# Top **URL:** https://discuss.elastic.co/top.md?page=1071&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1072 --- ## [Runtime field Create Nested Object](https://discuss.elastic.co/t/runtime-field-create-nested-object/312316)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 4\ **Last updated:** [September 14, 2022, 8:47am UTC](https://discuss.elastic.co/t/runtime-field-create-nested-object/312316 "2022-09-14T08:47:19Z")
Hello, I'm trying to create a run-time field which creates an array. I've been doing simple things like creating strings based on a conditional field but I can't seem to get the right syntax for a multi-value string obj… --- ## [How to recover streaming data even if the connection lost with Python client Elasticsearch?](https://discuss.elastic.co/t/how-to-recover-streaming-data-even-if-the-connection-lost-with-python-client-elasticsearch/237273)
**Author:** [@New\_user](https://discuss.elastic.co/u/New_user)\ **Replies:** 4\ **Last updated:** [June 18, 2020, 10:12am UTC](https://discuss.elastic.co/t/how-to-recover-streaming-data-even-if-the-connection-lost-with-python-client-elasticsearch/237273 "2020-06-18T10:12:44Z")
I stream RESTful API data from https://www.n2yo.com/api/ which for tracking satellite positions. I use python client with Elasticsearch. I save the streamed data to ES every 10 seconds and visualized by Kibana. My ES ves… --- ## [Split Filter Parse Failure - Only String and Array types are splittable](https://discuss.elastic.co/t/split-filter-parse-failure-only-string-and-array-types-are-splittable/219204)
**Author:** [@mohuss](https://discuss.elastic.co/u/mohuss)\ **Replies:** 4\ **Last updated:** [February 13, 2020, 1:54pm UTC](https://discuss.elastic.co/t/split-filter-parse-failure-only-string-and-array-types-are-splittable/219204 "2020-02-13T13:54:41Z")
I have this error with split filter in logstash . "Only String and Array types are splittable. field:\[log\] is of type = NilClass" I am trying to create events for each object in an array of objects but cannot figure ou… --- ## [Could not index event to Elasticsearch. - failed to parse \[host\]](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-host/147908)
**Author:** [@Victor\_Sava](https://discuss.elastic.co/u/Victor_Sava)\ **Replies:** 4\ **Last updated:** [September 11, 2018, 8:01am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-host/147908 "2018-09-11T08:01:32Z")
\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"point2homesiis-2018.09.10", :\_type=\>"iis", :\_routing=\>nil}, #\ **Author:** [@gmarshall56](https://discuss.elastic.co/u/gmarshall56)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 9:38pm UTC](https://discuss.elastic.co/t/array-definition-in-xcontentbuilder-causes-exception/140005 "2018-07-16T21:38:08Z") All: First, I plead guilty for being naive about setting up a mapping for an ES Index. Ultimately I would like to set up an aggregation on an array that I have defined in my mapping. See "pathWithType" here: … --- ## [Using scripted fields in filter range sub-aggregation](https://discuss.elastic.co/t/using-scripted-fields-in-filter-range-sub-aggregation/104546)
**Author:** [@A.McBride](https://discuss.elastic.co/u/A.McBride)\ **Replies:** 4\ **Last updated:** [October 24, 2017, 9:25am UTC](https://discuss.elastic.co/t/using-scripted-fields-in-filter-range-sub-aggregation/104546 "2017-10-24T09:25:59Z")
I'm making a table in Kibana and one of the things I want to be able to show is the count of documents that have the field "outcome" with a value "OVERRIDE" and a date range between some date and now. The outcome filter… --- ## [Failed to create query: maxClauseCount is set to 1024](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/316089)
**Author:** [@GuillermoDelaGala](https://discuss.elastic.co/u/GuillermoDelaGala)\ **Replies:** 1\ **Last updated:** [October 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/316089 "2022-10-07T14:51:32Z")
Hi everyone, first of all, saying that I'm quite new with Elasticsearch. I was diving into other similar issues related with my problem, but none of the solutions worked for me. My code has a query which says: failed… --- ## [Elasticsearch 8.x installation and configuration problem and elasticsearch service not able to start](https://discuss.elastic.co/t/elasticsearch-8-x-installation-and-configuration-problem-and-elasticsearch-service-not-able-to-start/312745)
**Author:** [@rjoshi28](https://discuss.elastic.co/u/rjoshi28)\ **Replies:** 1\ **Last updated:** [August 23, 2022, 10:48pm UTC](https://discuss.elastic.co/t/elasticsearch-8-x-installation-and-configuration-problem-and-elasticsearch-service-not-able-to-start/312745 "2022-08-23T22:48:18Z")
Hello guys, I have trouble installing and configuring my elasticsearch 8.x on Ubuntu 20.04 with ansible role. I am getting an error of Could not create auto-configuration directory with main ERROR Unable to create file… --- ## [Winlogbeat loses some events from Microsoft-IIS-Logging/Logs](https://discuss.elastic.co/t/winlogbeat-loses-some-events-from-microsoft-iis-logging-logs/227513)
**Author:** [@Ret](https://discuss.elastic.co/u/Ret)\ **Replies:** 1\ **Last updated:** [April 17, 2020, 7:10am UTC](https://discuss.elastic.co/t/winlogbeat-loses-some-events-from-microsoft-iis-logging-logs/227513 "2020-04-17T07:10:27Z")
Hi all, Issue: winlogbeat loses windows events from Microsoft-IIS-Logging/Logs Scenario: I collect the logs of the IIS in Windows Events. Then I send them to the elasticsearch with winlogbetat. But for some reason, wi… --- ## [Visualizing Cassandra data using Kibana](https://discuss.elastic.co/t/visualizing-cassandra-data-using-kibana/127243)
**Author:** [@Soheil\_Pourbafrani](https://discuss.elastic.co/u/Soheil_Pourbafrani)\ **Replies:** 1\ **Last updated:** [April 9, 2018, 7:53pm UTC](https://discuss.elastic.co/t/visualizing-cassandra-data-using-kibana/127243 "2018-04-09T19:53:02Z")
I have a multinode apache Cassandra, full of data and I want to visualize the data using Kibana. What is the best way for such situation? I've read about Elassandra, but I couldn't understand Elassandra is a plugin that … --- ## [Throttling write speed in ES-Hadoop Connector](https://discuss.elastic.co/t/throttling-write-speed-in-es-hadoop-connector/62528)
**Author:** [@Kamaldeep\_Singh](https://discuss.elastic.co/u/Kamaldeep_Singh)\ **Replies:** 1\ **Last updated:** [November 6, 2016, 11:57pm UTC](https://discuss.elastic.co/t/throttling-write-speed-in-es-hadoop-connector/62528 "2016-11-06T23:57:51Z")
Hello, I was working on ES - hadoop connector and I see that if you server has less memory writes keep on getting dropped. org.elasticsearch.hadoop.EsHadoopException: Could not write all entries (maybe ES was overload… --- ## [Quote\_char in csv filter plugin](https://discuss.elastic.co/t/quote-char-in-csv-filter-plugin/50042)
**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\ **Replies:** 1\ **Last updated:** [May 14, 2016, 8:21am UTC](https://discuss.elastic.co/t/quote-char-in-csv-filter-plugin/50042 "2016-05-14T08:21:51Z")
"^" as quote\_char not working. in the file fields are enclosed with the "^"; What are the possible values for the quote\_char Thanks in advance. --- ## [ERR Failed opening: too many open files](https://discuss.elastic.co/t/err-failed-opening-too-many-open-files/46733)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 10:17pm UTC](https://discuss.elastic.co/t/err-failed-opening-too-many-open-files/46733 "2016-04-07T22:17:04Z")
Hi, I am using logstash 2.3.0 and Filebeat 1.2.0. I have upgraded logstash-input-beats to 2.2.7. I ran filebeat using the below command /bin/filebeat -c /config/filebeat.yml -e -v "\*". I am getting below error. 2016… --- ## [Feature request kibana highlight off for a field](https://discuss.elastic.co/t/feature-request-kibana-highlight-off-for-a-field/252231)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 6:38am UTC](https://discuss.elastic.co/t/feature-request-kibana-highlight-off-for-a-field/252231 "2020-10-16T06:38:38Z")
Can there be option to disable highlight for a specific field of a index. Kibana gives a option to disable highlighting using doc table highlights off but it then applies to all the indexes. Atleast there should be an op… --- ## [Dynamic label in Timelion doesn't work as expected](https://discuss.elastic.co/t/dynamic-label-in-timelion-doesnt-work-as-expected/183249)
**Author:** [@Eduardo\_De\_Zulueta](https://discuss.elastic.co/u/Eduardo_De_Zulueta)\ **Replies:** 2\ **Last updated:** [May 30, 2019, 6:16am UTC](https://discuss.elastic.co/t/dynamic-label-in-timelion-doesnt-work-as-expected/183249 "2019-05-30T06:16:21Z")
Hi, I was trying to generate a Timelion graph using the split feature and also dynamic labels but the result is not as expected: .es(index=transaction.es\*, timefield='time',q='status:KO', split='site.keyword:10').multi… --- ## [Want to extract username from log and add it into TAG](https://discuss.elastic.co/t/want-to-extract-username-from-log-and-add-it-into-tag/147414)
**Author:** [@cleverrocks](https://discuss.elastic.co/u/cleverrocks)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 2:34pm UTC](https://discuss.elastic.co/t/want-to-extract-username-from-log-and-add-it-into-tag/147414 "2018-09-12T14:34:41Z")
Hi, I have a log with bellow pattern: 2018-09-05 11:50:56,152 - INFO - 103.8.115.242 - username1 - com.example.test.service.testService - \[ajp-nio-8009-exec-9\] - /testServiceCall/default/testPage \[page=default, compone… --- ## [Server start is very very long in dev mode](https://discuss.elastic.co/t/server-start-is-very-very-long-in-dev-mode/81705)
**Author:** [@Sebastien\_ROUL](https://discuss.elastic.co/u/Sebastien_ROUL)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 8:52pm UTC](https://discuss.elastic.co/t/server-start-is-very-very-long-in-dev-mode/81705 "2017-04-10T20:52:23Z")
Hi, Anybody know why the server (npm start) takes very long time to start ? server log \[13:49:49.838\] \[info\]\[status\]\[ui settings\] Status changed from red to green - Ready optmzr log \[14:01:07.493\] \[info\]\[op… --- ## [MetricBeat and FileBeat CPU overhead](https://discuss.elastic.co/t/metricbeat-and-filebeat-cpu-overhead/72215)
**Author:** [@rherr63](https://discuss.elastic.co/u/rherr63)\ **Replies:** 2\ **Last updated:** [January 27, 2017, 5:00pm UTC](https://discuss.elastic.co/t/metricbeat-and-filebeat-cpu-overhead/72215 "2017-01-27T17:00:51Z")
Looking to deploy MetricBeat and FileBeat on potentially 1000's of AWS Linux EC2 instances. Is there a published CPU overhead number for each of these agents? Obviously, developers are concerned about the agentry consumi… --- ## [Logstash not parsing data thats not brand new](https://discuss.elastic.co/t/logstash-not-parsing-data-thats-not-brand-new/50484)
**Author:** [@Ambrose](https://discuss.elastic.co/u/Ambrose)\ **Replies:** 2\ **Last updated:** [May 20, 2016, 2:38pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-data-thats-not-brand-new/50484 "2016-05-20T14:38:20Z")
Hello, My Logstash to Elasticsearch workflow works fine, but only if I take the logs I am sending to Elasticsearch, open them in a text editor, delete them in the original location, and save them back to the area where … --- ## [How to setup tags?](https://discuss.elastic.co/t/how-to-setup-tags/31454)
**Author:** [@mne](https://discuss.elastic.co/u/mne)\ **Replies:** 2\ **Last updated:** [October 5, 2015, 7:38am UTC](https://discuss.elastic.co/t/how-to-setup-tags/31454 "2015-10-05T07:38:29Z")
Hi all, i'm trying to configure logstash-forwarder to send a tag with every event, but it fails: I've tried: "fields": { "type": "eslog" }, "tags": \[ "esnode1" \] But this seems to be ignored... If i add it as field e… --- ## ["Elastic did not load properly". Kibana failed loading in Browser](https://discuss.elastic.co/t/elastic-did-not-load-properly-kibana-failed-loading-in-browser/268043)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 2:39pm UTC](https://discuss.elastic.co/t/elastic-did-not-load-properly-kibana-failed-loading-in-browser/268043 "2021-03-29T14:39:22Z")
I have tried installing Elasticsearch and kibana in centos7. Both of them are working fine. But when it come to loading kibana on browser we get the error " Elastic did not load properly. Check the server output for more… --- ## [Deletion in ES getting 403](https://discuss.elastic.co/t/deletion-in-es-getting-403/240915)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 10:42am UTC](https://discuss.elastic.co/t/deletion-in-es-getting-403/240915 "2020-07-13T10:42:44Z")
trying to delete from es using this query POST /logstash-2020.06.17/\_delete\_by\_query { "query": { "match": { "tags": "AuditLog" } } } getting this error message { "took": 62, "timed\_out": false, … --- ## [Node stops responding if remote monitoring cluster is unresponsive](https://discuss.elastic.co/t/node-stops-responding-if-remote-monitoring-cluster-is-unresponsive/88588)
**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\ **Replies:** 3\ **Last updated:** [June 12, 2017, 7:23am UTC](https://discuss.elastic.co/t/node-stops-responding-if-remote-monitoring-cluster-is-unresponsive/88588 "2017-06-12T07:23:31Z")
We have multiple clusters that export monitoring data to a remote cluster. When the target configured in elasticsearch.yml became unavailable and requests to it were timing out (I believe this is an important factor - i… --- ## [Stalled pipeline breaks source file with logrotation](https://discuss.elastic.co/t/stalled-pipeline-breaks-source-file-with-logrotation/28642)
**Author:** [@lane](https://discuss.elastic.co/u/lane)\ **Replies:** 3\ **Last updated:** [September 17, 2015, 6:46pm UTC](https://discuss.elastic.co/t/stalled-pipeline-breaks-source-file-with-logrotation/28642 "2015-09-17T18:46:05Z")
This system is running in a Production environment so I wont cause the error but if it happens again I'll try to get more info. This is what I do have. I am running logstash 1.5 on Redhat 6 with the a file input and Re… --- ## [How to integrate kibana dashboards as a widget to other javascript based native UI](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboards-as-a-widget-to-other-javascript-based-native-ui/320265)
**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\ **Replies:** 6\ **Last updated:** [December 7, 2022, 10:03pm UTC](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboards-as-a-widget-to-other-javascript-based-native-ui/320265 "2022-12-07T22:03:39Z")
Is there any easy way to integrate Kibana dashboard / panel as a widget to third party UI(developed using the react js etc ). We dont want user to navigate to kibana from our native apps and instead show the dashboards … --- ## [New Unassigned shards every day](https://discuss.elastic.co/t/new-unassigned-shards-every-day/108089)
**Author:** [@Tino\_Zidore](https://discuss.elastic.co/u/Tino_Zidore)\ **Replies:** 6\ **Last updated:** [November 17, 2017, 9:49am UTC](https://discuss.elastic.co/t/new-unassigned-shards-every-day/108089 "2017-11-17T09:49:17Z")
Hi I have installed ELK stack and it has been running great. I followed this guide for the setup: http://pfelk.3ilson.com/ I needed a grok debugger and therefore I installed x-pack with a basic license. When installi… --- ## [HDFS as elastic search data repository](https://discuss.elastic.co/t/hdfs-as-elastic-search-data-repository/46056)
**Author:** [@yogeshmsharma](https://discuss.elastic.co/u/yogeshmsharma)\ **Replies:** 6\ **Last updated:** [April 13, 2016, 2:16pm UTC](https://discuss.elastic.co/t/hdfs-as-elastic-search-data-repository/46056 "2016-04-13T14:16:16Z")
For large volume of logs we are thinking of using HDFS as data repository for elastic search. apache flume is one of option suggested by few blogs on internet. Would like to get more information from community on this… --- ## [Search, then remove data for the results](https://discuss.elastic.co/t/search-then-remove-data-for-the-results/23584)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 6\ **Last updated:** [May 8, 2015, 3:44pm UTC](https://discuss.elastic.co/t/search-then-remove-data-for-the-results/23584 "2015-05-08T15:44:53Z")
I am looking for assistance. I have an elasticsearch cluster that has an index called 'foo'. Within foo, I have a ton of information that contains the string "Error in the RPC receive". I need to do a search for… --- ## [Configuring filebeat logstash plugin to transform one log, but not another](https://discuss.elastic.co/t/configuring-filebeat-logstash-plugin-to-transform-one-log-but-not-another/160945)
**Author:** [@swright-eti](https://discuss.elastic.co/u/swright-eti)\ **Replies:** 7\ **Last updated:** [December 14, 2018, 8:59pm UTC](https://discuss.elastic.co/t/configuring-filebeat-logstash-plugin-to-transform-one-log-but-not-another/160945 "2018-12-14T20:59:10Z")
I have hosts that have log files in different formats, Vision, and Triad. They are being collected by Filebeat and shipped to Logstash. I have a Logstash config file setup for Beats as shown in the docs. At this point it… --- ## [Can Filebeat send plain text instead of JSON](https://discuss.elastic.co/t/can-filebeat-send-plain-text-instead-of-json/106272)
**Author:** [@jmcjmcjmc](https://discuss.elastic.co/u/jmcjmcjmc)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 11:22am UTC](https://discuss.elastic.co/t/can-filebeat-send-plain-text-instead-of-json/106272 "2017-11-03T11:22:36Z")
Filebeat currently wraps all message in logfile in JSON format. Is it possible to ask it send the message as is? --- ## [Highlighting and text\_expansion query](https://discuss.elastic.co/t/highlighting-and-text-expansion-query/334679)
**Author:** [@Mark\_Harwood1](https://discuss.elastic.co/u/Mark_Harwood1)\ **Replies:** 2\ **Last updated:** [June 3, 2023, 2:04pm UTC](https://discuss.elastic.co/t/highlighting-and-text-expansion-query/334679 "2023-06-03T14:04:54Z")
Playing with the new ELSER model and the text\_expansion query in 8.8 which looks to be matching OK. Now I want end users to understand why documents matched but can't get highlighting to work. Does it? I've tried settin… --- ## [Custom integration](https://discuss.elastic.co/t/custom-integration/324819)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 2\ **Last updated:** [February 22, 2023, 3:30pm UTC](https://discuss.elastic.co/t/custom-integration/324819 "2023-02-22T15:30:04Z")
Hi, I would like to build my own custom elastic integration for a self managed elk. I read documentation here: https://www.elastic.co/guide/en/integrations-developer I would like to know if the only way to use that in… --- ## [Logstash Elasticsearch Reindexing Question](https://discuss.elastic.co/t/logstash-elasticsearch-reindexing-question/22179)
**Author:** [@sumithub](https://discuss.elastic.co/u/sumithub)\ **Replies:** 2\ **Last updated:** [February 23, 2015, 10:29pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-reindexing-question/22179 "2015-02-23T22:29:49Z")
I'm new to logstash and trying to make a proof of concept to reindex an already created Index (This index is not logs but standard files like .doc/pdf/emails etc). It will be greatly appreciated if you answer my qu… --- ## [Get all value for a field with the JAVA API](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 5\ **Last updated:** [January 6, 2023, 6:19pm UTC](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566 "2023-01-06T18:19:21Z")
Hello, How can i get all the value that correspond to a specific field ? For example i want all the existing value for the field "affaireName", check the exemple below : SearchRequest request = SearchRequest.of(a -\> a… --- ## [Create dashboard with multiple visualizations based on field value](https://discuss.elastic.co/t/create-dashboard-with-multiple-visualizations-based-on-field-value/308372)
**Author:** [@elni](https://discuss.elastic.co/u/elni)\ **Replies:** 5\ **Last updated:** [June 30, 2022, 10:27am UTC](https://discuss.elastic.co/t/create-dashboard-with-multiple-visualizations-based-on-field-value/308372 "2022-06-30T10:27:16Z")
I have a line chart which is split based on a specific id as below. What I would really like however is that each line will appear alone in a separate chart/visualization within a dashboard based on a term filter. Is t… --- ## [Snapshot Policy Change not Deleting Old Snapshots](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 8:17am UTC](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531 "2022-03-24T08:17:42Z")
Elastic 7.6.2 We changed our snapshot policy to only keep max 5 snapshots (down from 14). Nothing happened. We ran the snapshot (from Kibana) and a new snapshot was generated. Nothing was deleted and no errors were show… --- ## [Sum bucket of filters no longer works in kibana 7.11](https://discuss.elastic.co/t/sum-bucket-of-filters-no-longer-works-in-kibana-7-11/265207)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 6:28pm UTC](https://discuss.elastic.co/t/sum-bucket-of-filters-no-longer-works-in-kibana-7-11/265207 "2021-02-23T18:28:40Z")
Since upgrading to kibana 7.11 my sibling sum bucket aggregations no longer work. Following upgrade the visualisations that were previously working were all blank. I am trying now to recreate the same visualisations as… --- ## [Override index name while using the inbuilt filebeat modules](https://discuss.elastic.co/t/override-index-name-while-using-the-inbuilt-filebeat-modules/240855)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 5\ **Last updated:** [July 13, 2020, 12:31pm UTC](https://discuss.elastic.co/t/override-index-name-while-using-the-inbuilt-filebeat-modules/240855 "2020-07-13T12:31:14Z")
We are in process of standardising index names to ensure permissions are given correctly (eg my\_os\_windows\_yyyy-mm-dd, my\_os\_linux\_yyyy-mm-dd, my\_network\_cisco\_yyyy-mm-dd etc..) rather than the default "filebeat\*" form… --- ## ["does not contain any of the following compatible field types: ip"](https://discuss.elastic.co/t/does-not-contain-any-of-the-following-compatible-field-types-ip/226476)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 8\ **Last updated:** [April 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/does-not-contain-any-of-the-following-compatible-field-types-ip/226476 "2020-04-13T14:22:15Z")
How can I define IP? Accually I have both, IPv4 and IPv6, but looks like in Kibana can I use CIDR notation for IPv4 only, what in fact is fine. But my field name is like "layers.ip.ip\_src" and I am goting error: The in… --- ## [Watcher Condition Returning "Null"](https://discuss.elastic.co/t/watcher-condition-returning-null/195640)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 8\ **Last updated:** [August 19, 2019, 11:08am UTC](https://discuss.elastic.co/t/watcher-condition-returning-null/195640 "2019-08-19T11:08:17Z")
Hi everyone, My condition is currently returning "null", however I know there are documents. Can you please help me in figuring out why it's returning "null"? // My watcher code thus far: // Stimulated results out… --- ## [.kibana index is not created bydefault](https://discuss.elastic.co/t/kibana-index-is-not-created-bydefault/135848)
**Author:** [@Akhilesh-Tiwari](https://discuss.elastic.co/u/Akhilesh-Tiwari)\ **Replies:** 8\ **Last updated:** [June 14, 2018, 8:20am UTC](https://discuss.elastic.co/t/kibana-index-is-not-created-bydefault/135848 "2018-06-14T08:20:27Z")
Hi all, After successful installation of ELK\_6.2.4 and Kibana\_6.2.4,i am starting the kibana and elasticsearch but befault index(.kibana) is not creating by kibana. can anyone help me out. --- ## [Facing TLS handshake error in Fleet server elastic agent logs](https://discuss.elastic.co/t/facing-tls-handshake-error-in-fleet-server-elastic-agent-logs/356398)
**Author:** [@Shayan\_Ahmed](https://discuss.elastic.co/u/Shayan_Ahmed)\ **Replies:** 4\ **Last updated:** [April 5, 2024, 3:21pm UTC](https://discuss.elastic.co/t/facing-tls-handshake-error-in-fleet-server-elastic-agent-logs/356398 "2024-04-05T15:21:34Z")
Hi all, I have configured a Fleet server on my EC2. All setup is working fine, but currently, I am facing a TLS handshake error in the Fleet server elastic agent logs. {"log.level":"error","service.name":"fleet-server"… --- ## [How to filter in filebeat](https://discuss.elastic.co/t/how-to-filter-in-filebeat/221265)
**Author:** [@D\_Gupta](https://discuss.elastic.co/u/D_Gupta)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 9:15am UTC](https://discuss.elastic.co/t/how-to-filter-in-filebeat/221265 "2020-02-28T09:15:59Z")
Hi, Below message I'm getting from filebeat (7.0.1). I want to filter it in different line. How we can do it in filebeat.yml file? any help will be appreciable. t log.flags multiline t message Audit… --- ## [Print Date & time on charts](https://discuss.elastic.co/t/print-date-time-on-charts/78068)
**Author:** [@warunac](https://discuss.elastic.co/u/warunac)\ **Replies:** 4\ **Last updated:** [May 4, 2017, 3:08am UTC](https://discuss.elastic.co/t/print-date-time-on-charts/78068 "2017-05-04T03:08:46Z")
Hello, I have tried X-Pack reporting tool it is only generating pdf what we can see on graphs. but I need to get more detailed graphs report with date and time Can I print date and time on Kibana line charts? I have… --- ## [ES cluster fails at random times](https://discuss.elastic.co/t/es-cluster-fails-at-random-times/67380)
**Author:** [@imewish](https://discuss.elastic.co/u/imewish)\ **Replies:** 4\ **Last updated:** [December 1, 2016, 12:41am UTC](https://discuss.elastic.co/t/es-cluster-fails-at-random-times/67380 "2016-12-01T00:41:42Z")
Hi, we have a elasticsearch cluster with, 2 client nodes(m4.large with 50gb storage/each node), 4 data node(m4.large with 1TB storage per each node). We have been sending our ROR app logs, ELB logs to this cluster, thr… --- ## [Connection Reset to Logstash](https://discuss.elastic.co/t/connection-reset-to-logstash/337242)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [June 30, 2023, 7:23pm UTC](https://discuss.elastic.co/t/connection-reset-to-logstash/337242 "2023-06-30T19:23:01Z")
Trying to send Metricbeat to Logstash. Metricbeat logs don't throw any errors, but Logstash shows the following: \[2023-06-29T15:30:02,110\]\[INFO \]\[org.logstash.beats.BeatsHandler\] \[local: 192.168.1.78:5045, remote: 192.… --- ## [APM Python: request body too large](https://discuss.elastic.co/t/apm-python-request-body-too-large/304418)
**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 1:59pm UTC](https://discuss.elastic.co/t/apm-python-request-body-too-large/304418 "2022-05-12T13:59:27Z")
Kibana version: 7.17 Elasticsearch version: 7.17 APM Server version: 7.15 APM Agent language and version: Python, v6.3.3 Hi, it happens a few times a day that the application throws an exception that can't be inspec… --- ## [Clear filters](https://discuss.elastic.co/t/clear-filters/229388)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 2\ **Last updated:** [April 23, 2020, 8:03am UTC](https://discuss.elastic.co/t/clear-filters/229388 "2020-04-23T08:03:22Z")
I have filtered some field in kibana dashboard, instead of closing that filter is there any way to clear the filter using any clear option or clear button in kibana. Please help me out. Thank you! --- ## [How to compare two aggregations buckets in watcher](https://discuss.elastic.co/t/how-to-compare-two-aggregations-buckets-in-watcher/135640)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 2\ **Last updated:** [June 13, 2018, 3:08pm UTC](https://discuss.elastic.co/t/how-to-compare-two-aggregations-buckets-in-watcher/135640 "2018-06-13T15:08:58Z")
Hi Please let me know how i can compare two different aggregations buckets, i am only able to compare one bucket with one static value but i need to compare all values of two different aggregations buckets. which shoul… --- ## [How to speed up indexing by using Python API](https://discuss.elastic.co/t/how-to-speed-up-indexing-by-using-python-api/17670)
**Author:** [@11149](https://discuss.elastic.co/u/11149)\ **Replies:** 2\ **Last updated:** [May 22, 2014, 1:35pm UTC](https://discuss.elastic.co/t/how-to-speed-up-indexing-by-using-python-api/17670 "2014-05-22T13:35:26Z")
Hi all: Now , I am trying to index my logs by using the elasticsearch Python API, but I only get about 600 records/s indexing speed. but, on the same ES cluster, with the same data, logstash(redis -\> logstash -… [Previous page](https://discuss.elastic.co/top.md?page=1070&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1072&per_page=50&period=all)