# Top

**URL:** https://discuss.elastic.co/top.md?page=1042&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1043

---

## [Elasticsearch does not receive Filebeat data](https://discuss.elastic.co/t/elasticsearch-does-not-receive-filebeat-data/222342)

<div class="topic-metadata">

**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\
**Replies:** 3\
**Last updated:** [March 6, 2020, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-receive-filebeat-data/222342 "2020-03-06T09:23:43Z")

</div>

Hello, I am new to ELK and filebeat. I have configured filebeat to get its input from a given json log file, and output it to logstash. However, when I test with curl -XGET 'http://localhost:9200/filebeat-\*/\_search?pr…

---

## [Need Help regarding renaming index](https://discuss.elastic.co/t/need-help-regarding-renaming-index/689)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 3\
**Last updated:** [May 14, 2015, 2:48pm UTC](https://discuss.elastic.co/t/need-help-regarding-renaming-index/689 "2015-05-14T14:48:16Z")

</div>

Hi All, is it possible to rename index/mapping in elastic search using Java API or using any HTTP requests. I read knapsack plugin in es but i didn't found java API to rename index/mapping please suggest me any ways…

---

## [Default shards and replicas](https://discuss.elastic.co/t/default-shards-and-replicas/102141)

<div class="topic-metadata">

**Author:** [@ipv6only](https://discuss.elastic.co/u/ipv6only)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 10:20pm UTC](https://discuss.elastic.co/t/default-shards-and-replicas/102141 "2017-09-28T22:20:13Z")

</div>

Hiho, I'am trying to get into ElasticSearch and set up a one-node cluster. Now everything seems to create indices (Kibana, x-pack, logstash, ...) with a configuration of more than one shard and at least one replica. Th…

---

## [After configuring the X-PACK log is not coming to logstash](https://discuss.elastic.co/t/after-configuring-the-x-pack-log-is-not-coming-to-logstash/74976)

<div class="topic-metadata">

**Author:** [@shubhrant](https://discuss.elastic.co/u/shubhrant)\
**Replies:** 2\
**Last updated:** [March 24, 2017, 11:42am UTC](https://discuss.elastic.co/t/after-configuring-the-x-pack-log-is-not-coming-to-logstash/74976 "2017-03-24T11:42:29Z")

</div>

earlier the log was processing normally but after configuring the X-PACK log is not coming ... my logstash configuration is input { tcp { port =\> 5044 charset =\> "ISO-8859-1" } } filter { if…

---

## [No Node Available Exception ES-5.0.2](https://discuss.elastic.co/t/no-node-available-exception-es-5-0-2/73640)

<div class="topic-metadata">

**Author:** [@Zelmm](https://discuss.elastic.co/u/Zelmm)\
**Replies:** 2\
**Last updated:** [February 6, 2017, 11:17am UTC](https://discuss.elastic.co/t/no-node-available-exception-es-5-0-2/73640 "2017-02-06T11:17:52Z")

</div>

Hi all. First for all, i'm sorry for my english. I have a problem with Java API Transport Client. I have one master node and three data nodes. I try to connect to my cluster with Transport Client and then i response "NoN…

---

## [Disable norms for all fields](https://discuss.elastic.co/t/disable-norms-for-all-fields/11602)

<div class="topic-metadata">

**Author:** [@Yadu](https://discuss.elastic.co/u/Yadu)\
**Replies:** 2\
**Last updated:** [December 19, 2016, 8:06am UTC](https://discuss.elastic.co/t/disable-norms-for-all-fields/11602 "2016-12-19T08:06:12Z")

</div>

My application doesn't need any kind of boost/score, we do plain boolean search. So I tried to disable norms at index time using dynamic template like "dynamic\_templates" : \[ .................................…

---

## [Date Format Issue](https://discuss.elastic.co/t/date-format-issue/7446)

<div class="topic-metadata">

**Author:** [@my3sons](https://discuss.elastic.co/u/my3sons)\
**Replies:** 2\
**Last updated:** [April 24, 2012, 2:24am UTC](https://discuss.elastic.co/t/date-format-issue/7446 "2012-04-24T02:24:52Z")

</div>

Hello, I have created the below mapping, and my issue is with the "submissionTime" field below. As you can see below, I have set the format to "yyyy-MM-dd'T'HH:mm:ss", which matches both my incoming data and the f…

---

## [Close connection elasticsearch, is it necessary?](https://discuss.elastic.co/t/close-connection-elasticsearch-is-it-necessary/76925)

<div class="topic-metadata">

**Author:** [@ChristianYonathanS](https://discuss.elastic.co/u/ChristianYonathanS)\
**Replies:** 1\
**Last updated:** [March 1, 2017, 7:01am UTC](https://discuss.elastic.co/t/close-connection-elasticsearch-is-it-necessary/76925 "2017-03-01T07:01:41Z")

</div>

---

## [Elasticsearch unable to find my script](https://discuss.elastic.co/t/elasticsearch-unable-to-find-my-script/70990)

<div class="topic-metadata">

**Author:** [@geantbrun](https://discuss.elastic.co/u/geantbrun)\
**Replies:** 1\
**Last updated:** [January 12, 2017, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-find-my-script/70990 "2017-01-12T05:57:39Z")

</div>

Hi, I'm using ES 2.4.3 and it seems that ES cannot find my scripts folder. We are running our cluster on 3 nodes : one master (directory /etc/elasticsearch) and 2 data nodes, each of them is running the service 2 times (…

---

## [Error message I can't explain when using elasticsearch Ruby gem](https://discuss.elastic.co/t/error-message-i-cant-explain-when-using-elasticsearch-ruby-gem/27949)

<div class="topic-metadata">

**Author:** [@Shub](https://discuss.elastic.co/u/Shub)\
**Replies:** 1\
**Last updated:** [August 27, 2015, 2:54pm UTC](https://discuss.elastic.co/t/error-message-i-cant-explain-when-using-elasticsearch-ruby-gem/27949 "2015-08-27T14:54:32Z")

</div>

Hey folks, I could use a bit of help working out what's wrong with my use of the elasticsearch Ruby gem. Basically I put together a set of simple scripts to automate dumping an index or a set of indices in one environmen…

---

## [Performance regression in Elasticsearch 6.5 using wildcards](https://discuss.elastic.co/t/performance-regression-in-elasticsearch-6-5-using-wildcards/160781)

<div class="topic-metadata">

**Author:** [@lcremonesi](https://discuss.elastic.co/u/lcremonesi)\
**Replies:** 6\
**Last updated:** [December 18, 2018, 10:29pm UTC](https://discuss.elastic.co/t/performance-regression-in-elasticsearch-6-5-using-wildcards/160781 "2018-12-18T22:29:39Z")

</div>

We have recently migrated from Elasticsearch 5.6.7 to 6.5.0, and we found a serious performance regression with searches that use a query string query with wildcards. In particular: String Queries with prefixed star wi…

---

## [Check for new files addition and index them as an attachment](https://discuss.elastic.co/t/check-for-new-files-addition-and-index-them-as-an-attachment/49626)

<div class="topic-metadata">

**Author:** [@ASN](https://discuss.elastic.co/u/ASN)\
**Replies:** 6\
**Last updated:** [June 8, 2016, 12:58am UTC](https://discuss.elastic.co/t/check-for-new-files-addition-and-index-them-as-an-attachment/49626 "2016-06-08T00:58:30Z")

</div>

Is there any plugin or method to check if any new files(either doc or pdf or ppt) are added to a particular folder and if added, they should be indexed to the ES server as an attachment. (not looking for a console applic…

---

## [Curator image not working with centos 8 base image](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 5\
**Last updated:** [February 24, 2020, 5:27am UTC](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970 "2020-02-24T05:27:35Z")

</div>

Hi, I am trying to build curator image with centos 8 base image. Image is getting built but it is throwing below error while running: Traceback (most recent call last): File "/home/buh/.local/lib/python3.6/site-pack…

---

## [X-Pack Security / Shield](https://discuss.elastic.co/t/x-pack-security-shield/54932)

<div class="topic-metadata">

**Author:** [@Fnizou](https://discuss.elastic.co/u/Fnizou)\
**Replies:** 5\
**Last updated:** [July 7, 2016, 12:40pm UTC](https://discuss.elastic.co/t/x-pack-security-shield/54932 "2016-07-07T12:40:03Z")

</div>

Bonjour David, Suite au visionnage de la vidéo X-Pack Security, Est-ce que le plugin Shield est mené à disparaître, dans mon cas je suis seul sur le projet et pas besoin de la puissance X-Pack Security, donc faudra t i…

---

## [How to show the percentage on Pie chart](https://discuss.elastic.co/t/how-to-show-the-percentage-on-pie-chart/89515)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 1\
**Last updated:** [June 15, 2017, 8:43am UTC](https://discuss.elastic.co/t/how-to-show-the-percentage-on-pie-chart/89515 "2017-06-15T08:43:28Z")

</div>

How to show the percentage on Pie chart instead of move over

---

## [Filter split issue](https://discuss.elastic.co/t/filter-split-issue/54152)

<div class="topic-metadata">

**Author:** [@sanjeevrathaur](https://discuss.elastic.co/u/sanjeevrathaur)\
**Replies:** 1\
**Last updated:** [June 28, 2016, 11:11am UTC](https://discuss.elastic.co/t/filter-split-issue/54152 "2016-06-28T11:11:09Z")

</div>

I am using elasticsearch 1.4 . I am facing problem in filters in elasticssearch as : If I write "20 Inch", I will create filter two filter with same product counter like :slight\_smile: 20 (7) Inch(7) So basically i…

---

## [Geo\_point mapping from Couchbase to Elasticsearch](https://discuss.elastic.co/t/geo-point-mapping-from-couchbase-to-elasticsearch/41384)

<div class="topic-metadata">

**Author:** [@Vatsal\_Patel](https://discuss.elastic.co/u/Vatsal_Patel)\
**Replies:** 7\
**Last updated:** [February 10, 2016, 10:20pm UTC](https://discuss.elastic.co/t/geo-point-mapping-from-couchbase-to-elasticsearch/41384 "2016-02-10T22:20:27Z")

</div>

I have geo location stored in Cochbase with below format, "location": { "lat": 40.722, "lon": -73.989 } Now, How can i mapped this value to Elasticsearch?. I want to perform geo\_distance sorting on that.Th…

---

## [How to best do a time of day type search?](https://discuss.elastic.co/t/how-to-best-do-a-time-of-day-type-search/6949)

<div class="topic-metadata">

**Author:** [@Jan\_Fiedler](https://discuss.elastic.co/u/Jan_Fiedler)\
**Replies:** 1\
**Last updated:** [March 8, 2012, 10:32pm UTC](https://discuss.elastic.co/t/how-to-best-do-a-time-of-day-type-search/6949 "2012-03-08T22:32:03Z")

</div>

I have documents with a classic (millisecond) timestamp. I need to find documents where the timestamp is a certain hour of the day (regardless of the actual date). I know that one way to implement this would be to d…

---

## [Slow refresh times for large indices](https://discuss.elastic.co/t/slow-refresh-times-for-large-indices/249811)

<div class="topic-metadata">

**Author:** [@yogevyuval](https://discuss.elastic.co/u/yogevyuval)\
**Replies:** 2\
**Last updated:** [September 25, 2020, 12:56pm UTC](https://discuss.elastic.co/t/slow-refresh-times-for-large-indices/249811 "2020-09-25T12:56:44Z")

</div>

Hi, We are experiencing a very high load on the cluster, which seems to happen from a very high iops rate (\>5000), when indexing to very specific indices. In this graph you can see our disk iops during indexing to thos…

---

## [Could not index event to Elasticsearch, failed to parse \[timestamp\]](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-timestamp/216742)

<div class="topic-metadata">

**Author:** [@klang](https://discuss.elastic.co/u/klang)\
**Replies:** 2\
**Last updated:** [January 30, 2020, 10:44pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-timestamp/216742 "2020-01-30T22:44:18Z")

</div>

Good evening, I'm pushing JSON content from filebeats to logstash and I'm receiving a 'failed to parse \[timestamp\]' error and don't understand what is wrong but to be fair, I'm, pretty green to this technology. Sample …

---

## [Dynamic query-time synonyms](https://discuss.elastic.co/t/dynamic-query-time-synonyms/60883)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 2\
**Last updated:** [September 19, 2016, 2:35pm UTC](https://discuss.elastic.co/t/dynamic-query-time-synonyms/60883 "2016-09-19T14:35:52Z")

</div>

I'm doing synonyms but for different reasons (many users in 1 index each with different synonyms) I need to handle synonyms only at query time. What is the best way to do this currently in es ? Currently I'm thinking a…

---

## [Russian search does not work for me](https://discuss.elastic.co/t/russian-search-does-not-work-for-me/21347)

<div class="topic-metadata">

**Author:** [@Ilya\_Kantor](https://discuss.elastic.co/u/Ilya_Kantor)\
**Replies:** 2\
**Last updated:** [December 22, 2014, 9:23am UTC](https://discuss.elastic.co/t/russian-search-does-not-work-for-me/21347 "2014-12-22T09:23:29Z")

</div>

Please let me know what I'm doing wrong or where to look/debug. 1. I git cloned https://github.com/asyncee/elasticsearch-russian-config/ 2. Downloaded elasticsearch-1.4.2 and copied bin and lib into the same dir. 3…

---

## [Elastic search parse a string](https://discuss.elastic.co/t/elastic-search-parse-a-string/308164)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 8\
**Last updated:** [June 26, 2022, 10:57am UTC](https://discuss.elastic.co/t/elastic-search-parse-a-string/308164 "2022-06-26T10:57:46Z")

</div>

Hi, I search a way to find a string inside another string by parsing it. For example i index into elasticSearch a document that contain the text : "2000Newyork" in a field name "id" And now i want to find the indexed …

---

## [Converting self signed certificate to ones from 3rd party - Kibana server](https://discuss.elastic.co/t/converting-self-signed-certificate-to-ones-from-3rd-party-kibana-server/257396)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 3\
**Last updated:** [December 9, 2020, 3:35pm UTC](https://discuss.elastic.co/t/converting-self-signed-certificate-to-ones-from-3rd-party-kibana-server/257396 "2020-12-09T15:35:24Z")

</div>

Hello People, I'm using elk stack running on 7.9.2 version. Now I use self signed certificates, generated by certutil built-in elasticsearch (bin/elasticsearch-certutil cert) I have a few questions about certificates: …

---

## [Can APM monitor what user actions in the web page?](https://discuss.elastic.co/t/can-apm-monitor-what-user-actions-in-the-web-page/205516)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 8\
**Last updated:** [November 21, 2019, 8:09am UTC](https://discuss.elastic.co/t/can-apm-monitor-what-user-actions-in-the-web-page/205516 "2019-11-21T08:09:49Z")

</div>

Kibana version: 7.3.2 Elasticsearch version: 7.3.2 APM Server version: 7.3.2 APM Agent language and version: 4.2.2 Browser version: 77.0.3865.90 Original install method (e.g. download page, yum, deb, from source, e…

---

## [Snapshot failed](https://discuss.elastic.co/t/snapshot-failed/193218)

<div class="topic-metadata">

**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 6:51am UTC](https://discuss.elastic.co/t/snapshot-failed/193218 "2019-08-01T06:51:19Z")

</div>

{ "error": { "root\_cause": \[ { "type": "snapshot\_restore\_exception", "reason": "\[student\_backup\_clay:student\_backup\_clay/Wdlq3XOnTWuXGxjTqZt0cQ\] the snapshot was created with Elasticsearch ver…

---

## [Elasticsearch Template Issue](https://discuss.elastic.co/t/elasticsearch-template-issue/158121)

<div class="topic-metadata">

**Author:** [@Madhukar](https://discuss.elastic.co/u/Madhukar)\
**Replies:** 8\
**Last updated:** [November 27, 2018, 11:30am UTC](https://discuss.elastic.co/t/elasticsearch-template-issue/158121 "2018-11-27T11:30:34Z")

</div>

I am creating the index template and define mapping in it. Default Elasticsearch Settings Sent data of size (on disk) 737 MB (173,170 Documents) to Elasticsearch, its size on elasticsearch is 320.1mb (default elasticse…

---

## [.kibana index not found](https://discuss.elastic.co/t/kibana-index-not-found/135468)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 2:09pm UTC](https://discuss.elastic.co/t/kibana-index-not-found/135468 "2018-06-12T14:09:36Z")

</div>

Hi, I have used readonlyrest for security for elasticsearch and kibana. But getting .kibana index not found exception. Please provide solution.

---

## [Nested JSON use field as value](https://discuss.elastic.co/t/nested-json-use-field-as-value/116831)

<div class="topic-metadata">

**Author:** [@zacesa](https://discuss.elastic.co/u/zacesa)\
**Replies:** 3\
**Last updated:** [January 25, 2018, 11:55am UTC](https://discuss.elastic.co/t/nested-json-use-field-as-value/116831 "2018-01-25T11:55:22Z")

</div>

Hi, I have a json input as per below; "stats": { "src": { "port": { "6666": 1 }, "rep": 1, "country": { "US": 1 }, "ip": { "1.1.1.1": { "rep": 1, "uuid": "NULL", "country": "US…

---

## [Metricbeat AWS module error while using credentials\_profile\_name](https://discuss.elastic.co/t/metricbeat-aws-module-error-while-using-credentials-profile-name/264807)

<div class="topic-metadata">

**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\
**Replies:** 4\
**Last updated:** [February 20, 2021, 7:45am UTC](https://discuss.elastic.co/t/metricbeat-aws-module-error-while-using-credentials-profile-name/264807 "2021-02-20T07:45:31Z")

</div>

Hello guys, I am trying to configure AWS metrics for multiple AWS accounts of mine. I have already configured the profiles using AWS CLI and they are working. But when the same profile name is put in the modules.d/aws.y…

---

## [How to Parse Json http body from a POST request with tcp plugin](https://discuss.elastic.co/t/how-to-parse-json-http-body-from-a-post-request-with-tcp-plugin/240565)

<div class="topic-metadata">

**Author:** [@Bouraoui\_Kacem](https://discuss.elastic.co/u/Bouraoui_Kacem)\
**Replies:** 4\
**Last updated:** [July 23, 2020, 8:19am UTC](https://discuss.elastic.co/t/how-to-parse-json-http-body-from-a-post-request-with-tcp-plugin/240565 "2020-07-23T08:19:30Z")

</div>

I send a Post request with a json content from PostMan to logstash pipeline with an input tcp plugin , the model of my data is like : { "results:\[ values :"\\"{..json object.. }\\"" \] } my logstahs input is : …

---

## [Delete the indexes of more than 7 days](https://discuss.elastic.co/t/delete-the-indexes-of-more-than-7-days/197141)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 6:29am UTC](https://discuss.elastic.co/t/delete-the-indexes-of-more-than-7-days/197141 "2019-08-30T06:29:30Z")

</div>

Hi! I was reading this two links in order to create a policy to delete the indexes of more than 7 days. https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index-lifecycle-management.html h…

---

## [Error in Logstash conditional expression](https://discuss.elastic.co/t/error-in-logstash-conditional-expression/118322)

<div class="topic-metadata">

**Author:** [@iamsaurabhrk](https://discuss.elastic.co/u/iamsaurabhrk)\
**Replies:** 4\
**Last updated:** [February 8, 2018, 9:21am UTC](https://discuss.elastic.co/t/error-in-logstash-conditional-expression/118322 "2018-02-08T09:21:38Z")

</div>

I am using Logstash 5.5.0. I have the following configuration: input { stdin { } } filter { grok { match =\> { "message" =\> "^(%{TIMESTAMP\_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:LogLevel}%{SPACE}(?:\\\[)%{NOTSPACE:Thr…

---

## [Crear nuevos valores dinamicos](https://discuss.elastic.co/t/crear-nuevos-valores-dinamicos/277962)

<div class="topic-metadata">

**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\
**Replies:** 6\
**Last updated:** [July 9, 2021, 8:40am UTC](https://discuss.elastic.co/t/crear-nuevos-valores-dinamicos/277962 "2021-07-09T08:40:00Z")

</div>

Hola a todos espero que me puedan ayudar, por el momento estoy entrando a este mundo, y me gustaría saber como se podría hacer lo siguiente: tengo eventos que llegan cada vez una máquina realiza un producto junto con s…

---

## [Shingle analyzer](https://discuss.elastic.co/t/shingle-analyzer/122517)

<div class="topic-metadata">

**Author:** [@Gerr\_Bert](https://discuss.elastic.co/u/Gerr_Bert)\
**Replies:** 6\
**Last updated:** [March 13, 2018, 9:55pm UTC](https://discuss.elastic.co/t/shingle-analyzer/122517 "2018-03-13T21:55:43Z")

</div>

Добрый день. Подскажите пожалуйста, пытаемся настроить shingle analyzer для того, чтобы учитывать порядок вхождения слов. Обычный анализатор работает, а этот что-то не хочет. Подскажите пож-та, может что не так: …

---

## [Logstash 5044 address already in use](https://discuss.elastic.co/t/logstash-5044-address-already-in-use/216416)

<div class="topic-metadata">

**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\
**Replies:** 1\
**Last updated:** [January 25, 2020, 6:28pm UTC](https://discuss.elastic.co/t/logstash-5044-address-already-in-use/216416 "2020-01-25T18:28:11Z")

</div>

I'm running logstash docker image 7.5.2 using this configuration file: input { beats { port =\> 5044 } } filter { mutate { add\_tag =\> \[ "logstash\_filter\_applied" \] } } output { elasticsearch { hos…

---

## [Displaying "nearby" records from log](https://discuss.elastic.co/t/displaying-nearby-records-from-log/29861)

<div class="topic-metadata">

**Author:** [@ewestland](https://discuss.elastic.co/u/ewestland)\
**Replies:** 1\
**Last updated:** [September 24, 2015, 12:04am UTC](https://discuss.elastic.co/t/displaying-nearby-records-from-log/29861 "2015-09-24T00:04:06Z")

</div>

When researching an issue, it can be useful to inspect log entries around a filtered entry. In my case, looking at the raw log records around the issue can help determine the root cause. It appears this isn't in the ba…

---

## [Elastic Cloud/Kibana Embed Authentication](https://discuss.elastic.co/t/elastic-cloud-kibana-embed-authentication/313289)

<div class="topic-metadata">

**Author:** [@Donnie\_Kerr](https://discuss.elastic.co/u/Donnie_Kerr)\
**Replies:** 5\
**Last updated:** [August 31, 2022, 4:14am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-embed-authentication/313289 "2022-08-31T04:14:29Z")

</div>

I would like the users of my web app to access Kibana Cloud dashboard by embedding them into the app. Users access my app via Auth0. I am using Elastic Cloud with Kibana. I need help understanding how to implement thes…

---

## [Broken Fleet setup](https://discuss.elastic.co/t/broken-fleet-setup/296506)

<div class="topic-metadata">

**Author:** [@queried1](https://discuss.elastic.co/u/queried1)\
**Replies:** 2\
**Last updated:** [February 9, 2022, 4:34pm UTC](https://discuss.elastic.co/t/broken-fleet-setup/296506 "2022-02-09T16:34:41Z")

</div>

Hello! I recently wanted to setup Fleet on a working ELK cluster (self managed). By following this guide I did the initial steps: Add a Fleet Server | Fleet and Elastic Agent Guide \[7.17\] | Elastic (downloaded the pac…

---

## [Read \*.json.gz from AWS S3 bucket](https://discuss.elastic.co/t/read-json-gz-from-aws-s3-bucket/292822)

<div class="topic-metadata">

**Author:** [@Vidya\_Sagar](https://discuss.elastic.co/u/Vidya_Sagar)\
**Replies:** 2\
**Last updated:** [December 28, 2021, 7:24pm UTC](https://discuss.elastic.co/t/read-json-gz-from-aws-s3-bucket/292822 "2021-12-28T19:24:45Z")

</div>

Hi All, I am new to ELK Stack and trying to read data from S3 buckets. The json data is in compressed format and the folder structure in the S3 bucket is like YYYY-MM-DD/.json.gz 2021-12-01/A.json.gz 2021-12-02/B.jso…

---

## [Array intersection](https://discuss.elastic.co/t/array-intersection/167120)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 2\
**Last updated:** [February 5, 2019, 12:47pm UTC](https://discuss.elastic.co/t/array-intersection/167120 "2019-02-05T12:47:10Z")

</div>

Hi , Can some one suggest me query for following scenario. My search cretiria is list of values \[1,2,3,4,5,6,7\] and ES will have data groups column as in row1--\>groups 1,2 in row2--\>groups 1,2,3 in row3 --\>groups 8…

---

## [Nested json as a string field](https://discuss.elastic.co/t/nested-json-as-a-string-field/164257)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 2\
**Last updated:** [January 16, 2019, 7:01am UTC](https://discuss.elastic.co/t/nested-json-as-a-string-field/164257 "2019-01-16T07:01:59Z")

</div>

hi i use json filter plugin in my logstash config. here if i face nested json, i got \_jsonparsefailure tag. my target is that i just want nested json as string. not another json. eg: { "agent": "Mozilla/5.0 (compat…

---

## [Logstash is not processing files from input plugin Azure Storage blob, even though new files are available to process](https://discuss.elastic.co/t/logstash-is-not-processing-files-from-input-plugin-azure-storage-blob-even-though-new-files-are-available-to-process/65999)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 2\
**Last updated:** [November 18, 2016, 8:54am UTC](https://discuss.elastic.co/t/logstash-is-not-processing-files-from-input-plugin-azure-storage-blob-even-though-new-files-are-available-to-process/65999 "2016-11-18T08:54:47Z")

</div>

I have been using Azure Storage Input Plugin , for json files. After an improper shutdown of pipeline, the restart of the logstash process is not picking up the files from Azure Storage blob, even there are so many pendi…

---

## [Adding users is failing](https://discuss.elastic.co/t/adding-users-is-failing/153169)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 3\
**Last updated:** [October 19, 2018, 12:34pm UTC](https://discuss.elastic.co/t/adding-users-is-failing/153169 "2018-10-19T12:34:34Z")

</div>

Hi All, ES version 6.4.2 I am executing: bin/elasticsearch-setup-passwords auto But that gives me the following error: Unexpected response code \[404\] from calling GET http://10.80.4.1:9200/\_xpack/security/\_authenti…

---

## [Convert timestamp to epoctime with milisecond](https://discuss.elastic.co/t/convert-timestamp-to-epoctime-with-milisecond/126899)

<div class="topic-metadata">

**Author:** [@Masahiro\_Shimizu](https://discuss.elastic.co/u/Masahiro_Shimizu)\
**Replies:** 3\
**Last updated:** [April 6, 2018, 8:07am UTC](https://discuss.elastic.co/t/convert-timestamp-to-epoctime-with-milisecond/126899 "2018-04-06T08:07:37Z")

</div>

Hi , this is my first question. I would like convert @timestamp to epoch-time with millisecond Because I want millisecond not second , I try check the latency through the messaging queue. Here is my code, ruby { co…

---

## [Help with dynamic filename in Watch URL](https://discuss.elastic.co/t/help-with-dynamic-filename-in-watch-url/100896)

<div class="topic-metadata">

**Author:** [@zen300](https://discuss.elastic.co/u/zen300)\
**Replies:** 3\
**Last updated:** [October 2, 2017, 1:05pm UTC](https://discuss.elastic.co/t/help-with-dynamic-filename-in-watch-url/100896 "2017-10-02T13:05:00Z")

</div>

I browsed a few topics but couldn't find a similar example. I basically want a Watch set up, searches for keyword and emails (as attachment) any files it finds with that keyword. It works if I hardcode the filename in th…

---

## [Why value table and json is different in kibana?](https://discuss.elastic.co/t/why-value-table-and-json-is-different-in-kibana/101647)

<div class="topic-metadata">

**Author:** [@ibnuali](https://discuss.elastic.co/u/ibnuali)\
**Replies:** 3\
**Last updated:** [September 25, 2017, 7:48am UTC](https://discuss.elastic.co/t/why-value-table-and-json-is-different-in-kibana/101647 "2017-09-25T07:48:12Z")

</div>

when i post a datetime value, kibana table not same with json format it is format table \[Screenshot from 2017-09-25 14-00-49\] it is format json \[Screenshot from 2017-09-25 14-00-59\]

---

## [Heap size](https://discuss.elastic.co/t/heap-size/68107)

<div class="topic-metadata">

**Author:** [@\_117228](https://discuss.elastic.co/u/_117228)\
**Replies:** 3\
**Last updated:** [December 6, 2016, 4:12pm UTC](https://discuss.elastic.co/t/heap-size/68107 "2016-12-06T16:12:07Z")

</div>

My ES instance is having some memory issues ... mainly this error : org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large Now I tried to add heap to my instance (T2.Large) in jvm.options…

---

## [Replace content of host field with part from message field](https://discuss.elastic.co/t/replace-content-of-host-field-with-part-from-message-field/53636)

<div class="topic-metadata">

**Author:** [@himbeere](https://discuss.elastic.co/u/himbeere)\
**Replies:** 3\
**Last updated:** [June 22, 2016, 1:59pm UTC](https://discuss.elastic.co/t/replace-content-of-host-field-with-part-from-message-field/53636 "2016-06-22T13:59:48Z")

</div>

Hello. I'm trying to replace the content of the host field with part from message field. My message field contains something like that: message:\<85\>Jun 22 11:24:33 backup02.bla.domain.de sudo: ..... Now i wanna tak…

---

## [Error when accessing Security module on Elasticsearch 8.1 (Error: n is undefined)](https://discuss.elastic.co/t/error-when-accessing-security-module-on-elasticsearch-8-1-error-n-is-undefined/301278)

<div class="topic-metadata">

**Author:** [@aanton](https://discuss.elastic.co/u/aanton)\
**Replies:** 4\
**Last updated:** [May 13, 2022, 2:10pm UTC](https://discuss.elastic.co/t/error-when-accessing-security-module-on-elasticsearch-8-1-error-n-is-undefined/301278 "2022-05-13T14:10:07Z")

</div>

Greetings, When trying to access the Security module on Kibana for the Elasticsearch 8.1, I get the following error: Error Error: n is undefined c@http://127.0.0.1:5601/50609/bundles/plugin/securitySolution/8.0.0/sec…

[Previous page](https://discuss.elastic.co/top.md?page=1041&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1043&per_page=50&period=all)
