# Top

**URL:** https://discuss.elastic.co/top.md?page=1104&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1105

---

## [Added label to APM which has the incorrect index 'type'](https://discuss.elastic.co/t/added-label-to-apm-which-has-the-incorrect-index-type/215650)

<div class="topic-metadata">

**Author:** [@Matthew\_Petrie](https://discuss.elastic.co/u/Matthew_Petrie)\
**Replies:** 4\
**Last updated:** [January 22, 2020, 9:15am UTC](https://discuss.elastic.co/t/added-label-to-apm-which-has-the-incorrect-index-type/215650 "2020-01-22T09:15:38Z")

</div>

Kibana version: 7.5.1 Elasticsearch version: 7.5.1 APM Server version: 7.5.1 APM Agent language and version: Node.JS 3.3.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Elasti…

---

## [Change Mappings of Large Elastic Search Index](https://discuss.elastic.co/t/change-mappings-of-large-elastic-search-index/27186)

<div class="topic-metadata">

**Author:** [@wajahat\_Javaid](https://discuss.elastic.co/u/wajahat_Javaid)\
**Replies:** 4\
**Last updated:** [August 28, 2015, 1:24pm UTC](https://discuss.elastic.co/t/change-mappings-of-large-elastic-search-index/27186 "2015-08-28T13:24:00Z")

</div>

Hi all, I have a scenario, in which logstash writes logs data to elastic search indices, but initially due to limited knowledge, I didn't configured any index template, therefore after reaching counts of 1 million docum…

---

## [Moving to Java 8?](https://discuss.elastic.co/t/moving-to-java-8/21764)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 4\
**Last updated:** [January 22, 2015, 6:03pm UTC](https://discuss.elastic.co/t/moving-to-java-8/21764 "2015-01-22T18:03:14Z")

</div>

Hey, looking at the Oracle JDK road map, the end of public updates for JDK 7 comes closer, it will be in April 2015. http://www.oracle.com/technetwork/java/eol-135779.html#Java6-end-public-updates Lucene alread…

---

## [ElasticSearch on AWS - disaster recovery / total cluster failure](https://discuss.elastic.co/t/elasticsearch-on-aws-disaster-recovery-total-cluster-failure/13846)

<div class="topic-metadata">

**Author:** [@utel](https://discuss.elastic.co/u/utel)\
**Replies:** 4\
**Last updated:** [October 7, 2013, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-disaster-recovery-total-cluster-failure/13846 "2013-10-07T06:12:07Z")

</div>

Hello, I have a few questions around recovering from total cluster failure and would be grateful for any advice in this area. We have a topology of: - 3 x EC2 instances running elasticsearch - each EC2 instance…

---

## [Elasticsearch 7.17.24 and 8.15.1 Security Update (ESA-2024-37)](https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [April 8, 2025, 4:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924 "2025-04-08T16:00:32Z")

</div>

Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-37) An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection obje…

---

## [How to remove data in an index of elastic search that is two week old](https://discuss.elastic.co/t/how-to-remove-data-in-an-index-of-elastic-search-that-is-two-week-old/169675)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 5\
**Last updated:** [February 25, 2019, 8:57am UTC](https://discuss.elastic.co/t/how-to-remove-data-in-an-index-of-elastic-search-that-is-two-week-old/169675 "2019-02-25T08:57:12Z")

</div>

I have an index named "registration" in my elastic search.And i inserted data in that index through kibana. Now i want to remove data in that index that is two weeks old.how can i do this

---

## [Drop\_fields and the beats.name/.hostname/.version fields](https://discuss.elastic.co/t/drop-fields-and-the-beats-name-hostname-version-fields/111450)

<div class="topic-metadata">

**Author:** [@geckofish](https://discuss.elastic.co/u/geckofish)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 6:02am UTC](https://discuss.elastic.co/t/drop-fields-and-the-beats-name-hostname-version-fields/111450 "2017-12-18T06:02:28Z")

</div>

Hi There, I'm using Metricbeat, Elastic Search and Kibana to create system overview dashboards of about 45 Linux boxes. I'm trying to keep the data to the necessities, so I'm stripping out as much data as possible usin…

---

## [Using function\_score error](https://discuss.elastic.co/t/using-function-score-error/20485)

<div class="topic-metadata">

**Author:** [@Manuel\_Sciuto](https://discuss.elastic.co/u/Manuel_Sciuto)\
**Replies:** 5\
**Last updated:** [February 20, 2015, 5:11pm UTC](https://discuss.elastic.co/t/using-function-score-error/20485 "2015-02-20T17:11:12Z")

</div>

Hello everyone Do not understand why it does not work # Create some docs PUT /searchtube/video/1 { "title": "Sick Sad World: Cold Breeze on the Interstate", "description": "Is your toll collector weari…

---

## [JDBC input parameters add quotes to query](https://discuss.elastic.co/t/jdbc-input-parameters-add-quotes-to-query/270271)

<div class="topic-metadata">

**Author:** [@mlnusd](https://discuss.elastic.co/u/mlnusd)\
**Replies:** 0\
**Last updated:** [April 15, 2021, 3:32pm UTC](https://discuss.elastic.co/t/jdbc-input-parameters-add-quotes-to-query/270271 "2021-04-15T15:32:48Z")

</div>

I'm trying to use jdbc input filter to query Oracle DB and to template a schema name. My statement looks like this: select count(1) from :schema.my\_table And my logstash config is like this: input { \[...connection …

---

## [Painless scripts don't work the same in filter and field contexts](https://discuss.elastic.co/t/painless-scripts-dont-work-the-same-in-filter-and-field-contexts/208932)

<div class="topic-metadata">

**Author:** [@eacosta](https://discuss.elastic.co/u/eacosta)\
**Replies:** 0\
**Last updated:** [November 21, 2019, 4:19pm UTC](https://discuss.elastic.co/t/painless-scripts-dont-work-the-same-in-filter-and-field-contexts/208932 "2019-11-21T16:19:04Z")

</div>

We created a scripted field, we debugged it until it returns the correct value (true or false). It was extremely hard to discover things, e.g. the documentation never specifies how to access the data in a scripted field…

---

## [How to access the \_index object through painless inline](https://discuss.elastic.co/t/how-to-access-the--index-object-through-painless-inline/80584)

<div class="topic-metadata">

**Author:** [@chembo](https://discuss.elastic.co/u/chembo)\
**Replies:** 0\
**Last updated:** [March 30, 2017, 4:59am UTC](https://discuss.elastic.co/t/how-to-access-the--index-object-through-painless-inline/80584 "2017-03-30T04:59:00Z")

</div>

i need the POSITIONS info, it's ok to get it by the groovy language: "script": { "inline": "def s = 0;termInfo=\_index\['goods\_name\_separate'\].get('book',\_POSITIONS| \_CACHE);for(pos in termInfo){s++; break;}; …

---

## [Migrating from facets to aggregations](https://discuss.elastic.co/t/migrating-from-facets-to-aggregations/71035)

<div class="topic-metadata">

**Author:** [@mmaia](https://discuss.elastic.co/u/mmaia)\
**Replies:** 0\
**Last updated:** [January 10, 2017, 8:15am UTC](https://discuss.elastic.co/t/migrating-from-facets-to-aggregations/71035 "2017-01-10T08:15:04Z")

</div>

Hi I am migrating an application that current uses elasticsearch and while most of the migration was straightforward and we were able to migrate most of the code, there are a few gray areas that we're not being able to m…

---

## [Unstable cluster performance](https://discuss.elastic.co/t/unstable-cluster-performance/172401)

<div class="topic-metadata">

**Author:** [@9a614c14b7d7bbfd64cb](https://discuss.elastic.co/u/9a614c14b7d7bbfd64cb)\
**Replies:** 7\
**Last updated:** [March 18, 2019, 2:22pm UTC](https://discuss.elastic.co/t/unstable-cluster-performance/172401 "2019-03-18T14:22:51Z")

</div>

Hi! I have an elastic cluster - 1 dedicated master node with 1GB of heap 6 data nodes ( 32 cpu, 31GB heap and about 100GB more for file cache; disk and network io utilization is 5% on all data nodes) I have two main …

---

## [Why is ES memory consumption raising while I bulk index parent/child documents?](https://discuss.elastic.co/t/why-is-es-memory-consumption-raising-while-i-bulk-index-parent-child-documents/12491)

<div class="topic-metadata">

**Author:** [@David\_MZ](https://discuss.elastic.co/u/David_MZ)\
**Replies:** 7\
**Last updated:** [June 20, 2013, 1:27pm UTC](https://discuss.elastic.co/t/why-is-es-memory-consumption-raising-while-i-bulk-index-parent-child-documents/12491 "2013-06-20T13:27:56Z")

</div>

I am indexing parent/child documents at 1500/second rate, my index size is 57million records combined (currently as I write this) and I do not perform any search while I index My memory consumption is raising stea…

---

## [Logging into Cloud Kibana using React](https://discuss.elastic.co/t/logging-into-cloud-kibana-using-react/256963)

<div class="topic-metadata">

**Author:** [@Marek\_Kubiak](https://discuss.elastic.co/u/Marek_Kubiak)\
**Replies:** 1\
**Last updated:** [November 30, 2020, 10:00am UTC](https://discuss.elastic.co/t/logging-into-cloud-kibana-using-react/256963 "2020-11-30T10:00:07Z")

</div>

Hello Elastic maniacs, this is my first post, so just a quick introduction - my name is Marek and I work as a developer for a construction related company that analyses and visualised construction data using Elasticsear…

---

## [Ошибка "all shards failed - Task cancelled before it started: channel closed"](https://discuss.elastic.co/t/all-shards-failed-task-cancelled-before-it-started-channel-closed/242199)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 1\
**Last updated:** [July 22, 2020, 4:20pm UTC](https://discuss.elastic.co/t/all-shards-failed-task-cancelled-before-it-started-channel-closed/242199 "2020-07-22T16:20:46Z")

</div>

Добрый день! В логах наблюдаю ошибку временами: \[2020-07-22T16:00:15,317\]\[WARN \]\[r.suppressed \] \[wss-es-data5a.blabla\] path: /indexname/\_search, params: {pretty=true, index=indexname} org.elasticsearch.acti…

---

## [Jdbc input plugin sql\_last\_value not updating](https://discuss.elastic.co/t/jdbc-input-plugin-sql-last-value-not-updating/207409)

<div class="topic-metadata">

**Author:** [@ma3](https://discuss.elastic.co/u/ma3)\
**Replies:** 1\
**Last updated:** [November 12, 2019, 6:26am UTC](https://discuss.elastic.co/t/jdbc-input-plugin-sql-last-value-not-updating/207409 "2019-11-12T06:26:26Z")

</div>

I have multiple jdbc input plugins in logstash writing to different indices in elastic search. I'm using sql\_last\_value to send incremental updates. However, the timestamp in last\_run\_metadata\_path is only getting updat…

---

## [Unable to get XPath values in XML filter](https://discuss.elastic.co/t/unable-to-get-xpath-values-in-xml-filter/202675)

<div class="topic-metadata">

**Author:** [@kurbar](https://discuss.elastic.co/u/kurbar)\
**Replies:** 1\
**Last updated:** [October 8, 2019, 5:20pm UTC](https://discuss.elastic.co/t/unable-to-get-xpath-values-in-xml-filter/202675 "2019-10-08T17:20:49Z")

</div>

Hello, I started working on Logstash and Elasticsearch and my first task was trying to get XML files indexed by Elasticsearch. For that I have a File input plugin that reads whole XML files XML filter plugin which cr…

---

## [Wildcard inside nested query and a value match](https://discuss.elastic.co/t/wildcard-inside-nested-query-and-a-value-match/161551)

<div class="topic-metadata">

**Author:** [@Nedko\_Georgiev](https://discuss.elastic.co/u/Nedko_Georgiev)\
**Replies:** 1\
**Last updated:** [December 20, 2018, 12:43pm UTC](https://discuss.elastic.co/t/wildcard-inside-nested-query-and-a-value-match/161551 "2018-12-20T12:43:06Z")

</div>

I'm trying to migrate from ES 0.90 to 6.5 and I have the following query: { "query": { "bool": { "should": \[ { "multi\_match": { "query": "field Value", "fields": "fi…

---

## [Elastic search Rejecting mapping update](https://discuss.elastic.co/t/elastic-search-rejecting-mapping-update/124983)

<div class="topic-metadata">

**Author:** [@sri535](https://discuss.elastic.co/u/sri535)\
**Replies:** 1\
**Last updated:** [March 21, 2018, 1:14pm UTC](https://discuss.elastic.co/t/elastic-search-rejecting-mapping-update/124983 "2018-03-21T13:14:23Z")

</div>

Failed to map in indices I have a configuration file and template file in logstash is as below please look into it its done on fresh installation 1.Conf file input { file { path =\> \["D:/JAEK/Results/Python/MyH…

---

## [Index\_failed\_engine\_exception Index failed for translog is already closed](https://discuss.elastic.co/t/index-failed-engine-exception-index-failed-for-translog-is-already-closed/80946)

<div class="topic-metadata">

**Author:** [@waheed](https://discuss.elastic.co/u/waheed)\
**Replies:** 1\
**Last updated:** [April 3, 2017, 8:14am UTC](https://discuss.elastic.co/t/index-failed-engine-exception-index-failed-for-translog-is-already-closed/80946 "2017-04-03T08:14:43Z")

</div>

ES Version : 2.3.3 Laravel version : 5.0 When we update indexes most of them updated successfully but some indexes not updated. Share My Error Log ServerErrorResponseException in Connection.php line 659: index\_failed…

---

## [Duplicate events in filebeat + logstash + elasticsearch pipeline](https://discuss.elastic.co/t/duplicate-events-in-filebeat-logstash-elasticsearch-pipeline/42371)

<div class="topic-metadata">

**Author:** [@vgondil](https://discuss.elastic.co/u/vgondil)\
**Replies:** 1\
**Last updated:** [February 23, 2016, 5:36pm UTC](https://discuss.elastic.co/t/duplicate-events-in-filebeat-logstash-elasticsearch-pipeline/42371 "2016-02-23T17:36:18Z")

</div>

Filebeat version:1.1.1 Logstash version:2.1.0 Logstash multiline codec : 2.0.9 Logstash beats plugin: 2.1.4 Elasticsearch version: 2.1.0 I am shipping logs from a linux server using filebeat. The only configuration of …

---

## [Remove starting and ending forward slash](https://discuss.elastic.co/t/remove-starting-and-ending-forward-slash/142659)

<div class="topic-metadata">

**Author:** [@abhishek007](https://discuss.elastic.co/u/abhishek007)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 2:34am UTC](https://discuss.elastic.co/t/remove-starting-and-ending-forward-slash/142659 "2018-08-02T02:34:28Z")

</div>

Hi, I have to get rid of the starting forward slash in a field value. Field value is "/abc/par/xyz/" I want this ti be muted as abc\_par\_xyz I can replace '/' with '\_' using gsub, but it gives me "abc\_par\_xyz" How ca…

---

## [Log rotation logstash](https://discuss.elastic.co/t/log-rotation-logstash/100324)

<div class="topic-metadata">

**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\
**Replies:** 3\
**Last updated:** [September 14, 2017, 4:01pm UTC](https://discuss.elastic.co/t/log-rotation-logstash/100324 "2017-09-14T16:01:22Z")

</div>

Hi! I save logs if \[type\] == "tibco\_4" { file { path =\> "/opt/GET\_TRACE/ELK/tibco\_4/%{source}" codec =\> line { format =\> "custom format: %{message}"} gzip=\> true } } but in my directory /opt/GET\_TRACE/ELK/tibco\_…

---

## [Replace timestamp from logfile - dateparsefailure](https://discuss.elastic.co/t/replace-timestamp-from-logfile-dateparsefailure/114800)

<div class="topic-metadata">

**Author:** [@A.Klos](https://discuss.elastic.co/u/A.Klos)\
**Replies:** 6\
**Last updated:** [January 10, 2018, 2:47pm UTC](https://discuss.elastic.co/t/replace-timestamp-from-logfile-dateparsefailure/114800 "2018-01-10T14:47:12Z")

</div>

Hi, my logs starting with: 10.01.2018 | 07:43:13,961 | INFO | 09.01.2018 | 23:59:02,119 | DEBUG | I tried following: %{DATE\_EU:Datum} | (%{HOUR:hour}:%{MINUTE:minute}:%{SECOND:second}%{ISO8601\_TIMEZONE:timezone}) B…

---

## [Kibana SaveObject API](https://discuss.elastic.co/t/kibana-saveobject-api/252557)

<div class="topic-metadata">

**Author:** [@mhr](https://discuss.elastic.co/u/mhr)\
**Replies:** 2\
**Last updated:** [November 7, 2020, 2:16pm UTC](https://discuss.elastic.co/t/kibana-saveobject-api/252557 "2020-11-07T14:16:20Z")

</div>

HI Support, How to Import selective save object using Curl Command. I do not want to import IndexPattern using curl API from ndjson file.

---

## [Index name based on tags](https://discuss.elastic.co/t/index-name-based-on-tags/137065)

<div class="topic-metadata">

**Author:** [@hobapolis](https://discuss.elastic.co/u/hobapolis)\
**Replies:** 2\
**Last updated:** [June 26, 2018, 12:51pm UTC](https://discuss.elastic.co/t/index-name-based-on-tags/137065 "2018-06-26T12:51:19Z")

</div>

trying to accomplish: index: "filebeat-%{\[beat.version\]}-%{\[tags\]}-%{+yyyy.MM.dd}" my prospector looks similar to this: - type: log enabled: true paths: - /var/log/auth.log tags: auth exclude\_files: \['\\.g…

---

## [Input-jdbc: cannot load OracleDriver](https://discuss.elastic.co/t/input-jdbc-cannot-load-oracledriver/26800)

<div class="topic-metadata">

**Author:** [@ticl](https://discuss.elastic.co/u/ticl)\
**Replies:** 2\
**Last updated:** [August 4, 2015, 3:20pm UTC](https://discuss.elastic.co/t/input-jdbc-cannot-load-oracledriver/26800 "2015-08-04T15:20:06Z")

</div>

I am trying out the input-jdbc plugin with Oracle ojdbc6.jar. However I am getting following error: Error: oracle.jdbc.driver.OracleDriver not loaded. Are you sure you've included the correct jdbc driver in :jdbc\_drive…

---

## [Rollback ES upgrade](https://discuss.elastic.co/t/rollback-es-upgrade/21290)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 2\
**Last updated:** [December 17, 2014, 12:52pm UTC](https://discuss.elastic.co/t/rollback-es-upgrade/21290 "2014-12-17T12:52:41Z")

</div>

Hi All, I have elastic search version 1.1.1 i am planning to upgrade it to 1.3.4.let say i upgraded the ES node.how can we rollback es node to 1.1.1 again. or once we upgrade node ES can we roll back to 1.1.1 fr…

---

## [Read and index multiple CSV files](https://discuss.elastic.co/t/read-and-index-multiple-csv-files/235615)

<div class="topic-metadata">

**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\
**Replies:** 1\
**Last updated:** [June 4, 2020, 2:18pm UTC](https://discuss.elastic.co/t/read-and-index-multiple-csv-files/235615 "2020-06-04T14:18:50Z")

</div>

Hi Community, I am working on a task to read multiple CSV files from path and index them in Elasticsearch. all csv files are independent of each other. I am using python. I appreciate if there are any alternate methods…

---

## [How to add aggrigate map field to the original message as a additional field](https://discuss.elastic.co/t/how-to-add-aggrigate-map-field-to-the-original-message-as-a-additional-field/227671)

<div class="topic-metadata">

**Author:** [@Lal\_k](https://discuss.elastic.co/u/Lal_k)\
**Replies:** 4\
**Last updated:** [April 15, 2020, 4:42am UTC](https://discuss.elastic.co/t/how-to-add-aggrigate-map-field-to-the-original-message-as-a-additional-field/227671 "2020-04-15T04:42:17Z")

</div>

I have huge amount of logs coming from Cisco ASA firewall specially firewall deny. for example i have more than 10 messages from same source IP accessing same destination with same destination port. So the idea is , ins…

---

## [키바나 Dashboard 및 Visualize의 Share 관련 질문](https://discuss.elastic.co/t/dashboard-visualize-share/104344)

<div class="topic-metadata">

**Author:** [@glemfk00](https://discuss.elastic.co/u/glemfk00)\
**Replies:** 1\
**Last updated:** [October 20, 2017, 4:45am UTC](https://discuss.elastic.co/t/dashboard-visualize-share/104344 "2017-10-20T04:45:25Z")

</div>

한가지 궁금한 사항이 생겨서 질문 남깁니다. 우선 키바나에서 완성된 Dashboard 및 각각의 Visualize를 Share 기능을 이용하여 iframe 방식으로 별도의 WEB시스템에 적용할 수 있는걸로 알고있습니다. 여기서 궁금한점은 X-PACK 적용시 별도의 WEB시스템에적용한 iframe영역이 로그인창으로 대체되던데 로그인 없이 공유는 안되는건가요?

---

## [Delete my account](https://discuss.elastic.co/t/delete-my-account/373749)

<div class="topic-metadata">

**Author:** [@anon17415294](https://discuss.elastic.co/u/anon17415294)\
**Replies:** 8\
**Last updated:** [January 28, 2025, 3:30am UTC](https://discuss.elastic.co/t/delete-my-account/373749 "2025-01-28T03:30:46Z")

</div>

I need help deleting my account on discuss.elastic.co. Can someone help?

---

## [Logstash not sending data to ELK](https://discuss.elastic.co/t/logstash-not-sending-data-to-elk/354561)

<div class="topic-metadata">

**Author:** [@bigelkman](https://discuss.elastic.co/u/bigelkman)\
**Replies:** 8\
**Last updated:** [March 4, 2024, 11:39pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elk/354561 "2024-03-04T23:39:08Z")

</div>

Hello all, I am struggling to get logstash setup and sending data over to ES. I am trying to have logstash act a syslog server and send that data over to ES. I do not see any logstash-\* on the indices or data streams. I …

---

## [Esrally: error: --target-hosts and --client-options must define the same keys for multi cluster setups](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 8\
**Last updated:** [August 11, 2022, 4:58am UTC](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780 "2022-08-11T04:58:58Z")

</div>

Rally version elastic/rally latest version The command is as shown above. Because the destination elasticsearch uses xpack, I use client-options to prevent a security exception. Even after looking at the official …

---

## [Winlogbeat and filebeat config can't wokr together](https://discuss.elastic.co/t/winlogbeat-and-filebeat-config-cant-wokr-together/150144)

<div class="topic-metadata">

**Author:** [@kursad](https://discuss.elastic.co/u/kursad)\
**Replies:** 8\
**Last updated:** [September 28, 2018, 8:43am UTC](https://discuss.elastic.co/t/winlogbeat-and-filebeat-config-cant-wokr-together/150144 "2018-09-28T08:43:34Z")

</div>

Dear Friends, I already send my application and IIS logs to elasticsearch without any problem. Currently, i'm trying to send windows eventviwer logs to elasticsearch. But interestingly when I start to logstash, logs can…

---

## [Filebeat error to publish event because EOF](https://discuss.elastic.co/t/filebeat-error-to-publish-event-because-eof/74997)

<div class="topic-metadata">

**Author:** [@Tr\_ng\_Trang](https://discuss.elastic.co/u/Tr_ng_Trang)\
**Replies:** 8\
**Last updated:** [February 20, 2017, 2:59am UTC](https://discuss.elastic.co/t/filebeat-error-to-publish-event-because-eof/74997 "2017-02-20T02:59:00Z")

</div>

hi sir, I have a problem about filebeat, the problem need to solve soon( its important), so i sorry because need to send message direct to ask you. :(. I have a folder, have some log file, its synchronous with folder tf…

---

## [Bootstrap check failed in es 7.10.1](https://discuss.elastic.co/t/bootstrap-check-failed-in-es-7-10-1/261080)

<div class="topic-metadata">

**Author:** [@f4ct0r](https://discuss.elastic.co/u/f4ct0r)\
**Replies:** 4\
**Last updated:** [January 14, 2021, 9:38am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-in-es-7-10-1/261080 "2021-01-14T09:38:04Z")

</div>

Hey guys, I'm using kubernetes to deploy Elasticsearch 7.10.1. at first, my elasticsearch cluster running perfect. but when i restart the pods of elasticsearch, the elasticsearch cluster going error: ERROR: \[1\] bootst…

---

## [Time Series Moving Average not working properly](https://discuss.elastic.co/t/time-series-moving-average-not-working-properly/53863)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 4\
**Last updated:** [June 24, 2016, 3:43pm UTC](https://discuss.elastic.co/t/time-series-moving-average-not-working-properly/53863 "2016-06-24T15:43:39Z")

</div>

I have used timeseries in kibana to generate some graphs, however, it seems that it is not generating proper result when I use with moving average. As from the graph, the index will become 0 afterall, which should be th…

---

## [Using Topbeats for computers on LAN and VM](https://discuss.elastic.co/t/using-topbeats-for-computers-on-lan-and-vm/36016)

<div class="topic-metadata">

**Author:** [@aviv.ratzon](https://discuss.elastic.co/u/aviv.ratzon)\
**Replies:** 4\
**Last updated:** [December 1, 2015, 1:51pm UTC](https://discuss.elastic.co/t/using-topbeats-for-computers-on-lan-and-vm/36016 "2015-12-01T13:51:58Z")

</div>

Hello, I was wondering if it is possible to monitore multiple computers over LAN without the need to install it on wach one. Also, lets say these are actually VMs. What would be the best way to monitore their performan…

---

## [Trying to do a simple query filter](https://discuss.elastic.co/t/trying-to-do-a-simple-query-filter/170942)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 5\
**Last updated:** [March 5, 2019, 7:07pm UTC](https://discuss.elastic.co/t/trying-to-do-a-simple-query-filter/170942 "2019-03-05T19:07:29Z")

</div>

Good Day, Maybe Im just over thinking this, but I just want to do a simple filter / query on a numberic number. I have a document with a timestamp and hour (0-23) have the query of data I need, but I need to filter / …

---

## [Metricbeat dashboard + visualization error - Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/metricbeat-dashboard-visualization-error-saved-field-parameter-is-now-invalid-please-select-a-new-field/100162)

<div class="topic-metadata">

**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\
**Replies:** 5\
**Last updated:** [September 12, 2017, 3:58pm UTC](https://discuss.elastic.co/t/metricbeat-dashboard-visualization-error-saved-field-parameter-is-now-invalid-please-select-a-new-field/100162 "2017-09-12T15:58:54Z")

</div>

I have metricbeat setup on my MAC and metrics are uploaded to ES. I have also run the metric beat setup to configure dashboards. ES: 5.4.1 Kibana: 5.4.1 Metricbeat: 7.0.0-alpha1 metric beat index in created yellow o…

---

## [Recently added basic license, can't access Kibana](https://discuss.elastic.co/t/recently-added-basic-license-cant-access-kibana/70170)

<div class="topic-metadata">

**Author:** [@MatthewHartz](https://discuss.elastic.co/u/MatthewHartz)\
**Replies:** 5\
**Last updated:** [December 31, 2016, 1:56am UTC](https://discuss.elastic.co/t/recently-added-basic-license-cant-access-kibana/70170 "2016-12-31T01:56:21Z")

</div>

Hi, Today I added a basic license because my trial shield expired. I can successfully access elasticsearch without having to enter in credentials, but still receive a login screen for Kibana. This login screen will no…

---

## [Elasticsearch and front end](https://discuss.elastic.co/t/elasticsearch-and-front-end/54365)

<div class="topic-metadata">

**Author:** [@mitali\_bhoir](https://discuss.elastic.co/u/mitali_bhoir)\
**Replies:** 5\
**Last updated:** [August 3, 2016, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-and-front-end/54365 "2016-08-03T09:19:00Z")

</div>

Hello. I am new to elasticsearch. I want to create front end using java. Its like search box where user will enter text and result should be return.I am not getting any idea about how to do it? Any suggestion? Thanx

---

## [ECONNREFUSED: Connection refused - connect (2) for "localhost" port 587](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087)

<div class="topic-metadata">

**Author:** [@David03](https://discuss.elastic.co/u/David03)\
**Replies:** 2\
**Last updated:** [August 26, 2020, 2:48am UTC](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087 "2020-08-26T02:48:36Z")

</div>

Hi, good day. I used email config and i encounter this Connection refused - connect (2) for "localhost" port 587 output { elasticsearch { hosts =\> \["localhost:9200"\] } stdout { codec =\> rubydebug } if "shouldmail…

---

## [4096 characters input limitation! missing part of logs in message field](https://discuss.elastic.co/t/4096-characters-input-limitation-missing-part-of-logs-in-message-field/217522)

<div class="topic-metadata">

**Author:** [@kasra](https://discuss.elastic.co/u/kasra)\
**Replies:** 2\
**Last updated:** [February 2, 2020, 2:03pm UTC](https://discuss.elastic.co/t/4096-characters-input-limitation-missing-part-of-logs-in-message-field/217522 "2020-02-02T14:03:17Z")

</div>

I have issue with sending logs which have more than 4096 characters! the thing is some of my logs contain more than 4096 characters and the result is jsonparsefailure . I have also used multiline codec for my input but…

---

## [Elasticsearch Errors not indexing data](https://discuss.elastic.co/t/elasticsearch-errors-not-indexing-data/172527)

<div class="topic-metadata">

**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-errors-not-indexing-data/172527 "2019-03-19T07:37:50Z")

</div>

Hey guys, I'm having some problems on running the ELK. Elasticsearch is giving a lot of exceptions and errors: \[2019-03-15T12:17:27,369\]\[WARN \]\[r.suppressed \] path: /.kibana/doc/config%3A6.4.2, params: {ind…

---

## [Audit Beat - Log to a file](https://discuss.elastic.co/t/audit-beat-log-to-a-file/131597)

<div class="topic-metadata">

**Author:** [@daniel333](https://discuss.elastic.co/u/daniel333)\
**Replies:** 2\
**Last updated:** [May 13, 2018, 4:54am UTC](https://discuss.elastic.co/t/audit-beat-log-to-a-file/131597 "2018-05-13T04:54:42Z")

</div>

All, First time working with anything from Elastic and I was starting with Auditbeat. I install the package and the default configuration works. But if I want to log to a file to test the FIM, auditbeats failes to start…

---

## [Connecting using Symfony2 FOSElasticaBundle](https://discuss.elastic.co/t/connecting-using-symfony2-foselasticabundle/73865)

<div class="topic-metadata">

**Author:** [@sofien.000](https://discuss.elastic.co/u/sofien.000)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 8:13am UTC](https://discuss.elastic.co/t/connecting-using-symfony2-foselasticabundle/73865 "2017-02-15T08:13:02Z")

</div>

HI. I am using Elasticsearch 1.5.2. I add this code in app/config/config.yml fos\_elastica: clients: default: { host: localhost, port: 9200 } serializer: callback\_class: FOS\\ElasticaBundle\\Seria…

---

## [Marvel Dashboard meaning](https://discuss.elastic.co/t/marvel-dashboard-meaning/1912)

<div class="topic-metadata">

**Author:** [@ChrisMark](https://discuss.elastic.co/u/ChrisMark)\
**Replies:** 2\
**Last updated:** [June 11, 2015, 9:57am UTC](https://discuss.elastic.co/t/marvel-dashboard-meaning/1912 "2015-06-11T09:57:53Z")

</div>

Hello everyone, i was wondring what is the meaning of "search-request-rate" and "indexing-request-rate" graphs. Is it the rate that elasticsearch serves the requests or the rate of requests' arrival? Thanx!

[Previous page](https://discuss.elastic.co/top.md?page=1103&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1105&per_page=50&period=all)
