# Top

**URL:** https://discuss.elastic.co/top.md?page=1121&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1122

---

## [Kibana discover does not display system index data](https://discuss.elastic.co/t/kibana-discover-does-not-display-system-index-data/275425)

<div class="topic-metadata">

**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\
**Replies:** 5\
**Last updated:** [June 9, 2021, 11:04pm UTC](https://discuss.elastic.co/t/kibana-discover-does-not-display-system-index-data/275425 "2021-06-09T23:04:09Z")

</div>

I have 1 index, it uses datastream, the name is .ds-xxx, currently the data can be written normally and query by GET request, but kibana discover does not show any data on this index, I created indext pattern when the sy…

---

## [Multi\_match search with filtering working intermittently](https://discuss.elastic.co/t/multi-match-search-with-filtering-working-intermittently/188829)

<div class="topic-metadata">

**Author:** [@ryoga](https://discuss.elastic.co/u/ryoga)\
**Replies:** 5\
**Last updated:** [July 4, 2019, 6:18am UTC](https://discuss.elastic.co/t/multi-match-search-with-filtering-working-intermittently/188829 "2019-07-04T06:18:07Z")

</div>

Hi, I am having issues trying to get muti\_match with filtering, it seems to be working very intermittently depending on the term that I am filtering on and I can't pinpoint what the cause is. This is for ES 7.1. The quer…

---

## [Question on filebeat multiline pattern](https://discuss.elastic.co/t/question-on-filebeat-multiline-pattern/171134)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 5\
**Last updated:** [March 7, 2019, 9:12pm UTC](https://discuss.elastic.co/t/question-on-filebeat-multiline-pattern/171134 "2019-03-07T21:12:04Z")

</div>

I am trying to get the logs from a legacy system into Elastic via Filebeat. Needless to say it is the so called "Log from Hell". Since it is a csv I am using grok to great relief. There is one thing which is bothering m…

---

## [Drilldown like splunk in kibana](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 5\
**Last updated:** [March 30, 2018, 2:55pm UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028 "2018-03-30T14:55:20Z")

</div>

I am creating a visualization and i want to implement drilldown like splunk does. So when user clicks on particular item in visualization kibana opens a new search page with that criteria. How can i achieve this? Thank…

---

## [Why cant embed a single visualization to my web page?](https://discuss.elastic.co/t/why-cant-embed-a-single-visualization-to-my-web-page/118180)

<div class="topic-metadata">

**Author:** [@chinukapoor](https://discuss.elastic.co/u/chinukapoor)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 5:56pm UTC](https://discuss.elastic.co/t/why-cant-embed-a-single-visualization-to-my-web-page/118180 "2018-02-06T17:56:33Z")

</div>

Hi, I am not able to embed my visualizations to my custom webpage using the iframe approach. it should be straight forward. However, the iframe's embedding approach of dashboards works just fine. Kibana version : 6.1.2 …

---

## [Search result grouping by N fields](https://discuss.elastic.co/t/search-result-grouping-by-n-fields/56640)

<div class="topic-metadata">

**Author:** [@ted919](https://discuss.elastic.co/u/ted919)\
**Replies:** 5\
**Last updated:** [August 19, 2016, 1:03pm UTC](https://discuss.elastic.co/t/search-result-grouping-by-n-fields/56640 "2016-08-19T13:03:31Z")

</div>

I am a total newbie so forgive me if this is answered in the latest documentation and I just haven't seen it. Is there native (configurable) support for search result grouping by N user selected fields? I have an index…

---

## [Vertical bar chart showing one bar per field](https://discuss.elastic.co/t/vertical-bar-chart-showing-one-bar-per-field/97169)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 2:28am UTC](https://discuss.elastic.co/t/vertical-bar-chart-showing-one-bar-per-field/97169 "2017-08-17T02:28:24Z")

</div>

I am running a transaction processing system that writes a log record for each transaction. Each log record includes multiple fields that represent elapsed time in seconds spent on some aspect of the transaction; a break…

---

## [409 - version conflict - delete\_by\_query (API request using C# NEST)](https://discuss.elastic.co/t/409-version-conflict-delete-by-query-api-request-using-c-nest/345260)

<div class="topic-metadata">

**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\
**Replies:** 6\
**Last updated:** [October 18, 2023, 9:56am UTC](https://discuss.elastic.co/t/409-version-conflict-delete-by-query-api-request-using-c-nest/345260 "2023-10-18T09:56:16Z")

</div>

Status: 409 Type: version\_conflict\_engine\_exception Reason: \[My\_Doc\_ID\]: version conflict, required seqNo \[5092680\], primary term \[45\]. current document has seqNo \[5095726\] and primary term \[45\] We are using C# Nes…

---

## [java.lang.IllegalArgumentException: Fielddata when upgrading to 7.0.0](https://discuss.elastic.co/t/java-lang-illegalargumentexception-fielddata-when-upgrading-to-7-0-0/177867)

<div class="topic-metadata">

**Author:** [@moixcruz](https://discuss.elastic.co/u/moixcruz)\
**Replies:** 6\
**Last updated:** [April 22, 2019, 4:31pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-fielddata-when-upgrading-to-7-0-0/177867 "2019-04-22T16:31:36Z")

</div>

Hi! I run 6.6.0 in several envs ok and today was trying to test a 7.0.0 setup of elastic APM before upgrading those envs but I'm facing some problems, hope anyone can help. My setup is as follows (done with 6.6.0 succes…

---

## [Kibana UI not loading on Linux](https://discuss.elastic.co/t/kibana-ui-not-loading-on-linux/147568)

<div class="topic-metadata">

**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Replies:** 6\
**Last updated:** [September 7, 2018, 6:44am UTC](https://discuss.elastic.co/t/kibana-ui-not-loading-on-linux/147568 "2018-09-07T06:44:45Z")

</div>

I am running ES and Kibana 6.3.1 on Linux (RHEL 6.5, Santiago) with default configs. ES comes up fine and I am able to hit localhost:9200 also. Kibana server also comes up fine with following message: Server running a…

---

## [Creating a -timestamp field](https://discuss.elastic.co/t/creating-a-timestamp-field/100999)

<div class="topic-metadata">

**Author:** [@annette](https://discuss.elastic.co/u/annette)\
**Replies:** 6\
**Last updated:** [October 6, 2017, 10:11am UTC](https://discuss.elastic.co/t/creating-a-timestamp-field/100999 "2017-10-06T10:11:50Z")

</div>

Hi I need to display all 'documents' outstanding at a certain time every day (Say 1 pm everyday). Can anyone please help on how I will be able to work out what the current date time is now.

---

## [Way to factor in search locality?](https://discuss.elastic.co/t/way-to-factor-in-search-locality/57674)

<div class="topic-metadata">

**Author:** [@Zline](https://discuss.elastic.co/u/Zline)\
**Replies:** 6\
**Last updated:** [August 10, 2016, 12:49pm UTC](https://discuss.elastic.co/t/way-to-factor-in-search-locality/57674 "2016-08-10T12:49:33Z")

</div>

Hello, My problem is to search data of thousands of users, e.g. mailboxes. Almost all the time search is filtered by user id. How this locality of searches could be taken into consideration? I'm trying to achieve perfo…

---

## [SQL to query data from ElasticSearch](https://discuss.elastic.co/t/sql-to-query-data-from-elasticsearch/10177)

<div class="topic-metadata">

**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\
**Replies:** 6\
**Last updated:** [March 4, 2015, 2:51pm UTC](https://discuss.elastic.co/t/sql-to-query-data-from-elasticsearch/10177 "2015-03-04T14:51:15Z")

</div>

Hi, I am looking for a solution to query data indexed in ElasticSearch using SQL-like language instead of the ElasticSearch REST API. The solution may be something built on top of the the REST API but what I reall…

---

## [Issues with signals in VEGA visualization](https://discuss.elastic.co/t/issues-with-signals-in-vega-visualization/279222)

<div class="topic-metadata">

**Author:** [@elad\_sheinfeld](https://discuss.elastic.co/u/elad_sheinfeld)\
**Replies:** 3\
**Last updated:** [July 22, 2021, 4:18am UTC](https://discuss.elastic.co/t/issues-with-signals-in-vega-visualization/279222 "2021-07-22T04:18:25Z")

</div>

Hey all, I'm using ELK version 7.13.3 Using the code below, I'm trying to draw nodes connected to networks. The default fill of the nodes is blue, but when a user is clicking a node, it will be filled with red and the…

---

## [Cannot connect to elasticsearch server instance on port 9200](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728)

<div class="topic-metadata">

**Author:** [@freshlinx](https://discuss.elastic.co/u/freshlinx)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 9:54pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728 "2020-12-08T21:54:12Z")

</div>

I have installed Elasticsearch and when I run a curl localhost:9200 request on the machine it returns the expected response showing that Elasticsearch is running. I have a Wordpress site on another server and I want to …

---

## [server.basePath leads to indefinite loop](https://discuss.elastic.co/t/server-basepath-leads-to-indefinite-loop/242585)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 3\
**Last updated:** [August 14, 2020, 2:10pm UTC](https://discuss.elastic.co/t/server-basepath-leads-to-indefinite-loop/242585 "2020-08-14T14:10:43Z")

</div>

Hello. I am using elk stack 7.6.2. When I introduce server.basePath parameter in kibana.yml the browser tends to go in an indefinite loop. Please advise.

---

## [Logstash OOM from one host only](https://discuss.elastic.co/t/logstash-oom-from-one-host-only/241625)

<div class="topic-metadata">

**Author:** [@Mandraenke](https://discuss.elastic.co/u/Mandraenke)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 5:24pm UTC](https://discuss.elastic.co/t/logstash-oom-from-one-host-only/241625 "2020-07-20T17:24:57Z")

</div>

Hi, I'm facing an issue I cant dig down. I have setup filebeat to ship logs from different hosts to logstash. I found that some logs were missing and I found an out of memory error in the logs: \[2020-07-17T09:37:03…

---

## [Instalation Metricbeat RPIs](https://discuss.elastic.co/t/instalation-metricbeat-rpis/96412)

<div class="topic-metadata">

**Author:** [@ferraricharles](https://discuss.elastic.co/u/ferraricharles)\
**Replies:** 3\
**Last updated:** [August 11, 2017, 5:44pm UTC](https://discuss.elastic.co/t/instalation-metricbeat-rpis/96412 "2017-08-11T17:44:31Z")

</div>

Hey everybody, New bee here, I’ve been trying to install the Metricbeat on my Raspberries and trying the different approaches I always have the same “exec format error”. Did some of you installed it on RPIs? And in t…

---

## [How to ingest RSS and physical device data into ElasticSearch?](https://discuss.elastic.co/t/how-to-ingest-rss-and-physical-device-data-into-elasticsearch/69034)

<div class="topic-metadata">

**Author:** [@baden0x1](https://discuss.elastic.co/u/baden0x1)\
**Replies:** 3\
**Last updated:** [December 17, 2016, 8:46pm UTC](https://discuss.elastic.co/t/how-to-ingest-rss-and-physical-device-data-into-elasticsearch/69034 "2016-12-17T20:46:42Z")

</div>

In v1.0 of a platform, we had a Windows service read from SQL Server settings to determine which RSS feeds request data from with filters and on a schedule. The feed locations and filters were all based on specific acco…

---

## [Tomcat catalina.out in json format](https://discuss.elastic.co/t/tomcat-catalina-out-in-json-format/67009)

<div class="topic-metadata">

**Author:** [@nick76](https://discuss.elastic.co/u/nick76)\
**Replies:** 0\
**Last updated:** [November 23, 2016, 4:23pm UTC](https://discuss.elastic.co/t/tomcat-catalina-out-in-json-format/67009 "2016-11-23T16:23:59Z")

</div>

hello all, I'm trying to manage all the different stack trace we have in our tomcat catalina.out log. I've implemented for the tomcat.log file the log4j-\>json formatter (https://github.com/logstash/log4j-jsonevent-layou…

---

## [Can you add custom/dynamic fields to topbeat output?](https://discuss.elastic.co/t/can-you-add-custom-dynamic-fields-to-topbeat-output/50269)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 3\
**Last updated:** [May 20, 2016, 4:28pm UTC](https://discuss.elastic.co/t/can-you-add-custom-dynamic-fields-to-topbeat-output/50269 "2016-05-20T16:28:05Z")

</div>

We are using topbeats across a ton of servers to track cpu, mem, etc, and alerting on those fields using elastalert. It would be really nice if I could also add in some of my own custom fields/checks, for example, if a m…

---

## [High CPU usage for filebeat under 9000+/sec logs](https://discuss.elastic.co/t/high-cpu-usage-for-filebeat-under-9000-sec-logs/45313)

<div class="topic-metadata">

**Author:** [@Chen\_Jian](https://discuss.elastic.co/u/Chen_Jian)\
**Replies:** 3\
**Last updated:** [March 29, 2016, 11:47am UTC](https://discuss.elastic.co/t/high-cpu-usage-for-filebeat-under-9000-sec-logs/45313 "2016-03-29T11:47:56Z")

</div>

I have use filebeats to collect logs and sent to kafka. 1000 /sec, the cpu usage is 4%. 9000+ /sec, the CPU usage reach to 500+%. AWS ec2 with 24 core.

---

## [Can't Get Timestamp Transform To Work For A Basic Vega Scatter Plot](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 7\
**Last updated:** [February 18, 2021, 5:43pm UTC](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254 "2021-02-18T17:43:33Z")

</div>

Here is my Vega code { "$schema": "https://vega.github.io/schema/vega/v4.json", "description": "A basic scatter plot", "padding": 5, "data": { "name": "source", "url": { "%context%": "true", …

---

## [Как можно получать логи с удаленной MySQL в эластик?](https://discuss.elastic.co/t/mysql/212966)

<div class="topic-metadata">

**Author:** [@111249](https://discuss.elastic.co/u/111249)\
**Replies:** 7\
**Last updated:** [January 7, 2020, 7:37pm UTC](https://discuss.elastic.co/t/mysql/212966 "2020-01-07T19:37:38Z")

</div>

Здравствуйте, у меня есть Digital Ocean droplet, на нем эластик стек. Есть еще Digital Ocean MySQL кластер. Как мне в моем дроплете получать логи с БД?

---

## [Upgrade from OpenJDK 8 to OpenJDk 11 for elasticsearch Docker](https://discuss.elastic.co/t/upgrade-from-openjdk-8-to-openjdk-11-for-elasticsearch-docker/200960)

<div class="topic-metadata">

**Author:** [@Konathala\_Naveen](https://discuss.elastic.co/u/Konathala_Naveen)\
**Replies:** 1\
**Last updated:** [October 4, 2019, 3:42am UTC](https://discuss.elastic.co/t/upgrade-from-openjdk-8-to-openjdk-11-for-elasticsearch-docker/200960 "2019-10-04T03:42:19Z")

</div>

We want to upgrade from OpenJDk 8 to OpenJDk 11 for elasticsearch Docker. And we are using the Adopt openJdk 8 . As per this link https://www.elastic.co/guide/en/elasticsearch/reference/current/setup.html . It is rec…

---

## [Import kibana dashboard using curl request](https://discuss.elastic.co/t/import-kibana-dashboard-using-curl-request/83459)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 11:29pm UTC](https://discuss.elastic.co/t/import-kibana-dashboard-using-curl-request/83459 "2017-04-24T23:29:31Z")

</div>

Hello, Is there any way I can import an exported kibana dashboard using curl? Cheers,

---

## [Shield Goes Down Automatically](https://discuss.elastic.co/t/shield-goes-down-automatically/57782)

<div class="topic-metadata">

**Author:** [@Nabeel\_Gujar](https://discuss.elastic.co/u/Nabeel_Gujar)\
**Replies:** 7\
**Last updated:** [August 11, 2016, 1:13pm UTC](https://discuss.elastic.co/t/shield-goes-down-automatically/57782 "2016-08-11T13:13:04Z")

</div>

I have shield and license installed on all my Nodes, 1 client,3 Master and 6 data Nodes but as soon as i start the cluster shield automatically goes down,exposing my cluster publicly. Status of shield changes to unlicens…

---

## [Elasticsearch : Unable to start elasticsearch](https://discuss.elastic.co/t/elasticsearch-unable-to-start-elasticsearch/48446)

<div class="topic-metadata">

**Author:** [@Dilip\_Dwivedi](https://discuss.elastic.co/u/Dilip_Dwivedi)\
**Replies:** 1\
**Last updated:** [April 26, 2016, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-start-elasticsearch/48446 "2016-04-26T15:58:14Z")

</div>

./elasticsearch Exception in thread "main" java.lang.RuntimeException: don't run elasticsearch as root. at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:93) at org.elasticsearch.b…

---

## [CMDB use-case](https://discuss.elastic.co/t/cmdb-use-case/222735)

<div class="topic-metadata">

**Author:** [@robinf36](https://discuss.elastic.co/u/robinf36)\
**Replies:** 0\
**Last updated:** [March 9, 2020, 2:50pm UTC](https://discuss.elastic.co/t/cmdb-use-case/222735 "2020-03-09T14:50:08Z")

</div>

Dear Elastic community, I have a question regarding a specific use-case for which we would like to use Elastic(search). We would like to use Elastic for automating our Configuration Management Database (CMDB). Using t…

---

## [Can I add alerts to a dashboard?](https://discuss.elastic.co/t/can-i-add-alerts-to-a-dashboard/355839)

<div class="topic-metadata">

**Author:** [@vpolius](https://discuss.elastic.co/u/vpolius)\
**Replies:** 4\
**Last updated:** [March 20, 2024, 8:20pm UTC](https://discuss.elastic.co/t/can-i-add-alerts-to-a-dashboard/355839 "2024-03-20T20:20:44Z")

</div>

I am creating a dashboard to show stats on a certain event. I was wondering if it is possible to also show any alerts relating to this event in another panel on the dashboard?

---

## [ECK managed elasticsearch (with TLS enabled) getting flooded with "received plaintext http traffic on an https channel" logs](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117)

<div class="topic-metadata">

**Author:** [@Daithi\_O\_Conchobhair](https://discuss.elastic.co/u/Daithi_O_Conchobhair)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 12:36pm UTC](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117 "2022-12-13T12:36:33Z")

</div>

Hi there, This is such a strange issue I am not sure if it is a defect or something that I am doing wrong. I will say in my defence that I see it when I just use the quickstart guide also. Versions: IBM Kubernetes Se…

---

## [Does logstash include some color stripper plug-ins?](https://discuss.elastic.co/t/does-logstash-include-some-color-stripper-plug-ins/270945)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 4\
**Last updated:** [April 23, 2021, 2:20pm UTC](https://discuss.elastic.co/t/does-logstash-include-some-color-stripper-plug-ins/270945 "2021-04-23T14:20:40Z")

</div>

like Can clean the color character output by docker drive.

---

## [Error while running 6.8 yarn kbn bootstrap](https://discuss.elastic.co/t/error-while-running-6-8-yarn-kbn-bootstrap/189326)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 11:45am UTC](https://discuss.elastic.co/t/error-while-running-6-8-yarn-kbn-bootstrap/189326 "2019-07-09T11:45:05Z")

</div>

Hello I am trying to get a 6.8 development environment up and running in a isolated network. I did a git pull and checkout 6.8 then run yarn kbn bootstrap it downloads all the dependacies fine but when it tries to build…

---

## [Dark theme dashboard problem](https://discuss.elastic.co/t/dark-theme-dashboard-problem/178510)

<div class="topic-metadata">

**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\
**Replies:** 4\
**Last updated:** [April 26, 2019, 7:10pm UTC](https://discuss.elastic.co/t/dark-theme-dashboard-problem/178510 "2019-04-26T19:10:19Z")

</div>

There seems to be an issue with displaying a table in a dashboard while using the dark theme. The dashboard looks fine but when you expand an item in the dashboard to display the table it is in white and the font is in a…

---

## [Upgrade to NEST 5.0.0.0 and Elastic search 5.0.0.0 issue error 400 but with Kibana it is working fine and extracts result](https://discuss.elastic.co/t/upgrade-to-nest-5-0-0-0-and-elastic-search-5-0-0-0-issue-error-400-but-with-kibana-it-is-working-fine-and-extracts-result/110301)

<div class="topic-metadata">

**Author:** [@dibyajyoti\_dev](https://discuss.elastic.co/u/dibyajyoti_dev)\
**Replies:** 4\
**Last updated:** [December 12, 2017, 10:50am UTC](https://discuss.elastic.co/t/upgrade-to-nest-5-0-0-0-and-elastic-search-5-0-0-0-issue-error-400-but-with-kibana-it-is-working-fine-and-extracts-result/110301 "2017-12-12T10:50:58Z")

</div>

Hi , I got upgraded my MVC app to NEST and elastic version 5.0.0.0 and as I see the documentation about size parameter should be greater than 0 i did put Size(10). as below. var response = Elastic .Search(selector =\>…

---

## [ECE on Ubuntu 16.04.2 LTS/Systemd - Prereq](https://discuss.elastic.co/t/ece-on-ubuntu-16-04-2-lts-systemd-prereq/81626)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 4\
**Last updated:** [May 2, 2017, 8:21am UTC](https://discuss.elastic.co/t/ece-on-ubuntu-16-04-2-lts-systemd-prereq/81626 "2017-05-02T08:21:02Z")

</div>

Hi there, can it be that the installation description given here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configure-hosts.html is not totally consistent with/for systemd? Reason: At this point: '9.…

---

## [Installing x-pack on offline machines does not work on logstash](https://discuss.elastic.co/t/installing-x-pack-on-offline-machines-does-not-work-on-logstash/75481)

<div class="topic-metadata">

**Author:** [@das-chick](https://discuss.elastic.co/u/das-chick)\
**Replies:** 4\
**Last updated:** [February 27, 2017, 5:57pm UTC](https://discuss.elastic.co/t/installing-x-pack-on-offline-machines-does-not-work-on-logstash/75481 "2017-02-27T17:57:35Z")

</div>

when i try to install x-pack-5.0.2 on logstash 5.0.2 the manager tries to go to rubygems.org \[root@node logstash\]# ./bin/logstash-plugin install file:///tmp/x-pack-5.0.2.zip Validating file:///tmp/x-pack-5.0.2.zip Unab…

---

## [Subtract variables in Kibana canvas with essql](https://discuss.elastic.co/t/subtract-variables-in-kibana-canvas-with-essql/261803)

<div class="topic-metadata">

**Author:** [@blodstrupmoen](https://discuss.elastic.co/u/blodstrupmoen)\
**Replies:** 2\
**Last updated:** [January 21, 2021, 10:45pm UTC](https://discuss.elastic.co/t/subtract-variables-in-kibana-canvas-with-essql/261803 "2021-01-21T22:45:46Z")

</div>

Hi, Im having a real hard time subtracting one query from another. I cant seem to find any good examples on how to use var\_set and var properly. How can I subtract the value (epochtime) of variable "start" from variabl…

---

## [Logstash error Failed to execute action](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/197234)

<div class="topic-metadata">

**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 2:15am UTC](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/197234 "2019-08-29T02:15:57Z")

</div>

Hello: I get the following error message when starting logstash. My setup is as follows. Logstash isn't communicating to the Elasticsearch servers because it can't create a pipeline or something. Not sure what I setu…

---

## [Issue setting up Filebeat for initial use](https://discuss.elastic.co/t/issue-setting-up-filebeat-for-initial-use/185054)

<div class="topic-metadata">

**Author:** [@RFX](https://discuss.elastic.co/u/RFX)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 4:16pm UTC](https://discuss.elastic.co/t/issue-setting-up-filebeat-for-initial-use/185054 "2019-06-11T16:16:36Z")

</div>

Hi! I am trying to install filebeat to start scanning some logs, and I am trying to get it to work, and I cannot see why it is not. Service starts. It monitors every 30 seconds. The path is correct... but it does not se…

---

## [Combining rows into one in Kibana](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294)

<div class="topic-metadata">

**Author:** [@Ashootosh\_Bhardwaj](https://discuss.elastic.co/u/Ashootosh_Bhardwaj)\
**Replies:** 2\
**Last updated:** [September 22, 2018, 3:31am UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294 "2018-09-22T03:31:21Z")

</div>

Hi, I have different types of data coming from 3 different servers. Server One gives me : ID, StartTime1, EndTime1 Server Two Gives me : ID StartTime2, EndTime2 Server Three gives me: ID, StartTime3, EndTime3 In Elas…

---

## [Logstash TCP SSL Certificate Error](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832)

<div class="topic-metadata">

**Author:** [@jaykumar](https://discuss.elastic.co/u/jaykumar)\
**Replies:** 2\
**Last updated:** [August 25, 2016, 12:11pm UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-certificate-error/58832 "2016-08-25T12:11:23Z")

</div>

I am trying to setup TCP SSL input, below is my configuration: input { tcp { port =\> 9000 host =\> "0.0.0.0" mode =\> "server" ssl\_enable =\> true …

---

## [Parent/child support in Kibana](https://discuss.elastic.co/t/parent-child-support-in-kibana/36911)

<div class="topic-metadata">

**Author:** [@TheShanMan](https://discuss.elastic.co/u/TheShanMan)\
**Replies:** 2\
**Last updated:** [June 17, 2016, 4:47pm UTC](https://discuss.elastic.co/t/parent-child-support-in-kibana/36911 "2016-06-17T16:47:44Z")

</div>

With parent/child supported by logstash now, does that mean we can look forward to support in Kibana very soon? I've got a scenario where the parent has a lot of data and there are commonly thousands of children for a …

---

## [Understanding & Testing Installation & Setup of Topbeats/Beats](https://discuss.elastic.co/t/understanding-testing-installation-setup-of-topbeats-beats/39176)

<div class="topic-metadata">

**Author:** [@adron](https://discuss.elastic.co/u/adron)\
**Replies:** 2\
**Last updated:** [January 14, 2016, 7:42pm UTC](https://discuss.elastic.co/t/understanding-testing-installation-setup-of-topbeats-beats/39176 "2016-01-14T19:42:05Z")

</div>

I've just setup Elastic with Amazon Web Services hosted feature. Once I set that up I setup a Topbeats on a Windows EC2 instance and started the service (after setting the template, etc). After all this I navigate to the…

---

## [No Write Index in Elasticsearch](https://discuss.elastic.co/t/no-write-index-in-elasticsearch/301306)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 1\
**Last updated:** [April 1, 2022, 10:23am UTC](https://discuss.elastic.co/t/no-write-index-in-elasticsearch/301306 "2022-04-01T10:23:55Z")

</div>

Hi, I accidently deleted the active logstash-xxxxx indices. Now my logs cannot index. I check the logstash logs, below is the warning. \[2022-04-01T18:11:02,900\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[bd7d93f8f…

---

## [{"ok":false,"message":"Unknown deployment."}, domain linked to elastic cloud stopped working](https://discuss.elastic.co/t/ok-false-message-unknown-deployment-domain-linked-to-elastic-cloud-stopped-working/178360)

<div class="topic-metadata">

**Author:** [@C\_J](https://discuss.elastic.co/u/C_J)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 11:51am UTC](https://discuss.elastic.co/t/ok-false-message-unknown-deployment-domain-linked-to-elastic-cloud-stopped-working/178360 "2019-04-25T11:51:27Z")

</div>

We had a domain configured for elastic cloud, we could connect with https until it suddenly stopped, all there is, is a message: {"ok":false,"message":"Unknown deployment."} Version 6.5.0. The direct endpoint from elas…

---

## [Directed graph (or) merge vertices with same name](https://discuss.elastic.co/t/directed-graph-or-merge-vertices-with-same-name/104959)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 1\
**Last updated:** [October 24, 2017, 8:13am UTC](https://discuss.elastic.co/t/directed-graph-or-merge-vertices-with-same-name/104959 "2017-10-24T08:13:27Z")

</div>

I am trying to create a flow path for different user activities. For example, users can be redirected from url 'A' to url 'B' or to 'C' etc. I would like to calculate the top redirections. I want to show this using graph…

---

## [Security exception Shield](https://discuss.elastic.co/t/security-exception-shield/69501)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 1\
**Last updated:** [December 19, 2016, 10:57pm UTC](https://discuss.elastic.co/t/security-exception-shield/69501 "2016-12-19T22:57:32Z")

</div>

Hi, I have shield with ES and Kibana enabled. I am trying to analyze twitter data using elasticsearch. My config file looks like the following: Twttter input { twitter { consumer\_key =\> "\<\>" consumer\_secret =\> "\<\>"…

---

## [Domain Name Configuration with Docker on EC2](https://discuss.elastic.co/t/domain-name-configuration-with-docker-on-ec2/313824)

<div class="topic-metadata">

**Author:** [@tchocky](https://discuss.elastic.co/u/tchocky)\
**Replies:** 5\
**Last updated:** [September 8, 2022, 3:02pm UTC](https://discuss.elastic.co/t/domain-name-configuration-with-docker-on-ec2/313824 "2022-09-08T15:02:27Z")

</div>

Hi - I am testing the deployment of an Enterprise Search stack to an EC2 using the docker-compose example outlined here. The stack runs great on the EC2 and I can access everything if I hit the EC2 IP address directly. T…

---

## [Failed to start Filebeat MISP treats](https://discuss.elastic.co/t/failed-to-start-filebeat-misp-treats/303056)

<div class="topic-metadata">

**Author:** [@Tetsuho](https://discuss.elastic.co/u/Tetsuho)\
**Replies:** 5\
**Last updated:** [May 1, 2022, 1:54pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-misp-treats/303056 "2022-05-01T13:54:50Z")

</div>

Hi Everyone im glad to be part of this comunity. Im here beacause a got a error message when I try to start the filebeat service after do some modifications related to a enable de MISP threat intel Logs. Here is the fil…

[Previous page](https://discuss.elastic.co/top.md?page=1120&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1122&per_page=50&period=all)
