# Top **URL:** https://discuss.elastic.co/top.md?page=1070&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1071 --- ## [Using ILM rollover with multiple indices](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443)
**Author:** [@SaigyoujiYuyuko233](https://discuss.elastic.co/u/SaigyoujiYuyuko233)\ **Replies:** 5\ **Last updated:** [August 5, 2020, 9:26am UTC](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443 "2020-08-05T09:26:06Z")
Enviroment ES: 7.8.1 Kibana: 7.8.1 Run in docker: 19.03.8, build afacb8b Using docker image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 Hi everybody, I'm having a hard time with using ILM rollover with mult… --- ## [Configurable retention lease period when it comes to CCR](https://discuss.elastic.co/t/configurable-retention-lease-period-when-it-comes-to-ccr/215276)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 11:15am UTC](https://discuss.elastic.co/t/configurable-retention-lease-period-when-it-comes-to-ccr/215276 "2020-01-16T11:15:07Z")
Hello everyone! I have a question regarding the retention lease period when it comes to CCR. So, usually the proper way to set this lease period is to do it on index creation time. Recently we noticed, that this prope… --- ## [Embedded dashboards navigation with global filter](https://discuss.elastic.co/t/embedded-dashboards-navigation-with-global-filter/120418)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 5\ **Last updated:** [February 20, 2018, 2:46pm UTC](https://discuss.elastic.co/t/embedded-dashboards-navigation-with-global-filter/120418 "2018-02-20T14:46:51Z")
I have created three dashboards and that navigates as Overview| Scenario Summary| Transactions Summary Suppose that I am on "Overview" Dashboard and apply some filter to drill down. Can same filter be applied on "Scen… --- ## [Configure Shield with Puppet](https://discuss.elastic.co/t/configure-shield-with-puppet/41668)
**Author:** [@megaforce1020](https://discuss.elastic.co/u/megaforce1020)\ **Replies:** 1\ **Last updated:** [March 22, 2016, 3:48am UTC](https://discuss.elastic.co/t/configure-shield-with-puppet/41668 "2016-03-22T03:48:57Z")
I am using puppet to build out my elasticsearch and I've got it mostly configure by following the documentation in the puppet forge elasticsearch site. One thing that I've noticed is the lack of documentation on being a… --- ## [Java client: Jackson exception: Numeric value out of range of int](https://discuss.elastic.co/t/java-client-jackson-exception-numeric-value-out-of-range-of-int/309673)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 3\ **Last updated:** [July 19, 2022, 12:14pm UTC](https://discuss.elastic.co/t/java-client-jackson-exception-numeric-value-out-of-range-of-int/309673 "2022-07-19T12:14:12Z")
Hello, I am using Java client version 7.17.4 (server is 7.17.0). Executing the following code ElasticsearchIndicesClient indicesClient = new ElasticsearchIndicesClient(transport); indicesClient.stats(b -\> b.index("nam… --- ## [Using the payload data (fields) after aggregated to bucket, in Elastic Watcher Action email](https://discuss.elastic.co/t/using-the-payload-data-fields-after-aggregated-to-bucket-in-elastic-watcher-action-email/300779)
**Author:** [@SararhHewage](https://discuss.elastic.co/u/SararhHewage)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:08pm UTC](https://discuss.elastic.co/t/using-the-payload-data-fields-after-aggregated-to-bucket-in-elastic-watcher-action-email/300779 "2022-03-29T12:08:40Z")
HI, I am seeking some help to resolve an issue that I am having in one of my Elastic Watchers. First of all, I must say this is a complex Watcher. In our environment, we gather some log data from file transferring jobs… --- ## [Shards are failing becuase of script field painless](https://discuss.elastic.co/t/shards-are-failing-becuase-of-script-field-painless/173092)
**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\ **Replies:** 3\ **Last updated:** [March 22, 2019, 8:09pm UTC](https://discuss.elastic.co/t/shards-are-failing-becuase-of-script-field-painless/173092 "2019-03-22T20:09:43Z")
mappings used PUT kpal { "mappings": { "\_doc": { "properties": { "user": { "type": "nested" } } } } } PUT kpal/\_doc/1 { "group" : "fans", "user" : \[ { "… --- ## [\[FATAL\] 2018-05-04 16:06:38.656 \[LogStash::Runner\] runner - The given configuration is invalid. Reason: Illegal pattern component: T when trying to parse date](https://discuss.elastic.co/t/fatal-2018-05-04-16-06-38-656-logstash-runner-runner-the-given-configuration-is-invalid-reason-illegal-pattern-component-t-when-trying-to-parse-date/130643)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 8:29pm UTC](https://discuss.elastic.co/t/fatal-2018-05-04-16-06-38-656-logstash-runner-runner-the-given-configuration-is-invalid-reason-illegal-pattern-component-t-when-trying-to-parse-date/130643 "2018-05-04T20:29:49Z")
Hello everybody, I've got a CSV document which is imported thanks to fileabeat to logstash input, then it is filtered and then goes to ES to be saw in Kabana. I want to parse a date from this CSV file to use it for the… --- ## [Russian characters are returned in bad charset](https://discuss.elastic.co/t/russian-characters-are-returned-in-bad-charset/94714)
**Author:** [@avkosme](https://discuss.elastic.co/u/avkosme)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 1:08am UTC](https://discuss.elastic.co/t/russian-characters-are-returned-in-bad-charset/94714 "2017-08-02T01:08:38Z")
On my Centos 7 workstation i have elasticsearch (ver.5.5.1) service by image: docker.elastic.co/elasticsearch/elasticsearch:5.5.1. Filesystem type on my workstation is xfs. I have .tar archive with /usr/share/elastic… --- ## [Visualization with Green/Red dots](https://discuss.elastic.co/t/visualization-with-green-red-dots/88468)
**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\ **Replies:** 3\ **Last updated:** [June 7, 2017, 6:36am UTC](https://discuss.elastic.co/t/visualization-with-green-red-dots/88468 "2017-06-07T06:36:56Z")
Is there a way to create a visualization with Red and Green dots like is done for the monitoring status? --- ## [Listening on oplog collection, what does it mean?](https://discuss.elastic.co/t/listening-on-oplog-collection-what-does-it-mean/10262)
**Author:** [@Janusz\_Dalecki](https://discuss.elastic.co/u/Janusz_Dalecki)\ **Replies:** 3\ **Last updated:** [July 8, 2013, 10:44am UTC](https://discuss.elastic.co/t/listening-on-oplog-collection-what-does-it-mean/10262 "2013-07-08T10:44:29Z")
Hi, About mongoDB river. What does this mean: "Current implementation monitors oplog collection" - what does listening on oplog collection mean? Regards, Janusz -- --- ## [Elasticsearch .NET DocumentExists() returns error: Invalid NEST response built from a unsuccessful (200) low level call on HEAD](https://discuss.elastic.co/t/elasticsearch-net-documentexists-returns-error-invalid-nest-response-built-from-a-unsuccessful-200-low-level-call-on-head/278970)
**Author:** [@AdstraCat](https://discuss.elastic.co/u/AdstraCat)\ **Replies:** 1\ **Last updated:** [July 27, 2021, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-net-documentexists-returns-error-invalid-nest-response-built-from-a-unsuccessful-200-low-level-call-on-head/278970 "2021-07-27T09:31:00Z")
Hi everyone I have a document already exists in an index in elastic below And here's my C# code for checking if this document exists: ExistsResponse existsResponse = await \_elasticClient.DocumentExistsAsync\(type… --- ## [Connection issues to ES cluster from .NET (System.Net.Sockets.SocketException)](https://discuss.elastic.co/t/connection-issues-to-es-cluster-from-net-system-net-sockets-socketexception/46885)
**Author:** [@Tejas\_Vora](https://discuss.elastic.co/u/Tejas_Vora)\ **Replies:** 1\ **Last updated:** [April 10, 2016, 9:09pm UTC](https://discuss.elastic.co/t/connection-issues-to-es-cluster-from-net-system-net-sockets-socketexception/46885 "2016-04-10T21:09:17Z")
We are using 3 data nodes, 3 master nodes, 2 client nodes as elastic cluster in Azure. We have an NGINX sitting in front of client nodes to proxy the data. ES version: 2.2 NEST: 2.1.0 I am trying to connect from .NE… --- ## [How to enable cache in logstash](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126 "2022-01-13T13:29:33Z")
Hello, I currently have an elk cluster composed as follows: Beats= is the agent installed in linux machine and send logs to Logstash Logstash= filter logs and send logs to elk -Beats --\> Logstash --\> Elasticsearch m… --- ## [Date filter needed for unix timestamps?](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 12:52pm UTC](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585 "2020-07-02T12:52:30Z")
Greetings Logstashers, I wrote a grok parser for one of my logs, the log in question has a unix timestamp. Here's a line from the log: {"name":"firefox.exe","pid":"7668","start\_time":"1585318348"} Here's what my gr… --- ## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes elasticsearch](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-elasticsearch/214185)
**Author:** [@Sandeep\_Kumar4](https://discuss.elastic.co/u/Sandeep_Kumar4)\ **Replies:** 2\ **Last updated:** [January 17, 2020, 10:33am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-elasticsearch/214185 "2020-01-17T10:33:48Z")
curl -XGET 'http://127.0.0.1:9200/\_cluster/health?pretty=true' { "error" : { "root\_cause" : \[ { "type" : "master\_not\_discovered\_exception", "reason" : null } \], "type" : "master\_… --- ## [Netflow dashboard and top talkers](https://discuss.elastic.co/t/netflow-dashboard-and-top-talkers/191593)
**Author:** [@r.tahina](https://discuss.elastic.co/u/r.tahina)\ **Replies:** 2\ **Last updated:** [July 23, 2019, 6:25am UTC](https://discuss.elastic.co/t/netflow-dashboard-and-top-talkers/191593 "2019-07-23T06:25:16Z")
Dear all, I'm new to ELK and I use it with Netflow collected from a Mikrotik router. When opening the dashboard, I only have "Traffic At A Glance" showing line traffic over time and Pie chart for Traffic by protocol. … --- ## [How to stop sending duplicate Slack notifications for the same error?](https://discuss.elastic.co/t/how-to-stop-sending-duplicate-slack-notifications-for-the-same-error/151460)
**Author:** [@ddregalo](https://discuss.elastic.co/u/ddregalo)\ **Replies:** 2\ **Last updated:** [October 9, 2018, 7:57am UTC](https://discuss.elastic.co/t/how-to-stop-sending-duplicate-slack-notifications-for-the-same-error/151460 "2018-10-09T07:57:28Z")
I've asked this question in X-Pack +Heartbeat forums with no real progress made - I was referred to @michael.heldebrant for some assistance!?? If you have any insight on this it would be very much appreciated! :slight\_sm… --- ## [Logstash adds 9200 port to elastic host during healthcheck](https://discuss.elastic.co/t/logstash-adds-9200-port-to-elastic-host-during-healthcheck/134974)
**Author:** [@Tatiana\_Koroleva](https://discuss.elastic.co/u/Tatiana_Koroleva)\ **Replies:** 2\ **Last updated:** [June 7, 2018, 1:15pm UTC](https://discuss.elastic.co/t/logstash-adds-9200-port-to-elastic-host-during-healthcheck/134974 "2018-06-07T13:15:08Z")
I run elastic cluster in aws (as a service) , so its https endpoint does not have a 9200 ending. But logstash still adds :9200 at the end during healthcheck - \[2018-06-07T11:46:38,218\]\[INFO \]\[logstash.outputs.elasticsea… --- ## [Slurm-plugin CPU utilization](https://discuss.elastic.co/t/slurm-plugin-cpu-utilization/100313)
**Author:** [@christianmatira](https://discuss.elastic.co/u/christianmatira)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 4:02pm UTC](https://discuss.elastic.co/t/slurm-plugin-cpu-utilization/100313 "2017-09-13T16:02:22Z")
Good day, I am currently trying to create visualizations using the data provided by slurm's elasticsearch plugin. I want to measure the CPUs used by every job completed by the cluster. Just by using the fields timefiel… --- ## [How long it should take to search 10Million docs?](https://discuss.elastic.co/t/how-long-it-should-take-to-search-10million-docs/93774)
**Author:** [@mogliang](https://discuss.elastic.co/u/mogliang)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 4:13am UTC](https://discuss.elastic.co/t/how-long-it-should-take-to-search-10million-docs/93774 "2017-07-21T04:13:49Z")
Question: I'm trying to search 10 docs from one index (6 shard) which has 2million docs, but it takes about 5 sec. That's far too long for us. My expectation is about 100ms. Would you please provide some guidance on tu… --- ## [Can you configure filebeat to exit as soon as eof is reached?](https://discuss.elastic.co/t/can-you-configure-filebeat-to-exit-as-soon-as-eof-is-reached/57867)
**Author:** [@lin-zhao](https://discuss.elastic.co/u/lin-zhao)\ **Replies:** 2\ **Last updated:** [August 12, 2016, 2:01pm UTC](https://discuss.elastic.co/t/can-you-configure-filebeat-to-exit-as-soon-as-eof-is-reached/57867 "2016-08-12T14:01:45Z")
I'm trying to do benchmark on filebeat and elasticsearch and would like to time the time taken to publish and index a file. Closest configuration I can find is close\_eof, but it doesn't cause filebeat process to exit. --- ## [Suitable Applications to build on top of Elastic Search](https://discuss.elastic.co/t/suitable-applications-to-build-on-top-of-elastic-search/42268)
**Author:** [@iroshan](https://discuss.elastic.co/u/iroshan)\ **Replies:** 2\ **Last updated:** [February 22, 2016, 3:24pm UTC](https://discuss.elastic.co/t/suitable-applications-to-build-on-top-of-elastic-search/42268 "2016-02-22T15:24:45Z")
Hi, We have used elastic search in our Subscriber and Billing application. And we have used it with 2 nodes and with HA set up. Note this is hosted on premises not on cloud. We are facing nodes getting corrupted and i… --- ## [Interpolation of discovery.zen.ping.unicast.hosts](https://discuss.elastic.co/t/interpolation-of-discovery-zen-ping-unicast-hosts/17811)
**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\ **Replies:** 2\ **Last updated:** [May 30, 2014, 1:25pm UTC](https://discuss.elastic.co/t/interpolation-of-discovery-zen-ping-unicast-hosts/17811 "2014-05-30T13:25:05Z")
I'm trying to set up unicast discovery. I want to pass in the hosts via environment variable and am relying on elasticsearch.yml support of environment variable interpolation. Tried two formats without any luck: … --- ## [Grouped bar chart - Canvas](https://discuss.elastic.co/t/grouped-bar-chart-canvas/237151)
**Author:** [@Cate](https://discuss.elastic.co/u/Cate)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 2:16pm UTC](https://discuss.elastic.co/t/grouped-bar-chart-canvas/237151 "2020-06-16T14:16:24Z")
Hi, I would like to create a grouped bar chart i Canvas. In Kibana - Visualize it is possible to create group bar chart using Buckets - Split series. How is it possible to achieve the same result in Canvas? Thanks for… --- ## [Bulk Index task hangs](https://discuss.elastic.co/t/bulk-index-task-hangs/143794)
**Author:** [@daniel.b.sario](https://discuss.elastic.co/u/daniel.b.sario)\ **Replies:** 4\ **Last updated:** [August 10, 2018, 6:58am UTC](https://discuss.elastic.co/t/bulk-index-task-hangs/143794 "2018-08-10T06:58:52Z")
I did a bulk index task using java api. After a few successful bulk index requests, suddenly my indexer hangs. I checked the the status of index tasks using the task api of elasticsearch and I found that there are tasks … --- ## [Elasticsearch service failed start java.lang.NoClassDefFoundError: java/sql/Date](https://discuss.elastic.co/t/elasticsearch-service-failed-start-java-lang-noclassdeffounderror-java-sql-date/189323)
**Author:** [@dcuti8](https://discuss.elastic.co/u/dcuti8)\ **Replies:** 1\ **Last updated:** [July 9, 2019, 3:36am UTC](https://discuss.elastic.co/t/elasticsearch-service-failed-start-java-lang-noclassdeffounderror-java-sql-date/189323 "2019-07-09T03:36:13Z")
Environment：Windows Server 2019 Standard (64-bit, 8GB) java version ："12.0.1" 2019-04-16 Java(TM) SE Runtime Environment (build 12.0.1+12) Java HotSpot(TM) 64-Bit Server VM (build 12.0.1+12, mixed mode, sharing) Elas… --- ## [Kibana 7.0.0 does not load on Microsoft Edge browser](https://discuss.elastic.co/t/kibana-7-0-0-does-not-load-on-microsoft-edge-browser/180166)
**Author:** [@CaptainAye](https://discuss.elastic.co/u/CaptainAye)\ **Replies:** 1\ **Last updated:** [May 8, 2019, 1:52pm UTC](https://discuss.elastic.co/t/kibana-7-0-0-does-not-load-on-microsoft-edge-browser/180166 "2019-05-08T13:52:42Z")
Hi all, I have a problem related to loading Kibana on Microsoft Edge browser. Once I go to http://kibana\_host:5601/app/kibana, nothing renders (not even an error) and two following warnings appear in the console: CSP14… --- ## [Logstash 5.5.0 NameError: undefined local variable or method \`dotfile' for #\ **Author:** [@dawncold](https://discuss.elastic.co/u/dawncold)\ **Replies:** 1\ **Last updated:** [July 13, 2017, 3:00pm UTC](https://discuss.elastic.co/t/logstash-5-5-0-nameerror-undefined-local-variable-or-method-dotfile-for-awesomeprint-inspector/92923 "2017-07-13T15:00:16Z") my logstash output config output { stdout { codec =\> rubydebug } if "\_jsonparsefailure" not in \[tags\] { elasticsearch { } } } logstash 5.5.0 raised an error: NameError: undefined local variab… --- ## [Generating correct manifest.mf file when creating jar file for native elasticsearch plugin](https://discuss.elastic.co/t/generating-correct-manifest-mf-file-when-creating-jar-file-for-native-elasticsearch-plugin/20520)
**Author:** [@Matthew\_Hall](https://discuss.elastic.co/u/Matthew_Hall)\ **Replies:** 7\ **Last updated:** [November 3, 2014, 3:34pm UTC](https://discuss.elastic.co/t/generating-correct-manifest-mf-file-when-creating-jar-file-for-native-elasticsearch-plugin/20520 "2014-11-03T15:34:53Z")
Hi sorry but I am new to java and elasticsearch. I have written a simple native script in intellij which compiles into classes fine. I then use the command line jar command to create the jar from the class files. … --- ## [Winlogbeat setup error: x509 certificate is valid for \, not \](https://discuss.elastic.co/t/winlogbeat-setup-error-x509-certificate-is-valid-for-ip-not-same-ip/269176)
**Author:** [@Michlol\_502](https://discuss.elastic.co/u/Michlol_502)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 7:44am UTC](https://discuss.elastic.co/t/winlogbeat-setup-error-x509-certificate-is-valid-for-ip-not-same-ip/269176 "2021-04-13T07:44:43Z")
I'm trying to send logs from Winlogbeat to my ELK stack. I did everything according to the official guide and it worked for my host. However, when copying the same winlogbeat directory to my Event Collector server, it di… --- ## [Importing a Dashboard onto a Space](https://discuss.elastic.co/t/importing-a-dashboard-onto-a-space/252402)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 6\ **Last updated:** [October 19, 2020, 7:21pm UTC](https://discuss.elastic.co/t/importing-a-dashboard-onto-a-space/252402 "2020-10-19T19:21:36Z")
I have created spaces for various users but now I want to have them see existing dashboards on their respective spaces when they log in. The problem I am having is that while the spaces are letting me create a dashboard,… --- ## [Grok GUnicorn error log date format?](https://discuss.elastic.co/t/grok-gunicorn-error-log-date-format/178290)
**Author:** [@JJB](https://discuss.elastic.co/u/JJB)\ **Replies:** 3\ **Last updated:** [April 25, 2019, 12:05pm UTC](https://discuss.elastic.co/t/grok-gunicorn-error-log-date-format/178290 "2019-04-25T12:05:42Z")
GUnicorn uses this format for the error log file: \[2019-04-24 14:53:51 +0000\] \[10\] \[INFO\] Starting gunicorn 19.4.5 \[2019-04-24 14:53:51 +0000\] \[10\] \[INFO\] Listening at: http://0.0.0.0:12007 (10) Is the timestamp a stan… --- ## [Filebeat does not harvest files after a restart](https://discuss.elastic.co/t/filebeat-does-not-harvest-files-after-a-restart/159608)
**Author:** [@Amit\_Periyapatna](https://discuss.elastic.co/u/Amit_Periyapatna)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-does-not-harvest-files-after-a-restart/159608 "2018-12-11T13:14:18Z")
I have configured filebeat to read files from a log directory. Any time I change a configuration in filebeat.yml file and restart filebeat, it stops harvesting files. If I restart after deleting the registry, everythin… --- ## [CSV data upload problem](https://discuss.elastic.co/t/csv-data-upload-problem/156956)
**Author:** [@f24b83985b804d90965e](https://discuss.elastic.co/u/f24b83985b804d90965e)\ **Replies:** 8\ **Last updated:** [November 21, 2018, 5:07am UTC](https://discuss.elastic.co/t/csv-data-upload-problem/156956 "2018-11-21T05:07:51Z")
hi there. I Have 2 issue about Logstash. but first, I let you know that test base. Windows 10 Search, kibana, Logstash v6.2.2 CSV data upload it is work in v6.2.2 family. but 6.4 or 6.5.0 doesn't work in same meth… --- ## [Kibana 6.3.1 Optimizing and caching browser bundles hangs up](https://discuss.elastic.co/t/kibana-6-3-1-optimizing-and-caching-browser-bundles-hangs-up/141001)
**Author:** [@guenter.platzerworld](https://discuss.elastic.co/u/guenter.platzerworld)\ **Replies:** 3\ **Last updated:** [August 2, 2018, 1:56pm UTC](https://discuss.elastic.co/t/kibana-6-3-1-optimizing-and-caching-browser-bundles-hangs-up/141001 "2018-08-02T13:56:41Z")
Hi, i use ELK-Stack 6.3.1. when i install some plugin like search-guard it hangs up, in 6.2.4 it works correctly /global/zebra/elkstack/oem/kibana-6.3.1-linux-x86\_64/bin/kibana-plugin install file:///global/zebra/elks… --- ## [Looking for help setting up a machine learning test to find "virility"](https://discuss.elastic.co/t/looking-for-help-setting-up-a-machine-learning-test-to-find-virility/98057)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 8\ **Last updated:** [August 23, 2017, 12:53pm UTC](https://discuss.elastic.co/t/looking-for-help-setting-up-a-machine-learning-test-to-find-virility/98057 "2017-08-23T12:53:32Z")
I’m testing x-pack and the machine learning, and I’m trying to develop a test case to test its effectiveness and usefulness for my application. The idea is that I’m tracking posts on a site and I’m watching a few metric… --- ## [Need guidance on using Github / Git to manage my fork](https://discuss.elastic.co/t/need-guidance-on-using-github-git-to-manage-my-fork/71866)
**Author:** [@E\_Marshall](https://discuss.elastic.co/u/E_Marshall)\ **Replies:** 3\ **Last updated:** [January 17, 2017, 3:05pm UTC](https://discuss.elastic.co/t/need-guidance-on-using-github-git-to-manage-my-fork/71866 "2017-01-17T15:05:57Z")
I'm new to Elasticsearch and Git. I've managed to fork the Elasticsearch repository. I'm only using the Browser for GitHub and am not able to install any software on this system I'm on. I have posted a correction to t… --- ## [Kibana Timelion error](https://discuss.elastic.co/t/kibana-timelion-error/34511)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 3\ **Last updated:** [September 21, 2016, 11:02am UTC](https://discuss.elastic.co/t/kibana-timelion-error/34511 "2016-09-21T11:02:55Z")
I get this error when I open timelion. Does it has something to do with the reverse proxy? --- ## [Json typed log4j data using file input](https://discuss.elastic.co/t/json-typed-log4j-data-using-file-input/1659)
**Author:** [@Ducheol\_Kim](https://discuss.elastic.co/u/Ducheol_Kim)\ **Replies:** 3\ **Last updated:** [June 1, 2015, 8:32pm UTC](https://discuss.elastic.co/t/json-typed-log4j-data-using-file-input/1659 "2015-06-01T20:32:06Z")
Hi All. I'm evaluating logstash to replace our river plugin. Currently, I'm testing below topology. Create json data which has changed data and write on file using log4j. Using '%m%n' pattern to write only json valu… --- ## [Cluster metadata](https://discuss.elastic.co/t/cluster-metadata/6404)
**Author:** [@derrickburns](https://discuss.elastic.co/u/derrickburns)\ **Replies:** 8\ **Last updated:** [January 23, 2012, 6:41pm UTC](https://discuss.elastic.co/t/cluster-metadata/6404 "2012-01-23T18:41:49Z")
I'm building a very large number of ES indices. I'm trying to decide whether to federate the data into ES indinces, stored one per AWS EBS volume or whether to use an S3 gateway. When I run a query, I plan to use… --- ## [@timestamp format while exporting from elasticsearch to csv](https://discuss.elastic.co/t/timestamp-format-while-exporting-from-elasticsearch-to-csv/263137)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 5\ **Last updated:** [February 5, 2021, 10:15am UTC](https://discuss.elastic.co/t/timestamp-format-while-exporting-from-elasticsearch-to-csv/263137 "2021-02-05T10:15:12Z")
Hi, I want to know how can I change the format of @timestamp while exporting from elasticsearch to csv via logstash. In Kibana I have kept the format as "Feb-03-2021 20:03:04.603" using advance settings. I want same for… --- ## [Несовпадение данных в визуализации и базе данных Elastic](https://discuss.elastic.co/t/elastic/212034)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 2:23pm UTC](https://discuss.elastic.co/t/elastic/212034 "2020-01-14T14:23:23Z")
Всем привет, Есть визуализация в виде таблицы, но данные в ней отличаются от эластика. Например, для игрока с id 750 в таблице 6 записей с 2мя устройствами: Однако это невозможно, поскольку id игрока однозначно привя… --- ## [Problem about create a own beats](https://discuss.elastic.co/t/problem-about-create-a-own-beats/69898)
**Author:** [@heiswade](https://discuss.elastic.co/u/heiswade)\ **Replies:** 5\ **Last updated:** [January 2, 2017, 6:55pm UTC](https://discuss.elastic.co/t/problem-about-create-a-own-beats/69898 "2017-01-02T18:55:02Z")
when I used cookiecutter follow the instructions to create the exaplebeat,but it seems losing some files. when do like this:make setup,problem comed: mkdir -p vendor/github.com/elastic/ cp -R /opt/bobo/work/src/githu… --- ## [Filebeat installation on AIX servers](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026)
**Author:** [@ryanamadala](https://discuss.elastic.co/u/ryanamadala)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 3:22am UTC](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026 "2023-05-03T03:22:12Z")
Need some help for installing Filebeat agents on AIX servers. Machine details: System Model: IBM,9040-MR9 Processor Type: PowerPC\_POWER9 Processor Implementation Mode: POWER 9 Platform Firmware level: VM940\_050 --- ## [Unable to start logstash](https://discuss.elastic.co/t/unable-to-start-logstash/251396)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 10:58am UTC](https://discuss.elastic.co/t/unable-to-start-logstash/251396 "2020-10-08T10:58:51Z")
Team, I am trying to start logstash but unable to do so as it says the port is being used but there is no such port used in the host. \[2020-10-08T04:18:10,305\]\[INFO \]\[logstash.inputs.http \]\[httpd\]\[c8cb23d9d60ec3c13… --- ## [How to run logstash conf continuously](https://discuss.elastic.co/t/how-to-run-logstash-conf-continuously/87443)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 1:01am UTC](https://discuss.elastic.co/t/how-to-run-logstash-conf-continuously/87443 "2017-05-30T01:01:48Z")
Hi....all Here i am trying to push elasticsearch data into RabbitMq here is my conf input { elasticsearch { hosts =\> "192.168.1.23:9200" index =\> "task-\*" query =\> '{ "query":{ "match\_all": {} }, "sort… --- ## [Metricbeat 8.2.1 monitoring Elasticsearch 8.2.1 - Template issue](https://discuss.elastic.co/t/metricbeat-8-2-1-monitoring-elasticsearch-8-2-1-template-issue/305649)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 5\ **Last updated:** [May 26, 2022, 10:07pm UTC](https://discuss.elastic.co/t/metricbeat-8-2-1-monitoring-elasticsearch-8-2-1-template-issue/305649 "2022-05-26T22:07:40Z")
There appears to be a couple of issues with the Metricbeat 8.2.1 template for the Elasticsearch metric monitoring. I am running a newly built 8.2.1 cluster (in Docker) and attempting to use Metricbeat to gather Stack Mon… --- ## [What are your thoughts on data virtualization and how does it apply to elastic search?](https://discuss.elastic.co/t/what-are-your-thoughts-on-data-virtualization-and-how-does-it-apply-to-elastic-search/184831)
**Author:** [@barriersbill](https://discuss.elastic.co/u/barriersbill)\ **Replies:** 5\ **Last updated:** [June 9, 2019, 6:37am UTC](https://discuss.elastic.co/t/what-are-your-thoughts-on-data-virtualization-and-how-does-it-apply-to-elastic-search/184831 "2019-06-09T06:37:18Z")
Ive been looking at data virtualization technologies, is it really possible to use such type of solutions to connect to Elastic using SQL or even to join Elastic data with Splunk, RDBMS and other data solutions without e… --- ## [Alerting with actions in SIEM Detection Rules](https://discuss.elastic.co/t/alerting-with-actions-in-siem-detection-rules/221595)
**Author:** [@Or\_Biran](https://discuss.elastic.co/u/Or_Biran)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 9:47pm UTC](https://discuss.elastic.co/t/alerting-with-actions-in-siem-detection-rules/221595 "2020-03-06T21:47:04Z")
Hi, I'm trying to understand how can I add alerts with actions like Slack to the SIEM rules... The only way I found is to add a Watcher on the .siem indice.. but its not it, I want to get an actual alert to Slack with … [Previous page](https://discuss.elastic.co/top.md?page=1069&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1071&per_page=50&period=all)