# Top **URL:** https://discuss.elastic.co/top.md?page=1134&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1135 --- ## [Error displaying fleet agents -"Error fetching agents Cannot read properties of undefined (reading 'map')"](https://discuss.elastic.co/t/error-displaying-fleet-agents-error-fetching-agents-cannot-read-properties-of-undefined-reading-map/339840)
**Author:** [@M\_S](https://discuss.elastic.co/u/M_S)\ **Replies:** 3\ **Last updated:** [August 2, 2023, 8:09pm UTC](https://discuss.elastic.co/t/error-displaying-fleet-agents-error-fetching-agents-cannot-read-properties-of-undefined-reading-map/339840 "2023-08-02T20:09:56Z")
One fine morning, fleet section just decided not to show agents enrolled in a particular policy. I suspected two issues, @timestamp was not present in some of the fleet related indices, I added mapping for the same, seco… --- ## [Using Elasticsearch as a Data Lake and forwarding logs to SIEM based on the use cases implemented](https://discuss.elastic.co/t/using-elasticsearch-as-a-data-lake-and-forwarding-logs-to-siem-based-on-the-use-cases-implemented/318558)
**Author:** [@bit1290](https://discuss.elastic.co/u/bit1290)\ **Replies:** 3\ **Last updated:** [November 13, 2022, 11:31pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-data-lake-and-forwarding-logs-to-siem-based-on-the-use-cases-implemented/318558 "2022-11-13T23:31:52Z")
Hello, I really need your help and vision on a situation I'm passing through. Here is the description: We have a SIEM (QRadar) structure, with Event Collectors that receive logs from various data sources from many … --- ## [Logstash ingestion slows rapidly after 1 hour](https://discuss.elastic.co/t/logstash-ingestion-slows-rapidly-after-1-hour/230741)
**Author:** [@davignbd](https://discuss.elastic.co/u/davignbd)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 12:58am UTC](https://discuss.elastic.co/t/logstash-ingestion-slows-rapidly-after-1-hour/230741 "2020-05-05T00:58:07Z")
I have a logstash 6.7 on kubernetes which ingests .gz log files from s3 input at a rate of about 20k/minute for roughly 1 hour, and then it suddenly drops to 1400/minute. It will remain like that until I kill the pod. Wh… --- ## [Curator snapshot list is not accessible after deletion of some files accidentally](https://discuss.elastic.co/t/curator-snapshot-list-is-not-accessible-after-deletion-of-some-files-accidentally/191371)
**Author:** [@amruta.mohite](https://discuss.elastic.co/u/amruta.mohite)\ **Replies:** 3\ **Last updated:** [July 23, 2019, 6:55am UTC](https://discuss.elastic.co/t/curator-snapshot-list-is-not-accessible-after-deletion-of-some-files-accidentally/191371 "2019-07-23T06:55:05Z")
I am currently facing same issue in my ELK cluster. The cause which made this happen is I accidentally deleted some files(applied glacier life-cycle policy to delete data after some interval) from S3 bucket and then m… --- ## [How to read elasticsearch data into custom visualisation?](https://discuss.elastic.co/t/how-to-read-elasticsearch-data-into-custom-visualisation/175033)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 3:56pm UTC](https://discuss.elastic.co/t/how-to-read-elasticsearch-data-into-custom-visualisation/175033 "2019-04-17T15:56:33Z")
I am trying to build a custom visualisation in Kibana. I have used to plugin generator to generate a base plugin, but I have struggled to find up to date examples on how to create a custom visualisation using it. I have … --- ## [Scan/Scroll performance degrading logarithmically](https://discuss.elastic.co/t/scan-scroll-performance-degrading-logarithmically/49234)
**Author:** [@jordansparked](https://discuss.elastic.co/u/jordansparked)\ **Replies:** 3\ **Last updated:** [May 9, 2016, 9:28pm UTC](https://discuss.elastic.co/t/scan-scroll-performance-degrading-logarithmically/49234 "2016-05-09T21:28:51Z")
Hi, I'm using ES 1.7.3 and am attempting to re-index using scan/scroll. I'm noticing that scan is very fast at the beginning, but performance slowly degrades the further into the results I get. For example, the first b… --- ## [SAN index replication from PROD to DR(disaster recovery) server](https://discuss.elastic.co/t/san-index-replication-from-prod-to-dr-disaster-recovery-server/47894)
**Author:** [@satyapinku](https://discuss.elastic.co/u/satyapinku)\ **Replies:** 3\ **Last updated:** [April 21, 2016, 2:55pm UTC](https://discuss.elastic.co/t/san-index-replication-from-prod-to-dr-disaster-recovery-server/47894 "2016-04-21T14:55:38Z")
Hi, I am facing few issues in replicating my SAN index to DR server from my PROD index. For NAS index its perfectly fine we are able to replicate but for SAN we are not. We have used the OS rsync method to copy index f… --- ## [Logstash shipper reports hostname as localhost](https://discuss.elastic.co/t/logstash-shipper-reports-hostname-as-localhost/38648)
**Author:** [@mburlington](https://discuss.elastic.co/u/mburlington)\ **Replies:** 3\ **Last updated:** [January 8, 2016, 6:06pm UTC](https://discuss.elastic.co/t/logstash-shipper-reports-hostname-as-localhost/38648 "2016-01-08T18:06:15Z")
Hi, I have a set of configuration files I'm using to monitor Tomcat. I use these on various servers but when I recently deployed these to a new server I noticed that the "host" field appears as "localhost" when I view… --- ## [Error with packetbeat after shield installation?](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 3\ **Last updated:** [July 6, 2015, 9:07pm UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924 "2015-07-06T21:07:56Z")
while im starting the packetbeat service as /etc/init.d/packetbeat start Its giving me error as: output.go:64: ERR Fail to set \_ttl mapping: ES returned an error: 401 Unauthorized publish.go:232: ERR Fail to initiali… --- ## [Delete Indices action remove Index patterns from Kibana dashboard](https://discuss.elastic.co/t/delete-indices-action-remove-index-patterns-from-kibana-dashboard/197907)
**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 3:47pm UTC](https://discuss.elastic.co/t/delete-indices-action-remove-index-patterns-from-kibana-dashboard/197907 "2019-09-04T15:47:30Z")
Hi, I delete my old indices from Elasticsearch and I noticed that this action also delete (remove) the index pattern that I had created on Kibana dashboard. Can anyone explain me how those actions connected and why tha… --- ## [Elastic search HTTP URI query length](https://discuss.elastic.co/t/elastic-search-http-uri-query-length/165370)
**Author:** [@srirama](https://discuss.elastic.co/u/srirama)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 12:54pm UTC](https://discuss.elastic.co/t/elastic-search-http-uri-query-length/165370 "2019-02-01T12:54:16Z")
Hi All: What is the URI length limitation for HTTP requests sent to ELASTIC HTTP interface (for passing multiple index names, along with cluster names) ? How to configure this parameter? As per the link, https://discus… --- ## [How to know when Logstash finished parsing?](https://discuss.elastic.co/t/how-to-know-when-logstash-finished-parsing/39470)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 1\ **Last updated:** [January 18, 2016, 6:22pm UTC](https://discuss.elastic.co/t/how-to-know-when-logstash-finished-parsing/39470 "2016-01-18T18:22:25Z")
Hi, I am currently working in a program where I need to know whether log stash completely loaded the data or not. For this, I am using an idea in which I want to know the idea of the index before and after some minutes… --- ## [Search filters in Kibana dashboard](https://discuss.elastic.co/t/search-filters-in-kibana-dashboard/38672)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 1\ **Last updated:** [January 7, 2016, 9:33pm UTC](https://discuss.elastic.co/t/search-filters-in-kibana-dashboard/38672 "2016-01-07T21:33:30Z")
Wondering whether there is any functionality to add entire "saved search" filters to a dashboard. So just as we can add a filter to the dashboard by clicking on a row in a datatable visualization. For instance if we only… --- ## [Date filter not working with json log](https://discuss.elastic.co/t/date-filter-not-working-with-json-log/159899)
**Author:** [@se681268](https://discuss.elastic.co/u/se681268)\ **Replies:** 2\ **Last updated:** [December 7, 2018, 11:12am UTC](https://discuss.elastic.co/t/date-filter-not-working-with-json-log/159899 "2018-12-07T11:12:16Z")
Hello, I'm trying to format date by using filter, and use it as "Time Filter field name" to create index pattern in Kibana. I've already have a "date" field in a json-format log, like this: {"project":"sth","date":"20… --- ## [Issue in Type\_Casting:(long to float and float to long)](https://discuss.elastic.co/t/issue-in-type-casting-long-to-float-and-float-to-long/139530)
**Author:** [@Akhilesh-Tiwari](https://discuss.elastic.co/u/Akhilesh-Tiwari)\ **Replies:** 2\ **Last updated:** [July 13, 2018, 6:03am UTC](https://discuss.elastic.co/t/issue-in-type-casting-long-to-float-and-float-to-long/139530 "2018-07-13T06:03:29Z")
Hi @logstash.chirag @Logstash-lover @logstash\_user @logstash\_oz @logstash @logstashisawesome we have to create index runtime using logstash. we have a table in database,In that we have columns that contains some decim… --- ## [Cannot handle type while writing dataframe to ES](https://discuss.elastic.co/t/cannot-handle-type-while-writing-dataframe-to-es/99635)
**Author:** [@chaitujil](https://discuss.elastic.co/u/chaitujil)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 12:22am UTC](https://discuss.elastic.co/t/cannot-handle-type-while-writing-dataframe-to-es/99635 "2017-09-13T00:22:08Z")
Hi, I am seeing this exception while writing an RDD to ES Caused by: org.elasticsearch.hadoop.serialization.EsHadoopSerializationException: Cannot handle type \[class scala.Enumeration$Val\] … My object has Enumeration … --- ## [Marvel 2.1 ES 2.1 - node UIDs duplication on online/offline states](https://discuss.elastic.co/t/marvel-2-1-es-2-1-node-uids-duplication-on-online-offline-states/36008)
**Author:** [@Marcin\_Kubica](https://discuss.elastic.co/u/Marcin_Kubica)\ **Replies:** 2\ **Last updated:** [December 2, 2015, 1:47pm UTC](https://discuss.elastic.co/t/marvel-2-1-es-2-1-node-uids-duplication-on-online-offline-states/36008 "2015-12-02T13:47:36Z")
Hi, Just doing simple tests with two data nodes and one non-data node. Deploying kibana 4.3 and ES 2.1 from scratch. Initially marvel is showing 3 nodes, all is green and peachy. If I stop and a node, Marvel shows it's… --- ## [NoSuchFieldError\[INSTANCE\] while elasticsearch backup](https://discuss.elastic.co/t/nosuchfielderror-instance-while-elasticsearch-backup/28060)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 2\ **Last updated:** [August 26, 2015, 5:10am UTC](https://discuss.elastic.co/t/nosuchfielderror-instance-while-elasticsearch-backup/28060 "2015-08-26T05:10:51Z")
Hi All, I am using elasticsearch version 1.5 with cloud-aws plugin 2.5.1 which is the compatible plugin for the same. But when i try to backup the complete cluster. I somehow get errors backing up. Below are the snapsh… --- ## [Is it possible skip columns from csv file while uploading data into elasticsearch?](https://discuss.elastic.co/t/is-it-possible-skip-columns-from-csv-file-while-uploading-data-into-elasticsearch/208901)
**Author:** [@sanket07](https://discuss.elastic.co/u/sanket07)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 5:53pm UTC](https://discuss.elastic.co/t/is-it-possible-skip-columns-from-csv-file-while-uploading-data-into-elasticsearch/208901 "2019-11-21T17:53:49Z")
I have around 50 columns in csv but only 10 are useful for me. Is there any way that when I upload the data, only data for that 10 columns should be inserted in elasticsearch and only those 10 fileds should appear in kib… --- ## [Dynamic configuration parameters](https://discuss.elastic.co/t/dynamic-configuration-parameters/147188)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 4\ **Last updated:** [September 4, 2018, 11:04am UTC](https://discuss.elastic.co/t/dynamic-configuration-parameters/147188 "2018-09-04T11:04:43Z")
In filebeat configuration I would like to have dynamic variable like : filebeat.inputs: - type: ${some.type} enabled: true paths: - ${some.thing.like.variable} multiline.pattern: '^\[\[:space:\]\]+(at|\\.{3})\\b|^C… --- ## [Problem on Logstash setup](https://discuss.elastic.co/t/problem-on-logstash-setup/52405)
**Author:** [@ybritto](https://discuss.elastic.co/u/ybritto)\ **Replies:** 4\ **Last updated:** [June 16, 2016, 12:27am UTC](https://discuss.elastic.co/t/problem-on-logstash-setup/52405 "2016-06-16T00:27:53Z")
Hi, I'm new on ELK stack. In fact, I'm in the first steps of. I was following this tutorial https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html Everything was doing good until the step where I'… --- ## [Transport Client in ES](https://discuss.elastic.co/t/transport-client-in-es/44110)
**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\ **Replies:** 4\ **Last updated:** [March 12, 2016, 3:54pm UTC](https://discuss.elastic.co/t/transport-client-in-es/44110 "2016-03-12T15:54:25Z")
Hi, We have an requirement where we have to use the delete by query plugin. As per new ES version 2.x the delete by query is used as an plugin through Transport client as shown below: private TransportClient dc1Client … --- ## [Use Script to Autogenerate Reports is not working](https://discuss.elastic.co/t/use-script-to-autogenerate-reports-is-not-working/250462)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 6\ **Last updated:** [September 30, 2020, 10:09am UTC](https://discuss.elastic.co/t/use-script-to-autogenerate-reports-is-not-working/250462 "2020-09-30T10:09:45Z")
Hi Team, As per the steps given in the documentation using Curl user should be able to generate reports using custom script. I tried the below curl command by following the steps given in the document , it's throwing … --- ## [Master and Ingest node in one? Is my Hot-Warm-Cold concept any good?](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 3\ **Last updated:** [July 16, 2020, 2:01am UTC](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243 "2020-07-16T02:01:42Z")
Hi, for a customer I have set up the following cluster concept: Is it any good or do you think something should be different? In which node should I ingest the data and which one should run kibana? EDIT: Is this a… --- ## [Custom field not appearing in o/p for IIS.yml module](https://discuss.elastic.co/t/custom-field-not-appearing-in-o-p-for-iis-yml-module/227663)
**Author:** [@imti283](https://discuss.elastic.co/u/imti283)\ **Replies:** 3\ **Last updated:** [April 17, 2020, 11:38am UTC](https://discuss.elastic.co/t/custom-field-not-appearing-in-o-p-for-iis-yml-module/227663 "2020-04-17T11:38:30Z")
Hi, I am using IIS module in filebeat to ship logs to my logstash. As, I have multiple environment and sites, i am trying to add custom field in iis.yml module to make my logstash work easy and create index based on env… --- ## [Can't use exception lists](https://discuss.elastic.co/t/cant-use-exception-lists/299635)
**Author:** [@bolemebrige](https://discuss.elastic.co/u/bolemebrige)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 10:13am UTC](https://discuss.elastic.co/t/cant-use-exception-lists/299635 "2022-03-22T10:13:54Z")
After adding value lists through API or kibana interface they are not shown in Kibana and can't be added as exception to rules. If I update rule with exception list using API, it is shown in rule exceptions (but doesn't… --- ## [APM index not refreshing in Kibana - getting Mapper exception](https://discuss.elastic.co/t/apm-index-not-refreshing-in-kibana-getting-mapper-exception/243063)
**Author:** [@puja](https://discuss.elastic.co/u/puja)\ **Replies:** 7\ **Last updated:** [August 7, 2020, 5:12pm UTC](https://discuss.elastic.co/t/apm-index-not-refreshing-in-kibana-getting-mapper-exception/243063 "2020-08-07T17:12:06Z")
Hi, Some of http fields are not getting refreshed in Kibana for apm-\* index pattern due to which I am unable to create visualization and dashboard. I tried refreshing the index pattern in Kibana -Management\>Index Patter… --- ## [Exact match or phrase match without enabling term vector](https://discuss.elastic.co/t/exact-match-or-phrase-match-without-enabling-term-vector/222488)
**Author:** [@Ajay\_Singhal](https://discuss.elastic.co/u/Ajay_Singhal)\ **Replies:** 7\ **Last updated:** [March 18, 2020, 4:32pm UTC](https://discuss.elastic.co/t/exact-match-or-phrase-match-without-enabling-term-vector/222488 "2020-03-18T16:32:49Z")
I am facing issues in exact match. I am using standard analyzer but exact match is not working with this. If I enable term vector then it is working but enabling term vector is increasing size of elastic index. Can you … --- ## [Google Compute Engine systemd-resolved errors](https://discuss.elastic.co/t/google-compute-engine-systemd-resolved-errors/185757)
**Author:** [@baerrach](https://discuss.elastic.co/u/baerrach)\ **Replies:** 7\ **Last updated:** [June 21, 2019, 2:03am UTC](https://discuss.elastic.co/t/google-compute-engine-systemd-resolved-errors/185757 "2019-06-21T02:03:10Z")
I've just installed packetbeats on our Google Compute Engine, and I have been watching a days worth of visualizations. The visualization for "Errors vs successful transactions \[Packetbeat\] ECS" has a much higher error r… --- ## [Why Elasticsearch doesn't serialize LocalDate?](https://discuss.elastic.co/t/why-elasticsearch-doesnt-serialize-localdate/179714)
**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 7:24am UTC](https://discuss.elastic.co/t/why-elasticsearch-doesnt-serialize-localdate/179714 "2019-05-06T07:24:20Z")
Hello, I'd like to pass my LocalDate as parameter to methods in QueryBuilder. For example, to QueryBuilders#matchQuery. But if I do so, I face following exception: 09:52:59.757 \[pool-4-thread-1\] ERROR o.n.i.g.sear… --- ## [Logstash active exited using filebeat input](https://discuss.elastic.co/t/logstash-active-exited-using-filebeat-input/53552)
**Author:** [@William\_Leclerc](https://discuss.elastic.co/u/William_Leclerc)\ **Replies:** 1\ **Last updated:** [June 21, 2016, 7:05pm UTC](https://discuss.elastic.co/t/logstash-active-exited-using-filebeat-input/53552 "2016-06-21T19:05:45Z")
I have a Logstash, Elasticsearch and Kibana service running on a server and Filebeat running on another server to test configurations. Everything is running fine with the following config, logs are forwarded to my elasti… --- ## [Issue in Elasticsearch 2.0 index](https://discuss.elastic.co/t/issue-in-elasticsearch-2-0-index/35861)
**Author:** [@asgawali](https://discuss.elastic.co/u/asgawali)\ **Replies:** 7\ **Last updated:** [December 1, 2015, 9:25am UTC](https://discuss.elastic.co/t/issue-in-elasticsearch-2-0-index/35861 "2015-12-01T09:25:42Z")
I am using Elasticsearch 2.0 and logstash 1.5.4 for my project, the moment I have upgraded the elasticsearch version from 1.7 to 2.0, its showing some garbage indexes in my elasticsearch. \[root@site1 ~\]# curl 'localhos… --- ## [Filter index to last 24h (REST)](https://discuss.elastic.co/t/filter-index-to-last-24h-rest/21665)
**Author:** [@Mcg](https://discuss.elastic.co/u/Mcg)\ **Replies:** 1\ **Last updated:** [January 15, 2015, 5:24pm UTC](https://discuss.elastic.co/t/filter-index-to-last-24h-rest/21665 "2015-01-15T17:24:13Z")
Hi all, Is there any way to only load the last 24 hours of indices? I am trying to apply a query to only show the number of documents created over the last 24 hours (over the REST API), but I have not had too much… --- ## [IllegalIndexShardStateException: \[\_river\]\[0\] CurrentState\[RECOVERING\] Read operations only allowed when started/relocated](https://discuss.elastic.co/t/illegalindexshardstateexception--river-0-currentstate-recovering-read-operations-only-allowed-when-started-relocated/13396)
**Author:** [@Karol\_Gwaj](https://discuss.elastic.co/u/Karol_Gwaj)\ **Replies:** 1\ **Last updated:** [September 24, 2013, 3:35am UTC](https://discuss.elastic.co/t/illegalindexshardstateexception--river-0-currentstate-recovering-read-operations-only-allowed-when-started-relocated/13396 "2013-09-24T03:35:33Z")
Hi Guys, im trying to create custom river plugin and im getting this error after starting cluster: Aug 29, 2013 4:55:02 PM river.routing WARNING: \[Grant, Greer\] failed to get/parse \_meta for \[cc\_river\] org.elas… --- ## [Kibana hangs on creating first index pattern](https://discuss.elastic.co/t/kibana-hangs-on-creating-first-index-pattern/173595)
**Author:** [@David9](https://discuss.elastic.co/u/David9)\ **Replies:** 2\ **Last updated:** [March 25, 2019, 6:58pm UTC](https://discuss.elastic.co/t/kibana-hangs-on-creating-first-index-pattern/173595 "2019-03-25T18:58:22Z")
ES version 6.6.1 Kibana version 6.6.1 Fresh install on a Mac, trying to create a new index pattern and Kibana hangs. No errors in terminal for ES or Kibana. I see a bunch of posts here about this, and recommendation … --- ## [Hosting ElasticSearch with Laravel PHP Framework](https://discuss.elastic.co/t/hosting-elasticsearch-with-laravel-php-framework/49657)
**Author:** [@daviskoko](https://discuss.elastic.co/u/daviskoko)\ **Replies:** 2\ **Last updated:** [July 18, 2016, 2:30pm UTC](https://discuss.elastic.co/t/hosting-elasticsearch-with-laravel-php-framework/49657 "2016-07-18T14:30:54Z")
Ok, I've search for answers on this subject but couldn't get a clear guide. I have an application that is PHP(Laravel precisely) based hosted on whois.com. I've been able to setup everything on my local machine using t… --- ## [Configure elasticsearch to store only index data](https://discuss.elastic.co/t/configure-elasticsearch-to-store-only-index-data/15975)
**Author:** [@Sandesh\_Kumar](https://discuss.elastic.co/u/Sandesh_Kumar)\ **Replies:** 2\ **Last updated:** [February 24, 2014, 10:43pm UTC](https://discuss.elastic.co/t/configure-elasticsearch-to-store-only-index-data/15975 "2014-02-24T22:43:14Z")
hi, I am new to Elasticsearch and researching on to see if it can fit my needs. Requirement - To be able to log data into datastore and generate metrics out of it. The data would be huge around 50K recrods per h… --- ## [Could not dynamically add mapping for field \[app.kubernetes.io/instance\]. Existing mapping for \[kubernetes.labels.app\] must be of type object but found \[text\]](https://discuss.elastic.co/t/could-not-dynamically-add-mapping-for-field-app-kubernetes-io-instance-existing-mapping-for-kubernetes-labels-app-must-be-of-type-object-but-found-text/172180)
**Author:** [@shaiksuhale](https://discuss.elastic.co/u/shaiksuhale)\ **Replies:** 0\ **Last updated:** [March 13, 2019, 3:50pm UTC](https://discuss.elastic.co/t/could-not-dynamically-add-mapping-for-field-app-kubernetes-io-instance-existing-mapping-for-kubernetes-labels-app-must-be-of-type-object-but-found-text/172180 "2019-03-13T15:50:08Z")
Im using fluentbit to scrape logs and send it to logstash. logstash forwards it to ES. i already have a field with kubernetes.labels.app on a separate event(production) I am using helm for my development event and helm… --- ## [Time series graph that summarizes the index state for each time point](https://discuss.elastic.co/t/time-series-graph-that-summarizes-the-index-state-for-each-time-point/293660)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 2:32pm UTC](https://discuss.elastic.co/t/time-series-graph-that-summarizes-the-index-state-for-each-time-point/293660 "2022-01-10T14:32:55Z")
Hello, I'm currently trying to solve the following problem: We have users that are active from the date when they start a certain action to the date when they complete it. We need to display a graph showing the number … --- ## [Logstash Events Stats API](https://discuss.elastic.co/t/logstash-events-stats-api/239212)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 9:57am UTC](https://discuss.elastic.co/t/logstash-events-stats-api/239212 "2020-07-07T09:57:07Z")
What do the fields duration\_in\_millis and queue\_push\_duration\_in\_millis in Logstash's Events Stats API response in the link below mean? https://www.elastic.co/guide/en/logstash/current/node-stats-api.html#event-stats --- ## [SAML OKTA on KIBANA not working](https://discuss.elastic.co/t/saml-okta-on-kibana-not-working/216551)
**Author:** [@hatakora](https://discuss.elastic.co/u/hatakora)\ **Replies:** 4\ **Last updated:** [January 28, 2020, 4:15am UTC](https://discuss.elastic.co/t/saml-okta-on-kibana-not-working/216551 "2020-01-28T04:15:28Z")
Hello , Please assist and thank you in advance for the help. Below are my configuration for everything . What am i doing wrong? Elasticsearch Config cluster.name: elasticsearch node.name: node-1 bootstrap.memory\_lock:… --- ## [Top hits aggregation in Time series Visual Builder](https://discuss.elastic.co/t/top-hits-aggregation-in-time-series-visual-builder/122263)
**Author:** [@pri](https://discuss.elastic.co/u/pri)\ **Replies:** 4\ **Last updated:** [March 13, 2018, 12:35am UTC](https://discuss.elastic.co/t/top-hits-aggregation-in-time-series-visual-builder/122263 "2018-03-13T00:35:51Z")
Hi, Is it possible to display the top hit value for each time interval considered using TSVB. I know that this exists in other Kibana widgets but want to see if this can be done in the time series panel in TVSB. I coul… --- ## [Facing issue in configuring Learn-to-rank ElasticSearch plugin demo](https://discuss.elastic.co/t/facing-issue-in-configuring-learn-to-rank-elasticsearch-plugin-demo/116636)
**Author:** [@AamirNakhwa](https://discuss.elastic.co/u/AamirNakhwa)\ **Replies:** 4\ **Last updated:** [January 24, 2018, 10:19am UTC](https://discuss.elastic.co/t/facing-issue-in-configuring-learn-to-rank-elasticsearch-plugin-demo/116636 "2018-01-24T10:19:04Z")
I am trying to configure learning-to-rank (ltr) same demo on my machine as this one. I have installed ElasticSearch 5.4, python 3.6 (it include pip), request libraries and learning-to-rank plugin 0.1.1. "tmdb" index crea… --- ## [Logstash aggregate filter - usage help needed](https://discuss.elastic.co/t/logstash-aggregate-filter-usage-help-needed/76176)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 4\ **Last updated:** [March 2, 2017, 7:12am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-usage-help-needed/76176 "2017-03-02T07:12:18Z")
Hi, I am using the aggregate filter to read repeating blocks of log data. I need block-wise data which at this moment I am not able to get. Log file: Nov 30,15:02:42.081 INFO CD playback started Nov 30,15:02:42.08… --- ## [Can't create s3 repository for backup in AWS Beijing region](https://discuss.elastic.co/t/cant-create-s3-repository-for-backup-in-aws-beijing-region/141584)
**Author:** [@k-troska](https://discuss.elastic.co/u/k-troska)\ **Replies:** 5\ **Last updated:** [July 31, 2018, 12:57pm UTC](https://discuss.elastic.co/t/cant-create-s3-repository-for-backup-in-aws-beijing-region/141584 "2018-07-31T12:57:20Z")
Elasticsearch version (bin/elasticsearch --version): Version: 6.3.2, Build: oss/deb/053779d/2018-07-20T05:20:23.451332Z, JVM: 1.8.0\_171 Plugins installed: ingest-geoip ingest-user-agent repository-s3 JVM version (j… --- ## [How to get "top N + remainder"?](https://discuss.elastic.co/t/how-to-get-top-n-remainder/40102)
**Author:** [@skundrik](https://discuss.elastic.co/u/skundrik)\ **Replies:** 5\ **Last updated:** [February 3, 2016, 2:34am UTC](https://discuss.elastic.co/t/how-to-get-top-n-remainder/40102 "2016-02-03T02:34:46Z")
I'd like to have a pie chart with top 5 items but it would be lot more useful if I could also see all the rest of the data as 1 big "the rest" slice. Anyone knows if this is possible? --- ## [Teardown process](https://discuss.elastic.co/t/teardown-process/23949)
**Author:** [@kelvinfann](https://discuss.elastic.co/u/kelvinfann)\ **Replies:** 5\ **Last updated:** [July 2, 2015, 7:01pm UTC](https://discuss.elastic.co/t/teardown-process/23949 "2015-07-02T19:01:12Z")
Hi I was wondering if it was possible to get more information about how logstash processes the teardown. I'd imagine it first tearsdown the input, then filters, then output. If there are messages in the filter queue, do … --- ## [Error installing logstash output plugin](https://discuss.elastic.co/t/error-installing-logstash-output-plugin/75391)
**Author:** [@Lorenc\_Hysi](https://discuss.elastic.co/u/Lorenc_Hysi)\ **Replies:** 1\ **Last updated:** [February 22, 2017, 9:19am UTC](https://discuss.elastic.co/t/error-installing-logstash-output-plugin/75391 "2017-02-22T09:19:04Z")
Hello all, I'm having a problem install the syslog output plugin to logstash 5.2. After installing logstash using yum from a local rpm. I run this command: bin/logstash-plugin install logstash-output-syslog Howeve… --- ## [\[Elastic Cloud\] Configuring trust with clusters in a self-managed environment](https://discuss.elastic.co/t/elastic-cloud-configuring-trust-with-clusters-in-a-self-managed-environment/311035)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 8\ **Last updated:** [August 18, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elastic-cloud-configuring-trust-with-clusters-in-a-self-managed-environment/311035 "2022-08-18T12:52:33Z")
I have two ES clusters: Elastic Cloud (all the data is here) Self-managed cluster (no data, will use for cross-cluster-search in Elastic Cloud) I want the cluster #1 to trust #2, so I can use CSS. So I'm following you… --- ## [Elastic Engineering lab](https://discuss.elastic.co/t/elastic-engineering-lab/291533)
**Author:** [@sabualrub](https://discuss.elastic.co/u/sabualrub)\ **Replies:** 8\ **Last updated:** [December 16, 2021, 3:41pm UTC](https://discuss.elastic.co/t/elastic-engineering-lab/291533 "2021-12-16T15:41:02Z")
Hi My strigo lab has expired and I want to train before I take the certification exam. How do I get the data in the indices used in the lab? is there is a way to get those data sets Thanks [Previous page](https://discuss.elastic.co/top.md?page=1133&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1135&per_page=50&period=all)