# Top **URL:** https://discuss.elastic.co/top.md?page=1125&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1126 --- ## [How to create an index-pattern for a specific Space using the API?](https://discuss.elastic.co/t/how-to-create-an-index-pattern-for-a-specific-space-using-the-api/166341)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 2\ **Last updated:** [January 31, 2019, 3:40pm UTC](https://discuss.elastic.co/t/how-to-create-an-index-pattern-for-a-specific-space-using-the-api/166341 "2019-01-31T15:40:12Z")
Hi, Is it possible to use the Saved Objects API to create a new index-pattern for a specific Space? It's not explained in the above documentation and i couldn't make it work after trying various syntax. Kibana version… --- ## [ElasticSearch URL request, can't access to an object and his variable](https://discuss.elastic.co/t/elasticsearch-url-request-cant-access-to-an-object-and-his-variable/121211)
**Author:** [@DiSiZ](https://discuss.elastic.co/u/DiSiZ)\ **Replies:** 2\ **Last updated:** [February 23, 2018, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-url-request-cant-access-to-an-object-and-his-variable/121211 "2018-02-23T13:28:11Z")
Here's my problem, I have got a JSON flow coming on ElasticSearch which has this kind of form : \[Json\_Example\] And I'd like to do a request like this for example: /.../\_search?q=lat: \["48" TO "49"\] This work with eve… --- ## [Elasticsearch search APIのsizeデフォルト値について](https://discuss.elastic.co/t/elasticsearch-search-api-size/92824)
**Author:** [@tsukapah](https://discuss.elastic.co/u/tsukapah)\ **Replies:** 2\ **Last updated:** [July 13, 2017, 4:36am UTC](https://discuss.elastic.co/t/elasticsearch-search-api-size/92824 "2017-07-13T04:36:49Z")
お世話になっております。 こちらのドキュメントにserach APIのデフォルトサイズは10と記載されていますが、 Elasticsearchの起動パラメータやelasticsearch.ymlなどでデフォルト値を変更することは可能なものでしょうか？ --- ## [Packetbeat: Something wired with "WARN Time in pcap went backwards"](https://discuss.elastic.co/t/packetbeat-something-wired-with-warn-time-in-pcap-went-backwards/72142)
**Author:** [@moooofly](https://discuss.elastic.co/u/moooofly)\ **Replies:** 2\ **Last updated:** [January 20, 2017, 4:21am UTC](https://discuss.elastic.co/t/packetbeat-something-wired-with-warn-time-in-pcap-went-backwards/72142 "2017-01-20T04:21:33Z")
when analyzing pcap files, I always find outputs as follow: ➜ packetbeat git:(master) ✗ ./packetbeat -c ./packetbeat.yml -e -I redis\_xxxx.pcap 2\>&1 |grep "pcap went backwards" ... 2017/01/11 06:57:47.091832 sniffer.g… --- ## [Consulta con logstash](https://discuss.elastic.co/t/consulta-con-logstash/41891)
**Author:** [@hugogif](https://discuss.elastic.co/u/hugogif)\ **Replies:** 2\ **Last updated:** [May 26, 2016, 6:16pm UTC](https://discuss.elastic.co/t/consulta-con-logstash/41891 "2016-05-26T18:16:13Z")
Estimados, saludos. soy nuevo en elastic y estoy migrando de splunk, por lo que hago pruebas de inputs actualmente. El problema es el siguiente, tengo un documento jboss que esta desestructurado, un evento tiene de 5 … --- ## [Nested aggregation in Kibana Dashboard](https://discuss.elastic.co/t/nested-aggregation-in-kibana-dashboard/307871)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [June 22, 2022, 12:30pm UTC](https://discuss.elastic.co/t/nested-aggregation-in-kibana-dashboard/307871 "2022-06-22T12:30:04Z")
Hi all, Let's say there is Fruits database Based on terms aggregation we have count of Oranges - 5 & Pears -3 & Apples - 3. Now 2 fruit categories (Pears & Apples ) have 3 as count. So here I have nested aggregation o… --- ## [Filebeat Harvester not starting](https://discuss.elastic.co/t/filebeat-harvester-not-starting/302891)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/filebeat-harvester-not-starting/302891 "2022-04-27T13:05:36Z")
Hello, We have installed Filebeat on docker container connecting to logstah on linux server. It was working fine till a week back. AWS machine got restarted and post that, logstash is not harvesting new files. Harvester… --- ## [Target specific pod in kubernetes filbeat](https://discuss.elastic.co/t/target-specific-pod-in-kubernetes-filbeat/234337)
**Author:** [@recordable542](https://discuss.elastic.co/u/recordable542)\ **Replies:** 3\ **Last updated:** [June 1, 2020, 5:03pm UTC](https://discuss.elastic.co/t/target-specific-pod-in-kubernetes-filbeat/234337 "2020-06-01T17:03:27Z")
I'm using this yaml to deploy filebeat to my GKE cluster: it works like charm, but I want to push only container named "sy-prod" so, I changed the configMap like below. filebeat.autodiscover: providers: - ty… --- ## [ERROR: Unable to retrieve license information from license server](https://discuss.elastic.co/t/error-unable-to-retrieve-license-information-from-license-server/198514)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [September 7, 2019, 3:27pm UTC](https://discuss.elastic.co/t/error-unable-to-retrieve-license-information-from-license-server/198514 "2019-09-07T15:27:44Z")
Hello World! I'm Running Logstash on Docker | Logstash Reference \[6.8\] | Elastic, yet running into following error: logstash | \[2019-09-07T15:15:06,686\]\[INFO \]\[logstash.configmanagement.bootstrapcheck\] Using Elastic… --- ## [Canvas Time sets](https://discuss.elastic.co/t/canvas-time-sets/187789)
**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\ **Replies:** 3\ **Last updated:** [July 24, 2019, 9:12am UTC](https://discuss.elastic.co/t/canvas-time-sets/187789 "2019-07-24T09:12:53Z")
Hello i have a question to canvas timezone first. in table visual - ISOTime is UTC+09:00 so it is 2019-06-27T15:59:11 but in chart that Time is UTC so it is 2019-06-27T06:59:11 how can i set that time to UTC+09:00 … --- ## [cloud.elastic.coの1つのKibanaを複数の会社で共有利用](https://discuss.elastic.co/t/cloud-elastic-co-1-kibana/142461)
**Author:** [@18cc8c0b141acca115f5](https://discuss.elastic.co/u/18cc8c0b141acca115f5)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 2:04am UTC](https://discuss.elastic.co/t/cloud-elastic-co-1-kibana/142461 "2018-08-09T02:04:35Z")
cloud.elastic.coの有償契約をしてKibanaを使用させて頂いていますが、1つのKibanaを複数の会社で利用したいと思っております。 弊社はシステム開発会社で、複数のクライアントのシステムを保守運用しています。 その複数のシステムのログデータを、1つのElasticseachに収集して、そのデータを各企業単位で、Kibanaで可視化したいと思っています。 ロールを使えばできるかと思い、management/secu… --- ## [Logstash to exit or stop once the data indexing is completed](https://discuss.elastic.co/t/logstash-to-exit-or-stop-once-the-data-indexing-is-completed/101755)
**Author:** [@surajbs](https://discuss.elastic.co/u/surajbs)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 10:58pm UTC](https://discuss.elastic.co/t/logstash-to-exit-or-stop-once-the-data-indexing-is-completed/101755 "2017-09-26T22:58:22Z")
Hi, I am trying to get a solution for logstash to stop after the data indexing gets completed. Or, logstash should stop reading the file once the job is done (command prompt should get stop and exit). Please share you … --- ## [Duplicates in Webhook](https://discuss.elastic.co/t/duplicates-in-webhook/57283)
**Author:** [@denton64](https://discuss.elastic.co/u/denton64)\ **Replies:** 3\ **Last updated:** [August 5, 2016, 3:53pm UTC](https://discuss.elastic.co/t/duplicates-in-webhook/57283 "2016-08-05T15:53:45Z")
Hey all, I am configuring Watcher right now and am running into an issue. I have it all set up to forward messages to HipChat. It's working but every 5 minutes, it's sending 3 duplicate messages from old events. What … --- ## [How to create new visualisation component from fields dissected from log in logstash?](https://discuss.elastic.co/t/how-to-create-new-visualisation-component-from-fields-dissected-from-log-in-logstash/280381)
**Author:** [@ckong](https://discuss.elastic.co/u/ckong)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 10:32am UTC](https://discuss.elastic.co/t/how-to-create-new-visualisation-component-from-fields-dissected-from-log-in-logstash/280381 "2021-08-04T10:32:26Z")
Hi, I am currently into Elasticsearch. I created a filter inside logstash.conf to extract several fields from log message. File path: /usr/share/logstash/pipeline/logstash.conf: Configuration: input { beats { … --- ## [Forbidden page in Elastic Cloud in Azure](https://discuss.elastic.co/t/forbidden-page-in-elastic-cloud-in-azure/309985)
**Author:** [@arks](https://discuss.elastic.co/u/arks)\ **Replies:** 2\ **Last updated:** [July 19, 2022, 9:50am UTC](https://discuss.elastic.co/t/forbidden-page-in-elastic-cloud-in-azure/309985 "2022-07-19T09:50:24Z")
Hello there, First of all let me start by saying that I feel silly posting a problem like this, because it feels like something particularly easy to solve, but somehow we struggle to find a way of doing it. We have a E… --- ## [Unable to Migrate Custom Index to Cloud Through Logstash](https://discuss.elastic.co/t/unable-to-migrate-custom-index-to-cloud-through-logstash/297419)
**Author:** [@daniel.talbot](https://discuss.elastic.co/u/daniel.talbot)\ **Replies:** 4\ **Last updated:** [February 17, 2022, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-migrate-custom-index-to-cloud-through-logstash/297419 "2022-02-17T18:08:24Z")
Trying to use a basic configuration to write a custom index to a cloud instance but upon doing so I keep getting an error addressing Ruby. Posting the config and results of starting with systemctl betlow: Config: inpu… --- ## [High CPU usage in BEATS](https://discuss.elastic.co/t/high-cpu-usage-in-beats/205239)
**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 8:09am UTC](https://discuss.elastic.co/t/high-cpu-usage-in-beats/205239 "2019-11-07T08:09:15Z")
I am using Filebeat to ship logs from the server to Elastic. We use ingestNode pipelines to parse the files using Grok processor. Please find my filebeat.yml file. I see the memory consumed by a single process is around… --- ## [How to extract first line of message from Winlogbeat](https://discuss.elastic.co/t/how-to-extract-first-line-of-message-from-winlogbeat/169466)
**Author:** [@Mark\_Tellier](https://discuss.elastic.co/u/Mark_Tellier)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 9:28pm UTC](https://discuss.elastic.co/t/how-to-extract-first-line-of-message-from-winlogbeat/169466 "2019-02-21T21:28:49Z")
Winlogbeat is sending Windows Event logs to logstash and I would like to create a new field by extracting the first line of the message field. "message": "Special privileges assigned to new logon.\\n\\nSubject:\\n\\tSecurit… --- ## [Logstash filter for Jboss Fuse 6.2.1](https://discuss.elastic.co/t/logstash-filter-for-jboss-fuse-6-2-1/124116)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 3:06pm UTC](https://discuss.elastic.co/t/logstash-filter-for-jboss-fuse-6-2-1/124116 "2018-03-16T15:06:39Z")
I've tried to create a filter for Logstash that can consume my Jboss Fuse log file. My filter is working, and I get data into Kibana. But I was wondering if is possible to split the message into: -Date -Message Type … --- ## [Reporting plugin for kibana taking wrong screenshots with unkown characters](https://discuss.elastic.co/t/reporting-plugin-for-kibana-taking-wrong-screenshots-with-unkown-characters/69583)
**Author:** [@John\_Diaz](https://discuss.elastic.co/u/John_Diaz)\ **Replies:** 4\ **Last updated:** [January 12, 2017, 8:08pm UTC](https://discuss.elastic.co/t/reporting-plugin-for-kibana-taking-wrong-screenshots-with-unkown-characters/69583 "2017-01-12T20:08:00Z")
Hi, reporting is generating pdf reports with unknown characters, when is a list of documents in a table, graphs are showing ok. --- ## [KV filter killing logstash performance](https://discuss.elastic.co/t/kv-filter-killing-logstash-performance/47817)
**Author:** [@bblank](https://discuss.elastic.co/u/bblank)\ **Replies:** 4\ **Last updated:** [April 20, 2016, 4:45pm UTC](https://discuss.elastic.co/t/kv-filter-killing-logstash-performance/47817 "2016-04-20T16:45:05Z")
We are using the kv filter in our logstash.conf file and it is causing performance issues. Changing workers, batch size and heap size don't appear to really make a difference. Our hardware is NOT under powered. I ne… --- ## [java.lang.ClassCastException: org.elasticsearch.search.aggregations.bucket.terms.ParsedStringTerms cannot be cast to org.elasticsearch.search.aggregations.bucket.terms.StringTerms](https://discuss.elastic.co/t/java-lang-classcastexception-org-elasticsearch-search-aggregations-bucket-terms-parsedstringterms-cannot-be-cast-to-org-elasticsearch-search-aggregations-bucket-terms-stringterms/247615)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 1\ **Last updated:** [September 8, 2020, 5:12am UTC](https://discuss.elastic.co/t/java-lang-classcastexception-org-elasticsearch-search-aggregations-bucket-terms-parsedstringterms-cannot-be-cast-to-org-elasticsearch-search-aggregations-bucket-terms-stringterms/247615 "2020-09-08T05:12:30Z")
I am trying to get aggregations using GROUP By of an attributename and getting the below error. StringTerms strAggs = response.getAggregations().get(TermsAggregation.AGGREGATION\_PREFIX + attributeName); java.lang.Class… --- ## [How to create custom fields filein filebeat to preprocess before transporting to elasticsearch](https://discuss.elastic.co/t/how-to-create-custom-fields-filein-filebeat-to-preprocess-before-transporting-to-elasticsearch/118094)
**Author:** [@akshaynshah](https://discuss.elastic.co/u/akshaynshah)\ **Replies:** 1\ **Last updated:** [February 2, 2018, 12:27pm UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-filein-filebeat-to-preprocess-before-transporting-to-elasticsearch/118094 "2018-02-02T12:27:07Z")
My Log Format: Time Hostname Severity Program Message My log line example: 2018-02-01T21:1147+05:30 freebsd notice sshd Exiting on signal 15 I want filebeat to transfer these logs to elastic search (WITHOUT L… --- ## [Connection Refused for Metricbeat \<-\> ES on Docker](https://discuss.elastic.co/t/connection-refused-for-metricbeat-es-on-docker/115596)
**Author:** [@laubnyc](https://discuss.elastic.co/u/laubnyc)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 3:58pm UTC](https://discuss.elastic.co/t/connection-refused-for-metricbeat-es-on-docker/115596 "2018-01-16T15:58:25Z")
I am trying to use metricbeat and ES in a docker environment. Both are running, but not communicating. Here are the docker logs for the docker containing the metricbeat image: 2018/01/15 19:45:11.260059 beat.go:426: INF… --- ## [How to give more preference to first word of the stored index](https://discuss.elastic.co/t/how-to-give-more-preference-to-first-word-of-the-stored-index/59783)
**Author:** [@rahul16](https://discuss.elastic.co/u/rahul16)\ **Replies:** 1\ **Last updated:** [September 5, 2016, 8:48am UTC](https://discuss.elastic.co/t/how-to-give-more-preference-to-first-word-of-the-stored-index/59783 "2016-09-05T08:48:29Z")
I have an index of college with fields college\_name,short\_form,city\_name,state\_name. suppose i search for the string 'college of' and want to get : 'college of enginners' above 'indian college of law' and 'punjab college… --- ## [Delete by query](https://discuss.elastic.co/t/delete-by-query/287322)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 6\ **Last updated:** [October 25, 2021, 7:39am UTC](https://discuss.elastic.co/t/delete-by-query/287322 "2021-10-25T07:39:54Z")
Hi all, and sorry for my poor english. I need to build a delete by query request. My porpose is to delete 'activity' elements in 'activities' array where 'creationDate' is less than some date. My index mapping is { … --- ## ["Common Language Runtime detected an invalid program." using NEST](https://discuss.elastic.co/t/common-language-runtime-detected-an-invalid-program-using-nest/224509)
**Author:** [@nestrq](https://discuss.elastic.co/u/nestrq)\ **Replies:** 6\ **Last updated:** [March 26, 2020, 6:06pm UTC](https://discuss.elastic.co/t/common-language-runtime-detected-an-invalid-program-using-nest/224509 "2020-03-26T18:06:40Z")
I have the exact same issue as the person in this locked thread: https://discuss.elastic.co/t/nest-6-6-getting-invalidprogramexception-sometimes/218058?u=nestrq The only difference is that I am using NEST 6.3.1 with .NE… --- ## [Cannot Delete Space?](https://discuss.elastic.co/t/cannot-delete-space/157411)
**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\ **Replies:** 6\ **Last updated:** [November 20, 2018, 3:27pm UTC](https://discuss.elastic.co/t/cannot-delete-space/157411 "2018-11-20T15:27:54Z")
I cannot delete any space. There are two notifications that pop up: "Error Deleting Space:" "Deleted "Name\_of\_Space" space." Yet the space still remains. I looked for the error in the kibana.log did not find anything… --- ## [Comparison with AIOps tools/products](https://discuss.elastic.co/t/comparison-with-aiops-tools-products/156277)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 27, 2018, 1:47pm UTC](https://discuss.elastic.co/t/comparison-with-aiops-tools-products/156277 "2018-11-27T13:47:16Z")
Would like to know is there any comparative study done with AIOps tool https://www.loomsystems.com/ which leverages internally the products from Elastic Stack. How elastic stack is rated with this AIOps tool as X-Pack a… --- ## [Shield 2.4.0 roles.yml - Missing Roles?](https://discuss.elastic.co/t/shield-2-4-0-roles-yml-missing-roles/63285)
**Author:** [@mick66](https://discuss.elastic.co/u/mick66)\ **Replies:** 2\ **Last updated:** [October 18, 2016, 12:57pm UTC](https://discuss.elastic.co/t/shield-2-4-0-roles-yml-missing-roles/63285 "2016-10-18T12:57:20Z")
I have just upgraded my cluster to 2.4.0 including Shield and the installation created a new copy of the roles.yml file that looks different to the old one in both format and content. Here is the compete file with out … --- ## [Client Node cannot be discovered by Master](https://discuss.elastic.co/t/client-node-cannot-be-discovered-by-master/49947)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 2\ **Last updated:** [May 13, 2016, 12:09am UTC](https://discuss.elastic.co/t/client-node-cannot-be-discovered-by-master/49947 "2016-05-13T00:09:17Z")
We set up a 3 nodes elasticsearch cluster, 1 Master (data) node, 1 data node, and 1 client node. Client node elasticsearch.yml file cluster.name: elkstats node.name: clientnode node.master: false node.data: false … --- ## [Which datatype to use for field @version?](https://discuss.elastic.co/t/which-datatype-to-use-for-field-version/45320)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 2\ **Last updated:** [March 26, 2016, 5:51am UTC](https://discuss.elastic.co/t/which-datatype-to-use-for-field-version/45320 "2016-03-26T05:51:23Z")
Hi, using the usual™ ELK-Stack we see a field conflict in Kibana for the field "@version". Since this blocks our migration to Elasticsearch 2.x, I'd like to create a field mapping for "@version", but with which datatyp… --- ## [Create and Deploy custom ML models for NLP](https://discuss.elastic.co/t/create-and-deploy-custom-ml-models-for-nlp/326777)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 3\ **Last updated:** [March 2, 2023, 12:57pm UTC](https://discuss.elastic.co/t/create-and-deploy-custom-ml-models-for-nlp/326777 "2023-03-02T12:57:22Z")
Hello, I've read the documentation on ML and deploying ML models Overview | Machine Learning in the Elastic Stack \[8.6\] | Elastic. Does anyone have examples of how to do the following: Create a custom ML model that f… --- ## [Compare two indexes based on more than two fields](https://discuss.elastic.co/t/compare-two-indexes-based-on-more-than-two-fields/325464)
**Author:** [@Prashant\_Pandey1](https://discuss.elastic.co/u/Prashant_Pandey1)\ **Replies:** 3\ **Last updated:** [February 27, 2023, 11:56am UTC](https://discuss.elastic.co/t/compare-two-indexes-based-on-more-than-two-fields/325464 "2023-02-27T11:56:24Z")
I have two Indexes. I want to get the list of matched and unmatched data based on field(s). I had tried to use Preview transform Api , but it's showing data only up to 100 records. Please let me know ,is there any oth… --- ## [Unable to view Reporting section in Kibana Privileges](https://discuss.elastic.co/t/unable-to-view-reporting-section-in-kibana-privileges/287932)
**Author:** [@nate\_d](https://discuss.elastic.co/u/nate_d)\ **Replies:** 3\ **Last updated:** [October 29, 2021, 4:56pm UTC](https://discuss.elastic.co/t/unable-to-view-reporting-section-in-kibana-privileges/287932 "2021-10-29T16:56:58Z")
I'm having an issue where I want to provide reporting access to a role. I followed the steps given here - Configure reporting in Kibana | Kibana Guide \[7.15\] | Elastic - which says to disable reporting roles But then I… --- ## [SAML response state does not have corresponding request id](https://discuss.elastic.co/t/saml-response-state-does-not-have-corresponding-request-id/233372)
**Author:** [@Jesse\_Bye](https://discuss.elastic.co/u/Jesse_Bye)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 4:03pm UTC](https://discuss.elastic.co/t/saml-response-state-does-not-have-corresponding-request-id/233372 "2020-05-20T16:03:58Z")
We have SAML auth configured for 3 of our ES clusters. When SSO'ing to Kibana, we sometimes get a 401 "access token expired" error. Retrying the SSO will give us a different 401, "SAML response state does not have corres… --- ## [Where does Kibana get the timepicker's "now" value?](https://discuss.elastic.co/t/where-does-kibana-get-the-timepickers-now-value/176270)
**Author:** [@hansell.baran](https://discuss.elastic.co/u/hansell.baran)\ **Replies:** 3\ **Last updated:** [April 19, 2019, 10:22am UTC](https://discuss.elastic.co/t/where-does-kibana-get-the-timepickers-now-value/176270 "2019-04-19T10:22:58Z")
Hello! I noticed that when I use Kibana's "Quick" timepickers, the most recent data shown is 2 hours behind my browser's time. This only happens with the "Last..." options. If I use "Today", all the data is shown. It i… --- ## [LIst of URLS in heartbeat.yml doesn't show in Heartbeat dashboard](https://discuss.elastic.co/t/list-of-urls-in-heartbeat-yml-doesnt-show-in-heartbeat-dashboard/167320)
**Author:** [@Iraida07](https://discuss.elastic.co/u/Iraida07)\ **Replies:** 8\ **Last updated:** [March 7, 2019, 5:24pm UTC](https://discuss.elastic.co/t/list-of-urls-in-heartbeat-yml-doesnt-show-in-heartbeat-dashboard/167320 "2019-03-07T17:24:10Z")
Hi guys. I recently configure 18 Urls to query in the heartbeat.yml file, heartbeat worked fine but since a few days when I open the heartbeat dashboard, I just have five urls listed. I checked the configuration file (h… --- ## [Understanding dis\_max query](https://discuss.elastic.co/t/understanding-dis-max-query/148690)
**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\ **Replies:** 0\ **Last updated:** [September 15, 2018, 3:23am UTC](https://discuss.elastic.co/t/understanding-dis-max-query/148690 "2018-09-15T03:23:38Z")
I am trying to understand how dis\_max query works by trying the documentation example: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-dis-max-query.html Specifically, I want to reproduce the d… --- ## [Question concerning multisearch request size and thread pool](https://discuss.elastic.co/t/question-concerning-multisearch-request-size-and-thread-pool/25734)
**Author:** [@phl](https://discuss.elastic.co/u/phl)\ **Replies:** 3\ **Last updated:** [July 18, 2015, 7:52am UTC](https://discuss.elastic.co/t/question-concerning-multisearch-request-size-and-thread-pool/25734 "2015-07-18T07:52:25Z")
Hello, First post here, sorry if this question is out of place ! We are using Multisearch API to try and limit the number of request we send to our Elasticsearch cluster. The gist of the process is as follows : r… --- ## [Unable to bulk\_create index-pattern](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:48pm UTC](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754 "2022-07-15T20:48:10Z")
Hello World! I'm trying to follow these: Grant privileges and roles needed for setup | Auditbeat Reference \[7.17\] | Elastic Grant privileges and roles needed for setup | Filebeat Reference \[7.17\] | Elastic Grant privi… --- ## [Kibana getting 'permission denied' in windows server](https://discuss.elastic.co/t/kibana-getting-permission-denied-in-windows-server/232879)
**Author:** [@Carlos\_Bodini](https://discuss.elastic.co/u/Carlos_Bodini)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 4:53am UTC](https://discuss.elastic.co/t/kibana-getting-permission-denied-in-windows-server/232879 "2020-05-26T04:53:52Z")
hello team! I'm building a elastic cluster and i'm having a trouble to bring kibana online, it looks like it cannot connect to the elasticsearch service, follow the logs: {"type":"log","@timestamp":"2020-05-15T19:21:06… --- ## [APM Java agent - Implement client-side load balancing](https://discuss.elastic.co/t/apm-java-agent-implement-client-side-load-balancing/196961)
**Author:** [@rijash](https://discuss.elastic.co/u/rijash)\ **Replies:** 7\ **Last updated:** [August 29, 2019, 8:44am UTC](https://discuss.elastic.co/t/apm-java-agent-implement-client-side-load-balancing/196961 "2019-08-29T08:44:23Z")
Kibana version: 7.3.0 Elasticsearch version: 7.3.0 APM Server version: 7.3.0 APM Agent language and version: 1.9.0 Hi, I am trying to implement client side load-balance for multiple apm servers. I am using the below… --- ## [Interval Setting in http\_poller is invalid](https://discuss.elastic.co/t/interval-setting-in-http-poller-is-invalid/167553)
**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\ **Replies:** 7\ **Last updated:** [February 8, 2019, 8:50pm UTC](https://discuss.elastic.co/t/interval-setting-in-http-poller-is-invalid/167553 "2019-02-08T20:50:25Z")
I am trying to use http\_poller plugin to get data at 30 sec internval however its giving me an erorr ""The setting interval in plugin http\_poller is obsolete and is no longer available. The interval options is obsolete."… --- ## [Pie Chart colors](https://discuss.elastic.co/t/pie-chart-colors/141041)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 1\ **Last updated:** [July 23, 2018, 8:31am UTC](https://discuss.elastic.co/t/pie-chart-colors/141041 "2018-07-23T08:31:38Z")
Hi How can I make the pie chart colors in one color range. for example, I want the color change from light blue to the darkest blue currently the pie parts are changed with different color randomly as below: --- ## [What is wrong in my grok filter work for logstash?](https://discuss.elastic.co/t/what-is-wrong-in-my-grok-filter-work-for-logstash/63583)
**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\ **Replies:** 7\ **Last updated:** [October 26, 2016, 7:26am UTC](https://discuss.elastic.co/t/what-is-wrong-in-my-grok-filter-work-for-logstash/63583 "2016-10-26T07:26:46Z")
I would like to create a grok filter in Logstash to set as field, a concrete part of a syslog message TTN-GW string should be that field, the sort of message that is being sent to Logstash is as follows ( it comes from a… --- ## [Add Another Reputation Link into Kibana SIEM](https://discuss.elastic.co/t/add-another-reputation-link-into-kibana-siem/205072)
**Author:** [@joshuasmith](https://discuss.elastic.co/u/joshuasmith)\ **Replies:** 1\ **Last updated:** [November 13, 2019, 10:42am UTC](https://discuss.elastic.co/t/add-another-reputation-link-into-kibana-siem/205072 "2019-11-13T10:42:56Z")
Hello, We are starting to use the SIEM app some more and wanted to add a few additional links for Threat Intel and context. What is the process for getting another customizable link (similar to the virustotal or talosi… --- ## [Remove "This message was sent by Kibana."](https://discuss.elastic.co/t/remove-this-message-was-sent-by-kibana/271752)
**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\ **Replies:** 4\ **Last updated:** [May 4, 2021, 11:47am UTC](https://discuss.elastic.co/t/remove-this-message-was-sent-by-kibana/271752 "2021-05-04T11:47:04Z")
Hi all, I am using Kibana email action to send emails from my outlook server. All the emails have a footer, " -- This message was sent by Kibana" Can this be removed? --- ## [Trying to export a Dashboard - 404 Not found](https://discuss.elastic.co/t/trying-to-export-a-dashboard-404-not-found/166053)
**Author:** [@Jacko-ski](https://discuss.elastic.co/u/Jacko-ski)\ **Replies:** 4\ **Last updated:** [January 28, 2019, 11:19pm UTC](https://discuss.elastic.co/t/trying-to-export-a-dashboard-404-not-found/166053 "2019-01-28T23:19:05Z")
We have Kibana 6.3.1 I want to export an existing Dashboard from this instance of Kibana so I can import it into another environment. Here is my export URL: https://kibana.sideA.com/api/kibana/dashboards/export?dash… --- ## [Access to elasticsearch server from logstash into private subnet on AWS](https://discuss.elastic.co/t/access-to-elasticsearch-server-from-logstash-into-private-subnet-on-aws/129748)
**Author:** [@Hermann](https://discuss.elastic.co/u/Hermann)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 1:12am UTC](https://discuss.elastic.co/t/access-to-elasticsearch-server-from-logstash-into-private-subnet-on-aws/129748 "2018-04-27T01:12:27Z")
Hi, can someone help me to resolve this problem? I'm new in ELK stack and I deployed it on AWS. Logstash and elasticseach are hosted on different EC2 instances into a private VPC subnet. These EC2 instances are hosted b… [Previous page](https://discuss.elastic.co/top.md?page=1124&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1126&per_page=50&period=all)