# Top

**URL:** https://discuss.elastic.co/top.md?page=1074&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1075

---

## [Logstash Filter to convert comma separated syslog message body to JSON format](https://discuss.elastic.co/t/logstash-filter-to-convert-comma-separated-syslog-message-body-to-json-format/173959)

<div class="topic-metadata">

**Author:** [@akj01](https://discuss.elastic.co/u/akj01)\
**Replies:** 3\
**Last updated:** [March 27, 2019, 10:35am UTC](https://discuss.elastic.co/t/logstash-filter-to-convert-comma-separated-syslog-message-body-to-json-format/173959 "2019-03-27T10:35:45Z")

</div>

We have one of the application server forwarding syslog to logstash. The "message" body of the log contains few unwanted fields inserted by the application server and remaining required fields as well. Providing below th…

---

## [Title of visualization](https://discuss.elastic.co/t/title-of-visualization/111128)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 3\
**Last updated:** [December 12, 2017, 2:11pm UTC](https://discuss.elastic.co/t/title-of-visualization/111128 "2017-12-12T14:11:48Z")

</div>

Hi at All, I vould lik kno is it possibole if I can not display the titles of the displays of visualization in a daschboard. I attach an Image. thank you so much \`\`\[titoli da eliminare se possibile\]\`

---

## [Exception while inserting the document](https://discuss.elastic.co/t/exception-while-inserting-the-document/24905)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 3\
**Last updated:** [February 21, 2016, 3:10am UTC](https://discuss.elastic.co/t/exception-while-inserting-the-document/24905 "2016-02-21T03:10:52Z")

</div>

Hi All, I am using ES 1.4.4. and Java 8. Both running on the same machine. Below is the exception when I am trying to insert recored using Java Client. 04-Jul-2015 16:07:40,380 ERROR com.x.x.x Failed to save event: or…

---

## [Logstash is not starting.. i have installed a new version of Logstash 7.16.1 , it crashes saying fatal error](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026)

<div class="topic-metadata">

**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\
**Replies:** 6\
**Last updated:** [December 17, 2021, 5:05am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026 "2021-12-17T05:05:27Z")

</div>

Logstash is not starting, I have installed Logstash 7.16.1, this is the error i am getting in logstash \[2021-12-15T17:28:43,113\]\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources. \[2…

---

## [How to connect Uipath Orchestrator with Kibana?](https://discuss.elastic.co/t/how-to-connect-uipath-orchestrator-with-kibana/191750)

<div class="topic-metadata">

**Author:** [@Ayanti\_Dey](https://discuss.elastic.co/u/Ayanti_Dey)\
**Replies:** 2\
**Last updated:** [July 23, 2019, 12:26pm UTC](https://discuss.elastic.co/t/how-to-connect-uipath-orchestrator-with-kibana/191750 "2019-07-23T12:26:50Z")

</div>

How to visualize the log files a bot is generating in the orchestrator in Kibana? The project.JSON files I'm importing in from Uipath is not supporting the fomat. How should I resolve this?

---

## [How to change single-node-cluster to 3 node cluster?](https://discuss.elastic.co/t/how-to-change-single-node-cluster-to-3-node-cluster/186633)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 1:32pm UTC](https://discuss.elastic.co/t/how-to-change-single-node-cluster-to-3-node-cluster/186633 "2019-06-20T13:32:58Z")

</div>

Hi, If I decide to start with a single node ES cluster (version 7.1.1) where I set discovery.type to single-node. What is the path to go for migrate this cluster to a 3 node cluster? All data of the cluster needs to be…

---

## [Heartbeat to Monitor FTP Server Status](https://discuss.elastic.co/t/heartbeat-to-monitor-ftp-server-status/170073)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 2\
**Last updated:** [March 5, 2019, 5:51pm UTC](https://discuss.elastic.co/t/heartbeat-to-monitor-ftp-server-status/170073 "2019-03-05T17:51:43Z")

</div>

Is there a way to monitor the status of an FTP server using heartbeat? There isn't an ftp monitor type like there is for http

---

## [Apple\_touch\_icon\_url is invalid](https://discuss.elastic.co/t/apple-touch-icon-url-is-invalid/115183)

<div class="topic-metadata">

**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 11:23pm UTC](https://discuss.elastic.co/t/apple-touch-icon-url-is-invalid/115183 "2018-01-11T23:23:29Z")

</div>

You'll need to fix your apple\_touch\_icon\_url - it's set to the following which is invalid: https://www.elastic.co/apple-touch-icon-144x144.png. It's also used in onebox links: \[image\]

---

## [Logstash reads beyond "message" field when using GREEDYDATA](https://discuss.elastic.co/t/logstash-reads-beyond-message-field-when-using-greedydata/105628)

<div class="topic-metadata">

**Author:** [@sidhant](https://discuss.elastic.co/u/sidhant)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 4:26am UTC](https://discuss.elastic.co/t/logstash-reads-beyond-message-field-when-using-greedydata/105628 "2017-10-30T04:26:21Z")

</div>

Hi, I recently stumbled upon this issue with GREEDYDATA in Logstash grok filter, and I'm not sure if I'm doing something wrong or if it's a general bug. It appears that when a grok match pattern ends with %{GREEDYDATA},…

---

## [How to create chart/table of top n busiest periods by time interval period](https://discuss.elastic.co/t/how-to-create-chart-table-of-top-n-busiest-periods-by-time-interval-period/27742)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 2\
**Last updated:** [August 25, 2015, 8:51pm UTC](https://discuss.elastic.co/t/how-to-create-chart-table-of-top-n-busiest-periods-by-time-interval-period/27742 "2015-08-25T20:51:45Z")

</div>

Hi Guys, I'm still pretty new to Kibana so apologies in advance if this is obvious. I'm processing a set of Apache access logs and have no trouble with the histogram showing access requests over time. What I'd like t…

---

## [Lots of filter cache evictions in Elasticsearch when used with Kibana](https://discuss.elastic.co/t/lots-of-filter-cache-evictions-in-elasticsearch-when-used-with-kibana/27750)

<div class="topic-metadata">

**Author:** [@widhalm\_t](https://discuss.elastic.co/u/widhalm_t)\
**Replies:** 2\
**Last updated:** [August 25, 2015, 9:17am UTC](https://discuss.elastic.co/t/lots-of-filter-cache-evictions-in-elasticsearch-when-used-with-kibana/27750 "2015-08-25T09:17:40Z")

</div>

Hi there! I'm seeing lot's of filter cache evictions in Elasticsearch 1.7.1 when I use some more complex Dashboards in Kibana 4.1.1. When I restart the whole cluster (it's a testing environment) it takes about 4 hours …

---

## [Remove analyzer for a particular field](https://discuss.elastic.co/t/remove-analyzer-for-a-particular-field/11518)

<div class="topic-metadata">

**Author:** [@kazoompa\_2](https://discuss.elastic.co/u/kazoompa_2)\
**Replies:** 2\
**Last updated:** [April 10, 2013, 2:06pm UTC](https://discuss.elastic.co/t/remove-analyzer-for-a-particular-field/11518 "2013-04-10T14:06:19Z")

</div>

Hi, After reading the response of Kimchy in this thread: http://elasticsearch-users.115913.n3.nabble.com/Disabling-default-analyzer-tt2932819.html#a2937844 I tried to apply it to my default settings YAML file exc…

---

## [More input based on first input(Multiple pipelines?)](https://discuss.elastic.co/t/more-input-based-on-first-input-multiple-pipelines/215442)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 7\
**Last updated:** [January 20, 2020, 11:05am UTC](https://discuss.elastic.co/t/more-input-based-on-first-input-multiple-pipelines/215442 "2020-01-20T11:05:03Z")

</div>

I am currently looking to build a solution, where I can load input based on some other input. So my setup is that I have two inputs: The data I need The timestamp of the latest update of this data I only want to get t…

---

## [How to get XPACK running for Detecting DNS Data Exfiltration](https://discuss.elastic.co/t/how-to-get-xpack-running-for-detecting-dns-data-exfiltration/202962)

<div class="topic-metadata">

**Author:** [@octogar](https://discuss.elastic.co/u/octogar)\
**Replies:** 7\
**Last updated:** [October 17, 2019, 9:21am UTC](https://discuss.elastic.co/t/how-to-get-xpack-running-for-detecting-dns-data-exfiltration/202962 "2019-10-17T09:21:23Z")

</div>

On this page: https://www.elastic.co/what-is/elasticsearch-machine-learning/recipes/dns-data-exfiltration-tunneling ..when you click on the example there are directions: https://github.com/elastic/examples/blob/master/M…

---

## [Unable to install log4j2 plugin into Logstash](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428)

<div class="topic-metadata">

**Author:** [@john.jensen](https://discuss.elastic.co/u/john.jensen)\
**Replies:** 7\
**Last updated:** [January 30, 2019, 10:52pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428 "2019-01-30T22:52:26Z")

</div>

I'm trying to use log4j2 to send messages to our Logstash instance. I'm running this command: bin\\logstash -r -p "C:\\elasticsearch\_course\\logstash-input-log4j2" -f "C:\\elasticsearch\_course\\logstash\_data\\test.conf" The…

---

## [Kibana web page Authentication Exception](https://discuss.elastic.co/t/kibana-web-page-authentication-exception/137335)

<div class="topic-metadata">

**Author:** [@Aifeng1214](https://discuss.elastic.co/u/Aifeng1214)\
**Replies:** 1\
**Last updated:** [June 26, 2018, 6:09am UTC](https://discuss.elastic.co/t/kibana-web-page-authentication-exception/137335 "2018-06-26T06:09:41Z")

</div>

Hi all, I'm new to ELK and I'm using filebeat to harvest log data and send them to elasticsearch and use kibana to show data. And I use search guard to enable HTTPS and basic auth for elasticsearch. After configing htt…

---

## [Filebeats not sendind any logs](https://discuss.elastic.co/t/filebeats-not-sendind-any-logs/113916)

<div class="topic-metadata">

**Author:** [@Arthur\_Silva\_Sens](https://discuss.elastic.co/u/Arthur_Silva_Sens)\
**Replies:** 1\
**Last updated:** [January 3, 2018, 12:13pm UTC](https://discuss.elastic.co/t/filebeats-not-sendind-any-logs/113916 "2018-01-03T12:13:19Z")

</div>

Hello, My filebeat instance is not sending any logs and not giving me any information why. Here are my filebeats.yml: filebeat.prospectors: - type: log enabled: false tags: \["DOCKER"\] paths: - /var/log/messa…

---

## [How to upgrade elasticsearch cluster from 7.9 to 8.13 without data loss](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-cluster-from-7-9-to-8-13-without-data-loss/356606)

<div class="topic-metadata">

**Author:** [@Krishna\_Sailesh](https://discuss.elastic.co/u/Krishna_Sailesh)\
**Replies:** 3\
**Last updated:** [April 2, 2024, 12:24pm UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-cluster-from-7-9-to-8-13-without-data-loss/356606 "2024-04-02T12:24:51Z")

</div>

Hi I am running Elasticsearch with a 3-node cluster with 7.9.2 version which contains some huge data. I need to upgrade it to 8.10.3 without the data loss. can someone help me with how to do it? Thanks Krishna

---

## [How to logstash filter xml](https://discuss.elastic.co/t/how-to-logstash-filter-xml/215680)

<div class="topic-metadata">

**Author:** [@peacher](https://discuss.elastic.co/u/peacher)\
**Replies:** 8\
**Last updated:** [January 21, 2020, 2:44am UTC](https://discuss.elastic.co/t/how-to-logstash-filter-xml/215680 "2020-01-21T02:44:56Z")

</div>

Hi, i have logstash config input { file { path =\> \["/mnt/data/\*/\*.xml"\] start\_position =\> beginning #sincedb\_path =\> "/opt/logstash/sincedb-xml49" sincedb\_path =\> "/dev/null" …

---

## [RAID 0 vs multiple path.data in ES 2.4.0](https://discuss.elastic.co/t/raid-0-vs-multiple-path-data-in-es-2-4-0/66630)

<div class="topic-metadata">

**Author:** [@avaneeshr](https://discuss.elastic.co/u/avaneeshr)\
**Replies:** 3\
**Last updated:** [November 20, 2016, 7:29am UTC](https://discuss.elastic.co/t/raid-0-vs-multiple-path-data-in-es-2-4-0/66630 "2016-11-20T07:29:45Z")

</div>

Hi everyone. I have a 3-data-node ES cluster, hosted in the cloud (AWS). All three nodes have identical config and hardware resources. I am using three general purpose (GP2) SSDs in the following config on each box: 1TB…

---

## [Perofrmance problem on es-hive two table join](https://discuss.elastic.co/t/perofrmance-problem-on-es-hive-two-table-join/46994)

<div class="topic-metadata">

**Author:** [@bluesea](https://discuss.elastic.co/u/bluesea)\
**Replies:** 3\
**Last updated:** [April 21, 2016, 6:10am UTC](https://discuss.elastic.co/t/perofrmance-problem-on-es-hive-two-table-join/46994 "2016-04-21T06:10:32Z")

</div>

Hi all: I use es-hive to execute two big table join, hive pull all data from es, it's very slow. I use jstack to print the process information: I found it's very slow to pull data from es through http, how about tra…

---

## [ES 2.2.0 - Customizing the plugin location (path.plugins) on Windows Server 2012 R2](https://discuss.elastic.co/t/es-2-2-0-customizing-the-plugin-location-path-plugins-on-windows-server-2012-r2/44821)

<div class="topic-metadata">

**Author:** [@heeln](https://discuss.elastic.co/u/heeln)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 4:46pm UTC](https://discuss.elastic.co/t/es-2-2-0-customizing-the-plugin-location-path-plugins-on-windows-server-2012-r2/44821 "2016-03-18T16:46:25Z")

</div>

I've struggled with trying to configure a customized path for the plugins in Elasticsearch 2.2.0, on a fresh Windows Server 2012 R2 host. Summary Although I specify path.plugins, and Elasticsearch confirms this configur…

---

## [TTL doesn't work after installing Shield](https://discuss.elastic.co/t/ttl-doesnt-work-after-installing-shield/301)

<div class="topic-metadata">

**Author:** [@JensP](https://discuss.elastic.co/u/JensP)\
**Replies:** 3\
**Last updated:** [May 7, 2015, 1:32pm UTC](https://discuss.elastic.co/t/ttl-doesnt-work-after-installing-shield/301 "2015-05-07T13:32:10Z")

</div>

I've added a TTL field to my mapping: "\_ttl": {"enabled": true,"default": "1m"}. But Elasticsearch doesn't delete the documents after the given time. (waited +30min) When i test the same thing without the shield plugin…

---

## [Kibana Development 7.15 Yarn Bootstrap Fails no native build was found for platform=linux](https://discuss.elastic.co/t/kibana-development-7-15-yarn-bootstrap-fails-no-native-build-was-found-for-platform-linux/288282)

<div class="topic-metadata">

**Author:** [@Jsof](https://discuss.elastic.co/u/Jsof)\
**Replies:** 4\
**Last updated:** [November 10, 2021, 1:47am UTC](https://discuss.elastic.co/t/kibana-development-7-15-yarn-bootstrap-fails-no-native-build-was-found-for-platform-linux/288282 "2021-11-10T01:47:28Z")

</div>

Hi, i am trying to get kibana development environment for kibana 7.15 running but i keep getting the error below when running "yarn kbn boostrap". I am running the dev environment on CentOS Linux release 7.8.2003 \[vsco…

---

## [Distributed trace, parent transaction ending before child distributed span comes back](https://discuss.elastic.co/t/distributed-trace-parent-transaction-ending-before-child-distributed-span-comes-back/202426)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 1\
**Last updated:** [October 5, 2019, 1:21pm UTC](https://discuss.elastic.co/t/distributed-trace-parent-transaction-ending-before-child-distributed-span-comes-back/202426 "2019-10-05T13:21:13Z")

</div>

Hello I have a distributed trace that is basically a main transaction that calls an external endpoint that is responsible for some Mongo DB integration. The thing is, I'm trying to understand why currently my main trans…

---

## [Elasticsearch cluster does not show all nodes](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181)

<div class="topic-metadata">

**Author:** [@Ofer\_Peled](https://discuss.elastic.co/u/Ofer_Peled)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181 "2019-08-26T13:58:20Z")

</div>

Hi there, Although I am using the docker compose attached, I see ONLY ONE node in my elasticsearch cluster (running http://X.X.X.X:9200/\_cat/nodes?v) Nothing suspicious in the logs. Any idea what am I doing wrong. …

---

## [Kibana and Chrome login problem](https://discuss.elastic.co/t/kibana-and-chrome-login-problem/122276)

<div class="topic-metadata">

**Author:** [@vickramj](https://discuss.elastic.co/u/vickramj)\
**Replies:** 4\
**Last updated:** [March 6, 2018, 9:51pm UTC](https://discuss.elastic.co/t/kibana-and-chrome-login-problem/122276 "2018-03-06T21:51:02Z")

</div>

I've just installed Kibana 6.2.2 on Ubuntu, along with the XPack plugin to secure my install. I'm experiencing a weird problem where if I log in as "User A", I show as being the "kibana" user along with that user's secu…

---

## [Logstash pipelines isolation](https://discuss.elastic.co/t/logstash-pipelines-isolation/112443)

<div class="topic-metadata">

**Author:** [@Martin\_Duris](https://discuss.elastic.co/u/Martin_Duris)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 3:32pm UTC](https://discuss.elastic.co/t/logstash-pipelines-isolation/112443 "2017-12-19T15:32:44Z")

</div>

Hi guys, i have logstash (v6) where i am using 2 pipelines, defined like this: - pipeline.id: pipe1 path.config: "/etc/logstash/conf.d/pipelines/pipe1.conf" pipeline.workers: 1 - pipeline.id: pipe2 path.config: "…

---

## ["Drop\_event" does not work](https://discuss.elastic.co/t/drop-event-does-not-work/105755)

<div class="topic-metadata">

**Author:** [@AmosChen](https://discuss.elastic.co/u/AmosChen)\
**Replies:** 4\
**Last updated:** [November 1, 2017, 2:20am UTC](https://discuss.elastic.co/t/drop-event-does-not-work/105755 "2017-11-01T02:20:00Z")

</div>

Hello I have a filter in my metricbeat.yml,part of the config file like this: - module: system metricsets: \[network\] enabled: true filters: - drop\_event.when.equals.system.network.name: lo I want to drop the…

---

## [Heartbeat not starting when second monitor is added](https://discuss.elastic.co/t/heartbeat-not-starting-when-second-monitor-is-added/77360)

<div class="topic-metadata">

**Author:** [@dkris1](https://discuss.elastic.co/u/dkris1)\
**Replies:** 4\
**Last updated:** [March 10, 2017, 3:14pm UTC](https://discuss.elastic.co/t/heartbeat-not-starting-when-second-monitor-is-added/77360 "2017-03-10T15:14:36Z")

</div>

Hi I'm new to ELK stack . Im Using ELK 5.2 and Heartbeat Version 5.2.2. After changing the heartbeat.yml to following , i couldn't start heartbeat service. So i tried validating heartbeat.yml and i got error "Exiting…

---

## [Logstash fails to load indian log records due to daylight savings change on host machine](https://discuss.elastic.co/t/logstash-fails-to-load-indian-log-records-due-to-daylight-savings-change-on-host-machine/69525)

<div class="topic-metadata">

**Author:** [@Matt\_Simcox](https://discuss.elastic.co/u/Matt_Simcox)\
**Replies:** 4\
**Last updated:** [December 21, 2016, 10:13pm UTC](https://discuss.elastic.co/t/logstash-fails-to-load-indian-log-records-due-to-daylight-savings-change-on-host-machine/69525 "2016-12-21T22:13:58Z")

</div>

I'm not sure if there's a way around this one. I have a concatenated year long log file provided by an indian client who do not yet use logstash. I have set up a test box in Sydney Australia to parse their logs to anal…

---

## [Disable dynamic mappings for already created index?](https://discuss.elastic.co/t/disable-dynamic-mappings-for-already-created-index/65086)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 4\
**Last updated:** [November 5, 2016, 6:33am UTC](https://discuss.elastic.co/t/disable-dynamic-mappings-for-already-created-index/65086 "2016-11-05T06:33:34Z")

</div>

Hi All, we are using elasticsearch 1.3.7. can any one tell me , how to disable dynamic mappings for all indices which is created already? i know about index.mapper.dynamic: false ( in elasticsearch.yml ) but is th…

---

## [Logstash metrics don't make sense](https://discuss.elastic.co/t/logstash-metrics-dont-make-sense/48350)

<div class="topic-metadata">

**Author:** [@Sol\_Lederman](https://discuss.elastic.co/u/Sol_Lederman)\
**Replies:** 4\
**Last updated:** [April 27, 2016, 9:09pm UTC](https://discuss.elastic.co/t/logstash-metrics-dont-make-sense/48350 "2016-04-27T21:09:23Z")

</div>

I have a 1,000 line sample web log file that I run through logstash and I time the run. $ time cat apache\_combined\_log.20160420.1000-lines | ../logstash-2.3.1/bin/logstash -f apache\_logstash.3.conf \> foo real 0m25.6…

---

## [Unexpeted and not logged hanging](https://discuss.elastic.co/t/unexpeted-and-not-logged-hanging/25364)

<div class="topic-metadata">

**Author:** [@comdiv](https://discuss.elastic.co/u/comdiv)\
**Replies:** 4\
**Last updated:** [July 16, 2015, 9:50am UTC](https://discuss.elastic.co/t/unexpeted-and-not-logged-hanging/25364 "2015-07-16T09:50:37Z")

</div>

Cluster - 4 nodes - 2\*(master-no-data) + 2\*(no-master-data); Data - not much - ~10000 small documents Uptime - ~month without restart, load - less 10 queries /index tasks per second OS - debian 8 Problem. Unexpectly clu…

---

## [Defining index mappings on ElasticSearch](https://discuss.elastic.co/t/defining-index-mappings-on-elasticsearch/248774)

<div class="topic-metadata">

**Author:** [@szanin](https://discuss.elastic.co/u/szanin)\
**Replies:** 5\
**Last updated:** [September 21, 2020, 3:32am UTC](https://discuss.elastic.co/t/defining-index-mappings-on-elasticsearch/248774 "2020-09-21T03:32:18Z")

</div>

Hi there, This is my first post here, so I apologise in advance if I'm not too clear or if my question has been asked already. I have ElasticSearch running in a Docker cluster, I use it to search through a ASP.NET core…

---

## [Use of tabifyAggResponse in kibana 6.1.x](https://discuss.elastic.co/t/use-of-tabifyaggresponse-in-kibana-6-1-x/115512)

<div class="topic-metadata">

**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\
**Replies:** 5\
**Last updated:** [January 15, 2018, 11:22am UTC](https://discuss.elastic.co/t/use-of-tabifyaggresponse-in-kibana-6-1-x/115512 "2018-01-15T11:22:21Z")

</div>

Dear community, i am trying to make the computed\_columns plugin to work under Kibana 6.1.x. Invoking tabifyAggResponse results into: TypeError: esResponse.hits is undefined "function tabifyAggResponse(vis, esRespon…

---

## [ElasticsearchSecurityException\[failed to load SSL configuration \[xpack.security.http.ssl\]\]](https://discuss.elastic.co/t/elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-http-ssl/254722)

<div class="topic-metadata">

**Author:** [@Syaiful\_Amin](https://discuss.elastic.co/u/Syaiful_Amin)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 9:28am UTC](https://discuss.elastic.co/t/elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-http-ssl/254722 "2020-11-09T09:28:14Z")

</div>

\[2020-11-09T16:45:17,375\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[es-1\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchSecurityException\[failed to load SSL co…

---

## [Elasticsearch max key length](https://discuss.elastic.co/t/elasticsearch-max-key-length/64219)

<div class="topic-metadata">

**Author:** [@sirsirs](https://discuss.elastic.co/u/sirsirs)\
**Replies:** 1\
**Last updated:** [October 27, 2016, 11:24pm UTC](https://discuss.elastic.co/t/elasticsearch-max-key-length/64219 "2016-10-27T23:24:39Z")

</div>

This seems like more of a documentation issue. I am using Elasticsearch 5 rc1 however noticed the same behavior in Elasticsearch 2. I am attempting to build a data table visualization for emails. The email body can be …

---

## [Org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed/23288)

<div class="topic-metadata">

**Author:** [@guoyiqincn](https://discuss.elastic.co/u/guoyiqincn)\
**Replies:** 1\
**Last updated:** [April 17, 2015, 1:07pm UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed/23288 "2015-04-17T13:07:37Z")

</div>

\*my spark job running \* \*this is a error\* \*org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed\* \*my code \* \*val conf = new SparkC…

---

## [Parsing multiple date types from message field with ingest node](https://discuss.elastic.co/t/parsing-multiple-date-types-from-message-field-with-ingest-node/149821)

<div class="topic-metadata">

**Author:** [@dlazarov](https://discuss.elastic.co/u/dlazarov)\
**Replies:** 2\
**Last updated:** [September 26, 2018, 6:55am UTC](https://discuss.elastic.co/t/parsing-multiple-date-types-from-message-field-with-ingest-node/149821 "2018-09-26T06:55:57Z")

</div>

I have the following case. I have setup Filebeat to send the logs straight to Elasticsearch since there is no need for significant log parsing. I am receiving logs from different services and in the message field the dat…

---

## [Snapshot restore hanging on 6.4](https://discuss.elastic.co/t/snapshot-restore-hanging-on-6-4/154104)

<div class="topic-metadata">

**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\
**Replies:** 6\
**Last updated:** [October 27, 2018, 4:35am UTC](https://discuss.elastic.co/t/snapshot-restore-hanging-on-6-4/154104 "2018-10-27T04:35:49Z")

</div>

I have a clean install of 6.4.2 (OSS), I have create a new index (single shard), load data into it (~800mb), then force a merge to optimize and finally snapshot to S3. When I try to restore the index into a different cl…

---

## [Convert/cast string/term to float/double in Kibana Visualization](https://discuss.elastic.co/t/convert-cast-string-term-to-float-double-in-kibana-visualization/191000)

<div class="topic-metadata">

**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\
**Replies:** 1\
**Last updated:** [July 17, 2019, 11:57pm UTC](https://discuss.elastic.co/t/convert-cast-string-term-to-float-double-in-kibana-visualization/191000 "2019-07-17T23:57:39Z")

</div>

I want to convert string to float within a Kibana visualization (as the title already indicates). I found this answer on Stackoverflow. Unfortunately it doesn't work for me. How could I get this to work? (I can not chang…

---

## [Rejecting mapping update to ... as the final mapping would have more than 1 type:](https://discuss.elastic.co/t/rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/113222)

<div class="topic-metadata">

**Author:** [@mortinelli](https://discuss.elastic.co/u/mortinelli)\
**Replies:** 1\
**Last updated:** [December 26, 2017, 3:18pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/113222 "2017-12-26T15:18:49Z")

</div>

ELK all 6. winlogbeat 5.x. What I need to do, so that is work correctly. Thanks. Log elasticsearch. \[2017-12-26T16:09:33,848\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[winlogbeat-2017.12.25\]\[1\] failed to execute bulk …

---

## [Plugin installation behind authenticated proxy is not working in Logstash version 5.5.0](https://discuss.elastic.co/t/plugin-installation-behind-authenticated-proxy-is-not-working-in-logstash-version-5-5-0/94632)

<div class="topic-metadata">

**Author:** [@lkpatel](https://discuss.elastic.co/u/lkpatel)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 6:55am UTC](https://discuss.elastic.co/t/plugin-installation-behind-authenticated-proxy-is-not-working-in-logstash-version-5-5-0/94632 "2017-07-27T06:55:36Z")

</div>

Hi all, I am trying to install logstash-filter-plugin behind authenticated proxy and failed to do so. So far I have used following methods Setting environment variable HTTP\[S\]\_PROXY does not work with following error…

---

## [Dynamic Urls for http Outbound Plugin in logstash config](https://discuss.elastic.co/t/dynamic-urls-for-http-outbound-plugin-in-logstash-config/93423)

<div class="topic-metadata">

**Author:** [@RakeshOngolu](https://discuss.elastic.co/u/RakeshOngolu)\
**Replies:** 1\
**Last updated:** [July 18, 2017, 2:14pm UTC](https://discuss.elastic.co/t/dynamic-urls-for-http-outbound-plugin-in-logstash-config/93423 "2017-07-18T14:14:14Z")

</div>

Hello everyone, I just want to use http inbound and outbound plugins for asynchronous communication between two applications(host & target). The data (json)from http inbound plugin contains the url to be used in http o…

---

## [Custom Deployment](https://discuss.elastic.co/t/custom-deployment/72826)

<div class="topic-metadata">

**Author:** [@lukes](https://discuss.elastic.co/u/lukes)\
**Replies:** 7\
**Last updated:** [January 28, 2017, 7:52pm UTC](https://discuss.elastic.co/t/custom-deployment/72826 "2017-01-28T19:52:43Z")

</div>

Hi experts, I am beginning to use ES, and i know ES comes with embedded server. Is it possible to deploy ES on custom server say weblogic, websphere, etc. If possible, then how, also what are the pros and cons ? Could…

---

## [Display static link in Data Table visualization](https://discuss.elastic.co/t/display-static-link-in-data-table-visualization/71379)

<div class="topic-metadata">

**Author:** [@arondep](https://discuss.elastic.co/u/arondep)\
**Replies:** 1\
**Last updated:** [January 12, 2017, 11:18pm UTC](https://discuss.elastic.co/t/display-static-link-in-data-table-visualization/71379 "2017-01-12T23:18:37Z")

</div>

We have a Visualization using DataTable for displaying Interface Metric which basically consists of the following: Interface Type (Bucket) Last Accessed (MAX) Hits (SUM) - Scripted Field Failures (SUM) - Scripted Field …

---

## [Bulk operation using Delete by Query?](https://discuss.elastic.co/t/bulk-operation-using-delete-by-query/17065)

<div class="topic-metadata">

**Author:** [@Robbie](https://discuss.elastic.co/u/Robbie)\
**Replies:** 0\
**Last updated:** [April 17, 2014, 6:20pm UTC](https://discuss.elastic.co/t/bulk-operation-using-delete-by-query/17065 "2014-04-17T18:20:15Z")

</div>

Hi, I have a bunch of documents that need to be deleted using the DeleteByQuery API. I would like these to be deleted using the bulk api so that I dont have to call deleteByQuery multiple times. I see that the Bulk…

---

## [Secure setting is unauthorized](https://discuss.elastic.co/t/secure-setting-is-unauthorized/295264)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 3\
**Last updated:** [February 9, 2022, 1:50pm UTC](https://discuss.elastic.co/t/secure-setting-is-unauthorized/295264 "2022-02-09T13:50:49Z")

</div>

I tried to use basic authentication credentials in metricbeat.yml I set monitor, read\_ilm and read\_pipeline as cluster privileges for role metricbeat\_writer. But I got 403 error code. ERROR \[publisher\_pipeline\_output\] …

---

## [Parsing nested XML with logstash](https://discuss.elastic.co/t/parsing-nested-xml-with-logstash/202530)

<div class="topic-metadata">

**Author:** [@jsj](https://discuss.elastic.co/u/jsj)\
**Replies:** 3\
**Last updated:** [October 7, 2019, 4:12pm UTC](https://discuss.elastic.co/t/parsing-nested-xml-with-logstash/202530 "2019-10-07T16:12:19Z")

</div>

Hi, I'm parsing xml-data from endpoint system with logstash and i'm not sure how parse nested data from xml; Here's the sample data & logstash config \<eventItem sequence\_num="206423128" uid="18960533"\> \<timestamp\>2…

[Previous page](https://discuss.elastic.co/top.md?page=1073&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1075&per_page=50&period=all)
