# Top

**URL:** https://discuss.elastic.co/top.md?page=1113&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1114

---

## [RESOLVED: Unable to load "text!config"](https://discuss.elastic.co/t/resolved-unable-to-load-text-config/2722)

<div class="topic-metadata">

**Author:** [@Christophe\_Le\_Ret](https://discuss.elastic.co/u/Christophe_Le_Ret)\
**Replies:** 1\
**Last updated:** [June 16, 2015, 8:05am UTC](https://discuss.elastic.co/t/resolved-unable-to-load-text-config/2722 "2015-06-16T08:05:17Z")

</div>

Hello I am getting an unsual error from Kibana. Error: Unable to load "text!config" modules because of an unknown error. Error: ./config?\_b=6004 HTTP status: 404 Error: Uncaught Error: Unable to load "text!config" mo…

---

## [Help with synonyms and edge ngram analyzers](https://discuss.elastic.co/t/help-with-synonyms-and-edge-ngram-analyzers/7237)

<div class="topic-metadata">

**Author:** [@Dan\_Tam](https://discuss.elastic.co/u/Dan_Tam)\
**Replies:** 1\
**Last updated:** [April 8, 2012, 5:56pm UTC](https://discuss.elastic.co/t/help-with-synonyms-and-edge-ngram-analyzers/7237 "2012-04-08T17:56:30Z")

</div>

Hi, I'm having problems with an analyzer that uses both synonyms and edge ngrams filters. I opened an issue on github a few days ago: https://github.com/elasticsearch/elasticsearch/issues/1835 .There is also a gist…

---

## [Fortinet FortiGate Firewall Logs integration](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116)

<div class="topic-metadata">

**Author:** [@francesco.amato](https://discuss.elastic.co/u/francesco.amato)\
**Replies:** 2\
**Last updated:** [September 1, 2023, 12:40pm UTC](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116 "2023-09-01T12:40:00Z")

</div>

Hi to all I can't figure out why the Fortigate Firewall Logs Integration doesn't send logs to my Elasticsearch server I can use the filebeat module but not the fleet integration I have setup the Fortigate Firewall to …

---

## [Adding new field to the mapping template](https://discuss.elastic.co/t/adding-new-field-to-the-mapping-template/249102)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 2\
**Last updated:** [September 21, 2020, 9:22pm UTC](https://discuss.elastic.co/t/adding-new-field-to-the-mapping-template/249102 "2020-09-21T21:22:49Z")

</div>

Hi, From time to time, I need to add a new field to my templates (mostly daily indices). Is there an easy way to apply that to an existing index? Thank you!

---

## [Unable to access elasticsearch opendistro from browser](https://discuss.elastic.co/t/unable-to-access-elasticsearch-opendistro-from-browser/196454)

<div class="topic-metadata">

**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 11:43pm UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-opendistro-from-browser/196454 "2019-08-23T23:43:13Z")

</div>

Hi Guys, I'm trying to install opendistro elasticsearch https://opendistro.github.io/for-elasticsearch-docs/docs/install/rpm/ on a centos machine and I was able to perform that. I even removed the security plugins menti…

---

## [Eclipse Development Error](https://discuss.elastic.co/t/eclipse-development-error/25424)

<div class="topic-metadata">

**Author:** [@Nathan\_F](https://discuss.elastic.co/u/Nathan_F)\
**Replies:** 2\
**Last updated:** [July 14, 2015, 2:34am UTC](https://discuss.elastic.co/t/eclipse-development-error/25424 "2015-07-14T02:34:18Z")

</div>

I am trying to debug ES in eclipse. Admittedly I know very little about debugging in eclipse and I have never used Java before (I'm a command line/vim type of programmer). Having cloned the github ES repo, I can impor…

---

## [Problem create Engine - Enterprise Search encountered an error. Check Kibana Server logs for details](https://discuss.elastic.co/t/problem-create-engine-enterprise-search-encountered-an-error-check-kibana-server-logs-for-details/341835)

<div class="topic-metadata">

**Author:** [@PustyB](https://discuss.elastic.co/u/PustyB)\
**Replies:** 4\
**Last updated:** [August 29, 2023, 6:27am UTC](https://discuss.elastic.co/t/problem-create-engine-enterprise-search-encountered-an-error-check-kibana-server-logs-for-details/341835 "2023-08-29T06:27:40Z")

</div>

Hi. I have a problem with creating an engine. When creating a new index-based engine, this problem pops up: Enterprise Search encountered an error. Check Kibana Server logs for details. In the kibana logs I find someth…

---

## [Filebeat with Logstash failed to create index in Elasticsearch](https://discuss.elastic.co/t/filebeat-with-logstash-failed-to-create-index-in-elasticsearch/86428)

<div class="topic-metadata">

**Author:** [@munotshubham](https://discuss.elastic.co/u/munotshubham)\
**Replies:** 4\
**Last updated:** [May 19, 2017, 1:40pm UTC](https://discuss.elastic.co/t/filebeat-with-logstash-failed-to-create-index-in-elasticsearch/86428 "2017-05-19T13:40:48Z")

</div>

Everything was working fine after installing the elk-stack. But then i deleted my index once and restarted all services again, it is failing to create new index. Logstash log files seems to be normal. \[2017-05-19T08:51…

---

## [How To Catch Kibana Query Update?](https://discuss.elastic.co/t/how-to-catch-kibana-query-update/82387)

<div class="topic-metadata">

**Author:** [@PRANSHU\_MIDHA](https://discuss.elastic.co/u/PRANSHU_MIDHA)\
**Replies:** 4\
**Last updated:** [May 2, 2017, 4:53am UTC](https://discuss.elastic.co/t/how-to-catch-kibana-query-update/82387 "2017-05-02T04:53:19Z")

</div>

I have been building a Kibana plugin.And currently I am able to catch the query update on dashboard for my plugin using : $scope.$watch(getAppState,function(appState){ $scope.state = appState; $scope.query=$scope.state…

---

## [Alert When Cluster Changes to Yellow or red?](https://discuss.elastic.co/t/alert-when-cluster-changes-to-yellow-or-red/66735)

<div class="topic-metadata">

**Author:** [@imewish](https://discuss.elastic.co/u/imewish)\
**Replies:** 4\
**Last updated:** [November 21, 2016, 3:12pm UTC](https://discuss.elastic.co/t/alert-when-cluster-changes-to-yellow-or-red/66735 "2016-11-21T15:12:37Z")

</div>

I have a ES cluster with 2 client nodes and 4 data nodes. How do i setup an alert to email/slack when my cluster status changes from Green to Yellow or Red?

---

## [Delete all from a type using ElasticSearch.net](https://discuss.elastic.co/t/delete-all-from-a-type-using-elasticsearch-net/27197)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 4\
**Last updated:** [September 13, 2016, 2:10pm UTC](https://discuss.elastic.co/t/delete-all-from-a-type-using-elasticsearch-net/27197 "2016-09-13T14:10:41Z")

</div>

Having troubles deleting an entire type from elasticsearch.net public void DeleteIndexedItemsbyType(string indexType) { ConnectionConfiguration config = new ConnectionConfiguration(new Uri(t…

---

## [Pfelk logstash data parsing](https://discuss.elastic.co/t/pfelk-logstash-data-parsing/343284)

<div class="topic-metadata">

**Author:** [@kozistan](https://discuss.elastic.co/u/kozistan)\
**Replies:** 8\
**Last updated:** [September 19, 2023, 7:54pm UTC](https://discuss.elastic.co/t/pfelk-logstash-data-parsing/343284 "2023-09-19T19:54:03Z")

</div>

Hello would appreciate help with logstash parsing data into elastisearch. Please check my log output. Using opnsense syslog to logstash's pfelk addon and can not figure out whe right mutate filter to get this done. Thank…

---

## [Calculate the percentage in the table using already aggregated fields](https://discuss.elastic.co/t/calculate-the-percentage-in-the-table-using-already-aggregated-fields/288921)

<div class="topic-metadata">

**Author:** [@Michael\_Derevyanko](https://discuss.elastic.co/u/Michael_Derevyanko)\
**Replies:** 3\
**Last updated:** [November 11, 2021, 9:26am UTC](https://discuss.elastic.co/t/calculate-the-percentage-in-the-table-using-already-aggregated-fields/288921 "2021-11-11T09:26:12Z")

</div>

Hi I have a question. Dose it possible to calculate the percentage using already aggregated fields. I have two columns aggregated and grouped by Buckets ( split rows was used): Sum of items (jmeter.count) Sum of item…

---

## [Dissect Filter - Catching a sub field](https://discuss.elastic.co/t/dissect-filter-catching-a-sub-field/155371)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 3\
**Last updated:** [November 13, 2018, 12:39pm UTC](https://discuss.elastic.co/t/dissect-filter-catching-a-sub-field/155371 "2018-11-13T12:39:20Z")

</div>

Hi, Following is my logstash configuration, filter { dissect { mapping =\> { '\[exec.stdout\]' =\> "%{host} %{up} %{users} %{load} %{IP} %{Memoryfree} %{MemoryTotal} %{SwapTotal} %{SwapFree} %{Psql\_active} %{psql\_est…

---

## [How do we figure out if APM agent in node.js is capturing & Sending data to ElasticSearch for Successful transactions?](https://discuss.elastic.co/t/how-do-we-figure-out-if-apm-agent-in-node-js-is-capturing-sending-data-to-elasticsearch-for-successful-transactions/112626)

<div class="topic-metadata">

**Author:** [@Ramprasadgv](https://discuss.elastic.co/u/Ramprasadgv)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 3:22pm UTC](https://discuss.elastic.co/t/how-do-we-figure-out-if-apm-agent-in-node-js-is-capturing-sending-data-to-elasticsearch-for-successful-transactions/112626 "2018-01-11T15:22:37Z")

</div>

Hi, I have an APM agent for Node.js installed on Linux and its corresponding APM server is configured in Windows along with ElasticSearch and Kibana 5.5. At present, I can see only error related fields from APM index …

---

## [Is there API for mapping groups/users to roles](https://discuss.elastic.co/t/is-there-api-for-mapping-groups-users-to-roles/52149)

<div class="topic-metadata">

**Author:** [@Wei\_Huang](https://discuss.elastic.co/u/Wei_Huang)\
**Replies:** 3\
**Last updated:** [June 17, 2016, 8:31am UTC](https://discuss.elastic.co/t/is-there-api-for-mapping-groups-users-to-roles/52149 "2016-06-17T08:31:45Z")

</div>

groups/users to roles can be configured by role\_mapping.yaml file, but this requires ES restart to take effect. Is there any API can change group/user to role mapping dynamically. I'll use ELK5 with x-pack

---

## [Best practice for java transport client](https://discuss.elastic.co/t/best-practice-for-java-transport-client/21372)

<div class="topic-metadata">

**Author:** [@Elaine\_Cario](https://discuss.elastic.co/u/Elaine_Cario)\
**Replies:** 3\
**Last updated:** [December 23, 2014, 6:06pm UTC](https://discuss.elastic.co/t/best-practice-for-java-transport-client/21372 "2014-12-23T18:06:34Z")

</div>

I'm rather new to Elasticsearch, and have just begun intergrating it with an existing application. The existing process runs in the background waiting for messages from a message queue. In some cases, those mes…

---

## [Role of dedicated master nodes when not elected](https://discuss.elastic.co/t/role-of-dedicated-master-nodes-when-not-elected/19203)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 3\
**Last updated:** [August 12, 2014, 7:00am UTC](https://discuss.elastic.co/t/role-of-dedicated-master-nodes-when-not-elected/19203 "2014-08-12T07:00:30Z")

</div>

Lots of ES best practice articles recommend having dedicated master nodes. Specifically, that would involve setting these flags: node.master: true node.data: false Say, you had 7 index nodes and 3 master node…

---

## [Multiple data sources over same port](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598)

<div class="topic-metadata">

**Author:** [@IsaacKr](https://discuss.elastic.co/u/IsaacKr)\
**Replies:** 2\
**Last updated:** [November 8, 2021, 5:05pm UTC](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598 "2021-11-08T17:05:31Z")

</div>

We are ingesting data from multiple data sources over port 514 and using Logstash to ship them out to multiple destinations. Is there a way to tag ingested data based on source IP so that it can be forwarded to the corre…

---

## [Master Not Discovered (V: 6.1.0)](https://discuss.elastic.co/t/master-not-discovered-v-6-1-0/112938)

<div class="topic-metadata">

**Author:** [@shahamit2](https://discuss.elastic.co/u/shahamit2)\
**Replies:** 2\
**Last updated:** [December 26, 2017, 8:55am UTC](https://discuss.elastic.co/t/master-not-discovered-v-6-1-0/112938 "2017-12-26T08:55:52Z")

</div>

ES version: 6.1.0 It is 4 node cluster (2 master, 1 data and 1 client :: Minimum master is set to 2.) Below is config of both master nodes. cluster.name: infra\_elasticsearch\_wos\_snapshot\_us-west-2\_cluster\_7 # networ…

---

## [Filebeat pods restarting with "fatal error: concurrent map read and map write"](https://discuss.elastic.co/t/filebeat-pods-restarting-with-fatal-error-concurrent-map-read-and-map-write/265961)

<div class="topic-metadata">

**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\
**Replies:** 5\
**Last updated:** [March 3, 2021, 11:44am UTC](https://discuss.elastic.co/t/filebeat-pods-restarting-with-fatal-error-concurrent-map-read-and-map-write/265961 "2021-03-03T11:44:26Z")

</div>

I have deployed Filebeat -\> Logstash -\> elasticseach -\> kibana in OKD-3.11 running on Openstack Centos-7.6 VMs. Using oss docker images for the deployment. docker.elastic.co/beats/filebeat-oss:7.9.3 docker.elastic.co/l…

---

## [Imported Indexes are not showing logs](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 5\
**Last updated:** [November 5, 2020, 3:34pm UTC](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391 "2020-11-05T15:34:40Z")

</div>

Hi, I tried importing an index to another elk stack and had no issues with it. The problem is that the index shows no logs on the discover tab. I think i need to do something else to import the logs but can't seem to fi…

---

## [Lgstash is not sending data](https://discuss.elastic.co/t/lgstash-is-not-sending-data/117739)

<div class="topic-metadata">

**Author:** [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\
**Replies:** 5\
**Last updated:** [January 31, 2018, 8:01am UTC](https://discuss.elastic.co/t/lgstash-is-not-sending-data/117739 "2018-01-31T08:01:39Z")

</div>

Sending Logstash's logs to D:/Personal/logstash-6.1.2/logs which is now configured via log4j2.properties \[2018-01-31T10:24:36,576\]\[INFO \]\[logstash.modules.scaffold\] Initializing module{:module\_name=\>"fb\_apache",:directo…

---

## [Bro IDS with ELK stack](https://discuss.elastic.co/t/bro-ids-with-elk-stack/74637)

<div class="topic-metadata">

**Author:** [@ruby](https://discuss.elastic.co/u/ruby)\
**Replies:** 5\
**Last updated:** [February 16, 2017, 9:40am UTC](https://discuss.elastic.co/t/bro-ids-with-elk-stack/74637 "2017-02-16T09:40:12Z")

</div>

I have configured BRO -IDS on PC along with Filebeat Shiipper and from another PC on which I have installed ELK stack, I need to fetch BRO IDS logs. please help to know what to configure on ELK stack..is there any ne…

---

## [How many MergeScheduler are there in cluster?](https://discuss.elastic.co/t/how-many-mergescheduler-are-there-in-cluster/51221)

<div class="topic-metadata">

**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\
**Replies:** 5\
**Last updated:** [May 31, 2016, 12:22am UTC](https://discuss.elastic.co/t/how-many-mergescheduler-are-there-in-cluster/51221 "2016-05-31T00:22:21Z")

</div>

Hi, if this is a common question, please forgive me as a newbie of Elasticsearch. If I have a ES cluster with 2 nodes and totally I have 10 indexes, each index with 4 shards. How many MergeScheduler are there in cluser…

---

## [Logstash 2.1 - Listener Died](https://discuss.elastic.co/t/logstash-2-1-listener-died/35686)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 5\
**Last updated:** [December 8, 2015, 8:43am UTC](https://discuss.elastic.co/t/logstash-2-1-listener-died/35686 "2015-12-08T08:43:33Z")

</div>

Hi, I'm seeing the following in the log for a new logstash instance I've created: {:timestamp=\>"2015-11-26T15:15:05.769000+0000", :message=\>"UDP listener died", :exception=\>#, :backtrace=\>\["org/jruby/RubyIO.java:3682:i…

---

## [River not reconnecting to RabbitMQ when accidently getting disconnected](https://discuss.elastic.co/t/river-not-reconnecting-to-rabbitmq-when-accidently-getting-disconnected/8022)

<div class="topic-metadata">

**Author:** [@Max\_Kossatz](https://discuss.elastic.co/u/Max_Kossatz)\
**Replies:** 5\
**Last updated:** [March 7, 2013, 9:12am UTC](https://discuss.elastic.co/t/river-not-reconnecting-to-rabbitmq-when-accidently-getting-disconnected/8022 "2013-03-07T09:12:24Z")

</div>

Hi, we noticed that when the RabbitMQ-Server fails the river is giving this errormessage in the log: \[2012-06-08 15:45:14,362\]\[WARN \]\[river.rabbitmq \] \[Lincoln, Lonnie Thompson\] \[rabbitmq\]\[my\_river71\] f…

---

## [Metricbeat for NGINX : HTTP error 502 in : 502 Bad Gateway](https://discuss.elastic.co/t/metricbeat-for-nginx-http-error-502-in-502-bad-gateway/299155)

<div class="topic-metadata">

**Author:** [@elasticmind](https://discuss.elastic.co/u/elasticmind)\
**Replies:** 6\
**Last updated:** [March 11, 2022, 11:08am UTC](https://discuss.elastic.co/t/metricbeat-for-nginx-http-error-502-in-502-bad-gateway/299155 "2022-03-11T11:08:48Z")

</div>

Hello, I'm going through the observability fundamentals training and for the NGINX metrics section i'm getting this error: {"log.level":"error","@timestamp":"2022-03-09T00:57:04.303Z","log.origin":{"file.name":"module/…

---

## [Upgrade from 5.1.0 to 5.1.1 on Centos6 Makes a node unable to join the cluster](https://discuss.elastic.co/t/upgrade-from-5-1-0-to-5-1-1-on-centos6-makes-a-node-unable-to-join-the-cluster/68693)

<div class="topic-metadata">

**Author:** [@fciocchetti](https://discuss.elastic.co/u/fciocchetti)\
**Replies:** 6\
**Last updated:** [December 12, 2016, 12:08pm UTC](https://discuss.elastic.co/t/upgrade-from-5-1-0-to-5-1-1-on-centos6-makes-a-node-unable-to-join-the-cluster/68693 "2016-12-12T12:08:51Z")

</div>

I have a simple 3 node ELK 5.1.0 Cluster that i am trying to upgrade to 5.1.1 using provided RPMs . I can't see anything that could cause this on the release notes for 5.1.1 The cluster work as expected as 5.1.0 but …

---

## [Mapping of index containing date in index(Ex. filebeat-2016.05.24)](https://discuss.elastic.co/t/mapping-of-index-containing-date-in-index-ex-filebeat-2016-05-24/50792)

<div class="topic-metadata">

**Author:** [@sukhada369](https://discuss.elastic.co/u/sukhada369)\
**Replies:** 6\
**Last updated:** [May 24, 2016, 1:37pm UTC](https://discuss.elastic.co/t/mapping-of-index-containing-date-in-index-ex-filebeat-2016-05-24/50792 "2016-05-24T13:37:24Z")

</div>

I am using the index pattern as "filebeat-\[yyyy.mm.dd\]". Some of the fields need to be analysed and hence I am uploading mapping.json template for the same with changes in it for required fields. The problem I am facing…

---

## [Cant understant this bad response](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806)

<div class="topic-metadata">

**Author:** [@Borna\_Jelic](https://discuss.elastic.co/u/Borna_Jelic)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 9:13pm UTC](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806 "2020-10-21T21:13:46Z")

</div>

Hello, I have implemented my custom search function. All tests have passed, but when I run request on Kibana, I get this response: { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", …

---

## [\[null-valued setting found for key \[xpack.security.authc.realms.active\_directory\]](https://discuss.elastic.co/t/null-valued-setting-found-for-key-xpack-security-authc-realms-active-directory/270309)

<div class="topic-metadata">

**Author:** [@hubertn](https://discuss.elastic.co/u/hubertn)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 1:41pm UTC](https://discuss.elastic.co/t/null-valued-setting-found-for-key-xpack-security-authc-realms-active-directory/270309 "2021-04-22T13:41:39Z")

</div>

set active\_directory security in elasticsearch.yml. After setting up xpack configuration in the yml file, Elastic service did not start anymore, it indicates that the \[null-valued setting found for the active\_director…

---

## [Two different aggregate blocks in one logstash filter](https://discuss.elastic.co/t/two-different-aggregate-blocks-in-one-logstash-filter/225205)

<div class="topic-metadata">

**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\
**Replies:** 3\
**Last updated:** [March 27, 2020, 5:47pm UTC](https://discuss.elastic.co/t/two-different-aggregate-blocks-in-one-logstash-filter/225205 "2020-03-27T17:47:26Z")

</div>

Need to aggregate two different sets of Cisco ASA logs. One - for a cert verification, other - for a firewall. ### TOKEN PRESENSE CHECK (717022 - cert validated THAN 722051 - IP assigned, # To match task\_id user.nam…

---

## [Debug Logstash hot\_threads](https://discuss.elastic.co/t/debug-logstash-hot-threads/112131)

<div class="topic-metadata">

**Author:** [@bmh.01](https://discuss.elastic.co/u/bmh.01)\
**Replies:** 3\
**Last updated:** [December 22, 2017, 11:08am UTC](https://discuss.elastic.co/t/debug-logstash-hot-threads/112131 "2017-12-22T11:08:34Z")

</div>

I've got an issue since upgrading to v6 where the logstash process will use 100% of a CPU core even though it is idle with no events being processed. I've checked through the JVM heap and whilst I'd like it to have more …

---

## [Kibana discover url link click naviagte to custom url](https://discuss.elastic.co/t/kibana-discover-url-link-click-naviagte-to-custom-url/329171)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 4\
**Last updated:** [April 3, 2023, 2:21pm UTC](https://discuss.elastic.co/t/kibana-discover-url-link-click-naviagte-to-custom-url/329171 "2023-04-03T14:21:46Z")

</div>

Hello All, Above is how my data looks like in old implementation.Now I'm using jdbc plugin in logstash to parse this data and send to elastic index.Now the data in table is simple value. Now I would like to click on …

---

## [Rollups of APM high level data](https://discuss.elastic.co/t/rollups-of-apm-high-level-data/253447)

<div class="topic-metadata">

**Author:** [@jkaoiadjmdna](https://discuss.elastic.co/u/jkaoiadjmdna)\
**Replies:** 1\
**Last updated:** [October 28, 2020, 9:25am UTC](https://discuss.elastic.co/t/rollups-of-apm-high-level-data/253447 "2020-10-28T09:25:53Z")

</div>

I'm working on a strategy for rolling up APM data. Specifically, things like detailed errors, transactions, spans are not much use after some period of time. However, simplified data like requests per minute, and trans…

---

## [My elasticserver server don't start without error](https://discuss.elastic.co/t/my-elasticserver-server-dont-start-without-error/190279)

<div class="topic-metadata">

**Author:** [@NakMuay](https://discuss.elastic.co/u/NakMuay)\
**Replies:** 4\
**Last updated:** [July 12, 2019, 5:16pm UTC](https://discuss.elastic.co/t/my-elasticserver-server-dont-start-without-error/190279 "2019-07-12T17:16:14Z")

</div>

Hi, I try to run 2 nodes on single server. First node on default port works well. Second don't run without any error. root@ns3152323:/etc/elasticsearch\_node1# systemctl status elasticsearch\_node1.service ● elasticsear…

---

## [Kibana 6.3 - How to display the formatted value on Y-Axis?](https://discuss.elastic.co/t/kibana-6-3-how-to-display-the-formatted-value-on-y-axis/181600)

<div class="topic-metadata">

**Author:** [@AlexCharb](https://discuss.elastic.co/u/AlexCharb)\
**Replies:** 4\
**Last updated:** [May 24, 2019, 3:17pm UTC](https://discuss.elastic.co/t/kibana-6-3-how-to-display-the-formatted-value-on-y-axis/181600 "2019-05-24T15:17:41Z")

</div>

Hello, I have an input wich is a number field, I formatted it on Kibana index Management as a microseconds duration displayed as a seconds duration with 3 decimals as follow: However, when I use this value on a chart…

---

## [Add tags via kibana - best practice](https://discuss.elastic.co/t/add-tags-via-kibana-best-practice/173808)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 3:08pm UTC](https://discuss.elastic.co/t/add-tags-via-kibana-best-practice/173808 "2019-03-27T15:08:58Z")

</div>

Hi, maybe this topic may be better placed in elasticsearch, but I want to enable the kibana user to do that, so I start this topic here. I have a loadtest environment set up. Multiple servers are included. Metricbeat …

---

## [SPF Setup Does Not Check](https://discuss.elastic.co/t/spf-setup-does-not-check/101614)

<div class="topic-metadata">

**Author:** [@Wiliam\_Joaquim](https://discuss.elastic.co/u/Wiliam_Joaquim)\
**Replies:** 4\
**Last updated:** [September 26, 2017, 12:53am UTC](https://discuss.elastic.co/t/spf-setup-does-not-check/101614 "2017-09-26T00:53:59Z")

</div>

I installed a Discourse application, it was sending emails normally, but after a 7 emails sent it stopped working, sidekiq error: Jobs::HandledExceptionWrapper: Wrapped Net::SMTPServerBusy: 421 d9606061-d948-474e-a3bf-1…

---

## [Optimal number of master nodes in a two racks cluster](https://discuss.elastic.co/t/optimal-number-of-master-nodes-in-a-two-racks-cluster/87721)

<div class="topic-metadata">

**Author:** [@alienmind](https://discuss.elastic.co/u/alienmind)\
**Replies:** 4\
**Last updated:** [June 16, 2017, 12:20pm UTC](https://discuss.elastic.co/t/optimal-number-of-master-nodes-in-a-two-racks-cluster/87721 "2017-06-16T12:20:16Z")

</div>

I have a ES cluster divided in two racks. I wanted to have dedicated master-eligible nodes. I know the recommendation is having minimum\_master\_nodes set to N/2 + 1. I want to establish an adequate value for N. I've rea…

---

## [Logstash RabbitMq input plugin unable to find config file](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-unable-to-find-config-file/63733)

<div class="topic-metadata">

**Author:** [@Ajit\_Pawar](https://discuss.elastic.co/u/Ajit_Pawar)\
**Replies:** 4\
**Last updated:** [November 15, 2016, 6:40am UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-unable-to-find-config-file/63733 "2016-11-15T06:40:51Z")

</div>

I am using RabbitMq plugin for input in logstash and sending rabbitmq message on elasticsearch in outoput. I have created config file as below input { rabbitmq { host =\> "ip address of rabbitmq server" user…

---

## [How to record Level:Error Logs to APM Errors](https://discuss.elastic.co/t/how-to-record-level-error-logs-to-apm-errors/275601)

<div class="topic-metadata">

**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 11:05pm UTC](https://discuss.elastic.co/t/how-to-record-level-error-logs-to-apm-errors/275601 "2021-06-17T23:05:50Z")

</div>

I have an application that will write logs to elasticsearch using serilog and is running APM on the docker-compose file. For some reason whenever I run the application and perform a task that will cause an error, it will…

---

## [Passing custom regex inside grok filter](https://discuss.elastic.co/t/passing-custom-regex-inside-grok-filter/261907)

<div class="topic-metadata">

**Author:** [@Flavio1](https://discuss.elastic.co/u/Flavio1)\
**Replies:** 1\
**Last updated:** [January 22, 2021, 11:49am UTC](https://discuss.elastic.co/t/passing-custom-regex-inside-grok-filter/261907 "2021-01-22T11:49:24Z")

</div>

Hi everybody, During these days i'm trying to implement a custom regex system configuration in order to have a single point, outside pipelines, in which i can make crud operations on regexes. I tried this solution: mut…

---

## [Logstash : failed to parse field \[@timestamp\] of type \[date\]](https://discuss.elastic.co/t/logstash-failed-to-parse-field-timestamp-of-type-date/190789)

<div class="topic-metadata">

**Author:** [@Sandeep\_Bind](https://discuss.elastic.co/u/Sandeep_Bind)\
**Replies:** 1\
**Last updated:** [July 16, 2019, 4:37pm UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-field-timestamp-of-type-date/190789 "2019-07-16T16:37:25Z")

</div>

This is my logstash.conf file. I am trying to read the data from mysql database and send it to elastic search. I am getting below error. This is my index creation command : curl -X POST -H "Content-Type: application/js…

---

## [How to stop scheduled logstash config and close the logstash pipeline?](https://discuss.elastic.co/t/how-to-stop-scheduled-logstash-config-and-close-the-logstash-pipeline/41204)

<div class="topic-metadata">

**Author:** [@mrizwan](https://discuss.elastic.co/u/mrizwan)\
**Replies:** 1\
**Last updated:** [February 9, 2016, 7:02pm UTC](https://discuss.elastic.co/t/how-to-stop-scheduled-logstash-config-and-close-the-logstash-pipeline/41204 "2016-02-09T19:02:18Z")

</div>

I have configured a logstash file in to fetch data from sql and dump it to elasticsearch. I have scheduled this process for every 5 minutes. Now I want to stop this process. Please help how can I stop that process and cl…

---

## [Read JSON with Logstash](https://discuss.elastic.co/t/read-json-with-logstash/70931)

<div class="topic-metadata">

**Author:** [@srneodani](https://discuss.elastic.co/u/srneodani)\
**Replies:** 5\
**Last updated:** [January 9, 2017, 11:38am UTC](https://discuss.elastic.co/t/read-json-with-logstash/70931 "2017-01-09T11:38:50Z")

</div>

Hi people! I want parser a json file and put output in a Elastic every minute, but I don't want add the same json each time. I would like if json have 10 element, have only this 10 elements in my index of Elastic but u…

---

## [Metrics format recommendations?](https://discuss.elastic.co/t/metrics-format-recommendations/28882)

<div class="topic-metadata">

**Author:** [@imre](https://discuss.elastic.co/u/imre)\
**Replies:** 5\
**Last updated:** [September 29, 2015, 9:03am UTC](https://discuss.elastic.co/t/metrics-format-recommendations/28882 "2015-09-29T09:03:11Z")

</div>

Hi folks, do you have a writeup on metrics formatting conventions? I have looked at the topbeat and packetbeat entries in ES and it wasn't clear how it was decided that some information should have: - their own fiel…

---

## [High load after upgrading ElasticSearch/Kibana/Logstash from 7.5.1 to 7.9.3](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307)

<div class="topic-metadata">

**Author:** [@stideswell](https://discuss.elastic.co/u/stideswell)\
**Replies:** 8\
**Last updated:** [January 29, 2021, 1:14am UTC](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307 "2021-01-29T01:14:43Z")

</div>

Hello I've upgraded an ElasticSearch server running on Ubuntu 18 from version 7.5.1 to 7.9.3. I use ES, Kibana and Logstash on this server. The load was immediately much higher after the upgrade and this has persisted. …

---

## [Java APM Agent does not send spans for database queries and error.\* document](https://discuss.elastic.co/t/java-apm-agent-does-not-send-spans-for-database-queries-and-error-document/162602)

<div class="topic-metadata">

**Author:** [@Victor\_C](https://discuss.elastic.co/u/Victor_C)\
**Replies:** 8\
**Last updated:** [January 6, 2019, 6:51am UTC](https://discuss.elastic.co/t/java-apm-agent-does-not-send-spans-for-database-queries-and-error-document/162602 "2019-01-06T06:51:03Z")

</div>

The Java APM Agent does not send spans for database queries and error.\* document, but it sends the HTTP request correctly. I only see one warning in the log but it seems not related to the issue. \[qtp1190035432-17\] WAR…

[Previous page](https://discuss.elastic.co/top.md?page=1112&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1114&per_page=50&period=all)
