the end of the range? I would like it so that the last bucket returned from a date\_histogram aggregation was a complete interval, ending on the last day of m…

---

## [Logstash - http-Poller plugin fails to disable SSL validation](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/219785)

<div class="topic-metadata">

**Author:** [@prasanna2104](https://discuss.elastic.co/u/prasanna2104)\
**Replies:** 2\
**Last updated:** [February 18, 2020, 2:48pm UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/219785 "2020-02-18T14:48:17Z")

</div>

Hi Team, I have installed logstash7.3.0 in the Linux server. I have created a configuration which will connect to the JIRA rest API using http\_poller plugin. Since our JIRA is self signed, and for testing purpose we are…

---

## [Upgrade to 7.2 causes shards failed due to painless script error](https://discuss.elastic.co/t/upgrade-to-7-2-causes-shards-failed-due-to-painless-script-error/188650)

<div class="topic-metadata">

**Author:** [@C\_J](https://discuss.elastic.co/u/C_J)\
**Replies:** 2\
**Last updated:** [July 3, 2019, 1:17pm UTC](https://discuss.elastic.co/t/upgrade-to-7-2-causes-shards-failed-due-to-painless-script-error/188650 "2019-07-03T13:17:40Z")

</div>

Could anyone with more knowledge of painless could help me with a problem I have right now: After upgrading Stack to 7.2, in one of the visualization that is using Scripted field, I get shards failed error, it used to …

---

## [Timelion split and divide not working well](https://discuss.elastic.co/t/timelion-split-and-divide-not-working-well/137034)

<div class="topic-metadata">

**Author:** [@vincent\_valdy](https://discuss.elastic.co/u/vincent_valdy)\
**Replies:** 2\
**Last updated:** [June 28, 2018, 9:11am UTC](https://discuss.elastic.co/t/timelion-split-and-divide-not-working-well/137034 "2018-06-28T09:11:34Z")

</div>

let's consider the following data POST /sales/forecast/ {"product":"banana","state":"unsure","price":10, "@timestamp": "2018-06-20T10:00:00.000Z" } POST /sales/forecast/ {"product":"banana","state":"confirmed","price…

---

## [Elasticsearch \_update\_by\_query in logstash error \[HTTP Output Failure\] Encountered non-2xx HTTP code 400](https://discuss.elastic.co/t/elasticsearch-update-by-query-in-logstash-error-http-output-failure-encountered-non-2xx-http-code-400/274405)

<div class="topic-metadata">

**Author:** [@priyaankaa](https://discuss.elastic.co/u/priyaankaa)\
**Replies:** 1\
**Last updated:** [June 25, 2021, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-in-logstash-error-http-output-failure-encountered-non-2xx-http-code-400/274405 "2021-06-25T05:40:42Z")

</div>

Properly working \_update\_by\_query call - POST /s1test-demo7/\_update\_by\_query { "script": { "source": "ctx.\_source.externaldata = params.externaldata", "lang": "painless", "params": { "externa…

---

## [Kibana error - Internal Server Error](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 6:36pm UTC](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780 "2021-04-10T18:36:04Z")

</div>

Whenever I try to export data from Kibana, I am getting internal service error. Following is the log entry in kibana.log. Could I kindly request someone to help me resolve this please. {"type":"log","@timestamp":"2021-…

---

## [Java TransportClient Memory Leak](https://discuss.elastic.co/t/java-transportclient-memory-leak/11157)

<div class="topic-metadata">

**Author:** [@kelaban](https://discuss.elastic.co/u/kelaban)\
**Replies:** 7\
**Last updated:** [March 15, 2013, 5:14pm UTC](https://discuss.elastic.co/t/java-transportclient-memory-leak/11157 "2013-03-15T17:14:13Z")

</div>

I've had an ongoing problem using the Java TransportClient injected through elasticsearch-spring. When trying to load test my client once I hit the 180k request mark requests start to hang, some take 20+ seconds. I'v…

---

## [Filebeat only operating at 10%-15% of expected Performance](https://discuss.elastic.co/t/filebeat-only-operating-at-10-15-of-expected-performance/262865)

<div class="topic-metadata">

**Author:** [@svbernem](https://discuss.elastic.co/u/svbernem)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 6:56am UTC](https://discuss.elastic.co/t/filebeat-only-operating-at-10-15-of-expected-performance/262865 "2021-02-08T06:56:34Z")

</div>

Hi, I have invested quite some time profiling configurations of filebeat (7.6.2) in the past few days, since it is currently running very slow. My test dataset consists of ~2GB ndjson files, at 10 MB per file, with ~6 m…

---

## [Elasticsearch issue](https://discuss.elastic.co/t/elasticsearch-issue/258182)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 6\
**Last updated:** [December 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-issue/258182 "2020-12-10T16:46:24Z")

</div>

Hello there, I am using ELK 7.9.2 and I see following issue with elasticsearch and kibana. \*\*Elasticsearch\*\* \[2020-12-09T15:13:39,596\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[master\] \[.kibana\_1\]\[0\] marking unavailable sh…

---

## [Multiline issue with filebeat](https://discuss.elastic.co/t/multiline-issue-with-filebeat/242234)

<div class="topic-metadata">

**Author:** [@bryand](https://discuss.elastic.co/u/bryand)\
**Replies:** 6\
**Last updated:** [August 10, 2020, 12:29pm UTC](https://discuss.elastic.co/t/multiline-issue-with-filebeat/242234 "2020-08-10T12:29:42Z")

</div>

Hi, I'm having issues with trying to aggregate java exceptions into a single message using the filebeat multiline support. From everything I've read this should be very simple, yet, no matter what I try, it doesn't wor…

---

## [ES6.X , in IntelliJ IDEA ,from source unable start](https://discuss.elastic.co/t/es6-x-in-intellij-idea-from-source-unable-start/108544)

<div class="topic-metadata">

**Author:** [@sshling](https://discuss.elastic.co/u/sshling)\
**Replies:** 6\
**Last updated:** [November 22, 2017, 7:25am UTC](https://discuss.elastic.co/t/es6-x-in-intellij-idea-from-source-unable-start/108544 "2017-11-22T07:25:37Z")

</div>

conf: Main class : org.elasticsearch.bootstrap.Elasticsearch VM options : -Xms1g -Xmx1g -Dlog4j.shutdownHookEnabled=false -Dlog4j2.disable.jmx=true -Des.path.home=/home/sl/02workspace/open/elasticsearch/core -De…

---

## [Kibana access management](https://discuss.elastic.co/t/kibana-access-management/47374)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 6\
**Last updated:** [April 15, 2016, 2:26pm UTC](https://discuss.elastic.co/t/kibana-access-management/47374 "2016-04-15T14:26:09Z")

</div>

Hi, Can we implement access management for Kibana based on different index patterns? Example: I have Applications in our centralized logging as sales, tf, rss, crm, etc. Indexes are created on the basis of applications…

---

## [Question: Possible to override the response body of http-input plugin?](https://discuss.elastic.co/t/question-possible-to-override-the-response-body-of-http-input-plugin/79482)

<div class="topic-metadata">

**Author:** [@paul.42](https://discuss.elastic.co/u/paul.42)\
**Replies:** 1\
**Last updated:** [March 22, 2017, 6:37am UTC](https://discuss.elastic.co/t/question-possible-to-override-the-response-body-of-http-input-plugin/79482 "2017-03-22T06:37:57Z")

</div>

We're trying to send data from a .net application to logstash for ingest into elastic search, I was wondering if we could use a more REST oriented class, sending/receiving JSON. When we set the response-header to be appl…

---

## [How to parse @timestamp field using HTTPDERROR\_DATE pattern?](https://discuss.elastic.co/t/how-to-parse-timestamp-field-using-httpderror-date-pattern/64754)

<div class="topic-metadata">

**Author:** [@vitorlui](https://discuss.elastic.co/u/vitorlui)\
**Replies:** 1\
**Last updated:** [November 3, 2016, 6:46am UTC](https://discuss.elastic.co/t/how-to-parse-timestamp-field-using-httpderror-date-pattern/64754 "2016-11-03T06:46:05Z")

</div>

I am trying to parse the timestamp from my log but my filter doesn't parse properly: My log file has this pattern: \[Sun Oct 30 17:16:09 2016\] \[TRACE\_HIGH\] \[TEST1\] MessageTest1 \[Sun Oct 30 17:16:10 2016\] \[TRACE\_HIGH\] …

---

## [Wazuh API cannot start, multiple errors](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 1:03pm UTC](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780 "2019-10-31T13:03:43Z")

</div>

My wazuh-manager version installed v3.9.3 (for Kibana 7.1.1) but the wazuh-api cannot be started. I have run the following command to remove / reindex the system: service kibana stop curl -u elastic -XDELETE 10.0.106.1…

---

## [Filebeat - disabling shipping default fields](https://discuss.elastic.co/t/filebeat-disabling-shipping-default-fields/84921)

<div class="topic-metadata">

**Author:** [@rs\_ela](https://discuss.elastic.co/u/rs_ela)\
**Replies:** 1\
**Last updated:** [May 8, 2017, 11:35am UTC](https://discuss.elastic.co/t/filebeat-disabling-shipping-default-fields/84921 "2017-05-08T11:35:24Z")

</div>

Hi all, I need to disable Filebeat shipping for some default fields, such as beat.hostname, host, source etc. How do I do that? Is that even possible? Using the following does not seem to work: #==================…

---

## [How to provide setting for creating custom analyzer using java API?](https://discuss.elastic.co/t/how-to-provide-setting-for-creating-custom-analyzer-using-java-api/6267)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 2\
**Last updated:** [January 4, 2012, 6:04am UTC](https://discuss.elastic.co/t/how-to-provide-setting-for-creating-custom-analyzer-using-java-api/6267 "2012-01-04T06:04:35Z")

</div>

Hi I looked on following link for creating custom analyzer: http://www.elasticsearch.org/guide/reference/index-modules/analysis/custom-analyzer.html I have question to you which API will help me to create custo…

---

## [Add subdomain to kibana instance](https://discuss.elastic.co/t/add-subdomain-to-kibana-instance/176235)

<div class="topic-metadata">

**Author:** [@tehho](https://discuss.elastic.co/u/tehho)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 1:14pm UTC](https://discuss.elastic.co/t/add-subdomain-to-kibana-instance/176235 "2019-04-11T13:14:31Z")

</div>

Hi. We would like to add a diffrent subdomain to our kibana instances for human readable urls. How do we do this? Example: backup-test.example.com When we have a CNAME from backup-test.example.com pointed to GUID.exa…

---

## [Kafka input failover](https://discuss.elastic.co/t/kafka-input-failover/128027)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 3\
**Last updated:** [April 16, 2018, 5:25pm UTC](https://discuss.elastic.co/t/kafka-input-failover/128027 "2018-04-16T17:25:14Z")

</div>

If I have a kafka topic replicated across 2 brokers, will logstash failover to the 2nd broker if the first becomes unavailable? It's not working, for me, but I'm not sure that logstash will failover in this instance. Wh…

---

## [Why count in my line chart shows incorrect value before drill down?](https://discuss.elastic.co/t/why-count-in-my-line-chart-shows-incorrect-value-before-drill-down/81911)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 5:29am UTC](https://discuss.elastic.co/t/why-count-in-my-line-chart-shows-incorrect-value-before-drill-down/81911 "2017-04-11T05:29:54Z")

</div>

Hi, I am using ELK GA 5.0.0. I have created a line chart with Count in Y-Axis, and Date Histogram in X-Axis with timefield interval set to Second. The problem I am facing is, when I take it for 4 hours, my chart is show…

[Previous page](https://discuss.elastic.co/top.md?page=1031&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1033&per_page=50&period=all)
