# Top

**URL:** https://discuss.elastic.co/top.md?page=1105&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1106

---

## [Filtering different visualizations in the same dashboard differently](https://discuss.elastic.co/t/filtering-different-visualizations-in-the-same-dashboard-differently/239477)

<div class="topic-metadata">

**Author:** [@Reuven\_Weiser](https://discuss.elastic.co/u/Reuven_Weiser)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 10:20am UTC](https://discuss.elastic.co/t/filtering-different-visualizations-in-the-same-dashboard-differently/239477 "2020-08-06T10:20:40Z")

</div>

Assume I have an index of employees, each with a sub-object representing their manager: { "document-id": "XYZ", "firstName": "John", "lastName": "Smith", "office": "midtown", "manager": { "document-id": "ABC", …

---

## [How can i get the username and password of logged in user in kibana plugin 6.8?](https://discuss.elastic.co/t/how-can-i-get-the-username-and-password-of-logged-in-user-in-kibana-plugin-6-8/199369)

<div class="topic-metadata">

**Author:** [@devesh37](https://discuss.elastic.co/u/devesh37)\
**Replies:** 3\
**Last updated:** [September 19, 2019, 1:36pm UTC](https://discuss.elastic.co/t/how-can-i-get-the-username-and-password-of-logged-in-user-in-kibana-plugin-6-8/199369 "2019-09-19T13:36:23Z")

</div>

how can i get the username and password of already authenticated logged in user in kibana plugin 6.8? I have created a plugin in 6.8.0 kibana I want to pass the username and password to the another app inside the ifra…

---

## [Агрегация по нескольким дочерним полям](https://discuss.elastic.co/t/topic/233680)

<div class="topic-metadata">

**Author:** [@Silicid](https://discuss.elastic.co/u/Silicid)\
**Replies:** 7\
**Last updated:** [May 26, 2020, 8:02am UTC](https://discuss.elastic.co/t/topic/233680 "2020-05-26T08:02:02Z")

</div>

Добрый день. Есть элементы с двумя дочерними элементами (тип join). Необходимо сделать агрегацию по минимальному значению child\_value для answer2. И, если answer2 отсутствует для родителя, то вместо него использовать a…

---

## [Dynamically getting iframe code Kibana Dashboard](https://discuss.elastic.co/t/dynamically-getting-iframe-code-kibana-dashboard/155857)

<div class="topic-metadata">

**Author:** [@Mackmilan\_Selva](https://discuss.elastic.co/u/Mackmilan_Selva)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 6:18pm UTC](https://discuss.elastic.co/t/dynamically-getting-iframe-code-kibana-dashboard/155857 "2018-11-08T18:18:19Z")

</div>

Hi, in Kibana, users are able to get the embedded iframe code in their dashboards. I was wondering if there's an API that allows me to dynamically get the iframe codes without having to open kibana and manually copy the …

---

## [Filebeat configuration file permission](https://discuss.elastic.co/t/filebeat-configuration-file-permission/152063)

<div class="topic-metadata">

**Author:** [@sumitdatta](https://discuss.elastic.co/u/sumitdatta)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 11:49pm UTC](https://discuss.elastic.co/t/filebeat-configuration-file-permission/152063 "2018-10-12T23:49:38Z")

</div>

Hi all, We are trying to configure filebeat to our openshift cluster. Filebeat configuration file will be directly taken from openshift persistence volume at the time of container creation and we don't have root privile…

---

## [Include\_fields problem](https://discuss.elastic.co/t/include-fields-problem/109809)

<div class="topic-metadata">

**Author:** [@fgouin](https://discuss.elastic.co/u/fgouin)\
**Replies:** 6\
**Last updated:** [December 26, 2017, 10:39pm UTC](https://discuss.elastic.co/t/include-fields-problem/109809 "2017-12-26T22:39:42Z")

</div>

Hi, I'm having troubles with include\_fields when the fields contains dots. For instance, here is an extract of a Jolokia response: "jolokia": { "metrics": { "Metrics": { "atomikos.nbTransactions": 0.000000, "class…

---

## [Create consistent graph in kibana](https://discuss.elastic.co/t/create-consistent-graph-in-kibana/73025)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 6\
**Last updated:** [February 8, 2017, 10:23am UTC](https://discuss.elastic.co/t/create-consistent-graph-in-kibana/73025 "2017-02-08T10:23:24Z")

</div>

Hello & ty for your help ! Context actual : My stack Filebeat \> Logstash \> Elastic \> Kibana (5.1) is running Bash script works every hour, to write data into file text named "q\_compt". Data seems like to this : S…

---

## [How to remove configuration option from document \[SOLVED\]](https://discuss.elastic.co/t/how-to-remove-configuration-option-from-document-solved/64832)

<div class="topic-metadata">

**Author:** [@Archer](https://discuss.elastic.co/u/Archer)\
**Replies:** 6\
**Last updated:** [November 4, 2016, 7:44am UTC](https://discuss.elastic.co/t/how-to-remove-configuration-option-from-document-solved/64832 "2016-11-04T07:44:24Z")

</div>

\## when i config like this input { redis { host =\> "127.0.0.1" port =\> 6379 key =\> "logstash:test" data\_type =\> "list" codec =\> "json" type =\> "%{\[type\]}" } } output { elasticsearch { …

---

## [Restarting Elasticsearch when running along with logstash](https://discuss.elastic.co/t/restarting-elasticsearch-when-running-along-with-logstash/25851)

<div class="topic-metadata">

**Author:** [@BZen](https://discuss.elastic.co/u/BZen)\
**Replies:** 6\
**Last updated:** [July 18, 2015, 11:03pm UTC](https://discuss.elastic.co/t/restarting-elasticsearch-when-running-along-with-logstash/25851 "2015-07-18T23:03:51Z")

</div>

I started using Elastic Search very recently. So my questions might seen really idiotic. I have 2 es nodes and I am using logstash to send logs to them. The problem comes when I do a restart. After I do a restart either…

---

## [Query exception](https://discuss.elastic.co/t/query-exception/8764)

<div class="topic-metadata">

**Author:** [@Warner\_Onstine](https://discuss.elastic.co/u/Warner_Onstine)\
**Replies:** 6\
**Last updated:** [August 17, 2012, 3:59pm UTC](https://discuss.elastic.co/t/query-exception/8764 "2012-08-17T15:59:06Z")

</div>

After getting my hand-written search working through curl I tried to start testing out the java version and I get this Exception when running my search: org.codehaus.jackson.map.JsonMappingException: No serializer f…

---

## [Elastic endpoint Could not communicate with Checking API will retry](https://discuss.elastic.co/t/elastic-endpoint-could-not-communicate-with-checking-api-will-retry/251303)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 4\
**Last updated:** [October 15, 2020, 7:04am UTC](https://discuss.elastic.co/t/elastic-endpoint-could-not-communicate-with-checking-api-will-retry/251303 "2020-10-15T07:04:06Z")

</div>

Hello everybody, I am trying elastic endpoint from code source and I am getting this error: Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post "https://@IP\_KIBANA:5601/api/ingest\_…

---

## [Log entry payload is not present in the trigger's ctx](https://discuss.elastic.co/t/log-entry-payload-is-not-present-in-the-triggers-ctx/247378)

<div class="topic-metadata">

**Author:** [@akhettar](https://discuss.elastic.co/u/akhettar)\
**Replies:** 4\
**Last updated:** [September 3, 2020, 3:54pm UTC](https://discuss.elastic.co/t/log-entry-payload-is-not-present-in-the-triggers-ctx/247378 "2020-09-03T15:54:19Z")

</div>

Hello there, I would like to include a log's field value in the alert body message. The alert is pushed to slack channel. From the log entry below, I wanted to include the payload.message and payload.customData.order…

---

## [Elasticsearch change log level](https://discuss.elastic.co/t/elasticsearch-change-log-level/243293)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 4\
**Last updated:** [July 31, 2020, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-change-log-level/243293 "2020-07-31T07:38:14Z")

</div>

Hi There are lot of configurations in log4j properties. I'm using logstash to insert records to elasticsearch and I need to log those. what is the effect of changing below config? logger.action.name = org.elasticsearc…

---

## [Data table too slow](https://discuss.elastic.co/t/data-table-too-slow/172642)

<div class="topic-metadata">

**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\
**Replies:** 4\
**Last updated:** [March 28, 2019, 4:52pm UTC](https://discuss.elastic.co/t/data-table-too-slow/172642 "2019-03-28T16:52:36Z")

</div>

Hello! I have this data table visualitation in Kibana, but it takes 6+ mins loading 1 month of data and even crashes my explorer. How is it possible to improve the performance? I noticed that using date histogram in da…

---

## [Logstash will not start](https://discuss.elastic.co/t/logstash-will-not-start/101535)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 4\
**Last updated:** [September 25, 2017, 2:49pm UTC](https://discuss.elastic.co/t/logstash-will-not-start/101535 "2017-09-25T14:49:53Z")

</div>

We install logstash v5.5.2 from the tar file. We are running logstash from our /opt/pki/logstash/bin directory. Logstast is not start and getting the following error below. It appears that logstash is having an issue…

---

## [Read a file for token and use in it config file](https://discuss.elastic.co/t/read-a-file-for-token-and-use-in-it-config-file/100504)

<div class="topic-metadata">

**Author:** [@giridharan78](https://discuss.elastic.co/u/giridharan78)\
**Replies:** 4\
**Last updated:** [September 14, 2017, 2:29pm UTC](https://discuss.elastic.co/t/read-a-file-for-token-and-use-in-it-config-file/100504 "2017-09-14T14:29:22Z")

</div>

I've a token generated by a shell script and stored in a file(api\_calls.log)). I wanted the logstash config file to read the file and use the token in the request in http\_poller. The token has to be used in Authorizatio…

---

## [Field showing in Discover tab but not getting aggregated in Visualizations](https://discuss.elastic.co/t/field-showing-in-discover-tab-but-not-getting-aggregated-in-visualizations/48250)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 4\
**Last updated:** [April 26, 2016, 3:26am UTC](https://discuss.elastic.co/t/field-showing-in-discover-tab-but-not-getting-aggregated-in-visualizations/48250 "2016-04-26T03:26:41Z")

</div>

Hi I have a field loglevel which has values DEBUG,INFO,ERROR etc and all these 3 values for loglevel are showing up in Discover tab when i search using query loglevel: DEBUG | INFO | ERROR , but when i am creating visual…

---

## [Easy way to insert top level query aggregation details back into elastic](https://discuss.elastic.co/t/easy-way-to-insert-top-level-query-aggregation-details-back-into-elastic/41544)

<div class="topic-metadata">

**Author:** [@Sandeep\_Takhar](https://discuss.elastic.co/u/Sandeep_Takhar)\
**Replies:** 4\
**Last updated:** [February 12, 2016, 11:22pm UTC](https://discuss.elastic.co/t/easy-way-to-insert-top-level-query-aggregation-details-back-into-elastic/41544 "2016-02-12T23:22:56Z")

</div>

Hi. Been following Zach's pretty cool work around getting the ebay anomaly detection algorithm to work in elastic. https://www.elastic.co/blog/implementing-a-statistical-anomaly-detector-part-1 In his example he …

---

## [Filebeat missing end of logs for k8s pods](https://discuss.elastic.co/t/filebeat-missing-end-of-logs-for-k8s-pods/217281)

<div class="topic-metadata">

**Author:** [@Matt\_Kirkevold](https://discuss.elastic.co/u/Matt_Kirkevold)\
**Replies:** 2\
**Last updated:** [January 31, 2020, 2:28pm UTC](https://discuss.elastic.co/t/filebeat-missing-end-of-logs-for-k8s-pods/217281 "2020-01-31T14:28:26Z")

</div>

I have noticed a curious issue where if my kubernetes pod terminates too fast filebeat does not capture the end of the associated log. Anyone have this issue and any workaround to ensure filebeats can capture all the lo…

---

## [JAVA API and doco for Graph](https://discuss.elastic.co/t/java-api-and-doco-for-graph/65926)

<div class="topic-metadata">

**Author:** [@David\_she](https://discuss.elastic.co/u/David_she)\
**Replies:** 2\
**Last updated:** [November 14, 2016, 7:36pm UTC](https://discuss.elastic.co/t/java-api-and-doco-for-graph/65926 "2016-11-14T19:36:28Z")

</div>

Hi, I have trawled through the elastic site and google looking for the Java API to use for ElasticSearch Graph. Also any sample code or doco would be ideal. Appreciated

---

## [Mapper-attachment plugin for 6.x](https://discuss.elastic.co/t/mapper-attachment-plugin-for-6-x/127173)

<div class="topic-metadata">

**Author:** [@mathiasconradt](https://discuss.elastic.co/u/mathiasconradt)\
**Replies:** 1\
**Last updated:** [April 7, 2018, 7:42pm UTC](https://discuss.elastic.co/t/mapper-attachment-plugin-for-6-x/127173 "2018-04-07T19:42:53Z")

</div>

Upfront: I know about "mapper-attachments" but the plugin does not seem to be compatible with ES6, only with older versions. Detailed problem: Hi, I'm new to ElasticSearch and Logstash, coming from Solr. I am looking s…

---

## [How to send an optional field/parameter in query?](https://discuss.elastic.co/t/how-to-send-an-optional-field-parameter-in-query/54698)

<div class="topic-metadata">

**Author:** [@dijam](https://discuss.elastic.co/u/dijam)\
**Replies:** 1\
**Last updated:** [July 5, 2016, 11:08am UTC](https://discuss.elastic.co/t/how-to-send-an-optional-field-parameter-in-query/54698 "2016-07-05T11:08:04Z")

</div>

I am trying to have a better monitoring over our queries and we have several different systems calling to our elastic . I have logging enabled but is shows the query only. I don't see what system made which query. So I …

---

## [Configuration LDAPS](https://discuss.elastic.co/t/configuration-ldaps/320441)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 8\
**Last updated:** [December 14, 2022, 11:29am UTC](https://discuss.elastic.co/t/configuration-ldaps/320441 "2022-12-14T11:29:20Z")

</div>

Hi everybody. Tell me please. I'm trying to set up a config for authorization via LDAP. I can't understand this setting xpack: security: authc: realms: ldap: ldap1: order: 0 url: "ldaps://ldap.example.com:636" …

---

## [Elasticserach not starting](https://discuss.elastic.co/t/elasticserach-not-starting/289965)

<div class="topic-metadata">

**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\
**Replies:** 8\
**Last updated:** [November 29, 2021, 9:38am UTC](https://discuss.elastic.co/t/elasticserach-not-starting/289965 "2021-11-29T09:38:50Z")

</div>

One of my Elasticsearch nodes stopped the service and moved the master to another node. The logs do not show much info, why but rather just say master moved to a different node. \[2021-11-23T13:57:21,216\]\[INFO \]\[o.e.n.N…

---

## [Editing an enrich policy](https://discuss.elastic.co/t/editing-an-enrich-policy/305494)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 12:17pm UTC](https://discuss.elastic.co/t/editing-an-enrich-policy/305494 "2022-06-02T12:17:04Z")

</div>

It appears that if I need to edit an enrichment policy that an ingest pipeline uses, I have to delete the pipe, then delete the policy, then create the new edited policy, then create the ingest pipeline. That is the proc…

---

## [How can I retrieve all user sessions connected to my Kibana, using API](https://discuss.elastic.co/t/how-can-i-retrieve-all-user-sessions-connected-to-my-kibana-using-api/288329)

<div class="topic-metadata">

**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\
**Replies:** 3\
**Last updated:** [November 8, 2021, 10:21am UTC](https://discuss.elastic.co/t/how-can-i-retrieve-all-user-sessions-connected-to-my-kibana-using-api/288329 "2021-11-08T10:21:58Z")

</div>

Hi! How can I retrieve all user sessions connected to my Kibana, using API ? I will do a montoring sessions to delete duplicate access to my dashboard in Kibana. I saw that its is possible to DELETE sessions using the…

---

## [Kibana change of decimal values in colour](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [March 31, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327 "2021-03-31T15:12:08Z")

</div>

Hi all, I'm a float numeric field which i have values like 21.283774493. I have managed to limit to 2 digits like 21.28. Now the problem is when i use conditional colour for my number in edit field option, format goes…

---

## [Parse json message events using split filter](https://discuss.elastic.co/t/parse-json-message-events-using-split-filter/169673)

<div class="topic-metadata">

**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\
**Replies:** 3\
**Last updated:** [February 23, 2019, 6:33pm UTC](https://discuss.elastic.co/t/parse-json-message-events-using-split-filter/169673 "2019-02-23T18:33:07Z")

</div>

Continuing the discussion from Split nested json array: How to parse a json message events :- If any json key value, passed as null, It would not be parsed by the split filter and wouldn't be render.See the below json…

---

## [Deeply nested aggregations with large dataset](https://discuss.elastic.co/t/deeply-nested-aggregations-with-large-dataset/118564)

<div class="topic-metadata">

**Author:** [@lstilo](https://discuss.elastic.co/u/lstilo)\
**Replies:** 3\
**Last updated:** [February 7, 2018, 11:53am UTC](https://discuss.elastic.co/t/deeply-nested-aggregations-with-large-dataset/118564 "2018-02-07T11:53:08Z")

</div>

Hello, We’re looking to use ES for reporting and analytics in addition to search, however I’ve been hitting some limits when running some deeply nested aggregates with large datasets. I’ve tried various approaches in or…

---

## [Apt repo throwing 404 errors](https://discuss.elastic.co/t/apt-repo-throwing-404-errors/100552)

<div class="topic-metadata">

**Author:** [@quicksilvercapps](https://discuss.elastic.co/u/quicksilvercapps)\
**Replies:** 3\
**Last updated:** [September 15, 2017, 5:50am UTC](https://discuss.elastic.co/t/apt-repo-throwing-404-errors/100552 "2017-09-15T05:50:36Z")

</div>

Apt is throwing a 404 error on the 5.x repo. My source file contains deb https://artifacts.elastic.co/packages/5.x/apt jessie main stable The log output shows. Hit http://security.debian.org jessie/updates InRelease …

---

## [How to resolve \`\_grokparsefailure\` in node.js logs](https://discuss.elastic.co/t/how-to-resolve--grokparsefailure-in-node-js-logs/32123)

<div class="topic-metadata">

**Author:** [@smugcloud](https://discuss.elastic.co/u/smugcloud)\
**Replies:** 3\
**Last updated:** [October 14, 2015, 2:14pm UTC](https://discuss.elastic.co/t/how-to-resolve--grokparsefailure-in-node-js-logs/32123 "2015-10-14T14:14:04Z")

</div>

I am new to ELK and trying to instrument a simple node.js app that is using Winston for logging. I have tried a variety of grok patterns (including just %COMBINEDAPACHELOG) but can not seem to get all the data that I ne…

---

## [Can I suppress "Courier Fetch" warnings?](https://discuss.elastic.co/t/can-i-suppress-courier-fetch-warnings/943)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 3\
**Last updated:** [May 20, 2015, 8:11am UTC](https://discuss.elastic.co/t/can-i-suppress-courier-fetch-warnings/943 "2015-05-20T08:11:40Z")

</div>

Hi. I have a process that run and indexes documents into timestamped indexes in elasticsearch. Each morning the process creates the (empty) index for the next day (so that it already exists when the day rolls over). T…

---

## [Write amplification and SSD](https://discuss.elastic.co/t/write-amplification-and-ssd/21272)

<div class="topic-metadata">

**Author:** [@aken](https://discuss.elastic.co/u/aken)\
**Replies:** 3\
**Last updated:** [December 16, 2014, 11:38am UTC](https://discuss.elastic.co/t/write-amplification-and-ssd/21272 "2014-12-16T11:38:09Z")

</div>

At the core training I attended last year there was a side note on SSD and write amplification: roughly along the lines of: write amplification can be a big problem with SSD (as writes can be around 4KB but deletes a…

---

## [Es 1.0.1 network.host](https://discuss.elastic.co/t/es-1-0-1-network-host/16053)

<div class="topic-metadata">

**Author:** [@mobcdi](https://discuss.elastic.co/u/mobcdi)\
**Replies:** 3\
**Last updated:** [February 28, 2014, 11:49am UTC](https://discuss.elastic.co/t/es-1-0-1-network-host/16053 "2014-02-28T11:49:58Z")

</div>

I'm trying to become familar with elasticsearch so spun up an instance on a cloud service. The instance has a public IP address and as well as a private address. elasticsearch is set to the private IP address and …

---

## [Logstash doesnot ingest data when started as a service](https://discuss.elastic.co/t/logstash-doesnot-ingest-data-when-started-as-a-service/285491)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 5:57pm UTC](https://discuss.elastic.co/t/logstash-doesnot-ingest-data-when-started-as-a-service/285491 "2021-09-29T17:57:33Z")

</div>

Hi All, I am trying to ingest csv data into Elasticsearch by using logstash, when i run the conf file manually the data is getting ingested, but when i add the conf file into pipelines.yml and then start logstash as a s…

---

## [Cluster is frequently lost with no master and data nodes removed after upgrade from 7.2.1 to 7.10.2](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907)

<div class="topic-metadata">

**Author:** [@rpremnath](https://discuss.elastic.co/u/rpremnath)\
**Replies:** 5\
**Last updated:** [May 3, 2021, 4:46pm UTC](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907 "2021-05-03T16:46:13Z")

</div>

we are testing upgrade of Elasticsearch from 7.2.1 to 7.10.2 and we have developed custom Rollup and Alias management plugin using NodeClient. In our 3 node set up, all nodes are master, data, ingest nodes. We did not ha…

---

## [Moving my first logs to ECS](https://discuss.elastic.co/t/moving-my-first-logs-to-ecs/261567)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 4:29pm UTC](https://discuss.elastic.co/t/moving-my-first-logs-to-ecs/261567 "2021-01-25T16:29:41Z")

</div>

Hi friends. After succesing submiting my custom events into elk and visalize ok kibana, I would like to improve my event login format. After googlin about creating custom ecs index and indexing its documents , I did no…

---

## [Filebeat monitoring metrics sent bytes and throughput shown as 0](https://discuss.elastic.co/t/filebeat-monitoring-metrics-sent-bytes-and-throughput-shown-as-0/246215)

<div class="topic-metadata">

**Author:** [@daniel\_fablius](https://discuss.elastic.co/u/daniel_fablius)\
**Replies:** 5\
**Last updated:** [September 28, 2020, 8:04am UTC](https://discuss.elastic.co/t/filebeat-monitoring-metrics-sent-bytes-and-throughput-shown-as-0/246215 "2020-09-28T08:04:53Z")

</div>

Hi, when i loadtest and monitoring filebeat, i found out that the throughput (/s) and sent bytest shown as 0, while the Event (/s) showing some value and also the logs data is shown in Kibana. which then i assume, the co…

---

## [Logstash filter "metrics" is not working!](https://discuss.elastic.co/t/logstash-filter-metrics-is-not-working/66482)

<div class="topic-metadata">

**Author:** [@Ritesh\_Sharma](https://discuss.elastic.co/u/Ritesh_Sharma)\
**Replies:** 5\
**Last updated:** [November 18, 2016, 10:21am UTC](https://discuss.elastic.co/t/logstash-filter-metrics-is-not-working/66482 "2016-11-18T10:21:42Z")

</div>

Hey Guys , I am trying to get response per second for some of my APIs from NGINX Access logs and after some googling i came across "metrics" filter of logstash which claims to provide per duration (/sec , /minute etc …

---

## [Not\_analyzed field being analyzed](https://discuss.elastic.co/t/not-analyzed-field-being-analyzed/31867)

<div class="topic-metadata">

**Author:** [@beorn107](https://discuss.elastic.co/u/beorn107)\
**Replies:** 5\
**Last updated:** [June 16, 2016, 6:51pm UTC](https://discuss.elastic.co/t/not-analyzed-field-being-analyzed/31867 "2016-06-16T18:51:45Z")

</div>

I have the following mapping: PUT /metrics "mappings": { "metric": { "properties": { "Activated": { "type": "string", "index":"not\_analyzed" …

---

## [Elasticsearch client is giving OutOfMemoryError once connection is lost to elaticsearch server](https://discuss.elastic.co/t/elasticsearch-client-is-giving-outofmemoryerror-once-connection-is-lost-to-elaticsearch-server/21570)

<div class="topic-metadata">

**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\
**Replies:** 5\
**Last updated:** [January 12, 2015, 7:55pm UTC](https://discuss.elastic.co/t/elasticsearch-client-is-giving-outofmemoryerror-once-connection-is-lost-to-elaticsearch-server/21570 "2015-01-12T19:55:29Z")

</div>

Hi, I'm using elasticsearch using TransportClient for multiple operation. The issue I'm facing now is if my es server goes down my client side app getting OutOfMemoryError. Getting the below exception. I had to r…

---

## [Nginx Logs Can't Be Parsed Because Symlinks](https://discuss.elastic.co/t/nginx-logs-cant-be-parsed-because-symlinks/323958)

<div class="topic-metadata">

**Author:** [@Christian\_Jacobs](https://discuss.elastic.co/u/Christian_Jacobs)\
**Replies:** 7\
**Last updated:** [January 31, 2023, 8:42pm UTC](https://discuss.elastic.co/t/nginx-logs-cant-be-parsed-because-symlinks/323958 "2023-01-31T20:42:49Z")

</div>

Currently I have an nginx container that has filebeat running in the background. \[nginx:latest as base\] I have enabled the nginx module with filebeat modules enable nginx, my filebeat.yml has an input defined for the lo…

---

## [Layer information - WMS in Maps](https://discuss.elastic.co/t/layer-information-wms-in-maps/232856)

<div class="topic-metadata">

**Author:** [@hidrovis](https://discuss.elastic.co/u/hidrovis)\
**Replies:** 7\
**Last updated:** [June 3, 2020, 3:52pm UTC](https://discuss.elastic.co/t/layer-information-wms-in-maps/232856 "2020-06-03T15:52:05Z")

</div>

Hi! I'm trying to add a few layers of a WMS to a map and I've run into a problem. I can connect to the WMS and view the layers but I can't access the layer information. Isn't it possible from Kibana Maps? What is the pr…

---

## [Elastic search queries on result of aggregation](https://discuss.elastic.co/t/elastic-search-queries-on-result-of-aggregation/95385)

<div class="topic-metadata">

**Author:** [@nino\_aloi](https://discuss.elastic.co/u/nino_aloi)\
**Replies:** 7\
**Last updated:** [August 3, 2017, 4:10pm UTC](https://discuss.elastic.co/t/elastic-search-queries-on-result-of-aggregation/95385 "2017-08-03T16:10:31Z")

</div>

Hi, I am currently taking care of the development of an application using elastic search for various types of queries. Currently we only have one mapping in one index, this mapping represent attributes, they are basical…

---

## [Elastalert https post](https://discuss.elastic.co/t/elastalert-https-post/210242)

<div class="topic-metadata">

**Author:** [@JennS](https://discuss.elastic.co/u/JennS)\
**Replies:** 1\
**Last updated:** [December 3, 2019, 10:12am UTC](https://discuss.elastic.co/t/elastalert-https-post/210242 "2019-12-03T10:12:01Z")

</div>

I have data going into Elastalert and I am getting email alerts. I am also trying to post to an https page and I keep getting this error ERROR:root:Error while running alert http\_post: Error posting HTTP Post alert: HTT…

---

## [Kibana 6.2.1 - Command line to do export and import Visualizations, and Dashboards](https://discuss.elastic.co/t/kibana-6-2-1-command-line-to-do-export-and-import-visualizations-and-dashboards/123286)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 10:07pm UTC](https://discuss.elastic.co/t/kibana-6-2-1-command-line-to-do-export-and-import-visualizations-and-dashboards/123286 "2018-03-09T22:07:49Z")

</div>

Hi all I'd like to know the command line in order to do export of Visualizations, and Dashboards and the import to a new Kibana in a new enviroment. I think that if it's possible to UI there is a method to do with the …

---

## [Logstash Lumberjack SSL Error](https://discuss.elastic.co/t/logstash-lumberjack-ssl-error/95041)

<div class="topic-metadata">

**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 10:21am UTC](https://discuss.elastic.co/t/logstash-lumberjack-ssl-error/95041 "2017-08-02T10:21:22Z")

</div>

Hey, since a upgrade from Logstash (i didn't know the version which i had before) i get this ssl failure in the logstash log. \[2017-07-29T18:30:26,562\]\[ERROR\]\[logstash.outputs.lumberjack\] All hosts unavailable, sleepi…

---

## [Http.current\_open](https://discuss.elastic.co/t/http-current-open/24019)

<div class="topic-metadata">

**Author:** [@telendt](https://discuss.elastic.co/u/telendt)\
**Replies:** 1\
**Last updated:** [August 21, 2015, 2:33pm UTC](https://discuss.elastic.co/t/http-current-open/24019 "2015-08-21T14:33:05Z")

</div>

Hi, I noticed a strange behavior in the cluster of Elasticsearch (v1.5.2) that we run in the company. For some of the nodes the value of http.current\_open (and process.open\_file\_descriptors) reported by Node Stats is go…

---

## [Elastic Endpoint Integration - Large amount of Log data ingested](https://discuss.elastic.co/t/elastic-endpoint-integration-large-amount-of-log-data-ingested/339201)

<div class="topic-metadata">

**Author:** [@Seas39](https://discuss.elastic.co/u/Seas39)\
**Replies:** 6\
**Last updated:** [July 27, 2023, 11:59am UTC](https://discuss.elastic.co/t/elastic-endpoint-integration-large-amount-of-log-data-ingested/339201 "2023-07-27T11:59:32Z")

</div>

Hi, I have been trialing using elastic cloud for the purpose of EDR tooling on some linux systems. I have been using elastic endpoint on two environments with the hope of later scaling, currently, having run for two wee…

---

## [Filter the metrics column](https://discuss.elastic.co/t/filter-the-metrics-column/307230)

<div class="topic-metadata">

**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\
**Replies:** 6\
**Last updated:** [June 15, 2022, 11:04am UTC](https://discuss.elastic.co/t/filter-the-metrics-column/307230 "2022-06-15T11:04:46Z")

</div>

Hello, I created with TSVB a table with two columns. The table displays the date of the last document of each server (Top hit..). server 2 | 2022-06-15 server 2 | 2022-06-15 server 3 | 2022-06-12 I would like to f…

[Previous page](https://discuss.elastic.co/top.md?page=1104&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1106&per_page=50&period=all)
