# Top

**URL:** https://discuss.elastic.co/top.md?page=111&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 112

---

## [Pointing index name to alias](https://discuss.elastic.co/t/pointing-index-name-to-alias/171267)

<div class="topic-metadata">

**Author:** [@Chelambarasan\_CR](https://discuss.elastic.co/u/Chelambarasan_CR)\
**Replies:** 17\
**Last updated:** [March 8, 2019, 12:25pm UTC](https://discuss.elastic.co/t/pointing-index-name-to-alias/171267 "2019-03-08T12:25:20Z")

</div>

Hi, I would like to point alias name in indexing to update a document in multiple daily indices using logstash with the id of the document. But when i provide the alias name it throws error and when i give index name w…

---

## [Why curl command is not showing o/p in proxy server](https://discuss.elastic.co/t/why-curl-command-is-not-showing-o-p-in-proxy-server/297854)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 21\
**Last updated:** [February 23, 2022, 8:25am UTC](https://discuss.elastic.co/t/why-curl-command-is-not-showing-o-p-in-proxy-server/297854 "2022-02-23T08:25:13Z")

</div>

curl os not responding in proxy side, i have restarted ES nodes and then start working fine but again stopped from first response , but get the output in devtools. kindly let me know what all steps need to perform for…

---

## [Why does node disconnect after three time big gc?](https://discuss.elastic.co/t/why-does-node-disconnect-after-three-time-big-gc/164981)

<div class="topic-metadata">

**Author:** [@Leeeo](https://discuss.elastic.co/u/Leeeo)\
**Replies:** 19\
**Last updated:** [January 22, 2019, 7:21am UTC](https://discuss.elastic.co/t/why-does-node-disconnect-after-three-time-big-gc/164981 "2019-01-22T07:21:58Z")

</div>

version: 6.2.2 \[2019-01-21T12:02:02,098\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[node-142\] \[gc\]\[407049\] overhead, spent \[427ms\] collecting in the last \[1s\] \[2019-01-21T12:02:03,483\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[no…

---

## [Many slow queries and high cpu load on load test (50req/sec)](https://discuss.elastic.co/t/many-slow-queries-and-high-cpu-load-on-load-test-50req-sec/32624)

<div class="topic-metadata">

**Author:** [@Mehmet\_Cem\_Gunturkun](https://discuss.elastic.co/u/Mehmet_Cem_Gunturkun)\
**Replies:** 11\
**Last updated:** [November 12, 2015, 5:41pm UTC](https://discuss.elastic.co/t/many-slow-queries-and-high-cpu-load-on-load-test-50req-sec/32624 "2015-11-12T17:41:41Z")

</div>

Hello everyone, I have some problems running elasticsearch on production. but that did not actually help me Before deploying the application into production, we want to run load tests on beta machine so that we want…

---

## [Kibana essql query date diff](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 21\
**Last updated:** [June 17, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483 "2021-06-17T15:07:43Z")

</div>

Hi, I have a series of such data in Kibana: "deviceID" "date" 35001 27-04-21 13:20:00 35002 27-04-21 15:21:00 35001 27-04-21 18:22:00 35002 27-04…

---

## [Unnable to start Logstash correctly](https://discuss.elastic.co/t/unnable-to-start-logstash-correctly/221424)

<div class="topic-metadata">

**Author:** [@Pablo95](https://discuss.elastic.co/u/Pablo95)\
**Replies:** 13\
**Last updated:** [March 3, 2020, 1:09pm UTC](https://discuss.elastic.co/t/unnable-to-start-logstash-correctly/221424 "2020-03-03T13:09:28Z")

</div>

I´m trying to connect Logstash with Filebeat in Centos 7 and this is the error that occurs: This is the command I´m using: bin/logstash -f logstash-sample.conf --config.reload.automatic OpenJDK 64-Bit Server VM warnin…

---

## [How to work with Query Results in Vega](https://discuss.elastic.co/t/how-to-work-with-query-results-in-vega/286643)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 9\
**Last updated:** [October 13, 2021, 7:47pm UTC](https://discuss.elastic.co/t/how-to-work-with-query-results-in-vega/286643 "2021-10-13T19:47:10Z")

</div>

Hello all, I am directly querying elasticseach from my vega visualization, and I am looking for some education on how to access the results of my query. Can anyone provide an example or point me at something that shows/…

---

## [Running Logstash config in background](https://discuss.elastic.co/t/running-logstash-config-in-background/144915)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 10\
**Last updated:** [August 20, 2018, 2:03pm UTC](https://discuss.elastic.co/t/running-logstash-config-in-background/144915 "2018-08-20T14:03:12Z")

</div>

I have created several config files and all are running with single run and stops when I close the terminal. How to make those config run forever in background and also do I have to run them again when server goes down/r…

---

## [Aggregate problem](https://discuss.elastic.co/t/aggregate-problem/142572)

<div class="topic-metadata">

**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\
**Replies:** 19\
**Last updated:** [August 7, 2018, 7:25am UTC](https://discuss.elastic.co/t/aggregate-problem/142572 "2018-08-07T07:25:19Z")

</div>

Hello ! My logstash config can deal with serveral log type. Two of them are "Appel" and "SVI". These two types have a similar field called "ID appelSVI". I want to add à field called "Passage par SVI" to my "Appel" eve…

---

## [Best config for Performance](https://discuss.elastic.co/t/best-config-for-performance/151109)

<div class="topic-metadata">

**Author:** [@merceskoba](https://discuss.elastic.co/u/merceskoba)\
**Replies:** 10\
**Last updated:** [October 8, 2018, 11:03am UTC](https://discuss.elastic.co/t/best-config-for-performance/151109 "2018-10-08T11:03:31Z")

</div>

Hello, I have 1 dedicated server for Elasticsearch. Here's the detailed informations Elasticsearch 4 cores; 16GB memory I believe that i need to setup Graylog2 and Elasticsearch config. Graylog2 config (/etc/defau…

---

## [Metricbeat host not showing on kibana as well as not creating index](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-kibana-as-well-as-not-creating-index/292567)

<div class="topic-metadata">

**Author:** [@jonoyo](https://discuss.elastic.co/u/jonoyo)\
**Replies:** 13\
**Last updated:** [January 5, 2022, 6:52pm UTC](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-kibana-as-well-as-not-creating-index/292567 "2022-01-05T18:52:01Z")

</div>

After install the metricbeat on localhost elk server its showing on kibana dashboard but when metricbeat installing on another machine metricbeat host are not showing except elk localhost metricbeat host. metricbeat ver…

---

## [Help with date-time conversion from Filebeat](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573)

<div class="topic-metadata">

**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\
**Replies:** 18\
**Last updated:** [December 23, 2023, 11:51am UTC](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573 "2023-12-23T11:51:46Z")

</div>

I'm sending log data from Filebeat (running on Kubernetes) to Graylog/Elasticsearch. I need to ensure that the date-time field inside the JSON message block that is part of the log entry has this format: 2023-12-11T23:…

---

## [Ingesting a csv file with logstash](https://discuss.elastic.co/t/ingesting-a-csv-file-with-logstash/183076)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 12\
**Last updated:** [May 30, 2019, 11:58am UTC](https://discuss.elastic.co/t/ingesting-a-csv-file-with-logstash/183076 "2019-05-30T11:58:39Z")

</div>

Hello, I am trying to ingest a csv file with logstash. Can someone check my logstash.conf file. I want the content to be stored in elasticsearch as well as to be printed on stdout. input { file{ path =\> \["/home/abhi…

---

## [Elasticsearch 404](https://discuss.elastic.co/t/elasticsearch-404/299694)

<div class="topic-metadata">

**Author:** [@Murat\_KOC](https://discuss.elastic.co/u/Murat_KOC)\
**Replies:** 11\
**Last updated:** [March 15, 2022, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-404/299694 "2022-03-15T11:20:13Z")

</div>

I am presenting the data with Elasticsearch on a system I use. The page gives 404 while the bot is pulling the data. But when I enter the link from the browser, there is no problem. I index the data in the database via E…

---

## [How to let logstash splits event field values and assign it to @metadata field](https://discuss.elastic.co/t/how-to-let-logstash-splits-event-field-values-and-assign-it-to-metadata-field/57833)

<div class="topic-metadata">

**Author:** [@daiyue](https://discuss.elastic.co/u/daiyue)\
**Replies:** 12\
**Last updated:** [August 16, 2016, 11:42am UTC](https://discuss.elastic.co/t/how-to-let-logstash-splits-event-field-values-and-assign-it-to-metadata-field/57833 "2016-08-16T11:42:52Z")

</div>

Hi, I have a logstash event, which has the following field, { "\_index": "logstash-2016.08.09", "\_type": "log", "\_id": "AVZvz2ix", "\_score": null, "\_source": { "message": "function\_name~execute||line\_no~12…

---

## ["cluster\_concurrent\_rebalance" : "40" was ignored](https://discuss.elastic.co/t/cluster-concurrent-rebalance-40-was-ignored/243556)

<div class="topic-metadata">

**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\
**Replies:** 18\
**Last updated:** [August 11, 2020, 6:17am UTC](https://discuss.elastic.co/t/cluster-concurrent-rebalance-40-was-ignored/243556 "2020-08-11T06:17:56Z")

</div>

"cluster\_concurrent\_rebalance" : "40" -\> We had this as the setting, when I changed cluster.routing.allocation.awareness.attributes=rack\_id After this I see relocating\_shards = 1000, and it was relocating almost all th…

---

## [Newbie here: automated daily reports from searches as PDF needed](https://discuss.elastic.co/t/newbie-here-automated-daily-reports-from-searches-as-pdf-needed/68280)

<div class="topic-metadata">

**Author:** [@ShinyMcShine](https://discuss.elastic.co/u/ShinyMcShine)\
**Replies:** 9\
**Last updated:** [December 9, 2016, 8:30am UTC](https://discuss.elastic.co/t/newbie-here-automated-daily-reports-from-searches-as-pdf-needed/68280 "2016-12-09T08:30:41Z")

</div>

Hello there! As you can read in the topic title, I'm a newbie to the whole Elasticsearch stuff, including Kibana and X-Pack. I've been working with an ELK stack for a couple of days now and I'm evaluating all the neat …

---

## [Migration to rest client ,NoSuchFieldError: Lucene\_5\_5\_4 error](https://discuss.elastic.co/t/migration-to-rest-client-nosuchfielderror-lucene-5-5-4-error/134217)

<div class="topic-metadata">

**Author:** [@Neha\_goswami](https://discuss.elastic.co/u/Neha_goswami)\
**Replies:** 9\
**Last updated:** [June 4, 2018, 5:56am UTC](https://discuss.elastic.co/t/migration-to-rest-client-nosuchfielderror-lucene-5-5-4-error/134217 "2018-06-04T05:56:04Z")

</div>

Hi , I am migrating to Elastic rest client version 5.6.9 When i try to instantiate RestHighLevelClient, i get this error: RestHighLevelClient client = new RestHighLevelClient(restlowLevelClient); Exception in thread …

---

## [Issue with keyword aggregation following update to 6.0](https://discuss.elastic.co/t/issue-with-keyword-aggregation-following-update-to-6-0/110113)

<div class="topic-metadata">

**Author:** [@MrTraan](https://discuss.elastic.co/u/MrTraan)\
**Replies:** 9\
**Last updated:** [December 7, 2017, 5:48pm UTC](https://discuss.elastic.co/t/issue-with-keyword-aggregation-following-update-to-6-0/110113 "2017-12-07T17:48:26Z")

</div>

Hello world, Since I updated Kibana and ES to 6.0, my visualizations that relies on aggregations do not work anymore. I see a message saying "No results displayed because all values equal 0." instead. If I select a tim…

---

## [Rollover Index duplication data,data coming from logstash](https://discuss.elastic.co/t/rollover-index-duplication-data-data-coming-from-logstash/332726)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 18\
**Last updated:** [June 16, 2023, 9:26am UTC](https://discuss.elastic.co/t/rollover-index-duplication-data-data-coming-from-logstash/332726 "2023-06-16T09:26:14Z")

</div>

Hello , I'm facing one issue,to elaborate I've 40 elastic index and these are handled by ILM policy with rollover defined.The ilm policy is maintained to send data to new index each day(rollover) and delete after 5 days…

---

## [Error in Kibana 7.12](https://discuss.elastic.co/t/error-in-kibana-7-12/274605)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 12\
**Last updated:** [June 2, 2021, 9:18am UTC](https://discuss.elastic.co/t/error-in-kibana-7-12/274605 "2021-06-02T09:18:22Z")

</div>

Hi all! I've a problem on kibana that is running on my local machine.I would like to create a simple dashboard with data but in order to obtian the single data value in time I use Altair and jupyter combination in order …

---

## [Kibana SAML implementation issues](https://discuss.elastic.co/t/kibana-saml-implementation-issues/147256)

<div class="topic-metadata">

**Author:** [@Constantine\_Abayeu](https://discuss.elastic.co/u/Constantine_Abayeu)\
**Replies:** 9\
**Last updated:** [September 12, 2018, 3:57pm UTC](https://discuss.elastic.co/t/kibana-saml-implementation-issues/147256 "2018-09-12T15:57:29Z")

</div>

Hello, We are having some issues configuring SAML on our elastic 6.4 cluster I am getting the following error, when trying to get to kibana at a given port: \[2018-09-04T13:41:42,003\]\[WARN \]\[r.suppressed \] …

---

## [Mysql-slow query parsing error](https://discuss.elastic.co/t/mysql-slow-query-parsing-error/83726)

<div class="topic-metadata">

**Author:** [@gnujeremie](https://discuss.elastic.co/u/gnujeremie)\
**Replies:** 11\
**Last updated:** [May 9, 2017, 7:00am UTC](https://discuss.elastic.co/t/mysql-slow-query-parsing-error/83726 "2017-05-09T07:00:20Z")

</div>

Hi, I am using filebeat and the mysql module to send mysql error logs and mysql slow logs to elastic. Here's an extract from my configuration : #========================== Modules configuration ===================…

---

## [New logsdb format](https://discuss.elastic.co/t/new-logsdb-format/377101)

<div class="topic-metadata">

**Author:** [@skeyby](https://discuss.elastic.co/u/skeyby)\
**Replies:** 22\
**Last updated:** [April 16, 2025, 5:38am UTC](https://discuss.elastic.co/t/new-logsdb-format/377101 "2025-04-16T05:38:38Z")

</div>

Hello everybody. A few weeks ago I've set up a new Elasticsearch cluster to hold logs coming from our Kubernetes cluster. Since we installed a brand new 8.17 we decided to give the new logsdb format a go. We started w…

---

## [Visual builder metric time range](https://discuss.elastic.co/t/visual-builder-metric-time-range/161522)

<div class="topic-metadata">

**Author:** [@sab](https://discuss.elastic.co/u/sab)\
**Replies:** 15\
**Last updated:** [March 7, 2019, 9:20am UTC](https://discuss.elastic.co/t/visual-builder-metric-time-range/161522 "2019-03-07T09:20:55Z")

</div>

I've created a visualization based on Visual Builder / Metric : show the max of a numeric field. Seems easy. It shows "0" if the time range is set to : Today This week This month This year Previous year Last 15 minut…

---

## [Very poor performance on relatively small index](https://discuss.elastic.co/t/very-poor-performance-on-relatively-small-index/56234)

<div class="topic-metadata">

**Author:** [@jogaco](https://discuss.elastic.co/u/jogaco)\
**Replies:** 10\
**Last updated:** [September 15, 2016, 5:31pm UTC](https://discuss.elastic.co/t/very-poor-performance-on-relatively-small-index/56234 "2016-09-15T17:31:11Z")

</div>

My index is not very large: 1 main index, 3M documents, 1 node, 1 shard, 0 replicas, 5GB disk size. Disk is spinning. Documents have indexed fields: about 12 integer fields, 3 short text fields, 4 date fields, plus some …

---

## [Unassigned shard after Kibana 4 joins cluster](https://discuss.elastic.co/t/unassigned-shard-after-kibana-4-joins-cluster/39962)

<div class="topic-metadata">

**Author:** [@Alex\_Harvey](https://discuss.elastic.co/u/Alex_Harvey)\
**Replies:** 9\
**Last updated:** [January 24, 2016, 7:39am UTC](https://discuss.elastic.co/t/unassigned-shard-after-kibana-4-joins-cluster/39962 "2016-01-24T07:39:28Z")

</div>

Hi all, I am pretty new to ELK. I am trying at this stage just to build ELK on a single node and I have Elasticsearch working fine until Kibana 4 adds its index in. At this point the cluster goes yellow and I end u…

---

## [Elasticsearch has accumulated a lot of pending tasks, and stop indexing](https://discuss.elastic.co/t/elasticsearch-has-accumulated-a-lot-of-pending-tasks-and-stop-indexing/341414)

<div class="topic-metadata">

**Author:** [@ShanYang](https://discuss.elastic.co/u/ShanYang)\
**Replies:** 12\
**Last updated:** [September 6, 2023, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-has-accumulated-a-lot-of-pending-tasks-and-stop-indexing/341414 "2023-09-06T09:16:53Z")

</div>

Phenomenon: When generating a new index across days, elasticsearch stop indexing. The cluster health show green but with many pending task. Used Get \_tasks?, I saw thousands transport task and hundreds direct task. Clu…

---

## [The Definitive Guide for Elasticsearch Version 2.0](https://discuss.elastic.co/t/the-definitive-guide-for-elasticsearch-version-2-0/34434)

<div class="topic-metadata">

**Author:** [@mos](https://discuss.elastic.co/u/mos)\
**Replies:** 9\
**Last updated:** [March 24, 2016, 2:49pm UTC](https://discuss.elastic.co/t/the-definitive-guide-for-elasticsearch-version-2-0/34434 "2016-03-24T14:49:41Z")

</div>

Is there a plan or working in progress to update the Definitive Guide to version 2.0. Somewhere on Github?

---

## [Grok pattern for custom application log](https://discuss.elastic.co/t/grok-pattern-for-custom-application-log/133864)

<div class="topic-metadata">

**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\
**Replies:** 9\
**Last updated:** [June 26, 2018, 11:25am UTC](https://discuss.elastic.co/t/grok-pattern-for-custom-application-log/133864 "2018-06-26T11:25:09Z")

</div>

Hi Team, I have error log as mentioned below , can you suggest me the grok pattern for this, 20180209 00:00:08,696 ERROR WebContainer : 34989 dao.OrderServiceDAOImpl Acct\_Nr=724377 Imp\_Acct\_Nr= Exception in the metho…

---

## [Could not find logstash.yml](https://discuss.elastic.co/t/could-not-find-logstash-yml/343776)

<div class="topic-metadata">

**Author:** [@atulrana20](https://discuss.elastic.co/u/atulrana20)\
**Replies:** 16\
**Last updated:** [September 29, 2023, 7:29am UTC](https://discuss.elastic.co/t/could-not-find-logstash-yml/343776 "2023-09-29T07:29:50Z")

</div>

WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at p…

---

## [Problemas con la configuracion geoip](https://discuss.elastic.co/t/problemas-con-la-configuracion-geoip/29365)

<div class="topic-metadata">

**Author:** [@dfaropennetwork](https://discuss.elastic.co/u/dfaropennetwork)\
**Replies:** 9\
**Last updated:** [September 17, 2015, 1:34pm UTC](https://discuss.elastic.co/t/problemas-con-la-configuracion-geoip/29365 "2015-09-17T13:34:02Z")

</div>

Buenos días, a ver si me podéis ayudar. Tengo problemas para configurar la parte de geoip, esto es lo que tengo configurado hasta ahora: FIltro para geoip de logstash filter { if \[type\] == "apache\_access" { …

---

## [NoSuchFileException of the "translog.ckp" file](https://discuss.elastic.co/t/nosuchfileexception-of-the-translog-ckp-file/212802)

<div class="topic-metadata">

**Author:** [@weiwei107](https://discuss.elastic.co/u/weiwei107)\
**Replies:** 14\
**Last updated:** [December 30, 2019, 6:56am UTC](https://discuss.elastic.co/t/nosuchfileexception-of-the-translog-ckp-file/212802 "2019-12-30T06:56:26Z")

</div>

I wrote a post several days before: https://discuss.elastic.co/t/help-all-shards-failed-regularly/211045. The problem still exists after I tried the methods mentioned in the replies. Can anyone help us solve this weird …

---

## [Performance issue on Kibana](https://discuss.elastic.co/t/performance-issue-on-kibana/151887)

<div class="topic-metadata">

**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\
**Replies:** 13\
**Last updated:** [October 23, 2018, 8:35am UTC](https://discuss.elastic.co/t/performance-issue-on-kibana/151887 "2018-10-23T08:35:00Z")

</div>

Hi Team, I have used the Dockerization concepts for my ELK implementation. Please find my ELK node infrastructure as below, I have created around 15 dashboards. Each dashboard has around 10 to 15 visualizations. And …

---

## [Delete by query took more time than expected](https://discuss.elastic.co/t/delete-by-query-took-more-time-than-expected/141608)

<div class="topic-metadata">

**Author:** [@kish](https://discuss.elastic.co/u/kish)\
**Replies:** 12\
**Last updated:** [July 26, 2018, 1:31pm UTC](https://discuss.elastic.co/t/delete-by-query-took-more-time-than-expected/141608 "2018-07-26T13:31:42Z")

</div>

Hello - I have a made query to delete an entire from index at 13:49:48 but ES took almost 40-50sec to delete the query. But in /elasticsearch/log/\*.log file i am unable to find the any details regarding it. From avail…

---

## [Fitlers in buckets are not working in kibana pie chart](https://discuss.elastic.co/t/fitlers-in-buckets-are-not-working-in-kibana-pie-chart/205521)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 10\
**Last updated:** [November 10, 2019, 1:30am UTC](https://discuss.elastic.co/t/fitlers-in-buckets-are-not-working-in-kibana-pie-chart/205521 "2019-11-10T01:30:26Z")

</div>

I am trying to add multiple Monitors and their up and down status in in single Pie visualization. Each monitor as a donut and up and down status are as slices. I used below: Metric: Count Bucket 1: filter monitor.nam…

---

## [No Data Found error](https://discuss.elastic.co/t/no-data-found-error/72778)

<div class="topic-metadata">

**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\
**Replies:** 11\
**Last updated:** [January 26, 2017, 4:44pm UTC](https://discuss.elastic.co/t/no-data-found-error/72778 "2017-01-26T16:44:22Z")

</div>

I have looked through many other threads on this issue, and I cannot seem to find anything that works for me. I have an Elasticsearch 2.4.0 cluster w/ the appropriate marvel agent configured on all nodes. This has been…

---

## [Filebeat 5.0beta1 with kafka output: multiplication of log lines](https://discuss.elastic.co/t/filebeat-5-0beta1-with-kafka-output-multiplication-of-log-lines/62513)

<div class="topic-metadata">

**Author:** [@psychonaut](https://discuss.elastic.co/u/psychonaut)\
**Replies:** 13\
**Last updated:** [October 10, 2016, 12:12pm UTC](https://discuss.elastic.co/t/filebeat-5-0beta1-with-kafka-output-multiplication-of-log-lines/62513 "2016-10-10T12:12:12Z")

</div>

Followup-to https://discuss.elastic.co/t/filebeat-5-0-0-alpha5-multiple-harvesters-for-same-file-sending-the-same-messages-over-and-over/59866 I have the same problems. After some time messages are marked as un-acked a…

---

## [Global Filter on Kibana](https://discuss.elastic.co/t/global-filter-on-kibana/161960)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 11\
**Last updated:** [December 25, 2018, 8:19am UTC](https://discuss.elastic.co/t/global-filter-on-kibana/161960 "2018-12-25T08:19:58Z")

</div>

I am trying to create a dashboard where one of the visuals is a sum total of values by Month. But the rest of them just show Last 30 days of data. How can I create a visual which would be such that the global time range …

---

## [Enable readonly mode Elastic workplace search on docker desktop](https://discuss.elastic.co/t/enable-readonly-mode-elastic-workplace-search-on-docker-desktop/262545)

<div class="topic-metadata">

**Author:** [@Prasanna\_K](https://discuss.elastic.co/u/Prasanna_K)\
**Replies:** 13\
**Last updated:** [January 29, 2021, 10:14pm UTC](https://discuss.elastic.co/t/enable-readonly-mode-elastic-workplace-search-on-docker-desktop/262545 "2021-01-29T22:14:28Z")

</div>

Hi, I am trying to setup a POC of elastic enterprise workplace search on my docker desktop. I am able to successfully setup the Elasticsearch. The workplace search container is able to connect. However, it says there is…

---

## [Intercept every request from Kibana plugin](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021)

<div class="topic-metadata">

**Author:** [@Digl1](https://discuss.elastic.co/u/Digl1)\
**Replies:** 18\
**Last updated:** [April 22, 2020, 2:57am UTC](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021 "2020-04-22T02:57:23Z")

</div>

Hi, I have tried a lot, but I can't really get it to work. I want to intercept all requests from kibana to elastic and modify the HTTP request Headers. I am also not sure what the correct approach to this would be - s…

---

## [\[Need Help\] Logstash start failed when use 3rd party gem in customized plugin](https://discuss.elastic.co/t/need-help-logstash-start-failed-when-use-3rd-party-gem-in-customized-plugin/29084)

<div class="topic-metadata">

**Author:** [@ttys000](https://discuss.elastic.co/u/ttys000)\
**Replies:** 9\
**Last updated:** [November 9, 2015, 1:56am UTC](https://discuss.elastic.co/t/need-help-logstash-start-failed-when-use-3rd-party-gem-in-customized-plugin/29084 "2015-11-09T01:56:07Z")

</div>

I used mail gem in customized codec plugin to handle some email related data, the plugin gem run bundle exec rspec and gem build is successful. The problem is when the plugin installed, it will lead Logstash start proces…

---

## [Configuration du plugin logstash-output-email](https://discuss.elastic.co/t/configuration-du-plugin-logstash-output-email/74992)

<div class="topic-metadata">

**Author:** [@vdsm](https://discuss.elastic.co/u/vdsm)\
**Replies:** 11\
**Last updated:** [February 20, 2017, 8:32am UTC](https://discuss.elastic.co/t/configuration-du-plugin-logstash-output-email/74992 "2017-02-20T08:32:26Z")

</div>

Bonjour, j'essaye actuellement de configurer le plugin logstash-output-email afin de remonter par email tout log portant un tag particulier, mais je n'y parvient pas. J'ai essayé plusieurs type de configuration mais rie…

---

## [How to append to a existing list using Java for a given ID for bulk inserts/update](https://discuss.elastic.co/t/how-to-append-to-a-existing-list-using-java-for-a-given-id-for-bulk-inserts-update/191401)

<div class="topic-metadata">

**Author:** [@Susmit07](https://discuss.elastic.co/u/Susmit07)\
**Replies:** 12\
**Last updated:** [July 20, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-append-to-a-existing-list-using-java-for-a-given-id-for-bulk-inserts-update/191401 "2019-07-20T09:40:05Z")

</div>

Hello Team, I am using this piece of code to update to the elasticsearch index, everything is working fine, but the document is having a list which is getting overridden, and not appended. I am using a bulkprocessor to …

---

## [Fault tolerance "address" for ES Cluster](https://discuss.elastic.co/t/fault-tolerance-address-for-es-cluster/27268)

<div class="topic-metadata">

**Author:** [@tickermcse76](https://discuss.elastic.co/u/tickermcse76)\
**Replies:** 9\
**Last updated:** [July 7, 2016, 5:36am UTC](https://discuss.elastic.co/t/fault-tolerance-address-for-es-cluster/27268 "2016-07-07T05:36:34Z")

</div>

Suppose I have 5 ES nodes in a cluster; call them ES1, ES2, ES3, ES4, and ES5. I also have a farm of 20 web servers (call them W01 to W20) that need to point to this cluster. What address should the web servers point t…

---

## [Problem with date filter](https://discuss.elastic.co/t/problem-with-date-filter/309642)

<div class="topic-metadata">

**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\
**Replies:** 11\
**Last updated:** [July 14, 2022, 5:26pm UTC](https://discuss.elastic.co/t/problem-with-date-filter/309642 "2022-07-14T17:26:24Z")

</div>

Hello, I am trying to parse the following message (e.g): 2022-07-14T13:06:16 Using the dissect filter correctly: dissect { mapping =\> { "\[message\]" =\> "%{\[my\]\[date\]}" …

---

## [Spring Data Elasticsearch with ES 7.2.1 | GeoPoint mapping failure while indexing](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-7-2-1-geopoint-mapping-failure-while-indexing/227989)

<div class="topic-metadata">

**Author:** [@adivardhan](https://discuss.elastic.co/u/adivardhan)\
**Replies:** 9\
**Last updated:** [April 17, 2020, 5:23pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-7-2-1-geopoint-mapping-failure-while-indexing/227989 "2020-04-17T17:23:52Z")

</div>

Hi, I am using ES 7.2.1 to store large amount of location based data and querying for near-by locations. For location coordinates, I am using GeoPoint fields from my java codebase. ES: 7.2.1 Spring Data Elasticsearch…

---

## [Latency in seeing a document](https://discuss.elastic.co/t/latency-in-seeing-a-document/363071)

<div class="topic-metadata">

**Author:** [@siakc](https://discuss.elastic.co/u/siakc)\
**Replies:** 42\
**Last updated:** [July 22, 2024, 3:59pm UTC](https://discuss.elastic.co/t/latency-in-seeing-a-document/363071 "2024-07-22T15:59:16Z")

</div>

It seems to be a delay between the time a doc is put and the time it is searchable in the Kibana. I wanted to find the reason. "indexing": { "index\_total": 3568228, "index\_time\_in\_millis": 1947151,…

---

## [Query ElasticSearchData USING Ruby ElasticsearchGem](https://discuss.elastic.co/t/query-elasticsearchdata-using-ruby-elasticsearchgem/70634)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 15\
**Last updated:** [January 30, 2017, 1:36pm UTC](https://discuss.elastic.co/t/query-elasticsearchdata-using-ruby-elasticsearchgem/70634 "2017-01-30T13:36:13Z")

</div>

Hi - I have a setup with Elastic Search, Kibana and MetricBeat running with 5.1.1 version on my Windows-7 machine. Am trying to create a test case to check CPU rate at the API level; using Ruby elasticsearch-5.0.0 gem. …

---

## [How to parase xml in logstash](https://discuss.elastic.co/t/how-to-parase-xml-in-logstash/285214)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 16\
**Last updated:** [October 14, 2021, 4:33pm UTC](https://discuss.elastic.co/t/how-to-parase-xml-in-logstash/285214 "2021-10-14T16:33:08Z")

</div>

Hi I'm wondering how can I can parse below structure of XML in logstash as XML in the single event. Maybe in that case would be use fluentd.??? This logs will be upload by filebeat. here it is worth mentioning that the…

[Previous page](https://discuss.elastic.co/top.md?page=110&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=112&per_page=50&period=all)
