# Top

**URL:** https://discuss.elastic.co/top.md?page=1077&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1078

---

## [Not working on Chromium after upgrade to 7.5.2 -\> 7.8.0](https://discuss.elastic.co/t/not-working-on-chromium-after-upgrade-to-7-5-2-7-8-0/239598)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 4\
**Last updated:** [July 3, 2020, 10:11am UTC](https://discuss.elastic.co/t/not-working-on-chromium-after-upgrade-to-7-5-2-7-8-0/239598 "2020-07-03T10:11:46Z")

</div>

Hi community. I've just upgraded a small cluster from 7.5.2 to 7.8.0 .... so far so good, but, since I'm debianist at worstation-level, I use the packaged Chromium browser. Yesterday, as I did a rolling upgrade, I notic…

---

## [\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError",](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/233802)

<div class="topic-metadata">

**Author:** [@Hanneu](https://discuss.elastic.co/u/Hanneu)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 2:37am UTC](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/233802 "2020-05-27T02:37:37Z")

</div>

Hello experts, Getting below error on logstash (LS) logs for all of the nodes. \[2020-05-21T12:08:42,231\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id…

---

## [Handle Frequently updated geo data in Elastic Search](https://discuss.elastic.co/t/handle-frequently-updated-geo-data-in-elastic-search/225036)

<div class="topic-metadata">

**Author:** [@Nishant\_Gauttam](https://discuss.elastic.co/u/Nishant_Gauttam)\
**Replies:** 4\
**Last updated:** [March 29, 2020, 1:10pm UTC](https://discuss.elastic.co/t/handle-frequently-updated-geo-data-in-elastic-search/225036 "2020-03-29T13:10:48Z")

</div>

I have the location(geo points) data updated every 5 minutes for millions of users. We have to search users with specific attributes(age,interests,languages) & in particular geo range. Wanted to understand the right stra…

---

## [Elastic Stack deployment through configuration management tool](https://discuss.elastic.co/t/elastic-stack-deployment-through-configuration-management-tool/109516)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [December 18, 2017, 8:15pm UTC](https://discuss.elastic.co/t/elastic-stack-deployment-through-configuration-management-tool/109516 "2017-12-18T20:15:09Z")

</div>

Is there Ansible supported configurations for Elastic stack deployment? What all the activities supported - Deployment, configuration, version upgrade..etc

---

## [Logstash service multiple configs](https://discuss.elastic.co/t/logstash-service-multiple-configs/86923)

<div class="topic-metadata">

**Author:** [@jjjuurrbbbb](https://discuss.elastic.co/u/jjjuurrbbbb)\
**Replies:** 4\
**Last updated:** [May 24, 2017, 11:11am UTC](https://discuss.elastic.co/t/logstash-service-multiple-configs/86923 "2017-05-24T11:11:15Z")

</div>

Hi, Just getting started with Logstash and am trying to get the service started using multiple config files on CentOS. My logstash.service configuration is as follows: \[Unit\] Description=logstash \[Service\] Type=s…

---

## [Unexpected results when using a query](https://discuss.elastic.co/t/unexpected-results-when-using-a-query/53160)

<div class="topic-metadata">

**Author:** [@rprinsen](https://discuss.elastic.co/u/rprinsen)\
**Replies:** 4\
**Last updated:** [June 17, 2016, 1:48pm UTC](https://discuss.elastic.co/t/unexpected-results-when-using-a-query/53160 "2016-06-17T13:48:45Z")

</div>

Hey All, I'm having some problems understanding the inner workings of the Graph API, especially when using search queries. It's ginving me some results I wouldn't expect and i'm not sure if i'm running into a bug or l…

---

## [./elasticsearch vs service elasticsearch start](https://discuss.elastic.co/t/elasticsearch-vs-service-elasticsearch-start/40565)

<div class="topic-metadata">

**Author:** [@w0lverine](https://discuss.elastic.co/u/w0lverine)\
**Replies:** 4\
**Last updated:** [February 1, 2016, 12:52am UTC](https://discuss.elastic.co/t/elasticsearch-vs-service-elasticsearch-start/40565 "2016-02-01T00:52:38Z")

</div>

I am a new user of elk whoa! So my knowledge is limited. But is there a difference running ./elasticsearch script than running service elasticsearch start The reason being, I am following the installation guide …

---

## [Kibana - internal/search/es error 404](https://discuss.elastic.co/t/kibana-internal-search-es-error-404/271115)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 12:45pm UTC](https://discuss.elastic.co/t/kibana-internal-search-es-error-404/271115 "2021-04-30T12:45:27Z")

</div>

Hello! I'm using kibana 7.10.2 behind a proxy with elasticsearch 7.10.2. We are facing the error "POST https://proxy-host/internal/search/es 404 (Not Found)" sometimes when using the kibana dashboards. Prior upgrading t…

---

## [Does Kibana supports a big csv exports?](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256714)

<div class="topic-metadata">

**Author:** [@Ayadi](https://discuss.elastic.co/u/Ayadi)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 6:37pm UTC](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256714 "2020-11-26T18:37:02Z")

</div>

Hi Guys I'm facing a problem with the exports in Kibana since a week now and I will be happy, if I can get some help here. I want to generate big csv reports from kibana that could reach 3 Gb And I was surprised that e…

---

## [PacketBeat to capture all traffic except few port?](https://discuss.elastic.co/t/packetbeat-to-capture-all-traffic-except-few-port/211169)

<div class="topic-metadata">

**Author:** [@frenchy59](https://discuss.elastic.co/u/frenchy59)\
**Replies:** 3\
**Last updated:** [December 12, 2019, 10:30am UTC](https://discuss.elastic.co/t/packetbeat-to-capture-all-traffic-except-few-port/211169 "2019-12-12T10:30:46Z")

</div>

Hi All, Is it possible to configure PacketBeat to capture all the traffic the box is having. except few exception traffic. and then report in Kibana which box is not having any traffic. The goal is to find out which …

---

## [Which class file trigger writing of segments.gen / segments\_1](https://discuss.elastic.co/t/which-class-file-trigger-writing-of-segments-gen-segments-1/19528)

<div class="topic-metadata">

**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\
**Replies:** 3\
**Last updated:** [August 29, 2014, 4:07pm UTC](https://discuss.elastic.co/t/which-class-file-trigger-writing-of-segments-gen-segments-1/19528 "2014-08-29T16:07:38Z")

</div>

Hello people, Anybody know which class/component in elastic search trigger writing of segments.gen and segments\_1? I'm currently using elastic search version 1.2.1. It would be great if you can provide link pin po…

---

## [Elasticsearch has stopped and no longer works](https://discuss.elastic.co/t/elasticsearch-has-stopped-and-no-longer-works/215653)

<div class="topic-metadata">

**Author:** [@4y555](https://discuss.elastic.co/u/4y555)\
**Replies:** 5\
**Last updated:** [January 20, 2020, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-and-no-longer-works/215653 "2020-01-20T11:10:00Z")

</div>

Hi guys I was using Elasticsearch (with the nextcloud), but the elastic just stopped after a while. Try to install other versions or reinstall the same version, but it doesn't work. Can you help me? Thank you very muc…

---

## [Access Denied Exception with Shrink and Delete After using Curator](https://discuss.elastic.co/t/access-denied-exception-with-shrink-and-delete-after-using-curator/157761)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 7:47pm UTC](https://discuss.elastic.co/t/access-denied-exception-with-shrink-and-delete-after-using-curator/157761 "2018-11-21T19:47:03Z")

</div>

I'm using curator with Elasticsearch version 6.3.0 to do a shrink and delete after action on indices after they've been rolled over. It appears to operate without errors, since the curator log does not show any errors, …

---

## [Filebeat's docker metadata watcher losing container from its list somehow](https://discuss.elastic.co/t/filebeats-docker-metadata-watcher-losing-container-from-its-list-somehow/109897)

<div class="topic-metadata">

**Author:** [@benben](https://discuss.elastic.co/u/benben)\
**Replies:** 5\
**Last updated:** [December 1, 2017, 3:15pm UTC](https://discuss.elastic.co/t/filebeats-docker-metadata-watcher-losing-container-from-its-list-somehow/109897 "2017-12-01T15:15:36Z")

</div>

After some random time, the watcher looses some(?) active containers. In the log you can see that filebeat is still reading correctly from docker logs but then says, it cannot find the container with add\_docker\_metadata.…

---

## [Huge Performance impact when indexing large payloads](https://discuss.elastic.co/t/huge-performance-impact-when-indexing-large-payloads/222205)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 7\
**Last updated:** [March 5, 2020, 11:00am UTC](https://discuss.elastic.co/t/huge-performance-impact-when-indexing-large-payloads/222205 "2020-03-05T11:00:41Z")

</div>

We are doing few performance run to measure the product performance. We were trying ~100 single ingests/sec and ~300 search/sec. the data we are ingesting is of size ~1KB (i mean a record size which we insert). Every thi…

---

## [External lookups in a logstash pipeline](https://discuss.elastic.co/t/external-lookups-in-a-logstash-pipeline/89758)

<div class="topic-metadata">

**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\
**Replies:** 7\
**Last updated:** [June 22, 2017, 6:49pm UTC](https://discuss.elastic.co/t/external-lookups-in-a-logstash-pipeline/89758 "2017-06-22T18:49:04Z")

</div>

So I have a requirement that goes something like this ... 1. An event arrives in kafka 2. Read that event from logstash and get an ID out of it 3. Look up that ID to fetch a JSON from say object storage 4. Do stuff l…

---

## [Kibana crashes](https://discuss.elastic.co/t/kibana-crashes/234082)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 12:54pm UTC](https://discuss.elastic.co/t/kibana-crashes/234082 "2020-05-25T12:54:16Z")

</div>

Hi I am running Kibana on a separate system over the network which connects to elasticearch. Architecture is attached. This usually occurs when there is I carry out a large search. Here is the error, I get. log \[05…

---

## [How can I customize label in a new visualization?](https://discuss.elastic.co/t/how-can-i-customize-label-in-a-new-visualization/194848)

<div class="topic-metadata">

**Author:** [@grad](https://discuss.elastic.co/u/grad)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 11:10pm UTC](https://discuss.elastic.co/t/how-can-i-customize-label-in-a-new-visualization/194848 "2019-08-13T23:10:45Z")

</div>

Hi all, I would like to customize a label in a new visualization... How can I reach out this? When you create a new visualization you can edit 2 label: the metric label the bucket/split group label And the final res…

---

## [How do I provision Elasticsearch with an index template?](https://discuss.elastic.co/t/how-do-i-provision-elasticsearch-with-an-index-template/162984)

<div class="topic-metadata">

**Author:** [@mattskone](https://discuss.elastic.co/u/mattskone)\
**Replies:** 1\
**Last updated:** [January 5, 2019, 9:39am UTC](https://discuss.elastic.co/t/how-do-i-provision-elasticsearch-with-an-index-template/162984 "2019-01-05T09:39:17Z")

</div>

I'm supporting an ELK stack with version 6.3.x of all components. I want to reduce the sharding factor of all indices from the 5 (default) to 3 (the number of data nodes in the ES cluster). From reading the documentati…

---

## [Multiple analyzers for dynamic template mapping](https://discuss.elastic.co/t/multiple-analyzers-for-dynamic-template-mapping/156560)

<div class="topic-metadata">

**Author:** [@Jango\_Mango](https://discuss.elastic.co/u/Jango_Mango)\
**Replies:** 2\
**Last updated:** [November 14, 2018, 11:01pm UTC](https://discuss.elastic.co/t/multiple-analyzers-for-dynamic-template-mapping/156560 "2018-11-14T23:01:53Z")

</div>

Hi, Is it possible to set multiple analyzers to a single dynamic template mapping? Currently, I'm only able to add single custom analyzer to all string fields Eg: { "mappings": { "\_doc": { "dynamic\_templates": \[ …

---

## [Time range not working in kibana 6.2](https://discuss.elastic.co/t/time-range-not-working-in-kibana-6-2/151984)

<div class="topic-metadata">

**Author:** [@ammy](https://discuss.elastic.co/u/ammy)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 11:37am UTC](https://discuss.elastic.co/t/time-range-not-working-in-kibana-6-2/151984 "2018-10-11T11:37:00Z")

</div>

I created an index and inserted documents on Elasticsearch 6.2. I have a mapping for the "timestamp" field and it has a "date" type. Dates are showed using the correct date format in the "Discover" tab . When I create …

---

## [Send a custom Header to Elasticsearch via Kibana Proxy](https://discuss.elastic.co/t/send-a-custom-header-to-elasticsearch-via-kibana-proxy/97885)

<div class="topic-metadata">

**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 4:43am UTC](https://discuss.elastic.co/t/send-a-custom-header-to-elasticsearch-via-kibana-proxy/97885 "2017-08-23T04:43:08Z")

</div>

So I am having my own strategy (via Plugin) for Kibana server object to enable SSO. I want the same token to be passed on to all requests to Elasticsearch so my interceptor over there can authenticate the request. Any cl…

---

## [Update synonyms dynamically](https://discuss.elastic.co/t/update-synonyms-dynamically/16786)

<div class="topic-metadata">

**Author:** [@Balaji\_Narain](https://discuss.elastic.co/u/Balaji_Narain)\
**Replies:** 2\
**Last updated:** [April 7, 2014, 9:49am UTC](https://discuss.elastic.co/t/update-synonyms-dynamically/16786 "2014-04-07T09:49:11Z")

</div>

Hi, I have synonyms defined for certain codes that could be updated through my system. These updates are infrequent: in the order of months and in some cases, it could be years. I am planning to use the synonym…

---

## [Cannot find Alias field in Discover](https://discuss.elastic.co/t/cannot-find-alias-field-in-discover/264517)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 5:18am UTC](https://discuss.elastic.co/t/cannot-find-alias-field-in-discover/264517 "2021-03-10T05:18:59Z")

</div>

Kibana version : 7.9 Elasticsearch version : 7.10 APM Server version : 7.10 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install I wanted to create field alias for a…

---

## [Simple filter of value against range-type field](https://discuss.elastic.co/t/simple-filter-of-value-against-range-type-field/93327)

<div class="topic-metadata">

**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\
**Replies:** 4\
**Last updated:** [July 31, 2017, 3:35pm UTC](https://discuss.elastic.co/t/simple-filter-of-value-against-range-type-field/93327 "2017-07-31T15:35:41Z")

</div>

It's nice to see that there is now a "range" data type: https://www.elastic.co/guide/en/elasticsearch/reference/current/range.html The example only shows how to do a range query against a range field. Is there a way t…

---

## [Kibana visualization for a nested Cardinality aggregation](https://discuss.elastic.co/t/kibana-visualization-for-a-nested-cardinality-aggregation/307284)

<div class="topic-metadata">

**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\
**Replies:** 4\
**Last updated:** [June 16, 2022, 4:13pm UTC](https://discuss.elastic.co/t/kibana-visualization-for-a-nested-cardinality-aggregation/307284 "2022-06-16T16:13:09Z")

</div>

Hi, I'm trying to create a visualization for the following query: GET \_search { "query": { "query\_string": { "query": "distribution.extension.id:org.xwiki.\* AND date.since:\[1 TO \*\]" } …

---

## [Ssl\_verification\_mode in http\_poller input plugin "An exception happened when converging configuration"](https://discuss.elastic.co/t/ssl-verification-mode-in-http-poller-input-plugin-an-exception-happened-when-converging-configuration/300924)

<div class="topic-metadata">

**Author:** [@Syed\_Saqlain\_Hussain](https://discuss.elastic.co/u/Syed_Saqlain_Hussain)\
**Replies:** 4\
**Last updated:** [March 31, 2022, 3:48am UTC](https://discuss.elastic.co/t/ssl-verification-mode-in-http-poller-input-plugin-an-exception-happened-when-converging-configuration/300924 "2022-03-31T03:48:41Z")

</div>

I have this configuration file using http\_poller input plugin. input { http\_poller { urls =\> { myurl2 =\> { # Supports all options supported by ruby's Manticore HTTP client method =\> get …

---

## [RuntimeError: attempted adding second root element to document](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146)

<div class="topic-metadata">

**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 3:12pm UTC](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146 "2020-09-28T15:12:52Z")

</div>

Hi, I am facing below error while Logstash is parsing my xml file which was extracted for the given pattern. DUe to this error , I am not able to create visualisation as well as the required fields in Visualisation is n…

---

## [Elastic Kibana TLS/SSL fails on Docker Swarm](https://discuss.elastic.co/t/elastic-kibana-tls-ssl-fails-on-docker-swarm/233943)

<div class="topic-metadata">

**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\
**Replies:** 4\
**Last updated:** [May 29, 2020, 12:00pm UTC](https://discuss.elastic.co/t/elastic-kibana-tls-ssl-fails-on-docker-swarm/233943 "2020-05-29T12:00:57Z")

</div>

Hi, I have deployed 3 node Elastic & Kibana on a 3 Node Docker Swarm. I could see the Cluster is up & running with 3 node elastic & 1 Kibana. Now, I'm trying to Provide Elasticsearch & Kibana with TLS/SSL authenticati…

---

## [APM 7.4 error with default pipeline \[apm\]](https://discuss.elastic.co/t/apm-7-4-error-with-default-pipeline-apm/201976)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [October 3, 2019, 2:43pm UTC](https://discuss.elastic.co/t/apm-7-4-error-with-default-pipeline-apm/201976 "2019-10-03T14:43:00Z")

</div>

Today I have upgraded full stack to 7.4 in my test environment. I have also the APM server component installed. When I start it, all the documents are indexed for several minutes than it starts to log this error: 2019-1…

---

## [Limitation of Region Maps](https://discuss.elastic.co/t/limitation-of-region-maps/123625)

<div class="topic-metadata">

**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\
**Replies:** 4\
**Last updated:** [March 12, 2018, 9:50pm UTC](https://discuss.elastic.co/t/limitation-of-region-maps/123625 "2018-03-12T21:50:55Z")

</div>

Hello Kibana team, I am a big fan of your work. I have a geo related question or perhaps ER if you think so. I have followed the steps in the region maps blog and documentation below successfully in the past. For my nex…

---

## [Filebeat installation on CentOS](https://discuss.elastic.co/t/filebeat-installation-on-centos/59821)

<div class="topic-metadata">

**Author:** [@srpatatas](https://discuss.elastic.co/u/srpatatas)\
**Replies:** 4\
**Last updated:** [September 6, 2016, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-installation-on-centos/59821 "2016-09-06T14:10:38Z")

</div>

Hi guys, could you help me out with the installation of the beats repository on CentOS? I'm using version 6.7 32-bit. I followed the instructions from the docs https://www.elastic.co/guide/en/beats/filebeat/current/fileb…

---

## [Improving User Intelligence with the ELK Stack (search analytics dashboard)](https://discuss.elastic.co/t/improving-user-intelligence-with-the-elk-stack-search-analytics-dashboard/28787)

<div class="topic-metadata">

**Author:** [@rmarji](https://discuss.elastic.co/u/rmarji)\
**Replies:** 4\
**Last updated:** [September 8, 2015, 10:41pm UTC](https://discuss.elastic.co/t/improving-user-intelligence-with-the-elk-stack-search-analytics-dashboard/28787 "2015-09-08T22:41:48Z")

</div>

how can I achieve what is described in here for my elasticsearch cluster? Improving User Intelligence with the ELK Stack at SCA https://www.elastic.co/blog/improving-user-intelligence-with-the-elk-stack-at-sca is the…

---

## [Setup Filebeat with UDP input .. several questions](https://discuss.elastic.co/t/setup-filebeat-with-udp-input-several-questions/252522)

<div class="topic-metadata">

**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\
**Replies:** 6\
**Last updated:** [November 3, 2020, 11:27am UTC](https://discuss.elastic.co/t/setup-filebeat-with-udp-input-several-questions/252522 "2020-11-03T11:27:58Z")

</div>

Hi, I'm trying to grab a udp stream of double values (8 bytes) via udp input plugin of filebeat. The connection is between two servers in the same subnet, there shouldn't be any issue. I changed the filebeat.yml like t…

---

## [How can I add the request IP address to every document?](https://discuss.elastic.co/t/how-can-i-add-the-request-ip-address-to-every-document/239112)

<div class="topic-metadata">

**Author:** [@alphalol](https://discuss.elastic.co/u/alphalol)\
**Replies:** 6\
**Last updated:** [July 1, 2020, 5:24am UTC](https://discuss.elastic.co/t/how-can-i-add-the-request-ip-address-to-every-document/239112 "2020-07-01T05:24:17Z")

</div>

Is it possible to add the IP addressed used (in the HTTP request) to the document? I want to do this to then use the geoip processor in a pipeline to add location information?

---

## [How to get the json api data into message field in http poller using logsatsh config file](https://discuss.elastic.co/t/how-to-get-the-json-api-data-into-message-field-in-http-poller-using-logsatsh-config-file/225686)

<div class="topic-metadata">

**Author:** [@Mithuna](https://discuss.elastic.co/u/Mithuna)\
**Replies:** 6\
**Last updated:** [April 1, 2020, 4:16am UTC](https://discuss.elastic.co/t/how-to-get-the-json-api-data-into-message-field-in-http-poller-using-logsatsh-config-file/225686 "2020-04-01T04:16:52Z")

</div>

Hi, Im using http poller to get API data output to be ingested into elastic search. I'm not getting any error but the message field is empty. My config file is input { stdin{} http\_poller { urls =\> { q1 =\> { …

---

## [Index lifecycle Management: Index Name](https://discuss.elastic.co/t/index-lifecycle-management-index-name/204428)

<div class="topic-metadata">

**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\
**Replies:** 6\
**Last updated:** [October 22, 2019, 6:12am UTC](https://discuss.elastic.co/t/index-lifecycle-management-index-name/204428 "2019-10-22T06:12:43Z")

</div>

If I want to use the life cycle, then the index is named after the end of 00001?

---

## ["Share" and "Manage index" buttons not working in Kibana 6.5.3?](https://discuss.elastic.co/t/share-and-manage-index-buttons-not-working-in-kibana-6-5-3/163866)

<div class="topic-metadata">

**Author:** [@JNilsson](https://discuss.elastic.co/u/JNilsson)\
**Replies:** 6\
**Last updated:** [January 21, 2019, 3:25pm UTC](https://discuss.elastic.co/t/share-and-manage-index-buttons-not-working-in-kibana-6-5-3/163866 "2019-01-21T15:25:17Z")

</div>

Hi! I'm trying to access the reporting features in Kibana from a dashboard, but nothing happens when I press the "Share" button in the top right menu. If I have the browser console open at the same time, then I can see …

---

## [Angular + Elastic : Upload Json file and create an index from it](https://discuss.elastic.co/t/angular-elastic-upload-json-file-and-create-an-index-from-it/152075)

<div class="topic-metadata">

**Author:** [@CodeWalker](https://discuss.elastic.co/u/CodeWalker)\
**Replies:** 6\
**Last updated:** [October 15, 2018, 2:54pm UTC](https://discuss.elastic.co/t/angular-elastic-upload-json-file-and-create-an-index-from-it/152075 "2018-10-15T14:54:24Z")

</div>

Hi, I am coding in Angular. I would like to create a form where the user can upload a json file which will be passed to Elastic to be indexed and dashboarded in KIbana with predetermined widgets. The result dashboard w…

---

## [Best way to Index and Map large csv files with Python into Elasticsearch](https://discuss.elastic.co/t/best-way-to-index-and-map-large-csv-files-with-python-into-elasticsearch/183965)

<div class="topic-metadata">

**Author:** [@Maximilian\_Maigler](https://discuss.elastic.co/u/Maximilian_Maigler)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 6:00am UTC](https://discuss.elastic.co/t/best-way-to-index-and-map-large-csv-files-with-python-into-elasticsearch/183965 "2019-06-04T06:00:57Z")

</div>

Hey guys, I have a two questions regarding indexing large csv files into Elasticsearch and mapping the data: Should I first create an index and mapping and then send the csv data to Elastic? If yes, could someone pr…

---

## [Need help Mutating a Date column from CSV](https://discuss.elastic.co/t/need-help-mutating-a-date-column-from-csv/113093)

<div class="topic-metadata">

**Author:** [@Celtics2018](https://discuss.elastic.co/u/Celtics2018)\
**Replies:** 1\
**Last updated:** [December 26, 2017, 7:18am UTC](https://discuss.elastic.co/t/need-help-mutating-a-date-column-from-csv/113093 "2017-12-26T07:18:34Z")

</div>

Hi everyone, I am quite new to using the Stack so I apologize for what may be a quite easy question, I am having trouble figuring this one out! I am loading in a large CSV file into ES and I am mutating some of the fie…

---

## [Rollover not working, Filebeat default index does not have an alias](https://discuss.elastic.co/t/rollover-not-working-filebeat-default-index-does-not-have-an-alias/350655)

<div class="topic-metadata">

**Author:** [@whanklee](https://discuss.elastic.co/u/whanklee)\
**Replies:** 8\
**Last updated:** [January 14, 2024, 5:19pm UTC](https://discuss.elastic.co/t/rollover-not-working-filebeat-default-index-does-not-have-an-alias/350655 "2024-01-14T17:19:15Z")

</div>

Hello, I would like to use rollover to delete all logs, however, I always get an error message. It does not work. I can use only if turn of rollover. I do not modify anything on indexes, I use default Indexes after inst…

---

## [Date filter plugin not working as expected](https://discuss.elastic.co/t/date-filter-plugin-not-working-as-expected/259835)

<div class="topic-metadata">

**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\
**Replies:** 8\
**Last updated:** [December 29, 2020, 11:48pm UTC](https://discuss.elastic.co/t/date-filter-plugin-not-working-as-expected/259835 "2020-12-29T23:48:33Z")

</div>

Good evening, I have a rather extensive .conf file with a Date filter plugin being used. However it is not actually working. I am sending it to a target of @timestamp, but, I am not seeing the corresponding Original Eve…

---

## [Create index based in filename in Elasticsearch](https://discuss.elastic.co/t/create-index-based-in-filename-in-elasticsearch/164379)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 8\
**Last updated:** [January 15, 2019, 10:47pm UTC](https://discuss.elastic.co/t/create-index-based-in-filename-in-elasticsearch/164379 "2019-01-15T22:47:07Z")

</div>

Hi, We have new log files get created every time when we run load test on jenkins machine. Ex: Load test1 creates file called: /jenkins/var/lib/simulation-1.log Load test2 Creates file: jenkins/var/lib/simulation-2.l…

---

## [Unable to create new indexe because of Logstash and ELastic error](https://discuss.elastic.co/t/unable-to-create-new-indexe-because-of-logstash-and-elastic-error/142543)

<div class="topic-metadata">

**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Replies:** 3\
**Last updated:** [August 6, 2018, 5:10am UTC](https://discuss.elastic.co/t/unable-to-create-new-indexe-because-of-logstash-and-elastic-error/142543 "2018-08-06T05:10:35Z")

</div>

Hi Team, Its been some days since the last index which i have created, today while trying to create a new index for apache access log,I am getting the below error while executing the logstash.conf file. I am working on …

---

## [Grok Pattern works on grok debugger but \_GROKPARSE failure in Logstash](https://discuss.elastic.co/t/grok-pattern-works-on-grok-debugger-but-grokparse-failure-in-logstash/120399)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 3\
**Last updated:** [February 23, 2018, 2:58pm UTC](https://discuss.elastic.co/t/grok-pattern-works-on-grok-debugger-but-grokparse-failure-in-logstash/120399 "2018-02-23T14:58:58Z")

</div>

Hi I am trying to parse a multi-line log file(CSV) using Logstash/grok pattern. The pattern works inside grok debugger but when i run it in the logstash, it produces \_grokparsefailuer. The \_grokparsefailuer is there whe…

---

## [How to make filebeat multiline plugin send the unmatched logs](https://discuss.elastic.co/t/how-to-make-filebeat-multiline-plugin-send-the-unmatched-logs/117906)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 3\
**Last updated:** [February 8, 2018, 11:22pm UTC](https://discuss.elastic.co/t/how-to-make-filebeat-multiline-plugin-send-the-unmatched-logs/117906 "2018-02-08T23:22:40Z")

</div>

Hi, I am using filebeat 5.6.X version With the below config, filebeat sends five lines to elasticsearch from below log file, using multi line pattern. But the first line " host down true wiley-host" is dropped. How to…

---

## [Rsyslog to logstash help](https://discuss.elastic.co/t/rsyslog-to-logstash-help/108254)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 3\
**Last updated:** [November 19, 2017, 12:11am UTC](https://discuss.elastic.co/t/rsyslog-to-logstash-help/108254 "2017-11-19T00:11:36Z")

</div>

Hello, I am seeking advice regarding getting multiple syslog devices into logstash/elasticsearch. I currently send syslog messages from multiple devices to a central rsyslog server on port 514. Because the messages ar…

---

## [Hadoop-Elasticsearch upsert not working using 'scripted\_upsert'](https://discuss.elastic.co/t/hadoop-elasticsearch-upsert-not-working-using-scripted-upsert/44600)

<div class="topic-metadata">

**Author:** [@andresg](https://discuss.elastic.co/u/andresg)\
**Replies:** 3\
**Last updated:** [March 21, 2016, 12:33pm UTC](https://discuss.elastic.co/t/hadoop-elasticsearch-upsert-not-working-using-scripted-upsert/44600 "2016-03-21T12:33:34Z")

</div>

Hi, I'm trying to upsert into an ES index using ES-hadoop connector and a groovy script. First run, it always upsert document instead of running script, regarthless "scripted\_upsert" is set to true or not. Second time, …

---

## [Filebeat doesn\`t collect logs from Kubernetes cronjobs](https://discuss.elastic.co/t/filebeat-doesn-t-collect-logs-from-kubernetes-cronjobs/257859)

<div class="topic-metadata">

**Author:** [@malcolm666](https://discuss.elastic.co/u/malcolm666)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 7:06am UTC](https://discuss.elastic.co/t/filebeat-doesn-t-collect-logs-from-kubernetes-cronjobs/257859 "2020-12-09T07:06:06Z")

</div>

Hi. I use filebeat 7.6.1 and k8s autodiscovery that works good for each pod. Example: filebeat.autodiscover: providers: - type: kubernetes templates: - condition: …

[Previous page](https://discuss.elastic.co/top.md?page=1076&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1078&per_page=50&period=all)
