# Top

**URL:** https://discuss.elastic.co/top.md?page=1082&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1083

---

## [ES support for payloads](https://discuss.elastic.co/t/es-support-for-payloads/12781)

<div class="topic-metadata">

**Author:** [@clandestino\_bgd\_2](https://discuss.elastic.co/u/clandestino_bgd_2)\
**Replies:** 2\
**Last updated:** [July 14, 2013, 9:32am UTC](https://discuss.elastic.co/t/es-support-for-payloads/12781 "2013-07-14T09:32:38Z")

</div>

Hi, I've tried to find the answer on this forum, but without much success. Hope somebody will have an idea here. I am trying to port some existing code in Solr, where particular tokens are boosted in the string fil…

---

## [Iterate by rows on an essql query](https://discuss.elastic.co/t/iterate-by-rows-on-an-essql-query/216892)

<div class="topic-metadata">

**Author:** [@luis.montecatine](https://discuss.elastic.co/u/luis.montecatine)\
**Replies:** 3\
**Last updated:** [January 31, 2020, 8:21am UTC](https://discuss.elastic.co/t/iterate-by-rows-on-an-essql-query/216892 "2020-01-31T08:21:57Z")

</div>

Hello, I'm using essql queries. I need to iterate the result by row. I just found the way to iterate it on markdown. But I need to iterate on canvas, not in markdown. Because using markdown #each, I can't use if cond…

---

## ["Kibana did not load properly" beacuse "Cannot read property 'result' of undefined"](https://discuss.elastic.co/t/kibana-did-not-load-properly-beacuse-cannot-read-property-result-of-undefined/140550)

<div class="topic-metadata">

**Author:** [@szymon](https://discuss.elastic.co/u/szymon)\
**Replies:** 3\
**Last updated:** [July 19, 2018, 9:38am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-beacuse-cannot-read-property-result-of-undefined/140550 "2018-07-19T09:38:38Z")

</div>

Hello, i'm using Kibana 6.2 with ElasticSearch 6.2 and X-pack basic license. Everything was working fine, but one day, Kibana started to display: Kibana did not load properly. Check the server output for more informatio…

---

## [Parse Maven XML .pom files](https://discuss.elastic.co/t/parse-maven-xml-pom-files/116224)

<div class="topic-metadata">

**Author:** [@svdh](https://discuss.elastic.co/u/svdh)\
**Replies:** 3\
**Last updated:** [February 6, 2018, 1:49pm UTC](https://discuss.elastic.co/t/parse-maven-xml-pom-files/116224 "2018-02-06T13:49:57Z")

</div>

Hi all, I would like to create a logstash filter to get the project details out of the XML file. For most of the tags, this isn't a problem, because the tags have all the same structure like: \<dependency\> \<groupId\>apac…

---

## [Restore a snapshot to diffrent alias](https://discuss.elastic.co/t/restore-a-snapshot-to-diffrent-alias/108278)

<div class="topic-metadata">

**Author:** [@Raid\_Rohana](https://discuss.elastic.co/u/Raid_Rohana)\
**Replies:** 3\
**Last updated:** [November 20, 2017, 6:53am UTC](https://discuss.elastic.co/t/restore-a-snapshot-to-diffrent-alias/108278 "2017-11-20T06:53:26Z")

</div>

I have a Jenkins job that restore snapshots based on alias name via curator utility However, such action will override the index data ! Is there a way to restore a snapshot to different alias name ? Can it be done via…

---

## [Hsbeats compile error on debian](https://discuss.elastic.co/t/hsbeats-compile-error-on-debian/54412)

<div class="topic-metadata">

**Author:** [@guenther](https://discuss.elastic.co/u/guenther)\
**Replies:** 3\
**Last updated:** [July 6, 2016, 2:23pm UTC](https://discuss.elastic.co/t/hsbeats-compile-error-on-debian/54412 "2016-07-06T14:23:18Z")

</div>

Hi, i have a debian 7 and tried to compile the hsbeat with go 1.6 as described on the hsbeat-page. go get github.com/YaSuenag/hsbeat This statement fails with: # github.com/YaSuenag/hsbeat/hsbeat .go/src/github.com…

---

## [Filtering Issues with Logstash](https://discuss.elastic.co/t/filtering-issues-with-logstash/26635)

<div class="topic-metadata">

**Author:** [@Zeal\_Vora](https://discuss.elastic.co/u/Zeal_Vora)\
**Replies:** 3\
**Last updated:** [August 4, 2015, 7:35am UTC](https://discuss.elastic.co/t/filtering-issues-with-logstash/26635 "2015-08-04T07:35:53Z")

</div>

Hi I am new to ELK stack and have setup basic ELK Stack. I am using fluentd to foward logs to Logstash. Here is my basic configuration file for logstash. input { syslog { type =\> syslog port =\> 5141 } } …

---

## [Is Elasticsearch also supported on AIX and HP Itanium 11.31](https://discuss.elastic.co/t/is-elasticsearch-also-supported-on-aix-and-hp-itanium-11-31/20868)

<div class="topic-metadata">

**Author:** [@Gaurav\_gupta](https://discuss.elastic.co/u/Gaurav_gupta)\
**Replies:** 3\
**Last updated:** [November 28, 2014, 11:19pm UTC](https://discuss.elastic.co/t/is-elasticsearch-also-supported-on-aix-and-hp-itanium-11-31/20868 "2014-11-28T23:19:55Z")

</div>

Is Elasticsearch also supported on AIX and HP Itanium 11.31. I didn't find this information in release notes or installation instructions. Thanks Gaurav -- You received this message because you are subscribed t…

---

## [What's the best way to get the whole search results with score in java api?](https://discuss.elastic.co/t/whats-the-best-way-to-get-the-whole-search-results-with-score-in-java-api/11596)

<div class="topic-metadata">

**Author:** [@Jingang\_Wang](https://discuss.elastic.co/u/Jingang_Wang)\
**Replies:** 3\
**Last updated:** [April 18, 2013, 7:35am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-get-the-whole-search-results-with-score-in-java-api/11596 "2013-04-18T07:35:53Z")

</div>

Hi all, I have known that I could get the whole search results without score using Scan/Scroll type, while I I want to obtain the whole search hits with score. I used count query to get the number of search hits …

---

## [Kibana Vega - How to display multiple results in a date histogram](https://discuss.elastic.co/t/kibana-vega-how-to-display-multiple-results-in-a-date-histogram/208713)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [November 21, 2019, 4:43pm UTC](https://discuss.elastic.co/t/kibana-vega-how-to-display-multiple-results-in-a-date-histogram/208713 "2019-11-21T16:43:16Z")

</div>

I am wonder if it is possible to display more than one aggregated result in a date histogram? My Vega query is { $schema: https://vega.github.io/schema/vega-lite/v2.json title: Daily Count data: { url: { …

---

## [Elasticsearch failes to load after log4j2.properties update](https://discuss.elastic.co/t/elasticsearch-failes-to-load-after-log4j2-properties-update/165780)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-failes-to-load-after-log4j2-properties-update/165780 "2019-01-28T13:17:49Z")

</div>

I was trying to drop the logging level of our cluster and after reading through the Logging Configuration page I thought I had a good idea of how to drop the level down to warn. After reading through the documentation a…

---

## [Kibana behind nginx, upstream timeout, sometimes](https://discuss.elastic.co/t/kibana-behind-nginx-upstream-timeout-sometimes/105898)

<div class="topic-metadata">

**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 2:11pm UTC](https://discuss.elastic.co/t/kibana-behind-nginx-upstream-timeout-sometimes/105898 "2017-10-31T14:11:28Z")

</div>

When I have Kibana behind a nginx reverse proxy I'm noticing that some paths are taking way too long to respond, but only sometimes. Most notable are /bundles/4be5b8808b5216ee6b6a1a4a29493e32.svg /ui/fonts/open\_sans/o…

---

## [URL from lab Info is not working](https://discuss.elastic.co/t/url-from-lab-info-is-not-working/211480)

<div class="topic-metadata">

**Author:** [@tmuon](https://discuss.elastic.co/u/tmuon)\
**Replies:** 4\
**Last updated:** [December 11, 2019, 11:46pm UTC](https://discuss.elastic.co/t/url-from-lab-info-is-not-working/211480 "2019-12-11T23:46:36Z")

</div>

Hi I'm trying to access my lab guide for 'Analyzing WIndows Host Data' using the current AWS URL displayed in the lab Info popup but i get connection refused. It worked OK for Lab 1 last night but since the lab pause th…

---

## [Performance implication of multiple grok patterns for a single log file](https://discuss.elastic.co/t/performance-implication-of-multiple-grok-patterns-for-a-single-log-file/150088)

<div class="topic-metadata">

**Author:** [@asgs](https://discuss.elastic.co/u/asgs)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 7:27pm UTC](https://discuss.elastic.co/t/performance-implication-of-multiple-grok-patterns-for-a-single-log-file/150088 "2018-10-09T19:27:13Z")

</div>

hello! we're discussing in our team whether it's OK to log two set of log entries to a single file and then having logstash config specify the two patterns (OR) it makes sense to direct each set of entries to its own …

---

## [NEST: Avoid storing default values false, 0 etc](https://discuss.elastic.co/t/nest-avoid-storing-default-values-false-0-etc/140457)

<div class="topic-metadata">

**Author:** [@Henr1k](https://discuss.elastic.co/u/Henr1k)\
**Replies:** 4\
**Last updated:** [July 18, 2018, 8:59am UTC](https://discuss.elastic.co/t/nest-avoid-storing-default-values-false-0-etc/140457 "2018-07-18T08:59:22Z")

</div>

Hi, is it possible to avoid serializing default values for int, boolean etc. E.g.: "onlyCheckingForPositiveValue" : 0, "onlyCheckingForTrueValue" : false, I know Json.NET has this attribute: \[JsonProperty(DefaultVal…

---

## [Service seem to hang](https://discuss.elastic.co/t/service-seem-to-hang/134755)

<div class="topic-metadata">

**Author:** [@yks](https://discuss.elastic.co/u/yks)\
**Replies:** 4\
**Last updated:** [June 8, 2018, 6:52am UTC](https://discuss.elastic.co/t/service-seem-to-hang/134755 "2018-06-08T06:52:46Z")

</div>

Hi, I am using the guide here : Parsing Logs with Logstash | Logstash Reference \[8.11\] | Elastic, The service seem to hang at here after i executed the following command logstash -f first-pipeline.conf --config.relo…

---

## [What is the correct src for the image in my app?](https://discuss.elastic.co/t/what-is-the-correct-src-for-the-image-in-my-app/86140)

<div class="topic-metadata">

**Author:** [@trex](https://discuss.elastic.co/u/trex)\
**Replies:** 4\
**Last updated:** [May 18, 2017, 2:00pm UTC](https://discuss.elastic.co/t/what-is-the-correct-src-for-the-image-in-my-app/86140 "2017-05-18T14:00:23Z")

</div>

I develop a Kibana (v 5.2.2) app. There is an image in HTML template: \<img src="plugins/myapp/public/image.svg"\> And the system path for the image is kibana/plugins/myapp/public/image.svg I receive the not found err…

---

## [Timelion : shift between time cursor and y-axis](https://discuss.elastic.co/t/timelion-shift-between-time-cursor-and-y-axis/74699)

<div class="topic-metadata">

**Author:** [@mamachin](https://discuss.elastic.co/u/mamachin)\
**Replies:** 4\
**Last updated:** [February 15, 2017, 8:58am UTC](https://discuss.elastic.co/t/timelion-shift-between-time-cursor-and-y-axis/74699 "2017-02-15T08:58:35Z")

</div>

Hello, I am quite new in TimeLion and I have a very basic problem. I have data by month, and more precisely, each document (or row) has as date the first day of the month. The display of the line is ok. But, when I use …

---

## [Does Discover page support elastic query DSL in Kibana 4.6?](https://discuss.elastic.co/t/does-discover-page-support-elastic-query-dsl-in-kibana-4-6/61725)

<div class="topic-metadata">

**Author:** [@satheeshravir](https://discuss.elastic.co/u/satheeshravir)\
**Replies:** 4\
**Last updated:** [September 28, 2016, 6:17pm UTC](https://discuss.elastic.co/t/does-discover-page-support-elastic-query-dsl-in-kibana-4-6/61725 "2016-09-28T18:17:55Z")

</div>

I am new to Kibana and ES. I am using Kibana 4.6 . I have read the Kibana 4.6 documentation and it says Discover page in Kibana supports full JSON DSL queries (Discover | Kibana Guide \[8.11\] | Elastic). But when I enter …

---

## [Shield user across multiple nodes](https://discuss.elastic.co/t/shield-user-across-multiple-nodes/43555)

<div class="topic-metadata">

**Author:** [@boreal](https://discuss.elastic.co/u/boreal)\
**Replies:** 4\
**Last updated:** [March 9, 2016, 3:14pm UTC](https://discuss.elastic.co/t/shield-user-across-multiple-nodes/43555 "2016-03-09T15:14:01Z")

</div>

Hi, What is the instruction for installing shields on multi-node cluster? Long story short, I have a node 1 with shield with username/password, then I am trying to add another node. Shield configuration is exactly the …

---

## [Broke Watcher on ES6](https://discuss.elastic.co/t/broke-watcher-on-es6/109665)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 5\
**Last updated:** [November 30, 2017, 11:23pm UTC](https://discuss.elastic.co/t/broke-watcher-on-es6/109665 "2017-11-30T23:23:02Z")

</div>

So, I ran into some oddities after upgrading from 5.6 and had zero watches so figured I'd just delete the index and let ES recreate it. Upon rebooting my full cluster the index doesn't appear to be recreated and I'm just…

---

## [Can I keep a computer logged into Kibana?](https://discuss.elastic.co/t/can-i-keep-a-computer-logged-into-kibana/57513)

<div class="topic-metadata">

**Author:** [@Katy\_Gero](https://discuss.elastic.co/u/Katy_Gero)\
**Replies:** 5\
**Last updated:** [August 9, 2016, 8:55pm UTC](https://discuss.elastic.co/t/can-i-keep-a-computer-logged-into-kibana/57513 "2016-08-09T20:55:11Z")

</div>

I am trying to create a dashboard that I can display on a screen in the office. Unfortunately, Kibana logs me out pretty regularly, so I have to log back in to get the dashboard to display again. Is there any way to keep…

---

## [Input Plugin for Semantic Logging events](https://discuss.elastic.co/t/input-plugin-for-semantic-logging-events/48742)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 5\
**Last updated:** [May 2, 2016, 10:03pm UTC](https://discuss.elastic.co/t/input-plugin-for-semantic-logging-events/48742 "2016-05-02T22:03:03Z")

</div>

Is there any input plugin for capturing Semantic Logging events? I have used a file plugin. But it has many custom log formats. I am looking for something which is already built to serve this functionality.

---

## [Hi,i meet a problem in es](https://discuss.elastic.co/t/hi-i-meet-a-problem-in-es/43490)

<div class="topic-metadata">

**Author:** [@lmx1989219](https://discuss.elastic.co/u/lmx1989219)\
**Replies:** 5\
**Last updated:** [March 4, 2016, 10:21am UTC](https://discuss.elastic.co/t/hi-i-meet-a-problem-in-es/43490 "2016-03-04T10:21:32Z")

</div>

please see the follow: why es parse log level as a int value? if i change the log level to int value and this problem is resolved,but not my need.

---

## [EQL - Network Port scan - Watcher to EQL](https://discuss.elastic.co/t/eql-network-port-scan-watcher-to-eql/273104)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 2\
**Last updated:** [May 18, 2021, 11:52am UTC](https://discuss.elastic.co/t/eql-network-port-scan-watcher-to-eql/273104 "2021-05-18T11:52:01Z")

</div>

Please help me to convert the below port scan watcher query to EQL in ELK SIEM 7.12.1. PUT \_watcher/watch/port\_scan\_watch { "trigger": { "schedule": { "interval": "10s" } }, "input": { "search": { "request": { …

---

## [Error publishing app with dotnet fullframework APM](https://discuss.elastic.co/t/error-publishing-app-with-dotnet-fullframework-apm/209303)

<div class="topic-metadata">

**Author:** [@viniciusvelasco](https://discuss.elastic.co/u/viniciusvelasco)\
**Replies:** 2\
**Last updated:** [November 25, 2019, 1:28pm UTC](https://discuss.elastic.co/t/error-publishing-app-with-dotnet-fullframework-apm/209303 "2019-11-25T13:28:04Z")

</div>

Hello, I have a fullframework webapi and when adding the packages Elastic.APM Elastic.APM.AspNetFullFramework and Elastic.APM.EntityFramework6 and deploying to IIS on Windows 2012 I get the error below. On the developmen…

---

## [Reading packet from a lot of .pcap file?](https://discuss.elastic.co/t/reading-packet-from-a-lot-of-pcap-file/117746)

<div class="topic-metadata">

**Author:** [@wangyufeng0615](https://discuss.elastic.co/u/wangyufeng0615)\
**Replies:** 2\
**Last updated:** [February 1, 2018, 5:04am UTC](https://discuss.elastic.co/t/reading-packet-from-a-lot-of-pcap-file/117746 "2018-02-01T05:04:17Z")

</div>

Hello everyone, I have a lot of .pcap file in one folder (~10,000). I want import this data to elasticsearch. As I know, flag "-I" can import just one .pcap file at one time. Is there any way I can do this? Thanks a l…

---

## [Copy\_to and boost factor](https://discuss.elastic.co/t/copy-to-and-boost-factor/21431)

<div class="topic-metadata">

**Author:** [@Preeti\_Jain](https://discuss.elastic.co/u/Preeti_Jain)\
**Replies:** 2\
**Last updated:** [December 30, 2014, 9:31am UTC](https://discuss.elastic.co/t/copy-to-and-boost-factor/21431 "2014-12-30T09:31:25Z")

</div>

Hi, Does the individual boost factor get honoured for fields getting copied into a custom \_all field via copy\_to option? I am facing issues with the behavior. Have a look at the example below PUT localhost:920…

---

## [Cluster best practices](https://discuss.elastic.co/t/cluster-best-practices/10786)

<div class="topic-metadata">

**Author:** [@Pierre\_Carlson](https://discuss.elastic.co/u/Pierre_Carlson)\
**Replies:** 2\
**Last updated:** [February 19, 2013, 4:39pm UTC](https://discuss.elastic.co/t/cluster-best-practices/10786 "2013-02-19T16:39:03Z")

</div>

I am looking for best practices on building an ES cluster. Since ES is so configurable, it seems like there are a dozen possibles ways to implement a cluster. Has anyone put together a list at possible config options…

---

## [Pull data from Elastic Enterprise Search to Kafka Topic](https://discuss.elastic.co/t/pull-data-from-elastic-enterprise-search-to-kafka-topic/316451)

<div class="topic-metadata">

**Author:** [@albertopneto](https://discuss.elastic.co/u/albertopneto)\
**Replies:** 7\
**Last updated:** [October 14, 2022, 12:43pm UTC](https://discuss.elastic.co/t/pull-data-from-elastic-enterprise-search-to-kafka-topic/316451 "2022-10-14T12:43:24Z")

</div>

Hi guys, I'm doing some experiments trying to pull data from Elasticsearch and pushing to Kafka. The source connector I'm using from Kafka Connect requires an index name and in this case with Elastic Enterprise Search …

---

## [Esrally benchmarking elastic cluster running on kubernetes on AWS](https://discuss.elastic.co/t/esrally-benchmarking-elastic-cluster-running-on-kubernetes-on-aws/309641)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 7\
**Last updated:** [July 22, 2022, 3:10am UTC](https://discuss.elastic.co/t/esrally-benchmarking-elastic-cluster-running-on-kubernetes-on-aws/309641 "2022-07-22T03:10:38Z")

</div>

Hi All, 1 esrally pods 1 master es pod 1 data es pod All these are running on separate ec2 instances. I am using i4i.16xLarge instance type. i4i.16xLarge 64 vCPUs 512 gb ram BULK SIZE 1000 BULK INDEXING CLIENT …

---

## [Metricbeat can't make visualization due to null value in index fields value](https://discuss.elastic.co/t/metricbeat-cant-make-visualization-due-to-null-value-in-index-fields-value/302996)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 7\
**Last updated:** [May 13, 2022, 4:47pm UTC](https://discuss.elastic.co/t/metricbeat-cant-make-visualization-due-to-null-value-in-index-fields-value/302996 "2022-05-13T16:47:57Z")

</div>

Hello All, I am unable to create TSVB visulization TOP N in kibana,as I'm trying to display system.filesystem.used.pct of mount point but both these fiels have null values(-) in index. Any suggestion would be helpful! …

---

## [Filebeat CPU shoots 100 times when sending to kafka topic using a field](https://discuss.elastic.co/t/filebeat-cpu-shoots-100-times-when-sending-to-kafka-topic-using-a-field/146898)

<div class="topic-metadata">

**Author:** [@krunalvora](https://discuss.elastic.co/u/krunalvora)\
**Replies:** 7\
**Last updated:** [September 24, 2018, 8:29pm UTC](https://discuss.elastic.co/t/filebeat-cpu-shoots-100-times-when-sending-to-kafka-topic-using-a-field/146898 "2018-09-24T20:29:10Z")

</div>

When using the filebeat config output like: output.kafka: hosts: - \<kafka\>:9092 topic: 'topic' The CPU usage of filebeat is around ~15m in kubernetes. But when I try to dynamically set the topic …

---

## [Performance degradation of Significant Terms Aggregation after upgrade (v2.4 -\> v5.4)](https://discuss.elastic.co/t/performance-degradation-of-significant-terms-aggregation-after-upgrade-v2-4-v5-4/90263)

<div class="topic-metadata">

**Author:** [@mats116](https://discuss.elastic.co/u/mats116)\
**Replies:** 7\
**Last updated:** [June 23, 2017, 9:11am UTC](https://discuss.elastic.co/t/performance-degradation-of-significant-terms-aggregation-after-upgrade-v2-4-v5-4/90263 "2017-06-23T09:11:34Z")

</div>

We tried to migrate from 2.4 to 5.4, but we noticed quite significant performance degradation. Significantly decreases especially in Significant Terms Aggregation. We consider the cange about collect\_mode is involved…

---

## [Create a new column with the hash of an existing column](https://discuss.elastic.co/t/create-a-new-column-with-the-hash-of-an-existing-column/256779)

<div class="topic-metadata">

**Author:** [@p1k4chu](https://discuss.elastic.co/u/p1k4chu)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 8:30pm UTC](https://discuss.elastic.co/t/create-a-new-column-with-the-hash-of-an-existing-column/256779 "2020-11-26T20:30:55Z")

</div>

I have an elasticsearch index to which I want to add a new column whose value is going to be the hash(sha256 or md5) of an existing column. Manually doing it isn't feasible as the index has more than 600,000,000 document…

---

## [Exception caught on transport layer : javax.net.ssl.SSLHandshakeException: null cert chain](https://discuss.elastic.co/t/exception-caught-on-transport-layer-javax-net-ssl-sslhandshakeexception-null-cert-chain/151274)

<div class="topic-metadata">

**Author:** [@Vivek\_Bairy](https://discuss.elastic.co/u/Vivek_Bairy)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 9:55am UTC](https://discuss.elastic.co/t/exception-caught-on-transport-layer-javax-net-ssl-sslhandshakeexception-null-cert-chain/151274 "2018-10-12T09:55:17Z")

</div>

I have enabled TLS/SSL in 6.4.0 elastic instance. After installing self signed ca cert in my local work station, I can securely invoke elastic & kibana URLs. When trying to access transport.tcp port from my application,…

---

## [Show documents for current dashboard](https://discuss.elastic.co/t/show-documents-for-current-dashboard/149581)

<div class="topic-metadata">

**Author:** [@MShekow](https://discuss.elastic.co/u/MShekow)\
**Replies:** 1\
**Last updated:** [September 25, 2018, 2:45am UTC](https://discuss.elastic.co/t/show-documents-for-current-dashboard/149581 "2018-09-25T02:45:44Z")

</div>

Hi, Assume the following workflow: You drill down your data on your dashboard (e.g. by clicking slices in a pie-chart diagram, or using additional lucene filters) until only a few hits (documents) are left Now you wan…

---

## [Filebeat -\> Logstash :connection reset by peer](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/94117)

<div class="topic-metadata">

**Author:** [@yeruvass](https://discuss.elastic.co/u/yeruvass)\
**Replies:** 1\
**Last updated:** [July 21, 2017, 2:20pm UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/94117 "2017-07-21T14:20:31Z")

</div>

I'm shipping logs from filebeat to logstash with tls and getting below error and tried lot of ways to resolve but helpless. 2017-07-21T18:24:27+05:30 ERR Failed to publish events caused by: read tcp 10.197.53.179:41349…

---

## [Searching on exponent numbers](https://discuss.elastic.co/t/searching-on-exponent-numbers/23667)

<div class="topic-metadata">

**Author:** [@Craig\_Berry](https://discuss.elastic.co/u/Craig_Berry)\
**Replies:** 1\
**Last updated:** [May 22, 2015, 9:07am UTC](https://discuss.elastic.co/t/searching-on-exponent-numbers/23667 "2015-05-22T09:07:18Z")

</div>

Hi there, I want to be able to provide a text search against a document that contains a large number (10+ digits) but running into some automatic exponent conversion issues with my mapping. Scenario: User ca…

---

## [Elasticsearch sort on combined fields](https://discuss.elastic.co/t/elasticsearch-sort-on-combined-fields/11316)

<div class="topic-metadata">

**Author:** [@vannya](https://discuss.elastic.co/u/vannya)\
**Replies:** 1\
**Last updated:** [March 26, 2013, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-sort-on-combined-fields/11316 "2013-03-26T12:52:30Z")

</div>

Hi all, I'm having troubles with sorting based on a combination of fields. For instance, i have a document: { "name": "blah", "age": 1, "id": "132456"} I need to get all documents sorted by the combination o…

---

## [Custom log4j2.propoerties for Elasticsearch in docker](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 3\
**Last updated:** [August 3, 2022, 11:38am UTC](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321 "2022-08-03T11:38:51Z")

</div>

Hello, On docker, log messages go to the console and are handled by the configured Docker logging driver. To access logs we need to run docker logs $container\_name. I would like to change this behavior, and ask Elastic…

---

## [Filebeat "dynamic" field rename](https://discuss.elastic.co/t/filebeat-dynamic-field-rename/221651)

<div class="topic-metadata">

**Author:** [@Stanislav\_Lapshansky](https://discuss.elastic.co/u/Stanislav_Lapshansky)\
**Replies:** 3\
**Last updated:** [March 2, 2020, 5:04pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-field-rename/221651 "2020-03-02T17:04:44Z")

</div>

I want to rename fields in filebeat according to variable value. I've tried this: filebeat.inputs: - type: docker #... processors: - rename: fields: - from: "json" to: "%{\['docker.co…

---

## [Grok pattern matching](https://discuss.elastic.co/t/grok-pattern-matching/217078)

<div class="topic-metadata">

**Author:** [@littlejob1](https://discuss.elastic.co/u/littlejob1)\
**Replies:** 3\
**Last updated:** [January 30, 2020, 4:21pm UTC](https://discuss.elastic.co/t/grok-pattern-matching/217078 "2020-01-30T16:21:15Z")

</div>

Trying to figure out the most effective way to parse the following message being received via a syslog input. \<134\>1 2020-01-29T21:18:07Z 10.10.10.10 PulseSecure: - - - 2020-01-29 21:18:07 - ssl - \[4.4.4.4\] domain\\user(…

---

## [Error running the "metricbeat test modules" command: not registered, module not found](https://discuss.elastic.co/t/error-running-the-metricbeat-test-modules-command-not-registered-module-not-found/128576)

<div class="topic-metadata">

**Author:** [@aadam](https://discuss.elastic.co/u/aadam)\
**Replies:** 3\
**Last updated:** [April 19, 2018, 7:20pm UTC](https://discuss.elastic.co/t/error-running-the-metricbeat-test-modules-command-not-registered-module-not-found/128576 "2018-04-19T19:20:37Z")

</div>

Hi , Let me introduce you guys to my setup. I have a development environment where a created my own modules with my custom metricsets. I can run the binary mode and see that all is working fine with this command: (./met…

---

## [JVM core dump with official Docker image for ElasticSearch 5.5.3](https://discuss.elastic.co/t/jvm-core-dump-with-official-docker-image-for-elasticsearch-5-5-3/108578)

<div class="topic-metadata">

**Author:** [@Andre\_Caron](https://discuss.elastic.co/u/Andre_Caron)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 1:54pm UTC](https://discuss.elastic.co/t/jvm-core-dump-with-official-docker-image-for-elasticsearch-5-5-3/108578 "2017-11-29T13:54:50Z")

</div>

Hi there! I'm porting my application to ElasticSearch and Kibana 5.5 (from 1.7 and 4.1, respectively). I'm not migrating any data (yet), only trying to get my application to run against a fresh instance of 5.5. While …

---

## [Tribe nodes in ES 2.2.0 breaks plugins](https://discuss.elastic.co/t/tribe-nodes-in-es-2-2-0-breaks-plugins/43312)

<div class="topic-metadata">

**Author:** [@tinle](https://discuss.elastic.co/u/tinle)\
**Replies:** 3\
**Last updated:** [March 3, 2016, 7:03pm UTC](https://discuss.elastic.co/t/tribe-nodes-in-es-2-2-0-breaks-plugins/43312 "2016-03-03T19:03:03Z")

</div>

We are extensive user of tribe nodes. We have multiple data centers and we need to federate the clusters. Up to now we've been staying on 1.7.x series as the 2.x series break too many things. I am in the process of …

---

## [Failed to execute 'Download CSV'](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603)

<div class="topic-metadata">

**Author:** [@t98907](https://discuss.elastic.co/u/t98907)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 8:52am UTC](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603 "2020-12-08T08:52:02Z")

</div>

Hi there, Kibana: 7.8.0 'Download CSV' failed even though I am logged in as 'elastic' user. Must '\_source' be enabled on the index to run 'Download CSV'?

---

## [X-Pack monitoring using up a lot of CPU](https://discuss.elastic.co/t/x-pack-monitoring-using-up-a-lot-of-cpu/133074)

<div class="topic-metadata">

**Author:** [@JensVanDeynse](https://discuss.elastic.co/u/JensVanDeynse)\
**Replies:** 6\
**Last updated:** [May 29, 2018, 12:03pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-using-up-a-lot-of-cpu/133074 "2018-05-29T12:03:39Z")

</div>

Hello there In our company we've set up an elasticstack which has to handle about 130GB of logs (in indices) per day coming from 14 hosts (for now). Yesterday I install x-pack monitoring on the filebeats but then I not…

---

## [How to send a piece of command to es automatic by es when es just started?](https://discuss.elastic.co/t/how-to-send-a-piece-of-command-to-es-automatic-by-es-when-es-just-started/47930)

<div class="topic-metadata">

**Author:** [@focuslihong](https://discuss.elastic.co/u/focuslihong)\
**Replies:** 6\
**Last updated:** [April 23, 2016, 6:23pm UTC](https://discuss.elastic.co/t/how-to-send-a-piece-of-command-to-es-automatic-by-es-when-es-just-started/47930 "2016-04-23T18:23:53Z")

</div>

Hi, for es cancel river service in es 2.x. River service begin to start after ES started. Now I need the function as river service. How can I do?

---

## [Make the Benchmark dashboards available to all to be imported in kibana](https://discuss.elastic.co/t/make-the-benchmark-dashboards-available-to-all-to-be-imported-in-kibana/237527)

<div class="topic-metadata">

**Author:** [@micas](https://discuss.elastic.co/u/micas)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 7:28pm UTC](https://discuss.elastic.co/t/make-the-benchmark-dashboards-available-to-all-to-be-imported-in-kibana/237527 "2020-06-17T19:28:31Z")

</div>

Even though i can run the esrally it would be useful if you guys can share the dashboards you have created: https://elasticsearch-benchmark-analytics.elastic.co/app/kibana#/dashboard/d02cc8e5-3f42-482a-a3d9-d09956db3040 …

[Previous page](https://discuss.elastic.co/top.md?page=1081&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1083&per_page=50&period=all)
