# Top

**URL:** https://discuss.elastic.co/top.md?page=1099&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1100

---

## [Elasticsearch 2.3.3 exception error](https://discuss.elastic.co/t/elasticsearch-2-3-3-exception-error/52052)

<div class="topic-metadata">

**Author:** [@xon](https://discuss.elastic.co/u/xon)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 10:25pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-3-exception-error/52052 "2016-06-07T22:25:56Z")

</div>

I downloaded the latest elasticsearch version. I have installed java8. I have configured successfully so far kibana/logstash but I cant get elasticsearch to work. root@debian:~# sudo -u elasticsearch /opt/elasticsear…

---

## [ElasticSearch y Node.js](https://discuss.elastic.co/t/elasticsearch-y-node-js/40888)

<div class="topic-metadata">

**Author:** [@rss87](https://discuss.elastic.co/u/rss87)\
**Replies:** 2\
**Last updated:** [May 26, 2016, 6:17pm UTC](https://discuss.elastic.co/t/elasticsearch-y-node-js/40888 "2016-05-26T18:17:26Z")

</div>

Buenas Tardes, Estoy intentando usar el módulo de elastic para node.js https://github.com/elastic/elasticsearch-js pero tengo problemas con la autenticación contra elasticsearch, configuro el cliente tal como viene …

---

## [JSON file input to Filebeat sending data to Logstash and then to Azure Data Explorer](https://discuss.elastic.co/t/json-file-input-to-filebeat-sending-data-to-logstash-and-then-to-azure-data-explorer/264800)

<div class="topic-metadata">

**Author:** [@omkarg81](https://discuss.elastic.co/u/omkarg81)\
**Replies:** 6\
**Last updated:** [February 22, 2021, 7:39am UTC](https://discuss.elastic.co/t/json-file-input-to-filebeat-sending-data-to-logstash-and-then-to-azure-data-explorer/264800 "2021-02-22T07:39:39Z")

</div>

I'm trying to send a single line JSON input file to Filebeat which should read and send in the data over to Logstash which should then forward or dump it to Azure Data Explorer cluster-table. Somehow, when the Filebeat …

---

## [Fecha de Vencimiento de la Tarjeta deCrédito](https://discuss.elastic.co/t/fecha-de-vencimiento-de-la-tarjeta-decredito/82593)

<div class="topic-metadata">

**Author:** [@Fernando\_Olmedo](https://discuss.elastic.co/u/Fernando_Olmedo)\
**Replies:** 6\
**Last updated:** [April 17, 2017, 7:55pm UTC](https://discuss.elastic.co/t/fecha-de-vencimiento-de-la-tarjeta-decredito/82593 "2017-04-17T19:55:21Z")

</div>

Buenas tardes, estoy terminando el período de prueba y necesito activar la tarjeta para seguir utilizando el servicio, pero la fecha de vencimiento de la tarjeta es en el año 2027 y el formulario solo acepta hasta el 202…

---

## [Version of Kibana that will work with ES 2.3.1?](https://discuss.elastic.co/t/version-of-kibana-that-will-work-with-es-2-3-1/105688)

<div class="topic-metadata">

**Author:** [@rhugga](https://discuss.elastic.co/u/rhugga)\
**Replies:** 5\
**Last updated:** [October 30, 2017, 1:03am UTC](https://discuss.elastic.co/t/version-of-kibana-that-will-work-with-es-2-3-1/105688 "2017-10-30T01:03:44Z")

</div>

We're stuck running ES 2.3.1 due to more recent versions needing settings we can't deploy in our production cloud where we run ES. So is there a version of Kibana that will work with ES 2.3.1? It seems the earliest vers…

---

## [Cabana gives error when setting auto refresh](https://discuss.elastic.co/t/cabana-gives-error-when-setting-auto-refresh/43124)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 5\
**Last updated:** [March 10, 2016, 10:09pm UTC](https://discuss.elastic.co/t/cabana-gives-error-when-setting-auto-refresh/43124 "2016-03-10T22:09:14Z")

</div>

Hello, No matter what value I set for the auto refresh in Kibana I get the following errors: Courier Fetch: undefined is not an object (evaluating 'resp.timed\_out') Version: 4.4.1 Build: 9693 Error: undefined is not …

---

## [Splitting message log](https://discuss.elastic.co/t/splitting-message-log/296805)

<div class="topic-metadata">

**Author:** [@wizard](https://discuss.elastic.co/u/wizard)\
**Replies:** 3\
**Last updated:** [February 25, 2022, 3:04pm UTC](https://discuss.elastic.co/t/splitting-message-log/296805 "2022-02-25T15:04:17Z")

</div>

Hello, When I am collecting logs from Syslog and transferring those logs to kibana using filebeat, I am getting a tab named by message in row format as below mention: I want this to be in a separate field like below…

---

## [How to prevent json parsing of a field in Logstash?](https://discuss.elastic.co/t/how-to-prevent-json-parsing-of-a-field-in-logstash/178270)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 3\
**Last updated:** [April 25, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-to-prevent-json-parsing-of-a-field-in-logstash/178270 "2019-04-25T13:52:50Z")

</div>

Hi, I am using Logstasg GA 6.3.0. I am taking data from a kafka topic like below; input { kafka{ group\_id =\> "mygroup" topics =\> \["mytopic"\] bootstrap\_servers =\> "192.168.0.1:9092" codec =\> "json" } } everyt…

---

## [Indexing a large pdf file (around 90MB) gives an exception](https://discuss.elastic.co/t/indexing-a-large-pdf-file-around-90mb-gives-an-exception/116014)

<div class="topic-metadata">

**Author:** [@Abhilash\_Bolla](https://discuss.elastic.co/u/Abhilash_Bolla)\
**Replies:** 3\
**Last updated:** [January 18, 2018, 10:45am UTC](https://discuss.elastic.co/t/indexing-a-large-pdf-file-around-90mb-gives-an-exception/116014 "2018-01-18T10:45:30Z")

</div>

Hi, Elasticsearch version: 5.4.3 Heap allocated: 4GB Java version: Java 8 I am trying to index a large pdf file of 90 MB using the ingest-attachments plugin. I encode the pdf file into base64 format and then index it…

---

## [Installing x-pack with nonstandard CONF\_DIR](https://discuss.elastic.co/t/installing-x-pack-with-nonstandard-conf-dir/76448)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 3\
**Last updated:** [February 27, 2017, 3:04pm UTC](https://discuss.elastic.co/t/installing-x-pack-with-nonstandard-conf-dir/76448 "2017-02-27T15:04:18Z")

</div>

Hi Folks, My 5.2 elasticsearch.yml is in a non standard folder on my ubuntu system. The doc for x-pack package install, https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html#xpack-package-installation, …

---

## [How to create kibana\_user and monitoring\_user roles.?](https://discuss.elastic.co/t/how-to-create-kibana-user-and-monitoring-user-roles/71021)

<div class="topic-metadata">

**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Replies:** 3\
**Last updated:** [January 10, 2017, 4:31pm UTC](https://discuss.elastic.co/t/how-to-create-kibana-user-and-monitoring-user-roles/71021 "2017-01-10T16:31:33Z")

</div>

I am reading the document: https://www.elastic.co/guide/en/x-pack/current/monitoring-getting-started.html I can get o the kibana page, but it requires me to log in with user name and password. How to create the rol…

---

## [Head and Kopf available on 5.0 beta?](https://discuss.elastic.co/t/head-and-kopf-available-on-5-0-beta/61417)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 3\
**Last updated:** [September 24, 2016, 9:52pm UTC](https://discuss.elastic.co/t/head-and-kopf-available-on-5-0-beta/61417 "2016-09-24T21:52:37Z")

</div>

Are elasticsearch-head and kopf plugins available on the latest 5.0 beta version of ES? I tried to install but it returns: "unknown plugin"

---

## [Kibana Trends](https://discuss.elastic.co/t/kibana-trends/39824)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 3\
**Last updated:** [January 23, 2016, 10:11am UTC](https://discuss.elastic.co/t/kibana-trends/39824 "2016-01-23T10:11:10Z")

</div>

Bonjour, Est il possible dans un dashboard d'avoir un nombre qui selon des seuils change de couleur ? Exemple avec une valeur en%. Si \> 40% la valeur devient orange, si \> 70% devient rouge. Cela semble possible dans …

---

## [Where to change auto\_expand\_replicas for enrich indices?](https://discuss.elastic.co/t/where-to-change-auto-expand-replicas-for-enrich-indices/337907)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 0\
**Last updated:** [July 7, 2023, 4:51pm UTC](https://discuss.elastic.co/t/where-to-change-auto-expand-replicas-for-enrich-indices/337907 "2023-07-07T16:51:51Z")

</div>

Hello, I need to change the auto\_expand\_replicas for the indices created by enrich policies, the .enrich-\* indices, but I could not find any system template with this mapping, so it seems to be hard-coded elsewhere. Cu…

---

## [Изменение имени interface в filebeat](https://discuss.elastic.co/t/interface-filebeat/305724)

<div class="topic-metadata">

**Author:** [@dreshme](https://discuss.elastic.co/u/dreshme)\
**Replies:** 0\
**Last updated:** [May 26, 2022, 2:34pm UTC](https://discuss.elastic.co/t/interface-filebeat/305724 "2022-05-26T14:34:34Z")

</div>

Доброго времени суток. Подскажите, пожалуйста, я собираю netflow с помощью filebeat. Есть поля ''' "egress\_interface" : 199, "ingress\_interface" : 277, ''' Через SNMP я узнал, какие сетевые интерфейсы соответствую…

---

## [High level client parse aggregation in response of GetAsyncSearchRequest failed](https://discuss.elastic.co/t/high-level-client-parse-aggregation-in-response-of-getasyncsearchrequest-failed/265582)

<div class="topic-metadata">

**Author:** [@ZorroYue](https://discuss.elastic.co/u/ZorroYue)\
**Replies:** 0\
**Last updated:** [February 26, 2021, 9:14am UTC](https://discuss.elastic.co/t/high-level-client-parse-aggregation-in-response-of-getasyncsearchrequest-failed/265582 "2021-02-26T09:14:48Z")

</div>

Hi i got problem that high level client parse aggregation in response of GetAsyncSearchRequest failed.Get async request in kibana as: GET /\_async\_search/FjJxanhwbHpoUS1lUXFDU2M1ajEyVHcdVnp4Z09RT3VTdjZYZWxDUUx3dDRMUTox…

---

## [Nested aggregation - access "parent" values](https://discuss.elastic.co/t/nested-aggregation-access-parent-values/186084)

<div class="topic-metadata">

**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\
**Replies:** 0\
**Last updated:** [June 17, 2019, 2:14pm UTC](https://discuss.elastic.co/t/nested-aggregation-access-parent-values/186084 "2019-06-17T14:14:07Z")

</div>

I have following index: PUT /nested { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0 }, "mappings": { "\_doc": { "properties": { "name": {"type": "keyword"}, "my\_pri…

---

## [Api to get saved objects info like Dashboard for kibana 8.9.0?](https://discuss.elastic.co/t/api-to-get-saved-objects-info-like-dashboard-for-kibana-8-9-0/341855)

<div class="topic-metadata">

**Author:** [@Daemon1](https://discuss.elastic.co/u/Daemon1)\
**Replies:** 7\
**Last updated:** [September 24, 2023, 11:48pm UTC](https://discuss.elastic.co/t/api-to-get-saved-objects-info-like-dashboard-for-kibana-8-9-0/341855 "2023-09-24T23:48:24Z")

</div>

GET \<kibana host\>:\<port\>/api/saved\_objects/\<type\>/\<id\> The above API is deprecated for version 8.9.0 GET \<kibana host\>:\<port\>/api/data\_views This API only returns the info about data\_views not dashboard. What is the …

---

## [Unable to get time difference with ruby in logstash](https://discuss.elastic.co/t/unable-to-get-time-difference-with-ruby-in-logstash/304747)

<div class="topic-metadata">

**Author:** [@zubair\_aftab](https://discuss.elastic.co/u/zubair_aftab)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 3:06pm UTC](https://discuss.elastic.co/t/unable-to-get-time-difference-with-ruby-in-logstash/304747 "2022-05-19T15:06:22Z")

</div>

I have 2 time fields Time1 and Time2. I want to get there difference but getting error "Ruby exception occurred: undefined method \`-' for nil:NilClass". Below is the code. what is wrong in it?? \` if \[Time1\] { date{ …

---

## [Filebeat not connected to Logstash as per my understanding](https://discuss.elastic.co/t/filebeat-not-connected-to-logstash-as-per-my-understanding/159543)

<div class="topic-metadata">

**Author:** [@ashvinanto](https://discuss.elastic.co/u/ashvinanto)\
**Replies:** 7\
**Last updated:** [December 6, 2018, 9:18am UTC](https://discuss.elastic.co/t/filebeat-not-connected-to-logstash-as-per-my-understanding/159543 "2018-12-06T09:18:30Z")

</div>

Hi, I have configured filebeat to harvest logs from a certain path. And the same logs can be discovered in Kibana. However, I wanted to parse the logs which is obtained in message field in kibana. For that I was trying …

---

## [Can't embed search bar when share visualization](https://discuss.elastic.co/t/cant-embed-search-bar-when-share-visualization/120622)

<div class="topic-metadata">

**Author:** [@ekane95](https://discuss.elastic.co/u/ekane95)\
**Replies:** 7\
**Last updated:** [February 20, 2018, 2:46pm UTC](https://discuss.elastic.co/t/cant-embed-search-bar-when-share-visualization/120622 "2018-02-20T14:46:10Z")

</div>

I am using kibana 4.6 and i want to embed the search bar when i share a visualization using iframe. In the settings it's no option. i have seen older versions of kibana 4 that have that possibility and also I saw that…

---

## [Specify data directory permissions for Docker container](https://discuss.elastic.co/t/specify-data-directory-permissions-for-docker-container/118912)

<div class="topic-metadata">

**Author:** [@leosco](https://discuss.elastic.co/u/leosco)\
**Replies:** 1\
**Last updated:** [February 7, 2018, 7:33pm UTC](https://discuss.elastic.co/t/specify-data-directory-permissions-for-docker-container/118912 "2018-02-07T19:33:31Z")

</div>

Hi there, I'm trying to run the latest Elasticsearch Docker container on Ubuntu 16, and on startup it attempts to access a data directory at /usr/share/elasticsearch/data where it outputs this error message: \[2018-02-0…

---

## [Current status/recommendation for Georedundant clustering](https://discuss.elastic.co/t/current-status-recommendation-for-georedundant-clustering/642)

<div class="topic-metadata">

**Author:** [@Kellan\_Stec](https://discuss.elastic.co/u/Kellan_Stec)\
**Replies:** 7\
**Last updated:** [May 21, 2015, 6:12pm UTC](https://discuss.elastic.co/t/current-status-recommendation-for-georedundant-clustering/642 "2015-05-21T18:12:41Z")

</div>

So, my work requires georedundancy for every solution. It's not good enough that things like elasticsearch are not designed for that, and in fact, spanning-datacenter-clusters actually open you to more potential issues. …

---

## [No alive nodes found in your cluster](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/272216)

<div class="topic-metadata">

**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 10:49am UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/272216 "2021-05-06T10:49:32Z")

</div>

I'm on Ubuntu 20.04 with Elasticsearch 7.10.2 (though this has happened in previous minor versions too) We have a PHP script that runs every night using 7.12.0 of the PHP SDK where it re-indexes live documents and delet…

---

## [Kibana 7.9.3 in sublocation in Nginx](https://discuss.elastic.co/t/kibana-7-9-3-in-sublocation-in-nginx/253919)

<div class="topic-metadata">

**Author:** [@msteini](https://discuss.elastic.co/u/msteini)\
**Replies:** 2\
**Last updated:** [November 3, 2020, 1:58am UTC](https://discuss.elastic.co/t/kibana-7-9-3-in-sublocation-in-nginx/253919 "2020-11-03T01:58:24Z")

</div>

Since two days I tried several configurations to run Kibana 7.9.3 (via docker-compose) at a sublocation (for developing on my local machine at https://localhost/analytics/) via Nginx, but it do not work. I hope someone c…

---

## [Elasticsearch Winlogbeats cause "caught exception while handling client http traffic"](https://discuss.elastic.co/t/elasticsearch-winlogbeats-cause-caught-exception-while-handling-client-http-traffic/246686)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-winlogbeats-cause-caught-exception-while-handling-client-http-traffic/246686 "2020-08-31T13:37:30Z")

</div>

Hi All, I was wondering if anyone has any help for what I'm seeing. I have about 150 winlogbeats pointing to a 3 node ES cluster. Over the course of about an hour, I get about 20,000 logs of: caught exception while han…

---

## [Import button grayed out for CSV import](https://discuss.elastic.co/t/import-button-grayed-out-for-csv-import/204825)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 11:15am UTC](https://discuss.elastic.co/t/import-button-grayed-out-for-csv-import/204825 "2019-10-23T11:15:26Z")

</div>

I'm unable to find the right permissions to grant a user to let them import CSV files in Kibana. The user can load the CSV and visualize the data, but the "Import" button is grayed out and can't be clicked: The but…

---

## [Not able to get client in sentinl when i am using it in kibana 7.2](https://discuss.elastic.co/t/not-able-to-get-client-in-sentinl-when-i-am-using-it-in-kibana-7-2/192435)

<div class="topic-metadata">

**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\
**Replies:** 2\
**Last updated:** [July 29, 2019, 11:10am UTC](https://discuss.elastic.co/t/not-able-to-get-client-in-sentinl-when-i-am-using-it-in-kibana-7-2/192435 "2019-07-29T11:10:27Z")

</div>

Hi I am try to use sentinl 6.6 in kibana 7.2 by modifying code ui is working fine but i am facing problem in server.plugins.elasticsearch.getCluster('data').getClient() method its not return anything. Is there any …

---

## [Timestamp in Kibana not in order](https://discuss.elastic.co/t/timestamp-in-kibana-not-in-order/132021)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 3:19pm UTC](https://discuss.elastic.co/t/timestamp-in-kibana-not-in-order/132021 "2018-05-18T15:19:47Z")

</div>

I don't understand why I see this problem \[image\]

---

## [Filebeat can't work with a dot in field name](https://discuss.elastic.co/t/filebeat-cant-work-with-a-dot-in-field-name/84758)

<div class="topic-metadata">

**Author:** [@Francisco\_Perea\_Rodr](https://discuss.elastic.co/u/Francisco_Perea_Rodr)\
**Replies:** 2\
**Last updated:** [May 6, 2017, 7:52am UTC](https://discuss.elastic.co/t/filebeat-cant-work-with-a-dot-in-field-name/84758 "2017-05-06T07:52:31Z")

</div>

Hi all, I am trying to insert a log in ElasticSearch whose structure is JSON. Some fields have a dot in their name, and because of this Filebeat can't insert the data into Elasticsearch. The fail is: WARN Can not ind…

---

## [Is it possible to get individual IP address count from different sources to my server(packetbeat installed)](https://discuss.elastic.co/t/is-it-possible-to-get-individual-ip-address-count-from-different-sources-to-my-server-packetbeat-installed/82316)

<div class="topic-metadata">

**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\
**Replies:** 2\
**Last updated:** [April 13, 2017, 3:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-individual-ip-address-count-from-different-sources-to-my-server-packetbeat-installed/82316 "2017-04-13T15:22:18Z")

</div>

I am using "packet beats" for my project which is related to DoS(Denial of service) attacks. Is it possible to make "packetbeat" to store unique ip addresses(from different sources) along with some parameters --\> count o…

---

## [Unsetting index.routing.allocation.require.\_name setting](https://discuss.elastic.co/t/unsetting-index-routing-allocation-require--name-setting/75964)

<div class="topic-metadata">

**Author:** [@iamchrismiller](https://discuss.elastic.co/u/iamchrismiller)\
**Replies:** 2\
**Last updated:** [February 22, 2017, 6:38pm UTC](https://discuss.elastic.co/t/unsetting-index-routing-allocation-require--name-setting/75964 "2017-02-22T18:38:12Z")

</div>

I am attempting to Shrink an index's primary shards down after the bulk import is complete. Following the guide for preparing an index for shrinking I am unable to reset the settings after the shrink is complete. htt…

---

## [Duplicates Query not returning all results](https://discuss.elastic.co/t/duplicates-query-not-returning-all-results/58600)

<div class="topic-metadata">

**Author:** [@johns](https://discuss.elastic.co/u/johns)\
**Replies:** 2\
**Last updated:** [August 23, 2016, 2:37pm UTC](https://discuss.elastic.co/t/duplicates-query-not-returning-all-results/58600 "2016-08-23T14:37:43Z")

</div>

I am searching for and counting duplicated phrases within a single, or group of, human readable documents. I break each document into phrases/sentences and populate an Elasticsearch index with these phrases, one per ES d…

---

## [If condition not working](https://discuss.elastic.co/t/if-condition-not-working/222122)

<div class="topic-metadata">

**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\
**Replies:** 8\
**Last updated:** [March 5, 2020, 1:36pm UTC](https://discuss.elastic.co/t/if-condition-not-working/222122 "2020-03-05T13:36:36Z")

</div>

I use Logstash + Filebeat + Elasticsearch. In filebeat the elasticsearch plugin is enabled so that the logs of elasticsearch get collected. Now i want to define a simple condition in a logstash pipeline. I want to do s…

---

## [Search result sorted by nearest city using longitude and latitude](https://discuss.elastic.co/t/search-result-sorted-by-nearest-city-using-longitude-and-latitude/14283)

<div class="topic-metadata">

**Author:** [@vallabh\_2](https://discuss.elastic.co/u/vallabh_2)\
**Replies:** 8\
**Last updated:** [November 7, 2013, 4:41am UTC](https://discuss.elastic.co/t/search-result-sorted-by-nearest-city-using-longitude-and-latitude/14283 "2013-11-07T04:41:04Z")

</div>

Dear All, I want to develop functionality to display results sorted by nearest city using latitude and longitude. For ex, I have default city selected lets says, London whose latitude and longitude is 51.50015…

---

## [Why No Replies](https://discuss.elastic.co/t/why-no-replies/201285)

<div class="topic-metadata">

**Author:** [@carlsoane](https://discuss.elastic.co/u/carlsoane)\
**Replies:** 4\
**Last updated:** [October 7, 2019, 4:18pm UTC](https://discuss.elastic.co/t/why-no-replies/201285 "2019-10-07T16:18:02Z")

</div>

I've posted twice in the forums: https://discuss.elastic.co/t/k8s-node-level-logging-as-non-root-user/193603 and https://discuss.elastic.co/t/filebeat-is-not-cleaning-old-kubernetes-log-files-that-were-autodiscove…

---

## [How to convert and store logs time in a field with date type. I'm new to it and need to show some results asap](https://discuss.elastic.co/t/how-to-convert-and-store-logs-time-in-a-field-with-date-type-im-new-to-it-and-need-to-show-some-results-asap/167227)

<div class="topic-metadata">

**Author:** [@sagarleo](https://discuss.elastic.co/u/sagarleo)\
**Replies:** 4\
**Last updated:** [February 7, 2019, 11:56am UTC](https://discuss.elastic.co/t/how-to-convert-and-store-logs-time-in-a-field-with-date-type-im-new-to-it-and-need-to-show-some-results-asap/167227 "2019-02-07T11:56:25Z")

</div>

filter { grok { match =\> \[ "message", "%{TIMESTAMP\_ISO8601:event\_timestamp} %{GREEDYDATA:message}" \] } date { match =\> \["event\_timestamp", "yyyy-MM-dd'T'HH:mm:ss.SSSZ"\] target =\> "@timestamp" } }

---

## [Add a new page to be indexed maunaly via api](https://discuss.elastic.co/t/add-a-new-page-to-be-indexed-maunaly-via-api/160783)

<div class="topic-metadata">

**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\
**Replies:** 4\
**Last updated:** [December 16, 2018, 10:52am UTC](https://discuss.elastic.co/t/add-a-new-page-to-be-indexed-maunaly-via-api/160783 "2018-12-16T10:52:38Z")

</div>

Hello. i am trying to use swiftype web search that already crawled my site and manualy add a page. when trying to add content like this: { "auth\_token": "\_\_\_\_\_\_\_\_", "document": { "external\_id": "2", "fields": \[ {"…

---

## [Lazy Java Client](https://discuss.elastic.co/t/lazy-java-client/48137)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 4\
**Last updated:** [April 23, 2016, 6:33am UTC](https://discuss.elastic.co/t/lazy-java-client/48137 "2016-04-23T06:33:28Z")

</div>

Hi all ESers, I'd like to connect to my cluster from Java lazily, i.e. if the connection is not available, don't fail and keep trying (i.e. when new requests are made). Is such a option available from the library alrea…

---

## [Determine Shard Id based on routing key](https://discuss.elastic.co/t/determine-shard-id-based-on-routing-key/19502)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 4\
**Last updated:** [September 10, 2014, 11:55am UTC](https://discuss.elastic.co/t/determine-shard-id-based-on-routing-key/19502 "2014-09-10T11:55:06Z")

</div>

Hi Say I create an index with 20 shards. During indexing, if I specify a routing\_key as 0, will it be indexed in shardId 0? Will routing\_key 3 correspond to shard Id 3? Similarly for all other keys if I have 20…

---

## [Boost should query](https://discuss.elastic.co/t/boost-should-query/204546)

<div class="topic-metadata">

**Author:** [@atef](https://discuss.elastic.co/u/atef)\
**Replies:** 1\
**Last updated:** [October 22, 2019, 12:42pm UTC](https://discuss.elastic.co/t/boost-should-query/204546 "2019-10-22T12:42:11Z")

</div>

Is there anyone can help me how to boost sould query my example is the following "should": \[ { "multi\_match": { "query": "apple", "fuzziness": "AUTO", "fields": \["name", "name.stemmed"\] }}, { "multi\_match": { "query":…

---

## [Elastic search broke in Bitbucket](https://discuss.elastic.co/t/elastic-search-broke-in-bitbucket/182301)

<div class="topic-metadata">

**Author:** [@vnagana](https://discuss.elastic.co/u/vnagana)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 10:21pm UTC](https://discuss.elastic.co/t/elastic-search-broke-in-bitbucket/182301 "2019-05-23T22:21:38Z")

</div>

Hi Team, Elastic search is completely broke in Bitbucket. Getting error that " Search is currently unavailable . Refresh the page and try again" . In Logs: Caused by: org.elasticsearch.ElasticsearchException: Unable …

---

## [Java HeapDumpOnOutOfMemoryError on 9300 port](https://discuss.elastic.co/t/java-heapdumponoutofmemoryerror-on-9300-port/91133)

<div class="topic-metadata">

**Author:** [@Vito\_Lipari](https://discuss.elastic.co/u/Vito_Lipari)\
**Replies:** 1\
**Last updated:** [June 28, 2017, 4:19pm UTC](https://discuss.elastic.co/t/java-heapdumponoutofmemoryerror-on-9300-port/91133 "2017-06-28T16:19:26Z")

</div>

hi to everybody, i'm writing a little application in java ( Spring Boot ), but java cannot connect on 9300 port. i check the 9300 port in many ways... when i launch this comand sudo netstat -lanpt | grep LIST | grep j…

---

## [Passing shell script arguments to exectbeat not working](https://discuss.elastic.co/t/passing-shell-script-arguments-to-exectbeat-not-working/75693)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [February 22, 2017, 1:45am UTC](https://discuss.elastic.co/t/passing-shell-script-arguments-to-exectbeat-not-working/75693 "2017-02-22T01:45:16Z")

</div>

Hi, I have an execbeat to call a shellscript, and it works fine. In the shell script, I have modifies it to accept arguments like $1, $2 etc. So, inorder to execute my script, we need to run it in bash like; sh myscr…

---

## [Kibana Integrate with Piwik Analytics](https://discuss.elastic.co/t/kibana-integrate-with-piwik-analytics/67317)

<div class="topic-metadata">

**Author:** [@c0ng111](https://discuss.elastic.co/u/c0ng111)\
**Replies:** 1\
**Last updated:** [November 28, 2016, 4:07pm UTC](https://discuss.elastic.co/t/kibana-integrate-with-piwik-analytics/67317 "2016-11-28T16:07:53Z")

</div>

Hi, Is there a way to use analytics on Kibana eg. Piwik Analytics. To check usage of my Kibana. Do you have idea where to put tracking code of Piwik and if it will track Kibana events. Thank you. Cocoi

---

## [Twitter, Tile Maps Geohash, field not available](https://discuss.elastic.co/t/twitter-tile-maps-geohash-field-not-available/431)

<div class="topic-metadata">

**Author:** [@mayin](https://discuss.elastic.co/u/mayin)\
**Replies:** 1\
**Last updated:** [May 9, 2015, 11:06am UTC](https://discuss.elastic.co/t/twitter-tile-maps-geohash-field-not-available/431 "2015-05-09T11:06:39Z")

</div>

Using Twitter's Streaming API. Selecting Geohash Aggregation 'filters' all fields out but geoip.location which does not 'map' tweets for me. I think information needed lies in coordinates.coordinates but this does not …

---

## [Enabling compression on elasticsearch.log](https://discuss.elastic.co/t/enabling-compression-on-elasticsearch-log/157)

<div class="topic-metadata">

**Author:** [@mrg](https://discuss.elastic.co/u/mrg)\
**Replies:** 1\
**Last updated:** [May 5, 2015, 7:17am UTC](https://discuss.elastic.co/t/enabling-compression-on-elasticsearch-log/157 "2015-05-05T07:17:59Z")

</div>

i'm wondering how / if there is support for automatic compression of elasticsearch.log via logging.yml. it looks like there might be via issue #7927 and this PR#8464 ...but maybe limited to v1.5? ideally, i'd like t…

---

## [Failed migration of system indices (.triggered\_watches) with Upgrade Assistant using v7.17.14](https://discuss.elastic.co/t/failed-migration-of-system-indices-triggered-watches-with-upgrade-assistant-using-v7-17-14/346966)

<div class="topic-metadata">

**Author:** [@AEA27](https://discuss.elastic.co/u/AEA27)\
**Replies:** 3\
**Last updated:** [November 27, 2023, 4:37pm UTC](https://discuss.elastic.co/t/failed-migration-of-system-indices-triggered-watches-with-upgrade-assistant-using-v7-17-14/346966 "2023-11-27T16:37:55Z")

</div>

Using the upgrade assistant the migration of system indices fails for watcher which we're using. We're using elastic cloud and trying to migrate to Elasticsearch 8. Another fun fact is that the index that is failing to …

---

## [Filebeat sidecar with Sonarqube in Kubernetes](https://discuss.elastic.co/t/filebeat-sidecar-with-sonarqube-in-kubernetes/282315)

<div class="topic-metadata">

**Author:** [@Vincent3](https://discuss.elastic.co/u/Vincent3)\
**Replies:** 3\
**Last updated:** [August 25, 2021, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-sidecar-with-sonarqube-in-kubernetes/282315 "2021-08-25T14:14:09Z")

</div>

Hello, I have a configMap : apiVersion: v1 kind: ConfigMap metadata: name: filebeat-configmap namespace: k8s-mxt-sonarqube data: filebeat.yml: |- filebeat.inputs: - type: container enabled: …

---

## [Aws module](https://discuss.elastic.co/t/aws-module/197618)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 3\
**Last updated:** [September 3, 2019, 1:24pm UTC](https://discuss.elastic.co/t/aws-module/197618 "2019-09-03T13:24:48Z")

</div>

There was no error in the debug log, and there was no events pulled from AWS (in metricbeat-\* index there was no message). Please help, thanks in advance! Here is the config: # Module: aws # Docs: https://www.elastic.…

[Previous page](https://discuss.elastic.co/top.md?page=1098&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1100&per_page=50&period=all)
