# Top

**URL:** https://discuss.elastic.co/top.md?page=1122&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1123

---

## [Unable to authenticate user \[logstash\_internal\] for REST request \[/bulk\]](https://discuss.elastic.co/t/unable-to-authenticate-user-logstash-internal-for-rest-request-bulk/329473)

<div class="topic-metadata">

**Author:** [@oscardoudou](https://discuss.elastic.co/u/oscardoudou)\
**Replies:** 3\
**Last updated:** [April 6, 2023, 12:59pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-logstash-internal-for-rest-request-bulk/329473 "2023-04-06T12:59:33Z")

</div>

logstash 7.17.9 \[2023-04-05T22:50:02,837\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Encountered a retryable error (will retry with exponential backoff) {:code=\>401, :url=\>"http://server:9200/\_bulk", :content\_length=\>…

---

## [Kibana not connecting points in line](https://discuss.elastic.co/t/kibana-not-connecting-points-in-line/321821)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 8:41am UTC](https://discuss.elastic.co/t/kibana-not-connecting-points-in-line/321821 "2022-12-23T08:41:32Z")

</div>

Hi! I'm running on Kibana 7.16.1. I'm trying to display a simple Lens Line chart. My dataset is a set of documents like: { timestamp: \<ISO time\>, violations: 123, file: "path/to/foo.cpp", owner: "Foo", } My go…

---

## [Java Application Crashed with RejectedExecutionException](https://discuss.elastic.co/t/java-application-crashed-with-rejectedexecutionexception/295016)

<div class="topic-metadata">

**Author:** [@Manoj\_Soni](https://discuss.elastic.co/u/Manoj_Soni)\
**Replies:** 3\
**Last updated:** [February 1, 2022, 12:21pm UTC](https://discuss.elastic.co/t/java-application-crashed-with-rejectedexecutionexception/295016 "2022-02-01T12:21:09Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Kibana login portal issue](https://discuss.elastic.co/t/kibana-login-portal-issue/244318)

<div class="topic-metadata">

**Author:** [@ronics](https://discuss.elastic.co/u/ronics)\
**Replies:** 8\
**Last updated:** [August 13, 2020, 6:21am UTC](https://discuss.elastic.co/t/kibana-login-portal-issue/244318 "2020-08-13T06:21:20Z")

</div>

I have recently upgraded elk stack from 7.8.1 Elasticsearch is currently in 7.8.1 version I have tried to restart kibana. systemctl restart kibana It shows it is active but when I try to browse from web, the login pa…

---

## [Kibana sessionTimeout doesn't take effect](https://discuss.elastic.co/t/kibana-sessiontimeout-doesnt-take-effect/168995)

<div class="topic-metadata">

**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 8:14pm UTC](https://discuss.elastic.co/t/kibana-sessiontimeout-doesnt-take-effect/168995 "2019-02-19T20:14:53Z")

</div>

Hi, We are using Kibana 6.5.4 with X-Pack enabled (w/ trial license). I am trying to change the default session duration according to the documentation but seems like the parameter doesn't get applied and the session s…

---

## [How to install multiple instances of Kibana](https://discuss.elastic.co/t/how-to-install-multiple-instances-of-kibana/115188)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 3\
**Last updated:** [January 12, 2018, 3:42am UTC](https://discuss.elastic.co/t/how-to-install-multiple-instances-of-kibana/115188 "2018-01-12T03:42:09Z")

</div>

Hi there, How can I install multiple instances of Kibana on one AWS ec2 instance running ubuntu 14.04? My goal is to have a kibana instances for each client with its own index-pattern. I'm assuming that each kibana inst…

---

## [How to use pre\_tags and post\_tags in Elasticsearch?](https://discuss.elastic.co/t/how-to-use-pre-tags-and-post-tags-in-elasticsearch/88565)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 0\
**Last updated:** [June 7, 2017, 11:29am UTC](https://discuss.elastic.co/t/how-to-use-pre-tags-and-post-tags-in-elasticsearch/88565 "2017-06-07T11:29:21Z")

</div>

Hi, I want to highlight a field in elasticsearch i used the Documentation and used below query to highlight "name" POST /bank/\_search { "query" : { "match": { "country": "uk" } }, "highlight" : {…

---

## [Elasticsearch 5.0.1 fails to be set as a cluster on AWS](https://discuss.elastic.co/t/elasticsearch-5-0-1-fails-to-be-set-as-a-cluster-on-aws/66547)

<div class="topic-metadata">

**Author:** [@sylrouss](https://discuss.elastic.co/u/sylrouss)\
**Replies:** 3\
**Last updated:** [November 18, 2016, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-1-fails-to-be-set-as-a-cluster-on-aws/66547 "2016-11-18T16:06:55Z")

</div>

Hi guys, With the following elasticsearch.yaml: cluster.name: test node.name: ${HOSTNAME} network.host: \_eth0:ipv4\_ discovery.zen.ping.unicast.hosts: \["public\_ip\_1", "public\_ip\_2"\] discovery.zen.minimum\_mast…

---

## [Kibana search case sensitive](https://discuss.elastic.co/t/kibana-search-case-sensitive/280536)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 8:39pm UTC](https://discuss.elastic.co/t/kibana-search-case-sensitive/280536 "2021-08-10T20:39:56Z")

</div>

Few hostnames are in capital and few other are small. How do I do a case insensitive search in kibana?

---

## [Why \_msearch request isn't cancellable(=false)?](https://discuss.elastic.co/t/why-msearch-request-isnt-cancellable-false/235893)

<div class="topic-metadata">

**Author:** [@rahul\_yadav1](https://discuss.elastic.co/u/rahul_yadav1)\
**Replies:** 7\
**Last updated:** [June 6, 2020, 8:18am UTC](https://discuss.elastic.co/t/why-msearch-request-isnt-cancellable-false/235893 "2020-06-06T08:18:27Z")

</div>

In ES-7.4.2, search request is cancellable(=true) but \_msearch request isn't. What's the idea behind it ??

---

## [How to delete index having special characters in name?](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060)

<div class="topic-metadata">

**Author:** [@Mahebub\_Sayyed](https://discuss.elastic.co/u/Mahebub_Sayyed)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 5:25am UTC](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060 "2020-06-02T05:25:23Z")

</div>

Hi, By mistake I have created some indices with special characters in name like "log-%{\[message\]\[meta\]\[organization\]}-%{\[message\]\[proxy\]\[name\]}-2020.02.27". I tried to delete this index but getting index\_not\_found\_exce…

---

## [How to get multi valued field values in painless](https://discuss.elastic.co/t/how-to-get-multi-valued-field-values-in-painless/147554)

<div class="topic-metadata">

**Author:** [@chandrapraba](https://discuss.elastic.co/u/chandrapraba)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 5:23pm UTC](https://discuss.elastic.co/t/how-to-get-multi-valued-field-values-in-painless/147554 "2018-09-06T17:23:57Z")

</div>

Hi, I'm new to Elastic Search and Painless. I have a field in my index which has multiple values as shown below. FieldName Language Value "Computer Science" In painless, When i try to get the value o…

---

## [java.net.ConnectException: Connection timed out: no further information](https://discuss.elastic.co/t/java-net-connectexception-connection-timed-out-no-further-information/253513)

<div class="topic-metadata">

**Author:** [@carolcoral](https://discuss.elastic.co/u/carolcoral)\
**Replies:** 0\
**Last updated:** [October 28, 2020, 3:22am UTC](https://discuss.elastic.co/t/java-net-connectexception-connection-timed-out-no-further-information/253513 "2020-10-28T03:22:50Z")

</div>

Java version:1.8 Es version:7.9.2 Es java maven: \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>elasticsearch-rest-high-level-client\</artifactId\> \<version\>7.9.3\</version\> \</dependency\>…

---

## [Unable to read files in persistent queue for logstash](https://discuss.elastic.co/t/unable-to-read-files-in-persistent-queue-for-logstash/221935)

<div class="topic-metadata">

**Author:** [@raghuveera](https://discuss.elastic.co/u/raghuveera)\
**Replies:** 3\
**Last updated:** [March 4, 2020, 3:36am UTC](https://discuss.elastic.co/t/unable-to-read-files-in-persistent-queue-for-logstash/221935 "2020-03-04T03:36:11Z")

</div>

I have recently enabled persistent queue configuration for logstash. I do see some files in location /var/lib/logstash/queue/\<pipeline\_id\>/, named as checkpoint.head and page.50. But, when i try to cat and read the file…

---

## [Best way to handle different date formats?](https://discuss.elastic.co/t/best-way-to-handle-different-date-formats/159642)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 4:28am UTC](https://discuss.elastic.co/t/best-way-to-handle-different-date-formats/159642 "2018-12-06T04:28:21Z")

</div>

Hi, I have a a bunch of .csv files but the providing party has been nice enough to use a different date format on just about every file... Apart from using lots of if statements, is there a more practical way to have t…

---

## [How to display a table to multiple count metric in the same table?](https://discuss.elastic.co/t/how-to-display-a-table-to-multiple-count-metric-in-the-same-table/123783)

<div class="topic-metadata">

**Author:** [@proximator](https://discuss.elastic.co/u/proximator)\
**Replies:** 2\
**Last updated:** [March 15, 2018, 5:23pm UTC](https://discuss.elastic.co/t/how-to-display-a-table-to-multiple-count-metric-in-the-same-table/123783 "2018-03-15T17:23:54Z")

</div>

Hi, I need to show a summary of some errors with their count in Kibana. Error Count Error1 123 Error2 123 I have already search query of error1 and error2, I can display them as metric count widget but I a…

---

## [Logstash CLOSE\_WAIT and Filbe beat I/0 timeout](https://discuss.elastic.co/t/logstash-close-wait-and-filbe-beat-i-0-timeout/118650)

<div class="topic-metadata">

**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\
**Replies:** 2\
**Last updated:** [February 6, 2018, 10:30pm UTC](https://discuss.elastic.co/t/logstash-close-wait-and-filbe-beat-i-0-timeout/118650 "2018-02-06T22:30:11Z")

</div>

In Filebeat logs I am seeing Filebeat I/O timeout with logstash tcp connection going infinite CLOSE\_WAIT. until logstash stops processing. Dont see anything in logstashlogs. Logstash and filebeat both are 5.4 version.…

---

## [Grok Filter not Matching multiple filters](https://discuss.elastic.co/t/grok-filter-not-matching-multiple-filters/90721)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 2\
**Last updated:** [June 26, 2017, 11:35am UTC](https://discuss.elastic.co/t/grok-filter-not-matching-multiple-filters/90721 "2017-06-26T11:35:54Z")

</div>

Dear Team I have following grok filter which matches 2 different fields from CSV file . However I have noticed that Logstash ignores the second line ( excuses) when sending the traffic to Elasticsearch . In case where…

---

## [Logstash and ip reputation](https://discuss.elastic.co/t/logstash-and-ip-reputation/24033)

<div class="topic-metadata">

**Author:** [@damstux](https://discuss.elastic.co/u/damstux)\
**Replies:** 2\
**Last updated:** [June 22, 2015, 11:08am UTC](https://discuss.elastic.co/t/logstash-and-ip-reputation/24033 "2015-06-22T11:08:49Z")

</div>

Hello, I have an ELK for my Apache Logs, everything OK. I would like to query a reputation IP database to detect tor, vpn, open-proxy .... traffic on my website. have you got any idea ? I havec contacted http://w…

---

## [Logstash-keystore.bat not using bundled JDK (Windows)](https://discuss.elastic.co/t/logstash-keystore-bat-not-using-bundled-jdk-windows/288719)

<div class="topic-metadata">

**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\
**Replies:** 4\
**Last updated:** [November 10, 2021, 6:05pm UTC](https://discuss.elastic.co/t/logstash-keystore-bat-not-using-bundled-jdk-windows/288719 "2021-11-10T18:05:44Z")

</div>

I was trying to setup a keystore and when running .\\logstash-keystore.bat I get a message saying "Using bundled JDK: "" then it says, No 'java.exe' executable found on PATH. I'm running version 7.15.1. The crazy thing is…

---

## [Elasticsearch custom ILM](https://discuss.elastic.co/t/elasticsearch-custom-ilm/195659)

<div class="topic-metadata">

**Author:** [@darrylrmiles](https://discuss.elastic.co/u/darrylrmiles)\
**Replies:** 4\
**Last updated:** [August 18, 2019, 11:59pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-ilm/195659 "2019-08-18T23:59:45Z")

</div>

Hello, I am attempting to setup custom indexes for winlogbeat via logstash using ILM settings in the elasticsearch output. I would like to use the default template for winlogbeat (winlogbeat-7.3.0) but have different c…

---

## [Grok filter for any symbol include string break](https://discuss.elastic.co/t/grok-filter-for-any-symbol-include-string-break/143491)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 4\
**Last updated:** [August 8, 2018, 12:06pm UTC](https://discuss.elastic.co/t/grok-filter-for-any-symbol-include-string-break/143491 "2018-08-08T12:06:20Z")

</div>

Hello. I'm trying to parse event message to fields. There is no problem with simple fields, but i'm unable to highlight biggest field that looks like this: Details: {"Realm\_Size":68,"Realm":"https://uisnotification-sb.…

---

## [\[Kibana\] Authenticate via Radius](https://discuss.elastic.co/t/kibana-authenticate-via-radius/256952)

<div class="topic-metadata">

**Author:** [@Ayakashi97](https://discuss.elastic.co/u/Ayakashi97)\
**Replies:** 3\
**Last updated:** [November 28, 2020, 1:15pm UTC](https://discuss.elastic.co/t/kibana-authenticate-via-radius/256952 "2020-11-28T13:15:35Z")

</div>

Hi there, is it possible to authenticate on kibana through radius authentication? If possible, how? My Version of Kibana is 7.9. Best Regards Ayakashi

---

## [Not able to configure elastic search on centos](https://discuss.elastic.co/t/not-able-to-configure-elastic-search-on-centos/119493)

<div class="topic-metadata">

**Author:** [@maheshatlas77](https://discuss.elastic.co/u/maheshatlas77)\
**Replies:** 3\
**Last updated:** [March 5, 2018, 10:57pm UTC](https://discuss.elastic.co/t/not-able-to-configure-elastic-search-on-centos/119493 "2018-03-05T22:57:49Z")

</div>

I have installed ES on centos when i start service it shows below error. \[2018-02-12T14:43:00,386\]\[WARN \]\[o.e.b.Natives \] unable to load JNA native support library, native methods will be disabled. java.lang…

---

## [Pinned Filters Not Working In Visualizations](https://discuss.elastic.co/t/pinned-filters-not-working-in-visualizations/100477)

<div class="topic-metadata">

**Author:** [@vincentpaca](https://discuss.elastic.co/u/vincentpaca)\
**Replies:** 3\
**Last updated:** [September 15, 2017, 11:57am UTC](https://discuss.elastic.co/t/pinned-filters-not-working-in-visualizations/100477 "2017-09-15T11:57:05Z")

</div>

I created a filter and pinned it but it's not taking effect in my visualization. My filter looks like this: { "query": { "bool": { "should": \[ { "exists": { "field": "field1" …

---

## [How to index \<term, weight\> pairs as \<term, payload\> pairs? And how to use the payload for scoring?](https://discuss.elastic.co/t/how-to-index-term-weight-pairs-as-term-payload-pairs-and-how-to-use-the-payload-for-scoring/22561)

<div class="topic-metadata">

**Author:** [@Devaraja\_Swami](https://discuss.elastic.co/u/Devaraja_Swami)\
**Replies:** 3\
**Last updated:** [May 23, 2016, 6:16pm UTC](https://discuss.elastic.co/t/how-to-index-term-weight-pairs-as-term-payload-pairs-and-how-to-use-the-payload-for-scoring/22561 "2016-05-23T18:16:19Z")

</div>

In my application, I have a map of pairs that I would like to index into the same field, say "f", where the term should be indexed "as is", ie, un-analyzed, and the weight should be indexed as the payload for that…

---

## [Once a product has reached End of Life (EOL), what can I expect from technical support? Will you still help me?](https://discuss.elastic.co/t/once-a-product-has-reached-end-of-life-eol-what-can-i-expect-from-technical-support-will-you-still-help-me/64)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [April 30, 2015, 4:43pm UTC](https://discuss.elastic.co/t/once-a-product-has-reached-end-of-life-eol-what-can-i-expect-from-technical-support-will-you-still-help-me/64 "2015-04-30T16:43:51Z")

</div>

Our End of Life policy is defined in our Support Services Policy, and explains that every release of Elastic's products (Elasticsearch, Logstash, Kibana, Marvel, Shield, etc.) has an 18 month life span. At the end of tha…

---

## [Remove/Hide metrics column from DataTable visualization](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403)

<div class="topic-metadata">

**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\
**Replies:** 1\
**Last updated:** [March 5, 2021, 6:44pm UTC](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403 "2021-03-05T18:44:34Z")

</div>

Hi, I need some help in structuring Datatable visualization so that I can download the CSV without Metrics column. If I try to create a DataTable visualization, it adds Mandatorily "Metrics" column. Business need is to a…

---

## [Elasticsearch 6.3.0 doesn't retry on index replica bulk write failure](https://discuss.elastic.co/t/elasticsearch-6-3-0-doesnt-retry-on-index-replica-bulk-write-failure/174305)

<div class="topic-metadata">

**Author:** [@andrejbl](https://discuss.elastic.co/u/andrejbl)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 11:13am UTC](https://discuss.elastic.co/t/elasticsearch-6-3-0-doesnt-retry-on-index-replica-bulk-write-failure/174305 "2019-03-28T11:13:28Z")

</div>

(original discussion on github - https://github.com/elastic/elasticsearch/issues/39259) We are running a number of large-scale Elasticsearch clusters (40+ nodes, TBs of data, ingestion and search rates in 100-1000s per …

---

## [MetricBeat NFS](https://discuss.elastic.co/t/metricbeat-nfs/144622)

<div class="topic-metadata">

**Author:** [@LeeKyungMin](https://discuss.elastic.co/u/LeeKyungMin)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 7:46am UTC](https://discuss.elastic.co/t/metricbeat-nfs/144622 "2018-08-16T07:46:47Z")

</div>

I want to check information about mounted file system on my server. I’ve got a MetricBeat installed host server accessing NAS directory through NFS protocol. How can I view informations about this mounted directory (di…

---

## [Can I use a Range Query in Scripted Field](https://discuss.elastic.co/t/can-i-use-a-range-query-in-scripted-field/106047)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 1\
**Last updated:** [November 3, 2017, 3:05pm UTC](https://discuss.elastic.co/t/can-i-use-a-range-query-in-scripted-field/106047 "2017-11-03T15:05:17Z")

</div>

I am have been playing around the range field types, and in this index I have approx 2500 documents, each defining a different time\_range. Example document: { "time\_frame": { "gte": 1509355523000,…

---

## [Java client node initializing error (Jar Hell) when trying to start with license JAR](https://discuss.elastic.co/t/java-client-node-initializing-error-jar-hell-when-trying-to-start-with-license-jar/40734)

<div class="topic-metadata">

**Author:** [@andreynikk](https://discuss.elastic.co/u/andreynikk)\
**Replies:** 1\
**Last updated:** [March 18, 2016, 12:42am UTC](https://discuss.elastic.co/t/java-client-node-initializing-error-jar-hell-when-trying-to-start-with-license-jar/40734 "2016-03-18T00:42:31Z")

</div>

Hi, after an uprade to ES 2.1, marvel requires the license plugin and all the client nodes that connect to it requires the license plugin as well. i'm having trouble to start my client node using java API. i placed th…

---

## [Embedding widgets without the logo of Kibana and the whole menus](https://discuss.elastic.co/t/embedding-widgets-without-the-logo-of-kibana-and-the-whole-menus/24815)

<div class="topic-metadata">

**Author:** [@ustrauss](https://discuss.elastic.co/u/ustrauss)\
**Replies:** 1\
**Last updated:** [July 2, 2015, 9:58pm UTC](https://discuss.elastic.co/t/embedding-widgets-without-the-logo-of-kibana-and-the-whole-menus/24815 "2015-07-02T21:58:59Z")

</div>

Hi, I'd like to embed Kibana widgets in my back office without the loading image of Kibana and without the top bar which has a menu and the Kibana logo. Is that possible? are there parameters in the iframe i can configur…

---

## [Filebeat fails to parse GuardDuty json logs](https://discuss.elastic.co/t/filebeat-fails-to-parse-guardduty-json-logs/248696)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 5\
**Last updated:** [September 16, 2020, 10:25am UTC](https://discuss.elastic.co/t/filebeat-fails-to-parse-guardduty-json-logs/248696 "2020-09-16T10:25:25Z")

</div>

So I am trying to ingest Guarduty logs from S3 to elasticsearch using filebeats s3 input. The logs are getting indexed but they are not getting parsed, everything goes under message field and all the logs are in json for…

---

## [Go agent does not seem to send any trace to APM](https://discuss.elastic.co/t/go-agent-does-not-seem-to-send-any-trace-to-apm/168610)

<div class="topic-metadata">

**Author:** [@cabrinoob](https://discuss.elastic.co/u/cabrinoob)\
**Replies:** 5\
**Last updated:** [February 18, 2019, 8:39am UTC](https://discuss.elastic.co/t/go-agent-does-not-seem-to-send-any-trace-to-apm/168610 "2019-02-18T08:39:46Z")

</div>

Hi, I'am using elastic.co SAAS and trying to test the APM instrumenting a sample golang app. (it's actually working good with nodeJS app) In this sample I'am using the lastest version of the gorilla/mux router (1.7.0). …

---

## [Export dashboard to Kibana fail](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141)

<div class="topic-metadata">

**Author:** [@mcoa](https://discuss.elastic.co/u/mcoa)\
**Replies:** 5\
**Last updated:** [October 8, 2018, 9:33pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141 "2018-10-08T21:33:49Z")

</div>

Hello, I'm try export dashboard to Kibana from filebeat but some dashboard give error (field not found). my client i've: filebeat.yml filebeat.inputs: - type: log enabled: true paths: -/var/log/secure filebe…

---

## [Target my ES cluster with ~40 FileBeat instances](https://discuss.elastic.co/t/target-my-es-cluster-with-40-filebeat-instances/56824)

<div class="topic-metadata">

**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\
**Replies:** 5\
**Last updated:** [August 2, 2016, 6:02pm UTC](https://discuss.elastic.co/t/target-my-es-cluster-with-40-filebeat-instances/56824 "2016-08-02T18:02:20Z")

</div>

Hello, Last year I found that Logstash doesn't perform load balancing between inputs and 'prefer' inputs that doesn't have pushback mechanism or that pushback is not relevant for them (like syslog input) I'm thinking a…

---

## [Performance hit when sorting on \_id](https://discuss.elastic.co/t/performance-hit-when-sorting-on--id/3634)

<div class="topic-metadata">

**Author:** [@zohar](https://discuss.elastic.co/u/zohar)\
**Replies:** 5\
**Last updated:** [December 7, 2010, 10:03pm UTC](https://discuss.elastic.co/t/performance-hit-when-sorting-on--id/3634 "2010-12-07T22:03:01Z")

</div>

Hi We are seeing a massive performance hit ( query goes from 200ms to 1min) for a largish index if we sort on \_id. version is 0.11 we are upgrading as I type. We switch the default sort to something else but was wo…

---

## [APM-Server unable to connect to elasticsearch](https://discuss.elastic.co/t/apm-server-unable-to-connect-to-elasticsearch/280123)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 2\
**Last updated:** [August 1, 2021, 11:13am UTC](https://discuss.elastic.co/t/apm-server-unable-to-connect-to-elasticsearch/280123 "2021-08-01T11:13:19Z")

</div>

Kibana version: 7.13.4 Elasticsearch version: 7.13.4 APM Server version: 7.13.4 APM Agent language and version: NA Browser version: NA Original install method (e.g. download page, yum, deb, from source, etc.) a…

---

## [Embed dashboard iframe into publicly available website](https://discuss.elastic.co/t/embed-dashboard-iframe-into-publicly-available-website/271006)

<div class="topic-metadata">

**Author:** [@tampe125](https://discuss.elastic.co/u/tampe125)\
**Replies:** 2\
**Last updated:** [April 23, 2021, 9:34am UTC](https://discuss.elastic.co/t/embed-dashboard-iframe-into-publicly-available-website/271006 "2021-04-23T09:34:54Z")

</div>

I'm using Elastic Cloud to log my application data. However, I'd wish to display some generic, aggregate data on company website. The iframe mode is very useful, however it requires a valid elastic search user to acces…

---

## [KIbana Basic Auth Login](https://discuss.elastic.co/t/kibana-basic-auth-login/135894)

<div class="topic-metadata">

**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\
**Replies:** 2\
**Last updated:** [June 15, 2018, 5:32am UTC](https://discuss.elastic.co/t/kibana-basic-auth-login/135894 "2018-06-15T05:32:30Z")

</div>

I'm looking to use the free version of Kibana, elastic, logstash stack. Will be using it to search for logs and eventually produce visualizations. I would like the Kibana screen to have some basic authentication. The …

---

## [Logstash + xpack Authentication failure 401](https://discuss.elastic.co/t/logstash-xpack-authentication-failure-401/117605)

<div class="topic-metadata">

**Author:** [@A.Klos](https://discuss.elastic.co/u/A.Klos)\
**Replies:** 2\
**Last updated:** [January 30, 2018, 11:46am UTC](https://discuss.elastic.co/t/logstash-xpack-authentication-failure-401/117605 "2018-01-30T11:46:48Z")

</div>

Hi, I installed x-pack on my 5.6.6 ELK Stack and after logstash has following errors in log: \[2018-01-30T12:26:43,208\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but g…

---

## [Kibana 7.11.2 fails to start post upgrade](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 6\
**Last updated:** [March 16, 2021, 5:55pm UTC](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926 "2021-03-16T17:55:11Z")

</div>

I just upgraded my stack to 7.11.2 and kibana is not starting. My elasticsearch status is green. I have rebooted the host and the problem persists. Mar 11 09:59:01 hostname systemd\[1\]: kibana.service: State 'stop-sigter…

---

## [Stuck at Default Creating Index Pattern (ES 6.4.2)](https://discuss.elastic.co/t/stuck-at-default-creating-index-pattern-es-6-4-2/181170)

<div class="topic-metadata">

**Author:** [@BinaryIsPrimary](https://discuss.elastic.co/u/BinaryIsPrimary)\
**Replies:** 6\
**Last updated:** [May 17, 2019, 10:21am UTC](https://discuss.elastic.co/t/stuck-at-default-creating-index-pattern-es-6-4-2/181170 "2019-05-17T10:21:40Z")

</div>

The ES Cluster consists of 4 nodes (3 master/data, 1 data node) running ES 6.4.2. Disk loads are at 34, 65, 28 and 29 percent. Kibana runs on one of the master nodes. I access Kibana via ssh. When creating an index pat…

---

## [Parsing different dates from XML & Logs in one Date filed](https://discuss.elastic.co/t/parsing-different-dates-from-xml-logs-in-one-date-filed/139205)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 6\
**Last updated:** [July 11, 2018, 7:54am UTC](https://discuss.elastic.co/t/parsing-different-dates-from-xml-logs-in-one-date-filed/139205 "2018-07-11T07:54:00Z")

</div>

Hi all, I have different types of timestamps coming into my logstash input from different logfiles xml and log type: My Configuration for filebeat looks like below: filebeat.inputs: - type: log paths: - /home/De…

---

## [Logstash Issue while runnig](https://discuss.elastic.co/t/logstash-issue-while-runnig/118198)

<div class="topic-metadata">

**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\
**Replies:** 6\
**Last updated:** [February 6, 2018, 8:36am UTC](https://discuss.elastic.co/t/logstash-issue-while-runnig/118198 "2018-02-06T08:36:24Z")

</div>

NameError: cannot link Java class org.logstash.RubyUtil org/logstash/RubyUtil : Unsupported major.minor version 52.0 method\_missing at org/jruby/javasupport/JavaPackage.java:259 \<main\> at C:/logstash/logstash-cor…

---

## [Elasticsearch 5.0 - Ingest Node and Pipeline](https://discuss.elastic.co/t/elasticsearch-5-0-ingest-node-and-pipeline/55992)

<div class="topic-metadata">

**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\
**Replies:** 6\
**Last updated:** [July 21, 2016, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-ingest-node-and-pipeline/55992 "2016-07-21T13:51:13Z")

</div>

Hi, I would like to know when is it scheduled to release the Compare Operator, as described in the following link: Thanks, Ori

---

## [Can not loading adding integrations page. ELK v8.14.0 on Ubuntu](https://discuss.elastic.co/t/can-not-loading-adding-integrations-page-elk-v8-14-0-on-ubuntu/361474)

<div class="topic-metadata">

**Author:** [@ahn](https://discuss.elastic.co/u/ahn)\
**Replies:** 8\
**Last updated:** [June 20, 2024, 7:50am UTC](https://discuss.elastic.co/t/can-not-loading-adding-integrations-page-elk-v8-14-0-on-ubuntu/361474 "2024-06-20T07:50:45Z")

</div>

Hi hero, Please help a beginner. Test environment OS - Ubuntu 22.04.3 LTS ELK version - elasticsearch-8.14.0-linux-x86\_64.tar kibana-8.14.0-linux-x86\_64.tar I went through two situations. When I installed ELK at …

---

## [Auditbeat collects old data on Linux system](https://discuss.elastic.co/t/auditbeat-collects-old-data-on-linux-system/296814)

<div class="topic-metadata">

**Author:** [@Bo\_Pham\_Nguyen](https://discuss.elastic.co/u/Bo_Pham_Nguyen)\
**Replies:** 0\
**Last updated:** [February 10, 2022, 8:29am UTC](https://discuss.elastic.co/t/auditbeat-collects-old-data-on-linux-system/296814 "2022-02-10T08:29:12Z")

</div>

Hi team, we are facing an issue when installing Auditbeat on a new machine that collects historical data 2020 2021. Any way to fix this? This is the configuration for Auditbeat auditbeat.modules: - module: system d…

---

## [Metricbeat failed reading counters: failed collecting counter values: No data to return](https://discuss.elastic.co/t/metricbeat-failed-reading-counters-failed-collecting-counter-values-no-data-to-return/283082)

<div class="topic-metadata">

**Author:** [@Woolis\_Xiibil\_Peek](https://discuss.elastic.co/u/Woolis_Xiibil_Peek)\
**Replies:** 0\
**Last updated:** [September 1, 2021, 4:49pm UTC](https://discuss.elastic.co/t/metricbeat-failed-reading-counters-failed-collecting-counter-values-no-data-to-return/283082 "2021-09-01T16:49:15Z")

</div>

Hi. I'm tyring to read the perfmon of a Windows Server 2016. I'm using the Windows module, but I'm getting this message in Kibana. "failed reading counters: failed collecting counter values: No data to return" I have n…

[Previous page](https://discuss.elastic.co/top.md?page=1121&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1123&per_page=50&period=all)
