# Top

**URL:** https://discuss.elastic.co/top.md?page=1054&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1055

---

## [Elastic Agent Minimum System Requirements](https://discuss.elastic.co/t/elastic-agent-minimum-system-requirements/292340)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 7:39am UTC](https://discuss.elastic.co/t/elastic-agent-minimum-system-requirements/292340 "2021-12-20T07:39:58Z")

</div>

Does anyone know what the minimum system requirements (CPU/RAM/Disk) are for Elastic Agent to properly function? I'm running into some issues with some of the smaller systems I manage, and suspect the issues are caused …

---

## [Embedding kibana dashboard only, as whitelabel?](https://discuss.elastic.co/t/embedding-kibana-dashboard-only-as-whitelabel/106712)

<div class="topic-metadata">

**Author:** [@alberto\_c](https://discuss.elastic.co/u/alberto_c)\
**Replies:** 1\
**Last updated:** [November 7, 2017, 5:49pm UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-only-as-whitelabel/106712 "2017-11-07T17:49:35Z")

</div>

Is it possible to embed a dashboard created with kibana in an external website? I don't want kibana menu/log etc showing up. just the dashboard. I don't understand if it's possible

---

## [Scan with fields and size parameter not returning expected result](https://discuss.elastic.co/t/scan-with-fields-and-size-parameter-not-returning-expected-result/34505)

<div class="topic-metadata">

**Author:** [@gulimran](https://discuss.elastic.co/u/gulimran)\
**Replies:** 1\
**Last updated:** [December 9, 2015, 2:15pm UTC](https://discuss.elastic.co/t/scan-with-fields-and-size-parameter-not-returning-expected-result/34505 "2015-12-09T14:15:46Z")

</div>

Hi, I am using ElasticSearch v1.3.4 and use Spring Data (spring-data-elasticsearch v1.1.2.RELEASE) to access the index. I need to scan ids of all indexed documents. There are over 10 million indexed documents in 5 sha…

---

## [Update Kibana Filter from Vega](https://discuss.elastic.co/t/update-kibana-filter-from-vega/295598)

<div class="topic-metadata">

**Author:** [@TUKTUK](https://discuss.elastic.co/u/TUKTUK)\
**Replies:** 3\
**Last updated:** [February 2, 2022, 5:12pm UTC](https://discuss.elastic.co/t/update-kibana-filter-from-vega/295598 "2022-02-02T17:12:46Z")

</div>

Hello all, I am quite new to the Vega world inside Kibana and would like to make a Vega visualization interactive so that the Kibana filters are updated on click. I have seen the following tutorial --\> \[Update Timefilt…

---

## [Use an analyzer and a normalizer at the same time on the same field?](https://discuss.elastic.co/t/use-an-analyzer-and-a-normalizer-at-the-same-time-on-the-same-field/252356)

<div class="topic-metadata">

**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\
**Replies:** 3\
**Last updated:** [October 16, 2020, 2:51pm UTC](https://discuss.elastic.co/t/use-an-analyzer-and-a-normalizer-at-the-same-time-on-the-same-field/252356 "2020-10-16T14:51:15Z")

</div>

Hi, for some reason, if need to query (prefix) with an insensitive case on a text field, but I would like to keep the advantage of the tokenisation made by the default Analyzer on the same field, is it possible ? Examp…

---

## [Учет разграничения прав доступа к документам в ES](https://discuss.elastic.co/t/es/181229)

<div class="topic-metadata">

**Author:** [@Lorielf](https://discuss.elastic.co/u/Lorielf)\
**Replies:** 3\
**Last updated:** [May 16, 2019, 7:40pm UTC](https://discuss.elastic.co/t/es/181229 "2019-05-16T19:40:51Z")

</div>

Добрый день! Можете подсказать, есть ли какие-то уже проверенные подходы (плагины, модули, ПО), которые рекомендуется использовать совместно с ES для обеспечения разграничения прав доступа на уровне документов. Т.е. ес…

---

## [Filebeat on Ubuntu](https://discuss.elastic.co/t/filebeat-on-ubuntu/90636)

<div class="topic-metadata">

**Author:** [@Pandiyan\_M](https://discuss.elastic.co/u/Pandiyan_M)\
**Replies:** 3\
**Last updated:** [June 23, 2017, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-on-ubuntu/90636 "2017-06-23T15:34:48Z")

</div>

Hi, I have done ELK 5.4 on Centos and set up filebeats on ubuntu as below wget -qO – https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add – # echo ‘deb https://packages.elastic.co/beats/apt stable ma…

---

## [Must not filter not working on fields](https://discuss.elastic.co/t/must-not-filter-not-working-on-fields/31772)

<div class="topic-metadata">

**Author:** [@Ankit\_Pradhan](https://discuss.elastic.co/u/Ankit_Pradhan)\
**Replies:** 3\
**Last updated:** [October 7, 2015, 2:30pm UTC](https://discuss.elastic.co/t/must-not-filter-not-working-on-fields/31772 "2015-10-07T14:30:05Z")

</div>

I have three documents: Doc 1: { "DEPLOYMENT\_NAME": "PaymentEngine\_Release\_01", "buildingBlockName": "GIOM-TAN-BW" } Doc 2: { "DEPLOYMENT\_NAME": "ProxyXFBAdapter…

---

## [Is this an OK addition of doc\_values : true in elasticsearch template with logstash?](https://discuss.elastic.co/t/is-this-an-ok-addition-of-doc-values-true-in-elasticsearch-template-with-logstash/29361)

<div class="topic-metadata">

**Author:** [@martbhell](https://discuss.elastic.co/u/martbhell)\
**Replies:** 3\
**Last updated:** [September 16, 2015, 5:52am UTC](https://discuss.elastic.co/t/is-this-an-ok-addition-of-doc-values-true-in-elasticsearch-template-with-logstash/29361 "2015-09-16T05:52:47Z")

</div>

Hi, got a little tired of memory issues and figured I'd try enabling doc\_value and see if this helps (eventually as indexes are created). This is for a central log ELK stack, kibana3 & 4. ES 1.7. Should I add it in mo…

---

## [Add tags to Filebeat module configuration?](https://discuss.elastic.co/t/add-tags-to-filebeat-module-configuration/293571)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 9:51pm UTC](https://discuss.elastic.co/t/add-tags-to-filebeat-module-configuration/293571 "2022-01-05T21:51:14Z")

</div>

Hello Community; This is a simple question, but I cannot find the answer in the filebeat documentation. The filebeat for some hosts is configured with specific input filestreams collecting various logs. In order to mak…

---

## [Logstash parsing each log multiple times](https://discuss.elastic.co/t/logstash-parsing-each-log-multiple-times/146246)

<div class="topic-metadata">

**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 5:49pm UTC](https://discuss.elastic.co/t/logstash-parsing-each-log-multiple-times/146246 "2018-08-28T17:49:53Z")

</div>

This is how my logs look like. I am using multi grok parser to parse different type of logs but in same input file. Below is the grok filter that works for first log ^%{SOCBOX\_HEADER}%{NUMBER}:%{NUMBER}:%{NUMBER} %{USER…

---

## [How to convert uuid into string in logstash](https://discuss.elastic.co/t/how-to-convert-uuid-into-string-in-logstash/127069)

<div class="topic-metadata">

**Author:** [@aarthinim](https://discuss.elastic.co/u/aarthinim)\
**Replies:** 4\
**Last updated:** [April 6, 2018, 12:38pm UTC](https://discuss.elastic.co/t/how-to-convert-uuid-into-string-in-logstash/127069 "2018-04-06T12:38:09Z")

</div>

My table structure is create table dev.emp ( empid int, emp\_first varchar, emp\_last varchar, empno uuid primary key, ); Logstash configuration is input { jdbc{ jdbc\_connection\_string =\> "jdbc:cassandra://local…

---

## [Store enum as keyword VS integer](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903)

<div class="topic-metadata">

**Author:** [@lang1991](https://discuss.elastic.co/u/lang1991)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 12:53am UTC](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903 "2020-12-08T00:53:27Z")

</div>

We have a layer on top of Elasticsearch to translate enums into their numeric values before querying and indexing, but I am wondering if that's necessary at all for storage savings and query performance when compared wit…

---

## [Document has property 'dashboard' which belongs to a more recent version](https://discuss.elastic.co/t/document-has-property-dashboard-which-belongs-to-a-more-recent-version/185742)

<div class="topic-metadata">

**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\
**Replies:** 1\
**Last updated:** [June 24, 2019, 1:30am UTC](https://discuss.elastic.co/t/document-has-property-dashboard-which-belongs-to-a-more-recent-version/185742 "2019-06-24T01:30:28Z")

</div>

Hi, I've update Elasticsearch/Kibana to 7.1.1 (from 7.0.0). When I try to upload the dashboards into kibana I get the following error: {"statusCode":400,"error":"Bad Request","message":"Document \\"339b7c40-1495-11e7-b…

---

## [How to delete documents in an index based on condition in elastic search](https://discuss.elastic.co/t/how-to-delete-documents-in-an-index-based-on-condition-in-elastic-search/169806)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 1\
**Last updated:** [February 25, 2019, 11:46am UTC](https://discuss.elastic.co/t/how-to-delete-documents-in-an-index-based-on-condition-in-elastic-search/169806 "2019-02-25T11:46:36Z")

</div>

i have data like name,age,class,registered time in an index called student in my elastic search i want to delete the documents that are having registered time less than some timestamp(suppose be 15546000xxxxxx). how …

---

## [Download the contents of es index to csv](https://discuss.elastic.co/t/download-the-contents-of-es-index-to-csv/102741)

<div class="topic-metadata">

**Author:** [@elkuserh](https://discuss.elastic.co/u/elkuserh)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 6:34pm UTC](https://discuss.elastic.co/t/download-the-contents-of-es-index-to-csv/102741 "2017-10-04T18:34:05Z")

</div>

Hi Team, Is there a plugin, which can assist me in downloading the contents of an elasticsearch index into a csv file?. We currently are at elk stack 5.5.0.

---

## [Elasticssearch data allocation](https://discuss.elastic.co/t/elasticssearch-data-allocation/38749)

<div class="topic-metadata">

**Author:** [@mramaprasad](https://discuss.elastic.co/u/mramaprasad)\
**Replies:** 7\
**Last updated:** [January 9, 2016, 12:37am UTC](https://discuss.elastic.co/t/elasticssearch-data-allocation/38749 "2016-01-09T00:37:41Z")

</div>

I have a Elasticsearch cluster with three nodes with the following configuration. Minimum master nodes -2 primary shards 3 replica shards 2 Number of documents on espav01 and espav03 are the same but on espav01 i see…

---

## [Canvas date function time zone support](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 2\
**Last updated:** [January 16, 2022, 9:04am UTC](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485 "2022-01-16T09:04:37Z")

</div>

Hello I have some Canvas pages on which I want to show the last time the Canvas was reloaded. Using the date function with a date formatted as shown below, the time zone is in UTC. The timezone setting in Kibana (7.16.…

---

## [HTTP Poller authentication: encode token](https://discuss.elastic.co/t/http-poller-authentication-encode-token/143532)

<div class="topic-metadata">

**Author:** [@AurelienG](https://discuss.elastic.co/u/AurelienG)\
**Replies:** 2\
**Last updated:** [August 8, 2018, 2:35pm UTC](https://discuss.elastic.co/t/http-poller-authentication-encode-token/143532 "2018-08-08T14:35:25Z")

</div>

Hello, I am trying to use the HTTP Poller input plugin to get data from an API. Although, I need to authenticate with a basic authentication, with username and token. This would be a problem if the token didn't have to …

---

## [Error: Object field starting or ending with \[.\]](https://discuss.elastic.co/t/error-object-field-starting-or-ending-with/108994)

<div class="topic-metadata">

**Author:** [@dC7](https://discuss.elastic.co/u/dC7)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 4:01pm UTC](https://discuss.elastic.co/t/error-object-field-starting-or-ending-with/108994 "2017-12-05T16:01:40Z")

</div>

Our service is logging via fluentd to elasticsearch and I've been starting recently to fix all errors seen in the Fluentd-Logs (so I'm not quite sure if I should ask here or the fluentd-team). I'm nearly done, but I hav…

---

## [Stream data from Elastic search and store in Hadoop](https://discuss.elastic.co/t/stream-data-from-elastic-search-and-store-in-hadoop/97591)

<div class="topic-metadata">

**Author:** [@rrai](https://discuss.elastic.co/u/rrai)\
**Replies:** 2\
**Last updated:** [August 22, 2017, 8:08pm UTC](https://discuss.elastic.co/t/stream-data-from-elastic-search-and-store-in-hadoop/97591 "2017-08-22T20:08:36Z")

</div>

I am reading data from elastic search through external table in hive. I want load data into HDFS from ES continuously instead of doing an external query in ES, and then fetch data into hive from HDFS. Ultimately, I want …

---

## [Connecting Spark to ES](https://discuss.elastic.co/t/connecting-spark-to-es/73767)

<div class="topic-metadata">

**Author:** [@yurik](https://discuss.elastic.co/u/yurik)\
**Replies:** 2\
**Last updated:** [February 25, 2017, 7:12pm UTC](https://discuss.elastic.co/t/connecting-spark-to-es/73767 "2017-02-25T19:12:16Z")

</div>

I am getting the following exception while attempting to read from ES (elasticsearch-5.2.0) into Spark (spark-2.1.0-bin-hadoop2.7) on the local host using ES-to-Hadoop (elasticsearch-hadoop-5.1.2.jar): "Cannot find node …

---

## [Child "meta\_fields" fails?](https://discuss.elastic.co/t/child-meta-fields-fails/193211)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 8\
**Last updated:** [August 25, 2019, 10:03pm UTC](https://discuss.elastic.co/t/child-meta-fields-fails/193211 "2019-08-25T22:03:15Z")

</div>

Tried updating to 7.3 today. I now get this error when opening the Discover pane, or trying to review the fields of specific indexes under "Management / Index patterns" child "meta\_fields" fails because \["meta\_fields" m…

---

## [Date filter issue String to ISO Timestamp](https://discuss.elastic.co/t/date-filter-issue-string-to-iso-timestamp/180354)

<div class="topic-metadata">

**Author:** [@bigster](https://discuss.elastic.co/u/bigster)\
**Replies:** 8\
**Last updated:** [May 10, 2019, 2:02pm UTC](https://discuss.elastic.co/t/date-filter-issue-string-to-iso-timestamp/180354 "2019-05-10T14:02:53Z")

</div>

Hi all, I've got another issue with the conversion of dates using the date filter. The main goal i'm trying to achieve is to put the date into the @timestamp field, but it seems that i'm doing something wrong. I've go…

---

## [Data Transfer MySQL](https://discuss.elastic.co/t/data-transfer-mysql/119909)

<div class="topic-metadata">

**Author:** [@josempolm](https://discuss.elastic.co/u/josempolm)\
**Replies:** 8\
**Last updated:** [February 15, 2018, 2:33pm UTC](https://discuss.elastic.co/t/data-transfer-mysql/119909 "2018-02-15T14:33:29Z")

</div>

Hello there, How can I transfer data from Elasticsearch to MySQL? Best regards.

---

## [A panic of dumplicated kafka output](https://discuss.elastic.co/t/a-panic-of-dumplicated-kafka-output/143645)

<div class="topic-metadata">

**Author:** [@yuz11](https://discuss.elastic.co/u/yuz11)\
**Replies:** 5\
**Last updated:** [August 10, 2018, 11:50am UTC](https://discuss.elastic.co/t/a-panic-of-dumplicated-kafka-output/143645 "2018-08-10T11:50:54Z")

</div>

I get this panic as below,it happens when my filebeat kafka output module is reconnecting the kafka server as the Cloud server of kafka connection is not stable or server is restarted(cloud service,out of our control.Sad…

---

## [Creación de usuarios](https://discuss.elastic.co/t/creacion-de-usuarios/328845)

<div class="topic-metadata">

**Author:** [@JorgeGV](https://discuss.elastic.co/u/JorgeGV)\
**Replies:** 3\
**Last updated:** [April 3, 2023, 10:26am UTC](https://discuss.elastic.co/t/creacion-de-usuarios/328845 "2023-04-03T10:26:35Z")

</div>

Tengo un dashboard con información global de un país y sus respectivas regiones. Ahora quiero crear usuarios para este dashboard, pero que sólo puedan acceder a la información de su región. ¿Cómo puedo hacerlo?. Gracias …

---

## [Date range filter using strict\_date\_time\_no\_millis format failing](https://discuss.elastic.co/t/date-range-filter-using-strict-date-time-no-millis-format-failing/242255)

<div class="topic-metadata">

**Author:** [@russinholi](https://discuss.elastic.co/u/russinholi)\
**Replies:** 3\
**Last updated:** [July 23, 2020, 5:10pm UTC](https://discuss.elastic.co/t/date-range-filter-using-strict-date-time-no-millis-format-failing/242255 "2020-07-23T17:10:23Z")

</div>

Hi all, I'm porting a query of an old app we have, from ES2.0 to ES7.8, and I'm getting this error: failed to parse date field \[2020-07-23T02:59:59+0000\] with format \[strict\_date\_time\_no\_millis\] while running a query w…

---

## [Anonymous acces for Kibana through X-Pack](https://discuss.elastic.co/t/anonymous-acces-for-kibana-through-x-pack/95930)

<div class="topic-metadata">

**Author:** [@Grevius](https://discuss.elastic.co/u/Grevius)\
**Replies:** 3\
**Last updated:** [August 16, 2017, 10:09pm UTC](https://discuss.elastic.co/t/anonymous-acces-for-kibana-through-x-pack/95930 "2017-08-16T22:09:32Z")

</div>

Hello :slight\_smile: I’ve changed my config according to https://www.elastic.co/guide/en/x-pack/current/anonymous-access.html (plus kibana\_user role) and the user appeared in Kibana user management, but I don’t know how…

---

## [Enrich filebeat content using ingest pipeline](https://discuss.elastic.co/t/enrich-filebeat-content-using-ingest-pipeline/68182)

<div class="topic-metadata">

**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\
**Replies:** 3\
**Last updated:** [December 7, 2016, 12:42pm UTC](https://discuss.elastic.co/t/enrich-filebeat-content-using-ingest-pipeline/68182 "2016-12-07T12:42:27Z")

</div>

I want to use filebeat to send Oracle alert logs to Elasticsearch. So far I've managed to get the data in (using some multiline magic). Ideally I want to use a pipeline on the ES side to extract the date, errors (ORA-), …

---

## [Geo\_point not working](https://discuss.elastic.co/t/geo-point-not-working/54082)

<div class="topic-metadata">

**Author:** [@ALa](https://discuss.elastic.co/u/ALa)\
**Replies:** 3\
**Last updated:** [June 28, 2016, 3:45pm UTC](https://discuss.elastic.co/t/geo-point-not-working/54082 "2016-06-28T15:45:16Z")

</div>

I'm using the beats-dashboards and I was trying to make client locations works the problem is as following: geoip.location field in packetbeat index is from type number, however in logstash index is the type of geoip.loc…

---

## [How to get a developer license for Elastic](https://discuss.elastic.co/t/how-to-get-a-developer-license-for-elastic/217324)

<div class="topic-metadata">

**Author:** [@Ayush2810](https://discuss.elastic.co/u/Ayush2810)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 9:09am UTC](https://discuss.elastic.co/t/how-to-get-a-developer-license-for-elastic/217324 "2020-01-31T09:09:02Z")

</div>

How can I get a elastic license for development purposes only.

---

## [Socket timeout when reindex-from-remote](https://discuss.elastic.co/t/socket-timeout-when-reindex-from-remote/70434)

<div class="topic-metadata">

**Author:** [@benregn](https://discuss.elastic.co/u/benregn)\
**Replies:** 1\
**Last updated:** [January 5, 2017, 1:16am UTC](https://discuss.elastic.co/t/socket-timeout-when-reindex-from-remote/70434 "2017-01-05T01:16:18Z")

</div>

I'm using the new reindex API to move from a 1.7 cluster to a 5.1 one but I'm frequently getting SocketTimeoutException. The problem is that when this happens ES blacklists the host and the reindex task fails since it's …

---

## [Install the kibana exception](https://discuss.elastic.co/t/install-the-kibana-exception/40458)

<div class="topic-metadata">

**Author:** [@tianzongqi](https://discuss.elastic.co/u/tianzongqi)\
**Replies:** 1\
**Last updated:** [January 29, 2016, 3:49pm UTC](https://discuss.elastic.co/t/install-the-kibana-exception/40458 "2016-01-29T15:49:17Z")

</div>

when i start kibana by "./kibana", show the exception as below: {"name":"Kibana","hostname":"meishidev-es-4.office.mos","pid":25210,"level":50,"err":{"message":"unknown error","name":"Error","stack":"Error: unknown e…

---

## [Filebeat - seems to be not picking up when using the inputs.d directory](https://discuss.elastic.co/t/filebeat-seems-to-be-not-picking-up-when-using-the-inputs-d-directory/222058)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 2\
**Last updated:** [March 4, 2020, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-seems-to-be-not-picking-up-when-using-the-inputs-d-directory/222058 "2020-03-04T16:29:28Z")

</div>

Hello, When having a play around with Filebeat and the input capabilities of the agent. Below is the config from the filebeat.yml and an example of a yml that is in the inputs.d directory. filebeat.yml - Works when co…

---

## [Kibana Dashboard Fails to Fetch - Shard Failure](https://discuss.elastic.co/t/kibana-dashboard-fails-to-fetch-shard-failure/133279)

<div class="topic-metadata">

**Author:** [@Kali17](https://discuss.elastic.co/u/Kali17)\
**Replies:** 2\
**Last updated:** [May 29, 2018, 10:21pm UTC](https://discuss.elastic.co/t/kibana-dashboard-fails-to-fetch-shard-failure/133279 "2018-05-29T22:21:17Z")

</div>

Hi there, We're using ELK v-5.5 and have set our index in Kibana to logstash-\*. When a dashboard is loaded it searches total number of shards no matter what timeperiod is set to (15-mins). There are 450 shards in our …

---

## [XML through ingest attachment only showing values in attachment.content, not full tree](https://discuss.elastic.co/t/xml-through-ingest-attachment-only-showing-values-in-attachment-content-not-full-tree/121015)

<div class="topic-metadata">

**Author:** [@ekenstiernan](https://discuss.elastic.co/u/ekenstiernan)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 11:29am UTC](https://discuss.elastic.co/t/xml-through-ingest-attachment-only-showing-values-in-attachment-content-not-full-tree/121015 "2018-02-22T11:29:21Z")

</div>

Hi. We're in the process of starting to use Elastic for logging in our integration platform. When sending to Elastic through the ingest-attachment pipeline the payload in attachment.content field is only showing the val…

---

## [Number of lines+ real-time data from SQL Server](https://discuss.elastic.co/t/number-of-lines-real-time-data-from-sql-server/92394)

<div class="topic-metadata">

**Author:** [@ines\_ben\_kraiem](https://discuss.elastic.co/u/ines_ben_kraiem)\
**Replies:** 2\
**Last updated:** [July 12, 2017, 3:44pm UTC](https://discuss.elastic.co/t/number-of-lines-real-time-data-from-sql-server/92394 "2017-07-12T15:44:16Z")

</div>

Hi, I retrieved from the database SQL SERVER 300 million lines with logstash and elasticsearch, now I want to visualize this data with kibana. So how to know the number of rows recorvred by kibana and how can i activate…

---

## [WMS for China](https://discuss.elastic.co/t/wms-for-china/67442)

<div class="topic-metadata">

**Author:** [@tjust](https://discuss.elastic.co/u/tjust)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 7:03am UTC](https://discuss.elastic.co/t/wms-for-china/67442 "2016-12-13T07:03:45Z")

</div>

I am looking for a Web Mapping Services for China, especially Beijing and Shanghai, that I can use for the tile mapping. Since the default map service is based on OSM, i cannot use this because of government restrictions…

---

## [Failed to set the basic license](https://discuss.elastic.co/t/failed-to-set-the-basic-license/68258)

<div class="topic-metadata">

**Author:** [@danilvoe](https://discuss.elastic.co/u/danilvoe)\
**Replies:** 2\
**Last updated:** [December 8, 2016, 12:03pm UTC](https://discuss.elastic.co/t/failed-to-set-the-basic-license/68258 "2016-12-08T12:03:12Z")

</div>

When you attempt to install the license as it is written here https://www.elastic.co/guide/en/x-pack/5.1/installing-license.html curl -XGET -u elastic 'http://x.x.x.x:9200/\_xpack/license?acknowledge=true' -d @license.…

---

## [OSSEC vs Watcher](https://discuss.elastic.co/t/ossec-vs-watcher/43842)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 2\
**Last updated:** [March 14, 2016, 5:48am UTC](https://discuss.elastic.co/t/ossec-vs-watcher/43842 "2016-03-14T05:48:56Z")

</div>

When I was evaluating the various option for Log capture and alert for host and firewall I came across with OSSEC. Seems like it can do some correlation and do what the watcher & beats does. What I am unsure is from an a…

---

## [Topbeat does not drop events?](https://discuss.elastic.co/t/topbeat-does-not-drop-events/35800)

<div class="topic-metadata">

**Author:** [@Svenfa](https://discuss.elastic.co/u/Svenfa)\
**Replies:** 2\
**Last updated:** [November 30, 2015, 8:51pm UTC](https://discuss.elastic.co/t/topbeat-does-not-drop-events/35800 "2015-11-30T20:51:17Z")

</div>

Hi all, I'm using topbeat 1.0.0 on a few clients (Windows 2k12 and Ubuntu Server 14.04). It's sending the events loadbalanced to two logstash 2.1 instances (which send data to ES 2.0). After a few hours of running w…

---

## [Shield and Marvel development licenses](https://discuss.elastic.co/t/shield-and-marvel-development-licenses/25673)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [July 16, 2015, 3:27pm UTC](https://discuss.elastic.co/t/shield-and-marvel-development-licenses/25673 "2015-07-16T15:27:22Z")

</div>

Hey guys, I've just built a total of six 3 node elasticsearch clusters at my company. And I just heard today that we bough enough licensing for both marvel and shield to cover all of them. But I also have a private …

---

## [Journalbeat install failing](https://discuss.elastic.co/t/journalbeat-install-failing/90684)

<div class="topic-metadata">

**Author:** [@holt](https://discuss.elastic.co/u/holt)\
**Replies:** 1\
**Last updated:** [June 26, 2017, 3:02pm UTC](https://discuss.elastic.co/t/journalbeat-install-failing/90684 "2017-06-26T15:02:34Z")

</div>

journalbeat install failing with: go get github.com/mheese/journalbeat package context: unrecognized import path "context" (import path does not begin with hostname) Downloads OK, but something is messed up somewhere…

---

## [Shard allocation - primaries allocated on same data nodes](https://discuss.elastic.co/t/shard-allocation-primaries-allocated-on-same-data-nodes/238338)

<div class="topic-metadata">

**Author:** [@andrezenun](https://discuss.elastic.co/u/andrezenun)\
**Replies:** 4\
**Last updated:** [June 24, 2020, 3:42am UTC](https://discuss.elastic.co/t/shard-allocation-primaries-allocated-on-same-data-nodes/238338 "2020-06-24T03:42:23Z")

</div>

Hello everyone! I have a cluster, that I'm on the process of setup everything to go to production. I have six data nodes and 3 masters. I don't know why but for some reason that I cannot identify the shards are allocate…

---

## [Missing CPU & Memory Metrics](https://discuss.elastic.co/t/missing-cpu-memory-metrics/168255)

<div class="topic-metadata">

**Author:** [@aviator](https://discuss.elastic.co/u/aviator)\
**Replies:** 4\
**Last updated:** [February 18, 2019, 8:38am UTC](https://discuss.elastic.co/t/missing-cpu-memory-metrics/168255 "2019-02-18T08:38:45Z")

</div>

Hi All APM Kibana Dashboard shows all the metrics except for CPU usage and Memory usage for server x. The infrastructure Dashboard shows all the CPU and Memory metrics using metricbeat for server x. Is there a specific…

---

## [Elasticsearch Bulk Indexing with specified index, type in URL not working](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-with-specified-index-type-in-url-not-working/39175)

<div class="topic-metadata">

**Author:** [@shamak](https://discuss.elastic.co/u/shamak)\
**Replies:** 4\
**Last updated:** [January 14, 2016, 10:33pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-with-specified-index-type-in-url-not-working/39175 "2016-01-14T22:33:33Z")

</div>

I am trying to bulk index a 45 MB file using the bulk API on Elasticsearch. The docs say 'The endpoints are /\_bulk, /{index}/\_bulk, and {index}/{type}/\_bulk. When the index or the index/type are provided, they will be us…

---

## [Scripted fields date parse](https://discuss.elastic.co/t/scripted-fields-date-parse/167241)

<div class="topic-metadata">

**Author:** [@fedwe](https://discuss.elastic.co/u/fedwe)\
**Replies:** 1\
**Last updated:** [February 8, 2019, 5:56pm UTC](https://discuss.elastic.co/t/scripted-fields-date-parse/167241 "2019-02-08T17:56:36Z")

</div>

i extracted tweets from twitter and then i imported the json files into elasticsearch using kibana. I have this field called created\_at that has this format Wed Jan 30 18:12:02 +0000 2019 and i have not date field. i tri…

---

## [Kibana Average metric taking unique count of another field](https://discuss.elastic.co/t/kibana-average-metric-taking-unique-count-of-another-field/96870)

<div class="topic-metadata">

**Author:** [@parma](https://discuss.elastic.co/u/parma)\
**Replies:** 1\
**Last updated:** [August 14, 2017, 12:59pm UTC](https://discuss.elastic.co/t/kibana-average-metric-taking-unique-count-of-another-field/96870 "2017-08-14T12:59:28Z")

</div>

I need to calculate the average value of a field. But the base is not the number of documents. I need to consider the unique count of another field as base(denominator). Is there any way to achieve this through built-in …

---

## [SSL/TLS setup with PKCS8 keys](https://discuss.elastic.co/t/ssl-tls-setup-with-pkcs8-keys/80846)

<div class="topic-metadata">

**Author:** [@lidiyam](https://discuss.elastic.co/u/lidiyam)\
**Replies:** 1\
**Last updated:** [April 3, 2017, 3:58am UTC](https://discuss.elastic.co/t/ssl-tls-setup-with-pkcs8-keys/80846 "2017-04-03T03:58:03Z")

</div>

Hi, I'm trying to set up SSL/TLS with x-pack and running into this when I point to pem encoded files: java.lang.IllegalArgumentException: parsed an unsupported object \[PKCS8EncryptedPrivateKeyInfo\] at org.elasticsear…

[Previous page](https://discuss.elastic.co/top.md?page=1053&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1055&per_page=50&period=all)
