# Top

**URL:** https://discuss.elastic.co/top.md?page=1097&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1098

---

## [Continents, Countries, States and Cities in multiple languages](https://discuss.elastic.co/t/continents-countries-states-and-cities-in-multiple-languages/79185)

<div class="topic-metadata">

**Author:** [@thiagohneves](https://discuss.elastic.co/u/thiagohneves)\
**Replies:** 1\
**Last updated:** [March 19, 2017, 10:03pm UTC](https://discuss.elastic.co/t/continents-countries-states-and-cities-in-multiple-languages/79185 "2017-03-19T22:03:36Z")

</div>

Hi guys, how are you? I'm new in Elasticsearch and I do need to developer a feature that has an unique input form that searches many documents. I create one language per document, ex: continents-en, continents-pt-br,…

---

## [Risk associated with action.write\_consistency and index.recovery.initial\_shards for cluster recovery with a single node](https://discuss.elastic.co/t/risk-associated-with-action-write-consistency-and-index-recovery-initial-shards-for-cluster-recovery-with-a-single-node/50211)

<div class="topic-metadata">

**Author:** [@vin01](https://discuss.elastic.co/u/vin01)\
**Replies:** 1\
**Last updated:** [May 17, 2016, 11:50am UTC](https://discuss.elastic.co/t/risk-associated-with-action-write-consistency-and-index-recovery-initial-shards-for-cluster-recovery-with-a-single-node/50211 "2016-05-17T11:50:53Z")

</div>

In a scenario where i have a 3 node cluster, and all nodes fail (number of replicas = 2), if i just bring up one node, shard allocation won't happen because of "index.recovery.initial\_shards" , which is set to quorum by …

---

## [Elastic operator not creating elasticsearch in Openshift 3.11](https://discuss.elastic.co/t/elastic-operator-not-creating-elasticsearch-in-openshift-3-11/286847)

<div class="topic-metadata">

**Author:** [@Jasper9041](https://discuss.elastic.co/u/Jasper9041)\
**Replies:** 3\
**Last updated:** [October 21, 2021, 3:12pm UTC](https://discuss.elastic.co/t/elastic-operator-not-creating-elasticsearch-in-openshift-3-11/286847 "2021-10-21T15:12:05Z")

</div>

Hi, I'm trying to use the Elastic operator to deploy an Elasticsearch instance in a Openshift 3.11 (minishift) cluster. It doesn't seem to work... The creation of Elasticsearch is failing. I see the following k8s events…

---

## [\[Resolved\]Logstash - Question for how to use if condition to skip invalid date format](https://discuss.elastic.co/t/resolved-logstash-question-for-how-to-use-if-condition-to-skip-invalid-date-format/174472)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 3\
**Last updated:** [April 1, 2019, 5:39am UTC](https://discuss.elastic.co/t/resolved-logstash-question-for-how-to-use-if-condition-to-skip-invalid-date-format/174472 "2019-04-01T05:39:07Z")

</div>

Hi Team, I have a CSV file which has a column named 'COMMIT\_DATE', the values of this column input by end user sometimes are a string , instead of a date. For example, there's invalid date value 'test' in below source d…

---

## [Elasticsearch removing field inside field](https://discuss.elastic.co/t/elasticsearch-removing-field-inside-field/171729)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 3\
**Last updated:** [March 12, 2019, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-removing-field-inside-field/171729 "2019-03-12T13:23:07Z")

</div>

Hi, I would like to remove fields from my ES, which are below format, { "parent": { "address": { "city": "abc", "state": "def" } } } By using "script": "ctx.\_source.remove("parent.address")", it's not remo…

---

## [Line Chart not displaying correctly when using Percentage in normal mode](https://discuss.elastic.co/t/line-chart-not-displaying-correctly-when-using-percentage-in-normal-mode/165662)

<div class="topic-metadata">

**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\
**Replies:** 3\
**Last updated:** [January 28, 2019, 9:52pm UTC](https://discuss.elastic.co/t/line-chart-not-displaying-correctly-when-using-percentage-in-normal-mode/165662 "2019-01-28T21:52:46Z")

</div>

I am trying to use a line chart as a data histogram by month on a terms aggregation of two terms: "Yes" and "No" in percentage mode on the Y axis. When the line chart is stacked everything looks as expected but when it …

---

## [MetricBeats data to Elastic Search](https://discuss.elastic.co/t/metricbeats-data-to-elastic-search/73335)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 3\
**Last updated:** [February 8, 2017, 12:09pm UTC](https://discuss.elastic.co/t/metricbeats-data-to-elastic-search/73335 "2017-02-08T12:09:30Z")

</div>

Hi- I'd like to check, if Metricbeats data is sending data to my Elastic search with out any break. (There might be a scenario server gets restarted) I have a validation, to check if my server is connected to the Elastic…

---

## [Elasticsearch-image plugin abandoned?](https://discuss.elastic.co/t/elasticsearch-image-plugin-abandoned/44177)

<div class="topic-metadata">

**Author:** [@tomhines](https://discuss.elastic.co/u/tomhines)\
**Replies:** 3\
**Last updated:** [March 15, 2016, 10:18pm UTC](https://discuss.elastic.co/t/elasticsearch-image-plugin-abandoned/44177 "2016-03-15T22:18:48Z")

</div>

This plugin seems to be abandoned. I have upgraded from ES 1.3.9 to 2.2 and this plugin is broken. I see two old pull requests on git that have been ignored. Please mark it as abandoned in the Elasticsearch documentat…

---

## [Sum aggregation on array values](https://discuss.elastic.co/t/sum-aggregation-on-array-values/28365)

<div class="topic-metadata">

**Author:** [@lokeshhctm](https://discuss.elastic.co/u/lokeshhctm)\
**Replies:** 0\
**Last updated:** [August 31, 2015, 5:09pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-array-values/28365 "2015-08-31T17:09:43Z")

</div>

I have an index with several columns having values like number of requests and a few columns are array fields. I need to have sum of value column with group by of values in array column. e.g. rows are like: rowID, requ…

---

## [Node down alert](https://discuss.elastic.co/t/node-down-alert/317946)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [November 3, 2022, 9:27am UTC](https://discuss.elastic.co/t/node-down-alert/317946 "2022-11-03T09:27:52Z")

</div>

Hi Community, I am using ELK cluster version 7.17. I need to get alert if a node goes down for a particular duration like 5 minute. I am using metricbeat to monitor cluster. How can we achieve this.

---

## [How to get filter value metadata in input](https://discuss.elastic.co/t/how-to-get-filter-value-metadata-in-input/235674)

<div class="topic-metadata">

**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\
**Replies:** 6\
**Last updated:** [June 4, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-get-filter-value-metadata-in-input/235674 "2020-06-04T13:29:41Z")

</div>

Hi Guys, input{ kafka { bootstrap\_servers =\> "172.20.188.11:9092,172.20.188.31:9092,172.20.188.30:9092" topics =\> \["DS\_Test"\] decorate\_events =\> true group\_id =\> "ds\_test" codec =\> json max\_poll\_records =\> "100" …

---

## [Migrating shortened urls](https://discuss.elastic.co/t/migrating-shortened-urls/185478)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 6\
**Last updated:** [June 13, 2019, 6:14pm UTC](https://discuss.elastic.co/t/migrating-shortened-urls/185478 "2019-06-13T18:14:35Z")

</div>

Hi, We recently did ELK upgrade from 5.x to 7.x. We had generated some shortened urls in the old cluster. Is there any way to make them work with the new cluster? Thanks.

---

## [Gmail watcher , exception during elastic search](https://discuss.elastic.co/t/gmail-watcher-exception-during-elastic-search/179730)

<div class="topic-metadata">

**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\
**Replies:** 4\
**Last updated:** [May 6, 2019, 10:09am UTC](https://discuss.elastic.co/t/gmail-watcher-exception-during-elastic-search/179730 "2019-05-06T10:09:03Z")

</div>

Hi, I am trying to setup watcher on index and send notification on my gmail account. Done below settings in elasticsearch.yml , indentation is correct. xpack.notification.email.account: gmail\_account: profile: gmail …

---

## [How to "merge" same name indices](https://discuss.elastic.co/t/how-to-merge-same-name-indices/107993)

<div class="topic-metadata">

**Author:** [@kevinray0030](https://discuss.elastic.co/u/kevinray0030)\
**Replies:** 4\
**Last updated:** [November 27, 2017, 4:35pm UTC](https://discuss.elastic.co/t/how-to-merge-same-name-indices/107993 "2017-11-27T16:35:43Z")

</div>

Hello all, I am running into an issue where I am receiving the following error: can not be imported as a dangling index, as index with same name already exists in cluster metadata I know that I am getting this error b…

---

## [Manual install 2.3.2 and init.d script](https://discuss.elastic.co/t/manual-install-2-3-2-and-init-d-script/49929)

<div class="topic-metadata">

**Author:** [@jchen](https://discuss.elastic.co/u/jchen)\
**Replies:** 4\
**Last updated:** [May 12, 2016, 7:17pm UTC](https://discuss.elastic.co/t/manual-install-2-3-2-and-init-d-script/49929 "2016-05-12T19:17:31Z")

</div>

I am trying to do a manual install of ElasticSearch-2.3.2 on CentOS 6. We used to use the open source service wrapper (https://github.com/elastic/elasticsearch-servicewrapper) to handle the startup of the service but it …

---

## [ICU Analysers for Elastic search](https://discuss.elastic.co/t/icu-analysers-for-elastic-search/39542)

<div class="topic-metadata">

**Author:** [@Akhil\_Suresh](https://discuss.elastic.co/u/Akhil_Suresh)\
**Replies:** 4\
**Last updated:** [February 22, 2016, 6:36am UTC](https://discuss.elastic.co/t/icu-analysers-for-elastic-search/39542 "2016-02-22T06:36:15Z")

</div>

Do Elastic search support a korean language Analyser? Need help on that

---

## [Get Copy Post URL via API for automatic reports](https://discuss.elastic.co/t/get-copy-post-url-via-api-for-automatic-reports/299094)

<div class="topic-metadata">

**Author:** [@Agus\_Roca](https://discuss.elastic.co/u/Agus_Roca)\
**Replies:** 0\
**Last updated:** [March 8, 2022, 1:37pm UTC](https://discuss.elastic.co/t/get-copy-post-url-via-api-for-automatic-reports/299094 "2022-03-08T13:37:20Z")

</div>

Hi, i've been checking the docs and also the forum and seems like the only way to automate the generation of pdf is to first manually copy the Post URL and then, yes we have APIs to call. But I was wondering if it is pos…

---

## [Machine learning, No node found to open the job because job memory requirements are stale](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [January 29, 2021, 2:33am UTC](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582 "2021-01-29T02:33:16Z")

</div>

Hi, Im getting this warning from ML jobs after restart the nodes on docker I run this commands in devs tools before restart the nodes PUT \_cluster/settings { "persistent": { "cluster.routing.allocation.enable":…

---

## [Metricbeat --setup dashboards throws error for keystore not created](https://discuss.elastic.co/t/metricbeat-setup-dashboards-throws-error-for-keystore-not-created/253403)

<div class="topic-metadata">

**Author:** [@karthikeyanajendran1](https://discuss.elastic.co/u/karthikeyanajendran1)\
**Replies:** 7\
**Last updated:** [October 27, 2020, 11:05am UTC](https://discuss.elastic.co/t/metricbeat-setup-dashboards-throws-error-for-keystore-not-created/253403 "2020-10-27T11:05:27Z")

</div>

Hi Experts, We are developing automation script to setup metricbeat before start the metricbeat. Our automation script does the following: Download and untar the metricbeat package (7.6.1) from elastic site. Enable s…

---

## [Kibana external data](https://discuss.elastic.co/t/kibana-external-data/195655)

<div class="topic-metadata">

**Author:** [@HisShadow](https://discuss.elastic.co/u/HisShadow)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 1:43pm UTC](https://discuss.elastic.co/t/kibana-external-data/195655 "2019-08-19T13:43:13Z")

</div>

Is it possible to use some external data source to augment visualizations in kibana? Say I have logs, and each log has an ID field, and I want to use my external API to add an email address associated with that ID to the…

---

## [How can I share Kibana Dashboard to customers with time filter?](https://discuss.elastic.co/t/how-can-i-share-kibana-dashboard-to-customers-with-time-filter/181851)

<div class="topic-metadata">

**Author:** [@grad](https://discuss.elastic.co/u/grad)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 7:47pm UTC](https://discuss.elastic.co/t/how-can-i-share-kibana-dashboard-to-customers-with-time-filter/181851 "2019-05-20T19:47:52Z")

</div>

Hi all!!! I would like to share my dashboards with my customers... but I can't find many customization options... When I embed the dashboard in HTML page after clicking SHARE --\> EMBED CODE --\> SAVED OBJECT the embedde…

---

## [Monitoring HTTPS](https://discuss.elastic.co/t/monitoring-https/87940)

<div class="topic-metadata">

**Author:** [@Gilberto](https://discuss.elastic.co/u/Gilberto)\
**Replies:** 1\
**Last updated:** [June 2, 2017, 1:42am UTC](https://discuss.elastic.co/t/monitoring-https/87940 "2017-06-02T01:42:20Z")

</div>

How can I monitoring Https with packetbeat?

---

## [Infinity with Range facets](https://discuss.elastic.co/t/infinity-with-range-facets/5446)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 1\
**Last updated:** [September 24, 2011, 10:57am UTC](https://discuss.elastic.co/t/infinity-with-range-facets/5446 "2011-09-24T10:57:34Z")

</div>

Hi, I'm wondering why when I have no values for a given range in the range facet I get -Infinity for max value and +Infinity for min as this : "montantLS" : { "\_type" : "range", "ranges" :…

---

## [Integration of Elasticsearch with tools of data mining](https://discuss.elastic.co/t/integration-of-elasticsearch-with-tools-of-data-mining/141502)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 7:00am UTC](https://discuss.elastic.co/t/integration-of-elasticsearch-with-tools-of-data-mining/141502 "2018-07-25T07:00:11Z")

</div>

Hi there, I hope this topic will not sound too much general, but I'm opening it because I think it could be beneficial for a general audience to discuss. I'm currently working on a big data project which involves the an…

---

## [How to call a filter/report in a watcher?](https://discuss.elastic.co/t/how-to-call-a-filter-report-in-a-watcher/274513)

<div class="topic-metadata">

**Author:** [@houjil](https://discuss.elastic.co/u/houjil)\
**Replies:** 5\
**Last updated:** [June 1, 2021, 3:49pm UTC](https://discuss.elastic.co/t/how-to-call-a-filter-report-in-a-watcher/274513 "2021-06-01T15:49:27Z")

</div>

Hi, Be indulgent plz this is my first watcher :slight\_smile: I'm trying to create a watcher in where I can: call and fetch a filter/report for a specific index (stream). The idea is to catch from received logs, of a…

---

## [Inconsistency in no of total hits in results](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023)

<div class="topic-metadata">

**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\
**Replies:** 5\
**Last updated:** [December 8, 2020, 4:47pm UTC](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023 "2020-12-08T16:47:34Z")

</div>

Hi All, I am using below query for one of the our use cases & we are observing weird thing on total hits count - means assume I hit the below request first time then total hits in result would be 64 and if I hit second …

---

## [Unable to Disable G1 GC logging to stdout RHEL6](https://discuss.elastic.co/t/unable-to-disable-g1-gc-logging-to-stdout-rhel6/247291)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 5\
**Last updated:** [September 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/unable-to-disable-g1-gc-logging-to-stdout-rhel6/247291 "2020-09-21T09:44:20Z")

</div>

I am unable to disable the GC logging from Elasticsearch 7.x to stdout. elasticsearch startup command: /usr/share/elasticsearch/jdk//bin/java -Xshare:auto -Des.networkaddress.cache.ttl=60 -Des.networkaddress.cache.nega…

---

## [JWT token support with ELK 7.1](https://discuss.elastic.co/t/jwt-token-support-with-elk-7-1/185312)

<div class="topic-metadata">

**Author:** [@chenww](https://discuss.elastic.co/u/chenww)\
**Replies:** 5\
**Last updated:** [June 13, 2019, 9:16am UTC](https://discuss.elastic.co/t/jwt-token-support-with-elk-7-1/185312 "2019-06-13T09:16:15Z")

</div>

Wonder if JWT token is supported in new ELK . 7.1 release or not with security packs. Please confirm this as open distro branches for this already. thanks

---

## [Reindexing failed with TAG Mismatch Exception](https://discuss.elastic.co/t/reindexing-failed-with-tag-mismatch-exception/335839)

<div class="topic-metadata">

**Author:** [@awenest](https://discuss.elastic.co/u/awenest)\
**Replies:** 2\
**Last updated:** [July 7, 2023, 5:23am UTC](https://discuss.elastic.co/t/reindexing-failed-with-tag-mismatch-exception/335839 "2023-07-07T05:23:55Z")

</div>

I have increased the socket timeout to 15 minutes since I am trying to reindex ~ 40k records. But within 6 minutes I get below exception : Caused by: org.springframework.dao.DataAccessResourceFailureException: Tag mism…

---

## [How to collect \`dmesg\` outputs - or those logs are useless?](https://discuss.elastic.co/t/how-to-collect-dmesg-outputs-or-those-logs-are-useless/262714)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 2:08pm UTC](https://discuss.elastic.co/t/how-to-collect-dmesg-outputs-or-those-logs-are-useless/262714 "2021-02-01T14:08:54Z")

</div>

Hi thanks for the lib! I wonder (1) whether I should collect dmesg outputs? Are they useful or useless? In addition, I wonder how can I collect them using Filebeat? Thanks!

---

## [True/False Visualization](https://discuss.elastic.co/t/true-false-visualization/259665)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [December 27, 2020, 3:40pm UTC](https://discuss.elastic.co/t/true-false-visualization/259665 "2020-12-27T15:40:39Z")

</div>

Hi all! I'm perplexed on how to do something that should be easy and hoping that someone can point me in the right direction. I'm building a dashboard and want to have a box on it that pulls the last text value and dis…

---

## [Kibana SQL Query Index with -](https://discuss.elastic.co/t/kibana-sql-query-index-with/203668)

<div class="topic-metadata">

**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\
**Replies:** 2\
**Last updated:** [October 18, 2019, 9:14am UTC](https://discuss.elastic.co/t/kibana-sql-query-index-with/203668 "2019-10-18T09:14:51Z")

</div>

Good day, I have a wired situation, my elastic index name contains '-' (ex: my-index-2019) I am trying to query using sql syntax, but it complaining about the '-' in the index name. Any ideas.? how to sort out this. B…

---

## [How to fix "rm: cannot remove '/usr/share/filebeat/bin/data/registry/filebeat': Directory not empty"?](https://discuss.elastic.co/t/how-to-fix-rm-cannot-remove-usr-share-filebeat-bin-data-registry-filebeat-directory-not-empty/192821)

<div class="topic-metadata">

**Author:** [@kensaku-okada](https://discuss.elastic.co/u/kensaku-okada)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 9:14am UTC](https://discuss.elastic.co/t/how-to-fix-rm-cannot-remove-usr-share-filebeat-bin-data-registry-filebeat-directory-not-empty/192821 "2019-08-01T09:14:13Z")

</div>

I made a docker which 1) let a shellscript repetitively run Filebeat to read a file and transmit its data to the local Logstash and 2) run a logstash to transfer the received data to a web server. Since I wanted to do a…

---

## [Can i reindex aggregation's result to other index?](https://discuss.elastic.co/t/can-i-reindex-aggregations-result-to-other-index/166102)

<div class="topic-metadata">

**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\
**Replies:** 2\
**Last updated:** [January 30, 2019, 5:27am UTC](https://discuss.elastic.co/t/can-i-reindex-aggregations-result-to-other-index/166102 "2019-01-30T05:27:32Z")

</div>

Hi. im using Elasticseacrh 6.4.1 i have a lot of logs. to visualize these, im using vega in Kibana. (there are nested objects) but logs are too many exist to aggregate and drawing grpah in vega. (request timeout occu…

---

## [Java Client YAML configuration](https://discuss.elastic.co/t/java-client-yaml-configuration/37207)

<div class="topic-metadata">

**Author:** [@vorden](https://discuss.elastic.co/u/vorden)\
**Replies:** 2\
**Last updated:** [December 15, 2015, 9:29am UTC](https://discuss.elastic.co/t/java-client-yaml-configuration/37207 "2015-12-15T09:29:41Z")

</div>

Hi everyone, I'm currently migrating a product from Elasticsearch 1.7 to 2.1. We use the Java node client to setup a standalone server or communicate with a remote one. When trying to setup the node instance, we use th…

---

## [Max\_result\_window value not reflect in result set.. it show only 10k records only](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465)

<div class="topic-metadata">

**Author:** [@Sanjaygpatel](https://discuss.elastic.co/u/Sanjaygpatel)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 8:16am UTC](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465 "2020-05-07T08:16:24Z")

</div>

Hello , i have set property of max\_result\_window : "1000000" in settings at index level but while search result for larger data set then only result 10k so it mean not taking effect index setting. is there anything i h…

---

## [Timelion - Stacked Bars depending on Interval](https://discuss.elastic.co/t/timelion-stacked-bars-depending-on-interval/146835)

<div class="topic-metadata">

**Author:** [@manuelk](https://discuss.elastic.co/u/manuelk)\
**Replies:** 3\
**Last updated:** [September 28, 2018, 1:27pm UTC](https://discuss.elastic.co/t/timelion-stacked-bars-depending-on-interval/146835 "2018-09-28T13:27:17Z")

</div>

Hello, i try to create an timelion chart showing values on an hourly base. Now I´m not able to get bars "unstacked" as soon as I set interval to "1h". When I set it to "AUTO" it´s working fine: As soon as I switch to…

---

## [Multiple row metric heat hap](https://discuss.elastic.co/t/multiple-row-metric-heat-hap/148392)

<div class="topic-metadata">

**Author:** [@drdavew00](https://discuss.elastic.co/u/drdavew00)\
**Replies:** 3\
**Last updated:** [September 21, 2018, 2:58am UTC](https://discuss.elastic.co/t/multiple-row-metric-heat-hap/148392 "2018-09-21T02:58:56Z")

</div>

I'm trying to achieve the same style of heat map as this post. I'm trying to follow the advice in this post, but seem to be missing something. My data is already counted , so i don't need kibana to do counts for me. …

---

## [Problems with Average Visualization](https://discuss.elastic.co/t/problems-with-average-visualization/117895)

<div class="topic-metadata">

**Author:** [@Roberto\_Puga](https://discuss.elastic.co/u/Roberto_Puga)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 4:21pm UTC](https://discuss.elastic.co/t/problems-with-average-visualization/117895 "2018-02-01T16:21:59Z")

</div>

Hello, I've been working with Elastic for a moth now and I haven't been able solve a problem I found while working with apache logs. I added a integer field called "peso" that can be either 0 or 1. I created a visuali…

---

## [Empty configuration for pipeline\_id](https://discuss.elastic.co/t/empty-configuration-for-pipeline-id/160968)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 1\
**Last updated:** [December 18, 2018, 4:55pm UTC](https://discuss.elastic.co/t/empty-configuration-for-pipeline-id/160968 "2018-12-18T16:55:21Z")

</div>

Hi, I am trying to configure for centralized pipeline management but failed. Would you please help check why? Thanks.. pipeline.yml - pipeline.id: mainpipe path.config: "/etc/logstash/conf.d/\*.conf" ll path.confi…

---

## [Kibana failed to open at browser](https://discuss.elastic.co/t/kibana-failed-to-open-at-browser/151077)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [October 5, 2018, 8:51pm UTC](https://discuss.elastic.co/t/kibana-failed-to-open-at-browser/151077 "2018-10-05T20:51:28Z")

</div>

HI, I'm using ELK version 6.2.4 by using docker ELK is running on my server. My issue is unable to open kibana on my browser. Elasticsearch.yml cluster.name: &quot;docker-cluster&quot; network.host: 0.0.0.0 …

---

## [Logstash Kafka Input Plugin consumer not reading messages of Kafka topic](https://discuss.elastic.co/t/logstash-kafka-input-plugin-consumer-not-reading-messages-of-kafka-topic/91686)

<div class="topic-metadata">

**Author:** [@sgunnala](https://discuss.elastic.co/u/sgunnala)\
**Replies:** 1\
**Last updated:** [July 4, 2017, 1:33pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-consumer-not-reading-messages-of-kafka-topic/91686 "2017-07-04T13:33:17Z")

</div>

Kafka 0.9 filebeats 5.1 LogstashIndexer: 5.0.2 with Kafka Input plugin log process generated a 40 mil lag and consumer stopped consuming. Tried restarts and config changes but No luck. Not sure when it stopped proce…

---

## [Does Kibana 4 configuration supports logrotation?](https://discuss.elastic.co/t/does-kibana-4-configuration-supports-logrotation/26618)

<div class="topic-metadata">

**Author:** [@Kuldip\_Madnani](https://discuss.elastic.co/u/Kuldip_Madnani)\
**Replies:** 1\
**Last updated:** [August 5, 2015, 3:28pm UTC](https://discuss.elastic.co/t/does-kibana-4-configuration-supports-logrotation/26618 "2015-08-05T15:28:00Z")

</div>

If we enable log files in kibana.yml file by uncommenting "log\_file", will it also take care of log rotation or we need to implement our own logic for logrotation?

---

## [\[Zabbix output plugin\] zabbix\_key is missing](https://discuss.elastic.co/t/zabbix-output-plugin-zabbix-key-is-missing/2123)

<div class="topic-metadata">

**Author:** [@MrAV](https://discuss.elastic.co/u/MrAV)\
**Replies:** 1\
**Last updated:** [June 8, 2015, 3:55pm UTC](https://discuss.elastic.co/t/zabbix-output-plugin-zabbix-key-is-missing/2123 "2015-06-08T15:55:53Z")

</div>

Hi, I'm trying to parse a log-file with Logstash (1.5.0) and send output to Zabbix. Unfortunately, I'm receiving the following error: ←\[33mSkipping zabbix output; field referenced by quik.exp is missing {:level=\>:war…

---

## [Async delete by query in elastic search spawns never ending tasks](https://discuss.elastic.co/t/async-delete-by-query-in-elastic-search-spawns-never-ending-tasks/285226)

<div class="topic-metadata">

**Author:** [@ThijsBM](https://discuss.elastic.co/u/ThijsBM)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 7:09am UTC](https://discuss.elastic.co/t/async-delete-by-query-in-elastic-search-spawns-never-ending-tasks/285226 "2021-09-28T07:09:11Z")

</div>

We have a lot of data in our index that is tagged by an ownerId which resembles a customer. Every customer has the ability to define its own retention period. After the retention period is passed all the documents that a…

---

## [Is it necessary to use filebeat or logstash forwarder in ELK stack?](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606)

<div class="topic-metadata">

**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 11:22pm UTC](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606 "2020-09-04T23:22:28Z")

</div>

Is it necessary to use filebeat in ELK stack for collecting logs like installing filebeat on all the servers from where we need to collect logs and installing Logstash, ES and Kibana in a single separate server. Or can …

---

## [Customize my Kibana Panel in 7.1.0](https://discuss.elastic.co/t/customize-my-kibana-panel-in-7-1-0/196467)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 5:21am UTC](https://discuss.elastic.co/t/customize-my-kibana-panel-in-7-1-0/196467 "2019-08-30T05:21:55Z")

</div>

Hi, Im trying to craete a custom panel in Kibana 7.1.0. I understand i need to edit my css files, but im not sure where and what. The changes Im looking to make is to Bring the Title to Center, Bold, Colored. Kindly …

---

## [Logstash runner unexpected error occured](https://discuss.elastic.co/t/logstash-runner-unexpected-error-occured/182218)

<div class="topic-metadata">

**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\
**Replies:** 4\
**Last updated:** [May 27, 2019, 6:45am UTC](https://discuss.elastic.co/t/logstash-runner-unexpected-error-occured/182218 "2019-05-27T06:45:28Z")

</div>

Hi, I am trying to parse really large multiline logs, the file is first ingested using filebeat. There i have specified multiline settings so it seems to be fine over ther. However, while ingesting files in logstash an …

---

## [Sharepoint ULS multiline entries](https://discuss.elastic.co/t/sharepoint-uls-multiline-entries/92977)

<div class="topic-metadata">

**Author:** [@Blu3](https://discuss.elastic.co/u/Blu3)\
**Replies:** 4\
**Last updated:** [July 22, 2017, 7:14pm UTC](https://discuss.elastic.co/t/sharepoint-uls-multiline-entries/92977 "2017-07-22T19:14:58Z")

</div>

Hi I'm trying to configure Logstash to merge multiline messages into one, but I think this is a little different case than described on https://www.elastic.co/guide/en/logstash/current/multiline.html#\_timestamps Shar…

---

## [Terms Aggregation lost result](https://discuss.elastic.co/t/terms-aggregation-lost-result/57168)

<div class="topic-metadata">

**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Replies:** 4\
**Last updated:** [August 9, 2016, 5:27pm UTC](https://discuss.elastic.co/t/terms-aggregation-lost-result/57168 "2016-08-09T17:27:29Z")

</div>

Hi all. I want to aggregate the log of postgresql slow query. Here is my log in kibana: You can see there are 13 hits. I want to execute as this SQL: SELECT slow\_sql.raw, avg(duration), count(1) FROM 'logstash-\*' G…

[Previous page](https://discuss.elastic.co/top.md?page=1096&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1098&per_page=50&period=all)
