# Top

**URL:** https://discuss.elastic.co/top.md?page=112&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 113

---

## [Calculations with values of different documents in painless query](https://discuss.elastic.co/t/calculations-with-values-of-different-documents-in-painless-query/249280)

<div class="topic-metadata">

**Author:** [@alexfritz](https://discuss.elastic.co/u/alexfritz)\
**Replies:** 10\
**Last updated:** [September 29, 2020, 10:15pm UTC](https://discuss.elastic.co/t/calculations-with-values-of-different-documents-in-painless-query/249280 "2020-09-29T22:15:25Z")

</div>

Hello I would like to use a painless script to do some calculations. The problem is, the values are stored in different documents as time series. For example the index has a mapping of 2 fields fieldA and fieldB. There …

---

## [ElasticSearch server lock up](https://discuss.elastic.co/t/elasticsearch-server-lock-up/15368)

<div class="topic-metadata">

**Author:** [@John\_Bartak](https://discuss.elastic.co/u/John_Bartak)\
**Replies:** 22\
**Last updated:** [February 27, 2014, 11:17am UTC](https://discuss.elastic.co/t/elasticsearch-server-lock-up/15368 "2014-02-27T11:17:48Z")

</div>

We had an interesting problem today while running a 3 data node ElasticSearch 90.7 cluster inside Amazon (using m1.xlarge). One of the data nodes went to 100% CPU and stayed there. Attempts to use the Java API to…

---

## [Getting dynamic data from mysql db](https://discuss.elastic.co/t/getting-dynamic-data-from-mysql-db/79090)

<div class="topic-metadata">

**Author:** [@Yur\_Gasparyan](https://discuss.elastic.co/u/Yur_Gasparyan)\
**Replies:** 9\
**Last updated:** [March 18, 2017, 6:57pm UTC](https://discuss.elastic.co/t/getting-dynamic-data-from-mysql-db/79090 "2017-03-18T18:57:09Z")

</div>

Hi all. Today I have tried to get dynamic data from mysql db via logstash. I have installed elastic search and have run, than have installed logstash and configured db.config , which in I have parameters =\> {"us…

---

## [Kibana Timestamp Search](https://discuss.elastic.co/t/kibana-timestamp-search/64748)

<div class="topic-metadata">

**Author:** [@Rohit\_Varma](https://discuss.elastic.co/u/Rohit_Varma)\
**Replies:** 10\
**Last updated:** [November 3, 2016, 12:43pm UTC](https://discuss.elastic.co/t/kibana-timestamp-search/64748 "2016-11-03T12:43:59Z")

</div>

I have daily indexes configured in ElasticSearch and an ALIAS which points to the last 7 days index. In Kibana I have configured this Alias but whenever I search lets say last 24 hours its searching against all the Index…

---

## [How to add logging integration for getting filebeat logs in kibana dashboard](https://discuss.elastic.co/t/how-to-add-logging-integration-for-getting-filebeat-logs-in-kibana-dashboard/332553)

<div class="topic-metadata">

**Author:** [@kirankumarb](https://discuss.elastic.co/u/kirankumarb)\
**Replies:** 16\
**Last updated:** [May 31, 2023, 8:26pm UTC](https://discuss.elastic.co/t/how-to-add-logging-integration-for-getting-filebeat-logs-in-kibana-dashboard/332553 "2023-05-31T20:26:46Z")

</div>

We are not getting the logs as filebeat is not configured, so please help me in logging integration for kibana dashboard

---

## [Kibana French version](https://discuss.elastic.co/t/kibana-french-version/230527)

<div class="topic-metadata">

**Author:** [@Emile\_ASTIH](https://discuss.elastic.co/u/Emile_ASTIH)\
**Replies:** 10\
**Last updated:** [April 30, 2020, 12:36pm UTC](https://discuss.elastic.co/t/kibana-french-version/230527 "2020-04-30T12:36:06Z")

</div>

Hi there, I am trying to evaluate the Elasticsearch + Kibana products and see if using both products will fit the business need we are looking for. I am an employee of Everteam company, I already installed elasticsearc…

---

## [Ignore Hate temrs](https://discuss.elastic.co/t/ignore-hate-temrs/11148)

<div class="topic-metadata">

**Author:** [@hemantsingal](https://discuss.elastic.co/u/hemantsingal)\
**Replies:** 17\
**Last updated:** [March 20, 2013, 12:36am UTC](https://discuss.elastic.co/t/ignore-hate-temrs/11148 "2013-03-20T00:36:45Z")

</div>

Is there a way to Ignore documents containing hate terms like fag\*\*t, Ni\*\*er etc from output of my search without having to specify them in each and every query. -- You received this message because you are subs…

---

## [Your socket connection to the server was not read from or written to within the timeout period](https://discuss.elastic.co/t/your-socket-connection-to-the-server-was-not-read-from-or-written-to-within-the-timeout-period/237638)

<div class="topic-metadata">

**Author:** [@Annette1](https://discuss.elastic.co/u/Annette1)\
**Replies:** 12\
**Last updated:** [July 14, 2020, 6:58pm UTC](https://discuss.elastic.co/t/your-socket-connection-to-the-server-was-not-read-from-or-written-to-within-the-timeout-period/237638 "2020-07-14T18:58:08Z")

</div>

when using logstash to s3 output. have tried many strategies of file\_size, file\_time, an rotation strategy to fix with no joy.

---

## [Threshold rules not triggering on selfmade index](https://discuss.elastic.co/t/threshold-rules-not-triggering-on-selfmade-index/251029)

<div class="topic-metadata">

**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\
**Replies:** 15\
**Last updated:** [October 9, 2020, 12:49pm UTC](https://discuss.elastic.co/t/threshold-rules-not-triggering-on-selfmade-index/251029 "2020-10-09T12:49:13Z")

</div>

Hello, I am currently trying to create a simple threshold rule that should trigger after x amounts of failed logons. The issue here is that the rule does not trigger at all, not even when the threshold is set to 1. Th…

---

## [Is JDBC input plugin installed default while installing logstash 1.4.2 or logstash 1.5.4?](https://discuss.elastic.co/t/is-jdbc-input-plugin-installed-default-while-installing-logstash-1-4-2-or-logstash-1-5-4/34446)

<div class="topic-metadata">

**Author:** [@thiruna](https://discuss.elastic.co/u/thiruna)\
**Replies:** 15\
**Last updated:** [November 17, 2015, 8:07pm UTC](https://discuss.elastic.co/t/is-jdbc-input-plugin-installed-default-while-installing-logstash-1-4-2-or-logstash-1-5-4/34446 "2015-11-17T20:07:44Z")

</div>

Hi, is JDBC input plugin installed default while installing logstash 1.4.2 or logstash 1.5.4? We need to use this plugin for Oracle Database. How to know the list of input plugins installed on logstash 1.4.2? I c…

---

## [Segments count и Heap size](https://discuss.elastic.co/t/segments-count-heap-size/65767)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 10\
**Last updated:** [November 11, 2016, 9:10pm UTC](https://discuss.elastic.co/t/segments-count-heap-size/65767 "2016-11-11T21:10:36Z")

</div>

Всем привет! Ребята, на данный момент мы бьем индексы по дням и у нас получилось около 2000-2500 индексов. На машине 64 Гб ОЗУ, из них 31 Гб выделен под Heap. Данных у нас уже 13 Тб. На версии 2.4.1 ElasticSearch уже н…

---

## [Kibana patches from 8.5.3 to 8.6.1](https://discuss.elastic.co/t/kibana-patches-from-8-5-3-to-8-6-1/324202)

<div class="topic-metadata">

**Author:** [@ArpitChoudhary](https://discuss.elastic.co/u/ArpitChoudhary)\
**Replies:** 26\
**Last updated:** [February 10, 2023, 7:15am UTC](https://discuss.elastic.co/t/kibana-patches-from-8-5-3-to-8-6-1/324202 "2023-02-10T07:15:12Z")

</div>

Hello guys, Need help while upgrading kibana patches from 8.5.3 to 8.6.1. not able to connect a node on browser. I update a node by apt update -y & apy upgrade -y, reboot it, try to make it out from the cluster but go…

---

## [Node addition failed](https://discuss.elastic.co/t/node-addition-failed/244523)

<div class="topic-metadata">

**Author:** [@faraz](https://discuss.elastic.co/u/faraz)\
**Replies:** 33\
**Last updated:** [August 13, 2020, 3:03am UTC](https://discuss.elastic.co/t/node-addition-failed/244523 "2020-08-13T03:03:33Z")

</div>

Hi Team, I am new in elasticsearch and trying to add new node on cluster getting this error. Please Help. \[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[Elastic-2\] master not discovered yet, this node has not previous…

---

## [Auto\_expand\_replicas not working on enrich index](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569)

<div class="topic-metadata">

**Author:** [@ddolcimascolo](https://discuss.elastic.co/u/ddolcimascolo)\
**Replies:** 31\
**Last updated:** [September 7, 2022, 8:38am UTC](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569 "2022-09-07T08:38:03Z")

</div>

Hi guys, Our enrich indices are not replicated on our production cluster, and I don't understand why... Can you help to troubleshoot the issue? Context ES 7.17.1 3 Nodes Many various data indices Many ingest pipeline…

---

## [Encountering "only value lists are allowed in serialized settings" exception after upgrade to 6.7.0 from 5.6.5](https://discuss.elastic.co/t/encountering-only-value-lists-are-allowed-in-serialized-settings-exception-after-upgrade-to-6-7-0-from-5-6-5/175254)

<div class="topic-metadata">

**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\
**Replies:** 9\
**Last updated:** [April 3, 2019, 9:21pm UTC](https://discuss.elastic.co/t/encountering-only-value-lists-are-allowed-in-serialized-settings-exception-after-upgrade-to-6-7-0-from-5-6-5/175254 "2019-04-03T21:21:04Z")

</div>

I performed a rolling upgrade in a cluster of 3 nodes, moving from version 5.6.5 to 6.7.0 and ended up seeing the following exception in log file, \[2019-04-03T12:04:06,926\]\[ERROR\]\[o.e.b.Bootstrap \] \[node-1\] Exc…

---

## [Trying out ES 9 — any Java API changes?](https://discuss.elastic.co/t/trying-out-es-9-any-java-api-changes/376812)

<div class="topic-metadata">

**Author:** [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\
**Replies:** 16\
**Last updated:** [June 2, 2025, 9:38pm UTC](https://discuss.elastic.co/t/trying-out-es-9-any-java-api-changes/376812 "2025-06-02T21:38:34Z")

</div>

When upgrading from Elasticsearch 8 to 9, do I need to update my application server Java code? I use the ES 8 Java API to talk to an ES 8 (and 9?) server. Is there any ES Java client version 9, for talking with ES serve…

---

## [Configuring php agent at the application](https://discuss.elastic.co/t/configuring-php-agent-at-the-application/252276)

<div class="topic-metadata">

**Author:** [@dvmorais](https://discuss.elastic.co/u/dvmorais)\
**Replies:** 12\
**Last updated:** [October 17, 2020, 2:37pm UTC](https://discuss.elastic.co/t/configuring-php-agent-at-the-application/252276 "2020-10-17T14:37:54Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Elasticsearch security PKI](https://discuss.elastic.co/t/elasticsearch-security-pki/195838)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 12\
**Last updated:** [August 22, 2019, 11:13am UTC](https://discuss.elastic.co/t/elasticsearch-security-pki/195838 "2019-08-22T11:13:52Z")

</div>

Hi everyone, I'm trying to set up security in ES by following this guide here: I've hit a roadblock and can't seem to work it out on my own First issue is due to possibly breaking changes in latest elasticsearch (7.3…

---

## [Kibana error on migration saved-object](https://discuss.elastic.co/t/kibana-error-on-migration-saved-object/284098)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 23\
**Last updated:** [September 16, 2021, 10:56am UTC](https://discuss.elastic.co/t/kibana-error-on-migration-saved-object/284098 "2021-09-16T10:56:15Z")

</div>

How can I add memory on kibana, for solving problem on saved\_object? I create more than one topic but I've not received any response.

---

## [Disk.indices is higher than disk.used in cat allocation](https://discuss.elastic.co/t/disk-indices-is-higher-than-disk-used-in-cat-allocation/279853)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 13\
**Last updated:** [August 3, 2021, 11:02am UTC](https://discuss.elastic.co/t/disk-indices-is-higher-than-disk-used-in-cat-allocation/279853 "2021-08-03T11:02:35Z")

</div>

When I run the following command: GET \_cat/allocation?v&s=disk.indices&h=shards,disk.indices,disk.used,disk.available,disk.total,disk.percent it shows the following output: shards disk.indices disk.used disk.total dis…

---

## [Standalone elasticssearch node](https://discuss.elastic.co/t/standalone-elasticssearch-node/76174)

<div class="topic-metadata">

**Author:** [@Sagar\_Birla](https://discuss.elastic.co/u/Sagar_Birla)\
**Replies:** 9\
**Last updated:** [February 24, 2017, 12:24pm UTC](https://discuss.elastic.co/t/standalone-elasticssearch-node/76174 "2017-02-24T12:24:11Z")

</div>

I had 4 nodes as part of a cluster. Now, I want to move one of the node out as my staging server; but at the same time want to keep it's data/indices intact. I checked the data folder and it had all the indices/\_state …

---

## [Elasticsearch Java API Tutorial](https://discuss.elastic.co/t/elasticsearch-java-api-tutorial/74307)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 14\
**Last updated:** [March 6, 2017, 4:33am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-tutorial/74307 "2017-03-06T04:33:57Z")

</div>

Is there any working tutorial around that guides people on how to the java api? The official document is totally useless. Too many assumption were made and not documented. I am stuck at https://www.elastic.co/guide…

---

## [Add +1 day to Datefield Kibana scripted fields](https://discuss.elastic.co/t/add-1-day-to-datefield-kibana-scripted-fields/258595)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 9\
**Last updated:** [December 18, 2020, 11:40am UTC](https://discuss.elastic.co/t/add-1-day-to-datefield-kibana-scripted-fields/258595 "2020-12-18T11:40:16Z")

</div>

Hi there, I wonder how to add a Day to existing Date field. For example: Left Date is Original and I need on right hand the origin date + 1 Day Type: Date Format: Date I tried: doc\['Datum'\].value + ("1d") doc\['…

---

## [Logstash codecs (multiline,json) ParseError: illegal character](https://discuss.elastic.co/t/logstash-codecs-multiline-json-parseerror-illegal-character/115292)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 9\
**Last updated:** [January 24, 2018, 2:16pm UTC](https://discuss.elastic.co/t/logstash-codecs-multiline-json-parseerror-illegal-character/115292 "2018-01-24T14:16:30Z")

</div>

Hi, Elasticsearch 5.5.0 Logstash 5.5.0 logstash-codec-multiline 3.0.5 logstash-codec-json 3.0.3. Another issue when reading file (NFS) containing JSON lines using above. From time to time getting such an error: :e…

---

## [Time Field issue](https://discuss.elastic.co/t/time-field-issue/158119)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 24\
**Last updated:** [November 26, 2018, 11:43am UTC](https://discuss.elastic.co/t/time-field-issue/158119 "2018-11-26T11:43:20Z")

</div>

Hello Team, I have write down a pattern for my log and its parsing properly from it. Below is the sample log: I, \[2018-11-26T06:30:02.281210 #17562\] INFO -- : \[0b94e730-7bf1-435d-9f4b-8dd17a0769c1\] Current device: 176…

---

## [How to get ECK APM to work with any type of agent at all!?!](https://discuss.elastic.co/t/how-to-get-eck-apm-to-work-with-any-type-of-agent-at-all/341429)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 27\
**Last updated:** [September 2, 2023, 4:01pm UTC](https://discuss.elastic.co/t/how-to-get-eck-apm-to-work-with-any-type-of-agent-at-all/341429 "2023-09-02T16:01:08Z")

</div>

var apm = require('elastic-apm-node').start({ serviceName: 'my-apm', secretToken: '', // Set custom APM Server URL (default: http://127.0.0.1:8200) serverUrl: 'https://my-apm-http:8200', // Only activate the ag…

---

## [Logstash success output notification](https://discuss.elastic.co/t/logstash-success-output-notification/85697)

<div class="topic-metadata">

**Author:** [@shane\_lee](https://discuss.elastic.co/u/shane_lee)\
**Replies:** 15\
**Last updated:** [May 19, 2017, 1:49am UTC](https://discuss.elastic.co/t/logstash-success-output-notification/85697 "2017-05-19T01:49:04Z")

</div>

Hi all, I was wondering is it possible to send a message to SNS topic after successful bulk index to elasticsearch. Same for failure also. I have attached a high level solution design for reference. Thanks, Shane. …

---

## [Where is the default template.json file for filebeat](https://discuss.elastic.co/t/where-is-the-default-template-json-file-for-filebeat/229761)

<div class="topic-metadata">

**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\
**Replies:** 10\
**Last updated:** [April 26, 2020, 1:32pm UTC](https://discuss.elastic.co/t/where-is-the-default-template-json-file-for-filebeat/229761 "2020-04-26T13:32:34Z")

</div>

As you can see in the image the part in red box what i want to know is where is that file for template resides i want to see that configuration as i want to made the custom template for that sake need a help for config…

---

## [Extra docs in primary](https://discuss.elastic.co/t/extra-docs-in-primary/116836)

<div class="topic-metadata">

**Author:** [@jaisharma](https://discuss.elastic.co/u/jaisharma)\
**Replies:** 12\
**Last updated:** [February 5, 2018, 7:06am UTC](https://discuss.elastic.co/t/extra-docs-in-primary/116836 "2018-02-05T07:06:58Z")

</div>

I've a problem similar to this. The primary and replica shards have gone out of sync which i confirmed using the following api: curl '\<es-prod-url\>:9200/\_cat/shards/\<my-index\>?v=pretty'\` with the output as: index …

---

## [How to stop index from getting throttled?](https://discuss.elastic.co/t/how-to-stop-index-from-getting-throttled/334923)

<div class="topic-metadata">

**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\
**Replies:** 18\
**Last updated:** [June 7, 2023, 3:26am UTC](https://discuss.elastic.co/t/how-to-stop-index-from-getting-throttled/334923 "2023-06-07T03:26:32Z")

</div>

Hi, I am ingesting netflow data into my ES 8.3.3 node at a very high rate. As I increase the ingest to ES where the index rate is about 30+K/s, I started to get the messages below: \[INFO\] \[o.e.i.e.I.EngineMergeSchedule…

---

## [Can an Elasticsearch rollup job dynamically create indexes like Logstash does?](https://discuss.elastic.co/t/can-an-elasticsearch-rollup-job-dynamically-create-indexes-like-logstash-does/145268)

<div class="topic-metadata">

**Author:** [@stuart-j-campbell](https://discuss.elastic.co/u/stuart-j-campbell)\
**Replies:** 13\
**Last updated:** [September 3, 2018, 12:10am UTC](https://discuss.elastic.co/t/can-an-elasticsearch-rollup-job-dynamically-create-indexes-like-logstash-does/145268 "2018-09-03T00:10:27Z")

</div>

I am currently testing out the new rollup APIs in Elasticsearch 6.3 and am wondering if there is any way to configure the rollup job to dynamically create an index based on timestamp like Logstash does when ingesting dat…

---

## [Elasticsearch no longer boots](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452)

<div class="topic-metadata">

**Author:** [@dw5304](https://discuss.elastic.co/u/dw5304)\
**Replies:** 10\
**Last updated:** [September 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452 "2022-09-07T14:55:24Z")

</div>

came in this morning to find a non working bootable version of elasticsearch. \[2022-09-01T14:02:06,208\]\[ERROR\]\[o.e.b.Elasticsearch \] \[redacted\] fatal exception while booting Elasticsearch java.lang.IllegalArgumentE…

---

## [Collect logs from two NIC cards on same server](https://discuss.elastic.co/t/collect-logs-from-two-nic-cards-on-same-server/106732)

<div class="topic-metadata">

**Author:** [@bambam](https://discuss.elastic.co/u/bambam)\
**Replies:** 11\
**Last updated:** [November 9, 2017, 4:17pm UTC](https://discuss.elastic.co/t/collect-logs-from-two-nic-cards-on-same-server/106732 "2017-11-09T16:17:13Z")

</div>

I have Kibana (Version 4.3.1) installed on Red Hat release 7.1 and it's working for the most part. I have two network cards on the computer and logstash is only collecting logs from one network card. The network cards ar…

---

## [Found - Hadoop integration issue](https://discuss.elastic.co/t/found-hadoop-integration-issue/42294)

<div class="topic-metadata">

**Author:** [@d3nyable](https://discuss.elastic.co/u/d3nyable)\
**Replies:** 14\
**Last updated:** [February 20, 2017, 3:58pm UTC](https://discuss.elastic.co/t/found-hadoop-integration-issue/42294 "2017-02-20T15:58:05Z")

</div>

Hi there, I've just signed up a trial account with Found and attempt to inject data through HiveQL using the elasticsearch-hadoop library like so: ADD JAR some/url/elasticsearch-hadoop-2.2.0.jar CREATE EXTERNAL TABL…

---

## [Delete all?](https://discuss.elastic.co/t/delete-all/7189)

<div class="topic-metadata">

**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\
**Replies:** 9\
**Last updated:** [August 24, 2012, 10:58pm UTC](https://discuss.elastic.co/t/delete-all/7189 "2012-08-24T22:58:01Z")

</div>

Does elasticsearch have a setting to clear all existing indexes on startup? This isn't for an April Fool's joke, but would be convenient for unit tests (since there is no disk-less option), and also during developm…

---

## [How to reindex doc with multifield?](https://discuss.elastic.co/t/how-to-reindex-doc-with-multifield/55964)

<div class="topic-metadata">

**Author:** [@Moshe\_Sucaz](https://discuss.elastic.co/u/Moshe_Sucaz)\
**Replies:** 9\
**Last updated:** [July 21, 2016, 6:58am UTC](https://discuss.elastic.co/t/how-to-reindex-doc-with-multifield/55964 "2016-07-21T06:58:48Z")

</div>

Hi, I am writing a python script to reindex our files with new mappings on elastic 1.5.2 (before upgrade to 2.3). one of the changes was mappings of title: "title":{"type":"string"} that was changed to new mappings: "t…

---

## [Can't see journal logs in kibana](https://discuss.elastic.co/t/cant-see-journal-logs-in-kibana/169862)

<div class="topic-metadata">

**Author:** [@DiogoB](https://discuss.elastic.co/u/DiogoB)\
**Replies:** 9\
**Last updated:** [February 26, 2019, 11:47am UTC](https://discuss.elastic.co/t/cant-see-journal-logs-in-kibana/169862 "2019-02-26T11:47:24Z")

</div>

Hello, I am new to ELK and I'm using elastic cloud on the free trial. I have setup filebeats on an EC2 machine and 2 log files were available instantly on kibana, which I can filter with fields I have setup on the file…

---

## [Search for IISLogs](https://discuss.elastic.co/t/search-for-iislogs/44109)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 11\
**Last updated:** [March 15, 2016, 4:01pm UTC](https://discuss.elastic.co/t/search-for-iislogs/44109 "2016-03-15T16:01:03Z")

</div>

How can I search for IISLogs ? What input\_type: ??? should I be using ?

---

## [Add users in Kibana with basic license using 7.10.1](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535)

<div class="topic-metadata">

**Author:** [@Richie](https://discuss.elastic.co/u/Richie)\
**Replies:** 15\
**Last updated:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535 "2021-01-20T15:24:49Z")

</div>

Hi, I recently upgraded my ELK stack from 6.6 to 7.10. I wanted to use the role management feature to allow users to only view dashboards specific to them which would be secured via authentication. I tried this function…

---

## [\[No code for\] Example of using scrollAsync with the java High Level Rest Client](https://discuss.elastic.co/t/no-code-for-example-of-using-scrollasync-with-the-java-high-level-rest-client/165126)

<div class="topic-metadata">

**Author:** [@juanaramis](https://discuss.elastic.co/u/juanaramis)\
**Replies:** 9\
**Last updated:** [February 13, 2019, 6:34pm UTC](https://discuss.elastic.co/t/no-code-for-example-of-using-scrollasync-with-the-java-high-level-rest-client/165126 "2019-02-13T18:34:22Z")

</div>

Hi there, Need an example of using "searchScrollAsync" with the High Level Rest Client 5.6 version The documentation is quite light for that: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/java…

---

## [SQL Structure to JSON Structure the ElasticSearch?](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 12\
**Last updated:** [December 19, 2019, 3:28pm UTC](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037 "2019-12-19T15:28:59Z")

</div>

Hi guys, I would like to ask a question. I want to convert the mysql SQL structure to the JSON structure for elasticSearch. that is, the parameters to limit, sort, group by, select and where then you fall into the config…

---

## [How to query list of offline agents using the Fleet API?](https://discuss.elastic.co/t/how-to-query-list-of-offline-agents-using-the-fleet-api/340783)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 11\
**Last updated:** [August 21, 2023, 8:36am UTC](https://discuss.elastic.co/t/how-to-query-list-of-offline-agents-using-the-fleet-api/340783 "2023-08-21T08:36:03Z")

</div>

I looked at these two docs: and came up with this query: curl --request GET --url 'https://mykibana/api/fleet/agents?kuery=status:offline' \\ --header 'Accept: \*/\*' \\ --header 'Authorization: ApiKey myk…

---

## [Elastic Replica and Unassigned Shards](https://discuss.elastic.co/t/elastic-replica-and-unassigned-shards/353486)

<div class="topic-metadata">

**Author:** [@ntex](https://discuss.elastic.co/u/ntex)\
**Replies:** 11\
**Last updated:** [March 22, 2024, 2:14pm UTC](https://discuss.elastic.co/t/elastic-replica-and-unassigned-shards/353486 "2024-03-22T14:14:41Z")

</div>

Hi First time posting here, I've start managing a recently created onprem cluster, so far I'm having "fun" with all the issues popping in, but I'm far to dominate all concepts. This cluster is hot-warm-cold tier and we…

---

## [Filebeat: Fortinet Module not processing data as it should](https://discuss.elastic.co/t/filebeat-fortinet-module-not-processing-data-as-it-should/272102)

<div class="topic-metadata">

**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\
**Replies:** 14\
**Last updated:** [May 6, 2021, 9:58pm UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-not-processing-data-as-it-should/272102 "2021-05-06T21:58:32Z")

</div>

I think I have a similar problem from this post but I can't solve with the solution on the post. Here is my filebeat.yml: # ============================== Filebeat modules ============================== filebeat.confi…

---

## [The search speed seems much slower than that in 1.3](https://discuss.elastic.co/t/the-search-speed-seems-much-slower-than-that-in-1-3/69283)

<div class="topic-metadata">

**Author:** [@chenjinyuan87](https://discuss.elastic.co/u/chenjinyuan87)\
**Replies:** 18\
**Last updated:** [January 4, 2017, 2:56am UTC](https://discuss.elastic.co/t/the-search-speed-seems-much-slower-than-that-in-1-3/69283 "2017-01-04T02:56:42Z")

</div>

Hello, After i upgrade my cluster to 5.0 from 1.3, the search speed becomes much slower in my index. Currently, i have two clusters with same data, one 1.3 and one 5.0. Each cluster have 5 nodes. My index have about 1…

---

## [Connecting to the elasticsearch via server](https://discuss.elastic.co/t/connecting-to-the-elasticsearch-via-server/51768)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 11\
**Last updated:** [June 6, 2016, 10:51am UTC](https://discuss.elastic.co/t/connecting-to-the-elasticsearch-via-server/51768 "2016-06-06T10:51:18Z")

</div>

Hi, I am using putty server. I have IP number. I want to connect elasticsearch but it can't connect. I installed Elasticsearch 2.3.3 and I write service elasticsearch start on command line. For example: http://184.89…

---

## [Log timestamp is not getting through date filter getting date\_time\_parse\_exception](https://discuss.elastic.co/t/log-timestamp-is-not-getting-through-date-filter-getting-date-time-parse-exception/309705)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 17\
**Last updated:** [July 16, 2022, 9:23pm UTC](https://discuss.elastic.co/t/log-timestamp-is-not-getting-through-date-filter-getting-date-time-parse-exception/309705 "2022-07-16T21:23:19Z")

</div>

Hi Team, I have following logstash configuration for where I have written the date pattern to parse my timestamp, but time is not working. I'm getting \_dateparsefailure. here is the configuration. input{.............}…

---

## [How do I renew my elasticsearch self signed certificate which will not have impact on logstash vms](https://discuss.elastic.co/t/how-do-i-renew-my-elasticsearch-self-signed-certificate-which-will-not-have-impact-on-logstash-vms/358096)

<div class="topic-metadata">

**Author:** [@sudhir\_singh](https://discuss.elastic.co/u/sudhir_singh)\
**Replies:** 10\
**Last updated:** [May 10, 2024, 6:04am UTC](https://discuss.elastic.co/t/how-do-i-renew-my-elasticsearch-self-signed-certificate-which-will-not-have-impact-on-logstash-vms/358096 "2024-05-10T06:04:47Z")

</div>

Hi Everyone. My elasticsearch self signed certificate is about to expire and I have More than thousands of logstash vms which I'm using for logstash data ingestion to elasticsearch and I'm using the elasticsearch credent…

---

## [All the apps of kibana are visible in kibana\_dashboard\_only\_user mode](https://discuss.elastic.co/t/all-the-apps-of-kibana-are-visible-in-kibana-dashboard-only-user-mode/112096)

<div class="topic-metadata">

**Author:** [@rishabhg](https://discuss.elastic.co/u/rishabhg)\
**Replies:** 11\
**Last updated:** [December 20, 2017, 8:29am UTC](https://discuss.elastic.co/t/all-the-apps-of-kibana-are-visible-in-kibana-dashboard-only-user-mode/112096 "2017-12-20T08:29:40Z")

</div>

I have created a user and assigned it "kibana\_dashboard\_only\_user" role. But, when I login as this user, I am still able to view all the other apps that kibana provides like Discover, Visualise, etc. I would like to just…

---

## [Filebeat multiline with line breaks](https://discuss.elastic.co/t/filebeat-multiline-with-line-breaks/88105)

<div class="topic-metadata">

**Author:** [@amruthapbhat](https://discuss.elastic.co/u/amruthapbhat)\
**Replies:** 9\
**Last updated:** [June 7, 2017, 10:04am UTC](https://discuss.elastic.co/t/filebeat-multiline-with-line-breaks/88105 "2017-06-07T10:04:45Z")

</div>

I have a file in the below format Ex: This is the first line. This is the second line. I am using no pattern since I want all the lines in the text to send to Logstash which is around 2000 lines. If the file is in…

[Previous page](https://discuss.elastic.co/top.md?page=111&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=113&per_page=50&period=all)
