# Top

**URL:** https://discuss.elastic.co/top.md?page=1034&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1035

---

## [Unused mapping fields and impact on space/performance](https://discuss.elastic.co/t/unused-mapping-fields-and-impact-on-space-performance/166046)

<div class="topic-metadata">

**Author:** [@sparkjonez](https://discuss.elastic.co/u/sparkjonez)\
**Replies:** 2\
**Last updated:** [January 28, 2019, 11:24pm UTC](https://discuss.elastic.co/t/unused-mapping-fields-and-impact-on-space-performance/166046 "2019-01-28T23:24:45Z")

</div>

Hello everyone, I have fields in my mapping file that are not being used by the incoming data. Are those (unused) fields taking up space or impact performance in my Elasticsearch cluster, or is Elasticsearch smart enoug…

---

## [Set predefined filters based on users's info](https://discuss.elastic.co/t/set-predefined-filters-based-on-userss-info/137130)

<div class="topic-metadata">

**Author:** [@kenneth](https://discuss.elastic.co/u/kenneth)\
**Replies:** 2\
**Last updated:** [June 24, 2018, 3:26pm UTC](https://discuss.elastic.co/t/set-predefined-filters-based-on-userss-info/137130 "2018-06-24T15:26:21Z")

</div>

Hi, I have created a visualization in Kibana which filters data based on the group\_id field. Every user in kibana will have a group\_id field in their metadata info. I would like to use this value to be used as the filte…

---

## [Issue with Kibana Discover page not showing results](https://discuss.elastic.co/t/issue-with-kibana-discover-page-not-showing-results/85472)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 2\
**Last updated:** [May 23, 2017, 9:04pm UTC](https://discuss.elastic.co/t/issue-with-kibana-discover-page-not-showing-results/85472 "2017-05-23T21:04:02Z")

</div>

I have an intermittent issue with the Discover page not showing any results even though when I do a search through the 'Dev' area I get a several hits on what I am trying to search for. I've tried the suggestions in the …

---

## [Top message visualization - how to filter](https://discuss.elastic.co/t/top-message-visualization-how-to-filter/49968)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 2\
**Last updated:** [May 13, 2016, 10:52am UTC](https://discuss.elastic.co/t/top-message-visualization-how-to-filter/49968 "2016-05-13T10:52:32Z")

</div>

Hi, I'm working with Syslog data from routers and switches and am trying to make a visualization that shows me what type of message is coming in the most. Like a top 5 message kind of thing so we can quickly see what w…

---

## [Filebeat Kubernetes autodiscover with post "processor" specific field with another filebeat module](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503)

<div class="topic-metadata">

**Author:** [@kgfathur](https://discuss.elastic.co/u/kgfathur)\
**Replies:** 7\
**Last updated:** [January 6, 2023, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503 "2023-01-06T16:03:09Z")

</div>

I have setup filbeat on Kubernetes (ECK) with sample and guide from docs: Role Based Access Control for Beats | Elastic Cloud on Kubernetes \[2.5\] Run Filebeat on Kubernetes | Filebeat Reference \[8.5\] Version: ECK: …

---

## [Elastic-Agent - metricbeat x509 certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-metricbeat-x509-certificate-signed-by-unknown-authority/304735)

<div class="topic-metadata">

**Author:** [@KelvUK](https://discuss.elastic.co/u/KelvUK)\
**Replies:** 1\
**Last updated:** [May 15, 2022, 5:04pm UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-x509-certificate-signed-by-unknown-authority/304735 "2022-05-15T17:04:13Z")

</div>

I've elastic-agent running as a docker container configured as the fleet-server. The fleet-server registers without issue and can receive policy updates. However I'm getting no data from the metricbeat component of the…

---

## [IF less than value is not working](https://discuss.elastic.co/t/if-less-than-value-is-not-working/202381)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 7\
**Last updated:** [October 7, 2019, 1:52pm UTC](https://discuss.elastic.co/t/if-less-than-value-is-not-working/202381 "2019-10-07T13:52:10Z")

</div>

Hello, I am trying to check if the YEAR value is less than 100 other the value in YEAR is for example 2012 otherwise it'll be 12 or so on for different year. However, it is throwing an error. I can't seem to compare and …

---

## [/usr/share/metricbeat/bin/metricbeat exceeds max file size](https://discuss.elastic.co/t/usr-share-metricbeat-bin-metricbeat-exceeds-max-file-size/201783)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [October 1, 2019, 1:33pm UTC](https://discuss.elastic.co/t/usr-share-metricbeat-bin-metricbeat-exceeds-max-file-size/201783 "2019-10-01T13:33:15Z")

</div>

Hello I'm seeing the following warning when starting auditbeat: Oct 01 13:10:26 myserver auditbeat\[22218\]: 2019-10-01T13:10:26.828+0200 WARN \[process\] process/process.go:234 failed to hash executable /usr/share/metricb…

---

## [Passing extra parameter in shared iframe](https://discuss.elastic.co/t/passing-extra-parameter-in-shared-iframe/147791)

<div class="topic-metadata">

**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\
**Replies:** 1\
**Last updated:** [September 10, 2018, 6:12pm UTC](https://discuss.elastic.co/t/passing-extra-parameter-in-shared-iframe/147791 "2018-09-10T18:12:48Z")

</div>

I'd like to use timelion or a visualization on my own web app page... I know I can use Share and produce an IFRAME. Is it possible to pass extra parameters to the iframe? For example, I have some data for a few countri…

---

## [Logshtash 5.5.1 Kafka output SASL\_SSL Error](https://discuss.elastic.co/t/logshtash-5-5-1-kafka-output-sasl-ssl-error/95518)

<div class="topic-metadata">

**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\
**Replies:** 1\
**Last updated:** [August 7, 2017, 11:29pm UTC](https://discuss.elastic.co/t/logshtash-5-5-1-kafka-output-sasl-ssl-error/95518 "2017-08-07T23:29:01Z")

</div>

Hi, I want to produce logs to a Kafka cluster with SASL/Kerberos security. The Kafka cluster is working and tested with KafkaConsoleProducer, but with my Logstash configs it returns the error: \[ERROR\]\[logstash.outputs…

---

## [Logstash output - set output file name](https://discuss.elastic.co/t/logstash-output-set-output-file-name/264023)

<div class="topic-metadata">

**Author:** [@liavsh](https://discuss.elastic.co/u/liavsh)\
**Replies:** 3\
**Last updated:** [February 14, 2021, 5:46pm UTC](https://discuss.elastic.co/t/logstash-output-set-output-file-name/264023 "2021-02-14T17:46:03Z")

</div>

Hi I'm new to logstash... I'm using logstash to stream logfiles from AWS MSK Kafka to AWS S3 bucket. I FAIL setting the output filename inside the bucket. I was able to set the folder that will hold the output file. …

---

## [Creating a watcher comparing the last and previous status of a windows service](https://discuss.elastic.co/t/creating-a-watcher-comparing-the-last-and-previous-status-of-a-windows-service/202536)

<div class="topic-metadata">

**Author:** [@J\_Weeda](https://discuss.elastic.co/u/J_Weeda)\
**Replies:** 3\
**Last updated:** [October 8, 2019, 11:20am UTC](https://discuss.elastic.co/t/creating-a-watcher-comparing-the-last-and-previous-status-of-a-windows-service/202536 "2019-10-08T11:20:59Z")

</div>

Hello, can provide any guidance on how to form the input query for a watcher to retrieve the last and previous status ("windows.service.state") for each "windows.service.display\_name" collected through a metricbeat. Is …

---

## [Run logstash command on in the background on ec2](https://discuss.elastic.co/t/run-logstash-command-on-in-the-background-on-ec2/185514)

<div class="topic-metadata">

**Author:** [@Mohit\_Ruke](https://discuss.elastic.co/u/Mohit_Ruke)\
**Replies:** 3\
**Last updated:** [June 13, 2019, 9:25pm UTC](https://discuss.elastic.co/t/run-logstash-command-on-in-the-background-on-ec2/185514 "2019-06-13T21:25:23Z")

</div>

Hi Everyone, I am currently trying to dump all my data from s3 to Elasticsearch. I run this from ec2. for that I have my logstash config file at /etc/logstash/conf.d/awses.conf I run the command /usr/share/logstash/b…

---

## [Soucis avec le Authorization header](https://discuss.elastic.co/t/soucis-avec-le-authorization-header/46383)

<div class="topic-metadata">

**Author:** [@Cafa](https://discuss.elastic.co/u/Cafa)\
**Replies:** 3\
**Last updated:** [April 5, 2016, 4:27pm UTC](https://discuss.elastic.co/t/soucis-avec-le-authorization-header/46383 "2016-04-05T16:27:16Z")

</div>

Bonjour, Je sais que ES fourni une api javascript, mais j'aimerais configurer moi même un service d'authentification via l'API REST. J'ai configuré les CORS dans mon fichier elastisearch.yml, comme ceci : http.port:…

---

## [Add time filter to kibana](https://discuss.elastic.co/t/add-time-filter-to-kibana/41792)

<div class="topic-metadata">

**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\
**Replies:** 3\
**Last updated:** [February 16, 2016, 6:42am UTC](https://discuss.elastic.co/t/add-time-filter-to-kibana/41792 "2016-02-16T06:42:46Z")

</div>

Hi , I installed logtrash + ElasticSearch + Kibana on my server. When I'm entering to the Kibana I don't have the "time filter" at the top right of the screen. I attached 2 screenshots , 1 without the filter and the o…

---

## [How to parse Elasticsearch logs?](https://discuss.elastic.co/t/how-to-parse-elasticsearch-logs/41029)

<div class="topic-metadata">

**Author:** [@punit\_naik1](https://discuss.elastic.co/u/punit_naik1)\
**Replies:** 3\
**Last updated:** [February 5, 2016, 11:40am UTC](https://discuss.elastic.co/t/how-to-parse-elasticsearch-logs/41029 "2016-02-05T11:40:16Z")

</div>

I have an elasticsearch log and one line from that looks like this: \[2016-02-02 00:03:17,558\]\[INFO \]\[cluster.service \] \[Sugar Man\] added {\[factordb-d0b9dfee4570f86e--3b3c30d8-1529e1c2cec--8000\]\[5ayv3rbgQT6AK7i…

---

## [Metricbeat: Sql Module: Oracle Driver: Sql Query Error :ERROR error opening connection: opening connection: sql: unknown driver "oracle" (forgotten import?)](https://discuss.elastic.co/t/metricbeat-sql-module-oracle-driver-sql-query-error-error-error-opening-connection-opening-connection-sql-unknown-driver-oracle-forgotten-import/253387)

<div class="topic-metadata">

**Author:** [@Sunil18](https://discuss.elastic.co/u/Sunil18)\
**Replies:** 4\
**Last updated:** [October 30, 2020, 11:13am UTC](https://discuss.elastic.co/t/metricbeat-sql-module-oracle-driver-sql-query-error-error-error-opening-connection-opening-connection-sql-unknown-driver-oracle-forgotten-import/253387 "2020-10-30T11:13:06Z")

</div>

I have configured Metricbeat Oracle Module(For Default Metrices/Dashboard ) & I am using Sql Module for customized queries to fetch the data from Oracle DB. Oracle Module is working perfectly but for Sql module I am g…

---

## [Multiple Kibana instances per cluster](https://discuss.elastic.co/t/multiple-kibana-instances-per-cluster/132531)

<div class="topic-metadata">

**Author:** [@jmtrc](https://discuss.elastic.co/u/jmtrc)\
**Replies:** 4\
**Last updated:** [June 4, 2018, 8:20am UTC](https://discuss.elastic.co/t/multiple-kibana-instances-per-cluster/132531 "2018-06-04T08:20:54Z")

</div>

Looks like Kibana does not have a feature to apply role based access control on visualization or dashboard items within one instance. Can ECE configure multiple Kibana instances for a given cluster? I understand that pe…

---

## [Elasticsearch Intermittent slow query](https://discuss.elastic.co/t/elasticsearch-intermittent-slow-query/114237)

<div class="topic-metadata">

**Author:** [@wang\_Jnercy](https://discuss.elastic.co/u/wang_Jnercy)\
**Replies:** 4\
**Last updated:** [January 10, 2018, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-intermittent-slow-query/114237 "2018-01-10T08:16:18Z")

</div>

Online environment Documents: 394.9k Data: 242.9 MB of elasticsearch-version:5.4.0 There will be a few full queries every hour, and the following is a slow query took\[615.1ms\], took\_millis\[615\], types\[driverAsso\], stat…

---

## [Search as you type and highlighter](https://discuss.elastic.co/t/search-as-you-type-and-highlighter/287341)

<div class="topic-metadata">

**Author:** [@mihalikv](https://discuss.elastic.co/u/mihalikv)\
**Replies:** 1\
**Last updated:** [November 4, 2021, 2:49pm UTC](https://discuss.elastic.co/t/search-as-you-type-and-highlighter/287341 "2021-11-04T14:49:07Z")

</div>

Hello, Env: ES 7.15.0 PUT my-index-000001 { "mappings": { "properties": { "my\_field": { "type": "search\_as\_you\_type" } } } } PUT my-index-000001/\_doc/1?refresh { "my\_field": "quick b…

---

## [How to properly define a hashmap in ElasticSearch](https://discuss.elastic.co/t/how-to-properly-define-a-hashmap-in-elasticsearch/29345)

<div class="topic-metadata">

**Author:** [@stam585](https://discuss.elastic.co/u/stam585)\
**Replies:** 0\
**Last updated:** [September 15, 2015, 8:38pm UTC](https://discuss.elastic.co/t/how-to-properly-define-a-hashmap-in-elasticsearch/29345 "2015-09-15T20:38:33Z")

</div>

I am using dynamic mapping in ElasticSearch. I use it because my index is long and I need to use the template feature in order to avoid updating definitions in multiple places (My other question here). I am sending…

---

## [Best browser for Kibana 7.16](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 2\
**Last updated:** [December 13, 2021, 7:08pm UTC](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703 "2021-12-13T19:08:30Z")

</div>

Hello everyone, Which browser is best compatible with Kibana 7.16 ? I know that Internet explorer is old now and should use latest browsers like Google Chrome or Microsoft Edge. But is there any explanation about that …

---

## [Setup Elastic Apm .Net Agent with .Net Core 3 Console Application](https://discuss.elastic.co/t/setup-elastic-apm-net-agent-with-net-core-3-console-application/255435)

<div class="topic-metadata">

**Author:** [@rainbowkid11](https://discuss.elastic.co/u/rainbowkid11)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 11:50pm UTC](https://discuss.elastic.co/t/setup-elastic-apm-net-agent-with-net-core-3-console-application/255435 "2020-11-23T23:50:01Z")

</div>

Kibana version: 7.10 Elasticsearch version: 7.10 APM Server version: 7.10 APM Agent language and version: .Net 1.7.0 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and…

---

## [Adding script\_fields to transform index using painless scripts](https://discuss.elastic.co/t/adding-script-fields-to-transform-index-using-painless-scripts/240601)

<div class="topic-metadata">

**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\
**Replies:** 2\
**Last updated:** [July 14, 2020, 1:02pm UTC](https://discuss.elastic.co/t/adding-script-fields-to-transform-index-using-painless-scripts/240601 "2020-07-14T13:02:50Z")

</div>

we have fields like hour of day, week of month,quarter of year.. derived from @timestamp field using scripted field in kibana. We want to create a transform index to summarize our operational data, we want to store thos…

---

## [Logstash and painless: is logstash going to be replaced by ingest nodes?](https://discuss.elastic.co/t/logstash-and-painless-is-logstash-going-to-be-replaced-by-ingest-nodes/216393)

<div class="topic-metadata">

**Author:** [@Flavio\_Pompermaier](https://discuss.elastic.co/u/Flavio_Pompermaier)\
**Replies:** 2\
**Last updated:** [January 24, 2020, 9:21pm UTC](https://discuss.elastic.co/t/logstash-and-painless-is-logstash-going-to-be-replaced-by-ingest-nodes/216393 "2020-01-24T21:21:16Z")

</div>

Hello everybody, I've recently update from ES 6.8 to 7.5 and I found that Beats + Elastic pipelines are getting over Logstash (at least for ECS), and this is somehow very weird I think. Beats should provide Logstash pi…

---

## [Filebeat hitting payload size limit with AWS ElasticSearch](https://discuss.elastic.co/t/filebeat-hitting-payload-size-limit-with-aws-elasticsearch/158396)

<div class="topic-metadata">

**Author:** [@spiffytech](https://discuss.elastic.co/u/spiffytech)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 8:17pm UTC](https://discuss.elastic.co/t/filebeat-hitting-payload-size-limit-with-aws-elasticsearch/158396 "2018-11-27T20:17:26Z")

</div>

ElasticSearch is telling FileBeat that the payload is too large. I've tried setting bulk\_max\_size to 1 and still have the problem. My logs shouldn't be over 10MB in a single message, but maybe I'm wrong about that. Here…

---

## [ES build fails due to illegal\_argument\_exception](https://discuss.elastic.co/t/es-build-fails-due-to-illegal-argument-exception/136713)

<div class="topic-metadata">

**Author:** [@thitami](https://discuss.elastic.co/u/thitami)\
**Replies:** 2\
**Last updated:** [July 6, 2018, 10:22am UTC](https://discuss.elastic.co/t/es-build-fails-due-to-illegal-argument-exception/136713 "2018-07-06T10:22:07Z")

</div>

I have recently changed my ES mappings and now getting an exception on deploy Activity execution failed, because: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception : {"error":{"root\_cause":\[{"type":"illegal\_…

---

## [Logstash generating exception in pipeline worker](https://discuss.elastic.co/t/logstash-generating-exception-in-pipeline-worker/104617)

<div class="topic-metadata">

**Author:** [@kenny123](https://discuss.elastic.co/u/kenny123)\
**Replies:** 2\
**Last updated:** [October 20, 2017, 6:40pm UTC](https://discuss.elastic.co/t/logstash-generating-exception-in-pipeline-worker/104617 "2017-10-20T18:40:09Z")

</div>

Hi , when i run the logstash in the debug mode, it is generating error as the below.Can i please know whether the error is due to the wrong filter or not using of persistent queues. Exception in pipelineworker, the pi…

---

## [Best way to split json input to multiple events for elasticsearch](https://discuss.elastic.co/t/best-way-to-split-json-input-to-multiple-events-for-elasticsearch/60537)

<div class="topic-metadata">

**Author:** [@Skippy](https://discuss.elastic.co/u/Skippy)\
**Replies:** 2\
**Last updated:** [September 16, 2016, 7:33pm UTC](https://discuss.elastic.co/t/best-way-to-split-json-input-to-multiple-events-for-elasticsearch/60537 "2016-09-16T19:33:40Z")

</div>

First of all, my apologies. I am new to ELK and I can find most of my way around with googling what I need. I absolutely love ELK so far, but I could not find any answers to a very simple question (Which leads me to be…

---

## [setTimeout() of SearchRequestBuilder not working](https://discuss.elastic.co/t/settimeout-of-searchrequestbuilder-not-working/11611)

<div class="topic-metadata">

**Author:** [@ElasticUsers](https://discuss.elastic.co/u/ElasticUsers)\
**Replies:** 2\
**Last updated:** [April 22, 2013, 5:56am UTC](https://discuss.elastic.co/t/settimeout-of-searchrequestbuilder-not-working/11611 "2013-04-22T05:56:36Z")

</div>

Hi, I have a query on method setTimeout() of SearchRequestBuilder. We have set a timeout value of 1 milliseconds while creating SearchRequestBuilder to execute the query. When we get the SearchResponse object and ex…

---

## [Extraction valeurs champ message](https://discuss.elastic.co/t/extraction-valeurs-champ-message/281303)

<div class="topic-metadata">

**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\
**Replies:** 5\
**Last updated:** [September 7, 2021, 8:28pm UTC](https://discuss.elastic.co/t/extraction-valeurs-champ-message/281303 "2021-09-07T20:28:58Z")

</div>

Bonjour, Je souhaite indexer des paquets réseau et en extraire certaines informations mais logstash envoi tout dans un champ unique. Voici le code logstash : input { kafka { bootstrap\_servers =\> "172.16.238.204:…

---

## [Packetbeat use mem too many when monitor cassandra](https://discuss.elastic.co/t/packetbeat-use-mem-too-many-when-monitor-cassandra/72554)

<div class="topic-metadata">

**Author:** [@ymyjohnny](https://discuss.elastic.co/u/ymyjohnny)\
**Replies:** 5\
**Last updated:** [January 26, 2017, 1:11pm UTC](https://discuss.elastic.co/t/packetbeat-use-mem-too-many-when-monitor-cassandra/72554 "2017-01-26T13:11:55Z")

</div>

when i use packetbeat to monitor cassandra,the packetbeat use too many mem and after a while,the packetbeat process will be dead. version is 5.1.2 PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMA…

---

## [\[ SOLVED\] Remove IIS log](https://discuss.elastic.co/t/solved-remove-iis-log/58240)

<div class="topic-metadata">

**Author:** [@Alexis.d](https://discuss.elastic.co/u/Alexis.d)\
**Replies:** 5\
**Last updated:** [August 17, 2016, 12:46pm UTC](https://discuss.elastic.co/t/solved-remove-iis-log/58240 "2016-08-17T12:46:27Z")

</div>

Hey there, I need some help :). I work with ELK and Nxlog for my IIS log and it's work fine :slight\_smile: but i want to log only errors on my web sites and remove all log with sc-status 200 sc-win32-status 0 . He…

---

## [Which node to connect to](https://discuss.elastic.co/t/which-node-to-connect-to/276408)

<div class="topic-metadata">

**Author:** [@Bo-Wyatt](https://discuss.elastic.co/u/Bo-Wyatt)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 7:55pm UTC](https://discuss.elastic.co/t/which-node-to-connect-to/276408 "2021-06-28T19:55:55Z")

</div>

Hello, this is a dum question. But I have two nodes on my cluster (One is master). And I always use the master IP (or URL) to fetch for Info, for example in my Grafana data source I use the Node1 URL to Connect. Is alwa…

---

## [Logstash shutsdown without error](https://discuss.elastic.co/t/logstash-shutsdown-without-error/193873)

<div class="topic-metadata">

**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 8:28pm UTC](https://discuss.elastic.co/t/logstash-shutsdown-without-error/193873 "2019-08-05T20:28:41Z")

</div>

I am still learning about elasticsearch and logstash, I am trying to index a table from postgresDB but every time I run it, it keeps shutting down here's my logstash config: # file: index1.conf input { jdbc { …

---

## [Can't find keystore data?](https://discuss.elastic.co/t/cant-find-keystore-data/192134)

<div class="topic-metadata">

**Author:** [@JoeyLemur](https://discuss.elastic.co/u/JoeyLemur)\
**Replies:** 3\
**Last updated:** [August 2, 2019, 3:14pm UTC](https://discuss.elastic.co/t/cant-find-keystore-data/192134 "2019-08-02T15:14:10Z")

</div>

I'm trying to get OpenID working with ECK, but its not finding the client\_secret key/value in the keystore. I have verified that it (seems to be) populating the keystore. If I set up elasticsearch without the OpenID re…

---

## [How to disable all x-pack features in elasticsearch source code](https://discuss.elastic.co/t/how-to-disable-all-x-pack-features-in-elasticsearch-source-code/168935)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 3\
**Last updated:** [February 22, 2019, 5:20am UTC](https://discuss.elastic.co/t/how-to-disable-all-x-pack-features-in-elasticsearch-source-code/168935 "2019-02-22T05:20:34Z")

</div>

I would want to disable all the x-pack features like ml,security,monitoring etc.. in the source code of elasticsearch. I am using elasticsearch version 6.6.0. Because elasticsearch opensource comes with xpack,i am havi…

---

## [Make dashboard Read only to user?](https://discuss.elastic.co/t/make-dashboard-read-only-to-user/74218)

<div class="topic-metadata">

**Author:** [@RajeshAJ](https://discuss.elastic.co/u/RajeshAJ)\
**Replies:** 3\
**Last updated:** [February 8, 2017, 3:32pm UTC](https://discuss.elastic.co/t/make-dashboard-read-only-to-user/74218 "2017-02-08T15:32:49Z")

</div>

how to make the user read only view of my dashboard,when i share the link. and also hide the discover,visualize,dashboard and settings in kibana UI. and is it possible to change the theme of the kibana UI any other …

---

## [Logstash filter: aggregate nested arrays](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965)

<div class="topic-metadata">

**Author:** [@me.mohammed](https://discuss.elastic.co/u/me.mohammed)\
**Replies:** 7\
**Last updated:** [August 10, 2021, 10:47pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965 "2021-08-10T22:47:50Z")

</div>

I'm trying to fetch data from MySQL and push it to ElasticSearch using LogStash, although I'm having trouble creating a config file for LogStash that suits my need I'm trying to achieve this result { "products":\[ …

---

## [Elasticsearch: OutOfMemory errors](https://discuss.elastic.co/t/elasticsearch-outofmemory-errors/61375)

<div class="topic-metadata">

**Author:** [@apandiyan](https://discuss.elastic.co/u/apandiyan)\
**Replies:** 7\
**Last updated:** [September 29, 2016, 12:20am UTC](https://discuss.elastic.co/t/elasticsearch-outofmemory-errors/61375 "2016-09-29T00:20:21Z")

</div>

Hi, We have setup which running on ES 2.4.0 and each index has atleast 100 GB of data (index per daily), hardware specs are vCPU : 4 RAM : 8 GB (5 GB for Elastic Search) It was amazing as we got the report as we w…

---

## [Caches and Garbage collection](https://discuss.elastic.co/t/caches-and-garbage-collection/11528)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 7\
**Last updated:** [April 14, 2013, 4:07pm UTC](https://discuss.elastic.co/t/caches-and-garbage-collection/11528 "2013-04-14T16:07:11Z")

</div>

Hi, In the beginning itself, I would like to say that the problem can be solved by adding more nodes or increasing RAM but I can't do that right now. My problem is, every two or three days, I've to execute "curl -…

---

## [Snapshots on NFS volume - AccessDenied Exception](https://discuss.elastic.co/t/snapshots-on-nfs-volume-accessdenied-exception/221855)

<div class="topic-metadata">

**Author:** [@MattJones](https://discuss.elastic.co/u/MattJones)\
**Replies:** 1\
**Last updated:** [March 9, 2020, 11:15am UTC](https://discuss.elastic.co/t/snapshots-on-nfs-volume-accessdenied-exception/221855 "2020-03-09T11:15:22Z")

</div>

Hi, We're getting an intermittent AccessDeniedException when creating snapshots on our cluster. As far as I can see all permissions are correct and config is the same across all servers. ES Version: 7.6.0 The /home/sh…

---

## [How to use jdbc input plugin for to migrate data from progresql to elasticsearch?](https://discuss.elastic.co/t/how-to-use-jdbc-input-plugin-for-to-migrate-data-from-progresql-to-elasticsearch/65309)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [November 10, 2016, 6:38am UTC](https://discuss.elastic.co/t/how-to-use-jdbc-input-plugin-for-to-migrate-data-from-progresql-to-elasticsearch/65309 "2016-11-10T06:38:49Z")

</div>

I have Installed logstash 5.0 and I'm trying to get the data from progresql table to json lines.This is the error I'm getting please help. and the conf file is like this file: simple-out.conf input { jdbc { # Post…

---

## [Use variables (possibly set by Ruby) in Input](https://discuss.elastic.co/t/use-variables-possibly-set-by-ruby-in-input/202420)

<div class="topic-metadata">

**Author:** [@Mohamad\_Rahim](https://discuss.elastic.co/u/Mohamad_Rahim)\
**Replies:** 4\
**Last updated:** [October 5, 2019, 4:59pm UTC](https://discuss.elastic.co/t/use-variables-possibly-set-by-ruby-in-input/202420 "2019-10-05T16:59:02Z")

</div>

Hello all, So I'm using the http\_poller plugin to poll events off one of our SaaS subscriptions. The problem is that I need to specify the "From Date" and "To Date" statically. My question is how can I generate a vari…

---

## [Mutate filter - Convert a hash data-type to something else](https://discuss.elastic.co/t/mutate-filter-convert-a-hash-data-type-to-something-else/193580)

<div class="topic-metadata">

**Author:** [@luiz.miguelsl](https://discuss.elastic.co/u/luiz.miguelsl)\
**Replies:** 4\
**Last updated:** [August 2, 2019, 4:30pm UTC](https://discuss.elastic.co/t/mutate-filter-convert-a-hash-data-type-to-something-else/193580 "2019-08-02T16:30:44Z")

</div>

Hey there guys, How are you doing? I came across this problem and thought you'd be able to help me figure it out. I created a CSV filter to parse my httpd access log file and it's working fine. We have a field "HttpSta…

---

## [Get explain for all results returned for a query](https://discuss.elastic.co/t/get-explain-for-all-results-returned-for-a-query/16828)

<div class="topic-metadata">

**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\
**Replies:** 4\
**Last updated:** [April 4, 2014, 11:15pm UTC](https://discuss.elastic.co/t/get-explain-for-all-results-returned-for-a-query/16828 "2014-04-04T23:15:34Z")

</div>

Hi I would like to get explain for top results that are returned for the query. http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-explain.html Shows me how to get explain for a que…

---

## [Add a custom lucene search filter to elasticsearch](https://discuss.elastic.co/t/add-a-custom-lucene-search-filter-to-elasticsearch/15453)

<div class="topic-metadata">

**Author:** [@Guilhem\_Legal](https://discuss.elastic.co/u/Guilhem_Legal)\
**Replies:** 4\
**Last updated:** [January 29, 2014, 1:54pm UTC](https://discuss.elastic.co/t/add-a-custom-lucene-search-filter-to-elasticsearch/15453 "2014-01-29T13:54:41Z")

</div>

Hi! i'm trying to migrate my java application from Lucene to Elasticsearch. I have a custom java filter (extending org.apache.lucene.search.Filter) that i like to include in elasticSearch. How can i do that? w…

---

## [Kibana dashboard without timestamp field](https://discuss.elastic.co/t/kibana-dashboard-without-timestamp-field/243850)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 7:48am UTC](https://discuss.elastic.co/t/kibana-dashboard-without-timestamp-field/243850 "2020-08-11T07:48:32Z")

</div>

Hello, I have created a dashboard in kibana. All 2 objects of that dashboard are generated from the index pattern of the following image that do not contain a timestamp field because i dont need it. My problem is th…

---

## [Logstash load of geo data from lat, long - Kibana not recognising geo](https://discuss.elastic.co/t/logstash-load-of-geo-data-from-lat-long-kibana-not-recognising-geo/26928)

<div class="topic-metadata">

**Author:** [@karijd](https://discuss.elastic.co/u/karijd)\
**Replies:** 2\
**Last updated:** [August 9, 2015, 3:26pm UTC](https://discuss.elastic.co/t/logstash-load-of-geo-data-from-lat-long-kibana-not-recognising-geo/26928 "2015-08-09T15:26:10Z")

</div>

Hi, I am having trouble getting Kibana to recognise my geo data as proper geo data which it can plot. I have done lots of searching for the answer but I cannot seem to get the logstash.conf file to work. The time colum…

---

## [Offloading old data to cheaper storage](https://discuss.elastic.co/t/offloading-old-data-to-cheaper-storage/247004)

<div class="topic-metadata">

**Author:** [@andywt123](https://discuss.elastic.co/u/andywt123)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 3:33am UTC](https://discuss.elastic.co/t/offloading-old-data-to-cheaper-storage/247004 "2020-09-01T03:33:55Z")

</div>

We are currently using elastic to aggregate logs with filebeats. We want to be able to offload data that is older then 60 days and then store in AWS s3. The data does not need to be searchable but we may need to retrieve…

[Previous page](https://discuss.elastic.co/top.md?page=1033&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1035&per_page=50&period=all)
